./run_canon_fw.sh 7D2M -s -S & arm-none-eabi-gdb -x 7D2/debugmsg-m.gdb [...] 00000000 - 00000FFF: eos.tcm_code 40000000 - 40000FFF: eos.tcm_data 00001000 - 3FFFFFFF: eos.ram 40001000 - 7FFFFFFF: eos.ram_uncached 80000000 - BFFFFFFF: eos.ram2 F0000000 - F1FFFFFF: eos.rom0 F2000000 - F3FFFFFF: eos.rom0_mirror_F2 F4000000 - F5FFFFFF: eos.rom0_mirror_F4 F6000000 - F7FFFFFF: eos.rom0_mirror_F6 F8000000 - F9FFFFFF: eos.rom1 FA000000 - FBFFFFFF: eos.rom1_mirror_FA FC000000 - FDFFFFFF: eos.rom1_mirror_FC FE000000 - FFFFFFFF: eos.rom1_mirror_FE C0000000 - DFFFFFFF: eos.iomem [EOS] loading 'ROM-7D2M.BIN' to 0xF0000000-0xF1FFFFFF [EOS] loading 'ROM-7D2M.BIN' to 0xF8000000-0xF9FFFFFF (offset 0x2000000) Patching 0xfe0a003e: ee06 0f12 mcr 15, 0, r0, cr6, cr2, {0} Patching 0xfe0a0046: ee06 1f91 mcr 15, 0, r1, cr6, cr1, {4} Patching 0xfe0a004e: ee19 0f11 mrc 15, 0, r0, cr9, cr1, {0} Patching 0xfe0a0062: ee09 0f11 mcr 15, 0, r0, cr9, cr1, {0} Patching 0xfe0a0070: ee11 0f10 mrc 15, 0, r0, cr1, cr0, {0} Patching 0xfe106062: ee19 0f31 mrc 15, 0, r0, cr9, cr1, {1} Patching 0xfe106078: ee19 0f11 mrc 15, 0, r0, cr9, cr1, {0} Patching 0xfe10609a: ee10 0f90 mrc 15, 0, r0, cr0, cr0, {4} Patching 0xFEC4DCBC (enabling TIO on 7D2M) Patching 0xFE0A3024 (idk, it fails) Patching 0xFE102B5A (PROPAD_CreateFROMPropertyHandle) [EOS] loading 'autoexec.bin' to 0x40800000-0x40808DDF 0x40800000 in ?? () +macro define CURRENT_TASK ((int)0xFFFFFFFF) +macro define CURRENT_ISR ((int)0xFFFFFFFF) +set pagination off +set radix 16 +define hook-quit +define KRED +define KCYN +define KBLU +define KRESET +define print_current_location +define DebugMsg_log +define task_create_log +define msleep_log +define assert_log +define take_semaphore_log +define give_semaphore_log +define register_interrupt_log +define mpu_decode +define mpu_send_log +define mpu_recv_log +define try_expand_ram_struct +define try_post_event_log +define delayed_call_print_name +define delayed_call_log +define SetTimerAfter_log +define SetHPTimerAfterNow_log +define SetHPTimerNextTick_log +define CancelTimer_log Breakpoint 1 at 0x236 Breakpoint 2 at 0x1ccc Breakpoint 3 at 0x1c1c Breakpoint 4 at 0x16d8 [EOS] trigger int 0x1B (delayed!) DRYOS version 2.3, release #0055+p4 Copyright (C) 1997-2013 by CANON Inc. K289M READY [ init:fe10d1ff ] register_interrupt(OCH_SPx, 0x19, 0xfe10d0b7, 0x0) [ init:fe10d20b ] register_interrupt(OCHxEPx, 0x29, 0xfe10d0fb, 0x0) [ init:fe10d217 ] register_interrupt(OCH_SPx, 0x39, 0xfe10d0b7, 0x1) [ init:fe10d223 ] register_interrupt(OCHxEPx, 0x49, 0xfe10d0fb, 0x1) [ init:fe10d22f ] register_interrupt(OCH_SPx, 0x59, 0xfe10d0b7, 0x2) [ init:fe10d23b ] register_interrupt(OCHxEPx, 0x69, 0xfe10d0fb, 0x2) [ init:fe10d247 ] register_interrupt(OCH_SPx, 0x79, 0xfe10d0b7, 0x3) [ init:fe10d277 ] register_interrupt(OCHxEPx, 0x89, 0xfe10d0fb, 0x3) [ init:fe10d285 ] register_interrupt(OCH_SPx, 0x99, 0xfe10d0b7, 0x4) [ init:fe10d293 ] register_interrupt(OCHxEPx, 0xa9, 0xfe10d0fb, 0x4) [ init:fe10d2a1 ] register_interrupt(OCH_SPx, 0xb9, 0xfe10d0b7, 0x5) [ init:fe10d2af ] register_interrupt(OCHxEPx, 0xc9, 0xfe10d0fb, 0x5) [ init:fe10d2bb ] register_interrupt(OC4_14, 0x28, 0xfe10ce4d, 0x0) [ init:fe10d2c7 ] register_interrupt(ICAPCHx, 0xd9, 0xfe10d141, 0x0) [ init:fe10d2d3 ] register_interrupt(ICAPCHx, 0xe9, 0xfe10d141, 0x1) [ init:fe10d2df ] register_interrupt(ICAPCHx, 0xf9, 0xfe10d141, 0x2) [ init:fe10d2ed ] register_interrupt(ICAPCHx, 0x109, 0xfe10d141, 0x3) [ init:fe10d2fb ] register_interrupt(ICAPCHx, 0x119, 0xfe10d141, 0x4) [ init:fe10d309 ] register_interrupt(ICAPCHx, 0x129, 0xfe10d141, 0x5) [ init:fe10d317 ] register_interrupt(ICAPCHx, 0x139, 0xfe10d141, 0x6) [ init:fe10d325 ] register_interrupt(ICAPCHx, 0x149, 0xfe10d141, 0x7) [ init:fe10d333 ] register_interrupt(ICAPCHx, 0x159, 0xfe10d141, 0x8) [ init:fe10d341 ] register_interrupt(ICAPCHx, 0x169, 0xfe10d141, 0x9) [ init:fe10d34f ] register_interrupt(ICAPCHx, 0x179, 0xfe10d141, 0xa) [ init:fe10d35d ] register_interrupt(ICAPCHx, 0x189, 0xfe10d141, 0xb) [ init:fe29d4ed ] register_interrupt(UTimerDriver, 0xe, 0xfe29d477, 0x0) [ init:fe29d4ed ] register_interrupt(UTimerDriver, 0x1e, 0xfe29d477, 0x1) [ init:fe29d4ed ] register_interrupt(UTimerDriver, 0x2e, 0xfe29d477, 0x2) [ init:fe29d4ed ] register_interrupt(UTimerDriver, 0x3e, 0xfe29d477, 0x3) [ init:fe29d4ed ] register_interrupt(UTimerDriver, 0x4e, 0xfe29d477, 0x4) [ init:fe29d4ed ] register_interrupt(UTimerDriver, 0x5e, 0xfe29d477, 0x5) [ init:fe29d4ed ] register_interrupt(UTimerDriver, 0x6e, 0xfe29d477, 0x6) [ init:fe29d4ed ] register_interrupt(UTimerDriver, 0x7e, 0xfe29d477, 0x7) [ init:fe1077b3 ] register_interrupt(null, 0x13e, 0xfe10776b, 0x13e) [ init:fe1077b3 ] register_interrupt(null, 0x14e, 0xfe10776b, 0x14e) [ init:fe11ac59 ] task_create(PowerMgr, prio=20, stack=400, entry=fe11ab81, arg=0) [ init:fe0aa037 ] (00:01) [PM] Disable (ID = 139, cnt = 1/1) [ init:fe0aa037 ] (00:01) [PM] Disable (ID = 62, cnt = 1/2) [ init:00002207 ] task_create(IPCTask, prio=10, stack=0, entry=2183, arg=4ae118) [ init:8000607d ] (3e:01) InitializeIPCCom (0) [ init:80008569 ] register_interrupt(SlowMossy, 0x35, 0x80008509, 0x0) [ init:80008351 ] (3f:01) InitializeMossyTaskState (0) [ init:8000836f ] register_interrupt(INT_LM, 0x8a, 0x800082fd, 0x0) [ init:80003f29 ] register_interrupt(RDDMAC13, 0x102, 0x80003bc5, 0x0) [ init:80003f37 ] register_interrupt(WRDMAC1, 0x41, 0x80003b65, 0x0) [ init:00002207 ] task_create(OmarInit, prio=f, stack=400, entry=2183, arg=4ae1ec) [ init:80003429 ] (40:01) RegisterRPCHandler (0x1000) [ init:fe29127d ] (00:01) [RPC] AddRPCItem (ID = 0x1000, 0xfe0a2bc3, 0) [ init:80003429 ] (40:01) RegisterRPCHandler (0x1025) [ init:fe29127d ] (00:01) [RPC] AddRPCItem (ID = 0x1025, 0xfe0a2b9d, 0) [ init:80003429 ] (40:01) RegisterRPCHandler (0x2008) [ init:fe29127d ] (00:01) [RPC] AddRPCItem (ID = 0x2008, 0xfe0ffbd1, 0) [ init:80003429 ] (40:01) RegisterRPCHandler (0x2007) [ init:fe29127d ] (00:01) [RPC] AddRPCItem (ID = 0x2007, 0xfe0c31e5, 0) [ init:80003429 ] (40:01) RegisterRPCHandler (0x2006) [ init:fe29127d ] (00:01) [RPC] AddRPCItem (ID = 0x2006, 0xfe0c31bf, 0) [ init:80003429 ] (40:01) RegisterRPCHandler (0x2005) [ init:fe29127d ] (00:01) [RPC] AddRPCItem (ID = 0x2005, 0xfe0c3199, 0) [ init:80003429 ] (40:01) RegisterRPCHandler (0x4003) [ init:fe29127d ] (00:01) [RPC] AddRPCItem (ID = 0x4003, 0xfe0c320b, 0) [ init:80003429 ] (40:01) RegisterRPCHandler (0x4006) [ init:fe29127d ] (00:01) [RPC] AddRPCItem (ID = 0x4006, 0xfe0a2b5d, 0) [ init:80003429 ] (40:01) RegisterRPCHandler (0x4007) [ init:fe29127d ] (00:01) [RPC] AddRPCItem (ID = 0x4007, 0xfe0a2b21, 0) [ init:80003429 ] (40:01) RegisterRPCHandler (0x4008) [ init:fe29127d ] (00:01) [RPC] AddRPCItem (ID = 0x4008, 0xfe0a2a9d, 0) [ init:80003429 ] (40:01) RegisterRPCHandler (0x4009) [ init:fe29127d ] (00:01) [RPC] AddRPCItem (ID = 0x4009, 0xfe0a2a29, 0) [ init:80003429 ] (40:01) RegisterRPCHandler (0x2001) [ init:fe29127d ] (00:01) [RPC] AddRPCItem (ID = 0x2001, 0xfe0bb05d, 0) [ init:80003429 ] (40:01) RegisterRPCHandler (0x2000) [ init:fe29127d ] (00:01) [RPC] AddRPCItem (ID = 0x2000, 0xfe0bb033, 0) [ init:800034d1 ] (40:01) RegisterRPCSyncHandler (0x2048) [ init:fe29127d ] (00:01) [RPC] AddRPCItem (ID = 0x2048, 0xfe0ffceb, 0) [ init:800034d1 ] (40:01) RegisterRPCSyncHandler (0x2049) [ init:fe29127d ] (00:01) [RPC] AddRPCItem (ID = 0x2049, 0xfe0ffd3d, 0) [ init:fe12260d ] (c1:03) ShtCom 1st Initialize M or S is 0 [ init:800034d1 ] (40:01) RegisterRPCSyncHandler (0x2043) [ init:fe29127d ] (00:01) [RPC] AddRPCItem (ID = 0x2043, 0xfe1225ad, 0) [ init:80003429 ] (40:01) RegisterRPCHandler (0x1022) [ init:fe29127d ] (00:01) [RPC] AddRPCItem (ID = 0x1022, 0xfe0ad943, 0) [ init:80003429 ] (40:01) RegisterRPCHandler (0x1023) [ init:fe29127d ] (00:01) [RPC] AddRPCItem (ID = 0x1023, 0xfe0ad939, 0) [ init:00002207 ] task_create(DbgMgr, prio=1f, stack=0, entry=2183, arg=4ae9fc) [ init:fe1025d5 ] (02:01) PROPAD_Initialize CreateBinarySemaphore = 0x5c0048 [ init:fe102953 ] (02:01) PROPAD_RegisterOmarSysBlockCBR 0xfe0a2a0b 0xfe0a29eb [ init:fe0c6f7d ] (00:03) [SEQ] CreateSequencer (Startup, Num = 6) [ init:fe0c6fcf ] task_create(Startup, prio=19, stack=2800, entry=fe0c6ec1, arg=4aed1c) [ init:fe0a3241 ] (8b:05) K289M ICU Firmware Version 1.0.4 ( 8.7.8 ) [ init:fe0a324d ] (8b:05) ICU Release DateTime 2015.02.03 15:28:19 [ init:00002207 ] task_create(PropMgr, prio=14, stack=0, entry=2183, arg=4aed78) [ init:00002207 ] task_create(Relay, prio=14, stack=0, entry=2183, arg=4b8db4) [ init:00002207 ] task_create(EventMgr, prio=f, stack=0, entry=2183, arg=4b9278) [ init:fe10ea97 ] register_interrupt(CAMIF_1, 0xa8, 0xfe299019, 0x0) [ init:fe10ec45 ] (00:16) [PWM] PWM_Initialize [ init:fe10f06b ] (00:16) [ADC] InitializePollingADC [ OmarInit:00019d27 ] register_interrupt(null, 0xd, 0x19b97, 0x3096c) [ OmarInit:00019d27 ] register_interrupt(null, 0x2d, 0x19b97, 0x3096e) [ OmarInit:00019d27 ] register_interrupt(null, 0x4d, 0x19b97, 0x30970) [HPTimer] Firing HPTimer 1/8 [EOS] trigger int 0x28 [ init:fe10eebb ] (00:16) [ ADC ] Calibration Completed, 00000000 [ init:fe0c7041 ] (00:02) [SEQ] NotifyComplete (Startup, Flag = 0x10000) [ init:fe0c7079 ] (00:03) [SEQ] NotifyComplete (Cur = 0, 0x10010, Flag = 0x10000) [ init:fe0a32e7 ] task_create(TaskMain, prio=1d, stack=0, entry=fe0a221d, arg=0) [ init:001cc41c ] *** msleep(5000) [ OmarInit:00019d27 ] register_interrupt(null, 0x6d, 0x19b97, 0x30972) [ OmarInit:00019d27 ] register_interrupt(null, 0x1c, 0x19be1, 0x3096d) [ OmarInit:00019d27 ] register_interrupt(null, 0x3c, 0x19be1, 0x3096f) [ OmarInit:00019d27 ] register_interrupt(null, 0x5c, 0x19be1, 0x30971) [ OmarInit:00019d27 ] register_interrupt(null, 0x7c, 0x19be1, 0x30973) [ OmarInit:00019d27 ] register_interrupt(null, 0xcd, 0x19c3f, 0x0) [ OmarInit:0001a005 ] register_interrupt(null, 0x9c, 0x19f73, 0x30985) [ OmarInit:0001a005 ] register_interrupt(null, 0xbc, 0x19f73, 0x30987) [ OmarInit:0001a005 ] register_interrupt(null, 0xdc, 0x19f73, 0x30989) [ OmarInit:0001a005 ] register_interrupt(null, 0xfc, 0x19f73, 0x3098b) [ PropMgr:fe0c36a5 ] (46:03) emSlaveChangeCBR : AUTO_POWEROFF (1) [ PropMgr:fe0c36c3 ] (46:03) emSlaveChangeCBR : UILOCK (0) [ DbgMgr:fe0aa037 ] (00:01) [PM] Disable (ID = 18, cnt = 1/3) 2: 205.824 [PWM] PWM_Initialize [ DbgMgr:fe0aa0c3 ] (00:01) [PM] Enable (ID = 18, cnt = 0/2) [ DbgMgr:fe0aa037 ] (00:01) [PM] Disable (ID = 18, cnt = 1/3) 3: 211.200 [ADC] InitializePollingADC [ DbgMgr:fe0aa0c3 ] (00:01) [PM] Enable (ID = 18, cnt = 0/2) [ DbgMgr:fe0aa037 ] (00:01) [PM] Disable (ID = 18, cnt = 1/3) 4: 246.784 [ ADC ] Calibration Completed, 0x00000000 [ DbgMgr:fe0aa0c3 ] (00:01) [PM] Enable (ID = 18, cnt = 0/2) (delay: a few seconds) [ init:001cc438 ] task_create(dump, prio=1e, stack=1000, entry=1cc680, arg=0) Malloc Information (onetime type) Start Address = 0x001cf748 End Address = 0x002e1410 Total Size = 0x00111cc8 ( 1121480) Allocated Size = 0x000029f0 ( 10736) Allocated Peak = 0x000029f0 ( 10736) Allocated Count = 0x00000007 ( 7) Free Size = 0x0010f2d8 ( 1110744) Free Block Max Size = 0x0010f2d8 ( 1110744) Free Block Count = 0x00000001 ( 1) System Memory Information Start Address = 0x002e8008 End Address = 0x003cc000 Total Size = 0x000e3ff8 ( 933880) Allocated Size = 0x0000a158 ( 41304) Allocated Peak = 0x0000b160 ( 45408) Allocated Count = 0x0000000b ( 11) Free Size = 0x000d9ea0 ( 892576) Free Block Max Size = 0x000d8e98 ( 888472) Free Block Count = 0x00000002 ( 2) ASSERT : Evf/EvfCommand.c, Task = dump, Line 184 [ dump:fe0a2993 ] (8b:06) ASSERT : Evf/EvfCommand.c, Task = dump [ dump:fe0a299f ] (8b:06) ASSERT : Line 184 [ dump:fe0a29ab ] (8b:06) ASSERT : fd > -1 [ PropMgr:fe0fdca5 ] (01:03) Disable RequestChange 0x80030002, 2813 [ DbgMgr:fe0aa037 ] (00:01) [PM] Disable (ID = 18, cnt = 1/3) 5: 5307.648 [STARTUP] ERROR ASSERT : Evf/EvfCommand.c, Task = dump [ DbgMgr:fe0aa0c3 ] (00:01) [PM] Enable (ID = 18, cnt = 0/2) [ DbgMgr:fe0aa037 ] (00:01) [PM] Disable (ID = 18, cnt = 1/3) 6: 5335.040 [STARTUP] ERROR ASSERT : Line 184 [ DbgMgr:fe0aa0c3 ] (00:01) [PM] Enable (ID = 18, cnt = 0/2) [ DbgMgr:fe0aa037 ] (00:01) [PM] Disable (ID = 18, cnt = 1/3) 7: 5336.576 [STARTUP] ERROR ASSERT : fd > -1 [ DbgMgr:fe0aa0c3 ] (00:01) [PM] Enable (ID = 18, cnt = 0/2) [ DbgMgr:0000278b ] *** msleep(50) [ DbgMgr:fe0aa037 ] (00:01) [PM] Disable (ID = 18, cnt = 1/3) [DM] Debug dmWriteFromToLog 0xfd240000 0xfd260000 6241 84 [DM] FROM Write Complete!!! [ DbgMgr:fe0aa0c3 ] (00:01) [PM] Enable (ID = 18, cnt = 0/2) (note: assert is because I didn't emulate any filesystem routines)