Hi again, following up on my other message, I split them up into seperate messages, as I think there are different reasons.
When I start the target from the BDI shell with "RESET RUN" and wait until the "Hit any key to stop autoboot" message appears, I can then attach to the target : Remote debugging using jtag:3333 0x1ff731ec in ?? () I then discard the symbols: (gdb) symb Discard symbol table from `...uboot/u-boot-2009.08/u-boot'? (y or n) y No symbol file now. Then, I calculate the RAM address for the symbols as described in DULG-10.1.2.: RAM is 512 MB --> 0x2000 0000 Monitor Len according to board specific file is 256k --> 0x0004 0000 This yields address 0x1FFC 0000. (gdb) add-symbol-file u-boot 0x1FFC0000 add symbol table from file "u-boot" at .text_addr = 0x1FFC0000 (y or n) y Reading symbols from ...uboot/u-boot-2009.08/u-boot...done. I then apply a breakpoint to TftpStart, which is definitely up next: (gdb) b TftpStart Breakpoint 1 at 0x1ffc6314: file tftp.c, line 474. looks like an appropriate address, anyway saying (gdb) c Continuing. never stops in TftpStart. The kernel is loaded by TFTP and the target can only be halted by pressing Ctrl-C. On the other hand, calculating the address the other way yields (gdb) print/x ((gd_t *)$r2)->reloc_off $4 = 0x1fff0000 adding this to TEXT_BASE which is ./board/freescale/mpc8568mds/config.mk:TEXT_BASE = 0xfff80000 results in something above 32 bit. What am I doing wrong here? Cheers Matthias _______________________________________________ U-Boot mailing list U-Boot@lists.denx.de http://lists.denx.de/mailman/listinfo/u-boot