内核配置中将CONFIG_DEVMEM选项配置后,会有/dev/mem设备节点,内核对应的驱动代码是drivers/char/mem.c
用户空间程序通过mmap将物理地址映射到用户空间,实现对这些物理地址的读写。
用户空间程序devmem.c
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include
#define FATAL do { fprintf(stderr, "Error at line %d, file %s (%d) [%s]
",
__LINE__, __FILE__, errno, strerror(errno)); exit(1); } while(0)
#define MAP_SIZE 4096UL
#define MAP_MASK (MAP_SIZE - 1)
int main(int argc, char **argv) {
int fd;
void *map_base, *virt_addr;
unsigned long read_result, writeval;
off_t target;
int access_type = 'w';
if(argc < 2) {//若参数个数少于两个则打印此工具的使用方法
fprintf(stderr, "
Usage: %s { address } [ type [ data ] ]
"
" address : memory address to act upon
"
" type : access operation type : [b]yte, [h]alfword, [w]ord
"
" data : data to be written
",
argv[0]);
exit(1);
}
target = strtoul(argv[1], 0, 0);
if(argc > 2)
access_type = tolower(argv[2][0]);
if((fd = open("/dev/mem", O_RDWR | O_SYNC)) == -1) FATAL;
printf("/dev/mem opened.
");
fflush(stdout);
/* Map one page */ //将内核空间映射到用户空间
map_base = mmap(0, MAP_SIZE, PROT_READ | PROT_WRITE, MAP_SHARED, fd, target & ~MAP_MASK);
if(map_base == (void *) -1) FATAL;
printf("Memory mapped at address %p.
", map_base);
fflush(stdout);
virt_addr = map_base + (target & MAP_MASK);
//针对不同的参数获取不同类型内存数据
switch(access_type) {
case 'b':
read_result = *((unsigned char *) virt_addr);
break;
case 'h':
read_result = *((unsigned short *) virt_addr);
break;
case 'w':
read_result = *((unsigned long *) virt_addr);
break;
default:
fprintf(stderr, "Illegal data type '%c'.
", access_type);
exit(2);
}
printf("Value at address 0x%X (%p): 0x%X
", target, virt_addr, read_result);
fflush(stdout);
//若参数大于3个,则说明为写入操作,针对不同参数写入不同类型的数据
if(argc > 3) {
writeval = strtoul(argv[3], 0, 0);
switch(access_type) {
case 'b':
*((unsigned char *) virt_addr) = writeval;
read_result = *((unsigned char *) virt_addr);
break;
case 'h':
*((unsigned short *) virt_addr) = writeval;
read_result = *((unsigned short *) virt_addr);
break;
case 'w':
*((unsigned long *) virt_addr) = writeval;
read_result = *((unsigned long *) virt_addr);
break;
}
printf("Written 0x%X; readback 0x%X
", writeval, read_result);
fflush(stdout);
}
if(munmap(map_base, MAP_SIZE) == -1) FATAL;
close(fd);
return 0;
}
另外在busybox中也有devmem tool,代码的位置在
busybox-1.24.1/miscutils/devmem.c
,需要配置CONFIG_USER_BUSYBOX_DEVMEM