S32KのトピックRe: The alarm state timeout interval (NCF_TO[TO]) cannot be set larger

The alarm state timeout interval (NCF_TO[TO]) cannot be set larger

Janeting123 — Wed, 16 Oct 2024 12:09:21 GMT

According to RM, NCF_TO should be less than FOSU_COUNT, otherwise FCCU_FTR will occur instead of FCCU_RST when fault is injected.

69780h = 432000

Theoretically, when NCF_TO < 432000, only FCCU_RST will occur. But in fact, I configured it to 400000 and FCCU_FTR occurred. When I gradually reduced it, I found that NCF_TO can only be configured to a maximum of 200000 to ensure that FCCU_RST instead of FCCU_FTR occurs. I think the difference between 200000 and 432000 is a bit big. I need to know the reason. Attached is the configuration screenshot when I did the test

Re: The alarm state timeout interval (NCF_TO[TO]) cannot be set larger

Janeting123 — Wed, 16 Oct 2024 12:41:36 GMT

Correction: Only short reset is selected as the fault response, because other responses will cause the FOSU counter to stop.

Re: The alarm state timeout interval (NCF_TO[TO]) cannot be set larger

petervlna — Thu, 17 Oct 2024 07:08:27 GMT

Hello,

I do not know which chip you are using.

However, FOSU will take action if FCCU does not in ALARM state.

Therefore FOSU reset is destructive, as the recovery was not possible or wasn't happen within ALARM timeout.

For example S32K3:

I found that NCF_TO can only be configured to a maximum of 200000 to ensure that FCCU_RST instead of FCCU_FTR occurs.

Can't comment on that. Please stick with reference manual max FOSU count for your TO settings.

Best regards,

Peter

Re: The alarm state timeout interval (NCF_TO[TO]) cannot be set larger

Janeting123 — Thu, 17 Oct 2024 07:30:31 GMT

The chip I use is S32K312. According to RM, the value of NCF_TO is OK if it is less than 432000. So I set it to 400000 and it should work, but the actual test result is different from RM. I can only set a relatively small number (200000) to work. So I am confused about this. If you have done relevant tests and proved that setting it to 400000 is feasible, please post the settings of FCCU registers and I will do another test based on it. The following is a test scenario I assumed. My test result is that when Recovery Timeout = 400000, FOSU reset is responded instead of FCCU reset.

Re: The alarm state timeout interval (NCF_TO[TO]) cannot be set larger

petervlna — Fri, 18 Oct 2024 05:05:19 GMT

Hello,

I will not comment on your SW driver or some GUI settings.

I can express how the FCCU work on register level.

To calculate correct TO value you will use following formula:

This will give you number of clocks for ALARM state of FCCU when fault comes.

Tclk_safe is your FIRC:

and also:

you have to respect the FOSU timeout - which is supervisor unit of FCCU:

So all what the ALARM state require is to set the Tmax_alarm to value less then 0x69780 (which is time when FOSU will take action).

This is valid independent of any drivers/tools you will be using. Just make sure your registers carry correct values.

Best regards,

Peter

Re: The alarm state timeout interval (NCF_TO[TO]) cannot be set larger

Janeting123 — Fri, 18 Oct 2024 05:30:43 GMT

I noticed the points you mentioned in RM. I also clearly stated in my previous statement that the problem I encountered was that the actual test results were different from the expectations, not that I did not read RM. This does not solve my problem. If you have done relevant tests, please post your process.

Re: The alarm state timeout interval (NCF_TO[TO]) cannot be set larger

petervlna — Wed, 23 Oct 2024 06:40:25 GMT

Hello,

Not sure how to help here. I did not play with driver you are using.

My test result is that when Recovery Timeout = 400000, FOSU reset is responded instead of FCCU reset.

I am not familiar with what the values Timeout=400000 represents when written in the TO register.

The point is however still the same.

After you do initialization, check the value in TO register in debug mode. You will see true hex value in the TO register which your compiler translated.

It must be in range Tmax. Refer to the equation TOxTclk_safe.

If your TO register contains value greater then FOSU timeout, your see correct behavior.

Best regards,

Peter

Re: The alarm state timeout interval (NCF_TO[TO]) cannot be set larger

Janeting123 — Thu, 24 Oct 2024 03:26:30 GMT

I don’t want to repeat the explanation, I will describe my testing process in a more direct way.
Use this configuration

The result after injecting fault is

Use this configuration

The result after injecting fault is

The way to inject faults is to write 0xF to the FCCU_NCFF register.

You can see that the difference between the two configurations is NCF_TO, which is less than 0x69780 in RM. Can you try it based on this? Because I think the result of this control experiment is very obvious, I really don’t know where the problem lies

Re: The alarm state timeout interval (NCF_TO[TO]) cannot be set larger

petervlna — Fri, 25 Oct 2024 09:24:43 GMT

Hello,

Thank you for sharing details.

I will test your setup here and let you know my observations ASAP.

Best regards,

Peter

Re: The alarm state timeout interval (NCF_TO[TO]) cannot be set larger

petervlna — Thu, 07 Nov 2024 06:28:30 GMT

Hello,

I have just tested it and it works as expected.

after injecting NCF3

Attached is my printed configuration before fault injection.

Best regards,

Peter