So to add clarity and close this issue the following products will have safety framework software available:
S32K3 and S32G (also likely future Radar processors)
If someone needs safety software for S32K1 they will have to write it themselves. To help with this we do have core self test software available for purchase.
Some other ideas that might help the end user create software checks are:
| Module in MCU |
Failure Mode |
Failure Detection Mechanism |
| CPU (ALU, Addressing, Registers) |
CPU, addressing modes stuck-at, and stuck at wrong value |
Core self-test: m4_scst_branch_test1
m4_scst_loadstore_test1
|
| |
ALU output stuck-at, and stuck-at wrong value |
Core self-test: m4_scst_alu_test1 |
| Clock |
Short circuit Clock fault |
Configure the XTAL/EXTAL pin as GPIO and read its status. |
| |
Stuck at value |
Configure the XTAL/EXTAL pin as GPIO and read its status. |
| Control Logic/Program Sequence |
Wrong sequence coding |
Watchdog reset or hard fault caused by CPU accessing illegal address |
| |
No code executed |
Watchdog reset. |
| |
Execution too slow |
Run specified code and check the duration with the expected time. |
| |
Stack overflow/underflow |
Captured by MPU and hard fault exception. |
| Interrupt Handling |
Incorrect interrupt execution |
Check corresponding interrupt status in the interrupt status register (polling) of the related peripheral before executing the Interrupt Service Routine (ISR) code. |
| |
No interrupts |
Refresh Watchdog in ISR; |
| |
Continuous interrupts |
Refresh Watchdog in non-ISR routine; |
| ADC, Digital I/O |
Stuck open; |
Use ADC to sample pins with different known states and check the results. |
| |
Stuck Close |
Use ADC to sample pins with different known states and check the results. |
| |
Drift or offset |
Use ADC to sample pins with different known states and check the results. |
| Power Supply |
Under/over voltage; |
LVD reset for under-voltage; ADC monitor bandgap voltage or external SBC to detect over-voltage. |
| |
Drift; |
ADC monitor bandgap voltage to calculate power supply voltage |
| Memory (RAM, ROM/FLASH, EEPROM) |
Memory corruption |
SRAM/Flash ECC can detect data corruption. |
| |
Stack overflow, underflow; |
User software to check stack area |
| |
Illegal memory access; |
MPU to protect memory access rights |
| Peripheral Registers |
Registers corrupt/stuck (GPIO, Configuration Registers, internal RAM) |
Need user app software to compare the registers values with expected values periodically |
