Questions tagged [safety-critical]

Software is [safety-critical] when an incorrect response or an incorrectly timed response can result in significant loss to its users; in the most extreme case, loss of life may result from such failures.

A software is when an incorrect response or an incorrectly timed response can result in significant loss to its users; in the most extreme case, loss of life may result from such failures.

Safety-critical applications require an exceedingly rigorous validation and certification process.

46 questions
3
votes
2 answers

Independence of software elements for IEC 61508 on CPU without memory protection unit

Is it possible to justify independence of software elements by IEC 61508, part 3, Annex F, such that the safety-related components can be rated SIL 2 and the non-safety components (e.g. UI, comms.) can be left unrated, and still have an overall…
Vandermyer
  • 31
  • 1
3
votes
1 answer

How to implement a safety-critical AI compute cluster at the edge?

I want to experiment to develop a redundant autonomous car compute architecture which can handle all AI and other computing stuff. To do that, I bought some edge computing devices (Nvidia Jetson TX2s) which contains integrated GPU. Then I connected…
3
votes
2 answers

Ada Exceptions in Safety Critical Embedded Systems

I started learning Ada for its potential use in an embedded device which is safety critical. So far, I'm really liking it. However, in my research on embedded programming, I came across the hot topic of whether to use exception handling in embedded…
silentTeee
  • 187
  • 10
3
votes
3 answers

Executable Ada code on the stack

I've just watched a talk on security considerations for railway systems from last year's 32C3. At minute 25 the speaker briefly talks about Ada. Specifically he says: Typical Ada implementations have a mechanism called "(tramp / trunk / ?)…
morido
  • 1,027
  • 7
  • 24
3
votes
1 answer

2 out of 3 voting using function pointer approach for state machine design

I'm working on a safety system that requires me to implement 2oo3 voting. I roughly have an idea of implementing this using state machines using function pointers. Assume there are 3 systems, A B C. With respect to A, C is left system and B is right…
AlphaGoku
  • 968
  • 1
  • 9
  • 24
3
votes
5 answers

Safely Exiting to a Particular State in Case of Error

When writing code I often have checks to see if errors occurred. An example would be: char *x = malloc( some_bytes ); if( x == NULL ){ fprintf( stderr, "Malloc failed.\n" ); exit(EXIT_FAILURE); } I've also used strerror( errno ) in the…
Rohan
  • 507
  • 1
  • 4
  • 15
3
votes
1 answer

Encapsulation in Safety-critical systems

Does usually Safety Critical systems make use of Encapsulation? Let say an embedded system implemented in Ada or C for a satellite, jet fighter, submarine or an airliner. I got the question since to me the concept of encapsulation is there to help…
Mahdi
  • 9,247
  • 9
  • 53
  • 74
3
votes
1 answer

Resources for Display Systems in Safety Critical Embedded Systems?

I am looking out for resources that can answer following questions of mine. Where exactly does the display systems in SC ERTS architecture fit in. What is the difference between SC display systems and normal ones? What roles does hardware and…
user210767
  • 69
  • 5
2
votes
3 answers

Python coding standard for Safety Critical Applications

Coming from C/C++ background, I am aware of coding standards that apply for Safety Critical applications (like the classic trio Medical-Automotive-Aerospace) in the context of embedded systems , such as MISRA, SEI CERT, Barr etc. Skipping the…
p_a321
  • 119
  • 1
  • 2
  • 7
2
votes
2 answers

what is the safe way to convert double to int?

I have been given a legacy code, where someone(s) have carelessly assigned double values to int variables like: int a = 10; double b = 20; a = b; Now to get rid of the warning C4244: '=': conversion from 'double' to 'int', possible loss of…
Foad S. Farimani
  • 12,396
  • 15
  • 78
  • 193
2
votes
4 answers

Passing value by pointer to function. Shall we create copy of variable inside function?

We have two simple function. #include /* first approach */ int power1(int *ptr) { return *ptr * *ptr; } /* second approach */ int power2(int *ptr) { int tmp = *ptr; return tmp*tmp; } int main() { int val =…
user3483899
  • 103
  • 1
  • 5
2
votes
1 answer

Does a certified (ISO 26262 or similar) C++ standard library exist?

While certified C++ toolchains (compiler etc.) exist I did not find any certified C++ standard library (STL). Does anyone know of someone providing this?
Andreas Pasternak
  • 1,250
  • 10
  • 18
2
votes
1 answer

CAN Acceptance Filtering

Suppose all nodes in a CAN network are configured using acceptance filters to rx packets that are addressed only to them. Ex: Node A configured to rx packets addressed only to "A" in the 11bit id field and so on. Scenario:If there are 4 nodes…
AlphaGoku
  • 968
  • 1
  • 9
  • 24
1
vote
2 answers

How to Encode Boolean variable as 16 bit encoded value (Hamming Distance)

How shall a boolean variable be assigned 16-bit encoded values (e.g., Hamming code) to avoid false states due to bit flipping?
Ankush K
  • 55
  • 4
1
vote
1 answer

Compiler output code

Are there real world cases where compilers in C produced object code that functioned almost identically as the source code described, but in the end turned out that the optimizations turned (or could turn) disastrous?