AUTOSAR CP SRS FlashTest
AUTOSAR CP SRS FlashTest
AUTOSAR CP R23-11
4
AUTOSAR
2015-07-31 4.2.2 Release • Editorial changes
Management
AUTOSAR
2014-10-31 4.2.1 Release • Editorial changes
Management
AUTOSAR
2013-10-31 4.1.2 Release • Editorial changes
Management
• Link Requirement with BSW Feature
AUTOSAR Document
2013-03-15 4.1.1 Release • Updating format of requirements
Management according to TPS
StandardizationTemplate
AUTOSAR
2010-02-02 3.1.4 Release • Initial release
Management
Disclaimer
This work (specification and/or software implementation) and the material contained in
it, as released by AUTOSAR, is for the purpose of information only. AUTOSAR and the
companies that have contributed to it shall not be liable for any use of the work.
The material contained in this work is protected by copyright and other types of intel-
lectual property rights. The commercial exploitation of the material contained in this
work requires a license to such intellectual property rights.
This work may be utilized or reproduced without any modification, in any form or by
any means, for informational purposes only. For any other purpose, no part of the work
may be utilized or reproduced, in any form or by any means, without permission in
writing from the publisher.
The work has been developed for automotive applications only. It has neither been
developed, nor tested for non-automotive applications.
The word AUTOSAR and the AUTOSAR logo are registered trademarks.
Contents
1 Scope of Document 5
2 Conventions to be used 6
2.1 Document Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
3 Acronyms and abbreviations 8
4 Requirements Specification 9
4.1 Functional Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
4.2 Functional Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
4.2.1 Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
4.2.2 Initialization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
4.2.3 Normal Operation . . . . . . . . . . . . . . . . . . . . . . . . . 10
4.2.4 Shutdown Operation . . . . . . . . . . . . . . . . . . . . . . . . 16
4.2.5 Fault Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
4.3 Non-Functional Requirements (Qualities) . . . . . . . . . . . . . . . . . . 16
4.3.1 Timing Requirements . . . . . . . . . . . . . . . . . . . . . . . 17
4.3.2 Resource Usage . . . . . . . . . . . . . . . . . . . . . . . . . . 17
5 Requirements Tracing 18
6 References 19
1 Scope of Document
This document specifies requirements on the module Flash Test.
2 Conventions to be used
tation, which does not include the option (except, of course, for the feature the option
provides.)
Acronym: Description:
ECU Electric Control Unit
EOL End Of Line
Often used in the term ’EOL Programming’ or ’EOL Configuration’
CRC Cyclic Redundancy Check
MCAL Microcontroller Abstraction Layer
MCU Microcontroller Unit
NMI Non maskable interrupt
OS Operating System
DEM Diagnostic Event Manager
SFR Special Function Register
RTE Runtime environment
WP Work Package
ECC Error Correction Code
Abbreviation: Description:
STD Standard
REQ Requirement
UNINIT Uninitialized (= not initialized)
Term: Description:
signature Unique calculation result of the content of a specific memory block
Memory scrubbing Automatic sequential data reading to trigger detection/verification mechanisms
typical ECC.
Invariable memory Invariable memory can be program flash, program SRAM, locked cache and
ROM
Background test Background test is called periodically by a scheduler, and is interruptible. The
test is split up over many scheduled tasks.
Foreground test Foreground test is called via users call.
Test interval Interval of a complete Flash test in background mode
As this is a document from professionals for professionals, all other terms are expected
to be known.
4 Requirements Specification
This chapter describes all requirements driving the work to define the Flash Test.
4.2.1 Configuration
4
Supporting –
Material:
c(RS_BRF_02224, RS_BRF_00129)
[SRS_FlsTst_14200] Flash test service shall be configured d
Description: It shall be configurable which test algorithms can be used on each memory
block.
Rationale: Adapt flash test service to system storage concept and optimize driver code
Use Case: –
Dependencies: –
Supporting –
Material:
c(RS_BRF_02224, RS_BRF_00129)
[SRS_FlsTst_14201] Post build configuration shall be supported d
c(RS_BRF_02224, RS_BRF_00129)
4.2.2 Initialization
In this chapter requirements on the "normal" functionality of the module are listed.
c(RS_BRF_00129)
[SRS_FlsTst_14203] Data integrity shall be checked using checksum d
c(RS_BRF_00129)
[SRS_FlsTst_14204] Data integrity shall be checked using CRC signature (8-bit
length) d
c(RS_BRF_00129)
c(RS_BRF_00129)
[SRS_FlsTst_14206] Data integrity shall be checked using CRC signature (32-bit
length) d
c(RS_BRF_00129)
[SRS_FlsTst_14207] Data integrity shall be checked by comparing duplicated
memory blocks d
A test shall be provided to compare two identical memory blocks. The test case
Description: is applicable when memory is duplicated.
The test shall report a DEM error in case of a mismatch.
Rationale: Detect all bit failures according to block replication technique
Use Case: –
Dependencies: –
Supporting –
Material:
c(RS_BRF_00129)
Description: –
Test is intended to be used in a scheduled background task. Therefore it should
Rationale:
not block other operations.
Use Case: –
Dependencies: –
Supporting –
Material:
c(RS_BRF_02224, RS_BRF_00129)
[SRS_FlsTst_14209] The memory to be tested shall be split into individual
smaller pieces d
The memory to be tested shall be split into individual smaller pieces, which can
Description:
be scheduled according to the needs of the system.
Rationale: Share CPU resources with concurrent tasks
Use Case: –
Dependencies: –
Supporting –
Material:
c(RS_BRF_02224, RS_BRF_00129)
[SRS_FlsTst_14211] Flash test execution status shall be available d
Current status of Flash test execution shall be available through a get status
Description:
interface. This function shall be optional.
Rationale: Ability to monitor the current running test for test flow control.
Use Case: –
Dependencies: –
Supporting –
Material:
c(RS_BRF_02224, RS_BRF_00129)
[SRS_FlsTst_14212] Flash test execution completion shall be provided by a no-
tification mechanism d
Information about test has been finished shall be provided to the user by a
Description:
notification mechanism. This function shall be optional.
Rationale: Ability to indicate the completion of the current running test for test flow control.
Use Case: –
Dependencies: –
Supporting –
Material:
c(RS_BRF_02224, RS_BRF_00129)
c(RS_BRF_02224, RS_BRF_00129)
[SRS_FlsTst_14214] Service for Flash test execution result shall be provided. d
Information about the test that has been finished shall be provided upon SW
Description:
request. This function shall be optional.
Rationale: Ability to monitor the completion of the finalized test for diagnostic purpose.
Use Case: –
Dependencies: –
Supporting –
Material:
c(RS_BRF_02224, RS_BRF_00129)
[SRS_FlsTst_14215] Suspend Flash test execution shall be possible d
A service shall be provided to suspend a running Flash test. Suspend will stop
Description: the test execution at the next atomic boundary and store the intermediate state.
This function shall be optional.
Rationale: Suspend background flash test task in case of higher priority tasks.
Use Case: –
Dependencies: –
Supporting –
Material:
c(RS_BRF_02224, RS_BRF_00129)
[SRS_FlsTst_14216] Flash test execution shall be resumed when suspended d
A service shall be provided to resume a Flash test which was suspended. This
Description:
function shall be optional.
Rationale: Complete a suspended flash test.
Use Case: –
Dependencies: –
Supporting –
Material:
c(RS_BRF_02224, RS_BRF_00129)
A service shall be provided to stop a Flash test. The test shall be cancelled and
Description:
a re-start of the test shall start from the beginning.
Rationale: –
Use Case: In case of DEM error the user can cancel a running flash test execution
Dependencies: –
Supporting –
Material:
c(RS_BRF_02224, RS_BRF_00129)
[SRS_FlsTst_14219] Foreground Flash test shall be available d
c(RS_BRF_02224, RS_BRF_00129)
[SRS_FlsTst_14223] Flash Test Error details shall be reported d
A service shall be provided to report specific error data detected from ECC
tests.
The service shall be optional and is applicable in case of:
• hardware is equipped with ECC for invariable memories
Description:
• hardware is able to report hardware specific error details
• caller requires these data
It is the responsibility of the caller to interpret the data provided from this
service.
Rationale: These detailed error data are used for diagnostic purpose.
During ECU start-up invariable memory shall be tested for ECC failure. In case
Use Case: of failure, this function shall be used to collect hardware specific fault data like
the fault address of an ECC failure
Dependencies: –
Supporting –
Material:
A service shall be provided to test the ECC circuitry and report the test result.
The service shall be optional and is applicable in case of:
Description: • hardware is equipped with ECC for invariable memories
• mechanism is provided from the hardware to test ECC circuitry
• caller requires this test
In a safety related application, it may be necessary to establish that hardware
Rationale: memory test mechanism is functioning properly. This can be achieved by
verifying that the available circuitry (ECC) is functioning without errors.
Use Case: Verify ECC hardware logic during ECU start-up.
Dependencies: –
Supporting –
Material:
c(RS_BRF_02224, RS_BRF_00129)
[SRS_FlsTst_14225] Each Flash test Interval shall have an Identifier d
Each Flash test Interval shall have an Identifier, which shall be incremented by
each start of a validtest interval in background mode. The value of the Flash
Description:
test interval shall be provided to upper layer. The end value of the Identifier
shall be configurable.
Assign test result or test signature to a test interval in order to monitor ECU test
Rationale:
flow by upper layer.
Use Case: –
Dependencies: –
Supporting –
Material:
The tests are content based and require no change of the content during the
Description:
test period. This has to be ensured by the caller.
Rationale: Content of memory blocks under test shall not be valid during the test period
Use Case: Test of data flash during run time
Dependencies: –
Supporting –
Material:
c(RS_BRF_02224, RS_BRF_00129)
5 Requirements Tracing
The following table references the features specified in [3] and links to the fulfillments
of these.
Requirement Description Satisfied by
[RS_BRF_00129] AUTOSAR shall support data [SRS_FlsTst_14200] [SRS_FlsTst_14201]
corruption detection and protection [SRS_FlsTst_14202] [SRS_FlsTst_14203]
[SRS_FlsTst_14204] [SRS_FlsTst_14205]
[SRS_FlsTst_14206] [SRS_FlsTst_14207]
[SRS_FlsTst_14208] [SRS_FlsTst_14209]
[SRS_FlsTst_14211] [SRS_FlsTst_14212]
[SRS_FlsTst_14213] [SRS_FlsTst_14214]
[SRS_FlsTst_14215] [SRS_FlsTst_14216]
[SRS_FlsTst_14217] [SRS_FlsTst_14219]
[SRS_FlsTst_14221] [SRS_FlsTst_14222]
[SRS_FlsTst_14223] [SRS_FlsTst_14224]
[SRS_FlsTst_14225]
[RS_BRF_01024] AUTOSAR shall provide naming rules [SRS_FlsTst_14225]
for public symbols
[RS_BRF_02168] AUTOSAR diagnostics shall provide a [SRS_FlsTst_14223]
central classification and handling of
abnormal operative conditions
[RS_BRF_02224] AUTOSAR shall support run-time [SRS_FlsTst_14200] [SRS_FlsTst_14201]
hardware tests [SRS_FlsTst_14208] [SRS_FlsTst_14209]
[SRS_FlsTst_14211] [SRS_FlsTst_14212]
[SRS_FlsTst_14213] [SRS_FlsTst_14214]
[SRS_FlsTst_14215] [SRS_FlsTst_14216]
[SRS_FlsTst_14217] [SRS_FlsTst_14219]
[SRS_FlsTst_14221] [SRS_FlsTst_14222]
[SRS_FlsTst_14223] [SRS_FlsTst_14224]
[SRS_FlsTst_14225]
6 References
none
none
none