11.07.2015 Views

BarrSlides_FINAL_SCRUBBED.pdf?utm_content=bufferb9206&utm_medium=social&utm_source=twitter

BarrSlides_FINAL_SCRUBBED.pdf?utm_content=bufferb9206&utm_medium=social&utm_source=twitter

BarrSlides_FINAL_SCRUBBED.pdf?utm_content=bufferb9206&utm_medium=social&utm_source=twitter

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

LAYER 1: MIRRORING OF CRITICAL VARIABLESToyota’s engineers sought to protect numerous variablesagainst software- and hardware-caused corruptions! e.g., by “mirroring” their contents in a 2 nd locationBut FAILED TO MIRROR several key critical variables! OSEK’s critical internal data structures! THE target throttle angle global variable!Commands a part of the software to open the throttleØ Recalculated every 8 ms (when the tasks are all alive)Corruption is indistinguishable from a driver gas pedal press!35Barr Chapter RegardingToyota’s Memory Protections

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!