BarrSlides_FINAL_SCRUBBED.pdf?utm_content=bufferb9206&utm_medium=social&utm_source=twitter
BarrSlides_FINAL_SCRUBBED.pdf?utm_content=bufferb9206&utm_medium=social&utm_source=twitter
BarrSlides_FINAL_SCRUBBED.pdf?utm_content=bufferb9206&utm_medium=social&utm_source=twitter
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
LAYER 1: MIRRORING OF CRITICAL VARIABLESToyota’s engineers sought to protect numerous variablesagainst software- and hardware-caused corruptions! e.g., by “mirroring” their contents in a 2 nd locationBut FAILED TO MIRROR several key critical variables! OSEK’s critical internal data structures! THE target throttle angle global variable!Commands a part of the software to open the throttleØ Recalculated every 8 ms (when the tasks are all alive)Corruption is indistinguishable from a driver gas pedal press!35Barr Chapter RegardingToyota’s Memory Protections