| 1. |
- Lindgren, Per, et al.
(författare)
-
RTFM-core : Language and Implementation
- 2014
-
Konferensbidrag (refereegranskat)abstract
- Robustness, real-time properties and resource eciency arekey properties to embedded devices of the CPS/IoT era. Inthis paper we propose a language approach RTFM-core,and show its potential to facilitate the development processand provide highly ecient implementations amendablefor static verication. Our programming model is reactive,based on the familiar notions of concurrent tasksand (single-unit) resources. The language is kept minimalistic,capturing the static task, communication and resourcestructure of the system. Whereas C-source can be arbitrarilyembedded in the model, and/or externally referenced,the instep to mainstream development is minimal, and asmooth transition of legacy code is possible. A prototypecompiler implementation for RTFM-core is presented. Thecompiler generates C-code output that compiled togetherwith the RTFM-kernel primitives runs on bare metal. TheRTFM-kernel guarantees deadlock-lock free execution andeciently exploits the underlying interrupt hardware forstatic priority scheduling and resource management underthe Stack Resource Policy. This allows a plethora of wellknownmethods to static verication (response time analysis,stack memory analysis, etc.) to be readily applied. The proposedlanguage and supporting tool-chain is demonstratedby showing the complete process from RTFM-core sourcecode into bare metal executables for a light-weight ARMCortexM3 target.
|
|
| 2. |
- Lindgren, Per, et al.
(författare)
-
RTFM-lang static semantics for systems with mixed criticality
- 2014
-
Ingår i: Ada User Journal. - 1381-6551. ; 35:2, s. 128-132
-
Tidskriftsartikel (refereegranskat)abstract
- In an embedded system, functions often operate under different requirements. In the extreme, a failing safety critical function may cause collateral damage (and hence consider to be a system failure) while non critical functions affect only the quality of service. Approaches by partitioning the system's functions into sandboxes require virtualization mechanisms by the underlying platform and thus prohibit deployment to the bulk of microcontroller based systems. In this paper we discuss an alternative approach based on static semantic analysis performed directly on the system specification expressed in the form of an object oriented (00) model in the experimental language RTFM-lang. This would allow to (at compile time) to discriminate in between critical and non-critical functions, and assign these (by means of statically checkable typing rules) appropriate access rights. In particular, one can imagine dynamic memory allocations to be allowed only in non-critical functions, while on the other hand, direct interaction with the environment may be restricted to the critical parts. With respect to scheduling, a static task and resource configuration allows e.g. Stack Resource Policy (SRP) based approaches to be deployed. In this paper we discuss how this can be achieved in a mixed critical setting.
|
|
