Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
54 changes: 1 addition & 53 deletions score/mw/com/dependability/safety_analysis/aou.trlc
Original file line number Diff line number Diff line change
Expand Up @@ -149,15 +149,6 @@ ScoreReq.AoU OneProducerOnlyOneAllocateePtr {
mitigates = "TooFewMemoryAllocated, TooMuchMemoryAllocated, SendingEventSendsToWrongConsumer"
}

/* broken_link_c/issue/5835324 */
ScoreReq.AoU NoCopySendWhileHoldingAllocateePtr {
description = "It shall be ensured that Send(const& value) is not invoked while an AllocateePtr is held."
safety = ScoreReq.Asil.B
note = "Send(const& value) creates an AllocateePtr in its implementation. Thus we would harm the previously stated AoU that only one AllocateePtr is held at any point in time."
version = 1
mitigates = ""
}

/* broken_link_c/issue/5835328 */
ScoreReq.AoU NoneReentrantMethodsPerEventInstance {
description = "It shall be ensured that any LoLa API that is bound to a specific event instance is not called in a reentrant manner."
Expand Down Expand Up @@ -239,15 +230,6 @@ ScoreReq.AoU NoSharedMemoryAllocationInNamespaceLola {
mitigates = "MemoryAllocatedInWrongSection"
}

/* broken_link_c/issue/5835421 */
ScoreReq.AoU OnlyQnx71Supported {
description = "It shall be ensured that any application containing LoLa is only executed on QNX Safe Operating System 7.1."
safety = ScoreReq.Asil.B
note = "All safety guarantees only hold as long executed on a safe operating system."
version = 1
mitigates = "MemoryAllocatedInWrongSection"
}

/* broken_link_c/issue/5835427 */
ScoreReq.AoU LoLaSpecificQnxMessagingEndPointsOnlyAccessedThroughLoLa {
description = "It shall be ensured that the LoLa specific QNX Message Passing end-points are only accessed through LoLa APIs."
Expand All @@ -257,15 +239,6 @@ ScoreReq.AoU LoLaSpecificQnxMessagingEndPointsOnlyAccessedThroughLoLa {
mitigates = "SendingEventOnlyPartiallyNotifiesConsumer"
}

/* broken_link_c/issue/5835432 */
ScoreReq.AoU AragenNotSafe {
description = "Input artifacts shall be manually reviewed for correctness"
safety = ScoreReq.Asil.B
note = "aragen is not safety qualified, thus its outputs are not safe also. Usage of aragen is not mandatory as the LoLa specific interfaces can be written manually in C++ using LoLa provided support templates."
version = 1
mitigates = "GeneratedCodeDoesNotMatchGenerationInputs"
}

/* broken_link_c/issue/5835457 */
ScoreReq.AoU UnsupportedDataTypes {
description = "It shall be ensured that neither variants nor maps are sent via LoLa."
Expand All @@ -284,29 +257,12 @@ ScoreReq.AoU NoGuaranteeOnExecutionTime {
mitigates = "AnyFunctionBlocksLongerThanExpected"
}

/* broken_link_c/issue/7091801 */
ScoreReq.AoU UsageOfConfigurationOversubscription {
description = "If event instance \"oversubscription\" is enabled, LoLa makes no warranty that proxies/consumers can't suffer from data loss! It is the responsibility of the user to adapt scheduling/event-data access in a way that no data-loss happens."
safety = ScoreReq.Asil.B
note = "However, we can give the guarantee that if only QM consumers misbehave, ASIL consumers are not affected by these actions. The latter statement enables that a QM application where the scheduling/event-data access is not ensured, will not interfere the ASIL communication. The only thing that could happen is that the QM application might access wrong data or receive no data at all, in an error case (e.g. if it holds more samples then expected)."
version = 1
mitigates = ""
}

/* broken_link_c/issue/21206172 */
ScoreReq.AoU SameCompilerSettingsForProviderAndConsumerSide {
description = "All compiler settings having influence on the binary representation of data exchanged via {{mw::com}}/{{LoLa}} (event, field, service-method payloads) have to be identical for compilation of code containing {{mw::com}} proxies and skeletons, which communicate."
safety = ScoreReq.Asil.B
version = 1
mitigates = ""
}

/* broken_link_c/issue/21209491 */
ScoreReq.AoU EventOrFieldReceptionViaGenericProxyNeedsSpecificCare {
description = "When receiving event or field data via untyped {{GenericProxyEvent}} or {{GenericProxyField}}, care has to be taken when accessing the corresponding {{SamplePtr<void>}} delivered by calls to {{GetNewSamples()}}: When casting it to the expected type, it needs to be checked that no access behind the size returned by {{GetSampleSize()}} will happen."
safety = ScoreReq.Asil.B
version = 1
mitigates = ""
mitigates = "WrongReturnValueUsed"
}

/* broken_link_c/issue/32388804 */
Expand Down Expand Up @@ -335,11 +291,3 @@ ScoreReq.AoU MethodInArgPtrMatches {
version = 1
mitigates = "Communication.CallBlocksOnCaller, Communication.CallBlocksOnCallee, Communication.CallBlocksOnUserHandler"
}

/* broken_link_c/issue/79416086 */
ScoreReq.AoU NoGuaranteeOnSubscriptionStateCorrectness {
description = "For safety critical use cases, an application must treat a SubscriptionState of kSubscribed or kSubscriptionPending (returned by GetSubscriptionState() or reported by the SubscriptionStateChangeHandler) as the same."
safety = ScoreReq.Asil.B
note = "On a technical level, kSubscribed and kSubscriptionPending cannot be reliably differentiated, see {{SubscriptionState}} Component requirement for more details"
version = 1
}
Loading