HI,
I am considering the use of STM32F0 device for my project. How do I isolate the safety related code(for functional safety) from the general code, so that a f/w update on the general code doesn't affect the safety related code? Are there any hardware provisions on the STM32 devices to help me isolate these sections? Or are there any software means to isolate the two?
The concept is that the MPU is configured to allow your safety-related code to access the RAM and peripherals that it needs and other code is not permitted to access those resources.
This makes a strong argument that the non-safety code is independent from (and cannot affect) the safety-related code.
Access to flash memory could also be controlled, but if your application treats flash as read-only memory, that would probably not be very beneficial.
Ideally, an RTOS manages the MPU, changing the accessible regions when switching tasks (FreeRTOS and SafeRTOS have that ability, among others).
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
