STM32CubeH5 IEC-61508 HAL/LL driver compliance.

[P9R7-martingroenewald]

My team is working on a project that is aimed to comply with IEC61508 SC 2 (SIL2).

Our chosen MCU is the STM32H563VITx.

My understanding is that utilization of HAL drivers when trying to meet IEC61508 is tricky and it is generally more common to write drivers from the ground up.

However, I have seen in some scattered documentation that the STM32CubeH5 HAL functionality has been developed to a process compliant to IEC61508. Specifically the document UM3126 notes:

“Within STM32CubeH5, both the HAL and LL APIs are production‑ready, checked with CodeSonar® static analysis tool, and
developed in compliance with MISRA C® guidelines, following a process certified according to IEC 61508 systematic
capability‑2 level (SC2). Reports are available on demand”

I am unsure if this is correct given this is not documented in many places so would like clarity on the issue. 

If it is correct, does this mean that HAL functions generated from STM32CubeH5 can be used in a IEC61508 compliant system, and if so, how would I be able to obtain the reports mentioned in the article.

Thanks,
Martin.
 

[lobna]

dear ​@P9R7-martingroenewald

ST HAL/LL drivers are considered SC2 quality ready. They may therefore be used in an IEC 61508-oriented project. The development process is aligned with the IEC 61508 standard.

The MISRA and Coverity reports may be shared, provided that a Non-Disclosure Agreement (NDA) with ST is in place.

Best regrads

Lobna