STM32F Unexpected Hardfault cause by code not reached

[tfde]

Hi ! I'm working on a STM32F429VET, with keil as an IDE. 

My problem is the next, this code which is NOT reached (because it need a command from the terminal to be). Make my entire program crash in contact of loop, causing an IACCVIOL if i let this part of the code commented, works fine if i uncomment it. Anybody have encounter similiar behavior ? I dont get it at all.

void adc_measure(uint16_t channel, uint8_t *result)
{
  measureInProgress = true;
  adc_init(channel);

  HAL_TIM_Base_Start_IT(&htim2);

//  while (measure_pending_count < NB_MEASURES)
//  {
//   
//      adc_read();
//      __disable_irq(); // Prevent race condition
//      measure_pending_count++;
//      __enable_irq();
//    
//  }
  

  HAL_ADC_Stop(&hadc1);
  float measure = adc_compute_value(channel); // convert the value toward needed unit (mA or V)
  //snprintf((char *)result, RESULT_PRECISION, "%f", measure);
}

[Andrew Neil]

Are you sure it's not reached?

Have you tried setting a breakpoint in that code to confirm?

How to debug Hard faults:

https://community.st.com/t5/community-guidelines/how-to-write-your-question-to-maximize-your-chances-to-find-a/tac-p/708193/highlight/true#M51

[Tesla DeLorean]

Instrument and root cause the Hard Fault

https://github.com/cturvey/RandomNinjaChef/blob/main/KeilHardFault.c

We lack significant context here. We don't see the fault, the variable definitions, the adc_read() function, or the initialization or handlers.

Probably something not initialized correctly prior to function entrance. Or perhaps stack overflow due to local/auto variables in one of the called routines.

Keil tend to have a very small stack allocation. Make it several KB in startup.s file, and perhaps mark it with a pattern so you make some high/low water mark determination.

[TDK]

Code that isn't executed can't cause a hard fault. The bug is elsewhere.

[tfde]

Hi again! I wasn't expecting to have answer that fast ! 

First thanks to you three, those comment help reduce the search area.

So first, my code who is next is effectively not reach (verify by the use of bp), and now i have conclude that, if i comment adc read, everything break, and if i comment it everything is okay. 

Everything break: Meaning any loop and especially the loop in HAL_Delay() make the program hardfault.

void adc_measure(uint16_t channel, uint8_t *result)
{
	measureInProgress = true;
  adc_init(channel);

  HAL_TIM_Base_Start_IT(&htim2);

  while (measureInProgress)
  {
    if (measure_pending_count > 0)
    {
      adc_read();
      __disable_irq(); // Prevent race condition
      measure_pending_count--;
     __enable_irq();
    }
  }
  measure_pending_count = 0;

  HAL_ADC_Stop(&hadc1);
  float measure = adc_compute_value(channel); // convert the value toward needed unit (mA or V)
  snprintf((char *)result, RESULT_PRECISION, "%f", measure);
}

 Here is the fault report, register, and dissasembly code of when the crash happen 

I also attach the entire "adc_driver.c/.h" file where the bug seem to take place. 

Also i feel its important to precise that this function if call, is nested in multiple function call (5).

My english isn't perfect because its not my mother tongue and i'm very new to embedded system. So i'm maybe missing a key component.  

[tfde]

Hi!

I did verify with a breakpoint and it is not reach.

I check your link and will write a response accordingly.

[tfde]

Hi! 

I did not succeed in making the code you send me work. 

I wrote a bigger response with as much detail as i though isefull. 

I do really think its some kind of stack overflow but 1. i don't know how to prove that and 2. i dont know how to debug that. 

[Andrew Neil]

---

@TDK wrote:

Code that isn't executed can't cause a hard fault. 

---

Well, ...

If it's included in the image, it can affect memory layout - which might, indirectly, lead to other things failing ...

[Andrew Neil]

STM32CubeIDE gives you a call tree showing where the fault occurred - can Keil do that?

If it turns out that the location is consistent, then set a breakpoint just before that point to see what's happening...

PS:

Yes, it seems that it can:

https://www.keil.com/appnotes/files/apnt209.pdf#page=17

[tfde]

Thank for the tips. 

It if i use this technique here is what i get : 

It seems like the program go out of memory bound, i dont get how commenting a file change the issue of that.