Activity for drkfrxâ
Type | On... | Excerpt | Status | Date |
---|---|---|---|---|
Edit | Post #293118 |
Post edited: Added missing link to memfault article |
— | 2 months ago |
Comment | Post #293118 |
I really appreciate it, but I can hardly disclose the specifics :(
I was told we're aiming for Class B certification, which says system reset are acceptable. Hardware mods would be more costly than patching it with a system watchdog so I guess that only leaves 1 solution. (more) |
— | 2 months ago |
Comment | Post #293120 |
I admit I didn't think about memory corruption. So there could be an edge case where memory gets corrupted but all parts of the firmware still run, albeit in an incorrect manner. The watchdog could still be fed nonetheless and have the system sustain in this faulty state.
This feels quite improbab... (more) |
— | 2 months ago |
Comment | Post #293118 |
You raise valid points. We'll conduct further investigation, though as of now, we suspect failure of an external IC due to ESD on the SPI line. (more) |
— | 2 months ago |
Comment | Post #293120 |
Thanks for that, I was looking for a more nuanced answer like this. My system is bare metal and part of the firmware is interrupt driven by an external IC. The watchdog needs to trigger if said external IC fails to raise its IRQ line. I had implemented the conditional feeding with the "event flags" a... (more) |
— | 2 months ago |
Comment | Post #293119 |
I understand what you are saying, so that would be the typical approach. However, in my case, I have a few critical routines that are executed inside high priority ISR; the main loop isn't aware of those. This forces me to implement a conditional watchdog feeding process because if 1 of the critical ... (more) |
— | 2 months ago |
Edit | Post #293118 |
Post edited: Added more information regarding the ESD tests |
— | 2 months ago |
Edit | Post #293118 | Initial revision | — | 2 months ago |
Question | — |
Is Feeding a Watchdog Timer from an ISR a Bad Practice? In an embedded system, I require a watchdog to be able to pass ESD qualifications (the main reason for the watchdog requirement is that the device wasn't able to pass the harshest tests of the IEC 61000-4-2 standard). Having no experience with watchdogs, I went through this Memfault article. I liked ... (more) |
— | 2 months ago |