Interruption safety hazard detection system for electronic device of motor vehicle and detection method of interruption safety hazard detection system

Abstract

The invention provides an interruption safety hazard detection system for an electronic device of a motor vehicle. The system comprises a code preprocessing module, a model generation module and a code verification and analysis module, wherein the code preprocessing module is used for performing code slicing on machine codes of the electronic device of an automobile; the model generation module is used for establishing an abstract model for the sliced codes; the code verification and analysis module is used for detecting whether interruption safety hazard exists in the abstract model. The invention further provides a detection method of the interruption safety hazard detection system for the electronic device of the motor vehicle. According to the system and the method, error detection is performed in the aspect of the machine codes, errors probably caused by the fact that a compiler is utilized to compile languages is avoided, the machine codes are sliced, locally useful codes of the machine codes are captured, so that the problem of state explosion during model checking is solved very well, and a higher requirement is proposed for an automobile operating system on the basis of original correctness.

Description

technical field [0001] The invention relates to the technical field of operating system software, in particular to a detection system and a detection method for potential safety hazards of electronic device interruptions in motor vehicles. Background technique [0002] Due to the many non-deterministic characteristics of interrupts, a series of problems are often encountered in the process of processing, and it is difficult to have a better calculation mechanism for them. In the operating system, interrupts provide a fast event-based service program processing mechanism, but at the same time it also brings many uncertain factors to the operation of the operating system, precisely because of these uncertain factors and different event handlers The different processing methods make the originally determined behavior of the operating system very uncertain. [0003] There are two main types of problems caused by interrupts: the first is overflow problems, whether it is the over...

AI Technical Summary

Problems solved by technology

[0003] There are two main types of problems caused by interrupts: the first one is overflow problems, whether it is stack overflow or global variable content overflow, it will make the system enter an abnormal state.

The second is data operation errors. Due to the uncertainty of the special call process and call time of the interrupt program, the original transactional characteristics of data operations cannot be well maintained, resulting in data operation errors.

At the same time, such errors may cause problems other than interrupt nesting variable and stack pointer overflow, and other logical judgment variable values ​​related to interrupt nesting variables and stack pointers may produce wrong results

[0007] (2) The interrupt program cannot modify the data environment accessed by the interrupted task

Otherwise, an error that interrupts data misreading will occur

[0009] (3) The interrupt program cannot access the data environment of the transactional task operation

[0011] According to the above safety properties, the present invention overcomes the defects existing in the prior art. For example, it is difficult for traditional test tools to achieve full coverage of the path, and it is impossible to completely detect interruption errors. The detection system and its detection method have the beneficial effects of full path coverage and automatic detection

Images