This invention provides a
robustness testing method and
system for the kernel interface of an airborne real-time
operating system. It employs a multi-dimensional equivalence class partitioning model for parameter classification, systematically enumerating six categories—legal values,
boundary values, illegal values, null pointers, extreme values, and permission exceptions—based on two dimensions:
data type and semantic role. This avoids the problem of overlooking exception categories in manual, experience-based design. Orthogonal lists are used for parameter combination, ensuring that any equivalence class combination between any two parameters is tested at least once. At the
test execution level, four mechanisms are deployed: watchdog
deadlock detection, memory sentinel out-of-bounds detection, kernel
panic callback capture, and non-volatile progress marker restart detection, making result determination independent of the API return value itself. The structured
test report generated by this invention includes coverage statistics, detailed abnormal test cases, and defect location information, serving as objective evidence of DO-178C
robustness testing activities and meeting the airworthiness certification requirements for test sufficiency and
traceability.