|
|
Subscribe / Log in / New account

Safety-critical realtime with Linux

Safety-critical realtime with Linux

Posted Sep 26, 2017 13:44 UTC (Tue) by tialaramex (subscriber, #21167)
Parent article: Safety-critical realtime with Linux

"nobody dies" seems like a high bar (or a low bar depending on your perspective).

In aeroplanes as mentioned above they have no choice, but other vehicle safety systems may be considered just as vital even though they always have the last ditch "I give up, stop everything and let the humans fix it" option which in an aeroplane violate that "nobody dies" condition because we can't turn off gravity while we fix the problem.

The example we used to teach students about real-time systems was a toy elevator. If the students screwed up their elevator would physically crash and the toy would begin to tear itself apart. In a real elevator of course this outcome is prevented by a mechanical limit, nobody will die if the software has a bug. But I hope we'd agree that in practice what we want here is not soft real-time!


to post comments

Safety-critical realtime with Linux

Posted Oct 5, 2017 6:23 UTC (Thu) by filssavi (guest, #109018) [Link]

The whole automotive systems are not hard real time might have been true 40 years ago but in a modern(ish) car it's as wrong as it can be...

Case and point a buffer overflow in Toyota ECU's could get your car stuck accelerating at full tilt even with the foot completely off the pedal, there has been at least one family killed by said bug

Brakes also are fully computer controlled, in fact the ABS/ESP controller can independently apply or release brakes as he pleases

Basically a car is more a computer where you walk in and he let's you drive him as he sees fit, than a mechanical machine

Safety-critical realtime with Linux

Posted Oct 7, 2017 23:40 UTC (Sat) by Wol (subscriber, #4433) [Link]

> In aeroplanes as mentioned above they have no choice, but other vehicle safety systems may be considered just as vital even though they always have the last ditch "I give up, stop everything and let the humans fix it" option which in an aeroplane violate that "nobody dies" condition because we can't turn off gravity while we fix the problem.

They still use that in aircraft - George will give up and hand back control to the pilots. The Air France crash over the South Atlantic was caused by that exact scenario.

And the problem is that even that scenario is real-time - it can often take longer for humans to take back control, than time is available ...

Cheers,
Wol


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds