Verification Report#
Lifecycle Verification Report
|
status: draft
security: YES
safety: ASIL_B
|
||||
Verification report for the Lifecycle module. This report is generated based on the module verification plan and the module verification work product (wp__verification_module_ver_report), and covers all components of the module. |
|||||
Components#
Component Overview#
Component |
Safety |
Security |
Status |
|---|---|---|---|
ASIL_B |
YES |
valid |
|
ASIL_B |
NO |
valid |
Health Monitor#
Component Requirements Statistics#
Component Architecture Statistics#
Requirements Traceability#
The following table lists all requirements of this component together with their verification status and the tests that (fully or partially) verify them:
Show requirements table
ID |
Title |
Safety |
Status |
Testlink |
|---|---|---|---|---|
Dummy Component |
ASIL_B |
valid |
Test Coverage#
Per-source-file line and branch coverage aggregated from the LCOV report
produced by bazel coverage.
Show test coverage table
Note
No coverage data available for this component. Run bazel coverage
with the corresponding targets and rebuild the docs to populate this
table.
Architectural Elements#
The following table lists the architectural elements of this component
together with their inspection status. Elements that have been formally
inspected carry the inspected tag; elements without that tag have not
yet been inspected.
Show architectural elements table
ID |
Title |
Safety |
Status |
Tags |
|---|---|---|---|---|
DeadlineMonitor Usage |
ASIL_B |
valid |
||
HealthMonitor background thread |
ASIL_B |
valid |
||
HealthMonitor Creation |
ASIL_B |
valid |
||
Health Monitoring Shutdown Interaction |
ASIL_B |
valid |
||
Health Monitoring Startup Interaction |
ASIL_B |
valid |
||
HeartbeatMonitor Usage |
ASIL_B |
valid |
||
LogicMonitor Usage |
ASIL_B |
valid |
||
Deadline Monitor |
ASIL_B |
valid |
||
Health Monitor Static View |
ASIL_B |
valid |
||
Health Monitor |
ASIL_B |
valid |
||
Logic Monitor |
ASIL_B |
valid |
Verification & Safety Analysis Documents#
Presence of the standard verification and safety analysis work products for
this component. A dash (—) means the corresponding document is missing.
Show work products table
Work Product |
Kind |
Realized by |
Status |
||
|---|---|---|---|---|---|
Requirements Inspection |
|
||||
Architecture Inspection |
|
||||
Implementation Inspection |
|
||||
DFA |
|
||||
FMEA |
|
Launch Manager#
Component Requirements Statistics#
Component Architecture Statistics#
Requirements Traceability#
The following table lists all requirements of this component together with their verification status and the tests that (fully or partially) verify them:
Show requirements table
ID |
Title |
Safety |
Status |
Testlink |
|---|---|---|---|---|
ASLR support |
ASIL_B |
valid |
||
Process capability support |
ASIL_B |
valid |
||
Global process properties |
ASIL_B |
valid |
||
Condition check based on at least one dependency |
ASIL_B |
valid |
||
Component activation timeout |
ASIL_B |
valid |
||
Configuration of component activation timeout |
ASIL_B |
valid |
||
Configuration of component readiness conditions |
ASIL_B |
valid |
||
Configuration of Run Target activation timeout |
ASIL_B |
valid |
||
Stop timeout |
ASIL_B |
valid |
||
Monitoring and recovery: recovery wait time |
ASIL_B |
valid |
||
Invalid dependency |
ASIL_B |
valid |
||
CWD support |
ASIL_B |
valid |
||
Logging DAG |
ASIL_B |
valid |
||
Condition check for each SWC its dependencies |
ASIL_B |
valid |
||
Dependency based startup order |
ASIL_B |
valid |
||
Configuration dependency view |
QM |
invalid |
||
Process detach from parent support |
ASIL_B |
invalid |
||
Dropping process responsibility |
ASIL_B |
invalid |
||
Process state notification |
ASIL_B |
valid |
||
Component monitoring during runtime |
ASIL_B |
valid |
test_crash_ignores_dependents (passed); test_process_crash_monitoring (passed) |
|
Component monitoring during startup |
ASIL_B |
valid |
test_recovery_action_simple_rep_failure (passed); test_recovery_action_complex_rep_failure (passed); test_crash_on_startup (passed) |
|
Fast shutdown |
ASIL_B |
invalid |
||
File descriptor inheritance support |
ASIL_B |
valid |
||
Normal shutdown |
ASIL_B |
valid |
||
Launching processes in parallel |
ASIL_B |
valid |
||
Process priority support |
ASIL_B |
valid |
||
Launch Manager shutdown |
ASIL_B |
valid |
||
Lazy check of configured commands |
ASIL_B |
valid |
||
Launch manager external monitoring configuration |
ASIL_B |
valid |
||
Launch manager external watchdog notification |
ASIL_B |
valid |
||
Launch manager external watchdog notification - failed test |
ASIL_B |
valid |
||
Logging timestamp |
ASIL_B |
valid |
||
Configuration file support |
ASIL_B |
invalid |
||
Monitoring and recovery: adopted process monitoring |
ASIL_B |
invalid |
||
Multiple instance of executable |
ASIL_B |
invalid |
||
Configuration Verification tool |
QM |
invalid |
||
Forward process information |
ASIL_B |
invalid |
||
Handling process args |
ASIL_B |
valid |
test_fallback_to_same_target_restarts (passed); test_switch_run_target (passed); test_recovery_action_simple_rep_failure (passed); test_process_launch_args (passed); test_sandbox_options (passed) |
|
Logging state transitions |
ASIL_B |
valid |
||
Resource limit support |
ASIL_B |
valid |
||
Process state |
ASIL_B |
valid |
test_switch_run_target (passed); test_rt_running_when_process_exits (passed) |
|
Ready Condition - File state |
ASIL_B |
valid |
test_ready_condition_file (passed); test_ready_condition_file_not_existing (passed) |
|
Ready Condition - Lifecycle Interface |
ASIL_B |
valid |
test_fallback_to_same_target_restarts (passed); test_recovery_action_simple_rep_failure (passed); test_incorrect_config_non_reporting (passed); test_recovery_action_complex_rep_failure (passed); test_process_fd_leak (passed) |
|
Ready Condition - OS Process State |
ASIL_B |
valid |
test_recovery_action_simple_rep_failure (passed); test_process_fd_leak (passed); test_sandbox_options (passed) |
|
Recovery by reactivating the component |
ASIL_B |
valid |
||
Recovery by stopping the component |
ASIL_B |
invalid |
||
Recovery by stopping the component and starting another component |
ASIL_B |
invalid |
||
Recovery by switching the Run Target |
ASIL_B |
valid |
test_recovery_action_simple_rep_failure (passed); test_process_crash_monitoring (passed); test_recovery_action_complex_rep_failure (passed) |
|
Recovery by stopping the servicing of the watchdog |
ASIL_B |
invalid |
||
Configurable amount of retries on startup |
ASIL_B |
valid |
||
Run Target activation timeout |
ASIL_B |
valid |
||
Run target to component dependencies |
ASIL_B |
valid |
test_fallback_to_same_target_restarts (passed); test_switch_run_target (passed); test_recovery_action_simple_rep_failure (passed); test_sandbox_options (passed) |
|
Run target to run target dependencies |
ASIL_B |
valid |
||
CPU runmask support |
ASIL_B |
valid |
||
Runtime configuration compliance |
ASIL_B |
invalid |
||
Scheduling support |
ASIL_B |
valid |
||
Non-root support |
ASIL_B |
valid |
||
Shutdown signal handling |
ASIL_B |
valid |
||
Logging slog2 and file support |
ASIL_B |
valid |
||
Launching run target |
ASIL_B |
valid |
||
Standard handle redirection |
ASIL_B |
valid |
||
Coordination stop dependency |
ASIL_B |
invalid |
||
Dangling dependency |
ASIL_B |
valid |
||
Supplementary group support |
ASIL_B |
valid |
||
Security policy support |
ASIL_B |
valid |
||
Switch between run targets |
ASIL_B |
valid |
||
Launching terminal |
ASIL_B |
valid |
||
Configurable delay between SIGTERM and SIGKILL |
ASIL_B |
valid |
||
Process user, group IDs support |
ASIL_B |
valid |
Test Coverage#
Per-source-file line and branch coverage aggregated from the LCOV report
produced by bazel coverage.
Show test coverage table
Note
No coverage data available for this component. Run bazel coverage
with the corresponding targets and rebuild the docs to populate this
table.
Architectural Elements#
The following table lists the architectural elements of this component
together with their inspection status. Elements that have been formally
inspected carry the inspected tag; elements without that tag have not
yet been inspected.
Show architectural elements table
ID |
Title |
Safety |
Status |
Tags |
|---|---|---|---|---|
Launch Manager Static View |
ASIL_B |
valid |
Verification & Safety Analysis Documents#
Presence of the standard verification and safety analysis work products for
this component. A dash (—) means the corresponding document is missing.
Show work products table
Work Product |
Kind |
Realized by |
Status |
||
|---|---|---|---|---|---|
Requirements Inspection |
|
||||
Architecture Inspection |
|
||||
Implementation Inspection |
|
||||
DFA |
|
||||
FMEA |
|
The following additional tables are used for checking traceability completeness.
Tracability of (valid) Feature Requirements to Component Requirements#
Valid feature requirements without any derived component requirements are highlighted in red.
Show component traceability table
Traceability of (valid) Feature Requirements to Feature Architecture#
Valid feature requirements without any linked feature architecture element are highlighted in red.
Show architecture traceability table
Traceability of (valid) Component Requirements to Component Architecture#
Valid component requirements without any linked component architecture elements are highlighted in red.
Show component architecture traceability table
ID |
Title |
Fulfils Back |
Status |
|---|---|---|---|
ASLR support |
valid |
||
Component activation timeout |
valid |
||
Component monitoring during runtime |
valid |
||
Component monitoring during startup |
valid |
||
Condition check based on at least one dependency |
valid |
||
Condition check for each SWC its dependencies |
valid |
||
Configurable amount of retries on startup |
valid |
||
Configurable delay between SIGTERM and SIGKILL |
valid |
||
Configuration of component activation timeout |
valid |
||
Configuration of component readiness conditions |
valid |
||
Configuration of Run Target activation timeout |
valid |
||
CPU runmask support |
valid |
||
CWD support |
valid |
||
Dangling dependency |
valid |
||
Dependency based startup order |
valid |
||
Dummy Component |
comp_arc_dyn__deadline_monitor__dynamic_view; comp_arc_dyn__health_lib_thread__dynamic_view; comp_arc_dyn__health_monitor__dynamic_view; comp_arc_dyn__health_monitor__shutdown_view; comp_arc_dyn__health_monitor__startup_view; comp_arc_dyn__heartbeat_monitor__dynamic_view; comp_arc_dyn__logic_monitor__dynamic_view; comp_arc_sta__deadline_monitor__static_view; comp_arc_sta__health_mon__hm; comp_arc_sta__health_monitor__static_view; comp_arc_sta__logic_monitor__static_view; real_arc_int__deadline_monitor__interface; real_arc_int__health_monitor__interface; real_arc_int__heartbeat_monitor__interface; real_arc_int__logic_monitor__interface |
valid |
|
File descriptor inheritance support |
valid |
||
Global process properties |
valid |
||
Handling process args |
valid |
||
Invalid dependency |
valid |
||
Launch manager external monitoring configuration |
valid |
||
Launch manager external watchdog notification |
valid |
||
Launch manager external watchdog notification - failed test |
valid |
||
Launch Manager shutdown |
valid |
||
Launching processes in parallel |
valid |
||
Launching run target |
valid |
||
Launching terminal |
valid |
||
Lazy check of configured commands |
valid |
||
Logging DAG |
valid |
||
Logging slog2 and file support |
valid |
||
Logging state transitions |
valid |
||
Logging timestamp |
valid |
||
Monitoring and recovery: recovery wait time |
valid |
||
Non-root support |
valid |
||
Normal shutdown |
valid |
||
Process capability support |
valid |
||
Process priority support |
valid |
||
Process state |
valid |
||
Process state notification |
valid |
||
Process user, group IDs support |
valid |
||
Ready Condition - File state |
valid |
||
Ready Condition - Lifecycle Interface |
valid |
||
Ready Condition - OS Process State |
valid |
||
Recovery by reactivating the component |
valid |
||
Recovery by switching the Run Target |
valid |
||
Resource limit support |
valid |
||
Run Target activation timeout |
valid |
||
Run target to component dependencies |
valid |
||
Run target to run target dependencies |
valid |
||
Scheduling support |
valid |
||
Security policy support |
valid |
||
Shutdown signal handling |
valid |
||
Standard handle redirection |
valid |
||
Stop timeout |
valid |
||
Supplementary group support |
valid |
||
Switch between run targets |
valid |