sample_safety_analysis
Overview
Failure Mode |
Guidewords |
ASIL |
Interface |
|---|---|---|---|
|
B |
|
|
|
D |
|
Failure Modes
SampleLibrary.SampleFailureMode
LossOfFunction
ASIL B
sample_seooc_api.safety_software_seooc_example_SampleLibraryAPI_GetNumber
The world as we know it will end
SampleFailureMode takes over the world
Root Causes
Source: sample_fta.puml, line 25
JustBadLuckAssessed ASIL B Not applicable
The component is deterministic and has no random behavior, so luck cannot influence its outcome.
Source: sample_fta.puml, line 31
CookiesAndCoffeeAssessed ASIL B Not applicable
Only family size cookie jars are ordered and an emergency coffee reserve is kept on hand, so these root causes do not apply.
Source: sample_fta.puml, line 30
CookiesAndCoffeeAssessed ASIL B Not applicable
Only family size cookie jars are ordered and an emergency coffee reserve is kept on hand, so these root causes do not apply.
Source: sample_fta.puml, line 26
ShmemCreatedWrongNameAssessed ASIL B
The user prevents the wrong name through the assumption of use.
SampleAoU Assumption of Use ASIL B v1
It shall be made sure that shared memory segments are never created with the wrong name (ShmemCreatedWrongName)
SampleLibrary.SampleFailureMode2
TooLate
ASIL D
sample_seooc_api.safety_software_seooc_example_SampleLibraryAPI_GetNumber
Downstream consumers time out
SampleFailureMode2 responds too late
Root Causes
Source: sample_fta2.puml, line 25
OverrunAssessed ASIL D Not applicable
The component runs synchronously in the thread of its caller, without blocking calls or queues, so it has no execution time that could overrun and no response that could be late.
Source: sample_fta2.puml, line 24
OverrunAssessed ASIL D Not applicable
The component runs synchronously in the thread of its caller, without blocking calls or queues, so it has no execution time that could overrun and no response that could be late.
Fault Trees
sample_fta.puml
sample_fta2.puml
Safety Measures
SampleAoU Assumption of Use ASIL B v1
It shall be made sure that shared memory segments are never created with the wrong name (ShmemCreatedWrongName)