Arm
®
CoreLink™ GIC-600AE Generic Interrupt Controller
Technical Reference Manual
Document ID: 101206_0003_04_en
Issue: 04
Functional Safety
Any variation in arrival times between the primary and shadow at the subordinate or in the ready
assertion at the manager causes the lockstep blocks to lose sync. As a result, a fault is flagged. To
prevent this fault, the ADB must ensure the primary and shadow are always two cycles apart, or a
temporal delay of two cycles, when they exit the ADB.
6.9.1.2 BAS switch
The BAS switch is partially duplicated.
There is no detection in the duplicated switch itself. Instead, fault detection occurs at the endpoint
blocks or the ADB. Therefore, there is no fault wire exiting the switch.
6.9.1.3 Register slice
The register slice is partially duplicated.
Although the register slice has a Q-Channel interface, the interface must be synchronous to that
clock domain by using an LPD-500. Therefore, it does not need to be protected by any special
means of asynchronous protection. Faults that appear on the Q-Channel interface or logic are
addressed in one of the following ways:
•
If the faults are benign, the register slice absorbs them.
•
If the faults are not benign, they are passed downstream for detection. The downstream block
can be one of the main blocks that contains fault detection mechanisms. It can also be the
LPD-500 itself, because it has fault detection mechanisms and a fault wire to report the faults.
6.9.2 Non-GIC interconnect IP
Any interconnect that supports AXI4-Stream-compliant interfaces can be used to connect the GIC
blocks.
The GIC-600AE can be configured to have AMBA
®
parity protection on the AXI4-Stream interface.
This interface is adequate for protecting wires and buffers that connect a GIC block to any
non-GIC interconnect IP in a point-to-point configuration. This allows the GIC to connect with any
unprotected legacy AXI4-Stream interconnect IP.
In this mode, the GIC-600AE generates the parity for the interface outputs, checks the parity for
interface inputs, and flags a fault if there is a mismatch.
If the parity protection is not needed, tie off the extra parity inputs and program the GIC-600AE to
disable this protection.
Copyright © 2018–2020, 2022 Arm Limited (or its affiliates). All rights reserved.
Non-Confidential
Page 228 of 268
To Next Page
Loading...