SPRUJB6B November 2024 – May 2025 AM2612
Each R5F subsystem (R5FSS) in the device implements two instances of the RL2_OF modules that can run in lockstep. RL2 instances run in sync with the R5F CPU lockstep mode of operation, to detect faults that may result in unsafe operating conditions. The CCM-RL2_OF detects faults and signals them to the SOC error signaling module. Figure RL2_OF Lockstep Implementation shows the safety lockstep implementation of the RL2_OF modules.
Figure 13-204 RL2_OF Lockstep
ImplementationInput Handling:
Identical inputs are provided to both RL2_OF module copies CCM-RL2_OF compares all outputs from both copies, including:
Error Detection:
CCMR compare error is triggered if outputs from the two copies mismatch
To prevent common mode failures:
During lockstep mode, outputs are clamped to inactive safe values