Synchronizing cross checked processors during initialization by miscompare
View Patent ↗A few inexpensive hardware facilities are incorporated in a tightly synchronized cross checked design. These facilities allow initialization software to quickly bring the two processors to the same state by rapid, repeated resets and execution of the initialization software. The resets are done in a way as to be transparent to the rest of the system and to the end user.
1. Method of verifying master processor operation comprising:
providing a checker processor;
executing a same instruction stream by the checker processor as the master processor, the instruction stream includes instructions for initializing the master processor and checking processor, the instructions are expected to generate at least one miscompare when executed during an initialization sequence at start up time before the master processor and checking processor have been initialized for the first time, wherein an initial execution of the instruction stream comprises execution of the series of instructions for generating the at least one miscompare;
comparing outputs of said master processor and said checker processor and outputting an error signal if at least one miscompare occurs; and
detecting the error signal and determining whether the master processor is to issue a restart signal for restarting execution of the same instruction stream, wherein the restarting comprises a subsequent re-execution of the series of instructions without generating the at least one miscompare.
2. Method according to claim 1 , further comprising:
providing a reset register and storing therein a total number of restart signals issued by the master processor; and
determining not to issue a restart signal if the total number of restart signals stored in the reset register exceeds a predetermined number.
3. Method according to claim 2 , wherein the determining step further comprises: the master processor issuing a system failure state signal.