the most advanced rtos technology - computer...

12
Green Hills Software The most advanced RTOS technology

Upload: others

Post on 21-Oct-2019

13 views

Category:

Documents


1 download

TRANSCRIPT

Page 1: The most advanced RTOS technology - Computer Scienceanderson/teach/comp790/papers/INTEGRITY_RTOS.pdf · tasks. The INTEGRITY kernel is itself protected in its own address space, along

G r e e n H i l l s S o f t w a r e

The most advanced RTOS technology

Page 2: The most advanced RTOS technology - Computer Scienceanderson/teach/comp790/papers/INTEGRITY_RTOS.pdf · tasks. The INTEGRITY kernel is itself protected in its own address space, along

Maximum performance, security, reliabilityFrom inception, the INTEGRITY RTOS was designed so thatembedded developers could ensure their applications metthe highest possible requirements for security, reliability,and performance.

To achieve this, INTEGRITY uses hardware memory protec-tion to create secure partitions that isolate and protectembedded applications. Secure partitions guarantee eachtask the resources it needs to run correctly and fully pro-tect the operating system and user tasks from errant andmalicious code—including denial-of-service attacks,worms, and Trojan horses.

Unlike other memory-protected operating systems,INTEGRITY never sacrifices real-time performance for security and protection.

Integrated middleware and platformsTo help developers jump-start product development, GreenHills Software offers an extensive array of middlewareintegrated and validated for INTEGRITY, including:s FFS, FAT, NFS and journaling file systemss IPv4/IPv6 host and routing networking stackss Network security protocolss Advanced layer 3 routing and layer 2 switching protocolss Complete Wi-Fi supports USB host stack, device stack and class driverss 2D, 3D and OpenGL graphics

Each of these middleware packages has been pre-integrated and tested to run seamlessly with and take full advantage of INTEGRITY’s advanced RTOS capabilities.

For selected industries, Green Hills Software offers plat-forms that provide a completely integrated ecosystem.Each platform includes the INTEGRITY RTOS as well asdevelopment tools, industry-specific middleware, referencehardware, and documentation. Platforms are available for:s automotive s secure mobile devicess avionics s secure networkings industrial safety s software defined radios medical devices s wireless devices

By combining all the core software and documentationinto a highly-integrated platform developers can:s more readily develop and deploy a targeted devices accelerate time-to-markets reduce development risks focus more on quality and innovation

Guaranteed securityINTEGRITY provides all the capabilities embedded design-ers need to enforce the policies of separation, damagelimitation, and information flow control as well as providesecure networking for today’s more complex and connect-ed applications.

INTEGRITY's Multiple Independent Levels of Security(MILS) separation kernel architecture provides a highlyrobust mechanism to separate security functions. A trueMILS kernel, INTEGRITY has been certified to EAL 6+ HighRobustness, the most rigorous Common Criteria securityevaluation ever achieved for a commercial operating system.

INTEGRITY's separation kernel protects against damagefrom errant or malicious code by preventing processesfrom writing beyond assigned memory regions. In addition,INTEGRITY’s partitions prevent unintended access to datafrom outside the partition where the data resides.

The INTEGRITY architecture supports multiple protected virtualaddress spaces, each of which can contain multiple applicationtasks. The INTEGRITY kernel is itself protected in its own addressspace, along with kernel-mode tasks.

The most secure & reliable RTOSThe flagship of our family of operating systems, the INTEGRITY

®

RTOS, is built around a microkernel architecture that provides embedded systems with total reliability, absolute security, and maximum real-time response. With its leadership pedigree underscored by certifications from a range of industries, INTEGRITY sets the standard for real-time operating systems.

Safety and security certificationsSince its release over 13 years ago, the INTEGRITYRTOS has received the following certifications andaccreditations that testify to its robustness, enablingdevelopers to achieve the highest levels of safety,security, and reliability in their designs.s FAA: DO-178B, Level As Common Criteria: EAL 6+ High Robustness, the highest

security level ever achieved for an operating systems FDA: Class II and Class III medical devicess IEC: Industrial safety 61508 SIL 3s CENELEC: Railway EN 50128 SWSIL 4

2

Page 3: The most advanced RTOS technology - Computer Scienceanderson/teach/comp790/papers/INTEGRITY_RTOS.pdf · tasks. The INTEGRITY kernel is itself protected in its own address space, along

Architected for reliabilityTraditional operating systems can crash, lock up, or execute uncontrollably, resulting in costly consequences—a lost satellite, a stalled car, a failing medical monitor. Butthe INTEGRITY RTOS protects both critical applications anditself from the malfunctions that can lead to these failures.

To do this, INTEGRITY provides guaranteed systemresources that ensure that CPU time and memoryresources will always be available to individual processes,no matter what any other process attempts to do.

Malicious or unintended events can deny access to systemresources and keep system processes from running asintended. To prevent these denial-of-service attacks,INTEGRITY can assign fixed budgets of CPU time andmemory to each process. By guaranteeing a time windowfor a particular process, these fixed budgets also preservethe integrity of other processes by preventing runningtasks from executing beyond their window.

True, hard real-time performanceAs one of the first RTOSes to leverage hardware memory-management units (MMUs), INTEGRITY is a true, hard real-time operating system that never sacrifices real-timeperformance for security and protection. INTEGRITY canrespond to events in nanoseconds, guaranteed.

All INTEGRITY kernel services have been carefully opti-mized to minimize the overhead of system calls. Complexsystem calls can be suspended to allow others to execute.INTEGRITY uses a true real-time scheduler that supportsmultiple priority levels and enables complete control overCPU percentage allocation.

The INTEGRITY RTOS always services the highest priorityinterrupt with absolute minimum latency. To guaranteethis, the kernel never masks or blocks interrupts. The kernelalso avoids instructions with long latencies that could temporarily block interrupts on some systems.

Meeting critical deadlinesWith the INTEGRITY RTOS, the kernel only uses the CPUtime resources the requesting process supplies to performthe requested services. Hidden execution time is further

avoided because kernel service times are bounded by ameasurable maximum kernel service time regardless of any process actions.

INTEGRITY also uses its unique highest locker semaphorecapabilities to prevent priority inversion. Priority inversioncan cause missed deadlines and execution failure when alower-priority task denies a higher priority task for anindeterminate amount of time.

Scheduling by partitionsThe INTEGRITY RTOS incorporates a multi-level optimizedenhanced partition scheduler (EPS)—with optional ARINC 653-1—that can guarantee a specific percentage ofCPU time support to a given address space regardless ofother system or process events. For each partition, the EPSdesignates a CPU time window to always be available fortasks within that address space. The EPS also enforces theCPU time window boundaries to prevent bugs, maliciouscode, viruses, and hacker intrusion from adversely affectingtasks in other partitions.

Guaranteed memory resourcesThe INTEGRITY RTOS protects memory many ways:s from exhaustions from damages from unauthorized access

INTEGRITY’s unique memory quota system keeps oneaddress space from exhausting the memory of any other.

To ensure adequate kernel memory, INTEGRITY requiresthat kernel memory not be used for messages, semaphores,or other kernel objects created in response to processrequests. Instead, the kernel performs all services request-ed by a process using the memory resources that therequesting process supplies.

To prevent the risk of user stack overflow, INTEGRITY’s kernel has its own memory stack. Without this, the kernelwould need to access the user process’ stack. But this canlead to problems because it is impossible for the user pro-cess to anticipate the maximum stack size if it is subject touse by unknown code (i.e., the kernel).

To guarantee minimum interrupt latency, the INTEGRITY kernelnever blocks masks or interrupts even while manipulating criticaldata structures.

INTEGRITY incorporates an optional ARINC-653 two-level partitionscheduler.

3

Page 4: The most advanced RTOS technology - Computer Scienceanderson/teach/comp790/papers/INTEGRITY_RTOS.pdf · tasks. The INTEGRITY kernel is itself protected in its own address space, along

s Optional mode to require all running tasks have samepriority … aids in porting from single-core

s Support for both natural and user-defined core affinitys “Smart SMP locks” for far fewer kernel locks than other

SMP OSes

INTEGRITY secure virtualizationINTEGRITY Secure Virtualization™ (ISV) is a robust andportable virtualization infrastructure with an architectureflexible enough to handle the wide variety of hardwarecapabilities available across today’s microprocessors. ISVmaximizes the use of available hardware virtualizationfacilities while minimizing or eliminating modifications toguest operating systems.

On hypervisor acceleration-enabled processors such asIntel VT, Freescale QorIQ, and ARM TrustZone, ISV supportshigh performance “full virtualization” where no changes tothe guest operating system are needed.

On processors lacking hypervisor mode assistance, ISVapplies carefully crafted, minimally intrusive modificationsto the guest operating system to maximize performancewithout sacrificing ease of migration and portability.

INTEGRITY® Multivisor™—Green Hills Software’s ISV imple-mentation for multicore processors—provides flexible andpowerful mechanisms for managing cores. The Multivisorcan statically bind guest operating systems to cores, in anAMP model, or dynamically schedule workloads in a SMPmodel, depending on system requirements.

Multicore and embedded virtualization supportEmbedded microprocessor trends, including hypervisor modes and multicore, are paving the way for anew breed of system software architectures in embedded systems. INTEGRITY's flexible deploymentmodels, including AMP, true SMP, and integrated Multivisor virtualization technology, enable compellingnew applications and capabilities.

Advanced multicore supportThe modern architecture of INTEGRITY is well suited formulticore processors targeting embedded systems.INTEGRITY provides complete AsymmetricalMultiprocessing (AMP) and Symmetrical Multiprocessing(SMP) support that is optimized for embedded and real-time use. Embedded system designers can select themultiprocessing architecture that is right for the task.When coupled with the advanced multicore debuggingfeatures found in the Green Hills MULTI® tool suite,developers will reduce their time-to-market whileincreasing system performance and reliability.

INTEGRITY AMP supportWith AMP, one instance of the INTEGRITY kernel runs oneach processor core. User applications are separated andstationary on a given core and each core owns its ownarea of memory. AMP is well suited for heterogeneousCPUs and offers a potential for higher performance andefficiency than other multicore architectures. It also pro-vides deterministic behavior while providing the designercontrol over the choice of core where the process willexecute.

INTEGRITY SMP supportSMP was a natural extension for the existing INTEGRITYarchitecture due to its simple microkernel design, fast anddeterministic interrupt response time, and policy of notdisabling interrupts in the kernel. INTEGRITY’s SMP sup-port does not disturb its real-time guarantees. In addition,INTEGRITY middleware is implemented as processes inuser space and is easily distributed to cores.

INTEGRITY SMP Features:s Advanced separation kernel architecture with security

and safety certified pedigrees Automatically runs n highest priority tasks on n cores

… for better determinism

4

INTEGRITY’s flexible multicore processor support provides userswith a wide range of system architecture possibilities whiledelivering real-time deterministic performance with secure,reliable separation policies

INTEGRITY Multivisor: combining general purpose guest operat-ing systems with a comprehensive ecosystem of real-time appli-cations, middleware, and drivers.

Page 5: The most advanced RTOS technology - Computer Scienceanderson/teach/comp790/papers/INTEGRITY_RTOS.pdf · tasks. The INTEGRITY kernel is itself protected in its own address space, along

Integrated platforms and middlewareBuilt on the INTEGRITY separation kernel, Green Hills Platforms provide complete, pre-integrated solutions customized to application-specific requirements for a range of applications. By bringingtogether all the tools and middleware required, Green Hills Platforms enable manufacturers to reduceboth development cost and time-to-market.

Automotive platform Green Hills offers developmentsolutions for all automotive electronicsubsystems—powertrain, body, chas-sis and infotainment. For chassis andpowertrain software development, the

MULTI IDE provides state-of-the-art compilers (with built-inMISRA C checker), debuggers, simulators, and profilingtools and is optionally available with tightly integratedMathworks™ and UML® 2.0 solutions.

For infotainment, INTEGRITY Secure Virtualization (ISV) cansecurely host any legacy or future infotainment operatingsystems like Windows® or Linux® and simultaneously exe-cute hard real-time control modules on the same processor.

Avionics platformINTEGRITY has a long-running historyof successful deployment in numerouscommercial and military aircraft. ThePlatform for Avionics combines theINTEGRITY (or INTEGRITY®-178B)

RTOSes, support for the aviation industry standard ARINC653-1 application software interface, and the documenta-tion required for FAA safety certification. INTEGRITY-178Bhas been certified to the FAA’s most stringent standard forflight-critical avionics systems, RTCA/DO-178B Level A.

Industrial safety platformWith its focus on safety and reliability,INTEGRITY is ideal for systems in theindustrial, rail, automotive, and nucle-ar industries that require safety certifi-cations. The INTEGRITY and velOSity ™

RTOSes have been certified by TÜV and exida for EN 61508functional product safety at Safety Integrity Level 3 (SIL3),and CENELEC EN 50128 SWSIL4. This platform includes thepre-certified INTEGRITY RTOS, integrated middleware, aswell as the SIL3 / SWSIL4 certification report and safetymanual.

Medical devices platformThe Platform for Medical devices wasdesigned to meet FDA requirementsfor up to Class III medical devices,the most stringent type of FDA certifi-cation. Along with INTEGRITY, this

platform includes integrated middleware for networking,file systems, USB, embedded databases, graphics, andvideo as well as an integrated design, development, andverification toolset for the entire software life cycle.

Secure mobile devices platformThe Platform for Secure Mobile Devicescouples a high security microkernelwith virtualization features. INTEGRITYcontrols the mobile device’s applica-tions microprocessor, memory, and I/O

devices, and ISV hosts one or more instances of “guest”mobile operating systems, such as Linux or WindowsMobile®. The platform also provides a software developmentkit device manufacturers and service providers can use toincorporate secure applications and manage critical datathat cannot be compromised.

Secure networking platformINTEGRITY, with its EAL6+ pedigree,provides the features and policiesthat can thwart even the most wellthought-out or funded hacker attacks.This platform secures the network

device at its core—the operating system level—and alsodelivers a complete suite of integrated RFC-compliant net-working middleware, including a mature IPv4/v6 TCP/IPstack, IP networking applications, security protocols, layer 2switching, layer 3 routing, H.323, wireless LAN, NDDS,CORBA, and more.

Software defined radio platformThe Platform for Software DefinedRadio (SDR) provides standards-basedRTOS, tools, and middleware for devel-oping SDR systems that range fromthe armed forces’ Joint Tactical Radio

Systems (JTRS) to public safety radios to commercial smallform-factor reconfigurable radios. This platform complieswith Software Communications Architecture (SCA) OperatingEnvironment and includes the POSIX-conformant INTEGRITYRTOS, a TCP/IP stack, CORBA, SCA core framework, andwaveform development solutions and reference platforms.

Wireless devices platformFor developers building electronicdevices that require secure wirelessconnectivity, this platform integratesINTEGRITY with mainstream wirelesschipset drivers and a complete, mature

supplicant agent. These software technologies are validatedtogether on a commercial hardware reference platform. Fordevices that require compatibility with Cisco® enterprisedeployments, a CCX Client is available to provide Ciscocompatibility where required.5

Page 6: The most advanced RTOS technology - Computer Scienceanderson/teach/comp790/papers/INTEGRITY_RTOS.pdf · tasks. The INTEGRITY kernel is itself protected in its own address space, along

IPv4/IPv6 networkingINTEGRITY supports comprehensive IPv4/IPv6 networkingcapabilities that offer a choice of advanced solutionstailored to meet the demands of your end product. Builtspecifically for embedded applications, the stack appliesadvanced algorithms for optimized performance andscalability and goes through extensive protocol confor-mance and interoperability testing.

The networking suite was developed from the groundup to address the specific needs of embedded systemsand span a range of applications: wireless, automotive,consumer, residential, gateways, enterprise routers,cellular infrastructure and cellular handsets.

File systemsINTEGRITY supports a wide variety of file systems, includ-ing UNIX-like file systems, DOS/FAT 12/16/32, ISO9660,Wear Leveling NOR/NAND Flash File Systems, Network FileSystems, and others. INTEGRITY’s file system frameworkmodel, commonly referred to as a virtual file system (VFS),makes it easy to add and remove support for these variousfile systems or add your own. INTEGRITY provides addi-tional advanced file system functionality:s Partitioning Journaling File System (PJFS) Library

The PJFS Library is a high reliability file server for saferecovery from power failure and quick boot. It preservesdata integrity through transactional journaling andclient partitioning.

INTEGRITY’s TCP/IP stack provides a comprehensive set of industrystandard protocols in a high-performance, scalable stack.

The GateD family of routing and switching software supports allrequisite Layer 2 and Layer 3 protocols and provides a processor-neutral, comprehensive control plane and data plane solution fornext-generation carrier devices.

Advanced routing and switchingGreen Hills Software’s GateD® family of routing and switch-ing software is a processor-neutral, comprehensive controland data plane solution that provides complete sourcecode for layer 2 switching and layer 3 routing protocols.

For next-generation carrier devices, GateD productssupport all requisite Layer 2 and Layer 3 protocols—including OSPF, BGP, MP-BGP, OSPFv3, RIP, ISIS, VRRP, PIM,DVMRP, MSDP, STP, RSTP, GVRP, VLAN, IGMP, GARP, andmore—and have been integrated, validated and testedwith INTEGRITY and the IPv4/v6 router stack, GHNet™.Because this complete stack (OS+TCP/IP+L2+L3) has beenpre-integrated and validated, customers can significantlyreduce time-to-deployment, increase device reliability andsecurity, and lower development costs for their products.

All the GateD protocols have been integrated with arobust, configurable and extensible Command LineInterface (CLI) for device management. The GateD CLImodule provides complete configuration and managementfunctionality for both the control and data-plane software,covering everything from static routing to routing withBGP, OSPF, and more.

The scalability of the code, complete RFC-compliant func-tionality, and extent of product integration and validationmake these commercial-grade protocols ideal for inclusionin any carrier-grade core, edge, or aggregation devicebeing developed today.

6

Page 7: The most advanced RTOS technology - Computer Scienceanderson/teach/comp790/papers/INTEGRITY_RTOS.pdf · tasks. The INTEGRITY kernel is itself protected in its own address space, along

Complete wireless supportFor devices that need wireless LAN (WLAN) interfaces,INTEGRITY couples its own robust security capabilities with support for the latest IEEE 802.11 and Wi-Fi Alliancestandards, including:s static and dynamic WEPs WPA and WPA2 in both personal and enterprise modes the full range of 802.1X Extensible Authentication

Protocol (EAP) typess Wi-Fi Protected Setup (WPS) for easy network setup

For devices that require compatibility with Cisco enterprisedeployments, a CCX Client is available to provide a certification-ready device stack.

USB solutionsIn addition to complete USB 1.1 and high-speed USB2.0 host and device stacks, numerous class drivers andexample applications for using both types of stacks areavailable for INTEGRITY. These products enable you toquickly and easily add USB connectivity to your applications.

INTEGRITY supports 3D graphics—including OpenGL—via leading-edge embedded products from ALT Software.

To jump-start development of devices that need wireless connec-tions, INTEGRITY has been pre-integrated with a full package ofindustry-standard security protocols and reference hardware.

7

Available board support packages The INTEGRITY RTOS comes with a variety of board support packages (BSPs) that help jump-start development. INTEGRITYBSPs provide board memory initialization and support for many peripherals including serial and Ethernet devices. INTEGRITYcan be stored in ROM or flash memory, and most BSPs include support for easy flash programming. INTEGRITY provides asimple API for easy access to flash memory.

Reference BSPs and associated hardware support are available for boards from these vendors:s Advanced Micro Devices (AMD) s Advantech s Aitech Defense Systems s AMCC/AMPs Analog Devices s ARM, Ltd. s Atlas s Atmels Avnet s Axiom s BAE s Creative Electronic Systems (CES)s Cirrus Logic s Cogent s Curtiss-Wright Corporation s Data Devicess Digi s Embedded Planet s Emerson s Eurotechs Freescale Semiconductor s Fujitsu s GE Intelligent Systems s General Dynamicss Goodrich s IBM s IDT s Intels Kontron s Lockheed Martin s LogicPD s Lucents MAI Logic Teron s Marvell s MEN Mikroelektronik s MIPS Technologiess NEC s North Atlantic s Phytec s Pico Computings Rockwell-Collins s SHARP Microelectronic s ST Microelectronics s Tews Technologys Texas Instruments s Thales Computers s Toshiba s X-ESs Xilinx

USB Host and Device Controller LibrariesA USB device controller library simplifies the task of writingUSB device driver code. It handles most of the generic USBand IODevice details, allowing the user to concentrate onproduct-specific requirements. A USB 2.0 host stack usesstandard UHCI, OHCI, and EHCI controllers.

Supported Class Drivers:s Mouse, keyboard and hubs Audio class for output devicess Mass storage classs Communications class

Media solutionsThe Portable Embedded GUI (PEG) provides a comprehen-sive library for creating 2D graphical user interfaces fortouch screens and LCD displays while requiring a minimalmemory footprint. 3D graphics—including OpenGL—andhighly tuned graphics accelerator drivers for next genera-tion displays, are also integrated with INTEGRITY.

Page 8: The most advanced RTOS technology - Computer Scienceanderson/teach/comp790/papers/INTEGRITY_RTOS.pdf · tasks. The INTEGRITY kernel is itself protected in its own address space, along

INTEGRITY Project WizardWith the Project Wizard, you can easily create INTEGRITYapplications or projects with just a few clicks. Workingthrough a graphical interface, you can select from variousproject attributes, such as the desired BSP, the number ofaddress spaces desired, and whether the image will beloaded dynamically or statically defined. The ProjectWizard also provides a selection of shared libraries, filesystems, TCP/IP stacks, resource analysis, and debugagents.

Event logging with the EventAnalyzerWith the powerful EventAnalyzer™ you can readily under-stand the complex real-time interactions of your system.Important OS events such as semaphore calls, task con-text-switches, and interrupts are logged on the target inreal-time. Event information is then transferred to the hostwhere it is displayed graphically in the EventAnalyzer GUI.You can fully control and configure event logging and evencreate your own user-defined events.

INTEGRITY can log system events in postmortem or livemodes. In postmortem mode, data is gathered on thetarget with minimal overhead. You can upload the eventlog upon request—such as after a failure—and analyzethe information to determine the root cause of the failure.In live mode, data is continually sent to the host via TCP/IPor serial, allowing a virtually unlimited history of data tobe collected and analyzed as the system runs.

The EventAnalyzer GUI provides convenient navigationfeatures such as zooming and searching and also lets youselectively hide various events. In addition, theEventAnalyzer's one-click source code correlation makeslow-level analysis easy and convenient.

INTEGRITY simulatorsWith the INTEGRITY simulator (ISIM), you can develop andtest your embedded INTEGRITY-based applications withoutthe need for target hardware. ISIM simulates the samebinary code that runs on the target processor for morerealistic results than conventional native simulators. Userscan simulate the complete INTEGRITY API, including virtualmemory, peripherals, and TCP/IP.

System viewing with ResourceAnalyzer Customized for the INTEGRITY RTOS, the ResourceAnalyzeris an advanced run-time analysis tool that helps you trackand visualize CPU and memory usage statistics for theentire system. With this information, you can maximize theefficiency of tasks and address spaces and improve overallsystem performance.

The Integrate utilityThe Integrate™ utility is a unique industry-leading innova-tion that enables you to establish an initial state of tasks,connections, and other kernel objects across multipleaddress spaces to verify system security and guaranteeresource availability. Through Integrate’s easy-to-use yetpowerful interface, you can configure all resources in theentire INTEGRITY system, including address spaces, clocks,tasks, semaphores, connections, etc.

Integrate generates a formatted printable configurationfile that is used in building the INTEGRITY application.Integrate reads the configuration file and displays thecontents graphically, so that address spaces and operatingsystem objects can be easily viewed.

Integrate provides a powerful, easy-to-use interface for graphically visualizing the initial system state.

Create, debug, and optimize with easeA powerful suite of multicore-enabled, OS-aware graphical development and analysis tools enablesyou to easily configure, debug, and optimize your INTEGRITY applications. These tools can guide youthrough creating complex INTEGRITY applications, graphically configuring resources for an entiresystem, and visualizing a myriad of system events.

Any event displayed in the EventAnalyzer view window can beselected for debugging with a single click, opening a debug window showing that event’s source code, ready to debug.

8

Page 9: The most advanced RTOS technology - Computer Scienceanderson/teach/comp790/papers/INTEGRITY_RTOS.pdf · tasks. The INTEGRITY kernel is itself protected in its own address space, along

MULTI integrated development environmentThe Green Hills MULTI IDE includes the industry’s mostpowerful and proven tools for developing, debugging,and optimizing embedded software in C, C++, EC++,and MISRA C. MULTI runs on Windows, Unix®, Linux, andHP-UX® hosts and provides a direct graphical interface forall Green Hills compilers, supporting remote debugging toINTEGRITY targets. With its wide array of sophisticatedtools, MULTI can help reduce development and manufactur-ing costs and improve device performance and reliability.

DoubleCheck™

DoubleCheck™ is a powerful static analysis tool used to findbugs early in development, when they can be fixed moreeasily. It can quickly analyze large pieces of code spanningmany source files and identify bugs caused by complexinteractions. Built in to the compiler, DoubleCheck makes iteasy to automate debugging with project building, avoidingthe need for external tools or complicated scheduling.

TimeMachine™ debugging suiteGreen Hills Software’s TimeMachine™ suite offers a widevariety of trace analysis tools that enable embedded soft-ware developers to find and fix bugs faster, optimize withease, and test with confidence. The TimeMachine debuggercombines a familiar debugger interface with innovativefunctionality that enables developers to step and runforward and backward through their code.

MULTI ProfilerThe MULTI Profiler offers code coverage reports that makeit easy to determine what blocks and source lines have notbeen executed. You can use this information to betterunderstand program execution, complete your test suite, orquickly identify performance bottlenecks.

PathAnalyzerBy providing a graphical view of an application's call stackover time, the TimeMachine Suite's PathAnalyzer helpsidentify incorrect execution paths, inefficiencies in code,and anomalous bugs caused by events such as unexpectedinterrupts or random glitches.

Optimizing compilersGreen Hills Software’s world class C, C++, Embedded C++,MISRA C, and Ada Compilers support the INTEGRITY RTOS.These optimizing compilers consist of a language-specificfront-end, a global optimizer, and a target-specificoptimizer and code generator.

Conformance to key industry standards provides increasedcompatibility across different projects and source codefiles. The Green Hills C compilers fully conform to ANSIX3.159-1989 Standard C (ISO/IEC 9899 and FIPS PUB 160)and support multiple programming language dialectsincluding Strict ANSI, Permissive ANSI, Transition Mode,MISRA C, K+R, and GNU C. The Green Hills C++ librariesare scalable and tuned for the specific level of C++ sup-port requested. Green Hills Optimizing C++ Compilers sup-port multiple dialects including Standard (ANSI/ISO) C++,C++ as defined by The Annotated C++ Reference Manual(ARM, by Ellis & Stroustrop), Embedded C++ (EC++), andEmbedded C++ with Templates. Extensive C++ dialect sup-port includes conformance for namespaces and templates,and GNU C/C++ extension compatibility used to build theentire Linux kernel.

Simplified migrationTo support legacy and third-party code reuse and integra-tion, the INTEGRITY RTOS can host applications written fora different environment. Developers can integrate legacyapplications, such as those that use Linux, VxWorks® or

other operating systems with very limitedrecoding. API support for other operating systems can also be provided.

With the INTEGRITY RTOS’ conformant POSIXAPI calls and/or ISV technology, Linux appli-cations can run on INTEGRITY with minimalto no effort or change. A basic VxWorks APIlayer supports core VxWorks service callsfor Message Queue and Semaphore, Task,Watchdog, and kernel space interruptservices.

The TimeMachine debugger interface is integrated with advanced analysis tools such asthe PathAnalyzer, which shows your call stack over time.

9

Page 10: The most advanced RTOS technology - Computer Scienceanderson/teach/comp790/papers/INTEGRITY_RTOS.pdf · tasks. The INTEGRITY kernel is itself protected in its own address space, along

Multiple-task debuggingThe MULTI IDE provides multiple-task debugging for a vari-ety of configurations running INTEGRITY. Each task can berunning on a different processor, the same processor, theISIM simulator, or any combination of these environmentsfor true heterogeneous multiprocessor debugging.

Advanced multiple-task debugging features include:s The ability to debug multiple tasks across multiple

address spaces across multiple processors simultaneously,each task has it own color-coded debugger window.

s A task roster window for tracking the tasks in thesystem and choosing which tasks to debug. The taskwindow shows useful per-task information such asname, execution status, priority, stack size, and stackuse (high watermark).

s The ability to automatically bring up a new debuggerwindow upon task creation.

s The ability to set task-specific as well as address space-wide (also called “AnyTask”) breakpoints.

s Simultaneous multiple-task debugging support overboth serial and Ethernet for most boards.

s Host emulation of file and terminal I/O.s The ability to display the relative execution time of all

tasks (including the “idle” task).

Kernel awarenessMULTI provides a comprehensive picture of INTEGRITYkernel objects, tasks and resources, and their statuses.Even without source, developers can view a completesnapshot of INTEGRITY’s state, and can debug and viewvirtual address spaces.

INTEGRITY debug agentINTEGRITY includes a powerful debug agent that enablesremote debugging of multi-processor systems—includingboards and chassis—from a single hardware networkconnection (TCP/IP Ethernet or serial) to the host and asingle instance of the MULTI IDE.

INTEGRITY shellINTEGRITY provides a target shell, networkaccessible via telnet or rlogin, that enablesyou to communicate directly with the target,even before any application code is running.The shell enables loading and unloading ofmodules independent of MULTI, FTP, listingof tasks and modules, setting network con-figuration, reading/writing target memory,and performing file system services.

Extensive kernel visibilityThe tight integration between the MULTI IDE and INTEGRITY RTOS provides extensive visibility into kernel events. With unprecedented views into kernel data structures, task roster, and resources, systemdevelopers can more easily track down bugs and finely tune systems performance to meet applicationsrequirements.

10

The INTEGRITY object browser gives the developer a detailed yet simple to navigatesnapshot of the entire kernel state, including threads, semaphores, memory regions, andI/O devices.

Supported processorsThe INTEGRITY Architecture Support Package (ASP) provides CPU initialization, exception handling, and fast context-switching for the following processor families:s AppliedMicro Power Architecture s IBM Power Architectures Analog Devices Blackfin s Intel x86/IA/Atoms ARM Ltd. ARM s Marvell XScales Cavium Networks OCTEON s MIPS Technologies MIPSs Freescale ColdFire s Texas Instruments DaVincis Freescale Power Architecture s Texas Instruments OMAP

Page 11: The most advanced RTOS technology - Computer Scienceanderson/teach/comp790/papers/INTEGRITY_RTOS.pdf · tasks. The INTEGRITY kernel is itself protected in its own address space, along

Training sessionsGreen Hills Software holds scheduled training sessionsthroughout the year in a variety of international locations.Through both lectures and hands-on exercises, attendeesare taught how to: s apply RTOS concepts to their designss leverage key INTEGRITY features in their applications s determine the best mechanism to accomplish a specific

objective using the INTEGRITY RTOSs and much more

Express and Intensive training sessions are offered toaccommodate a range of familiarity with the INTEGRITYRTOS as well as developers' busy schedules. The Expresstraining includes a quick overview of the INTEGRITY RTOS,while the Intensive training exposes attendees toadvanced concepts and techniques used to get the most ofGreen Hills Software’s products. The Intensive training alsoallows for the flexibility to focus on those concepts of par-ticular interest to attendees.

Quick Start programGetting started with a new RTOS can take time. GreenHills Software developed the Quick Start program toensure that you will be up to speed developing softwareas quickly as possible.

After studying how new customers get familiar with oursoftware, we developed the components of the Quick Startprogram to address every stage of a new project ramp up.This can include on-site installation and configuration ofthe INTEGRITY RTOS, custom board support packagedevelopment, application porting, product customization,tool interface development, and general training.

On-site support and consultingWe understand that some challenges are sooner overcomethrough on-site contact. We also recognize live coaching asa valuable tool to gain better understanding and receivethe full benefit of INTEGRITY and related products. To thisend, Green Hills Software offers on-site support and con-sulting with expert engineers.

Custom engineering services Green Hills Software is world-renowned as the leader inembedded software technology. But some applicationshave very particular requirements that are difficult toanticipate. For these situations, Green Hills Software creat-ed our Custom Engineering Services Division, a group thatspecializes in custom software development. These engi-neers can add special features, customize existing prod-ucts, and invent new technologies. You tell us what youneed, and we deliver it exactly how and when you need it.

Training and consulting servicesExpert training from Green Hills Software consultants allows developers using INTEGRITY to becomeproductive faster and to learn how to take full advantage of the power of INTEGRITY and integratedproducts.

Partner ecosystemINTEGRITY is integrated with a variety of popular thirdparty embedded products, including:s SNMP Research—SNMP s aicas—Javas Visuality Systems—CIFS s Averna—IEEE 1394s Data Connection—ATM s Raima—RDBMs iAnyWhere—Bluetooth s RTI—NDDSs Stollmann—Bluetooth s Aonix—Javas DeviceScape—Wi-Fi s Presagis—OpenGL/X11s ACE/TAO Open Source ORB s KW Software—SoftPLCs McObject—in memory databases M-System—solid state memorys Swell Software—Portable Embedded GUI (PEG)s Vector Software—Unit Level Testings Objective Interface—CORBAs Allegro Software—internet applicationss ALT Software—OpenGL/X11s Embedded Planet—hardware platformss IBM Rational Rhapsody—UML 2.0 application modelings RadVision—VOIP, SIP, RTP/RTCPs Esterel—SCADE software modelings Altia—Graphics building toolss TeamF1—Kerberos, K509, TACACS+s Virtutech—system virtualizations 3S Smart Software Solutions—CoDeSys IEC 61131-3

development systems CriticalBlue—multicore analysis toolss Ixxat—industrial data communications protocolss HCC Embedded—file system solutionss TTTech Computertechnik—time-triggered protocolss Nokia Qt—application and UI framework11

Page 12: The most advanced RTOS technology - Computer Scienceanderson/teach/comp790/papers/INTEGRITY_RTOS.pdf · tasks. The INTEGRITY kernel is itself protected in its own address space, along

Green Hills Software, the Green Hills logo, INTEGRITY, MULTI, TimeMachine EventAnalyzer, PathAnalyzer, ResourceAnalyzer, GateD, GHNet, Integrate, ISIM, DoubleCheck, velOSity, and µ-velOSityare trademarks or registered trademarks of Green Hills Software, Inc. POSIX is a registered trademark of IEEE. All other trademarks are (registered or otherwise)

are the property of their respective companies. © 2010 Green Hills Software, Inc. 0610

Corporate Headquarters30 West Sola Street s Santa Barbara, CA 93101 s ph: 805.965.6044 s fax: 805.965.6343

email: [email protected] s www.ghs.com

European HeadquartersFleming Business Centre s Leigh Road s Eastleigh s Hampshire SO50 9PD s United Kingdom

ph: +44 (0)2380.649660 s fax: +44 (0)2380.649661 s email: [email protected]

Embedded Safety & Security Critical Products34125 US Hwy 19 North s Suite 100 s Palm Harbor, FL 34684 s ph: 727.781.4909

fax: 727.781.3915 s email: [email protected]

Network Design Center825 Victors Way s Suite 100 s Ann Arbor, MI 48108 s ph: 734.222.1610

fax: 734.222.1602 s email: [email protected]