Finish monday
parent
b6749b36d1
commit
a0c0091bde
|
@ -63,9 +63,9 @@ This is some of the error handling real time programming have.
|
||||||
* Handling of unexpected errors
|
* Handling of unexpected errors
|
||||||
* More threads hanles errors
|
* More threads hanles errors
|
||||||
* Can not test the conventional way
|
* Can not test the conventional way
|
||||||
* Can only show extistence of errors
|
* Can only show extistence of errors
|
||||||
* Can not find errors in specification
|
* Can not find errors in specification
|
||||||
* Can not find race conditions
|
* Can not find race conditions
|
||||||
|
|
||||||
The fault path is shown under.
|
The fault path is shown under.
|
||||||
|
|
||||||
|
@ -103,8 +103,8 @@ To test how the systems responds for a unknown error is to insert a failed accep
|
||||||
**Dynammic redunancy**
|
**Dynammic redunancy**
|
||||||
|
|
||||||
* Relies on detecting the error and recovering
|
* Relies on detecting the error and recovering
|
||||||
* Resend if timeout and not receiving "ack"
|
* Resend if timeout and not receiving "ack"
|
||||||
* Go with default if no messages have been received
|
* Go with default if no messages have been received
|
||||||
* The acceptancetest must be good.
|
* The acceptancetest must be good.
|
||||||
|
|
||||||
|
|
||||||
|
@ -128,29 +128,29 @@ Find the failure modes: What could go wrong?
|
||||||
**Step 3: Handling with redundancy**
|
**Step 3: Handling with redundancy**
|
||||||
|
|
||||||
* Have multiple copies of the the information
|
* Have multiple copies of the the information
|
||||||
* Use only the newest
|
* Use only the newest
|
||||||
|
|
||||||
#### Example with communication function
|
#### Example with communication function
|
||||||
|
|
||||||
**Step 1: Failure modes**
|
**Step 1: Failure modes**
|
||||||
|
|
||||||
* Message
|
* Message
|
||||||
* Lost
|
* Lost
|
||||||
* Delayed
|
* Delayed
|
||||||
* Corrupted
|
* Corrupted
|
||||||
* Duplicated
|
* Duplicated
|
||||||
* Wrong recipient
|
* Wrong recipient
|
||||||
|
|
||||||
**Step 2: Detection, Merging of errormodes and error injection**
|
**Step 2: Detection, Merging of errormodes and error injection**
|
||||||
|
|
||||||
* Adding information to message
|
* Adding information to message
|
||||||
* Checksum
|
* Checksum
|
||||||
* Session ID
|
* Session ID
|
||||||
* Sequence number
|
* Sequence number
|
||||||
* Adding "ack" on well recieved messages
|
* Adding "ack" on well recieved messages
|
||||||
* All errors will be treaded as "Lost message"
|
* All errors will be treaded as "Lost message"
|
||||||
* Injection
|
* Injection
|
||||||
* Occasionally throw away some messages
|
* Occasionally throw away some messages
|
||||||
|
|
||||||
**Step 3: Handling with redundancy**
|
**Step 3: Handling with redundancy**
|
||||||
|
|
||||||
|
@ -179,7 +179,7 @@ There are three solutions:
|
||||||
* Store a checkpoint
|
* Store a checkpoint
|
||||||
* Do the "side effects"
|
* Do the "side effects"
|
||||||
2. Process pairs
|
2. Process pairs
|
||||||
* Crash and let an another process take over
|
* Crash and let an another process take over
|
||||||
3. Presistent processes
|
3. Presistent processes
|
||||||
|
|
||||||
|
|
||||||
|
@ -207,31 +207,31 @@ A transaction is a design framework for Damage Confinement and Error Recovery.
|
||||||
|
|
||||||
**Async Notification (AN) = Low level thread interaction**
|
**Async Notification (AN) = Low level thread interaction**
|
||||||
* Async event handling. ("Signals") (resumption)
|
* Async event handling. ("Signals") (resumption)
|
||||||
* Modeled after a HW interrupt
|
* Modeled after a HW interrupt
|
||||||
* Can be sent to the correct thread
|
* Can be sent to the correct thread
|
||||||
* Can be handled, ignored, blocked --> The domain can be controlled.
|
* Can be handled, ignored, blocked --> The domain can be controlled.
|
||||||
* Often lead to polling
|
* Often lead to polling
|
||||||
* Could rather skip the signal and poll a status variable or a message queue
|
* Could rather skip the signal and poll a status variable or a message queue
|
||||||
* Useless
|
* Useless
|
||||||
* ATC --> Async transfer of Control (termination)
|
* ATC --> Async transfer of Control (termination)
|
||||||
* Canceling threads
|
* Canceling threads
|
||||||
* setjmpt/longjmp could convert signals to ATC (not really, but still)
|
* setjmpt/longjmp could convert signals to ATC (not really, but still)
|
||||||
* ADA: a strictured mechanism for ATV is integraded with the selected statement
|
* ADA: a strictured mechanism for ATV is integraded with the selected statement
|
||||||
* RT Java: A structured mechanism for ATC is integraded with the exception-handling mechanism
|
* RT Java: A structured mechanism for ATC is integraded with the exception-handling mechanism
|
||||||
|
|
||||||
#### Cancelling threads
|
#### Cancelling threads
|
||||||
|
|
||||||
**Yes, killing threads is ATC!**
|
**Yes, killing threads is ATC!**
|
||||||
|
|
||||||
* Can make termination model by letting domain be a thread
|
* Can make termination model by letting domain be a thread
|
||||||
* "Create a `doWork` thread, and kill it if the action fails"
|
* "Create a `doWork` thread, and kill it if the action fails"
|
||||||
* Ca still control domain by disabling "cancelstate"
|
* Ca still control domain by disabling "cancelstate"
|
||||||
|
|
||||||
**But, but, but: It leaves ut in undifined state!?**
|
**But, but, but: It leaves ut in undifined state!?**
|
||||||
* Not if we have...
|
* Not if we have...
|
||||||
* Full control over changed state (like logs or recovery points) or some other way of recovering well.
|
* Full control over changed state (like logs or recovery points) or some other way of recovering well.
|
||||||
* A lock manager that can unlock on behalf of killed thread
|
* A lock manager that can unlock on behalf of killed thread
|
||||||
* Some control of where we were killed (like nok in the middle of a lock manager or log call)
|
* Some control of where we were killed (like nok in the middle of a lock manager or log call)
|
||||||
* An this is what we have!
|
* An this is what we have!
|
||||||
|
|
||||||
|
|
||||||
|
@ -284,24 +284,24 @@ while(true) {
|
||||||
|
|
||||||
{% highlight c %}
|
{% highlight c %}
|
||||||
/**
|
/**
|
||||||
* scheduler_registerThread(function, time, priority)
|
* scheduler_registerThread(function, time, priority)
|
||||||
* Higher priority numer means higher priority in scheduler
|
* Higher priority numer means higher priority in scheduler
|
||||||
*/
|
*/
|
||||||
main() {
|
main() {
|
||||||
scheduler_registrerThread(controlPump, 0.1, 3);
|
scheduler_registrerThread(controlPump, 0.1, 3);
|
||||||
scheduler_registrerThread(calculatePumpReference, 1, 2);
|
scheduler_registrerThread(calculatePumpReference, 1, 2);
|
||||||
scheduler_registrerThread(handleUserEvents, 0.2, 1);
|
scheduler_registrerThread(handleUserEvents, 0.2, 1);
|
||||||
scheduler_mainLoop();
|
scheduler_mainLoop();
|
||||||
}
|
}
|
||||||
{% endhighlight %}
|
{% endhighlight %}
|
||||||
|
|
||||||
**Some notes on priorities**
|
**Some notes on priorities**
|
||||||
* Priority is generally not important; rather, the main rule is to give higher priority to shorter-deadline tasks.
|
* Priority is generally not important; rather, the main rule is to give higher priority to shorter-deadline tasks.
|
||||||
* This allows tasks to reach its deadlines.
|
* This allows tasks to reach its deadlines.
|
||||||
* ... but this is not always the case - if e.g. the tasks are cooperating
|
* ... but this is not always the case - if e.g. the tasks are cooperating
|
||||||
* We still handle overload badly
|
* We still handle overload badly
|
||||||
* And: What connection between deadline and priority to start with?
|
* And: What connection between deadline and priority to start with?
|
||||||
* Is this a good dependency seen from a code quality perspective?
|
* Is this a good dependency seen from a code quality perspective?
|
||||||
|
|
||||||
### Pros and cons of nonpreemptive scheduling
|
### Pros and cons of nonpreemptive scheduling
|
||||||
|
|
||||||
|
@ -318,4 +318,59 @@ main() {
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
### Preemptive Kernel
|
||||||
|
|
||||||
|
* Preemption, thread objects and the timer interrupt
|
||||||
|
* Enabling synchronization: Busy waiting, tes-and-set, disabling the timer interrupt
|
||||||
|
* Blocking and suspend & resume
|
||||||
|
* An API for synchronization? Semaphores!
|
||||||
|
|
||||||
|
|
||||||
|
#### Preemption
|
||||||
|
|
||||||
|
* Make a handler for a timer interrupt
|
||||||
|
* Store all registers (including IP & SP) in a "thread object"
|
||||||
|
* Organize queue of processes (Round Robin e.g. - a collection of thread objects?)
|
||||||
|
* Can synchronize by: while(!ready); (busy wating, "spin locks")
|
||||||
|
|
||||||
|
**Bad solution**
|
||||||
|
|
||||||
|
{% highlight c%}
|
||||||
|
while(lock==1) {}
|
||||||
|
lock = 1;
|
||||||
|
// We may run
|
||||||
|
lock = 0;
|
||||||
|
{% endhighlight %}
|
||||||
|
|
||||||
|
**Better solution**
|
||||||
|
|
||||||
|
{% highlight c%}
|
||||||
|
void t1() {
|
||||||
|
flag1 = 1; // Declare my intention
|
||||||
|
turn = 2; // But try to be polite
|
||||||
|
while(flag2 == 1 && turn == 2) {}
|
||||||
|
// We may run
|
||||||
|
flag1 = 0;
|
||||||
|
}
|
||||||
|
{% endhighlight %}
|
||||||
|
|
||||||
|
##### Looking more closely at the arsenal
|
||||||
|
|
||||||
|
**How can we make basic synchronization under preemption?**
|
||||||
|
|
||||||
|
* Spin locks (wasting time and cpu)
|
||||||
|
* Test&Set (swap) assembly instruction (atomic, but not obvious)
|
||||||
|
* Disable interrupt (steals control from OS/scheduler)
|
||||||
|
|
||||||
|
**But**
|
||||||
|
* If we disable the timer interrupt we don not have preemption any more
|
||||||
|
* And... Are these good abstractions in the application programmer domain?
|
||||||
|
|
||||||
|
#### Blocked threads
|
||||||
|
|
||||||
|
**Let us introduce another queue; the collection of threads not running, waiting for something**
|
||||||
|
|
||||||
|
* Fixes the bad performance of spin locks. Is conceptually better.
|
||||||
|
* "Suspend" moves a thread object from "run" queue to "blocked" queue
|
||||||
|
* "Resume" moves it back.
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue