+Requirement Model
- +Blinking LED
- +UART
+Logical Function Model
- Controller
- LED
- PC
- Button
- Blinking LED
- UART
+Software Model
- +Software
  - +Button
    - ButtonRead
    - +run_readButton
      - press_cnt
  - +LED
    - drv_LED
    - run_LED
  - +UART
- +RTE
  - +Activation Engine
    - Button Timebase
    - LED timebase
  - +Signal Layer
    - HWI LED
    - HWI_Button
    - button state
    - button_edge
    - button_cnt
    - HWO_UART
    - +Signal-Pools
      - Button
  - +System States
    - Blink
    - UART
    - +State-Handler
- +RTOS
  - Button
  - LED
  - UART
- +Linkage
  - +Output-Sections
  - +Protection-Sets
    - BaseProtection
    - UART
- +DataTypes
+Hardware Model
- +Nucelo-F446RE
  - +STM32F446RE
    - Arm® Cortex®-M4
    - main
    - +GPIO
      - PA5
      - PC13-TAMPER-RTC
    - USART
  - Button
  - LED
+Testing Model
- +Item Tests
  - (Test_128) Smoke-Test
- +Functional Tests
  - +Blinking LED
    - (Test_132) Regular blink
    - (Test_133) LED permanent ON
  - +UART
    - (Test_134) UART functional/system test

InDriver

ButtonRead

Reads the current button state from hardware

Warnings

Safety (2)

Safety Warnings for InDriver ButtonRead.
Safety warnings are related to the Requirements Layer, especially the SIL

ButtonRead has a SIL required of SIL_1 but a SIL achieved of QM

Multiple Technical functions for InDriver

ButtonRead: TechnicalFunction

Blinking LED, TechnicalFunction

UART

Diagrams

Relationships

Requirements Model

Logical Function Model

Software Model

Hardware Model

Safety

Required
The highest SIL derived from SafetyRequirements,Technical Functions and calling Runnables. SIL derived	SIL_1
This attribute allows to overwrite the derived SIL level. The result is the SIL effective attribute. SIL manual	derived
The reason why the derived SIL is ignored and an explicit SIL is set. reason
The SIL required for this implementation unit is defined by the derived SIL but can be overwritten by "SIL manual". SIL required	SIL_1
Achieved
The achieved SIL for this implementation unit. Has to be provided by the user. SIL achieved	QM
A justification why a certain SIL was achieved. justification

Properties

Base

Name

ButtonRead

Type

InDriver

Description

Reads the current button state from hardware

User-ID

InDriver_44

UID

_M4xQ4OZiEeyZ2OzYlvU4PA

software unit configuration

Parent

Button

WCET

Stack

ROM

driver configuration

DataType

uRTE_boolean_t

Is Synchronous

true

Hardware Components (1)

Hardware the driver communicates with.

Component	Type	Start	End	SIL required	SIL achieved	Sub-Components	Technical Functions	sub Technical Functions	Requirements	sub Requirements
PC13-TAMPER-RTC B1 [Blue PushButton] on the Nucleo Board	Periphery	GPIOC_BASE	GPIOD_BASE - 1	-	QM

Requirement Layer

(Safety)Requirements (1)

(Safety)Requirements referencing to InDriver ButtonRead.

(Safety)Requirement	Parent	User-ID	Author	Creation Date	Start Date	Deadline	Expense	Responsibe	Category	Type	Status	Justification	Function Type	SIL derived	SIL manual	SIL required	Tests	Technical Functions	Software	Other SW	Hardware	Signals	Global variables	Activation events	Use-Cases	User-Stories	Refining	Conflicting	refined by	conflicted by
SafetyRequirement_110 - Hardware Interfacing How to read and write data form and to hardware.	UART	SafetyRequirement_110	Thomas Barth	Thu Jun 09 20:50:22 CEST 2022			0.0	Thomas Barth	product	functional	approved		System_Function	QM	derived	QM			ButtonRead drv_LED								SafetyRequirement_111 - SignalLayer features Requirement_95 - UART

Functional Layer

Technical Functions (2)

Technical functions referencing to InDriver ButtonRead.

Function	LFB	Software	Hardware	Other Software	SIL required	SIL achieved	SIL justification	sub Technical Functions	Requirements	sub Requirements
Blinking LED An LED shall blink to indicate that the system is alive and responding.	Button Controller LED	run_LED drv_LED run_readButton ButtonRead	PA5		SIL_1	QM		Blinking LED UART	Requirement_32 - LED Blink Requirement_93 - LED Button SafetyRequirement_95 - Runnable activation by cyclic events Requirement_95 - UART	Requirement_32 - LED Blink Requirement_93 - LED Button SafetyRequirement_110 - Hardware Interfacing SafetyRequirement_111 - SignalLayer features Requirement_95 - UART SafetyRequirement_94 - Global variables Requirement_95 - UART
UART If the button is pressed, UART messages indicating the press duration are sent.	Button Controller PC	run_UART_send UART out run_UART_wakeUp run_readButton ButtonRead	USART		SIL_1	QM		Blinking LED UART	Requirement_95 - UART SafetyRequirement_93 - Runnable activation by signal events Requirement_95 - UART SafetyRequirement_94 - Global variables Requirement_95 - UART SafetyRequirement_95 - Runnable activation by cyclic events Requirement_95 - UART	Requirement_95 - UART SafetyRequirement_110 - Hardware Interfacing SafetyRequirement_111 - SignalLayer features Requirement_95 - UART SafetyRequirement_111 - SignalLayer features Requirement_95 - UART SafetyRequirement_115 - Protection Sets Requirement_95 - UART SafetyRequirement_94 - Global variables Requirement_95 - UART SafetyRequirement_98 - Multiple System-States Requirement_95 - UART

Software Layer

Data-Signals (1)

DataSignals directly using InDriver ButtonRead.

Signal	Storage	Runnables OUT	Runnables IN	Tasks	SystemStates	Requirements	miminum Age	maximum Age	Checksum	Force Sync	Inline	ISR API	effective inline	SIL required	SIL achieved	Initial value (D)	Pointer access (D)	Datatype (D)	Alt-In (D)	Alt-Out (D)	In-Driver (D)	Out-Driver (D)	OnData (D)	OnError (D)
HWI_Button Hardware interface for the button	local in .rtos.task.Button		run_readButton	Button	Blink UART		0	2	false	false	false	false	false	-	QM	false	false	uRTE_boolean_t			ButtonRead

Data-Signals (4)

DataSignals which are in the target chain of InDriver ButtonRead.

Signal	Storage	Runnables OUT	Runnables IN	Tasks	SystemStates	Requirements	maximum Age	Checksum	Force Sync	Inline	ISR API	effective inline	SIL required	SIL achieved	Initial value (D)	Pointer access (D)	Datatype (D)	Alt-In (D)	In-Driver (D)	Out-Driver (D)	OnData (D)
button state A representation of the current button state	local in .rtos.task.Button .rtos.task.LED .rtos.task.UART	run_readButton	run_LED run_UART_send	Button LED UART	Blink UART	SafetyRequirement_93 - Runnable activation by signal events Requirement_95 - UART SafetyRequirement_95 - Runnable activation by cyclic events Requirement_95 - UART SafetyRequirement_96 - Inter-task communication SafetyRequirement_97 - local and global signals Requirement_95 - UART SafetyRequirement_111 - SignalLayer features Requirement_95 - UART SafetyRequirement_97 - local and global signals Requirement_95 - UART	105	false	false	false	false	false	SIL_1	QM	false	false	uRTE_boolean_t		-		Runnable_run_UART_send_TPortIN_1 in run_UART_send
button_cnt contains the number of seconds, the button has been pressed	global in Button	run_readButton	run_UART_send	Button UART	Blink UART	SafetyRequirement_111 - SignalLayer features Requirement_95 - UART SafetyRequirement_96 - Inter-task communication SafetyRequirement_97 - local and global signals Requirement_95 - UART SafetyRequirement_111 - SignalLayer features Requirement_95 - UART SafetyRequirement_97 - local and global signals Requirement_95 - UART	202	true	false	false	false	false	QM	QM	0	false	button_cnt_t	uRTE_uint16_t	-
HWI LED Hardware interface for the LED	local in .rtos.task.LED	run_LED		LED	Blink UART		0	false	false	false	false	false	-	QM	0	false	uRTE_boolean_t		-	drv_LED
HWO_UART Hardware Out interface for UART. No Signal-Datatype will be defined so that a typedef will be generated into the signal configuration. Pointer access is granted so signal memory can be used directly by the application.	local in .rtos.task.UART	run_UART_send		UART	UART	SafetyRequirement_111 - SignalLayer features Requirement_95 - UART	0	false	false	false	false	false	QM	QM		true	If not type is defined, a type definition template will be generated into the signal configuration file. undefined		-	UART out

Runnables (1)

Runnables which use In- OR Out-signals with which InDriver ButtonRead is associated

Unit	Parent	Function calls	other Software Elements	Technical Functions	Requirements	Type	Tasks	WCET	Stack	ROM	Globals	ProtectionSets	SIL required	SIL achieved	sub Technical Functions	sub Requirements)	Has a return value	SystemStates	Ingoing Trigger Ports	Outgoing Trigger Ports	Ingoing Data Ports	Outgoing Data Ports
run_readButton Acquires the button state periodically and provides button signals	Button			Blinking LED UART	SafetyRequirement_94 - Global variables Requirement_95 - UART	Runnable	Button	0	0	0	press_cnt		SIL_1	QM	Blinking LED UART	SafetyRequirement_110 - Hardware Interfacing SafetyRequirement_111 - SignalLayer features Requirement_95 - UART	false	Blink UART	Runnable_run_readButton_Tick	Runnable_run_readButton_Edge_OUT	run_readButton_HW_IN	Runnable_run_readButton_Button_OUT Runnable_run_readButton_button_pressed_cnt

Runnables (3)

Runnables which are in the target chain of InDriver ButtonRead.

Unit	Parent	Technical Functions	Requirements	Type	Tasks	Globals	SIL required	SIL achieved	sub Technical Functions	sub Requirements)	Has a return value	SystemStates	Ingoing Trigger Ports	Outgoing Trigger Ports	Ingoing Data Ports	Outgoing Data Ports
run_readButton Acquires the button state periodically and provides button signals	Button	Blinking LED UART	SafetyRequirement_94 - Global variables Requirement_95 - UART	Runnable	Button	press_cnt	SIL_1	QM	Blinking LED UART	SafetyRequirement_110 - Hardware Interfacing SafetyRequirement_111 - SignalLayer features Requirement_95 - UART	false	Blink UART	Runnable_run_readButton_Tick	Runnable_run_readButton_Edge_OUT	run_readButton_HW_IN	Runnable_run_readButton_Button_OUT Runnable_run_readButton_button_pressed_cnt
run_LED Controls the LED signal and thus the LED	LED	Blinking LED	Requirement_32 - LED Blink Requirement_93 - LED Button	Runnable	LED		SIL_1	QM	Blinking LED	SafetyRequirement_110 - Hardware Interfacing SafetyRequirement_111 - SignalLayer features Requirement_95 - UART	false	Blink UART	Runnable_00_blink_Tick		Runnable_blink_Button_IN	Runnable_00_blink_OUT
run_UART_send Sends UART messages periodically via the UART signal	UART	UART	Requirement_95 - UART SafetyRequirement_111 - SignalLayer features Requirement_95 - UART SafetyRequirement_98 - Multiple System-States Requirement_95 - UART	Runnable	UART		SIL_1	QM	UART		true	UART	Runnable_run_UART_send_TPortIN_1		Runnable_run_UART_send_DPortIN_1 Runnable_run_UART_send_DPortIN_2	Runnable_run_UART_send_UART_OUT

Hardware Layer

Hardware Components (2)

Hardware InDriver ButtonRead is associated with. Including executing CPUs, hardware referenced by its protectionSets and its direct hardware references.

Component	Type	Start	End	SIL required	SIL achieved	Sub-Components	Technical Functions	sub Technical Functions	Requirements	sub Requirements
Arm® Cortex®-M4 Arm® 32-bit Cortex®-M4 CPU with FPU, Adaptive real-time accelerator (ART Accelerator) allowing 0-wait state execution from Flash memory, frequency up to 180 MHz, MPU, 225 DMIPS/1.25 DMIPS/MHz (Dhrystone 2.1), and DSP instructions	Core	-	-	-	QM
PC13-TAMPER-RTC B1 [Blue PushButton] on the Nucleo Board	Periphery	GPIOC_BASE	GPIOD_BASE - 1	-	QM