1 of 9

ADAS firmware crash condition: SVnet app service startup. Perception CAN data send from SOC -> MCU

MCU crash at image V0.010.38.0. Through CCS analysis attach what happen when happen crash/hang

In the LFC_FUNC_step(), the LFC_LIB_LFC_FUNC_Array_Write5() lfc_ADAS_Lib.c 1187 have happen memory overwrite status

R4 = 0xA1AB3210

add r0, r4, r5, lsl #2: r0=r4+r5*4. r0 = 0xA1AB35CC

vstr s16, [r0, #-4]: s16 register value store into address [r0 - 4]. 0xA1AB35C8

1

2

3

4

6

7

5

2 of 9

3 of 9

R4 = 0xA1AB3210

add r0, r4, r5, lsl #2: r0=r4+r5*4. r0 = 0xA1AB35CC

vstr s16, [r0, #-4]: s16 register value store into address [r0 - 4]

4 of 9

R4 = 0xA1AB3210

add r0, r4, r5, lsl #2: r0=r4+r5*4. r0 = 0xA1AB35CC

vstr s16, [r0, #-4]: s16 register value store into address [r0 - 4]

5 of 9

6 of 9

執行跳出LFC_LIB_LFC_FUNC_Array_Write5

7 of 9

gIpcNotifyMailboxConfig array被overwrite掉了

8 of 9

再執行LFC_LIB_LFC_FUNC_Array_Write5

R4 = 0xA1AB3210

add r0, r4, r5, lsl #2: r0=r4+r5*4. r0 = A1AB35D0

vstr s16, [r0, #-4]: s16 register value store into address [r0 - 4]

9 of 9

gIpcNotifyMailboxConfig array被overwrite掉了