RISC-V Summit 2022

We will explain the process used to qualify the C and C++ standard libraries for safety-critical applications. It is based on the ISO 26262 automotive Functional Safety standard. It can be used for the qualification of in-house, third-party, and open-source libraries. Qualification needs a requirements-based test suite that shows the link between the library specifications (from the ISO standards for C and C++) and tests. To translate the specification into requirements is a significant effort. We will show examples of how to extract requirements from the library specification. The next step is to define test specifications. Where the requirement defines what must be tested, the test specification describes how that is done, and guides the definition of the test itself. Coverage analysis (MC/DC) is required for ASIL D. It demonstrates completeness of the test suite. There are good tools for code coverage analysis of C code. For C++, additional care is needed because of template code in the headers, which is evaluated at compile time only. In the presentation, we will show you what we have learned from creating SuperGuard, a requirements-based test suite for C.