| 摘要 |
PURPOSE:To prevent a system from being disabled from restoring by executing processing for starting the other watch-dot timer prior to transfer to fault analyzing processing and resetting the other watch-dog timer after completing the fault analyzing processing. CONSTITUTION:Prior to transfer to fault analyzing processing, the other watch- dog timer different from a program runaway preventing watch-dog timer is started and then reset after completing the fault analyzing processing. When the operation time (overflow time) of the watch-dog timer is properly set up, current processing can be transferred to emergency processing by the overflow of the other watch-dog timer even when a fault is generated in the fault analyzing processing and a loop including the reset of the program runaway preventing watch-dog timer is generated. Consequently, a fatal state disabling the system from restoring can be relieved. |
