Hello,
is there any new swap code examples except that one in
Microcontrollers / AURIX customer documentation --> AURIX TC3xx --> 10 AURIX TC3xx HSM
which is (so do I think) a very simplify dem-implementation and risk-ful.
E.g.
- after adding a new address map configuration in UCB_SWAP the old one is not invalidated by overwriting with 0xFFFFFFFF
(see AP32404-Tutorial_AURIX_TC3xx_Using_SW...)
- it is also only checking the last startup state of swap enabled which could be modified meanwhile when UCB_OTPx is modified. But this would have an effect on the next startup.
I have implemented my swap functions with all needed checks (ca. 1000 lines of codes) to protect any kind of risk-ful condition before doing a system reset for swapping.
But: I don't know how the SSW is going through the UCB_SWAP to get the configuration (down to up or up to down?),
e.g. when there are multiple valid (confirmed) address mappings are listed. I assume it takes the last one (unless above demo would not work).
I didn't try to test this, not to risk a device lock.
e.g. what happens if all address mapping slots are empty (all zeros) or all are invalidated (0xFFFFFFFF), does it then scan UCB_SWAP_COPY or is the device locked?
e.g. what happens if confirmation code (address mapping) is neither Unlocked nor Confirmed, does it scan the next slot?
