SNIP_ADAPTIVE_PLATFORM_FIGURE_Figure_7_27

Figure 7.27: ErrorRecoveryTable T o ensure that all errors are covered the following constraint is needed: [SWS_SM_CONSTR_00014] Handling of non-mapped ErrorCode ⌈Each ErrorRecoveryTable shall have exactly one entry configured with value ANY as the ErrorCode.⌋ The ANY entry will be used to change to the configured StateMachine State when a not configured ErrorCode is reported by Platform Health Management , Execution Management or State Management itself. During an active update session, handling of the recovery actions (see [SWS_SM_00601] and [SWS_SM_00664]) should be treated differently , depending on whether the StateMachine itself is "ImpactedByUpdate" [SWS_SM_00654] or not. Otherwise errors occurred during or after methods called by the Update and Configuration Management could result in StateMachines transiting to recovery StateMachine State , which might not be the intended action. [SWS_SM_00601] StateMachine error notification reaction of StateMachines not "ImpactedByUpdate" Upstream requirements: RS_SM_00001, RS_SM_00005 ⌈When an ErrorCode is reported and the StateMachine is not "ImpactedByUpdate", StateMachine shall: • set internal flag that error recovery is ongoing • evaluate the next StateMachine State configured for ErrorCode from ErrorRecoveryTable