SNIP_CLASSIC_APPLICATIONLEVELERRORHANDLING_SECTION_10_3_1_2_Protection_Hook

10.3.1.2 Protection Hook The system has a single global Protection Hook. The Protection Hook is called by the OS when a protection violation occurs, and its role is to decide which action is to be performed as a reaction to the error. The Protection Hook is called with a parameter value indicating the detected violation. The Protection Hook can query which OS- Application5 caused the violation and then decide on necessary actions the OS shall perform once the hook returns (see above). If no protection hook is configured, the OS will call ShutdownOS(). The return value of the protection hook defines further action performed by the OS.  PRO_IGNORE: Do nothing  PRO_TERMINATETASK: Forcibly terminate the faulty Task/Category 2 OsIsr  PRO_TERMINATEAPPL: Forcibly terminate the faulty OS-Application  PRO_TERMINATEAPPL_RESTART: Forcibly terminate the faulty OS-Application and trigger the execution of the OSRestartTask.  PRO_SHUTDOWN: Call ShutdownOS(). It is expected that the integrator, together with the application designer, decides on the error handling strategy, i.e., whether to perform a termination, restart, error filtering etc. When an application-level request for termination or restart is issued (for details, see Section 10.3.2.4), the decision is already taken and the OS only executes the request. The Protection Hook is not executed for such an externally triggered termination or restart. Terminating or restarting an OS-Application is an activity solely performed in the OS. In order to terminate or restart a partition, there are a set of cleanup activities which have to be performed in the BSW and potentially also in the SW-Cs of the partition. These cleanup activities will be placed in the OSRestartTask which is only triggered when the return code from the Protection Hook is PRO_TERMINATEAPPL_RESTART. Important: For terminating or restarting a partition, the Protection Hook must return PRO_TERMINATEAPPL_RESTART in both cases. Otherwise there will be no opportunity to perform clean-up activities.