JP3458796B2 - Interruption instruction check device and recording medium - Google Patents

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a technique for checking an interrupt prohibition / permission command described in a processing program for executing an interrupt process.

[0002]

2. Description of the Related Art For example, in a control program used in an electronic control unit (hereinafter referred to as "ECU") mounted on a vehicle, it is necessary to execute a predetermined process in real time in order to ensure control responsiveness and safety. is there. Therefore, such processing requiring real-time processing (real-time processing) is generally prepared as an interrupt routine different from the main routine. The interrupt routine is preferentially executed during execution of the main routine, for example, triggered by the occurrence of an event. The priority execution means that the execution of the main routine is temporarily interrupted by the execution of the interrupt routine, and after the interrupt routine ends, the main routine is executed again from the interrupted position.

In recent years, the control program of the above-mentioned ECU also operates on an OS (operating system), and the execution states of the main routine, interrupt routine, etc. are called tasks and are managed by the OS. There is. A level (task level) indicating the execution priority is set for this task, and the interrupt processing as described above is realized based on this task level. That is, O
Under the control of S, the higher-level task, which is a relatively high-level task, has priority (interrupts) over the lower-level task, which is a relatively low-level task. In the example described above, the process by the main routine corresponds to the lower task, and the process by the interrupt routine corresponds to the upper task.

The introduction of such a task concept eliminates the need to describe the execution timing between programs just by extremely simple information description of setting a task level, and facilitates the design of interrupt processing. On the other hand, the upper task interrupts at a timing that is not related to the processing timing of the lower task, such as the occurrence of an event. Therefore, a problem may occur in the lower task. Here, one case will be described regarding a problem caused by an interrupt of a higher-level task.

Consider, for example, the case where a common variable is operated by the upper task and the lower task. This common variable is stored in a storage area that can be commonly accessed by these functions when the entire program is composed of a plurality of functions, for example, and is called a global variable (global variable). At this time, the lower-level task reads this variable twice in the two processing steps A and B, and executes the processing assuming that the variables read in the two processing steps A and B have the same value. To do. On the other hand, the upper task rewrites this variable in processing step C. Under such a premise, after the processing step A of the lower task is executed, when the upper task interrupts, the variable value is rewritten in the processing step C, and then the variable value read in the processing step B is processed. A situation occurs in which the variable value read in step A changes.

Therefore, it is indispensable to describe an interrupt prohibition / permission instruction in the program of the lower task as needed. The interrupt prohibition instruction prohibits the interrupt of the upper task, and the interrupt permission instruction enables the interrupt of the higher task. That is, the upper task cannot be interrupted in the middle of the processing step sandwiched by the interrupt prohibition instruction and the interrupt permission instruction. Therefore, in the case described above, the interrupt prohibition instruction is described before the processing step A in the program of the lower task, and the interrupt permission instruction is described after the processing step B. In this way, since the higher-level task does not interrupt during the processing from processing steps A to B sandwiched between the interrupt prohibition instruction and the interrupt permission instruction, the variable value read in processing step A The variable value read in processing step B does not change.

[0007]

As described above, interrupt processing is an indispensable technique for executing real-time processing.
It was easily designed by the development of computer technology such as task management by OS. On the other hand, on the other hand, if the interrupt prohibition / permission command is not properly described, the technology of the dead end will not exert its effect.

For example, if the interrupt prohibition instruction is omitted, the variable may be rewritten at an inappropriate timing as described above. Further, when the interrupt permission instruction is omitted, the variable is not rewritten by the upper task, or it is delayed, so that the real-time processing is impaired.

Conventionally, with respect to each of the global variables as described above, a portion in which a failure is caused by an interrupt of a higher-level task is specified, and whether or not an interrupt prohibition / permission instruction is described before or after the portion is handled. There was a current situation in which it was checked by work. Therefore, this check work requires a great number of man-hours.

The present invention has been made in order to solve the above-mentioned problem, and in a plurality of processing programs that handle common global variables, an interference portion of global variables that may cause a failure due to interrupt processing. For the purpose of automatically checking that the interrupt prohibition / permission instruction exists at the proper position, and contributes to the reduction of the man-hours for the check work.

[0011]

Means for Solving the Problems and Effects of the Invention An interrupt instruction check device according to claim 1 made to achieve the above-mentioned object is a source program composed of a plurality of processing programs as execution units. I am trying. For example, in the case of a program whose tasks are managed on the OS, a task is generated for each processing program.

This source program is described in detail. It is subdivided in processing program units or in smaller units. For example, taking a function-type program as an example, a function is a unit of subdivision, and a plurality of functions constitute one processing program.

Further, the execution priority is preset for each of the above-mentioned processing programs, and the source program realizes a series of functions by performing interrupt processing between the processing programs based on this execution priority. Is. In the example described above, the task level set for each task corresponds to the “execution priority order” here. Therefore, the control program that controls the engine and the like by realizing the real-time processing by the upper task interrupting the lower task is an example of the source program here.

The interrupt instruction checking device targets such a source program and checks an interrupt prohibition / permission instruction in a lower processing program which may be interrupted by a higher processing program. In the above example, the interrupt instruction written in the program of the lower task interrupted by the upper task is checked. It should be noted that the upper processing program means a program having a relatively high execution priority among the above processing programs, and conversely, the lower processing program has a relatively low execution priority among the above processing programs. Say. Since it is “relative”, a plurality of lower processing programs may exist for a certain upper processing program. Conversely, there may be a plurality of upper processing programs for a certain lower processing program. Further, a program that is an upper processing program for a certain processing program may be a lower processing program for another processing program.

Specifically, each of the following means checks the interrupt instruction. The program reading means reads the source program. It is conceivable that the program reading means reads the source program stored in the storage means inside the apparatus. Further, the source program stored in the server connected to the outside may be read.

The execution priority order information acquisition means acquires information indicating the execution priority order set in advance for each processing program described above. If the program is a task managed on the OS, the above task level information is acquired. The execution priority information may be created in advance and provided from the outside, but may be created inside the device. This is because, for example, in C language, the execution priority is generally described in the definition file. Therefore, as described in claim 6, the execution priority order information acquiring means may create and acquire the execution priority order information based on the description of the source program read by the program reading means. This is advantageous in that the user does not need to create the execution priority information in advance.

When the source program and the execution priority information are obtained by the program reading means and the execution priority information acquisition means in this way, the interrupt instruction judging means makes the following judgment based on these information. . In other words, if the writing process for the global variable commonly used by the upper processing program and the lower processing program is in the upper processing program, it is assigned to an appropriate position according to the processing description position of the global variable in the lower processing program. Judge that there is an interrupt prohibition instruction and an interrupt permission instruction.

When the interrupt command determining means makes such a determination, the output means outputs the determination information based on the determination. The judgment information based on the judgment can be information as to whether or not there is an interrupt prohibition / permission command.
Further, in addition to or instead of such information indicating the presence or absence, information that can be acquired at the time of the determination, for example, in what line of the program the process description related to the global variable is,
In what line the interrupt prohibition / permission command exists, or
It may be information such as which of the interrupt prohibition instruction and the interruption permission instruction is missing.

An interrupt prohibition / permission command is required in the lower processing program because, for example, when writing processing to a global variable is performed in both the upper processing program and the lower processing program, the writing to the global variable is performed in the upper processing program. This occurs when there is a global variable write process in the higher-level processing program, such as when the lower-level processing program performs the read process for the global variable.

Therefore, in the present invention, by using the execution priority information, if the writing process of the global variable is in the upper processing program, the proper position according to the processing description position related to the global variable in the lower processing program. It is judged that there is an interrupt prohibition / permission command in and the judgment information based on the judgment is output.

It should be noted that the interrupt instruction judging means has an interrupt prohibition instruction immediately before the processing description relating to the global variable in the lower processing program and an interrupt permission instruction immediately after the processing description. In addition, it is conceivable to judge that the interrupt prohibition / permission command exists at the proper position (claim 2). In other words, it is sufficient to prevent an interrupt from occurring in the process of reading and writing global variables.
Disable interrupts immediately before the read or write process,
It is appropriate to permit interrupts immediately after that from the viewpoint of real-time interrupt processing.

In particular, if the global variable read processing is performed a plurality of times in the lower processing program, an interrupt prohibition instruction exists immediately before the first read processing description of the plurality of read processing, and the last read processing is performed. When an interrupt permission command exists immediately after the process description, it is possible to determine that the interrupt prohibition / permission command exists at the proper position (claim 3). This is because if the read processing of a plurality of times is sandwiched between interrupt prohibition / permission instructions in this way, the value of the global variable read a plurality of times will not change due to an interrupt.

By using the above configuration, in a plurality of processing programs that handle common global variables, it is possible to extract the interfering portion of the global variables that may cause a failure due to the interrupt processing, and disable / interrupt. It is possible to check whether the permission command is written in the proper position. Therefore, the user can quickly modify the source program based on the judgment information from the output means. As a result, the man-hours required for the check work can be extremely reduced.

By the way, a structure embodying the above-mentioned interrupt instruction judging means is shown in claim 4. In this configuration, the interrupt instruction judging means includes a total of four means, that is, a variable searching means, a processing judging means, a program specifying means, and an execution priority specifying means. The variable search means searches for a global variable in the source program read by the program reading means. Then, the processing judging means refers to the description in the source program read by the program reading means, and the processing relating to the global variable searched by the variable searching means is a reading processing or a writing processing. To judge.

The program specifying means specifies the processing program in which the retrieved global variable is used or the unit program constituting the processing program. Specifying a unit program means that the processing program may consist of multiple functions, for example.
In that case, it means specifying the function as a unit program.

When the processing program or the unit program is specified by the program specifying means, the execution priority specifying means specifies the execution priority of the program based on the execution priority information. As a result, it is specified whether the program in which the detected global variable is used is the upper processing program (belonging to) or the lower processing program (belonging to).

Therefore, the interrupt instruction judging means writes the execution priority of the specified processing program (or unit program) and the judgment result by the processing judging means, that is, whether the processing related to the global variable is the reading processing. It is determined whether the interrupt prohibition instruction and the interrupt permission instruction are present at the above-mentioned proper positions by using the determination result of whether it is the interrupt processing.

In this configuration, global variables are searched for,
The programs that use the retrieved global variables are specified, and the execution priority of those programs is specified. That is, since the information is organized based on each global variable, the processing content is easy to understand, and the designer can easily design the processing. For example, when each of the above-mentioned means is realized as a function of a computer system, its program design becomes easy.

When the processing program is composed of a plurality of unit programs, the above-mentioned execution priority specifying means specifies the execution priority of those unit programs. Therefore, at this time, it is premised that the execution priority information set for each processing program is also set for each unit program at the same time.

However, the execution priority information created based on the information of the definition file in the source program is, for example, the function f1 and the function f1 of the processing program.
When it is composed of three functions, that is, a function f11 called from the function f11 and a function f12 called from the function f11, it is general that only the function f1 executed first is described. Therefore, when the global variable is used in the function f11 (unit program), the execution priority order of the function f11 cannot be specified from such priority order information.

Therefore, on the premise that the processing program is composed of a plurality of unit programs, the method according to claim 5
Further, as shown in FIG. 5, further provided is a call information searching means for searching call information between the unit programs constituting the processing program, and the execution priority specifying means is a call searched by the execution priority information and call information searching means. The execution priority of the unit program may be specified based on the information.

In the above-mentioned example, the call information searching means searches for call information between unit programs. In the above example, the functions f1 to f11 are called and the function f11 is called.
To search for a call to the function f12. That is, the "call information" referred to here is "f1
The information is “→ f11 → f12”, which is a so-called call tree. If such call information is used, it can be seen that the execution priorities of the function f1 and the function f11 are the same, even if the execution priority information is added in association with the function f1. The execution priority of can be specified.

By the way, it has already been described that the output means outputs the determination information based on the determination by the interrupt instruction determination means.
Specifically, the output means may output the result file to the storage means, for example (claim 7). This storage means may be internal or external to the apparatus. Also, in addition to or instead of the output to the storage means,
It is conceivable to output to a display means (claim 8).

Further, in the above-mentioned configuration, it is described that the user corrects the description of the source program based on the judgment information output from the output means. On the other hand, for example, as described in claim 9, a program correcting means is provided, and the program correcting means has an interrupt prohibition instruction or an interrupt permission instruction at an appropriate position based on the judgment information output from the output means. If not, the source program may be modified so that the interrupt prohibition / permission instruction comes to the proper position. In this case, not only the checking of the interrupt prohibition / permission command but also the program correction is automatically performed, which is convenient for the user.

The function of realizing the program reading means, the execution priority information obtaining means, the interrupt instruction judging means and the output means of such an interrupt instruction checking device in a computer system is activated, for example, on the computer system side. It can be provided as a program. In the case of such a program, for example, it can be used by recording it on a computer-readable recording medium such as a floppy disk, a magneto-optical disk, a CD-ROM, a hard disk, and loading it into a computer system and activating it as necessary. it can. In addition, the program may be recorded in advance by using a ROM or backup RAM as a computer-readable recording medium, and the ROM or backup RAM may be incorporated into a computer system for use.

[0036]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described below with reference to the drawings. FIG. 1 is an explanatory diagram showing an outline of a system including an interrupt instruction check device 10 embodying the present invention.

The interrupt instruction check device 10 of this embodiment is
It is connected to an external storage device 20 and a display device 30. The interrupt instruction check device 10 includes a CPU,
It is provided with a ROM, a RAM, an I / O, etc., and is configured as a so-called computer system.

The storage device 20 is a mass storage device such as a hard disk device. The storage device 20 may be locally connected to the interrupt instruction check device 10, or may be connected via a network, for example. That is, it is conceivable that the computer is connected via a network and can be accessed from a computer system other than the interrupt instruction checking device 10. In this way, the data in the storage device 20 can be written to or read from another computer system.

The display device 30 is a display device using a CRT or liquid crystal. This interrupt instruction check device 1
0 is the source program 2 stored in the storage device 20.
1, the task level table 22 and the environment file 23 are read, and it is checked that an interrupt prohibition instruction and an interruption permission instruction are described at appropriate positions in the source program 21, and the check result is stored as a result file 24. It is stored in the device 20 and is output to the display device 30. Therefore, if the storage device 20 is made accessible from another computer system as described above, the source program 21, the task level table 22, and the environment file 23 are created in another computer system and stored in the storage device 20. You can keep it. Further, the check result can be referred to by another computer system.

First, the source program 21, the task level table 22, and the environment file 23 read by the interrupt instruction checking device 10 will be described. The source program 21 is finally installed in a predetermined microcomputer such as an ECU, and is compiled / linked and executed on the OS. This source program 21
It is written in C language and is an aggregate of a plurality of functions.
Then, these functions are divided into several function groups and executed in units of this function group. The processing execution state of each function group is O described above as a task.
Managed by S. Therefore, this function group corresponds to a “processing program”, and each function corresponds to a “unit program” that constitutes the processing program.

The task level table 22 describes the task level as the "execution priority" of the above-mentioned function group. Therefore, the task level table 22 corresponds to “execution priority information”. Specifically, for example, when a certain function group is composed of four functions, function f1, function f11 called from function f1, function f12 and function f13 called from function f11, the function to be executed first The task level is described for f1. In this specification, the function to be executed first in the function group is described as a “main function”, and the function subordinate to the main function is described as a “sub function”.

The task level table 22 is illustrated in FIG. Main functions f1, f2, f3, f4, ...
-The task level is described in correspondence with each. In the example illustrated in FIG. 2, the following description will be continued on the assumption that the smaller the task level numerical value, the higher the execution priority. In FIG. 2, the main function f1 has a task level “1”, and the main function f2 has a task level “2”. Similarly, the main function f3 has a task level "6", and the main function f4 has a task level "3".
Has become.

Therefore, for example, the function group of the main function f1 (hereinafter referred to as "function group 1") has a higher execution priority than the function group of the main function f2 (hereinafter referred to as "function group 2"). ing.
That is, when actually executed on the OS, the process based on the function group 1 can interrupt the process based on the function group 2. Interruptible means that during execution of processing based on function group 2, if there is an execution command for processing based on function group 1, processing based on function group 2 is temporarily interrupted and processing based on function group 1 is executed with priority. It means that the processing based on the function group 2 is executed again from the interruption position after the processing based on the function group 1 is completed. That is, the function group 1 is a “upper processing program” for the function group 2, and the function group 2 is a “lower processing program” for the function group 1.

In FIG. 2, the smaller the task level numerical value is, the higher the execution priority is. However, in the opposite case, the larger the task level numerical value is, the higher the execution priority is. The task level table 22 may be entered. Information indicating the description format of the task level table 22 is described in the environment file 23 described below.

The environment file 23 is a file for setting the interrupt instruction check device 10. For example, regarding the task levels in the task level table 22 described above, information indicating that the smaller the numerical value is, the higher the execution priority is, or conversely, the larger the numerical value is, the higher the execution priority is described. The interrupt instruction check device 10 absorbs the difference in the description format of the task level table 22 and the source file 21 based on the environment file 23. As a result, the interrupt instruction check device 10 operates for a plurality of types of sole files 21 and task level tables 22. For example, when the storage device 20 is connected to different computer systems, the same processing can be performed based on the source files 21 and task level table 22 of different description formats that are respectively output and stored from those computer systems.

As described above, the interrupt instruction check device 10 of this embodiment
Explained the information read by. Next, the operation of the interrupt instruction check device 10 will be described. Here, the purpose of checking by the interrupt instruction checking apparatus 10 will be described first, and then the detailed operation will be described.

As described above, the source program 21 is
It is executed in the function group unit, the task level is set in the function group unit, and the interrupt processing is realized between the function groups. At this time, there is a possibility that the same variable will be manipulated by the upper function group having a relatively high task level and the lower function group having a relatively low task level. This same variable is defined as a global variable and can be commonly used among the function groups. When such an identical global variable is manipulated by the upper function group and the lower function group, a malfunction may occur in the lower function group.
This is because, as described in the related art, when the global variable is operated in the lower function group, the same global variable is operated by the interrupt of the upper function group. Therefore, in the lower function group, interrupt prohibition / permission instructions are described before and after the processing description related to the global variable, and the interruption of the upper function group is temporarily prohibited.

The interrupt instruction checking device of this embodiment is intended to check that this interrupt prohibition / permission instruction is written in the proper position. FIG. 3 is a functional block diagram of the interrupt instruction checking device 10. As shown in FIG. 3, the interrupt instruction checking device 10 includes a variable table creating block 11, a call tree creating block 12,
A variable attribute table creation block 13 and an interference detection / check block 14 are provided. Below, each block 11
The operations of 14 to 14 will be described.

The variable table creation block 11 creates a variable table based on the source program 21. The variable table, as shown in FIG.
The function name, the number of lines, and the distinction between writing and reading are described. The numbers (1) to (5) shown in the leftmost column of the variable table are added for convenience of explanation of the description in the variable table.

The variable table creation block 11 is
Perform the process according to the procedure. A global variable in the source program 21 is searched. The retrieved global variable is written in the column of "global variable name" in the variable table. Get the function in which the retrieved global variable is used. The acquired function is written in the "function name" column of the variable table.

It is specified which line in the function (file in which the function is described) obtained above the processing description related to the global variable corresponds to. The specified number of lines is written in the "number of lines" column of the variable table. It is determined whether the process description of the number of lines specified above is a global variable write process or a global variable read process. In the case of the writing process, "○" is written in the "write" column of the variable table, while in the case of the reading process, "○" is written in the "read" column of the variable table.

For example, in the case of (3) shown in the variable table of FIG. 4, the process of creating the variable table from the actual source program 21 will be concretely shown. For example, the description will be continued assuming that the description shown in FIG. 5 exists in the source program 21. At this time, the global variable Val3 is searched in the source program 21 (above), and the function used by the global variable Val3 is obtained (above). Figure 5
As can be seen from the above, the functions f2 and f4 are acquired.
Therefore, as shown in FIG.
For 3, the function names f2 and f4 are described.

Next, it is specified which line of the functions f2 and f4 the processing description relating to the global variable corresponds (above). As shown in FIG. 5, the fifteenth line of the function f2, the function f4
If there is the processing description in the 7th line of ",""15" and "7" are specified as the number of lines and written in the variable table. As shown in FIG.

Then, it is determined whether the process description related to the global variable is a global variable write process or a global variable read process (above). In the case of a writing process (substitution process), a global variable is described on the left side of "=". On the other hand, in the case of read processing, a global variable is described on the right side of "=". In the function f2, the global variable Val3 is described on the left side of "=", so it is determined to be the writing process. On the other hand, in the function f4, the global variable Val3 is described to the right side of the "=", and it is determined to be the reading process. . As a result, the variable table shown in FIG.
"Write" in correspondence with the processing description on the 15th line of the function f2
"○" is written in the column of "," and "○" is written in the column of "reading" corresponding to the processing description of the seventh line of the function f4.

The call tree creation block 12 creates a call tree as "call information" based on the source program 21. Specifically, the process of calling a sub function in the above-mentioned main function is searched, and if there is the process of calling the sub function, the process of calling the sub function is further searched in the sub function. Identify the relationships within a so-called nested function group. In this way, the call tree as shown in FIG. 6 is created. FIG. 6 illustrates a part of the created call tree. The call tree shown in the upper part of FIG.
This indicates that the function f11 is called from 1 and the functions f12 and f13 are called from the function f11. The same applies to the other functions f2 and f3.
That is, a plurality of function groups connected by a solid line in FIG. 6 constitute the above-mentioned function group, the functions f1, f2, f3 are main functions, and the remaining functions f11, f12, f13, f21,
f22, f23, and f31 correspond to sub-functions.

The variable attribute table creation block 13 includes a variable table created by the variable table creation block 11 (see FIG. 4), a call tree created by the call tree creation block 12 (see FIG. 6), and a task level table. Two
2 (see FIG. 2), a variable attribute table is created. This variable attribute table is obtained by adding the "task level" corresponding to the function name to the variable table (see FIG. 4) as shown by the thick frame in FIG. In addition,
Like the variable table, the numbers (1) to (5) shown at the left end of the variable attribute table are added for convenience of description.

In the variable attribute table, the functions described in the "function name" column of the variable table are selected one by one, and the following processes (1) and (2) are executed. It is determined whether or not the selected function is in the task level table 22. Since only the main function of each function group is described in the task level table 22 as described above, if the function selected from the variable table is the main function, it exists in the task level table 22. On the other hand, if the function selected from the variable table is a sub-function, it does not exist in the task level table 22.

If it is determined that the above exists,
The task level described in the task level table 22 is described in the variable attribute table. On the other hand, if it is determined that the function does not exist, the function is a sub-function, so the call tree created in the call tree creation block 12 is referenced to identify the main function. Then, with reference to the task level table 22, the task level corresponding to the main function is described in the variable attribute table.

According to this variable attribute table, it is possible to know whether the function that uses the global variable is a higher-level function or a lower-level function. In other words, it is a function that belongs to the higher-level function group that is the
It can be grasped whether the function belongs to the lower function group which is the interrupted side.

The interference detection / check block 14 executes the check processing of the interrupt prohibition / permission command based on the variable attribute table (see FIG. 7) created in the variable attribute table creation block 13 described above, and the result file 24 is output to the storage device 20 and the display data 31 is output to the display device 30.

The check processing executed by this interference detection / check block will be described with reference to the flowchart of FIG. This check processing is executed for each global variable described in the variable attribute table. Since there are a total of five global variables in the variable attribute table shown in FIG. 7, this check processing is repeated 5 times.
Will be executed once.

First, in step S100, the variable attribute table is read. The following processing is executed based on the variable attribute table read here. Continued S1
At 10, it is determined whether or not the task level described for each function is different. Shown in the variable attribute table of FIG. 7 (1)
In the case of (4) to (4), the task levels are different between the functions, and therefore a positive determination is made. On the other hand, in the case of (5), the task levels are both “6”, so a negative determination is made.
If it is determined here that the task levels are different (S11
0: YES), and the process proceeds to S120. On the other hand, when it is determined that the task levels are the same (S110: NO),
The process proceeds to S180.

In S120, it is judged whether or not the upper function is used for writing. This is because the interrupt prohibition / permission instruction is required for the lower-level function only when the upper-level function writes the global variable. In the case of (1) to (3) shown in the variable attribute table, since the writing process is performed by the higher-level function which is a task level high (small numerical value),
Affirmative judgment is made. On the other hand, in the case of (4), since the writing process is not performed by the higher-level function, a negative determination is made. Here, when it is determined that writing is performed by the higher-level function (S120: Y
ES) and S130. On the other hand, when it is determined that the upper function does not write (S120: NO), S1
Move to 80.

In S130, it is determined whether or not the lower order function has been read a plurality of times. This processing is to determine whether or not there are a plurality of descriptions of the global variable read processing in the subordinate function. In the case of (1) shown in the variable attribute table, it is 0 times, in the case of (2), it is twice, and in the case of (3), it is once. Therefore, an affirmative judgment is made only in the case of (2).
If it is determined that the reading process is not performed multiple times, that is, 0 times or 1 time (S130: NO), S140.
Move to. On the other hand, when it is determined that the read processing is performed multiple times, that is, twice or more (S130: YE
S) and S150.

In S140, it is checked that there is an interrupt prohibition instruction immediately before the processing description relating to the global variable of the lower-level function and that there is an interrupt permission instruction immediately after the processing description. For example, the case (3) of the variable attribute table will be specifically described. In the case of (3), it is checked that there is an interrupt prohibition instruction immediately before the processing description related to the global variable on the seventh line of the lower-level function f4, and that there is an interrupt permission instruction immediately after the processing description. The interrupt prohibition instruction is shown in FIG.
Although it is shown as "i" and the interrupt permission instruction is shown as "zei", the existence of this interrupt permission / prohibition instruction is checked.

In S150, it is checked that an interrupt prohibition command exists immediately before the first read process description among the plurality of read process descriptions, and that an interrupt enable command exists immediately after the last read process description. To do. For example, the case (2) of the variable attribute table will be described. In the case of (2), there is a description of the read process on the 8th and 12th lines of the lower-level function f2. Therefore, it is checked that there is an interrupt prohibition instruction immediately before the processing of the eighth line and that an interrupt permission instruction exists immediately after the processing of the twelfth row.

At S160, it is determined whether or not there is an interrupt prohibition / permission instruction based on the check results at S140 and S150. If it is determined that it exists here (S
160: YES), without executing the processing of S170, S18
Move to 0. On the other hand, when it is determined that the data does not exist (S
160: NO), an NG determination is made in S170, error information, an error code, etc. are created, and then the process proceeds to S180.

At S180, the result is output. S11
When the process proceeds from 0, S120, S160 to S180, the fact that the interrupt prohibition / permission command exists at the proper position according to the processing description position of the global variable is stored in the storage device 20 as the result file 24. At the same time, the display data 34 is output to the display device 30. On the other hand, S17
When the process proceeds from 0 to S180, the result file 24 including detailed information indicating that the interrupt prohibition / permission command does not exist at the proper position is stored in the storage device 20, and
The error information and the error code are output to the display device 30 as the display data 34.

Next, the output information of the interrupt instruction checking device 10 will be described. The display data 31 and the result file 24 are output as described in S180 in FIG. 8 (see FIG. 3). In the present embodiment, even if there is no problem in the check result, that fact is displayed, but here the output information when there is no interrupt prohibition / permission command will be described.

The display data 31 output when the interrupt prohibition / permission command does not exist at the proper position is error information,
This is the error code. The error information is information indicating that the interrupt prohibition / permission instruction does not exist at the proper position according to the processing description position of the global variable, and the error code is
This is information that classifies error information into some cases.
Several cases are conceivable, for example, a case where an interrupt prohibition / permission command description does not exist, or a case where an interrupt prohibition / permission command exists but is not in an appropriate position. Of course, only the error information may be displayed, but if there is an error code, the source program 21 can be easily corrected, which contributes to the reduction of the correction man-hours of the source program 21.

On the other hand, the result file 24 output when the interrupt prohibition / permission command does not exist at the proper position is shown in FIG. FIG. 9 shows the result file 24 in the case of (3) shown in the variable attribute table, that is, when it is determined that the global variable Val3 does not exist at the proper position as a result of checking.

First, the description of the first line will be described.
“0001” is a serial number, which is sequentially added to the above-described check processing. "V
"al3 (int)" indicates that the check result is for the global variable Val3, and "(int)"
Indicates that this global variable Val3 is of integer type.

"NG" indicates that there is a problem in the check result for the global variable Val3. Two
The third and third lines show the check result for each processing description position related to the global variable. The second line is the check result for the processing description in the function f2, and the third line is the function f.
It is a check result for the process description in 4.

The "file3" on the second line shows the file name in which the function f2 is described, and the "file3" on the third line.
4 ”indicates the file name in which the function f3 is described.
"15" (second line) and "7" (third line) indicate the description position of the global variable in the file (in the function).

[0001] "0001" is the above-mentioned serial number and indicates that it is the detailed information of the global variable Val3 shown in the first line. 2nd line "OK", 3
“NG” on the line indicates the check result in each function. As for the higher-level function f2, "OK" is always written because the interrupt prohibition / permission instruction is not checked.

"# -F2_W" on the second line indicates that the writing process is within the function f2, and "# -f4_R" on the third line.
Indicates that it is a reading process in the function f4. "V
"al3 = a;" and "b = Val3;" are 1
The processing description contents related to the global variables on the fifth and seventh lines are shown.

Although the result file 24 is stored in this embodiment, the format is not particularly limited. Considering that the source program 21 is modified from the result file 24, it is desirable to add information that can specify the processing description position, but at least a check result for the global variable can be obtained.

Next, the interrupt instruction check device 1 of this embodiment
The effect of 0 will be described. In the interrupt instruction checking device 10 of the present embodiment, the variable attribute table (see FIG. 7) created by using the task level table 22 is read (S100 in FIG. 8), and the global variable writing process is executed by the higher-level function. If (S120), it is determined that an interrupt prohibition / permission instruction exists at an appropriate position corresponding to the processing description position related to the global variable in the lower-level function (S140 to S170), and the determination result is output (S180). . As a result, it is possible to extract the interference part of the global variable that may cause a malfunction in the function group that handles the global variable, and check whether the interrupt prohibition / permission command is written in the proper position. be able to. as a result,
Contributes to reduction of man-hours for checking interrupt prohibition / permission commands.

It is needless to say that it is checked whether or not there is an interrupt prohibition / permission instruction immediately before or after the process description relating to the global variable in the subordinate function (S140 in FIG. 8). When there are a plurality of variable read processes (S130: YES), it is determined that the interrupt prohibition command exists immediately before the first read process and the interrupt enable command exists immediately after the last read process. (S15
0). If the source program 21 is modified on the basis of such a check result, an interrupt will not occur during the read processing of a plurality of times, and the value of the global variable will not change in the read processing of a plurality of times.

Furthermore, in the interrupt instruction check device 10 of this embodiment, the variable table creation block 1 shown in FIG.
1 first looks for a global variable (above),
Create a variable table that describes information about that global variable (above). Then, the variable attribute table creation block 13 creates a variable attribute table in which the task level corresponding to the function is added to the variable table (above and above). That is, since the information is organized based on each global variable, the contents of the processing are easy to understand, and the designer can use each of the blocks 11-14.
Process design has become easier.

In the present embodiment, the call tree creation block 12 shown in FIG. 3 creates a call tree (see FIG. 6) based on the source program 21. Therefore, as described above, the task level table 22 in which the task levels are described in correspondence with only the main functions of the function group
Can be used to specify the task level for the function in each function group (above and above). In other words, the task level table 22 does not need to describe the task levels for all the functions constituting the source program 21. As a result, for example, the source program 2
This is advantageous in that the task level table 22 may be created using only the information described in the definition file No. 1.

Furthermore, as the display data 31, the error information indicating that there is a problem in the check result and the error code indicating the case of the error are output. This allows the user to know not only the check result but also its contents. If there is a problem with the check result, the result file 24 describes information in a format with detailed information as shown in FIG. Therefore, the user
The source program 21 can be promptly modified.

As described above, the present invention is not limited to the embodiments as described above and can be implemented in various forms without departing from the gist of the present invention. (A) In the above embodiment, the task level table 22 was created in advance and stored in the storage device 20. On the other hand, if there is a task level definition file in the source program 21, the task level table 22 may be created and acquired based on the source program 21 read by the interrupt instruction checking device 10. This eliminates the need to create the task level table 22 in advance.

(B) In the above embodiment, the result file 2
Although the user has modified the source program 21 on the basis of No. 4, the interrupt instruction check device 10 may automatically modify the source program 21 based on the contents of the result file 24.

(C) Furthermore, in the above embodiment, the interrupt prohibition / permission instructions before and after the processing description related to the global variable in the higher-level function are not checked. This is because there is substantially no harmful effect whether or not the upper-level function has an interrupt prohibition / permission command. In addition, a higher-level function for one function becomes a lower-level function for another function.

However, in the case of a certain global variable, if an interrupt prohibition / permission instruction exists in a function higher than any function, the interruption prohibition / permission instruction is unnecessary. You may make it check that it is a prohibition / permission command. On the basis of this check result, unnecessary interrupt prohibition / permission instructions can be removed, and the time required to execute the processing of the higher-level function can be shortened.

[Brief description of drawings]

FIG. 1 is an explanatory diagram of a system including an interrupt instruction check device according to an embodiment.

FIG. 2 is an explanatory diagram illustrating a task level table.

FIG. 3 is a functional block diagram of an interrupt instruction check device according to an embodiment.

FIG. 4 is an explanatory diagram illustrating a variable table.

FIG. 5 is an explanatory diagram showing a description example in a source program.

FIG. 6 is an explanatory diagram illustrating a call tree.

FIG. 7 is an explanatory diagram illustrating a variable attribute table.

FIG. 8 is a flowchart showing a check process.

FIG. 9 is an explanatory diagram showing a description example of a result file.

[Explanation of symbols]

10 ... Interrupt instruction check device 11 ... Variable table creation block 12 ... Call tree creation block 13 ... Variable attribute table creation block 14 ... Interference detection / check block 20 ... Storage device 21 ... Source program 22 ... Task level table 23 ... Environment file 24 ... Result file 30 ... Display device 31 ... Display data

─────────────────────────────────────────────────── ─── Continued Front Page (58) Fields surveyed (Int.Cl. ⁷ , DB name) G06F 11/28 G06F 9/44 G06F 9/46

Claims (10)

(57) [Claims] 1. A source program, which is composed of a plurality of processing programs as execution units and is described in detail, and which is divided among the processing programs based on an execution priority set in advance for each of the processing programs. Targeting a source program for executing a series of functions by executing an embedded process, and a lower processing program having a relatively lower execution priority that may be interrupted by a higher processing program having a relatively higher execution priority An interrupt instruction checking device for checking the interrupt prohibition / permission instruction of, a program reading means for reading the source program, an execution priority information acquiring means for acquiring execution priority information indicating the execution priority, The source program read by the program reading means and acquired by the execution order information acquisition means If there is a global variable writing process commonly used by the upper processing program and the lower processing program in the upper processing program based on the execution priority information, the global variable in the lower processing program is written to the global variable. An interrupt command determination means for determining whether an interrupt prohibition command and an interrupt permission command are present at appropriate positions according to the processing description position, and output means for outputting determination information based on the determination by the interrupt command determination means. An interrupt instruction check device comprising: 2. The interrupt instruction check device according to claim 1, wherein the interrupt instruction determination means has the interrupt disable instruction immediately before a processing description related to the global variable in the lower processing program. And, when the interrupt permission command exists immediately after the process description, it is determined that the interrupt prohibition command and the interrupt permission command exist at the proper position. . 3. The interrupt instruction check device according to claim 2, wherein the interrupt instruction determination means, if the global variable read processing is performed a plurality of times in the lower processing program, the read processing is performed a plurality of times. If the interrupt prohibition command exists immediately before the first read process description and the interrupt enable command exists immediately after the last read process description, the interrupt prohibition is performed at the proper position. An interrupt instruction check device, which determines that an instruction and the interrupt permission instruction are present. 4. The interrupt instruction check device according to claim 1, wherein the interrupt instruction determination means searches for the global variable in the source program read by the program reading means. By referring to the description in the source program read by the variable searching means and the program reading means, it is determined whether the process for the global variable searched by the variable searching means is a reading process or a writing process. Processing determining means for determining, program specifying means for specifying the processing program in which the global variable searched by the variable searching means is used, or a unit program constituting the processing program, and specified by the program specifying means The execution priority information of the executed execution priority of the processing program or the unit program An execution priority specifying unit that specifies the execution priority information obtained by a step, and based on the execution priority specified by the execution priority specifying unit and the determination result by the process determining unit. An interrupt instruction check device, characterized in that it is determined that the interrupt prohibition instruction and the interrupt permission instruction exist at the proper position. 5. The interrupt instruction check device according to claim 4, wherein the processing program is composed of a plurality of unit programs, and further search call information between the unit programs forming the processing program. The execution priority specifying means specifies the execution priority of the unit program based on the execution priority information and the call information searched by the call information searching means. Characteristic interrupt instruction check device. 6. The interrupt instruction check device according to any one of claims 1 to 5, wherein the execution priority information acquisition means is based on a description of a source program read by the program reading means. An interrupt instruction check device characterized by creating and acquiring execution priority information. 7. The interrupt instruction check device according to claim 1, wherein the output unit outputs the determination information as a result file to a storage unit. . 8. The interrupt instruction check device according to claim 1, wherein the output means outputs the judgment information to a display means. 9. The interrupt instruction check device according to claim 1, further comprising the interrupt prohibition instruction or interrupt at the proper position based on the determination information output from the output means. An interrupt instruction check device comprising a program modifying means for modifying the source program by describing the source program when at least one of the permitting commands does not exist. 10. A computer system functions as the program reading means, the execution priority information obtaining means, the interrupt instruction determining means, and the output means of the interrupt instruction checking device according to claim 1. A computer-readable recording medium in which a program for causing the program is recorded.