Line Coverage for Module :
otp_ctrl_part_unbuf ( parameter Info=65616,DigestOffset=56,StateWidth=10 )
Line Coverage for Module self-instances :
| Line No. | Total | Covered | Percent |
|---|
| TOTAL | | 93 | 86 | 92.47 |
| CONT_ASSIGN | 138 | 1 | 1 | 100.00 |
| ALWAYS | 153 | 3 | 3 | 100.00 |
| ALWAYS | 164 | 68 | 61 | 89.71 |
| CONT_ASSIGN | 334 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 336 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 339 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 349 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 350 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 354 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 358 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 395 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 420 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 454 | 1 | 1 | 100.00 |
| ALWAYS | 461 | 3 | 3 | 100.00 |
| ALWAYS | 464 | 8 | 8 | 100.00 |
137 // Output partition error state.
138 1/1 assign error_o = error_q;
Tests: T1 T2 T3
139
140 // This partition cannot do any write accesses, hence we tie this
141 // constantly off.
142 assign otp_wdata_o = '0;
143 // Depending on the partition configuration, the wrapper is instructed to ignore integrity
144 // calculations and checks. To be on the safe side, the partition filters error responses at this
145 // point and does not report any integrity errors if integrity is disabled.
146 otp_err_e otp_err;
147 if (Info.integrity) begin : gen_integrity
148 assign otp_cmd_o = prim_otp_pkg::Read;
149 assign otp_err = otp_err_e'(otp_err_i);
150 end else begin : gen_no_integrity
151 assign otp_cmd_o = prim_otp_pkg::ReadRaw;
152 always_comb begin
153 1/1 if (otp_err_e'(otp_err_i) inside {MacroEccCorrError, MacroEccUncorrError}) begin
Tests: T1 T2 T3
154 1/1 otp_err = NoError;
Tests: T3 T68 T35
155 end else begin
156 1/1 otp_err = otp_err_e'(otp_err_i);
Tests: T1 T2 T3
157 end
158 end
159 end
160
161 `ASSERT_KNOWN(FsmStateKnown_A, state_q)
162 always_comb begin : p_fsm
163 // Default assignments
164 1/1 state_d = state_q;
Tests: T1 T2 T3
165
166 // Response to init request
167 1/1 init_done_o = 1'b0;
Tests: T1 T2 T3
168
169 // OTP signals
170 1/1 otp_req_o = 1'b0;
Tests: T1 T2 T3
171 1/1 otp_addr_sel = DigestAddrSel;
Tests: T1 T2 T3
172
173 // TL-UL signals
174 1/1 tlul_gnt_o = 1'b0;
Tests: T1 T2 T3
175 1/1 tlul_rvalid_o = 1'b0;
Tests: T1 T2 T3
176 1/1 tlul_rerror_o = '0;
Tests: T1 T2 T3
177
178 // Enable for buffered digest register
179 1/1 digest_reg_en = 1'b0;
Tests: T1 T2 T3
180
181 // Error Register
182 1/1 error_d = error_q;
Tests: T1 T2 T3
183 1/1 pending_tlul_error_d = 1'b0;
Tests: T1 T2 T3
184 1/1 fsm_err_o = 1'b0;
Tests: T1 T2 T3
185
186 1/1 unique case (state_q)
Tests: T1 T2 T3
187 ///////////////////////////////////////////////////////////////////
188 // State right after reset. Wait here until we get a an
189 // initialization request.
190 ResetSt: begin
191 1/1 if (init_req_i) begin
Tests: T1 T2 T3
192 // If the partition does not have a digest, no initialization is necessary.
193 1/1 if (Info.sw_digest) begin
Tests: T1 T2 T3
194 1/1 state_d = InitSt;
Tests: T1 T2 T3
195 end else begin
196 unreachable state_d = IdleSt;
197 end
198 end
MISSING_ELSE
199 end
200 ///////////////////////////////////////////////////////////////////
201 // Initialization reads out the digest only in unbuffered
202 // partitions. Wait here until the OTP request has been granted.
203 // And then wait until the OTP word comes back.
204 InitSt: begin
205 1/1 otp_req_o = 1'b1;
Tests: T1 T2 T3
206 1/1 if (otp_gnt_i) begin
Tests: T1 T2 T3
207 1/1 state_d = InitWaitSt;
Tests: T1 T2 T3
208 end
==> MISSING_ELSE
209 end
210 ///////////////////////////////////////////////////////////////////
211 // Wait for OTP response and write to digest buffer register. In
212 // case an OTP transaction fails, latch the OTP error code and
213 // jump to a terminal error state.
214 InitWaitSt: begin
215 1/1 if (otp_rvalid_i) begin
Tests: T1 T2 T3
216 1/1 digest_reg_en = 1'b1;
Tests: T1 T2 T3
217 1/1 if (otp_err inside {NoError, MacroEccCorrError}) begin
Tests: T1 T2 T3
218 1/1 state_d = IdleSt;
Tests: T1 T2 T3
219 // At this point the only error that we could have gotten are correctable ECC errors.
220 1/1 if (otp_err != NoError) begin
Tests: T1 T2 T3
221 0/1 ==> error_d = MacroEccCorrError;
222 end
MISSING_ELSE
223 end else begin
224 0/1 ==> state_d = ErrorSt;
225 0/1 ==> error_d = otp_err;
226 end
227 end
MISSING_ELSE
228 end
229 ///////////////////////////////////////////////////////////////////
230 // Wait for TL-UL requests coming in.
231 // Then latch address and go to readout state.
232 IdleSt: begin
233 1/1 init_done_o = 1'b1;
Tests: T1 T2 T3
234 1/1 if (tlul_req_i) begin
Tests: T1 T2 T3
235 1/1 error_d = NoError; // clear recoverable soft errors.
Tests: T2 T4 T9
236 1/1 state_d = ReadSt;
Tests: T2 T4 T9
237 1/1 tlul_gnt_o = 1'b1;
Tests: T2 T4 T9
238 end
MISSING_ELSE
239 end
240 ///////////////////////////////////////////////////////////////////
241 // If the address is out of bounds, or if the partition is
242 // locked, signal back a bus error. Note that such an error does
243 // not cause the partition to go into error state. Otherwise if
244 // these checks pass, an OTP word is requested.
245 ReadSt: begin
246 1/1 init_done_o = 1'b1;
Tests: T2 T4 T9
247 // Double check the address range.
248 1/1 if (tlul_addr_in_range && mubi8_test_false_strict(access_o.read_lock)) begin
Tests: T2 T4 T9
249 1/1 otp_req_o = 1'b1;
Tests: T2 T4 T9
250 1/1 otp_addr_sel = DataAddrSel;
Tests: T2 T4 T9
251 1/1 if (otp_gnt_i) begin
Tests: T2 T4 T9
252 1/1 state_d = ReadWaitSt;
Tests: T2 T4 T9
253 end
MISSING_ELSE
254 end else begin
255 1/1 state_d = IdleSt;
Tests: T4 T51 T95
256 1/1 error_d = AccessError; // Signal this error, but do not go into terminal error state.
Tests: T4 T51 T95
257 1/1 tlul_rvalid_o = 1'b1;
Tests: T4 T51 T95
258 1/1 tlul_rerror_o = 2'b11; // This causes the TL-UL adapter to return a bus error.
Tests: T4 T51 T95
259 end
260 end
261 ///////////////////////////////////////////////////////////////////
262 // Wait for OTP response and release the TL-UL response. In
263 // case an OTP transaction fails, latch the OTP error code,
264 // signal a TL-Ul bus error and jump to a terminal error state.
265 ReadWaitSt: begin
266 1/1 init_done_o = 1'b1;
Tests: T2 T4 T9
267 1/1 if (otp_rvalid_i) begin
Tests: T2 T4 T9
268 1/1 tlul_rvalid_o = 1'b1;
Tests: T2 T4 T9
269 1/1 if (otp_err inside {NoError, MacroEccCorrError}) begin
Tests: T2 T4 T9
270 1/1 state_d = IdleSt;
Tests: T2 T4 T9
271 // At this point the only error that we could have gotten are correctable ECC errors.
272 1/1 if (otp_err != NoError) begin
Tests: T2 T4 T9
273 0/1 ==> error_d = MacroEccCorrError;
274 end
MISSING_ELSE
275 end else begin
276 0/1 ==> state_d = ErrorSt;
277 0/1 ==> error_d = otp_err;
278 // This causes the TL-UL adapter to return a bus error.
279 0/1 ==> tlul_rerror_o = 2'b11;
280 end
281 end
MISSING_ELSE
282 end
283 ///////////////////////////////////////////////////////////////////
284 // Terminal Error State. This locks access to the partition.
285 // Make sure the partition signals an error state if no error
286 // code has been latched so far.
287 ErrorSt: begin
288 1/1 if (error_q == NoError) begin
Tests: T3 T9 T44
289 1/1 error_d = FsmStateError;
Tests: T26 T27 T28
290 end
MISSING_ELSE
291
292 // Return bus errors if there are pending TL-UL requests.
293 1/1 if (pending_tlul_error_q) begin
Tests: T3 T9 T44
294 1/1 tlul_rerror_o = 2'b11;
Tests: T9 T35 T94
295 1/1 tlul_rvalid_o = 1'b1;
Tests: T9 T35 T94
296 1/1 end else if (tlul_req_i) begin
Tests: T3 T9 T44
297 1/1 tlul_gnt_o = 1'b1;
Tests: T9 T35 T94
298 1/1 pending_tlul_error_d = 1'b1;
Tests: T9 T35 T94
299 end
MISSING_ELSE
300 end
301 ///////////////////////////////////////////////////////////////////
302 // We should never get here. If we do (e.g. via a malicious
303 // glitch), error out immediately.
304 default: begin
305 state_d = ErrorSt;
306 fsm_err_o = 1'b1;
307 end
308 ///////////////////////////////////////////////////////////////////
309 endcase // state_q
310
311 // Unconditionally jump into the terminal error state in case of
312 // an ECC error or escalation, and lock access to the partition down.
313 // SEC_CM: PART.FSM.LOCAL_ESC
314 1/1 if (ecc_err) begin
Tests: T1 T2 T3
315 1/1 state_d = ErrorSt;
Tests: T187 T188 T189
316 1/1 if (state_q != ErrorSt) begin
Tests: T187 T188 T189
317 1/1 error_d = CheckFailError;
Tests: T187 T188 T189
318 end
MISSING_ELSE
319 end
MISSING_ELSE
320 // SEC_CM: PART.FSM.GLOBAL_ESC
321 1/1 if (lc_ctrl_pkg::lc_tx_test_true_loose(escalate_en_i)) begin
Tests: T1 T2 T3
322 1/1 state_d = ErrorSt;
Tests: T3 T9 T44
323 1/1 fsm_err_o = 1'b1;
Tests: T3 T9 T44
324 1/1 if (state_q != ErrorSt) begin
Tests: T3 T9 T44
325 1/1 error_d = FsmStateError;
Tests: T3 T9 T44
326 end
MISSING_ELSE
327 end
MISSING_ELSE
328 end
329
330 ///////////////////////////////////
331 // Signals to/from TL-UL Adapter //
332 ///////////////////////////////////
333
334 1/1 assign tlul_addr_d = tlul_addr_i;
Tests: T1 T2 T3
335 // Do not forward data in case of an error.
336 1/1 assign tlul_rdata_o = (tlul_rvalid_o && tlul_rerror_o == '0) ? otp_rdata_i[31:0] : '0;
Tests: T1 T2 T3
337
338 if (Info.offset == 0) begin : gen_zero_offset
339 1/1 assign tlul_addr_in_range = {1'b0, tlul_addr_q, 2'b00} < PartEnd;
Tests: T1 T2 T3
340
341 end else begin : gen_nonzero_offset
342 assign tlul_addr_in_range = {tlul_addr_q, 2'b00} >= Info.offset &&
343 {1'b0, tlul_addr_q, 2'b00} < PartEnd;
344 end
345
346 // Note that OTP works on halfword (16bit) addresses, hence need to
347 // shift the addresses appropriately.
348 logic [OtpByteAddrWidth-1:0] addr_calc;
349 1/1 assign addr_calc = (otp_addr_sel == DigestAddrSel) ? DigestOffset : {tlul_addr_q, 2'b00};
Tests: T1 T2 T3
350 1/1 assign otp_addr_o = addr_calc[OtpByteAddrWidth-1:OtpAddrShift];
Tests: T1 T2 T3
351
352 if (OtpAddrShift > 0) begin : gen_unused
353 logic unused_bits;
354 1/1 assign unused_bits = ^addr_calc[OtpAddrShift-1:0];
Tests: T1 T2 T3
355 end
356
357 // Request 32bit except in case of the digest.
358 1/1 assign otp_size_o = (otp_addr_sel == DigestAddrSel) ?
Tests: T1 T2 T3
359 OtpSizeWidth'(unsigned'(ScrmblBlockWidth / OtpWidth - 1)) :
360 OtpSizeWidth'(unsigned'(32 / OtpWidth - 1));
361
362 ////////////////
363 // Digest Reg //
364 ////////////////
365
366 if (Info.sw_digest) begin : gen_ecc_reg
367 // SEC_CM: PART.DATA_REG.INTEGRITY
368 otp_ctrl_ecc_reg #(
369 .Width ( ScrmblBlockWidth ),
370 .Depth ( 1 )
371 ) u_otp_ctrl_ecc_reg (
372 .clk_i,
373 .rst_ni,
374 .wren_i ( digest_reg_en ),
375 .addr_i ( '0 ),
376 .wdata_i ( otp_rdata_i ),
377 .rdata_o ( ),
378 .data_o ( digest_o ),
379 .ecc_err_o ( ecc_err )
380 );
381 end else begin : gen_no_ecc_reg
382 logic unused_digest_reg_en;
383 logic unused_rdata;
384 assign unused_digest_reg_en = digest_reg_en;
385 assign unused_rdata = ^otp_rdata_i[32 +: 32]; // Upper word is not connected in this case.
386 assign digest_o = '0;
387 assign ecc_err = 1'b0;
388 end
389
390 ////////////////////////
391 // DAI Access Control //
392 ////////////////////////
393
394 mubi8_t init_locked;
395 1/1 assign init_locked = (~init_done_o) ? MuBi8True : MuBi8False;
Tests: T1 T2 T3
396
397 // Aggregate all possible DAI write locks. The partition is also locked when uninitialized.
398 // Note that the locks are redundantly encoded values.
399 part_access_t access_pre;
400 prim_mubi8_sender #(
401 .AsyncOn(0)
402 ) u_prim_mubi8_sender_write_lock_pre (
403 .clk_i,
404 .rst_ni,
405 .mubi_i(mubi8_and_lo(init_locked, access_i.write_lock)),
406 .mubi_o(access_pre.write_lock)
407 );
408 prim_mubi8_sender #(
409 .AsyncOn(0)
410 ) u_prim_mubi8_sender_read_lock_pre (
411 .clk_i,
412 .rst_ni,
413 .mubi_i(mubi8_and_lo(init_locked, access_i.read_lock)),
414 .mubi_o(access_pre.read_lock)
415 );
416
417 // SEC_CM: PART.MEM.SW_UNWRITABLE
418 if (Info.write_lock) begin : gen_digest_write_lock
419 mubi8_t digest_locked;
420 1/1 assign digest_locked = (digest_o != '0) ? MuBi8True : MuBi8False;
Tests: T1 T2 T3
421
422 // This prevents the synthesis tool from optimizing the multibit signal.
423 prim_mubi8_sender #(
424 .AsyncOn(0)
425 ) u_prim_mubi8_sender_write_lock (
426 .clk_i,
427 .rst_ni,
428 .mubi_i(mubi8_and_lo(access_pre.write_lock, digest_locked)),
429 .mubi_o(access_o.write_lock)
430 );
431
432 `ASSERT(DigestWriteLocksPartition_A, digest_o |-> mubi8_test_true_loose(access_o.write_lock))
433 end else begin : gen_no_digest_write_lock
434 assign access_o.write_lock = access_pre.write_lock;
435 end
436
437 // SEC_CM: PART.MEM.SW_UNREADABLE
438 if (Info.read_lock) begin : gen_digest_read_lock
439 mubi8_t digest_locked;
440 assign digest_locked = (digest_o != '0) ? MuBi8True : MuBi8False;
441
442 // This prevents the synthesis tool from optimizing the multibit signal.
443 prim_mubi8_sender #(
444 .AsyncOn(0)
445 ) u_prim_mubi8_sender_read_lock (
446 .clk_i,
447 .rst_ni,
448 .mubi_i(mubi8_and_lo(access_pre.read_lock, digest_locked)),
449 .mubi_o(access_o.read_lock)
450 );
451
452 `ASSERT(DigestReadLocksPartition_A, digest_o |-> mubi8_test_true_loose(access_o.read_lock))
453 end else begin : gen_no_digest_read_lock
454 1/1 assign access_o.read_lock = access_pre.read_lock;
Tests: T1 T2 T3
455 end
456
457 ///////////////
458 // Registers //
459 ///////////////
460
461 3/3 `PRIM_FLOP_SPARSE_FSM(u_state_regs, state_d, state_q, state_e, ResetSt)
Tests: T1 T2 T3 | T1 T2 T3 | T1 T2 T3
PRIM_FLOP_SPARSE_FSM(u_state_regs, state_d, state_q, state_e, ResetSt):
461.1 `ifdef SIMULATION
461.2 prim_sparse_fsm_flop #(
461.3 .StateEnumT(state_e),
461.4 .Width($bits(state_e)),
461.5 .ResetValue($bits(state_e)'(ResetSt)),
461.6 .EnableAlertTriggerSVA(1),
461.7 .CustomForceName("state_q")
461.8 ) u_state_regs (
461.9 .clk_i ( clk_i ),
461.10 .rst_ni ( rst_ni ),
461.11 .state_i ( state_d ),
461.12 .state_o ( )
461.13 );
461.14 always_ff @(posedge clk_i or negedge rst_ni) begin
461.15 1/1 if (!rst_ni) begin
Tests: T1 T2 T3
461.16 1/1 state_q <= ResetSt;
Tests: T1 T2 T3
461.17 end else begin
461.18 1/1 state_q <= state_d;
Tests: T1 T2 T3
461.19 end
461.20 end
461.21 u_state_regs_A: assert property (@(posedge clk_i) disable iff ((!rst_ni) !== '0) (state_q === u_state_regs.state_o))
461.22 else begin
461.23 `ifdef UVM
461.24 uvm_pkg::uvm_report_error("ASSERT FAILED", "u_state_regs_A", uvm_pkg::UVM_NONE,
461.25 "../src/lowrisc_ip_otp_ctrl_1.0/rtl/otp_ctrl_part_unbuf.sv", 461, "", 1);
461.26 `else
461.27 $error("%0t: (%0s:%0d) [%m] [ASSERT FAILED] %0s", $time, `__FILE__, `__LINE__,
461.28 `PRIM_STRINGIFY(u_state_regs_A));
461.29 `endif
461.30 end
461.31 `else
461.32 prim_sparse_fsm_flop #(
461.33 .StateEnumT(state_e),
461.34 .Width($bits(state_e)),
461.35 .ResetValue($bits(state_e)'(ResetSt)),
461.36 .EnableAlertTriggerSVA(1)
461.37 ) u_state_regs (
461.38 .clk_i ( `PRIM_FLOP_CLK ),
461.39 .rst_ni ( `PRIM_FLOP_RST ),
461.40 .state_i ( state_d ),
461.41 .state_o ( state_q )
461.42 );
461.43 `endif462
463 always_ff @(posedge clk_i or negedge rst_ni) begin : p_regs
464 1/1 if (!rst_ni) begin
Tests: T1 T2 T3
465 1/1 error_q <= NoError;
Tests: T1 T2 T3
466 1/1 tlul_addr_q <= '0;
Tests: T1 T2 T3
467 1/1 pending_tlul_error_q <= 1'b0;
Tests: T1 T2 T3
468 end else begin
469 1/1 error_q <= error_d;
Tests: T1 T2 T3
470 1/1 pending_tlul_error_q <= pending_tlul_error_d;
Tests: T1 T2 T3
471 1/1 if (tlul_gnt_o) begin
Tests: T1 T2 T3
472 1/1 tlul_addr_q <= tlul_addr_d;
Tests: T2 T4 T9
473 end
MISSING_ELSE
Line Coverage for Module :
otp_ctrl_part_unbuf ( parameter Info=134594644,DigestOffset=424,StateWidth=10 )
Line Coverage for Module self-instances :
| Line No. | Total | Covered | Percent |
|---|
| TOTAL | | 91 | 91 | 100.00 |
| CONT_ASSIGN | 138 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 149 | 1 | 1 | 100.00 |
| ALWAYS | 164 | 68 | 68 | 100.00 |
| CONT_ASSIGN | 334 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 336 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 342 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 349 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 350 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 354 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 358 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 395 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 420 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 454 | 1 | 1 | 100.00 |
| ALWAYS | 461 | 3 | 3 | 100.00 |
| ALWAYS | 464 | 8 | 8 | 100.00 |
137 // Output partition error state.
138 1/1 assign error_o = error_q;
Tests: T1 T2 T3
139
140 // This partition cannot do any write accesses, hence we tie this
141 // constantly off.
142 assign otp_wdata_o = '0;
143 // Depending on the partition configuration, the wrapper is instructed to ignore integrity
144 // calculations and checks. To be on the safe side, the partition filters error responses at this
145 // point and does not report any integrity errors if integrity is disabled.
146 otp_err_e otp_err;
147 if (Info.integrity) begin : gen_integrity
148 assign otp_cmd_o = prim_otp_pkg::Read;
149 1/1 assign otp_err = otp_err_e'(otp_err_i);
Tests: T1 T2 T3
150 end else begin : gen_no_integrity
151 assign otp_cmd_o = prim_otp_pkg::ReadRaw;
152 always_comb begin
153 if (otp_err_e'(otp_err_i) inside {MacroEccCorrError, MacroEccUncorrError}) begin
154 otp_err = NoError;
155 end else begin
156 otp_err = otp_err_e'(otp_err_i);
157 end
158 end
159 end
160
161 `ASSERT_KNOWN(FsmStateKnown_A, state_q)
162 always_comb begin : p_fsm
163 // Default assignments
164 1/1 state_d = state_q;
Tests: T1 T2 T3
165
166 // Response to init request
167 1/1 init_done_o = 1'b0;
Tests: T1 T2 T3
168
169 // OTP signals
170 1/1 otp_req_o = 1'b0;
Tests: T1 T2 T3
171 1/1 otp_addr_sel = DigestAddrSel;
Tests: T1 T2 T3
172
173 // TL-UL signals
174 1/1 tlul_gnt_o = 1'b0;
Tests: T1 T2 T3
175 1/1 tlul_rvalid_o = 1'b0;
Tests: T1 T2 T3
176 1/1 tlul_rerror_o = '0;
Tests: T1 T2 T3
177
178 // Enable for buffered digest register
179 1/1 digest_reg_en = 1'b0;
Tests: T1 T2 T3
180
181 // Error Register
182 1/1 error_d = error_q;
Tests: T1 T2 T3
183 1/1 pending_tlul_error_d = 1'b0;
Tests: T1 T2 T3
184 1/1 fsm_err_o = 1'b0;
Tests: T1 T2 T3
185
186 1/1 unique case (state_q)
Tests: T1 T2 T3
187 ///////////////////////////////////////////////////////////////////
188 // State right after reset. Wait here until we get a an
189 // initialization request.
190 ResetSt: begin
191 1/1 if (init_req_i) begin
Tests: T1 T2 T3
192 // If the partition does not have a digest, no initialization is necessary.
193 1/1 if (Info.sw_digest) begin
Tests: T1 T2 T3
194 1/1 state_d = InitSt;
Tests: T1 T2 T3
195 end else begin
196 unreachable state_d = IdleSt;
197 end
198 end
MISSING_ELSE
199 end
200 ///////////////////////////////////////////////////////////////////
201 // Initialization reads out the digest only in unbuffered
202 // partitions. Wait here until the OTP request has been granted.
203 // And then wait until the OTP word comes back.
204 InitSt: begin
205 1/1 otp_req_o = 1'b1;
Tests: T1 T2 T3
206 1/1 if (otp_gnt_i) begin
Tests: T1 T2 T3
207 1/1 state_d = InitWaitSt;
Tests: T1 T2 T3
208 end
MISSING_ELSE
209 end
210 ///////////////////////////////////////////////////////////////////
211 // Wait for OTP response and write to digest buffer register. In
212 // case an OTP transaction fails, latch the OTP error code and
213 // jump to a terminal error state.
214 InitWaitSt: begin
215 1/1 if (otp_rvalid_i) begin
Tests: T1 T2 T3
216 1/1 digest_reg_en = 1'b1;
Tests: T1 T2 T3
217 1/1 if (otp_err inside {NoError, MacroEccCorrError}) begin
Tests: T1 T2 T3
218 1/1 state_d = IdleSt;
Tests: T1 T2 T3
219 // At this point the only error that we could have gotten are correctable ECC errors.
220 1/1 if (otp_err != NoError) begin
Tests: T1 T2 T3
221 1/1 error_d = MacroEccCorrError;
Tests: T69 T142 T190
222 end
MISSING_ELSE
223 end else begin
224 1/1 state_d = ErrorSt;
Tests: T191 T192 T193
225 1/1 error_d = otp_err;
Tests: T191 T192 T193
226 end
227 end
MISSING_ELSE
228 end
229 ///////////////////////////////////////////////////////////////////
230 // Wait for TL-UL requests coming in.
231 // Then latch address and go to readout state.
232 IdleSt: begin
233 1/1 init_done_o = 1'b1;
Tests: T1 T2 T3
234 1/1 if (tlul_req_i) begin
Tests: T1 T2 T3
235 1/1 error_d = NoError; // clear recoverable soft errors.
Tests: T2 T3 T4
236 1/1 state_d = ReadSt;
Tests: T2 T3 T4
237 1/1 tlul_gnt_o = 1'b1;
Tests: T2 T3 T4
238 end
MISSING_ELSE
239 end
240 ///////////////////////////////////////////////////////////////////
241 // If the address is out of bounds, or if the partition is
242 // locked, signal back a bus error. Note that such an error does
243 // not cause the partition to go into error state. Otherwise if
244 // these checks pass, an OTP word is requested.
245 ReadSt: begin
246 1/1 init_done_o = 1'b1;
Tests: T2 T3 T4
247 // Double check the address range.
248 1/1 if (tlul_addr_in_range && mubi8_test_false_strict(access_o.read_lock)) begin
Tests: T2 T3 T4
249 1/1 otp_req_o = 1'b1;
Tests: T2 T3 T4
250 1/1 otp_addr_sel = DataAddrSel;
Tests: T2 T3 T4
251 1/1 if (otp_gnt_i) begin
Tests: T2 T3 T4
252 1/1 state_d = ReadWaitSt;
Tests: T2 T3 T4
253 end
MISSING_ELSE
254 end else begin
255 1/1 state_d = IdleSt;
Tests: T95 T98 T124
256 1/1 error_d = AccessError; // Signal this error, but do not go into terminal error state.
Tests: T95 T98 T124
257 1/1 tlul_rvalid_o = 1'b1;
Tests: T95 T98 T124
258 1/1 tlul_rerror_o = 2'b11; // This causes the TL-UL adapter to return a bus error.
Tests: T95 T98 T124
259 end
260 end
261 ///////////////////////////////////////////////////////////////////
262 // Wait for OTP response and release the TL-UL response. In
263 // case an OTP transaction fails, latch the OTP error code,
264 // signal a TL-Ul bus error and jump to a terminal error state.
265 ReadWaitSt: begin
266 1/1 init_done_o = 1'b1;
Tests: T2 T3 T4
267 1/1 if (otp_rvalid_i) begin
Tests: T2 T3 T4
268 1/1 tlul_rvalid_o = 1'b1;
Tests: T2 T3 T4
269 1/1 if (otp_err inside {NoError, MacroEccCorrError}) begin
Tests: T2 T3 T4
270 1/1 state_d = IdleSt;
Tests: T2 T3 T4
271 // At this point the only error that we could have gotten are correctable ECC errors.
272 1/1 if (otp_err != NoError) begin
Tests: T2 T3 T4
273 1/1 error_d = MacroEccCorrError;
Tests: T133 T159 T180
274 end
MISSING_ELSE
275 end else begin
276 1/1 state_d = ErrorSt;
Tests: T185 T181 T115
277 1/1 error_d = otp_err;
Tests: T185 T181 T115
278 // This causes the TL-UL adapter to return a bus error.
279 1/1 tlul_rerror_o = 2'b11;
Tests: T185 T181 T115
280 end
281 end
MISSING_ELSE
282 end
283 ///////////////////////////////////////////////////////////////////
284 // Terminal Error State. This locks access to the partition.
285 // Make sure the partition signals an error state if no error
286 // code has been latched so far.
287 ErrorSt: begin
288 1/1 if (error_q == NoError) begin
Tests: T3 T9 T44
289 1/1 error_d = FsmStateError;
Tests: T26 T27 T28
290 end
MISSING_ELSE
291
292 // Return bus errors if there are pending TL-UL requests.
293 1/1 if (pending_tlul_error_q) begin
Tests: T3 T9 T44
294 1/1 tlul_rerror_o = 2'b11;
Tests: T9 T35 T55
295 1/1 tlul_rvalid_o = 1'b1;
Tests: T9 T35 T55
296 1/1 end else if (tlul_req_i) begin
Tests: T3 T9 T44
297 1/1 tlul_gnt_o = 1'b1;
Tests: T9 T35 T55
298 1/1 pending_tlul_error_d = 1'b1;
Tests: T9 T35 T55
299 end
MISSING_ELSE
300 end
301 ///////////////////////////////////////////////////////////////////
302 // We should never get here. If we do (e.g. via a malicious
303 // glitch), error out immediately.
304 default: begin
305 state_d = ErrorSt;
306 fsm_err_o = 1'b1;
307 end
308 ///////////////////////////////////////////////////////////////////
309 endcase // state_q
310
311 // Unconditionally jump into the terminal error state in case of
312 // an ECC error or escalation, and lock access to the partition down.
313 // SEC_CM: PART.FSM.LOCAL_ESC
314 1/1 if (ecc_err) begin
Tests: T1 T2 T3
315 1/1 state_d = ErrorSt;
Tests: T177 T187 T188
316 1/1 if (state_q != ErrorSt) begin
Tests: T177 T187 T188
317 1/1 error_d = CheckFailError;
Tests: T177 T187 T188
318 end
MISSING_ELSE
319 end
MISSING_ELSE
320 // SEC_CM: PART.FSM.GLOBAL_ESC
321 1/1 if (lc_ctrl_pkg::lc_tx_test_true_loose(escalate_en_i)) begin
Tests: T1 T2 T3
322 1/1 state_d = ErrorSt;
Tests: T3 T9 T44
323 1/1 fsm_err_o = 1'b1;
Tests: T3 T9 T44
324 1/1 if (state_q != ErrorSt) begin
Tests: T3 T9 T44
325 1/1 error_d = FsmStateError;
Tests: T3 T9 T44
326 end
MISSING_ELSE
327 end
MISSING_ELSE
328 end
329
330 ///////////////////////////////////
331 // Signals to/from TL-UL Adapter //
332 ///////////////////////////////////
333
334 1/1 assign tlul_addr_d = tlul_addr_i;
Tests: T1 T2 T3
335 // Do not forward data in case of an error.
336 1/1 assign tlul_rdata_o = (tlul_rvalid_o && tlul_rerror_o == '0) ? otp_rdata_i[31:0] : '0;
Tests: T1 T2 T3
337
338 if (Info.offset == 0) begin : gen_zero_offset
339 assign tlul_addr_in_range = {1'b0, tlul_addr_q, 2'b00} < PartEnd;
340
341 end else begin : gen_nonzero_offset
342 1/1 assign tlul_addr_in_range = {tlul_addr_q, 2'b00} >= Info.offset &&
Tests: T1 T2 T3
343 {1'b0, tlul_addr_q, 2'b00} < PartEnd;
344 end
345
346 // Note that OTP works on halfword (16bit) addresses, hence need to
347 // shift the addresses appropriately.
348 logic [OtpByteAddrWidth-1:0] addr_calc;
349 1/1 assign addr_calc = (otp_addr_sel == DigestAddrSel) ? DigestOffset : {tlul_addr_q, 2'b00};
Tests: T1 T2 T3
350 1/1 assign otp_addr_o = addr_calc[OtpByteAddrWidth-1:OtpAddrShift];
Tests: T1 T2 T3
351
352 if (OtpAddrShift > 0) begin : gen_unused
353 logic unused_bits;
354 1/1 assign unused_bits = ^addr_calc[OtpAddrShift-1:0];
Tests: T1 T2 T3
355 end
356
357 // Request 32bit except in case of the digest.
358 1/1 assign otp_size_o = (otp_addr_sel == DigestAddrSel) ?
Tests: T1 T2 T3
359 OtpSizeWidth'(unsigned'(ScrmblBlockWidth / OtpWidth - 1)) :
360 OtpSizeWidth'(unsigned'(32 / OtpWidth - 1));
361
362 ////////////////
363 // Digest Reg //
364 ////////////////
365
366 if (Info.sw_digest) begin : gen_ecc_reg
367 // SEC_CM: PART.DATA_REG.INTEGRITY
368 otp_ctrl_ecc_reg #(
369 .Width ( ScrmblBlockWidth ),
370 .Depth ( 1 )
371 ) u_otp_ctrl_ecc_reg (
372 .clk_i,
373 .rst_ni,
374 .wren_i ( digest_reg_en ),
375 .addr_i ( '0 ),
376 .wdata_i ( otp_rdata_i ),
377 .rdata_o ( ),
378 .data_o ( digest_o ),
379 .ecc_err_o ( ecc_err )
380 );
381 end else begin : gen_no_ecc_reg
382 logic unused_digest_reg_en;
383 logic unused_rdata;
384 assign unused_digest_reg_en = digest_reg_en;
385 assign unused_rdata = ^otp_rdata_i[32 +: 32]; // Upper word is not connected in this case.
386 assign digest_o = '0;
387 assign ecc_err = 1'b0;
388 end
389
390 ////////////////////////
391 // DAI Access Control //
392 ////////////////////////
393
394 mubi8_t init_locked;
395 1/1 assign init_locked = (~init_done_o) ? MuBi8True : MuBi8False;
Tests: T1 T2 T3
396
397 // Aggregate all possible DAI write locks. The partition is also locked when uninitialized.
398 // Note that the locks are redundantly encoded values.
399 part_access_t access_pre;
400 prim_mubi8_sender #(
401 .AsyncOn(0)
402 ) u_prim_mubi8_sender_write_lock_pre (
403 .clk_i,
404 .rst_ni,
405 .mubi_i(mubi8_and_lo(init_locked, access_i.write_lock)),
406 .mubi_o(access_pre.write_lock)
407 );
408 prim_mubi8_sender #(
409 .AsyncOn(0)
410 ) u_prim_mubi8_sender_read_lock_pre (
411 .clk_i,
412 .rst_ni,
413 .mubi_i(mubi8_and_lo(init_locked, access_i.read_lock)),
414 .mubi_o(access_pre.read_lock)
415 );
416
417 // SEC_CM: PART.MEM.SW_UNWRITABLE
418 if (Info.write_lock) begin : gen_digest_write_lock
419 mubi8_t digest_locked;
420 1/1 assign digest_locked = (digest_o != '0) ? MuBi8True : MuBi8False;
Tests: T1 T2 T3
421
422 // This prevents the synthesis tool from optimizing the multibit signal.
423 prim_mubi8_sender #(
424 .AsyncOn(0)
425 ) u_prim_mubi8_sender_write_lock (
426 .clk_i,
427 .rst_ni,
428 .mubi_i(mubi8_and_lo(access_pre.write_lock, digest_locked)),
429 .mubi_o(access_o.write_lock)
430 );
431
432 `ASSERT(DigestWriteLocksPartition_A, digest_o |-> mubi8_test_true_loose(access_o.write_lock))
433 end else begin : gen_no_digest_write_lock
434 assign access_o.write_lock = access_pre.write_lock;
435 end
436
437 // SEC_CM: PART.MEM.SW_UNREADABLE
438 if (Info.read_lock) begin : gen_digest_read_lock
439 mubi8_t digest_locked;
440 assign digest_locked = (digest_o != '0) ? MuBi8True : MuBi8False;
441
442 // This prevents the synthesis tool from optimizing the multibit signal.
443 prim_mubi8_sender #(
444 .AsyncOn(0)
445 ) u_prim_mubi8_sender_read_lock (
446 .clk_i,
447 .rst_ni,
448 .mubi_i(mubi8_and_lo(access_pre.read_lock, digest_locked)),
449 .mubi_o(access_o.read_lock)
450 );
451
452 `ASSERT(DigestReadLocksPartition_A, digest_o |-> mubi8_test_true_loose(access_o.read_lock))
453 end else begin : gen_no_digest_read_lock
454 1/1 assign access_o.read_lock = access_pre.read_lock;
Tests: T1 T2 T3
455 end
456
457 ///////////////
458 // Registers //
459 ///////////////
460
461 3/3 `PRIM_FLOP_SPARSE_FSM(u_state_regs, state_d, state_q, state_e, ResetSt)
Tests: T1 T2 T3 | T1 T2 T3 | T1 T2 T3
PRIM_FLOP_SPARSE_FSM(u_state_regs, state_d, state_q, state_e, ResetSt):
461.1 `ifdef SIMULATION
461.2 prim_sparse_fsm_flop #(
461.3 .StateEnumT(state_e),
461.4 .Width($bits(state_e)),
461.5 .ResetValue($bits(state_e)'(ResetSt)),
461.6 .EnableAlertTriggerSVA(1),
461.7 .CustomForceName("state_q")
461.8 ) u_state_regs (
461.9 .clk_i ( clk_i ),
461.10 .rst_ni ( rst_ni ),
461.11 .state_i ( state_d ),
461.12 .state_o ( )
461.13 );
461.14 always_ff @(posedge clk_i or negedge rst_ni) begin
461.15 1/1 if (!rst_ni) begin
Tests: T1 T2 T3
461.16 1/1 state_q <= ResetSt;
Tests: T1 T2 T3
461.17 end else begin
461.18 1/1 state_q <= state_d;
Tests: T1 T2 T3
461.19 end
461.20 end
461.21 u_state_regs_A: assert property (@(posedge clk_i) disable iff ((!rst_ni) !== '0) (state_q === u_state_regs.state_o))
461.22 else begin
461.23 `ifdef UVM
461.24 uvm_pkg::uvm_report_error("ASSERT FAILED", "u_state_regs_A", uvm_pkg::UVM_NONE,
461.25 "../src/lowrisc_ip_otp_ctrl_1.0/rtl/otp_ctrl_part_unbuf.sv", 461, "", 1);
461.26 `else
461.27 $error("%0t: (%0s:%0d) [%m] [ASSERT FAILED] %0s", $time, `__FILE__, `__LINE__,
461.28 `PRIM_STRINGIFY(u_state_regs_A));
461.29 `endif
461.30 end
461.31 `else
461.32 prim_sparse_fsm_flop #(
461.33 .StateEnumT(state_e),
461.34 .Width($bits(state_e)),
461.35 .ResetValue($bits(state_e)'(ResetSt)),
461.36 .EnableAlertTriggerSVA(1)
461.37 ) u_state_regs (
461.38 .clk_i ( `PRIM_FLOP_CLK ),
461.39 .rst_ni ( `PRIM_FLOP_RST ),
461.40 .state_i ( state_d ),
461.41 .state_o ( state_q )
461.42 );
461.43 `endif462
463 always_ff @(posedge clk_i or negedge rst_ni) begin : p_regs
464 1/1 if (!rst_ni) begin
Tests: T1 T2 T3
465 1/1 error_q <= NoError;
Tests: T1 T2 T3
466 1/1 tlul_addr_q <= '0;
Tests: T1 T2 T3
467 1/1 pending_tlul_error_q <= 1'b0;
Tests: T1 T2 T3
468 end else begin
469 1/1 error_q <= error_d;
Tests: T1 T2 T3
470 1/1 pending_tlul_error_q <= pending_tlul_error_d;
Tests: T1 T2 T3
471 1/1 if (tlul_gnt_o) begin
Tests: T1 T2 T3
472 1/1 tlul_addr_q <= tlul_addr_d;
Tests: T2 T3 T4
473 end
MISSING_ELSE
Line Coverage for Module :
otp_ctrl_part_unbuf ( parameter Info=906698836,DigestOffset=1136,StateWidth=10 )
Line Coverage for Module self-instances :
| Line No. | Total | Covered | Percent |
|---|
| TOTAL | | 91 | 91 | 100.00 |
| CONT_ASSIGN | 138 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 149 | 1 | 1 | 100.00 |
| ALWAYS | 164 | 68 | 68 | 100.00 |
| CONT_ASSIGN | 334 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 336 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 342 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 349 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 350 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 354 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 358 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 395 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 420 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 454 | 1 | 1 | 100.00 |
| ALWAYS | 461 | 3 | 3 | 100.00 |
| ALWAYS | 464 | 8 | 8 | 100.00 |
137 // Output partition error state.
138 1/1 assign error_o = error_q;
Tests: T1 T2 T3
139
140 // This partition cannot do any write accesses, hence we tie this
141 // constantly off.
142 assign otp_wdata_o = '0;
143 // Depending on the partition configuration, the wrapper is instructed to ignore integrity
144 // calculations and checks. To be on the safe side, the partition filters error responses at this
145 // point and does not report any integrity errors if integrity is disabled.
146 otp_err_e otp_err;
147 if (Info.integrity) begin : gen_integrity
148 assign otp_cmd_o = prim_otp_pkg::Read;
149 1/1 assign otp_err = otp_err_e'(otp_err_i);
Tests: T1 T2 T3
150 end else begin : gen_no_integrity
151 assign otp_cmd_o = prim_otp_pkg::ReadRaw;
152 always_comb begin
153 if (otp_err_e'(otp_err_i) inside {MacroEccCorrError, MacroEccUncorrError}) begin
154 otp_err = NoError;
155 end else begin
156 otp_err = otp_err_e'(otp_err_i);
157 end
158 end
159 end
160
161 `ASSERT_KNOWN(FsmStateKnown_A, state_q)
162 always_comb begin : p_fsm
163 // Default assignments
164 1/1 state_d = state_q;
Tests: T1 T2 T3
165
166 // Response to init request
167 1/1 init_done_o = 1'b0;
Tests: T1 T2 T3
168
169 // OTP signals
170 1/1 otp_req_o = 1'b0;
Tests: T1 T2 T3
171 1/1 otp_addr_sel = DigestAddrSel;
Tests: T1 T2 T3
172
173 // TL-UL signals
174 1/1 tlul_gnt_o = 1'b0;
Tests: T1 T2 T3
175 1/1 tlul_rvalid_o = 1'b0;
Tests: T1 T2 T3
176 1/1 tlul_rerror_o = '0;
Tests: T1 T2 T3
177
178 // Enable for buffered digest register
179 1/1 digest_reg_en = 1'b0;
Tests: T1 T2 T3
180
181 // Error Register
182 1/1 error_d = error_q;
Tests: T1 T2 T3
183 1/1 pending_tlul_error_d = 1'b0;
Tests: T1 T2 T3
184 1/1 fsm_err_o = 1'b0;
Tests: T1 T2 T3
185
186 1/1 unique case (state_q)
Tests: T1 T2 T3
187 ///////////////////////////////////////////////////////////////////
188 // State right after reset. Wait here until we get a an
189 // initialization request.
190 ResetSt: begin
191 1/1 if (init_req_i) begin
Tests: T1 T2 T3
192 // If the partition does not have a digest, no initialization is necessary.
193 1/1 if (Info.sw_digest) begin
Tests: T1 T2 T3
194 1/1 state_d = InitSt;
Tests: T1 T2 T3
195 end else begin
196 unreachable state_d = IdleSt;
197 end
198 end
MISSING_ELSE
199 end
200 ///////////////////////////////////////////////////////////////////
201 // Initialization reads out the digest only in unbuffered
202 // partitions. Wait here until the OTP request has been granted.
203 // And then wait until the OTP word comes back.
204 InitSt: begin
205 1/1 otp_req_o = 1'b1;
Tests: T1 T2 T3
206 1/1 if (otp_gnt_i) begin
Tests: T1 T2 T3
207 1/1 state_d = InitWaitSt;
Tests: T1 T2 T3
208 end
MISSING_ELSE
209 end
210 ///////////////////////////////////////////////////////////////////
211 // Wait for OTP response and write to digest buffer register. In
212 // case an OTP transaction fails, latch the OTP error code and
213 // jump to a terminal error state.
214 InitWaitSt: begin
215 1/1 if (otp_rvalid_i) begin
Tests: T1 T2 T3
216 1/1 digest_reg_en = 1'b1;
Tests: T1 T2 T3
217 1/1 if (otp_err inside {NoError, MacroEccCorrError}) begin
Tests: T1 T2 T3
218 1/1 state_d = IdleSt;
Tests: T1 T2 T3
219 // At this point the only error that we could have gotten are correctable ECC errors.
220 1/1 if (otp_err != NoError) begin
Tests: T1 T2 T3
221 1/1 error_d = MacroEccCorrError;
Tests: T101 T142 T61
222 end
MISSING_ELSE
223 end else begin
224 1/1 state_d = ErrorSt;
Tests: T3 T194 T195
225 1/1 error_d = otp_err;
Tests: T3 T194 T195
226 end
227 end
MISSING_ELSE
228 end
229 ///////////////////////////////////////////////////////////////////
230 // Wait for TL-UL requests coming in.
231 // Then latch address and go to readout state.
232 IdleSt: begin
233 1/1 init_done_o = 1'b1;
Tests: T1 T2 T3
234 1/1 if (tlul_req_i) begin
Tests: T1 T2 T3
235 1/1 error_d = NoError; // clear recoverable soft errors.
Tests: T2 T3 T4
236 1/1 state_d = ReadSt;
Tests: T2 T3 T4
237 1/1 tlul_gnt_o = 1'b1;
Tests: T2 T3 T4
238 end
MISSING_ELSE
239 end
240 ///////////////////////////////////////////////////////////////////
241 // If the address is out of bounds, or if the partition is
242 // locked, signal back a bus error. Note that such an error does
243 // not cause the partition to go into error state. Otherwise if
244 // these checks pass, an OTP word is requested.
245 ReadSt: begin
246 1/1 init_done_o = 1'b1;
Tests: T2 T3 T4
247 // Double check the address range.
248 1/1 if (tlul_addr_in_range && mubi8_test_false_strict(access_o.read_lock)) begin
Tests: T2 T3 T4
249 1/1 otp_req_o = 1'b1;
Tests: T2 T3 T4
250 1/1 otp_addr_sel = DataAddrSel;
Tests: T2 T3 T4
251 1/1 if (otp_gnt_i) begin
Tests: T2 T3 T4
252 1/1 state_d = ReadWaitSt;
Tests: T2 T3 T4
253 end
MISSING_ELSE
254 end else begin
255 1/1 state_d = IdleSt;
Tests: T4 T51 T95
256 1/1 error_d = AccessError; // Signal this error, but do not go into terminal error state.
Tests: T4 T51 T95
257 1/1 tlul_rvalid_o = 1'b1;
Tests: T4 T51 T95
258 1/1 tlul_rerror_o = 2'b11; // This causes the TL-UL adapter to return a bus error.
Tests: T4 T51 T95
259 end
260 end
261 ///////////////////////////////////////////////////////////////////
262 // Wait for OTP response and release the TL-UL response. In
263 // case an OTP transaction fails, latch the OTP error code,
264 // signal a TL-Ul bus error and jump to a terminal error state.
265 ReadWaitSt: begin
266 1/1 init_done_o = 1'b1;
Tests: T2 T3 T4
267 1/1 if (otp_rvalid_i) begin
Tests: T2 T3 T4
268 1/1 tlul_rvalid_o = 1'b1;
Tests: T2 T3 T4
269 1/1 if (otp_err inside {NoError, MacroEccCorrError}) begin
Tests: T2 T3 T4
270 1/1 state_d = IdleSt;
Tests: T2 T3 T4
271 // At this point the only error that we could have gotten are correctable ECC errors.
272 1/1 if (otp_err != NoError) begin
Tests: T2 T3 T4
273 1/1 error_d = MacroEccCorrError;
Tests: T55 T36 T180
274 end
MISSING_ELSE
275 end else begin
276 1/1 state_d = ErrorSt;
Tests: T133 T181 T196
277 1/1 error_d = otp_err;
Tests: T133 T181 T196
278 // This causes the TL-UL adapter to return a bus error.
279 1/1 tlul_rerror_o = 2'b11;
Tests: T133 T181 T196
280 end
281 end
MISSING_ELSE
282 end
283 ///////////////////////////////////////////////////////////////////
284 // Terminal Error State. This locks access to the partition.
285 // Make sure the partition signals an error state if no error
286 // code has been latched so far.
287 ErrorSt: begin
288 1/1 if (error_q == NoError) begin
Tests: T3 T9 T44
289 1/1 error_d = FsmStateError;
Tests: T26 T27 T28
290 end
MISSING_ELSE
291
292 // Return bus errors if there are pending TL-UL requests.
293 1/1 if (pending_tlul_error_q) begin
Tests: T3 T9 T44
294 1/1 tlul_rerror_o = 2'b11;
Tests: T9 T35 T55
295 1/1 tlul_rvalid_o = 1'b1;
Tests: T9 T35 T55
296 1/1 end else if (tlul_req_i) begin
Tests: T3 T9 T44
297 1/1 tlul_gnt_o = 1'b1;
Tests: T9 T35 T55
298 1/1 pending_tlul_error_d = 1'b1;
Tests: T9 T35 T55
299 end
MISSING_ELSE
300 end
301 ///////////////////////////////////////////////////////////////////
302 // We should never get here. If we do (e.g. via a malicious
303 // glitch), error out immediately.
304 default: begin
305 state_d = ErrorSt;
306 fsm_err_o = 1'b1;
307 end
308 ///////////////////////////////////////////////////////////////////
309 endcase // state_q
310
311 // Unconditionally jump into the terminal error state in case of
312 // an ECC error or escalation, and lock access to the partition down.
313 // SEC_CM: PART.FSM.LOCAL_ESC
314 1/1 if (ecc_err) begin
Tests: T1 T2 T3
315 1/1 state_d = ErrorSt;
Tests: T177
316 1/1 if (state_q != ErrorSt) begin
Tests: T177
317 1/1 error_d = CheckFailError;
Tests: T177
318 end
MISSING_ELSE
319 end
MISSING_ELSE
320 // SEC_CM: PART.FSM.GLOBAL_ESC
321 1/1 if (lc_ctrl_pkg::lc_tx_test_true_loose(escalate_en_i)) begin
Tests: T1 T2 T3
322 1/1 state_d = ErrorSt;
Tests: T3 T9 T44
323 1/1 fsm_err_o = 1'b1;
Tests: T3 T9 T44
324 1/1 if (state_q != ErrorSt) begin
Tests: T3 T9 T44
325 1/1 error_d = FsmStateError;
Tests: T9 T44 T68
326 end
MISSING_ELSE
327 end
MISSING_ELSE
328 end
329
330 ///////////////////////////////////
331 // Signals to/from TL-UL Adapter //
332 ///////////////////////////////////
333
334 1/1 assign tlul_addr_d = tlul_addr_i;
Tests: T1 T2 T3
335 // Do not forward data in case of an error.
336 1/1 assign tlul_rdata_o = (tlul_rvalid_o && tlul_rerror_o == '0) ? otp_rdata_i[31:0] : '0;
Tests: T1 T2 T3
337
338 if (Info.offset == 0) begin : gen_zero_offset
339 assign tlul_addr_in_range = {1'b0, tlul_addr_q, 2'b00} < PartEnd;
340
341 end else begin : gen_nonzero_offset
342 1/1 assign tlul_addr_in_range = {tlul_addr_q, 2'b00} >= Info.offset &&
Tests: T1 T2 T3
343 {1'b0, tlul_addr_q, 2'b00} < PartEnd;
344 end
345
346 // Note that OTP works on halfword (16bit) addresses, hence need to
347 // shift the addresses appropriately.
348 logic [OtpByteAddrWidth-1:0] addr_calc;
349 1/1 assign addr_calc = (otp_addr_sel == DigestAddrSel) ? DigestOffset : {tlul_addr_q, 2'b00};
Tests: T1 T2 T3
350 1/1 assign otp_addr_o = addr_calc[OtpByteAddrWidth-1:OtpAddrShift];
Tests: T1 T2 T3
351
352 if (OtpAddrShift > 0) begin : gen_unused
353 logic unused_bits;
354 1/1 assign unused_bits = ^addr_calc[OtpAddrShift-1:0];
Tests: T1 T2 T3
355 end
356
357 // Request 32bit except in case of the digest.
358 1/1 assign otp_size_o = (otp_addr_sel == DigestAddrSel) ?
Tests: T1 T2 T3
359 OtpSizeWidth'(unsigned'(ScrmblBlockWidth / OtpWidth - 1)) :
360 OtpSizeWidth'(unsigned'(32 / OtpWidth - 1));
361
362 ////////////////
363 // Digest Reg //
364 ////////////////
365
366 if (Info.sw_digest) begin : gen_ecc_reg
367 // SEC_CM: PART.DATA_REG.INTEGRITY
368 otp_ctrl_ecc_reg #(
369 .Width ( ScrmblBlockWidth ),
370 .Depth ( 1 )
371 ) u_otp_ctrl_ecc_reg (
372 .clk_i,
373 .rst_ni,
374 .wren_i ( digest_reg_en ),
375 .addr_i ( '0 ),
376 .wdata_i ( otp_rdata_i ),
377 .rdata_o ( ),
378 .data_o ( digest_o ),
379 .ecc_err_o ( ecc_err )
380 );
381 end else begin : gen_no_ecc_reg
382 logic unused_digest_reg_en;
383 logic unused_rdata;
384 assign unused_digest_reg_en = digest_reg_en;
385 assign unused_rdata = ^otp_rdata_i[32 +: 32]; // Upper word is not connected in this case.
386 assign digest_o = '0;
387 assign ecc_err = 1'b0;
388 end
389
390 ////////////////////////
391 // DAI Access Control //
392 ////////////////////////
393
394 mubi8_t init_locked;
395 1/1 assign init_locked = (~init_done_o) ? MuBi8True : MuBi8False;
Tests: T1 T2 T3
396
397 // Aggregate all possible DAI write locks. The partition is also locked when uninitialized.
398 // Note that the locks are redundantly encoded values.
399 part_access_t access_pre;
400 prim_mubi8_sender #(
401 .AsyncOn(0)
402 ) u_prim_mubi8_sender_write_lock_pre (
403 .clk_i,
404 .rst_ni,
405 .mubi_i(mubi8_and_lo(init_locked, access_i.write_lock)),
406 .mubi_o(access_pre.write_lock)
407 );
408 prim_mubi8_sender #(
409 .AsyncOn(0)
410 ) u_prim_mubi8_sender_read_lock_pre (
411 .clk_i,
412 .rst_ni,
413 .mubi_i(mubi8_and_lo(init_locked, access_i.read_lock)),
414 .mubi_o(access_pre.read_lock)
415 );
416
417 // SEC_CM: PART.MEM.SW_UNWRITABLE
418 if (Info.write_lock) begin : gen_digest_write_lock
419 mubi8_t digest_locked;
420 1/1 assign digest_locked = (digest_o != '0) ? MuBi8True : MuBi8False;
Tests: T1 T2 T3
421
422 // This prevents the synthesis tool from optimizing the multibit signal.
423 prim_mubi8_sender #(
424 .AsyncOn(0)
425 ) u_prim_mubi8_sender_write_lock (
426 .clk_i,
427 .rst_ni,
428 .mubi_i(mubi8_and_lo(access_pre.write_lock, digest_locked)),
429 .mubi_o(access_o.write_lock)
430 );
431
432 `ASSERT(DigestWriteLocksPartition_A, digest_o |-> mubi8_test_true_loose(access_o.write_lock))
433 end else begin : gen_no_digest_write_lock
434 assign access_o.write_lock = access_pre.write_lock;
435 end
436
437 // SEC_CM: PART.MEM.SW_UNREADABLE
438 if (Info.read_lock) begin : gen_digest_read_lock
439 mubi8_t digest_locked;
440 assign digest_locked = (digest_o != '0) ? MuBi8True : MuBi8False;
441
442 // This prevents the synthesis tool from optimizing the multibit signal.
443 prim_mubi8_sender #(
444 .AsyncOn(0)
445 ) u_prim_mubi8_sender_read_lock (
446 .clk_i,
447 .rst_ni,
448 .mubi_i(mubi8_and_lo(access_pre.read_lock, digest_locked)),
449 .mubi_o(access_o.read_lock)
450 );
451
452 `ASSERT(DigestReadLocksPartition_A, digest_o |-> mubi8_test_true_loose(access_o.read_lock))
453 end else begin : gen_no_digest_read_lock
454 1/1 assign access_o.read_lock = access_pre.read_lock;
Tests: T1 T2 T3
455 end
456
457 ///////////////
458 // Registers //
459 ///////////////
460
461 3/3 `PRIM_FLOP_SPARSE_FSM(u_state_regs, state_d, state_q, state_e, ResetSt)
Tests: T1 T2 T3 | T1 T2 T3 | T1 T2 T3
PRIM_FLOP_SPARSE_FSM(u_state_regs, state_d, state_q, state_e, ResetSt):
461.1 `ifdef SIMULATION
461.2 prim_sparse_fsm_flop #(
461.3 .StateEnumT(state_e),
461.4 .Width($bits(state_e)),
461.5 .ResetValue($bits(state_e)'(ResetSt)),
461.6 .EnableAlertTriggerSVA(1),
461.7 .CustomForceName("state_q")
461.8 ) u_state_regs (
461.9 .clk_i ( clk_i ),
461.10 .rst_ni ( rst_ni ),
461.11 .state_i ( state_d ),
461.12 .state_o ( )
461.13 );
461.14 always_ff @(posedge clk_i or negedge rst_ni) begin
461.15 1/1 if (!rst_ni) begin
Tests: T1 T2 T3
461.16 1/1 state_q <= ResetSt;
Tests: T1 T2 T3
461.17 end else begin
461.18 1/1 state_q <= state_d;
Tests: T1 T2 T3
461.19 end
461.20 end
461.21 u_state_regs_A: assert property (@(posedge clk_i) disable iff ((!rst_ni) !== '0) (state_q === u_state_regs.state_o))
461.22 else begin
461.23 `ifdef UVM
461.24 uvm_pkg::uvm_report_error("ASSERT FAILED", "u_state_regs_A", uvm_pkg::UVM_NONE,
461.25 "../src/lowrisc_ip_otp_ctrl_1.0/rtl/otp_ctrl_part_unbuf.sv", 461, "", 1);
461.26 `else
461.27 $error("%0t: (%0s:%0d) [%m] [ASSERT FAILED] %0s", $time, `__FILE__, `__LINE__,
461.28 `PRIM_STRINGIFY(u_state_regs_A));
461.29 `endif
461.30 end
461.31 `else
461.32 prim_sparse_fsm_flop #(
461.33 .StateEnumT(state_e),
461.34 .Width($bits(state_e)),
461.35 .ResetValue($bits(state_e)'(ResetSt)),
461.36 .EnableAlertTriggerSVA(1)
461.37 ) u_state_regs (
461.38 .clk_i ( `PRIM_FLOP_CLK ),
461.39 .rst_ni ( `PRIM_FLOP_RST ),
461.40 .state_i ( state_d ),
461.41 .state_o ( state_q )
461.42 );
461.43 `endif462
463 always_ff @(posedge clk_i or negedge rst_ni) begin : p_regs
464 1/1 if (!rst_ni) begin
Tests: T1 T2 T3
465 1/1 error_q <= NoError;
Tests: T1 T2 T3
466 1/1 tlul_addr_q <= '0;
Tests: T1 T2 T3
467 1/1 pending_tlul_error_q <= 1'b0;
Tests: T1 T2 T3
468 end else begin
469 1/1 error_q <= error_d;
Tests: T1 T2 T3
470 1/1 pending_tlul_error_q <= pending_tlul_error_d;
Tests: T1 T2 T3
471 1/1 if (tlul_gnt_o) begin
Tests: T1 T2 T3
472 1/1 tlul_addr_q <= tlul_addr_d;
Tests: T2 T3 T4
473 end
MISSING_ELSE
Line Coverage for Module :
otp_ctrl_part_unbuf ( parameter Info=-1,DigestOffset=1608,StateWidth=10 )
Line Coverage for Module self-instances :
| Line No. | Total | Covered | Percent |
|---|
| TOTAL | | 91 | 91 | 100.00 |
| CONT_ASSIGN | 138 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 149 | 1 | 1 | 100.00 |
| ALWAYS | 164 | 68 | 68 | 100.00 |
| CONT_ASSIGN | 334 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 336 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 342 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 349 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 350 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 354 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 358 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 395 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 420 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 454 | 1 | 1 | 100.00 |
| ALWAYS | 461 | 3 | 3 | 100.00 |
| ALWAYS | 464 | 8 | 8 | 100.00 |
137 // Output partition error state.
138 1/1 assign error_o = error_q;
Tests: T1 T2 T3
139
140 // This partition cannot do any write accesses, hence we tie this
141 // constantly off.
142 assign otp_wdata_o = '0;
143 // Depending on the partition configuration, the wrapper is instructed to ignore integrity
144 // calculations and checks. To be on the safe side, the partition filters error responses at this
145 // point and does not report any integrity errors if integrity is disabled.
146 otp_err_e otp_err;
147 if (Info.integrity) begin : gen_integrity
148 assign otp_cmd_o = prim_otp_pkg::Read;
149 1/1 assign otp_err = otp_err_e'(otp_err_i);
Tests: T1 T2 T3
150 end else begin : gen_no_integrity
151 assign otp_cmd_o = prim_otp_pkg::ReadRaw;
152 always_comb begin
153 if (otp_err_e'(otp_err_i) inside {MacroEccCorrError, MacroEccUncorrError}) begin
154 otp_err = NoError;
155 end else begin
156 otp_err = otp_err_e'(otp_err_i);
157 end
158 end
159 end
160
161 `ASSERT_KNOWN(FsmStateKnown_A, state_q)
162 always_comb begin : p_fsm
163 // Default assignments
164 1/1 state_d = state_q;
Tests: T1 T2 T3
165
166 // Response to init request
167 1/1 init_done_o = 1'b0;
Tests: T1 T2 T3
168
169 // OTP signals
170 1/1 otp_req_o = 1'b0;
Tests: T1 T2 T3
171 1/1 otp_addr_sel = DigestAddrSel;
Tests: T1 T2 T3
172
173 // TL-UL signals
174 1/1 tlul_gnt_o = 1'b0;
Tests: T1 T2 T3
175 1/1 tlul_rvalid_o = 1'b0;
Tests: T1 T2 T3
176 1/1 tlul_rerror_o = '0;
Tests: T1 T2 T3
177
178 // Enable for buffered digest register
179 1/1 digest_reg_en = 1'b0;
Tests: T1 T2 T3
180
181 // Error Register
182 1/1 error_d = error_q;
Tests: T1 T2 T3
183 1/1 pending_tlul_error_d = 1'b0;
Tests: T1 T2 T3
184 1/1 fsm_err_o = 1'b0;
Tests: T1 T2 T3
185
186 1/1 unique case (state_q)
Tests: T1 T2 T3
187 ///////////////////////////////////////////////////////////////////
188 // State right after reset. Wait here until we get a an
189 // initialization request.
190 ResetSt: begin
191 1/1 if (init_req_i) begin
Tests: T1 T2 T3
192 // If the partition does not have a digest, no initialization is necessary.
193 1/1 if (Info.sw_digest) begin
Tests: T1 T2 T3
194 1/1 state_d = InitSt;
Tests: T1 T2 T3
195 end else begin
196 unreachable state_d = IdleSt;
197 end
198 end
MISSING_ELSE
199 end
200 ///////////////////////////////////////////////////////////////////
201 // Initialization reads out the digest only in unbuffered
202 // partitions. Wait here until the OTP request has been granted.
203 // And then wait until the OTP word comes back.
204 InitSt: begin
205 1/1 otp_req_o = 1'b1;
Tests: T1 T2 T3
206 1/1 if (otp_gnt_i) begin
Tests: T1 T2 T3
207 1/1 state_d = InitWaitSt;
Tests: T1 T2 T3
208 end
MISSING_ELSE
209 end
210 ///////////////////////////////////////////////////////////////////
211 // Wait for OTP response and write to digest buffer register. In
212 // case an OTP transaction fails, latch the OTP error code and
213 // jump to a terminal error state.
214 InitWaitSt: begin
215 1/1 if (otp_rvalid_i) begin
Tests: T1 T2 T3
216 1/1 digest_reg_en = 1'b1;
Tests: T1 T2 T3
217 1/1 if (otp_err inside {NoError, MacroEccCorrError}) begin
Tests: T1 T2 T3
218 1/1 state_d = IdleSt;
Tests: T1 T2 T3
219 // At this point the only error that we could have gotten are correctable ECC errors.
220 1/1 if (otp_err != NoError) begin
Tests: T1 T2 T3
221 1/1 error_d = MacroEccCorrError;
Tests: T101 T48 T69
222 end
MISSING_ELSE
223 end else begin
224 1/1 state_d = ErrorSt;
Tests: T68 T190 T197
225 1/1 error_d = otp_err;
Tests: T68 T190 T197
226 end
227 end
MISSING_ELSE
228 end
229 ///////////////////////////////////////////////////////////////////
230 // Wait for TL-UL requests coming in.
231 // Then latch address and go to readout state.
232 IdleSt: begin
233 1/1 init_done_o = 1'b1;
Tests: T1 T2 T3
234 1/1 if (tlul_req_i) begin
Tests: T1 T2 T3
235 1/1 error_d = NoError; // clear recoverable soft errors.
Tests: T2 T3 T4
236 1/1 state_d = ReadSt;
Tests: T2 T3 T4
237 1/1 tlul_gnt_o = 1'b1;
Tests: T2 T3 T4
238 end
MISSING_ELSE
239 end
240 ///////////////////////////////////////////////////////////////////
241 // If the address is out of bounds, or if the partition is
242 // locked, signal back a bus error. Note that such an error does
243 // not cause the partition to go into error state. Otherwise if
244 // these checks pass, an OTP word is requested.
245 ReadSt: begin
246 1/1 init_done_o = 1'b1;
Tests: T2 T3 T4
247 // Double check the address range.
248 1/1 if (tlul_addr_in_range && mubi8_test_false_strict(access_o.read_lock)) begin
Tests: T2 T3 T4
249 1/1 otp_req_o = 1'b1;
Tests: T2 T3 T4
250 1/1 otp_addr_sel = DataAddrSel;
Tests: T2 T3 T4
251 1/1 if (otp_gnt_i) begin
Tests: T2 T3 T4
252 1/1 state_d = ReadWaitSt;
Tests: T2 T3 T4
253 end
MISSING_ELSE
254 end else begin
255 1/1 state_d = IdleSt;
Tests: T4 T98 T124
256 1/1 error_d = AccessError; // Signal this error, but do not go into terminal error state.
Tests: T4 T98 T124
257 1/1 tlul_rvalid_o = 1'b1;
Tests: T4 T98 T124
258 1/1 tlul_rerror_o = 2'b11; // This causes the TL-UL adapter to return a bus error.
Tests: T4 T98 T124
259 end
260 end
261 ///////////////////////////////////////////////////////////////////
262 // Wait for OTP response and release the TL-UL response. In
263 // case an OTP transaction fails, latch the OTP error code,
264 // signal a TL-Ul bus error and jump to a terminal error state.
265 ReadWaitSt: begin
266 1/1 init_done_o = 1'b1;
Tests: T2 T3 T4
267 1/1 if (otp_rvalid_i) begin
Tests: T2 T3 T4
268 1/1 tlul_rvalid_o = 1'b1;
Tests: T2 T3 T4
269 1/1 if (otp_err inside {NoError, MacroEccCorrError}) begin
Tests: T2 T3 T4
270 1/1 state_d = IdleSt;
Tests: T2 T3 T4
271 // At this point the only error that we could have gotten are correctable ECC errors.
272 1/1 if (otp_err != NoError) begin
Tests: T2 T3 T4
273 1/1 error_d = MacroEccCorrError;
Tests: T36 T198 T159
274 end
MISSING_ELSE
275 end else begin
276 1/1 state_d = ErrorSt;
Tests: T180 T181 T199
277 1/1 error_d = otp_err;
Tests: T180 T181 T199
278 // This causes the TL-UL adapter to return a bus error.
279 1/1 tlul_rerror_o = 2'b11;
Tests: T180 T181 T199
280 end
281 end
MISSING_ELSE
282 end
283 ///////////////////////////////////////////////////////////////////
284 // Terminal Error State. This locks access to the partition.
285 // Make sure the partition signals an error state if no error
286 // code has been latched so far.
287 ErrorSt: begin
288 1/1 if (error_q == NoError) begin
Tests: T3 T9 T44
289 1/1 error_d = FsmStateError;
Tests: T26 T27 T28
290 end
MISSING_ELSE
291
292 // Return bus errors if there are pending TL-UL requests.
293 1/1 if (pending_tlul_error_q) begin
Tests: T3 T9 T44
294 1/1 tlul_rerror_o = 2'b11;
Tests: T9 T35 T94
295 1/1 tlul_rvalid_o = 1'b1;
Tests: T9 T35 T94
296 1/1 end else if (tlul_req_i) begin
Tests: T3 T9 T44
297 1/1 tlul_gnt_o = 1'b1;
Tests: T9 T35 T94
298 1/1 pending_tlul_error_d = 1'b1;
Tests: T9 T35 T94
299 end
MISSING_ELSE
300 end
301 ///////////////////////////////////////////////////////////////////
302 // We should never get here. If we do (e.g. via a malicious
303 // glitch), error out immediately.
304 default: begin
305 state_d = ErrorSt;
306 fsm_err_o = 1'b1;
307 end
308 ///////////////////////////////////////////////////////////////////
309 endcase // state_q
310
311 // Unconditionally jump into the terminal error state in case of
312 // an ECC error or escalation, and lock access to the partition down.
313 // SEC_CM: PART.FSM.LOCAL_ESC
314 1/1 if (ecc_err) begin
Tests: T1 T2 T3
315 1/1 state_d = ErrorSt;
Tests: T177 T188 T189
316 1/1 if (state_q != ErrorSt) begin
Tests: T177 T188 T189
317 1/1 error_d = CheckFailError;
Tests: T177 T188 T189
318 end
MISSING_ELSE
319 end
MISSING_ELSE
320 // SEC_CM: PART.FSM.GLOBAL_ESC
321 1/1 if (lc_ctrl_pkg::lc_tx_test_true_loose(escalate_en_i)) begin
Tests: T1 T2 T3
322 1/1 state_d = ErrorSt;
Tests: T3 T9 T44
323 1/1 fsm_err_o = 1'b1;
Tests: T3 T9 T44
324 1/1 if (state_q != ErrorSt) begin
Tests: T3 T9 T44
325 1/1 error_d = FsmStateError;
Tests: T3 T9 T44
326 end
MISSING_ELSE
327 end
MISSING_ELSE
328 end
329
330 ///////////////////////////////////
331 // Signals to/from TL-UL Adapter //
332 ///////////////////////////////////
333
334 1/1 assign tlul_addr_d = tlul_addr_i;
Tests: T1 T2 T3
335 // Do not forward data in case of an error.
336 1/1 assign tlul_rdata_o = (tlul_rvalid_o && tlul_rerror_o == '0) ? otp_rdata_i[31:0] : '0;
Tests: T1 T2 T3
337
338 if (Info.offset == 0) begin : gen_zero_offset
339 assign tlul_addr_in_range = {1'b0, tlul_addr_q, 2'b00} < PartEnd;
340
341 end else begin : gen_nonzero_offset
342 1/1 assign tlul_addr_in_range = {tlul_addr_q, 2'b00} >= Info.offset &&
Tests: T1 T2 T3
343 {1'b0, tlul_addr_q, 2'b00} < PartEnd;
344 end
345
346 // Note that OTP works on halfword (16bit) addresses, hence need to
347 // shift the addresses appropriately.
348 logic [OtpByteAddrWidth-1:0] addr_calc;
349 1/1 assign addr_calc = (otp_addr_sel == DigestAddrSel) ? DigestOffset : {tlul_addr_q, 2'b00};
Tests: T1 T2 T3
350 1/1 assign otp_addr_o = addr_calc[OtpByteAddrWidth-1:OtpAddrShift];
Tests: T1 T2 T3
351
352 if (OtpAddrShift > 0) begin : gen_unused
353 logic unused_bits;
354 1/1 assign unused_bits = ^addr_calc[OtpAddrShift-1:0];
Tests: T1 T2 T3
355 end
356
357 // Request 32bit except in case of the digest.
358 1/1 assign otp_size_o = (otp_addr_sel == DigestAddrSel) ?
Tests: T1 T2 T3
359 OtpSizeWidth'(unsigned'(ScrmblBlockWidth / OtpWidth - 1)) :
360 OtpSizeWidth'(unsigned'(32 / OtpWidth - 1));
361
362 ////////////////
363 // Digest Reg //
364 ////////////////
365
366 if (Info.sw_digest) begin : gen_ecc_reg
367 // SEC_CM: PART.DATA_REG.INTEGRITY
368 otp_ctrl_ecc_reg #(
369 .Width ( ScrmblBlockWidth ),
370 .Depth ( 1 )
371 ) u_otp_ctrl_ecc_reg (
372 .clk_i,
373 .rst_ni,
374 .wren_i ( digest_reg_en ),
375 .addr_i ( '0 ),
376 .wdata_i ( otp_rdata_i ),
377 .rdata_o ( ),
378 .data_o ( digest_o ),
379 .ecc_err_o ( ecc_err )
380 );
381 end else begin : gen_no_ecc_reg
382 logic unused_digest_reg_en;
383 logic unused_rdata;
384 assign unused_digest_reg_en = digest_reg_en;
385 assign unused_rdata = ^otp_rdata_i[32 +: 32]; // Upper word is not connected in this case.
386 assign digest_o = '0;
387 assign ecc_err = 1'b0;
388 end
389
390 ////////////////////////
391 // DAI Access Control //
392 ////////////////////////
393
394 mubi8_t init_locked;
395 1/1 assign init_locked = (~init_done_o) ? MuBi8True : MuBi8False;
Tests: T1 T2 T3
396
397 // Aggregate all possible DAI write locks. The partition is also locked when uninitialized.
398 // Note that the locks are redundantly encoded values.
399 part_access_t access_pre;
400 prim_mubi8_sender #(
401 .AsyncOn(0)
402 ) u_prim_mubi8_sender_write_lock_pre (
403 .clk_i,
404 .rst_ni,
405 .mubi_i(mubi8_and_lo(init_locked, access_i.write_lock)),
406 .mubi_o(access_pre.write_lock)
407 );
408 prim_mubi8_sender #(
409 .AsyncOn(0)
410 ) u_prim_mubi8_sender_read_lock_pre (
411 .clk_i,
412 .rst_ni,
413 .mubi_i(mubi8_and_lo(init_locked, access_i.read_lock)),
414 .mubi_o(access_pre.read_lock)
415 );
416
417 // SEC_CM: PART.MEM.SW_UNWRITABLE
418 if (Info.write_lock) begin : gen_digest_write_lock
419 mubi8_t digest_locked;
420 1/1 assign digest_locked = (digest_o != '0) ? MuBi8True : MuBi8False;
Tests: T1 T2 T3
421
422 // This prevents the synthesis tool from optimizing the multibit signal.
423 prim_mubi8_sender #(
424 .AsyncOn(0)
425 ) u_prim_mubi8_sender_write_lock (
426 .clk_i,
427 .rst_ni,
428 .mubi_i(mubi8_and_lo(access_pre.write_lock, digest_locked)),
429 .mubi_o(access_o.write_lock)
430 );
431
432 `ASSERT(DigestWriteLocksPartition_A, digest_o |-> mubi8_test_true_loose(access_o.write_lock))
433 end else begin : gen_no_digest_write_lock
434 assign access_o.write_lock = access_pre.write_lock;
435 end
436
437 // SEC_CM: PART.MEM.SW_UNREADABLE
438 if (Info.read_lock) begin : gen_digest_read_lock
439 mubi8_t digest_locked;
440 assign digest_locked = (digest_o != '0) ? MuBi8True : MuBi8False;
441
442 // This prevents the synthesis tool from optimizing the multibit signal.
443 prim_mubi8_sender #(
444 .AsyncOn(0)
445 ) u_prim_mubi8_sender_read_lock (
446 .clk_i,
447 .rst_ni,
448 .mubi_i(mubi8_and_lo(access_pre.read_lock, digest_locked)),
449 .mubi_o(access_o.read_lock)
450 );
451
452 `ASSERT(DigestReadLocksPartition_A, digest_o |-> mubi8_test_true_loose(access_o.read_lock))
453 end else begin : gen_no_digest_read_lock
454 1/1 assign access_o.read_lock = access_pre.read_lock;
Tests: T1 T2 T3
455 end
456
457 ///////////////
458 // Registers //
459 ///////////////
460
461 3/3 `PRIM_FLOP_SPARSE_FSM(u_state_regs, state_d, state_q, state_e, ResetSt)
Tests: T1 T2 T3 | T1 T2 T3 | T1 T2 T3
PRIM_FLOP_SPARSE_FSM(u_state_regs, state_d, state_q, state_e, ResetSt):
461.1 `ifdef SIMULATION
461.2 prim_sparse_fsm_flop #(
461.3 .StateEnumT(state_e),
461.4 .Width($bits(state_e)),
461.5 .ResetValue($bits(state_e)'(ResetSt)),
461.6 .EnableAlertTriggerSVA(1),
461.7 .CustomForceName("state_q")
461.8 ) u_state_regs (
461.9 .clk_i ( clk_i ),
461.10 .rst_ni ( rst_ni ),
461.11 .state_i ( state_d ),
461.12 .state_o ( )
461.13 );
461.14 always_ff @(posedge clk_i or negedge rst_ni) begin
461.15 1/1 if (!rst_ni) begin
Tests: T1 T2 T3
461.16 1/1 state_q <= ResetSt;
Tests: T1 T2 T3
461.17 end else begin
461.18 1/1 state_q <= state_d;
Tests: T1 T2 T3
461.19 end
461.20 end
461.21 u_state_regs_A: assert property (@(posedge clk_i) disable iff ((!rst_ni) !== '0) (state_q === u_state_regs.state_o))
461.22 else begin
461.23 `ifdef UVM
461.24 uvm_pkg::uvm_report_error("ASSERT FAILED", "u_state_regs_A", uvm_pkg::UVM_NONE,
461.25 "../src/lowrisc_ip_otp_ctrl_1.0/rtl/otp_ctrl_part_unbuf.sv", 461, "", 1);
461.26 `else
461.27 $error("%0t: (%0s:%0d) [%m] [ASSERT FAILED] %0s", $time, `__FILE__, `__LINE__,
461.28 `PRIM_STRINGIFY(u_state_regs_A));
461.29 `endif
461.30 end
461.31 `else
461.32 prim_sparse_fsm_flop #(
461.33 .StateEnumT(state_e),
461.34 .Width($bits(state_e)),
461.35 .ResetValue($bits(state_e)'(ResetSt)),
461.36 .EnableAlertTriggerSVA(1)
461.37 ) u_state_regs (
461.38 .clk_i ( `PRIM_FLOP_CLK ),
461.39 .rst_ni ( `PRIM_FLOP_RST ),
461.40 .state_i ( state_d ),
461.41 .state_o ( state_q )
461.42 );
461.43 `endif462
463 always_ff @(posedge clk_i or negedge rst_ni) begin : p_regs
464 1/1 if (!rst_ni) begin
Tests: T1 T2 T3
465 1/1 error_q <= NoError;
Tests: T1 T2 T3
466 1/1 tlul_addr_q <= '0;
Tests: T1 T2 T3
467 1/1 pending_tlul_error_q <= 1'b0;
Tests: T1 T2 T3
468 end else begin
469 1/1 error_q <= error_d;
Tests: T1 T2 T3
470 1/1 pending_tlul_error_q <= pending_tlul_error_d;
Tests: T1 T2 T3
471 1/1 if (tlul_gnt_o) begin
Tests: T1 T2 T3
472 1/1 tlul_addr_q <= tlul_addr_d;
Tests: T2 T3 T4
473 end
MISSING_ELSE
Line Coverage for Module :
otp_ctrl_part_unbuf ( parameter Info=-1,DigestOffset=1648,StateWidth=10 )
Line Coverage for Module self-instances :
| Line No. | Total | Covered | Percent |
|---|
| TOTAL | | 91 | 91 | 100.00 |
| CONT_ASSIGN | 138 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 149 | 1 | 1 | 100.00 |
| ALWAYS | 164 | 68 | 68 | 100.00 |
| CONT_ASSIGN | 334 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 336 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 342 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 349 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 350 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 354 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 358 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 395 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 420 | 1 | 1 | 100.00 |
| CONT_ASSIGN | 454 | 1 | 1 | 100.00 |
| ALWAYS | 461 | 3 | 3 | 100.00 |
| ALWAYS | 464 | 8 | 8 | 100.00 |
137 // Output partition error state.
138 1/1 assign error_o = error_q;
Tests: T1 T2 T3
139
140 // This partition cannot do any write accesses, hence we tie this
141 // constantly off.
142 assign otp_wdata_o = '0;
143 // Depending on the partition configuration, the wrapper is instructed to ignore integrity
144 // calculations and checks. To be on the safe side, the partition filters error responses at this
145 // point and does not report any integrity errors if integrity is disabled.
146 otp_err_e otp_err;
147 if (Info.integrity) begin : gen_integrity
148 assign otp_cmd_o = prim_otp_pkg::Read;
149 1/1 assign otp_err = otp_err_e'(otp_err_i);
Tests: T1 T2 T3
150 end else begin : gen_no_integrity
151 assign otp_cmd_o = prim_otp_pkg::ReadRaw;
152 always_comb begin
153 if (otp_err_e'(otp_err_i) inside {MacroEccCorrError, MacroEccUncorrError}) begin
154 otp_err = NoError;
155 end else begin
156 otp_err = otp_err_e'(otp_err_i);
157 end
158 end
159 end
160
161 `ASSERT_KNOWN(FsmStateKnown_A, state_q)
162 always_comb begin : p_fsm
163 // Default assignments
164 1/1 state_d = state_q;
Tests: T1 T2 T3
165
166 // Response to init request
167 1/1 init_done_o = 1'b0;
Tests: T1 T2 T3
168
169 // OTP signals
170 1/1 otp_req_o = 1'b0;
Tests: T1 T2 T3
171 1/1 otp_addr_sel = DigestAddrSel;
Tests: T1 T2 T3
172
173 // TL-UL signals
174 1/1 tlul_gnt_o = 1'b0;
Tests: T1 T2 T3
175 1/1 tlul_rvalid_o = 1'b0;
Tests: T1 T2 T3
176 1/1 tlul_rerror_o = '0;
Tests: T1 T2 T3
177
178 // Enable for buffered digest register
179 1/1 digest_reg_en = 1'b0;
Tests: T1 T2 T3
180
181 // Error Register
182 1/1 error_d = error_q;
Tests: T1 T2 T3
183 1/1 pending_tlul_error_d = 1'b0;
Tests: T1 T2 T3
184 1/1 fsm_err_o = 1'b0;
Tests: T1 T2 T3
185
186 1/1 unique case (state_q)
Tests: T1 T2 T3
187 ///////////////////////////////////////////////////////////////////
188 // State right after reset. Wait here until we get a an
189 // initialization request.
190 ResetSt: begin
191 1/1 if (init_req_i) begin
Tests: T1 T2 T3
192 // If the partition does not have a digest, no initialization is necessary.
193 1/1 if (Info.sw_digest) begin
Tests: T1 T2 T3
194 1/1 state_d = InitSt;
Tests: T1 T2 T3
195 end else begin
196 unreachable state_d = IdleSt;
197 end
198 end
MISSING_ELSE
199 end
200 ///////////////////////////////////////////////////////////////////
201 // Initialization reads out the digest only in unbuffered
202 // partitions. Wait here until the OTP request has been granted.
203 // And then wait until the OTP word comes back.
204 InitSt: begin
205 1/1 otp_req_o = 1'b1;
Tests: T1 T2 T3
206 1/1 if (otp_gnt_i) begin
Tests: T1 T2 T3
207 1/1 state_d = InitWaitSt;
Tests: T1 T2 T3
208 end
MISSING_ELSE
209 end
210 ///////////////////////////////////////////////////////////////////
211 // Wait for OTP response and write to digest buffer register. In
212 // case an OTP transaction fails, latch the OTP error code and
213 // jump to a terminal error state.
214 InitWaitSt: begin
215 1/1 if (otp_rvalid_i) begin
Tests: T1 T2 T3
216 1/1 digest_reg_en = 1'b1;
Tests: T1 T2 T3
217 1/1 if (otp_err inside {NoError, MacroEccCorrError}) begin
Tests: T1 T2 T3
218 1/1 state_d = IdleSt;
Tests: T1 T2 T3
219 // At this point the only error that we could have gotten are correctable ECC errors.
220 1/1 if (otp_err != NoError) begin
Tests: T1 T2 T3
221 1/1 error_d = MacroEccCorrError;
Tests: T29 T61 T50
222 end
MISSING_ELSE
223 end else begin
224 1/1 state_d = ErrorSt;
Tests: T101 T142 T200
225 1/1 error_d = otp_err;
Tests: T101 T142 T200
226 end
227 end
MISSING_ELSE
228 end
229 ///////////////////////////////////////////////////////////////////
230 // Wait for TL-UL requests coming in.
231 // Then latch address and go to readout state.
232 IdleSt: begin
233 1/1 init_done_o = 1'b1;
Tests: T1 T2 T3
234 1/1 if (tlul_req_i) begin
Tests: T1 T2 T3
235 1/1 error_d = NoError; // clear recoverable soft errors.
Tests: T2 T3 T4
236 1/1 state_d = ReadSt;
Tests: T2 T3 T4
237 1/1 tlul_gnt_o = 1'b1;
Tests: T2 T3 T4
238 end
MISSING_ELSE
239 end
240 ///////////////////////////////////////////////////////////////////
241 // If the address is out of bounds, or if the partition is
242 // locked, signal back a bus error. Note that such an error does
243 // not cause the partition to go into error state. Otherwise if
244 // these checks pass, an OTP word is requested.
245 ReadSt: begin
246 1/1 init_done_o = 1'b1;
Tests: T2 T3 T4
247 // Double check the address range.
248 1/1 if (tlul_addr_in_range && mubi8_test_false_strict(access_o.read_lock)) begin
Tests: T2 T3 T4
249 1/1 otp_req_o = 1'b1;
Tests: T2 T3 T4
250 1/1 otp_addr_sel = DataAddrSel;
Tests: T2 T3 T4
251 1/1 if (otp_gnt_i) begin
Tests: T2 T3 T4
252 1/1 state_d = ReadWaitSt;
Tests: T2 T3 T4
253 end
MISSING_ELSE
254 end else begin
255 1/1 state_d = IdleSt;
Tests: T4 T51 T95
256 1/1 error_d = AccessError; // Signal this error, but do not go into terminal error state.
Tests: T4 T51 T95
257 1/1 tlul_rvalid_o = 1'b1;
Tests: T4 T51 T95
258 1/1 tlul_rerror_o = 2'b11; // This causes the TL-UL adapter to return a bus error.
Tests: T4 T51 T95
259 end
260 end
261 ///////////////////////////////////////////////////////////////////
262 // Wait for OTP response and release the TL-UL response. In
263 // case an OTP transaction fails, latch the OTP error code,
264 // signal a TL-Ul bus error and jump to a terminal error state.
265 ReadWaitSt: begin
266 1/1 init_done_o = 1'b1;
Tests: T2 T3 T4
267 1/1 if (otp_rvalid_i) begin
Tests: T2 T3 T4
268 1/1 tlul_rvalid_o = 1'b1;
Tests: T2 T3 T4
269 1/1 if (otp_err inside {NoError, MacroEccCorrError}) begin
Tests: T2 T3 T4
270 1/1 state_d = IdleSt;
Tests: T2 T3 T4
271 // At this point the only error that we could have gotten are correctable ECC errors.
272 1/1 if (otp_err != NoError) begin
Tests: T2 T3 T4
273 1/1 error_d = MacroEccCorrError;
Tests: T35 T133 T36
274 end
MISSING_ELSE
275 end else begin
276 1/1 state_d = ErrorSt;
Tests: T185 T182 T201
277 1/1 error_d = otp_err;
Tests: T185 T182 T201
278 // This causes the TL-UL adapter to return a bus error.
279 1/1 tlul_rerror_o = 2'b11;
Tests: T185 T182 T201
280 end
281 end
MISSING_ELSE
282 end
283 ///////////////////////////////////////////////////////////////////
284 // Terminal Error State. This locks access to the partition.
285 // Make sure the partition signals an error state if no error
286 // code has been latched so far.
287 ErrorSt: begin
288 1/1 if (error_q == NoError) begin
Tests: T3 T9 T44
289 1/1 error_d = FsmStateError;
Tests: T26 T27 T28
290 end
MISSING_ELSE
291
292 // Return bus errors if there are pending TL-UL requests.
293 1/1 if (pending_tlul_error_q) begin
Tests: T3 T9 T44
294 1/1 tlul_rerror_o = 2'b11;
Tests: T9 T35 T55
295 1/1 tlul_rvalid_o = 1'b1;
Tests: T9 T35 T55
296 1/1 end else if (tlul_req_i) begin
Tests: T3 T9 T44
297 1/1 tlul_gnt_o = 1'b1;
Tests: T9 T35 T55
298 1/1 pending_tlul_error_d = 1'b1;
Tests: T9 T35 T55
299 end
MISSING_ELSE
300 end
301 ///////////////////////////////////////////////////////////////////
302 // We should never get here. If we do (e.g. via a malicious
303 // glitch), error out immediately.
304 default: begin
305 state_d = ErrorSt;
306 fsm_err_o = 1'b1;
307 end
308 ///////////////////////////////////////////////////////////////////
309 endcase // state_q
310
311 // Unconditionally jump into the terminal error state in case of
312 // an ECC error or escalation, and lock access to the partition down.
313 // SEC_CM: PART.FSM.LOCAL_ESC
314 1/1 if (ecc_err) begin
Tests: T1 T2 T3
315 1/1 state_d = ErrorSt;
Tests: T187
316 1/1 if (state_q != ErrorSt) begin
Tests: T187
317 1/1 error_d = CheckFailError;
Tests: T187
318 end
MISSING_ELSE
319 end
MISSING_ELSE
320 // SEC_CM: PART.FSM.GLOBAL_ESC
321 1/1 if (lc_ctrl_pkg::lc_tx_test_true_loose(escalate_en_i)) begin
Tests: T1 T2 T3
322 1/1 state_d = ErrorSt;
Tests: T3 T9 T44
323 1/1 fsm_err_o = 1'b1;
Tests: T3 T9 T44
324 1/1 if (state_q != ErrorSt) begin
Tests: T3 T9 T44
325 1/1 error_d = FsmStateError;
Tests: T3 T9 T44
326 end
MISSING_ELSE
327 end
MISSING_ELSE
328 end
329
330 ///////////////////////////////////
331 // Signals to/from TL-UL Adapter //
332 ///////////////////////////////////
333
334 1/1 assign tlul_addr_d = tlul_addr_i;
Tests: T1 T2 T3
335 // Do not forward data in case of an error.
336 1/1 assign tlul_rdata_o = (tlul_rvalid_o && tlul_rerror_o == '0) ? otp_rdata_i[31:0] : '0;
Tests: T1 T2 T3
337
338 if (Info.offset == 0) begin : gen_zero_offset
339 assign tlul_addr_in_range = {1'b0, tlul_addr_q, 2'b00} < PartEnd;
340
341 end else begin : gen_nonzero_offset
342 1/1 assign tlul_addr_in_range = {tlul_addr_q, 2'b00} >= Info.offset &&
Tests: T1 T2 T3
343 {1'b0, tlul_addr_q, 2'b00} < PartEnd;
344 end
345
346 // Note that OTP works on halfword (16bit) addresses, hence need to
347 // shift the addresses appropriately.
348 logic [OtpByteAddrWidth-1:0] addr_calc;
349 1/1 assign addr_calc = (otp_addr_sel == DigestAddrSel) ? DigestOffset : {tlul_addr_q, 2'b00};
Tests: T1 T2 T3
350 1/1 assign otp_addr_o = addr_calc[OtpByteAddrWidth-1:OtpAddrShift];
Tests: T1 T2 T3
351
352 if (OtpAddrShift > 0) begin : gen_unused
353 logic unused_bits;
354 1/1 assign unused_bits = ^addr_calc[OtpAddrShift-1:0];
Tests: T1 T2 T3
355 end
356
357 // Request 32bit except in case of the digest.
358 1/1 assign otp_size_o = (otp_addr_sel == DigestAddrSel) ?
Tests: T1 T2 T3
359 OtpSizeWidth'(unsigned'(ScrmblBlockWidth / OtpWidth - 1)) :
360 OtpSizeWidth'(unsigned'(32 / OtpWidth - 1));
361
362 ////////////////
363 // Digest Reg //
364 ////////////////
365
366 if (Info.sw_digest) begin : gen_ecc_reg
367 // SEC_CM: PART.DATA_REG.INTEGRITY
368 otp_ctrl_ecc_reg #(
369 .Width ( ScrmblBlockWidth ),
370 .Depth ( 1 )
371 ) u_otp_ctrl_ecc_reg (
372 .clk_i,
373 .rst_ni,
374 .wren_i ( digest_reg_en ),
375 .addr_i ( '0 ),
376 .wdata_i ( otp_rdata_i ),
377 .rdata_o ( ),
378 .data_o ( digest_o ),
379 .ecc_err_o ( ecc_err )
380 );
381 end else begin : gen_no_ecc_reg
382 logic unused_digest_reg_en;
383 logic unused_rdata;
384 assign unused_digest_reg_en = digest_reg_en;
385 assign unused_rdata = ^otp_rdata_i[32 +: 32]; // Upper word is not connected in this case.
386 assign digest_o = '0;
387 assign ecc_err = 1'b0;
388 end
389
390 ////////////////////////
391 // DAI Access Control //
392 ////////////////////////
393
394 mubi8_t init_locked;
395 1/1 assign init_locked = (~init_done_o) ? MuBi8True : MuBi8False;
Tests: T1 T2 T3
396
397 // Aggregate all possible DAI write locks. The partition is also locked when uninitialized.
398 // Note that the locks are redundantly encoded values.
399 part_access_t access_pre;
400 prim_mubi8_sender #(
401 .AsyncOn(0)
402 ) u_prim_mubi8_sender_write_lock_pre (
403 .clk_i,
404 .rst_ni,
405 .mubi_i(mubi8_and_lo(init_locked, access_i.write_lock)),
406 .mubi_o(access_pre.write_lock)
407 );
408 prim_mubi8_sender #(
409 .AsyncOn(0)
410 ) u_prim_mubi8_sender_read_lock_pre (
411 .clk_i,
412 .rst_ni,
413 .mubi_i(mubi8_and_lo(init_locked, access_i.read_lock)),
414 .mubi_o(access_pre.read_lock)
415 );
416
417 // SEC_CM: PART.MEM.SW_UNWRITABLE
418 if (Info.write_lock) begin : gen_digest_write_lock
419 mubi8_t digest_locked;
420 1/1 assign digest_locked = (digest_o != '0) ? MuBi8True : MuBi8False;
Tests: T1 T2 T3
421
422 // This prevents the synthesis tool from optimizing the multibit signal.
423 prim_mubi8_sender #(
424 .AsyncOn(0)
425 ) u_prim_mubi8_sender_write_lock (
426 .clk_i,
427 .rst_ni,
428 .mubi_i(mubi8_and_lo(access_pre.write_lock, digest_locked)),
429 .mubi_o(access_o.write_lock)
430 );
431
432 `ASSERT(DigestWriteLocksPartition_A, digest_o |-> mubi8_test_true_loose(access_o.write_lock))
433 end else begin : gen_no_digest_write_lock
434 assign access_o.write_lock = access_pre.write_lock;
435 end
436
437 // SEC_CM: PART.MEM.SW_UNREADABLE
438 if (Info.read_lock) begin : gen_digest_read_lock
439 mubi8_t digest_locked;
440 assign digest_locked = (digest_o != '0) ? MuBi8True : MuBi8False;
441
442 // This prevents the synthesis tool from optimizing the multibit signal.
443 prim_mubi8_sender #(
444 .AsyncOn(0)
445 ) u_prim_mubi8_sender_read_lock (
446 .clk_i,
447 .rst_ni,
448 .mubi_i(mubi8_and_lo(access_pre.read_lock, digest_locked)),
449 .mubi_o(access_o.read_lock)
450 );
451
452 `ASSERT(DigestReadLocksPartition_A, digest_o |-> mubi8_test_true_loose(access_o.read_lock))
453 end else begin : gen_no_digest_read_lock
454 1/1 assign access_o.read_lock = access_pre.read_lock;
Tests: T1 T2 T3
455 end
456
457 ///////////////
458 // Registers //
459 ///////////////
460
461 3/3 `PRIM_FLOP_SPARSE_FSM(u_state_regs, state_d, state_q, state_e, ResetSt)
Tests: T1 T2 T3 | T1 T2 T3 | T1 T2 T3
PRIM_FLOP_SPARSE_FSM(u_state_regs, state_d, state_q, state_e, ResetSt):
461.1 `ifdef SIMULATION
461.2 prim_sparse_fsm_flop #(
461.3 .StateEnumT(state_e),
461.4 .Width($bits(state_e)),
461.5 .ResetValue($bits(state_e)'(ResetSt)),
461.6 .EnableAlertTriggerSVA(1),
461.7 .CustomForceName("state_q")
461.8 ) u_state_regs (
461.9 .clk_i ( clk_i ),
461.10 .rst_ni ( rst_ni ),
461.11 .state_i ( state_d ),
461.12 .state_o ( )
461.13 );
461.14 always_ff @(posedge clk_i or negedge rst_ni) begin
461.15 1/1 if (!rst_ni) begin
Tests: T1 T2 T3
461.16 1/1 state_q <= ResetSt;
Tests: T1 T2 T3
461.17 end else begin
461.18 1/1 state_q <= state_d;
Tests: T1 T2 T3
461.19 end
461.20 end
461.21 u_state_regs_A: assert property (@(posedge clk_i) disable iff ((!rst_ni) !== '0) (state_q === u_state_regs.state_o))
461.22 else begin
461.23 `ifdef UVM
461.24 uvm_pkg::uvm_report_error("ASSERT FAILED", "u_state_regs_A", uvm_pkg::UVM_NONE,
461.25 "../src/lowrisc_ip_otp_ctrl_1.0/rtl/otp_ctrl_part_unbuf.sv", 461, "", 1);
461.26 `else
461.27 $error("%0t: (%0s:%0d) [%m] [ASSERT FAILED] %0s", $time, `__FILE__, `__LINE__,
461.28 `PRIM_STRINGIFY(u_state_regs_A));
461.29 `endif
461.30 end
461.31 `else
461.32 prim_sparse_fsm_flop #(
461.33 .StateEnumT(state_e),
461.34 .Width($bits(state_e)),
461.35 .ResetValue($bits(state_e)'(ResetSt)),
461.36 .EnableAlertTriggerSVA(1)
461.37 ) u_state_regs (
461.38 .clk_i ( `PRIM_FLOP_CLK ),
461.39 .rst_ni ( `PRIM_FLOP_RST ),
461.40 .state_i ( state_d ),
461.41 .state_o ( state_q )
461.42 );
461.43 `endif462
463 always_ff @(posedge clk_i or negedge rst_ni) begin : p_regs
464 1/1 if (!rst_ni) begin
Tests: T1 T2 T3
465 1/1 error_q <= NoError;
Tests: T1 T2 T3
466 1/1 tlul_addr_q <= '0;
Tests: T1 T2 T3
467 1/1 pending_tlul_error_q <= 1'b0;
Tests: T1 T2 T3
468 end else begin
469 1/1 error_q <= error_d;
Tests: T1 T2 T3
470 1/1 pending_tlul_error_q <= pending_tlul_error_d;
Tests: T1 T2 T3
471 1/1 if (tlul_gnt_o) begin
Tests: T1 T2 T3
472 1/1 tlul_addr_q <= tlul_addr_d;
Tests: T2 T3 T4
473 end
MISSING_ELSE
Cond Coverage for Module :
otp_ctrl_part_unbuf ( parameter Info=-1,DigestOffset=1608,StateWidth=10 )
Cond Coverage for Module self-instances :
| Total | Covered | Percent |
|---|
| Conditions | 34 | 33 | 97.06 |
| Logical | 34 | 33 | 97.06 |
| Non-Logical | 0 | 0 | |
| Event | 0 | 0 | |
LINE 220
EXPRESSION (otp_err != NoError)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T101,T48,T69 |
LINE 272
EXPRESSION (otp_err != NoError)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T2,T3,T4 |
| 1 | Covered | T36,T198,T159 |
LINE 288
EXPRESSION (error_q == NoError)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T3,T9,T44 |
| 1 | Covered | T26,T27,T28 |
LINE 316
EXPRESSION (state_q != ErrorSt)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T177,T188,T189 |
| 1 | Covered | T177,T188,T189 |
LINE 324
EXPRESSION (state_q != ErrorSt)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T3,T9,T44 |
| 1 | Covered | T3,T9,T44 |
LINE 336
EXPRESSION ((tlul_rvalid_o && (tlul_rerror_o == '0)) ? otp_rdata_i[31:0] : '0)
--------------------1-------------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T2,T3,T4 |
LINE 336
SUB-EXPRESSION (tlul_rvalid_o && (tlul_rerror_o == '0))
------1------ ----------2----------
| -1- | -2- | Status | Tests |
|---|
| 0 | 1 | Covered | T1,T2,T3 |
| 1 | 0 | Covered | T4,T9,T35 |
| 1 | 1 | Covered | T2,T3,T4 |
LINE 336
SUB-EXPRESSION (tlul_rerror_o == '0)
----------1----------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 342
EXPRESSION (({tlul_addr_q, 2'b0} >= 11'b10001111000) && ({1'b0, tlul_addr_q, 2'b0} < PartEnd))
--------------------1------------------- ------------------2------------------
| -1- | -2- | Status | Tests |
|---|
| 0 | 1 | Covered | T1,T2,T3 |
| 1 | 0 | Not Covered | |
| 1 | 1 | Covered | T2,T3,T4 |
LINE 349
EXPRESSION ((otp_addr_sel == DigestAddrSel) ? DigestOffset : ({tlul_addr_q, 2'b0}))
---------------1---------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T2,T3,T4 |
| 1 | Covered | T1,T2,T3 |
LINE 349
SUB-EXPRESSION (otp_addr_sel == DigestAddrSel)
---------------1---------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 358
EXPRESSION
Number Term
1 (otp_addr_sel == DigestAddrSel) ? (2'((unsigned'(((otp_ctrl_pkg::ScrmblBlockWidth / otp_ctrl_pkg::OtpWidth) - 1))))) : (2'((unsigned'(((32 / otp_ctrl_pkg::OtpWidth) - 1))))))
| -1- | Status | Tests |
|---|
| 0 | Covered | T2,T3,T4 |
| 1 | Covered | T1,T2,T3 |
LINE 358
SUB-EXPRESSION (otp_addr_sel == DigestAddrSel)
---------------1---------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 395
EXPRESSION (((~init_done_o)) ? MuBi8True : MuBi8False)
--------1-------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 420
EXPRESSION ((digest_o != '0) ? MuBi8True : MuBi8False)
--------1-------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T4,T68,T35 |
LINE 420
SUB-EXPRESSION (digest_o != '0)
--------1-------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T4,T68,T35 |
Cond Coverage for Module :
otp_ctrl_part_unbuf ( parameter Info=65616,DigestOffset=56,StateWidth=10 )
Cond Coverage for Module self-instances :
| Total | Covered | Percent |
|---|
| Conditions | 31 | 29 | 93.55 |
| Logical | 31 | 29 | 93.55 |
| Non-Logical | 0 | 0 | |
| Event | 0 | 0 | |
LINE 220
EXPRESSION (otp_err != NoError)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Not Covered | |
LINE 272
EXPRESSION (otp_err != NoError)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T2,T4,T9 |
| 1 | Not Covered | |
LINE 288
EXPRESSION (error_q == NoError)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T3,T9,T44 |
| 1 | Covered | T26,T27,T28 |
LINE 316
EXPRESSION (state_q != ErrorSt)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T187,T188,T189 |
| 1 | Covered | T187,T188,T189 |
LINE 324
EXPRESSION (state_q != ErrorSt)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T3,T9,T44 |
| 1 | Covered | T3,T9,T44 |
LINE 336
EXPRESSION ((tlul_rvalid_o && (tlul_rerror_o == '0)) ? otp_rdata_i[31:0] : '0)
--------------------1-------------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T2,T4,T9 |
LINE 336
SUB-EXPRESSION (tlul_rvalid_o && (tlul_rerror_o == '0))
------1------ ----------2----------
| -1- | -2- | Status | Tests |
|---|
| 0 | 1 | Covered | T1,T2,T3 |
| 1 | 0 | Covered | T4,T9,T35 |
| 1 | 1 | Covered | T2,T4,T9 |
LINE 336
SUB-EXPRESSION (tlul_rerror_o == '0)
----------1----------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 349
EXPRESSION ((otp_addr_sel == DigestAddrSel) ? DigestOffset : ({tlul_addr_q, 2'b0}))
---------------1---------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T2,T4,T9 |
| 1 | Covered | T1,T2,T3 |
LINE 349
SUB-EXPRESSION (otp_addr_sel == DigestAddrSel)
---------------1---------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 358
EXPRESSION
Number Term
1 (otp_addr_sel == DigestAddrSel) ? (2'((unsigned'(((otp_ctrl_pkg::ScrmblBlockWidth / otp_ctrl_pkg::OtpWidth) - 1))))) : (2'((unsigned'(((32 / otp_ctrl_pkg::OtpWidth) - 1))))))
| -1- | Status | Tests |
|---|
| 0 | Covered | T2,T4,T9 |
| 1 | Covered | T1,T2,T3 |
LINE 358
SUB-EXPRESSION (otp_addr_sel == DigestAddrSel)
---------------1---------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 395
EXPRESSION (((~init_done_o)) ? MuBi8True : MuBi8False)
--------1-------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 420
EXPRESSION ((digest_o != '0) ? MuBi8True : MuBi8False)
--------1-------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T4,T9,T35 |
LINE 420
SUB-EXPRESSION (digest_o != '0)
--------1-------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T4,T9,T35 |
Cond Coverage for Module :
otp_ctrl_part_unbuf ( parameter Info=134594644,DigestOffset=424,StateWidth=10 )
Cond Coverage for Module self-instances :
| Total | Covered | Percent |
|---|
| Conditions | 34 | 33 | 97.06 |
| Logical | 34 | 33 | 97.06 |
| Non-Logical | 0 | 0 | |
| Event | 0 | 0 | |
LINE 220
EXPRESSION (otp_err != NoError)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T69,T142,T190 |
LINE 272
EXPRESSION (otp_err != NoError)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T2,T3,T4 |
| 1 | Covered | T133,T159,T180 |
LINE 288
EXPRESSION (error_q == NoError)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T3,T9,T44 |
| 1 | Covered | T26,T27,T28 |
LINE 316
EXPRESSION (state_q != ErrorSt)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T177,T187,T188 |
| 1 | Covered | T177,T187,T188 |
LINE 324
EXPRESSION (state_q != ErrorSt)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T3,T9,T44 |
| 1 | Covered | T3,T9,T44 |
LINE 336
EXPRESSION ((tlul_rvalid_o && (tlul_rerror_o == '0)) ? otp_rdata_i[31:0] : '0)
--------------------1-------------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T2,T3,T4 |
LINE 336
SUB-EXPRESSION (tlul_rvalid_o && (tlul_rerror_o == '0))
------1------ ----------2----------
| -1- | -2- | Status | Tests |
|---|
| 0 | 1 | Covered | T1,T2,T3 |
| 1 | 0 | Covered | T9,T35,T55 |
| 1 | 1 | Covered | T2,T3,T4 |
LINE 336
SUB-EXPRESSION (tlul_rerror_o == '0)
----------1----------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 342
EXPRESSION (({tlul_addr_q, 2'b0} >= 11'b00001000000) && ({1'b0, tlul_addr_q, 2'b0} < PartEnd))
--------------------1------------------- ------------------2------------------
| -1- | -2- | Status | Tests |
|---|
| 0 | 1 | Covered | T1,T2,T3 |
| 1 | 0 | Not Covered | |
| 1 | 1 | Covered | T2,T3,T4 |
LINE 349
EXPRESSION ((otp_addr_sel == DigestAddrSel) ? DigestOffset : ({tlul_addr_q, 2'b0}))
---------------1---------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T2,T3,T4 |
| 1 | Covered | T1,T2,T3 |
LINE 349
SUB-EXPRESSION (otp_addr_sel == DigestAddrSel)
---------------1---------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 358
EXPRESSION
Number Term
1 (otp_addr_sel == DigestAddrSel) ? (2'((unsigned'(((otp_ctrl_pkg::ScrmblBlockWidth / otp_ctrl_pkg::OtpWidth) - 1))))) : (2'((unsigned'(((32 / otp_ctrl_pkg::OtpWidth) - 1))))))
| -1- | Status | Tests |
|---|
| 0 | Covered | T2,T3,T4 |
| 1 | Covered | T1,T2,T3 |
LINE 358
SUB-EXPRESSION (otp_addr_sel == DigestAddrSel)
---------------1---------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 395
EXPRESSION (((~init_done_o)) ? MuBi8True : MuBi8False)
--------1-------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 420
EXPRESSION ((digest_o != '0) ? MuBi8True : MuBi8False)
--------1-------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T4,T51,T55 |
LINE 420
SUB-EXPRESSION (digest_o != '0)
--------1-------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T4,T51,T55 |
Cond Coverage for Module :
otp_ctrl_part_unbuf ( parameter Info=906698836,DigestOffset=1136,StateWidth=10 )
Cond Coverage for Module self-instances :
| Total | Covered | Percent |
|---|
| Conditions | 34 | 33 | 97.06 |
| Logical | 34 | 33 | 97.06 |
| Non-Logical | 0 | 0 | |
| Event | 0 | 0 | |
LINE 220
EXPRESSION (otp_err != NoError)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T101,T142,T61 |
LINE 272
EXPRESSION (otp_err != NoError)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T2,T3,T4 |
| 1 | Covered | T55,T36,T180 |
LINE 288
EXPRESSION (error_q == NoError)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T3,T9,T44 |
| 1 | Covered | T26,T27,T28 |
LINE 316
EXPRESSION (state_q != ErrorSt)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T177 |
| 1 | Covered | T177 |
LINE 324
EXPRESSION (state_q != ErrorSt)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T3,T9,T44 |
| 1 | Covered | T9,T44,T68 |
LINE 336
EXPRESSION ((tlul_rvalid_o && (tlul_rerror_o == '0)) ? otp_rdata_i[31:0] : '0)
--------------------1-------------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T2,T3,T4 |
LINE 336
SUB-EXPRESSION (tlul_rvalid_o && (tlul_rerror_o == '0))
------1------ ----------2----------
| -1- | -2- | Status | Tests |
|---|
| 0 | 1 | Covered | T1,T2,T3 |
| 1 | 0 | Covered | T4,T9,T35 |
| 1 | 1 | Covered | T2,T3,T4 |
LINE 336
SUB-EXPRESSION (tlul_rerror_o == '0)
----------1----------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 342
EXPRESSION (({tlul_addr_q, 2'b0} >= 11'b00110110000) && ({1'b0, tlul_addr_q, 2'b0} < PartEnd))
--------------------1------------------- ------------------2------------------
| -1- | -2- | Status | Tests |
|---|
| 0 | 1 | Covered | T1,T2,T3 |
| 1 | 0 | Not Covered | |
| 1 | 1 | Covered | T2,T3,T4 |
LINE 349
EXPRESSION ((otp_addr_sel == DigestAddrSel) ? DigestOffset : ({tlul_addr_q, 2'b0}))
---------------1---------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T2,T3,T4 |
| 1 | Covered | T1,T2,T3 |
LINE 349
SUB-EXPRESSION (otp_addr_sel == DigestAddrSel)
---------------1---------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 358
EXPRESSION
Number Term
1 (otp_addr_sel == DigestAddrSel) ? (2'((unsigned'(((otp_ctrl_pkg::ScrmblBlockWidth / otp_ctrl_pkg::OtpWidth) - 1))))) : (2'((unsigned'(((32 / otp_ctrl_pkg::OtpWidth) - 1))))))
| -1- | Status | Tests |
|---|
| 0 | Covered | T2,T3,T4 |
| 1 | Covered | T1,T2,T3 |
LINE 358
SUB-EXPRESSION (otp_addr_sel == DigestAddrSel)
---------------1---------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 395
EXPRESSION (((~init_done_o)) ? MuBi8True : MuBi8False)
--------1-------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 420
EXPRESSION ((digest_o != '0) ? MuBi8True : MuBi8False)
--------1-------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T4,T35,T98 |
LINE 420
SUB-EXPRESSION (digest_o != '0)
--------1-------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T4,T35,T98 |
Cond Coverage for Module :
otp_ctrl_part_unbuf ( parameter Info=-1,DigestOffset=1648,StateWidth=10 )
Cond Coverage for Module self-instances :
| Total | Covered | Percent |
|---|
| Conditions | 34 | 33 | 97.06 |
| Logical | 34 | 33 | 97.06 |
| Non-Logical | 0 | 0 | |
| Event | 0 | 0 | |
LINE 220
EXPRESSION (otp_err != NoError)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T29,T61,T50 |
LINE 272
EXPRESSION (otp_err != NoError)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T2,T3,T4 |
| 1 | Covered | T35,T133,T36 |
LINE 288
EXPRESSION (error_q == NoError)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T3,T9,T44 |
| 1 | Covered | T26,T27,T28 |
LINE 316
EXPRESSION (state_q != ErrorSt)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T187 |
| 1 | Covered | T187 |
LINE 324
EXPRESSION (state_q != ErrorSt)
----------1---------
| -1- | Status | Tests |
|---|
| 0 | Covered | T3,T9,T44 |
| 1 | Covered | T3,T9,T44 |
LINE 336
EXPRESSION ((tlul_rvalid_o && (tlul_rerror_o == '0)) ? otp_rdata_i[31:0] : '0)
--------------------1-------------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T2,T3,T4 |
LINE 336
SUB-EXPRESSION (tlul_rvalid_o && (tlul_rerror_o == '0))
------1------ ----------2----------
| -1- | -2- | Status | Tests |
|---|
| 0 | 1 | Covered | T1,T2,T3 |
| 1 | 0 | Covered | T4,T9,T35 |
| 1 | 1 | Covered | T2,T3,T4 |
LINE 336
SUB-EXPRESSION (tlul_rerror_o == '0)
----------1----------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 342
EXPRESSION (({tlul_addr_q, 2'b0} >= 11'b11001010000) && ({1'b0, tlul_addr_q, 2'b0} < PartEnd))
--------------------1------------------- ------------------2------------------
| -1- | -2- | Status | Tests |
|---|
| 0 | 1 | Covered | T1,T2,T3 |
| 1 | 0 | Not Covered | |
| 1 | 1 | Covered | T2,T3,T4 |
LINE 349
EXPRESSION ((otp_addr_sel == DigestAddrSel) ? DigestOffset : ({tlul_addr_q, 2'b0}))
---------------1---------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T2,T3,T4 |
| 1 | Covered | T1,T2,T3 |
LINE 349
SUB-EXPRESSION (otp_addr_sel == DigestAddrSel)
---------------1---------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 358
EXPRESSION
Number Term
1 (otp_addr_sel == DigestAddrSel) ? (2'((unsigned'(((otp_ctrl_pkg::ScrmblBlockWidth / otp_ctrl_pkg::OtpWidth) - 1))))) : (2'((unsigned'(((32 / otp_ctrl_pkg::OtpWidth) - 1))))))
| -1- | Status | Tests |
|---|
| 0 | Covered | T2,T3,T4 |
| 1 | Covered | T1,T2,T3 |
LINE 358
SUB-EXPRESSION (otp_addr_sel == DigestAddrSel)
---------------1---------------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 395
EXPRESSION (((~init_done_o)) ? MuBi8True : MuBi8False)
--------1-------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T1,T2,T3 |
LINE 420
EXPRESSION ((digest_o != '0) ? MuBi8True : MuBi8False)
--------1-------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T9,T51,T95 |
LINE 420
SUB-EXPRESSION (digest_o != '0)
--------1-------
| -1- | Status | Tests |
|---|
| 0 | Covered | T1,T2,T3 |
| 1 | Covered | T9,T51,T95 |
FSM Coverage for Module :
otp_ctrl_part_unbuf
Summary for FSM :: state_q
| Total | Covered | Percent | |
| States |
7 |
7 |
100.00 |
(Not included in score) |
| Transitions |
14 |
12 |
85.71 |
|
| Sequences |
0 |
0 |
|
|
State, Transition and Sequence Details for FSM :: state_q
| states | Line No. | Covered | Tests |
| ErrorSt |
224 |
Covered |
T3,T9,T44 |
| IdleSt |
196 |
Covered |
T1,T2,T3 |
| InitSt |
194 |
Covered |
T1,T2,T3 |
| InitWaitSt |
207 |
Covered |
T1,T2,T3 |
| ReadSt |
236 |
Covered |
T2,T3,T4 |
| ReadWaitSt |
252 |
Covered |
T2,T3,T4 |
| ResetSt |
190 |
Covered |
T1,T2,T3 |
| transitions | Line No. | Covered | Tests |
| IdleSt->ErrorSt |
315 |
Covered |
T3,T9,T44 |
| IdleSt->ReadSt |
236 |
Covered |
T2,T3,T4 |
| InitSt->ErrorSt |
315 |
Covered |
T3,T191,T202 |
| InitSt->InitWaitSt |
207 |
Covered |
T1,T2,T3 |
| InitWaitSt->ErrorSt |
224 |
Covered |
T3,T191,T202 |
| InitWaitSt->IdleSt |
218 |
Covered |
T1,T2,T3 |
| ReadSt->ErrorSt |
315 |
Not Covered |
|
| ReadSt->IdleSt |
255 |
Covered |
T4,T51,T95 |
| ReadSt->ReadWaitSt |
252 |
Covered |
T2,T3,T4 |
| ReadWaitSt->ErrorSt |
276 |
Covered |
T133,T180,T185 |
| ReadWaitSt->IdleSt |
270 |
Covered |
T2,T3,T4 |
| ResetSt->ErrorSt |
315 |
Covered |
T107,T108,T109 |
| ResetSt->IdleSt |
196 |
Not Covered |
|
| ResetSt->InitSt |
194 |
Covered |
T1,T2,T3 |
Summary for FSM :: error_q
| Total | Covered | Percent | |
| States |
5 |
5 |
100.00 |
(Not included in score) |
| Transitions |
20 |
10 |
50.00 |
|
| Sequences |
0 |
0 |
|
|
State, Transition and Sequence Details for FSM :: error_q
| states | Line No. | Covered | Tests |
| AccessError |
256 |
Covered |
T4,T51,T95 |
| CheckFailError |
317 |
Covered |
T177,T187,T188 |
| FsmStateError |
289 |
Covered |
T3,T9,T44 |
| MacroEccCorrError |
221 |
Covered |
T35,T55,T133 |
| NoError |
235 |
Covered |
T1,T2,T3 |
| transitions | Line No. | Covered | Tests |
| AccessError->CheckFailError |
317 |
Not Covered |
|
| AccessError->FsmStateError |
325 |
Covered |
T173,T159,T7 |
| AccessError->MacroEccCorrError |
221 |
Not Covered |
|
| AccessError->NoError |
235 |
Covered |
T4,T51,T95 |
| CheckFailError->AccessError |
256 |
Not Covered |
|
| CheckFailError->FsmStateError |
325 |
Not Covered |
|
| CheckFailError->MacroEccCorrError |
221 |
Not Covered |
|
| CheckFailError->NoError |
235 |
Covered |
T177,T187,T188 |
| FsmStateError->AccessError |
256 |
Not Covered |
|
| FsmStateError->CheckFailError |
317 |
Not Covered |
|
| FsmStateError->MacroEccCorrError |
221 |
Not Covered |
|
| FsmStateError->NoError |
235 |
Covered |
T3,T9,T44 |
| MacroEccCorrError->AccessError |
256 |
Not Covered |
|
| MacroEccCorrError->CheckFailError |
317 |
Not Covered |
|
| MacroEccCorrError->FsmStateError |
325 |
Covered |
T133,T101,T159 |
| MacroEccCorrError->NoError |
235 |
Covered |
T35,T55,T36 |
| NoError->AccessError |
256 |
Covered |
T4,T51,T95 |
| NoError->CheckFailError |
317 |
Covered |
T177,T187,T188 |
| NoError->FsmStateError |
289 |
Covered |
T3,T9,T44 |
| NoError->MacroEccCorrError |
221 |
Covered |
T35,T55,T133 |
Branch Coverage for Module :
otp_ctrl_part_unbuf ( parameter Info=65616,DigestOffset=56,StateWidth=10 )
Branch Coverage for Module self-instances :
| Line No. | Total | Covered | Percent |
| Branches |
|
46 |
41 |
89.13 |
| TERNARY |
336 |
2 |
2 |
100.00 |
| TERNARY |
349 |
2 |
2 |
100.00 |
| TERNARY |
358 |
2 |
2 |
100.00 |
| TERNARY |
395 |
2 |
2 |
100.00 |
| TERNARY |
420 |
2 |
2 |
100.00 |
| CASE |
186 |
23 |
18 |
78.26 |
| IF |
314 |
3 |
3 |
100.00 |
| IF |
321 |
3 |
3 |
100.00 |
| IF |
461 |
2 |
2 |
100.00 |
| IF |
464 |
3 |
3 |
100.00 |
| IF |
153 |
2 |
2 |
100.00 |
336 assign tlul_rdata_o = (tlul_rvalid_o && tlul_rerror_o == '0) ? otp_rdata_i[31:0] : '0;
-1-
==>
==>
Branches:
| -1- | Status | Tests |
| 1 |
Covered |
T2,T4,T9 |
| 0 |
Covered |
T1,T2,T3 |
349 assign addr_calc = (otp_addr_sel == DigestAddrSel) ? DigestOffset : {tlul_addr_q, 2'b00};
-1-
==>
==>
Branches:
| -1- | Status | Tests |
| 1 |
Covered |
T1,T2,T3 |
| 0 |
Covered |
T2,T4,T9 |
358 assign otp_size_o = (otp_addr_sel == DigestAddrSel) ?
-1-
==>
==>
Branches:
| -1- | Status | Tests |
| 1 |
Covered |
T1,T2,T3 |
| 0 |
Covered |
T2,T4,T9 |
395 assign init_locked = (~init_done_o) ? MuBi8True : MuBi8False;
-1-
==>
==>
Branches:
| -1- | Status | Tests |
| 1 |
Covered |
T1,T2,T3 |
| 0 |
Covered |
T1,T2,T3 |
420 assign digest_locked = (digest_o != '0) ? MuBi8True : MuBi8False;
-1-
==>
==>
Branches:
| -1- | Status | Tests |
| 1 |
Covered |
T4,T9,T35 |
| 0 |
Covered |
T1,T2,T3 |
186 unique case (state_q)
-1-
187 ///////////////////////////////////////////////////////////////////
188 // State right after reset. Wait here until we get a an
189 // initialization request.
190 ResetSt: begin
191 if (init_req_i) begin
-2-
192 // If the partition does not have a digest, no initialization is necessary.
193 if (Info.sw_digest) begin
-3-
194 state_d = InitSt;
==>
195 end else begin
196 state_d = IdleSt;
==> (Unreachable)
197 end
198 end
MISSING_ELSE
==>
199 end
200 ///////////////////////////////////////////////////////////////////
201 // Initialization reads out the digest only in unbuffered
202 // partitions. Wait here until the OTP request has been granted.
203 // And then wait until the OTP word comes back.
204 InitSt: begin
205 otp_req_o = 1'b1;
206 if (otp_gnt_i) begin
-4-
207 state_d = InitWaitSt;
==>
208 end
MISSING_ELSE
==>
209 end
210 ///////////////////////////////////////////////////////////////////
211 // Wait for OTP response and write to digest buffer register. In
212 // case an OTP transaction fails, latch the OTP error code and
213 // jump to a terminal error state.
214 InitWaitSt: begin
215 if (otp_rvalid_i) begin
-5-
216 digest_reg_en = 1'b1;
217 if (otp_err inside {NoError, MacroEccCorrError}) begin
-6-
218 state_d = IdleSt;
219 // At this point the only error that we could have gotten are correctable ECC errors.
220 if (otp_err != NoError) begin
-7-
221 error_d = MacroEccCorrError;
==>
222 end
MISSING_ELSE
==>
223 end else begin
224 state_d = ErrorSt;
==>
225 error_d = otp_err;
226 end
227 end
MISSING_ELSE
==>
228 end
229 ///////////////////////////////////////////////////////////////////
230 // Wait for TL-UL requests coming in.
231 // Then latch address and go to readout state.
232 IdleSt: begin
233 init_done_o = 1'b1;
234 if (tlul_req_i) begin
-8-
235 error_d = NoError; // clear recoverable soft errors.
==>
236 state_d = ReadSt;
237 tlul_gnt_o = 1'b1;
238 end
MISSING_ELSE
==>
239 end
240 ///////////////////////////////////////////////////////////////////
241 // If the address is out of bounds, or if the partition is
242 // locked, signal back a bus error. Note that such an error does
243 // not cause the partition to go into error state. Otherwise if
244 // these checks pass, an OTP word is requested.
245 ReadSt: begin
246 init_done_o = 1'b1;
247 // Double check the address range.
248 if (tlul_addr_in_range && mubi8_test_false_strict(access_o.read_lock)) begin
-9-
249 otp_req_o = 1'b1;
250 otp_addr_sel = DataAddrSel;
251 if (otp_gnt_i) begin
-10-
252 state_d = ReadWaitSt;
==>
253 end
MISSING_ELSE
==>
254 end else begin
255 state_d = IdleSt;
==>
256 error_d = AccessError; // Signal this error, but do not go into terminal error state.
257 tlul_rvalid_o = 1'b1;
258 tlul_rerror_o = 2'b11; // This causes the TL-UL adapter to return a bus error.
259 end
260 end
261 ///////////////////////////////////////////////////////////////////
262 // Wait for OTP response and release the TL-UL response. In
263 // case an OTP transaction fails, latch the OTP error code,
264 // signal a TL-Ul bus error and jump to a terminal error state.
265 ReadWaitSt: begin
266 init_done_o = 1'b1;
267 if (otp_rvalid_i) begin
-11-
268 tlul_rvalid_o = 1'b1;
269 if (otp_err inside {NoError, MacroEccCorrError}) begin
-12-
270 state_d = IdleSt;
271 // At this point the only error that we could have gotten are correctable ECC errors.
272 if (otp_err != NoError) begin
-13-
273 error_d = MacroEccCorrError;
==>
274 end
MISSING_ELSE
==>
275 end else begin
276 state_d = ErrorSt;
==>
277 error_d = otp_err;
278 // This causes the TL-UL adapter to return a bus error.
279 tlul_rerror_o = 2'b11;
280 end
281 end
MISSING_ELSE
==>
282 end
283 ///////////////////////////////////////////////////////////////////
284 // Terminal Error State. This locks access to the partition.
285 // Make sure the partition signals an error state if no error
286 // code has been latched so far.
287 ErrorSt: begin
288 if (error_q == NoError) begin
-14-
289 error_d = FsmStateError;
==>
290 end
MISSING_ELSE
==>
291
292 // Return bus errors if there are pending TL-UL requests.
293 if (pending_tlul_error_q) begin
-15-
294 tlul_rerror_o = 2'b11;
==>
295 tlul_rvalid_o = 1'b1;
296 end else if (tlul_req_i) begin
-16-
297 tlul_gnt_o = 1'b1;
==>
298 pending_tlul_error_d = 1'b1;
299 end
MISSING_ELSE
==>
300 end
301 ///////////////////////////////////////////////////////////////////
302 // We should never get here. If we do (e.g. via a malicious
303 // glitch), error out immediately.
304 default: begin
305 state_d = ErrorSt;
==>
Branches:
| -1- | -2- | -3- | -4- | -5- | -6- | -7- | -8- | -9- | -10- | -11- | -12- | -13- | -14- | -15- | -16- | Status | Tests |
| ResetSt |
1 |
1 |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T1,T2,T3 |
| ResetSt |
1 |
0 |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Unreachable |
|
| ResetSt |
0 |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T1,T2,T3 |
| InitSt |
- |
- |
1 |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T1,T2,T3 |
| InitSt |
- |
- |
0 |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Not Covered |
|
| InitWaitSt |
- |
- |
- |
1 |
1 |
1 |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Not Covered |
|
| InitWaitSt |
- |
- |
- |
1 |
1 |
0 |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T1,T2,T3 |
| InitWaitSt |
- |
- |
- |
1 |
0 |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Not Covered |
|
| InitWaitSt |
- |
- |
- |
0 |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T1,T2,T3 |
| IdleSt |
- |
- |
- |
- |
- |
- |
1 |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T2,T4,T9 |
| IdleSt |
- |
- |
- |
- |
- |
- |
0 |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T1,T2,T3 |
| ReadSt |
- |
- |
- |
- |
- |
- |
- |
1 |
1 |
- |
- |
- |
- |
- |
- |
Covered |
T2,T4,T9 |
| ReadSt |
- |
- |
- |
- |
- |
- |
- |
1 |
0 |
- |
- |
- |
- |
- |
- |
Covered |
T4,T124,T127 |
| ReadSt |
- |
- |
- |
- |
- |
- |
- |
0 |
- |
- |
- |
- |
- |
- |
- |
Covered |
T4,T51,T95 |
| ReadWaitSt |
- |
- |
- |
- |
- |
- |
- |
- |
- |
1 |
1 |
1 |
- |
- |
- |
Not Covered |
|
| ReadWaitSt |
- |
- |
- |
- |
- |
- |
- |
- |
- |
1 |
1 |
0 |
- |
- |
- |
Covered |
T2,T4,T9 |
| ReadWaitSt |
- |
- |
- |
- |
- |
- |
- |
- |
- |
1 |
0 |
- |
- |
- |
- |
Not Covered |
|
| ReadWaitSt |
- |
- |
- |
- |
- |
- |
- |
- |
- |
0 |
- |
- |
- |
- |
- |
Covered |
T2,T4,T9 |
| ErrorSt |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
1 |
- |
- |
Covered |
T26,T27,T28 |
| ErrorSt |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
0 |
- |
- |
Covered |
T3,T9,T44 |
| ErrorSt |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
1 |
- |
Covered |
T9,T35,T94 |
| ErrorSt |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
0 |
1 |
Covered |
T9,T35,T94 |
| ErrorSt |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
0 |
0 |
Covered |
T3,T9,T44 |
| default |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T26,T27,T28 |
314 if (ecc_err) begin
-1-
315 state_d = ErrorSt;
316 if (state_q != ErrorSt) begin
-2-
317 error_d = CheckFailError;
==>
318 end
MISSING_ELSE
==>
319 end
MISSING_ELSE
==>
Branches:
| -1- | -2- | Status | Tests |
| 1 |
1 |
Covered |
T187,T188,T189 |
| 1 |
0 |
Covered |
T187,T188,T189 |
| 0 |
- |
Covered |
T1,T2,T3 |
321 if (lc_ctrl_pkg::lc_tx_test_true_loose(escalate_en_i)) begin
-1-
322 state_d = ErrorSt;
323 fsm_err_o = 1'b1;
324 if (state_q != ErrorSt) begin
-2-
325 error_d = FsmStateError;
==>
326 end
MISSING_ELSE
==>
327 end
MISSING_ELSE
==>
Branches:
| -1- | -2- | Status | Tests |
| 1 |
1 |
Covered |
T3,T9,T44 |
| 1 |
0 |
Covered |
T3,T9,T44 |
| 0 |
- |
Covered |
T1,T2,T3 |
461 `PRIM_FLOP_SPARSE_FSM(u_state_regs, state_d, state_q, state_e, ResetSt)
-1-
==>
==>
Branches:
| -1- | Status | Tests |
| 1 |
Covered |
T1,T2,T3 |
| 0 |
Covered |
T1,T2,T3 |
464 if (!rst_ni) begin
-1-
465 error_q <= NoError;
==>
466 tlul_addr_q <= '0;
467 pending_tlul_error_q <= 1'b0;
468 end else begin
469 error_q <= error_d;
470 pending_tlul_error_q <= pending_tlul_error_d;
471 if (tlul_gnt_o) begin
-2-
472 tlul_addr_q <= tlul_addr_d;
==>
473 end
MISSING_ELSE
==>
Branches:
| -1- | -2- | Status | Tests |
| 1 |
- |
Covered |
T1,T2,T3 |
| 0 |
1 |
Covered |
T2,T4,T9 |
| 0 |
0 |
Covered |
T1,T2,T3 |
153 if (otp_err_e'(otp_err_i) inside {MacroEccCorrError, MacroEccUncorrError}) begin
-1-
154 otp_err = NoError;
==>
155 end else begin
156 otp_err = otp_err_e'(otp_err_i);
==>
Branches:
| -1- | Status | Tests |
| 1 |
Covered |
T3,T68,T35 |
| 0 |
Covered |
T1,T2,T3 |
Branch Coverage for Module :
otp_ctrl_part_unbuf ( parameter Info=134594644,DigestOffset=424,StateWidth=10 + Info=906698836,DigestOffset=1136,StateWidth=10 + Info=-1,DigestOffset=1608,StateWidth=10 + Info=-1,DigestOffset=1648,StateWidth=10 )
Branch Coverage for Module self-instances :
| Line No. | Total | Covered | Percent |
| Branches |
|
44 |
44 |
100.00 |
| TERNARY |
336 |
2 |
2 |
100.00 |
| TERNARY |
349 |
2 |
2 |
100.00 |
| TERNARY |
358 |
2 |
2 |
100.00 |
| TERNARY |
395 |
2 |
2 |
100.00 |
| TERNARY |
420 |
2 |
2 |
100.00 |
| CASE |
186 |
23 |
23 |
100.00 |
| IF |
314 |
3 |
3 |
100.00 |
| IF |
321 |
3 |
3 |
100.00 |
| IF |
461 |
2 |
2 |
100.00 |
| IF |
464 |
3 |
3 |
100.00 |
336 assign tlul_rdata_o = (tlul_rvalid_o && tlul_rerror_o == '0) ? otp_rdata_i[31:0] : '0;
-1-
==>
==>
Branches:
| -1- | Status | Tests |
| 1 |
Covered |
T2,T3,T4 |
| 0 |
Covered |
T1,T2,T3 |
349 assign addr_calc = (otp_addr_sel == DigestAddrSel) ? DigestOffset : {tlul_addr_q, 2'b00};
-1-
==>
==>
Branches:
| -1- | Status | Tests |
| 1 |
Covered |
T1,T2,T3 |
| 0 |
Covered |
T2,T3,T4 |
358 assign otp_size_o = (otp_addr_sel == DigestAddrSel) ?
-1-
==>
==>
Branches:
| -1- | Status | Tests |
| 1 |
Covered |
T1,T2,T3 |
| 0 |
Covered |
T2,T3,T4 |
395 assign init_locked = (~init_done_o) ? MuBi8True : MuBi8False;
-1-
==>
==>
Branches:
| -1- | Status | Tests |
| 1 |
Covered |
T1,T2,T3 |
| 0 |
Covered |
T1,T2,T3 |
420 assign digest_locked = (digest_o != '0) ? MuBi8True : MuBi8False;
-1-
==>
==>
Branches:
| -1- | Status | Tests |
| 1 |
Covered |
T4,T9,T68 |
| 0 |
Covered |
T1,T2,T3 |
186 unique case (state_q)
-1-
187 ///////////////////////////////////////////////////////////////////
188 // State right after reset. Wait here until we get a an
189 // initialization request.
190 ResetSt: begin
191 if (init_req_i) begin
-2-
192 // If the partition does not have a digest, no initialization is necessary.
193 if (Info.sw_digest) begin
-3-
194 state_d = InitSt;
==>
195 end else begin
196 state_d = IdleSt;
==> (Unreachable)
197 end
198 end
MISSING_ELSE
==>
199 end
200 ///////////////////////////////////////////////////////////////////
201 // Initialization reads out the digest only in unbuffered
202 // partitions. Wait here until the OTP request has been granted.
203 // And then wait until the OTP word comes back.
204 InitSt: begin
205 otp_req_o = 1'b1;
206 if (otp_gnt_i) begin
-4-
207 state_d = InitWaitSt;
==>
208 end
MISSING_ELSE
==>
209 end
210 ///////////////////////////////////////////////////////////////////
211 // Wait for OTP response and write to digest buffer register. In
212 // case an OTP transaction fails, latch the OTP error code and
213 // jump to a terminal error state.
214 InitWaitSt: begin
215 if (otp_rvalid_i) begin
-5-
216 digest_reg_en = 1'b1;
217 if (otp_err inside {NoError, MacroEccCorrError}) begin
-6-
218 state_d = IdleSt;
219 // At this point the only error that we could have gotten are correctable ECC errors.
220 if (otp_err != NoError) begin
-7-
221 error_d = MacroEccCorrError;
==>
222 end
MISSING_ELSE
==>
223 end else begin
224 state_d = ErrorSt;
==>
225 error_d = otp_err;
226 end
227 end
MISSING_ELSE
==>
228 end
229 ///////////////////////////////////////////////////////////////////
230 // Wait for TL-UL requests coming in.
231 // Then latch address and go to readout state.
232 IdleSt: begin
233 init_done_o = 1'b1;
234 if (tlul_req_i) begin
-8-
235 error_d = NoError; // clear recoverable soft errors.
==>
236 state_d = ReadSt;
237 tlul_gnt_o = 1'b1;
238 end
MISSING_ELSE
==>
239 end
240 ///////////////////////////////////////////////////////////////////
241 // If the address is out of bounds, or if the partition is
242 // locked, signal back a bus error. Note that such an error does
243 // not cause the partition to go into error state. Otherwise if
244 // these checks pass, an OTP word is requested.
245 ReadSt: begin
246 init_done_o = 1'b1;
247 // Double check the address range.
248 if (tlul_addr_in_range && mubi8_test_false_strict(access_o.read_lock)) begin
-9-
249 otp_req_o = 1'b1;
250 otp_addr_sel = DataAddrSel;
251 if (otp_gnt_i) begin
-10-
252 state_d = ReadWaitSt;
==>
253 end
MISSING_ELSE
==>
254 end else begin
255 state_d = IdleSt;
==>
256 error_d = AccessError; // Signal this error, but do not go into terminal error state.
257 tlul_rvalid_o = 1'b1;
258 tlul_rerror_o = 2'b11; // This causes the TL-UL adapter to return a bus error.
259 end
260 end
261 ///////////////////////////////////////////////////////////////////
262 // Wait for OTP response and release the TL-UL response. In
263 // case an OTP transaction fails, latch the OTP error code,
264 // signal a TL-Ul bus error and jump to a terminal error state.
265 ReadWaitSt: begin
266 init_done_o = 1'b1;
267 if (otp_rvalid_i) begin
-11-
268 tlul_rvalid_o = 1'b1;
269 if (otp_err inside {NoError, MacroEccCorrError}) begin
-12-
270 state_d = IdleSt;
271 // At this point the only error that we could have gotten are correctable ECC errors.
272 if (otp_err != NoError) begin
-13-
273 error_d = MacroEccCorrError;
==>
274 end
MISSING_ELSE
==>
275 end else begin
276 state_d = ErrorSt;
==>
277 error_d = otp_err;
278 // This causes the TL-UL adapter to return a bus error.
279 tlul_rerror_o = 2'b11;
280 end
281 end
MISSING_ELSE
==>
282 end
283 ///////////////////////////////////////////////////////////////////
284 // Terminal Error State. This locks access to the partition.
285 // Make sure the partition signals an error state if no error
286 // code has been latched so far.
287 ErrorSt: begin
288 if (error_q == NoError) begin
-14-
289 error_d = FsmStateError;
==>
290 end
MISSING_ELSE
==>
291
292 // Return bus errors if there are pending TL-UL requests.
293 if (pending_tlul_error_q) begin
-15-
294 tlul_rerror_o = 2'b11;
==>
295 tlul_rvalid_o = 1'b1;
296 end else if (tlul_req_i) begin
-16-
297 tlul_gnt_o = 1'b1;
==>
298 pending_tlul_error_d = 1'b1;
299 end
MISSING_ELSE
==>
300 end
301 ///////////////////////////////////////////////////////////////////
302 // We should never get here. If we do (e.g. via a malicious
303 // glitch), error out immediately.
304 default: begin
305 state_d = ErrorSt;
==>
Branches:
| -1- | -2- | -3- | -4- | -5- | -6- | -7- | -8- | -9- | -10- | -11- | -12- | -13- | -14- | -15- | -16- | Status | Tests |
| ResetSt |
1 |
1 |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T1,T2,T3 |
| ResetSt |
1 |
0 |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Unreachable |
|
| ResetSt |
0 |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T1,T2,T3 |
| InitSt |
- |
- |
1 |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T1,T2,T3 |
| InitSt |
- |
- |
0 |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T1,T2,T3 |
| InitWaitSt |
- |
- |
- |
1 |
1 |
1 |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T101,T48,T69 |
| InitWaitSt |
- |
- |
- |
1 |
1 |
0 |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T1,T2,T3 |
| InitWaitSt |
- |
- |
- |
1 |
0 |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T3,T68,T191 |
| InitWaitSt |
- |
- |
- |
0 |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T1,T2,T3 |
| IdleSt |
- |
- |
- |
- |
- |
- |
1 |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T2,T3,T4 |
| IdleSt |
- |
- |
- |
- |
- |
- |
0 |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T1,T2,T3 |
| ReadSt |
- |
- |
- |
- |
- |
- |
- |
1 |
1 |
- |
- |
- |
- |
- |
- |
Covered |
T2,T3,T4 |
| ReadSt |
- |
- |
- |
- |
- |
- |
- |
1 |
0 |
- |
- |
- |
- |
- |
- |
Covered |
T4,T124,T134 |
| ReadSt |
- |
- |
- |
- |
- |
- |
- |
0 |
- |
- |
- |
- |
- |
- |
- |
Covered |
T4,T51,T95 |
| ReadWaitSt |
- |
- |
- |
- |
- |
- |
- |
- |
- |
1 |
1 |
1 |
- |
- |
- |
Covered |
T35,T55,T133 |
| ReadWaitSt |
- |
- |
- |
- |
- |
- |
- |
- |
- |
1 |
1 |
0 |
- |
- |
- |
Covered |
T2,T3,T4 |
| ReadWaitSt |
- |
- |
- |
- |
- |
- |
- |
- |
- |
1 |
0 |
- |
- |
- |
- |
Covered |
T133,T180,T185 |
| ReadWaitSt |
- |
- |
- |
- |
- |
- |
- |
- |
- |
0 |
- |
- |
- |
- |
- |
Covered |
T2,T3,T4 |
| ErrorSt |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
1 |
- |
- |
Covered |
T26,T27,T28 |
| ErrorSt |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
0 |
- |
- |
Covered |
T3,T9,T44 |
| ErrorSt |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
1 |
- |
Covered |
T9,T35,T55 |
| ErrorSt |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
0 |
1 |
Covered |
T9,T35,T55 |
| ErrorSt |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
0 |
0 |
Covered |
T3,T9,T44 |
| default |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
- |
Covered |
T26,T27,T28 |
314 if (ecc_err) begin
-1-
315 state_d = ErrorSt;
316 if (state_q != ErrorSt) begin
-2-
317 error_d = CheckFailError;
==>
318 end
MISSING_ELSE
==>
319 end
MISSING_ELSE
==>
Branches:
| -1- | -2- | Status | Tests |
| 1 |
1 |
Covered |
T177,T187,T188 |
| 1 |
0 |
Covered |
T177,T187,T188 |
| 0 |
- |
Covered |
T1,T2,T3 |
321 if (lc_ctrl_pkg::lc_tx_test_true_loose(escalate_en_i)) begin
-1-
322 state_d = ErrorSt;
323 fsm_err_o = 1'b1;
324 if (state_q != ErrorSt) begin
-2-
325 error_d = FsmStateError;
==>
326 end
MISSING_ELSE
==>
327 end
MISSING_ELSE
==>
Branches:
| -1- | -2- | Status | Tests |
| 1 |
1 |
Covered |
T3,T9,T44 |
| 1 |
0 |
Covered |
T3,T9,T44 |
| 0 |
- |
Covered |
T1,T2,T3 |
461 `PRIM_FLOP_SPARSE_FSM(u_state_regs, state_d, state_q, state_e, ResetSt)
-1-
==>
==>
Branches:
| -1- | Status | Tests |
| 1 |
Covered |
T1,T2,T3 |
| 0 |
Covered |
T1,T2,T3 |
464 if (!rst_ni) begin
-1-
465 error_q <= NoError;
==>
466 tlul_addr_q <= '0;
467 pending_tlul_error_q <= 1'b0;
468 end else begin
469 error_q <= error_d;
470 pending_tlul_error_q <= pending_tlul_error_d;
471 if (tlul_gnt_o) begin
-2-
472 tlul_addr_q <= tlul_addr_d;
==>
473 end
MISSING_ELSE
==>
Branches:
| -1- | -2- | Status | Tests |
| 1 |
- |
Covered |
T1,T2,T3 |
| 0 |
1 |
Covered |
T2,T3,T4 |
| 0 |
0 |
Covered |
T1,T2,T3 |
Assert Coverage for Module :
otp_ctrl_part_unbuf
Assertion Details
AccessKnown_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
418068650 |
0 |
0 |
| T1 |
25600 |
25210 |
0 |
0 |
| T2 |
63990 |
63050 |
0 |
0 |
| T3 |
50635 |
49110 |
0 |
0 |
| T4 |
276070 |
270735 |
0 |
0 |
| T5 |
90240 |
89175 |
0 |
0 |
| T9 |
113110 |
111685 |
0 |
0 |
| T10 |
298755 |
298470 |
0 |
0 |
| T11 |
22570 |
22290 |
0 |
0 |
| T12 |
60195 |
58900 |
0 |
0 |
| T13 |
239450 |
239145 |
0 |
0 |
DigestKnown_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
418068650 |
0 |
0 |
| T1 |
25600 |
25210 |
0 |
0 |
| T2 |
63990 |
63050 |
0 |
0 |
| T3 |
50635 |
49110 |
0 |
0 |
| T4 |
276070 |
270735 |
0 |
0 |
| T5 |
90240 |
89175 |
0 |
0 |
| T9 |
113110 |
111685 |
0 |
0 |
| T10 |
298755 |
298470 |
0 |
0 |
| T11 |
22570 |
22290 |
0 |
0 |
| T12 |
60195 |
58900 |
0 |
0 |
| T13 |
239450 |
239145 |
0 |
0 |
DigestOffsetMustBeRepresentable_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
5570 |
5570 |
0 |
0 |
| T1 |
5 |
5 |
0 |
0 |
| T2 |
5 |
5 |
0 |
0 |
| T3 |
5 |
5 |
0 |
0 |
| T4 |
5 |
5 |
0 |
0 |
| T5 |
5 |
5 |
0 |
0 |
| T9 |
5 |
5 |
0 |
0 |
| T10 |
5 |
5 |
0 |
0 |
| T11 |
5 |
5 |
0 |
0 |
| T12 |
5 |
5 |
0 |
0 |
| T13 |
5 |
5 |
0 |
0 |
EccErrorState_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
37959 |
0 |
0 |
| T59 |
34965 |
0 |
0 |
0 |
| T75 |
53292 |
0 |
0 |
0 |
| T177 |
53655 |
8451 |
0 |
0 |
| T187 |
20510 |
11427 |
0 |
0 |
| T188 |
0 |
11253 |
0 |
0 |
| T189 |
0 |
6828 |
0 |
0 |
| T203 |
28365 |
0 |
0 |
0 |
| T204 |
26622 |
0 |
0 |
0 |
| T205 |
49818 |
0 |
0 |
0 |
| T206 |
177231 |
0 |
0 |
0 |
| T207 |
694725 |
0 |
0 |
0 |
| T208 |
93747 |
0 |
0 |
0 |
| T209 |
45978 |
0 |
0 |
0 |
| T210 |
45442 |
0 |
0 |
0 |
| T211 |
27684 |
0 |
0 |
0 |
| T212 |
16476 |
0 |
0 |
0 |
| T213 |
24726 |
0 |
0 |
0 |
| T214 |
54646 |
0 |
0 |
0 |
| T215 |
66242 |
0 |
0 |
0 |
| T216 |
24516 |
0 |
0 |
0 |
| T217 |
55952 |
0 |
0 |
0 |
| T218 |
129736 |
0 |
0 |
0 |
ErrorKnown_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
418068650 |
0 |
0 |
| T1 |
25600 |
25210 |
0 |
0 |
| T2 |
63990 |
63050 |
0 |
0 |
| T3 |
50635 |
49110 |
0 |
0 |
| T4 |
276070 |
270735 |
0 |
0 |
| T5 |
90240 |
89175 |
0 |
0 |
| T9 |
113110 |
111685 |
0 |
0 |
| T10 |
298755 |
298470 |
0 |
0 |
| T11 |
22570 |
22290 |
0 |
0 |
| T12 |
60195 |
58900 |
0 |
0 |
| T13 |
239450 |
239145 |
0 |
0 |
FsmStateKnown_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
418068650 |
0 |
0 |
| T1 |
25600 |
25210 |
0 |
0 |
| T2 |
63990 |
63050 |
0 |
0 |
| T3 |
50635 |
49110 |
0 |
0 |
| T4 |
276070 |
270735 |
0 |
0 |
| T5 |
90240 |
89175 |
0 |
0 |
| T9 |
113110 |
111685 |
0 |
0 |
| T10 |
298755 |
298470 |
0 |
0 |
| T11 |
22570 |
22290 |
0 |
0 |
| T12 |
60195 |
58900 |
0 |
0 |
| T13 |
239450 |
239145 |
0 |
0 |
InitDoneKnown_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
418068650 |
0 |
0 |
| T1 |
25600 |
25210 |
0 |
0 |
| T2 |
63990 |
63050 |
0 |
0 |
| T3 |
50635 |
49110 |
0 |
0 |
| T4 |
276070 |
270735 |
0 |
0 |
| T5 |
90240 |
89175 |
0 |
0 |
| T9 |
113110 |
111685 |
0 |
0 |
| T10 |
298755 |
298470 |
0 |
0 |
| T11 |
22570 |
22290 |
0 |
0 |
| T12 |
60195 |
58900 |
0 |
0 |
| T13 |
239450 |
239145 |
0 |
0 |
InitReadLocksPartition_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
85906256 |
0 |
0 |
| T1 |
25600 |
1290 |
0 |
0 |
| T2 |
63990 |
1180 |
0 |
0 |
| T3 |
50635 |
19149 |
0 |
0 |
| T4 |
276070 |
47285 |
0 |
0 |
| T5 |
90240 |
6665 |
0 |
0 |
| T9 |
113110 |
47063 |
0 |
0 |
| T10 |
298755 |
615 |
0 |
0 |
| T11 |
22570 |
370 |
0 |
0 |
| T12 |
60195 |
5310 |
0 |
0 |
| T13 |
239450 |
485 |
0 |
0 |
InitWriteLocksPartition_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
85906256 |
0 |
0 |
| T1 |
25600 |
1290 |
0 |
0 |
| T2 |
63990 |
1180 |
0 |
0 |
| T3 |
50635 |
19149 |
0 |
0 |
| T4 |
276070 |
47285 |
0 |
0 |
| T5 |
90240 |
6665 |
0 |
0 |
| T9 |
113110 |
47063 |
0 |
0 |
| T10 |
298755 |
615 |
0 |
0 |
| T11 |
22570 |
370 |
0 |
0 |
| T12 |
60195 |
5310 |
0 |
0 |
| T13 |
239450 |
485 |
0 |
0 |
OffsetMustBeBlockAligned_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
5570 |
5570 |
0 |
0 |
| T1 |
5 |
5 |
0 |
0 |
| T2 |
5 |
5 |
0 |
0 |
| T3 |
5 |
5 |
0 |
0 |
| T4 |
5 |
5 |
0 |
0 |
| T5 |
5 |
5 |
0 |
0 |
| T9 |
5 |
5 |
0 |
0 |
| T10 |
5 |
5 |
0 |
0 |
| T11 |
5 |
5 |
0 |
0 |
| T12 |
5 |
5 |
0 |
0 |
| T13 |
5 |
5 |
0 |
0 |
OtpAddrKnown_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
418068650 |
0 |
0 |
| T1 |
25600 |
25210 |
0 |
0 |
| T2 |
63990 |
63050 |
0 |
0 |
| T3 |
50635 |
49110 |
0 |
0 |
| T4 |
276070 |
270735 |
0 |
0 |
| T5 |
90240 |
89175 |
0 |
0 |
| T9 |
113110 |
111685 |
0 |
0 |
| T10 |
298755 |
298470 |
0 |
0 |
| T11 |
22570 |
22290 |
0 |
0 |
| T12 |
60195 |
58900 |
0 |
0 |
| T13 |
239450 |
239145 |
0 |
0 |
OtpCmdKnown_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
418068650 |
0 |
0 |
| T1 |
25600 |
25210 |
0 |
0 |
| T2 |
63990 |
63050 |
0 |
0 |
| T3 |
50635 |
49110 |
0 |
0 |
| T4 |
276070 |
270735 |
0 |
0 |
| T5 |
90240 |
89175 |
0 |
0 |
| T9 |
113110 |
111685 |
0 |
0 |
| T10 |
298755 |
298470 |
0 |
0 |
| T11 |
22570 |
22290 |
0 |
0 |
| T12 |
60195 |
58900 |
0 |
0 |
| T13 |
239450 |
239145 |
0 |
0 |
OtpErrorState_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
214 |
0 |
0 |
| T3 |
10127 |
1 |
0 |
0 |
| T4 |
55214 |
0 |
0 |
0 |
| T5 |
18048 |
0 |
0 |
0 |
| T9 |
22622 |
0 |
0 |
0 |
| T10 |
59751 |
0 |
0 |
0 |
| T11 |
4514 |
0 |
0 |
0 |
| T12 |
12039 |
0 |
0 |
0 |
| T13 |
47890 |
0 |
0 |
0 |
| T17 |
4541 |
0 |
0 |
0 |
| T20 |
83805 |
0 |
0 |
0 |
| T44 |
13952 |
0 |
0 |
0 |
| T48 |
12134 |
0 |
0 |
0 |
| T56 |
36844 |
0 |
0 |
0 |
| T68 |
14804 |
1 |
0 |
0 |
| T115 |
0 |
1 |
0 |
0 |
| T133 |
0 |
1 |
0 |
0 |
| T136 |
108495 |
0 |
0 |
0 |
| T137 |
70005 |
0 |
0 |
0 |
| T148 |
18762 |
0 |
0 |
0 |
| T180 |
0 |
1 |
0 |
0 |
| T181 |
92673 |
3 |
0 |
0 |
| T185 |
54418 |
1 |
0 |
0 |
| T186 |
73754 |
0 |
0 |
0 |
| T191 |
0 |
1 |
0 |
0 |
| T192 |
0 |
1 |
0 |
0 |
| T193 |
0 |
1 |
0 |
0 |
| T194 |
0 |
1 |
0 |
0 |
| T195 |
0 |
1 |
0 |
0 |
| T196 |
0 |
1 |
0 |
0 |
| T199 |
0 |
1 |
0 |
0 |
| T219 |
0 |
1 |
0 |
0 |
| T220 |
0 |
1 |
0 |
0 |
| T221 |
0 |
3 |
0 |
0 |
| T222 |
0 |
1 |
0 |
0 |
| T223 |
0 |
1 |
0 |
0 |
| T224 |
0 |
1 |
0 |
0 |
| T225 |
0 |
1 |
0 |
0 |
| T226 |
36395 |
0 |
0 |
0 |
OtpReqKnown_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
418068650 |
0 |
0 |
| T1 |
25600 |
25210 |
0 |
0 |
| T2 |
63990 |
63050 |
0 |
0 |
| T3 |
50635 |
49110 |
0 |
0 |
| T4 |
276070 |
270735 |
0 |
0 |
| T5 |
90240 |
89175 |
0 |
0 |
| T9 |
113110 |
111685 |
0 |
0 |
| T10 |
298755 |
298470 |
0 |
0 |
| T11 |
22570 |
22290 |
0 |
0 |
| T12 |
60195 |
58900 |
0 |
0 |
| T13 |
239450 |
239145 |
0 |
0 |
OtpSizeKnown_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
418068650 |
0 |
0 |
| T1 |
25600 |
25210 |
0 |
0 |
| T2 |
63990 |
63050 |
0 |
0 |
| T3 |
50635 |
49110 |
0 |
0 |
| T4 |
276070 |
270735 |
0 |
0 |
| T5 |
90240 |
89175 |
0 |
0 |
| T9 |
113110 |
111685 |
0 |
0 |
| T10 |
298755 |
298470 |
0 |
0 |
| T11 |
22570 |
22290 |
0 |
0 |
| T12 |
60195 |
58900 |
0 |
0 |
| T13 |
239450 |
239145 |
0 |
0 |
OtpWdataKnown_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
418068650 |
0 |
0 |
| T1 |
25600 |
25210 |
0 |
0 |
| T2 |
63990 |
63050 |
0 |
0 |
| T3 |
50635 |
49110 |
0 |
0 |
| T4 |
276070 |
270735 |
0 |
0 |
| T5 |
90240 |
89175 |
0 |
0 |
| T9 |
113110 |
111685 |
0 |
0 |
| T10 |
298755 |
298470 |
0 |
0 |
| T11 |
22570 |
22290 |
0 |
0 |
| T12 |
60195 |
58900 |
0 |
0 |
| T13 |
239450 |
239145 |
0 |
0 |
ReadLockPropagation_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
78207730 |
0 |
0 |
| T4 |
276070 |
10119 |
0 |
0 |
| T5 |
90240 |
0 |
0 |
0 |
| T9 |
113110 |
0 |
0 |
0 |
| T10 |
298755 |
0 |
0 |
0 |
| T11 |
22570 |
0 |
0 |
0 |
| T12 |
60195 |
0 |
0 |
0 |
| T13 |
239450 |
0 |
0 |
0 |
| T17 |
22705 |
0 |
0 |
0 |
| T19 |
0 |
89883 |
0 |
0 |
| T35 |
0 |
15552 |
0 |
0 |
| T44 |
69760 |
0 |
0 |
0 |
| T51 |
0 |
36362 |
0 |
0 |
| T55 |
0 |
3974 |
0 |
0 |
| T94 |
0 |
48372 |
0 |
0 |
| T95 |
0 |
92208 |
0 |
0 |
| T97 |
137030 |
0 |
0 |
0 |
| T98 |
0 |
21226 |
0 |
0 |
| T123 |
0 |
9387 |
0 |
0 |
| T124 |
0 |
26240 |
0 |
0 |
| T125 |
0 |
2211 |
0 |
0 |
| T134 |
0 |
6899 |
0 |
0 |
| T141 |
0 |
1321 |
0 |
0 |
SizeMustBeBlockAligned_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
5570 |
5570 |
0 |
0 |
| T1 |
5 |
5 |
0 |
0 |
| T2 |
5 |
5 |
0 |
0 |
| T3 |
5 |
5 |
0 |
0 |
| T4 |
5 |
5 |
0 |
0 |
| T5 |
5 |
5 |
0 |
0 |
| T9 |
5 |
5 |
0 |
0 |
| T10 |
5 |
5 |
0 |
0 |
| T11 |
5 |
5 |
0 |
0 |
| T12 |
5 |
5 |
0 |
0 |
| T13 |
5 |
5 |
0 |
0 |
TlulGntKnown_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
418068650 |
0 |
0 |
| T1 |
25600 |
25210 |
0 |
0 |
| T2 |
63990 |
63050 |
0 |
0 |
| T3 |
50635 |
49110 |
0 |
0 |
| T4 |
276070 |
270735 |
0 |
0 |
| T5 |
90240 |
89175 |
0 |
0 |
| T9 |
113110 |
111685 |
0 |
0 |
| T10 |
298755 |
298470 |
0 |
0 |
| T11 |
22570 |
22290 |
0 |
0 |
| T12 |
60195 |
58900 |
0 |
0 |
| T13 |
239450 |
239145 |
0 |
0 |
TlulRdataKnown_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
418068650 |
0 |
0 |
| T1 |
25600 |
25210 |
0 |
0 |
| T2 |
63990 |
63050 |
0 |
0 |
| T3 |
50635 |
49110 |
0 |
0 |
| T4 |
276070 |
270735 |
0 |
0 |
| T5 |
90240 |
89175 |
0 |
0 |
| T9 |
113110 |
111685 |
0 |
0 |
| T10 |
298755 |
298470 |
0 |
0 |
| T11 |
22570 |
22290 |
0 |
0 |
| T12 |
60195 |
58900 |
0 |
0 |
| T13 |
239450 |
239145 |
0 |
0 |
TlulReadOnReadLock_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
30964 |
0 |
0 |
| T4 |
220856 |
5 |
0 |
0 |
| T5 |
90240 |
0 |
0 |
0 |
| T9 |
113110 |
46 |
0 |
0 |
| T10 |
298755 |
0 |
0 |
0 |
| T11 |
22570 |
0 |
0 |
0 |
| T12 |
60195 |
0 |
0 |
0 |
| T13 |
239450 |
0 |
0 |
0 |
| T17 |
22705 |
0 |
0 |
0 |
| T35 |
0 |
13 |
0 |
0 |
| T44 |
69760 |
0 |
0 |
0 |
| T51 |
0 |
6 |
0 |
0 |
| T55 |
0 |
3 |
0 |
0 |
| T68 |
14804 |
0 |
0 |
0 |
| T94 |
0 |
59 |
0 |
0 |
| T95 |
0 |
14 |
0 |
0 |
| T96 |
0 |
19 |
0 |
0 |
| T97 |
137030 |
0 |
0 |
0 |
| T98 |
0 |
10 |
0 |
0 |
| T100 |
0 |
2 |
0 |
0 |
| T104 |
0 |
9 |
0 |
0 |
| T123 |
0 |
2 |
0 |
0 |
| T124 |
0 |
18 |
0 |
0 |
| T133 |
0 |
18 |
0 |
0 |
TlulRerrorKnown_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
418068650 |
0 |
0 |
| T1 |
25600 |
25210 |
0 |
0 |
| T2 |
63990 |
63050 |
0 |
0 |
| T3 |
50635 |
49110 |
0 |
0 |
| T4 |
276070 |
270735 |
0 |
0 |
| T5 |
90240 |
89175 |
0 |
0 |
| T9 |
113110 |
111685 |
0 |
0 |
| T10 |
298755 |
298470 |
0 |
0 |
| T11 |
22570 |
22290 |
0 |
0 |
| T12 |
60195 |
58900 |
0 |
0 |
| T13 |
239450 |
239145 |
0 |
0 |
TlulRvalidKnown_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
418068650 |
0 |
0 |
| T1 |
25600 |
25210 |
0 |
0 |
| T2 |
63990 |
63050 |
0 |
0 |
| T3 |
50635 |
49110 |
0 |
0 |
| T4 |
276070 |
270735 |
0 |
0 |
| T5 |
90240 |
89175 |
0 |
0 |
| T9 |
113110 |
111685 |
0 |
0 |
| T10 |
298755 |
298470 |
0 |
0 |
| T11 |
22570 |
22290 |
0 |
0 |
| T12 |
60195 |
58900 |
0 |
0 |
| T13 |
239450 |
239145 |
0 |
0 |
WriteLockPropagation_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
8691606 |
0 |
0 |
| T4 |
220856 |
8740 |
0 |
0 |
| T5 |
72192 |
0 |
0 |
0 |
| T9 |
90488 |
0 |
0 |
0 |
| T10 |
239004 |
0 |
0 |
0 |
| T11 |
18056 |
0 |
0 |
0 |
| T12 |
48156 |
0 |
0 |
0 |
| T13 |
191560 |
0 |
0 |
0 |
| T17 |
18164 |
0 |
0 |
0 |
| T19 |
0 |
17043 |
0 |
0 |
| T20 |
0 |
8179 |
0 |
0 |
| T36 |
0 |
7492 |
0 |
0 |
| T44 |
55808 |
0 |
0 |
0 |
| T52 |
0 |
5862 |
0 |
0 |
| T66 |
14559 |
0 |
0 |
0 |
| T95 |
68109 |
12253 |
0 |
0 |
| T97 |
109624 |
0 |
0 |
0 |
| T98 |
48311 |
8212 |
0 |
0 |
| T104 |
21631 |
0 |
0 |
0 |
| T106 |
0 |
4096 |
0 |
0 |
| T123 |
32713 |
1504 |
0 |
0 |
| T124 |
57712 |
7014 |
0 |
0 |
| T127 |
0 |
4340 |
0 |
0 |
| T128 |
0 |
5791 |
0 |
0 |
| T129 |
0 |
20482 |
0 |
0 |
| T130 |
31196 |
0 |
0 |
0 |
| T131 |
15372 |
0 |
0 |
0 |
| T132 |
4177 |
0 |
0 |
0 |
| T133 |
81333 |
0 |
0 |
0 |
| T134 |
0 |
12588 |
0 |
0 |
| T135 |
0 |
17677 |
0 |
0 |
| T137 |
0 |
2493 |
0 |
0 |
| T145 |
0 |
5965 |
0 |
0 |
| T146 |
0 |
3740 |
0 |
0 |
| T150 |
0 |
22043 |
0 |
0 |
| T227 |
0 |
1505 |
0 |
0 |
| T228 |
0 |
1479 |
0 |
0 |
gen_digest_write_lock.DigestWriteLocksPartition_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
103951980 |
0 |
0 |
| T4 |
220856 |
148292 |
0 |
0 |
| T5 |
90240 |
0 |
0 |
0 |
| T9 |
113110 |
5098 |
0 |
0 |
| T10 |
298755 |
0 |
0 |
0 |
| T11 |
22570 |
0 |
0 |
0 |
| T12 |
60195 |
0 |
0 |
0 |
| T13 |
239450 |
0 |
0 |
0 |
| T17 |
22705 |
0 |
0 |
0 |
| T19 |
0 |
347884 |
0 |
0 |
| T35 |
0 |
132555 |
0 |
0 |
| T44 |
69760 |
0 |
0 |
0 |
| T51 |
0 |
125688 |
0 |
0 |
| T52 |
0 |
53520 |
0 |
0 |
| T55 |
0 |
4931 |
0 |
0 |
| T68 |
14804 |
3009 |
0 |
0 |
| T95 |
0 |
212768 |
0 |
0 |
| T97 |
137030 |
0 |
0 |
0 |
| T98 |
0 |
143373 |
0 |
0 |
| T100 |
0 |
6082 |
0 |
0 |
| T101 |
0 |
2047 |
0 |
0 |
| T123 |
0 |
72915 |
0 |
0 |
| T124 |
0 |
159935 |
0 |
0 |
| T125 |
0 |
59308 |
0 |
0 |
| T128 |
0 |
41340 |
0 |
0 |
| T134 |
0 |
36518 |
0 |
0 |
| T141 |
0 |
86906 |
0 |
0 |
| T145 |
0 |
36311 |
0 |
0 |
| T150 |
0 |
67886 |
0 |
0 |
| T173 |
0 |
3461 |
0 |
0 |
u_state_regs_A
| Name | Attempts | Real Successes | Failures | Incomplete |
| Total |
422217995 |
418068650 |
0 |
0 |
| T1 |
25600 |
25210 |
0 |
0 |
| T2 |
63990 |
63050 |
0 |
0 |
| T3 |
50635 |
49110 |
0 |
0 |
| T4 |
276070 |
270735 |
0 |
0 |
| T5 |
90240 |
89175 |
0 |
0 |
| T9 |
113110 |
111685 |
0 |
0 |
| T10 |
298755 |
298470 |
0 |
0 |
| T11 |
22570 |
22290 |
0 |
0 |
| T12 |
60195 |
58900 |
0 |
0 |
| T13 |
239450 |
239145 |
0 |
0 |
