Re:Linus Torvalds: “Do No Harm”
by TickleSteve on Wednesday November 22, 2017 @07:45AM
(#15756326)
For safety-critical systems, resetting on a fault is very much factored into the worst-case response time and expected behaviour.
PANIC on fault is exactly what you design into the systems.
What you find is that the truly safety-critical portion of the system is running on a microcontroller and the UI (which is not safety-related) can run on Windows or Linux.
PANIC on fault is exactly what you design into the systems.
What you find is that the truly safety-critical portion of the system is running on a microcontroller and the UI (which is not safety-related) can run on Windows or Linux.