Safety-Certifying Open Source Software: The Case of the Xen Hypervisor
summary
AMD aims to safety-certify upstream Xen for IEC 61508 SIL3 and ISO 26262 ASIL‑D by keeping work upstream, adding MISRA checks (about 45 rules adopted so far), integrating static analysis into GitLab CI and running 118 CI tests plus real‑hardware runners, and following a two‑phase third‑party assessment (concept approval then detailed verification). Plan removes runtime allocs with a zero dynamic allocation model; estimate: ~50k LOC can reach certification in ~24–30 months with added tests and docs.
AI-written summary · about
chapters (9)
- 0:00Start
- 6:42Xen Hypervisor Rigorous Quality Process
- 8:21Safety certifying Xen Hypervisor
- 12:43Xen Hypervisor safety certification plan
- 20:39Software safety engineering work estimate
- 22:20Xen Hypervisor safety certification deliverables
- 25:17Safety/Community Alignment: MISRA C
- 31:49Safety/Community Alignment: Documentation
- 32:42Safety/Community Alignment: Testing
related talks
45mSafety Certifying an Open Source Project: The Example of Xen
40mBOF: Open Source Projects in Safety Critical Applications
44mThe Road to Safety Certification: How the Xen Project is Making Progress within the Auto Industry
32mDeveloping Open Source for Safety and Security
52mBringing Existing Open-Source Code into MISRA Compliance
34mOpen Source in Safety Critical Applications: the Next Frontier
51mMISRA C and C++ in OSS: Yes, We Can!
05mKeynote: Evolution of Open Source for Safe Usage in Critical Systems