ab_gp_proc_train_data.c

Go to the documentation of this file.

 
#include "ab_gp_proc_train_data.h"
#include "../state_machines/ab_gp_dispatch.h"
 
#define RBC_MAX_ALLOWED_TRAIN_LENGTH_M 5000U
#define RBC_MAX_ALLOWED_TRAIN_SPEED_KMH 350U
 
bool ab_gp_proc_train_data_validate(ab_gp_ertms_train_context_t *ctx,
                                    uint32_t l_train_m,
                                    uint32_t v_maxtrain_kmh,
                                    uint8_t m_axleload,
                                    uint8_t m_loadinggauge,
                                    bool m_airtight,
                                    uint32_t timestamp_ms)
{
    if (ctx == NULL)
    {
        return false;
    }
 
    /* Msg 129 is in hand - raise it before running the checks so the
     * train-data FSM (state_machines/train_data/) records RECEIVED. Both
     * this and the two events below go through ab_gp_dispatch(): the
     * subscription table decides who reacts, not this call site. */
    (void)ab_gp_dispatch(ctx, AB_GP_EVENT_TRAIN_DATA_RECEIVED);
 
    /* Defensive parameter checks (SIL 4) - a failure now raises
     * TRAIN_DATA_REJECTED (train-data FSM -> REJECTED, which also clears
     * the derived .valid mirror). Behaviour refinement vs. the previous
     * bare `return false`: a re-validation that fails no longer leaves a
     * stale .valid == true from an earlier success (the FSM's own
     * VALIDATED + REJECTED guard still protects data that was good and is
     * only being re-checked, i.e. no preceding RECEIVED). */
    if (l_train_m == 0U || l_train_m > RBC_MAX_ALLOWED_TRAIN_LENGTH_M)
    {
        (void)ab_gp_dispatch(ctx, AB_GP_EVENT_TRAIN_DATA_REJECTED);
        return false;
    }
    if (v_maxtrain_kmh == 0U || v_maxtrain_kmh > RBC_MAX_ALLOWED_TRAIN_SPEED_KMH)
    {
        (void)ab_gp_dispatch(ctx, AB_GP_EVENT_TRAIN_DATA_REJECTED);
        return false;
    }
 
    ctx->train_data.l_train_m = l_train_m;
    ctx->train_data.v_maxtrain_kmh = v_maxtrain_kmh;
    ctx->train_data.m_axleload = m_axleload;
    ctx->train_data.m_loadinggauge = m_loadinggauge;
    ctx->train_data.m_airtight = m_airtight;
    ctx->train_data.t_train_data_ack = timestamp_ms;
 
    /* Reaches BOTH the session FSM (INITIATED/ESTABLISHED -> DATA_VALIDATED,
     * a no-op from any other session state) AND the train-data FSM
     * (-> VALIDATED, which sets the derived .valid mirror). .valid is no
     * longer written directly here - the train-data FSM owns it. */
    (void)ab_gp_dispatch(ctx, AB_GP_SESSION_EVENT_TRAIN_DATA_VALIDATED);
 
    return true;
}
 
bool ab_gp_proc_train_data_is_valid(const ab_gp_ertms_train_context_t *ctx)
{
    if (ctx == NULL)
    {
        return false;
    }
    return ctx->train_data.valid;
}
 
bool ab_gp_proc_train_data_get_ack_timestamp(const ab_gp_ertms_train_context_t *ctx,
                                             uint32_t *out_t_train_ack)
{
    if (ctx == NULL || out_t_train_ack == NULL || !ctx->train_data.valid)
    {
        return false;
    }
    *out_t_train_ack = ctx->train_data.t_train_data_ack;
    return true;
}