Failure Model
Timing Constraints Table of contentsFailure Model
change style
Two assumptions:

  1. Only processor failures: permanent or temporary


  2. Fail-silent assumption: the processor stops executing

9 / 28