HCI: handling error

RE: HCI: handling error

dejans — Fri, 10 Jan 2025 15:40:17 GMT

Hi Piotr,

I have reported this issue, and we have discussed it internally.

We understand that you want to isolate faults in the co-processor from triggering panic in the application processors. Although achievable, it is currently not implemented.
Please note that returning an error from bt_hci_cmd_send_sync might result in somewhat undefined behavior if controller starts responding again. Late response from the controller could be misunderstood by the host to be a response to a subsequent command. This situation might however get resolved without problems, but this might not be what is expected.

Regarding the safety of disabling CONFIG_BT_ASSSERT, our code relies on these assert messages to catch various rare-but-possible errors. If for example assertion check is not enabled, bt_hci_cmd_send_sync returns success when it should not. There might be other cases like this. It is up to you to do this risk analysis.

Best regards,
Dejan

RE: HCI: handling error

td-pradecki — Thu, 09 Jan 2025 10:47:46 GMT

So basically if there is hardware problem with HCI, the device is doomed to be resetting over and over again?
There is no solution for that?

If so, could you please report it as a issue? I don't think it's acceptable solution from the customer point of view.

KR,

Piotr

RE: HCI: handling error

dejans — Thu, 09 Jan 2025 10:15:35 GMT

Hi Piotr,

Described behavior of handling the error and reporting it to the cloud is unfortunately not achievable at the moment.

Best regards,
Dejan

RE: HCI: handling error

td-pradecki — Tue, 07 Jan 2025 08:24:51 GMT

I am working on iot device which consists of nrf91 as a main processor and handles communication with server.
Nrf52840 is used as a bluetooth controller.

In general I am aware of the mechanism. Normally I don't experience the error.

However I'd like my firmware to handle situation in which for example nrf52840 gets damaged, there is a cold joint, etc..

In situation like this I expect the program ran on nrf91 to handle the exception (HCI_TIMEOUT) and report the error to cloud.

Current mechanism implemented in the sdk doesn't allow me to do so.

KR,
Piotr

RE: HCI: handling error

dejans — Mon, 06 Jan 2025 14:12:14 GMT

Hi,

Do you see the same hard fault if you increase HCI_CMD_TIMEOUT in hci_core.c?

[quote user=""]This causes a processor hard fault condition, which is not a tolerable behaviour in the project I am working on.[/quote]

Can you provide more information about your project?

Best regards,
Dejan