Implement MaxCumulativeFailsafeSeconds (#19582)

Added MaxCumulativeFailsafeSeconds attribute to GeneralCommissioningCluster Added second timer in fail safe context to expire when
project-chip · Nov 20, 2023 · f0481e9 · f0481e9
1 parent ef97e56
commit f0481e9
Show file tree

Hide file tree

Showing 40 changed files with 134 additions and 15 deletions.
diff --git a/examples/all-clusters-app/all-clusters-common/all-clusters-app.matter b/examples/all-clusters-app/all-clusters-common/all-clusters-app.matter
@@ -1461,6 +1461,7 @@ server cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/examples/all-clusters-minimal-app/all-clusters-common/all-clusters-minimal-app.matter b/examples/all-clusters-minimal-app/all-clusters-common/all-clusters-minimal-app.matter
@@ -1090,6 +1090,7 @@ server cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/examples/bridge-app/bridge-common/bridge-app.matter b/examples/bridge-app/bridge-common/bridge-app.matter
@@ -415,6 +415,7 @@ server cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/examples/light-switch-app/light-switch-common/light-switch-app.matter b/examples/light-switch-app/light-switch-common/light-switch-app.matter
@@ -500,6 +500,7 @@ server cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/examples/lighting-app/lighting-common/lighting-app.matter b/examples/lighting-app/lighting-common/lighting-app.matter
@@ -513,6 +513,7 @@ server cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/examples/lock-app/lock-common/lock-app.matter b/examples/lock-app/lock-common/lock-app.matter
@@ -822,6 +822,7 @@ server cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/examples/log-source-app/log-source-common/log-source-app.matter b/examples/log-source-app/log-source-common/log-source-app.matter
@@ -147,6 +147,7 @@ server cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/examples/ota-provider-app/ota-provider-common/ota-provider-app.matter b/examples/ota-provider-app/ota-provider-common/ota-provider-app.matter
@@ -241,6 +241,7 @@ server cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/examples/ota-requestor-app/ota-requestor-common/ota-requestor-app.matter b/examples/ota-requestor-app/ota-requestor-common/ota-requestor-app.matter
@@ -175,6 +175,7 @@ server cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/examples/placeholder/linux/apps/app1/config.matter b/examples/placeholder/linux/apps/app1/config.matter
@@ -608,6 +608,7 @@ client cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;
@@ -654,6 +655,7 @@ server cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/examples/placeholder/linux/apps/app2/config.matter b/examples/placeholder/linux/apps/app2/config.matter
@@ -608,6 +608,7 @@ client cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;
@@ -654,6 +655,7 @@ server cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/examples/pump-app/pump-common/pump-app.matter b/examples/pump-app/pump-common/pump-app.matter
@@ -215,6 +215,7 @@ server cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/examples/pump-controller-app/pump-controller-common/pump-controller-app.matter b/examples/pump-controller-app/pump-controller-common/pump-controller-app.matter
@@ -238,6 +238,7 @@ server cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/examples/temperature-measurement-app/esp32/main/temperature-measurement.matter b/examples/temperature-measurement-app/esp32/main/temperature-measurement.matter
@@ -250,6 +250,7 @@ server cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/examples/thermostat/thermostat-common/thermostat.matter b/examples/thermostat/thermostat-common/thermostat.matter
@@ -262,6 +262,7 @@ server cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/examples/tv-app/tv-common/tv-app.matter b/examples/tv-app/tv-common/tv-app.matter
@@ -575,6 +575,7 @@ client cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;
@@ -633,6 +634,7 @@ server cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/examples/tv-casting-app/tv-casting-common/tv-casting-app.matter b/examples/tv-casting-app/tv-casting-common/tv-casting-app.matter
@@ -555,6 +555,7 @@ server cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/examples/window-app/common/window-app.matter b/examples/window-app/common/window-app.matter
@@ -227,6 +227,7 @@ server cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/src/app/clusters/general-commissioning-server/general-commissioning-server.cpp b/src/app/clusters/general-commissioning-server/general-commissioning-server.cpp
@@ -129,7 +129,10 @@ CHIP_ERROR GeneralCommissioningAttrAccess::ReadBasicCommissioningInfo(AttributeV
 
  // TODO: The commissioner might use the critical parameters in BasicCommissioningInfo to initialize
  // the CommissioningParameters at the beginning of commissioning flow.
- basicCommissioningInfo.failSafeExpiryLengthSeconds = CHIP_DEVICE_CONFIG_FAILSAFE_EXPIRY_LENGTH_SEC;
+ basicCommissioningInfo.failSafeExpiryLengthSeconds = CHIP_DEVICE_CONFIG_FAILSAFE_EXPIRY_LENGTH_SEC;
+ basicCommissioningInfo.maxCumulativeFailsafeSeconds = CHIP_DEVICE_CONFIG_MAX_CUMULATIVE_FAILSAFE_SEC;
+ static_assert(CHIP_DEVICE_CONFIG_MAX_CUMULATIVE_FAILSAFE_SEC >= CHIP_DEVICE_CONFIG_FAILSAFE_EXPIRY_LENGTH_SEC,
+ "Max cumulative failsafe seconds must be larger than failsafe expiry length seconds");
 
  return aEncoder.Encode(basicCommissioningInfo);
 }
@@ -140,7 +143,7 @@ CHIP_ERROR GeneralCommissioningAttrAccess::ReadSupportsConcurrentConnection(Attr
 
  // TODO: The commissioner might use the critical parameters in BasicCommissioningInfo to initialize
  // the CommissioningParameters at the beginning of commissioning flow.
- supportsConcurrentConnection = (CHIP_DEVICE_CONFIG_FAILSAFE_EXPIRY_LENGTH_SEC) != 0;
+ supportsConcurrentConnection = (CHIP_DEVICE_CONFIG_SUPPORTS_CONCURRENT_CONNECTION) != 0;
 
  return aEncoder.Encode(supportsConcurrentConnection);
 }

diff --git a/src/app/tests/suites/certification/Test_TC_CGEN_2_1.yaml b/src/app/tests/suites/certification/Test_TC_CGEN_2_1.yaml
@@ -71,4 +71,8 @@ tests:
  command: "readAttribute"
  attribute: "BasicCommissioningInfo"
  response:
- value: { FailSafeExpiryLengthSeconds: 60 }
+ value:
+ {
+ FailSafeExpiryLengthSeconds: 60,
+ MaxCumulativeFailsafeSeconds: 900,
+ }
diff --git a/src/app/zap-templates/zcl/data-model/chip/general-commissioning-cluster.xml b/src/app/zap-templates/zcl/data-model/chip/general-commissioning-cluster.xml
@@ -32,7 +32,8 @@ limitations under the License.
  </enum>
  <struct name="BasicCommissioningInfo">
  <cluster code="0x0030"/>
- <item name="FailSafeExpiryLengthSeconds" type="INT16U"/>
+ <item fieldId="0" name="FailSafeExpiryLengthSeconds" type="INT16U"/>
+ <item fieldId="1" name="MaxCumulativeFailsafeSeconds" type="INT16U"/>
  </struct>
  <cluster>
  <domain>General</domain>

diff --git a/src/controller/data_model/controller-clusters.matter b/src/controller/data_model/controller-clusters.matter
@@ -1811,6 +1811,7 @@ client cluster GeneralCommissioning = 48 {
 
  struct BasicCommissioningInfo {
  int16u failSafeExpiryLengthSeconds = 0;
+ int16u maxCumulativeFailsafeSeconds = 1;
  }
 
  attribute access(write: administer) int64u breadcrumb = 0;

diff --git a/src/controller/java/zap-generated/CHIPAttributeTLVValueDecoder.cpp b/src/controller/java/zap-generated/CHIPAttributeTLVValueDecoder.cpp
diff --git a/src/controller/java/zap-generated/chip/devicecontroller/ChipStructs.java b/src/controller/java/zap-generated/chip/devicecontroller/ChipStructs.java
diff --git a/src/controller/python/chip/clusters/Objects.py b/src/controller/python/chip/clusters/Objects.py
diff --git a/src/darwin/Framework/CHIP/zap-generated/CHIPAttributeTLVValueDecoder.mm b/src/darwin/Framework/CHIP/zap-generated/CHIPAttributeTLVValueDecoder.mm
diff --git a/src/darwin/Framework/CHIP/zap-generated/CHIPCallbackBridge.mm b/src/darwin/Framework/CHIP/zap-generated/CHIPCallbackBridge.mm
diff --git a/src/darwin/Framework/CHIP/zap-generated/CHIPStructsObjc.h b/src/darwin/Framework/CHIP/zap-generated/CHIPStructsObjc.h
diff --git a/src/darwin/Framework/CHIP/zap-generated/CHIPStructsObjc.mm b/src/darwin/Framework/CHIP/zap-generated/CHIPStructsObjc.mm
diff --git a/src/include/platform/CHIPDeviceConfig.h b/src/include/platform/CHIPDeviceConfig.h
@@ -257,6 +257,16 @@
 #define CHIP_DEVICE_CONFIG_FAILSAFE_EXPIRY_LENGTH_SEC 60
 #endif // CHIP_DEVICE_CONFIG_FAILSAFE_EXPIRY_LENGTH_SEC
 
+/**
+ * CHIP_DEVICE_CONFIG_MAX_CUMULATIVE_FAILSAFE_SEC
+ *
+ * The default conservative value in seconds denoting the maximum total duration for which a fail safe
+ * timer can be re-armed.
+ */
+#ifndef CHIP_DEVICE_CONFIG_MAX_CUMULATIVE_FAILSAFE_SEC
+#define CHIP_DEVICE_CONFIG_MAX_CUMULATIVE_FAILSAFE_SEC 900
+#endif // CHIP_DEVICE_CONFIG_MAX_CUMULATIVE_FAILSAFE_SEC
+
 /**
  * CHIP_DEVICE_CONFIG_SUPPORTS_CONCURRENT_CONNECTION
  *

diff --git a/src/include/platform/FailSafeContext.h b/src/include/platform/FailSafeContext.h
@@ -116,6 +116,12 @@ class FailSafeContext
  */
  static void HandleArmFailSafeTimer(System::Layer * layer, void * aAppState);
 
+ /**
+ * @brief
+ * The callback function to be called when max cumulative time expires.
+ */
+ static void HandleMaxCumulativeFailSafeTimer(System::Layer * layer, void * aAppState);
+
  /**
  * @brief
  * The callback function to be called asynchronously after various cleanup work has completed