I wondering what method you're using to monitor the sanity state of the RTOS and activate a watchdog in case of failure.
Currently, I have a hardware watchdog feed in the lower priority task . But in some case it's not working : The RTX can be OK but one task can be stuck , or buffers cannot be allocated or others reasons.
According to you , what is the best method ?
thanks in advance.
Let the wait function wakeup on a timeout and service your watchdog!
I prefer a timeout, to let the task sign off that it is still alive. The task may then also accumulate time since last event, and stop kicking if too many iterations to the wait function without detecting any event.
The task/ISR that is sending events may also update a counter each time it does. If the listener notices the counter incrementing while just getting timeouts, then it knows something is wrong and can stop kicking.
The task receiving events may also increment a counter for each processed event, and the sender may check that the backlog doesn't constantly grows.