Model Advisor Checks for High-Integrity Modeling Guidelines

The Simulink^® Check™ Model Advisor provides High-Integrity System Modelling checks that you can use to verify compliance with safety standards, including:

• DO-178C / DO-331

• IEC 61508

• IEC 62304

• ISO 26262

• EN 50128 (and EN 50657)

• ISO 25119 (Embedded Coder)

The high-integrity guidelines and their corresponding checks are summarized in the table. For the guidelines that do not have Model Advisor checks, it is not possible to automate checking of the guideline. Guidelines without a corresponding check are noted as not applicable.

To check compliance with High Integrity System Model standards, run the high-integrity checks from these Model Advisor folders:

• By Task > Modeling Standards for DO-178C/DO-331 > High-Integrity Systems

• By Task > Modeling Standards for IEC 61508 > High-Integrity Systems

• By Task > Modeling Standards for IEC 62304 > High-Integrity Systems

• By Task > Modeling Standards for EN 50128/EN 50657 > High-Integrity Systems

• By Task > Modeling Standards for ISO 26262 > High-Integrity Systems

• By Task > Modeling Standards for ISO 25119 > High-Integrity Systems

For information on using the Model Advisor, see Run Model Advisor Checks.

High-Integrity Modeling Guideline	Model Advisor Checks
hisl_0001: Usage of Abs block	Check usage of Abs blocks (Simulink Check)
hisl_0002: Usage of Math Function blocks (rem and reciprocal)	Check usage of Math Function blocks (rem and reciprocal functions) (Simulink Check)
hisl_0003: Usage of Square Root blocks	Check usage of Sqrt blocks (Simulink Check)
hisl_0004: Usage of Math Function blocks (natural logarithm and base 10 logarithm)	Check usage of Math Function blocks (log and log10 functions) (Simulink Check)
hisl_0005: Usage of Product blocks	Not checkable
hisl_0006: Usage of While Iterator blocks	Check usage of While Iterator blocks (Simulink Check)
hisl_0007: Usage of For Iterator or While Iterator subsystems	Check usage of For and While Iterator subsystems (Simulink Check)
hisl_0008: Usage of For Iterator Blocks	Check usage of For Iterator blocks (Simulink Check)
hisl_0010: Usage of If blocks and If Action Subsystem blocks	Check usage of If blocks and If Action Subsystem blocks (Simulink Check)
hisl_0011: Usage of Switch Case blocks and Action Subsystem blocks	Check usage of Switch Case blocks and Switch Case Action Subsystem blocks (Simulink Check)
hisl_0012: Usage of conditionally executed subsystems	Check usage of conditionally executed subsystems (Simulink Check)
hisl_0013: Usage of data store blocks	Check safety-related diagnostic settings for data store memory (Simulink Check)
hisl_0015: Usage of Merge blocks	Check usage of Merge blocks (Simulink Check)
hisl_0016: Usage of blocks that compute relational operators	Check for Relational Operator blocks that equate floating-point types (Simulink Check)
hisl_0017: Usage of blocks that compute relational operators (2)	Check usage of Relational Operator blocks (Simulink Check)
hisl_0018: Usage of Logical Operator block	Check usage of Logical Operator blocks (Simulink Check)
hisl_0019: Usage of bitwise operations	Check usage of bit operation blocks (Simulink Check)
hisl_0020: Blocks not recommended for MISRA C:2012 compliance	Check for blocks not recommended for C/C++ production code deployment (Simulink Check) Check for blocks not recommended for MISRA C:2012 (Simulink Check)
hisl_0021: Consistent vector indexing method	Check for inconsistent vector indexing methods (Simulink Check)
hisl_0022: Data type selection for index signals	Check data types for blocks with index signals (Simulink Check)
hisl_0023: Verification of variant blocks	Check usage of variant blocks (Simulink Check)
hisl_0024: Inport interface definition	Check for root Inports with missing properties (Simulink Check)
hisl_0025: Design min/max specification of input interfaces	Check for root Inports with missing range definitions (Simulink Check)
hisl_0026: Design min/max specification of output interfaces	Check for root Outports with missing range definitions (Simulink Check)
hisl_0028: Usage of Reciprocal Square Root blocks	Check usage of Reciprocal Sqrt blocks (Simulink Check)
hisl_0029: Usage of Assignment blocks	Check usage of Assignment blocks (Simulink Check)
hisl_0031: Model file names	Check model file name (Simulink Check)
hisl_0032: Model object names	Check model object names (Simulink Check)
hisl_0033: Usage of Lookup Table blocks	Check usage of lookup table blocks (Simulink Check)
hisl_0034: Usage of Signal Routing blocks	Check usage of Signal Routing blocks (Simulink Check)
hisl_0036: Configuration Parameters > Diagnostics > Saving	Check safety-related diagnostic settings for saving (Simulink Check)
hisl_0037: Configuration Parameters > Model Referencing	Check safety-related model referencing settings (Simulink Check)
hisl_0038: Configuration Parameters > Code Generation > Comments	Check safety-related code generation settings for comments (Simulink Check)
hisl_0039: Configuration Parameters > Code Generation > Interface	Check safety-related code generation interface settings (Simulink Check)
hisl_0040: Configuration Parameters > Solver > Simulation time	Check safety-related solver settings for simulation time (Simulink Check)
hisl_0041: Configuration Parameters > Solver > Solver options	Check safety-related solver settings for solver options (Simulink Check)
hisl_0042: Configuration Parameters > Solver > Tasking and sample time options	Check safety-related solver settings for tasking and sample-time (Simulink Check)
hisl_0043: Configuration Parameters > Diagnostics > Solver	Check safety-related diagnostic settings for solvers (Simulink Check)
hisl_0044: Configuration Parameters > Diagnostics > Sample Time	Check safety-related diagnostic settings for sample time (Simulink Check)
hisl_0045: Configuration Parameters > Math and Data Types > Implement logic signals as Boolean data (vs. double)	Check safety-related optimization settings for logic signals (Simulink Check)
hisl_0046: Configuration Parameters > Simulation Target > Block reduction	Check safety-related block reduction optimization settings (Simulink Check)
hisl_0047: Configuration Parameters > Code Generation > Code Style	Check safety-related code generation settings for code style (Simulink Check)
hisl_0048: Configuration Parameters > Math and Data Types > Application lifespan (days)	Check safety-related optimization settings for application lifespan (Simulink Check)
hisl_0049: Configuration Parameters > Code Generation > Identifiers	Check safety-related code generation identifier settings (Simulink Check)
hisl_0051: Configuration Parameters > Code Generation > Optimization > Loop unrolling threshold	Check safety-related optimization settings for Loop unrolling threshold (Simulink Check)
hisl_0052: Configuration Parameters > Code Generation > Optimization > Data initialization	Check safety-related optimization settings for data initialization (Simulink Check)
hisl_0053: Configuration Parameters > Code Generation > Optimization > Remove code from floating-point to integer conversions that wraps out-of-range values	Check safety-related optimization settings for data type conversions (Simulink Check)
hisl_0054: Configuration Parameters > Code Generation > Optimization > Remove code that protects against division arithmetic exceptions	Check safety-related optimization settings for division arithmetic exceptions (Simulink Check)
hisl_0056: Configuration Parameters > Code Generation > Optimization > Optimize using the specified minimum and maximum values	Check safety-related optimization settings for specified minimum and maximum values (Simulink Check)
hisl_0060: Configuration parameters that improve MISRA C:2012 compliance	Check configuration parameters for MISRA C:2012 (Simulink Check)
hisl_0061: Unique identifiers for clarity	Check Stateflow charts for uniquely defined data objects (Simulink Check)
hisl_0062: Global variables in graphical functions	Check global variables in graphical functions (Simulink Check)
hisl_0063: Length of user-defined object names to improve MISRA C:2012 compliance	Check for length of user-defined object names (Simulink Check)
hisl_0066: Usage of Gain blocks	Check usage of Gain blocks (Simulink Check)
hisl_0070: Placement of requirement links in a model	Check for model elements that do not link to requirements (Simulink Check)
hisl_0101: Avoid invariant comparison operations to improve MISRA C:2012 compliance	Not checkable
hisl_0102: Data type of loop control variables to improve MISRA C:2012 compliance	Check data type of loop control variables (Simulink Check)
hisl_0301: Configuration Parameters > Diagnostics > Compatibility	Check safety-related diagnostic settings for compatibility (Simulink Check)
hisl_0302: Configuration Parameters > Diagnostics > Data Validity > Parameters	Check safety-related diagnostic settings for parameters (Simulink Check)
hisl_0303: Configuration Parameters > Diagnostics > Data Validity > Merge blocks	Check safety-related diagnostic settings for Merge blocks (Simulink Check)
hisl_0304: Configuration Parameters > Diagnostics > Data Validity > Model initialization	Check safety-related diagnostic settings for model initialization (Simulink Check)
hisl_0305: Configuration Parameters > Diagnostics > Data Validity > Debugging	Check safety-related diagnostic settings for data used for debugging (Simulink Check)
hisl_0306: Configuration Parameters > Diagnostics > Connectivity > Signals	Check safety-related diagnostic settings for signal connectivity (Simulink Check)
hisl_0307: Configuration Parameters > Diagnostics > Connectivity > Buses	Check safety-related diagnostic settings for bus connectivity (Simulink Check)
hisl_0308: Configuration Parameters > Diagnostics > Connectivity > Function calls	Check safety-related diagnostic settings that apply to function-call connectivity (Simulink Check)
hisl_0309: Configuration Parameters > Diagnostics > Type Conversion	Check safety-related diagnostic settings for type conversions (Simulink Check)
hisl_0310: Configuration Parameters > Diagnostics > Model Referencing	Check safety-related diagnostic settings for model referencing (Simulink Check)
hisl_0311: Configuration Parameters > Diagnostics > Stateflow	Check safety-related diagnostic settings for Stateflow (Simulink Check)
hisl_0314: Configuration Parameters > Diagnostics > Data Validity > Signals	Check safety-related diagnostic settings for signal data (Simulink Check)
hisf_0001: State Machine Type	Check state machine type of Stateflow charts (Simulink Check)
hisf_0002: User-specified state/transition execution order	Check Stateflow charts for ordering of states and transitions (Simulink Check)
hisf_0003: Usage of bitwise operations	Check usage of bitwise operations in Stateflow charts (Simulink Check)
hisf_0004: Usage of recursive behavior	Not checkable
hisf_0007: Usage of junction conditions (maintaining mutual exclusion)	Not checkable
hisf_0009: Strong data typing (Simulink and Stateflow boundary)	Check for Strong Data Typing with Simulink I/O (Simulink Check)
hisf_0011: Stateflow debugging settings	Check Stateflow debugging options (Simulink Check)
hisf_0013: Usage of transition paths (crossing parallel state boundaries)	Check Stateflow charts for transition paths that cross parallel state boundaries (Simulink Check)
hisf_0014: Usage of transition paths (passing through states)	Check for inappropriate use of transition paths (Simulink Check)
hisf_0015: Strong data typing (casting variables and parameters in expressions)	Check Stateflow charts for strong data typing (Simulink Check)
hisf_0016: Stateflow port names	Check naming of ports in Stateflow charts (Simulink Check)
hisf_0017: Stateflow data object scoping	Check scoping of Stateflow data objects (Simulink Check)
hisf_0064: Shift operations for Stateflow data to improve code compliance	Check usage of shift operations for Stateflow data (Simulink Check)
hisf_0065: Type cast operations in Stateflow to improve code compliance	Check assignment operations in Stateflow Charts (Simulink Check)
hisf_0211: Protect against use of unary operators in Stateflow Charts to improve code compliance	Check Stateflow charts for unary operators (Simulink Check)
hisf_0213: Protect against divide-by-zero calculations in Stateflow charts to improve MISRA C:2012 compliance	Not checkable
himl_0001: Usage of standardized MATLAB function headers	Check usage of standardized MATLAB function headers (Simulink Check)
himl_0002: Strong data typing at MATLAB function boundaries	Check for MATLAB Function interfaces with inherited properties (Simulink Check)
himl_0003: Limitation of MATLAB function complexity	Check MATLAB Function metrics (Simulink Check)
himl_0004: MATLAB Code Analyzer recommendations for code generation	Check MATLAB Code Analyzer messages (Simulink Check)
himl_0006: MATLAB code if / elseif / else patterns	Check if/elseif/else patterns in MATLAB Function blocks (Simulink Check)
himl_0007: MATLAB code switch / case / otherwise patterns	Check switch statements in MATLAB Function blocks (Simulink Check)
himl_0008: MATLAB code relational operator data types	Check usage of relational operators in MATLAB Function blocks (Simulink Check)
himl_0009: MATLAB code with equal / not equal relational operators	Check usage of equality operators in MATLAB Function blocks (Simulink Check)
himl_0010: MATLAB code with logical operators and functions	Check usage of logical operators and functions in MATLAB Function blocks (Simulink Check)
himl_0011: Data type and size of condition expressions	Check type and size of condition expressions (Simulink Check)