Do you have the option to add a watchdog circuit? This is the general
catch-all for soft errors (so-called "single event upset"). This would
add protection against errant software caused by a bit flip or even
latent software faults. Imagine what happens on a bit flip in the
Program Counter or Stack Pointer! See "The Firmware Handbook", Jack
Ganssle ed., for a good discussion of watchdogs and other diagnostics.

Further things to do, in addition to what't been rcommended: save
duplicate copies (preferably in different memory spaces) for critical
parameters; CRC data areas and packets; CRC or checksum the program
space during idle time; include range checking for critical parameters.
Failure of error checking should cause a reset.

Some of these might be overkill for MSP430, but that's the general idea.

Jeff Geisler
------------------------------------



(You need to be a member of msp430 -- send a blank email to msp430-subscribe@yahoogroups.com )