Preventive techniques

AN1015

8/19

DocID5833 Rev 2

Figure 2. Example of correct watchdog usage

2.2

Securing the unused program memory area

In most applications, program memory space is not filled completely by user code. For extra

security, fill the unused memory locations with code that forces a watchdog reset or jumps to

a known program location if you do not want to generate a reset.

This will ensure that even if the program counter is corrupted and jumps to an unused

memory location, the MCU will recover and return to normal operations.

In this unused area you can also jump to a recovery fail safe subroutine, which allows you to

return to normal operations.