tree 33f0b7f73a3a2faa9198461338ba5839b9240610
parent 913a02d91a7c51fc4b8397cc73affbce0ca3ad23
author Rupert Swarbrick <rswarbrick@lowrisc.org> 1649429319 +0100
committer Rupert Swarbrick <rswarbrick@gmail.com> 1649841054 +0100

[otbn,rtl] Pass an escalation signal to start/stop controller

Otherwise, an escalation that happens when we're in e.g. state
OtbnStartStopStateUrndRefresh leaves us in a weird half-running state.
The rest of OTBN knows that we're stopping immediately in this case:
make sure that the start/stop controller knows too!

The other change with this PR is that we change the
OtbnStartStopStateError state to OtbnStartStopStateLocked. An FSM
glitch will still ping state_error_o for a cycle, causing a fatal
alert, but now we have a nice terminal state for local escalation.

Signed-off-by: Rupert Swarbrick <rswarbrick@lowrisc.org>