blob: d8d7ddd1c60805cf1f75d00ccfeb9a66ceb87fe5 [file] [log] [blame]
# Copyright lowRISC contributors.
# Licensed under the Apache License, Version 2.0, see LICENSE for details.
# SPDX-License-Identifier: Apache-2.0
# clear previous settings
clear -all
source $env(COMMON_MSG_TCL_PATH)
if {$env(COV) == 1} {
check_cov -init -model {branch statement functional} \
-exclude_bind_hierarchies
}
#-------------------------------------------------------------------------
# read design
#-------------------------------------------------------------------------
# only one scr file exists in this folder
analyze -sv09 \
+define+FPV_ON \
-f [glob *.scr]
if {$env(DUT_TOP) == "prim_count_tb"} {
elaborate -top $env(DUT_TOP) \
-enable_sva_isunknown \
-disable_auto_bbox \
-param OutSelDnCnt $OutSelDnCnt \
-param CntStyle $CntStyle
} else {
elaborate -top $env(DUT_TOP) -enable_sva_isunknown -disable_auto_bbox
}
#-------------------------------------------------------------------------
# specify clock(s) and reset(s)
#-------------------------------------------------------------------------
# select primary clock and reset condition (use ! for active-low reset)
# note: -both_edges is needed below because the TL-UL protocol checker
# tlul_assert.sv operates on the negedge clock
# even clock this sampled at both_edges, input should only change at posedge clock cycle
# TODO: create each DUT_TOP's individual config file
if {$env(DUT_TOP) == "rv_dm"} {
clock clk_i -both_edges
clock jtag_i.tck
clock -rate {testmode, unavailable_i, reg_tl_d_i, sba_tl_h_i} clk_i
clock -rate {jtag_i.tms, jtag_i.tdi} jtag_i.tck
reset -expr {!rst_ni !jtag_i.trst_n}
} elseif {$env(DUT_TOP) == "spi_device"} {
clock clk_i -both_edges
clock cio_sck_i
clock -rate {scanmode_i, tl_i} clk_i
clock -rate {cio_csb_i, cio_sd_i} cio_sck_i
reset -expr {!rst_ni cio_csb_i}
} elseif {$env(DUT_TOP) == "usbuart"} {
clock clk_i -both_edges
clock clk_usb_48mhz_i
clock -rate {tl_i, usb_state_debug_i} clk_i
clock -rate {cio_usb_dp_i, cio_usb_dn_i, cio_usb_sense_i} clk_usb_48mhz_i
reset -expr {!rst_ni !rst_usb_48mhz_ni}
} elseif {$env(DUT_TOP) == "usbdev"} {
clock clk_i -both_edges
clock clk_aon_i
clock clk_usb_48mhz_i
clock -rate {tl_i} clk_i
clock -rate {cio_d_i, cio_dp_i, cio_dn_i, cio_sense_i} clk_usb_48mhz_i
reset -expr {!rst_ni !rst_aon_ni !rst_usb_48mhz_ni}
# TODO: work with the block owner and re-define FPV checkings for xbar
# } elseif {$env(DUT_TOP) == "xbar_main"} {
# clock clk_main_i -both_edges
# reset -expr {!rst_main_ni}
} elseif {$env(DUT_TOP) == "prim_fifo_async_sram_adapter_tb"} {
clock clk_wr_i -factor 2
clock -rate {wvalid_i, wready_o, wdata_i} clk_wr_i
clock clk_rd_i -factor 3
clock -rate {rvalid_o, rready_i, rdata_o} clk_rd_i
reset -expr {!rst_ni}
} elseif {$env(DUT_TOP) == "pinmux_tb"} {
clock clk_i -both_edges
clock clk_aon_i -factor 5
clock -rate -default clk_i
reset -expr {!rst_ni !rst_aon_ni}
} else {
clock clk_i -both_edges
reset -expr {!rst_ni}
clock -rate -default clk_i
}
# Use counter abstractions to reduce the run time.
if {$env(DUT_TOP) == "alert_handler"} {
abstract -counter -env \
{u_ping_timer.u_prim_double_lfsr.gen_double_lfsr[0].u_prim_lfsr.gen_max_len_sva.cnt_q}
abstract -counter -env \
{u_ping_timer.u_prim_double_lfsr.gen_double_lfsr[1].u_prim_lfsr.gen_max_len_sva.cnt_q}
abstract -counter -env {gen_classes[0].u_accu.u_prim_count.gen_cross_cnt_hardening.down_cnt}
abstract -counter -env {gen_classes[1].u_accu.u_prim_count.gen_cross_cnt_hardening.down_cnt}
abstract -counter -env {gen_classes[2].u_accu.u_prim_count.gen_cross_cnt_hardening.down_cnt}
abstract -counter -env {gen_classes[3].u_accu.u_prim_count.gen_cross_cnt_hardening.down_cnt}
} elseif {$env(DUT_TOP) == "hmac"} {
# SHA2: does not check any calculation results, so 64 rounds of calculation can be abstracted.
abstract -counter -env u_sha2.round
# disable these assertions because they are unreachable when the fifo is WO
assert -disable {*hmac.u_tlul_adapter.u_*fifo.*.depthShallNotExceedParamDepth}
assert -disable {*hmac.u_tlul_adapter.u_*fifo.DataKnown_A}
assert -disable {*hmac.u_tlul_adapter.rvalidHighReqFifoEmpty}
assert -disable {*hmac.u_tlul_adapter.rvalidHighWhenRspFifoFull}
} elseif {$env(DUT_TOP) == "flash_ctrl"} {
# disable these assertions because they are unreachable when the fifo is WO
assert -disable {*flash_ctrl.u_to_prog_fifo.u_*fifo.depthShallNotExceedParamDepth}
assert -disable {*flash_ctrl.u_to_prog_fifo.u_*fifo.DataKnown_A}
assert -disable {*flash_ctrl.u_to_prog_fifo.rvalidHighReqFifoEmpty}
assert -disable {*flash_ctrl.u_to_prog_fifo.rvalidHighWhenRspFifoFull}
}
#-------------------------------------------------------------------------
# assume properties for inputs
#-------------------------------------------------------------------------
# Notes on above regular expressions: ^ indicates the beginning of the string;
# \w* includes all letters a-z, A-Z, and the underscore, but not the period.
# And \. is for period (with escape). These regular expressions make sure that
# the assume only applies to module_name.tlul_assert_*, but not to
# module_name.submodule.tlul_assert_*
# For sram2tlul, input tl_i.a_ready is constrained by below asssertion
assume -from_assert -remove_original {sram2tlul.validNotReady*}
# Input scanmode_i should not be X
assume -from_assert -remove_original -regexp {^\w*\.scanmodeKnown}
# TODO: If scanmode is set to 0, then JasperGold errors out complaining
# about combo loops, which should be debugged further. For now, below
# lines work around this issue
if {$env(DUT_TOP) == "top_earlgrey"} {
assume {scanmode_i == 1}
}
# run once to check if assumptions have any conflict
if {[info exists ::env(CHECK)]} {
if {$env(CHECK)} {
check_assumptions -conflict
check_assumptions -live
check_assumptions -dead_end
}
}
# TODO: support the following feature.
# Uncomment "jg_auto_coi_cov_waivers" to automatically waive out COI cover items which cannot
# propagate to "relevant signals" (by default, top instance outputs). If you need to specify
# include/exclude relevant signals manually, run "jg_auto_coi_cov_waivers -help" for more
# options.
# jg_auto_coi_cov_waivers
#-------------------------------------------------------------------------
# configure proofgrid
#-------------------------------------------------------------------------
set_proofgrid_per_engine_max_local_jobs 2
#-------------------------------------------------------------------------
# prove all assertions & report
#-------------------------------------------------------------------------
# time limit set to 2 hours
get_reset_info -x_value -with_reset_pin
prove -all -time_limit 2h
report
#-------------------------------------------------------------------------
# check coverage and report
#-------------------------------------------------------------------------
if {$env(COV) == 1} {
check_cov -measure -time_limit 2h
check_cov -report -force -exclude { reset waived }
check_cov -report -type all -no_return -report_file cover.html \
-html -force -exclude { reset waived }
}