mirror of https://github.com/ArduPilot/ardupilot
388 lines
16 KiB
C++
388 lines
16 KiB
C++
#include "Copter.h"
|
|
|
|
/*
|
|
* This event will be called when the failsafe changes
|
|
* boolean failsafe reflects the current state
|
|
*/
|
|
|
|
bool Copter::failsafe_option(FailsafeOption opt) const
|
|
{
|
|
return (g2.fs_options & (uint32_t)opt);
|
|
}
|
|
|
|
void Copter::failsafe_radio_on_event()
|
|
{
|
|
AP::logger().Write_Error(LogErrorSubsystem::FAILSAFE_RADIO, LogErrorCode::FAILSAFE_OCCURRED);
|
|
|
|
// set desired action based on FS_THR_ENABLE parameter
|
|
Failsafe_Action desired_action;
|
|
switch (g.failsafe_throttle) {
|
|
case FS_THR_DISABLED:
|
|
desired_action = Failsafe_Action_None;
|
|
break;
|
|
case FS_THR_ENABLED_ALWAYS_RTL:
|
|
case FS_THR_ENABLED_CONTINUE_MISSION:
|
|
desired_action = Failsafe_Action_RTL;
|
|
break;
|
|
case FS_THR_ENABLED_ALWAYS_SMARTRTL_OR_RTL:
|
|
desired_action = Failsafe_Action_SmartRTL;
|
|
break;
|
|
case FS_THR_ENABLED_ALWAYS_SMARTRTL_OR_LAND:
|
|
desired_action = Failsafe_Action_SmartRTL_Land;
|
|
break;
|
|
case FS_THR_ENABLED_ALWAYS_LAND:
|
|
desired_action = Failsafe_Action_Land;
|
|
break;
|
|
default:
|
|
desired_action = Failsafe_Action_Land;
|
|
}
|
|
|
|
// Conditions to deviate from FS_THR_ENABLE selection and send specific GCS warning
|
|
if (should_disarm_on_failsafe()) {
|
|
// should immediately disarm when we're on the ground
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "Radio Failsafe - Disarming");
|
|
arming.disarm();
|
|
desired_action = Failsafe_Action_None;
|
|
|
|
} else if (flightmode->is_landing() && ((battery.has_failsafed() && battery.get_highest_failsafe_priority() <= FAILSAFE_LAND_PRIORITY))) {
|
|
// Allow landing to continue when battery failsafe requires it (not a user option)
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "Radio + Battery Failsafe - Continuing Landing");
|
|
desired_action = Failsafe_Action_Land;
|
|
|
|
} else if (flightmode->is_landing() && failsafe_option(FailsafeOption::CONTINUE_IF_LANDING)) {
|
|
// Allow landing to continue when FS_OPTIONS is set to continue landing
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "Radio Failsafe - Continuing Landing");
|
|
desired_action = Failsafe_Action_Land;
|
|
|
|
} else if (control_mode == Mode::Number::AUTO && failsafe_option(FailsafeOption::RC_CONTINUE_IF_AUTO)) {
|
|
// Allow mission to continue when FS_OPTIONS is set to continue mission
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "Radio Failsafe - Continuing Auto Mode");
|
|
desired_action = Failsafe_Action_None;
|
|
|
|
} else if ((flightmode->in_guided_mode()) &&
|
|
(failsafe_option(FailsafeOption::RC_CONTINUE_IF_GUIDED)) && (g.failsafe_gcs != FS_GCS_DISABLED)) {
|
|
// Allow guided mode to continue when FS_OPTIONS is set to continue in guided mode. Only if the GCS failsafe is enabled.
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "Radio Failsafe - Continuing Guided Mode");
|
|
desired_action = Failsafe_Action_None;
|
|
|
|
} else {
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "Radio Failsafe");
|
|
}
|
|
|
|
// Call the failsafe action handler
|
|
do_failsafe_action(desired_action, ModeReason::RADIO_FAILSAFE);
|
|
}
|
|
|
|
// failsafe_off_event - respond to radio contact being regained
|
|
void Copter::failsafe_radio_off_event()
|
|
{
|
|
// no need to do anything except log the error as resolved
|
|
// user can now override roll, pitch, yaw and throttle and even use flight mode switch to restore previous flight mode
|
|
AP::logger().Write_Error(LogErrorSubsystem::FAILSAFE_RADIO, LogErrorCode::FAILSAFE_RESOLVED);
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "Radio Failsafe Cleared");
|
|
}
|
|
|
|
void Copter::handle_battery_failsafe(const char *type_str, const int8_t action)
|
|
{
|
|
AP::logger().Write_Error(LogErrorSubsystem::FAILSAFE_BATT, LogErrorCode::FAILSAFE_OCCURRED);
|
|
|
|
Failsafe_Action desired_action = (Failsafe_Action)action;
|
|
|
|
// Conditions to deviate from BATT_FS_XXX_ACT parameter setting
|
|
if (should_disarm_on_failsafe()) {
|
|
// should immediately disarm when we're on the ground
|
|
arming.disarm();
|
|
desired_action = Failsafe_Action_None;
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "Battery Failsafe - Disarming");
|
|
|
|
} else if (flightmode->is_landing() && failsafe_option(FailsafeOption::CONTINUE_IF_LANDING) && desired_action != Failsafe_Action_None) {
|
|
// Allow landing to continue when FS_OPTIONS is set to continue when landing
|
|
desired_action = Failsafe_Action_Land;
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "Battery Failsafe - Continuing Landing");
|
|
} else {
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "Battery Failsafe");
|
|
}
|
|
|
|
// Battery FS options already use the Failsafe_Options enum. So use them directly.
|
|
do_failsafe_action(desired_action, ModeReason::BATTERY_FAILSAFE);
|
|
|
|
}
|
|
|
|
// failsafe_gcs_check - check for ground station failsafe
|
|
void Copter::failsafe_gcs_check()
|
|
{
|
|
// Bypass GCS failsafe checks if disabled or GCS never connected
|
|
if (g.failsafe_gcs == FS_GCS_DISABLED || failsafe.last_heartbeat_ms == 0) {
|
|
return;
|
|
}
|
|
|
|
// calc time since last gcs update
|
|
// note: this only looks at the heartbeat from the device id set by g.sysid_my_gcs
|
|
const uint32_t last_gcs_update_ms = millis() - failsafe.last_heartbeat_ms;
|
|
|
|
// Determine which event to trigger
|
|
if (last_gcs_update_ms < FS_GCS_TIMEOUT_MS && failsafe.gcs) {
|
|
// Recovery from a GCS failsafe
|
|
set_failsafe_gcs(false);
|
|
failsafe_gcs_off_event();
|
|
|
|
} else if (last_gcs_update_ms < FS_GCS_TIMEOUT_MS && !failsafe.gcs) {
|
|
// No problem, do nothing
|
|
|
|
} else if (last_gcs_update_ms > FS_GCS_TIMEOUT_MS && failsafe.gcs) {
|
|
// Already in failsafe, do nothing
|
|
|
|
} else if (last_gcs_update_ms > FS_GCS_TIMEOUT_MS && !failsafe.gcs) {
|
|
// New GCS failsafe event, trigger events
|
|
set_failsafe_gcs(true);
|
|
failsafe_gcs_on_event();
|
|
}
|
|
}
|
|
|
|
// failsafe_gcs_on_event - actions to take when GCS contact is lost
|
|
void Copter::failsafe_gcs_on_event(void)
|
|
{
|
|
AP::logger().Write_Error(LogErrorSubsystem::FAILSAFE_GCS, LogErrorCode::FAILSAFE_OCCURRED);
|
|
RC_Channels::clear_overrides();
|
|
|
|
// convert the desired failsafe response to the Failsafe_Action enum
|
|
Failsafe_Action desired_action;
|
|
switch (g.failsafe_gcs) {
|
|
case FS_GCS_DISABLED:
|
|
desired_action = Failsafe_Action_None;
|
|
break;
|
|
case FS_GCS_ENABLED_ALWAYS_RTL:
|
|
case FS_GCS_ENABLED_CONTINUE_MISSION:
|
|
desired_action = Failsafe_Action_RTL;
|
|
break;
|
|
case FS_GCS_ENABLED_ALWAYS_SMARTRTL_OR_RTL:
|
|
desired_action = Failsafe_Action_SmartRTL;
|
|
break;
|
|
case FS_GCS_ENABLED_ALWAYS_SMARTRTL_OR_LAND:
|
|
desired_action = Failsafe_Action_SmartRTL_Land;
|
|
break;
|
|
case FS_GCS_ENABLED_ALWAYS_LAND:
|
|
desired_action = Failsafe_Action_Land;
|
|
break;
|
|
default: // if an invalid parameter value is set, the fallback is RTL
|
|
desired_action = Failsafe_Action_RTL;
|
|
}
|
|
|
|
// Conditions to deviate from FS_GCS_ENABLE parameter setting
|
|
if (!motors->armed()) {
|
|
desired_action = Failsafe_Action_None;
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "GCS Failsafe");
|
|
|
|
} else if (should_disarm_on_failsafe()) {
|
|
// should immediately disarm when we're on the ground
|
|
arming.disarm();
|
|
desired_action = Failsafe_Action_None;
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "GCS Failsafe - Disarming");
|
|
|
|
} else if (flightmode->is_landing() && ((battery.has_failsafed() && battery.get_highest_failsafe_priority() <= FAILSAFE_LAND_PRIORITY))) {
|
|
// Allow landing to continue when battery failsafe requires it (not a user option)
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "GCS + Battery Failsafe - Continuing Landing");
|
|
desired_action = Failsafe_Action_Land;
|
|
|
|
} else if (flightmode->is_landing() && failsafe_option(FailsafeOption::CONTINUE_IF_LANDING)) {
|
|
// Allow landing to continue when FS_OPTIONS is set to continue landing
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "GCS Failsafe - Continuing Landing");
|
|
desired_action = Failsafe_Action_Land;
|
|
|
|
} else if (control_mode == Mode::Number::AUTO && failsafe_option(FailsafeOption::GCS_CONTINUE_IF_AUTO)) {
|
|
// Allow mission to continue when FS_OPTIONS is set to continue mission
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "GCS Failsafe - Continuing Auto Mode");
|
|
desired_action = Failsafe_Action_None;
|
|
|
|
} else if (failsafe_option(FailsafeOption::GCS_CONTINUE_IF_PILOT_CONTROL) && !flightmode->is_autopilot()) {
|
|
// should continue when in a pilot controlled mode because FS_OPTIONS is set to continue in pilot controlled modes
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "GCS Failsafe - Continuing Pilot Control");
|
|
desired_action = Failsafe_Action_None;
|
|
} else {
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "GCS Failsafe");
|
|
}
|
|
|
|
// Call the failsafe action handler
|
|
do_failsafe_action(desired_action, ModeReason::GCS_FAILSAFE);
|
|
}
|
|
|
|
// failsafe_gcs_off_event - actions to take when GCS contact is restored
|
|
void Copter::failsafe_gcs_off_event(void)
|
|
{
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "GCS Failsafe Cleared");
|
|
AP::logger().Write_Error(LogErrorSubsystem::FAILSAFE_GCS, LogErrorCode::FAILSAFE_RESOLVED);
|
|
}
|
|
|
|
// executes terrain failsafe if data is missing for longer than a few seconds
|
|
// missing_data should be set to true if the vehicle failed to navigate because of missing data, false if navigation is proceeding successfully
|
|
void Copter::failsafe_terrain_check()
|
|
{
|
|
// trigger with 5 seconds of failures while in AUTO mode
|
|
bool valid_mode = (control_mode == Mode::Number::AUTO ||
|
|
control_mode == Mode::Number::GUIDED ||
|
|
control_mode == Mode::Number::GUIDED_NOGPS ||
|
|
control_mode == Mode::Number::RTL);
|
|
bool timeout = (failsafe.terrain_last_failure_ms - failsafe.terrain_first_failure_ms) > FS_TERRAIN_TIMEOUT_MS;
|
|
bool trigger_event = valid_mode && timeout;
|
|
|
|
// check for clearing of event
|
|
if (trigger_event != failsafe.terrain) {
|
|
if (trigger_event) {
|
|
failsafe_terrain_on_event();
|
|
} else {
|
|
AP::logger().Write_Error(LogErrorSubsystem::FAILSAFE_TERRAIN, LogErrorCode::ERROR_RESOLVED);
|
|
failsafe.terrain = false;
|
|
}
|
|
}
|
|
}
|
|
|
|
// set terrain data status (found or not found)
|
|
void Copter::failsafe_terrain_set_status(bool data_ok)
|
|
{
|
|
uint32_t now = millis();
|
|
|
|
// record time of first and latest failures (i.e. duration of failures)
|
|
if (!data_ok) {
|
|
failsafe.terrain_last_failure_ms = now;
|
|
if (failsafe.terrain_first_failure_ms == 0) {
|
|
failsafe.terrain_first_failure_ms = now;
|
|
}
|
|
} else {
|
|
// failures cleared after 0.1 seconds of persistent successes
|
|
if (now - failsafe.terrain_last_failure_ms > 100) {
|
|
failsafe.terrain_last_failure_ms = 0;
|
|
failsafe.terrain_first_failure_ms = 0;
|
|
}
|
|
}
|
|
}
|
|
|
|
// terrain failsafe action
|
|
void Copter::failsafe_terrain_on_event()
|
|
{
|
|
failsafe.terrain = true;
|
|
gcs().send_text(MAV_SEVERITY_CRITICAL,"Failsafe: Terrain data missing");
|
|
AP::logger().Write_Error(LogErrorSubsystem::FAILSAFE_TERRAIN, LogErrorCode::FAILSAFE_OCCURRED);
|
|
|
|
if (should_disarm_on_failsafe()) {
|
|
arming.disarm();
|
|
#if MODE_RTL_ENABLED == ENABLED
|
|
} else if (control_mode == Mode::Number::RTL) {
|
|
mode_rtl.restart_without_terrain();
|
|
#endif
|
|
} else {
|
|
set_mode_RTL_or_land_with_pause(ModeReason::TERRAIN_FAILSAFE);
|
|
}
|
|
}
|
|
|
|
// check for gps glitch failsafe
|
|
void Copter::gpsglitch_check()
|
|
{
|
|
// get filter status
|
|
nav_filter_status filt_status = inertial_nav.get_filter_status();
|
|
bool gps_glitching = filt_status.flags.gps_glitching;
|
|
|
|
// log start or stop of gps glitch. AP_Notify update is handled from within AP_AHRS
|
|
if (ap.gps_glitching != gps_glitching) {
|
|
ap.gps_glitching = gps_glitching;
|
|
if (gps_glitching) {
|
|
AP::logger().Write_Error(LogErrorSubsystem::GPS, LogErrorCode::GPS_GLITCH);
|
|
gcs().send_text(MAV_SEVERITY_CRITICAL,"GPS Glitch");
|
|
} else {
|
|
AP::logger().Write_Error(LogErrorSubsystem::GPS, LogErrorCode::ERROR_RESOLVED);
|
|
gcs().send_text(MAV_SEVERITY_CRITICAL,"GPS Glitch cleared");
|
|
}
|
|
}
|
|
}
|
|
|
|
// set_mode_RTL_or_land_with_pause - sets mode to RTL if possible or LAND with 4 second delay before descent starts
|
|
// this is always called from a failsafe so we trigger notification to pilot
|
|
void Copter::set_mode_RTL_or_land_with_pause(ModeReason reason)
|
|
{
|
|
// attempt to switch to RTL, if this fails then switch to Land
|
|
if (!set_mode(Mode::Number::RTL, reason)) {
|
|
// set mode to land will trigger mode change notification to pilot
|
|
set_mode_land_with_pause(reason);
|
|
} else {
|
|
// alert pilot to mode change
|
|
AP_Notify::events.failsafe_mode_change = 1;
|
|
}
|
|
}
|
|
|
|
// set_mode_SmartRTL_or_land_with_pause - sets mode to SMART_RTL if possible or LAND with 4 second delay before descent starts
|
|
// this is always called from a failsafe so we trigger notification to pilot
|
|
void Copter::set_mode_SmartRTL_or_land_with_pause(ModeReason reason)
|
|
{
|
|
// attempt to switch to SMART_RTL, if this failed then switch to Land
|
|
if (!set_mode(Mode::Number::SMART_RTL, reason)) {
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "SmartRTL Unavailable, Using Land Mode");
|
|
set_mode_land_with_pause(reason);
|
|
} else {
|
|
AP_Notify::events.failsafe_mode_change = 1;
|
|
}
|
|
}
|
|
|
|
// set_mode_SmartRTL_or_RTL - sets mode to SMART_RTL if possible or RTL if possible or LAND with 4 second delay before descent starts
|
|
// this is always called from a failsafe so we trigger notification to pilot
|
|
void Copter::set_mode_SmartRTL_or_RTL(ModeReason reason)
|
|
{
|
|
// attempt to switch to SmartRTL, if this failed then attempt to RTL
|
|
// if that fails, then land
|
|
if (!set_mode(Mode::Number::SMART_RTL, reason)) {
|
|
gcs().send_text(MAV_SEVERITY_WARNING, "SmartRTL Unavailable, Trying RTL Mode");
|
|
set_mode_RTL_or_land_with_pause(reason);
|
|
} else {
|
|
AP_Notify::events.failsafe_mode_change = 1;
|
|
}
|
|
}
|
|
|
|
bool Copter::should_disarm_on_failsafe() {
|
|
if (ap.in_arming_delay) {
|
|
return true;
|
|
}
|
|
|
|
switch (control_mode) {
|
|
case Mode::Number::STABILIZE:
|
|
case Mode::Number::ACRO:
|
|
// if throttle is zero OR vehicle is landed disarm motors
|
|
return ap.throttle_zero || ap.land_complete;
|
|
case Mode::Number::AUTO:
|
|
// if mission has not started AND vehicle is landed, disarm motors
|
|
return !ap.auto_armed && ap.land_complete;
|
|
default:
|
|
// used for AltHold, Guided, Loiter, RTL, Circle, Drift, Sport, Flip, Autotune, PosHold
|
|
// if landed disarm
|
|
return ap.land_complete;
|
|
}
|
|
}
|
|
|
|
|
|
void Copter::do_failsafe_action(Failsafe_Action action, ModeReason reason){
|
|
|
|
// Execute the specified desired_action
|
|
switch (action) {
|
|
case Failsafe_Action_None:
|
|
return;
|
|
case Failsafe_Action_Land:
|
|
set_mode_land_with_pause(reason);
|
|
break;
|
|
case Failsafe_Action_RTL:
|
|
set_mode_RTL_or_land_with_pause(reason);
|
|
break;
|
|
case Failsafe_Action_SmartRTL:
|
|
set_mode_SmartRTL_or_RTL(reason);
|
|
break;
|
|
case Failsafe_Action_SmartRTL_Land:
|
|
set_mode_SmartRTL_or_land_with_pause(reason);
|
|
break;
|
|
case Failsafe_Action_Terminate: {
|
|
#if ADVANCED_FAILSAFE == ENABLED
|
|
g2.afs.gcs_terminate(true, "Failsafe");
|
|
#else
|
|
arming.disarm();
|
|
#endif
|
|
}
|
|
break;
|
|
}
|
|
}
|
|
|