22.3.4 Timeout Timer

The timeout timer automatically transitions the system state from ALARM to FAULT when it counts down to zero. It also triggers a Machine Check Reset if the ERRCTRL stays in CONFIG state longer than specified in the Timeout Value (ERRCTRL.TIMEOUT) register. The ERRCTRL.TIMEOUT register is write-protected and can only be written in the CONFIG state.

The timeout value is TIMEOUT*4 clock cycles for a maximum of 1020 such cycles.

A value of zero disables the timeout mechanism. A NONCRITICAL error will directly cause an entry to the FAULT state in this setting. The ALARM state is unused in this case.

Writing to ERRCTRL.TIMEOUT will not reset the timeout counter. A value written to ERRCTRL.TIMEOUT will be reloaded into the timeout counter when the ERRCTRL enters the NORMAL state, preventing the possibility that repetitive writes to ERRCTRL.TIMEOUT due to a software or hardware error cause a timeout to never happen.

Reading the Timeout Counter (ERRCTRL.TIMECNT) register returns the current value of the counter.