Verification of computer programs

[0001] The invention is generally related to updating computer programs. More particularly, the invention is related to verifying versions of computer programs.

[0002] The use of embedded processors is becoming a common practice in a wide range of systems. A complex server may include upwards of 70 or more processors performing different functions. For example, some processors may perform functions related to system manageability and some may be system processors running user applications. Among these processors, there may be numerous types of processors (ARM, PA-RISC, 8086, IA-32, IA64). Each type of processor will require its own firmware, because each type is essentially a different architecture. Also, some processors of the same type may be performing different functions. For example, one 8086 embedded processor monitors fans while another monitors power. These two processors would be running different firmware because they have different tasks.

[0003] The firmware that runs on each of the processors sometimes needs to be updated, for example, to incorporate enhancements or fix bugs. For processors that have access to a remote computer, such as a server accessed through a network connection, updates are typically downloaded to the processors. Updates may be downloaded to a targeted processor in a multiprocessor system needing the firmware update.

[0004] When multiple processors in a system are running different versions of firmware, compatibility issues between the different versions may arise. For example, firmware running on one processor may be dependent on functions performed by firmware running on another processor in the system. Therefore, the versions of firmware running on each of the processors must be monitored to insure that the versions are compatible and that debugged versions of the firmware are currently running.

[0005] When dependencies exist between firmware running on different processors, a recipe (e.g., a set of versions of firmware that are compatible with each other) is required to determine what version each processor should be running for the system to function properly. For systems having a large number of processors, the process of checking the versions of firmware running on the processors against the recipe is tedious and is prone to error.

[0006] Conventionally, the process of checking the versions of firmware running on the processors against the recipe is performed manually, for example, by a system administrator running version checking and update utilities. This technique requires the administrator to know how to access the image server (i.e., the server containing the updates downloaded to the processors), what are the current versions of the firmware running on the processors, and what versions should be currently running (e.g., based on a current recipe). It is often very difficult for the administrator to keep up with what the latest recipe is and mistakes are often made for updates provoked by the system administrator. The likelihood of error increases for large and complex systems. Also, when a recipe is changing on a daily/weekly basis, such as during product development, the time required to maintain the system and perform software updates may be excessive.

[0007] According to an embodiment, the invention includes a method for checking at least one version of software running on a multi-programmable device system. The method comprises steps of identifying a version of software running on a programmable device in the multi-programmable device system; comparing the version to a version of the software in a recipe, wherein the version in the recipe is previously determined to be a correct version of the software; and determining whether the version of the running software matches the correct version.

[0008] The present invention is illustrated by way of example and not limitation in the accompanying figures in which like numeral references refer to like elements, and wherein:

[0009] FIG. 1 illustrates a block diagram of a system, according to an embodiment of the invention;

[0010] FIG. 2 illustrates a recipe table, according to an embodiment of the invention; and

[0011] FIG. 3 illustrates a flow chart, according to an embodiment of the invention.

[0012] In the following detailed description, numerous specific details are set forth in order to provide a thorough understanding of the present invention. However, it will be apparent to one of ordinary skill in the art that these specific details need not be used to practice the present invention. In other instances, well known structures, interfaces, and processes have not been shown in detail in order not to unnecessarily obscure the present invention.

[0013] FIG. 1 illustrates an exemplary system 100 employing principles of the invention. A computing device 110 includes multiple processors 112 and 114. The processors 112 and 114 run versions of firmware 116 and 118 respectively stored, for example, in memories 120 and 122. The computing device 110 also includes a service processor 124 running service firmware 126 stored in a memory 128. The service processor 124 determines which firmware versions the processors 112 and 114 are running. For example, the service firmware 126 running on the service processor 124 may query the processors 112 and 114 to determine which firmware versions each processor is running and/or keep track of the versions as updates are downloaded to the processors 112 and 114. It will be apparent to one of ordinary skill in the art that the computing device may include one or more of any type of programmable devices that may be updated, including but not limited to processors, field programmable arrays (FPGAs), programmable logic devices, and the like. For example, the service processor 124 may be connected to an FPGA 113 that can receive configuration instructions from a device connected to the network 102 or 104 (e.g., the image server 130) via the service processor 124. Furthermore, the computing device 110 may include a variety of devices having a programmable device, such as, but not limited to, servers, personal computers, PDAs, etc. In addition, although only three programmable devices are shown as connected to the service processor 124, the system 100 may include more than three programmable devices connected to one or more service processors.

[0014] The computing device 110 may be connected to an image server 130 via a network 102. The image server 130 may store updates 132 for firmware running on the computing device 110. The updates 132 may be transmitted to the image server 110 for storage and downloading, for example, by programmers and other authorized personnel. The updates 132 may include new versions of firmware for the processors 112 and 114. Each new version is different from a previous version and may include, for example, debugged firmware and/or firmware having new features for performing new functions. The new versions of firmware may also include configuration instructions for the FPGA 113 from the image server 130.

[0015] The computing device 110 may also be connected to a network administrator console (NAC) 140 via a network 104. The NAC 140 may run a version check software utility 142 and store recipes in a recipe table 144. A recipe in the recipe table 144 may include a list of all the versions of firmware that are compatible with each other. More than one recipe may be stored in the recipe table 144, and recipes may continually be added as new versions of firmware become available. Instead of a table, the recipes may be stored in a database or in another format.

[0016] The version check utility 142 identifies which firmware versions are running on the processors 112 and 114 in the computing device 110. For example, the version check utility 142 may transmit a request to the service processor 124 for the current firmware versions running on the processors 112 and 114. The service firmware 126 determines the current firmware versions running on the processors 112 and 114 and transmits a response to the NAC 140 including the current versions.

[0017] The version check utility 142 may check the current versions against the latest recipe in the recipe table 144. If the current versions do not match the latest recipe, then the version check utility 142 can prompt the image server 130 to download an update to a processor in the computing device 110. For example, the version check utility may transmit a request to the image server 130 requesting that the updated version from the updates 132 be transmitted to a target processor (e.g., the processor 112). The image server 130 then downloads the update to the service processor 124, and the service processor 124 updates the processor 112 with the downloaded version. The downloaded version is stored in the memory 120 as the current firmware 116.

[0018] It will be apparent to one of ordinary skill in the art that the invention is not limited to checking current versions of firmware, and the invention may check versions of any type of software, including firmware. Furthermore, version check utility may check versions of configuration instructions for programmable devices, such as the FPGA 113.

[0019] FIG. 2 illustrates an exemplary recipe table 144. The recipe table 144 includes a column 210 for the recipe name/version and columns 220 for the versions of firmware (F1 . . . Fn) that are dependent on each other and used together in the computing device 110. The table 144, for example, includes a row 230 for the recipe 10. The row 230 includes the versions V8, V6 and V4 for the firmware F1, F2 and Fn respectively. The row 240 for the recipe 1 may include the first versions for the firmware F1, F2 and Fn. Recipes may be published by the image server 130 after testing the versions of firmware for compatibility. The published recipe may then be downloaded by the NAC 140 or other devices that coordinate downloads of the updates 132.

[0020] FIG. 3 illustrates a flow chart for an exemplary method 300 according to an embodiment of the invention. In step 310, the NAC 140 logs into the computing device 110. For example, the version check utility 142 logs into the service processor 124 in the computing device 110. FTP or other well known protocols may be used for facilitating communication between the NAC 140 and computing devices running firmware, such as the computing device 140, via the network 104 or other communication channel.

[0021] In step 320, the version check utility 142 identifies the current versions of the firmware running on the computing device 110. For example, the version check utility 142 transmits a request to the service processor 124 for the versions of firmware running on the processors 112 and 114. The service processor 124 identifies the versions in response to receiving the request, and transmits the identification of the versions to the NAC 140. To identify the versions, for example, the service processor 124 may query the processors 112 and 114 or may store the version information as the updates 132 are downloaded from the image server 130. The service processor 124 may store the version information in the memory 128 for future requests from the NAC 140.

[0022] In step 330, the versions of firmware are compared to a recipe. For example, the version check utility 142 compares to the versions identified in step 320 with a recipe stored in the recipe table 144. The recipe may be the most recent recipe in the recipe table 144 or another recipe in the recipe table 144. There may be many reasons for using a recipe other than the most recent recipe. For example, if the most recent recipe requires upgraded hardware, an older recipe that has been better tested with the older hardware may be used. Alternatively, it may be beneficial to stay one recipe behind the most recent, because the system administrator does not want to risk adopting the latest greatest recipe until it's been tried out by other customers for awhile.

[0023] In step 340, a determination is made as to whether any mismatches exist between the firmware and the recipe that the firmware is being compared to. For example, the version check utility 142 determines whether the versions of firmware running on the processors 112 and 114 are the same as the versions disclosed in the recipe.

[0024] If no mismatches are present, as determined in step 340, then no incompatibilities should exist between the firmware running on the computing device 110. Then, a determination is made as to whether a new version is available (step 342). For example, the version check utility 142 may keep track of latest versions that are still compatible with the firmware currently running, or the service processor 124 may request update information identifying latest versions of firmware.

[0025] In step 344, an update request is generated to retrieve the latest version of the firmware from, for example, the image server 130, if a new version is available. Then, the NAC 140 may proceed to log onto other computing devices (step 345), which may be connected to the network 104, to determine whether any mismatches exist between the versions of firmware running on those computing devices and the versions in a recipe. Logging onto other computing devices may be optional and may be controlled by a user. Also, in step 342, if no new version is available, then step 345 is performed.

[0026] If mismatches are present, as determined in step 340, then the NAC 140 may generate an alert (step 350) and prompt a download of the correct version of firmware from the image server 130 to the computing device 110 (step 360). The alert may be generated at the NAC 140 or at a remote location, including the computing device 110. The alert indicates that a mismatch is present. The alert may be periodically generated until notification has been provided that the mismatch has been addressed.

[0027] The NAC 140 may prompt a download of the correct versions. In one embodiment, the NAC 140 may transmit a message to the computing device 110 indicating that an incorrect version of firmware is running on the computing device 110. The message may identify which firmware is the incorrect version and may also identify which version needs to be downloaded. The service processor 124 may then download an update 132 from the image server 130 including the correct version of firmware and install the downloaded firmware for execution by a processor in the computing device 110.

[0028] In another embodiment, the NAC 140 may transmit a message to the image server 130 requesting the image server 130 to download an update to the computing device having the mismatch. For example, the NAC 140 identifies a mismatch between the firmware 116 and the recipe. The NAC 140 transmits a message to the image server 130 requesting that the correct version (such as identified from the recipe) be downloaded to the computing device 110. Then, the image server downloads an update 132 including the correct version of firmware to the service processor 124. The service processor 124 installs the downloaded firmware, which may include storing the downloaded firmware in the memory 120, and the firmware is run by the processor 112. When the NAC 140 transmits the message to the image server 130 requesting the download to the computing device 110, the NAC 140 may also transmit a message to the service processor 124 indicating that the request has been made to the image server 130. Therefore, the service processor 124 may re-request the download if the image server 130 fails to respond to the initial request within a predetermined period of time.

[0029] The method 300 is generally described with respect to firmware for processors. The method 300 is also applicable for versions of configuring instructions for configuring programmable devices, such as the FPGA 113 (shown in FIG. 2). The method 300 may be used to identify current versions of configuring instructions, compare versions to a recipe, detect mismatches and determine whether new versions are available, similarly to steps performed for versions of firmware. Configuration instruction versions and firmware versions may be stored simultaneously in a recipe.

[0030] The method 300 includes steps that can be performed by a computer program. For example, the steps that may be performed by the version check utility 142 can be embodied in a computer program. The computer program can exist in a variety of forms both active and inactive. For example, the computer program and objects can exist as firmware comprised of program instructions or statements in source code, object code, executable code or other formats; firmware program(s); or hardware description language (HDL) files. Any of the above can be embodied on a computer readable medium, which include storage devices and signals, in compressed or uncompressed form. Exemplary computer readable storage devices include conventional computer system RAM (random access memory), ROM (read only memory), EPROM (erasable, programmable ROM), EEPROM (electrically erasable, programmable ROM), and magnetic or optical disks or tapes. Exemplary computer readable signals, whether modulated using a carrier or not, are signals that a computer system hosting or running the computer program can be configured to access, including signals downloaded through the Internet or other networks. Concrete examples of the foregoing include distribution of executable firmware program(s) of the computer program on a CD ROM or via Internet download. In a sense, the Internet itself, as an abstract entity, is a computer readable medium. The same is true of computer networks in general.

[0031] While this invention has been described in conjunction with the specific embodiments thereof, it is evident that many alternatives, modifications and variations will be apparent to those skilled in the art. There are changes that may be made without departing from the spirit and scope of the invention.