IMPORTANT SAFETY NOTICES  

Letter from Jonathan Mayne from CAA to the MFNZ regarding Arducopter Version 3.6.11



Please be aware that there has been a recent accident due to loss of the flight controller which is believed to have been caused by ArduPilot causing the main processor to crash due to a situation referred to as i2c storm, where the i2c (an integrated circuit to integrated circuit communications bus) experiences external noise, and lots of interrupt messages. These interrupt messages flood the processor, and result in the processor rebooting.

Noise on any peripheral or bus should not cause the flight controller to reboot.

Arducopter 3.6.11 was released and introduced a bug fix to solve the issue of these interrupts from causing a processor crash, by introducing an interrupt limit. It was not released as a critical safety update.

Further testing in the community has shown that the issue still exists in 3.6.11, and in Release Candidate (RC) 4.0

This issue appears to exist in any STM32 based flight controller running ArduPilot/Plane/Copter and using the i2c bus. i2c is commonly used for magnetometers, range finders, and a range of external sensors.

IMMEDIATE ACTIONS

  • It is recommended to cease all operations of aircraft running ArduPilot and i2c peripherals, until code is produced, tested, and proven to solve the issue.
  • Discussions around solutions to the issue is ongoing.
  • Discussions around reviewing and promulgating critical software/firmware updates are ongoing

Until this situation is resolved please avoid flying over people or congested areas.


Jon Mayne

Manager Special Flight Operation & Recreational Aviation

General Aviation

DDI +64 4 560 9639

Mob +64 27 5995837

Fax +64 4 560 9452

More information here.
Back to top