Incident: Software Error in Fiat Chrysler Pickup Trucks Airbag System

Published Date: 2017-05-12

Postmortem Analysis
Timeline 1. The software failure incident involving Fiat Chrysler Automobiles NV pickup trucks happened in 2017 (May 2017) based on the publication date of the articles [59172, 59726].
System 1. Side air bag and deployment seat of belt pretensioners in 2013-2016 Ram 1500 and 2500 pickups, and 2014-2016 Ram 3500 pickups [Article 59172, Article 59726]
Responsible Organization 1. Fiat Chrysler Automobiles NV (FCA) - The software failure incident in the article was linked to a software error in FCA pickup trucks, leading to a recall due to the erroneous code that could disable safety features [59172, 59726].
Impacted Organization 1. Fiat Chrysler Automobiles NV (FCA) [Article 59172, Article 59726]
Software Causes 1. The software error in the affected vehicles could temporarily disable the side airbag and deployment seat of belt pretensioners during a vehicle rollover, caused by a significant underbody impact, due to an erroneous code [59172, 59726].
Non-software Causes 1. Significant underbody impact, such as striking on-road debris or driving off-road, leading to a vehicle rollover [59172, 59726] 2. Failure of the side air bag and deployment seat of belt pretensioners during impacts [59172, 59726]
Impacts 1. One crash death and two injuries were reported as impacts of the software failure incident [Article 59172, Article 59726].
Preventions 1. Implementing thorough software testing procedures to detect and address potential errors before the vehicles are released to the market [Article 59172, Article 59726]. 2. Conducting regular software audits and quality checks to ensure the code is free from critical issues that could lead to safety hazards [Article 59172, Article 59726]. 3. Enhancing communication and collaboration between the software development team and the quality assurance team to ensure all potential risks are identified and mitigated before deployment [Article 59172, Article 59726].
Fixes 1. Reprogramming computer modules in the affected vehicles to address the error [Article 59172, Article 59726] 2. Turning the affected vehicle off and then on if the error code appears during operation [Article 59172, Article 59726]
References 1. Fiat Chrysler Automobiles NV (FCA) spokesperson [Article 59172, Article 59726] 2. U.S. National Highway Traffic Safety Administration (NHTSA) [Article 59172, Article 59726]

Software Taxonomy of Faults

Category Option Rationale
Recurring one_organization, multiple_organization (a) The software failure incident related to disabling the side air bag and deployment seat of belt pretensioners in Fiat Chrysler pickup trucks has happened again within the same organization. Fiat Chrysler Automobiles NV (FCA) recalled more than 1.25 million pickup trucks worldwide to address a software error linked to reports of one crash death and two injuries caused by the erroneous code [Article 59172, Article 59726]. (b) The software failure incident related to a software defect preventing air bags from deploying during a crash has also occurred at another organization. General Motors Co. recalled nearly 4.3 million vehicles worldwide due to a similar software defect that can prevent air bags from deploying during a crash, which was already linked to one death and three injuries [Article 59172, Article 59726].
Phase (Design/Operation) design (a) The software failure incident in the articles is related to the design phase. The recall of more than 1.25 million pickup trucks by Fiat Chrysler Automobiles NV was due to a software error that could disable the side airbag and seat belt pretensioners during a vehicle rollover caused by underbody impact. The company mentioned reprogramming computer modules in the affected vehicles to address this error, indicating that the failure was due to contributing factors introduced during system development or updates [59172, 59726]. (b) The articles do not provide information indicating that the software failure incident was related to the operation phase.
Boundary (Internal/External) within_system, outside_system (a) within_system: The software failure incident related to the recall of more than 1.25 million Fiat Chrysler pickup trucks was due to a software error within the system. The erroneous code in the computer modules could temporarily disable the side airbag and deployment seat of belt pretensioners during a vehicle rollover, leading to safety concerns [Article 59172, Article 59726]. (b) outside_system: The software failure incident was also influenced by factors outside the system, such as significant underbody impacts like striking on-road debris or driving off-road, which could trigger the software error causing the safety features to be disabled [Article 59172, Article 59726].
Nature (Human/Non-human) non-human_actions (a) The software failure incident in the articles was due to non-human_actions. The recall of more than 1.25 million pickup trucks by Fiat Chrysler Automobiles NV was linked to a software error that could temporarily disable the side airbag and deployment seat of belt pretensioners during a vehicle rollover caused by a significant underbody impact. This error was not definitively proven to be involved in accidents but was addressed proactively through reprogramming computer modules in the affected vehicles [59172, 59726]. (b) The articles do not mention any contributing factors introduced by human actions leading to the software failure incident.
Dimension (Hardware/Software) software (a) The software failure incident reported in the articles is related to a software error. Fiat Chrysler Automobiles NV (FCA) announced a recall of more than 1.25 million pickup trucks worldwide to address a software error that could disable the side airbag and seat belt pretensioners during a vehicle rollover caused by a significant underbody impact [59172, 59726]. (b) The software failure incident is specifically attributed to an erroneous code in the software that controls the side airbag and seat belt pretensioners. The company mentioned reprogramming computer modules in the affected vehicles to address this software error [59172, 59726].
Objective (Malicious/Non-malicious) non-malicious (a) The software failure incident related to the recall of more than 1.25 million Fiat Chrysler pickup trucks was non-malicious. The error in the software code was linked to reports of one crash death and two injuries, and it could temporarily disable the side airbag and deployment seat of belt pretensioners during a vehicle rollover caused by a significant underbody impact. Fiat Chrysler stated that there was no definitive proof the error was involved in the accidents, but they were conducting the recall proactively to address the issue [Article 59172, Article 59726].
Intent (Poor/Accidental Decisions) accidental_decisions The software failure incident related to the recall of more than 1.25 million Fiat Chrysler pickup trucks was due to accidental_decisions. The error in the software code that could disable the side airbags and seat belt pretensioners during a rollover crash was not intentionally introduced but was a mistake or unintended consequence of the software programming [59172, 59726].
Capability (Incompetence/Accidental) development_incompetence (a) The software failure incident in the articles seems to be more related to development incompetence rather than accidental factors. The recall of more than 1.25 million pickup trucks by Fiat Chrysler Automobiles NV was due to a software error that could disable critical safety features like side airbags and seat belt pretensioners during a rollover caused by underbody impact. The erroneous code was identified as the root cause, and the company mentioned reprogramming computer modules in the affected vehicles to address this error [59172, 59726]. This indicates that the failure was a result of a mistake or lack of professional competence during the software development process.
Duration temporary The software failure incident mentioned in the articles is categorized as a temporary failure. The erroneous code in the software could temporarily disable the side airbag and deployment seat of belt pretensioners during a specific circumstance, such as a vehicle rollover spurred by a significant underbody impact. The problem could be temporarily addressed by turning the vehicle off and then on if the error code appears during operation [59172, 59726].
Behaviour crash, omission, value, other (a) crash: The software failure incident in the articles can be categorized as a crash. The erroneous code in the software could temporarily disable the side airbag and deployment seat of belt pretensioners during a vehicle rollover, leading to a crash death and injuries [59172, 59726]. (b) omission: The software failure incident can also be categorized as an omission. The software omitted to perform its intended functions of deploying the airbag and seat belt pretensioners during impacts, which resulted in the failure to protect the occupants during a rollover crash [59172, 59726]. (c) timing: The software failure incident does not align with the timing category as the issue was not related to the system performing its intended functions too late or too early [59172, 59726]. (d) value: The software failure incident can be categorized under the value type of failure. The system performed its intended functions incorrectly by temporarily disabling critical safety features like the side airbag and seat belt pretensioners during a rollover crash, leading to fatalities and injuries [59172, 59726]. (e) byzantine: The software failure incident does not align with the byzantine category as there were no mentions of inconsistent responses or interactions by the system in the articles [59172, 59726]. (f) other: The other behavior of the software failure incident is that it required a specific sequence of events to cause an incident, and the likelihood of an incident was considered very low. The error in the software could be temporarily addressed by turning the vehicle off and then on, indicating a temporary workaround for the issue [59172, 59726].

IoT System Layer

Layer Option Rationale
Perception None None
Communication None None
Application None None

Other Details

Category Option Rationale
Consequence death, harm, property (a) death: The software failure incident led to one crash death and two injuries [Article 59172, Article 59726].
Domain manufacturing (a) The failed system was related to the manufacturing industry as it involved Fiat Chrysler Automobiles NV recalling more than 1.25 million pickup trucks worldwide to address a software error [Article 59172, Article 59726]. (f) The software failure incident was specifically related to the manufacturing of vehicles, as Fiat Chrysler Automobiles NV had to recall pickup trucks due to a software error that could disable safety features during a rollover incident [Article 59172, Article 59726].

Sources

Back to List