Incident: Fuel Range Display Software Bug in 2018 Subaru Vehicles

Published Date: 2018-11-08

Postmortem Analysis
Timeline 1. The software failure incident happened between Feb. 1, 2017, and Aug. 17, 2018, as mentioned in Article 78062.
System 1. Fuel system software in 2018 Subaru Legacy sedan and Subaru Outback crossover [78062].
Responsible Organization 1. Subaru - The software failure incident in this case was caused by a programming error in the software governing the fuel system of Subaru vehicles, leading to the incorrect display of the distance-to-empty range and potential engine stalling [78062].
Impacted Organization 1. Drivers of 2018 Subaru Legacy sedans and Subaru Outback crossovers were impacted by the software failure incident [78062].
Software Causes 1. The software governing the fuel system had a programming error that caused the vehicle's computer to display a positive distance-to-empty range when there was no usable fuel remaining in the tank [78062].
Non-software Causes 1. The software governing the fuel system had a programming error that caused the vehicle's computer to display a positive distance-to-empty range when there was no usable fuel remaining in the tank. [78062]
Impacts 1. The software failure incident caused the vehicle's computer to display a positive distance-to-empty range when there was actually no usable fuel remaining in the tank, potentially leading drivers to run out of gas and causing the engine to stall [78062].
Preventions 1. Implementing thorough software testing procedures to catch programming errors before the vehicles are released to the market [78062]. 2. Conducting regular software audits and quality checks to identify and rectify any potential issues in the fuel system software [78062].
Fixes 1. Applying the correct software to the vehicle by Subaru technicians [78062].
References 1. Subaru's official recall announcement [78062]

Software Taxonomy of Faults

Category Option Rationale
Recurring one_organization (a) The software failure incident related to Subaru's fuel system software bug has happened again within the same organization. Subaru issued a recall for 228,648 vehicles due to a programming error causing the computer to display incorrect distance-to-empty range, leading to potential engine stalling [78062]. This indicates a recurring software issue within Subaru's products.
Phase (Design/Operation) design (a) The software failure incident in the article is related to the design phase. The issue with the fuel system software in Subaru vehicles was caused by a programming error that led to the incorrect display of the distance-to-empty range, potentially causing the vehicle to run out of gas unexpectedly [78062]. This indicates a failure due to contributing factors introduced during the system development phase.
Boundary (Internal/External) within_system (a) The software failure incident described in the article is within_system. The problem stems from a programming error in the software governing the fuel system of Subaru vehicles, causing the computer to display inaccurate distance-to-empty range readings, leading to potential engine stalling due to running out of gas [78062].
Nature (Human/Non-human) non-human_actions (a) The software failure incident in the article is attributed to a programming error in the software governing the fuel system of Subaru vehicles. This error causes the vehicle's computer to display a positive distance-to-empty range even when there is no usable fuel remaining in the tank. This issue is a result of a non-human action, specifically a software bug introduced during the programming of the fuel system software [78062]. (b) The article does not mention any human actions contributing to the software failure incident.
Dimension (Hardware/Software) software (a) The software failure incident in the article is related to a hardware issue. The problem stems from a programming error in the software governing the fuel system of Subaru vehicles, which causes the vehicle's computer to display incorrect information about the distance-to-empty range, leading to potential issues such as running out of gas and engine stalling [78062].
Objective (Malicious/Non-malicious) non-malicious (a) The software failure incident described in Article 78062 is non-malicious. The issue with Subaru vehicles' fuel system was caused by a programming error in the software governing the fuel system, leading to the incorrect display of the distance-to-empty range. This error could potentially cause the vehicle to run out of gas and stall, increasing the risk of incidents. However, Subaru is addressing the problem by applying the correct software fix to remedy the issue, indicating that the failure was not due to malicious intent but rather a software bug introduced unintentionally [78062].
Intent (Poor/Accidental Decisions) accidental_decisions (a) The software failure incident in the article was not due to poor decisions but rather a programming error in the software governing the fuel system of Subaru vehicles. The issue stemmed from a software bug that caused the vehicle's computer to display a positive distance-to-empty range when there was actually no usable fuel remaining in the tank. This indicates that the failure was not a result of poor decisions but rather a technical flaw in the software [78062].
Capability (Incompetence/Accidental) development_incompetence (a) The software failure incident in Article 78062 occurred due to development incompetence. The article mentions that the problem stemmed from a programming error in the software governing the fuel system. This error caused the vehicle's computer to display a positive distance-to-empty range when there was actually no usable fuel remaining in the tank. This indicates a lack of professional competence in the development of the software, leading to the software bug [78062].
Duration temporary The software failure incident described in Article 78062 is temporary. The issue with the fuel system software in Subaru vehicles is a result of a programming error that causes the computer to display an incorrect distance-to-empty range. This error can be fixed by applying the correct software to the vehicle, indicating that the failure is not permanent but rather temporary and can be remedied through a software update [78062].
Behaviour value (a) crash: The software failure incident in the article is not described as a crash where the system loses state and does not perform any of its intended functions [78062]. (b) omission: The software failure incident in the article is not described as an omission where the system omits to perform its intended functions at an instance(s) [78062]. (c) timing: The software failure incident in the article is not described as a timing issue where the system performs its intended functions correctly, but too late or too early [78062]. (d) value: The software failure incident in the article is described as a value issue where the system performs its intended functions incorrectly by displaying a positive distance-to-empty range when there is no usable fuel remaining in the tank, leading to potential engine stalling [78062]. (e) byzantine: The software failure incident in the article is not described as a byzantine failure where the system behaves erroneously with inconsistent responses and interactions [78062]. (f) other: The software failure incident in the article is not described as any other specific behavior beyond the value issue mentioned [78062].

IoT System Layer

Layer Option Rationale
Perception None None
Communication None None
Application None None

Other Details

Category Option Rationale
Consequence property The consequence of the software failure incident described in the article is as follows: (d) property: People's material goods, money, or data was impacted due to the software failure - The software bug in the fuel system's programming caused the vehicle's computer to display a positive distance-to-empty range when there was actually no usable fuel remaining in the tank. This could lead to the vehicle running out of gas and the engine stalling, potentially causing inconvenience and impacting the vehicle's operation [78062].
Domain transportation (a) The software failure incident reported in Article 78062 is related to the transportation industry. The affected vehicles, Subaru Legacy sedan, and Subaru Outback crossover, had a software bug in the fuel system programming that caused inaccuracies in displaying the distance-to-empty range, potentially leading to the vehicle running out of gas and stalling while in motion [78062].

Sources

Back to List