The flash manager takes care of persistent storage for the Bluetooth mesh data. It stores data as handle/value pairs in individually managed multi-page flash sections.
The flash entries are stored in the following format:
Field | Size | Offset | Description |
---|---|---|---|
Length | 16 bits | 0 bytes | Length of the entry in words, including the header fields. |
Handle | 16 bits | 2 bytes | Identifier for the entry. |
Data | 0-128 bytes | 4 bytes | Data array for the entry. |
Handles can be written, read, modified, replaced, and deleted. To group entries, it is also possible to search for entries with entry filters.
Table of contents
See also Flash manager API documentation and resource usage page.
You can use any number of individual flash manager areas.
Each area is made up of between one and 255 flash pages and has a handle-address space separated from other managers. Each flash page in a managed area is made up of:
The metadata header has a total of 8 bytes and holds the following values:
Field | Size | Offset | Value | Description |
---|---|---|---|---|
Metadata length | 8 bits | 0 bytes | 8 | Length of the metadata in bytes. |
Entry header length | 8 bits | 1 bytes | 4 | Length of each entry header in bytes. |
Entry header handle field length | 8 bits | 2 bytes | 16 | Length of the entry header handle field in bits. |
Entry header length field length | 8 bits | 3 bytes | 16 | Length of the entry header length field in bits. |
Area page count | 8 bits | 4 bytes | ? | The number of pages in this area. |
Area page index | 8 bits | 5 bytes | ? | This page's index in its area. |
Padding | 16 bits | 6 bytes | 0xFFFF | Padding. |
The data section of the flash page follows right after the metadata header and continues to the end of the page.
Handles can be any value in the range 0x0001
to 0x7EFF
. Handle 0x0000
is considered invalid, and handles 0x7F00
and up are considered special handles used for internal management.
Each handle is unique to every flash manager. Writing an entry with the same handle to the same manager twice will invalidate the first entry.
Handle filters allow searching for entries based on matching criteria on their handles. This allows you to group handles together in ranges without having to search for every handle in the range individually.
Filters are patterns and masks applied to the handles. The mask tells the manager on which bits in the handle to look for pattern matching. In code, the flash manager will yield any entry whose handle passes the following test:
The search function takes a p_start
argument, which acts as an iterator token, from where the search is initiated (non-inclusive). Passing NULL
starts the search from the beginning of the managed area. To keep searching through the area, keep passing the pointer yielded from the previous call to the search function.
Due to limitations in the flash hardware, replacing handles in the flash manager requires writing a completely new entry at the end of the existing entries and then invalidating the old entry. This will eventually cause the flash area to fill up with invalid entries, which prevents adding or replacing more entries. When this happens, the invalid entries must be removed and the page must be rebuilt with only the valid entries that are present. This process is called defragmentation.
Defragmentation is executed by the flash manager defrag module. The process is triggered automatically when the manager runs out of space. For more details on the defrag procedure, see the flash_manager_defrag.c
file.
The defragmentation procedure requires a dedicated flash page. This flash page is used to take a copy of all valid handles before their originals are erased. This allows for recovering entries if a power failure occurs during the procedure.
The flash manager can handle circuit power loss at any time without loss of data. This is ensured by a strict policy of keeping at least one copy of every entry present in flash at all times.
When replacing entries, the flash manager first writes the new version in the entry. Then, only when the new version is fully written, the old handle is invalidated. If the device loses power in the brief period when there are two entries with the same handle present in the manager, the first handle is invalidated upon bootup.
To ensure the validity of new entries, a seal is placed at the end of the entries. If power failure occurs in the middle of adding a new entry, the flash manager looks for a seal at the end of the entries upon reboot. If it fails to locate such a seal, it assumes that the last entry is broken and invalidates it before adding the missing seal at the end. The manager will never yield any unsealed entries in any get functions, and considers the last handle invalid until it is followed by a seal.
The flash areas can be located anywhere in the device flash. There are several exceptions:
0x0000000
is considered invalid.By default, the defragmentation recovery page is one of the following:
UICR->BOOTLOADERADDR
register).This location can be overriden by defining FLASH_MANAGER_RECOVERY_PAGE
in the compiler defines. Make sure that the recovery page is the same page in every iteration of the firmware to avoid loss of backed up recovery data.