Louis-Vincent DERIAN <louis-vincent.der...@st.com> writes: > Hello, > > > > My name is Louis-Vincent DERIAN, and I work for STMicroelectronics. We are > interested in using your software to facilitate > our development and testing processes. However, we need to know if > QEMU has ISO 26262 certification.
The QEMU project doesn't have any certifications, as an open source project it is provided as is. There may be 3rd parties interested in certifying a particular version of QEMU but I suspect it would involve a lot of effort to audit the code base. > Could you please provide us with information about the ISO 26262 > certification of your software? If it is not certified, could > you explain the reason? Is it because certification is not required > for this type of tool? Because no one has done the work or is willing to pay for it. QEMU is a very large project and supports a wide range of devices with different levels of quality in the implementation. The project does make some statements around principles for secure use of QEMU: https://qemu.readthedocs.io/en/master/system/security.html In short we treat bugs in virtualisation use cases as potential security bugs but the emulation use case shouldn't be relied upon for guest isolation or security guarantees. > > > > Thank you for your assistance. We look forward to your response. > > > > Best regards, > > > > Louis-Vincent DERIAN > > > > ST Restricted -- Alex Bennée Virtualisation Tech Lead @ Linaro
