ML20095F945

Nonproprietary Version of Rev 2 to Cpc/Ceac Sys Phase I Software Verification Test Rept

ML20095F945
Person / Time
Site:	San Onofre
Issue date:	03/31/1984
From:	ABB COMBUSTION ENGINEERING NUCLEAR FUEL (FORMERLY
To:
Shared Package
ML13309B441	List: ML20095F924 ML20095F941 ML20095F945
References
CEN-176(S)-NP, CEN-176(S)-NP-R02, CEN-176(S)-NP-R2, NUDOCS 8408270418
Download: ML20095F945 (27)

Text

r. ,

ICE-475a(80F2)/lr 1 SAN ONOFRE UNITS 2, 3 DOCKET 50-361 AND 50-362 CEN-176(S)-NP REVISION 02 CPC/CEAC SYSTEM PHASE I SOFTWARE VERIFICATION TEST REPORT MARCH, 1984 Combustion Engineering, Inc.

Nuclear Power Systems Power Systems Group Windsor, Connecticut b .

l l

,' 8408270418 840801 l PDR ADOCK 05000361 '

P PDR

i .. . . . _ _ . - - - .

I LEGAL, NOTICE l This response was prepared as an account of work sponsored by Combustion Engineering, Inc. Neither Combustion Engineering nor any person acting on it's behalf: -

a. Makes any warranty or representation, express or implied including the warrantier of fitness for a particular purpose or merchantability, with .

respect to the accursey, completeness, or usefulness of the infomation contained in this response, or that the use of the information contained in this response, or that the use of any infomation, apparatus, method, os procesr disclosed in this response, or that the use of any information, apparatus, method, or process disclosed in this response may not infringe privately owned rights; or

b. Assumes any liabilities with respect to the use of, or for damages resulting from the use of, any infonnation, apparatus, method or process disclosed in this response.

l

'l i

l l

l Page 2 of 25

__ ~ - ,. ._ -.

ICE-475a(80F2)/lr3 ABSTRACT Phase I Design Qualification Testing is performed on the DNBR/LPD Calculator System to verify that CPC/CEAC system software modifications have been properly implemented.

This report presents the Phase I Test results for the Southern California Edison Company SONGS-2, 3 plants CPC/CEAC Revision 02 software. l The Phase I Testing was performed according to previously issued procedures (Reference 2). The test results indicate that the CPC/CEAC system software l modifications have been properly implemented.

~

l I

• I

__..__7... _ _ _ _ _

ICE-475a(80F2)/lr4 TABLE OF CONTENTS SECTION TITLE PAGE NUMBER

1.0 INTRODUCTION

AND

SUMMARY

6 1.1 Objective of Phase I Testing 6

+ 1.2 Results 6 1.3 Conclusions 6

~

1.4 Prerequisites 6 2.0 APPLICATION PROGRAM TESTING 7 2.1 Test Configuration 7 2.2 Test Cases 7 2.3 Test Execution and Results 8 3.0 EXECUTIVE TESTING 20 3.1 Test Configuration 20 3.2 Test Cases 20 3.3 Test Execution and Results 20 4.0 PHASE I TEST RESULTS

SUMMARY

26

5.0 REFERENCES

27 l _- _ . _ _ . . . - . _ _ _ . _ _ . . . - .

~

I __ __.. l~E ~ ~

ICE-475a(80F2)/lr 5 LISTS OF TABLES

' TABLE TITLE PAGE NO.

2-1 CEAC Single Channel Hardware Configuration for Phase I Executive / Application Program Testing 10

• 2-2 Application Programs Tested with the Automated Phase I Testing Program 11

. 3-1 CPC Single Channel Hardware Configuration for Phase I Executive Program Testing 21 LIST OF FIGURES FIGURE TITLE PAGE NO.

2-1 CEAC Single Channel Memory Map for CPC System Software Phase I Testing 12 2-2 CEAC Single Channel Memory Map for CEAC System Software Phase I Testing 17 3-1 Memory Map for CPC/CEAC Executive Phase I Testing 22 i

S

I __.

R ICE-475a(80F2)/lr 6 i

1.0 INTRODUCTION

AND

SUMMARY

This document sumarizes the results of the Phase I Design Qualification Testing of the changes to the CPC and CEAC software for SONGS-2,3 Cycle 1, Rev. 02. The programs affected by these changes, which are listed in Section 2.3 were required to undergo Phase I Testing in accordance with Reference 2. These changes reflect the implementation of Software Change Requests 260, 266,

. 310, 333, 334, 385, 499, 540, 577, 608, 609, 613, 614 and 615.

These changes were made in accordance with Reference 2.

The tests reported herein were conducted on the CPC/CEAC design. A discussion of the test configuration, test methodology, and test results are presented in this document.

1.1 OBJECTIVE OF PHASE I TESTING The objective of Phase I Design Qualification Testing is to verify the implementation of the Core Protection Calculation System (i.e.,

both CPC and CEAC) software.

1.2 RESULTS Analysis of the Phase I Design Qualification Ta ts demonstrated that the software changes have been correctly implemented to meet the l system functional requirements.

1.3 CONCLUSION

S CPC System Phase I Testing was performed in the prescribed manner as described by Phase I Test Procedures. The Phase I Testing was adequate to meet all of the test objectives. The success of the Phase I Testing demonstrates the adequacy of the CPC/CEAC software implementation.

1.4 PREREQUISITES Before formal Phase I Testing was initiated, the following prerequisites were satisfied:

1. Programer debug testing was performed on the module changes to remove all obvious errors.

l

~

2. The modules and programs that change were integrated into  ;

complete software systems and absolute core images were l generated on the CPC permanent mass storage medium (floppy '

disks).

1 1

~

F- . . _ i ICE-475a(80F2)/lr7 2.0 APPLICATION PROGRAM TESTING

, The CPC application programs were tested in accordance with the CPC/CEAC Phase I Test Procedure. This secton discusses the actual test configuration, test cases, and test execution and results.

Phase I Test runs used Disk #S294 as the A-B Reference Disk.

• - 2.1 TEST CONFIGURATION Phase I Testing of the CPC application programs was performed on the

. CEAC Single. Channel Unit. For the purpose of this testing, the single channel was configured with the hardware complement listed in Table 2-1. The software configuration for the application programs. -

Phase I Testing is shown in Figure 2-1 (CEAC). Memory was loaded with this configuration by the following procedure:

1. The integrated CPC system was

• aued from the SONGS-2,3 Reference Disk (Disk #S294 for CPCs).

2. The Automated Phase I Testing Software was loaded from magnetic tape, overlaying the CDC/CEAC Executive and any unused portion of memory.

3. The Interdata Hexadecimal Debug Program, CLUB, was loaded from magnetic tape, overlaying any unused portion of memory.

The Automated Phase I Testing software was then used, with CLUB, to i test programs'l-4 and 9-11 (LPC) and 1 and 2 (CEAC) of Table 2-2.

j 2.2 TEST CASES 2.2.1 Inputs l

l Phase I Test case inputs for the CPC/CEAC application programs were i generated in accordance with the CPC/CEAC Phase I Test Procedure.

Sufficient test cases were chosen to exercise each functional branch i in the application programs. However, several branches were not exercised because assigned constant values made it impossible to l

branch on certain conditions. All coding that cannot be executed, because of constant assignments, was verified by inspection to assured correct implementation.

l i

. 2.2.2 Expected Results '

j Expected results for the CPC application programs Phase I Test cases  ; l

' were generated by two methods. The preferred method for generation  !

of expected results utilized the CPL FORTRAN Simulation Code. Test  !

case inputs were stored on magnetic tape and entered into the i simulation Code. The FORTRAN Code calculated the expected results and stored then on magnetic tape in a fonnat acceptable to the automated Phase I Testing Program. In some instances, such as I l 1'

.- . . ~ T rr : .=::. : :~ .~ -~; --. :--_ -.--.- .--.- . _ - _. - - . -

ICE-475a(80F2)/Ir8 input / output handling, the FORTRAN Code does not simulate the CPC code. In these cases, the expected results were hand calculated by '

the test engineer based on the system functional requirements, the programer's. flowcharts, and the system data base document. The results were then manually entered on magnetic tape in a format acceptable to the Automated Phase I Testing Program.

2.3 TEST EXECUTION AND RESULTS When test case inputs had been selected and expected results ha1 been generated, the test engineer prepared the test tape to be read

. by the Automated Phase I Testing Program. The test case inputs overlayed the portions of memory where data is accessed by the software module under test. After each set of inputs overlayed appropriate memory locations, the software module under test was executed and the actual CPC results were compared to the expected results by the Automated Phase I Testing Program. Whenever the actual value differed from the expected value by more than 0.1 percent, and analysis of the error was performed by the test engineer to assure that the deviation was not caused by a coding error.

Documentation generated by the Automated Phase I Testing Program consisted of listings which contain input and output differences.

For several of the modules tested, it was not obvious which branches in the code were taken when observing the outputs. When tracing through a portion of code, the location of each critical instruction was printed when that instruction was executed, which enabled the test engineer to verify that each functional branch was taken. A Phase I Test Log was used to maintain a daily account of testing activities.

The SCR's generated affected FLOWCON, UPDATPRG, UPDATCON, CEACEXDB, CPCEXEC, CEACPFC, CEACPFP, CPCIDTBL, CEAIDTBL, CPCEXDB. These changes required Phase I testing of the FLOW & UPDATE application program, the Executive program and the CEAC penalty factor program.

The reference disk #S294 (Rev. 02) compared to disk #S274 (Rev. 01) in October 1983 indicated no changes to those tracks assigned to the POWER & STATIC programs. Subsequent comparisons on January 12, 1984 between a regenerated #S294 and its original backup, #S296, also i

indicated no changes to those tracks assigned to the POWER & STATIC programs. These comparisons demonstrated that previously performed

. Phase I testing on programs POWER & STATIC is valid.

1 Phase I Testing on the Executive was performed on 10/27/83 through 10/28/83. A subse 1984 between the regenerated disk #S294) (quent and comparison its originalonbackup January 12,(#S296) showed no subsequent changes to Executive related tracks.

i y9-+y-, , - , s- m. --,w.-.,,-,+-~,9 , ,, rgy,,y,ww ,9-y g q,, - , . , . . , ,yg-g w y e w ,-9, q .y g c y ,9 9.w wg9.,,pyy c-f ,%gqq

(" ._

ICE-475a(80F2)/1r9 Chances made to FLOW & UPDATE programs were implemented on 10/27/83.

Changes to Penalty Factor program were implemented on January 12, 1984. These programs were subjected to complete Phase I testing on 1/12/84.

On 2/16/84 a change was made to the data base that would affect the CEACPFC program only. The reference disk #S294 was regenerated on 2/16/84. A comparison to its backup (#S296) showed a difference on

- only the track containing CEACPFC. All other tracks remained unchanged, therefore Phase I testing previously performed on these unchanged programs are valid. Phase I testing of CEACPFC, on

. 2/16/84, was successful and its backup (#S296) was regenerated.

It was concluded that Phase I testing revealed no coding errors in the CPC and CEAC application programs.

9

.g.

C . _ _ _ _ _ _ . - _ _ .. ___

]

l ICE-475a(80F2)/1r10 l 2

TABLE 2-1 CEAC SINGLE CHANNEL HARDWARE CONFIGURATION FOR PHASE I EXECUTIVE /

APPLICATION PROGRAM TESTING

\

0 i

S e

l l

p ,

ICE-475a(80F2)/1r11 TABLE 2-2 APPLICATION PROGRAMS TESTED WITH THE AUTOMATED PHASE I TESTING PROGRAM O

b e

W

~

V; . - . . . . .

}

- ICE-475a(80F2)/1r12 FIGURE 2-1 CEAC SINGLE CHANNEL MEMORY MAP FOR CPC SYSTEM SOFTWARE PHASE I TESTING O-e 9

t m

f i

f ._-

ICE-475a(80F2)/1r13 Figure 2-1 (Cont.)

4 l

e

f - - . . . . -- - ..-- - -

ICE-475a(80F2)/1r14 Figure 2.1 (Cont.)

d e

e l

l l

1

. - .. - -..- -. . - . . l

f: - . . . - . . . - - -

ICE-475a(80F2)/1r15 Figure 2-1 (Cont.)

h e

f 1

i e

~ ~

[ .,

. ICE-475a(8.0F2)/,ldi6 f - . ,_

'T .. Figure 2-1 (Cont.) -

.~ ' a

- s ,

2 i ,

2

.p#-

W

, ym f

a

/

• m

.sM' h A r

/

wa-4 d

s 7

+

e f

A

,f g g a h

9

/

/

//

~ I j

n f

O

~

'/

O a

j

/

.c

.J' egf S W f

/ ,

/

1. l

=

(--

ICE-475a(8CF2)/Ir17 FIGURE 2-2 CEAC SINGLE CHANNEL MEMORY MAP FOR CEAC SYSTEM SOFTWARE PHASE I TESTING D

9 f

e--_____-_-__-__--_-_=___=_=___-__ ___:--_--__-__-

~'

(; .-____.__. -

ICE-475a(80F2)/1r18 Figure 2-2 (Cont.)

4 w

e u

(* - - - . . _ - . -.

ICE-475a(80F2)/1r 19

~ Figure 2-2 (Cont.)

e e

I e

e - _ _-. -

Q - .

ICE-475a(80F2)/lr 20 3.0 EXECUTIVE TESTING l

The CPC/CEAC Executive software was tested in accordance with the CPC/CEAC Executive Phase I Test Procedure. This section discusses the actual test configuration, test cases, and test execution-and results..

3.1 TEST CONFIGURATION l

Phase I testing of the CPC/CEAC Executive was performed on the 'CPC Single Channel System. For the purpose of this testing, the-single

• channel was configured with the hardware complement listed in Table 2-1(CEAC)and3-1(CPC). This hardware configuration is l functionally identical to the as-built CPC/CEAC design.

The software configuration for the Executive Phase I Testing is shown in Figure 3-1. Memory was loaded with this configuration by the following procedure:

1. An integrated CPC/CEAC system was loaded from SONGS-2,3 Reference Disk #S294 (the entire image was loaded although only the Executive system is tested).

2. The Interdata Hexadecimal Debug Program, CLUB, was loaded from magnetic tape overlaying an unused area in memory.

The prescribed test cases were then set up and executed using the CLUB program to test the Executive software.

3.2 TEST CASES l

The CPC/CEAC Executive Phase I Test Cases are described in the Executive Phase I Test Procedure. Sufficient test cases were chosen to exercise each functional branch in the Executive system.

3.3 TEST EXECUTION AND RESULTS l ,

For testing of the CPC/CEAC Executive, the debug program, CLUB was used to insert test case inputs into memory; to insert breakpoints to trace and intercept code executions; and to examine results.

Documentation produced as a result of Executive Phase I Testing consists of the CLUB teletype printouts, initialed and dated by the test engineer.

The CPC/CEAC Executive was tested on October 27, through October 28,

, 1983. No software errors were detected.

l 4

f

, , _ . , _, ._=-.., .-- -

-~-+-++-m----*emm-* *-T=r ----+-*-*-=*-ew-r"=r+C""-*'e*"-***""*""~"*-'*-**'T-#-~

(. . -

. ICE-4752(80F2)/1r21 TABLE 3-1 CPC SINGLE CHANNEL HARDWARE CONFIGURATION FOR PHASE I EXECUTIVE PROGRAM TESTING 4

s b

h a

l

p- _ __ _..__ _ _.. _

1 ICE-475a(80F2)/1r22 FIGURE 3-1 MEMORY MAP FOR CPC/CEAC EXECUTIVE PHASE I TESTING

-8

.e l

i l

N b

f a

l I

I 1

1 1

. - -,, -. - - - ... - - . . . -. . - - - . . . - - . . ~ - - - . . . . . - - . - . - . . - . . .

(-- _._.__. _ ____ _....____

ICE-475a(80F2)/1r23 l l

l 1

Figure 3-1(Cont.) l 0

5 l

[ . _ . . _ _ . _ _ _ _ _ . _ _ . . _ _ . __

(~ _ . . _ . _ _ _ _ _ _ _ _ _ _ _ . .

1 ICE-475a(80F2)/lr24 l

l Figure 3-1 (Cont.)

C O

a

LICE-475a(80F2)/1r25 1

-4 -l Figure 3-1l(Cont.)

GRERuuume

. W. l 5

4 6

9 enemmum-

.' r b

c.

5 L ..

( .

ICE-475a(8CF2)/lr 26 4.0 PHASE I TEST RESULTS SUMARY Phase I testing of the CPC and CEAC software for SONGS-2,3 Cycle 1 was performed in accordance with Reference 2. Test results detected no errors in the implementation of the database modifications outlined in Reference 1. and software modifications to those programs listed in Section 2.3.

3 1

1 l

t _ . _ . _ _ _ . . _ _ _ . . _ . _ _ _ _ __

( -- . - - - - - - - .- _

ICE-475a(80F2)/lr27

5.0 REFERENCES

1. SONGS-2, Cycle 1 CPC and CEAC Data Base CEN-266(S)-P

2. CPC Protection Algorithm Software Change Procedure CEN-39(A)-P, Rev. 02, December 21, 1978.

O I

B I

7 4

A COMBUSTION ENGINEERING, INC.

i a e