Out-of-bounds recovery circuit

A method of recovering an electronic device from an out-of-bounds violation, the electronic device having at least a first operating state having first non-allowable memory addresses and a second operating state having second non-allowable memory addresses, the method comprising:

• monitoring, by an out-of-bounds recovery circuit, one or more control and/or data signals of the electronic device;
• detecting, by the out-of-bounds recovery circuit, an out-of-bounds violation in the electronic device when it is determined, from the one or more control and/or data signals of the electronic device, that the electronic device is in the first operating state and a processing element of the electronic device has fetched an instruction from one of the first non-allowable memory addresses;
• detecting, by the out-of-bounds recovery circuit, an out-of-bounds violation in the electronic device when it is determined, from the one or more control and/or data signals of the electronic device, that the electronic device is in the second operating state and the processing element of the electronic device has fetched an instruction from one of the second non-allowable memory addresses;
• and
• in response to detecting an out-of-bounds violation, causing, by the out-of-bounds recovery circuit, the electronic device to transition to a predetermined safe state.

A non-transitory computer readable storage medium having stored thereon computer readable instructions that, when executed at a computer system, cause the computer system to:

• monitor one or more control and/or data signals of an electronic device having at least a first operating state having first non-allowable memory addresses and a second operating state having second non-allowable memory addresses;
• detect an out-of-bounds violation in the electronic device when it is determined, from the one or more control and/or data signals of the electronic device, that the electronic device is in the first operating state and a processing element of the electronic device has fetched an instruction from one of the first non-allowable memory addresses;
• detect an out-of-bounds violation in the electronic device when it is determined, from the one or more control and/or data signals of the electronic device, that the electronic device is in the second operating state and the processing element of the electronic device has fetched an instruction from one of the second non-allowable memory addresses;
• and
• in response to detecting an out-of-bounds violation, cause the electronic device to transition to a predetermined safe state.