Add fault injection scripts to simulation flow

.gitmodules

@@ -5,4 +5,6 @@
 [submodule "regression-tests"]
 	path = regression-tests
 	url = https://github.com/pulp-platform/regression_tests.git
-    branch = astral
+[submodule "fault_injection_sim"]
+	path = fault_injection_sim
+	url = git@iis-git.ee.ethz.ch:michaero/fault_injection_sim.git

Makefile

@@ -87,6 +87,10 @@ Bender.lock:
 pulp-runtime:
 	git submodule update --init --recursive $@
 
+## Clone fault injection scripts
+fault_injection_sim:
+	git submodule update --init --recursive $@
+
 ########################
 # Build and simulation #
 ########################

scripts/fault_injection_config/pulp_extract_nets.tcl

@@ -0,0 +1,246 @@
+# Copyright 2023 ETH Zurich and University of Bologna.
+# Solderpad Hardware License, Version 0.51, see LICENSE for details.
+# SPDX-License-Identifier: SHL-0.51
+#
+# Author: Michael Rogenmoser (michaero@iis.ee.ethz.ch)
+#         Riccardo Tedeschi  (riccardo.tedeschi6@unibo.it)
+
+# Description: This file is used to extract specific groups of nets from the
+#              PULP Cluster, so they can be used in the fault injection script
+
+# Source generic netlist extraction procs
+source [file join $script_base_path extract_nets.tcl]
+
+# == Base Path of a Cluster Core ==
+proc base_path {core} {return "pulp_cluster_tb/cluster_i/CORE\[$core\]/core_region_i"}
+
+# nets that would crash the simulation if flipped
+lappend core_netlist_ignore *clk_i
+lappend core_netlist_ignore *Clk_CI
+lappend core_netlist_ignore *clk
+lappend core_netlist_ignore *clk_ungated_i
+lappend core_netlist_ignore *rst_ni
+lappend core_netlist_ignore *rst_i
+lappend core_netlist_ignore *rst_n
+lappend core_netlist_ignore *rst
+lappend core_netlist_ignore *Rst_RBI
+lappend core_netlist_ignore *scan_cg_en_i
+lappend core_netlist_ignore *testmode_i
+lappend core_netlist_ignore *i_fpnew_bulk*
+
+# registers/memories:
+# lappend core_netlist_ignore *_q
+# lappend core_netlist_ignore *obi_pulp_adapter/ps TODOs
+
+# debug
+lappend core_netlist_ignore *tracer_i*
+
+######################
+#  Core Output Nets  #
+######################
+
+proc get_core_output_nets {core} {
+  set core_output_netlist [get_output_netlist [base_path $core]]
+  lappend core_output_netlist [base_path $core]/RI5CY_CORE/RI5CY_CORE/data_we_o
+  lappend core_output_netlist [base_path $core]/RI5CY_CORE/RI5CY_CORE/data_be_o
+  lappend core_output_netlist [base_path $core]/RI5CY_CORE/RI5CY_CORE/data_addr_o
+  lappend core_output_netlist [base_path $core]/RI5CY_CORE/RI5CY_CORE/data_wdata_o
+  return [concat $core_output_netlist]
+}
+
+####################
+#  State Netlists  #
+####################
+proc get_core_state_nets {core} {
+  set state_list {\
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/prefetch_buffer_i/fifo_i/write_pointer_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/register_file_i/wdata_b_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/register_file_i/wdata_a_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/register_file_i/waddr_onehot_b_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/ex_stage_i/gen_apu/apu_disp_i/valid_waiting \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/ex_stage_i/gen_apu/apu_disp_i/valid_inflight \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/utvec_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/utvec_mode_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/uepc_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/ucause_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/prefetch_buffer_i/prefetch_controller_i/trans_addr_q \
+    [base_path $core]/RI5CY_CORE/riscv_tracer_i/trace_wb_is_null \
+    [base_path $core]/RI5CY_CORE/riscv_tracer_i/trace_wb_delay_is_null \
+    [base_path $core]/RI5CY_CORE/riscv_tracer_i/trace_ex_is_null \
+    [base_path $core]/RI5CY_CORE/riscv_tracer_i/trace_ex_delay_is_null \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/gen_trigger_regs/tmatch_value_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/gen_trigger_regs/tmatch_control_exec_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/prefetch_buffer_i/fifo_i/status_cnt_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/ex_stage_i/alu_i/alu_div_i/State_SP \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/load_store_unit_i/data_obi_i/state_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/prefetch_buffer_i/instruction_obi_i/state_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/prefetch_buffer_i/prefetch_controller_i/state_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/aligner_i/state \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/ex_stage_i/alu_i/alu_div_i/ResReg_DP \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/ex_stage_i/alu_i/alu_div_i/ResInv_SP \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/ex_stage_i/alu_i/alu_div_i/RemSel_SP \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/ex_stage_i/regfile_we_lsu \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/regfile_we_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/ex_stage_i/regfile_waddr_lsu \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/regfile_waddr_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/regfile_alu_we_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/regfile_alu_waddr_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/prefetch_buffer_i/fifo_i/read_pointer_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/load_store_unit_i/rdata_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/load_store_unit_i/rdata_offset_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/aligner_i/r_instr_h \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/priv_lvl_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/prepost_useincr_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/aligner_i/pc_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/pc_id_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/pc_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/sleep_unit_i/p_elw_busy_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/prefetch_buffer_i/instruction_obi_i/gen_no_trans_stable/obi_we_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/prefetch_buffer_i/instruction_obi_i/gen_no_trans_stable/obi_wdata_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/prefetch_buffer_i/instruction_obi_i/gen_no_trans_stable/obi_be_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/prefetch_buffer_i/instruction_obi_i/gen_no_trans_stable/obi_atop_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/prefetch_buffer_i/instruction_obi_i/gen_no_trans_stable/obi_addr_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mult_signed_mode_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mult_sel_subword_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mult_operator_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mult_operand_c_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mult_operand_b_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mult_operand_a_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mult_is_clpx_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mult_imm_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mult_en_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mult_dot_signed_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mult_dot_op_c_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mult_dot_op_b_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mult_dot_op_a_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mult_clpx_shift_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mult_clpx_img_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/ex_stage_i/mult_i/mulh_CS \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/ex_stage_i/mult_i/mulh_carry_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/mtvec_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/mtvec_mode_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/mstatus_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/mscratch_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/mie_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mhpmevent_store_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mhpmevent_pipe_stall_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mhpmevent_minstret_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mhpmevent_load_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mhpmevent_ld_stall_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mhpmevent_jump_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mhpmevent_jr_stall_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mhpmevent_imiss_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mhpmevent_compressed_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mhpmevent_branch_taken_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/mhpmevent_branch_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/mhpmcounter_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/mepc_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/prefetch_buffer_i/fifo_i/mem_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/mcountinhibit_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/mcounteren_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/mcause_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/controller_i/jump_done_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/is_fetch_failed_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/is_compressed_id_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/int_controller_i/irq_sec_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/int_controller_i/irq_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/instr_valid_id_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/instr_rdata_id_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/imm_vec_ext_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/controller_i/illegal_insn_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/illegal_c_insn_id_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/id_valid_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/aligner_i/hwlp_update_pc_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/gen_hwloop_regs/hwloop_regs_i/hwlp_start_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/prefetch_buffer_i/prefetch_controller_i/hwlp_flush_cnt_delayed_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/prefetch_buffer_i/prefetch_controller_i/hwlp_flush_after_resp \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/gen_hwloop_regs/hwloop_regs_i/hwlp_end_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/controller_i/hwlp_end_4_id_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/gen_hwloop_regs/hwloop_regs_i/hwlp_counter_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/aligner_i/hwlp_addr_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/frm_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/prefetch_buffer_i/prefetch_controller_i/flush_cnt_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/fflags_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/sleep_unit_i/fetch_enable_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/dscratch1_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/dscratch0_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/depc_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/controller_i/debug_req_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/controller_i/debug_req_entry_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/controller_i/debug_mode_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/controller_i/debug_fsm_cs \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/controller_i/debug_force_wakeup_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/cs_registers_i/dcsr_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/load_store_unit_i/data_we_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/data_we_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/load_store_unit_i/data_type_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/data_type_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/load_store_unit_i/data_sign_ext_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/data_sign_ext_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/data_req_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/data_reg_offset_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/data_misaligned_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/load_store_unit_i/data_load_event_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/data_load_event_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/controller_i/data_err_q \
+    [base_path $core]/RI5CY_CORE/riscv_tracer_i/cycles \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/controller_i/ctrl_fsm_cs \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/csr_op_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/csr_access_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/sleep_unit_i/core_busy_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/ex_stage_i/alu_i/alu_div_i/CompInv_SP \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/prefetch_buffer_i/prefetch_controller_i/cnt_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/load_store_unit_i/cnt_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/ex_stage_i/alu_i/alu_div_i/Cnt_DP \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/ex_stage_i/alu_i/alu_div_i/BReg_DP \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/branch_in_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/bmask_b_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/bmask_a_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/atop_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/ex_stage_i/alu_i/alu_div_i/AReg_DP \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/apu_waddr_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/apu_operands_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/apu_op_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/apu_lat_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/apu_lat \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/ex_stage_i/gen_apu/apu_disp_i/apu_lat \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/apu_flags_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/apu_en_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/alu_vec_mode_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/alu_operator_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/alu_operand_c_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/alu_operand_b_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/alu_operand_a_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/alu_is_subrot_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/alu_is_clpx_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/alu_en_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/id_stage_i/alu_clpx_shift_ex_o \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/if_stage_i/aligner_i/aligner_ready_q \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/ex_stage_i/gen_apu/apu_disp_i/addr_waiting \
+    [base_path $core]/RI5CY_CORE/RI5CY_CORE/ex_stage_i/gen_apu/apu_disp_i/addr_inflight \
+  }
+
+  return [extract_netlists [subst $state_list] 1]
+}
+
+##############################
+#  Get all nets from a core  #
+##############################
+
+proc get_all_core_nets {core} {
+  set core_path [base_path $core]
+  # set core_netlist_ignore_full [concat $::core_netlist_ignore [get_core_state_nets $core]]
+  set all_signals [extract_all_nets_recursive_filtered $core_path $::core_netlist_ignore]
+  # set state_signals [get_core_state_nets $core]
+  # set netlist_filtered {}
+  # foreach signal $all_signals {
+  #   set sig_unpacked [lindex $signal 0]
+  #   # echo $sig_unpacked
+  #   foreach state_sig $state_signals {
+  #     if {[string first $state_sig $sig_unpacked] == -1} {
+  #       lappend netlist_filtered $sig_unpacked
+  #     }
+  #   }
+  # }
+  return $all_signals
+}

scripts/fault_injection_config/pulp_inject_fault.tcl

@@ -0,0 +1,51 @@
+# Copyright 2023 ETH Zurich and University of Bologna.
+# Solderpad Hardware License, Version 0.51, see LICENSE for details.
+# SPDX-License-Identifier: SHL-0.51
+#
+# Author: Michael Rogenmoser (michaero@iis.ee.ethz.ch)
+
+transcript quietly
+if {! [info exists ::env(VSIM_PATH)]} {error "Define VSIM_PATH"}
+set config_base_path [file join $::env(VSIM_PATH) scripts fault_injection_config]
+set script_base_path [file join $::env(VSIM_PATH) fault_injection_sim scripts]
+
+set verbosity            2
+set log_injections       1
+# Easy way to generate a variable seed
+# set seed                 [clock seconds]
+# Default value
+set seed                 12345
+set print_statistics     1
+
+set inject_start_time 250856000000ps
+set inject_stop_time 413000000000ps
+set injection_clock "pulp_cluster_tb/cluster_i/clk_i"
+set injection_clock_trigger 0
+set fault_period 250
+set rand_initial_injection_phase 0
+# max_num set to 0 means until stop_time
+set max_num_fault_inject 0
+set signal_fault_duration 20ns
+set register_fault_duration 0ns
+
+set allow_multi_bit_upset 1
+set use_bitwidth_as_weight 0
+set check_core_output_modification 0
+set check_core_next_state_modification 0
+set reg_to_sig_ratio 1
+
+source [file join $config_base_path pulp_extract_nets.tcl]
+
+set inject_signals_netlist []
+set inject_register_netlist []
+set output_netlist []
+set next_state_netlist []
+set assertion_disable_list []
+
+for {set idx 0} {$idx < 12} {incr idx} {
+    set inject_signals_netlist [list {*}$inject_signals_netlist {*}[get_all_core_nets $idx]]
+    set output_netlist [list {*}$output_netlist {*}[get_core_output_nets $idx]]
+}
+
+source [file join $script_base_path inject_fault.tcl]
+

scripts/run_and_exit.tcl

@@ -20,4 +20,8 @@ proc run_and_exit {} {
     quit -code [examine -radix decimal sim:/pulp_cluster_tb/ret_val(30:0)]
 }
 
+if {[info exists ::env(FAULT_INJECTION)]} {
+    source [file join $::env(VSIM_PATH) scripts fault_injection_config pulp_inject_fault.tcl]
+}
+
 run_and_exit

scripts/start.tcl

@@ -9,5 +9,9 @@ if {![info exists VSIM]} {
 
 $VSIM +permissive -suppress 3053 -suppress 8885 -suppress 12130 -lib $VSIM_PATH/work +APP=./build/test/test +notimingchecks +nospecify  -t 1ps  pulp_cluster_tb_optimized +permissive-off ++./build/test/test
 
+if {[info exists ::env(FAULT_INJECTION)]} {
+    source [file join $::env(VSIM_PATH) scripts fault_injection_config pulp_inject_fault.tcl]
+}
+
 add log -r /*
 run -all