Firmware Development Guide: Embedded C and Beyond

Firmware Lives at the Bottom of the Software Stack

Firmware is software that runs directly on a microcontroller or embedded processor, with no operating system between the code and the hardware. When you press a button on a microwave, a fitness tracker measures your heart rate, or an automotive ECU controls a fuel injector — firmware is running.

The firmware developer's world is constrained compared to application development: kilobytes of RAM (not gigabytes), bytes of flash for code, no dynamic memory allocation, no filesystem, no standard library, and real-time requirements where a missed deadline can mean a safety failure.

Firmware career in 2026:

• High demand in automotive (EV, ADAS), medical devices, industrial IoT, consumer electronics
• Salaries: $90K-$160K for experienced embedded engineers
• C and Rust are the key languages; Zephyr RTOS is growing fast
• Edge AI in firmware is an emerging area — running TensorFlow Lite on ARM Cortex-M

Embedded C: What Makes It Different

Embedded C is standard C with specific patterns and constraints:

Fixed-width integer types — Platform-independent sizes:

#include <stdint.h>

uint8_t  byte_val = 0xFF;      // 8-bit unsigned (0-255)
int16_t  signed_16 = -1000;    // 16-bit signed
uint32_t reg_value = 0x40020C00; // 32-bit, typical register address
uint64_t timestamp = 0;         // 64-bit for time counters

volatile keyword — Tells the compiler this variable can change outside program flow (hardware changes it, ISR changes it). Without volatile, the compiler may cache the value in a register and never re-read it.

// Memory-mapped register — hardware changes this value
volatile uint32_t* const GPIOA_IDR = (volatile uint32_t*)0x40020010;

// Without volatile: compiler might optimize away repeated reads
// With volatile: every read goes to the actual memory address
uint32_t pins = *GPIOA_IDR;   // reads current hardware state

Bit manipulation — Setting, clearing, and toggling individual bits in hardware registers:

// Set bit 5 (enable pin PA5 as output)
GPIOA->MODER |= (1U << (5*2));    // set bits, preserve others

// Clear bit (set PA5 low)
GPIOA->ODR &= ~(1U << 5);         // clear bit 5

// Toggle PA5
GPIOA->ODR ^= (1U << 5);          // XOR bit flip

// Check if bit is set
if (GPIOB->IDR & (1U << 13)) {   // button pressed?
    // handle press
}

Memory-Mapped I/O: How Firmware Controls Hardware

In microcontrollers, peripheral registers (GPIO, UART, ADC, timers, etc.) are mapped to specific addresses in the CPU's address space. Writing to address 0x40020018 sets GPIO pins. Reading from 0x40020010 reads GPIO input state. This is how all hardware is controlled in embedded systems.

Microcontroller vendors provide header files that define these addresses as struct-based register maps:

// STM32 GPIO register structure (simplified from vendor HAL)
typedef struct {
    volatile uint32_t MODER;    // 0x00 - Mode register
    volatile uint32_t OTYPER;   // 0x04 - Output type
    volatile uint32_t OSPEEDR;  // 0x08 - Output speed
    volatile uint32_t PUPDR;    // 0x0C - Pull-up/pull-down
    volatile uint32_t IDR;      // 0x10 - Input data register
    volatile uint32_t ODR;      // 0x14 - Output data register
    volatile uint32_t BSRR;     // 0x18 - Bit set/reset register
} GPIO_TypeDef;

// Base address for GPIOA peripheral on STM32F4
#define GPIOA ((GPIO_TypeDef*)0x40020000)

// Configure PA5 as output
void LED_Init(void) {
    // Enable GPIOA clock (must do this before accessing GPIOA registers)
    RCC->AHB1ENR |= (1U << 0);
    // Clear MODER bits for PA5, set to output (01)
    GPIOA->MODER &= ~(3U << (5*2));  // clear
    GPIOA->MODER |=  (1U << (5*2));  // set output mode
}

void LED_Toggle(void) {
    GPIOA->ODR ^= (1U << 5);
}

Interrupt Service Routines: Hardware-Triggered Events

An ISR (Interrupt Service Routine) is a function that executes when a hardware event occurs — a button press, a UART byte received, a timer overflow, an ADC conversion complete. The CPU saves its state, jumps to the ISR, executes it, and resumes normal operation.

Rules for writing good ISRs:

• Keep them short and fast — ISRs block the main loop. Long ISRs cause missed events and latency.
• No blocking operations — No delays, no polling loops, no waiting for peripherals.
• Use flags to communicate — Set a volatile flag in the ISR; handle work in the main loop.
• Atomic operations for shared data — If main loop and ISR share a variable, disable interrupts during access to prevent race conditions.

// Global flag — set by ISR, handled by main loop
volatile uint8_t button_pressed = 0;

// ISR for EXTI line 13 (button on PA13)
void EXTI15_10_IRQHandler(void) {
    if (EXTI->PR & (1U << 13)) {
        button_pressed = 1;     // Set flag (fast, no blocking)
        EXTI->PR |= (1U << 13); // Clear pending bit
    }
}

// Main loop handles the event
int main(void) {
    while(1) {
        if (button_pressed) {
            button_pressed = 0;     // Clear flag
            LED_Toggle();           // Actual work here, not in ISR
        }
    }
}

Bare Metal vs RTOS: Choosing the Right Approach

Use RTOS when: you have 4+ distinct concurrent tasks, you need periodic timing with different rates, or you have complex inter-task communication needs. Use bare metal for: simple sensor/actuator devices, safety-critical systems needing determinism, resource-constrained MCUs (<16KB RAM).

HAL and Board Support Packages

Hardware Abstraction Layers (HAL) sit between your application code and the raw register access, providing a portable API. STMicroelectronics' STM32 HAL, Arduino's core library, Zephyr's device driver model — all are HALs.

// Without HAL: raw register access (portable only to same MCU family)
GPIOA->ODR ^= (1U << 5);

// With STM32 HAL: cleaner but less efficient
HAL_GPIO_TogglePin(GPIOA, GPIO_PIN_5);

// With Arduino HAL: highest abstraction, cross-platform
digitalWrite(LED_BUILTIN, !digitalRead(LED_BUILTIN));

Trade-off: HAL code is slower and uses more memory but is more readable, portable, and maintainable. Use raw register access for timing-critical ISRs and performance hot paths; use HAL for everything else.

Debugging Embedded Firmware

Debugging without a screen is its own art:

• JTAG/SWD debugger — J-Link, ST-Link, CMSIS-DAP. Connect to the MCU, load firmware, set breakpoints, inspect registers and memory in real time. The professional approach.
• GDB + OpenOCD — Open-source JTAG debugging. arm-none-eabi-gdb connects to OpenOCD which talks to the JTAG adapter.
• UART printf debugging — printf() to UART, read with serial terminal. The embedded version of console.log. Slower but simple.
• SWO/ITM tracing — On ARM Cortex-M: use the Instrumentation Trace Macrocell to send printf output without occupying a UART. Very fast, non-intrusive.
• Logic analyzer — Sigrok + cheap 8-channel logic analyzer. Visualize I2C, SPI, UART, GPIO timing. Essential for protocol debugging.

Frequently Asked Questions