Aviation Stack Exchange is a question and answer site for aircraft pilots, mechanics, and enthusiasts. It only takes a minute to sign up.
Sign up to join this community
Recently the 20mm cannon of an F-16 was accidentally fired on the ground by maintenance personnel at Florennes Air Base in Belgium, resulting the the destruction of another F-16 and damage to a third.
What measures do military aircraft have to prevent their weapons from being fired while the plane is on ground?
Normally with aircraft there is a sensor called a weight on wheels switch. This tells the computer that the aircraft is on the ground. The computer (or a system of relays for older air frames) will prevent any system that was designated by the owner, or required by regulations, from activating while in the ground. Also as a secondary preventative measure certain mechanical systems are also pinned in place after landing to help prevent ground actuation. However if it happened during maintenance it is very likely these systems were disabled to perform system maintenance on the cannon.
The article quoted implies that there is a sensor in the F16 to detect when the undercarriage is lowered, which functions as a a gun safety switch, but there is presumably provision for overriding this in order to perform gun testing. A variety of technical and procedural measures are designed to ensure safety with aircraft gun armament, the details varying with the specific type of weapon. The M61 20mm cannon will not function without electrical power, it is electrically rotated (when internally mounted) and fires electrically primed ammunition, so switching off the power should prevent accidental firing with this gun. Other types of cannon with reciprocating mechanisms, such as the 30mm DEFA 550 series have to be cocked or armed before they will fire, a common procedure is to prohibit pilots from doing this until the aircraft is airborne.
There are also physical safety switches, that date back to when weapons were first mounted on aircraft. Still present on modern armed aircraft. On the F16, a switch on the joystick controls selection of missiles or gun. One of it's positions is 'safe'. Obviously, that switch on the Belgian F16 wasn't in the safe position.
During WW2, there was a real problem with aircraft landing on a carrier, and the guns being discharged accidentally when the jolt of the landing and arresting caused the pilot's hand to hit the trigger on the joystick. Consequently, landing on a carrier with the gun switch not in the safe position was a serious transgression that would land a pilot in real trouble... you could kill a lot of deck crew if you discharged six .50 cal machine guns across the deck.
Even so, accidents can happen. On July 29, 1967, the USS Forrestal was seriously damaged when a Zuni air to ground missile was accidentally discharged from an F4 Phantom, striking an A4 Skyhawk waiting to take off. Piloting that Skyhawk was a young navy Lt, John S McCain. While the missile didn't detonate, it did tear open the Skyhawk's fuel tanks, starting a major fire, which led to a 1000 pound bomb detonating. 134 sailors died as a result, and hundreds were injured. It is believed that a short circuit of the firing mechanism led to the missile being discharged.
Aircraft carriers in particular can be quite dangerous. They combine high performance aircraft, high speed takeoffs and landings, plus all the fuel and munitions that the aircraft will carry, in a fairly small space. The fact that aircraft carriers don't blow up more often is a testament to the quality and discipline of it's crew.
Since the Forrestal incident, there have been no repeats of missiles being accidentally discharged on a carrier deck. Whatever measures were put in place after that, appear to have been effective.
Ok, for the F-16 to fire the gun on the ground you need, Ammo, electrical and hydraulic power, hold back tool removed, electrical safety pin removed, rounds limiter set to off or at least 100. No avionics need be powered. Master arm to arm, ground Jett to enable. Squeeze the trigger. The gun will fire until the last round switch opens because it’s out of ammo, the rounds counter if set to on hits zero, the security police shoot the guy sitting in the cockpit.
The Belgium accident had 2 major Tech Order violations.
ammunition installed during gun operational check. Without ammo, a technician will need to hold the last round bypass switch to on. FWIW that switch is just forward of the gun housing so if someone was holding it they are most likely deaf and or burned pretty bad.
gun holdback clearing tool installed and gun rotated to clear rounds from the firing cycle.
It’s been 30 years since I did my last F-16 gun ops check and I still remember how to do it and not get killed or shoot the place up.
Also to correct some other posts. The gun is electrically controlled and fired. It is rotated by a hydraulically powered motor.
The gun would not have been fired by accident. The mistake here is that they did not unload all live munitions to make the aircraft safe before functionally testing the weapons system. There are multiple safety interlocks that stop a gun from “just firing”.
To fire on the ground WoW override tools would be used, some aircraft have BUTTS switches or armament ground test switches to trick the computers into thinking the aircraft is in flight. The aircraft nav computers will need to be turned on with potentially a dummy flight plan loaded.
According to the article you linked:
the use of the onboard weapons (including the gun) is usually blocked by a fail-safe switch when the aircraft has the gear down with the purpose of preventing similar accidents.
It seems it isn't quite so "fail" or "safe", at least in this instance.
A lot of fighters have some kind of a "Master Arm" switch that brings the weapons live as well as activates some other related functionality. As discussed by this former F-15 pilot in the podcast 224 – Flying the F-15 Eagle its flown in the off position 99% of the time. There is also some discussion about HUD functionality related to the master arm options in this thread (but its Reddit so take it with a grain of salt).
In this article about refueling the F-15
As the fighters approach, they will be asked to “check nose cold and switches safe.” That simply means that all emitters are off, to include the IFF system, any ECM pods, and the radar is placed in standby mode. If the approaching receivers were in a fight prior to the rejoin, it’s critical for them to have their Master Arm switch to the OFF position and thereby safing any remaining stores aboard.
Depending on the airframe, they may slo simply unload the ordinance to prevent accidental discharge.
