Digital idle speed control of automotive engines: A safety problem for hybrid systems