From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,FREEMAIL_FROM autolearn=ham autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f849b,b8d52151b7b306d2 X-Google-Attributes: gidf849b,public X-Google-Thread: 103376,a00006d3c4735d70 X-Google-Attributes: gid103376,public X-Google-ArrivalTime: 2003-12-24 14:59:57 PST Path: archiver1.google.com!postnews1.google.com!not-for-mail From: snarflemike@yahoo.com (Mike Silva) Newsgroups: comp.arch.embedded,comp.lang.ada Subject: Re: Certified C compilers for safety-critical embedded systems Date: 24 Dec 2003 14:59:57 -0800 Organization: http://groups.google.com Message-ID: <20619edc.0312241459.65106afe@posting.google.com> References: <3fe00b82.90228601@News.CIS.DFN.DE> <3FE026A8.3CD6A3A@yahoo.com> <3bf1uvg2ntadvahfud2rg6ujk24sora6gr@4ax.com> <2u3auvogde8ktotlaq0ldiaska3g416gus@4ax.com> <20619edc.0312221020.3fd1b4ee@posting.google.com> <20619edc.0312222106.3b369547@posting.google.com> <45cs9hAbLc6$EAAx@phaedsys.demon.co.uk> NNTP-Posting-Host: 165.247.217.217 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Trace: posting.google.com 1072306797 3228 127.0.0.1 (24 Dec 2003 22:59:57 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: Wed, 24 Dec 2003 22:59:57 +0000 (UTC) Xref: archiver1.google.com comp.arch.embedded:6085 comp.lang.ada:3793 Date: 2003-12-24T14:59:57-08:00 List-Id: Chris Hills wrote in message news:<45cs9hAbLc6$EAAx@phaedsys.demon.co.uk>... > In article <20619edc.0312222106.3b369547@posting.google.com>, Mike Silva > writes > > > >Some more interesting reading (note that MISRA acknowledges that there > >are better languages than C for safety-critical work): > > That will change. I'd like to hear your thoughts on the noted 100:1 residual error improvement between SPARK code and C code, all DO-178B level A. Do you think the C code examined did not use "a subset, coding standards and static analysis"? If they didn't, who does? Is your claim that, properly used, C can yield equivalent residual error rates as SPARK? If so, why do you think the code examined in the study was a 100 times worse? Mike