From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham autolearn_force=no version=3.4.4 X-Google-Thread: 103376,7e8cebf09cf80560 X-Google-NewGroupId: yes X-Google-Attributes: gida07f3367d7,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII Path: g2news1.google.com!postnews.google.com!i35g2000prd.googlegroups.com!not-for-mail From: KK6GM Newsgroups: comp.lang.ada Subject: Re: How would Ariane 5 have behaved if overflow checking were not turned off? Date: Mon, 14 Mar 2011 13:28:17 -0700 (PDT) Organization: http://groups.google.com Message-ID: <31012998-bb5c-49c8-90d9-8770e203e0de@i35g2000prd.googlegroups.com> References: <2442baf5-d53e-4e9a-bbe6-6803feead512@r19g2000prm.googlegroups.com> NNTP-Posting-Host: 12.35.64.226 Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Trace: posting.google.com 1300134498 17103 127.0.0.1 (14 Mar 2011 20:28:18 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: Mon, 14 Mar 2011 20:28:18 +0000 (UTC) Complaints-To: groups-abuse@google.com Injection-Info: i35g2000prd.googlegroups.com; posting-host=12.35.64.226; posting-account=qZVz2QoAAAAN9WxYp-9jYb7jORc4Zqwt User-Agent: G2/1.0 X-HTTP-Via: 1.1 barracudaweb.tritool.rancho:8080 (http_scan/4.0.2.6.19) X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; MDDR; .NET4.0C; .NET4.0E; InfoPath.1),gzip(gfe) Xref: g2news1.google.com comp.lang.ada:18192 Date: 2011-03-14T13:28:17-07:00 List-Id: On Mar 14, 12:25=A0pm, Yannick Duch=EAne (Hibou57) wrote: > Le Mon, 14 Mar 2011 17:17:10 +0100, KK6GM =A0 > a =E9crit:> It really all comes back to the essential question, if variab= le X is > > known, PROVEN, to never exceed the range A..B, and suddenly it does > > exceed that range, what is the correct action? =A0You can't just throw > > it away and read it again, since in the Ariane 5 case it would have > > continued to exceed its proven valid range. =A0So what do you do? > > Seems the proof was rather weak there ;) Well, if I "prove" that the length of an earth day can never be more than 25 hours, and that if some sensor measures more than 25 hours I must have a hardware failure, and then I run my system on venus and the measured day is truly more than 25 hours, what should happen?