From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=-1.3 required=5.0 tests=BAYES_00,INVALID_MSGID
	autolearn=no autolearn_force=no version=3.4.4
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 103376,42427d0d1bf647b1
X-Google-Attributes: gid103376,public
From: Mike Young <mikey@mcs.com>
Subject: Re: Ada Core Technologies and Ada95 Standards
Date: 1996/04/01
Message-ID: <3160A82A.49AB@mcs.com>#1/1
X-Deja-AN: 145351785
references: <00001a73+00002c20@msn.com> <dewar.827809782@schonberg>
 <828038680.5631@assen.demon.co.uk> <dewar.828062076@schonberg>
 <828127251.85@assen.demon.co.uk> <4jm0jv$9l2@fozzie.sun3.iaf.nl>
 <dewar.828397516@schonberg>
content-type: text/plain; charset=us-ascii
organization: Fen Software, Inc.
mime-version: 1.0
newsgroups: comp.lang.ada
x-mailer: Mozilla 2.0GoldB1 (Win95; I)
Date: 1996-04-01T00:00:00+00:00
List-Id: <comp.lang.ada>

Robert Dewar wrote:
> 
> iJohn McCabe said
> 
> "`` I was obviously thinking of validation of Ada compilers in the same
>    way that _my_ software is validated - i.e a full set of test cases
>    proving that _all_ requirements have been met. ''"
> 
> I and others pointed out that this is obviously false for complex
> software of any kind. If John really thinke he can provide this
> proof via test cases, he is deluding himself (and his clients).
> 
> What is more interesting is that even a VERY simple program cannot
> be provied by simple input-output tests. Consider the following
> program to add the numbers from 1 to 10.
> 
> with Text_IO; use Text_IO;
> 
> procedure s is
>    sum : integer;
> begin
>    for j in 1 .. 10 loop
>       sum := sum + j;
>    end loop;
> 
>    Put_Line (Integer'Image (j));
> end;
> 
> this works fine on my machine. exhaustive testing (one case!!) proves
> that it works, but of course it has a fatal problem, and may not work
> tomorrow

=======
I don't see the connection... Are you saying validation is 
happen-stance, that the brightest minds can't come up with a test suite 
to test all expected behavior? Your "test" seems reasonable enough to 
validate that integer var's are initialized to zero by default; ehhh, at 
least the few times you ran the test case...

Mike.