From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=-1.3 required=5.0 tests=BAYES_00,INVALID_MSGID
	autolearn=no autolearn_force=no version=3.4.4
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fac41,2c6139ce13be9980
X-Google-Attributes: gidfac41,public
X-Google-Thread: 1108a1,2c6139ce13be9980
X-Google-Attributes: gid1108a1,public
X-Google-Thread: 103376,3d3f20d31be1c33a
X-Google-Attributes: gid103376,public
X-Google-Thread: f43e6,2c6139ce13be9980
X-Google-Attributes: gidf43e6,public
From: Richie Bielak <richieb@XYZZYcalfp.com>
Subject: Re: Safety-critical development in Ada and Eiffel
Date: 1997/07/17
Message-ID: <33CE5507.71A0@XYZZYcalfp.com>#1/1
X-Deja-AN: 257443032
X-Nntp-Posting-Host: host043.jerseycity.interactive.net
References: <33CD1722.2D24@calfp.co.uk> <EDFz8q.E69@syd.csa.com.au>
 <33CE082E.65FF@calfp.co.uk> <33CE0BB7.10CE@XYZZYcalfp.com>
 <qw6iuy9of0l.fsf@esmeralda.enst.fr>
X-Complaints-To: Email abuse@interactive.net if this posting is inappropriate
X-Trace: news.interactive.net 869160094 22216 (None) [208.192.226.143]
Organization: Multi-cellular
Newsgroups: comp.object,comp.software-eng,comp.lang.ada,comp.lang.eiffel
Date: 1997-07-17T00:00:00+00:00
List-Id: <comp.lang.ada>


Samuel Tardieu wrote:

[...]
> 
> Well, I find the corresponding Ada code readable enough:
> 
>    select
>       delay 0.010;               --  The 10ms you were talking about
>       raise Timeout_Failure;     --  Raise an exception, or do anything else
>                                  --  you need (use a fast version of
>                                  --  your computation for example).
>    then abort
>       [...your code here...]     --  This piece of code will be
>                                  --  aborted if it is not terminated within
>                                  --  the 10ms you required above.
>    end select;
> 

That's neat. Except that a postcondition will be part of the contract
(i.e. specification) for the routine, so the caller will know what to 
expect. Your code is part of the implementation.

When you are using someone else's component you usually don't want
to look at the source.

...richie

-- 
* richieb@XYZZYnetlabs.net       - at home |  Richie Bielak        *
* richieb@XYZZYcalfp.com         - at work |                       *
*          Home page:   http://www.netlabs.net/hp/richieb          *
*        "Fight software piracy, use free software!" (me)          *
*        (Remove XYZZY  from my address before replying)           *