From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-0.3 required=5.0 tests=BAYES_00, REPLYTO_WITHOUT_TO_CC autolearn=no autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 103376,22c9fbc37d426c0c X-Google-Attributes: gid103376,public X-Google-ArrivalTime: 2003-08-04 19:25:19 PST Path: archiver1.google.com!news1.google.com!newsfeed.stanford.edu!headwall.stanford.edu!newshub.sdsu.edu!elnk-nf2-pas!newsfeed.earthlink.net!stamper.news.pas.earthlink.net!stamper.news.atl.earthlink.net!harp.news.atl.earthlink.net!not-for-mail From: Richard Riehle Newsgroups: comp.lang.ada Subject: Re: F22 Raptor in slashdot.org Date: Mon, 04 Aug 2003 19:29:12 -0700 Organization: AdaWorks Software Engineering Message-ID: <3F2F1678.B7DC5E76@adaworks.com> References: <20030803131158420-0500@library.airnews.net> Reply-To: richard@adaworks.com NNTP-Posting-Host: 3f.bb.a9.9a Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Server-Date: 5 Aug 2003 02:25:19 GMT X-Mailer: Mozilla 4.7 [en] (Win98; I) X-Accept-Language: en Xref: archiver1.google.com comp.lang.ada:41189 Date: 2003-08-05T02:25:19+00:00 List-Id: Robert Love wrote: > In Dale > Stanbrough wrote: > > There's been a mention of the F22 Raptor over on slashdot.org. > > If anyone knows about the programming that has gone into this > > it might be worthwhile posting some follow up info. > > I was going to ask about this. If I remember, the new code is in C++ > and the legacy stuff is Ada. I don't know percentages, or if there will > be a public report on what software is causing the reboots to be needed. 1) JSF is scheduled to be predominantly C++ and C. Ada will be used for some systems. 2) Raptor uses a lot of Ada as well as other languages. 3) While Ada may be better suited to the development of military and commercial avionics and other safety-critical software, the development is still carried out by fallible humans. A good tool will help, but the old adage, "A fool with a tool is still a fool" continues to hold true. 4) The complexity of both JSF and Raptor exceeds anything previously attempted. Large, complex projects that follow the "grand design" process are likely to have a huge number of defects simply because of their using "grand design." 5) While I believe Ada scales up better than C++ in this kind of system, there are ways that skilled developers can use a limited version of C++ to achieve a modesly satisfactory result. Unfortunately, I have little confidence that those developers will limit themselves to only those aspects of C++ that are safe. The temptation to do otherwise is too great. 6) When a system written in Ada does fail, we must be honest enough to admit that it was created in Ada. All the excuses we make sound like excuses. I have seen excellent projects writtten in Ada -- other Ada projects that would, in the words of a mythical specials forces colonel, "make a billy goat puke." 7) Finally, I do believe that, all other things being equal, a programming team has a greater probability of success using Ada than C++ or other alternatives. Richard Riehle