Re: Certified C compilers for safety-critical embedded systems

[Martin Krischik <krischik@users.sourceforge.net>]

Hyman Rosen wrote:

> CBFalconer wrote:
>> You live in a highly peculiar world. :-)
>> Martin means array indices, not numbers, IMO.
> 
> Counting in the real world is done in many peculiar ways.
> For example, at least in the US, house numbers tend to be
> even on one side of the street and odd on the other.
> 
> Counting in computer programs should be done in a way most
> convenient for the programs to do their work.

Here you hit the main difference between the Pascal/Modula-2/Ada fraction
and the C/C++ fraction.

Those Pascal/Modula-2/Ada fraction belive that computer programs should
reseble the real word as much as possible and translating beween real world
and computer world should be done by the compiler and the optimizer.

Because once the compiler and optimizer have learned to do that will do it 
right every time. Unlike humans.

I have a lot more experience in C++ then in Ada jet I make a lot more little
mistakes in C++ then in Ada. Most of which are type convertions where there
is no type is to be converted.

And of course I use warning level 4 to tell me about unsuitable type
convertions but it does not help. Mostly because the 3rd party libraries
(incl. the STL) are not compatible with warning level 4.

From my experience 10 to 1 (10 times as many silly little mistakes in C++)
is realistic.

And, unlike the normal C/C++ developer, who take these bugs K&R given, I
know that an Ada compiler would have told me that I am doing something
silly.

With Regards

Martin

-- 
mailto://krischik@users.sourceforge.net
http://www.ada.krischik.com