From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham autolearn_force=no version=3.4.4 X-Google-Thread: a07f3367d7,dbbbb21ed7f581b X-Google-Attributes: gida07f3367d7,public,usenet X-Google-NewGroupId: yes X-Google-Language: ENGLISH,ASCII-7-bit Path: g2news1.google.com!news3.google.com!proxad.net!feeder1-2.proxad.net!newsfeed.straub-nv.de!noris.net!newsfeed.arcor.de!newsspool1.arcor-online.net!news.arcor.de.POSTED!not-for-mail Date: Tue, 08 Dec 2009 11:06:54 +0100 From: Georg Bauhaus User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812) MIME-Version: 1.0 Newsgroups: comp.lang.ada Subject: Re: Operation can be dispatching in only one type References: <025105f2-5571-400e-a66f-ef1c3dc9ef32@g27g2000yqn.googlegroups.com> <4b150869$0$6732$9b4e6d93@newsspool2.arcor-online.net> <18vlg095bomhd.8bp1o9yysctg$.dlg@40tude.net> <4b152ffe$0$7615$9b4e6d93@newsspool1.arcor-online.net> <19nhib6rmun1x$.13vgcbhlh0og9$.dlg@40tude.net> <4b1557d0$0$7623$9b4e6d93@newsspool1.arcor-online.net> <4b15bf2b$0$7623$9b4e6d93@newsspool1.arcor-online.net> <1jcbtmi5rztyp$.norvlhez9i9$.dlg@40tude.net> <4b179ffb$0$6591$9b4e6d93@newsspool3.arcor-online.net> <1gcigitaii0u0.1psu2vj52e66g$.dlg@40tude.net> <1wv3of2u7rbx8.4a6yeffk4uf3.dlg@40tude.net> In-Reply-To: <1wv3of2u7rbx8.4a6yeffk4uf3.dlg@40tude.net> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Message-ID: <4b1e253f$0$6725$9b4e6d93@newsspool2.arcor-online.net> Organization: Arcor NNTP-Posting-Date: 08 Dec 2009 11:06:55 CET NNTP-Posting-Host: b6704239.newsspool2.arcor-online.net X-Trace: DXC=JbmRPPl1kbm016@cHD@m;jA9EHlD;3Ycb4Fo<]lROoRa8kFjLh>_cHTX3jm@^9T1@;:=^f X-Complaints-To: usenet-abuse@arcor.de Xref: g2news1.google.com comp.lang.ada:8348 Date: 2009-12-08T11:06:55+01:00 List-Id: Dmitry A. Kazakov schrieb: > In my view pre-/postconditions and > invariants should be static, used strictly for program correctness proofs. > Subtypes should complement them for dynamic run-time checks (recoverable > faults). > Hm. What would be your subtype based expression for generic type E is private; package Stacks is type Stack is private; procedure push (Modified_Stack : in out Stack; Another : Element) with pre => not Full (Modified_Stack), post => Size (Modified_Stack'Exit) = Size (Modified_Stack); procedure pop (Modified_Stack : in out Stack) with pre => not Empty (Modified_Stack), post => Empty (Modified_Stack);