From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=0.2 required=5.0 tests=BAYES_00,INVALID_MSGID, REPLYTO_WITHOUT_TO_CC autolearn=no autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 103376,5ac12f5a60b1bfe X-Google-Attributes: gid103376,public X-Google-Thread: 101deb,f96f757d5586710a X-Google-Attributes: gid101deb,public X-Google-Thread: f43e6,5ac12f5a60b1bfe X-Google-Attributes: gidf43e6,public From: Martin Tom Brown Subject: Re: Ariane 5 - not an exception? Date: 1996/08/22 Message-ID: <840734041snz@nezumi.demon.co.uk>#1/1 X-Deja-AN: 176165891 x-nntp-posting-host: nezumi.demon.co.uk references: <4t9vdg$jfb@goanna.cs.rmit.edu.au> <4tiu6e$kpm@news2.cais.com> <4up8pi$lvi@goanna.cs.rmit.edu.au> <840042660.20300.0@assen.demon.co.uk> <4vgmit$124@goanna.cs.rmit.edu.au> x-mail2news-path: nezumi.demon.co.uk organization: Nezumi reply-to: Martin@nezumi.demon.co.uk newsgroups: comp.software-eng,comp.lang.ada,comp.lang.pl1 Date: 1996-08-22T00:00:00+00:00 List-Id: In article <4vgmit$124@goanna.cs.rmit.edu.au> rav@goanna.cs.rmit.edu.au "++ robin" writes: > ANY kind of interrupt (even a trivial one) in Ariane 5 > would cause sudden death to the project (the shutdown > of the processor). That was a fundamental *design* decision - read the report. > It was the programmer's job to ensure > that such an error (number too large) never occurred under > any circumstances. Sad though it is - the specification did not require the code to work when flown along an Ariane 5 trajectory, it was *assumed* that the code would continue to work as it had for Ariane 4. No live trajectory checks of the IRS were done :( You cannot blame the programmers for inadequate specifications. Regards, -- Martin Brown __ CIS: 71651,470 Scientific Software Consultancy /^,,)__/