From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.3 required=5.0 tests=BAYES_00,INVALID_MSGID autolearn=no autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f43e6,5ac12f5a60b1bfe X-Google-Attributes: gidf43e6,public X-Google-Thread: 103376,5ac12f5a60b1bfe X-Google-Attributes: gid103376,public X-Google-Thread: 101deb,f96f757d5586710a X-Google-Attributes: gid101deb,public From: stt@henning.camb.inmet.com (Tucker Taft) Subject: Re: Ariane 5 - not an exception? Date: 1996/07/31 Message-ID: #1/1 X-Deja-AN: 171261384 sender: news@inmet.camb.inmet.com (USENET news) x-nntp-posting-host: henning.camb.inmet.com references: <4tl5og$p2s@news.sei.cmu.edu> followup-to: comp.software-eng,comp.lang.ada,comp.lang.pl1 organization: Intermetrics, Inc. newsgroups: comp.software-eng,comp.lang.ada,comp.lang.pl1 Date: 1996-07-31T00:00:00+00:00 List-Id: Nancy Mead (nrm@sei.cmu.edu) wrote: : ... : The Space Shuttle software has 4 computers running the same software, and : a 5th running different software (same function, different development team). This mode is only used during critical phases of a mission. In other phases, the "backup" computer may be used for independent activities. : I'm not sure about the Apollo software, although I think there were some : calculations that could be done on-board as well on the primary computer. : You may recall that one of the early shuttle launches was cancelled because : of a timing difference between the 4 computers and the single computer. Not really. It was a timing difference among the 4 computers running identical software. The timing difference was detected by the 5th ("backup") computer, and it ordered the shut-down. : ... This : was indeed an intermittent software error that caused the problem, and the : glitch resulted in cancellation of the launch in that particular case. Of : course, error recovery was a lot less sophisticated in those days, and : it was probably impossible to isolate the cause of the discrepancy in real : time and proceed with the launch. It was not trivial to determine the cause, and it is highly unlikely it could have been determined in "real time," even using more "sophisticated" error recovery. The problem related to the fact that the computers were started almost exactly on a clock tick, and 2 of the computers got one time, and the other 2 got a time one tick later. : I was not one of the developers, but I was at IBM Federal Systems HQ at the : time, and IBM FSD was one of the development organizations. I believe : Rockwell (the prime contractor) developed the software that ran on the single : computer, but it might have been another subcontractor. The backup flight software was developed by Intermetrics, as a subcontractor to Rockwell. For what it is worth, the Space Shuttle software is developed in the language Hal/S, which was also developed by Intermetrics ;-). -- -Tucker Taft stt@inmet.com http://www.inmet.com/~stt/ Intermetrics, Inc. Cambridge, MA USA