From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f849b,b8d52151b7b306d2 X-Google-Attributes: gidf849b,public X-Google-Thread: 103376,a00006d3c4735d70 X-Google-Attributes: gid103376,public X-Google-ArrivalTime: 2003-12-30 10:06:52 PST Path: archiver1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.fjserv.net!kibo.news.demon.net!news.demon.co.uk!demon!phaedsys.demon.co.uk!chris From: Chris Hills Newsgroups: comp.arch.embedded,comp.lang.ada Subject: Re: Certified C compilers for safety-critical embedded systems Date: Tue, 30 Dec 2003 18:01:56 +0000 Organization: Phaedrus Systems Message-ID: References: <3fe00b82.90228601@News.CIS.DFN.DE> <3FE026A8.3CD6A3A@yahoo.com> <3bf1uvg2ntadvahfud2rg6ujk24sora6gr@4ax.com> <2u3auvogde8ktotlaq0ldiaska3g416gus@4ax.com> <20619edc.0312221020.3fd1b4ee@posting.google.com> <20619edc.0312222106.3b369547@posting.google.com> <45cs9hAbLc6$EAAx@phaedsys.demon.co.uk> <3fe9f0d7.104475725@News.CIS.DFN.DE> NNTP-Posting-Host: phaedsys.demon.co.uk Mime-Version: 1.0 X-Trace: news.demon.co.uk 1072807611 1646 80.176.226.26 (30 Dec 2003 18:06:51 GMT) X-Complaints-To: abuse@demon.net NNTP-Posting-Date: Tue, 30 Dec 2003 18:06:51 +0000 (UTC) X-Newsreader: Turnpike Integrated Version 5.01 M <7y9ouFdz6gbBVVTek6rkWKl0do> Xref: archiver1.google.com comp.arch.embedded:6366 comp.lang.ada:3957 Date: 2003-12-30T18:01:56+00:00 List-Id: In article , Chad R. Meiners writes > >"Chris Hills" wrote in message >news:fUk12TA8gB7$EA$E@phaedsys.demon.co.uk... >> I doubt it. At least not in large enough numbers to justify it >> especially as 61508 permits C (subset, with coding standard and static >> checking) to SIL-4 >> >> In effect a SPARK-C > >When you says static checking, do you include static checkers that can prove >that assertions are never volilated (within a set of assumptions)? If so >then your C subset with static checking might be in effect a SPARK-C. SPARK >supports some very nice formal verification techniques which you might be >overlooking. No. I was thinking about Lint initially but I am sure that some of the better (more expensive :-) tools will test to various criteria etc and AFAIK do what you are suggesting but I am not certain on this. any one using QAC or LDRA's tool like to comment? /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\ \/\/\/\/\ Chris Hills Staffs England /\/\/\/\/\ /\/\/ chris@phaedsys.org www.phaedsys.org \/\/ \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/