Re: Working with incompetent adaists / unsafe typing war story

["Jeffrey R. Carter" <spam@spam.com>]

Simon Clubley wrote:

> Given the level of documentation these certification efforts are reported to
> require, how does something like that actually get certified for production
> use ?

There are a number of things that are done for certification. For DO-178B code, 
they manually examine the generated object code to make sure that it looks as 
expected, for example.

Then, of course, they do lots of testing. When their tests no longer show the 
presence of errors, they assume that means the absence of errors. If it turns 
out the assumption was wrong, that means they need more tests.

You have to remember that such certification can and is granted to SW in 
assembler. Ada with thousands of global variables is probably no worse than that.

-- 
Jeff Carter
"I spun around, and there I was, face to face with a
six-year-old kid. Well, I just threw my guns down and
walked away. Little bastard shot me in the ass."
Blazing Saddles
40