From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 103376,c617ae447ca32f2f X-Google-Attributes: gid103376,public X-Google-Thread: ff121,3ae3fa74ecb04ab8 X-Google-Attributes: gidff121,public X-Google-ArrivalTime: 2002-03-29 12:57:02 PST Path: archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed1.earthlink.net!newsfeed2.earthlink.net!newsfeed.earthlink.net!newsfeed0.news.atl.earthlink.net!news.atl.earthlink.net!news.mindspring.net!not-for-mail From: "Michael Feathers" Newsgroups: comp.software.extreme-programming,comp.lang.ada Subject: Re: Ariane Failure Date: Fri, 29 Mar 2002 15:56:44 -0500 Organization: MindSpring Enterprises Message-ID: References: <3CA4B8E5.72909C9B@adaworks.com> NNTP-Posting-Host: d1.56.a3.ce X-Server-Date: 29 Mar 2002 20:56:42 GMT X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2462.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2462.0000 Xref: archiver1.google.com comp.software.extreme-programming:12767 comp.lang.ada:21862 Date: 2002-03-29T20:56:42+00:00 List-Id: "Richard Riehle" wrote in message news:3CA4B8E5.72909C9B@adaworks.com... > rjk wrote: > > > What is XPers response to this? (I was going to ask a more specific > > question, but I thought I'd leave it broad until an interesting question is > > found). > > The problem with Ariane V begins with Systems Engineering management. > The decisions about what to do when an exception occurs were wrong, and > not tested. Although Design By Contract might have helped, I doubt that > Eiffel would have been appropriate because of other issues related to > Eiffel. I like Eiffel, but don't consider it appropriate for a project such > as Ariane V. The SPARK approach to Design By Contract (they don't > call it that, but that is what it is) could have worked well, especially > since it was programmed in Ada. By the way, the Ada code worked as > it was directed to work, but it was given bad directions. IIRC, there's also the issue of casting integers across sizes. It is great when you can hide representation and promote or demote its size as needed. Michael Feathers www.objectmentor.com