From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=unavailable autolearn_force=no version=3.4.4 X-Received: by 2002:a5d:8594:: with SMTP id f20mr9331517ioj.38.1553293399926; Fri, 22 Mar 2019 15:23:19 -0700 (PDT) X-Received: by 2002:a9d:4c05:: with SMTP id l5mr8133749otf.36.1553293399773; Fri, 22 Mar 2019 15:23:19 -0700 (PDT) Path: eternal-september.org!reader01.eternal-september.org!feeder.eternal-september.org!news.dns-netz.com!news.freedyn.net!newsreader4.netcologne.de!news.netcologne.de!peer03.ams1!peer.ams1.xlned.com!news.xlned.com!peer03.am4!peer.am4.highwinds-media.com!peer01.iad!feed-me.highwinds-media.com!news.highwinds-media.com!78no174477itl.0!news-out.google.com!y88ni177ita.0!nntp.google.com!78no174474itl.0!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail Newsgroups: comp.lang.ada Date: Fri, 22 Mar 2019 15:23:19 -0700 (PDT) In-Reply-To: Complaints-To: groups-abuse@google.com Injection-Info: glegroupsg2000goo.googlegroups.com; posting-host=96.255.209.31; posting-account=zwxLlwoAAAChLBU7oraRzNDnqQYkYbpo NNTP-Posting-Host: 96.255.209.31 References: <6e1977a5-701e-4b4f-a937-a1b89d9127f0@googlegroups.com> <6f9ea847-2903-48c8-9afc-930201f2765a@googlegroups.com> User-Agent: G2/1.0 MIME-Version: 1.0 Message-ID: Subject: Re: Intervention needed? From: Optikos Injection-Date: Fri, 22 Mar 2019 22:23:19 +0000 Content-Type: text/plain; charset="UTF-8" X-Received-Bytes: 2785 X-Received-Body-CRC: 1663694910 Xref: reader01.eternal-september.org comp.lang.ada:55933 Date: 2019-03-22T15:23:19-07:00 List-Id: On Friday, March 22, 2019 at 5:08:49 AM UTC-4, Dmitry A. Kazakov wrote: > On 2019-03-22 03:30, Randy Brukardt wrote: > > > I'm pretty sure the SPARK people are only interested in static checks, for > > the obvious reason that they are only interested in static checks in > > general. > > Not only SPARK people. From practical point of view any dynamic check is > a lingering disaster, added complexity and, in general, a lie. > > With dynamic checks you write code as if there were no branches in it, > ignoring the fact that the code branches at all places where the check > occurs. Although Dmitry & I don't often agree, this time he speaks wisdom & truth. The mathematical proof of no-leak, no-incorrect-pointer-arithmetic pointer-correctness must be 100% static (at compile-time) to be useful.