From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,FREEMAIL_FROM autolearn=ham autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f849b,b8d52151b7b306d2 X-Google-Attributes: gidf849b,public X-Google-Thread: 103376,a00006d3c4735d70 X-Google-Attributes: gid103376,public X-Google-ArrivalTime: 2003-12-28 15:00:07 PST Path: archiver1.google.com!news2.google.com!fu-berlin.de!logbridge.uoregon.edu!msunews!not-for-mail From: "Chad R. Meiners" Newsgroups: comp.arch.embedded,comp.lang.ada Subject: Re: Certified C compilers for safety-critical embedded systems Date: Sun, 28 Dec 2003 17:59:06 -0500 Organization: Michigan State University Message-ID: References: <3fe00b82.90228601@News.CIS.DFN.DE> <3FE026A8.3CD6A3A@yahoo.com> <3bf1uvg2ntadvahfud2rg6ujk24sora6gr@4ax.com> <2u3auvogde8ktotlaq0ldiaska3g416gus@4ax.com> <20619edc.0312221020.3fd1b4ee@posting.google.com> <20619edc.0312222106.3b369547@posting.google.com> <45cs9hAbLc6$EAAx@phaedsys.demon.co.uk> NNTP-Posting-Host: arctic.cse.msu.edu X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Xref: archiver1.google.com comp.arch.embedded:6242 comp.lang.ada:3902 Date: 2003-12-28T17:59:06-05:00 List-Id: "Chris Hills" wrote in message news:GawT1aBurv7$EA8G@phaedsys.demon.co.uk... > In article , Peter Amey > writes > >(for example, > >why deep static analysis of _any_ general-purpose langauge is > >impossible; > > Interesting.... can you explain? Perhaps as a separate thread? Rice's theorem states this. It is a result of the undecidablility of the Halting problem, and it is also related to Godel's incompleteness theorem. I would suggest taking a class on computation theory, but it might suffice to read a book on computation theory and work through the problems. > >or, why systems of integrities in the better-than 10e-6 > >failures per hour class _require_ deep static analysis); > > Is that a contradiction or do you mean that you need static analysis but > it can never be 100%? No it isn't a contradiction. SPARK is not a general purpose language; it is a special purpose language (SPARK is not Turing-Complete hence Rice's theorem doesn't apply to it), which is designed to facilitate deep static analysis.