From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=-0.3 required=5.0 tests=BAYES_00,
	REPLYTO_WITHOUT_TO_CC autolearn=no autolearn_force=no version=3.4.4
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f849b,b8d52151b7b306d2
X-Google-Attributes: gidf849b,public
X-Google-Thread: 103376,a00006d3c4735d70
X-Google-Attributes: gid103376,public
X-Google-ArrivalTime: 2004-01-11 05:35:46 PST
Path: 
 archiver1.google.com!news2.google.com!fu-berlin.de!uni-berlin.de!dialin-145-254-040-186.arcor-ip.NET!not-for-mail
From: "Dmitry A. Kazakov" <mailbox@dmitry-kazakov.de>
Newsgroups: comp.arch.embedded,comp.lang.ada
Subject: Re: Certified C compilers for safety-critical embedded systems
Followup-To: comp.arch.embedded
Date: Sun, 11 Jan 2004 14:42:17 +0100
Organization: At home
Message-ID: <btrjfg$a0p0r$1@ID-77047.news.uni-berlin.de>
References: <3fe00b82.90228601@News.CIS.DFN.DE>
 <5802069.JsgInS3tXa@linux1.krischik.com>
 <1072464162.325936@master.nyc.kbcfp.com>
 <1563361.SfB03k3vvC@linux1.krischik.com>
 <11LvOkBBXw7$EAJw@phaedsys.demon.co.uk> <3ff0687f.528387944@News.CIS.DFN.DE>
 <1086072.fFeiH4ICbz@linux1.krischik.com> <3ff18d4d.603356952@News.CIS.DFN.DE>
 <1731094.1f7Irsyk1h@linux1.krischik.com> <3ff1b8ef.614528516@News.CIS.DFN.DE>
 <3FF1E06D.A351CCB4@yahoo.com> <3ff20cc8.635997032@News.CIS.DFN.DE>
 <bsumbs$k9e$2@a1-hrz.uni-duisburg.de> <AttdI2KzFEC2@eisner.encompasserve.org>
 <K5ydnZZB5rs1BWKi4p2dnA@comcast.com>
 <VK2Mb.2414$Qq.1124@nwrdny01.gnilink.net>
Reply-To: mailbox@dmitry-kazakov.de
NNTP-Posting-Host: dialin-145-254-040-186.arcor-ip.net (145.254.40.186)
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7Bit
X-Trace: news.uni-berlin.de 1073828145 10511387 145.254.40.186 ([77047])
User-Agent: KNode/0.7.2
Xref: archiver1.google.com comp.arch.embedded:7259 comp.lang.ada:4329
Date: 2004-01-11T14:42:17+01:00
List-Id: <comp.lang.ada>

Hyman Rosen wrote:

> Robert I. Eachus wrote:
>> The Airbus 320 should bury the idea that theorem provers can result in
>> safe software.
> 
> It's always been my contention that writing the specifications which you
> will then prove that a program obeys is exactly as hard as writing the
> program itself.

Maybe, but nobody showed any better way. Or do you think that XP (eXtreme
Programming) did?

-- 
Regards,
Dmitry A. Kazakov
www.dmitry-kazakov.de