From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=0.5 required=5.0 tests=BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,HEADER_SPAM,REPLYTO_WITHOUT_TO_CC autolearn=no autolearn_force=no version=3.4.4 X-Google-Thread: 103376,fe98dee761ce56c8 X-Google-NewGroupId: yes X-Google-Thread: 100850,fe98dee761ce56c8 X-Google-NewGroupId: yes X-Google-Attributes: gida07f3367d7,gid7c87141b2d,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII-7-bit Path: g2news2.google.com!news2.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!nx02.iad01.newshosting.com!209.197.12.242.MISMATCH!nx01.iad01.newshosting.com!newshosting.com!newspump.sol.net!posts.news.megabitz.net!nnrp3-asbnva.megabitz.net!not-for-mail From: "Dmitry A. Kazakov" Newsgroups: comp.lang.ada,comp.lang.c.moderated Subject: Re: safety critical automotive software Date: Fri, 24 Dec 2010 13:11:24 -0600 (CST) Organization: cbb software GmbH Sender: clcm@herd.plethora.net Message-ID: References: Reply-To: mailbox@dmitry-kazakov.de User-Agent: 40tude_Dialog/2.0.15.1 Return-Path: X-Old-complaints-to: usenet-abuse@arcor.de Content-Type: text/plain; charset="us-ascii" Mime-Version: 1.0 X-Old-trace: DXC=i@afBBaZAjEj7E:bke<5HF4IUKW2;YAK@ImVFT><6FU_Q:4mR^W\Y;gN2lO]XOb^A5iOJ On Thu, 16 Dec 2010 12:45:05 -0600 (CST), Rolf wrote: > The upcoming ISO 26262 highly recommends "enforcement of strong > typing" [1]. There is a corresponding footnote saying " The objective > [...] is to impose principles of strong typing where these are not > inherent in the language". > > Does anybody know if Ada has ever been used (in ECU series production) > in an automotive application. Not to my knowledge. > How do you achieve the "principles of strong typing" using C? AFAIK, they don't care. Then I guess that the recommendation does not really mandate or even mean *application* of strong typing in the software design. I.e. you could be free to deploy int8, unsigned16 instead of meaningful user-defined numeric data types of domain specific ranges and defined behavior. So "principles of strong typing" in C could simply mean treating warnings about comparing signed with unsigned ints as errors. -- Regards, Dmitry A. Kazakov http://www.dmitry-kazakov.de -- comp.lang.c.moderated - moderation address: clcm@plethora.net -- you must have an appropriate newsgroups line in your header for your mail to be seen, or the newsgroup name in square brackets in the subject line. Sorry.