From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-0.3 required=5.0 tests=BAYES_00, REPLYTO_WITHOUT_TO_CC autolearn=no autolearn_force=no version=3.4.4 Path: eternal-september.org!reader01.eternal-september.org!reader02.eternal-september.org!news.eternal-september.org!mx02.eternal-september.org!feeder.eternal-september.org!aioe.org!.POSTED!not-for-mail From: "Dmitry A. Kazakov" Newsgroups: comp.lang.ada Subject: Re: {Pre,Post}conditions and side effects Date: Wed, 13 May 2015 11:35:54 +0200 Organization: cbb software GmbH Message-ID: References: <2430252d-52a1-4609-acef-684864e6ca0c@googlegroups.com><0a718b39-ebd3-4ab5-912e-f1229679dacc@googlegroups.com><9ee5e186-5aaa-4d07-9490-0f9fdbb5ca18@googlegroups.com><87tww5296f.fsf@adaheads.sparre-andersen.dk><871tj9dp5b.fsf@theworld.com> <87pp6a1u9w.fsf@jester.gateway.sonic.net> <877fsd1xb5.fsf@jester.gateway.sonic.net> Reply-To: mailbox@dmitry-kazakov.de NNTP-Posting-Host: enOx0b+nfqkc2k+TNpOejg.user.speranza.aioe.org Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Complaints-To: abuse@aioe.org User-Agent: 40tude_Dialog/2.0.15.1 X-Notice: Filtered by postfilter v. 0.8.2 Xref: news.eternal-september.org comp.lang.ada:25862 Date: 2015-05-13T11:35:54+02:00 List-Id: On Tue, 12 May 2015 17:01:45 -0500, Randy Brukardt wrote: > "Paul Rubin" wrote in message > news:877fsd1xb5.fsf@jester.gateway.sonic.net... >> "Randy Brukardt" writes: >>>> Randy, is that a real possibility with SPARK--to have a predicate that >>>> says that an array is sorted >>> I have no idea, SPARK is not at all my idea of how Ada should work. >> >> Hmm, ok, I had been confused on that issue. >> >> So can you say what the predicate for a sorted array would look like in >> Janus/ADA, and how the compiler would verify it? > > I answered that somewhere else in this thread (it just uses appropriate > predicates, usually "Dynamic_Predicates" since static predicates cannot > contain anything useful for composite types). How so? Actually, the "sorted" predicate of an operation is rubbish. The proper design is a composite type Sorted_Array with an *invariant* that ensures the array sorted. The invariant must be static, of course, as everything else regarding correctness. -- Regards, Dmitry A. Kazakov http://www.dmitry-kazakov.de