Re: Is Aunit helpful?

["Randy Brukardt" <randy@rrsoftware.com>]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 1716 bytes --]

"Yannick Duch�ne (Hibou57)" <yannick_duchene@yahoo.fr> wrote in message 
news:op.vhh4slqeule2fv@garhos...
Le Sun, 15 Aug 2010 23:47:21 +0200, Midoan <midoan.ses@gmail.com> a �crit:
...
> 3) About point #1, just wanted to say I don't want here to discourage 
> people interested in pre-post introduced in Ada 2012, to use it. No-no-no, 
> if they enjoy this, this is very good, and this will lead them to a good 
> way. Just wanted to say what should not be hidden: this is weak, as this 
> is more a step above comments. I was to say "this is just like  comments"... 
> but honestly, comment are not checked at all, so these  pre-post may be 
> viewed as "Better Comments".

Not so much "Better Comments", but "automatic pragma Asserts". I don't 
disagree with your point, but Pre/Post are better than pragma Assert in two 
ways:

(1) Pre and Post are automatically added to every call site; it's not 
possible to forget to put in a needed Assert;

(2) Pre and Post are in the specification, and thus are visible to the 
callers. That allows both the Ada compiler and other tools to do static 
analysis. The Ada compiler may be able to prove that the precondition cannot 
fail (and thus eliminate the overhead); other tools may be able to do even a 
better job. That is, well-written preconditions and postconditions can be 
statically proved. (The Ada 2012 language won't require that, because its 
beyond the state-of-the-art today to be able to decide which ones can be 
proved and which ones cannot. But I hope that we can do better in the 
future.)

Pre and Post hopefully will provide a foundation where compilers will make 
at least some of these checks statically.

                           Randy.