Re: Silly and stupid post-condition or not ?

[BrianG <me@null.email>]

On 02/03/2012 03:12 AM, Simon Wright wrote:
> "Randy Brukardt"<randy@rrsoftware.com>  writes:
>
>> I think that things like SPARC can actually be harmful, as they focus
>> attention on the wrong things. There is a lot that can be proved about
>> dynamic constructs in Ada (far more than in other most languages), and
>> it is unfortunate that instead of taking advantage of this (and making
>> widely usable results), most of effort has been on proving the Fortran
>> 66 subset of Ada. (I do see signs that this is changing, finally, but
>> I think a lot of the work should have been done years ago.)
>
> (SPARK)
>
> Strong agreement here. I don't think I'd have started on any of my own
> projects if I'd had to use SPARK. Businesses will, iff they're in an
> area where the purchaser requires it (avionics, for example). Does
> anywone know what software standards Toyota use? MISRA C?
According to Embedded Systems Design (I'd have to find the ref's), they 
use none - they farm out the job.

-- 
---
BrianG
000
@[Google's email domain]
.com