From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham autolearn_force=no version=3.4.4 X-Google-Thread: 103376,7d5642dc1158588b X-Google-Attributes: gid103376,public X-Google-Language: ENGLISH,ASCII-7-bit Newsgroups: comp.lang.ada Subject: Re: Ravenscar - program termination References: <87zm81txs1.fsf@ludovic-brenta.org> From: Markus E Leypold Organization: N/A Date: Tue, 30 Jan 2007 10:37:20 +0100 Message-ID: User-Agent: Some cool user agent (SCUG) Cancel-Lock: sha1:gprx7FijwhGBHw7EqjLEDuZne0g= MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii NNTP-Posting-Host: 88.72.211.30 X-Trace: news.arcor-ip.de 1170149551 88.72.211.30 (30 Jan 2007 10:32:31 +0200) X-Complaints-To: abuse@arcor-ip.de Path: g2news2.google.com!news3.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!newsfeed00.sul.t-online.de!t-online.de!newsfeed.freenet.de!news.unit0.net!newsfeed.arcor-ip.de!news.arcor-ip.de!not-for-mail Xref: g2news2.google.com comp.lang.ada:8716 Date: 2007-01-30T10:37:20+01:00 List-Id: Maciej Sobczak writes: > Ludovic Brenta wrote: > >>> Do I understand correctly that Ravenscar programs are by definition >>> running forever? What about programs that are expected to finish? >> Yes, it is my understanding as well, and I'm happy with that. >> I remember being impressed with Ada because you could write an >> infinite loop without a faked up condition. The idea being that in >> Ada the typical infinite loop would normally be terminated by >> detonation. -- Larry Wall > > :-) > >> The Ravenscar profile is specifically targeted at high-integrity >> systems, where infinite loops are, I think, the norm. > > Sorry, but I don't see anything in the concept of high-integrity > software that would make it a norm. High-integrity software is a set > of quality objectives, whereas infinite loops are (or aren't) part of > system requirements. These should stay independent, even though I > understand that expectations for both often come in pairs. > > OK, just nit-picking. ;-) > I wanted to be sure that I understand it correctly, thanks. > Still, it looks like I cannot say: > > pragma Profile(Ravenscar); > > in my Hello World program even though this program meets the > objectives of the profile. That's not fair! :-) Well, it terminates. What does termination mean in a "high integrity" embedded system -- does the hardware go away? :-). I think if someone wants to shutdown such a system the thing happening is, that every task goes into idle mode and the last thing a controlling task does, is, to display (or otherwise indicate) "you may now shut off power, the countdown to eject the warp core has been stopped" or something like this. :-) Regards -- Markus