From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-0.3 required=5.0 tests=BAYES_00, REPLYTO_WITHOUT_TO_CC autolearn=no autolearn_force=no version=3.4.4 X-Google-Thread: 1094ba,276c6f784e9d53b6 X-Google-Thread: 103376,da4a02a425e7d2d5,start X-Google-Attributes: gid1094ba,gid103376,public X-Google-Language: ENGLISH,ASCII-7-bit Path: g2news1.google.com!news3.google.com!border1.nntp.dca.giganews.com!border2.nntp.dca.giganews.com!nntp.giganews.com!cyclone1.gnilink.net!spamkiller.gnilink.net!gnilink.net!trnddc07.POSTED!87bf9b22!not-for-mail From: Dan Nagle Reply-To: dnagle@erols.com Organization: Purple Sage Computing Solutions, Inc. User-Agent: Mozilla Thunderbird 0.9 (X11/20041103) X-Accept-Language: en-us, en MIME-Version: 1.0 Newsgroups: comp.lang.fortran,comp.lang.ada Subject: Re: Ariane References: <3pd2o3F9tsifU1@individual.net> <43315B62.9030105@ifremer-a-oter.fr> <0xwYe.9953$0E5.2549@news-server.bigpond.net.au> <3pfnb9Fa7jqpU2@individual.net> <8nY4f.20876$U51.10430@news-server.bigpond.net.au> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Message-ID: Date: Wed, 19 Oct 2005 00:15:16 GMT NNTP-Posting-Host: 70.21.88.198 X-Complaints-To: abuse@verizon.net X-Trace: trnddc07 1129680916 70.21.88.198 (Tue, 18 Oct 2005 20:15:16 EDT) NNTP-Posting-Date: Tue, 18 Oct 2005 20:15:16 EDT Xref: g2news1.google.com comp.lang.fortran:9199 comp.lang.ada:5790 Date: 2005-10-19T00:15:16+00:00 List-Id: Hello, I'm cross-posting this to comp.lang.ada, so we can get some more input. To c.l.a readers: sorry to barge in like this, but this discussion of the Ariane 5 failure has been going on in comp.lang.fortran for far too long. I reckon some c.l.a folks can clarify the issues. In short, robin argues that there is an inviolable rule that all exceptions must always be handled, irregardless of other engineering constraints, such as processor load. dnagle has been arguing that there were a combination of decisions, which taken together caused the Ariane 5 failure. In my view, robin is simply incorrect: engineering often requires calculated trade-offs among competing constraints. robin claims he has read the relevant ESA reports, for example, http://sunnyday.mit.edu/accidents/Ariane5accidentreport.html and/or the PDF version http://ravel.esrin.esa.it/docs/esa-x-1819eng.pdf. robin wrote: > Dan Nagle wrote in message ... >>Having the computer shut down, after putting it's error code >>on the data bus (and not on a command or error reporting bus, >>for example). > That alone meant that it was essential that ABSOLUTELY ALL > exceptions be trapped. But the shutdown was a separate engineering decision from the decision to save the cycles needed to keep the processor under 80% utilization! I've argued all along that there wasn't _one_ decision causing the failure, but rather a combination. Your hindsight has you simply fixated by the operand error issue. -- Cheers! Dan Nagle Purple Sage Computing Solutions, Inc.