From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham autolearn_force=no version=3.4.4 X-Google-Thread: 103376,7e8cebf09cf80560 X-Google-NewGroupId: yes X-Google-Attributes: gida07f3367d7,domainid0,public,usenet X-Google-Language: ENGLISH,UTF8 Path: g2news1.google.com!news3.google.com!feeder.news-service.com!kanaga.switch.ch!switch.ch!news.tele.dk!news.tele.dk!small.news.tele.dk!feed118.news.tele.dk!dotsrc.org!filter.dotsrc.org!news.dotsrc.org!not-for-mail Content-Type: text/plain; charset=utf-8; format=flowed; delsp=yes Newsgroups: comp.lang.ada Subject: Re: How would Ariane 5 have behaved if overflow checking werenotturned off? References: <4d80b140$0$43832$c30e37c6@exi-reader.telstra.net> <4d81491c$0$43833$c30e37c6@exi-reader.telstra.net> Date: Sun, 20 Mar 2011 18:06:25 +0100 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit From: "Martin Krischik" Organization: Martin Krischik, Softwareentwicklung Message-ID: User-Agent: Opera Mail/11.01 (MacIntel) NNTP-Posting-Host: 95.174.233.211 X-Trace: news.sunsite.dk DXC=LU^QbWlKSN4=M\fUi`VZV6B]=RkIg7 X-Complaints-To: staff@sunsite.dk Xref: g2news1.google.com comp.lang.ada:18329 Date: 2011-03-20T18:06:25+01:00 List-Id: Am 17.03.2011, 00:39 Uhr, schrieb robin : > Martin Krischik wrote in message ... > In a real-time system, EVERY possibility must be tested for. > >> The software was correct >> for the Ariane 4. > > No it wasn't. > It had unchecked overflow. In my example (which you cut away): If you add a “overload” detector to the suspension and a “overload” lamp to the dashboard: Would it make the pickup truck dive any better when overloaded 16 time over? So, if you had added an overflow detection: What would you have done in the exception handler? Martin -- Martin Krischik mailto://krischik@users.sourceforge.net https://sourceforge.net/users/krischik