From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,FREEMAIL_FROM
	autolearn=unavailable autolearn_force=no version=3.4.4
Path: 
 border1.nntp.dca.giganews.com!nntp.giganews.com!goblin2!goblin.stu.neva.ru!aioe.org!.POSTED!not-for-mail
From: =?utf-8?Q?Yannick_Duch=C3=AAne_=28Hibou57?= =?utf-8?Q?=29?=
 <yannick_duchene@yahoo.fr>
Newsgroups: comp.lang.ada
Subject: Re: Heartbleed
Date: Sat, 12 Apr 2014 20:22:40 +0200
Organization: Ada @ Home
Message-ID: <op.xd7un2wjule2fv@cardamome>
References: <1ljwj8f.1wqbhvuabsdw1N%csampson@inetworld.net>
 <51c7d6d4-e3be-44d5-a4ce-f7e875345588@googlegroups.com>
 <li9g34$9q8$1@dont-email.me> <%J32v.70539$kp1.45343@fx14.iad>
NNTP-Posting-Host: aj6W7pNyVjZwdnARGbUbeg.user.speranza.aioe.org
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed; delsp=yes
Content-Transfer-Encoding: Quoted-Printable
X-Complaints-To: abuse@aioe.org
User-Agent: Opera Mail/12.16 (Linux)
X-Notice: Filtered by postfilter v. 0.8.2
Xref: number.nntp.dca.giganews.com comp.lang.ada:185706
Date: 2014-04-12T20:22:40+02:00
List-Id: <comp.lang.ada>

Le Sat, 12 Apr 2014 06:58:29 +0200, Shark8 <OneWingedShark@gmail.com> a =
 =

=C3=A9crit:
>> That compiler would be written in plain C making it easier to bring u=
p
>> in a new environment with foreign compilers.
>
> I disagree; the compilers we build should *not* be dependent on C. -- =
 =

> There are too many easy-to-make errors, mistakes, and  =

> implementation-dependencies to really ensure that such a compiler is  =

> good. Indeed, I would argue that we need compilers built on  =

> formal-methods and verified to be correct.

That's precisely the case, there are formally specified subsets of C (so=
me  =

large enough to cover near to all of C) and obviously, formal models for=
  =

these subsets of C.

I don't really enjoy it, because it relies on Coq (which relies on OCaml=
,  =

=E2=80=A6 unsafe to me), here is still the most famous formally verified=
 C  =

compiler with a formal C model: http://compcert.inria.fr/ (requires Coq =
 =

and OCaml).

I however believe formal methods with Ada and/or SML (this one is the mo=
st  =

easy path to me), is more human friendly than formal methods with C. It =
 =

also has a benefit, in case a formally developed piece of software, is  =

tweaked without formal methods any more (it will surely breaks something=
,  =

still less than with C).


-- =

=E2=80=9CSyntactic sugar causes cancer of the semi-colons.=E2=80=9D [1]
=E2=80=9CStructured Programming supports the law of the excluded muddle.=
=E2=80=9D [1]
[1]: Epigrams on Programming =E2=80=94 Alan J. =E2=80=94 P. Yale Univers=
ity