News for hackers. Stuff that matters.

A comment on The Power of Ten – Rules for Developing Safety Critical Code. Parent comment

Re:The Power of Ten – Rules for Developing Safety Critical Code by dragonwriter on Thursday July 14, 2016 @03:15PM (#12096483)
If I read that article right, it sounds like the software fault attributed to the crash is that the "control laws" that the software implemented were improperly chosen, not that the software did not function as intended.

Which is to say, a serious problem, but if we take "bug" to mean a difference between designed function and realized function, not a "bug", and therefore not something which should tarnish the record of the coding style to which the bug-free nature of the Grippen software is attributed. The problem seems to have been at a different level than coding.

[ Parent | on HN ]
Re:The Power of Ten – Rules for Developing Safety Critical Code by safeignorance on Thursday July 14, 2016 @11:46PM (#12098833)
You're correct to point out that the coding style isn't to blame for the software fault. And IMO The last paragraph of the article hints at the most probable fundamental cause.

But I just don't buy that this was not a software fault. It clearly was a case of a faulty software specification.

> The problem seems to have been at a different level than coding.

This makes me queasy. Software engineers working on these sorts of systems -- -- or at least a few senior ones -- should understand enough of the domain to say "this spec is not adequate" or "bad things might happen under conditions xyz; what's the correct behavior in these cases?". And of course all software should notice and then degrade gracefully when assumptions are observably violated.

To absolve the software engineer of any responsibility for understanding the context surrounding his software is to wrongly assume there's not much to software engineering beyond programming to someone else's spec.

[ Parent | on HN ]
Re:The Power of Ten – Rules for Developing Safety Critical Code by dragonwriter on Friday July 15, 2016 @08:53AM (#12100592)
I absolutely see it as a software problem and a software engineering problem, just one orthogonal to considerations of the value of the coding style adopted in preventing code that deviated from specifications.
[ Parent | on HN ]