The Power of 10: Rules for Developing Safety-Critical Code [pdf]

Re:The Power of 10: Rules for Developing Safety-Critical Cod... by LorenPechtel on Wednesday June 28, 2023 @03:24PM (#36511322)

I think they're being too restrictive on recursion. They're excluding it based on not being able to prove it will terminate--but you can do that with a time-to-die counter.

[ Parent | on HN ]

Re:The Power of 10: Rules for Developing Safety-Critical Cod... by oleganza on Wednesday June 28, 2023 @03:35PM (#36511471)

Stack is a dynamic memory of sorts and some languages (Rust) heavily optimize towards keeping things on stack so that your data types could turn out to be quite big.

It is hard to determine the max value for time-to-die counter if your stack footprint is hard to estimate due to nested structs/enums/unions/generics/optimizations.

[ Parent | on HN ]

Re:The Power of 10: Rules for Developing Safety-Critical Cod... by hedora on Wednesday June 28, 2023 @11:45PM (#36516076)

I wish there was a “this is tail recursive; if you cannot turn it into a loop, fail to compile” compiler annotation for C++/rust.

[ Parent | on HN ]

Re:The Power of 10: Rules for Developing Safety-Critical Cod... by Svetlitski on Wednesday June 28, 2023 @11:56PM (#36516132)

Clang provides the "musttail" attribute for C and C++:

https://clang.llvm.org/docs/AttributeReference.html#musttail

[ Parent | on HN ]