←back to thread

The C++ standard for the F-35 Fighter Jet [video]

(www.youtube.com)
327 points AareyBaba | 1 comments | 07 Dec 25 18:07 UTC | HN request time: 0s | source
Show context
barfoure ◴[07 Dec 25 18:29 UTC] No.46183842[source]▶
Do avionics in general subscribe to MISRA C/C++ or do they go even further with an additional (or different) approach?
replies(3): >>46183870 #>>46184021 #>>46184148 #
stackghost ◴[07 Dec 25 19:06 UTC] No.46184148[source]▶
Depends on the company in my experience. I've seen some suppliers that basically just wire up the diagram in Matlab/simulink and hit Autocode. No humans actually touch the C that comes out.

Honestly I think that's probably the correct way to write high reliability code.

replies(2): >>46184199 #>>46192932 #
garyfirestorm ◴[07 Dec 25 19:13 UTC] No.46184199[source]▶
You’re joking right? That autogenerated code is generally garbage and spaghetti code. It was probably the reason for Toyotas unintended acceleration glitch.
replies(6): >>46184323 #>>46184469 #>>46184508 #>>46184621 #>>46185898 #>>46186758 #
AnimalMuppet ◴[07 Dec 25 19:44 UTC] No.46184469[source]▶
> It was probably the reason for Toyotas unintended acceleration glitch.

Do you have any evidence for "probably"?

replies(1): >>46184872 #
garyfirestorm ◴[07 Dec 25 20:32 UTC] No.46184872{3}[source]▶
I know for the fact simulink generates spaghetti and spaghetti code was partially blamed for Toyotas problems. Hence the inference

See https://www.safetyresearch.net/toyota-unintended-acceleratio...

replies(2): >>46185569 #>>46185954 #
1. stackghost ◴[07 Dec 25 22:31 UTC] No.46185954{4}[source]▶
SRS is a for-profit corporation whose income comes from lawsuits, so their reports/investigations are tainted by their financial incentive to overstate the significance of their findings.