[erlang-questions] Question about Erlang and Ada
Mon Jan 11 18:52:30 CET 2016
W dniu 2015-12-15 o 10:49, Richard Carlsson pisze:
> I still insist that there is need for both: "let it crash" and
> "correct by construction". You wouldn't want to let your
> fly-by-wire system controller crash during landing, one meter
> above the runway. But you also wouldn't want to build a correct
> feature poor in-flight entertainment system.
> If restarting is fast enough (e.g. sub-millisecond), then yes, I do
> want the fly-by-wire system controller to crash and get back to a
> clean state, rather than make a poor guess at what to do to fix the
> problem, or lock up.
I don't think we fundamentally disagree. AFAIR, they have supervision in
the form of hardware watchdogs.
Flying an airliner by beam.smp is completely out of question. But I
would not recommend Erlang even for a small uav autopilot project. Would
The largest correct by construction effort is probably CompCert.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the erlang-questions