But why? The US military abandoned Ada for the F-35 and moved to C++ instead. Is it me or are they moving backwards?
Language selection is no panacea for bad systems engineering or poor project management
Ada and SPARK enter the automotive ISO-26262 market with Nvidia
11–20 of 113 posts
Re: Ada and SPARK enter the automotive ISO-26262 market with Nvidia
#12But why? The US military abandoned Ada for the F-35 and moved to C++ instead. Is it me or are they moving backwards?
SPARK formal verification is a big win. Ada is also simpler than C++. However, the tooling for Ada was never as good as C++ tooling.
GNAT, AUnit, VectorCAST are all good. AUnit isn’t compatible with Ada 95 though
Re: Ada and SPARK enter the automotive ISO-26262 market with Nvidia
#13Earlier quoted context omitted.
It has more to do with tooling than programmers. C++ is used everywhere so there are many commercial tools to support it. Not so much for Ada. Ada's developmemt tools are fewer, less featued, and more costly due to low demand.
> Ada's developmemt tools are fewer, less featued Such as?
Regarding the number of options, C++ has quite a few IDEs: Visual Studio, Xcode, VSCode, CLion, and probably more (Oracle probably still sells the one they had for Solaris). For command-line compilers, C++ has: Visual Studio, Xcode, g++, clang++, IBM C++ compilers for their OSs, Oracle compilers for Solaris, etc.
For Ada, is there anything other than AdaCore? Is that the same as GNATStudio?
Edit* - fixed Ada capitalization
Re: Ada and SPARK enter the automotive ISO-26262 market with Nvidia
#14Earlier quoted context omitted.
It has more to do with tooling than programmers. C++ is used everywhere so there are many commercial tools to support it. Not so much for Ada. Ada's developmemt tools are fewer, less featued, and more costly due to low demand.
> Ada's developmemt tools are fewer, less featued Such as?
Want a compiler? I hope you like GNAT.
Want an IDE? I hope you like GNAT Pro Studio.
Want a static analysis tool? I hope you like CodePeer.
Want to do unit testing? I hope you like Rapita.
Re: Ada and SPARK enter the automotive ISO-26262 market with Nvidia
#15Earlier quoted context omitted.
> Ada's developmemt tools are fewer, less featued Such as?
Regarding the number of options, C++ has quite a few IDEs: Visual Studio, Xcode, VSCode, CLion, and probably more (Oracle probably still sells the one they had for Solaris). For command-line compilers, C++ has: Visual Studio, Xcode, g++, clang++, IBM C++ compilers for their OSs, Oracle compilers for Solaris, etc. For Ada, is there anything other than AdaCore? Is that the same as GNATStudio? Edit* - fixed Ada capitali…
I think IBM Rational Ada was a thing back then. Never used it but heard stories about it.
Re: Ada and SPARK enter the automotive ISO-26262 market with Nvidia
#16Wow. I developed in Ada in aerospace 17 years ago. I thought the industry would move toward Rust.
Re: Ada and SPARK enter the automotive ISO-26262 market with Nvidia
#17Earlier quoted context omitted.
> Ada's developmemt tools are fewer, less featued Such as?
Want a compiler? I hope you like GNAT. Want an IDE? I hope you like GNAT Pro Studio. Want a static analysis tool? I hope you like CodePeer. Want to do unit testing? I hope you like Rapita.
That's not quite true. There are multiple vendors providing Ada compilers to industry: https://github.com/ohenley/awesome-ada?tab=readme-ov-file#co...
Re: Ada and SPARK enter the automotive ISO-26262 market with Nvidia
#18Earlier quoted context omitted.
> Ada's developmemt tools are fewer, less featued Such as?
Regarding the number of options, C++ has quite a few IDEs: Visual Studio, Xcode, VSCode, CLion, and probably more (Oracle probably still sells the one they had for Solaris). For command-line compilers, C++ has: Visual Studio, Xcode, g++, clang++, IBM C++ compilers for their OSs, Oracle compilers for Solaris, etc. For Ada, is there anything other than AdaCore? Is that the same as GNATStudio? Edit* - fixed Ada capitali…
The kind of tooling you need for avionics is not necessarily the kind of tooling you use for non-safety critical code.
None of the tools mentioned, other than in limited level IDEs (for practical purposes in safety critical C++ expect some niche variation of Eclipse just like if you used Ada) are valid for the F-35 project.
Re: Ada and SPARK enter the automotive ISO-26262 market with Nvidia
#19Earlier quoted context omitted.
> Ada's developmemt tools are fewer, less featued Such as?
Regarding the number of options, C++ has quite a few IDEs: Visual Studio, Xcode, VSCode, CLion, and probably more (Oracle probably still sells the one they had for Solaris). For command-line compilers, C++ has: Visual Studio, Xcode, g++, clang++, IBM C++ compilers for their OSs, Oracle compilers for Solaris, etc. For Ada, is there anything other than AdaCore? Is that the same as GNATStudio? Edit* - fixed Ada capitali…
You don't have to use AdaCore's GNAT Studio. You can quickly get going with Ada/SPARK using Visual Studio Code, as there is an LSP extension for it published by AdaCore themselves.
Re: Ada and SPARK enter the automotive ISO-26262 market with Nvidia
#20Wow. I developed in Ada in aerospace 17 years ago. I thought the industry would move toward Rust.
Rust is also making inroads, probably the most famous example is there’s two models of Volvo shipping today that rely on it.