4 ms·

"Much of the F-35's software is written in C and C++ due to programmer availability, Ada83 code also is reused from the F-22. The Integrity DO-178B real-time op

by mavhc 10y ago

"Much of the F-35's software is written in C and C++ due to programmer availability, Ada83 code also is reused from the F-22. The Integrity DO-178B real-time operating system (RTOS) from Green Hills Software runs on COTS Freescale PowerPC processors" "24 million lines of code" From https://en.wikipedia.org/wiki/Lockheed_Martin_F-35_Lightning_II https://en.wikipedia.org/wiki/Lockheed_Martin_F-35_Lightning... Integrity-178B is the DO-178B–compliant version of Integrity. It is used in several military jets such as the B-2, F-16, F-22 and F-35, as well as the commercial airframes Airbus A380. Its kernel's design guarantees bounded computation times by eliminating features such as dynamic memory allocation. The auditing and security engineering capabilities have allowed it to obtain the EAL6 rating by the NSA. Integrity-178B has a unique feature: an EAL6 rating. https://en.wikipedia.org/wiki/Integrity_%28operating_system%29 https://en.wikipedia.org/wiki/Integrity_%28operating_system%... EAL6: Semiformally Verified Design and Tested

jokoon 10y ago
That's not the kind of stuff web programmers really care about everyday.
outworlder 10y ago
> Much of the F-35's software is written in C and C++ due to programmer availability This sounds ridiculous. Surely it would be very easy to get as many programmers as they wanted for whatever tech they need with the 1 trillion USD that they have. It would be fine if C++ was the best tool for the job, but I suspect it isn't. If it is not the best tool for the job, then whatever is gained in "programmer availability" is lost in productivity, correctness, reliability or whatever metric a fighter jet's software development is measured against. Furthermore, this whole IT industry fetish with hiring for a particular programming language is completely misguided. Domain knowledge is usually the bottleneck. I'd expect that to be even more so in flight or sensor software.
- albinofrenchy 10y ago
  C++ is likely the best bet for this kind of thing. Or rather, a strict subset of C++. You want real time, you want a minimal OS and you probably want some of the nicer type capabilities over c.
  - engi_nerd 10y ago
    >strict subset of C++ http://www.stroustrup.com/JSF-AV-rules.pdf http://www.stroustrup.com/JSF-AV-rules.pdf Here's the link that gets posted in all of these conversations. A strict subset of C++ is exactly what's been used.
  - ArkyBeagle 10y ago
    It depends muchly. In general, I'd rather have a seasoned set of 'C' programmers rather than people who are unconcerned with what happens at the level of the metal. But that's probably a personal bias, one that's been hard-earned. It's a way of leveraging the decades of mistakes made by those folks - and aid for by previous employers. A "'C' with classes" approach is probably a good one - but I'd hate to find some subtle template or Boost bug in mid flight... This is all IMO, but an approach like Bruce Powell Douglass "Doing Hard Time' is a pretty good way to satisfy the "systems engineer" customers for UML charts and still have rigorous development. UML is quite the anti-pattern and Rose is kind of awful but this should be a compromise that can work. CASE tools have gone out of fashion.
    - rat87 10y ago
      > A "'C' with classes" approach is probably a good one - but I'd hate to find some subtle template or Boost bug in mid flight... I'm not sure how much benefit that would bring, especially since dynamic dispatch is probably not encouraged. As for templates I'm not much of a c++ guy but wouldn't most template errors exist at compile time?
      - albinofrenchy 10y ago
        Templates are mostly problems at compile time, but it's also possible to have subtle issues with complicated template specializations where it doesn't call the function you expect. So complicated usages are discouraged, BUT simple ones that give code reuse with strong typing are great advantages over c in most cases. I think dynamic dispatch would be more permissible than you might think. You end up doing it in c manually in complicated code bases, might as well let the compiler dou the heavy lifting.
- sehugg 10y ago
  They have strict coding standards and only (are supposed to) use a subset: http://www.stroustrup.com/JSF-AV-rules.pdf http://www.stroustrup.com/JSF-AV-rules.pdf
- ArkyBeagle 10y ago
  The $1T didn't go to the programmers. The places are inherently body shops. Domain knowledge is the purview of "systems engineers" or "architects". Hilarity ensues. The use of C++ is a (non)reaction to the explosion of pet language systems. It got coded into whatever documentation was in process at the time, and probably cannot be changed.
- hackuser 10y ago
  > Surely it would be very easy to get as many programmers as they wanted for whatever tech they need with the 1 trillion USD that they have. That's not the experience of very wealthy Silicon Valley companies, who not only can pay much better than government defense contractors, but offer other incredible perks - yet still can't get all the talent they need.

by mavhc 10y ago

jokoon 10y ago

That's not the kind of stuff web programmers really care about everyday.

outworlder 10y ago

> Much of the F-35's software is written in C and C++ due to programmer availability This sounds ridiculous. Surely it would be very easy to get as many programmers as they wanted for whatever tech they need with the 1 trillion USD that they have. It would be fine if C++ was the best tool for the job, but I suspect it isn't. If it is not the best tool for the job, then whatever is gained in "programmer availability" is lost in productivity, correctness, reliability or whatever metric a fighter jet's software development is measured against. Furthermore, this whole IT industry fetish with hiring for a particular programming language is completely misguided. Domain knowledge is usually the bottleneck. I'd expect that to be even more so in flight or sensor software.

albinofrenchy 10y ago
C++ is likely the best bet for this kind of thing. Or rather, a strict subset of C++. You want real time, you want a minimal OS and you probably want some of the nicer type capabilities over c.
- engi_nerd 10y ago
  >strict subset of C++ http://www.stroustrup.com/JSF-AV-rules.pdf http://www.stroustrup.com/JSF-AV-rules.pdf Here's the link that gets posted in all of these conversations. A strict subset of C++ is exactly what's been used.
- ArkyBeagle 10y ago
  It depends muchly. In general, I'd rather have a seasoned set of 'C' programmers rather than people who are unconcerned with what happens at the level of the metal. But that's probably a personal bias, one that's been hard-earned. It's a way of leveraging the decades of mistakes made by those folks - and aid for by previous employers. A "'C' with classes" approach is probably a good one - but I'd hate to find some subtle template or Boost bug in mid flight... This is all IMO, but an approach like Bruce Powell Douglass "Doing Hard Time' is a pretty good way to satisfy the "systems engineer" customers for UML charts and still have rigorous development. UML is quite the anti-pattern and Rose is kind of awful but this should be a compromise that can work. CASE tools have gone out of fashion.
  - rat87 10y ago
    > A "'C' with classes" approach is probably a good one - but I'd hate to find some subtle template or Boost bug in mid flight... I'm not sure how much benefit that would bring, especially since dynamic dispatch is probably not encouraged. As for templates I'm not much of a c++ guy but wouldn't most template errors exist at compile time?
    - albinofrenchy 10y ago
      Templates are mostly problems at compile time, but it's also possible to have subtle issues with complicated template specializations where it doesn't call the function you expect. So complicated usages are discouraged, BUT simple ones that give code reuse with strong typing are great advantages over c in most cases. I think dynamic dispatch would be more permissible than you might think. You end up doing it in c manually in complicated code bases, might as well let the compiler dou the heavy lifting.
sehugg 10y ago
They have strict coding standards and only (are supposed to) use a subset: http://www.stroustrup.com/JSF-AV-rules.pdf http://www.stroustrup.com/JSF-AV-rules.pdf
ArkyBeagle 10y ago
The $1T didn't go to the programmers. The places are inherently body shops. Domain knowledge is the purview of "systems engineers" or "architects". Hilarity ensues. The use of C++ is a (non)reaction to the explosion of pet language systems. It got coded into whatever documentation was in process at the time, and probably cannot be changed.
hackuser 10y ago
> Surely it would be very easy to get as many programmers as they wanted for whatever tech they need with the 1 trillion USD that they have. That's not the experience of very wealthy Silicon Valley companies, who not only can pay much better than government defense contractors, but offer other incredible perks - yet still can't get all the talent they need.