5 ms·
Is this really that bad? Presumably the autogenerated c doesn't have any array over reads and it probably initializes values properly
by potatochup 4y ago
Is this really that bad? Presumably the autogenerated c doesn't have any array over reads and it probably initializes values properly
- 0xDEF 4y agoI think companies that do actual life/death safety critical software should hire dedicated software people instead of relying on closed-source proprietary visual programming tools for mechanical engineers.
- deleted 4y ago[deleted]
- deleted 4y ago[deleted]
- xavxav 4y agoSimulink / Stateflow and more generally 'synchronous programming languages' have a rich academic lineage and are particularly well adapted to safety-critical tasks. These languages bring a lot of key guarantees that you can't (easily) get from more classical languages like bounded memory usage, hard real time guarantees, numerical properties, ability to prove theoretical properties about the model etc... It's also not like having your code written as a text file would save you from using closed source proprietary compilers or languages (Ada, Ferrocene, various C distributions) for safety-critical software.
- potatochup 4y agoRather than "instead" it can be both. I don't want mechanical engineers hand writing observer models and PIDs in bare metal C, but I also don't want software engineerings designing my observer models and PIDs. They are different tools for different jobs.
- scotty79 4y agoThose tools are closed source so they probably have many undiscovered bugs.