3 ms·

I currently work on certified avionics. I don't see rust used there in the next 10 years. Even using OO over plain C adds a huge amount of extra work already.

• thesuperbigfrog 2y ago
  >> I currently work on certified avionics. I don't see rust used there in the next 10 years. There is definitely interest in using Rust for safety critical work: https://www.adacore.com/gnatpro-rust https://www.adacore.com/gnatpro-rust https://ferrocene.dev/en/ https://ferrocene.dev/en/ I think it will definitely happen, but I am not sure how soon.
  • mbn85 2y ago
    thesuperbigfrog same references :P That's what I call independent analysis, lol
• mbn85 2y ago
  Could you please elaborate on why? Projects like Ferrocene or GNAT Pro seem to indicate that's a possibility. (automotive gaining traction sort of paves the way to avionics/aerospace). https://ferrocene.dev/en/ https://ferrocene.dev/en/ https://www.eenewseurope.com/en/first-rust-compiler-qualified-for-iso26262/ https://www.eenewseurope.com/en/first-rust-compiler-qualifie...
  • roeles 2y ago
    I don't see any incentive to move away from C. I was discouraged to use C++ even. The amount of extra work is huge. I don't know a lot about Rust myself, but the impression I get is that it is a bit less obviously deterministic than C. Things boil down to (IMHO): - every requirement must be traceable to code - every line of code must fulfill a requirement - any dynamic behavior (for example heap allocation) must be proven to work under all circumstances