> On Nov 26, 2014, at 13:55 , Gedare Bloom <ged...@rtems.org> wrote:
> 
> I guess the difference is whether the assert implies a local
> assumption (I require this var is not NULL) or a global one (This var
> has been previously verified to be not NULL). It may be worth
> classifying asserts in those two categories.

Yes, it is important that as RTEMS puts assertions in to satisfy automated code 
verification processes that we don't lose information as to why a given 
assertion is added.

Do we know that a pointer can't possibly NULL (oh-oh, what happened?  We 
checked that!) or is it a library function that we need to use and we want to 
tell the code verifier to shut-up.

The base part of RTEMS needs to protect against the first situation, especially 
if it is made easier (RSB) to add third part libraries.

Peter
-----------------
Peter Dufault
HD Associates, Inc.      Software and System Engineering

_______________________________________________
devel mailing list
devel@rtems.org
http://lists.rtems.org/mailman/listinfo/devel

Reply via email to