Secure Coding mailing list archives

RE: (whimsy) Bug-free software


From: "Alun Jones" <alun () texis com>
Date: Sat, 07 Feb 2004 16:57:26 +0000

-----Original Message-----
From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of David Crocker
Sent: Friday, February 06, 2004 10:50 AM

The difference is that the end-user may have access to the 
requirements document
(he/she may have helped to develop it) and can check it 
against his actual
requirements (assuming he knows what they are!). But even if 
the end user has
access to the implementation detail, he is unlikely to 
understand it, much less
be able to determine whether it is correct.

A user unable to understand the implementation detail would doubtless be
faced with a similar difficulty in understanding a requirements document
that is sufficiently detailed as to be used to generate a provably-correct
implementation.  It goes around and comes around.  At some point, a document
is produced that only a very few people could understand, and where all the
'coding' bugs are embodied.  Whether this is a formal requirement spec, or
source code, is of little matter.  You haven't got rid of the possibility of
bug, you've just moved their location.

Alun.
~~~~
-- 
Texas Imperial Software   | Find us at http://www.wftpd.com or email
1602 Harvest Moon Place   | [EMAIL PROTECTED]
Cedar Park TX 78613-1419  | WFTPD, WFTPD Pro are Windows FTP servers.
Fax/Voice +1(512)258-9858 | Try our NEW client software, WFTPD Explorer.








Current thread: