Re: Ravenscar - program termination

Niklas Holsti writes:
If Ravenscar really requires that the main procedure be
non-terminating, I'm happy to learn that. From a very formal point
of view I guess this requirement means that the kernel need not
implement "await for task termination" even in the environment task.

Indeed, one of Ravenscar's goals is to make the necessary kernel easy
to certify to the most stringent safety standards. As with all
high-integrity software, the best way to achieve this is to make
things small and simple. So, not only does Ravenscar avoid the need
to wait for task termination, but also the tasking model (priority
ceiling inheritance) avoids the need for locks completely. Imagine a
tasking kernel with no mutexes :)

Ravenscar is beautiful, IMHO.

--
Ludovic Brenta.
.