verify generated code with MISRA-C ?

[bmerkle]

Furthermore modeling guidelines will be provided that can be \"model-checked\".

Hi Oscar,

I am especially interessted in this topic as i could imagine different rules like:
(only some of my thoughts)
- do not use a certain modelling construct (e.g. UML modelling construct xyz)
(so this is a general rule)
- do not model Statecharts with more than x states or y transtions...
(so this is a rule with some metric associated....)

On which level will the rules be ?
- Are you talking about the UML-model or other modeling languages ?
- Will SysML play a special role
- what about DSL (Domain Spec. Languages) and their (necessary) Meta-models...


I think this is a very interessting topic with lots of questions...

BTW. my experience with UML/MDD/MDA tools was, that they (or some of them) already have some kind of model verifyer (e.g. they show classes without relations or which are not called, states in SC that are not used, modelling artefacts that are not documented etc, etc...)

kind regards,
Bernhard.