Ozmd To be fair, this isn't a software coding error. It appears to be a more fundamental design problem. We have a multiple sensor failure mode that is not detectable except by the resulting behavior of the aircraft. Yes, the crew did an excellent job in responding to the situation. But somewhere in the design process, someone forgot to account for a failure mode affecting multiple systems. And to top it off, there doesn't appear to be any provision in the AoA system design to provide a fail signal immediately to warn the pilot prior to pushing the plane into a dive.
Given the requirements, the coders appear to have gotten their job done right. They have no inputs to tell them the incoming data is bad and now would be a good time to flash a warning rather than cary on with the alpha protection routine. Garbage In, Garbage Out.
