← Back to the 300 Software Failures Timeline
Case Study #210 — 300 Software Failure Case Studies

Air France Flight 447 crash

An Airbus A330 crashed into the Atlantic Ocean en route from Rio de Janeiro to Paris, killing all 228 people aboard.

2009-06-01
When it happened
Aviation
Sector
#210 of 300
Ranked by documented impact
01 — What Happened

The damage was public. The root cause was preventable.

An Airbus A330 crashed into the Atlantic Ocean en route from Rio de Janeiro to Paris, killing all 228 people aboard.

Aviation
Sector affected
2009-06-01
Date of the event
#210
Rank in the 300 Software Failure Case Studies
3
Distinct root-cause clauses identified below
02 — The Root Cause

What the software actually got wrong

Ice crystals blocked the pitot tubes, causing airspeed data to briefly become unreliable; the autopilot and autothrust disconnected and the flight control laws degraded from 'normal' to 'alternate' law, silently removing certain stall protections, and the crew's control inputs held the aircraft in a stall it never recovered from.

01Root Cause

Ice crystals blocked the pitot tubes, causing airspeed data...

What Happened

Ice crystals blocked the pitot tubes, causing airspeed data to briefly become unreliable

How Requs AI Catches This

Requs AI Edge Case flags this exact pattern at the requirements and architecture stage — before a single line of code implementing it exists — so the assumption behind it gets challenged while it is still cheap to fix.

02Root Cause

The autopilot and autothrust disconnected and the flight control...

What Happened

the autopilot and autothrust disconnected and the flight control laws degraded from 'normal' to 'alternate' law, silently removing certain stall protections

How Requs AI Catches This

Requs AI Software FMEA traces this failure mode back to the system-level hazard it feeds, tagging it against the Common Defect Enumeration so it surfaces in review instead of in the field.

03Root Cause

The crew's control inputs held the aircraft in a...

What Happened

the crew's control inputs held the aircraft in a stall it never recovered from

How Requs AI Catches This

Requs AI Edge Case and Software FMEA together treat this as a known, catalogued defect pattern — not a novel surprise — so it gets tested for deliberately rather than discovered after deployment.

03 — How This Gets Caught Before It Happens

Beyond code coverage and "shall" testing

Root causes like this one rarely show up in code coverage or requirements-compliance testing, because nobody wrote a requirement anticipating the specific edge case that broke. Requs AI Edge Case and Requs AI Software FMEA are built to surface exactly this class of overlooked failure mode — before the software is written.

Requs AI Edge Case

Surfaces this before code exists

Identifies edge cases like this one at requirements and architecture time, using the Common Defect Enumeration to catalog failure patterns seen across hundreds of real-world software failures — including this one.

Requs AI Software FMEA

Connects the failure mode to the hazard

Traces this class of root cause directly to the system-level hazard it can produce, so a defect pattern like this one gets flagged during design review instead of after it ships.

Find the overlooked root causes before they ship.

Schedule a demonstration, or explore how Requs AI Edge Case and Software FMEA use the Common Defect Enumeration.