NASA writes mission-critical flight software in C. And the rules are absolutely INSANE.
TL;DR: NASA/JPL mission-critical code follows strict safety rules: no recursion, bounded loops, no post-init dynamic memory, small functions with assertions, all returns checked, zero warnings, daily static analysis, and tightly controlled pointer use.
1
