When your code absolutely, always, *has* to work :-).

[Jeremy Allison]

On Tue, Aug 07, 2012 at 10:29:24AM +0200, Volker Lendecke wrote:
> On Mon, Aug 06, 2012 at 11:14:18AM -0700, Jeremy Allison wrote:
> > I found this really interesting:
> > 
> > http://programmers.stackexchange.com/questions/159637/what-is-the-mars-curiosity-rovers-software-built-in/159638#159638
> > 
> > http://lars-lab.jpl.nasa.gov/JPL_Coding_Standard_C.pdf
> > 
> > Makes Samba seem a bit less reliable somehow :-).
> 
> One problem here is that to me it seems those MISRA docs and
> tools are not available for free. I have looked at one
> point, but I could not find anything easily accessible. And,
> no malloc() is difficult for Samba I guess. We don't want a
> pre-allocated array of fsp's I think :-)

No, I wasn't seriously suggesting no malloc, after all we're
not running on a spaceship :-).

But I found the contraints really interesting - what you need
to do to C code to make it space-safe !