How do the folks at JPL write the code that will land a 2000-pound robot on Mars without a single glitch? Much of their success is no doubt due to their talent and dedication, but it doesn’t hurt that they have very strict coding standards (PDF). Among the requirements for C-language code at JPL:
- Compile with all warnings enabled; use static source code analyzers.
- Do not use direct or indirect recursion.
- Do not use dynamic memory allocation after task initialization.
- Declare data objects at smallest possible level of scope.
- Check the validity of values passed to functions.
- Make the order of evaluation in compound expressions explicit.
- Do not use expressions with side effects.
- Make only very limited use of the C pre-processor.
- Use short functions with a limited number of parameters.
- Do not cast function pointers into other types.
The 2009 version of the standard is available as a PDF from jpl.nasa.gov.