How do the folks at JPL write the code that will land a 2000-pound robot on Mars without a single glitch? Much of their success is no doubt due to their talent and dedication, but it doesn’t hurt that they have very strict coding standards (PDF). Among the requirements for C-language code at JPL:
Compile with all warnings enabled; use static source code analyzers.
Do not use direct or indirect recursion.
Do not use dynamic memory allocation after task initialization.
Declare data objects at smallest possible level of scope.
Check the validity of values passed to functions.
Make the order of evaluation in compound expressions explicit.
Do not use expressions with side effects.
Make only very limited use of the C pre-processor.
Use short functions with a limited number of parameters.
Do not cast function pointers into other types.
The JPL code standards are based on the 2004 MISRA-C coding standard. MISRA was originally designed for automotive applications, but was later adapted to other safety-critical systems where computer glitches can have dire consequences, like remote control locomotives. Some of the requirements parallel specifications of the language ADA, which was originally designed for safety-critical applications like missile guidance systems.
Adafruit publishes a wide range of writing and video content, including interviews and reporting on the maker market and the wider technology world. Our standards page is intended as a guide to best practices that Adafruit uses, as well as an outline of the ethical standards Adafruit aspires to. While Adafruit is not an independent journalistic institution, Adafruit strives to be a fair, informative, and positive voice within the community – check it out here: adafruit.com/editorialstandards
Stop breadboarding and soldering – start making immediately! Adafruit’s Circuit Playground is jam-packed with LEDs, sensors, buttons, alligator clip pads and more. Build projects with Circuit Playground in a few minutes with the drag-and-drop MakeCode programming site, learn computer science using the CS Discoveries class on code.org, jump into CircuitPython to learn Python and hardware together, TinyGO, or even use the Arduino IDE. Circuit Playground Express is the newest and best Circuit Playground board, with support for CircuitPython, MakeCode, and Arduino. It has a powerful processor, 10 NeoPixels, mini speaker, InfraRed receive and transmit, two buttons, a switch, 14 alligator clip pads, and lots of sensors: capacitive touch, IR proximity, temperature, light, motion and sound. A whole wide world of electronics and coding is waiting for you, and it fits in the palm of your hand.
Have an amazing project to share? The Electronics Show and Tell is every Wednesday at 7pm ET! To join, head over to YouTube and check out the show’s live chat – we’ll post the link there.
Get the only spam-free daily newsletter about wearables, running a "maker business", electronic tips and more! Subscribe at AdafruitDaily.com !
i love this kind of stuff…
I’ve been looking for a decent MISRA/JPL static analysis tool, but it seems most of them are internal and proprietary or linked to specific toolchains. I have a license for IAR for ARM, for example, which includes MISRA … but it’s hardly accessible to the general public. Seems like a pressing addition needed to complement the rest of the GCC ecosystem, but maybe I’m just not aware of some tool that exists.