Towards an Automotive ‘Safer Subset’ of C
The C programming language is becoming more and more widely used in the automotive industry for electronic control systems, some of which have safety-related aspects. This paper studies the use of the C language and the reasons for this use. Because of the safety concerns with the language, there is a need to provide guidance to the industry on its use. The paper describes the work that has been carried out under the auspices of the MISRA consortium to develop an automotive ‘safer subset’ of C. The rationale behind the work is presented, along with a brief description of the contents of the Guidelines produced.
KeywordsProgramming Language Automotive Industry Development Guideline Language Feature Code Metrics
Unable to display preview. Download preview PDF.
- 1.Development Guidelines For Vehicle Based Software. Motor Industry Research Association, Nuneaton, November 1994Google Scholar
- 2.Cullyer WJ, Goodenough SJ and Wichmann BA. The choice of computer languages for use in safety critical systems. Software Engineering Journal, March 1991Google Scholar
- 3.Clutterbuck DL, Carr£ BA. The verification of low-level code.. Software Engineering Journal, May 1988Google Scholar
- 4.Wichmann BA.Notes on the security of programming languages. In Libberton GP (ed), 10th Advances In Reliability Technology Symposium. Elsevier, 1988Google Scholar
- 5.Hayman K.An analysis of ordnance software using the MALPAS tools. In Proc. 5th Ann. Conf. on Computer Assurance - COMPASS ’90, Gaithersburg, MD, USA, June 25–28 1990. IEEE, 1990Google Scholar
- 6.York Software Engineering Limited, High Integrity Ada project, various project reports.Google Scholar
- 7.Hatton L. Safer C - Developing Software for High-integrity and Safety-critical Systems, McGraw-Hill, 1994.Google Scholar
- 8.ISO/IEC 9899 : 1990, Programming languages - C, ISOGoogle Scholar
- 9.Koenig A.C Traps and Pitfalls, Addison-Wesley, 1988.Google Scholar
- 10.Draft IEC 1508, Functional safety: safety-related systems (Ed. 1), International Electrotechnical Commission, June 1995, Reference number 65A/179–185Google Scholar