Abstract:The C and C++ programming languages are widely used for the implementation of software in critical systems. They are complex languages with subtle features and peculiarities that might baffle even the more expert programmers. Hence, the general prescription of language subsetting, which occurs in most functional safety standards and amounts to only using a "safer" subset of the language, is particularly applicable to them. Coding guidelines are the preferred way of expressing language subsets. Some guidelines are formulated in terms of the programming language and its implementation only: in this case they are amenable to automatic checking. However, due to fundamental limitations of computing, some guidelines are undecidable, that is, they are based on program properties that no current and future algorithm can capture in all cases. The most mature and widespread coding standards, the MISRA ones, explicitly tag guidelines with undecidable or decidable. It turns out that this information is not of secondary nature and must be taken into account for a full understanding of what the guideline is asking for. As a matter of fact, undecidability is a common source of confusion affecting many users of coding standards and of the associated checking tools. In this paper, we recall the notions of decidability and undecidability in terms that are understandable to any C/C++ programmer. The paper includes a systematic study of all the undecidable MISRA C:2012 guidelines, discussing the reasons for the undecidability and its consequences. We pay particular attention to undecidable guidelines that have decidable approximations whose enforcement would not overly constrain the source code. We also discuss some coding guidelines for which compliance is hard, if not impossible, to prove, even beyond the issue of decidability.

MISCRA C++:2008 Part 1:Use of C++ in Safety Critical Embedded Systems

Tools to Make C Programs Safe: a Deeper Study

The MISRA C Coding Standard and its Role in the Development and Analysis of Safety- and Security-Critical Embedded Software

Applying Rely-Guarantee Reasoning on Concurrent Memory Management and Mailbox in μC/OS-II: A Case Study.

Applying Rely-Guarantee Reasoning on Concurrent Memory Management and Mailbox in C/OS-II: A Case Study

MISRA C, for Security's Sake!

Enforcing Memory Safety for Sensor Node Programs

Securing c programs by dynamic type checking

Coding Guidelines and Undecidability

BARR-C:2018 and MISRA C:2012: Synergy Between the Two Most Widely Used C Coding Standards

Real-Time Operating Systems' Compliance With MISRA-C Coding Standard: A Comprehensive Study

A Rationale-Based Classification of MISRA C Guidelines

Safety design concepts for statistical machine learning components toward accordance with functional safety standards

Design and Application of a Software in Medical Equipment Detecting and Risk Assessment

On the Evolution of Mobile Computing Software Systems and C/C++ Vulnerable Code: Empirical Investigation

Rust for Embedded Systems: Current State, Challenges and Open Problems

SCOPE: Secure Compiling of PLCs in Cyber-Physical Systems

Rust for Embedded Systems: Current State, Challenges and Open Problems (Extended Report)

Safety Enhancement for Real-Time Parallel Applications in Distributed Automotive Embedded Systems: A Stable Stopping Approach.

An Embedded System for Safe, Secure and Reliable Execution of High Consequence Software

How to Optimize C/C~(++) Source Code in Embedded Systems Programming