The language used is less important than the development process as a whole, including static analysis tool used to verify the code. I believe Airbus uses Ast

The language used is less important than the development process as a whole, including static analysis tool used to verify the code. I believe Airbus uses Astree (abstract interpretation static analysis) verified MISRA C. It's really good tool. https://www.absint.com/astree/index.htm https://www.absint.com/astree/index.htm