"Crashing is better that corrupt data" If the crashed program is controlling a device that is directing radiation at a person's body, then crashing is likely t

"Crashing is better that corrupt data" If the crashed program is controlling a device that is directing radiation at a person's body, then crashing is likely to be at least as undesirable as data corruption. I understand your point about programming language choice, and your comments elsewhere about the undesirability of the C language. But the root causes of the Therac-25 malfunction wasn't technical, they were organisational. Specifically poor code review and code reuse practices. Changing the programming language wouldn't fix them.