There are a bunch of neat comments from past threads about this if you search HN for "Michael Barr": "On a cyclomatic-complexity scale, a rating of 10 is consi

There are a bunch of neat comments from past threads about this if you search HN for "Michael Barr": "On a cyclomatic-complexity scale, a rating of 10 is considered workable code, with 15 being the upper limit for some exceptional cases. Toyota’s code had dozens upon dozens of functions that rated higher than 50. Tellingly, the throttle-angle sensor function scored more than 100, making it completely and utterly untestable." https://news.ycombinator.com/item?id=7711771 https://news.ycombinator.com/item?id=7711771 "For example, http://www.edn.com/design/automotive/4423428/Toyota-s-killer-firmware--Bad-design-and-its-consequences http://www.edn.com/design/automotive/4423428/Toyota-s-killer... quotes Barr's claims: 'Toyota’s electronic throttle control system (ETCS) source code is of unreasonable quality.' 'Toyota’s source code is defective and contains bugs, including bugs that can cause unintended acceleration (UA).'" https://news.ycombinator.com/item?id=8906513 https://news.ycombinator.com/item?id=8906513 (and the linked article has a link to slides which are enlightening) A number of comments at https://news.ycombinator.com/item?id=6636811 https://news.ycombinator.com/item?id=6636811, "Toyota's firmware: Bad design and its consequences"