Answers are grounded in this paper and cite their sources.
This article outlines the application of CompCert, an optimizing compiler, for safety-critical avionics software, indicating its advantages over traditional methods.
CompCert is the first commercially available optimizing compiler which has been formally verified. The executable code it produces is proved to behave exactly as specified by the semantics of the source C program. As a consequence, the risk of system malfunctions due to miscompilation bugs can be considered eliminated. The correctness proof of CompCert C guarantees that all safety properties verified on the source code automatically hold for the executable object code as well. In this article we will outline the qualification strategy which is used at Airbus to apply CompCert in critical avionics software in compliance to DO-178C, DO-333, and DO-330. We will describe the application context and illustrate the advantages compared to the traditional way of qualifying and certifying compilers that has been used in the past.
No takes yet. Share an insight, caveat, or question.
Cullmann et al. (2026) studied this question.
Synapse has enriched 8 closely related papers on similar clinical questions. Consider them for comparative context: