Hacker News Reader

Misra is a specification for languages to specify and avoid undefined or underdefined behavior as I understand it, thus avoiding bugs. What if a language has no undefined behavior and dynamic allocation is easily disabled. What would misra rules say?

View on HN

In addition to avoiding undefined behavior, MISRA discourages language features that are "dangerous" like I/O and dynamic memory routines. It also defines some (controversial) styling rules, such as requiring functions to have exactly one exit point.

SE/SE is called out explicitly in the ISO26262 documents (functional safety in road vehicles). This makes it easy to defend the inclusion of such a guideline, even if you may not agree with it.

But as it happens, MISRA C++:2023 doesn't have this guideline.

no_std rust then which has no i/o or heap, and what misra rules would there even need to be?

Code styling rules, such as requiring functions to have exactly one exit point, could be carried over to Rust. Many existing rules are still relevant for unsafe blocks and there would likely be new rules for panic.

I believe the single exit rule was dropped

Reply on news.ycombinator.com