[bluGill]

Avionics companies have very complex rules. They can use any of the above, but generally a subset.

For example you might use C, but ban malloc, and recursion. There will be static analysis tools that look through your code and calculate exactly how much memory you are using using in the worst case of function call tree, that way they know they cannot run out of memory or stack.