<p><pre><code>   CompCert
</code></pre>
There&#x27;s now a lot of work in this space, e.g. <a href="http:&#x2F;&#x2F;sf.snu.ac.kr&#x2F;sepcompcert" rel="nofollow">http:&#x2F;&#x2F;sf.snu.ac.kr&#x2F;sepcompcert</a><p><pre><code>   and it&#x27;s going to stay that way!
</code></pre>
Whoever said this has been proven wrong. This stuff works, it&#x27;s just expensive. The only real question is: when will formal verification be convenient enough to be widely used in industry. I reckon that&#x27;s 15-20 years away. Right now organisations like Facebook (<a href="http:&#x2F;&#x2F;fbinfer.com" rel="nofollow">http:&#x2F;&#x2F;fbinfer.com</a>) and Microsoft (<a href="https:&#x2F;&#x2F;www.fstar-lang.org" rel="nofollow">https:&#x2F;&#x2F;www.fstar-lang.org</a>) use it, but sparingly.