Properties of the IPC C Code

• Uses a loose subset of C
  • no recursion
  • no loops
  • no function pointers, var args, etc.
  • all functions return one of a small set of error codes
  • few local state variables (excluding temps)
• Built from low-level components
• Well defined interfaces between components
• Expert-level documentation