There is also a lot of formally verified in C.