Volatile is stupid

[mcdonald at uxe.cso.uiuc.edu]

>Then the program will work fine for five years, and someone will install
>it in an airplane controller, then someone else will manually `correct'
>something, and your program will crash, along with the airplane.  This
>is what correctness checking is all about.

Does anyone know what language was used to write the control program
for the Airbus A320 "crash by wire" plane?