It's duplicitous of me to bring this up given all the other problems with this plane, but since it's a favorite topic of argument here, let's not forget the F-35's software is mostly developed in C++, and had been, in the past, touted as a triumph of C++ over Ada.
Ok, that's scary, I would accept C for such a job but C++ provides too many opportunities for things to go wrong in strange and difficult to find ways.
"Well, the scout leader's fire control computer should have returned fire at the MIG. It should have, but the C-programmed fire control software cast the void* target object to a ... well, a seagull_t object. I guess you could say that the scout leader was shot down when a seagull fired a radar-guided missile at him. That's pretty funny, right? Right?"
Of course maybe I'm just wrong to want type safety of any kind.