Michel Fortin:
> I agree for non-nullability.

More discussions about this topic: http://lambda-the-ultimate.org/node/1478

A very C-like language with such features (it's a language different from Cyclone): http://www.splint.org/manual/manual.html#null

Bye,
bearophile