Frama-C:
Plug-ins:
Libraries:

Frama-C API - With_Diff

type t
val diff : t -> t -> t Lattice_bounds.or_bottom

diff t1 t2 is an over-approximation of t1-t2. t2 must be an under-approximation or exact.