Frama-C The function in this post to the musl mailing list is a good candidate for formal verification. It should just barely be possible to verify the absence of undefined behaviors with Frama-C's value analysis and it should just barely be possible to verify it functionally with one of the Jessie...
Read MoreThis post offers two C programs that look analyzable. Each is self-contained, not so small that verification is trivial, but not so big that it's a man-year effort. If it was me doing the work, I would see what Frama-C's value analysis can do, but if you decide to do...
Read MoreFor some reason, uses of real to denote fixed-precision floating-point numbers (in languages such as FORTRAN) irritate me, but uses of integer or int to denote bounded integers do not. One notation isn't more accurate than the other, though. Does anyone have an idea why that might be?
Read MoreThe existence of this option to make GCC conform to C99 when compiling for the x87 floating-point instruction set is informative. The commentary that comes with the patch is quite interesting, if you are into this sort of thing. If you are not that much into the minutiae of the...
Read MoreIt is very easy to make snap judgments about other static analyzers when you are yourself working on one. You do not even need to act in bad faith: you just try the other tools on the programs that you worked hard to give interesting results on — difficult examples,...
Read More