polgreen/symex

CProver Wiki

About

Symex is a symbolic execution tool for C and C++ programs. It supports C89, C99, most of C11 and most compiler extensions provided by gcc and Visual Studio. It allows verifying array bounds (buffer overflows), pointer safety, exceptions and user-specified assertions. The verification is performed by exploring each path of the program and passing the resulting equation to a decision procedure.

For full information see cprover.org.

Prerequisites

Symex compiles CBMC as part of its build process and as such has all the pre-requisites of CBMC. These can be viewed at: diffblue/cbmc:COMPILING

Compilation

To compile you need to run two commands:

make -C src setup-cbmc
make -C src CXXFLAGS="-Wall -O2 -g -Werror -Wno-deprecated-register -pedantic -Wno-sign-compare"

The first make command will configure the CBMC submodule (found in lib/cbmc). It can optionally be provided with a list of users forks to retrieve. This is needed if changes depend on a commit that has not yet been merged into diffblue/cbmc.

For example, if you need userA and userB's forks the first command would be:

make -C src USERS="userA userB" setup-cbmc

It is recommend to add your fork in this way.

Output

Compiling produces an executable called symex which by default can be found in src/symex/symex

Report bugs

If you encounter a problem please file a bug report:

• Create an issue

Contributing to the code base

1. Fork the repository
2. Clone the repository git clone [email protected]:YOURNAME/symex.git
3. Create a branch from the develop branch (default branch)
4. Make your changes (follow the coding guidelines)
5. Push your changes to your branch
6. Create a Pull Request targeting the develop branch

License

4-clause BSD license, see LICENSE file.