diffblue/cbmc

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1146 stars · 310 forks observed · 2026-10-21

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

CBMC (C Bounded Model Checker) is a formal verification tool for C and C++ programs that explores all possible execution paths on bounded inputs to check assertions, memory safety, and undefined behavior. It works by unwinding loops and passing the resulting formula to a decision procedure (SMT solver).

Use cases

• verify C programs for buffer overflows and array bounds violations
• check pointer safety and memory errors in C/C++ code
• detect undefined behavior like signed integer overflow
• prove user-specified assertions hold on all bounded inputs
• verify C code consistency against Verilog hardware designs
• formally verify embedded or safety-critical C code
• find bugs via exhaustive path exploration instead of sampling test inputs

When to choose

• you need formal guarantees about C/C++ code correctness for bounded inputs
• you want exhaustive checking of memory safety and undefined behavior rather than fuzzing
• you are verifying safety-critical or embedded C code
• you need to check equivalence between C and hardware description languages

When to avoid

• your codebase has deep or unbounded loops/recursion that cannot be practically unwound
• you only need lightweight static analysis or linting
• you need runtime testing or fuzzing rather than formal verification
• you work primarily in languages other than C/C++

Facets

cli-tool · maturity active

testing security developer-tools developer-tools security testing windows cpp cli bounded-model-checking formal-verification model-checking c-verification cpp-verification memory-safety smt-solver assertion-checking undefined-behavior algorithms linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="diffblue/cbmc")