Meta tags:
description=Frama-C - An open-source extensible and collaborative platform dedicated to source-code analysis of C software.;

Headings (most frequently used words):

to, and, of, acsl, analysis, runtime, platform, make, your, code, safer, more, secure, latest, news, highlights, frama, capabilities, overview, eva, wp, an, framework, fueled, by, formal, methods, absence, errors, beyond, widely, used, from, experimental, research, industry, based, on, abstract, interpretation, highly, configurable, functional, specification, deductive, verification, tool, maximizing, automation, assertion, checking, with, the, plug, in, formally, correct, monitoring,

Text of the page (most frequently used words):
the (57), frama (29), and (18), for (17), acsl (16), that (15), can (13), plug (12), analysis (12), code (11), 2026 (10), runtime (10), more (9), eva (9), used (9), all (8), this (7), from (7), arsenic (7), language (6), with (6), #program (6), are (6), errors (6), its (6), not (5), must (5), annotations (5), formal (5), user (5), verification (5), specification (5), has (4), page (4), dedicated (4), possible (4), bug (4), ins (4), proof (4), provides (4), about (4), many (4), behaviors (4), happen (4), programs (4), software (4), thus (3), relies (3), when (3), guarantees (3), memory (3), any (3), able (3), verified (3), static (3), checking (3), execution (3), methods (3), rac (3), based (3), tools (3), particular (3), annotation (3), available (3), prove (3), provide (3), but (3), each (3), guarantee (3), functional (3), aims (3), list (3), undefined (3), absence (3), source (3), use (2), constructs (2), into (2), example (2), one (2), details (2), executable (2), may (2), capture (2), since (2), these (2), error (2), new (2), they (2), other (2), results (2), been (2), alarms (2), during (2), while (2), hold (2), only (2), information (2), case (2), studies (2), solvers (2), requires (2), also (2), contracts (2), precondition (2), function (2), what (2), provided (2), proving (2), related (2), properties (2), analyzed (2), variable (2), abstract (2), interpretation (2), might (2), sound (2), you (2), modular (2), extensible (2), features (2), certification (2), industrial (2), experimental (2), research (2), safety (2), security (2), most (2), bugs (2), which (2), technics (2), analyzers (2), framework (2), well (2), book (2), news (2), internship (2), position (2), cea (2), lsl (2), download (2), platform (2), acknowledgements, authors, terms, copyright, 2007, rights, reserved, actual, transformation, slightly, complex, than, illustration, translated, quantifiers, bounded, restrict, fragment, found, translating, simple, seem, generated, gmp, integers, costly, optimizes, reasonable, overhead, high, performance, shadow, rte, introduce, formally, correct, monitoring, translate, often, understand, builds, upon, does, instrument, have, already, proved, valid, analyzer, monitor, after, why, fails, combination, assertion, lightweight, method, consisting, aim, monitors, allows, minimum, intervention, tutorials, like, alt, ergp, cvc5, conditions, real, world, furthermore, interactive, mechanisms, describe, defined, strategies, build, scripts, automated, fail, automatically, smt, maximizing, automation, uses, variant, compared, work, additional, loop, invariants, assertions, guide, process, produces, condition, formula, functions, weakest, calculus, plugin, deductive, tool, ansi, iso, input, output, ensures, postcondition, specifications, however, deduced, rules, programming, logic, intention, developer, described, correctness, although, parameters, finely, configure, behavior, impacting, accuracy, time, how, manual, automatic, highly, configurable, infers, including, over, approximation, point, then, browse, review, emitted, display, inferred, ranges, highlight, dead, graphical, interface, values, perform, entire, executions, class, supported, report, caused, such, invalid, accesses, reads, uninitialized, integer, overflows, divisions, zero, dangling, pointers, largely, successfully, purposes, 178, iec, 60880, common, criteria, eal, now, want, architecture, description, applications, teaching, widely, industry, cause, issues, find, them, heuristic, finding, miss, whereas, meant, moreover, gives, opportunity, conformance, beyond, main, particularity, embeds, mathematical, reason, never, remain, silent, fueled, single, technique, will, ever, fit, needs, combining, covers, analyses, their, combinations, developing, helped, engineers, verify, crucial, examples, exercises, application, guidelines, aimed, beginners, techniques, expert, practitioners, overview, highlights, capabilities, release, lannotate, luncov, typestates, rpp, clang, metacsl, latest, gitlab, versions, open, collaborative, assist, various, activities, navigation, through, unfamiliar, projects, critical, make, your, safer, secure, contact, jobs, blog, publications, documentation,

Text of the page (random words):
frama c framework for modular analysis of c programs frama c features documentation publications blog jobs contact download a platform to make your c code safer and more secure frama c is an open source extensible and collaborative platform dedicated to source code analysis of c software the frama c analyzers assist you in various source code related activities from the navigation through unfamiliar projects up to the certification of critical software download frama c all versions frama c on gitlab latest news 2026 10 16 internship position at cea list lsl 2026 09 08 metacsl v0 11 for frama c 33 0 arsenic 2026 09 08 frama clang v0 0 20 for frama c 33 0 arsenic 2026 09 06 rpp v0 0 4 for frama c 33 arsenic 2026 09 01 internship position at cea list lsl 2026 08 31 typestates v0 0 for frama c 33 arsenic 2026 07 29 luncov v0 2 6 for frama c 33 0 arsenic 2026 07 29 lannotate v0 2 6 for frama c 33 0 arsenic 2026 07 24 release of frama c 33 0 arsenic more news highlights of frama c s capabilities overview eva wp e acsl the frama c book covers the acsl specification language analyses and their combinations developing new plug ins as well as industrial case studies in which frama c has helped engineers verify crucial safety or security properties with its many examples exercises and application guidelines this book is aimed at beginners in code analysis techniques as well as expert software verification practitioners since no single technique will ever be able to fit all software verification needs frama c aims at combining program analysis technics provided as plug ins to guarantee the absence of bugs in c programs an analysis framework fueled by formal methods the main particularity of frama c is that it embeds tools based on formal methods that are mathematical technics to reason about programs thus most of the analyzers in frama c are sound they never remain silent when a bug might happen absence of runtime errors and beyond undefined behaviors in c programs can cause safety and security issues many tools can be used to find these runtime errors but most of them provide heuristic bug finding that can miss bugs whereas frama c is meant to guarantee that no bug can happen moreover frama c provides a formal specification language acsl which gives the opportunity not only to prove that no runtime error can happen but also conformance to a functional specification widely used from experimental research to industry frama c is largely used for teaching experimental research and industrial applications it has been used successfully for certification purposes for do 178 iec 60880 common criteria eal 6 7 you may now want to go on to the description of frama c s features or to a page with more details about its modular extensible architecture the eva plug in aims at proving the absence of runtime errors caused by c undefined behaviors such as invalid memory accesses reads of uninitialized memory integer overflows divisions by zero dangling pointers based on abstract interpretation eva relies on abstract interpretation to perform a sound static analysis of the entire program and capture all possible behaviors of its executions it is thus able to report all errors that might happen in the class of undefined behaviors supported by the analysis during its analysis eva infers many properties about the analyzed program including an over approximation of the possible values for each variable at each program point the frama c graphical user interface can then be used to browse the analyzed code review the list of emitted alarms display the inferred ranges for any variable highlight dead code and more highly configurable analysis although the eva analysis is automatic many parameters are available to finely configure its behavior impacting its results accuracy and analysis time more information on this plug in and how to use it are available on the dedicated page and in the eva user manual the wp plug in aims at proving functional correctness of a program however while runtime errors can be deduced from the rules of the programming language logic errors are related to the intention of the developer that must be described to be verified functional specification acsl ansi iso c specification language is the language used in frama c to provide specifications and in particular function contracts that is the precondition of the function what it requires from the input and the postcondition what it ensures in output provided as annotations a deductive verification tool the wp plugin of frama c uses a variant of weakest precondition calculus compared to the eva plug in it requires more work from the user one must provide the contracts of the functions but also additional annotations for example loop invariants and assertions to guide the proof process for each annotation wp produces a verification condition a formula that must hold to guarantee that the annotation is verified maximizing automation wp relies on smt solvers like alt ergp cvc5 or z3 that can prove automatically up to 98 of the verification conditions on real world case studies furthermore it provides interactive mechanisms to describe user defined proof strategies or to build proof scripts when automated solvers fail to prove more information on this plug in and in particular tutorials are available on the dedicated page the e acsl plug in provides runtime annotation checking rac a lightweight formal method consisting in checking code annotations during the program execution while static formal methods aim for guarantees that hold for any execution rac only provides guarantees about the particular execution it monitors this allows rac based tools to be used with minimum intervention from the user runtime assertion checking with the e acsl plug in e acsl is able to translate executable acsl annotations into c code so that they can be verified at runtime e acsl is often used in combination with other plug ins of frama c e g eva and wp it can be used to understand why a proof with wp fails or to monitor alarms after eva analysis e acsl builds upon the results from the other plug ins it does not instrument annotations that have already been proved valid by a static analyzer formally correct monitoring translating acsl is not simple as it may seem the generated c code must not introduce any new bug in the code thus e acsl relies on the rte plug in on gmp integers and on a high performance shadow memory to capture all possible runtime error since all of this can be costly e acsl optimizes these constructs when possible this guarantees that e acsl has a reasonable runtime overhead not all acsl constructs can be translated into c code for example quantifiers must be bounded one has to restrict to the executable fragment of the language more details can be found on the page dedicated to e acsl the actual transformation is slightly more complex than this illustration copyright 2007 2026 frama c all rights reserved terms of use authors acknowledgements