GaloisInc / cclyzerpp

cclyzer++ is a precise and scalable pointer analysis for LLVM code.
https://galoisinc.github.io/cclyzerpp/
BSD 3-Clause "New" or "Revised" License
137 stars 14 forks source link
datalog llvm pointer-analysis program-analysis souffle static-analysis

cclyzer++

.. The following text also appears in doc/index.rst. Changes here should be reflected there, and vice-versa.

cclyzer++ is a precise and scalable global pointer analysis for LLVM code. The output of cclyzer++ can be used for a variety of program analysis tasks, including:

cclyzer++ is field- and array-sensitive, performs on-the-fly callgraph construction, and supports many different configurations of context-sensitivity including k-callsite sensitivity. It has subset-based (Andersen style) and unification-based (Steensgaard style) analyses. cclyzer++ is written in Soufflé Datalog, and so is highly parallel. cclyzer++ was derived from cclyzer.

See the documentation <doc_> for more information about cczlyer++, including examples of its output. Documentation is also available online.

If you use cclyzer++ in your own work, please include the following citations:

Acknowledgments

This material is based upon work supported by the United States Air Force and Defense Advanced Research Project Agency (DARPA) under Contract No. FA8750-19-C-0004. Any opinions, findings and conclusions or recommendations expressed in this material are those of the author(s) and do not necessarily reflect the views of the United States Air Force or DARPA. Approved for Public Release, Distribution Unlimited.

.. _cclyzer: https://yanniss.github.io/cclyzer-sas16.pdf .. _Soufflé Datalog: https://souffle-lang.github.io/ .. _doc: doc/index.rst .. _online: https://galoisinc.github.io/cclyzerpp