svf-tools

News

* SVF now supports new build system (Thank Johannes for his help!).
* SVF-Python is now available, enabling developers to write static analyzers in Python by leveraging the SVF library (Contributed by Jiawei Wang).
* New course Software Security Analysis for learning code analysis and verification with SVF for fun and expertise!
* SVF now supports LLVM-16.0.0 with opaque pointers (Contributed by Xiao Cheng).
* Modernize SVF's CMake (Contributed by Johannes).
* SVF now supports LLVM-13.0.0 (Thank Shengjie Xu for his help!).
* Object clustering published in our OOPSLA paper is now available in SVF
* Hash-Consed Points-To Sets published in our SAS paper is now available in SVF
* Learning or teaching Software Analysis? Check out SVF-Teaching!
* SVF now supports LLVM-12.0.0 (Thank Xiyu Yang for her help!).
* VSFS published in our CGO paper is now available in SVF
* TypeClone published in our ECOOP paper is now available in SVF
* SVF now uses a single script for its build. Just type source ./build.sh in your terminal, that's it!
* SVF now supports LLVM-10.0.0!
* We thank bsauce for writing a user manual of SVF (link1 and link2) in Chinese
* SVF now supports LLVM-9.0.0 (Thank Byoungyoung Lee for his help!).
* SVF now supports a set of field-sensitive pointer analyses.
* Use SVF as an external lib for your own project (Contributed by Hongxu Chen).
* SVF now supports LLVM-7.0.0.
* SVF now supports Docker. Try SVF in Docker!
* SVF now supports LLVM-6.0.0 (Contributed by Jack Anthony).
* SVF now supports LLVM-4.0.0 (Contributed by Jared Carlson. Thank Jared and Will for their in-depth discussions about updating SVF!)
* SVF now supports analysis for C++ programs.

Documentation

SVF is a static value-flow analysis tool for LLVM-based languages. SVF (CC'16) is able to perform
* AE (abstract execution): cross-domain execution (ICSE'24), recursion analysis (ECOOP'25) typestate analysis (FSE'24);
* WPA (whole program analysis): field-sensitive (SAS'19), flow-sensitive (CGO'21, OOPSLA'21) analysis;
* DDA (demand-driven analysis): flow-sensitive, context-sensitive points-to analysis (FSE'16, TSE'18);
* MSSA (memory SSA form construction): memory regions, side-effects, SSA form (JSS'18);
* SABER (memory error checking): memory leaks and double-frees (ISSTA'12, TSE'14, ICSE'18);
* MTA (analysis of multithreaded programs): value-flows for multithreaded programs (CGO'16);
* CFL (context-free-reachability analysis): standard CFL solver, graph and grammar (OOPSLA'22, PLDI'23);
* SVFIR and MemoryModel (SVFIR): SVFIR, memory abstraction and points-to data structure (SAS'21);
* Graphs: generating a variety of graphs, including call graph, ICFG, class hierarchy graph, constraint graph, value-flow graph for static analyses and code embedding (OOPSLA'20, TOSEM'21)

We release the SVF source code with the hope of benefiting the open-source community. You are kindly requested to acknowledge usage of the tool by referring to or citing relevant publications above.

SVF's doxygen document is available here.

| About SVF | Setup Guide | User Guide | Developer Guide |
| ------------- |:-------------:| -----:|-----:|
| !About| !Setup | !User | !Developer
| Introducing SVF -- what it does and how we design it | A step by step setup guide to build SVF | Command-line options to run SVF, get analysis outputs, and test SVF with an example or PTABen | Detailed technical documentation and how to write your own analyses in SVF or use SVF as a lib for your tool, and the course on SVF |