fot-the-fuzzer / svf

Pointer Analysis and Program Dependence Analysis for C and C++ Programs

News

• SVF now supports LLVM-13.0.0 (Thank Shengjie Xu for his help!).
• Object clustering published in our OOPSLA paper is now available in SVF
• Hash-Consed Points-To Sets published in our SAS paper is now available in SVF
• Learning or teaching Software Analysis? Check out SVF-Teaching!
• SVF now supports LLVM-12.0.0 (Thank Xiyu Yang for her help!).
• VSFS published in our CGO paper is now available in SVF
• TypeClone published in our ECOOP paper is now available in SVF
• SVF now uses a single script for its build. Just type source ./build.sh in your terminal, that's it!
• SVF now supports LLVM-10.0.0!
• We thank bsauce for writing a user manual of SVF (link1 and link2) in Chinese
• SVF now supports LLVM-9.0.0 (Thank Byoungyoung Lee for his help!).
• SVF now supports a set of field-sensitive pointer analyses.
• Use SVF as an external lib for your own project (Contributed by Hongxu Chen).
• SVF now supports LLVM-7.0.0.
• SVF now supports Docker. Try SVF in Docker!
• SVF now supports LLVM-6.0.0 (Contributed by Jack Anthony).
• SVF now supports LLVM-4.0.0 (Contributed by Jared Carlson. Thank Jared and Will for their in-depth discussions about updating SVF!)
• SVF now supports analysis for C++ programs.

Documentation

SVF is a source code analysis tool that enables interprocedural dependence analysis for LLVM-based languages. SVF is able to perform pointer alias analysis, memory SSA form construction, value-flow tracking, context-free-reachability analysis, path-sensitive typestate analysis and memory error checking. SVF's doxygen document is here.

About SVF	Setup Guide	User Guide	Developer Guide
Introducing SVF -- what it does and how we design it	A step by step setup guide to build SVF	Command-line options to run SVF, get analysis outputs, and test SVF with an example or PTABen	Detailed technical documentation and how to write your own analyses in SVF or use SVF as a lib for your tool

We are looking for self-motivated PhD students and we welcome industry collaboration/sponsorship to improve SVF (Please contact [email protected] if you are interested)

We release SVF source code in the hope of benefiting others. You are kindly asked to acknowledge usage of the tool by citing some of our publications listed http://svf-tools.github.io/SVF, especially the following two:

@inproceedings{sui2016svf,
  title={SVF: interprocedural static value-flow analysis in LLVM},
  author={Sui, Yulei and Xue, Jingling},
  booktitle={Proceedings of the 25th international conference on compiler construction},
  pages={265--266},
  year={2016},
  organization={ACM}
}

@article{sui2014detecting,
  title={Detecting memory leaks statically with full-sparse value-flow analysis},
  author={Sui, Yulei and Ye, Ding and Xue, Jingling},
  journal={IEEE Transactions on Software Engineering},
  volume={40},
  number={2},
  pages={107--122},
  year={2014},
  publisher={IEEE}
}