frama-c (1) - Linux Man Pages
frama-c: a static analyzer for C programs
frama-c[.byte] - a static analyzer for C programs
frama-c-gui[.byte] - the graphical interface of frama-c
is a suite of tools dedicated to the analysis of source code written in C.
It gathers several static analysis techniques in a single collaborative
framework. This framework can be extended by additional plugins placed in the
directory. The command
will provide the full list of the plugins that are currently installed.
is the graphical user interface of
It features the same options as the command-line version.
frama-c.byte and frama-c-gui.byte are
the ocaml bytecode versions of the command-line and graphical user interface
By default, Frama-C recognizes
files as C files needing pre-processing and
files as C files having been already pre-processed. Some plugins may extend
the list of recognized files. Pre-processing can be customized through the
Options taking an additional parameters can also be written under the form
This option is mandatory when
starts with a dash ('-')
Most options that takes no parameter have a corresponding
option which has the opposite effect.
- -add-path p1[,p2[...,pn]]
the list of directories in which plugins are searched
gives the list of options that control the behavior of Frama-C's kernel and
the list of installed plugins.
reads ACSL annotation. This is the default. Annotation are not pre-processed
by default. Use
folds all syntactically constant expressions in the code before the
analyzes. Defaults to no.
When analyzing an annotation, the default behavior (the
version of this option) when a typechecking error occurs is to reject the
source file as is the case for typechecking errors within the C code. With
this option on, the typechecker will only output a warning and discard the
annotation but typechecking will continue.
- -cpp-command cmd
as the command to pre-process C files. Defaults to the
environment variable or to
gcc -C -E -I.
if it is not set. In order to preserve ACSL annotations, the preprocessor must
keep comments (the
option for gcc).
- -cpp-extra-args args
Gives additional arguments to the pre-processor. This is only useful when
is set. Pre-processing annotations is done in two separate pre-processing
stages. The first one is a normal pass on the C code which retains macro
are then used in the second pass during which annotations are pre-processed.
are used only for the first pass, so that arguments that should not be used
twice (such as additional include directives or macro definitions) must thus
go there instead of
- -float-digits n
When outputting floating-point numbers, display
digits. Defaults to 4.
- -general-font f
as the general font of the GUI (the value of
if defined or Helvetica by default).
Do not output a journal of the current session. See
On by default, dumps a journal of all the actions performed during the current
Frama-C session in the form of an ocaml script that can be replayed with
The name of the script can be set with the
- -journal-name name
Set the name of the journal file (without the
extension). Defaults to frama_c_journal.
Tries to preserve comments when pretty-printing the source code (defaults to
is set, keeps switch statements. Defaults to no.
Indicates that the entry point is called during program execution. This
implies in particular that global variables can not be assumed to have their
initial values. The default is
the entry point is also the starting point of the program and globals have
their initial value.
- -load file
load the (previously saved) state contained in
- -load-module m1[,m2[...,mn]]
loads the ocaml modules
These modules must be
for the native code version of Frama-c and
for the bytecode version (see the Dynlink section of Ocaml manual for more
information). All modules which are present in the plugin search paths are
- -load-script s1[,s2,[...,sn]]
loads the ocaml scripts
The scripts must be
They must be compilable relying only on Ocaml standard library and
Frama-C's API. If some custom compilation step is needed, compile them
outside of Frama-C and use
- -machdep machine
as the current machine-dependent configuration (size of the various
integer types, endiandness, ...). The list of currently supported machines is
- -main f
as the entry point of the analysis. Defaults to 'main'. By default, it is
considered as the starting point of the program under analysis. Use
is supposed to be called in the middle of an execution.
- -monospace-font f
as the monospace font in the GUI (defaults to value of
if defined or Monospace by default).
prints an obfuscated version of the code (where original identifiers are
replaced by meaningless one) and exits. The correspondance table between
original and new symbols is kept at the beginning of the result.
- -ocode file
redirects pretty-printed code to
instead of standard output.
During the normalization phase, some variables may get renamed when different
variable with the name can co-exist (e.g. a global variable and a formal
parameter). When this option is on, a message is printed each time this occurs.
Defaults to no.
arithmetic operations may overflow (this is the default option). The
version assumes that the result of all arithmetic operations is within the
bounds of the associated type
pre-process annotations. This is currently only possible when using gcc (or
GNU cpp) pre-processor. The default is to not pre-process annotations.
pretty-prints the source code as normalized by CIL (defaults to no).
outputs the directory where Frama-C kernel library is installed
outputs the directory where Frama-C stores its data (can be overidden by the
outputs the directory where Frama-C searchs its plugins (can be overidden by the
variable and the
- -save file
Saves Frama-C's state into
after the analyzes have taken place.
removes break, continue and switch statement before the analyzes. Defaults to
- -time file
outputs user time and date in the given
when Frama-C exits.
forces typechecking of the source files. This option is only relevant if no
further analysis is requested (as typechecking will implicitely occurs before
the analysis is launched).
- -ulevel n
syntactically unroll loops
times before the analysis. This can be quite costly and some plugins (e.g.
the value analysis) provide more efficient ways to perform the same thing.
See their respective manuals for more information.
outputs ACSL formulas with utf8 characters. This is the default. When given the
option, Frama-C will use the ASCII version instead. See the ACSL manual for
checks the that read/write accesses occuring in unspecified order (according to
the C standard's notion of sequence point) are performed on separate locations.
This is the default. With
assumes that it is always the case.
- -verbose n
set verbosity level of the output to
outputs the version string of Frama-C
Plugins specific options
will give the list of options that are specific to the plugin.
The directory where Frama-C datas are installed.
A list of directory where Frama-C can find plug-ins.
The default font of the GUI.
The default font for pretty-printing code in the GUI.