README.md

News

• SVF now supports LLVM-21 (Contributed by cjsrxzdyzds).
• SVF now supports new build system (Thank Johannes for his help!).
• SVF-Python is now available, enabling developers to write static analyzers in Python by leveraging the SVF library (Contributed by Jiawei Wang).
• New course Software Security Analysis for learning code analysis and verification with SVF for fun and expertise!
• SVF now supports LLVM-16.0.0 with opaque pointers (Contributed by Xiao Cheng).
• Modernize SVF's CMake (Contributed by Johannes).
• SVF now supports LLVM-13.0.0 (Thank Shengjie Xu for his help!).
• Object clustering published in our OOPSLA paper is now available in SVF
• Hash-Consed Points-To Sets published in our SAS paper is now available in SVF
• Learning or teaching Software Analysis? Check out SVF-Teaching!
• SVF now supports LLVM-12.0.0 (Thank Xiyu Yang for her help!).
• VSFS published in our CGO paper is now available in SVF
• TypeClone published in our ECOOP paper is now available in SVF
• SVF now uses a single script for its build. Just type source ./build.sh in your terminal, that's it!
• SVF now supports LLVM-10.0.0!
• We thank bsauce for writing a user manual of SVF (link1 and link2) in Chinese
• SVF now supports LLVM-9.0.0 (Thank Byoungyoung Lee for his help!).
• SVF now supports a set of field-sensitive pointer analyses.
• Use SVF as an external lib for your own project (Contributed by Hongxu Chen).
• SVF now supports LLVM-7.0.0.
• SVF now supports Docker. Try SVF in Docker!
• SVF now supports LLVM-6.0.0 (Contributed by Jack Anthony).
• SVF now supports LLVM-4.0.0 (Contributed by Jared Carlson. Thank Jared and Will for their in-depth discussions about updating SVF!)
• SVF now supports analysis for C++ programs.
  

Documentation

SVF is a static value-flow analysis tool for LLVM-based languages. SVF (CC'16) is able to perform

• AE (abstract execution): cross-domain execution (ICSE'24), recursion analysis (ECOOP'25) typestate analysis (FSE'24);
• WPA (whole program analysis): field-sensitive (SAS'19), flow-sensitive (CGO'21, OOPSLA'21) analysis;
• DDA (demand-driven analysis): flow-sensitive, context-sensitive points-to analysis (FSE'16, TSE'18);
• MSSA (memory SSA form construction): memory regions, side-effects, SSA form (JSS'18);
• SABER (memory error checking): memory leaks and double-frees (ISSTA'12, TSE'14, ICSE'18);
• MTA (analysis of multithreaded programs): value-flows for multithreaded programs (CGO'16);
• CFL (context-free-reachability analysis): standard CFL solver, graph and grammar (OOPSLA'22, PLDI'23);
• SVFIR and MemoryModel (SVFIR): SVFIR, memory abstraction and points-to data structure (SAS'21);
• Graphs: generating a variety of graphs, including call graph, ICFG, class hierarchy graph, constraint graph, value-flow graph for static analyses and code embedding (OOPSLA'20, TOSEM'21)

We release the SVF source code with the hope of benefiting the open-source community. You are kindly requested to acknowledge usage of the tool by referring to or citing relevant publications above.

SVF's doxygen document is available here.

About SVF	Setup Guide	User Guide	Developer Guide
Introducing SVF -- what it does and how we design it	A step by step setup guide to build SVF	Command-line options to run SVF, get analysis outputs, and test SVF with an example or PTABen	Detailed technical documentation and how to write your own analyses in SVF or use SVF as a lib for your tool, and the course on SVF