Soufflé: A Datalog Synthesis Tool for Static Analysis

Re:Soufflé: A Datalog Synthesis Tool for Static Analysis by mechtaev on Wednesday November 30, 2022 @05:45PM (#33809057)

Souffle Datalog is used for defining program analyses in such projects like Doop [1] for Java and cclyzer++ [2] for LLVM.

GitHub's CodeQL [3] is another Datalog dialect used for detecting bugs and vulnerabilities.

Datomic [4] is a database that uses Datalog as the query language.

[1] https://bitbucket.org/yanniss/doop/src/master/

[2] https://github.com/GaloisInc/cclyzerpp

[3] https://codeql.github.com/

[4] https://www.datomic.com/

[ Parent | on HN ]

Re:Soufflé: A Datalog Synthesis Tool for Static Analysis by gavinray on Wednesday November 30, 2022 @07:22PM (#33810292)

I'd never heard of this cclyzer tool, thanks for sharing. This looks really interesting. Know of any other tools for C/C++/JVM static analysis that folks might not be aware of?

At the moment, I use GCC's -fanalyzer, the LLVM sanitizers + static analyzer, FB's Infer, and PVS Studio.

[ Parent | on HN ]

Re:Soufflé: A Datalog Synthesis Tool for Static Analysis by yababa_y on Thursday December 01, 2022 @12:31AM (#33812729)

https://github.com/kframework/c-semantics while you can do static analysis with this the dynamic instrumentation of UB isnfar more thorough than ubsan

[ Parent | on HN ]

Re:Soufflé: A Datalog Synthesis Tool for Static Analysis by gavinray on Thursday December 01, 2022 @11:06AM (#33818151)

This is great and I'd also never seen this either -- thank you!

[ Parent | on HN ]