C++ Static Analysis

Open-source C++ projects categorized as Static Analysis

Top 16 C++ Static Analysis Projects

Static Analysis
  1. ImHex

    🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

    Project mention: Ask HN: What are good high information density UIs (screenshots, apps, sites) | news.ycombinator.com | 2025-05-08

    I find Geizhals' filtering options reasonably compact and information dense. https://geizhals.de/?cat=gra16_512&xf=132_16384&pg=1&view=li...

    I like the simple table view of RPiLocator. Only a few columns, but lots of rows, no unneeded clutter. https://rpilocator.com/

    Not as compact as possible, but at least shows quite some information: GSMArena. It could fit more phones into the comparison table with less whitespace/greyspace though. https://www.gsmarena.com/compare.php3?idPhone1=10386&idPhone...

    All sites as viewed on desktop, on mobile this would likely not work out.

    I also want to echo the command line tools mention in another comment. GDB's TUI is reasonable for my use, but after some experience this recently posted terminal debugger might be better: https://github.com/al13n321/nnd via https://news.ycombinator.com/item?id=43905185

    Also the hex editor I am currently using, despite some problems: https://github.com/WerWolv/ImHex

    An example of an information dense GUI that might be a bit overwhelming is Ghidra: https://en.wikipedia.org/wiki/Ghidra (page includes a basic screenshot, you can fill your screen(s) with as many sub windows and information panes as you want)

    As a side note, while trying to find examples I realized just how few websites there are (any more?) that show a lot of information at the same time. Worst recent offender is YouTube's redesign with only 3 video tiles in a row on a 1440p screen, luckily easily fixed via a ublock rule.

  2. InfluxDB

    InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.

    InfluxDB logo
  3. Cppcheck

    static analysis of C/C++ code

    Project mention: Starting With Open Source | dev.to | 2024-09-02

    I decided to look for a trending GitHub repository written in C++, my favorite programming language. I came across a very intriguing repository called cppcheck. Why did it catch my attention? Well, we all know about ESLint and Prettier, but a linter for C++? Now, that is something I just had to explore!

  4. ikos

    Static analyzer for C/C++ based on the theory of Abstract Interpretation.

    Project mention: Bill requiring US agencies to share source code with each other becomes law | news.ycombinator.com | 2024-12-26

    It happens. The following repository was originally used only by LLNL before it gained contributors and then was promoted to the OpenZFS repository:

    https://github.com/openzfs/zfs

    If you are not doing multithreading, this sound static analyzer should be fairly useful:

    https://github.com/NASA-SW-VnV/ikos

    Unlike others, it attempts to prove code safety. Unfortunately, it does not currently handle multi-threading and a few other cases.

  5. lazy_importer

    library for importing functions from dlls in a hidden, reverse engineer unfriendly way

  6. SVF

    Static Value-Flow Analysis Framework for Source Code

  7. inline_syscall

    Inline syscalls made easy for windows on clang

  8. psychec

    A compiler frontend for the C programming language

  9. SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
  10. Cerberus

    A C++ tool to unstrip Rust/Go binaries (ELF and PE) (by h311d1n3r)

  11. sleighcraft

    sleigh craft!

  12. crab

    A library for building abstract interpretation-based analyses. **Update**: crab is still actively maintained. Please use branch dev. (by seahorn)

  13. analyze

    NaiveSystems Analyze is a static analysis tool for code security and compliance.

  14. minimalloc

    A lightweight memory allocator for hardware-accelerated machine learning

    Project mention: The Skyline algorithm for packing 2D rectangles | news.ycombinator.com | 2024-11-18

    An even more recent one from Google: https://github.com/google/minimalloc

  15. cclyzerpp

    cclyzer++ is a precise and scalable pointer analysis for LLVM code.

  16. orc

    ORC: A tool for finding violations of C++'s One Definition Rule on the OSX toolchain. (by adobe)

  17. Gymbo

    gradient-based symbolic execution engine implemented from scratch

  18. ayanami-nemesis-analyzer

    A C/C++ Staitc Analyzer for Now.

  19. SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

C++ Static Analysis discussion

Log in or Post with

C++ Static Analysis related posts

Index

What are some of the best open-source Static Analysis projects in C++? This list will help you:

# Project Stars
1 ImHex 48,859
2 Cppcheck 6,145
3 ikos 2,960
4 lazy_importer 1,749
5 SVF 1,524
6 inline_syscall 703
7 psychec 547
8 Cerberus 317
9 sleighcraft 250
10 crab 240
11 analyze 184
12 minimalloc 151
13 cclyzerpp 142
14 orc 93
15 Gymbo 35
16 ayanami-nemesis-analyzer 7

Sponsored
InfluxDB – Built for High-Performance Time Series Workloads
InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
www.influxdata.com

Did you know that C++ is
the 7th most popular programming language
based on number of references?