CBMC vs Isabelle

CBMC is a bounded model checker for C and C++ programs. It explores execution paths to check assertions, including array bounds, pointer safety, exceptions, and some undefined behavior such as signed integer overflow. Its analysis unwinds loops before sending the resulting equation to a decision procedure, and inputs may need a bounded size. The repository lists C89, C99, most of C11, C17, C23, GCC and Visual Studio extensions, and SystemC through Scoot; the listed input languages also include Java bytecode. CBMC supports contracts and can produce counterexamples. Its incremental SMT2 backend works with SMT-LIB 2.6-compliant solvers, with Z3 and CVC5 as examples. Distribution options include Homebrew instructions for macOS, Ubuntu DEB packages, Windows MSI installers, and Docker images. goto-cc can replace gcc or cl.exe in Makefiles to collect project models. The guide discusses routine development and continuous integration use. CBMC is free under the 4-clause BSD license.

Isabelle is a free proof assistant for expressing mathematical formulas in a formal language and proving them within a logical calculus. Its main applications are formalizing mathematics and verifying properties of hardware, software, programming languages, and protocols. Isabelle/HOL provides a higher-order logic environment for large applications, with tools for reasoning, simplification, linear arithmetic, algebraic decision procedures, and access to external first-order provers through Sledgehammer. Proofs can be written in Isar, a structured language intended to be understandable to people and computers. Isabelle/HOL can generate SML, OCaml, Haskell, and Scala code from executable specifications. Isabelle/jEdit is the default interface, providing ongoing proof checking and real-time feedback; the Isabelle2025-2 release also includes Isabelle/VSCode with panels for documentation, symbols, and Sledgehammer. The distribution includes a library of verified mathematics, supplemented by the Archive of Formal Proofs. Isabelle runs on Linux, macOS, Windows, and self-hosted deployments. Its main code base is subject to BSD-style regulations. Windows lacks developer signatures and certificates and is rejected by Microsoft by default at first launch; macOS requires users to allow the unsigned application to open.