macOS
Homebrewverified · 100%
brew install cbmclocal Homebrew formula metadata
brew / rank 5244
Install cbmc with Homebrew, apt, dnf, Nix
C Bounded Model Checker. Version 6.10.0 via Homebrew; verified 2026-06-24. Also installable with debian: sudo apt install cbmc.
install
Additional install commands
Linux
Debian aptverified · 92%
sudo apt install cbmcDebian stable package indexes · cbmc · source: deb.debian.org
Fedora dnfverified · 92%
sudo dnf install cbmcFedora Rawhide package metadata · cbmc · source: dl.fedoraproject.org
Nixverified · 92%
nix profile install nixpkgs#cbmcnixpkgs package indexes · pkgs/by-name/cb/cbmc/package.nix · source: api.github.com
overview
Package summary
C Bounded Model Checker
Project links
Commands and aliases
- cbmc
- cprover
- crangler
- goto-analyzer
- goto-cc
- goto-diff
- goto-gcc
- goto-harness
- goto-inspect
- goto-instrument
- goto-ld
- goto-synthesizer
- janalyzer
- jbmc
- jdiff
- ls_parse.py
- symtab2gb
history
Project history and usage
CBMC is the C Bounded Model Checker, a CProver formal-verification tool for checking C and C++ programs for memory safety, undefined behavior, assertions, and related properties.
Project history
The CProver site presents CBMC as a bounded model checker for C and C++ and names Daniel Kroening as the contact. The current Diffblue GitHub repository was created in 2016 and remains the development repository for CBMC and related CProver tools.
Adoption history
Official documentation notes availability for Linux, Windows, and macOS, including Debian/Ubuntu packages, release binaries, and Homebrew. The supplied package facts also show cbmc packaged by Homebrew, Debian, Ubuntu, Fedora, and Nix.
How it is used
CBMC analyzes programs by unwinding loops and passing the resulting formula to a decision procedure. The tool suite includes `cbmc`, `goto-cc`, `goto-instrument`, `goto-analyzer`, `jbmc`, and related utilities for producing and analyzing goto programs.
Why package nerds care
CBMC is a heavyweight developer-tools package because a single install exposes a mature formal-methods toolchain rather than just one binary. It is notable in package collections as a command-line verification suite that can slot into CI and compiler-like workflows.
Timeline
- 2016: Current public GitHub repository created.
- 2025: CBMC 6.7 and 6.8 release series published on GitHub.
- 2026: CBMC 6.9 and 6.10 releases published on GitHub.
Related projects
- The CProver tool family includes JBMC for Java bytecode, goto-analyzer, goto-cc/goto-gcc/goto-ld, goto-diff, goto-harness, goto-instrument, janalyzer, jdiff, and related solver utilities.
Sources
security posture
Risk level: green
narrow executable package without higher-risk signals.
Risk classifier
green risk · low confidence · appliance
Why
- narrow executable package without higher-risk signals
Signals
- metadata:no-higher-risk-signals
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
cbmc | executable | indexed executable | Discovered from the local executable index. |
cprover | executable | indexed executable | Discovered from the local executable index. |
crangler | executable | indexed executable | Discovered from the local executable index. |
goto-analyzer | executable | indexed executable | Discovered from the local executable index. |
goto-cc | executable | indexed executable | Discovered from the local executable index. |
goto-diff | executable | indexed executable | Discovered from the local executable index. |
goto-gcc | executable | indexed executable | Discovered from the local executable index. |
goto-harness | executable | indexed executable | Discovered from the local executable index. |
goto-inspect | executable | indexed executable | Discovered from the local executable index. |
goto-instrument | executable | indexed executable | Discovered from the local executable index. |
goto-ld | executable | indexed executable | Discovered from the local executable index. |
goto-synthesizer | executable | indexed executable | Discovered from the local executable index. |
janalyzer | executable | indexed executable | Discovered from the local executable index. |
jbmc | executable | indexed executable | Discovered from the local executable index. |
jdiff | executable | indexed executable | Discovered from the local executable index. |
ls_parse.py | executable | indexed executable | Discovered from the local executable index. |
symtab2gb | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version6.10.0
manager updated2026-06-24
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:cbmc |
|---|---|
| Version | 6.10.0 |
| Package manager | Homebrew |
| Homepage | https://www.cprover.org/cbmc/ |
| Repository | https://github.com/diffblue/cbmc |
| Last updated | 2026-06-24T16:07:58Z |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Debian apt95%
cbmc 6.6.0-4
bounded model checker for C and C++ programs
sudo apt install cbmc- Section: science
- Architecture: amd64
- 5 dependencies
- 1 optional deps
- normalized package name match
- Matched by: Cbmc
Debian apt95%
jbmc 6.6.0-4
bounded model checker for Java programs
sudo apt install jbmc- Section: science
- Architecture: amd64
- Source Package: cbmc
- 4 dependencies
- 1 optional deps
- normalized package name match
- Matched by: Cbmc
Nix95%
cbmc
nix profile install nixpkgs#cbmc- normalized package name match
- Matched by: Cbmc
Ubuntu apt95%
cbmc 5.95.1-4ubuntu1
bounded model checker for C and C++ programs
sudo apt install cbmc- Section: universe/science
- Architecture: amd64
- 5 dependencies
- 1 optional deps
- normalized package name match
- Matched by: Cbmc
Ubuntu apt95%
jbmc 5.95.1-4ubuntu1
bounded model checker for Java programs
sudo apt install jbmc- Section: universe/science
- Architecture: amd64
- Source Package: cbmc
- 4 dependencies
- 1 optional deps
- normalized package name match
- Matched by: Cbmc
dnf95%
cbmc 6.10.0-1.fc45
Bounded Model Checker for ANSI-C and C++ programs
sudo dnf install cbmc- License: BSD-4-Clause
- Category: Unspecified
- Architecture: x86_64
- Source Package: cbmc
- 7 dependencies
- 1 provides
- normalized package name match
- Matched by: Cbmc
dnf95%
cbmc-doc 6.10.0-1.fc45
Documentation for cbmc
sudo dnf install cbmc-doc- License: BSD-4-Clause
- Category: Unspecified
- Architecture: x86_64
- Source Package: cbmc
- 1 provides
- normalized package name match
- Matched by: Cbmc
dnf95%
cbmc-utils 6.10.0-1.fc45
Output conversion utilities for CBMC
sudo dnf install cbmc-utils- License: BSD-4-Clause
- Category: Unspecified
- Architecture: x86_64
- Source Package: cbmc
- 2 dependencies
- 1 provides
- normalized package name match
- Matched by: Cbmc
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- pkg.so package database
- pkgdb category and tag curation