2 ms·

Note the term "easily". C++ verifiers have to understand template types, overloads, etc. I'm sure we'll get there one day. Frama-C is inching toward it at mola

by junon 5y ago

Note the term "easily". C++ verifiers have to understand template types, overloads, etc. I'm sure we'll get there one day. Frama-C is inching toward it at molasses speeds. But right now, C is undeniably easier to verify than C++.

quotemstr 5y ago
> C++ verifiers have to understand template types, overloads, etc. If they operate at some compiler IR level (e.g. LLVM bitcode), the difference between C and C++ verification is nothing. C++ is purely a front-end thing. Why should formal verifiers operate at the AST level?