Automic VaultAutomic Vault

brew

Install cbmc with Homebrew, apt, dnf, Nix

C Bounded Model Checker. Version 6.10.0 via Homebrew; verified 2026-06-24.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install cbmc

local Homebrew formula metadata

Linux

Debian aptverified · 92%
sudo apt install cbmc

Debian stable package indexes · cbmc · source: deb.debian.org

Fedora dnfverified · 92%
sudo dnf install cbmc

Fedora Rawhide package metadata · cbmc · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#cbmc

nixpkgs package indexes · pkgs/by-name/cb/cbmc/package.nix · source: api.github.com

overview

Package summary

C Bounded Model Checker

Commands and aliases

  • cbmc
  • cprover
  • crangler
  • goto-analyzer
  • goto-cc
  • goto-diff
  • goto-gcc
  • goto-harness
  • goto-inspect
  • goto-instrument
  • goto-ld
  • goto-synthesizer
  • janalyzer
  • jbmc
  • jdiff
  • ls_parse.py
  • symtab2gb

history

Project history and usage

CBMC is the C Bounded Model Checker, a CProver formal-verification tool for checking C and C++ programs for memory safety, undefined behavior, assertions, and related properties.

Project history

The CProver site presents CBMC as a bounded model checker for C and C++ and names Daniel Kroening as the contact. The current Diffblue GitHub repository was created in 2016 and remains the development repository for CBMC and related CProver tools.

Adoption history

Official documentation notes availability for Linux, Windows, and macOS, including Debian/Ubuntu packages, release binaries, and Homebrew. The supplied package facts also show cbmc packaged by Homebrew, Debian, Ubuntu, Fedora, and Nix.

How it is used

CBMC analyzes programs by unwinding loops and passing the resulting formula to a decision procedure. The tool suite includes `cbmc`, `goto-cc`, `goto-instrument`, `goto-analyzer`, `jbmc`, and related utilities for producing and analyzing goto programs.

Why package nerds care

CBMC is a heavyweight developer-tools package because a single install exposes a mature formal-methods toolchain rather than just one binary. It is notable in package collections as a command-line verification suite that can slot into CI and compiler-like workflows.

Timeline

  • 2016: Current public GitHub repository created.
  • 2025: CBMC 6.7 and 6.8 release series published on GitHub.
  • 2026: CBMC 6.9 and 6.10 releases published on GitHub.

Related projects

  • The CProver tool family includes JBMC for Java bytecode, goto-analyzer, goto-cc/goto-gcc/goto-ld, goto-diff, goto-harness, goto-instrument, janalyzer, jdiff, and related solver utilities.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 4 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
cbmccliglobal executable
cprovercliglobal executable
cranglercliglobal executable
goto-analyzercliglobal executable
goto-cccliglobal executable
goto-diffcliglobal executable
goto-gcccliglobal executable
goto-harnesscliglobal executable
goto-inspectcliglobal executable
goto-instrumentcliglobal executable
goto-ldcliglobal executable
goto-synthesizercliglobal executable
janalyzercliglobal executable
jbmccliglobal executable
jdiffcliglobal executable
ls_parse.pycliglobal executable
symtab2gbcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version6.10.0
manager updated2026-06-24
local dataok
upstreamnot checked
latest detectednot detected

https://github.com/diffblue/cbmc

install metadata

Package metadata

Package keybrew:cbmc
Version6.10.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/cbmc
Homepagehttps://www.cprover.org/cbmc/
Repositoryhttps://github.com/diffblue/cbmc
Upstream docshttps://diffblue.github.io/cbmc/cprover_documentation.html
LicenseBSD-4-Clause
Source archivehttps://github.com/diffblue/cbmc.git
Last updated2026-06-24T16:07:58Z
Pulseupdated
Build dependenciescmake, maven, openjdk@21, rust
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namecbmc
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

cbmc 6.6.0-4

bounded model checker for C and C++ programs

http://www.cprover.org/cbmc/

sudo apt install cbmc
  • Section: science
  • Architecture: amd64
  • 5 dependencies
  • 1 optional deps
  • normalized package name match
  • Matched by: Cbmc
Debian stable package indexes · deb.debian.org · Debian stable package indexes: cbmc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

jbmc 6.6.0-4

bounded model checker for Java programs

http://www.cprover.org/cbmc/

sudo apt install jbmc
  • Section: science
  • Architecture: amd64
  • Source Package: cbmc
  • 4 dependencies
  • 1 optional deps
  • normalized package name match
  • Matched by: Cbmc
Debian stable package indexes · deb.debian.org · Debian stable package indexes: jbmc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

cbmc

nix profile install nixpkgs#cbmc
  • normalized package name match
  • Matched by: Cbmc
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/cb/cbmc/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

cbmc 5.95.1-4ubuntu1

bounded model checker for C and C++ programs

http://www.cprover.org/cbmc/

sudo apt install cbmc
  • Section: universe/science
  • Architecture: amd64
  • 5 dependencies
  • 1 optional deps
  • normalized package name match
  • Matched by: Cbmc
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: cbmc from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

jbmc 5.95.1-4ubuntu1

bounded model checker for Java programs

http://www.cprover.org/cbmc/

sudo apt install jbmc
  • Section: universe/science
  • Architecture: amd64
  • Source Package: cbmc
  • 4 dependencies
  • 1 optional deps
  • normalized package name match
  • Matched by: Cbmc
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: jbmc from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
dnf95%

cbmc 6.8.0-1.fc44

Bounded Model Checker for ANSI-C and C++ programs

https://www.cprover.org/cbmc

sudo dnf install cbmc
  • License: BSD-4-Clause
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: cbmc
  • 7 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Cbmc
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: cbmc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

cbmc-doc 6.8.0-1.fc44

Documentation for cbmc

https://www.cprover.org/cbmc

sudo dnf install cbmc-doc
  • License: BSD-4-Clause
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: cbmc
  • 1 provides
  • normalized package name match
  • Matched by: Cbmc
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: cbmc-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

cbmc-utils 6.8.0-1.fc44

Output conversion utilities for CBMC

https://www.cprover.org/cbmc

sudo dnf install cbmc-utils
  • License: BSD-4-Clause
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: cbmc
  • 2 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Cbmc
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: cbmc-utils from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • cmakeBuild dependency declared by Homebrew.
  • mavenBuild dependency declared by Homebrew.
  • openjdk@21Build dependency declared by Homebrew.
  • rustBuild dependency declared by Homebrew.

Same workflow

  • cppcheckShares av.db curated category or tags: c, c-plus-plus, cli, developer-tools, static-analysis.
  • aarch64-elf-gccShares av.db curated category or tags: c, c-plus-plus, cli, developer-tools.
  • alive2Shares av.db curated category or tags: cli, developer-tools, verification.
  • astyleShares av.db curated category or tags: c, c-plus-plus, cli, developer-tools.
  • build2Shares av.db curated category or tags: c, c-plus-plus, cli, developer-tools.
  • castxmlShares av.db curated category or tags: c, c-plus-plus, cli, developer-tools.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment