OS Manuals

/usr/bin/goto-diff

CBMC bounded model checker for C and C++ programs

From cbmc 6.11.0-r0 (os), captured 2026-11-05 by running goto-diff --help (exit 0). permalink

* *       GOTO_DIFF 6.11.0 (cbmc-6.11.0-dirty) 64-bit       * *
* *                    Copyright (C) 2016                   * *
* *             Daniel Kroening, Peter Schrammel            * *
* *                  kroening@kroening.com                  * *

Usage:                       Purpose:

 goto-diff [-?] [-h] [--help]  show this help
 goto-diff old new            compare two goto binaries

Diff options:
 --show-goto-functions        show loaded goto program
 --list-goto-functions        list loaded goto functions
 --show-properties            show the properties, but don't run analysis
 --show-loops                 show the loops in the programs
 -u, --unified                output unified diff
 --change-impact, --forward-impact, --backward-impact  output unified diff with
                              forward&backward/forward/backward dependencies
 --compact-output             output dependencies in compact mode

Program instrumentation options:
 --no-standard-checks         disable default checks (more information in
                              manpage)
 --bounds-check               enable array bounds checks (default on)
 --no-bounds-check            disable array bounds checks
 --pointer-check              enable pointer checks (default on)
 --no-pointer-check           disable pointer checks
 --memory-leak-check          enable memory leak checks
 --memory-cleanup-check       enable memory cleanup checks
 --div-by-zero-check          enable division by zero checks on integers
                              (default on)
 --float-div-by-zero-check    enable division by zero checks on floating-point
                              numbers (default off)
 --no-div-by-zero-check       disable division by zero checks
 --signed-overflow-check      enable signed arithmetic over- and underflow
                              checks (default on)
 --no-signed-overflow-check   disable signed arithmetic over- and underflow
                              checks
 --unsigned-overflow-check    enable arithmetic over- and underflow checks
 --pointer-overflow-check     enable pointer arithmetic over- and underflow
                              checks
 --conversion-check           check whether values can be represented after
                              type cast
 --undefined-shift-check      check shift greater than bit-width (default on)
 --no-undefined-shift-check   disable check for shift greater than bit-width
 --float-overflow-check       check floating-point for +/-Inf
 --nan-check                  check floating-point for NaN
 --enum-range-check           checks that all enum type expressions have values
                              in the enum range
 --pointer-primitive-check    checks that all pointers in pointer primitives
                              are valid or null (default on)
 --no-pointer-primitive-check  disable checks that all pointers in pointer
                              primitives are valid or null
 --retain-trivial-checks      include checks that are trivially true
 --error-label label          check that label label is unreachable
 --no-built-in-assertions     ignore assertions in built-in library
 --no-assertions              ignore user assertions
 --no-assumptions             ignore user assumptions
 --assert-to-assume           convert user assertions to assumptions
 --cover CC                   create test-suite with coverage criterion CC,
                              where CC is one of assertion[s], assume[s], branch
                              [es], condition[s], cover, decision[s], location[s
                              ], or mcdc
 --cover-failed-assertions    do not stop coverage checking at failed
                              assertions (this is the default for --cover
                              assertions)
 --show-test-suite            print test suite for coverage criterion (requires
                              --cover)

Other options:
 --version                    show version and exit
 --json-ui                    use JSON-formatted output
 --flush                      flush every line of output
 --verbosity #                verbosity level
 --timestamp [monotonic|wall]  print microsecond-precision timestamps. monotonic
                              : stamps increase monotonically. wall: ISO-8601
                              wall clock timestamps.
Options (43)
OptionDescriptionSource
--show-goto-functionsshow loaded goto programhelp + man
--list-goto-functionslist loaded goto functionshelp + man
--show-propertiesshow the properties, but don't run analysishelp + man
--show-loopsshow the loops in the programshelp + man
-u, --unifiedoutput unified diffhelp + man
--change-impact, --forward-impact, --backward-impact |output unified diff with forward&backward/forward/backward dependencieshelp + man + man + man
--compact-outputoutput dependencies in compact modehelp + man
--no-standard-checksdisable default checks (more information in manpage)help
--bounds-checkenable array bounds checks (default on)help + man
--no-bounds-checkdisable array bounds checkshelp
--pointer-checkenable pointer checks (default on)help + man
--no-pointer-checkdisable pointer checkshelp
--memory-leak-checkenable memory leak checkshelp + man
--memory-cleanup-checkEnable memory cleanup checks: assert that all dynamically allocated memory is explicitly freed before terminating the program.help + man
--div-by-zero-checkenable division by zero checks on integers (default on)help + man
--float-div-by-zero-checkenable division by zero checks on floating-point numbers (default off)help + man
--no-div-by-zero-checkdisable division by zero checkshelp
--signed-overflow-checkenable signed arithmetic over- and underflow checks (default on)help + man
--no-signed-overflow-checkdisable signed arithmetic over- and underflow checkshelp
--unsigned-overflow-checkenable arithmetic over- and underflow checkshelp + man
--pointer-overflow-checkenable pointer arithmetic over- and underflow checkshelp + man
--conversion-checkcheck whether values can be represented after type casthelp + man
--undefined-shift-checkcheck shift greater than bit-width (default on)help + man
--no-undefined-shift-checkdisable check for shift greater than bit-widthhelp
--float-overflow-checkcheck floating-point for +/-Infhelp + man
--nan-checkcheck floating-point for NaNhelp + man
--enum-range-checkchecks that all enum type expressions have values in the enum rangehelp + man
--pointer-primitive-checkchecks that all pointers in pointer primitives are valid or null (default on)help + man
--no-pointer-primitive-checkdisable checks that all pointers in pointer primitives are valid or nullhelp
--retain-trivial-checksinclude checks that are trivially truehelp + man
--error-label labelcheck that label label is unreachablehelp + man
--no-built-in-assertionsignore assertions in built-in libraryhelp + man
--no-assertionsignore user assertionshelp + man
--no-assumptionsignore user assumptionshelp + man
--assert-to-assumeconvert user assertions to assumptionshelp + man
--cover CCcreate test-suite with coverage criterion CC, where CC is one of assertion[s], assume[s], branch [es], condition[s], cover, decision[s], location[s ], or mcdchelp + man
--cover-failed-assertionsdo not stop coverage checking at failed assertions (this is the default for --cover assertions)help + man
--show-test-suiteprint test suite for coverage criterion (requires --cover)help + man
--versionshow version and exithelp + man
--json-uiuse JSON-formatted outputhelp + man
--flushflush every line of outputhelp + man
--verbosity #verbosity levelhelp + man
--timestamp monotonic|wallprint microsecond-precision timestamps.help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.