csafe — Deterministic C/C++ Memory Safety Engine
High-precision CLI engine and GitHub Action that ingests full C/C++ codebases, maps pointer lifecycles, isolates memory safety flaws (buffer overflows, use-after-free, double-free, NULL dereferences), and outputs verified patch diffs.
Quick Install
curl -sSL https://csafe.raouad.com/install.sh | bash
Homebrew: brew install raouad/tap/csafe
Key Architectural Pillars
- Pointer Lifecycle Tracing: Inter-procedural heap and stack tracking beyond standard AST linters.
- Verified Patch Generation: Synthesizes minimal, idiomatic unified diffs rather than vague warnings.
- Deterministic CI Gates: Blocks regressions before merges with zero runtime overhead on production binaries.
Created by Raouad Allabouch. Open source under the MIT License.