# Lemma Functions for Frama-C: C Programs as Proofs

arXiv: https://arxiv.org/abs/1811.05879 · HTML: https://mlsanity.com/paper/1811.05879/

## Key facts

- Cited by 1 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 14 Nov 2018.

## Built on by (most cited first, 1 of 1)

- [Agentic Verification of Software Systems](https://mlsanity.com/paper/2511.17330/) (2025)

## Abstract (arXiv)

This paper describes the development of an auto-active verification technique in the Frama-C framework. We outline the lemma functions method and present the corresponding ACSL extension, its implementation in Frama-C, and evaluation on a set of string-manipulating functions from the Linux kernel. We illustrate the benefits our approach can bring concerning the effort required to prove lemmas, compared to the approach based on interactive provers such as Coq. Current limitations of the method and its implementation are discussed.