Description:

Why is a software verification platform that applies formal proving
tools to annotated programs. It is currently capable of analysis of C
(through the included tool "Caduceus"), Java (through the included tool
"Krakatoa"), and potentially ML programs with some modification into
Why's own ML-like language. Furthermore, Why is capable of analysis of
any program that is mapped onto its own internal language. It uses a
weakest precondition involving calculus to generate potential theorems
necessary for the proof of a program's correctness. It translates these
theorems into formats that can be used by external proof assistants
(without any extra work Coq, PVS, HOL Light, and Mizar are supported -
having one is recommended and both Coq and PVS are packaged for Fedora)
and automated theorem provers (without any extra work Simplify,
Alt-Ergo, Yices, Z3, CVC3, and Zenon are supported and Alt-Ergo, CVC3,
and Zenon are packaged for Fedora) so that these results can be
externally proven, resulting in a proof of program correctness.

Note: Each user account must be set up by running "why-config" at the
command line (to set up a configuration file).