Frama-C:
Plug-ins:
Libraries:

Frama-C API - Symbolic_locs

Domain that store information on non-precise l-values such as t[i] or *p when i or p is not exact.