tool, programming A lint-like ANSI C source checker from

MIT. If formal specifications are supplied (in a separate

file), lclint can do more powerful checking to detect

inconsistencies between specifications and code. Adding

specifications enables further checking, types can be defined

as abstract and lclint can detect inconsistent use of

global variables; undocumented modification of

client-visible state; inconsistent use of an uninitialised

formal parameter; or failure to initialise an actual

parameter.