CBMC, a software verification tool, provides an easy way to check the correctness of C code. It is an automatic static verifier that uses the Software Verification Competition style solvers. Although CBMC’s main webpage does not show recent development, its GitHub repository is active and Amazon is investing in its usage for C projects. CBMC is simple to install and use, and it can be used to check for assertion failures and common memory bugs like buffer overflows. It can also be used for functional correctness testing and comparative checking of programs. However, CBMC may not scale well to large and complex problems.
https://www.philipzucker.com/cbmc_tut/