AI-Powered Analysis

Every detected bug passes through four LLM inference passes with three validation layers.

Usage

# AI analysis runs automatically during scan
memguard scan /tmp/binary --tools valgrind,infer

# Select issue number for full analysis
Select issue # for details: 2

# AI reasoning chain
memguard explain <scan-id> --issue 1

# Allocation lifecycle backtracking
memguard backtrack <scan-id> --issue 1

# Interactive fix session
Start interactive guided fix? (y): y
# Commands: apply, validate, explain, chat, alternative, rollback

4-Pass Pipeline

Pass 1: Triage (~5s) - Bug type confirmation, severity, one-line summary.

Pass 2: Deep Analysis (~15s) - Root cause, explanation, impact, CWE references. MemHint context injected so AI knows custom allocators.

Pass 3: Fix Generation (~30s) - Code patches with anti-pattern rules. Custom deallocator rules from MemHint injected.

Pass 4: Step Decomposition (~10s) - Guided steps for interactive session.

Three Validators

  • Fix Validator - catches free-then-use, useless allocation, recognizes safe linked-list traversal

  • CWE Validator - auto-corrects wrong CWE references

  • JSON Escape Fixer - fixes invalid escapes from smaller LLMs