csmith | Csmith , a random generator of C programs

I observe SFSafariViewController properly respecting the light and dark variants of the UIColor set as preferredBarTintColor. Your definition of teal025 in the UIColor extension defines a single color variant (0x008080) and does not have a separate dark mode color.

To resolve define your teal025 in a Color asset catalog and load the value using:

preferredBarTintColor = UIColor.init(named:"teal025")

Make sure to define both dark and light variants in the color asset by selecting "Any,Dark" for the setting Appearance, then set appropriate colors for each.

Or, use the dynamicProvider initializer of UIColor to return dark and light mode variants at run time, something like this:

Option -stop-at-first-alarm has been replaced with the more general -eva-stop-at-nth-alarm 1. You can replace 1 with a higher number, if you wish. What it does is to stop the analysis after the nth alarm is emitted. If your goal is to have 0 alarms and to closely inspect each alarm, this option might save time. But, in general, it does not improve the efficiency of the analysis.

-precise-unions is a very old option which has been obsoleted in Frama-C Fluorine (2013). It is no longer needed. It does not affect the correctness of the analysis.

The Csmith driver script you mention is indeed using old options, but they do not affect the correctness. By default, without any options, Frama-C/Eva will warn about undefined behaviors in the code. If you want to be more strict than the C standard (e.g. forbid unsigned overflows), then you may need to add extra options, such as -warn-unsigned-overflow.