c/c++ validator

[Kai Henningsen]

vercetti@zlew.org (Tommy Vercetti)  wrote on 19.06.05 in <200506192258.00250@gj-laptop>:

> I was looking on different ones, for C, that claimed to have ability to find
> security problems. One that I found the best, is splint. But it's still not
> able to find such obvious problem:

Did you look at sparse? That seems to do quite a useful job on the Linux  
kernel (which is, of course, the main reason for its existence). I don't  
really have an idea how good it would be on non-kernel C code. (Not C++,  
obviously.)

MfG Kai