SPLINT: Annotation-Assisted Lightweight Static Checking Secure Programming Group
Gimpel: PC-lint and FlexeLint will check C/C++ source code and find bugs, glitches, inconsistencies, non-portable constructs, etc...