Secure coding tools

C/C++:

• Clang Thread Safety Analysis
• Rosecheckers – perform static analysis on C/C++ source
• Compiler-Enforced Buffer Overflow Elimination

Android:

• DidFail – uses static analysis to detect potential leaks – Android

See also:

• https://www.cert.org/secure-coding/products-services/scale.cfm?