cppcheck

Cppcheck is a static analysis tool for discovering bugs in C and C++ codebases, even when a non-standard syntax is used.

By implementing coding standards such as Mistra C 2012 and providing extensibility with custom rules, it detects dangerous coding constructs such as buffer overflows, NULL pointer dereferences, and divisions by zero. At the same time, Cppcheck tries to minimise the false positive rates.