static C/C++ code scanner for potential security problems