Splint: Annotation-assisted lightweight static checking for C. (2004)
splint.org