Splint is a tool for statically checking C programs for security vulnerabilities and coding mistakes.