Lexical analysis
grep, its4, RATS, FlawFinder
Wagner, Foster, Brewer [NDSSS ‘00]
Integer range constraints
Flow insensitive analysis
Dor, Rodeh and Sagiv [SAS ‘01]
Source-to-source transformation with asserts
and additional variables.