Splint is a tool for statically checking C programs for security
vulnerabilities and coding mistakes. With minimal effort, Splint
can be used as a better lint. If additional effort is invested
adding annotations to programs, Splint can perform stronger checking
than can be done by any standard lint.

Splint 3.0 is the successor to LCLint 2.5.

Homepage:
https://splint.org/
