I used to do a lot of security-auditing of C/C++ code. In those days I started off using RATS, and other automated scanners. Generally though I found they pro

I used to do a lot of security-auditing of C/C++ code. In those days I started off using RATS, and other automated scanners. Generally though I found they produced more noise than value, so these days when I audit code I do it from start to finish, though I'll certainly have a quick-glance at any code that involves: * fopen * popen * getenv * or bind/accept I guess that means "no", not really, and despite that I've reported (security) bugs in applications as diverse as Emacs, Firefox, and GNU Readline.