Here's one C/C++ targeting tool they cite that is kind of similar: https://cseweb.ucsd.edu/~dstefan/pubs/brown:2020:sys.pdf https://cseweb.ucsd.edu/~dstefan/pub

Here's one C/C++ targeting tool they cite that is kind of similar: https://cseweb.ucsd.edu/~dstefan/pubs/brown:2020:sys.pdf https://cseweb.ucsd.edu/~dstefan/pubs/brown:2020:sys.pdf But both tools only catch a subset of stuff, so they're not final cures for safety bugs.