I think clang/LLVM is where the active point of development for a lot of that kind of stuff is. There's been a lot of code-checking/sanitization features that h

I think clang/LLVM is where the active point of development for a lot of that kind of stuff is. There's been a lot of code-checking/sanitization features that have been added in the last few releases. The most recent release of clang can even track undefined integer behavior (as recently posted to HN).