Tool to scan C/C++ source for potential vulnerabilities