add additional error subproject for generic error reporting infrastructure
first attempt at checking for integer overflows

pointer arithmetic / array access only
checking for integer overflows in function parameters for security relevant functions

functions are hardcoded, currently malloc, realloc, and calloc only
better error reporting with location information

for rewritten expressions (arrays and unary expressions)
reduce false positives

previously any assignments created a security context
warnings about integer narrowing
ignore SecurityWarnings in existing test cases

causes many false positives (or just warnings, not errors) that we do not care about here
enforce function (fix compiler error)
Merge branch 'master' into integervulnerabilities
refactor option infrastructure

all option parsing goes on in the frontend project now. all other
projects only have an interface with the options they can process

the frontend binds all those interfaces together into a command-line
interface
introduce options for the type system and analysis
guard security warnings by commandline options
refined option printing once more
extra command-line option to decide whether to rewrite line numbers

note: default behavior changes!
also fixes that after rewritings tokens always refer to the output file
TypeError -> TypeChefError extracted into separate project

allows different projects to use the same error reporting facilities
use severityExtra for analysis errors
fix scaffolding for Integer vulnerability tests

these checks are inactive by default and tests need to activate them
implement rule DCL16-C (trivial)
partially implement rule DCL31-C (trivial)
rewrite testing infrastructure

now identifying problems only(!) to be found with extra analysis