static analysis of C/C++ code