Can source code auditing software identify common vulnerabilities and be used to evaluate software security?
An Empirical Study of the Reliability of UNIX Utilities