Flawfinder: a static analysis tool for C/C++