Suricata

Clang's scan-build is a very useful code analyzer. It outputs to html, but it also prints to the screen.

e.g.

util-radix-tree.c:733:42: warning: Call to 'malloc' has an allocation size of 0 bytes
            if ( (inter_node->netmasks = SCMalloc((node->netmask_cnt - i) *
                                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
./util-mem.h:166:14: note: expanded from:
    ptrmem = malloc((a)); \
             ^      ~~~
1 warning generated.

Think it would be good to make sure we are scan-build clean and then make it part of the prscript slave.