[dmos62]

I too would be interested in interesting static code analyses (that are beyond linting).

[saagarjha]

Terms which you might find useful to search for are "dataflow analysis", "abstract interpretation", and "taint checking". A basic background in compiler optimization would generally be helpful.