[google234123]

Sadly, that's typical with static analyzers todays...

[flukus]

I like valgrind for this, combined with automated tests it gets decent coverage and finds actual (or at least probable) errors.

[unmole]

Valgrind is also prone to throwing up false positives. I find ASan much better.