[tossaway9000]

CodeQL will do this for some languages, the kind of bugs I've seen it identify have been pretty impressive, I'm sure there are some other static analyzers that can do this as well.

[alcover]

Thank you. This tool is on the heavy side, with its seemingly own query language.

I was rather thinking of a specialized scanner (say only for C sources) that just looks for definite classes of vulns, not necessarily scriptable.

[tossaway9000]

CodeQL comes with a bunch of pre-configured queries for the language you're using (at least when running on Github enterprise)