~ Bugs in linux kernel versions 2.6.0, 2.6.9, 2.6.18 from the Linux Kernel Taint Analyzer.

~ Intelligent, context-sensitive detection of real security vulnerabilities.

~ Explore software control flow using the supergraph report (here's the source).

~ Dead code is code that can never be executed, either because of control flow or because conditions to reach it can never be satisfied. Unintentional dead code is often a source of serious bugs. Various contrived examples are shown here.

~ CQSAT provides a valuable code-browser for examination of large codebases. Functions definitions and variables are cross-referenced. Here is one open source example.

~ Some sample complete analysis packages are provided here.

~ CQSAT Output.