Clang-tidy
Coverity
valgrind
静态扫描工具:
https://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis
动态分析工具:
https://en.wikipedia.org/wiki/Dynamic_program_analysis
http://www.embedu.org/Column/8058.html
https://en.wikipedia.org/wiki/Software_metric
https://en.wikipedia.org/wiki/Best_coding_practices
https://en.wikipedia.org/wiki/Software_assurance