rewt66 asks: "We are looking for a good static analysis tool for a fairly large (half a million lines) C/C++ project. What tools do you recommend? What do you recommend avoiding? What experience (good or bad) have you had with such tools?"
If Machiavelli were a hacker, he'd have worked for the CSSG. -- Phil Lapsley