scan C/C++ source code for security problems
