language-independent and enable the detection of unsafe system calls (which
must then be examined by the developer). Other type qualifiers are languagespecific and help detect vulnerabilities such as use of buffer overflow prone C
and C++ library functions such as printf.
Still other compilers perform taint analysis, in which specific input data