sécu

This looks like a very promising tool.
http://www.coverity.com/main.html

OpenBSD strlcpy and strlcat seems interesting too...