source code auditing and profiling

I've recently stumbled upon this source code auditing software called splint ( http://www.splint.org/). It can be used to identify many security related issues statically at source code level. The manual is very comprehensive.

There is also a very good profiling software called oprofile (http://oprofile.sourceforge.net) with decent performance and profiling capabilities. I used to use histx on itanium2 based hardware. These softwares provide similar functions (namely sampling and reporting of hardware events)

Together with valgrind, these tools can be very valuable to identify software problems, security, performance, memory leak etc.