BOON, a buffer overrun detection tool

I wanted to let folks on this list know that I recently released BOON,
a tool for scanning C source code for buffer overrun vulnerabilities.
This is the static analysis tool described in my NDSS 2000 paper.

The code is freely available at
  http://www.cs.berkeley.edu/~daw/boon/
Be warned that this code is primarily a research prototype and has some
serious problems.  Nonetheless, I hope it will be useful to you in your
security auditing work.