[sldev] Static code analysis

[Ryan Williams (Which)]

Gareth Nelson wrote:
> This reminds me........
> [gareth at lovely indra]$ grep -iR "Flawfinder: ignore" newview/*.cpp | wc -l
> 858
>
> Is flawfinder used internally already?
>
>   
We haven't used it in at least three years.  I think those turds 
indicate why an analysis tool that requires you to annotate the source 
code itself to squelch false positives is a non-starter.