Let us presume we have a big pile of.. many c- like source code, example: an OS and repositories code.
The question: In general, how can we search for malicious code? What automated (?) softwares are there to run it on the code?
OS is a UNIX-like OS, ex.: BSD, Linux
Should be a "free" solution.