I’m referring to a paper describing the utility FindBugs. It appears to be developed by a student of Bill Pugh, who is best known for discovering why double-checked locking is not completely safe in Java. I haven’t had the time to play with it yet, but judging from the paper, it looks very promising. It uses heuristics to find typical bug “patterns”. Yes, it’ll have false positives, but it could also prove invaluable in tracking down real bugs before they bite.