SonarQube and Visual Studio analyser for the most part, also enabling bounds checking and other test configurations.

In the old days I used stuff like Insure++.

Additionally when using C is unavoidable, taking a abstract data types design approach[0], to minimize killing data structure invariants as much as possible.

[0] - https://en.wikipedia.org/wiki/Abstract_data_type