...
- http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis
- http://samate.nist.gov/index.php/Tools
- http://www.dwheeler.com/flawfinder/ (has commentary on some tools)
- http://www.securityfocus.com/tools/
- http://www.vanheusden.com/audit.html
There are also various tools out there for building analysis tools, like bddbddb or LLVM, but unless they easily enable some specific sorts of useful checks that are difficult to get through other tools, let's not invest effort at this time.
...