Created attachment 85 [details] output of the static analyzer 'build-scan' (clang's static analyzer) claims that it finds over 200 bugs in libsigrokdecode (with all drivers enabled). Sure, there might be some false positives and many warnings are in the generated code for the bindings, but some warnings may point to more serious mistakes. With clang installed, the analyzer can be invoked by running "scan-build ./configure; scan-build make".
Created attachment 86 [details] latest static analyzer output