As usual, I’ll remind people that SPARK can prove the absence of these in your code:

https://en.m.wikipedia.org/wiki/SPARK_(programming_language)

Frama-C for C apps:

https://frama-c.com