Хотел вот совсем недавно попробовать что за зверь, но "с коробки" не собрался, а на этапе ковыряния начальство решило, что я не тем занимаюсь - пришлось бросить;)
Like Cyclone, they usually require restricted coding idioms or additional annotations, but unlike Cyclone, they offer no soundness guarantees.
[...]
The primary advantage of these systems is that they [Safe-C & CCured] require (almost) no changes to the C code, unlike Cyclone. However, they do not preserve the same data representations and lifetimes for objects. Furthermore, memory errors are caught at run time instead of compile time. For instance, when an object is freed under CCured, the (entire) storage is not immediately reclaimed, but rather marked as inaccessible. Subsequent accesses check the mark and signal an error when the object is dereferenced.