...
Splint Version 3.1.1 can detect violations of this recommendation.
Compass / ROSE currently does not can detect violations of this recommendation. However, detecting violations should be easy. One merely has to note every variable declaration. If the variable is static, it should go into some global list. If the variable is not static, but its name exists in the global list, then the rule has been violated.
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
...