Hardened malloc vs OpenText Fortify SAST (2026)