...
Fortify SCA Version 5.0 with the CERT C Rule Pack can detect violations of this recommendation that perform arithmetic and bit operations on a same line but cannot distinguish between operations of positive and negative numbers.
Compass/ROSE can detect violations of this recommendation. However, it can only detect those violations where both bitwise and arithmetic operators are used in the same expression.
...