...
Fortify SCA Version 5.0 with the CERT C Rule Pack can detect violations of this recommendation that perform arithmetic and bit operations are performed on same line but cannot distinguish between operations of positive and negative numbers.
Compass/ROSE can detect violations of this recommendation. However, it can only detect those violations where both bitwise and arithmetic operators are used in the same expression.
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
...