Identifying flaws in code