Benchmarking a Bug Scanner