If you download the Microsoft® Windows® Software Development Kit (SDK) for Beta 2 of Windows Vista and WinFX Runtime Components, then you actually get the C++ compiler that includes support for the “preFAST” /analyze code analysis feature.
Normally, you’d only get this if you purchased Visual Studio Team System for lots of $$$.
I installed it, and managed to get Mozilla Firefox compiled (just a couple of patches required - problems with the new headers in the SDK conflicting with Mozilla code).
The easiest way to analyze the code is to edit your mozconfig file and add the following:
I’ve uploaded a build log that includes the various warnings. Many are spurious, so the trick is to weed out the noise and find the ones that are relevant.