Ask HN: Would any code analysis tools have caught have caught heartbleed?

If not, why not? Is this kind of issue something that a language feature could avoid?