Finding Tizen security bugs through whole-system static analysis