The paper describes a technique for identifying functions in code that may suffer vulnerabilities. The problem is important and timely. The technique is evaluated on real data, and the results seem very promising. The reviewers liked the work and appreciated the response made by the authors.