Static Detection of Unsafe DMA Accesses in Device Drivers