Automatic Mining of Security-sensitive Functions from Source Code