I prefer using AddressSanitizer for finding bugs like these now. In addition to heap overflows it can also find stack and global overflows. As a second option

I prefer using AddressSanitizer for finding bugs like these now. In addition to heap overflows it can also find stack and global overflows. As a second option I'm using valgrind which can find uninitialized memory (and doesn't require recompile of all libs as MemorySanitizer does).