Valgrind works on the same binary executable that you're be shipping, not some special build. Among the sanitizers the valuable ones are the general undefined

Valgrind works on the same binary executable that you're be shipping, not some special build. Among the sanitizers the valuable ones are the general undefined behavior ones. Valgrind won't tell you about your integer overflows and whatnot. Like that in b >> a, a turned out to be 32 or greater at run-time.