I thought I'd mention ASAN [1] for this. It's built in in the most recent version of gcc and clang (just pass -fsanitize=address), and enjoy the nice reporting

I thought I'd mention ASAN [1] for this. It's built in in the most recent version of gcc and clang (just pass -fsanitize=address), and enjoy the nice reporting when you do something silly with a buffer. We use this extensively at Mozilla when working on Firefox, and I know Google folks use it a lot on Chromium as well. [1]: https://code.google.com/p/address-sanitizer/ https://code.google.com/p/address-sanitizer/