work-in-progress: test with static analysis and address sanitizer