This is a clang option that adds bounds-checking code: https://clang.llvm.org/docs/UndefinedBehaviorSanitizer.html#available-checks

Trying it out with a simple patch results in some explosions, so we might actually uncover some bugs with this.