Address Sanitizer is a great debugging tool, but apparently you shouldn't use it for hardening release builds: https://seclists.org/oss-sec/2016/q1/363