Clang comes with ASAN and UBSAN[2] Sanitizers and we should have a CI testing scenario that compiles BIND 9 with both and runs the full test suite.

The minimum would be to install fairly recent Clang[3] or GCC[4] into the CI VM and run something like this:

    CC=clang CXX=clang CFLAGS="-O2 -g -fsanitize=address -fsanitize=undefined" ./configure <possibly_enable_all_options_that_affect_code_and_testing>
    make check

1. https://clang.llvm.org/docs/AddressSanitizer.html
2. https://clang.llvm.org/docs/UndefinedBehaviorSanitizer.html
3. at least LLVM 3.3 for UBSAN and LLVM 3.1 for ASAN
4. at least 4.9 for UBSAN and 4.8 for ASAN

I believe that this should be done before the 9.12 final release (and I am sorry I haven't thought about this sooner).