You can use the clang sanitization flags to catch them dynamically (at least, the null pointer dereference and signed overflow).