I'm reading about AddressSanitizer, a tool that can be used to find memory bugs for Chrome (and other C/C++ software). I'm a little curious about what the process of using the tool involves:
1) Is it just a matter of running Chrome compiled with AddressSanitizer, playing around with Chrome, and hoping for AddressSanitizer to flag a warning?
2) If the answer to 1) is "yes", can I use tools like Selenium to automate the process?
3) If the answer to 1) is "no", should I instead be scrutinising the source code of Chrome, and then AddressSanitizer using to confirm/exploit the bug? Or should I be using AddressSanitizer in some other way?