At work, we migrated a small codebase this year to VS2008.  It was &quot;painful&quot;.  This week I put it through asan and found five buffer overflows or similar with about a half hour of work, but the thing still spits out a hundred warnings or so when you compile, and that&#x27;s with <i>default</i> settings.  This project is about 1% of the code, by line count, that my team is responsible for.<p>At home, I turn on -Wall -Wextra for starters, enable about a dozen more for good measure, with -Werror as the pièce de réisistance.