As of commit d9c674e05188abe16dc9440a8c1597632982dd48, make check runs cleanly when -fsanitize=address is in CFLAGS. There are no leaks, no buffer overflows, no use-after-free errors etc. It would be great if we could try to keep it that way.
The GUI is another matter however, I'm sure there are a lot of things there which still need to be fixed. J'