Initial bounds check template, not the actual way to do it, but demonstrates approach.

[clegoues]

Parses the sanitizer report to get out the stack trace. Cross-references stack trace with implicated functions for each line in each implicated functions, pulls out statements read at that line attempts to insert (a deeply stupid) bounds check template before the read. So, one potential patch per read variable.

Generate can definitely get to the point of producing a list of diffs; not sure if they're ever successfully printed out or if things fail at that point.

PRing for feedback/discussion of general flow.