Max Samukha wrote: > Please comment. The example relies on taking the address of a ref in a safe function. To close this hole, it appears that should be disallowed.