On Friday, 4 January 2013 at 14:15:01 UTC, Tommi wrote: > 'Tainting function call': > A call to a 'tainter function' where at least one of the > arguments passed by reference is ref to a local variable I forgot to point out that the return value of a 'tainting function call' is considered to be a "reference to a function-local variable" (even if it's not in reality).