compiled with safe option