64 bit proof alloc_array