TaintArray* created with new-array