yet more pointer safety