Fix crash using tagged pointers