Ensure that unprotected_ptr is properly computed from user_ptr