How is format_ptr allocated? Do we need to worry about ownership issues here? Passing a naked pointer around like this is a little unsettling...