We didn't infer input bounds correctly when there are lots of inputs.

Due to using push_back on a vector and taking addresses of elements
as we go. Oops.