Safe to use in the presence of untrusted code.