bearophile wrote:
I find it hard to believe that safe modules can define for example the semantic of static casts between size_t and a pointer, while unsafe modules can leave it undefined as in C :-) To me this will lead to a mess even worse than the C situation.
You won't be able to cast pointers from integral types in safe functions.
