But I can ask the exact same question: safe by what standard? > you can't have arithmetic overflow in WUFFS That seems improbable. Can I write x++? Because

But I can ask the exact same question: safe by what standard? > you can't have arithmetic overflow in WUFFS That seems improbable. Can I write x++? Because if I can, then I can have an arithmetic overflow. > Buffer overflows are the same That seems improbable. Can I write *p++? Because if I can then I can overflow a buffer.