*(&arr + 1) - arr
That translates to taking the address one point past the array and subtracting the address of the array from it. It doesn't actually dereference the location past the end of the array.While:
(&arr)[1] - arr
might appear to be doing something different, it actually isn't.