From 2008, but still applicable: https://nealabq.com/blog/2008/09/15/bugs-returned-mem-refs/