upvote
It's trickier than it looks because C has mutable aliases. So, in C our bounds check might itself be a data race! Make sure you cope
reply
Depending on what you are doing, yes. But the statement I responded to "your only choice is crash" is certainly wrong.
reply
If you can correctly add all the required explicit bounds checks in C what do you need Fil-C for?
reply
Same reason any turing complete language needs any constructs - to help the programmer and identify/block "unsafe" constructs.

Programming languages have always been more about what they don't let you do rather than what they do - and where that lies on the spectrum of blocking "Possibly Valid" constructs vs "Possibly Invalid".

reply
For temporal memory safety.
reply