Aliasing Limits on Translating C to Safe Rust