A safe dialect of C from Cornell and AT&T Research