[estebank]

Out of bound access is avoided because you ise handles that the arena has given you, creating an invalid handle is restricted. You avoid double free because of Rust's owbership semantics that make the arena itself reaponsible for "deallocation" (which is just blanking the value and letting Drop do its thing). You avoid stale pointers because every access is checked at runtime if you're using a generational arena.

[spacechild1]

We are talking about C++ ;-)

[estebank]

You're right, I was reading a sister thread that was talking about Rust and lost the plot.