[dfawcus]

I understand it works _if_ you declare p as being volatile, or explicitly tag it as _Atomic.

i.e., either of these forms:

    foo * volatile p;
    foo * _Atomic p;

Or at least it did when I was performing a similar experiment.

[quotemstr]

Sure. Or use a mutex, or use any of the other zillion concurrency-safe constructs out there. Still, Fil-C is memory-safe only up to data-race freedom. This bound is still a plenty useful, but Pizlo shouldn't be going around saying Fil-C is memory-safe in general when it ain't.