It's a safety / performance tradeoff that isn't well-constrained by the language or most tools. That's partially why it's a fragile and dangerous language. If

It's a safety / performance tradeoff that isn't well-constrained by the language or most tools. That's partially why it's a fragile and dangerous language. If you're writing a serious kernel in C, you ought to have programmatic debugging assertion constraints for every parameter.