code review wanted!

Rust's `unsafe` allows us to shoot ourselves in the foot in quite subtle ways.

I've tried to minimize the amount of unsafe code here, but if you're experienced with unsafe rust and soundness issues, please have a look at the source and leave a comment with your thoughts.