type Safe_Int_Ptr is not null access all Integer;