Clang static analyzer has a check so that "addresses to stack memory do not escape the function." How smart or tight is this check? Is it a guarantee or just heuri