Building with address-sanitizer shows that using ArrayRef ends up accessing a temporary outside its scope.