title: Address where an element just past the end of an array would be stored
body: <p>According to ECMA-335:</p>
  <blockquote>
  <p><strong>II.14.4.2 Managed pointers</strong></p>
  <p>Managed pointers (&amp;) can point to an instance of a value type, a field of an object, a field of a value
  type, an element of an array, or the <strong>address where an element just past the end of an array would be
  stored (for pointer indexes into managed arrays)</strong>.</p>
  </blockquote>
  <p>The last part interests me. Does it mean that a reference beyond the end of an array is valid? How is such a reference obtained (possibly with IL)? How does the CLR handle reading and writing there?</p>