When and how does this code run? Can the attacker manipulate (change) the value to which
name is pointing asynchronously?