df8dcca9b511468dbbb655e6ae176cd33cfe4641
CGDataProvider::from_buffer().
The wrapper for that function made no attempt to ensure that the buffer would stay alive, and as a result use-after-free could easily occur. The fix is to require that the buffer be stuffed in an `Arc` box and to teach Core Graphics how to release the `Arc` when it's done with it.
Description
Languages
Rust
100%