Multiple memory corruption vulnerabilities in safe APIs

User-defined implementations of the safe trait scratchpad::Tracking can cause heap buffer overflows

out_reference::Out::from_raw should be unsafe