fix: heap-allocate queue_family_indices in GrowableBufferArena to prevent use-after-free

Author: HTRMC

src/client/renderer/buffer/GrowableBufferArena.zig

@@ -100,11 +100,21 @@ pub const GrowableBufferArena = struct {
         config: GrowableBufferConfig,
         io: Io,
     ) !Self {
+        // Heap-allocate a copy of queue_family_indices so it survives beyond the caller's
+        // stack frame. The original slice may point to a stack temporary (e.g. &[_]u32{...}).
+        // asyncAllocateArena reads this config on a background thread, so we need stable storage.
+        var owned_config = config;
+        const owned_indices: ?[]const u32 = if (config.queue_family_indices) |indices| blk: {
+            const duped = try allocator.dupe(u32, indices);
+            break :blk duped;
+        } else null;
+        owned_config.queue_family_indices = owned_indices;
+
         var self = Self{
             .arenas = .{},
             .device = device,
             .physical_device = physical_device,
-            .config = config,
+            .config = owned_config,
             .allocator = allocator,
             .io = io,
         };
@@ -204,6 +214,11 @@ pub const GrowableBufferArena = struct {
         }
         self.arenas.deinit(self.allocator);
 
+        // Free heap-allocated queue family indices
+        if (self.config.queue_family_indices) |indices| {
+            self.allocator.free(@constCast(indices));
+        }
+
         logger.info("GrowableBufferArena destroyed: {} allocations, {} frees, {} expansions", .{
             self.total_allocations,
             self.total_frees,