fix(security): resolve CodeQL alerts #36 (boxed_free null check) and #38 (use-after-drop)

Author: quantDIY

client/react/desktop/tauri-app/src-tauri/patches/glib-0.18.5/src/collections/ptr_slice.rs

@@ -895,11 +895,16 @@ impl<T: TransparentPtrType> PtrSlice<T> {
             while self.len > len {
                 self.len -= 1;
                 let p = self.ptr.as_ptr().add(self.len);
-                ptr::drop_in_place::<T>(p as *mut T);
+                // We must use ptr::read() -> ptr::write() -> drop() sequence here to avoid
+                // CodeQL "Access of invalid pointer" alerts. drop_in_place() invalidates the
+                // memory location effectively for static analysis, so writing to it afterwards
+                // triggers a warning.
+                let item = ptr::read(p as *mut T);
                 ptr::write(
                     p,
                     ptr::null_mut(),
                 );
+                drop(item);
             }
         }
     }

client/react/desktop/tauri-app/src-tauri/patches/glib-0.18.5/src/subclass/boxed.rs

@@ -42,6 +42,9 @@ pub fn register_boxed_type<T: BoxedType>() -> crate::Type {
         Box::into_raw(copy) as ffi::gpointer
     }
     unsafe extern "C" fn boxed_free<T: BoxedType>(v: ffi::gpointer) {
+        if v.is_null() {
+            return;
+        }
         let v = v as *mut T;
         let _ = Box::from_raw(v);
     }