By adding the return statement you pass the ownership of the string back to main. The unmodified function just took the ownership of the string and deallocated it after printing. Hope this helps

Is there a link to the blog somewhere?

Thanks for the tip! Updated

Excellent catch! Added validation for the new params

Vec::<u8>::new().as_ptr() = 0x0000000000000001

playground

You can already use experimental hyper backend (written in rust) for http stuff in curl https://aws.amazon.com/... I wonder if the vulnerability touches this use case as well

Conspiracy theory: the workgroup found an RCE vulnerability and assigned it identifier CLN-002 but never disclosed it to public and instead sold it to (CIA|DHL|MiB)

Some companies have policies of only using Windows on their laptops. Also this could be a friend's laptop

How are triggers different from events?

Can you guess what is happening here?