FFI-proof slice::from_raw_parts

As a data point, just this week git2 (a crate that provides libgit2 bindings) fixed a null pointer dereference when using slice::from_raw_parts by adding a null check: Potential null pointer dereference with Deref implementation on Buf · Issue #1211 · rust-lang/git2-rs · GitHub