The GitHub issue #1 and RustSec advisory explicitly identify these 3 functions with specific panic safety flaws: 1) Slice::new's premature len setting enables drops of uninitialized memory, 2-3) resize()/resize_with()'s len adjustment timing enables double drops. Code structure matches described vulnerability patterns (CWE-787 via invalid memory operations during panic unwind). The provided PoC demonstrates concrete double-free scenarios in resize methods.