Security context

Highlights

Memory Safety: 1 prior fix. Scrutinize any change in this area.

src/macros.rs: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

Memory Safety: A critical memory safety risk exists in the definition of COM interface macros. Using mutable receiver references (`&mut self`) instead of shared references (`&self`) can violate Rust's aliasing invariants, enabling multiple mutable aliases to the same underlying interface and resulting in memory corruption or undefined behavior from seemingly safe client code.