Calls to `.as_ptr()` on slices should ensure valid bounds

[cramertj]

e.g. Cursor::new doesn't validate that data or mask are of the correct size, allowing for out-of-bounds access.