Exploiting a use-after-free vulnerability in Rust std::iter::RepeatN with Rc to achieve arbitrary read/write and RCE through libc cancellation handlers.