str::from_buf/c_str, etc. should be unsafe

[brson]

These do unsafe things with pointers based on the input provided. It seems to me like they should pass the unsafety on to their caller.

[brson]

Done