Function av_frame_to_image_frame 

pub unsafe fn av_frame_to_image_frame(
    av_frame: *const AVFrame,
    limits: FrameLimits,
) -> Result<ImageFrame<PixelFormat, ImageFrameExtra, FfmpegBuffer>, ConvertError>

[av_frame_to_image_frame_as] on the view lane.

Safety

As the crate-private worker: a live source for the duration of the call, and — on this lane — no handle capable of mutating its buffers may outlive the returned carriers.