Function av_frame_to_owned_video_frame 

pub unsafe fn av_frame_to_owned_video_frame(
    av_frame: *const AVFrame,
    time_base: Timebase,
    limits: FrameLimits,
) -> Result<VideoFrame<PixelFormat, VideoFrameExtra, FfmpegBytes>, ConvertError>

av_frame_to_video_frame on the owned lane, which copies every byte it reads and therefore has no aliasing obligation.

Safety

The source must be live for the duration of the call.