A Study of Undefined Behavior Across Foreign Function Boundaries in Rust Libs