Clone the DER bytes before parsing the certificate.

Otherwise the Certificate.Raw byte array will be freed in the WinCertStore.Close() function.

PiperOrigin-RevId: 558013229

certtostore_windows.go

@@ -338,7 +338,7 @@ func certContextToX509(ctx *windows.CertContext) (*x509.Certificate, error) {
 	slice.Data = uintptr(unsafe.Pointer(ctx.EncodedCert))
 	slice.Len = int(ctx.Length)
 	slice.Cap = int(ctx.Length)
-	return x509.ParseCertificate(der)
+	return x509.ParseCertificate(append([]byte{}, der...))
 }
 
 // extractSimpleChain extracts the requested certificate chain from a CertSimpleChain.