fix: 修复 call_function_sync 子VM释放导致的 release 崩溃

crates/oxide_vm/src/bindings/bind_error.rs

@@ -114,6 +114,8 @@ pub fn bind_error(kernel: &Arc<OxideKernel>, global: &mut JsObject) {
         let err_ctor_ptr = kernel.builtin_world().error_constructor.as_ptr() as *mut JsObject;
         let err_ctor = unsafe { &mut *err_ctor_ptr };
         // SAFETY: error_constructor is a NativeFn fn-item.
-        err_ctor.set_native_fn(Some(unsafe { NativeFnPtr::from_raw(crate::builtins::error::error_constructor as *const ()) }));
+        err_ctor.set_native_fn(Some(unsafe {
+            NativeFnPtr::from_raw(crate::builtins::error::error_constructor as *const ())
+        }));
     }
 }

crates/oxide_vm/src/bindings/bind_number.rs

@@ -37,7 +37,9 @@ pub fn bind_number(kernel: &Arc<OxideKernel>, global: &mut JsObject) {
         let num_ctor_ptr = kernel.builtin_world().number_constructor.as_ptr() as *mut JsObject;
         let num_ctor = unsafe { &mut *num_ctor_ptr };
         // SAFETY: number_constructor is a NativeFn fn-item.
-        num_ctor.set_native_fn(Some(unsafe { NativeFnPtr::from_raw(crate::builtins::number::number_constructor as *const ()) }));
+        num_ctor.set_native_fn(Some(unsafe {
+            NativeFnPtr::from_raw(crate::builtins::number::number_constructor as *const ())
+        }));
         num_ctor.set_native_arg_count(1);
 
         for (name, value) in [