It's always DNS part ∞: tracking down a use-after-free bug in Envoy's DNS