CVE-2019-7154

The main function in tools/wasm2js.cpp in Binaryen 1.38.22 has a heap-based
buffer overflow because Emscripten is misused, triggering an error in
cashew::JSPrinter::printAst() in emscripten-optimizer/simple_ast.h. A
crafted input can cause segmentation faults, leading to denial-of-service,
as demonstrated by wasm2js.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920853&gt;