[rw-]

Are you sure? Even Valgrind does not detect everything. E.g. when you mess up variables within your stack.

[mfukar]

That's quite different. Sandboxing in an interpreter is actually fairly easy.

[rw-]

Ok, you are right.