[panstromek]

That's actually a pretty clever idea, I never realized you can that. Thanks for sharing.

[int_19h]

Note that the reason why this works for sandboxing is that wasm code gets its own linear memory that is bounds-checked. Meaning that the generated C code will contain those checks as well, with the corresponding performance implications.