native runtime doesn't seem to have a proper memory bounds check
looking at the implementations of host functions (blit etc)
they seem only validating the given pointer is pointing inside the wasm memory.
it isn't enough for functions which access more than one byte. (ie. most of them.)