There are a couple native methods callable from WASM where the methods expect a NULL terminated char array (a string). Validate that the string lives entirely within active pages before dispatching it. Otherwise native code could segv if given a non-null-terminated string on the end of active pages.