Security feed

QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JS_ReadFunctionTag().