[Bug 1121944] VUL-1: CVE-2019-6284: libsass: heap-based buffer over-read exists in Sass:Prelexer:alternatives in prelexer.hpp