cmake

Merge pull request from GHSA-q4m7-9pcm-fpxh #418

Job	Run time
linux_archs (i386)	1m 31s
linux_opts (gcc, no_fp)	34s
linux_archs (arm32v7)	11m 18s
linux_checks (Debug, Default, Valgrind)	1m 9s
linux_opts (gcc, no_reader)	28s
linux_archs (arm64v8)	9m 0s
linux_checks (Debug, Default, Sanitizer)	2m 5s
linux_archs (ppc64le)	8m 51s
linux_opts (gcc, no_writer)	35s
linux_clang_latest	1m 20s
linux_checks (Debug, ReduceBinary, Valgrind)	55s
linux_opts (gcc, no_utf8)	57s
linux_archs (s390x)	8m 39s
linux_checks (Debug, ReduceBinary, Sanitizer)	57s
linux_opts (clang, no_fp)	36s
linux_archs (riscv64)	10m 48s
linux_checks (Release, Default, Valgrind)	1m 25s
linux_gcc_latest	1m 24s
linux_opts (clang, no_reader)	32s
linux_checks (Release, Default, Sanitizer)	1m 31s
linux_opts (clang, no_writer)	47s
linux_gcc4	1m 22s
linux_opts (clang, no_utf8)	1m 8s
linux_checks (Release, ReduceBinary, Valgrind)	1m 37s
linux_gcc5_i386	1m 30s
linux_checks (Release, ReduceBinary, Sanitizer)	1m 32s
linux_checks (MinSizeRel, Default, Valgrind)	1m 33s
linux_checks (MinSizeRel, Default, Sanitizer)	1m 21s
codecov	1m 2s
fuzzing	5m 23s
linux_checks (MinSizeRel, ReduceBinary, Valgrind)	59s
linux_checks (MinSizeRel, ReduceBinary, Sanitizer)	56s
linux_tinycc	16s
macos_clang	1m 44s
windows_msvc	3m 11s
	1h 28m 56s

Provide feedback