[Bug 800581] freetype: Out-of heap-based buffer read by parsing, adding properties in BDF fonts, or validating if property being an atom (FU#35597, FU#35598)