[Bug 1191085] CVE-2014-9663 freetype: out-of-bounds read in tt_cmap4_validate()