[Bug 1475393] CVE-2017-11575 fontforge: Buffer over-read in strnmatch function