[PATCH 1/1] user32: Avoid out-of-bounds read in DdeCreateDataHandle with offset (ASan).