[PATCH v4 1/3] gdi32/uniscribe: Fix heap buffer overflow in ScriptStringAnalyse().