[PATCH 1/5] mfplat: Fix scanline pointer returned with Lock2D().