[PATCH 1/3] sfnt2fon: Avoid out-of-bounds read (AddressSanitizer).