[Bug 1191090] CVE-2014-9667 freetype: integer overflow in tt_face_load_font_dir() leading to out-of-bounds read