[Bug 1318977] CVE-2016-3190 cairo: out of bounds read in fill_xrgb32_lerp_opaque_spans