* src/cff/cffload (cff_encoding_load): `nleft' must be FT_UInt, otherwise adding 1 might wrap the result.