[buffer-message] Fix potential buffer overflow... ...when buffer messaging is enabled and with malicious font. Fixes https://github.com/harfbuzz/harfbuzz/security/advisories/GHSA-p965-5rr7-9mhq