[Devel] nleft local overflow in cffload.c

[Dirck Blaskey]

in cffload.c, in cff_encoding_load, there is a declaration:
    FT_Byte  nleft;

after nleft is read in, it is incremented.

with a font with a single range of 255 chars,
the nleft++ causes FT_Byte to wrap to 0.

changing to:
    FT_UInt nleft;

works ok.