freetype2/truetype: Heap-buffer-overflow in tt_set_mm_blend

Detailed report: https://oss-fuzz.com/testcase?key=6380894154653696 Project: freetype2 Fuzzer: libFuzzerfreetype2truetype Fuzz target binary: truetype Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60a000020e38 Crash State: ttsetmmblen...