OSV-2023-372 UNKNOWN WRITE in hb_ot_layout_substitute_start

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58626 Crash type: UNKNOWN WRITE Crash state: hbotlayoutsubstitutestart hbotshape hbshapeplanexecute...