Fixed bug #66060 (Heap buffer over-read in DateInterval)