Fixed #4834 (FreeType: incorrect array boundary analysis)