CVE-2008-0006 fix (pcf reader).
Logs are temporary files.
Backport CVE-2013-6462 fix (by alanc).

sscanf(line, "STARTCHAR %s", string[100]) ends up as a buffer
overflow if you have an extra-long string in the font...