[subset] don't use pointers returned from push after array has resized in hb-subset-glyf.cc
2 files changed