Merge pull request #1448 from harfbuzz/cff-leak

[CFF] fix leak: oss-fuzz 11662