heap-buffer-overflow in tt face palette set

heap-buffer-overflow in tt face palette set: a task in MiMo-V2.6-RL-oss: Agentic RL Environments (MiMo RL release). AddressSanitizer: heap-buffer-overflow in function tt face palette set in file freetype2/src/sfnt/ttcpal.c