* src/sfnt/ttbdf.c (tt_face_load_bdf_props): Fix size test.

This prevents a potential overflow on 32bit systems.

Problem reported by Zhao Zijie <zijie4@illinois.edu>.

src/sfnt/ttbdf.c

@@ -97,7 +97,7 @@
       if ( version != 0x0001                 ||
            strings < 8                       ||
            ( strings - 8 ) / 4 < num_strikes ||
-           strings + 1 > length              )
+           strings >= length                 )
         goto BadTable;
 
       bdf->num_strikes  = num_strikes;