Missing range checks in ftGdiGetGlyphOutline

ftGdiGetGlyphOutline takes a buffer pvBuf and its size cjBuf as parameters, aborts and returns the needed size if cjBuf is zero but otherwise apparently writes whatever it has into pvBuf regardless of cjBufs value.

Line 4448 of winetests/gdi32/font.c however expects GetGlyphOutline to fail with GDI_ERROR when invoked with a four byte buffer to store the entire glyph bitmap in.