To satisfy -valgrind and -tsan bots, very ugly

Probably we should just remove timeout when running tsan and vaglrind here, the flaky bots

Now is flaky let's just increase and maybe investigate later

And enable more tests able to trig the issue.

Add a check for stringOffSet(uint16) overflow,
return early if overflow happens

[subset] Use hb_subset_input_t inside of subset_options_t so that input defaults are shared between the library and cli.

Oops!

Fixes https://oss-fuzz.com/testcase-detail/5696825891225600

style fix and add return statement

Fixes https://bugs.chromium.org/p/chromium/issues/detail?id=960331

As 503748d8 fix

Fixed at 6977a95f

This allows partial-instantiating custom Null object for template Lookup<T>.
Before, this had to be handcoded per instantiation.  Apparently I missed
adding one for AAT::ankr.lookupTable, so it was getting the wrong (generic)
null for Lookup object, which is wrong and unsafe.

Fixes https://bugs.chromium.org/p/chromium/issues/detail?id=944346

* add check to FDArray::serialize

* add test files

* fix off by one

[subset] Update the subset fuzzer to determine which options to use based on data in the fuzzing test case.
Add support for toggling retain_gids.

Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12532
Fixes https://bugs.chromium.org/p/chromium/issues/detail?id=922303

Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12312

Fixes https://bugs.chromium.org/p/chromium/issues/detail?id=918340

* Update hb-ot-cff-common.hh

* fix bug

* bummer fix wasn't hit. refix

* additional sanity check

* Added test cases for oss-fuzz issues 11805, 11806

* add fd index checks to subr subsetter

also added oss-fuzz test case

* undid SubrSubsetParam::is_valid

because already validated by SubrClosures.valid

* fix oss-fuzz 11690: substr.offset >= opStart

detect recursive subroutine call & handle as error

* fix build failure

* add minimized test case for oss-fuzz 11690

* removed asserts

Also added an additional error check to avail ()