Looks like operator hb_array_t<> from vector works here. :)

* Update hb-ot-cff-common.hh

* fix bug

* bummer fix wasn't hit. refix

* additional sanity check

* Added test cases for oss-fuzz issues 11805, 11806

* add fd index checks to subr subsetter

also added oss-fuzz test case

* undid SubrSubsetParam::is_valid

because already validated by SubrClosures.valid

Will become default and option removed in the future.

This reverts commit 7146718b.

Fixing differently.

Few fixes for Visual Studio builds

We were dereferencing Null pointers and trying to sanitize them,
which is not necessary...

Ha!

* fix oss-fuzz 11690: substr.offset >= opStart

detect recursive subroutine call & handle as error

* fix build failure

* add minimized test case for oss-fuzz 11690

* removed asserts