found on fresh git with libFuzzer+UBSan

Build with ubsan (clang -fsanitize=shift).
Feed the data below (base64-encoded) into FT_New_Memory_Face

src/winfonts/winfnt.c:381:61: runtime error: shift exponent 2816 is too large for 64-bit type 'FT_ULong' (aka 'unsigned long')

Indeed, this code is:
        size_shift = FT_GET_USHORT_LE();
...
        face->font->offset   = (FT_ULong)FT_GET_USHORT_LE() << size_shift;

i.e. the bytes taken directly from the user input are used for the shift exponent.
in C/C++, shifting a 64-bit value by more than 63 is undefined behavior.


TVopASgnKiAnbU5FN2IoASgKJyogVydtJyogAbEoujcoISoKYgH/CAEovwonADsAAgEBCAr/CAEo
vwEnCgAAAAABAACAAAsABAMAME9TLzI99X9bAAABOAAAAE5jbWFwi9+wwAAAA4gAAAKWZ2FzcDr/
/wADAAA65AAAAAIAACgKJwEAAQAAKgQLAIAAAwAwT1MvMj31f1sAAAE4AAAATmNtYXCL37DAAAAD
iAAAApZnYXNw/x0AAwAAAADkADoIgAIAAAEoKQQoJyogJ/C6KTdiKS8qIQUsCiEFKBYoCicqIDdt
AAEoAABnbHkmWVZymAAAKAonKiAnKtcpN2IoJ5coCicqByQAADBmaGVhZM1pPh4AAAC8KAoqICdt
JwBGADZoaGVhDe4GNgAAAPQAAAAkaG10eF+4DcAAAAGIAAAB/iBXbbo3bG9jYfY96kAAAAYgAAAB
Am1heHAA6gE=