[Bug 1159293] VUL-1: CVE-2019-19797: transfig,xfig: out-of-bounds write in read_colordef in read.c