When the gid is to be read from the glyph index array, confirm that the calculated offset is within the bounds of the subtable within the file.