[Issue 9955] UTF8bvnormalize() overruns