XFA: bound memcpy length in _png_load_bmp_attribute()

BUG=466338
R=thestig@chromium.org

Review URL: https://codereview.chromium.org/997273002
1 file changed