CVE-2025-40082 hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()