* src/truetype/ttgxvar.c (tt_var_load_item_variation_store): Update 2. Note again that ( region_count * axis_count ) does not overflow or wrap around as those are 15- and 16-bit values. "Six" does it.