Merge "InputMethodSubtypeArray: prevent negative count injection" into udc-dev