gdiplus: Prevent NULL StringFormat in gdip_format_string.