comdlg32: Fix potential buffer overrun of lpxx->lfFaceName in CFn_WMCommand.