According to the documentation of ScriptShape function, the psva argument should have the number of elements indicated by cMaxGlyphs.