Merge to XFA: Add safe FX_Alloc2D() macro