correct bad practice in the code - it uses two changing variables
to manage buffer (buf and buflen). we eliminate buflen and use
fixed point (ep) as the ending pointer.
this fix is critical.
--- 4.9.8-REL released ---
817. [security] do not call syslog() with unbounded network data.
816. [port] main() is an int.
815. [security] pull in several bind8 protocol handling fixes.
814. [support] turn on XSTATS by default
813. [port] add __printflink(), __scanflike() to compat/include/sys/cdefs.h
