Fix various buffer overruns in fmt_scan.c; the bulk of this is passing

buffer length through to decode_rfc2047() and having that function do
sufficient bookkeeping to avoid running off the end of the buffer.