unzip: fix xstrndup bug (xstrndup(s,n) can allocate less than n bytes!)