temporary file names were uninitialized if TMPDIR was set and 1 too small otherwise. Fixed style bugs in previous commit. Fixed missing checks for malloc failure in previous commit. Report malloc failure consistently, at least in temp.c.
protect against buffer overruns in mail temporary files.
