Fix buffer overrun in mod_substitute.

No need to fix trunk, the code is no
longer present there.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1178053 13f79535-47bb-0310-9956-ffa450edef68