When working with a problem Stefan Becker had, I found an off-by-one buffer

overwrite in Curl_select(). While fixing it, I also improved its performance
somewhat by changing calloc to malloc and breaking out of a loop earlier
(when possible).