Replace (sometimes conditional) use of alloca with malloc, and clearing

Replace (sometimes conditional) use of alloca with malloc, and clearing
through volatile pointers with explicit_bzero().

ok beck@ jsing@