Fix buffer overflow in scanf %mc

This patch corrects a buffer overflow in vfscanf-internal.c related to the %mc and %mC format specifiers. The issue occurs during buffer enlargement, where one byte less than required is allocated. The patch has been reviewed and the reviewer’s approval can be kept for v6 if the fix remains unchanged.