Clear tmp between ip6 check and string escape to prevent reuse of the buffer, in order to prevent a possible buffer overflow on malformed urls. Based on a patch by Adam Bozanich abozanich musecurity com