cwiid_send_rpt's temporary allocation is too big

This function needs only len+2 bytes, but allocates len*2 bytes. This simply corrects the typo.