xar.c: Don't leak file handle in is_valid_dir
Update downloads link