fix coredump on escaped twiddler key

twiddler_escape_sequence() claims to fold down to a single byte, but why then does it need the len value-result parameter? that function looks quite dicey. this was definitely wrong though -- you can't just cast an integer to char *. someone's gonna try to dereference that and go to memory location 0x41 or something similarly supershitty to the max. please apply.