fixed crashes in mutable_buffer::append_number

It used expand_noinit() instead of _expand().