pkg/tarsum: avoid buf2 allocation in Read

Docker-DCO-1.1-Signed-off-by: Cristian Staretu <cristian.staretu@gmail.com> (github: unclejack)