Remove VLA (variable length array) and use heap allocation instead

clang doesn't compile with VLAs, which are part of C99, but not
C++ standard compliant. Allocating on the heap is (very) slightly
more expensive, but can prevent runaway stack arguments from
exhausting the amount of available stack memory.