readtokens: do not leak internal token_lengths buffer