Avoid an out-of-bounds read in sqlite3_prepare() and fix a case where the output variable *pzTail was being set incorrectly. Fix for #3027. (CVS 4957)

FossilOrigin-Name: c287a7b29410be12cf88f886e8e2525a42aa9c03