0.9.6.9:
Oops. Misunderstood the code, and introduced a bug into the
UTF-8 resync handling.
* Fix the code to implement the intended behaviour as explained
by Christophe on #lisp: fill the buffer up to the first
invalid sequence, only signal an error if the first code
sequence read is invalid. (<0.9.6.6 never filled the buffer,
0.9.6.6 looped infinitely instead of signaling an error
99.8% of the time).
* Add tests. One of which fails; it seems to me that the
force-eof restart has never worked properly.