iwinfo: fix uninitialized output and bounds checking

Always make sure that output parameter is fully initialized when we are returning success. We cannot count on the caller doing this. Avoid unsafe strncpy use. Do not assume output of read is null terminated.