drop VLA usage
Not all supported compilers supports VLAs, so let's eliminate the last uses of that, and put a stopper to introducing new ones.
This is a prerequisite for !209, because MSVC (which we already support building with) doesn't handle it, and we're about to start building vkgears.c on Windows.