Fix static library builds, clarify shared libs situation

Fix read-heap-buffer-overflow in decode_varint_param()

If `valuelen` is 0 and `p` equals `end`, decode_varint_param() reads an extra byte past the end of the buffer.