bit_fmt is a function, which is why the compiler didn't complain

that there was no bit_fmt was out of scope on the xfree. Passing
a function address to xfree() predictably does not work very well.

Change the variable name to avoid confusion.

Bug 4241