BUG/MINOR: buffers: MT_LIST_DEL_SAFE() expects the temporary pointer.

When calling MT_LIST_DEL_SAFE(), give him the temporary pointer "tmpelt",
as that's what is expected. We want to be able to set that pointer to NULL,
to let other parts of the code know we deleted an element.
diff --git a/src/buffer.c b/src/buffer.c
index 9c1c9b4..a7f405b 100644
--- a/src/buffer.c
+++ b/src/buffer.c
@@ -120,7 +120,7 @@
 		if (wait->target == from || !wait->wakeup_cb(wait->target))
 			continue;
 
-		MT_LIST_DEL_SAFE(&wait->list);
+		MT_LIST_DEL_SAFE(elt1);
 		avail--;
 	}
 }