fix sprint_tm buffer size crash (reported by Japheth Cleaver)