This is unlikely, but should this use `snprintf` to avoid buffer overflow?