Fix scan-build complains in Format/StringBuilder

The utf8BOM complaint is a bit weird, because it is clearly not
a bug. But I'm not sure how to get scan-build to ignore certain
things just yet, so this will take some investigating.