More snprintf() for buffer-overrun protection