Use snprintf() to be safe.

I _think_ NAME_MAX is indeed the max, unlike the notorious trap of PATH_MAX,
but as we already have the buffer's length calculated...