Fix buffer overflow in string_vformat. CVE-2019-16928 Bug 2449