Improper use of snprintf return value (buffer overflow)

[EdDev]

At line [email protected], snprintf is returning the number of characters that should have been written to the buffer, not the actual written characters.
The returned value needs to be checked against the buflen limit.

This should be enough for a fast fix:
if(nwritten >= ls->buflen)
nwritten = ls->buflen - 1;