strftime: don't assume a byte count fits in 'int'