Fix two string output functions' handling of their buffer-size parameter.

Fix two string output functions' handling of their buffer-size parameter.

That parameter's type is unsigned; but, the functions return an int.  If the size is too big for a signed integer, then return an error code.
If the size is zero, then don't write anything into a buffer (the buffer pointer may be NULL).  But, do format and count the arguments.