ERR_error_string could overflow in future

ERR_error_string specifies the buffer size needed for the error message that it creates. But this number could change in future, with unpredictable results. The alternative ERR_error_string_n allows the specification of a maximum size (including the terminating null) and truncates the string if necessary. This would be safe even if the default buffer size increased over the current fixed limit.