Using long server version an evil server could make driver to write error message with the controlled negative offset

The driver historically used _snptintf that returns negative value if buffer is not long enough. That could make the calculated prefix len to be negative. That prefix len is used to calculate the position where to write error message.
It's also a good opportunity to get rid of _snprintf completely as VS has snprintf since 2015 version already