Fix possible buffer overflow: buflen (a size_t*) was being used