app/bbdev: replace sprintf with snprintf or strlcpy