Reverted Mark's simplification of the empty format unit test as per Evan's comment (BTW, gcc elicits a warning if you just use an empty string literal as the second argument to isc_buffer_printf(), hence the "overcomplication"). Dropped bad format test due to lack of options to consistently get a negative return value out of vsnprintf() on all supported operating systems. Ready for review.