make_filename: another off-by-one buffer issue