render_bytes: avoid untaint by simply change the sprintf call