vsnprintfcb will write to the given string buffer even if the pointer is NULL:

Apparently having str==NULL && size==0 is valid: https://stackoverflow.com/a/37173612

The code above obviously needs to be wrapped in an if condition, but what about struct str_ctx? Adding 0 to a NULL pointer is fine AFAIK, but cbvprintf may do something naughty with that.