snprintf bug

#include <stdio.h>

int main()
{
  char buf[8];

  snprintf(buf,sizeof(buf),"I'm not vulnerability");

//  sprintf(buf,"I'm vulnerability");
//  snprintf(buf,"%s","I'm vulnerability"); //**********

  printf("%s\n",buf);
}