obfsproxy: use asprintf
malloc+snprintf is a fragile pattern; tor_asprintf is much less likely to bite you because you added numbers wrong or updated a format string without making a corresponding change in the allocation.
Similarly, snprint+strdup() is icky.