Fix bounds checks for autoload path construction

[bwoebi]

Motivation

• The autoloader constructed path[MAXPATHLEN] with snprintf() but then used the unchecked snprintf return (path_len) for iteration and memmove(), which allows an out-of-bounds read/write when the formatted path is truncated by the buffer.

Description

• Add a truncation guard if (path_len >= sizeof(path)) { return; } immediately after the snprintf() call in both dd_load_file() and dd_load_files() to prevent iterating or copying past the stack buffer for oversized inputs.
• This is a minimal remediation that preserves existing autoload behavior for in-bounds paths while preventing memory corruption for oversized class/path inputs.

Testing

• No automated tests were executed as part of this change; the change is a small bounds-check addition and should be validated by the normal CI build/test matrix (including extension builds and ASan runs).

---

Codex Task

[datadog-datadog-prod-us1]

 

✨ Fix all issues with BitsAI

⚠️ Warnings

🚦 1 Pipeline job failed

DataDog/apm-reliability/dd-trace-php | randomized tests: [amd64, no-asan, 3]     

🔄 Retry job. This looks flaky and may succeed on retry.

Error response from Docker daemon: unknown error when trying to pull the image 'datadog/dd-trace-ci'.

ℹ️ Info

No other issues found (see more)

🧪 All tests passed
❄️ No new flaky tests detected

🎯 Code Coverage (details)
• Patch Coverage: 100.00%
• Overall Coverage: 60.71% (-0.04%)

Useful? React with 👍 / 👎

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 2ad8534 | Docs | Datadog PR Page | Give us feedback!}