fix(gamepad-demo): avoid OOB when device name fills the buffer

[apotema]

Follow-up to #272. record() capped names at NAME_CAP, so name_len could equal NAME_CAP (64) and nameFor's sentinel slice e.name[0..name_len :0] read index 64 of a [64]u8 → out-of-bounds panic. Caps record at NAME_CAP-1 (reserve the NUL) and clamps in nameFor; adds a buffer-filling regression test. Both host tests pass.

(Caught in #272's review but lost to the same detached-worktree push no-op; re-applying properly.)

[cursor]

PR Summary

Low Risk
Localized memory-safety fix in example demo code with defensive clamping and a unit test; no auth, persistence, or engine API changes.

Overview
Fixes an out-of-bounds panic in the gamepad-android demo’s connected_pads registry when a device name is long enough to fill the fixed 64-byte name buffer.

record() now truncates names to NAME_CAP - 1 so one byte remains for a NUL terminator. nameFor() clamps name_len the same way, writes the terminator in bounds, and returns a valid sentinel-terminated slice instead of using name_len == NAME_CAP, which previously made e.name[0..name_len :0] read past the buffer.

Adds a regression test that records a name longer than NAME_CAP and asserts truncated length and an in-bounds NUL (issue #270).

^{Reviewed by Cursor Bugbot for commit 584c2cc. Bugbot is set up for automated code reviews on this repo. Configure here.}

[gemini-code-assist]

Code Review

This pull request fixes an out-of-bounds panic bug in examples/gamepad-android/scripts/connected_pads.zig by capping the gamepad name length at NAME_CAP - 1 in record and defensively clamping and terminating the name in nameFor. A test case has also been added to verify this behavior. The reviewer notes that the same bug exists in examples/gamepad/scripts/connected_pads.zig and recommends applying the same fix there to prevent crashes on non-Android platforms.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[gemini-code-assist]

The same out-of-bounds panic bug exists in examples/gamepad/scripts/connected_pads.zig (which has a nearly identical implementation of record and nameFor). To prevent the same crash on non-Android platforms, please apply this fix to that file as well.