st/oxr: fix path length verification and improve error messages
I noticed a couple of spelling errors, then I noticed that for verification purposes we can't rely on the user giving us a null terminated string (strlen() is undefined behavior on non null terminated strings), and lastly it's nice when users can directly see the string that is failing verification.