fix some warnings
use PATH_MAX not _MAX_PATH (MAX_QPATH) which is only 64

fixes stack abuse that was causing ssp to trigger
use strlcpy/strlcat when dealing with paths in extractfuncs