diff
- cnt = sscanf(cmd_buf, "%s", user_val);
+ strncpy(user_val, cmd_buf, sizeof(user_val) - 1);
+ user_val[sizeof(user_val) - 1] = '\0';
+ cnt = strlen(user_val);
