diff
// Hypothetical usage of build_label where the vulnerability might occur
-    strcpy(build_label, source_string);
+    strncpy(build_label, source_string, QCA_FW_BUILD_VER_LEN);
+    build_label[QCA_FW_BUILD_VER_LEN - 1] = '\0';
