cmd: Use strl* rather than strn* to avoid overrun