#ifdef AT_USING_SERVER
...
static rt_err_t at_cmd_get_name(const char *cmd_buffer, char *cmd_name)
{
    rt_size_t cmd_name_len = 0, i = 0;

    RT_ASSERT(cmd_name);
    RT_ASSERT(cmd_buffer);

    for (i = 0; i < strlen(cmd_buffer); i  )
    {
        if (*(cmd_buffer   i) == AT_CMD_QUESTION_MARK || *(cmd_buffer   i) == AT_CMD_EQUAL_MARK
                || *(cmd_buffer   i) == AT_CMD_CR
                || (*(cmd_buffer   i) >= AT_CMD_CHAR_0 && *(cmd_buffer   i) <= AT_CMD_CHAR_9))
        {
            cmd_name_len = i;
            rt_memcpy(cmd_name, cmd_buffer, cmd_name_len); /* VULN: cmd_buffer is AT_SERVER_RECV_BUFF_LEN bytes (256), while cmd_name is only AT_CMD_NAME_LEN bytes (16); therefore, it might be possible to overflow past the cmd_name buffer with a carefully crafted cmd_buffer */
            *(cmd_name   cmd_name_len) = '\0';

            return RT_EOK;
        }
    }

    return -RT_ERROR;
}