controller_commands: enforce strict match on cmd lookup

src/cntlr_commands.c

@@ -944,8 +944,12 @@ struct controller_command *controller_command_lookup(const char *command)
 	struct controller_command *cmd = NULL;
 
 	for (int i = 0; i < num_cmds; i++) {
+		int len;
+
 		cmd = &cntlr_commandlist[i];
-		if (!strncmp(cmd->command, command, strlen(cmd->command)))
+		len = (strlen(cmd->command) > strlen(command) ?
+			strlen(cmd->command) : strlen(command));
+		if (!strncmp(cmd->command, command, len))
 			return cmd;
 	}
 
@@ -963,8 +967,12 @@ int controller_command_get_policy(const char *command,
 	*policy = NULL;
 
 	for (int i = 0; i < num_cmds; i++) {
+		int len;
+
 		cmd = &cntlr_commandlist[i];
-		if (!strncmp(cmd->command, command, strlen(cmd->command))) {
+		len = (strlen(cmd->command) > strlen(command) ?
+			strlen(cmd->command) : strlen(command));
+		if (!strncmp(cmd->command, command, len)) {
 			struct blobmsg_policy *pol, *p;
 
 			if (!cmd->num_attrs)