func: void CWE427_Uncontrolled_Search_Path_Element__wchar_t_environment_21_bad() wchar_t * data ; wchar_t dataBuffer [ 250 ] = L "PATH=" data = dataBuffer; data = badSource ( data ); static wchar_t * badSource(wchar_t * data) if ( badStatic )  size_t dataLen = wcslen ( data ) ; wcsncat ( data + dataLen , environment , 250 - dataLen - 1 ); return data ; 