func: void CWE134_Uncontrolled_Format_String__char_environment_fprintf_21_bad() char * data ; char dataBuffer [ 100 ] = "" ; data = dataBuffer; size_t dataLen = strlen ( data ) ; char * environment = GETENV ( ENV_VARIABLE ) ; if ( environment != NULL )  strncat ( data + dataLen , environment , 100 - dataLen - 1 ); badSink ( data ); static void badSink(char * data) fprintf ( stdout , data ); 