func: void CWE591_Sensitive_Data_Storage_in_Improperly_Locked_Memory__w32_wchar_t_67_bad() wchar_t * password ; password = ( wchar_t * ) malloc ( 100 * sizeof ( wchar_t ) ); if ( password == NULL )  wcscpy ( password , L "Password1234!" ) myStruct . structFirst = password; CWE591_Sensitive_Data_Storage_in_Improperly_Locked_Memory__w32_wchar_t_67b_badSink ( myStruct ); void CWE591_Sensitive_Data_Storage_in_Improperly_Locked_Memory__w32_wchar_t_67b_badSink(CWE591_Sensitive_Data_Storage_in_Improperly_Locked_Memory__w32_wchar_t_67_structType myStruct) wchar_t * password = myStruct . structFirst ; if ( LogonUserW ( username , domain , password , LOGON32_LOGON_NETWORK , LOGON32_PROVIDER_DEFAULT , & pHandle ) != 0 )  free ( password ); 