func: void bad() char * data ; char dataBuffer [ 250 ] = "PATH=" ; data = dataBuffer; CWE427_Uncontrolled_Search_Path_Element__char_environment_84_bad * badObject = new CWE427_Uncontrolled_Search_Path_Element__char_environment_84_bad ( data ) ; CWE427_Uncontrolled_Search_Path_Element__char_environment_84_bad::CWE427_Uncontrolled_Search_Path_Element__char_environment_84_bad(char * dataCopy) data = dataCopy; size_t dataLen = strlen ( data ) ; char * environment = GETENV ( ENV_VARIABLE ) ; if ( environment != NULL )  strncat ( data + dataLen , environment , 250 - dataLen - 1 ); 