func: void bad() char * cryptoKey ; map < int , char * > cryptoKeyMap ; char cryptoKeyBuffer [ 100 ] = "" ; cryptoKey = cryptoKeyBuffer; strcpy ( cryptoKey , CRYPTO_KEY ); cryptoKeyMap [ 0 ] = cryptoKey; cryptoKeyMap [ 1 ] = cryptoKey; cryptoKeyMap [ 2 ] = cryptoKey; badSink ( cryptoKeyMap ); void badSink(map<int, char *> cryptoKeyMap) char * cryptoKey = cryptoKeyMap [ 2 ] ; HCRYPTHASH hHash ; if ( ! CryptHashData ( hHash , ( BYTE * ) cryptoKey , strlen ( cryptoKey ) * sizeof ( char ) , 0 ) )  