func: void bad() wchar_t * data ; wchar_t dataBuffer [ 250 ] = L "PATH=" data = dataBuffer; CWE427_Uncontrolled_Search_Path_Element__wchar_t_environment_84_bad * badObject = new CWE427_Uncontrolled_Search_Path_Element__wchar_t_environment_84_bad ( data ) ; CWE427_Uncontrolled_Search_Path_Element__wchar_t_environment_84_bad::CWE427_Uncontrolled_Search_Path_Element__wchar_t_environment_84_bad(wchar_t * dataCopy) data = dataCopy; size_t dataLen = wcslen ( data ) ; wchar_t * environment = GETENV ( ENV_VARIABLE ) ; if ( environment != NULL )  wcsncat ( data + dataLen , environment , 250 - dataLen - 1 ); 