func: void bad() size_t data ; data = 0; CWE789_Uncontrolled_Mem_Alloc__malloc_char_fscanf_82_base * baseObject = new CWE789_Uncontrolled_Mem_Alloc__malloc_char_fscanf_82_bad baseObject -> action ( data ); void CWE789_Uncontrolled_Mem_Alloc__malloc_char_fscanf_82_bad::action(size_t data) char * myString ; if ( data > strlen ( HELLO_STRING ) )  myString = ( char * ) malloc ( data * sizeof ( char ) ); strcpy ( myString , HELLO_STRING ); free ( myString ); 