/* goodG2B() - use goodsource and badsink */ private void GoodG2B() { string password; /* FIX: Use a hardcoded password as the password (it was not sent over the network) */ /* INCIDENTAL FLAW: CWE-259 Hard Coded Password */ password = "******"; CWE319_Cleartext_Tx_Sensitive_Info__connect_tcp_SqlConnection_52b.GoodG2BSink(password); }