public override void Bad() { StringBuilder data = null; /* POTENTIAL FLAW: Call getStringBuilderBad(), which may return null */ data = CWE690_NULL_Deref_From_Return__Class_Helper.getStringBuilderBad(); badPublicStatic = true; CWE690_NULL_Deref_From_Return__Class_StringBuilder_22b.BadSink(data); }