public override void Bad() { StringBuilder data; /* POTENTIAL FLAW: Call getStringBuilderBad(), which may return null */ data = CWE690_NULL_Deref_From_Return__Class_Helper.getStringBuilderBad(); CWE690_NULL_Deref_From_Return__Class_StringBuilder_54b.BadSink(data); }