/* goodB2G1() - use badsource and goodsink by setting the static variable to false instead of true */ private void GoodB2G1() { string data = null; /* get environment variable ADD */ /* POTENTIAL FLAW: Read data from an environment variable */ data = Environment.GetEnvironmentVariable("ADD"); goodB2G1PublicStatic = false; CWE94_Improper_Control_of_Generation_of_Code__Environment_22b.GoodB2G1Sink(data); }