public override void Bad() { string data; /* get environment variable ADD */ /* POTENTIAL FLAW: Read data from an environment variable */ data = Environment.GetEnvironmentVariable("ADD"); CWE15_External_Control_of_System_or_Configuration_Setting__Environment_53b.BadSink(data); }