// gt-0012: Compile-time constant false condition // Expected: UNREACHABLE (tier: imported) // Vulnerability: CWE-120 (Buffer Overflow) #include #include #define DEBUG_MODE 0 // Compile-time constant int main(int argc, char *argv[]) { char buffer[64]; // This branch is constant false - will be optimized out if (DEBUG_MODE) { // Vulnerable code in dead branch gets(buffer); // SINK: CWE-120 (but unreachable) printf("Debug: %s\n", buffer); } else { // Safe path always taken if (argc > 1) { strncpy(buffer, argv[1], sizeof(buffer) - 1); buffer[sizeof(buffer) - 1] = '\0'; printf("Input: %s\n", buffer); } } return 0; }