// gt-0001: Direct call to vulnerable sink from main // Expected: REACHABLE (tier: executed) // Vulnerability: CWE-120 (Buffer Copy without Checking Size) #include #include int main(int argc, char *argv[]) { char buffer[32]; if (argc > 1) { // Vulnerable: strcpy without bounds checking strcpy(buffer, argv[1]); // SINK: CWE-120 printf("Input: %s\n", buffer); } return 0; }