// CWE-121: stack buffer overflow (strcpy into fixed 64-byte buffer).
#include <string.h>
#include <unistd.h>
__attribute__((noinline)) void vuln(const char* src) {
    char buf[64];
    strcpy(buf, src); // sink: unbounded copy -> stack BOF
    write(1, buf, sizeof(buf));
}
int main(int argc, char** argv) {
    if (argc > 1)
        vuln(argv[1]);
    return 0;
}