// CWE-190: integer overflow (signed add of a large constant). #include __attribute__((noinline)) int vuln(int a) { return a + 2147483647; // sink: signed overflow if a > 0 } int main(int argc, char** argv) { if (argc > 1) return vuln(atoi(argv[1])); return 0; }