If you look at line 276 of usbdmsc.h you will see
unsigned char pucVersion[4];
Now if you look at line 1486 of usbdmsc.c you will see
for(iIdx = 0; iIdx < 16; iIdx++)
{
g_pucCommand[iIdx + 32] = psDevice->pucVersion[iIdx]; //Clearly we are going past the array bound of pucVersion. NOT GOOD!!!
}