Use asIndirecArgument

SqlInjection.ql

@@ -15,7 +15,7 @@ module SqliFlowConfig implements DataFlow::ConfigSig {
         // count = read(STDIN_FILENO, buf, BUFSIZE);
         exists(FunctionCall read |
             read.getTarget().getName() = "read" and
-            read.getArgument(1) = source.(DataFlow::PostUpdateNode).getPreUpdateNode().asExpr()
+            read.getArgument(1) = source.(DataFlow::PostUpdateNode).getPreUpdateNode().asIndirectArgument()
         )
     }
 
@@ -31,7 +31,7 @@ module SqliFlowConfig implements DataFlow::ConfigSig {
         //     #endif
         exists(FunctionCall printf |
             printf.getTarget().getName().matches("%snprintf%") and
-            printf.getArgument(0) = out.(DataFlow::PostUpdateNode).getPreUpdateNode().asExpr() and
+            printf.getArgument(0) = out.(DataFlow::PostUpdateNode).getPreUpdateNode().asIndirectArgument() and
             // very specific: shifted index for macro.
             printf.getArgument(6) = into.asExpr()
         )

cpp-sqli-c1b3c8d/baseline-info.json

@@ -1 +0,0 @@
-{"languages":{"cpp":{"displayName":"C/C++","files":["add-user.c"],"linesOfCode":78,"name":"cpp"}}}

cpp-sqli-c1b3c8d/codeql-database.yml

@@ -1,11 +0,0 @@
----
-sourceLocationPrefix: /Users/hohn/local/codeql-dataflow-sql-injection
-baselineLinesOfCode: 78
-unicodeNewlines: false
-columnKind: utf8
-primaryLanguage: cpp
-creationMetadata:
-  sha: c1b3c8d901eacddbb7949a8ca3b8acc11ffbda86
-  cliVersion: 2.20.0
-  creationTime: 2025-02-18T01:07:10.558137Z
-finalised: true

cpp-sqli-c1b3c8d/db-cpp/default/cache/version

@@ -1 +0,0 @@
-20190805:20220702:20240828:20241116