Merge branch 'main' into cwe-134

2026-04-30 11:15:13 +02:00 · 2025-06-06 11:16:10 -04:00
parent 8a81aa1762 ef5e605cc4
commit 77e49f1f90
1273 changed files with 50518 additions and 9937 deletions
--- a/csharp/ql/integration-tests/all-platforms/binlog/diagnostics.expected
+++ b/csharp/ql/integration-tests/all-platforms/binlog/diagnostics.expected
@@ -13,7 +13,7 @@
  }
 }
 {
-  "markdownMessage": "C# was extracted with build-mode set to 'none'. This means that all C# source in the working directory will be scanned, with build tools, such as Nuget and Dotnet CLIs, only contributing information about external dependencies.",
+  "markdownMessage": "C# was extracted with build-mode set to 'none'. This means that all C# source in the working directory will be scanned, with build tools, such as NuGet and dotnet CLIs, only contributing information about external dependencies.",
  "severity": "note",
  "source": {
    "extractorName": "csharp",
--- a/csharp/ql/integration-tests/all-platforms/binlog_multiple/diagnostics.expected
+++ b/csharp/ql/integration-tests/all-platforms/binlog_multiple/diagnostics.expected
@@ -13,7 +13,7 @@
  }
 }
 {
-  "markdownMessage": "C# was extracted with build-mode set to 'none'. This means that all C# source in the working directory will be scanned, with build tools, such as Nuget and Dotnet CLIs, only contributing information about external dependencies.",
+  "markdownMessage": "C# was extracted with build-mode set to 'none'. This means that all C# source in the working directory will be scanned, with build tools, such as NuGet and dotnet CLIs, only contributing information about external dependencies.",
  "severity": "note",
  "source": {
    "extractorName": "csharp",
--- a/csharp/ql/integration-tests/all-platforms/blazor_build_mode_none/BlazorTest/global.json
+++ b/csharp/ql/integration-tests/all-platforms/blazor_build_mode_none/BlazorTest/global.json
@@ -1,5 +1,5 @@
 {
    "sdk": {
-        "version": "9.0.100"
+        "version": "9.0.300"
    }
 }
--- a/csharp/ql/integration-tests/all-platforms/blazor_build_mode_none/XSS.expected
+++ b/csharp/ql/integration-tests/all-platforms/blazor_build_mode_none/XSS.expected
@@ -3,8 +3,8 @@
 | BlazorTest/Components/Pages/TestPage.razor:11:48:11:55 | access to property UrlParam | BlazorTest/Components/Pages/TestPage.razor:11:48:11:55 | access to property UrlParam | BlazorTest/Components/Pages/TestPage.razor:11:48:11:55 | access to property UrlParam | $@ flows to here and is written to HTML or JavaScript. | BlazorTest/Components/Pages/TestPage.razor:11:48:11:55 | access to property UrlParam | User-provided value |
 | BlazorTest/Components/Pages/TestPage.razor:20:60:20:69 | access to property QueryParam | BlazorTest/Components/Pages/TestPage.razor:20:60:20:69 | access to property QueryParam | BlazorTest/Components/Pages/TestPage.razor:20:60:20:69 | access to property QueryParam | $@ flows to here and is written to HTML or JavaScript. | BlazorTest/Components/Pages/TestPage.razor:20:60:20:69 | access to property QueryParam | User-provided value |
 edges
-| BlazorTest/Components/Pages/TestPage.razor:85:23:85:32 | access to property QueryParam : String | test-db/working/razor/AC613014E59A413B9538FF8068364499/Microsoft.CodeAnalysis.Razor.Compiler/Microsoft.NET.Sdk.Razor.SourceGenerators.RazorSourceGenerator/Components_Pages_TestPage_razor.g.cs:569:16:577:13 | call to method TypeCheck<String> : String | provenance | Src:MaD:2 MaD:3 |
-| test-db/working/razor/AC613014E59A413B9538FF8068364499/Microsoft.CodeAnalysis.Razor.Compiler/Microsoft.NET.Sdk.Razor.SourceGenerators.RazorSourceGenerator/Components_Pages_TestPage_razor.g.cs:569:16:577:13 | call to method TypeCheck<String> : String | BlazorTest/Components/MyOutput.razor:5:53:5:57 | access to property Value | provenance | Sink:MaD:1 |
+| BlazorTest/Components/Pages/TestPage.razor:85:23:85:32 | access to property QueryParam : String | test-db/working/razor/AC613014E59A413B9538FF8068364499/Microsoft.CodeAnalysis.Razor.Compiler/Microsoft.NET.Sdk.Razor.SourceGenerators.RazorSourceGenerator/Components_Pages_TestPage_razor.g.cs:553:16:561:13 | call to method TypeCheck<String> : String | provenance | Src:MaD:2 MaD:3 |
+| test-db/working/razor/AC613014E59A413B9538FF8068364499/Microsoft.CodeAnalysis.Razor.Compiler/Microsoft.NET.Sdk.Razor.SourceGenerators.RazorSourceGenerator/Components_Pages_TestPage_razor.g.cs:553:16:561:13 | call to method TypeCheck<String> : String | BlazorTest/Components/MyOutput.razor:5:53:5:57 | access to property Value | provenance | Sink:MaD:1 |
 models
 | 1 | Sink: Microsoft.AspNetCore.Components; MarkupString; false; MarkupString; (System.String); ; Argument[0]; html-injection; manual |
 | 2 | Source: Microsoft.AspNetCore.Components; SupplyParameterFromQueryAttribute; false; ; ; Attribute.Getter; ReturnValue; remote; manual |
@@ -14,5 +14,5 @@ nodes
 | BlazorTest/Components/Pages/TestPage.razor:11:48:11:55 | access to property UrlParam | semmle.label | access to property UrlParam |
 | BlazorTest/Components/Pages/TestPage.razor:20:60:20:69 | access to property QueryParam | semmle.label | access to property QueryParam |
 | BlazorTest/Components/Pages/TestPage.razor:85:23:85:32 | access to property QueryParam : String | semmle.label | access to property QueryParam : String |
-| test-db/working/razor/AC613014E59A413B9538FF8068364499/Microsoft.CodeAnalysis.Razor.Compiler/Microsoft.NET.Sdk.Razor.SourceGenerators.RazorSourceGenerator/Components_Pages_TestPage_razor.g.cs:569:16:577:13 | call to method TypeCheck<String> : String | semmle.label | call to method TypeCheck<String> : String |
+| test-db/working/razor/AC613014E59A413B9538FF8068364499/Microsoft.CodeAnalysis.Razor.Compiler/Microsoft.NET.Sdk.Razor.SourceGenerators.RazorSourceGenerator/Components_Pages_TestPage_razor.g.cs:553:16:561:13 | call to method TypeCheck<String> : String | semmle.label | call to method TypeCheck<String> : String |
 subpaths
--- a/csharp/ql/integration-tests/all-platforms/standalone/diagnostics.expected
+++ b/csharp/ql/integration-tests/all-platforms/standalone/diagnostics.expected
@@ -13,7 +13,7 @@
  }
 }
 {
-  "markdownMessage": "C# was extracted with build-mode set to 'none'. This means that all C# source in the working directory will be scanned, with build tools, such as Nuget and Dotnet CLIs, only contributing information about external dependencies.",
+  "markdownMessage": "C# was extracted with build-mode set to 'none'. This means that all C# source in the working directory will be scanned, with build tools, such as NuGet and dotnet CLIs, only contributing information about external dependencies.",
  "severity": "note",
  "source": {
    "extractorName": "csharp",
--- a/csharp/ql/integration-tests/all-platforms/standalone_buildless_option/diagnostics.expected
+++ b/csharp/ql/integration-tests/all-platforms/standalone_buildless_option/diagnostics.expected
@@ -13,7 +13,7 @@
  }
 }
 {
-  "markdownMessage": "C# was extracted with build-mode set to 'none'. This means that all C# source in the working directory will be scanned, with build tools, such as Nuget and Dotnet CLIs, only contributing information about external dependencies.",
+  "markdownMessage": "C# was extracted with build-mode set to 'none'. This means that all C# source in the working directory will be scanned, with build tools, such as NuGet and dotnet CLIs, only contributing information about external dependencies.",
  "severity": "note",
  "source": {
    "extractorName": "csharp",
--- a/csharp/ql/integration-tests/all-platforms/standalone_failed/diagnostics.expected
+++ b/csharp/ql/integration-tests/all-platforms/standalone_failed/diagnostics.expected
@@ -13,7 +13,7 @@
  }
 }
 {
-  "markdownMessage": "C# was extracted with build-mode set to 'none'. This means that all C# source in the working directory will be scanned, with build tools, such as Nuget and Dotnet CLIs, only contributing information about external dependencies.",
+  "markdownMessage": "C# was extracted with build-mode set to 'none'. This means that all C# source in the working directory will be scanned, with build tools, such as NuGet and dotnet CLIs, only contributing information about external dependencies.",
  "severity": "note",
  "source": {
    "extractorName": "csharp",
--- a/csharp/ql/integration-tests/all-platforms/standalone_resx/CompilationInfo.expected
+++ b/csharp/ql/integration-tests/all-platforms/standalone_resx/CompilationInfo.expected
@@ -1,10 +1,10 @@
-| All Nuget feeds reachable | 1.0 |
+| All NuGet feeds reachable | 1.0 |
 | Failed project restore with package source error | 0.0 |
 | Failed solution restore with package source error | 0.0 |
-| Inherited Nuget feed count | 1.0 |
+| Inherited NuGet feed count | 1.0 |
 | NuGet feed responsiveness checked | 1.0 |
 | Project files on filesystem | 1.0 |
-| Reachable fallback Nuget feed count | 1.0 |
+| Reachable fallback NuGet feed count | 1.0 |
 | Resource extraction enabled | 1.0 |
 | Restored .NET framework variants | 1.0 |
 | Restored projects through solution files | 0.0 |
--- a/csharp/ql/integration-tests/all-platforms/standalone_winforms/CompilationInfo.expected
+++ b/csharp/ql/integration-tests/all-platforms/standalone_winforms/CompilationInfo.expected
@@ -1,10 +1,10 @@
-| All Nuget feeds reachable | 1.0 |
+| All NuGet feeds reachable | 1.0 |
 | Failed project restore with package source error | 0.0 |
 | Failed solution restore with package source error | 0.0 |
-| Inherited Nuget feed count | 1.0 |
+| Inherited NuGet feed count | 1.0 |
 | NuGet feed responsiveness checked | 1.0 |
 | Project files on filesystem | 1.0 |
-| Reachable fallback Nuget feed count | 1.0 |
+| Reachable fallback NuGet feed count | 1.0 |
 | Resource extraction enabled | 0.0 |
 | Restored .NET framework variants | 1.0 |
 | Restored projects through solution files | 0.0 |
--- a/csharp/ql/integration-tests/posix/query-suite/csharp-code-quality.qls.expected
+++ b/csharp/ql/integration-tests/posix/query-suite/csharp-code-quality.qls.expected
@@ -3,6 +3,7 @@ ql/csharp/ql/src/API Abuse/FormatInvalid.ql
 ql/csharp/ql/src/API Abuse/NoDisposeCallOnLocalIDisposable.ql
 ql/csharp/ql/src/Bad Practices/Control-Flow/ConstantCondition.ql
 ql/csharp/ql/src/Dead Code/DeadStoreOfLocal.ql
+ql/csharp/ql/src/Language Abuse/MissedReadonlyOpportunity.ql
 ql/csharp/ql/src/Likely Bugs/Collections/ContainerLengthCmpOffByOne.ql
 ql/csharp/ql/src/Likely Bugs/Collections/ContainerSizeCmpZero.ql
 ql/csharp/ql/src/Likely Bugs/DangerousNonShortCircuitLogic.ql
--- a/csharp/ql/integration-tests/posix/query-suite/csharp-security-and-quality.qls.expected
+++ b/csharp/ql/integration-tests/posix/query-suite/csharp-security-and-quality.qls.expected
@@ -38,7 +38,6 @@ ql/csharp/ql/src/Concurrency/SynchSetUnsynchGet.ql
 ql/csharp/ql/src/Concurrency/UnsafeLazyInitialization.ql
 ql/csharp/ql/src/Concurrency/UnsynchronizedStaticAccess.ql
 ql/csharp/ql/src/Configuration/EmptyPasswordInConfigurationFile.ql
-ql/csharp/ql/src/Configuration/PasswordInConfigurationFile.ql
 ql/csharp/ql/src/Dead Code/DeadStoreOfLocal.ql
 ql/csharp/ql/src/Diagnostics/CompilerError.ql
 ql/csharp/ql/src/Diagnostics/CompilerMessage.ql
@@ -146,8 +145,6 @@ ql/csharp/ql/src/Security Features/CWE-639/InsecureDirectObjectReference.ql
 ql/csharp/ql/src/Security Features/CWE-643/XPathInjection.ql
 ql/csharp/ql/src/Security Features/CWE-730/ReDoS.ql
 ql/csharp/ql/src/Security Features/CWE-730/RegexInjection.ql
-ql/csharp/ql/src/Security Features/CWE-798/HardcodedConnectionString.ql
-ql/csharp/ql/src/Security Features/CWE-798/HardcodedCredentials.ql
 ql/csharp/ql/src/Security Features/CWE-807/ConditionalBypass.ql
 ql/csharp/ql/src/Security Features/CookieWithOverlyBroadDomain.ql
 ql/csharp/ql/src/Security Features/CookieWithOverlyBroadPath.ql
--- a/csharp/ql/integration-tests/posix/query-suite/csharp-security-extended.qls.expected
+++ b/csharp/ql/integration-tests/posix/query-suite/csharp-security-extended.qls.expected
@@ -1,5 +1,4 @@
 ql/csharp/ql/src/Configuration/EmptyPasswordInConfigurationFile.ql
-ql/csharp/ql/src/Configuration/PasswordInConfigurationFile.ql
 ql/csharp/ql/src/Diagnostics/CompilerError.ql
 ql/csharp/ql/src/Diagnostics/CompilerMessage.ql
 ql/csharp/ql/src/Diagnostics/DiagnosticExtractionErrors.ql
@@ -49,8 +48,6 @@ ql/csharp/ql/src/Security Features/CWE-639/InsecureDirectObjectReference.ql
 ql/csharp/ql/src/Security Features/CWE-643/XPathInjection.ql
 ql/csharp/ql/src/Security Features/CWE-730/ReDoS.ql
 ql/csharp/ql/src/Security Features/CWE-730/RegexInjection.ql
-ql/csharp/ql/src/Security Features/CWE-798/HardcodedConnectionString.ql
-ql/csharp/ql/src/Security Features/CWE-798/HardcodedCredentials.ql
 ql/csharp/ql/src/Security Features/CWE-807/ConditionalBypass.ql
 ql/csharp/ql/src/Security Features/CookieWithOverlyBroadDomain.ql
 ql/csharp/ql/src/Security Features/CookieWithOverlyBroadPath.ql
--- a/csharp/ql/integration-tests/posix/query-suite/not_included_in_qls.expected
+++ b/csharp/ql/integration-tests/posix/query-suite/not_included_in_qls.expected
@@ -26,6 +26,7 @@ ql/csharp/ql/src/Bad Practices/Naming Conventions/DefaultControlNames.ql
 ql/csharp/ql/src/Bad Practices/Naming Conventions/VariableNameTooShort.ql
 ql/csharp/ql/src/Bad Practices/UseOfHtmlInputHidden.ql
 ql/csharp/ql/src/Bad Practices/UseOfSystemOutputStream.ql
+ql/csharp/ql/src/Configuration/PasswordInConfigurationFile.ql
 ql/csharp/ql/src/Dead Code/DeadRefTypes.ql
 ql/csharp/ql/src/Dead Code/NonAssignedFields.ql
 ql/csharp/ql/src/Dead Code/UnusedField.ql
@@ -89,6 +90,8 @@ ql/csharp/ql/src/Security Features/CWE-321/HardcodedSymmetricEncryptionKey.ql
 ql/csharp/ql/src/Security Features/CWE-327/DontInstallRootCert.ql
 ql/csharp/ql/src/Security Features/CWE-502/UnsafeDeserialization.ql
 ql/csharp/ql/src/Security Features/CWE-611/UseXmlSecureResolver.ql
+ql/csharp/ql/src/Security Features/CWE-798/HardcodedConnectionString.ql
+ql/csharp/ql/src/Security Features/CWE-798/HardcodedCredentials.ql
 ql/csharp/ql/src/Security Features/CWE-838/InappropriateEncoding.ql
 ql/csharp/ql/src/Useless code/PointlessForwardingMethod.ql
 ql/csharp/ql/src/definitions.ql
--- a/csharp/ql/integration-tests/posix/standalone_dependencies_nuget_config_error/CompilationInfo.expected
+++ b/csharp/ql/integration-tests/posix/standalone_dependencies_nuget_config_error/CompilationInfo.expected
@@ -1,10 +1,10 @@
-| All Nuget feeds reachable | 1.0 |
+| All NuGet feeds reachable | 1.0 |
 | Failed project restore with package source error | 1.0 |
 | Failed solution restore with package source error | 0.0 |
 | Fallback nuget restore | 1.0 |
 | NuGet feed responsiveness checked | 1.0 |
 | Project files on filesystem | 1.0 |
-| Reachable fallback Nuget feed count | 1.0 |
+| Reachable fallback NuGet feed count | 1.0 |
 | Resolved assembly conflicts | 7.0 |
 | Resource extraction enabled | 0.0 |
 | Restored .NET framework variants | 0.0 |
--- a/csharp/ql/integration-tests/posix/standalone_dependencies_nuget_config_error_timeout/CompilationInfo.expected
+++ b/csharp/ql/integration-tests/posix/standalone_dependencies_nuget_config_error_timeout/CompilationInfo.expected
@@ -1,9 +1,9 @@
-| All Nuget feeds reachable | 0.0 |
+| All NuGet feeds reachable | 0.0 |
 | Fallback nuget restore | 1.0 |
-| Inherited Nuget feed count | 1.0 |
+| Inherited NuGet feed count | 1.0 |
 | NuGet feed responsiveness checked | 1.0 |
 | Project files on filesystem | 1.0 |
-| Reachable fallback Nuget feed count | 1.0 |
+| Reachable fallback NuGet feed count | 1.0 |
 | Resolved assembly conflicts | 7.0 |
 | Resource extraction enabled | 0.0 |
 | Restored .NET framework variants | 0.0 |
--- a/csharp/ql/integration-tests/posix/standalone_dependencies_nuget_config_error_timeout/diagnostics.expected
+++ b/csharp/ql/integration-tests/posix/standalone_dependencies_nuget_config_error_timeout/diagnostics.expected
@@ -13,7 +13,7 @@
  }
 }
 {
-  "markdownMessage": "C# was extracted with build-mode set to 'none'. This means that all C# source in the working directory will be scanned, with build tools, such as Nuget and Dotnet CLIs, only contributing information about external dependencies.",
+  "markdownMessage": "C# was extracted with build-mode set to 'none'. This means that all C# source in the working directory will be scanned, with build tools, such as NuGet and dotnet CLIs, only contributing information about external dependencies.",
  "severity": "note",
  "source": {
    "extractorName": "csharp",
@@ -27,12 +27,12 @@
  }
 }
 {
-  "markdownMessage": "Found unreachable Nuget feed in C# analysis with build-mode 'none'. This may cause missing dependencies in the analysis.",
+  "markdownMessage": "Found unreachable NuGet feed in C# analysis with build-mode 'none'. This may cause missing dependencies in the analysis.",
  "severity": "note",
  "source": {
    "extractorName": "csharp",
    "id": "csharp/autobuilder/buildless/unreachable-feed",
-    "name": "Found unreachable Nuget feed in C# analysis with build-mode 'none'"
+    "name": "Found unreachable NuGet feed in C# analysis with build-mode 'none'"
  },
  "visibility": {
    "cliSummaryTable": true,
--- a/csharp/ql/integration-tests/posix/standalone_dependencies_nuget_config_error_timeout/test.py
+++ b/csharp/ql/integration-tests/posix/standalone_dependencies_nuget_config_error_timeout/test.py
@@ -4,7 +4,7 @@ import runs_on

@runs_on.posix
 def test(codeql, csharp):
-    # os.environ["CODEQL_EXTRACTOR_CSHARP_BUILDLESS_NUGET_FEEDS_CHECK"] = "true"        # Nuget feed check is enabled by default
+    # os.environ["CODEQL_EXTRACTOR_CSHARP_BUILDLESS_NUGET_FEEDS_CHECK"] = "true"        # NuGet feed check is enabled by default
    os.environ["CODEQL_EXTRACTOR_CSHARP_BUILDLESS_NUGET_FEEDS_CHECK_TIMEOUT"] = (
        "1"  # 1ms, the GET request should fail with such short timeout
    )
--- a/csharp/ql/integration-tests/posix/standalone_dependencies_nuget_config_fallback/CompilationInfo.expected
+++ b/csharp/ql/integration-tests/posix/standalone_dependencies_nuget_config_fallback/CompilationInfo.expected
@@ -1,8 +1,8 @@
-| All Nuget feeds reachable | 0.0 |
+| All NuGet feeds reachable | 0.0 |
 | Fallback nuget restore | 1.0 |
 | NuGet feed responsiveness checked | 1.0 |
 | Project files on filesystem | 1.0 |
-| Reachable fallback Nuget feed count | 2.0 |
+| Reachable fallback NuGet feed count | 2.0 |
 | Resolved assembly conflicts | 7.0 |
 | Resource extraction enabled | 0.0 |
 | Restored .NET framework variants | 0.0 |
--- a/csharp/ql/integration-tests/posix/standalone_dependencies_nuget_config_fallback/diagnostics.expected
+++ b/csharp/ql/integration-tests/posix/standalone_dependencies_nuget_config_fallback/diagnostics.expected
@@ -13,7 +13,7 @@
  }
 }
 {
-  "markdownMessage": "C# was extracted with build-mode set to 'none'. This means that all C# source in the working directory will be scanned, with build tools, such as Nuget and Dotnet CLIs, only contributing information about external dependencies.",
+  "markdownMessage": "C# was extracted with build-mode set to 'none'. This means that all C# source in the working directory will be scanned, with build tools, such as NuGet and dotnet CLIs, only contributing information about external dependencies.",
  "severity": "note",
  "source": {
    "extractorName": "csharp",
@@ -27,12 +27,12 @@
  }
 }
 {
-  "markdownMessage": "Found unreachable Nuget feed in C# analysis with build-mode 'none'. This may cause missing dependencies in the analysis.",
+  "markdownMessage": "Found unreachable NuGet feed in C# analysis with build-mode 'none'. This may cause missing dependencies in the analysis.",
  "severity": "note",
  "source": {
    "extractorName": "csharp",
    "id": "csharp/autobuilder/buildless/unreachable-feed",
-    "name": "Found unreachable Nuget feed in C# analysis with build-mode 'none'"
+    "name": "Found unreachable NuGet feed in C# analysis with build-mode 'none'"
  },
  "visibility": {
    "cliSummaryTable": true,
--- a/csharp/ql/integration-tests/posix/standalone_dependencies_nuget_config_fallback/test.py
+++ b/csharp/ql/integration-tests/posix/standalone_dependencies_nuget_config_fallback/test.py
@@ -5,7 +5,7 @@ import runs_on
@runs_on.posix
 def test(codeql, csharp):

-    # os.environ["CODEQL_EXTRACTOR_CSHARP_BUILDLESS_NUGET_FEEDS_CHECK"] = "true"        # Nuget feed check is enabled by default
+    # os.environ["CODEQL_EXTRACTOR_CSHARP_BUILDLESS_NUGET_FEEDS_CHECK"] = "true"        # NuGet feed check is enabled by default
    os.environ["CODEQL_EXTRACTOR_CSHARP_BUILDLESS_NUGET_FEEDS_CHECK_TIMEOUT"] = (
        "1"  # 1ms, the GET request should fail with such short timeout
    )
--- a/csharp/ql/lib/change-notes/2025-05-14-dotnet-models.md
+++ b/csharp/ql/lib/change-notes/2025-05-14-dotnet-models.md
@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* The generated Models as Data (MaD) models for .NET 9 Runtime have been updated and are now more precise (due to a recent model generator improvement).
--- a/csharp/ql/lib/ext/generated/ILLink.Shared.DataFlow.model.yml
+++ b/csharp/ql/lib/ext/generated/ILLink.Shared.DataFlow.model.yml
@@ -28,8 +28,8 @@ extensions:
      - ["ILLink.Shared.DataFlow", "ValueSet<TValue>", False, "DeepCopy", "()", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["ILLink.Shared.DataFlow", "ValueSet<TValue>", False, "GetKnownValues", "()", "", "Argument[this].SyntheticField[ILLink.Shared.DataFlow.ValueSet`1._values]", "ReturnValue.SyntheticField[ILLink.Shared.DataFlow.ValueSet`1+Enumerable._values]", "value", "dfc-generated"]
      - ["ILLink.Shared.DataFlow", "ValueSet<TValue>", False, "ValueSet", "(TValue)", "", "Argument[0]", "Argument[this].SyntheticField[ILLink.Shared.DataFlow.ValueSet`1._values]", "value", "dfc-generated"]
-      - ["ILLink.Shared.DataFlow", "ValueSetLattice<TValue>", False, "Meet", "(ILLink.Shared.DataFlow.ValueSet<TValue>,ILLink.Shared.DataFlow.ValueSet<TValue>)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
-      - ["ILLink.Shared.DataFlow", "ValueSetLattice<TValue>", False, "Meet", "(ILLink.Shared.DataFlow.ValueSet<TValue>,ILLink.Shared.DataFlow.ValueSet<TValue>)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
+      - ["ILLink.Shared.DataFlow", "ValueSetLattice<TValue>", False, "Meet", "(ILLink.Shared.DataFlow.ValueSet<TValue>,ILLink.Shared.DataFlow.ValueSet<TValue>)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
+      - ["ILLink.Shared.DataFlow", "ValueSetLattice<TValue>", False, "Meet", "(ILLink.Shared.DataFlow.ValueSet<TValue>,ILLink.Shared.DataFlow.ValueSet<TValue>)", "", "Argument[1]", "ReturnValue", "value", "df-generated"]
  - addsTo:
      pack: codeql/csharp-all
      extensible: neutralModel
--- a/csharp/ql/lib/ext/generated/Internal.TypeSystem.model.yml
+++ b/csharp/ql/lib/ext/generated/Internal.TypeSystem.model.yml
@@ -13,7 +13,7 @@ extensions:
      - ["Internal.TypeSystem", "CanonBaseType", False, "get_Context", "()", "", "Argument[this].SyntheticField[Internal.TypeSystem.CanonBaseType._context]", "ReturnValue", "value", "dfc-generated"]
      - ["Internal.TypeSystem", "CanonBaseType", True, "get_MetadataBaseType", "()", "", "Argument[this].Property[Internal.TypeSystem.MetadataType.BaseType]", "ReturnValue", "value", "dfc-generated"]
      - ["Internal.TypeSystem", "CanonBaseType", True, "get_Module", "()", "", "Argument[this].SyntheticField[Internal.TypeSystem.CanonBaseType._context].Property[Internal.TypeSystem.TypeSystemContext.SystemModule]", "ReturnValue", "value", "dfc-generated"]
-      - ["Internal.TypeSystem", "ConstructedTypeRewritingHelpers", False, "ReplaceTypesInConstructionOfMethod", "(Internal.TypeSystem.MethodDesc,Internal.TypeSystem.TypeDesc[],Internal.TypeSystem.TypeDesc[])", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["Internal.TypeSystem", "ConstructedTypeRewritingHelpers", False, "ReplaceTypesInConstructionOfMethod", "(Internal.TypeSystem.MethodDesc,Internal.TypeSystem.TypeDesc[],Internal.TypeSystem.TypeDesc[])", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["Internal.TypeSystem", "ConstructedTypeRewritingHelpers", False, "ReplaceTypesInConstructionOfMethod", "(Internal.TypeSystem.MethodDesc,Internal.TypeSystem.TypeDesc[],Internal.TypeSystem.TypeDesc[])", "", "Argument[2].Element", "ReturnValue", "taint", "df-generated"]
      - ["Internal.TypeSystem", "ConstructedTypeRewritingHelpers", False, "ReplaceTypesInConstructionOfType", "(Internal.TypeSystem.TypeDesc,Internal.TypeSystem.TypeDesc[],Internal.TypeSystem.TypeDesc[])", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["Internal.TypeSystem", "ConstructedTypeRewritingHelpers", False, "ReplaceTypesInConstructionOfType", "(Internal.TypeSystem.TypeDesc,Internal.TypeSystem.TypeDesc[],Internal.TypeSystem.TypeDesc[])", "", "Argument[2].Element", "ReturnValue", "value", "dfc-generated"]
@@ -108,7 +108,7 @@ extensions:
      - ["Internal.TypeSystem", "MetadataTypeSystemContext", True, "SetSystemModule", "(Internal.TypeSystem.ModuleDesc)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["Internal.TypeSystem", "MetadataVirtualMethodAlgorithm", False, "EnumAllVirtualSlots", "(Internal.TypeSystem.MetadataType)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["Internal.TypeSystem", "MetadataVirtualMethodAlgorithm", False, "FindSlotDefiningMethodForVirtualMethod", "(Internal.TypeSystem.MethodDesc)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
-      - ["Internal.TypeSystem", "MetadataVirtualMethodAlgorithm", False, "ResolveVariantInterfaceMethodToDefaultImplementationOnType", "(Internal.TypeSystem.MethodDesc,Internal.TypeSystem.MetadataType,Internal.TypeSystem.MethodDesc)", "", "Argument[0]", "Argument[2]", "taint", "df-generated"]
+      - ["Internal.TypeSystem", "MetadataVirtualMethodAlgorithm", False, "ResolveVariantInterfaceMethodToDefaultImplementationOnType", "(Internal.TypeSystem.MethodDesc,Internal.TypeSystem.MetadataType,Internal.TypeSystem.MethodDesc)", "", "Argument[0]", "Argument[2]", "value", "df-generated"]
      - ["Internal.TypeSystem", "MetadataVirtualMethodAlgorithm", False, "ResolveVariantInterfaceMethodToDefaultImplementationOnType", "(Internal.TypeSystem.MethodDesc,Internal.TypeSystem.MetadataType,Internal.TypeSystem.MethodDesc)", "", "Argument[1]", "Argument[2]", "taint", "df-generated"]
      - ["Internal.TypeSystem", "MetadataVirtualMethodAlgorithm", False, "ResolveVariantInterfaceMethodToVirtualMethodOnType", "(Internal.TypeSystem.MethodDesc,Internal.TypeSystem.MetadataType)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
      - ["Internal.TypeSystem", "MethodDelegator", False, "MethodDelegator", "(Internal.TypeSystem.MethodDesc)", "", "Argument[0]", "Argument[this].Field[Internal.TypeSystem.MethodDelegator._wrappedMethod]", "value", "dfc-generated"]
@@ -133,6 +133,7 @@ extensions:
      - ["Internal.TypeSystem", "MethodSignature+SignatureEnumerator", False, "get_Current", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["Internal.TypeSystem", "MethodSignature", False, "ApplySubstitution", "(Internal.TypeSystem.Instantiation)", "", "Argument[0].SyntheticField[Internal.TypeSystem.Instantiation._genericParameters].Element", "ReturnValue.SyntheticField[Internal.TypeSystem.MethodSignature._parameters].Element", "value", "dfc-generated"]
      - ["Internal.TypeSystem", "MethodSignature", False, "ApplySubstitution", "(Internal.TypeSystem.Instantiation)", "", "Argument[0].SyntheticField[Internal.TypeSystem.Instantiation._genericParameters].Element", "ReturnValue.SyntheticField[Internal.TypeSystem.MethodSignature._returnType]", "value", "dfc-generated"]
+      - ["Internal.TypeSystem", "MethodSignature", False, "ApplySubstitution", "(Internal.TypeSystem.Instantiation)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["Internal.TypeSystem", "MethodSignature", False, "GetEmbeddedSignatureData", "()", "", "Argument[this].SyntheticField[Internal.TypeSystem.MethodSignature._embeddedSignatureData].Element", "ReturnValue.Element", "value", "dfc-generated"]
      - ["Internal.TypeSystem", "MethodSignature", False, "GetEmbeddedSignatureData", "(System.ReadOnlySpan<Internal.TypeSystem.EmbeddedSignatureDataKind>)", "", "Argument[this].SyntheticField[Internal.TypeSystem.MethodSignature._embeddedSignatureData].Element", "ReturnValue.Element", "value", "dfc-generated"]
      - ["Internal.TypeSystem", "MethodSignature", False, "GetEnumerator", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
@@ -183,7 +184,7 @@ extensions:
      - ["Internal.TypeSystem", "ResolutionFailure", False, "GetTypeLoadResolutionFailure", "(System.String,System.String,System.String)", "", "Argument[2]", "ReturnValue", "taint", "df-generated"]
      - ["Internal.TypeSystem", "RuntimeDeterminedCanonicalizationAlgorithm", False, "ConvertInstantiationToCanonForm", "(Internal.TypeSystem.Instantiation,Internal.TypeSystem.CanonicalFormKind,System.Boolean)", "", "Argument[0].SyntheticField[Internal.TypeSystem.Instantiation._genericParameters].Element", "ReturnValue.SyntheticField[Internal.TypeSystem.Instantiation._genericParameters].Element", "value", "dfc-generated"]
      - ["Internal.TypeSystem", "RuntimeDeterminedCanonicalizationAlgorithm", False, "ConvertInstantiationToCanonForm", "(Internal.TypeSystem.Instantiation,Internal.TypeSystem.CanonicalFormKind,System.Boolean)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
-      - ["Internal.TypeSystem", "RuntimeDeterminedCanonicalizationAlgorithm", False, "ConvertToCanon", "(Internal.TypeSystem.TypeDesc,Internal.TypeSystem.CanonicalFormKind)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["Internal.TypeSystem", "RuntimeDeterminedCanonicalizationAlgorithm", False, "ConvertToCanon", "(Internal.TypeSystem.TypeDesc,Internal.TypeSystem.CanonicalFormKind)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["Internal.TypeSystem", "RuntimeDeterminedType", False, "GetNonRuntimeDeterminedTypeFromRuntimeDeterminedSubtypeViaSubstitution", "(Internal.TypeSystem.Instantiation,Internal.TypeSystem.Instantiation)", "", "Argument[0].SyntheticField[Internal.TypeSystem.Instantiation._genericParameters].Element", "ReturnValue", "value", "dfc-generated"]
      - ["Internal.TypeSystem", "RuntimeDeterminedType", False, "GetNonRuntimeDeterminedTypeFromRuntimeDeterminedSubtypeViaSubstitution", "(Internal.TypeSystem.Instantiation,Internal.TypeSystem.Instantiation)", "", "Argument[1].SyntheticField[Internal.TypeSystem.Instantiation._genericParameters].Element", "ReturnValue", "value", "dfc-generated"]
      - ["Internal.TypeSystem", "RuntimeDeterminedType", False, "RuntimeDeterminedType", "(Internal.TypeSystem.DefType,Internal.TypeSystem.GenericParameterDesc)", "", "Argument[0]", "Argument[this].SyntheticField[Internal.TypeSystem.RuntimeDeterminedType._rawCanonType]", "value", "dfc-generated"]
@@ -199,8 +200,8 @@ extensions:
      - ["Internal.TypeSystem", "SimpleArrayOfTRuntimeInterfacesAlgorithm", False, "SimpleArrayOfTRuntimeInterfacesAlgorithm", "(Internal.TypeSystem.ModuleDesc)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["Internal.TypeSystem", "StandardCanonicalizationAlgorithm", False, "ConvertInstantiationToCanonForm", "(Internal.TypeSystem.Instantiation,Internal.TypeSystem.CanonicalFormKind,System.Boolean)", "", "Argument[0].SyntheticField[Internal.TypeSystem.Instantiation._genericParameters].Element", "ReturnValue.SyntheticField[Internal.TypeSystem.Instantiation._genericParameters].Element", "value", "dfc-generated"]
      - ["Internal.TypeSystem", "StandardCanonicalizationAlgorithm", False, "ConvertInstantiationToCanonForm", "(Internal.TypeSystem.Instantiation,Internal.TypeSystem.CanonicalFormKind,System.Boolean)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
-      - ["Internal.TypeSystem", "StandardCanonicalizationAlgorithm", False, "ConvertToCanon", "(Internal.TypeSystem.TypeDesc,Internal.TypeSystem.CanonicalFormKind)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
-      - ["Internal.TypeSystem", "TypeDesc", False, "ConvertToCanonForm", "(Internal.TypeSystem.CanonicalFormKind)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["Internal.TypeSystem", "StandardCanonicalizationAlgorithm", False, "ConvertToCanon", "(Internal.TypeSystem.TypeDesc,Internal.TypeSystem.CanonicalFormKind)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
+      - ["Internal.TypeSystem", "TypeDesc", False, "ConvertToCanonForm", "(Internal.TypeSystem.CanonicalFormKind)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["Internal.TypeSystem", "TypeDesc", False, "GetMethod", "(System.String,Internal.TypeSystem.MethodSignature)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["Internal.TypeSystem", "TypeDesc", False, "get_RuntimeInterfaces", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["Internal.TypeSystem", "TypeDesc", True, "ConvertToCanonFormImpl", "(Internal.TypeSystem.CanonicalFormKind)", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
@@ -260,7 +261,7 @@ extensions:
      - ["Internal.TypeSystem", "TypeSystemException", False, "get_Arguments", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["Internal.TypeSystem", "TypeSystemHelpers", False, "EnumAllVirtualSlots", "(Internal.TypeSystem.TypeDesc)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["Internal.TypeSystem", "TypeSystemHelpers", False, "FindMethodOnTypeWithMatchingTypicalMethod", "(Internal.TypeSystem.TypeDesc,Internal.TypeSystem.MethodDesc)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
-      - ["Internal.TypeSystem", "TypeSystemHelpers", False, "FindMethodOnTypeWithMatchingTypicalMethod", "(Internal.TypeSystem.TypeDesc,Internal.TypeSystem.MethodDesc)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
+      - ["Internal.TypeSystem", "TypeSystemHelpers", False, "FindMethodOnTypeWithMatchingTypicalMethod", "(Internal.TypeSystem.TypeDesc,Internal.TypeSystem.MethodDesc)", "", "Argument[1]", "ReturnValue", "value", "df-generated"]
      - ["Internal.TypeSystem", "TypeSystemHelpers", False, "FindVirtualFunctionTargetMethodOnObjectType", "(Internal.TypeSystem.TypeDesc,Internal.TypeSystem.MethodDesc)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["Internal.TypeSystem", "TypeSystemHelpers", False, "GetAllMethods", "(Internal.TypeSystem.TypeDesc)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["Internal.TypeSystem", "TypeSystemHelpers", False, "GetAllVirtualMethods", "(Internal.TypeSystem.TypeDesc)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
@@ -276,7 +277,7 @@ extensions:
      - ["Internal.TypeSystem", "TypeSystemHelpers", False, "ResolveInterfaceMethodToDefaultImplementationOnType", "(Internal.TypeSystem.TypeDesc,Internal.TypeSystem.MethodDesc,Internal.TypeSystem.MethodDesc)", "", "Argument[1]", "Argument[2]", "value", "dfc-generated"]
      - ["Internal.TypeSystem", "TypeSystemHelpers", False, "ResolveInterfaceMethodToVirtualMethodOnType", "(Internal.TypeSystem.TypeDesc,Internal.TypeSystem.MethodDesc)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["Internal.TypeSystem", "TypeSystemHelpers", False, "ResolveVariantInterfaceMethodToDefaultImplementationOnType", "(Internal.TypeSystem.TypeDesc,Internal.TypeSystem.MethodDesc,Internal.TypeSystem.MethodDesc)", "", "Argument[0]", "Argument[2]", "taint", "df-generated"]
-      - ["Internal.TypeSystem", "TypeSystemHelpers", False, "ResolveVariantInterfaceMethodToDefaultImplementationOnType", "(Internal.TypeSystem.TypeDesc,Internal.TypeSystem.MethodDesc,Internal.TypeSystem.MethodDesc)", "", "Argument[1]", "Argument[2]", "taint", "df-generated"]
+      - ["Internal.TypeSystem", "TypeSystemHelpers", False, "ResolveVariantInterfaceMethodToDefaultImplementationOnType", "(Internal.TypeSystem.TypeDesc,Internal.TypeSystem.MethodDesc,Internal.TypeSystem.MethodDesc)", "", "Argument[1]", "Argument[2]", "value", "df-generated"]
      - ["Internal.TypeSystem", "TypeSystemHelpers", False, "ResolveVariantInterfaceMethodToVirtualMethodOnType", "(Internal.TypeSystem.TypeDesc,Internal.TypeSystem.MethodDesc)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["Internal.TypeSystem", "TypeWithRepeatedFields", False, "TypeWithRepeatedFields", "(Internal.TypeSystem.MetadataType)", "", "Argument[0]", "Argument[this].SyntheticField[Internal.TypeSystem.TypeWithRepeatedFields.MetadataType]", "value", "dfc-generated"]
      - ["Internal.TypeSystem", "TypeWithRepeatedFields", False, "get_ContainingType", "()", "", "Argument[this].SyntheticField[Internal.TypeSystem.TypeWithRepeatedFields.MetadataType].Property[Internal.TypeSystem.MetadataType.ContainingType]", "ReturnValue", "value", "dfc-generated"]
@@ -289,7 +290,7 @@ extensions:
      - ["Internal.TypeSystem", "VirtualMethodAlgorithm", True, "FindVirtualFunctionTargetMethodOnObjectType", "(Internal.TypeSystem.MethodDesc,Internal.TypeSystem.TypeDesc)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
      - ["Internal.TypeSystem", "VirtualMethodAlgorithm", True, "ResolveInterfaceMethodToDefaultImplementationOnType", "(Internal.TypeSystem.MethodDesc,Internal.TypeSystem.TypeDesc,Internal.TypeSystem.MethodDesc)", "", "Argument[0]", "Argument[2]", "value", "dfc-generated"]
      - ["Internal.TypeSystem", "VirtualMethodAlgorithm", True, "ResolveInterfaceMethodToVirtualMethodOnType", "(Internal.TypeSystem.MethodDesc,Internal.TypeSystem.TypeDesc)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
-      - ["Internal.TypeSystem", "VirtualMethodAlgorithm", True, "ResolveVariantInterfaceMethodToDefaultImplementationOnType", "(Internal.TypeSystem.MethodDesc,Internal.TypeSystem.TypeDesc,Internal.TypeSystem.MethodDesc)", "", "Argument[0]", "Argument[2]", "taint", "df-generated"]
+      - ["Internal.TypeSystem", "VirtualMethodAlgorithm", True, "ResolveVariantInterfaceMethodToDefaultImplementationOnType", "(Internal.TypeSystem.MethodDesc,Internal.TypeSystem.TypeDesc,Internal.TypeSystem.MethodDesc)", "", "Argument[0]", "Argument[2]", "value", "df-generated"]
      - ["Internal.TypeSystem", "VirtualMethodAlgorithm", True, "ResolveVariantInterfaceMethodToDefaultImplementationOnType", "(Internal.TypeSystem.MethodDesc,Internal.TypeSystem.TypeDesc,Internal.TypeSystem.MethodDesc)", "", "Argument[1]", "Argument[2]", "taint", "df-generated"]
      - ["Internal.TypeSystem", "VirtualMethodAlgorithm", True, "ResolveVariantInterfaceMethodToVirtualMethodOnType", "(Internal.TypeSystem.MethodDesc,Internal.TypeSystem.TypeDesc)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
  - addsTo:
--- a/csharp/ql/lib/ext/generated/Microsoft.Extensions.Configuration.model.yml
+++ b/csharp/ql/lib/ext/generated/Microsoft.Extensions.Configuration.model.yml
@@ -9,8 +9,8 @@ extensions:
      - ["Microsoft.Extensions.Configuration", "ChainedConfigurationProvider", False, "ChainedConfigurationProvider", "(Microsoft.Extensions.Configuration.ChainedConfigurationSource)", "", "Argument[0].Property[Microsoft.Extensions.Configuration.ChainedConfigurationSource.Configuration]", "Argument[this].SyntheticField[Microsoft.Extensions.Configuration.ChainedConfigurationProvider._config]", "value", "dfc-generated"]
      - ["Microsoft.Extensions.Configuration", "ChainedConfigurationProvider", False, "TryGet", "(System.String,System.String)", "", "Argument[this].SyntheticField[Microsoft.Extensions.Configuration.ChainedConfigurationProvider._config]", "Argument[1]", "taint", "dfc-generated"]
      - ["Microsoft.Extensions.Configuration", "ChainedConfigurationProvider", False, "get_Configuration", "()", "", "Argument[this].SyntheticField[Microsoft.Extensions.Configuration.ChainedConfigurationProvider._config]", "ReturnValue", "value", "dfc-generated"]
-      - ["Microsoft.Extensions.Configuration", "ConfigurationBinder", False, "Get", "(Microsoft.Extensions.Configuration.IConfiguration,System.Type)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
-      - ["Microsoft.Extensions.Configuration", "ConfigurationBinder", False, "Get<T>", "(Microsoft.Extensions.Configuration.IConfiguration)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["Microsoft.Extensions.Configuration", "ConfigurationBinder", False, "Get", "(Microsoft.Extensions.Configuration.IConfiguration,System.Type)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
+      - ["Microsoft.Extensions.Configuration", "ConfigurationBinder", False, "Get<T>", "(Microsoft.Extensions.Configuration.IConfiguration)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["Microsoft.Extensions.Configuration", "ConfigurationBinder", False, "GetValue", "(Microsoft.Extensions.Configuration.IConfiguration,System.Type,System.String,System.Object)", "", "Argument[3]", "ReturnValue", "value", "dfc-generated"]
      - ["Microsoft.Extensions.Configuration", "ConfigurationBinder", False, "GetValue<T>", "(Microsoft.Extensions.Configuration.IConfiguration,System.String,T)", "", "Argument[2]", "ReturnValue", "value", "dfc-generated"]
      - ["Microsoft.Extensions.Configuration", "ConfigurationBuilder", False, "Add", "(Microsoft.Extensions.Configuration.IConfigurationSource)", "", "Argument[0]", "Argument[this].SyntheticField[Microsoft.Extensions.Configuration.ConfigurationBuilder._sources].Element", "value", "dfc-generated"]
--- a/csharp/ql/lib/ext/generated/Mono.Linker.Steps.model.yml
+++ b/csharp/ql/lib/ext/generated/Mono.Linker.Steps.model.yml
@@ -54,11 +54,11 @@ extensions:
      - ["Mono.Linker.Steps", "MarkStep", True, "MarkInstruction", "(Mono.Cecil.Cil.Instruction,Mono.Cecil.MethodDefinition,System.Boolean,Mono.Linker.MessageOrigin)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["Mono.Linker.Steps", "MarkStep", True, "MarkInterfaceImplementation", "(Mono.Cecil.InterfaceImplementation,Mono.Linker.MessageOrigin,System.Nullable<Mono.Linker.DependencyInfo>)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["Mono.Linker.Steps", "MarkStep", True, "MarkMethod", "(Mono.Cecil.MethodReference,Mono.Linker.DependencyInfo,Mono.Linker.MessageOrigin)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
-      - ["Mono.Linker.Steps", "MarkStep", True, "MarkMethod", "(Mono.Cecil.MethodReference,Mono.Linker.DependencyInfo,Mono.Linker.MessageOrigin)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["Mono.Linker.Steps", "MarkStep", True, "MarkMethod", "(Mono.Cecil.MethodReference,Mono.Linker.DependencyInfo,Mono.Linker.MessageOrigin)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["Mono.Linker.Steps", "MarkStep", True, "MarkRequirementsForInstantiatedTypes", "(Mono.Cecil.TypeDefinition)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["Mono.Linker.Steps", "MarkStep", True, "MarkSecurityAttribute", "(Mono.Cecil.SecurityAttribute,Mono.Linker.DependencyInfo,Mono.Linker.MessageOrigin)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["Mono.Linker.Steps", "MarkStep", True, "MarkType", "(Mono.Cecil.TypeReference,Mono.Linker.DependencyInfo,Mono.Linker.MessageOrigin)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
-      - ["Mono.Linker.Steps", "MarkStep", True, "MarkType", "(Mono.Cecil.TypeReference,Mono.Linker.DependencyInfo,Mono.Linker.MessageOrigin)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["Mono.Linker.Steps", "MarkStep", True, "MarkType", "(Mono.Cecil.TypeReference,Mono.Linker.DependencyInfo,Mono.Linker.MessageOrigin)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["Mono.Linker.Steps", "MarkStep", True, "MarkTypeVisibleToReflection", "(Mono.Cecil.TypeReference,Mono.Linker.DependencyInfo,Mono.Linker.MessageOrigin)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["Mono.Linker.Steps", "MarkStep", True, "MarkUserDependency", "(Mono.Cecil.IMemberDefinition,Mono.Cecil.CustomAttribute,Mono.Linker.MessageOrigin)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["Mono.Linker.Steps", "MarkStep", True, "Process", "(Mono.Linker.LinkContext)", "", "Argument[0]", "Argument[this].SyntheticField[Mono.Linker.Steps.MarkStep._context]", "value", "dfc-generated"]
--- a/csharp/ql/lib/ext/generated/Mono.Linker.model.yml
+++ b/csharp/ql/lib/ext/generated/Mono.Linker.model.yml
@@ -157,7 +157,7 @@ extensions:
      - ["Mono.Linker", "UnconditionalSuppressMessageAttributeState+Suppression", False, "Suppression", "(Mono.Linker.SuppressMessageInfo,Mono.Cecil.CustomAttribute,Mono.Cecil.ICustomAttributeProvider)", "", "Argument[1]", "Argument[this].Property[Mono.Linker.UnconditionalSuppressMessageAttributeState+Suppression.OriginAttribute]", "value", "dfc-generated"]
      - ["Mono.Linker", "UnconditionalSuppressMessageAttributeState+Suppression", False, "Suppression", "(Mono.Linker.SuppressMessageInfo,Mono.Cecil.CustomAttribute,Mono.Cecil.ICustomAttributeProvider)", "", "Argument[2]", "Argument[this].Property[Mono.Linker.UnconditionalSuppressMessageAttributeState+Suppression.Provider]", "value", "dfc-generated"]
      - ["Mono.Linker", "UnconditionalSuppressMessageAttributeState", False, "GatherSuppressions", "(Mono.Cecil.ICustomAttributeProvider)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
-      - ["Mono.Linker", "UnconditionalSuppressMessageAttributeState", False, "GetModuleFromProvider", "(Mono.Cecil.ICustomAttributeProvider)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["Mono.Linker", "UnconditionalSuppressMessageAttributeState", False, "GetModuleFromProvider", "(Mono.Cecil.ICustomAttributeProvider)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["Mono.Linker", "UnconditionalSuppressMessageAttributeState", False, "IsSuppressed", "(System.Int32,Mono.Linker.MessageOrigin,Mono.Linker.SuppressMessageInfo)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
      - ["Mono.Linker", "UnconditionalSuppressMessageAttributeState", False, "UnconditionalSuppressMessageAttributeState", "(Mono.Linker.LinkContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["Mono.Linker", "UnintializedContextFactory", True, "CreateAnnotationStore", "(Mono.Linker.LinkContext)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
--- a/csharp/ql/lib/ext/generated/System.Collections.Frozen.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Collections.Frozen.model.yml
@@ -4,7 +4,7 @@ extensions:
      pack: codeql/csharp-all
      extensible: summaryModel
    data:
-      - ["System.Collections.Frozen", "FrozenDictionary", False, "ToFrozenDictionary<TKey,TValue>", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>,System.Collections.Generic.IEqualityComparer<TKey>)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Frozen", "FrozenDictionary", False, "ToFrozenDictionary<TKey,TValue>", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>,System.Collections.Generic.IEqualityComparer<TKey>)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Frozen", "FrozenDictionary<TKey,TValue>+AlternateLookup<TAlternateKey>", False, "ContainsKey", "(TAlternateKey)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Collections.Frozen", "FrozenDictionary<TKey,TValue>+AlternateLookup<TAlternateKey>", False, "TryGetValue", "(TAlternateKey,TValue)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Collections.Frozen", "FrozenDictionary<TKey,TValue>+AlternateLookup<TAlternateKey>", False, "get_Item", "(TAlternateKey)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
@@ -16,7 +16,7 @@ extensions:
      - ["System.Collections.Frozen", "FrozenDictionary<TKey,TValue>", False, "get_Values", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Frozen", "FrozenSet", False, "Create<T>", "(System.Collections.Generic.IEqualityComparer<T>,System.ReadOnlySpan<T>)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Frozen", "FrozenSet", False, "Create<T>", "(System.ReadOnlySpan<T>)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Frozen", "FrozenSet", False, "ToFrozenSet<T>", "(System.Collections.Generic.IEnumerable<T>,System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Frozen", "FrozenSet", False, "ToFrozenSet<T>", "(System.Collections.Generic.IEnumerable<T>,System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Frozen", "FrozenSet<T>+AlternateLookup<TAlternate>", False, "Contains", "(TAlternate)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Collections.Frozen", "FrozenSet<T>+AlternateLookup<TAlternate>", False, "TryGetValue", "(TAlternate,T)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Collections.Frozen", "FrozenSet<T>+AlternateLookup<TAlternate>", False, "TryGetValue", "(TAlternate,T)", "", "Argument[this]", "Argument[1]", "taint", "df-generated"]
--- a/csharp/ql/lib/ext/generated/System.Collections.Generic.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Collections.Generic.model.yml
@@ -47,8 +47,12 @@ extensions:
      - ["System.Collections.Generic", "KeyValuePair<TKey,TValue>", False, "get_Value", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Generic", "LinkedList<T>+Enumerator", False, "get_Current", "()", "", "Argument[this].Property[System.Collections.Generic.LinkedList`1+Enumerator.Current]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Collections.Generic", "LinkedList<T>+Enumerator", False, "get_Current", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Generic", "LinkedList<T>", False, "AddAfter", "(System.Collections.Generic.LinkedListNode<T>,System.Collections.Generic.LinkedListNode<T>)", "", "Argument[0].SyntheticField[System.Collections.Generic.LinkedListNode`1.next].SyntheticField[System.Collections.Generic.LinkedListNode`1.prev]", "Argument[1].SyntheticField[System.Collections.Generic.LinkedListNode`1.prev]", "value", "dfc-generated"]
      - ["System.Collections.Generic", "LinkedList<T>", False, "AddAfter", "(System.Collections.Generic.LinkedListNode<T>,System.Collections.Generic.LinkedListNode<T>)", "", "Argument[0].SyntheticField[System.Collections.Generic.LinkedListNode`1.next]", "Argument[1].SyntheticField[System.Collections.Generic.LinkedListNode`1.next]", "value", "dfc-generated"]
+      - ["System.Collections.Generic", "LinkedList<T>", False, "AddAfter", "(System.Collections.Generic.LinkedListNode<T>,System.Collections.Generic.LinkedListNode<T>)", "", "Argument[1]", "Argument[0].SyntheticField[System.Collections.Generic.LinkedListNode`1.next].SyntheticField[System.Collections.Generic.LinkedListNode`1.prev]", "value", "dfc-generated"]
+      - ["System.Collections.Generic", "LinkedList<T>", False, "AddAfter", "(System.Collections.Generic.LinkedListNode<T>,T)", "", "Argument[0].SyntheticField[System.Collections.Generic.LinkedListNode`1.next].SyntheticField[System.Collections.Generic.LinkedListNode`1.prev]", "ReturnValue.SyntheticField[System.Collections.Generic.LinkedListNode`1.prev]", "value", "dfc-generated"]
      - ["System.Collections.Generic", "LinkedList<T>", False, "AddAfter", "(System.Collections.Generic.LinkedListNode<T>,T)", "", "Argument[0].SyntheticField[System.Collections.Generic.LinkedListNode`1.next]", "ReturnValue.SyntheticField[System.Collections.Generic.LinkedListNode`1.next]", "value", "dfc-generated"]
+      - ["System.Collections.Generic", "LinkedList<T>", False, "AddBefore", "(System.Collections.Generic.LinkedListNode<T>,System.Collections.Generic.LinkedListNode<T>)", "", "Argument[1]", "Argument[0].SyntheticField[System.Collections.Generic.LinkedListNode`1.prev]", "value", "dfc-generated"]
      - ["System.Collections.Generic", "LinkedList<T>", False, "AddBefore", "(System.Collections.Generic.LinkedListNode<T>,System.Collections.Generic.LinkedListNode<T>)", "", "Argument[1]", "Argument[this].SyntheticField[System.Collections.Generic.LinkedList`1.head]", "value", "dfc-generated"]
      - ["System.Collections.Generic", "LinkedList<T>", False, "AddBefore", "(System.Collections.Generic.LinkedListNode<T>,T)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Collections.Generic", "LinkedList<T>", False, "AddBefore", "(System.Collections.Generic.LinkedListNode<T>,T)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
@@ -60,6 +64,7 @@ extensions:
      - ["System.Collections.Generic", "LinkedList<T>", False, "AddFirst", "(T)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Collections.Generic", "LinkedList<T>", False, "AddFirst", "(T)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Generic", "LinkedList<T>", False, "AddFirst", "(T)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Generic", "LinkedList<T>", False, "AddLast", "(System.Collections.Generic.LinkedListNode<T>)", "", "Argument[this].SyntheticField[System.Collections.Generic.LinkedList`1.head].SyntheticField[System.Collections.Generic.LinkedListNode`1.prev]", "Argument[0].SyntheticField[System.Collections.Generic.LinkedListNode`1.prev]", "value", "dfc-generated"]
      - ["System.Collections.Generic", "LinkedList<T>", False, "AddLast", "(System.Collections.Generic.LinkedListNode<T>)", "", "Argument[this].SyntheticField[System.Collections.Generic.LinkedList`1.head]", "Argument[0].SyntheticField[System.Collections.Generic.LinkedListNode`1.next]", "value", "dfc-generated"]
      - ["System.Collections.Generic", "LinkedList<T>", False, "AddLast", "(T)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Collections.Generic", "LinkedList<T>", False, "AddLast", "(T)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
@@ -67,8 +72,9 @@ extensions:
      - ["System.Collections.Generic", "LinkedList<T>", False, "LinkedList", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[0].Element", "Argument[this]", "taint", "df-generated"]
      - ["System.Collections.Generic", "LinkedList<T>", False, "LinkedList", "(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Collections.Generic", "LinkedList<T>", False, "Remove", "(System.Collections.Generic.LinkedListNode<T>)", "", "Argument[0].SyntheticField[System.Collections.Generic.LinkedListNode`1.next]", "Argument[this].SyntheticField[System.Collections.Generic.LinkedList`1.head]", "value", "dfc-generated"]
+      - ["System.Collections.Generic", "LinkedList<T>", False, "Remove", "(System.Collections.Generic.LinkedListNode<T>)", "", "Argument[0].SyntheticField[System.Collections.Generic.LinkedListNode`1.prev]", "Argument[this].SyntheticField[System.Collections.Generic.LinkedList`1.head].SyntheticField[System.Collections.Generic.LinkedListNode`1.prev]", "value", "dfc-generated"]
      - ["System.Collections.Generic", "LinkedList<T>", False, "get_First", "()", "", "Argument[this].SyntheticField[System.Collections.Generic.LinkedList`1.head]", "ReturnValue", "value", "dfc-generated"]
-      - ["System.Collections.Generic", "LinkedList<T>", False, "get_Last", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Generic", "LinkedList<T>", False, "get_Last", "()", "", "Argument[this].SyntheticField[System.Collections.Generic.LinkedList`1.head].SyntheticField[System.Collections.Generic.LinkedListNode`1.prev]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Collections.Generic", "LinkedListNode<T>", False, "LinkedListNode", "(T)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Collections.Generic", "LinkedListNode<T>", False, "get_List", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Generic", "LinkedListNode<T>", False, "get_Next", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
--- a/csharp/ql/lib/ext/generated/System.Collections.Immutable.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Collections.Immutable.model.yml
@@ -106,10 +106,10 @@ extensions:
      - ["System.Collections.Immutable", "ImmutableArray<T>", False, "Slice", "(System.Int32,System.Int32)", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableArray<T>", False, "Sort", "()", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableArray<T>", False, "Sort", "(System.Collections.Generic.IComparer<T>)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableArray<T>", False, "Sort", "(System.Collections.Generic.IComparer<T>)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableArray<T>", False, "Sort", "(System.Collections.Generic.IComparer<T>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableArray<T>", False, "Sort", "(System.Comparison<T>)", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableArray<T>", False, "Sort", "(System.Int32,System.Int32,System.Collections.Generic.IComparer<T>)", "", "Argument[this]", "Argument[2]", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableArray<T>", False, "Sort", "(System.Int32,System.Int32,System.Collections.Generic.IComparer<T>)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableArray<T>", False, "Sort", "(System.Int32,System.Int32,System.Collections.Generic.IComparer<T>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableArray<T>", False, "ToBuilder", "()", "", "Argument[this].Element", "ReturnValue.Element", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableArray<T>", False, "get_Item", "(System.Int32)", "", "Argument[this].SyntheticField[System.Collections.Immutable.ImmutableArray`1.array].Element", "ReturnValue", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableDictionary", False, "Create<TKey,TValue>", "(System.Collections.Generic.IEqualityComparer<TKey>)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
@@ -146,13 +146,14 @@ extensions:
      - ["System.Collections.Immutable", "ImmutableDictionary<TKey,TValue>+Enumerator", False, "get_Current", "()", "", "Argument[this].Property[System.Collections.Immutable.ImmutableDictionary`2+Enumerator.Current]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableDictionary<TKey,TValue>+Enumerator", False, "get_Current", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableDictionary<TKey,TValue>", False, "Clear", "()", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
-      - ["System.Collections.Immutable", "ImmutableDictionary<TKey,TValue>", False, "Remove", "(TKey)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableDictionary<TKey,TValue>", False, "RemoveRange", "(System.Collections.Generic.IEnumerable<TKey>)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableDictionary<TKey,TValue>", False, "SetItem", "(TKey,TValue)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableDictionary<TKey,TValue>", False, "SetItems", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableDictionary<TKey,TValue>", False, "Remove", "(TKey)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableDictionary<TKey,TValue>", False, "RemoveRange", "(System.Collections.Generic.IEnumerable<TKey>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableDictionary<TKey,TValue>", False, "SetItem", "(TKey,TValue)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableDictionary<TKey,TValue>", False, "SetItems", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableDictionary<TKey,TValue>", False, "ToBuilder", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableDictionary<TKey,TValue>", False, "TryGetKey", "(TKey,TKey)", "", "Argument[0]", "Argument[1]", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableDictionary<TKey,TValue>", False, "WithComparers", "(System.Collections.Generic.IEqualityComparer<TKey>)", "", "Argument[0]", "ReturnValue.SyntheticField[System.Collections.Immutable.ImmutableDictionary`2._comparers].SyntheticField[System.Collections.Immutable.ImmutableDictionary`2+Comparers._keyComparer]", "value", "dfc-generated"]
+      - ["System.Collections.Immutable", "ImmutableDictionary<TKey,TValue>", False, "WithComparers", "(System.Collections.Generic.IEqualityComparer<TKey>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableDictionary<TKey,TValue>", False, "WithComparers", "(System.Collections.Generic.IEqualityComparer<TKey>,System.Collections.Generic.IEqualityComparer<TValue>)", "", "Argument[0]", "ReturnValue.SyntheticField[System.Collections.Immutable.ImmutableDictionary`2._comparers].SyntheticField[System.Collections.Immutable.ImmutableDictionary`2+Comparers._keyComparer]", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableDictionary<TKey,TValue>", False, "WithComparers", "(System.Collections.Generic.IEqualityComparer<TKey>,System.Collections.Generic.IEqualityComparer<TValue>)", "", "Argument[1]", "ReturnValue.SyntheticField[System.Collections.Immutable.ImmutableDictionary`2._comparers].SyntheticField[System.Collections.Immutable.ImmutableDictionary`2+Comparers._valueComparer]", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableDictionary<TKey,TValue>", False, "WithComparers", "(System.Collections.Generic.IEqualityComparer<TKey>,System.Collections.Generic.IEqualityComparer<TValue>)", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
@@ -172,13 +173,14 @@ extensions:
      - ["System.Collections.Immutable", "ImmutableHashSet<T>+Builder", False, "TryGetValue", "(T,T)", "", "Argument[0]", "Argument[1]", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableHashSet<T>+Enumerator", False, "get_Current", "()", "", "Argument[this].Property[System.Collections.Immutable.ImmutableHashSet`1+Enumerator.Current]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableHashSet<T>+Enumerator", False, "get_Current", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableHashSet<T>", False, "Except", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableHashSet<T>", False, "Except", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableHashSet<T>", False, "Intersect", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
-      - ["System.Collections.Immutable", "ImmutableHashSet<T>", False, "Remove", "(T)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableHashSet<T>", False, "Remove", "(T)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableHashSet<T>", False, "SymmetricExcept", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableHashSet<T>", False, "ToBuilder", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableHashSet<T>", False, "TryGetValue", "(T,T)", "", "Argument[0]", "Argument[1]", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableHashSet<T>", False, "Union", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["System.Collections.Immutable", "ImmutableHashSet<T>", False, "Union", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableHashSet<T>", False, "WithComparer", "(System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableHashSet<T>", False, "get_KeyComparer", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableInterlocked", False, "AddOrUpdate<TKey,TValue>", "(System.Collections.Immutable.ImmutableDictionary<TKey,TValue>,TKey,System.Func<TKey,TValue>,System.Func<TKey,TValue,TValue>)", "", "Argument[1]", "Argument[2].Parameter[0]", "value", "dfc-generated"]
@@ -199,17 +201,17 @@ extensions:
      - ["System.Collections.Immutable", "ImmutableList", False, "Create<T>", "(System.ReadOnlySpan<T>)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList", False, "Create<T>", "(T)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList", False, "Create<T>", "(T[])", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableList", False, "CreateRange<T>", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableList", False, "CreateRange<T>", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList", False, "IndexOf<T>", "(System.Collections.Immutable.IImmutableList<T>,T,System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[0].Element", "Argument[2]", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList", False, "IndexOf<T>", "(System.Collections.Immutable.IImmutableList<T>,T,System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[1]", "Argument[2]", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList", False, "LastIndexOf<T>", "(System.Collections.Immutable.IImmutableList<T>,T,System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[0].Element", "Argument[2]", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList", False, "LastIndexOf<T>", "(System.Collections.Immutable.IImmutableList<T>,T,System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[1]", "Argument[2]", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableList", False, "Remove<T>", "(System.Collections.Immutable.IImmutableList<T>,T)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableList", False, "RemoveRange<T>", "(System.Collections.Immutable.IImmutableList<T>,System.Collections.Generic.IEnumerable<T>)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableList", False, "Replace<T>", "(System.Collections.Immutable.IImmutableList<T>,T,T)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableList", False, "Remove<T>", "(System.Collections.Immutable.IImmutableList<T>,T)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableList", False, "RemoveRange<T>", "(System.Collections.Immutable.IImmutableList<T>,System.Collections.Generic.IEnumerable<T>)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableList", False, "Replace<T>", "(System.Collections.Immutable.IImmutableList<T>,T,T)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList", False, "Replace<T>", "(System.Collections.Immutable.IImmutableList<T>,T,T)", "", "Argument[2]", "Argument[0].Element", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList", False, "Replace<T>", "(System.Collections.Immutable.IImmutableList<T>,T,T)", "", "Argument[2]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableList", False, "ToImmutableList<TSource>", "(System.Collections.Generic.IEnumerable<TSource>)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableList", False, "ToImmutableList<TSource>", "(System.Collections.Generic.IEnumerable<TSource>)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList<T>+Builder", False, "BinarySearch", "(System.Int32,System.Int32,T,System.Collections.Generic.IComparer<T>)", "", "Argument[2]", "Argument[3]", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList<T>+Builder", False, "BinarySearch", "(System.Int32,System.Int32,T,System.Collections.Generic.IComparer<T>)", "", "Argument[this]", "Argument[3]", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList<T>+Builder", False, "BinarySearch", "(T,System.Collections.Generic.IComparer<T>)", "", "Argument[0]", "Argument[1]", "taint", "df-generated"]
@@ -232,24 +234,23 @@ extensions:
      - ["System.Collections.Immutable", "ImmutableList<T>", False, "ForEach", "(System.Action<T>)", "", "Argument[this].Element", "Argument[0].Parameter[0]", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableList<T>", False, "IndexOf", "(T,System.Int32,System.Int32,System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[0]", "Argument[3]", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList<T>", False, "LastIndexOf", "(T,System.Int32,System.Int32,System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[0]", "Argument[3]", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableList<T>", False, "Remove", "(T)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableList<T>", False, "Remove", "(T)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList<T>", False, "Remove", "(T,System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[0]", "Argument[1]", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableList<T>", False, "Remove", "(T,System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableList<T>", False, "RemoveAt", "(System.Int32)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableList<T>", False, "RemoveRange", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableList<T>", False, "RemoveRange", "(System.Collections.Generic.IEnumerable<T>,System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableList<T>", False, "Remove", "(T,System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableList<T>", False, "RemoveAt", "(System.Int32)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableList<T>", False, "RemoveRange", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList<T>", False, "RemoveRange", "(System.Collections.Generic.IEnumerable<T>,System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableList<T>", False, "RemoveRange", "(System.Int32,System.Int32)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableList<T>", False, "RemoveRange", "(System.Int32,System.Int32)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList<T>", False, "Replace", "(T,T)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList<T>", False, "Replace", "(T,T)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableList<T>", False, "Replace", "(T,T)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableList<T>", False, "Replace", "(T,T)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList<T>", False, "Replace", "(T,T,System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[0]", "Argument[2]", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList<T>", False, "Replace", "(T,T,System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList<T>", False, "Replace", "(T,T,System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableList<T>", False, "Replace", "(T,T,System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableList<T>", False, "Replace", "(T,T,System.Collections.Generic.IEqualityComparer<T>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList<T>", False, "SetItem", "(System.Int32,T)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList<T>", False, "SetItem", "(System.Int32,T)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableList<T>", False, "SetItem", "(System.Int32,T)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableList<T>", False, "SetItem", "(System.Int32,T)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableList<T>", False, "Sort", "()", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableList<T>", False, "Sort", "(System.Collections.Generic.IComparer<T>)", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableList<T>", False, "Sort", "(System.Comparison<T>)", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
@@ -274,15 +275,15 @@ extensions:
      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "CreateBuilder<TKey,TValue>", "(System.Collections.Generic.IComparer<TKey>,System.Collections.Generic.IEqualityComparer<TValue>)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "CreateBuilder<TKey,TValue>", "(System.Collections.Generic.IComparer<TKey>,System.Collections.Generic.IEqualityComparer<TValue>)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "CreateRange<TKey,TValue>", "(System.Collections.Generic.IComparer<TKey>,System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "CreateRange<TKey,TValue>", "(System.Collections.Generic.IComparer<TKey>,System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>)", "", "Argument[1].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "CreateRange<TKey,TValue>", "(System.Collections.Generic.IComparer<TKey>,System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>)", "", "Argument[1]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "CreateRange<TKey,TValue>", "(System.Collections.Generic.IComparer<TKey>,System.Collections.Generic.IEqualityComparer<TValue>,System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "CreateRange<TKey,TValue>", "(System.Collections.Generic.IComparer<TKey>,System.Collections.Generic.IEqualityComparer<TValue>,System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "CreateRange<TKey,TValue>", "(System.Collections.Generic.IComparer<TKey>,System.Collections.Generic.IEqualityComparer<TValue>,System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>)", "", "Argument[2].Element", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "CreateRange<TKey,TValue>", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "ToImmutableSortedDictionary<TKey,TValue>", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "ToImmutableSortedDictionary<TKey,TValue>", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>,System.Collections.Generic.IComparer<TKey>)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "CreateRange<TKey,TValue>", "(System.Collections.Generic.IComparer<TKey>,System.Collections.Generic.IEqualityComparer<TValue>,System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>)", "", "Argument[2]", "ReturnValue", "value", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "CreateRange<TKey,TValue>", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "ToImmutableSortedDictionary<TKey,TValue>", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "ToImmutableSortedDictionary<TKey,TValue>", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>,System.Collections.Generic.IComparer<TKey>)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "ToImmutableSortedDictionary<TKey,TValue>", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>,System.Collections.Generic.IComparer<TKey>)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "ToImmutableSortedDictionary<TKey,TValue>", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>,System.Collections.Generic.IComparer<TKey>,System.Collections.Generic.IEqualityComparer<TValue>)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "ToImmutableSortedDictionary<TKey,TValue>", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>,System.Collections.Generic.IComparer<TKey>,System.Collections.Generic.IEqualityComparer<TValue>)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "ToImmutableSortedDictionary<TKey,TValue>", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>,System.Collections.Generic.IComparer<TKey>,System.Collections.Generic.IEqualityComparer<TValue>)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "ToImmutableSortedDictionary<TKey,TValue>", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>,System.Collections.Generic.IComparer<TKey>,System.Collections.Generic.IEqualityComparer<TValue>)", "", "Argument[2]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary", False, "ToImmutableSortedDictionary<TSource,TKey,TValue>", "(System.Collections.Generic.IEnumerable<TSource>,System.Func<TSource,TKey>,System.Func<TSource,TValue>)", "", "Argument[0].Element", "Argument[1].Parameter[0]", "value", "dfc-generated"]
@@ -303,17 +304,20 @@ extensions:
      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "Clear", "()", "", "Argument[this].SyntheticField[System.Collections.Immutable.ImmutableSortedDictionary`2._keyComparer]", "ReturnValue.SyntheticField[System.Collections.Immutable.ImmutableSortedDictionary`2._keyComparer]", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "Clear", "()", "", "Argument[this].SyntheticField[System.Collections.Immutable.ImmutableSortedDictionary`2._valueComparer]", "ReturnValue.SyntheticField[System.Collections.Immutable.ImmutableSortedDictionary`2._valueComparer]", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "Clear", "()", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "Remove", "(TKey)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "RemoveRange", "(System.Collections.Generic.IEnumerable<TKey>)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "Remove", "(TKey)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "RemoveRange", "(System.Collections.Generic.IEnumerable<TKey>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "SetItem", "(TKey,TValue)", "", "Argument[0]", "ReturnValue.SyntheticField[System.Collections.Immutable.ImmutableSortedDictionary`2._root].SyntheticField[System.Collections.Immutable.ImmutableSortedDictionary`2+Node._key]", "value", "dfc-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "SetItems", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "SetItems", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "SetItem", "(TKey,TValue)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "SetItems", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "SetItems", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "ToBuilder", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "TryGetKey", "(TKey,TKey)", "", "Argument[0]", "Argument[1]", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "TryGetKey", "(TKey,TKey)", "", "Argument[this].SyntheticField[System.Collections.Immutable.ImmutableSortedDictionary`2._root].SyntheticField[System.Collections.Immutable.ImmutableSortedDictionary`2+Node._key]", "Argument[1]", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "WithComparers", "(System.Collections.Generic.IComparer<TKey>)", "", "Argument[0]", "ReturnValue.SyntheticField[System.Collections.Immutable.ImmutableSortedDictionary`2._keyComparer]", "value", "dfc-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "WithComparers", "(System.Collections.Generic.IComparer<TKey>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "WithComparers", "(System.Collections.Generic.IComparer<TKey>,System.Collections.Generic.IEqualityComparer<TValue>)", "", "Argument[0]", "ReturnValue.SyntheticField[System.Collections.Immutable.ImmutableSortedDictionary`2._keyComparer]", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "WithComparers", "(System.Collections.Generic.IComparer<TKey>,System.Collections.Generic.IEqualityComparer<TValue>)", "", "Argument[1]", "ReturnValue.SyntheticField[System.Collections.Immutable.ImmutableSortedDictionary`2._valueComparer]", "value", "dfc-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "WithComparers", "(System.Collections.Generic.IComparer<TKey>,System.Collections.Generic.IEqualityComparer<TValue>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "get_KeyComparer", "()", "", "Argument[this].SyntheticField[System.Collections.Immutable.ImmutableSortedDictionary`2._keyComparer]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedDictionary<TKey,TValue>", False, "get_ValueComparer", "()", "", "Argument[this].SyntheticField[System.Collections.Immutable.ImmutableSortedDictionary`2._valueComparer]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedSet", False, "Create<T>", "(System.Collections.Generic.IComparer<T>)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
@@ -328,10 +332,10 @@ extensions:
      - ["System.Collections.Immutable", "ImmutableSortedSet", False, "Create<T>", "(T[])", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedSet", False, "CreateBuilder<T>", "(System.Collections.Generic.IComparer<T>)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedSet", False, "CreateRange<T>", "(System.Collections.Generic.IComparer<T>,System.Collections.Generic.IEnumerable<T>)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedSet", False, "CreateRange<T>", "(System.Collections.Generic.IComparer<T>,System.Collections.Generic.IEnumerable<T>)", "", "Argument[1].Element", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedSet", False, "CreateRange<T>", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedSet", False, "ToImmutableSortedSet<TSource>", "(System.Collections.Generic.IEnumerable<TSource>)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedSet", False, "ToImmutableSortedSet<TSource>", "(System.Collections.Generic.IEnumerable<TSource>,System.Collections.Generic.IComparer<TSource>)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedSet", False, "CreateRange<T>", "(System.Collections.Generic.IComparer<T>,System.Collections.Generic.IEnumerable<T>)", "", "Argument[1]", "ReturnValue", "value", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedSet", False, "CreateRange<T>", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedSet", False, "ToImmutableSortedSet<TSource>", "(System.Collections.Generic.IEnumerable<TSource>)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedSet", False, "ToImmutableSortedSet<TSource>", "(System.Collections.Generic.IEnumerable<TSource>,System.Collections.Generic.IComparer<TSource>)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedSet", False, "ToImmutableSortedSet<TSource>", "(System.Collections.Generic.IEnumerable<TSource>,System.Collections.Generic.IComparer<TSource>)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedSet<T>+Builder", False, "IntersectWith", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[0].Element", "Argument[this].SyntheticField[System.Collections.Immutable.ImmutableSortedSet`1+Builder._root].SyntheticField[System.Collections.Immutable.ImmutableSortedSet`1+Node._key]", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedSet<T>+Builder", False, "SymmetricExceptWith", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[0].Element", "Argument[this].SyntheticField[System.Collections.Immutable.ImmutableSortedSet`1+Builder._root].SyntheticField[System.Collections.Immutable.ImmutableSortedSet`1+Node._key]", "value", "dfc-generated"]
@@ -344,18 +348,19 @@ extensions:
      - ["System.Collections.Immutable", "ImmutableSortedSet<T>+Enumerator", False, "get_Current", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "Clear", "()", "", "Argument[this].SyntheticField[System.Collections.Immutable.ImmutableSortedSet`1._comparer]", "ReturnValue.SyntheticField[System.Collections.Immutable.ImmutableSortedSet`1._comparer]", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "Clear", "()", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "Except", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "Intersect", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "Remove", "(T)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "Except", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "Intersect", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "Remove", "(T)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "SymmetricExcept", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[0].Element", "Argument[this].Element", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "SymmetricExcept", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[0].Element", "ReturnValue.SyntheticField[System.Collections.Immutable.ImmutableSortedSet`1._root].SyntheticField[System.Collections.Immutable.ImmutableSortedSet`1+Node._key]", "value", "dfc-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "SymmetricExcept", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "ToBuilder", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "TryGetValue", "(T,T)", "", "Argument[0]", "Argument[1]", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "TryGetValue", "(T,T)", "", "Argument[this].SyntheticField[System.Collections.Immutable.ImmutableSortedSet`1._root].SyntheticField[System.Collections.Immutable.ImmutableSortedSet`1+Node._key]", "Argument[1]", "value", "dfc-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "Union", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
-      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "Union", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "Union", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "Union", "(System.Collections.Generic.IEnumerable<T>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "WithComparer", "(System.Collections.Generic.IComparer<T>)", "", "Argument[0]", "ReturnValue.SyntheticField[System.Collections.Immutable.ImmutableSortedSet`1._comparer]", "value", "dfc-generated"]
+      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "WithComparer", "(System.Collections.Generic.IComparer<T>)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "get_KeyComparer", "()", "", "Argument[this].SyntheticField[System.Collections.Immutable.ImmutableSortedSet`1._comparer]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "get_Max", "()", "", "Argument[this].SyntheticField[System.Collections.Immutable.ImmutableSortedSet`1._root].SyntheticField[System.Collections.Immutable.ImmutableSortedSet`1+Node._key]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Collections.Immutable", "ImmutableSortedSet<T>", False, "get_Min", "()", "", "Argument[this].SyntheticField[System.Collections.Immutable.ImmutableSortedSet`1._root].SyntheticField[System.Collections.Immutable.ImmutableSortedSet`1+Node._key]", "ReturnValue", "value", "dfc-generated"]
--- a/csharp/ql/lib/ext/generated/System.ComponentModel.DataAnnotations.model.yml
+++ b/csharp/ql/lib/ext/generated/System.ComponentModel.DataAnnotations.model.yml
@@ -47,10 +47,15 @@ extensions:
      - ["System.ComponentModel.DataAnnotations", "UIHintAttribute", False, "get_ControlParameters", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "UIHintAttribute", False, "get_PresentationLayer", "()", "", "Argument[this].SyntheticField[System.ComponentModel.DataAnnotations.UIHintAttribute._implementation].SyntheticField[System.ComponentModel.DataAnnotations.UIHintAttribute+UIHintImplementation.PresentationLayer]", "ReturnValue", "value", "dfc-generated"]
      - ["System.ComponentModel.DataAnnotations", "UIHintAttribute", False, "get_UIHint", "()", "", "Argument[this].SyntheticField[System.ComponentModel.DataAnnotations.UIHintAttribute._implementation].SyntheticField[System.ComponentModel.DataAnnotations.UIHintAttribute+UIHintImplementation.UIHint]", "ReturnValue", "value", "dfc-generated"]
+      - ["System.ComponentModel.DataAnnotations", "ValidationAttribute", False, "GetValidationResult", "(System.Object,System.ComponentModel.DataAnnotations.ValidationContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["System.ComponentModel.DataAnnotations", "ValidationAttribute", False, "Validate", "(System.Object,System.ComponentModel.DataAnnotations.ValidationContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["System.ComponentModel.DataAnnotations", "ValidationAttribute", False, "Validate", "(System.Object,System.String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "ValidationAttribute", False, "ValidationAttribute", "(System.Func<System.String>)", "", "Argument[0]", "Argument[this].SyntheticField[System.ComponentModel.DataAnnotations.ValidationAttribute._errorMessageResourceAccessor]", "value", "dfc-generated"]
      - ["System.ComponentModel.DataAnnotations", "ValidationAttribute", False, "get_ErrorMessageString", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "ValidationAttribute", True, "FormatErrorMessage", "(System.String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
      - ["System.ComponentModel.DataAnnotations", "ValidationAttribute", True, "FormatErrorMessage", "(System.String)", "", "Argument[this].Property[System.ComponentModel.DataAnnotations.ValidationAttribute.ErrorMessageString]", "ReturnValue", "taint", "dfc-generated"]
+      - ["System.ComponentModel.DataAnnotations", "ValidationAttribute", True, "IsValid", "(System.Object)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["System.ComponentModel.DataAnnotations", "ValidationAttribute", True, "IsValid", "(System.Object,System.ComponentModel.DataAnnotations.ValidationContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "ValidationContext", False, "InitializeServiceProvider", "(System.Func<System.Type,System.Object>)", "", "Argument[0]", "Argument[this].SyntheticField[System.ComponentModel.DataAnnotations.ValidationContext._serviceProvider]", "value", "dfc-generated"]
      - ["System.ComponentModel.DataAnnotations", "ValidationContext", False, "ValidationContext", "(System.Object,System.IServiceProvider,System.Collections.Generic.IDictionary<System.Object,System.Object>)", "", "Argument[0]", "Argument[this].Property[System.ComponentModel.DataAnnotations.ValidationContext.ObjectInstance]", "value", "dfc-generated"]
      - ["System.ComponentModel.DataAnnotations", "ValidationContext", False, "get_Items", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
@@ -66,26 +71,20 @@ extensions:
      pack: codeql/csharp-all
      extensible: neutralModel
    data:
-      - ["System.ComponentModel.DataAnnotations", "AllowedValuesAttribute", "IsValid", "(System.Object)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "AllowedValuesAttribute", "get_Values", "()", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "AssociatedMetadataTypeTypeDescriptionProvider", "AssociatedMetadataTypeTypeDescriptionProvider", "(System.Type)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "AssociatedMetadataTypeTypeDescriptionProvider", "AssociatedMetadataTypeTypeDescriptionProvider", "(System.Type,System.Type)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "AssociationAttribute", "get_Name", "()", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "AssociationAttribute", "get_OtherKey", "()", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "AssociationAttribute", "get_ThisKey", "()", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "Base64StringAttribute", "IsValid", "(System.Object)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "CompareAttribute", "get_OtherProperty", "()", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "CompareAttribute", "get_RequiresValidationContext", "()", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "CreditCardAttribute", "IsValid", "(System.Object)", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "CustomValidationAttribute", "IsValid", "(System.Object,System.ComponentModel.DataAnnotations.ValidationContext)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "CustomValidationAttribute", "get_Method", "()", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "CustomValidationAttribute", "get_RequiresValidationContext", "()", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "CustomValidationAttribute", "get_ValidatorType", "()", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "DataTypeAttribute", "DataTypeAttribute", "(System.ComponentModel.DataAnnotations.DataType)", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "DataTypeAttribute", "IsValid", "(System.Object)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "DataTypeAttribute", "get_CustomDataType", "()", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "DataTypeAttribute", "get_DataType", "()", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "DeniedValuesAttribute", "IsValid", "(System.Object)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "DeniedValuesAttribute", "get_Values", "()", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "DisplayColumnAttribute", "DisplayColumnAttribute", "(System.String)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "DisplayColumnAttribute", "DisplayColumnAttribute", "(System.String,System.String)", "summary", "df-generated"]
@@ -94,52 +93,35 @@ extensions:
      - ["System.ComponentModel.DataAnnotations", "DisplayColumnAttribute", "get_SortDescending", "()", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "EditableAttribute", "EditableAttribute", "(System.Boolean)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "EditableAttribute", "get_AllowEdit", "()", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "EmailAddressAttribute", "IsValid", "(System.Object)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "EnumDataTypeAttribute", "EnumDataTypeAttribute", "(System.Type)", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "EnumDataTypeAttribute", "IsValid", "(System.Object)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "EnumDataTypeAttribute", "get_EnumType", "()", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "FileExtensionsAttribute", "IsValid", "(System.Object)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "FilterUIHintAttribute", "Equals", "(System.Object)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "FilterUIHintAttribute", "FilterUIHintAttribute", "(System.String)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "FilterUIHintAttribute", "FilterUIHintAttribute", "(System.String,System.String)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "FilterUIHintAttribute", "GetHashCode", "()", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "IValidatableObject", "Validate", "(System.ComponentModel.DataAnnotations.ValidationContext)", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "LengthAttribute", "IsValid", "(System.Object)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "LengthAttribute", "LengthAttribute", "(System.Int32,System.Int32)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "LengthAttribute", "get_MaximumLength", "()", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "LengthAttribute", "get_MinimumLength", "()", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "MaxLengthAttribute", "IsValid", "(System.Object)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "MaxLengthAttribute", "MaxLengthAttribute", "(System.Int32)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "MaxLengthAttribute", "get_Length", "()", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "MetadataTypeAttribute", "MetadataTypeAttribute", "(System.Type)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "MetadataTypeAttribute", "get_MetadataClassType", "()", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "MinLengthAttribute", "IsValid", "(System.Object)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "MinLengthAttribute", "MinLengthAttribute", "(System.Int32)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "MinLengthAttribute", "get_Length", "()", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "PhoneAttribute", "IsValid", "(System.Object)", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "RangeAttribute", "IsValid", "(System.Object)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "RangeAttribute", "RangeAttribute", "(System.Double,System.Double)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "RangeAttribute", "RangeAttribute", "(System.Int32,System.Int32)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "RangeAttribute", "get_OperandType", "()", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "RegularExpressionAttribute", "IsValid", "(System.Object)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "RegularExpressionAttribute", "get_MatchTimeout", "()", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "RegularExpressionAttribute", "get_Pattern", "()", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "RequiredAttribute", "IsValid", "(System.Object)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "ScaffoldColumnAttribute", "ScaffoldColumnAttribute", "(System.Boolean)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "ScaffoldColumnAttribute", "get_Scaffold", "()", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "StringLengthAttribute", "IsValid", "(System.Object)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "StringLengthAttribute", "StringLengthAttribute", "(System.Int32)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "StringLengthAttribute", "get_MaximumLength", "()", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "UIHintAttribute", "Equals", "(System.Object)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "UIHintAttribute", "GetHashCode", "()", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "UIHintAttribute", "UIHintAttribute", "(System.String)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "UIHintAttribute", "UIHintAttribute", "(System.String,System.String)", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "UrlAttribute", "IsValid", "(System.Object)", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "ValidationAttribute", "GetValidationResult", "(System.Object,System.ComponentModel.DataAnnotations.ValidationContext)", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "ValidationAttribute", "IsValid", "(System.Object)", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "ValidationAttribute", "IsValid", "(System.Object,System.ComponentModel.DataAnnotations.ValidationContext)", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "ValidationAttribute", "Validate", "(System.Object,System.ComponentModel.DataAnnotations.ValidationContext)", "summary", "df-generated"]
-      - ["System.ComponentModel.DataAnnotations", "ValidationAttribute", "Validate", "(System.Object,System.String)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "ValidationAttribute", "ValidationAttribute", "(System.String)", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "ValidationAttribute", "get_RequiresValidationContext", "()", "summary", "df-generated"]
      - ["System.ComponentModel.DataAnnotations", "ValidationContext", "ValidationContext", "(System.Object)", "summary", "df-generated"]
--- a/csharp/ql/lib/ext/generated/System.ComponentModel.model.yml
+++ b/csharp/ql/lib/ext/generated/System.ComponentModel.model.yml
@@ -195,16 +195,17 @@ extensions:
      - ["System.ComponentModel", "TypeConverter", False, "ConvertFromString", "(System.ComponentModel.ITypeDescriptorContext,System.Globalization.CultureInfo,System.String)", "", "Argument[2]", "ReturnValue", "value", "dfc-generated"]
      - ["System.ComponentModel", "TypeConverter", False, "ConvertFromString", "(System.ComponentModel.ITypeDescriptorContext,System.String)", "", "Argument[1]", "ReturnValue", "value", "dfc-generated"]
      - ["System.ComponentModel", "TypeConverter", False, "ConvertFromString", "(System.String)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
-      - ["System.ComponentModel", "TypeConverter", False, "ConvertTo", "(System.Object,System.Type)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.ComponentModel", "TypeConverter", False, "ConvertTo", "(System.Object,System.Type)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.ComponentModel", "TypeConverter", False, "ConvertTo", "(System.Object,System.Type)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.ComponentModel", "TypeConverter", False, "ConvertToInvariantString", "(System.ComponentModel.ITypeDescriptorContext,System.Object)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
+      - ["System.ComponentModel", "TypeConverter", False, "ConvertToInvariantString", "(System.ComponentModel.ITypeDescriptorContext,System.Object)", "", "Argument[1]", "ReturnValue", "value", "df-generated"]
      - ["System.ComponentModel", "TypeConverter", False, "ConvertToInvariantString", "(System.ComponentModel.ITypeDescriptorContext,System.Object)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.ComponentModel", "TypeConverter", False, "ConvertToInvariantString", "(System.Object)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.ComponentModel", "TypeConverter", False, "ConvertToInvariantString", "(System.Object)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.ComponentModel", "TypeConverter", False, "ConvertToInvariantString", "(System.Object)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.ComponentModel", "TypeConverter", False, "ConvertToString", "(System.ComponentModel.ITypeDescriptorContext,System.Globalization.CultureInfo,System.Object)", "", "Argument[1].Property[System.Globalization.CultureInfo.TextInfo].Property[System.Globalization.TextInfo.ListSeparator]", "ReturnValue", "taint", "dfc-generated"]
-      - ["System.ComponentModel", "TypeConverter", False, "ConvertToString", "(System.ComponentModel.ITypeDescriptorContext,System.Object)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
+      - ["System.ComponentModel", "TypeConverter", False, "ConvertToString", "(System.ComponentModel.ITypeDescriptorContext,System.Globalization.CultureInfo,System.Object)", "", "Argument[2]", "ReturnValue", "value", "df-generated"]
+      - ["System.ComponentModel", "TypeConverter", False, "ConvertToString", "(System.ComponentModel.ITypeDescriptorContext,System.Object)", "", "Argument[1]", "ReturnValue", "value", "df-generated"]
      - ["System.ComponentModel", "TypeConverter", False, "ConvertToString", "(System.ComponentModel.ITypeDescriptorContext,System.Object)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.ComponentModel", "TypeConverter", False, "ConvertToString", "(System.Object)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.ComponentModel", "TypeConverter", False, "ConvertToString", "(System.Object)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.ComponentModel", "TypeConverter", False, "ConvertToString", "(System.Object)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.ComponentModel", "TypeConverter", False, "GetProperties", "(System.ComponentModel.ITypeDescriptorContext,System.Object)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
      - ["System.ComponentModel", "TypeConverter", False, "GetProperties", "(System.Object)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
@@ -215,6 +216,7 @@ extensions:
      - ["System.ComponentModel", "TypeConverter", True, "ConvertFrom", "(System.ComponentModel.ITypeDescriptorContext,System.Globalization.CultureInfo,System.Object)", "", "Argument[2]", "ReturnValue", "value", "dfc-generated"]
      - ["System.ComponentModel", "TypeConverter", True, "ConvertTo", "(System.ComponentModel.ITypeDescriptorContext,System.Globalization.CultureInfo,System.Object,System.Type)", "", "Argument[2].Element", "ReturnValue", "taint", "dfc-generated"]
      - ["System.ComponentModel", "TypeConverter", True, "ConvertTo", "(System.ComponentModel.ITypeDescriptorContext,System.Globalization.CultureInfo,System.Object,System.Type)", "", "Argument[2]", "ReturnValue", "taint", "dfc-generated"]
+      - ["System.ComponentModel", "TypeConverter", True, "ConvertTo", "(System.ComponentModel.ITypeDescriptorContext,System.Globalization.CultureInfo,System.Object,System.Type)", "", "Argument[2]", "ReturnValue", "value", "df-generated"]
      - ["System.ComponentModel", "TypeConverter", True, "GetProperties", "(System.ComponentModel.ITypeDescriptorContext,System.Object,System.Attribute[])", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
      - ["System.ComponentModel", "TypeConverter", True, "GetStandardValues", "(System.ComponentModel.ITypeDescriptorContext)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.ComponentModel", "TypeConverterAttribute", False, "TypeConverterAttribute", "(System.String)", "", "Argument[0]", "Argument[this].Property[System.ComponentModel.TypeConverterAttribute.ConverterTypeName]", "value", "dfc-generated"]
--- a/csharp/ql/lib/ext/generated/System.Composition.Hosting.Core.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Composition.Hosting.Core.model.yml
@@ -47,7 +47,7 @@ extensions:
      - ["System.Composition.Hosting.Core", "ExportDescriptorProvider", True, "GetExportDescriptors", "(System.Composition.Hosting.Core.CompositionContract,System.Composition.Hosting.Core.DependencyAccessor)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Composition.Hosting.Core", "ExportDescriptorProvider", True, "GetExportDescriptors", "(System.Composition.Hosting.Core.CompositionContract,System.Composition.Hosting.Core.DependencyAccessor)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Composition.Hosting.Core", "LifetimeContext", False, "AddBoundInstance", "(System.IDisposable)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
-      - ["System.Composition.Hosting.Core", "LifetimeContext", False, "FindContextWithin", "(System.String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Composition.Hosting.Core", "LifetimeContext", False, "FindContextWithin", "(System.String)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Composition.Hosting.Core", "LifetimeContext", False, "GetOrCreate", "(System.Int32,System.Composition.Hosting.Core.CompositionOperation,System.Composition.Hosting.Core.CompositeActivator)", "", "Argument[1]", "Argument[2].Parameter[1]", "value", "dfc-generated"]
      - ["System.Composition.Hosting.Core", "LifetimeContext", False, "GetOrCreate", "(System.Int32,System.Composition.Hosting.Core.CompositionOperation,System.Composition.Hosting.Core.CompositeActivator)", "", "Argument[2].ReturnValue", "ReturnValue", "value", "dfc-generated"]
      - ["System.Composition.Hosting.Core", "LifetimeContext", False, "GetOrCreate", "(System.Int32,System.Composition.Hosting.Core.CompositionOperation,System.Composition.Hosting.Core.CompositeActivator)", "", "Argument[this]", "Argument[2].Parameter[0]", "value", "dfc-generated"]
--- a/csharp/ql/lib/ext/generated/System.Composition.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Composition.model.yml
@@ -4,20 +4,21 @@ extensions:
      pack: codeql/csharp-all
      extensible: summaryModel
    data:
-      - ["System.Composition", "CompositionContext", False, "GetExport", "(System.Composition.Hosting.Core.CompositionContract)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Composition", "CompositionContext", False, "GetExport", "(System.Type)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Composition", "CompositionContext", False, "GetExport", "(System.Type,System.String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Composition", "CompositionContext", False, "GetExport<TExport>", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Composition", "CompositionContext", False, "GetExport<TExport>", "(System.String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Composition", "CompositionContext", False, "GetExport", "(System.Composition.Hosting.Core.CompositionContract)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Composition", "CompositionContext", False, "GetExport", "(System.Type)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Composition", "CompositionContext", False, "GetExport", "(System.Type,System.String)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Composition", "CompositionContext", False, "GetExport<TExport>", "()", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Composition", "CompositionContext", False, "GetExport<TExport>", "(System.String)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Composition", "CompositionContext", False, "GetExports", "(System.Type)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Composition", "CompositionContext", False, "GetExports", "(System.Type,System.String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Composition", "CompositionContext", False, "GetExports<TExport>", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Composition", "CompositionContext", False, "GetExports<TExport>", "(System.String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Composition", "CompositionContext", False, "TryGetExport", "(System.Type,System.Object)", "", "Argument[this]", "Argument[1]", "taint", "df-generated"]
-      - ["System.Composition", "CompositionContext", False, "TryGetExport", "(System.Type,System.String,System.Object)", "", "Argument[this]", "Argument[2]", "taint", "df-generated"]
-      - ["System.Composition", "CompositionContext", False, "TryGetExport<TExport>", "(System.String,TExport)", "", "Argument[this]", "Argument[1]", "taint", "df-generated"]
-      - ["System.Composition", "CompositionContext", False, "TryGetExport<TExport>", "(TExport)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["System.Composition", "CompositionContext", False, "TryGetExport", "(System.Type,System.Object)", "", "Argument[this]", "Argument[1]", "value", "df-generated"]
+      - ["System.Composition", "CompositionContext", False, "TryGetExport", "(System.Type,System.String,System.Object)", "", "Argument[this]", "Argument[2]", "value", "df-generated"]
+      - ["System.Composition", "CompositionContext", False, "TryGetExport<TExport>", "(System.String,TExport)", "", "Argument[this]", "Argument[1]", "value", "df-generated"]
+      - ["System.Composition", "CompositionContext", False, "TryGetExport<TExport>", "(TExport)", "", "Argument[this]", "Argument[0]", "value", "df-generated"]
      - ["System.Composition", "CompositionContext", True, "TryGetExport", "(System.Composition.Hosting.Core.CompositionContract,System.Object)", "", "Argument[this]", "Argument[1]", "taint", "df-generated"]
+      - ["System.Composition", "CompositionContext", True, "TryGetExport", "(System.Composition.Hosting.Core.CompositionContract,System.Object)", "", "Argument[this]", "Argument[1]", "value", "df-generated"]
      - ["System.Composition", "Export<T>", False, "Export", "(T,System.Action)", "", "Argument[0]", "Argument[this].Property[System.Composition.Export`1.Value]", "value", "dfc-generated"]
      - ["System.Composition", "ExportAttribute", False, "ExportAttribute", "(System.String,System.Type)", "", "Argument[0]", "Argument[this].Property[System.Composition.ExportAttribute.ContractName]", "value", "dfc-generated"]
      - ["System.Composition", "ExportFactory<T,TMetadata>", False, "ExportFactory", "(System.Func<System.Tuple<T,System.Action>>,TMetadata)", "", "Argument[1]", "Argument[this].Property[System.Composition.ExportFactory`2.Metadata]", "value", "dfc-generated"]
--- a/csharp/ql/lib/ext/generated/System.Data.Odbc.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Data.Odbc.model.yml
@@ -49,7 +49,7 @@ extensions:
      - ["System.Data.Odbc", "OdbcParameter", False, "ToString", "()", "", "Argument[this].Property[System.Data.Odbc.OdbcParameter.ParameterName]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Data.Odbc", "OdbcParameter", False, "ToString", "()", "", "Argument[this].SyntheticField[System.Data.Odbc.OdbcParameter._parameterName]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Data.Odbc", "OdbcParameterCollection", False, "Add", "(System.Data.Odbc.OdbcParameter)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
-      - ["System.Data.Odbc", "OdbcParameterCollection", False, "Add", "(System.Data.Odbc.OdbcParameter)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Data.Odbc", "OdbcParameterCollection", False, "Add", "(System.Data.Odbc.OdbcParameter)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Data.Odbc", "OdbcParameterCollection", False, "Add", "(System.Data.Odbc.OdbcParameter)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
      - ["System.Data.Odbc", "OdbcParameterCollection", False, "Add", "(System.Data.Odbc.OdbcParameter)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Data.Odbc", "OdbcParameterCollection", False, "Add", "(System.String,System.Data.Odbc.OdbcType)", "", "Argument[0]", "ReturnValue.SyntheticField[System.Data.Odbc.OdbcParameter._parameterName]", "value", "dfc-generated"]
--- a/csharp/ql/lib/ext/generated/System.Globalization.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Globalization.model.yml
@@ -17,7 +17,7 @@ extensions:
      - ["System.Globalization", "CultureInfo", False, "GetCultureInfo", "(System.String,System.String)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Globalization", "CultureInfo", False, "GetCultureInfo", "(System.String,System.String)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
      - ["System.Globalization", "CultureInfo", False, "GetCultureInfoByIetfLanguageTag", "(System.String)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Globalization", "CultureInfo", False, "ReadOnly", "(System.Globalization.CultureInfo)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Globalization", "CultureInfo", False, "ReadOnly", "(System.Globalization.CultureInfo)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Globalization", "CultureInfo", False, "ToString", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Globalization", "CultureInfo", False, "get_IetfLanguageTag", "()", "", "Argument[this].Property[System.Globalization.CultureInfo.Name]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Globalization", "CultureInfo", True, "get_Calendar", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
--- a/csharp/ql/lib/ext/generated/System.Linq.Expressions.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Linq.Expressions.model.yml
@@ -408,24 +408,24 @@ extensions:
      - ["System.Linq.Expressions", "Expression", True, "Accept", "(System.Linq.Expressions.ExpressionVisitor)", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Linq.Expressions", "Expression", True, "Reduce", "()", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Linq.Expressions", "Expression", True, "VisitChildren", "(System.Linq.Expressions.ExpressionVisitor)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
-      - ["System.Linq.Expressions", "Expression", True, "VisitChildren", "(System.Linq.Expressions.ExpressionVisitor)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Linq.Expressions", "Expression", True, "VisitChildren", "(System.Linq.Expressions.ExpressionVisitor)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Linq.Expressions", "Expression<TDelegate>", False, "Update", "(System.Linq.Expressions.Expression,System.Collections.Generic.IEnumerable<System.Linq.Expressions.ParameterExpression>)", "", "Argument[1].Element", "ReturnValue", "taint", "df-generated"]
      - ["System.Linq.Expressions", "Expression<TDelegate>", False, "Update", "(System.Linq.Expressions.Expression,System.Collections.Generic.IEnumerable<System.Linq.Expressions.ParameterExpression>)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", False, "Visit", "(System.Collections.ObjectModel.ReadOnlyCollection<System.Linq.Expressions.Expression>)", "", "Argument[0].Element", "Argument[this]", "taint", "df-generated"]
-      - ["System.Linq.Expressions", "ExpressionVisitor", False, "Visit", "(System.Collections.ObjectModel.ReadOnlyCollection<System.Linq.Expressions.Expression>)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Linq.Expressions", "ExpressionVisitor", False, "Visit", "(System.Collections.ObjectModel.ReadOnlyCollection<System.Linq.Expressions.Expression>)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", False, "Visit<T>", "(System.Collections.ObjectModel.ReadOnlyCollection<T>,System.Func<T,T>)", "", "Argument[0].Element", "Argument[1].Parameter[0]", "value", "dfc-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", False, "Visit<T>", "(System.Collections.ObjectModel.ReadOnlyCollection<T>,System.Func<T,T>)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", False, "VisitAndConvert<T>", "(System.Collections.ObjectModel.ReadOnlyCollection<T>,System.String)", "", "Argument[0].Element", "Argument[this]", "taint", "df-generated"]
-      - ["System.Linq.Expressions", "ExpressionVisitor", False, "VisitAndConvert<T>", "(System.Collections.ObjectModel.ReadOnlyCollection<T>,System.String)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Linq.Expressions", "ExpressionVisitor", False, "VisitAndConvert<T>", "(System.Collections.ObjectModel.ReadOnlyCollection<T>,System.String)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", False, "VisitAndConvert<T>", "(T,System.String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
-      - ["System.Linq.Expressions", "ExpressionVisitor", False, "VisitAndConvert<T>", "(T,System.String)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Linq.Expressions", "ExpressionVisitor", False, "VisitAndConvert<T>", "(T,System.String)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "Visit", "(System.Linq.Expressions.Expression)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitBinary", "(System.Linq.Expressions.BinaryExpression)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
-      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitBinary", "(System.Linq.Expressions.BinaryExpression)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitBinary", "(System.Linq.Expressions.BinaryExpression)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitBlock", "(System.Linq.Expressions.BlockExpression)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitCatchBlock", "(System.Linq.Expressions.CatchBlock)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitConditional", "(System.Linq.Expressions.ConditionalExpression)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
-      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitConditional", "(System.Linq.Expressions.ConditionalExpression)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitConditional", "(System.Linq.Expressions.ConditionalExpression)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitConstant", "(System.Linq.Expressions.ConstantExpression)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitDebugInfo", "(System.Linq.Expressions.DebugInfoExpression)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitDefault", "(System.Linq.Expressions.DefaultExpression)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
@@ -433,22 +433,22 @@ extensions:
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitElementInit", "(System.Linq.Expressions.ElementInit)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitExtension", "(System.Linq.Expressions.Expression)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitGoto", "(System.Linq.Expressions.GotoExpression)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
-      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitGoto", "(System.Linq.Expressions.GotoExpression)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitGoto", "(System.Linq.Expressions.GotoExpression)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitIndex", "(System.Linq.Expressions.IndexExpression)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
-      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitIndex", "(System.Linq.Expressions.IndexExpression)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitIndex", "(System.Linq.Expressions.IndexExpression)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitInvocation", "(System.Linq.Expressions.InvocationExpression)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
-      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitInvocation", "(System.Linq.Expressions.InvocationExpression)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitInvocation", "(System.Linq.Expressions.InvocationExpression)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitLabel", "(System.Linq.Expressions.LabelExpression)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitLabelTarget", "(System.Linq.Expressions.LabelTarget)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitLambda<T>", "(System.Linq.Expressions.Expression<T>)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitListInit", "(System.Linq.Expressions.ListInitExpression)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitLoop", "(System.Linq.Expressions.LoopExpression)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitMember", "(System.Linq.Expressions.MemberExpression)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
-      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitMember", "(System.Linq.Expressions.MemberExpression)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitMember", "(System.Linq.Expressions.MemberExpression)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitMemberAssignment", "(System.Linq.Expressions.MemberAssignment)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
-      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitMemberAssignment", "(System.Linq.Expressions.MemberAssignment)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitMemberAssignment", "(System.Linq.Expressions.MemberAssignment)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitMemberBinding", "(System.Linq.Expressions.MemberBinding)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
-      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitMemberBinding", "(System.Linq.Expressions.MemberBinding)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitMemberBinding", "(System.Linq.Expressions.MemberBinding)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitMemberInit", "(System.Linq.Expressions.MemberInitExpression)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitMemberListBinding", "(System.Linq.Expressions.MemberListBinding)", "", "Argument[0].Property[System.Linq.Expressions.MemberListBinding.Initializers]", "ReturnValue.Property[System.Linq.Expressions.MemberListBinding.Initializers]", "value", "dfc-generated"]
      - ["System.Linq.Expressions", "ExpressionVisitor", True, "VisitMemberListBinding", "(System.Linq.Expressions.MemberListBinding)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
--- a/csharp/ql/lib/ext/generated/System.Linq.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Linq.model.yml
@@ -157,7 +157,7 @@ extensions:
      - ["System.Linq", "Enumerable", False, "SingleOrDefault<TSource>", "(System.Collections.Generic.IEnumerable<TSource>,System.Func<TSource,System.Boolean>,TSource)", "", "Argument[2]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Linq", "Enumerable", False, "SingleOrDefault<TSource>", "(System.Collections.Generic.IEnumerable<TSource>,TSource)", "", "Argument[0].Element", "ReturnValue", "value", "dfc-generated"]
      - ["System.Linq", "Enumerable", False, "SingleOrDefault<TSource>", "(System.Collections.Generic.IEnumerable<TSource>,TSource)", "", "Argument[1]", "ReturnValue", "value", "dfc-generated"]
-      - ["System.Linq", "Enumerable", False, "SkipLast<TSource>", "(System.Collections.Generic.IEnumerable<TSource>,System.Int32)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Linq", "Enumerable", False, "SkipLast<TSource>", "(System.Collections.Generic.IEnumerable<TSource>,System.Int32)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Linq", "Enumerable", False, "Take<TSource>", "(System.Collections.Generic.IEnumerable<TSource>,System.Range)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
      - ["System.Linq", "Enumerable", False, "TakeLast<TSource>", "(System.Collections.Generic.IEnumerable<TSource>,System.Int32)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
      - ["System.Linq", "Enumerable", False, "ToDictionary<TKey,TValue>", "(System.Collections.Generic.IEnumerable<System.Collections.Generic.KeyValuePair<TKey,TValue>>)", "", "Argument[0].Element.Property[System.Collections.Generic.KeyValuePair`2.Key]", "ReturnValue.Element.Property[System.Collections.Generic.KeyValuePair`2.Key]", "value", "dfc-generated"]
--- a/csharp/ql/lib/ext/generated/System.Net.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Net.model.yml
@@ -47,6 +47,7 @@ extensions:
      - ["System.Net", "HttpListenerRequest", False, "get_ProtocolVersion", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Net", "HttpListenerRequest", False, "get_RawUrl", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Net", "HttpListenerRequest", False, "get_Url", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Net", "HttpListenerRequest", False, "get_UrlReferrer", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Net", "HttpListenerRequest", False, "get_UserAgent", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Net", "HttpListenerRequest", False, "get_UserHostName", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Net", "HttpListenerResponse", False, "AppendCookie", "(System.Net.Cookie)", "", "Argument[0]", "Argument[this].Property[System.Net.HttpListenerResponse.Cookies].Element", "value", "dfc-generated"]
@@ -292,7 +293,6 @@ extensions:
      - ["System.Net", "HttpListenerRequest", "get_RequestTraceIdentifier", "()", "summary", "df-generated"]
      - ["System.Net", "HttpListenerRequest", "get_ServiceName", "()", "summary", "df-generated"]
      - ["System.Net", "HttpListenerRequest", "get_TransportContext", "()", "summary", "df-generated"]
-      - ["System.Net", "HttpListenerRequest", "get_UrlReferrer", "()", "summary", "df-generated"]
      - ["System.Net", "HttpListenerRequest", "get_UserHostAddress", "()", "summary", "df-generated"]
      - ["System.Net", "HttpListenerRequest", "get_UserLanguages", "()", "summary", "df-generated"]
      - ["System.Net", "HttpListenerResponse", "Abort", "()", "summary", "df-generated"]
--- a/csharp/ql/lib/ext/generated/System.Reflection.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Reflection.model.yml
@@ -123,7 +123,7 @@ extensions:
      - ["System.Reflection", "MethodInfo", True, "get_ReturnParameter", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Reflection", "MethodInfo", True, "get_ReturnType", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Reflection", "MethodInfo", True, "get_ReturnTypeCustomAttributes", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Reflection", "MethodInfoExtensions", False, "GetBaseDefinition", "(System.Reflection.MethodInfo)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Reflection", "MethodInfoExtensions", False, "GetBaseDefinition", "(System.Reflection.MethodInfo)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Reflection", "MethodInvoker", False, "Invoke", "(System.Object)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Reflection", "MethodInvoker", False, "Invoke", "(System.Object)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Reflection", "MethodInvoker", False, "Invoke", "(System.Object,System.Object)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
@@ -204,7 +204,7 @@ extensions:
      - ["System.Reflection", "ReflectionContext", True, "MapType", "(System.Reflection.TypeInfo)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Reflection", "ReflectionTypeLoadException", False, "get_Message", "()", "", "Argument[this].Property[System.Exception.Message]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Reflection", "RuntimeReflectionExtensions", False, "GetMethodInfo", "(System.Delegate)", "", "Argument[0].Property[System.Delegate.Method]", "ReturnValue", "value", "dfc-generated"]
-      - ["System.Reflection", "RuntimeReflectionExtensions", False, "GetRuntimeBaseDefinition", "(System.Reflection.MethodInfo)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Reflection", "RuntimeReflectionExtensions", False, "GetRuntimeBaseDefinition", "(System.Reflection.MethodInfo)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Reflection", "RuntimeReflectionExtensions", False, "GetRuntimeInterfaceMap", "(System.Reflection.TypeInfo,System.Type)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Reflection", "TypeInfo", True, "AsType", "()", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Reflection", "TypeInfo", True, "GetDeclaredEvent", "(System.String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
--- a/csharp/ql/lib/ext/generated/System.Runtime.CompilerServices.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Runtime.CompilerServices.model.yml
@@ -67,7 +67,7 @@ extensions:
      - ["System.Runtime.CompilerServices", "RuntimeOps", False, "ExpandoTrySetValue", "(System.Dynamic.ExpandoObject,System.Object,System.Int32,System.Object,System.String,System.Boolean)", "", "Argument[3]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Runtime.CompilerServices", "RuntimeOps", False, "MergeRuntimeVariables", "(System.Runtime.CompilerServices.IRuntimeVariables,System.Runtime.CompilerServices.IRuntimeVariables,System.Int32[])", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Runtime.CompilerServices", "RuntimeOps", False, "MergeRuntimeVariables", "(System.Runtime.CompilerServices.IRuntimeVariables,System.Runtime.CompilerServices.IRuntimeVariables,System.Int32[])", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Runtime.CompilerServices", "RuntimeOps", False, "Quote", "(System.Linq.Expressions.Expression,System.Object,System.Object[])", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Runtime.CompilerServices", "RuntimeOps", False, "Quote", "(System.Linq.Expressions.Expression,System.Object,System.Object[])", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Runtime.CompilerServices", "RuntimeWrappedException", False, "RuntimeWrappedException", "(System.Object)", "", "Argument[0]", "Argument[this].SyntheticField[System.Runtime.CompilerServices.RuntimeWrappedException._wrappedException]", "value", "dfc-generated"]
      - ["System.Runtime.CompilerServices", "RuntimeWrappedException", False, "get_WrappedException", "()", "", "Argument[this].SyntheticField[System.Runtime.CompilerServices.RuntimeWrappedException._wrappedException]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Runtime.CompilerServices", "StrongBox<T>", False, "StrongBox", "(T)", "", "Argument[0]", "Argument[this].Field[System.Runtime.CompilerServices.StrongBox`1.Value]", "value", "dfc-generated"]
--- a/csharp/ql/lib/ext/generated/System.ServiceModel.Syndication.model.yml
+++ b/csharp/ql/lib/ext/generated/System.ServiceModel.Syndication.model.yml
@@ -76,6 +76,7 @@ extensions:
      - ["System.ServiceModel.Syndication", "SyndicationFeedFormatter", True, "ReadFrom", "(System.Xml.XmlReader)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.ServiceModel.Syndication", "SyndicationFeedFormatter", True, "SetFeed", "(System.ServiceModel.Syndication.SyndicationFeed)", "", "Argument[0]", "Argument[this].SyntheticField[System.ServiceModel.Syndication.SyndicationFeedFormatter._feed]", "value", "dfc-generated"]
      - ["System.ServiceModel.Syndication", "SyndicationItem", False, "AddPermalink", "(System.Uri)", "", "Argument[0].Property[System.Uri.AbsoluteUri]", "Argument[this].Property[System.ServiceModel.Syndication.SyndicationItem.Id]", "value", "dfc-generated"]
+      - ["System.ServiceModel.Syndication", "SyndicationItem", False, "AddPermalink", "(System.Uri)", "", "Argument[0]", "Argument[this].Property[System.ServiceModel.Syndication.SyndicationItem.Id]", "taint", "dfc-generated"]
      - ["System.ServiceModel.Syndication", "SyndicationItem", False, "SyndicationItem", "(System.ServiceModel.Syndication.SyndicationItem)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.ServiceModel.Syndication", "SyndicationItem", False, "SyndicationItem", "(System.String,System.ServiceModel.Syndication.SyndicationContent,System.Uri,System.String,System.DateTimeOffset)", "", "Argument[1]", "Argument[this].Property[System.ServiceModel.Syndication.SyndicationItem.Content]", "value", "dfc-generated"]
      - ["System.ServiceModel.Syndication", "SyndicationItem", False, "SyndicationItem", "(System.String,System.ServiceModel.Syndication.SyndicationContent,System.Uri,System.String,System.DateTimeOffset)", "", "Argument[3]", "Argument[this].Property[System.ServiceModel.Syndication.SyndicationItem.Id]", "value", "dfc-generated"]
--- a/csharp/ql/lib/ext/generated/System.Text.RegularExpressions.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Text.RegularExpressions.model.yml
@@ -12,7 +12,7 @@ extensions:
      - ["System.Text.RegularExpressions", "GroupCollection", False, "TryGetValue", "(System.String,System.Text.RegularExpressions.Group)", "", "Argument[this].Element", "Argument[1]", "value", "dfc-generated"]
      - ["System.Text.RegularExpressions", "GroupCollection", False, "get_Keys", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Text.RegularExpressions", "GroupCollection", False, "get_Values", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Text.RegularExpressions", "Match", False, "NextMatch", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Text.RegularExpressions", "Match", False, "NextMatch", "()", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Text.RegularExpressions", "Match", False, "Synchronized", "(System.Text.RegularExpressions.Match)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Text.RegularExpressions", "Regex+ValueMatchEnumerator", False, "GetEnumerator", "()", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Text.RegularExpressions", "Regex+ValueMatchEnumerator", False, "get_Current", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
--- a/csharp/ql/lib/ext/generated/System.Threading.Tasks.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Threading.Tasks.model.yml
@@ -17,13 +17,13 @@ extensions:
      - ["System.Threading.Tasks", "Task", False, "FromCanceled", "(System.Threading.CancellationToken)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Threading.Tasks", "Task", False, "GetAwaiter", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Threading.Tasks", "Task", False, "WaitAsync", "(System.Threading.CancellationToken)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Threading.Tasks", "Task", False, "WaitAsync", "(System.Threading.CancellationToken)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Threading.Tasks", "Task", False, "WaitAsync", "(System.TimeSpan)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Threading.Tasks", "Task", False, "WaitAsync", "(System.Threading.CancellationToken)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Threading.Tasks", "Task", False, "WaitAsync", "(System.TimeSpan)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Threading.Tasks", "Task", False, "WaitAsync", "(System.TimeSpan,System.Threading.CancellationToken)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Threading.Tasks", "Task", False, "WaitAsync", "(System.TimeSpan,System.Threading.CancellationToken)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Threading.Tasks", "Task", False, "WaitAsync", "(System.TimeSpan,System.TimeProvider)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Threading.Tasks", "Task", False, "WaitAsync", "(System.TimeSpan,System.Threading.CancellationToken)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Threading.Tasks", "Task", False, "WaitAsync", "(System.TimeSpan,System.TimeProvider)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Threading.Tasks", "Task", False, "WaitAsync", "(System.TimeSpan,System.TimeProvider,System.Threading.CancellationToken)", "", "Argument[2]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Threading.Tasks", "Task", False, "WaitAsync", "(System.TimeSpan,System.TimeProvider,System.Threading.CancellationToken)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Threading.Tasks", "Task", False, "WaitAsync", "(System.TimeSpan,System.TimeProvider,System.Threading.CancellationToken)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Threading.Tasks", "Task", False, "WhenAny", "(System.Collections.Generic.IEnumerable<System.Threading.Tasks.Task>)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
      - ["System.Threading.Tasks", "Task", False, "WhenAny", "(System.ReadOnlySpan<System.Threading.Tasks.Task>)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Threading.Tasks", "Task", False, "WhenAny", "(System.Threading.Tasks.Task,System.Threading.Tasks.Task)", "", "Argument[0]", "ReturnValue.Property[System.Threading.Tasks.Task`1.Result]", "value", "dfc-generated"]
@@ -33,11 +33,11 @@ extensions:
      - ["System.Threading.Tasks", "Task", False, "WhenEach", "(System.Threading.Tasks.Task[])", "", "Argument[0].Element", "ReturnValue.Element", "value", "dfc-generated"]
      - ["System.Threading.Tasks", "Task", False, "get_AsyncState", "()", "", "Argument[this].SyntheticField[System.Threading.Tasks.Task.m_stateObject]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Threading.Tasks", "Task<TResult>", False, "ConfigureAwait", "(System.Threading.Tasks.ConfigureAwaitOptions)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Threading.Tasks", "Task<TResult>", False, "WaitAsync", "(System.Threading.CancellationToken)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Threading.Tasks", "Task<TResult>", False, "WaitAsync", "(System.TimeSpan)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Threading.Tasks", "Task<TResult>", False, "WaitAsync", "(System.TimeSpan,System.Threading.CancellationToken)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Threading.Tasks", "Task<TResult>", False, "WaitAsync", "(System.TimeSpan,System.TimeProvider)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Threading.Tasks", "Task<TResult>", False, "WaitAsync", "(System.TimeSpan,System.TimeProvider,System.Threading.CancellationToken)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Threading.Tasks", "Task<TResult>", False, "WaitAsync", "(System.Threading.CancellationToken)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Threading.Tasks", "Task<TResult>", False, "WaitAsync", "(System.TimeSpan)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Threading.Tasks", "Task<TResult>", False, "WaitAsync", "(System.TimeSpan,System.Threading.CancellationToken)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Threading.Tasks", "Task<TResult>", False, "WaitAsync", "(System.TimeSpan,System.TimeProvider)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
+      - ["System.Threading.Tasks", "Task<TResult>", False, "WaitAsync", "(System.TimeSpan,System.TimeProvider,System.Threading.CancellationToken)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Threading.Tasks", "TaskAsyncEnumerableExtensions", False, "ConfigureAwait", "(System.IAsyncDisposable,System.Boolean)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Threading.Tasks", "TaskAsyncEnumerableExtensions", False, "ConfigureAwait<T>", "(System.Collections.Generic.IAsyncEnumerable<T>,System.Boolean)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Threading.Tasks", "TaskAsyncEnumerableExtensions", False, "ToBlockingEnumerable<T>", "(System.Collections.Generic.IAsyncEnumerable<T>,System.Threading.CancellationToken)", "", "Argument[0].Property[System.Collections.Generic.IAsyncEnumerator`1.Current]", "ReturnValue.Element", "value", "dfc-generated"]
@@ -166,7 +166,7 @@ extensions:
      - ["System.Threading.Tasks", "ValueTask<TResult>", False, "AsTask", "()", "", "Argument[this].SyntheticField[System.Threading.Tasks.ValueTask`1._result]", "ReturnValue.Property[System.Threading.Tasks.Task`1.Result]", "value", "dfc-generated"]
      - ["System.Threading.Tasks", "ValueTask<TResult>", False, "ConfigureAwait", "(System.Boolean)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Threading.Tasks", "ValueTask<TResult>", False, "GetAwaiter", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Threading.Tasks", "ValueTask<TResult>", False, "Preserve", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Threading.Tasks", "ValueTask<TResult>", False, "Preserve", "()", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Threading.Tasks", "ValueTask<TResult>", False, "ToString", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Threading.Tasks", "ValueTask<TResult>", False, "ValueTask", "(System.Threading.Tasks.Sources.IValueTaskSource<TResult>,System.Int16)", "", "Argument[0]", "Argument[this].SyntheticField[System.Threading.Tasks.ValueTask`1._obj]", "value", "dfc-generated"]
      - ["System.Threading.Tasks", "ValueTask<TResult>", False, "ValueTask", "(System.Threading.Tasks.Task<TResult>)", "", "Argument[0]", "Argument[this].SyntheticField[System.Threading.Tasks.ValueTask`1._obj]", "value", "dfc-generated"]
--- a/csharp/ql/lib/ext/generated/System.Xml.Linq.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Xml.Linq.model.yml
@@ -32,7 +32,9 @@ extensions:
      - ["System.Xml.Linq", "XContainer", False, "Add", "(System.Object)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml.Linq", "XContainer", False, "Add", "(System.Object)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
      - ["System.Xml.Linq", "XContainer", False, "Add", "(System.Object[])", "", "Argument[0].Element", "Argument[this]", "taint", "df-generated"]
+      - ["System.Xml.Linq", "XContainer", False, "Add", "(System.Object[])", "", "Argument[this]", "Argument[0].Element", "taint", "df-generated"]
      - ["System.Xml.Linq", "XContainer", False, "AddFirst", "(System.Object)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["System.Xml.Linq", "XContainer", False, "AddFirst", "(System.Object[])", "", "Argument[this]", "Argument[0].Element", "taint", "df-generated"]
      - ["System.Xml.Linq", "XContainer", False, "DescendantNodes", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Linq", "XContainer", False, "Descendants", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Linq", "XContainer", False, "Descendants", "(System.Xml.Linq.XName)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
@@ -43,6 +45,7 @@ extensions:
      - ["System.Xml.Linq", "XContainer", False, "ReplaceNodes", "(System.Object)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml.Linq", "XContainer", False, "ReplaceNodes", "(System.Object)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
      - ["System.Xml.Linq", "XContainer", False, "ReplaceNodes", "(System.Object[])", "", "Argument[0].Element", "Argument[this]", "taint", "df-generated"]
+      - ["System.Xml.Linq", "XContainer", False, "ReplaceNodes", "(System.Object[])", "", "Argument[this]", "Argument[0].Element", "taint", "df-generated"]
      - ["System.Xml.Linq", "XContainer", False, "get_FirstNode", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Linq", "XContainer", False, "get_LastNode", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Linq", "XDeclaration", False, "ToString", "()", "", "Argument[this].SyntheticField[System.Xml.Linq.XDeclaration._encoding]", "ReturnValue", "taint", "dfc-generated"]
@@ -96,9 +99,11 @@ extensions:
      - ["System.Xml.Linq", "XElement", False, "ReplaceAll", "(System.Object)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml.Linq", "XElement", False, "ReplaceAll", "(System.Object)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
      - ["System.Xml.Linq", "XElement", False, "ReplaceAll", "(System.Object[])", "", "Argument[0].Element", "Argument[this]", "taint", "df-generated"]
+      - ["System.Xml.Linq", "XElement", False, "ReplaceAll", "(System.Object[])", "", "Argument[this]", "Argument[0].Element", "taint", "df-generated"]
      - ["System.Xml.Linq", "XElement", False, "ReplaceAttributes", "(System.Object)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml.Linq", "XElement", False, "ReplaceAttributes", "(System.Object)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
      - ["System.Xml.Linq", "XElement", False, "ReplaceAttributes", "(System.Object[])", "", "Argument[0].Element", "Argument[this]", "taint", "df-generated"]
+      - ["System.Xml.Linq", "XElement", False, "ReplaceAttributes", "(System.Object[])", "", "Argument[this]", "Argument[0].Element", "taint", "df-generated"]
      - ["System.Xml.Linq", "XElement", False, "SetAttributeValue", "(System.Xml.Linq.XName,System.Object)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml.Linq", "XElement", False, "SetAttributeValue", "(System.Xml.Linq.XName,System.Object)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml.Linq", "XElement", False, "SetElementValue", "(System.Xml.Linq.XName,System.Object)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
@@ -120,7 +125,9 @@ extensions:
      - ["System.Xml.Linq", "XNamespace", False, "get_NamespaceName", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Linq", "XNamespace", False, "op_Addition", "(System.Xml.Linq.XNamespace,System.String)", "", "Argument[0]", "ReturnValue.SyntheticField[System.Xml.Linq.XName._ns]", "value", "dfc-generated"]
      - ["System.Xml.Linq", "XNode", False, "AddAfterSelf", "(System.Object)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["System.Xml.Linq", "XNode", False, "AddAfterSelf", "(System.Object[])", "", "Argument[this]", "Argument[0].Element", "taint", "df-generated"]
      - ["System.Xml.Linq", "XNode", False, "AddBeforeSelf", "(System.Object)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["System.Xml.Linq", "XNode", False, "AddBeforeSelf", "(System.Object[])", "", "Argument[this]", "Argument[0].Element", "taint", "df-generated"]
      - ["System.Xml.Linq", "XNode", False, "Ancestors", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Linq", "XNode", False, "Ancestors", "(System.Xml.Linq.XName)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Linq", "XNode", False, "CreateReader", "(System.Xml.Linq.ReaderOptions)", "", "Argument[this]", "ReturnValue.SyntheticField[System.Xml.Linq.XNodeReader._source]", "value", "dfc-generated"]
@@ -130,6 +137,7 @@ extensions:
      - ["System.Xml.Linq", "XNode", False, "ReadFrom", "(System.Xml.XmlReader)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Linq", "XNode", False, "ReadFromAsync", "(System.Xml.XmlReader,System.Threading.CancellationToken)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Linq", "XNode", False, "ReplaceWith", "(System.Object)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["System.Xml.Linq", "XNode", False, "ReplaceWith", "(System.Object[])", "", "Argument[this]", "Argument[0].Element", "taint", "df-generated"]
      - ["System.Xml.Linq", "XNode", False, "get_NextNode", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Linq", "XNode", True, "WriteTo", "(System.Xml.XmlWriter)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
      - ["System.Xml.Linq", "XNode", True, "WriteToAsync", "(System.Xml.XmlWriter,System.Threading.CancellationToken)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
@@ -170,7 +178,6 @@ extensions:
      - ["System.Xml.Linq", "XCData", "XCData", "(System.Xml.Linq.XCData)", "summary", "df-generated"]
      - ["System.Xml.Linq", "XCData", "get_NodeType", "()", "summary", "df-generated"]
      - ["System.Xml.Linq", "XComment", "get_NodeType", "()", "summary", "df-generated"]
-      - ["System.Xml.Linq", "XContainer", "AddFirst", "(System.Object[])", "summary", "df-generated"]
      - ["System.Xml.Linq", "XContainer", "CreateWriter", "()", "summary", "df-generated"]
      - ["System.Xml.Linq", "XContainer", "RemoveNodes", "()", "summary", "df-generated"]
      - ["System.Xml.Linq", "XDocument", "LoadAsync", "(System.IO.Stream,System.Xml.Linq.LoadOptions,System.Threading.CancellationToken)", "summary", "df-generated"]
@@ -226,8 +233,6 @@ extensions:
      - ["System.Xml.Linq", "XNamespace", "get_Xmlns", "()", "summary", "df-generated"]
      - ["System.Xml.Linq", "XNamespace", "op_Equality", "(System.Xml.Linq.XNamespace,System.Xml.Linq.XNamespace)", "summary", "df-generated"]
      - ["System.Xml.Linq", "XNamespace", "op_Inequality", "(System.Xml.Linq.XNamespace,System.Xml.Linq.XNamespace)", "summary", "df-generated"]
-      - ["System.Xml.Linq", "XNode", "AddAfterSelf", "(System.Object[])", "summary", "df-generated"]
-      - ["System.Xml.Linq", "XNode", "AddBeforeSelf", "(System.Object[])", "summary", "df-generated"]
      - ["System.Xml.Linq", "XNode", "CompareDocumentOrder", "(System.Xml.Linq.XNode,System.Xml.Linq.XNode)", "summary", "df-generated"]
      - ["System.Xml.Linq", "XNode", "CreateReader", "()", "summary", "df-generated"]
      - ["System.Xml.Linq", "XNode", "DeepEquals", "(System.Xml.Linq.XNode,System.Xml.Linq.XNode)", "summary", "df-generated"]
@@ -237,7 +242,6 @@ extensions:
      - ["System.Xml.Linq", "XNode", "IsBefore", "(System.Xml.Linq.XNode)", "summary", "df-generated"]
      - ["System.Xml.Linq", "XNode", "NodesBeforeSelf", "()", "summary", "df-generated"]
      - ["System.Xml.Linq", "XNode", "Remove", "()", "summary", "df-generated"]
-      - ["System.Xml.Linq", "XNode", "ReplaceWith", "(System.Object[])", "summary", "df-generated"]
      - ["System.Xml.Linq", "XNode", "ToString", "()", "summary", "df-generated"]
      - ["System.Xml.Linq", "XNode", "ToString", "(System.Xml.Linq.SaveOptions)", "summary", "df-generated"]
      - ["System.Xml.Linq", "XNode", "get_DocumentOrderComparer", "()", "summary", "df-generated"]
--- a/csharp/ql/lib/ext/generated/System.Xml.Resolvers.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Xml.Resolvers.model.yml
@@ -8,6 +8,7 @@ extensions:
      - ["System.Xml.Resolvers", "XmlPreloadedResolver", False, "get_PreloadedUris", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Resolvers", "XmlPreloadedResolver", True, "GetEntity", "(System.Uri,System.String,System.Type)", "", "Argument[0].Property[System.Uri.LocalPath]", "ReturnValue", "taint", "dfc-generated"]
      - ["System.Xml.Resolvers", "XmlPreloadedResolver", True, "GetEntityAsync", "(System.Uri,System.String,System.Type)", "", "Argument[0].Property[System.Uri.LocalPath]", "ReturnValue.Property[System.Threading.Tasks.Task`1.Result]", "taint", "dfc-generated"]
+      - ["System.Xml.Resolvers", "XmlPreloadedResolver", True, "GetEntityAsync", "(System.Uri,System.String,System.Type)", "", "Argument[0]", "ReturnValue.Property[System.Threading.Tasks.Task`1.Result]", "taint", "dfc-generated"]
  - addsTo:
      pack: codeql/csharp-all
      extensible: neutralModel
--- a/csharp/ql/lib/ext/generated/System.Xml.Schema.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Xml.Schema.model.yml
@@ -36,14 +36,15 @@ extensions:
      - ["System.Xml.Schema", "XmlSchemaComplexContentRestriction", False, "get_Attributes", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaComplexType", False, "get_AttributeWildcard", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaComplexType", False, "get_ContentTypeParticle", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Xml.Schema", "XmlSchemaDatatype", True, "ChangeType", "(System.Object,System.Type)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml.Schema", "XmlSchemaDatatype", True, "ChangeType", "(System.Object,System.Type)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaDatatype", True, "ChangeType", "(System.Object,System.Type)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaDatatype", True, "ChangeType", "(System.Object,System.Type,System.Xml.IXmlNamespaceResolver)", "", "Argument[0]", "Argument[2]", "taint", "df-generated"]
-      - ["System.Xml.Schema", "XmlSchemaDatatype", True, "ChangeType", "(System.Object,System.Type,System.Xml.IXmlNamespaceResolver)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml.Schema", "XmlSchemaDatatype", True, "ChangeType", "(System.Object,System.Type,System.Xml.IXmlNamespaceResolver)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaDatatype", True, "ChangeType", "(System.Object,System.Type,System.Xml.IXmlNamespaceResolver)", "", "Argument[2]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaDatatype", True, "ChangeType", "(System.Object,System.Type,System.Xml.IXmlNamespaceResolver)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaDatatype", True, "ParseValue", "(System.String,System.Xml.XmlNameTable,System.Xml.IXmlNamespaceResolver)", "", "Argument[0]", "Argument[2]", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaDatatype", True, "ParseValue", "(System.String,System.Xml.XmlNameTable,System.Xml.IXmlNamespaceResolver)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml.Schema", "XmlSchemaDatatype", True, "ParseValue", "(System.String,System.Xml.XmlNameTable,System.Xml.IXmlNamespaceResolver)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaDatatype", True, "ParseValue", "(System.String,System.Xml.XmlNameTable,System.Xml.IXmlNamespaceResolver)", "", "Argument[2]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaDatatype", True, "ParseValue", "(System.String,System.Xml.XmlNameTable,System.Xml.IXmlNamespaceResolver)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaElement", False, "get_ElementSchemaType", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
@@ -80,12 +81,12 @@ extensions:
      - ["System.Xml.Schema", "XmlSchemaSet", False, "Add", "(System.String,System.Xml.XmlReader)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaSet", False, "Add", "(System.String,System.Xml.XmlReader)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaSet", False, "Add", "(System.Xml.Schema.XmlSchema)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
-      - ["System.Xml.Schema", "XmlSchemaSet", False, "Add", "(System.Xml.Schema.XmlSchema)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml.Schema", "XmlSchemaSet", False, "Add", "(System.Xml.Schema.XmlSchema)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaSet", False, "Add", "(System.Xml.Schema.XmlSchemaSet)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaSet", False, "CopyTo", "(System.Xml.Schema.XmlSchema[],System.Int32)", "", "Argument[this]", "Argument[0].Element", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaSet", False, "Remove", "(System.Xml.Schema.XmlSchema)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Xml.Schema", "XmlSchemaSet", False, "Reprocess", "(System.Xml.Schema.XmlSchema)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
-      - ["System.Xml.Schema", "XmlSchemaSet", False, "Reprocess", "(System.Xml.Schema.XmlSchema)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml.Schema", "XmlSchemaSet", False, "Reprocess", "(System.Xml.Schema.XmlSchema)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaSet", False, "Schemas", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaSet", False, "Schemas", "(System.String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaSet", False, "XmlSchemaSet", "(System.Xml.XmlNameTable)", "", "Argument[0]", "Argument[this].SyntheticField[System.Xml.Schema.XmlSchemaSet._nameTable]", "value", "dfc-generated"]
@@ -109,7 +110,7 @@ extensions:
      - ["System.Xml.Schema", "XmlSchemaValidator", False, "Initialize", "(System.Xml.Schema.XmlSchemaObject)", "", "Argument[0]", "Argument[this].SyntheticField[System.Xml.Schema.XmlSchemaValidator._partialValidationType]", "value", "dfc-generated"]
      - ["System.Xml.Schema", "XmlSchemaValidator", False, "SkipToEndElement", "(System.Xml.Schema.XmlSchemaInfo)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaValidator", False, "ValidateAttribute", "(System.String,System.String,System.String,System.Xml.Schema.XmlSchemaInfo)", "", "Argument[2]", "Argument[this]", "taint", "df-generated"]
-      - ["System.Xml.Schema", "XmlSchemaValidator", False, "ValidateAttribute", "(System.String,System.String,System.String,System.Xml.Schema.XmlSchemaInfo)", "", "Argument[2]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml.Schema", "XmlSchemaValidator", False, "ValidateAttribute", "(System.String,System.String,System.String,System.Xml.Schema.XmlSchemaInfo)", "", "Argument[2]", "ReturnValue", "value", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaValidator", False, "ValidateAttribute", "(System.String,System.String,System.String,System.Xml.Schema.XmlSchemaInfo)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaValidator", False, "ValidateElement", "(System.String,System.String,System.Xml.Schema.XmlSchemaInfo)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaValidator", False, "ValidateElement", "(System.String,System.String,System.Xml.Schema.XmlSchemaInfo)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
@@ -121,7 +122,7 @@ extensions:
      - ["System.Xml.Schema", "XmlSchemaValidator", False, "ValidateEndElement", "(System.Xml.Schema.XmlSchemaInfo)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaValidator", False, "ValidateEndElement", "(System.Xml.Schema.XmlSchemaInfo,System.Object)", "", "Argument[1]", "Argument[0]", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaValidator", False, "ValidateEndElement", "(System.Xml.Schema.XmlSchemaInfo,System.Object)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
-      - ["System.Xml.Schema", "XmlSchemaValidator", False, "ValidateEndElement", "(System.Xml.Schema.XmlSchemaInfo,System.Object)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml.Schema", "XmlSchemaValidator", False, "ValidateEndElement", "(System.Xml.Schema.XmlSchemaInfo,System.Object)", "", "Argument[1]", "ReturnValue", "value", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaValidator", False, "ValidateEndElement", "(System.Xml.Schema.XmlSchemaInfo,System.Object)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaValidator", False, "ValidateEndElement", "(System.Xml.Schema.XmlSchemaInfo,System.Object)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Schema", "XmlSchemaValidator", False, "XmlSchemaValidator", "(System.Xml.XmlNameTable,System.Xml.Schema.XmlSchemaSet,System.Xml.IXmlNamespaceResolver,System.Xml.Schema.XmlSchemaValidationFlags)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
--- a/csharp/ql/lib/ext/generated/System.Xml.XPath.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Xml.XPath.model.yml
@@ -8,6 +8,7 @@ extensions:
      - ["System.Xml.XPath", "Extensions", False, "CreateNavigator", "(System.Xml.Linq.XNode,System.Xml.XmlNameTable)", "", "Argument[0]", "ReturnValue.SyntheticField[System.Xml.XPath.XNodeNavigator._source]", "value", "dfc-generated"]
      - ["System.Xml.XPath", "Extensions", False, "CreateNavigator", "(System.Xml.Linq.XNode,System.Xml.XmlNameTable)", "", "Argument[1]", "ReturnValue.SyntheticField[System.Xml.XPath.XNodeNavigator._nameTable]", "value", "dfc-generated"]
      - ["System.Xml.XPath", "IXPathNavigable", True, "CreateNavigator", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml.XPath", "IXPathNavigable", True, "CreateNavigator", "()", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Xml.XPath", "XDocumentExtensions", False, "ToXPathNavigable", "(System.Xml.Linq.XNode)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.XPath", "XPathDocument", False, "XPathDocument", "(System.Xml.XmlReader,System.Xml.XmlSpace)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml.XPath", "XPathException", True, "get_Message", "()", "", "Argument[this].Property[System.Exception.Message]", "ReturnValue", "value", "dfc-generated"]
@@ -17,7 +18,7 @@ extensions:
      - ["System.Xml.XPath", "XPathExpression", True, "SetContext", "(System.Xml.IXmlNamespaceResolver)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml.XPath", "XPathExpression", True, "SetContext", "(System.Xml.XmlNamespaceManager)", "", "Argument[0].Element", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml.XPath", "XPathExpression", True, "get_Expression", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Xml.XPath", "XPathItem", True, "ValueAs", "(System.Type)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml.XPath", "XPathItem", True, "ValueAs", "(System.Type)", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System.Xml.XPath", "XPathItem", True, "ValueAs", "(System.Type,System.Xml.IXmlNamespaceResolver)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.XPath", "XPathItem", True, "ValueAs", "(System.Type,System.Xml.IXmlNamespaceResolver)", "", "Argument[this]", "Argument[1]", "taint", "df-generated"]
      - ["System.Xml.XPath", "XPathItem", True, "ValueAs", "(System.Type,System.Xml.IXmlNamespaceResolver)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
--- a/csharp/ql/lib/ext/generated/System.Xml.Xsl.Runtime.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Xml.Xsl.Runtime.model.yml
@@ -123,13 +123,14 @@ extensions:
      - ["System.Xml.Xsl.Runtime", "XmlQueryOutput", False, "WriteStartNamespace", "(System.String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQueryOutput", False, "WriteStartProcessingInstruction", "(System.String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQueryOutput", False, "XsltCopyOf", "(System.Xml.XPath.XPathNavigator)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
-      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "ChangeTypeXsltArgument", "(System.Int32,System.Object,System.Type)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "ChangeTypeXsltResult", "(System.Int32,System.Object)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "ChangeTypeXsltArgument", "(System.Int32,System.Object,System.Type)", "", "Argument[1]", "ReturnValue", "value", "df-generated"]
+      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "ChangeTypeXsltResult", "(System.Int32,System.Object)", "", "Argument[1]", "ReturnValue", "value", "df-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "DebugGetGlobalNames", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "DebugGetGlobalValue", "(System.String)", "", "Argument[this].SyntheticField[System.Xml.Xsl.Runtime.XmlQueryRuntime._globalValues].Element", "ReturnValue", "value", "dfc-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "DebugGetXsltValue", "(System.Collections.IList)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "DebugGetXsltValue", "(System.Collections.IList)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "DebugSetGlobalValue", "(System.String,System.Object)", "", "Argument[1]", "Argument[this].SyntheticField[System.Xml.Xsl.Runtime.XmlQueryRuntime._globalValues].Element", "value", "dfc-generated"]
-      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "DocOrderDistinct", "(System.Collections.Generic.IList<System.Xml.XPath.XPathNavigator>)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "DocOrderDistinct", "(System.Collections.Generic.IList<System.Xml.XPath.XPathNavigator>)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "EndRtfConstruction", "(System.Xml.Xsl.Runtime.XmlQueryOutput)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "EndRtfConstruction", "(System.Xml.Xsl.Runtime.XmlQueryOutput)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "EndSequenceConstruction", "(System.Xml.Xsl.Runtime.XmlQueryOutput)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
@@ -142,6 +143,7 @@ extensions:
      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "ParseTagName", "(System.String,System.Int32)", "", "Argument[0]", "ReturnValue.Property[System.Xml.XmlQualifiedName.Name]", "value", "dfc-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "ParseTagName", "(System.String,System.String)", "", "Argument[0]", "ReturnValue.Property[System.Xml.XmlQualifiedName.Name]", "value", "dfc-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "ParseTagName", "(System.String,System.String)", "", "Argument[1]", "ReturnValue.Property[System.Xml.XmlQualifiedName.Namespace]", "value", "dfc-generated"]
+      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "SetGlobalValue", "(System.Int32,System.Object)", "", "Argument[1]", "Argument[this].SyntheticField[System.Xml.Xsl.Runtime.XmlQueryRuntime._globalValues].Element", "value", "dfc-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "StartRtfConstruction", "(System.String,System.Xml.Xsl.Runtime.XmlQueryOutput)", "", "Argument[0]", "Argument[1]", "taint", "df-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "StartRtfConstruction", "(System.String,System.Xml.Xsl.Runtime.XmlQueryOutput)", "", "Argument[this]", "Argument[1]", "taint", "df-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", False, "StartSequenceConstruction", "(System.Xml.Xsl.Runtime.XmlQueryOutput)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
@@ -321,7 +323,6 @@ extensions:
      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", "MatchesXmlType", "(System.Xml.XPath.XPathItem,System.Xml.Schema.XmlTypeCode)", "summary", "df-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", "OnCurrentNodeChanged", "(System.Xml.XPath.XPathNavigator)", "summary", "df-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", "SendMessage", "(System.String)", "summary", "df-generated"]
-      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", "SetGlobalValue", "(System.Int32,System.Object)", "summary", "df-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", "ThrowException", "(System.String)", "summary", "df-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQueryRuntime", "get_XsltFunctions", "()", "summary", "df-generated"]
      - ["System.Xml.Xsl.Runtime", "XmlQuerySequence<T>", "Clear", "()", "summary", "df-generated"]
--- a/csharp/ql/lib/ext/generated/System.Xml.model.yml
+++ b/csharp/ql/lib/ext/generated/System.Xml.model.yml
@@ -260,6 +260,7 @@ extensions:
      - ["System.Xml", "XmlNamespaceManager", True, "get_NameTable", "()", "", "Argument[this].SyntheticField[System.Xml.XmlNamespaceManager._nameTable]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Xml", "XmlNode", True, "AppendChild", "(System.Xml.XmlNode)", "", "Argument[0].Element", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "AppendChild", "(System.Xml.XmlNode)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml", "XmlNode", True, "AppendChild", "(System.Xml.XmlNode)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Xml", "XmlNode", True, "AppendChild", "(System.Xml.XmlNode)", "", "Argument[this]", "Argument[0].Element", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "AppendChild", "(System.Xml.XmlNode)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "Clone", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
@@ -269,6 +270,7 @@ extensions:
      - ["System.Xml", "XmlNode", True, "InsertAfter", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[0].Element", "Argument[1].Element", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "InsertAfter", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[0].Element", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "InsertAfter", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml", "XmlNode", True, "InsertAfter", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Xml", "XmlNode", True, "InsertAfter", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[1].Element", "Argument[0].Element", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "InsertAfter", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[1].Element", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "InsertAfter", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[1].Element", "ReturnValue", "taint", "df-generated"]
@@ -277,20 +279,21 @@ extensions:
      - ["System.Xml", "XmlNode", True, "InsertBefore", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[0].Element", "Argument[1].Element", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "InsertBefore", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[0].Element", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "InsertBefore", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml", "XmlNode", True, "InsertBefore", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Xml", "XmlNode", True, "InsertBefore", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[1].Element", "Argument[0].Element", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "InsertBefore", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[1].Element", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "InsertBefore", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[this]", "Argument[0].Element", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "InsertBefore", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[this]", "Argument[1].Element", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "InsertBefore", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "PrependChild", "(System.Xml.XmlNode)", "", "Argument[0].Element", "Argument[this]", "taint", "df-generated"]
-      - ["System.Xml", "XmlNode", True, "PrependChild", "(System.Xml.XmlNode)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml", "XmlNode", True, "PrependChild", "(System.Xml.XmlNode)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Xml", "XmlNode", True, "PrependChild", "(System.Xml.XmlNode)", "", "Argument[this]", "Argument[0].Element", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "PrependChild", "(System.Xml.XmlNode)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "RemoveChild", "(System.Xml.XmlNode)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Xml", "XmlNode", True, "ReplaceChild", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[0].Element", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "ReplaceChild", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[1].Element", "Argument[0].Element", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "ReplaceChild", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[1].Element", "Argument[this]", "taint", "df-generated"]
-      - ["System.Xml", "XmlNode", True, "ReplaceChild", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[1].Element", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml", "XmlNode", True, "ReplaceChild", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[1]", "ReturnValue", "value", "df-generated"]
      - ["System.Xml", "XmlNode", True, "ReplaceChild", "(System.Xml.XmlNode,System.Xml.XmlNode)", "", "Argument[this]", "Argument[0].Element", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "WriteContentTo", "(System.Xml.XmlWriter)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
      - ["System.Xml", "XmlNode", True, "WriteTo", "(System.Xml.XmlWriter)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
@@ -386,13 +389,14 @@ extensions:
      - ["System.Xml", "XmlReader", True, "get_Value", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml", "XmlReader", True, "get_XmlLang", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml", "XmlReaderSettings", False, "set_XmlResolver", "(System.Xml.XmlResolver)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
-      - ["System.Xml", "XmlResolver", True, "GetEntity", "(System.Uri,System.String,System.Type)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml", "XmlResolver", True, "GetEntity", "(System.Uri,System.String,System.Type)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
      - ["System.Xml", "XmlResolver", True, "GetEntityAsync", "(System.Uri,System.String,System.Type)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml", "XmlResolver", True, "ResolveUri", "(System.Uri,System.String)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
      - ["System.Xml", "XmlResolver", True, "ResolveUri", "(System.Uri,System.String)", "", "Argument[1]", "ReturnValue", "taint", "dfc-generated"]
      - ["System.Xml", "XmlResolver", True, "set_Credentials", "(System.Net.ICredentials)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml", "XmlSecureResolver", True, "GetEntity", "(System.Uri,System.String,System.Type)", "", "Argument[0].Property[System.Uri.LocalPath]", "ReturnValue", "taint", "dfc-generated"]
      - ["System.Xml", "XmlSecureResolver", True, "GetEntityAsync", "(System.Uri,System.String,System.Type)", "", "Argument[0].Property[System.Uri.LocalPath]", "ReturnValue.Property[System.Threading.Tasks.Task`1.Result]", "taint", "dfc-generated"]
+      - ["System.Xml", "XmlSecureResolver", True, "GetEntityAsync", "(System.Uri,System.String,System.Type)", "", "Argument[0]", "ReturnValue.Property[System.Threading.Tasks.Task`1.Result]", "taint", "dfc-generated"]
      - ["System.Xml", "XmlText", True, "SplitText", "(System.Int32)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml", "XmlTextReader", False, "GetRemainder", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml", "XmlTextReader", False, "XmlTextReader", "(System.IO.Stream,System.Xml.XmlNodeType,System.Xml.XmlParserContext)", "", "Argument[2]", "Argument[this]", "taint", "df-generated"]
@@ -445,8 +449,8 @@ extensions:
      - ["System.Xml", "XmlWriter", False, "Create", "(System.Text.StringBuilder)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml", "XmlWriter", False, "Create", "(System.Text.StringBuilder,System.Xml.XmlWriterSettings)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml", "XmlWriter", False, "Create", "(System.Text.StringBuilder,System.Xml.XmlWriterSettings)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Xml", "XmlWriter", False, "Create", "(System.Xml.XmlWriter)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
-      - ["System.Xml", "XmlWriter", False, "Create", "(System.Xml.XmlWriter,System.Xml.XmlWriterSettings)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["System.Xml", "XmlWriter", False, "Create", "(System.Xml.XmlWriter)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
+      - ["System.Xml", "XmlWriter", False, "Create", "(System.Xml.XmlWriter,System.Xml.XmlWriterSettings)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System.Xml", "XmlWriter", False, "Create", "(System.Xml.XmlWriter,System.Xml.XmlWriterSettings)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
      - ["System.Xml", "XmlWriter", False, "WriteAttributeString", "(System.String,System.String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System.Xml", "XmlWriter", False, "WriteAttributeString", "(System.String,System.String)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
--- a/csharp/ql/lib/ext/generated/System.model.yml
+++ b/csharp/ql/lib/ext/generated/System.model.yml
@@ -45,6 +45,7 @@ extensions:
      - ["System", "ArraySegment<T>", False, "Slice", "(System.Int32,System.Int32)", "", "Argument[this].SyntheticField[System.ArraySegment`1._array]", "ReturnValue.SyntheticField[System.ArraySegment`1._array]", "value", "dfc-generated"]
      - ["System", "ArraySegment<T>", False, "get_Array", "()", "", "Argument[this].SyntheticField[System.ArraySegment`1._array]", "ReturnValue", "value", "dfc-generated"]
      - ["System", "ArraySegment<T>", False, "get_Item", "(System.Int32)", "", "Argument[this].SyntheticField[System.ArraySegment`1._array].Element", "ReturnValue", "value", "dfc-generated"]
+      - ["System", "ArraySegment<T>", False, "set_Item", "(System.Int32,T)", "", "Argument[1]", "Argument[this].SyntheticField[System.ArraySegment`1._array].Element", "value", "dfc-generated"]
      - ["System", "Attribute", True, "get_TypeId", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System", "BadImageFormatException", False, "BadImageFormatException", "(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext)", "", "Argument[0].SyntheticField[System.Runtime.Serialization.SerializationInfo._values].Element", "Argument[this].SyntheticField[System.BadImageFormatException._fileName]", "value", "dfc-generated"]
      - ["System", "BadImageFormatException", False, "BadImageFormatException", "(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext)", "", "Argument[0].SyntheticField[System.Runtime.Serialization.SerializationInfo._values].Element", "Argument[this].SyntheticField[System.BadImageFormatException._fusionLog]", "value", "dfc-generated"]
@@ -94,7 +95,7 @@ extensions:
      - ["System", "Exception", False, "Exception", "(System.String,System.Exception)", "", "Argument[1]", "Argument[this].SyntheticField[System.Exception._innerException]", "value", "dfc-generated"]
      - ["System", "Exception", False, "ToString", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System", "Exception", False, "get_InnerException", "()", "", "Argument[this].SyntheticField[System.Exception._innerException]", "ReturnValue", "value", "dfc-generated"]
-      - ["System", "Exception", True, "GetBaseException", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["System", "Exception", True, "GetBaseException", "()", "", "Argument[this]", "ReturnValue", "value", "df-generated"]
      - ["System", "Exception", True, "get_Message", "()", "", "Argument[this].SyntheticField[System.Exception._message]", "ReturnValue", "value", "dfc-generated"]
      - ["System", "Exception", True, "get_StackTrace", "()", "", "Argument[this].SyntheticField[System.Exception._remoteStackTraceString]", "ReturnValue", "value", "dfc-generated"]
      - ["System", "FormattableString", False, "CurrentCulture", "(System.FormattableString)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
@@ -717,28 +718,17 @@ extensions:
      - ["System", "Uri", False, "GetComponents", "(System.UriComponents,System.UriFormat)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System", "Uri", False, "GetLeftPart", "(System.UriPartial)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System", "Uri", False, "MakeRelative", "(System.Uri)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
-      - ["System", "Uri", False, "MakeRelativeUri", "(System.Uri)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
-      - ["System", "Uri", False, "ToString", "(System.String,System.IFormatProvider)", "", "Argument[this].SyntheticField[System.Uri._string]", "ReturnValue", "value", "dfc-generated"]
-      - ["System", "Uri", False, "TryCreate", "(System.String,System.UriCreationOptions,System.Uri)", "", "Argument[0]", "Argument[2].SyntheticField[System.Uri._string]", "value", "dfc-generated"]
-      - ["System", "Uri", False, "TryCreate", "(System.String,System.UriKind,System.Uri)", "", "Argument[0]", "Argument[2].SyntheticField[System.Uri._string]", "value", "dfc-generated"]
-      - ["System", "Uri", False, "TryCreate", "(System.Uri,System.String,System.Uri)", "", "Argument[1]", "Argument[2].SyntheticField[System.Uri._string]", "value", "dfc-generated"]
-      - ["System", "Uri", False, "TryCreate", "(System.Uri,System.Uri,System.Uri)", "", "Argument[0]", "Argument[2]", "taint", "df-generated"]
-      - ["System", "Uri", False, "TryCreate", "(System.Uri,System.Uri,System.Uri)", "", "Argument[1]", "Argument[2]", "taint", "df-generated"]
+      - ["System", "Uri", False, "MakeRelativeUri", "(System.Uri)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
      - ["System", "Uri", False, "TryEscapeDataString", "(System.ReadOnlySpan<System.Char>,System.Span<System.Char>,System.Int32)", "", "Argument[0].Element", "Argument[1].Element", "value", "dfc-generated"]
      - ["System", "Uri", False, "TryUnescapeDataString", "(System.ReadOnlySpan<System.Char>,System.Span<System.Char>,System.Int32)", "", "Argument[0].Element", "Argument[1].Element", "value", "dfc-generated"]
      - ["System", "Uri", False, "UnescapeDataString", "(System.ReadOnlySpan<System.Char>)", "", "Argument[0].Element", "ReturnValue", "taint", "dfc-generated"]
      - ["System", "Uri", False, "UnescapeDataString", "(System.String)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
-      - ["System", "Uri", False, "Uri", "(System.String,System.UriCreationOptions)", "", "Argument[0]", "Argument[this].SyntheticField[System.Uri._string]", "value", "dfc-generated"]
-      - ["System", "Uri", False, "Uri", "(System.Uri,System.String)", "", "Argument[1]", "Argument[this].SyntheticField[System.Uri._string]", "value", "dfc-generated"]
-      - ["System", "Uri", False, "Uri", "(System.Uri,System.String,System.Boolean)", "", "Argument[1]", "Argument[this].SyntheticField[System.Uri._string]", "value", "dfc-generated"]
      - ["System", "Uri", False, "Uri", "(System.Uri,System.Uri)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
      - ["System", "Uri", False, "Uri", "(System.Uri,System.Uri)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
      - ["System", "Uri", False, "get_AbsolutePath", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System", "Uri", False, "get_Authority", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System", "Uri", False, "get_DnsSafeHost", "()", "", "Argument[this].Property[System.Uri.IdnHost]", "ReturnValue", "value", "dfc-generated"]
      - ["System", "Uri", False, "get_Host", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System", "Uri", False, "get_IdnHost", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
-      - ["System", "Uri", False, "get_LocalPath", "()", "", "Argument[this].SyntheticField[System.Uri._string]", "ReturnValue", "value", "dfc-generated"]
      - ["System", "Uri", False, "get_Scheme", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System", "Uri", False, "get_UserInfo", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
      - ["System", "UriParser", False, "Register", "(System.UriParser,System.String,System.Int32)", "", "Argument[1]", "Argument[0]", "taint", "df-generated"]
@@ -1031,7 +1021,6 @@ extensions:
      - ["System", "ArraySegment<T>", "get_Offset", "()", "summary", "df-generated"]
      - ["System", "ArraySegment<T>", "op_Equality", "(System.ArraySegment<T>,System.ArraySegment<T>)", "summary", "df-generated"]
      - ["System", "ArraySegment<T>", "op_Inequality", "(System.ArraySegment<T>,System.ArraySegment<T>)", "summary", "df-generated"]
-      - ["System", "ArraySegment<T>", "set_Item", "(System.Int32,T)", "summary", "df-generated"]
      - ["System", "ArrayTypeMismatchException", "ArrayTypeMismatchException", "(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext)", "summary", "df-generated"]
      - ["System", "ArrayTypeMismatchException", "ArrayTypeMismatchException", "(System.String)", "summary", "df-generated"]
      - ["System", "ArrayTypeMismatchException", "ArrayTypeMismatchException", "(System.String,System.Exception)", "summary", "df-generated"]
@@ -5373,7 +5362,6 @@ extensions:
      - ["System", "Uri", "TryFormat", "(System.Span<System.Char>,System.Int32,System.ReadOnlySpan<System.Char>,System.IFormatProvider)", "summary", "df-generated"]
      - ["System", "Uri", "Unescape", "(System.String)", "summary", "df-generated"]
      - ["System", "Uri", "Uri", "(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext)", "summary", "df-generated"]
-      - ["System", "Uri", "get_AbsoluteUri", "()", "summary", "df-generated"]
      - ["System", "Uri", "get_Fragment", "()", "summary", "df-generated"]
      - ["System", "Uri", "get_HostNameType", "()", "summary", "df-generated"]
      - ["System", "Uri", "get_IsAbsoluteUri", "()", "summary", "df-generated"]
--- a/csharp/ql/lib/semmle/code/csharp/dataflow/ModulusAnalysis.qll
+++ b/csharp/ql/lib/semmle/code/csharp/dataflow/ModulusAnalysis.qll
@@ -17,7 +17,7 @@ private predicate valueFlowStepSsa(SsaVariable v, SsaReadPosition pos, Expr e, i
  exists(Guard guard, boolean testIsTrue |
    pos.hasReadOfVar(v) and
    guard = eqFlowCond(v, e, delta, true, testIsTrue) and
-    guardDirectlyControlsSsaRead(guard, pos, testIsTrue)
+    guardControlsSsaRead(guard, pos, testIsTrue)
  )
 }

--- a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
+++ b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
@@ -1044,17 +1044,25 @@ private module DataFlowIntegrationInput implements Impl::DataFlowIntegrationInpu

  class Guard extends Guards::Guard {
    /**
-     * Holds if the control flow branching from `bb1` is dependent on this guard,
-     * and that the edge from `bb1` to `bb2` corresponds to the evaluation of this
-     * guard to `branch`.
+     * Holds if the evaluation of this guard to `branch` corresponds to the edge
+     * from `bb1` to `bb2`.
     */
-    predicate controlsBranchEdge(BasicBlock bb1, BasicBlock bb2, boolean branch) {
+    predicate hasBranchEdge(BasicBlock bb1, BasicBlock bb2, boolean branch) {
      exists(ControlFlow::SuccessorTypes::ConditionalSuccessor s |
        this.getAControlFlowNode() = bb1.getLastNode() and
        bb2 = bb1.getASuccessorByType(s) and
        s.getValue() = branch
      )
    }
+
+    /**
+     * Holds if this guard evaluating to `branch` controls the control-flow
+     * branch edge from `bb1` to `bb2`. That is, following the edge from
+     * `bb1` to `bb2` implies that this guard evaluated to `branch`.
+     */
+    predicate controlsBranchEdge(BasicBlock bb1, BasicBlock bb2, boolean branch) {
+      this.hasBranchEdge(bb1, bb2, branch)
+    }
  }

  /** Holds if the guard `guard` controls block `bb` upon evaluating to `branch`. */
--- a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll
+++ b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll
@@ -32,8 +32,6 @@ module Private {

  class LeftShiftExpr = RU::ExprNode::LeftShiftExpr;

-  predicate guardDirectlyControlsSsaRead = RU::guardControlsSsaRead/3;
-
  predicate guardControlsSsaRead = RU::guardControlsSsaRead/3;

  predicate valueFlowStep = RU::valueFlowStep/3;
--- a/csharp/ql/src/Configuration/PasswordInConfigurationFile.ql
+++ b/csharp/ql/src/Configuration/PasswordInConfigurationFile.ql
@@ -4,7 +4,7 @@
 * @kind problem
 * @problem.severity warning
 * @security-severity 7.5
- * @precision medium
+ * @precision low
 * @id cs/password-in-configuration
 * @tags security
 *       external/cwe/cwe-013
--- a/Abuse/MissedReadonlyOpportunity.ql
+++ b/Abuse/MissedReadonlyOpportunity.ql
@@ -8,6 +8,7 @@
 * @id cs/missed-readonly-modifier
 * @tags maintainability
 *       language-features
+ *       quality
 */

 import csharp
@@ -19,13 +20,17 @@ predicate defTargetsField(AssignableDefinition def, Field f) {
 predicate isReadonlyCompatibleDefinition(AssignableDefinition def, Field f) {
  defTargetsField(def, f) and
  (
-    def.getEnclosingCallable().(Constructor).getDeclaringType() = f.getDeclaringType()
+    def.getEnclosingCallable().(StaticConstructor).getDeclaringType() = f.getDeclaringType()
+    or
+    def.getEnclosingCallable().(InstanceConstructor).getDeclaringType() = f.getDeclaringType() and
+    def.getTargetAccess().(QualifiableExpr).getQualifier() instanceof ThisAccess
    or
    def instanceof AssignableDefinitions::InitializerDefinition
  )
 }

 predicate canBeReadonly(Field f) {
+  exists(Type t | t = f.getType() | not t instanceof Struct or t.(Struct).isReadonly()) and
  forex(AssignableDefinition def | defTargetsField(def, f) | isReadonlyCompatibleDefinition(def, f))
 }

--- a/Features/CWE-798/HardcodedConnectionString.ql
+++ b/Features/CWE-798/HardcodedConnectionString.ql
@@ -4,7 +4,7 @@
 * @kind path-problem
 * @problem.severity error
 * @security-severity 9.8
- * @precision medium
+ * @precision low
 * @id cs/hardcoded-connection-string-credentials
 * @tags security
 *       external/cwe/cwe-259
--- a/Features/CWE-798/HardcodedCredentials.ql
+++ b/Features/CWE-798/HardcodedCredentials.ql
@@ -4,7 +4,7 @@
 * @kind path-problem
 * @problem.severity error
 * @security-severity 9.8
- * @precision medium
+ * @precision low
 * @id cs/hardcoded-credentials
 * @tags security
 *       external/cwe/cwe-259
--- a/csharp/ql/src/change-notes/2025-05-16-hardcoded-credentials.md
+++ b/csharp/ql/src/change-notes/2025-05-16-hardcoded-credentials.md
@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* The queries `cs/password-in-configuration`, `cs/hardcoded-credentials` and `cs/hardcoded-connection-string-credentials` have been removed from all query suites.
--- a/csharp/ql/src/change-notes/2025-05-22-missed-readonly-modifier.md
+++ b/csharp/ql/src/change-notes/2025-05-22-missed-readonly-modifier.md
@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* The precision of the query `cs/missed-readonly-modifier` has been improved. Some false positives related to static fields and struct type fields have been removed.
--- a/csharp/ql/test/library-tests/dataflow/library/FlowSummaries.expected
+++ b/csharp/ql/test/library-tests/dataflow/library/FlowSummaries.expected
--- a/csharp/ql/test/library-tests/dataflow/library/FlowSummariesFiltered.expected
+++ b/csharp/ql/test/library-tests/dataflow/library/FlowSummariesFiltered.expected
--- a/Abuse/MissedReadonlyOpportunity/MissedReadonlyOpportunity.cs
+++ b/Abuse/MissedReadonlyOpportunity/MissedReadonlyOpportunity.cs
@@ -1,23 +1,27 @@
 class MissedReadonlyOpportunity<T>
 {
-    public int Bad1;
-    public T Bad2;
+    public int Bad1; // $ Alert
+    public T Bad2; // $ Alert
+    public Immutable Bad3; // $ Alert
    public readonly int Good1;
    public readonly int Good2 = 0;
    public const int Good3 = 0;
    public int Good4;
    public readonly T Good5;
    public T Good6;
+    public Mutable Good7;

    public MissedReadonlyOpportunity(int i, T t)
    {
        Bad1 = i;
        Bad2 = t;
+        Bad3 = new Immutable();
        Good1 = i;
        Good2 = i;
        Good4 = i;
        Good5 = t;
        Good6 = t;
+        Good7 = new Mutable();
    }

    public void M(int i)
@@ -27,3 +31,54 @@ class MissedReadonlyOpportunity<T>
        x.Good6 = false;
    }
 }
+
+struct Mutable
+{
+    private int x;
+    public int Mutate()
+    {
+        x = x + 1;
+        return x;
+    }
+}
+
+readonly struct Immutable { }
+
+class Tree
+{
+    private Tree? Parent;
+    private Tree? Left; // $ Alert
+    private readonly Tree? Right;
+
+    public Tree(Tree left, Tree right)
+    {
+        this.Left = left;
+        this.Right = right;
+        left.Parent = this;
+        right.Parent = this;
+    }
+
+    public Tree()
+    {
+        Left = null;
+        Right = null;
+    }
+}
+
+class StaticFields
+{
+    static int X; // $ Alert
+    static int Y;
+
+    // Static constructor
+    static StaticFields()
+    {
+        X = 0;
+    }
+
+    // Instance constructor
+    public StaticFields(int y)
+    {
+        Y = y;
+    }
+}
--- a/Abuse/MissedReadonlyOpportunity/MissedReadonlyOpportunity.expected
+++ b/Abuse/MissedReadonlyOpportunity/MissedReadonlyOpportunity.expected
@@ -1,3 +1,6 @@
 | MissedReadonlyOpportunity.cs:3:16:3:19 | Bad1 | Field 'Bad1' can be 'readonly'. |
 | MissedReadonlyOpportunity.cs:4:14:4:17 | Bad2 | Field 'Bad2' can be 'readonly'. |
+| MissedReadonlyOpportunity.cs:5:22:5:25 | Bad3 | Field 'Bad3' can be 'readonly'. |
+| MissedReadonlyOpportunity.cs:50:19:50:22 | Left | Field 'Left' can be 'readonly'. |
+| MissedReadonlyOpportunity.cs:70:16:70:16 | X | Field 'X' can be 'readonly'. |
 | MissedReadonlyOpportunityBad.cs:3:9:3:13 | Field | Field 'Field' can be 'readonly'. |
--- a/Abuse/MissedReadonlyOpportunity/MissedReadonlyOpportunity.qlref
+++ b/Abuse/MissedReadonlyOpportunity/MissedReadonlyOpportunity.qlref
@@ -1 +1,2 @@
-Language Abuse/MissedReadonlyOpportunity.ql
+query: Language Abuse/MissedReadonlyOpportunity.ql
+postprocess: utils/test/InlineExpectationsTestQuery.ql
--- a/Abuse/MissedReadonlyOpportunity/MissedReadonlyOpportunityBad.cs
+++ b/Abuse/MissedReadonlyOpportunity/MissedReadonlyOpportunityBad.cs
@@ -1,6 +1,6 @@
 class Bad
 {
-    int Field;
+    int Field; // $ Alert

    public Bad(int i)
    {