From 202a0916a393f8e865e41e9b41e0a006b8ab2b75 Mon Sep 17 00:00:00 2001
From: Raul Garcia <raulga@microsoft.com>
Date: Thu, 23 Jun 2022 09:03:16 -0700
Subject: [PATCH 001/203] IdentityModel_tokenvalidation

---
 .../JsonWebTokenHandlerLib.qll                | 263 ++++++++++++++++++
 ...rity-validations-always-return-true-bad.cs |  10 +
 ...ity-validations-always-return-true-good.cs |  17 ++
 ...urity-validations-always-return-true.qhelp |  28 ++
 ...security-validations-always-return-true.ql |  24 ++
 .../security-validation-disabled-bad.cs       |  13 +
 .../security-validation-disabled-good.cs      |  13 +
 .../security-validation-disabled.qhelp        |  27 ++
 .../security-validation-disabled.ql           |  24 ++
 ...ty-validations-always-return-true.expected |   2 +
 ...urity-validations-always-return-true.qlref |   1 +
 .../JsonWebTokenHandler/delegation-test.cs    | 115 ++++++++
 .../security-validation-disabled-test.cs      |  43 +++
 .../security-validation-disabled.expected     |   4 +
 .../security-validation-disabled.qlref        |   1 +
 .../JsonWebTokenHandler/stubs.cs              | 115 ++++++++
 16 files changed, 700 insertions(+)
 create mode 100644 csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll
 create mode 100644 csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true-bad.cs
 create mode 100644 csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true-good.cs
 create mode 100644 csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.qhelp
 create mode 100644 csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql
 create mode 100644 csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-bad.cs
 create mode 100644 csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-good.cs
 create mode 100644 csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.qhelp
 create mode 100644 csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql
 create mode 100644 csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.expected
 create mode 100644 csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.qlref
 create mode 100644 csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegation-test.cs
 create mode 100644 csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-test.cs
 create mode 100644 csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.expected
 create mode 100644 csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.qlref
 create mode 100644 csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/stubs.cs

diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll
new file mode 100644
index 00000000000..b2f3a2fab16
--- /dev/null
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
@@ -0,0 +1,263 @@
+import csharp
+import DataFlow
+
+/**
+ * Abstract PropertyWrite for `TokenValidationParameters`.
+ * Not really necessary anymore, but keeping it in case we want to extend the queries to check on other properties.
+ */
+abstract class TokenValidationParametersPropertyWrite extends PropertyWrite { }
+
+/**
+ * An access to a sensitive property for `TokenValidationParameters` that updates the underlying value.
+ */
+class TokenValidationParametersPropertyWriteToBypassSensitiveValidation extends TokenValidationParametersPropertyWrite {
+  TokenValidationParametersPropertyWriteToBypassSensitiveValidation() {
+    exists(Property p, Class c |
+      c.hasQualifiedName("Microsoft.IdentityModel.Tokens.TokenValidationParameters")
+    |
+      p.getAnAccess() = this and
+      c.getAProperty() = p and
+      p.getName() in [
+          "ValidateIssuer", "ValidateAudience", "ValidateLifetime", "RequireExpirationTime"
+        ]
+    )
+  }
+}
+
+/**
+ * Dataflow from a `false` value to an to a write sensitive property for `TokenValidationParameters`.
+ */
+class FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation extends TaintTracking::Configuration {
+  FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation() {
+    this = "FlowsToTokenValidationResultIsValidCall"
+  }
+
+  override predicate isSource(DataFlow::Node source) {
+    source.asExpr().(BoolLiteral).getValue() = "false"
+  }
+
+  override predicate isSink(DataFlow::Node sink) {
+    exists(TokenValidationParametersPropertyWrite pw, Assignment a | a.getLValue() = pw |
+      sink.asExpr() = a.getRValue()
+    )
+  }
+}
+
+/**
+ * Holds if `assemblyName` is older than version `ver`
+ */
+bindingset[ver]
+predicate isAssemblyOlderVersion(string assemblyName, string ver) {
+  exists(Assembly a |
+    a.getName() = assemblyName and
+    a.getVersion().isEarlierThan(ver)
+  )
+}
+
+/**
+ * Method `ValidateToken` for `Microsoft.IdentityModel.JsonWebTokens.JsonWebTokenHandler` or other Token handler that shares the same behavior characteristics
+ */
+class JsonWebTokenHandlerValidateTokenMethod extends Method {
+  JsonWebTokenHandlerValidateTokenMethod() {
+    this.hasQualifiedName("Microsoft.IdentityModel.JsonWebTokens.JsonWebTokenHandler.ValidateToken") or
+    this.hasQualifiedName("Microsoft.AzureAD.DeviceIdentification.Common.Tokens.JwtValidator.ValidateEncryptedToken")
+    //// TODO: ValidateEncryptedToken has the same behavior than ValidateToken, but it will be changed in a future release
+    ////       The line below would allow to check if the ValidateEncryptedToken version used meets the minimum requirement
+    ////       Once we have the fixed assembly version we can uncomment the line below
+    // and isAssemblyOlderVersion("Microsoft.AzureAD.DeviceIdentification", "0.0.0")
+  }
+}
+
+/**
+ * A Call to `Microsoft.IdentityModel.JsonWebTokens.JsonWebTokenHandler.ValidateToken`
+ */
+class JsonWebTokenHandlerValidateTokenCall extends MethodCall {
+  JsonWebTokenHandlerValidateTokenCall() {
+    exists(JsonWebTokenHandlerValidateTokenMethod m | m.getACall() = this)
+  }
+}
+
+/**
+ * Read access for properties `IsValid` or `Exception` for `Microsoft.IdentityModel.JsonWebTokens.JsonWebTokenHandler.ValidateToken`
+ */
+class TokenValidationResultIsValidCall extends PropertyRead {
+  TokenValidationResultIsValidCall() {
+    exists(Property p | p.getAnAccess().(PropertyRead) = this |
+      p.hasName("IsValid") or
+      p.hasName("Exception")
+    )
+  }
+}
+
+/**
+ * Dataflow from the output of `Microsoft.IdentityModel.JsonWebTokens.JsonWebTokenHandler.ValidateToken` call to access the `IsValid` or `Exception` property
+ */
+private class FlowsToTokenValidationResultIsValidCall extends TaintTracking::Configuration {
+  FlowsToTokenValidationResultIsValidCall() { this = "FlowsToTokenValidationResultIsValidCall" }
+
+  override predicate isSource(DataFlow::Node source) {
+    source.asExpr() instanceof JsonWebTokenHandlerValidateTokenCall
+  }
+
+  override predicate isSink(DataFlow::Node sink) {
+    exists(TokenValidationResultIsValidCall call | sink.asExpr() = call.getQualifier())
+  }
+}
+
+/**
+ * Holds if the call to `Microsoft.IdentityModel.JsonWebTokens.JsonWebTokenHandler.ValidateToken` flows to any `IsValid` or `Exception` property access
+ */
+predicate hasAFlowToTokenValidationResultIsValidCall(JsonWebTokenHandlerValidateTokenCall call) {
+  exists(FlowsToTokenValidationResultIsValidCall config, DataFlow::Node source |
+    call = source.asExpr()
+  |
+    config.hasFlow(source, _)
+  )
+}
+
+/**
+ * Property write for security-sensitive properties for `Microsoft.IdentityModel.Tokens.TokenValidationParameters`
+ */
+class TokenValidationParametersPropertyWriteToValidationDelegated extends PropertyWrite {
+  TokenValidationParametersPropertyWriteToValidationDelegated() {
+    exists(Property p, Class c |
+      c.hasQualifiedName("Microsoft.IdentityModel.Tokens.TokenValidationParameters")
+    |
+      p.getAnAccess() = this and
+      c.getAProperty() = p and
+      p.getName() in [
+          "SignatureValidator", "TokenReplayValidator", "AlgorithmValidator", "AudienceValidator",
+          "IssuerSigningKeyValidator", "LifetimeValidator"
+        ]
+    )
+  }
+}
+
+/**
+ * Holds if the callable has a return statement and it always returns true for all such statements
+ */
+predicate callableHasARetrunStmtAndAlwaysReturnsTrue(Callable c) {
+  c.getReturnType().toString() = "Boolean" and
+  forall(ReturnStmt rs | rs.getEnclosingCallable() = c |
+    rs.getChildExpr(0).(BoolLiteral).getBoolValue() = true
+  ) and
+  exists(ReturnStmt rs | rs.getEnclosingCallable() = c)
+}
+
+/**
+ * Holds if the lambda expression `le` always returns true
+ */
+predicate lambdaExprReturnsOnlyLiteralTrue(LambdaExpr le) {
+  le.getExpressionBody().(BoolLiteral).getBoolValue() = true
+}
+
+class CallableAlwaysReturnsTrue extends Callable {
+  CallableAlwaysReturnsTrue() {
+    callableHasARetrunStmtAndAlwaysReturnsTrue(this)
+    or
+    lambdaExprReturnsOnlyLiteralTrue(this)
+    or
+    exists(LambdaExpr le, Call call, CallableAlwaysReturnsTrue cat | this = le |
+      call = le.getExpressionBody() and
+      cat.getACall() = call
+    )
+  }
+}
+
+/**
+ * Holds if any exception being thrown by the callable is of type `System.ArgumentNullException`
+ * It will also hold if no exceptions are thrown by the callable
+ */
+predicate callableOnlyThrowsArgumentNullException(Callable c) {
+  forall(ThrowElement thre | c = thre.getEnclosingCallable() |
+    thre.getThrownExceptionType().hasQualifiedName("System.ArgumentNullException")
+  )
+}
+
+/**
+ * A specialization of `CallableAlwaysReturnsTrue` that takes into consideration exceptions being thrown for higher precision.
+ */
+class CallableAlwaysReturnsTrueHigherPrecision extends CallableAlwaysReturnsTrue {
+  CallableAlwaysReturnsTrueHigherPrecision() {
+    callableOnlyThrowsArgumentNullException(this) and
+    (
+      forall(Call call, Callable callable | call.getEnclosingCallable() = this |
+        callable.getACall() = call and
+        callable instanceof CallableAlwaysReturnsTrueHigherPrecision
+      )
+      or
+      exists(LambdaExpr le, Call call, CallableAlwaysReturnsTrueHigherPrecision cat | this = le |
+        call = le.getExpressionBody() and
+        cat.getACall() = call
+      )
+    )
+  }
+}
+
+/**
+ * Property Write for the `IssuerValidator` property for `Microsoft.IdentityModel.Tokens.TokenValidationParameters`
+ */
+class TokenValidationParametersPropertyWriteToValidationDelegatedIssuerValidator extends PropertyWrite {
+  TokenValidationParametersPropertyWriteToValidationDelegatedIssuerValidator() {
+    exists(Property p, Class c |
+      c.hasQualifiedName("Microsoft.IdentityModel.Tokens.TokenValidationParameters")
+    |
+      p.getAnAccess() = this and
+      c.getAProperty() = p and
+      p.getName() in ["IssuerValidator"]
+    )
+  }
+}
+
+/**
+ * A callable that returns a `string` and has a `string` as 1st argument
+ */
+private class CallableReturnsStringAndArg0IsString extends Callable {
+  CallableReturnsStringAndArg0IsString() {
+    this.getReturnType().toString() = "String" and
+    this.getParameter(0).getType().toString() = "String"
+  }
+}
+
+/**
+ * A Callable that always retrun the 1st argument, both of `string` type
+ */
+class CallableAlwatsReturnsParameter0 extends CallableReturnsStringAndArg0IsString {
+  CallableAlwatsReturnsParameter0() {
+    forall(ReturnStmt rs | rs.getEnclosingCallable() = this |
+      rs.getChild(0) = this.getParameter(0).getAnAccess()
+    ) and
+    exists(ReturnStmt rs | rs.getEnclosingCallable() = this)
+    or
+    exists(LambdaExpr le, Call call, CallableAlwatsReturnsParameter0 cat | this = le |
+      call = le.getExpressionBody() and
+      cat.getACall() = call
+    )
+    or
+    this.getBody() = this.getParameter(0).getAnAccess()
+  }
+}
+
+/**
+ * A Callable that always retrun the 1st argument, both of `string` type. Higher precision
+ */
+class CallableAlwatsReturnsParameter0MayThrowExceptions extends CallableReturnsStringAndArg0IsString {
+  CallableAlwatsReturnsParameter0MayThrowExceptions() {
+    callableOnlyThrowsArgumentNullException(this) and
+    forall(ReturnStmt rs | rs.getEnclosingCallable() = this |
+      rs.getChild(0) = this.getParameter(0).getAnAccess()
+    ) and
+    exists(ReturnStmt rs | rs.getEnclosingCallable() = this)
+    or
+    exists(LambdaExpr le, Call call, CallableAlwatsReturnsParameter0MayThrowExceptions cat |
+      this = le
+    |
+      call = le.getExpressionBody() and
+      cat.getACall() = call and
+      callableOnlyThrowsArgumentNullException(le) and
+      callableOnlyThrowsArgumentNullException(cat)
+    )
+    or
+    this.getBody() = this.getParameter(0).getAnAccess()
+  }
+}
diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true-bad.cs b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true-bad.cs
new file mode 100644
index 00000000000..2eda6821019
--- /dev/null
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true-bad.cs	
@@ -0,0 +1,10 @@
+using System;
+using Microsoft.IdentityModel.Tokens;
+class TestClass
+{
+    public void TestMethod()
+    {
+        TokenValidationParameters parameters = new TokenValidationParameters();
+        parameters.AudienceValidator = (audiences, token, tvp) => { return true; };
+    }
+}
\ No newline at end of file
diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true-good.cs b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true-good.cs
new file mode 100644
index 00000000000..28ba1d6f94e
--- /dev/null
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true-good.cs	
@@ -0,0 +1,17 @@
+using System;
+using Microsoft.IdentityModel.Tokens;
+class TestClass
+{
+    public void TestMethod()
+    {
+        TokenValidationParameters parameters = new TokenValidationParameters();
+        parameters.AudienceValidator = (audiences, token, tvp) =>
+        {
+            // Implement your own custom audience validation
+            if (PerformCustomAudienceValidation(audiences, token))
+                return true;
+            else
+                return false;
+        };
+    }
+}
\ No newline at end of file
diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.qhelp b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.qhelp
new file mode 100644
index 00000000000..8c4f8dff229
--- /dev/null
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.qhelp	
@@ -0,0 +1,28 @@
+<!DOCTYPE qhelp PUBLIC
+  "-//Semmle//qhelp//EN"
+  "qhelp.dtd">
+<qhelp>
+<overview>
+<p>By setting critical <code>TokenValidationParameter</code> validation delegates to always return <code>true</code>, important authentication safeguards are disabled. Disabling safeguards can lead to incorrect validation of tokens from any issuer or expired tokens.</p>
+
+</overview>
+<recommendation>
+<p>Improve the logic of the delegate so not all code paths return <code>true</code>, which effectively disables that type of validation; or throw <code>SecurityTokenInvalidAudienceException</code> or <code>SecurityTokenInvalidLifetimeException</code> in failure cases when you want to fail validation and have other cases pass by returning <code>true</code>.
+</p>
+</recommendation>
+
+<example>
+<p>This example delegates <code>AudienceValidator</code> to a callable that always returns true.</p>
+<sample src="delegated-security-validations-always-return-true-bad.cs" />
+
+<p>To fix it, use a callable that performs a validation, and fails when appropriate.</p>
+<sample src="delegated-security-validations-always-return-true-good.cs" />
+
+</example>
+
+<references>
+
+  <li><a href="https://aka.ms/wilson/tokenvalidation">azure-activedirectory-identitymodel-extensions-for-dotnet ValidatingTokens wiki</a></li>
+
+</references>
+</qhelp>
\ No newline at end of file
diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql
new file mode 100644
index 00000000000..a9df54378f3
--- /dev/null
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql	
@@ -0,0 +1,24 @@
+/**
+ * @name Delegated security sensitive validations for JsonWebTokenHandler always return true, medium precision
+ * @description Security sensitive validations for `JsonWebTokenHandler` are being delegated to a function that seems to always return true.
+ *   Higher precision version checks for exception throws, so less false positives are expected.
+ * @kind problem
+ * @tags security
+ *       JsonWebTokenHandler
+ *       manual-verification-required
+ * @id cs/JsonWebTokenHandler/delegated-security-validations-always-return-true
+ * @problem.severity warning
+ * @precision high
+ */
+
+import csharp
+import DataFlow
+import JsonWebTokenHandlerLib
+
+from
+  TokenValidationParametersPropertyWriteToValidationDelegated tv, Assignment a,
+  CallableAlwaysReturnsTrueHigherPrecision e
+where a.getLValue() = tv and a.getRValue().getAChild*() = e
+select tv,
+  "JsonWebTokenHandler security-sensitive property $@ is being delegated to $@.",
+  tv, tv.getTarget().toString(), e, "a callable that always returns \"true\""
diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-bad.cs b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-bad.cs
new file mode 100644
index 00000000000..81df44fea9a
--- /dev/null
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-bad.cs	
@@ -0,0 +1,13 @@
+using System;
+using Microsoft.IdentityModel.Tokens;
+class TestClass
+{
+    public void TestMethod()
+    {
+        TokenValidationParameters parameters = new TokenValidationParameters();
+        parameters.RequireExpirationTime = false;
+        parameters.ValidateAudience = false;
+        parameters.ValidateIssuer = false;
+        parameters.ValidateLifetime = false;
+    }
+}
\ No newline at end of file
diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-good.cs b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-good.cs
new file mode 100644
index 00000000000..e2f74c0653d
--- /dev/null
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-good.cs	
@@ -0,0 +1,13 @@
+using System;
+using Microsoft.IdentityModel.Tokens;
+class TestClass
+{
+    public void TestMethod()
+    {
+        TokenValidationParameters parameters = new TokenValidationParameters();
+        parameters.RequireExpirationTime = true;
+        parameters.ValidateAudience = true;
+        parameters.ValidateIssuer = true;
+        parameters.ValidateLifetime = true;
+    }
+}
\ No newline at end of file
diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.qhelp b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.qhelp
new file mode 100644
index 00000000000..5c027ac3148
--- /dev/null
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.qhelp	
@@ -0,0 +1,27 @@
+<!DOCTYPE qhelp PUBLIC
+  "-//Semmle//qhelp//EN"
+  "qhelp.dtd">
+<qhelp>
+<overview>
+<p>Token validation checks ensure that while validating tokens, all aspects are analyzed and verified. Turning off validation can lead to security holes by allowing untrusted tokens to make it through validation.</p>
+
+</overview>
+<recommendation>
+<p>Set <code>Microsoft.IdentityModel.Tokens.TokenValidationParameters</code> properties <code>RequireExpirationTime</code>, <code>ValidateAudience</code>, <code>ValidateIssuer</code>, or <code>ValidateLifetime</code> to <code>true</code>. Or, remove the assignment to <code>false</code> because the default value is <code>true</code>.</p>
+</recommendation>
+
+<example>
+<p>This example disabled the validation.</p>
+<sample src="security-validation-disabled-bad.cs" />
+
+<p>To fix it, do not disable the validations or use the default value.</p>
+<sample src="security-validation-disabled-good.cs" />
+
+</example>
+
+<references>
+
+  <li><a href="https://aka.ms/wilson/tokenvalidation">azure-activedirectory-identitymodel-extensions-for-dotnet ValidatingTokens wiki</a></li>
+
+</references>
+</qhelp>
\ No newline at end of file
diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql
new file mode 100644
index 00000000000..4b558730bab
--- /dev/null
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql	
@@ -0,0 +1,24 @@
+/**
+ * @name Security sensitive JsonWebTokenHandler validations are disabled
+ * @description Check if secruity sensitive token validations for `JsonWebTokenHandler` are being disabled.
+ * @kind problem
+ * @tags security
+ *       JsonWebTokenHandler
+ *       manual-verification-required
+ * @id cs/JsonWebTokenHandler/security-validations-disabled
+ * @problem.severity warning
+ * @precision high
+ */
+
+import csharp
+import JsonWebTokenHandlerLib
+
+from
+  FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation config,
+  DataFlow::Node source, DataFlow::Node sink,
+  TokenValidationParametersPropertyWriteToBypassSensitiveValidation pw
+where
+  config.hasFlow(source, sink) and
+  exists(Assignment a | a.getLValue() = pw | sink.asExpr() = a.getRValue())
+select sink, "The security sensitive property $@ is being disabled by the followign value: $@.", pw,
+  pw.getTarget().toString(), source, "false"
diff --git a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.expected b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.expected
new file mode 100644
index 00000000000..9e01238de4c
--- /dev/null
+++ b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.expected	
@@ -0,0 +1,2 @@
+| delegation-test.cs:101:13:101:59 | access to property LifetimeValidator | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | delegation-test.cs:101:13:101:59 | access to property LifetimeValidator | LifetimeValidator | delegation-test.cs:101:63:101:186 | (...) => ... | a callable that always returns "true" |
+| delegation-test.cs:102:13:102:59 | access to property AudienceValidator | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | delegation-test.cs:102:13:102:59 | access to property AudienceValidator | AudienceValidator | delegation-test.cs:102:63:102:178 | (...) => ... | a callable that always returns "true" |
diff --git a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.qlref b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.qlref
new file mode 100644
index 00000000000..527ea925973
--- /dev/null
+++ b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.qlref	
@@ -0,0 +1 @@
+experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql
\ No newline at end of file
diff --git a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegation-test.cs b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegation-test.cs
new file mode 100644
index 00000000000..fe4a5f1d6ea
--- /dev/null
+++ b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegation-test.cs	
@@ -0,0 +1,115 @@
+using System;
+using System.Collections.Generic;
+using Microsoft.IdentityModel.Tokens;
+using Microsoft.IdentityModel.JsonWebTokens;
+
+namespace WilsonTest
+{
+    public class Wilson_03
+    {
+        public static object ThrowIfNull(string name, object value)
+        {
+            if (value == null)
+            {
+                throw new System.ArgumentNullException(name);
+            }
+            return value;
+        }
+
+        private static bool MayThrowException(SecurityToken token)
+        {
+            if (token.Id == null)
+            {
+                throw new Exception("foobar");
+            }
+            return true;
+        }
+
+        private static void DoesNotThrowException(SecurityToken token)
+        {
+            int x = 0;
+        }
+
+        private static bool ValidateLifetime_FP01(
+            SecurityToken token,
+            TokenValidationParameters validationParameters)
+        {
+            if (token == null)
+            {
+                throw new System.ArgumentNullException("token");
+            }
+
+            MayThrowException(token);
+
+            return true;
+        }
+
+        private static bool ValidateLifetime_P01(
+    SecurityToken token,
+    TokenValidationParameters validationParameters)
+        {
+            if (token == null)
+            {
+                throw new System.ArgumentNullException("token");
+            }
+
+            DoesNotThrowException(token);
+
+            return true;
+        }
+
+
+        internal static bool ValidateLifetimeAlwaysTrue(
+            SecurityToken token,
+            TokenValidationParameters validationParameters)
+        {
+            if (token is null)
+            {
+                return true;
+            }
+            return true;
+        }
+
+        internal static bool ValidateLifetime(
+            string token,
+            TokenValidationParameters validationParameters)
+        {
+            if (token is null)
+            {
+                return false;
+            }
+            return true;
+        }
+
+        public void TestCase01()
+        {
+            TokenValidationParameters tokenValidationParamsBaseline = new TokenValidationParameters
+            {
+                ClockSkew = TimeSpan.FromMinutes(5),
+                ValidateActor = true,
+                ValidateIssuerSigningKey = true,
+                ValidateIssuer = true,
+                ValidateAudience = true,
+                ValidateLifetime = true,
+                RequireExpirationTime = true,
+                ValidateTokenReplay = true,
+                RequireSignedTokens = true,
+                RequireAudience = true,
+                SaveSigninToken = true
+            };
+
+            tokenValidationParamsBaseline.LifetimeValidator = (notBefore, expires, securityToken, validationParameters) => ValidateLifetimeAlwaysTrue(securityToken, validationParameters); // BUG delegated-security-validations-always-return-true
+            tokenValidationParamsBaseline.AudienceValidator = (IEnumerable<string> audiences, SecurityToken securityToken, TokenValidationParameters validationParameters) => true; // BUG delegated-security-validations-always-return-true
+            tokenValidationParamsBaseline.TokenReplayValidator = (DateTime? expirationTime, string securityToken, TokenValidationParameters validationParameters) =>    // GOOD
+                {
+                    if (securityToken is null)
+                    {
+                        return false;
+                    }
+                    return true;
+                };
+
+        }
+
+    }
+}
\ No newline at end of file
diff --git a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-test.cs b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-test.cs
new file mode 100644
index 00000000000..149448ce122
--- /dev/null
+++ b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-test.cs	
@@ -0,0 +1,43 @@
+using System;
+using System.Collections.Generic;
+using Microsoft.IdentityModel.Tokens;
+
+namespace WilsonTest
+{
+    public class Wilson_02
+    {
+        public void TestCase01()
+        {
+            TokenValidationParameters tokenValidationParamsBaseline = new TokenValidationParameters
+            {
+                ClockSkew = TimeSpan.FromMinutes(5),
+                ValidateActor = true,
+                ValidateIssuerSigningKey = true,
+                ValidateIssuer = true,
+                ValidateAudience = true,
+                ValidateLifetime = true,
+                RequireExpirationTime = true,
+                ValidateTokenReplay = true,
+                RequireSignedTokens = true,
+                RequireAudience = true,
+                SaveSigninToken = true
+            };
+
+            TokenValidationParameters tokenValidationParams = new TokenValidationParameters
+            {
+                ClockSkew = TimeSpan.FromMinutes(5),
+                ValidateActor = false,
+                ValidateIssuerSigningKey = false,
+                ValidateIssuer = false,             // BUG
+                ValidateAudience = false,           // BUG
+                ValidateLifetime = false,           // BUG
+                RequireExpirationTime = false,      // BUG
+                ValidateTokenReplay = false,
+                RequireSignedTokens = false,
+                RequireAudience = false,
+                SaveSigninToken = false
+            };
+        }
+
+    }
+}
\ No newline at end of file
diff --git a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.expected b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.expected
new file mode 100644
index 00000000000..213c58643ec
--- /dev/null
+++ b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.expected	
@@ -0,0 +1,4 @@
+| security-validation-disabled-test.cs:31:34:31:38 | false | The security sensitive property $@ is being disabled by the followign value: $@. | security-validation-disabled-test.cs:31:17:31:30 | access to property ValidateIssuer | ValidateIssuer | security-validation-disabled-test.cs:31:34:31:38 | false | false |
+| security-validation-disabled-test.cs:32:36:32:40 | false | The security sensitive property $@ is being disabled by the followign value: $@. | security-validation-disabled-test.cs:32:17:32:32 | access to property ValidateAudience | ValidateAudience | security-validation-disabled-test.cs:32:36:32:40 | false | false |
+| security-validation-disabled-test.cs:33:36:33:40 | false | The security sensitive property $@ is being disabled by the followign value: $@. | security-validation-disabled-test.cs:33:17:33:32 | access to property ValidateLifetime | ValidateLifetime | security-validation-disabled-test.cs:33:36:33:40 | false | false |
+| security-validation-disabled-test.cs:34:41:34:45 | false | The security sensitive property $@ is being disabled by the followign value: $@. | security-validation-disabled-test.cs:34:17:34:37 | access to property RequireExpirationTime | RequireExpirationTime | security-validation-disabled-test.cs:34:41:34:45 | false | false |
diff --git a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.qlref b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.qlref
new file mode 100644
index 00000000000..ee07957fa06
--- /dev/null
+++ b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.qlref	
@@ -0,0 +1 @@
+experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql
\ No newline at end of file
diff --git a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/stubs.cs b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/stubs.cs
new file mode 100644
index 00000000000..1d0e0de00a3
--- /dev/null
+++ b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/stubs.cs	
@@ -0,0 +1,115 @@
+using System;
+using System.Collections.Generic;
+
+namespace Microsoft.IdentityModel
+{
+
+}
+
+namespace Microsoft.IdentityModel.Tokens
+{
+    public abstract class SecurityToken
+    {
+        protected SecurityToken() { }
+        public string Id { get; }
+        public string Issuer { get; }
+        public DateTime ValidFrom { get; }
+        public DateTime ValidTo { get; }
+    }
+
+    public abstract class TokenHandler
+    {
+        public static readonly int DefaultTokenLifetimeInMinutes;
+
+        protected TokenHandler() { }
+
+        public virtual int MaximumTokenSizeInBytes { get; set; }
+        public bool SetDefaultTimesOnTokenCreation { get; set; }
+        public int TokenLifetimeInMinutes { get; set; }
+    }
+
+    public delegate bool LifetimeValidator(DateTime? notBefore, DateTime? expires, SecurityToken securityToken, TokenValidationParameters validationParameters);
+    public delegate bool AudienceValidator(IEnumerable<string> audiences, SecurityToken securityToken, TokenValidationParameters validationParameters);
+    public delegate bool TokenReplayValidator(DateTime? expirationTime, string securityToken, TokenValidationParameters validationParameters);
+    public delegate string IssuerValidator(string issuer, SecurityToken securityToken, TokenValidationParameters validationParameters);
+
+    public class TokenValidationParameters
+    {
+        public const int DefaultMaximumTokenSizeInBytes = 256000;
+        public static readonly string DefaultAuthenticationType;
+        public static readonly TimeSpan DefaultClockSkew;
+        public TimeSpan ClockSkew { get; set; }
+        public bool SaveSigninToken { get; set; }
+        public bool ValidateIssuer { get; set; }
+        public bool ValidateAudience { get; set; }
+        public bool ValidateLifetime { get; set; }
+        public bool ValidateIssuerSigningKey { get; set; }
+        public bool ValidateTokenReplay { get; set; }
+        public bool ValidateActor { get; set; }
+        public bool RequireSignedTokens { get; set; }
+        public bool RequireAudience { get; set; }
+        public bool RequireExpirationTime { get; set; }
+
+        // Delegation
+        public LifetimeValidator LifetimeValidator { get; set; }
+        public AudienceValidator AudienceValidator { get; set; }
+        public TokenReplayValidator TokenReplayValidator { get; set; }
+        public IssuerValidator IssuerValidator { get; set; }
+
+        /*
+        public TokenValidationParameters() { }
+        public SignatureValidator SignatureValidator { get; set; }
+        public SecurityKey TokenDecryptionKey { get; set; }
+        public TokenDecryptionKeyResolver TokenDecryptionKeyResolver { get; set; }
+        public IEnumerable<SecurityKey> TokenDecryptionKeys { get; set; }
+        public TokenReader TokenReader { get; set; }
+        public ITokenReplayCache TokenReplayCache { get; set; }
+        public Func<SecurityToken, string, string> RoleClaimTypeRetriever { get; set; }
+        public string ValidAudience { get; set; }
+        public IEnumerable<string> ValidAudiences { get; set; }
+        public string ValidIssuer { get; set; }
+        public IEnumerable<string> ValidIssuers { get; set; }
+        public TokenValidationParameters ActorValidationParameters { get; set; }
+        public AudienceValidator AudienceValidator { get; set; }
+        public string AuthenticationType { get; set; }
+        public CryptoProviderFactory CryptoProviderFactory { get; set; }
+        public IssuerSigningKeyValidator IssuerSigningKeyValidator { get; set; }
+        public SecurityKey IssuerSigningKey { get; set; }
+        public IEnumerable<SecurityKey> IssuerSigningKeys { get; set; }
+        public IssuerValidator IssuerValidator { get; set; }
+        public string NameClaimType { get; set; }
+        public string RoleClaimType { get; set; }
+        public Func<SecurityToken, string, string> NameClaimTypeRetriever { get; set; }
+        public IDictionary<string, object> PropertyBag { get; set; }
+        public IssuerSigningKeyResolver IssuerSigningKeyResolver { get; set; }
+        public IEnumerable<string> ValidTypes { get; set; }
+        public virtual TokenValidationParameters Clone();
+        public virtual string CreateClaimsIdentity(SecurityToken securityToken, string issuer);
+        */
+    }
+
+}
+
+namespace Microsoft.IdentityModel.JsonWebTokens
+{
+    public class JsonWebTokenHandler : Microsoft.IdentityModel.Tokens.TokenHandler
+    {
+        public virtual TokenValidationResult ValidateToken(string token, Microsoft.IdentityModel.Tokens.TokenValidationParameters validationParameters)
+        {
+            return new TokenValidationResult() { IsValid = true, Exception = null, Issuer = "test" };
+        }
+    }
+
+    public class TokenValidationResult
+    {
+        public TokenValidationResult() { }
+
+        public Exception Exception { get; set; }
+        public string Issuer { get; set; }
+        public bool IsValid { get; set; }
+        public Microsoft.IdentityModel.Tokens.SecurityToken SecurityToken { get; set; }
+        public string ClaimsIdentity { get; set; }
+    }
+
+
+}

From 13464e80154da357f7033668bc08da8cdaa92a62 Mon Sep 17 00:00:00 2001
From: Raul Garcia <raulga@microsoft.com>
Date: Thu, 23 Jun 2022 09:07:28 -0700
Subject: [PATCH 002/203] Changing @Severity tag to `error`

---
 .../delegated-security-validations-always-return-true.ql        | 2 +-
 .../JsonWebTokenHandler/security-validation-disabled.ql         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql
index a9df54378f3..5caa5591e06 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql	
@@ -7,7 +7,7 @@
  *       JsonWebTokenHandler
  *       manual-verification-required
  * @id cs/JsonWebTokenHandler/delegated-security-validations-always-return-true
- * @problem.severity warning
+ * @problem.severity error
  * @precision high
  */
 
diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql
index 4b558730bab..2e728700223 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql	
@@ -6,7 +6,7 @@
  *       JsonWebTokenHandler
  *       manual-verification-required
  * @id cs/JsonWebTokenHandler/security-validations-disabled
- * @problem.severity warning
+ * @problem.severity error
  * @precision high
  */
 

From 62c28571c650d6e2cbb7a9f11c544f43f7a5f95c Mon Sep 17 00:00:00 2001
From: Raul Garcia <raulga@microsoft.com>
Date: Fri, 1 Jul 2022 17:35:02 -0700
Subject: [PATCH 003/203] making changes based on feedback during PR

---
 .../JsonWebTokenHandlerLib.qll                | 44 ++++++++++---------
 .../JsonWebTokenHandler/delegation-test.cs    |  4 +-
 .../security-validation-disabled-test.cs      |  4 +-
 .../security-validation-disabled.expected     |  1 +
 4 files changed, 28 insertions(+), 25 deletions(-)

diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll
index b2f3a2fab16..3247a2e4fb6 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
@@ -2,7 +2,7 @@ import csharp
 import DataFlow
 
 /**
- * Abstract PropertyWrite for `TokenValidationParameters`.
+ * An abstract PropertyWrite for `TokenValidationParameters`.
  * Not really necessary anymore, but keeping it in case we want to extend the queries to check on other properties.
  */
 abstract class TokenValidationParametersPropertyWrite extends PropertyWrite { }
@@ -18,14 +18,14 @@ class TokenValidationParametersPropertyWriteToBypassSensitiveValidation extends
       p.getAnAccess() = this and
       c.getAProperty() = p and
       p.getName() in [
-          "ValidateIssuer", "ValidateAudience", "ValidateLifetime", "RequireExpirationTime"
+          "ValidateIssuer", "ValidateAudience", "ValidateLifetime", "RequireExpirationTime", "RequireAudience"
         ]
     )
   }
 }
 
 /**
- * Dataflow from a `false` value to an to a write sensitive property for `TokenValidationParameters`.
+ * A dataflow from a `false` value to a write sensitive property for `TokenValidationParameters`.
  */
 class FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation extends TaintTracking::Configuration {
   FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation() {
@@ -33,12 +33,14 @@ class FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation
   }
 
   override predicate isSource(DataFlow::Node source) {
-    source.asExpr().(BoolLiteral).getValue() = "false"
+    source.asExpr().getValue() = "false" and
+    source.asExpr().getType() instanceof BoolType
   }
 
   override predicate isSink(DataFlow::Node sink) {
-    exists(TokenValidationParametersPropertyWrite pw, Assignment a | a.getLValue() = pw |
+    exists(Assignment a | 
       sink.asExpr() = a.getRValue()
+      and a.getLValue() instanceof TokenValidationParametersPropertyWrite
     )
   }
 }
@@ -55,7 +57,7 @@ predicate isAssemblyOlderVersion(string assemblyName, string ver) {
 }
 
 /**
- * Method `ValidateToken` for `Microsoft.IdentityModel.JsonWebTokens.JsonWebTokenHandler` or other Token handler that shares the same behavior characteristics
+ * A method `ValidateToken` for `Microsoft.IdentityModel.JsonWebTokens.JsonWebTokenHandler` or other Token handler that shares the same behavior characteristics
  */
 class JsonWebTokenHandlerValidateTokenMethod extends Method {
   JsonWebTokenHandlerValidateTokenMethod() {
@@ -78,7 +80,7 @@ class JsonWebTokenHandlerValidateTokenCall extends MethodCall {
 }
 
 /**
- * Read access for properties `IsValid` or `Exception` for `Microsoft.IdentityModel.JsonWebTokens.JsonWebTokenHandler.ValidateToken`
+ * A read access for properties `IsValid` or `Exception` for `Microsoft.IdentityModel.JsonWebTokens.JsonWebTokenHandler.ValidateToken`
  */
 class TokenValidationResultIsValidCall extends PropertyRead {
   TokenValidationResultIsValidCall() {
@@ -116,7 +118,7 @@ predicate hasAFlowToTokenValidationResultIsValidCall(JsonWebTokenHandlerValidate
 }
 
 /**
- * Property write for security-sensitive properties for `Microsoft.IdentityModel.Tokens.TokenValidationParameters`
+ * A property write for security-sensitive properties for `Microsoft.IdentityModel.Tokens.TokenValidationParameters`
  */
 class TokenValidationParametersPropertyWriteToValidationDelegated extends PropertyWrite {
   TokenValidationParametersPropertyWriteToValidationDelegated() {
@@ -136,7 +138,7 @@ class TokenValidationParametersPropertyWriteToValidationDelegated extends Proper
 /**
  * Holds if the callable has a return statement and it always returns true for all such statements
  */
-predicate callableHasARetrunStmtAndAlwaysReturnsTrue(Callable c) {
+predicate callableHasAReturnStmtAndAlwaysReturnsTrue(Callable c) {
   c.getReturnType().toString() = "Boolean" and
   forall(ReturnStmt rs | rs.getEnclosingCallable() = c |
     rs.getChildExpr(0).(BoolLiteral).getBoolValue() = true
@@ -153,7 +155,7 @@ predicate lambdaExprReturnsOnlyLiteralTrue(LambdaExpr le) {
 
 class CallableAlwaysReturnsTrue extends Callable {
   CallableAlwaysReturnsTrue() {
-    callableHasARetrunStmtAndAlwaysReturnsTrue(this)
+    callableHasAReturnStmtAndAlwaysReturnsTrue(this)
     or
     lambdaExprReturnsOnlyLiteralTrue(this)
     or
@@ -195,7 +197,7 @@ class CallableAlwaysReturnsTrueHigherPrecision extends CallableAlwaysReturnsTrue
 }
 
 /**
- * Property Write for the `IssuerValidator` property for `Microsoft.IdentityModel.Tokens.TokenValidationParameters`
+ * A property Write for the `IssuerValidator` property for `Microsoft.IdentityModel.Tokens.TokenValidationParameters`
  */
 class TokenValidationParametersPropertyWriteToValidationDelegatedIssuerValidator extends PropertyWrite {
   TokenValidationParametersPropertyWriteToValidationDelegatedIssuerValidator() {
@@ -204,7 +206,7 @@ class TokenValidationParametersPropertyWriteToValidationDelegatedIssuerValidator
     |
       p.getAnAccess() = this and
       c.getAProperty() = p and
-      p.getName() in ["IssuerValidator"]
+      p.hasName("IssuerValidator")
     )
   }
 }
@@ -214,22 +216,22 @@ class TokenValidationParametersPropertyWriteToValidationDelegatedIssuerValidator
  */
 private class CallableReturnsStringAndArg0IsString extends Callable {
   CallableReturnsStringAndArg0IsString() {
-    this.getReturnType().toString() = "String" and
+    this.getReturnType() instanceof StringType and
     this.getParameter(0).getType().toString() = "String"
   }
 }
 
 /**
- * A Callable that always retrun the 1st argument, both of `string` type
+ * A Callable that always return the 1st argument, both of `string` type
  */
-class CallableAlwatsReturnsParameter0 extends CallableReturnsStringAndArg0IsString {
-  CallableAlwatsReturnsParameter0() {
+class CallableAlwaysReturnsParameter0 extends CallableReturnsStringAndArg0IsString {
+  CallableAlwaysReturnsParameter0() {
     forall(ReturnStmt rs | rs.getEnclosingCallable() = this |
       rs.getChild(0) = this.getParameter(0).getAnAccess()
     ) and
     exists(ReturnStmt rs | rs.getEnclosingCallable() = this)
     or
-    exists(LambdaExpr le, Call call, CallableAlwatsReturnsParameter0 cat | this = le |
+    exists(LambdaExpr le, Call call, CallableAlwaysReturnsParameter0 cat | this = le |
       call = le.getExpressionBody() and
       cat.getACall() = call
     )
@@ -239,17 +241,17 @@ class CallableAlwatsReturnsParameter0 extends CallableReturnsStringAndArg0IsStri
 }
 
 /**
- * A Callable that always retrun the 1st argument, both of `string` type. Higher precision
+ * A Callable that always return the 1st argument, both of `string` type. Higher precision
  */
-class CallableAlwatsReturnsParameter0MayThrowExceptions extends CallableReturnsStringAndArg0IsString {
-  CallableAlwatsReturnsParameter0MayThrowExceptions() {
+class CallableAlwaysReturnsParameter0MayThrowExceptions extends CallableReturnsStringAndArg0IsString {
+  CallableAlwaysReturnsParameter0MayThrowExceptions() {
     callableOnlyThrowsArgumentNullException(this) and
     forall(ReturnStmt rs | rs.getEnclosingCallable() = this |
       rs.getChild(0) = this.getParameter(0).getAnAccess()
     ) and
     exists(ReturnStmt rs | rs.getEnclosingCallable() = this)
     or
-    exists(LambdaExpr le, Call call, CallableAlwatsReturnsParameter0MayThrowExceptions cat |
+    exists(LambdaExpr le, Call call, CallableAlwaysReturnsParameter0MayThrowExceptions cat |
       this = le
     |
       call = le.getExpressionBody() and
diff --git a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegation-test.cs b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegation-test.cs
index fe4a5f1d6ea..452cb1dc648 100644
--- a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegation-test.cs	
+++ b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegation-test.cs	
@@ -3,9 +3,9 @@ using System.Collections.Generic;
 using Microsoft.IdentityModel.Tokens;
 using Microsoft.IdentityModel.JsonWebTokens;
 
-namespace WilsonTest
+namespace JsonWebTokenHandlerTest
 {
-    public class Wilson_03
+    public class JsonWebTokenHandler_00
     {
         public static object ThrowIfNull(string name, object value)
         {
diff --git a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-test.cs b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-test.cs
index 149448ce122..e3caddfd227 100644
--- a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-test.cs	
+++ b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-test.cs	
@@ -2,9 +2,9 @@ using System;
 using System.Collections.Generic;
 using Microsoft.IdentityModel.Tokens;
 
-namespace WilsonTest
+namespace JsonWebTokenHandlerTest
 {
-    public class Wilson_02
+    public class JsonWebTokenHandler_class01
     {
         public void TestCase01()
         {
diff --git a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.expected b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.expected
index 213c58643ec..071cc2ea2f8 100644
--- a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.expected	
+++ b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.expected	
@@ -2,3 +2,4 @@
 | security-validation-disabled-test.cs:32:36:32:40 | false | The security sensitive property $@ is being disabled by the followign value: $@. | security-validation-disabled-test.cs:32:17:32:32 | access to property ValidateAudience | ValidateAudience | security-validation-disabled-test.cs:32:36:32:40 | false | false |
 | security-validation-disabled-test.cs:33:36:33:40 | false | The security sensitive property $@ is being disabled by the followign value: $@. | security-validation-disabled-test.cs:33:17:33:32 | access to property ValidateLifetime | ValidateLifetime | security-validation-disabled-test.cs:33:36:33:40 | false | false |
 | security-validation-disabled-test.cs:34:41:34:45 | false | The security sensitive property $@ is being disabled by the followign value: $@. | security-validation-disabled-test.cs:34:17:34:37 | access to property RequireExpirationTime | RequireExpirationTime | security-validation-disabled-test.cs:34:41:34:45 | false | false |
+| security-validation-disabled-test.cs:37:35:37:39 | false | The security sensitive property $@ is being disabled by the followign value: $@. | security-validation-disabled-test.cs:37:17:37:31 | access to property RequireAudience | RequireAudience | security-validation-disabled-test.cs:37:35:37:39 | false | false |

From 97d9fd9846851997d2da65a141f1fe10161728bc Mon Sep 17 00:00:00 2001
From: Raul Garcia <42392023+raulgarciamsft@users.noreply.github.com>
Date: Tue, 5 Jul 2022 15:18:56 -0700
Subject: [PATCH 004/203] Update security-validation-disabled.ql

---
 .../JsonWebTokenHandler/security-validation-disabled.ql         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql
index 2e728700223..5d0491e826e 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql	
@@ -20,5 +20,5 @@ from
 where
   config.hasFlow(source, sink) and
   exists(Assignment a | a.getLValue() = pw | sink.asExpr() = a.getRValue())
-select sink, "The security sensitive property $@ is being disabled by the followign value: $@.", pw,
+select sink, "The security sensitive property $@ is being disabled by the following value: $@.", pw,
   pw.getTarget().toString(), source, "false"

From 7f725137e50e88e6cc9ad5eabe3c9182e597b4d8 Mon Sep 17 00:00:00 2001
From: Raul Garcia <raulga@microsoft.com>
Date: Wed, 20 Jul 2022 10:56:44 -0700
Subject: [PATCH 005/203] Addressing some of the feedback. Work pending.

---
 .../JsonWebTokenHandler/security-validation-disabled-test.cs    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-test.cs b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-test.cs
index e3caddfd227..505aba41416 100644
--- a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-test.cs	
+++ b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled-test.cs	
@@ -34,7 +34,7 @@ namespace JsonWebTokenHandlerTest
                 RequireExpirationTime = false,      // BUG
                 ValidateTokenReplay = false,
                 RequireSignedTokens = false,
-                RequireAudience = false,
+                RequireAudience = false,            // BUG
                 SaveSigninToken = false
             };
         }

From 9b79668ed29446c5c2aa7e85e07072695056bfda Mon Sep 17 00:00:00 2001
From: Raul Garcia <raulga@microsoft.com>
Date: Wed, 20 Jul 2022 10:58:01 -0700
Subject: [PATCH 006/203] Addressing some of the feedback. Work still pending

---
 .../JsonWebTokenHandler/JsonWebTokenHandlerLib.qll     |  6 +++---
 .../security-validation-disabled.expected              | 10 +++++-----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll
index 3247a2e4fb6..3c79d7174f3 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
@@ -189,7 +189,7 @@ class CallableAlwaysReturnsTrueHigherPrecision extends CallableAlwaysReturnsTrue
       )
       or
       exists(LambdaExpr le, Call call, CallableAlwaysReturnsTrueHigherPrecision cat | this = le |
-        call = le.getExpressionBody() and
+        le.canReturn(call) and
         cat.getACall() = call
       )
     )
@@ -217,7 +217,7 @@ class TokenValidationParametersPropertyWriteToValidationDelegatedIssuerValidator
 private class CallableReturnsStringAndArg0IsString extends Callable {
   CallableReturnsStringAndArg0IsString() {
     this.getReturnType() instanceof StringType and
-    this.getParameter(0).getType().toString() = "String"
+    this.getParameter(0).getType() instanceof StringType
   }
 }
 
@@ -227,7 +227,7 @@ private class CallableReturnsStringAndArg0IsString extends Callable {
 class CallableAlwaysReturnsParameter0 extends CallableReturnsStringAndArg0IsString {
   CallableAlwaysReturnsParameter0() {
     forall(ReturnStmt rs | rs.getEnclosingCallable() = this |
-      rs.getChild(0) = this.getParameter(0).getAnAccess()
+      rs.getExpr() = this.getParameter(0).getAnAccess()
     ) and
     exists(ReturnStmt rs | rs.getEnclosingCallable() = this)
     or
diff --git a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.expected b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.expected
index 071cc2ea2f8..7cb0db1fe5f 100644
--- a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.expected	
+++ b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.expected	
@@ -1,5 +1,5 @@
-| security-validation-disabled-test.cs:31:34:31:38 | false | The security sensitive property $@ is being disabled by the followign value: $@. | security-validation-disabled-test.cs:31:17:31:30 | access to property ValidateIssuer | ValidateIssuer | security-validation-disabled-test.cs:31:34:31:38 | false | false |
-| security-validation-disabled-test.cs:32:36:32:40 | false | The security sensitive property $@ is being disabled by the followign value: $@. | security-validation-disabled-test.cs:32:17:32:32 | access to property ValidateAudience | ValidateAudience | security-validation-disabled-test.cs:32:36:32:40 | false | false |
-| security-validation-disabled-test.cs:33:36:33:40 | false | The security sensitive property $@ is being disabled by the followign value: $@. | security-validation-disabled-test.cs:33:17:33:32 | access to property ValidateLifetime | ValidateLifetime | security-validation-disabled-test.cs:33:36:33:40 | false | false |
-| security-validation-disabled-test.cs:34:41:34:45 | false | The security sensitive property $@ is being disabled by the followign value: $@. | security-validation-disabled-test.cs:34:17:34:37 | access to property RequireExpirationTime | RequireExpirationTime | security-validation-disabled-test.cs:34:41:34:45 | false | false |
-| security-validation-disabled-test.cs:37:35:37:39 | false | The security sensitive property $@ is being disabled by the followign value: $@. | security-validation-disabled-test.cs:37:17:37:31 | access to property RequireAudience | RequireAudience | security-validation-disabled-test.cs:37:35:37:39 | false | false |
+| security-validation-disabled-test.cs:31:34:31:38 | false | The security sensitive property $@ is being disabled by the following value: $@. | security-validation-disabled-test.cs:31:17:31:30 | access to property ValidateIssuer | ValidateIssuer | security-validation-disabled-test.cs:31:34:31:38 | false | false |
+| security-validation-disabled-test.cs:32:36:32:40 | false | The security sensitive property $@ is being disabled by the following value: $@. | security-validation-disabled-test.cs:32:17:32:32 | access to property ValidateAudience | ValidateAudience | security-validation-disabled-test.cs:32:36:32:40 | false | false |
+| security-validation-disabled-test.cs:33:36:33:40 | false | The security sensitive property $@ is being disabled by the following value: $@. | security-validation-disabled-test.cs:33:17:33:32 | access to property ValidateLifetime | ValidateLifetime | security-validation-disabled-test.cs:33:36:33:40 | false | false |
+| security-validation-disabled-test.cs:34:41:34:45 | false | The security sensitive property $@ is being disabled by the following value: $@. | security-validation-disabled-test.cs:34:17:34:37 | access to property RequireExpirationTime | RequireExpirationTime | security-validation-disabled-test.cs:34:41:34:45 | false | false |
+| security-validation-disabled-test.cs:37:35:37:39 | false | The security sensitive property $@ is being disabled by the following value: $@. | security-validation-disabled-test.cs:37:17:37:31 | access to property RequireAudience | RequireAudience | security-validation-disabled-test.cs:37:35:37:39 | false | false |

From 5a7b6532a9b4e9150baaa1780f355ceda554eba4 Mon Sep 17 00:00:00 2001
From: Raul Garcia <raulga@microsoft.com>
Date: Fri, 29 Jul 2022 13:47:53 -0700
Subject: [PATCH 007/203] Updated to handle lambda statements (previously false
 negatives) + a couple of bug fixes.

---
 .../JsonWebTokenHandlerLib.qll                | 74 ++++++++++++++++---
 ...security-validations-always-return-true.ql |  5 +-
 ...ty-validations-always-return-true.expected |  5 ++
 .../JsonWebTokenHandler/delegation-test.cs    | 22 ++++++
 4 files changed, 91 insertions(+), 15 deletions(-)

diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll
index 3c79d7174f3..3f568d4d16b 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
@@ -18,7 +18,8 @@ class TokenValidationParametersPropertyWriteToBypassSensitiveValidation extends
       p.getAnAccess() = this and
       c.getAProperty() = p and
       p.getName() in [
-          "ValidateIssuer", "ValidateAudience", "ValidateLifetime", "RequireExpirationTime", "RequireAudience"
+          "ValidateIssuer", "ValidateAudience", "ValidateLifetime", "RequireExpirationTime",
+          "RequireAudience"
         ]
     )
   }
@@ -38,9 +39,9 @@ class FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation
   }
 
   override predicate isSink(DataFlow::Node sink) {
-    exists(Assignment a | 
-      sink.asExpr() = a.getRValue()
-      and a.getLValue() instanceof TokenValidationParametersPropertyWrite
+    exists(Assignment a |
+      sink.asExpr() = a.getRValue() and
+      a.getLValue() instanceof TokenValidationParametersPropertyWrite
     )
   }
 }
@@ -139,9 +140,11 @@ class TokenValidationParametersPropertyWriteToValidationDelegated extends Proper
  * Holds if the callable has a return statement and it always returns true for all such statements
  */
 predicate callableHasAReturnStmtAndAlwaysReturnsTrue(Callable c) {
-  c.getReturnType().toString() = "Boolean" and
+  c.getReturnType() instanceof BoolType and
+  not callableMayThrowException(c) and
   forall(ReturnStmt rs | rs.getEnclosingCallable() = c |
-    rs.getChildExpr(0).(BoolLiteral).getBoolValue() = true
+    rs.getNumberOfChildren() = 1 and
+    isExpressionAlwaysTrue(rs.getChildExpr(0))
   ) and
   exists(ReturnStmt rs | rs.getEnclosingCallable() = c)
 }
@@ -149,8 +152,16 @@ predicate callableHasAReturnStmtAndAlwaysReturnsTrue(Callable c) {
 /**
  * Holds if the lambda expression `le` always returns true
  */
-predicate lambdaExprReturnsOnlyLiteralTrue(LambdaExpr le) {
+predicate lambdaExprReturnsOnlyLiteralTrue(AnonymousFunctionExpr le) {
   le.getExpressionBody().(BoolLiteral).getBoolValue() = true
+  or
+  // special scenarios where the expression is not a `BoolLiteral`, but it will evaluatue to `true`
+  exists(Expr e | le.getExpressionBody() = e |
+    not e instanceof Call and
+    not e instanceof Literal and
+    e.getType() instanceof BoolType and
+    e.getValue() = "true"
+  )
 }
 
 class CallableAlwaysReturnsTrue extends Callable {
@@ -159,9 +170,12 @@ class CallableAlwaysReturnsTrue extends Callable {
     or
     lambdaExprReturnsOnlyLiteralTrue(this)
     or
-    exists(LambdaExpr le, Call call, CallableAlwaysReturnsTrue cat | this = le |
+    exists(AnonymousFunctionExpr le, Call call, CallableAlwaysReturnsTrue cat, Callable callable |
+      this = le
+    |
+      callable.getACall() = call and
       call = le.getExpressionBody() and
-      cat.getACall() = call
+      callableHasAReturnStmtAndAlwaysReturnsTrue(callable)
     )
   }
 }
@@ -188,10 +202,16 @@ class CallableAlwaysReturnsTrueHigherPrecision extends CallableAlwaysReturnsTrue
         callable instanceof CallableAlwaysReturnsTrueHigherPrecision
       )
       or
-      exists(LambdaExpr le, Call call, CallableAlwaysReturnsTrueHigherPrecision cat | this = le |
+      exists(AnonymousFunctionExpr le, Call call, CallableAlwaysReturnsTrueHigherPrecision cat |
+        this = le
+      |
         le.canReturn(call) and
         cat.getACall() = call
       )
+      or
+      exists(LambdaExpr le | le = this |
+        le.getBody() instanceof CallableAlwaysReturnsTrueHigherPrecision
+      )
     )
   }
 }
@@ -231,7 +251,7 @@ class CallableAlwaysReturnsParameter0 extends CallableReturnsStringAndArg0IsStri
     ) and
     exists(ReturnStmt rs | rs.getEnclosingCallable() = this)
     or
-    exists(LambdaExpr le, Call call, CallableAlwaysReturnsParameter0 cat | this = le |
+    exists(AnonymousFunctionExpr le, Call call, CallableAlwaysReturnsParameter0 cat | this = le |
       call = le.getExpressionBody() and
       cat.getACall() = call
     )
@@ -251,7 +271,9 @@ class CallableAlwaysReturnsParameter0MayThrowExceptions extends CallableReturnsS
     ) and
     exists(ReturnStmt rs | rs.getEnclosingCallable() = this)
     or
-    exists(LambdaExpr le, Call call, CallableAlwaysReturnsParameter0MayThrowExceptions cat |
+    exists(
+      AnonymousFunctionExpr le, Call call, CallableAlwaysReturnsParameter0MayThrowExceptions cat
+    |
       this = le
     |
       call = le.getExpressionBody() and
@@ -263,3 +285,31 @@ class CallableAlwaysReturnsParameter0MayThrowExceptions extends CallableReturnsS
     this.getBody() = this.getParameter(0).getAnAccess()
   }
 }
+
+/**
+ * Hold if the `Expr` e is a `BoolLiteral` with value true,
+ * the expression has a predictable value == `true`,
+ * or if it is a `ConditionalExpr` where the `then` and `else` expressions meet `isExpressionAlwaysTrue` criteria
+ */
+predicate isExpressionAlwaysTrue(Expr e) {
+  e.(BoolLiteral).getBoolValue() = true
+  or
+  e.(Expr).getValue() = "true"
+  or
+  e instanceof ConditionalExpr and
+  isExpressionAlwaysTrue(e.(ConditionalExpr).getThen()) and
+  isExpressionAlwaysTrue(e.(ConditionalExpr).getElse())
+  or
+  exists(Callable callable |
+    callableHasAReturnStmtAndAlwaysReturnsTrue(callable) and
+    callable.getACall() = e
+  )
+}
+
+/**
+ * Holds if the `Callable` c throws any exception other than `ThrowsArgumentNullException`
+ */
+predicate callableMayThrowException(Callable c) {
+  exists(ThrowStmt thre | c = thre.getEnclosingCallable()) and
+  not callableOnlyThrowsArgumentNullException(c)
+}
diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql
index 5caa5591e06..10f016bc5b3 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql	
@@ -19,6 +19,5 @@ from
   TokenValidationParametersPropertyWriteToValidationDelegated tv, Assignment a,
   CallableAlwaysReturnsTrueHigherPrecision e
 where a.getLValue() = tv and a.getRValue().getAChild*() = e
-select tv,
-  "JsonWebTokenHandler security-sensitive property $@ is being delegated to $@.",
-  tv, tv.getTarget().toString(), e, "a callable that always returns \"true\""
+select tv, "JsonWebTokenHandler security-sensitive property $@ is being delegated to $@.", tv,
+  tv.getTarget().toString(), e, "a callable that always returns \"true\""
diff --git a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.expected b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.expected
index 9e01238de4c..e6c576dad45 100644
--- a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.expected	
+++ b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.expected	
@@ -1,2 +1,7 @@
 | delegation-test.cs:101:13:101:59 | access to property LifetimeValidator | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | delegation-test.cs:101:13:101:59 | access to property LifetimeValidator | LifetimeValidator | delegation-test.cs:101:63:101:186 | (...) => ... | a callable that always returns "true" |
 | delegation-test.cs:102:13:102:59 | access to property AudienceValidator | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | delegation-test.cs:102:13:102:59 | access to property AudienceValidator | AudienceValidator | delegation-test.cs:102:63:102:178 | (...) => ... | a callable that always returns "true" |
+| delegation-test.cs:115:13:115:59 | access to property AudienceValidator | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | delegation-test.cs:115:13:115:59 | access to property AudienceValidator | AudienceValidator | delegation-test.cs:115:63:115:190 | (...) => ... | a callable that always returns "true" |
+| delegation-test.cs:116:13:116:59 | access to property AudienceValidator | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | delegation-test.cs:116:13:116:59 | access to property AudienceValidator | AudienceValidator | delegation-test.cs:116:63:116:180 | (...) => ... | a callable that always returns "true" |
+| delegation-test.cs:117:13:117:59 | access to property AudienceValidator | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | delegation-test.cs:117:13:117:59 | access to property AudienceValidator | AudienceValidator | delegation-test.cs:117:63:117:217 | (...) => ... | a callable that always returns "true" |
+| delegation-test.cs:118:13:118:59 | access to property AudienceValidator | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | delegation-test.cs:118:13:118:59 | access to property AudienceValidator | AudienceValidator | delegation-test.cs:118:63:118:248 | (...) => ... | a callable that always returns "true" |
+| delegation-test.cs:119:13:119:59 | access to property AudienceValidator | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | delegation-test.cs:119:13:119:59 | access to property AudienceValidator | AudienceValidator | delegation-test.cs:119:63:119:177 | (...) => ... | a callable that always returns "true" |
diff --git a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegation-test.cs b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegation-test.cs
index 452cb1dc648..01af41c4b0c 100644
--- a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegation-test.cs	
+++ b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegation-test.cs	
@@ -109,7 +109,29 @@ namespace JsonWebTokenHandlerTest
                     return true;
                 };
 
+            tokenValidationParamsBaseline.LifetimeValidator = (notBefore, expires, securityToken, validationParameters) => ValidateLifetime02(securityToken, validationParameters); // GOOD
+            tokenValidationParamsBaseline.AudienceValidator = (IEnumerable<string> audiences, SecurityToken securityToken, TokenValidationParameters validationParameters) => {return securityToken is null?false:true; }; // GOOD
+            
+            tokenValidationParamsBaseline.AudienceValidator = (IEnumerable<string> audiences, SecurityToken securityToken, TokenValidationParameters validationParameters) => { return true; }; // BUG 
+            tokenValidationParamsBaseline.AudienceValidator = (IEnumerable<string> audiences, SecurityToken securityToken, TokenValidationParameters validationParameters) => !false ; // BUG
+            tokenValidationParamsBaseline.AudienceValidator = (IEnumerable<string> audiences, SecurityToken securityToken, TokenValidationParameters validationParameters) => { return securityToken is null?true:true; }; // BUG
+            tokenValidationParamsBaseline.AudienceValidator = (IEnumerable<string> audiences, SecurityToken securityToken, TokenValidationParameters validationParameters) => { return ValidateLifetimeAlwaysTrue(securityToken, validationParameters);}; //BUG
+            tokenValidationParamsBaseline.AudienceValidator = (audiences, securityToken, validationParameters) => ValidateLifetimeAlwaysTrue(securityToken, validationParameters); //BUG
+
         }
 
+        internal static bool ValidateLifetime02(
+            SecurityToken token,
+            TokenValidationParameters validationParameters)
+        {
+            return token is null?false:true;
+        }
+
+        internal static bool ValidateLifetimeAlwaysTrue02(
+            SecurityToken token,
+            TokenValidationParameters validationParameters)
+        {
+            return !false;
+        }
     }
 }
\ No newline at end of file

From 6070e4f3128de0eca868e6a4b03d4d164c8a6ea5 Mon Sep 17 00:00:00 2001
From: Raul Garcia <42392023+raulgarciamsft@users.noreply.github.com>
Date: Thu, 11 Aug 2022 17:31:12 -0700
Subject: [PATCH 008/203] Update csharp/ql/src/experimental/Security
 Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll

Co-authored-by: Tom Hvitved <hvitved@github.com>
---
 .../JsonWebTokenHandler/JsonWebTokenHandlerLib.qll              | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll
index 3f568d4d16b..911e93cd032 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
@@ -76,7 +76,7 @@ class JsonWebTokenHandlerValidateTokenMethod extends Method {
  */
 class JsonWebTokenHandlerValidateTokenCall extends MethodCall {
   JsonWebTokenHandlerValidateTokenCall() {
-    exists(JsonWebTokenHandlerValidateTokenMethod m | m.getACall() = this)
+    this.getTarget() instanceof JsonWebTokenHandlerValidateTokenMethod
   }
 }
 

From 0805b4991440fd465fcf3d5f4d9be6324822bd16 Mon Sep 17 00:00:00 2001
From: Raul Garcia <42392023+raulgarciamsft@users.noreply.github.com>
Date: Thu, 11 Aug 2022 17:35:10 -0700
Subject: [PATCH 009/203] Update csharp/ql/src/experimental/Security
 Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll

Co-authored-by: Tom Hvitved <hvitved@github.com>
---
 .../JsonWebTokenHandlerLib.qll                  | 17 +++++++----------
 1 file changed, 7 insertions(+), 10 deletions(-)

diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll
index 911e93cd032..194b92d0905 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
@@ -246,17 +246,14 @@ private class CallableReturnsStringAndArg0IsString extends Callable {
  */
 class CallableAlwaysReturnsParameter0 extends CallableReturnsStringAndArg0IsString {
   CallableAlwaysReturnsParameter0() {
-    forall(ReturnStmt rs | rs.getEnclosingCallable() = this |
-      rs.getExpr() = this.getParameter(0).getAnAccess()
-    ) and
-    exists(ReturnStmt rs | rs.getEnclosingCallable() = this)
-    or
-    exists(AnonymousFunctionExpr le, Call call, CallableAlwaysReturnsParameter0 cat | this = le |
-      call = le.getExpressionBody() and
-      cat.getACall() = call
+    forex(Expr ret | this.canReturn(ret) |
+      ret = this.getParameter(0).getAnAccess()
+      or
+      exists(CallableAlwaysReturnsParameter0 c |
+        ret = c.getACall() and
+        ret.(Call).getArgument(0) = this.getParameter(0).getAnAccess()
+      )
     )
-    or
-    this.getBody() = this.getParameter(0).getAnAccess()
   }
 }
 

From 39e53a2932b2107d0dc8d65ee9ba27cd66e428fc Mon Sep 17 00:00:00 2001
From: Raul Garcia <raulga@microsoft.com>
Date: Thu, 11 Aug 2022 17:59:57 -0700
Subject: [PATCH 010/203] Updates based on PR feedback. 1 pending change

---
 .../JsonWebTokenHandlerLib.qll                | 58 +++++--------------
 ...security-validations-always-return-true.ql |  9 ++-
 .../security-validation-disabled.ql           |  6 +-
 ...ty-validations-always-return-true.expected | 14 ++---
 .../security-validation-disabled.expected     | 10 ++--
 5 files changed, 32 insertions(+), 65 deletions(-)

diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll
index 194b92d0905..7da1ee65d9f 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
@@ -2,20 +2,14 @@ import csharp
 import DataFlow
 
 /**
- * An abstract PropertyWrite for `TokenValidationParameters`.
- * Not really necessary anymore, but keeping it in case we want to extend the queries to check on other properties.
+ * A sensitive property for `TokenValidationParameters` that updates the underlying value.
  */
-abstract class TokenValidationParametersPropertyWrite extends PropertyWrite { }
-
-/**
- * An access to a sensitive property for `TokenValidationParameters` that updates the underlying value.
- */
-class TokenValidationParametersPropertyWriteToBypassSensitiveValidation extends TokenValidationParametersPropertyWrite {
-  TokenValidationParametersPropertyWriteToBypassSensitiveValidation() {
+class TokenValidationParametersPropertySensitiveValidation extends Property {
+  TokenValidationParametersPropertySensitiveValidation() {
     exists(Property p, Class c |
       c.hasQualifiedName("Microsoft.IdentityModel.Tokens.TokenValidationParameters")
     |
-      p.getAnAccess() = this and
+      p = this and
       c.getAProperty() = p and
       p.getName() in [
           "ValidateIssuer", "ValidateAudience", "ValidateLifetime", "RequireExpirationTime",
@@ -28,7 +22,7 @@ class TokenValidationParametersPropertyWriteToBypassSensitiveValidation extends
 /**
  * A dataflow from a `false` value to a write sensitive property for `TokenValidationParameters`.
  */
-class FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation extends TaintTracking::Configuration {
+class FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation extends DataFlow::Configuration {
   FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation() {
     this = "FlowsToTokenValidationResultIsValidCall"
   }
@@ -41,7 +35,7 @@ class FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation
   override predicate isSink(DataFlow::Node sink) {
     exists(Assignment a |
       sink.asExpr() = a.getRValue() and
-      a.getLValue() instanceof TokenValidationParametersPropertyWrite
+      a.getLValue().(PropertyAccess).getProperty() instanceof TokenValidationParametersPropertySensitiveValidation
     )
   }
 }
@@ -83,7 +77,7 @@ class JsonWebTokenHandlerValidateTokenCall extends MethodCall {
 /**
  * A read access for properties `IsValid` or `Exception` for `Microsoft.IdentityModel.JsonWebTokens.JsonWebTokenHandler.ValidateToken`
  */
-class TokenValidationResultIsValidCall extends PropertyRead {
+private class TokenValidationResultIsValidCall extends PropertyRead {
   TokenValidationResultIsValidCall() {
     exists(Property p | p.getAnAccess().(PropertyRead) = this |
       p.hasName("IsValid") or
@@ -95,7 +89,7 @@ class TokenValidationResultIsValidCall extends PropertyRead {
 /**
  * Dataflow from the output of `Microsoft.IdentityModel.JsonWebTokens.JsonWebTokenHandler.ValidateToken` call to access the `IsValid` or `Exception` property
  */
-private class FlowsToTokenValidationResultIsValidCall extends TaintTracking::Configuration {
+private class FlowsToTokenValidationResultIsValidCall extends DataFlow::Configuration {
   FlowsToTokenValidationResultIsValidCall() { this = "FlowsToTokenValidationResultIsValidCall" }
 
   override predicate isSource(DataFlow::Node source) {
@@ -108,25 +102,14 @@ private class FlowsToTokenValidationResultIsValidCall extends TaintTracking::Con
 }
 
 /**
- * Holds if the call to `Microsoft.IdentityModel.JsonWebTokens.JsonWebTokenHandler.ValidateToken` flows to any `IsValid` or `Exception` property access
+ * A security-sensitive property for `Microsoft.IdentityModel.Tokens.TokenValidationParameters`
  */
-predicate hasAFlowToTokenValidationResultIsValidCall(JsonWebTokenHandlerValidateTokenCall call) {
-  exists(FlowsToTokenValidationResultIsValidCall config, DataFlow::Node source |
-    call = source.asExpr()
-  |
-    config.hasFlow(source, _)
-  )
-}
-
-/**
- * A property write for security-sensitive properties for `Microsoft.IdentityModel.Tokens.TokenValidationParameters`
- */
-class TokenValidationParametersPropertyWriteToValidationDelegated extends PropertyWrite {
-  TokenValidationParametersPropertyWriteToValidationDelegated() {
+class TokenValidationParametersProperty extends Property {
+  TokenValidationParametersProperty() {
     exists(Property p, Class c |
       c.hasQualifiedName("Microsoft.IdentityModel.Tokens.TokenValidationParameters")
     |
-      p.getAnAccess() = this and
+      p = this and
       c.getAProperty() = p and
       p.getName() in [
           "SignatureValidator", "TokenReplayValidator", "AlgorithmValidator", "AudienceValidator",
@@ -170,7 +153,7 @@ class CallableAlwaysReturnsTrue extends Callable {
     or
     lambdaExprReturnsOnlyLiteralTrue(this)
     or
-    exists(AnonymousFunctionExpr le, Call call, CallableAlwaysReturnsTrue cat, Callable callable |
+    exists(AnonymousFunctionExpr le, Call call, Callable callable |
       this = le
     |
       callable.getACall() = call and
@@ -216,21 +199,6 @@ class CallableAlwaysReturnsTrueHigherPrecision extends CallableAlwaysReturnsTrue
   }
 }
 
-/**
- * A property Write for the `IssuerValidator` property for `Microsoft.IdentityModel.Tokens.TokenValidationParameters`
- */
-class TokenValidationParametersPropertyWriteToValidationDelegatedIssuerValidator extends PropertyWrite {
-  TokenValidationParametersPropertyWriteToValidationDelegatedIssuerValidator() {
-    exists(Property p, Class c |
-      c.hasQualifiedName("Microsoft.IdentityModel.Tokens.TokenValidationParameters")
-    |
-      p.getAnAccess() = this and
-      c.getAProperty() = p and
-      p.hasName("IssuerValidator")
-    )
-  }
-}
-
 /**
  * A callable that returns a `string` and has a `string` as 1st argument
  */
diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql
index 10f016bc5b3..39220e3cddf 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql	
@@ -16,8 +16,7 @@ import DataFlow
 import JsonWebTokenHandlerLib
 
 from
-  TokenValidationParametersPropertyWriteToValidationDelegated tv, Assignment a,
-  CallableAlwaysReturnsTrueHigherPrecision e
-where a.getLValue() = tv and a.getRValue().getAChild*() = e
-select tv, "JsonWebTokenHandler security-sensitive property $@ is being delegated to $@.", tv,
-  tv.getTarget().toString(), e, "a callable that always returns \"true\""
+  TokenValidationParametersProperty p , CallableAlwaysReturnsTrueHigherPrecision e
+where e = p.getAnAssignedValue()
+select e, "JsonWebTokenHandler security-sensitive property $@ is being delegated to $@.", p,
+  p.getQualifiedName().toString(), e, "a callable that always returns \"true\""
diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql
index 5d0491e826e..15a8813171d 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql	
@@ -16,9 +16,9 @@ import JsonWebTokenHandlerLib
 from
   FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation config,
   DataFlow::Node source, DataFlow::Node sink,
-  TokenValidationParametersPropertyWriteToBypassSensitiveValidation pw
+  TokenValidationParametersPropertySensitiveValidation pw
 where
   config.hasFlow(source, sink) and
-  exists(Assignment a | a.getLValue() = pw | sink.asExpr() = a.getRValue())
+  sink.asExpr() = pw.getAnAssignedValue()
 select sink, "The security sensitive property $@ is being disabled by the following value: $@.", pw,
-  pw.getTarget().toString(), source, "false"
+  pw.getQualifiedName().toString(), source, "false"
diff --git a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.expected b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.expected
index e6c576dad45..dc224c9586e 100644
--- a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.expected	
+++ b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.expected	
@@ -1,7 +1,7 @@
-| delegation-test.cs:101:13:101:59 | access to property LifetimeValidator | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | delegation-test.cs:101:13:101:59 | access to property LifetimeValidator | LifetimeValidator | delegation-test.cs:101:63:101:186 | (...) => ... | a callable that always returns "true" |
-| delegation-test.cs:102:13:102:59 | access to property AudienceValidator | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | delegation-test.cs:102:13:102:59 | access to property AudienceValidator | AudienceValidator | delegation-test.cs:102:63:102:178 | (...) => ... | a callable that always returns "true" |
-| delegation-test.cs:115:13:115:59 | access to property AudienceValidator | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | delegation-test.cs:115:13:115:59 | access to property AudienceValidator | AudienceValidator | delegation-test.cs:115:63:115:190 | (...) => ... | a callable that always returns "true" |
-| delegation-test.cs:116:13:116:59 | access to property AudienceValidator | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | delegation-test.cs:116:13:116:59 | access to property AudienceValidator | AudienceValidator | delegation-test.cs:116:63:116:180 | (...) => ... | a callable that always returns "true" |
-| delegation-test.cs:117:13:117:59 | access to property AudienceValidator | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | delegation-test.cs:117:13:117:59 | access to property AudienceValidator | AudienceValidator | delegation-test.cs:117:63:117:217 | (...) => ... | a callable that always returns "true" |
-| delegation-test.cs:118:13:118:59 | access to property AudienceValidator | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | delegation-test.cs:118:13:118:59 | access to property AudienceValidator | AudienceValidator | delegation-test.cs:118:63:118:248 | (...) => ... | a callable that always returns "true" |
-| delegation-test.cs:119:13:119:59 | access to property AudienceValidator | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | delegation-test.cs:119:13:119:59 | access to property AudienceValidator | AudienceValidator | delegation-test.cs:119:63:119:177 | (...) => ... | a callable that always returns "true" |
+| delegation-test.cs:101:63:101:186 | (...) => ... | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | stubs.cs:54:34:54:50 | LifetimeValidator | Microsoft.IdentityModel.Tokens.TokenValidationParameters.LifetimeValidator | delegation-test.cs:101:63:101:186 | (...) => ... | a callable that always returns "true" |
+| delegation-test.cs:102:63:102:178 | (...) => ... | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | stubs.cs:55:34:55:50 | AudienceValidator | Microsoft.IdentityModel.Tokens.TokenValidationParameters.AudienceValidator | delegation-test.cs:102:63:102:178 | (...) => ... | a callable that always returns "true" |
+| delegation-test.cs:115:63:115:190 | (...) => ... | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | stubs.cs:55:34:55:50 | AudienceValidator | Microsoft.IdentityModel.Tokens.TokenValidationParameters.AudienceValidator | delegation-test.cs:115:63:115:190 | (...) => ... | a callable that always returns "true" |
+| delegation-test.cs:116:63:116:180 | (...) => ... | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | stubs.cs:55:34:55:50 | AudienceValidator | Microsoft.IdentityModel.Tokens.TokenValidationParameters.AudienceValidator | delegation-test.cs:116:63:116:180 | (...) => ... | a callable that always returns "true" |
+| delegation-test.cs:117:63:117:217 | (...) => ... | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | stubs.cs:55:34:55:50 | AudienceValidator | Microsoft.IdentityModel.Tokens.TokenValidationParameters.AudienceValidator | delegation-test.cs:117:63:117:217 | (...) => ... | a callable that always returns "true" |
+| delegation-test.cs:118:63:118:248 | (...) => ... | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | stubs.cs:55:34:55:50 | AudienceValidator | Microsoft.IdentityModel.Tokens.TokenValidationParameters.AudienceValidator | delegation-test.cs:118:63:118:248 | (...) => ... | a callable that always returns "true" |
+| delegation-test.cs:119:63:119:177 | (...) => ... | JsonWebTokenHandler security-sensitive property $@ is being delegated to $@. | stubs.cs:55:34:55:50 | AudienceValidator | Microsoft.IdentityModel.Tokens.TokenValidationParameters.AudienceValidator | delegation-test.cs:119:63:119:177 | (...) => ... | a callable that always returns "true" |
diff --git a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.expected b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.expected
index 7cb0db1fe5f..4a0a5afce6f 100644
--- a/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.expected	
+++ b/csharp/ql/test/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.expected	
@@ -1,5 +1,5 @@
-| security-validation-disabled-test.cs:31:34:31:38 | false | The security sensitive property $@ is being disabled by the following value: $@. | security-validation-disabled-test.cs:31:17:31:30 | access to property ValidateIssuer | ValidateIssuer | security-validation-disabled-test.cs:31:34:31:38 | false | false |
-| security-validation-disabled-test.cs:32:36:32:40 | false | The security sensitive property $@ is being disabled by the following value: $@. | security-validation-disabled-test.cs:32:17:32:32 | access to property ValidateAudience | ValidateAudience | security-validation-disabled-test.cs:32:36:32:40 | false | false |
-| security-validation-disabled-test.cs:33:36:33:40 | false | The security sensitive property $@ is being disabled by the following value: $@. | security-validation-disabled-test.cs:33:17:33:32 | access to property ValidateLifetime | ValidateLifetime | security-validation-disabled-test.cs:33:36:33:40 | false | false |
-| security-validation-disabled-test.cs:34:41:34:45 | false | The security sensitive property $@ is being disabled by the following value: $@. | security-validation-disabled-test.cs:34:17:34:37 | access to property RequireExpirationTime | RequireExpirationTime | security-validation-disabled-test.cs:34:41:34:45 | false | false |
-| security-validation-disabled-test.cs:37:35:37:39 | false | The security sensitive property $@ is being disabled by the following value: $@. | security-validation-disabled-test.cs:37:17:37:31 | access to property RequireAudience | RequireAudience | security-validation-disabled-test.cs:37:35:37:39 | false | false |
+| security-validation-disabled-test.cs:31:34:31:38 | false | The security sensitive property $@ is being disabled by the following value: $@. | stubs.cs:43:21:43:34 | ValidateIssuer | Microsoft.IdentityModel.Tokens.TokenValidationParameters.ValidateIssuer | security-validation-disabled-test.cs:31:34:31:38 | false | false |
+| security-validation-disabled-test.cs:32:36:32:40 | false | The security sensitive property $@ is being disabled by the following value: $@. | stubs.cs:44:21:44:36 | ValidateAudience | Microsoft.IdentityModel.Tokens.TokenValidationParameters.ValidateAudience | security-validation-disabled-test.cs:32:36:32:40 | false | false |
+| security-validation-disabled-test.cs:33:36:33:40 | false | The security sensitive property $@ is being disabled by the following value: $@. | stubs.cs:45:21:45:36 | ValidateLifetime | Microsoft.IdentityModel.Tokens.TokenValidationParameters.ValidateLifetime | security-validation-disabled-test.cs:33:36:33:40 | false | false |
+| security-validation-disabled-test.cs:34:41:34:45 | false | The security sensitive property $@ is being disabled by the following value: $@. | stubs.cs:51:21:51:41 | RequireExpirationTime | Microsoft.IdentityModel.Tokens.TokenValidationParameters.RequireExpirationTime | security-validation-disabled-test.cs:34:41:34:45 | false | false |
+| security-validation-disabled-test.cs:37:35:37:39 | false | The security sensitive property $@ is being disabled by the following value: $@. | stubs.cs:50:21:50:35 | RequireAudience | Microsoft.IdentityModel.Tokens.TokenValidationParameters.RequireAudience | security-validation-disabled-test.cs:37:35:37:39 | false | false |

From e5f5d461f4d8462dbca2c6d155714a02edc53b67 Mon Sep 17 00:00:00 2001
From: Raul Garcia <raulga@microsoft.com>
Date: Fri, 12 Aug 2022 10:16:10 -0700
Subject: [PATCH 011/203] addressing feedback from PR review

---
 .../JsonWebTokenHandlerLib.qll                | 22 +++++--------------
 1 file changed, 6 insertions(+), 16 deletions(-)

diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll
index 7da1ee65d9f..f976556534e 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
@@ -230,24 +230,14 @@ class CallableAlwaysReturnsParameter0 extends CallableReturnsStringAndArg0IsStri
  */
 class CallableAlwaysReturnsParameter0MayThrowExceptions extends CallableReturnsStringAndArg0IsString {
   CallableAlwaysReturnsParameter0MayThrowExceptions() {
-    callableOnlyThrowsArgumentNullException(this) and
-    forall(ReturnStmt rs | rs.getEnclosingCallable() = this |
-      rs.getChild(0) = this.getParameter(0).getAnAccess()
-    ) and
-    exists(ReturnStmt rs | rs.getEnclosingCallable() = this)
+    forex(Expr ret | this.canReturn(ret) |
+    ret = this.getParameter(0).getAnAccess()
     or
-    exists(
-      AnonymousFunctionExpr le, Call call, CallableAlwaysReturnsParameter0MayThrowExceptions cat
-    |
-      this = le
-    |
-      call = le.getExpressionBody() and
-      cat.getACall() = call and
-      callableOnlyThrowsArgumentNullException(le) and
-      callableOnlyThrowsArgumentNullException(cat)
+    exists(CallableAlwaysReturnsParameter0MayThrowExceptions c |
+      ret = c.getACall() and
+      ret.(Call).getArgument(0) = this.getParameter(0).getAnAccess()
     )
-    or
-    this.getBody() = this.getParameter(0).getAnAccess()
+  )
   }
 }
 

From dac64eeca76767a725630d3703aab972a18ddcfe Mon Sep 17 00:00:00 2001
From: Ed Minnix <egregius313@github.com>
Date: Thu, 18 Aug 2022 12:23:34 -0400
Subject: [PATCH 012/203] Query test files

---
 java/ql/src/Security/CWE/CWE-312/AllowBackupFalse.xml | 8 ++++++++
 java/ql/src/Security/CWE/CWE-312/AllowBackupTrue.xml  | 8 ++++++++
 2 files changed, 16 insertions(+)
 create mode 100644 java/ql/src/Security/CWE/CWE-312/AllowBackupFalse.xml
 create mode 100644 java/ql/src/Security/CWE/CWE-312/AllowBackupTrue.xml

diff --git a/java/ql/src/Security/CWE/CWE-312/AllowBackupFalse.xml b/java/ql/src/Security/CWE/CWE-312/AllowBackupFalse.xml
new file mode 100644
index 00000000000..cf0a90bb60c
--- /dev/null
+++ b/java/ql/src/Security/CWE/CWE-312/AllowBackupFalse.xml
@@ -0,0 +1,8 @@
+<manifest ... >
+    <!-- GOOD: 'android:allowBackup' set to 'false' -->
+    <application
+        android:allowBackup="false">
+        <activity ... >
+        </activity>
+    </application>
+</manifest>
diff --git a/java/ql/src/Security/CWE/CWE-312/AllowBackupTrue.xml b/java/ql/src/Security/CWE/CWE-312/AllowBackupTrue.xml
new file mode 100644
index 00000000000..bdec443a6c5
--- /dev/null
+++ b/java/ql/src/Security/CWE/CWE-312/AllowBackupTrue.xml
@@ -0,0 +1,8 @@
+<manifest ... >
+    <!-- BAD: 'android:allowBackup' set to 'true' -->
+    <application
+        android:allowBackup="true">
+        <activity ... >
+        </activity>
+    </application>
+</manifest>

From 7d15af6caa1d96eca28d298a8d678503110af99c Mon Sep 17 00:00:00 2001
From: Ed Minnix <egregius313@github.com>
Date: Thu, 18 Aug 2022 12:25:02 -0400
Subject: [PATCH 013/203] Add allowBackup check to AndroidManifest

---
 java/ql/lib/semmle/code/xml/AndroidManifest.qll | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/java/ql/lib/semmle/code/xml/AndroidManifest.qll b/java/ql/lib/semmle/code/xml/AndroidManifest.qll
index b5c79efa853..5a0bba3a65b 100644
--- a/java/ql/lib/semmle/code/xml/AndroidManifest.qll
+++ b/java/ql/lib/semmle/code/xml/AndroidManifest.qll
@@ -72,6 +72,17 @@ class AndroidApplicationXmlElement extends XmlElement {
    * Holds if this application element has explicitly set a value for its `android:permission` attribute.
    */
   predicate requiresPermissions() { this.getAnAttribute().(AndroidPermissionXmlAttribute).isFull() }
+
+  /**
+   * Holds if this application element has the attribute `android:allowBackup` set to `true`.
+   */
+  predicate allowsBackup() {
+    exists(AndroidXmlAttribute attr |
+      this.getAnAttribute() = attr and
+      attr.getName() = "allowBackup" and
+      attr.getValue() = "true"
+    )
+  }
 }
 
 /**

From 44b0a2b8af9b6db4544cc0d4729e87157badc946 Mon Sep 17 00:00:00 2001
From: Ed Minnix <egregius313@github.com>
Date: Thu, 18 Aug 2022 12:26:08 -0400
Subject: [PATCH 014/203] Android allowBackup query

---
 .../CWE-312/AllowBackupAttributeEnabled.ql    | 20 +++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql

diff --git a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
new file mode 100644
index 00000000000..6941aaa46bf
--- /dev/null
+++ b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
@@ -0,0 +1,20 @@
+/**
+ * @name Android allowBackup attribute enabled
+ * @description
+ * @kind problem
+ * @problem.severity recommendation
+ * @security-severity 7.5
+ * @id java/android/allowBackup-attribute-enabled
+ * @tags security
+ *       external/cwe/cwe-312
+ * @precision very-high
+ */
+
+import java
+import semmle.code.xml.AndroidManifest
+
+from AndroidApplicationXmlElement androidAppElem
+where
+  androidAppElem.allowsBackup() and
+  androidAppElem.getFile().(AndroidManifestXmlFile).isInBuildDirectory()
+select androidAppElem.getAttribute("allowBackup"), "The 'android:allowBackup' attribute is enabled."

From 6509426fb383ba28bfc4f12f4b27f835bd392ed3 Mon Sep 17 00:00:00 2001
From: Ed Minnix <egregius313@github.com>
Date: Thu, 18 Aug 2022 22:03:51 -0400
Subject: [PATCH 015/203] `android:allowBackup` query documentation

---
 .../CWE-312/AllowBackupAttributeEnabled.qhelp | 51 +++++++++++++++++++
 1 file changed, 51 insertions(+)
 create mode 100644 java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.qhelp

diff --git a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.qhelp b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.qhelp
new file mode 100644
index 00000000000..8945f40172f
--- /dev/null
+++ b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.qhelp
@@ -0,0 +1,51 @@
+<!DOCTYPE qhelp PUBLIC
+  "-//Semmle//qhelp//EN"
+  "qhelp.dtd">
+<qhelp>
+<overview>
+<p>The Android manifest file defines configuration settings for Android 
+applications. In this file, the <code>android:allowBackup</code> attribute of
+the <code>application</code> element can be used to define whether or not the
+application can have automatic backups.</p>
+
+<p>Enabling backups may allow an attacker to extract sensitive data. Therefore,
+it is advised to set <code>android:allowBackup</code> to <code>false</code> if 
+your application uses any sensitive data.</p>
+</overview>
+
+<recommendation>
+<p>For Android applications which process sensitive data, set the 
+<code>android:allowBackup</code> setting to <code>false</code> in the manifest
+file.</p>
+
+<p>Note: Since Android 6.0 (Marshmallow), applications default to participating
+in automatic backups. Therefore, it is necessary to explicitly disable backups.
+</p>
+</recommendation>
+
+<example>
+
+<p>In the two examples below, the <code>android:allowBackup</code> setting is enabled:</p>
+
+<sample src="AllowBackupTrue.xml" />
+
+<sample src="AllowBackupEmpty.xml"/>
+
+<p>A corrected version explicity sets <code>android:allowBackup</code> to <code>false</code>:</p>
+
+<sample src="AllowBackupFalse.xml"/>
+
+</example>
+<references>
+<li>
+   Android Documentation:
+   <a href="https://developer.android.com/guide/topics/data/autobackup#EnablingAutoBackup">Back up user data with Auto Backup</a>
+</li>
+<li>
+   OWASP Mobile Security Testing Guide:
+   <a href="https://github.com/OWASP/owasp-mstg/blob/b7a93a2e5e0557cc9a12e55fc3f6675f6986bb86/Document/0x05d-Testing-Data-Storage.md#backups">
+    Android Backups
+   </a>
+</li>
+</references>
+</qhelp>
\ No newline at end of file

From dad4a403dbacb1c281419ee7f7d9b3b70d3fd27c Mon Sep 17 00:00:00 2001
From: Ed Minnix <egregius313@github.com>
Date: Thu, 18 Aug 2022 22:04:38 -0400
Subject: [PATCH 016/203] Add support for android:allowBackup default value

The default value of `android:allowBackup` is `true`. Added support for
detecting if the default value is used.
---
 java/ql/lib/semmle/code/xml/AndroidManifest.qll        | 10 +++++++---
 .../CWE/CWE-312/AllowBackupAttributeEnabled.ql         |  2 +-
 java/ql/src/Security/CWE/CWE-312/AllowBackupEmpty.xml  |  7 +++++++
 3 files changed, 15 insertions(+), 4 deletions(-)
 create mode 100644 java/ql/src/Security/CWE/CWE-312/AllowBackupEmpty.xml

diff --git a/java/ql/lib/semmle/code/xml/AndroidManifest.qll b/java/ql/lib/semmle/code/xml/AndroidManifest.qll
index 5a0bba3a65b..bb67ea04827 100644
--- a/java/ql/lib/semmle/code/xml/AndroidManifest.qll
+++ b/java/ql/lib/semmle/code/xml/AndroidManifest.qll
@@ -74,13 +74,17 @@ class AndroidApplicationXmlElement extends XmlElement {
   predicate requiresPermissions() { this.getAnAttribute().(AndroidPermissionXmlAttribute).isFull() }
 
   /**
-   * Holds if this application element has the attribute `android:allowBackup` set to `true`.
+   * Holds if this application element enables the `android:allowBackup` attribute.
+   *
+   * https://developer.android.com/guide/topics/data/autobackup
    */
   predicate allowsBackup() {
-    exists(AndroidXmlAttribute attr |
+    // The default value for the attribute `android:allowBackup` is `true`.
+    // Therefore we also check if it is not present.
+    not exists(AndroidXmlAttribute attr |
       this.getAnAttribute() = attr and
       attr.getName() = "allowBackup" and
-      attr.getValue() = "true"
+      attr.getValue() = "false"
     )
   }
 }
diff --git a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
index 6941aaa46bf..88fdeb2a890 100644
--- a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
+++ b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
@@ -17,4 +17,4 @@ from AndroidApplicationXmlElement androidAppElem
 where
   androidAppElem.allowsBackup() and
   androidAppElem.getFile().(AndroidManifestXmlFile).isInBuildDirectory()
-select androidAppElem.getAttribute("allowBackup"), "The 'android:allowBackup' attribute is enabled."
+select androidAppElem, "The 'android:allowBackup' attribute is enabled."
diff --git a/java/ql/src/Security/CWE/CWE-312/AllowBackupEmpty.xml b/java/ql/src/Security/CWE/CWE-312/AllowBackupEmpty.xml
new file mode 100644
index 00000000000..e3e9159b726
--- /dev/null
+++ b/java/ql/src/Security/CWE/CWE-312/AllowBackupEmpty.xml
@@ -0,0 +1,7 @@
+<manifest ... >
+    <!-- BAD: no 'android:allowBackup' set, defaults to 'true' -->
+    <application>
+        <activity ... >
+        </activity>
+    </application>
+</manifest>

From a036639ecd0688f88d52bd955c0b180e191f7971 Mon Sep 17 00:00:00 2001
From: Ed Minnix <egregius313@github.com>
Date: Thu, 18 Aug 2022 22:15:30 -0400
Subject: [PATCH 017/203] Added change notes

---
 .../2022-08-18-android-manifest-backup-predicate.md           | 4 ++++
 .../src/change-notes/2022-08-18-android-allowbackup-query.md  | 4 ++++
 2 files changed, 8 insertions(+)
 create mode 100644 java/ql/lib/change-notes/2022-08-18-android-manifest-backup-predicate.md
 create mode 100644 java/ql/src/change-notes/2022-08-18-android-allowbackup-query.md

diff --git a/java/ql/lib/change-notes/2022-08-18-android-manifest-backup-predicate.md b/java/ql/lib/change-notes/2022-08-18-android-manifest-backup-predicate.md
new file mode 100644
index 00000000000..5346dc58b91
--- /dev/null
+++ b/java/ql/lib/change-notes/2022-08-18-android-manifest-backup-predicate.md
@@ -0,0 +1,4 @@
+---
+category: feature
+---
+* Added a new predicate, `allowsBackup`, in the `AndroidApplicationXmlElement` class. This predicate detects if the application element has its `android:allowBackup` attribute enabled.
diff --git a/java/ql/src/change-notes/2022-08-18-android-allowbackup-query.md b/java/ql/src/change-notes/2022-08-18-android-allowbackup-query.md
new file mode 100644
index 00000000000..b7bfd85ac8c
--- /dev/null
+++ b/java/ql/src/change-notes/2022-08-18-android-allowbackup-query.md
@@ -0,0 +1,4 @@
+---
+category: newQuery
+---
+* Added a new query, `java/android/allowBackup-attribute-enabled`, to detect if the `android:allowBackup` attribute is enabled in the Android manifest.

From de36372d1c1117f1530018c24aa4287d6f5873a9 Mon Sep 17 00:00:00 2001
From: Ed Minnix <egregius313@github.com>
Date: Mon, 22 Aug 2022 12:02:27 -0400
Subject: [PATCH 018/203] Refactor android:backupAllowed query

Refactor the query to check for the nonexistence of the
`android:allowBackup` attribute being set to false.

The default value is true, so we need to check for it being explicitly
marked false.
---
 java/ql/lib/semmle/code/xml/AndroidManifest.qll | 2 --
 1 file changed, 2 deletions(-)

diff --git a/java/ql/lib/semmle/code/xml/AndroidManifest.qll b/java/ql/lib/semmle/code/xml/AndroidManifest.qll
index bb67ea04827..7911b1a8518 100644
--- a/java/ql/lib/semmle/code/xml/AndroidManifest.qll
+++ b/java/ql/lib/semmle/code/xml/AndroidManifest.qll
@@ -79,8 +79,6 @@ class AndroidApplicationXmlElement extends XmlElement {
    * https://developer.android.com/guide/topics/data/autobackup
    */
   predicate allowsBackup() {
-    // The default value for the attribute `android:allowBackup` is `true`.
-    // Therefore we also check if it is not present.
     not exists(AndroidXmlAttribute attr |
       this.getAnAttribute() = attr and
       attr.getName() = "allowBackup" and

From e6a1b1fab9400eca1722709116fecf19cc8de7ee Mon Sep 17 00:00:00 2001
From: Edward Minnix III <egregius313@github.com>
Date: Mon, 22 Aug 2022 12:06:30 -0400
Subject: [PATCH 019/203] Rename allowBackup query id

Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
---
 java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
index 88fdeb2a890..6e015c7a237 100644
--- a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
+++ b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
@@ -4,7 +4,7 @@
  * @kind problem
  * @problem.severity recommendation
  * @security-severity 7.5
- * @id java/android/allowBackup-attribute-enabled
+ * @id java/android/allowbackup-enabled
  * @tags security
  *       external/cwe/cwe-312
  * @precision very-high

From 59773eb74354ec7efb99d6b9b76d71f03302b031 Mon Sep 17 00:00:00 2001
From: Arthur Baars <aibaars@github.com>
Date: Wed, 24 Aug 2022 13:27:53 +0200
Subject: [PATCH 020/203] Ruby: update tree-sitter grammar

---
 ruby/Cargo.lock                               |  Bin 17026 -> 17026 bytes
 ruby/extractor/Cargo.toml                     |    2 +-
 ruby/generator/Cargo.toml                     |    2 +-
 ruby/ql/lib/codeql/ruby/ast/internal/Expr.qll |   32 +-
 .../lib/codeql/ruby/ast/internal/Method.qll   |    2 +-
 .../codeql/ruby/ast/internal/TreeSitter.qll   |   86 +-
 .../lib/codeql/ruby/ast/internal/Variable.qll |   18 +-
 ruby/ql/lib/ruby.dbscheme                     |  128 +-
 .../library-tests/ast/TreeSitter.expected     | 1990 +++++++++--------
 9 files changed, 1188 insertions(+), 1072 deletions(-)

diff --git a/ruby/Cargo.lock b/ruby/Cargo.lock
index 2e2f205ce02d55c258997a789cd3d05da974ffdf..ed1b9e2bd3b787571a9a2a0d6b7bc7122cec0fce 100644
GIT binary patch
delta 100
zcmZo_Wo&9?+_1_vFfql@z{J?d!Z^t=%`zo1%_K1~#n{3y$t=;rFwM{+(KOM>JT28c
SRhd|YlM^LGHw)Mmu>b%9EFGQz

delta 99
zcmZo_Wo&9?+_1_vAl2M7#lXbGz$Do+CB@t@F~!Wn!qgzeG}+ADD9OmkEX6d{%+e&y
SSeZzLlM^JwHVfDlu>b&`R~x(l

diff --git a/ruby/extractor/Cargo.toml b/ruby/extractor/Cargo.toml
index c1a7c4424b9..a5c753b6398 100644
--- a/ruby/extractor/Cargo.toml
+++ b/ruby/extractor/Cargo.toml
@@ -11,7 +11,7 @@ flate2 = "1.0"
 node-types = { path = "../node-types" }
 tree-sitter = "0.19"
 tree-sitter-embedded-template = { git = "https://github.com/tree-sitter/tree-sitter-embedded-template.git", rev = "1a538da253d73f896b9f6c0c7d79cda58791ac5c" }
-tree-sitter-ruby = { git = "https://github.com/tree-sitter/tree-sitter-ruby.git", rev = "e75d04404c9dd71ad68850d5c672b226d5e694f3" }
+tree-sitter-ruby = { git = "https://github.com/tree-sitter/tree-sitter-ruby.git", rev = "ad1043283b1f9daf4aad381b6a81f18a5a27fe7e" }
 clap = "3.0"
 tracing = "0.1"
 tracing-subscriber = { version = "0.3.3", features = ["env-filter"] }
diff --git a/ruby/generator/Cargo.toml b/ruby/generator/Cargo.toml
index 5a70c43d7b3..493557e03d4 100644
--- a/ruby/generator/Cargo.toml
+++ b/ruby/generator/Cargo.toml
@@ -12,4 +12,4 @@ node-types = { path = "../node-types" }
 tracing = "0.1"
 tracing-subscriber = { version = "0.3.3", features = ["env-filter"] }
 tree-sitter-embedded-template = { git = "https://github.com/tree-sitter/tree-sitter-embedded-template.git", rev = "1a538da253d73f896b9f6c0c7d79cda58791ac5c" }
-tree-sitter-ruby = { git = "https://github.com/tree-sitter/tree-sitter-ruby.git", rev = "e75d04404c9dd71ad68850d5c672b226d5e694f3" }
+tree-sitter-ruby = { git = "https://github.com/tree-sitter/tree-sitter-ruby.git", rev = "ad1043283b1f9daf4aad381b6a81f18a5a27fe7e" }
diff --git a/ruby/ql/lib/codeql/ruby/ast/internal/Expr.qll b/ruby/ql/lib/codeql/ruby/ast/internal/Expr.qll
index 167f5f90d1e..93cb8961f81 100644
--- a/ruby/ql/lib/codeql/ruby/ast/internal/Expr.qll
+++ b/ruby/ql/lib/codeql/ruby/ast/internal/Expr.qll
@@ -51,25 +51,35 @@ class Ensure extends StmtSequence, TEnsure {
 
 // Not defined by dispatch, as it should not be exposed
 Ruby::AstNode getBodyStmtChild(TBodyStmt b, int i) {
-  result = any(Ruby::Method g | b = TMethod(g)).getChild(i)
-  or
-  result = any(Ruby::SingletonMethod g | b = TSingletonMethod(g)).getChild(i)
-  or
-  exists(Ruby::Lambda g | b = TLambda(g) |
-    result = g.getBody().(Ruby::DoBlock).getChild(i) or
-    result = g.getBody().(Ruby::Block).getChild(i)
+  exists(Ruby::Method g, Ruby::AstNode body | b = TMethod(g) and body = g.getBody() |
+    result = body.(Ruby::BodyStatement).getChild(i)
+    or
+    i = 0 and result = body and not body instanceof Ruby::BodyStatement
   )
   or
-  result = any(Ruby::DoBlock g | b = TDoBlock(g)).getChild(i)
+  exists(Ruby::SingletonMethod g, Ruby::AstNode body |
+    b = TSingletonMethod(g) and body = g.getBody()
+  |
+    result = body.(Ruby::BodyStatement).getChild(i)
+    or
+    i = 0 and result = body and not body instanceof Ruby::BodyStatement
+  )
+  or
+  exists(Ruby::Lambda g | b = TLambda(g) |
+    result = g.getBody().(Ruby::DoBlock).getBody().getChild(i) or
+    result = g.getBody().(Ruby::Block).getBody().getChild(i)
+  )
+  or
+  result = any(Ruby::DoBlock g | b = TDoBlock(g)).getBody().getChild(i)
   or
   result = any(Ruby::Program g | b = TToplevel(g)).getChild(i) and
   not result instanceof Ruby::BeginBlock
   or
-  result = any(Ruby::Class g | b = TClassDeclaration(g)).getChild(i)
+  result = any(Ruby::Class g | b = TClassDeclaration(g)).getBody().getChild(i)
   or
-  result = any(Ruby::SingletonClass g | b = TSingletonClass(g)).getChild(i)
+  result = any(Ruby::SingletonClass g | b = TSingletonClass(g)).getBody().getChild(i)
   or
-  result = any(Ruby::Module g | b = TModuleDeclaration(g)).getChild(i)
+  result = any(Ruby::Module g | b = TModuleDeclaration(g)).getBody().getChild(i)
   or
   result = any(Ruby::Begin g | b = TBeginExpr(g)).getChild(i)
 }
diff --git a/ruby/ql/lib/codeql/ruby/ast/internal/Method.qll b/ruby/ql/lib/codeql/ruby/ast/internal/Method.qll
index 0b923056441..075ac5fb8fa 100644
--- a/ruby/ql/lib/codeql/ruby/ast/internal/Method.qll
+++ b/ruby/ql/lib/codeql/ruby/ast/internal/Method.qll
@@ -15,7 +15,7 @@ class BraceBlockReal extends BraceBlock, TBraceBlockReal {
     toGenerated(result) = g.getParameters().getChild(n)
   }
 
-  final override Stmt getStmt(int i) { toGenerated(result) = g.getChild(i) }
+  final override Stmt getStmt(int i) { toGenerated(result) = g.getBody().getChild(i) }
 }
 
 /**
diff --git a/ruby/ql/lib/codeql/ruby/ast/internal/TreeSitter.qll b/ruby/ql/lib/codeql/ruby/ast/internal/TreeSitter.qll
index 7a3b6ef43ef..7d76c3d701a 100644
--- a/ruby/ql/lib/codeql/ruby/ast/internal/TreeSitter.qll
+++ b/ruby/ql/lib/codeql/ruby/ast/internal/TreeSitter.qll
@@ -311,15 +311,15 @@ module Ruby {
     /** Gets the name of the primary QL class for this element. */
     final override string getAPrimaryQlClass() { result = "Block" }
 
+    /** Gets the node corresponding to the field `body`. */
+    final BlockBody getBody() { ruby_block_body(this, result) }
+
     /** Gets the node corresponding to the field `parameters`. */
     final BlockParameters getParameters() { ruby_block_parameters(this, result) }
 
-    /** Gets the `i`th child of this node. */
-    final AstNode getChild(int i) { ruby_block_child(this, i, result) }
-
     /** Gets a field or child node of this node. */
     final override AstNode getAFieldOrChild() {
-      ruby_block_parameters(this, result) or ruby_block_child(this, _, result)
+      ruby_block_body(this, result) or ruby_block_parameters(this, result)
     }
   }
 
@@ -335,6 +335,18 @@ module Ruby {
     final override AstNode getAFieldOrChild() { ruby_block_argument_child(this, result) }
   }
 
+  /** A class representing `block_body` nodes. */
+  class BlockBody extends @ruby_block_body, AstNode {
+    /** Gets the name of the primary QL class for this element. */
+    final override string getAPrimaryQlClass() { result = "BlockBody" }
+
+    /** Gets the `i`th child of this node. */
+    final AstNode getChild(int i) { ruby_block_body_child(this, i, result) }
+
+    /** Gets a field or child node of this node. */
+    final override AstNode getAFieldOrChild() { ruby_block_body_child(this, _, result) }
+  }
+
   /** A class representing `block_parameter` nodes. */
   class BlockParameter extends @ruby_block_parameter, AstNode {
     /** Gets the name of the primary QL class for this element. */
@@ -364,6 +376,18 @@ module Ruby {
     }
   }
 
+  /** A class representing `body_statement` nodes. */
+  class BodyStatement extends @ruby_body_statement, AstNode {
+    /** Gets the name of the primary QL class for this element. */
+    final override string getAPrimaryQlClass() { result = "BodyStatement" }
+
+    /** Gets the `i`th child of this node. */
+    final AstNode getChild(int i) { ruby_body_statement_child(this, i, result) }
+
+    /** Gets a field or child node of this node. */
+    final override AstNode getAFieldOrChild() { ruby_body_statement_child(this, _, result) }
+  }
+
   /** A class representing `break` nodes. */
   class Break extends @ruby_break, AstNode {
     /** Gets the name of the primary QL class for this element. */
@@ -468,20 +492,20 @@ module Ruby {
     /** Gets the name of the primary QL class for this element. */
     final override string getAPrimaryQlClass() { result = "Class" }
 
+    /** Gets the node corresponding to the field `body`. */
+    final BodyStatement getBody() { ruby_class_body(this, result) }
+
     /** Gets the node corresponding to the field `name`. */
     final AstNode getName() { ruby_class_def(this, result) }
 
     /** Gets the node corresponding to the field `superclass`. */
     final Superclass getSuperclass() { ruby_class_superclass(this, result) }
 
-    /** Gets the `i`th child of this node. */
-    final AstNode getChild(int i) { ruby_class_child(this, i, result) }
-
     /** Gets a field or child node of this node. */
     final override AstNode getAFieldOrChild() {
+      ruby_class_body(this, result) or
       ruby_class_def(this, result) or
-      ruby_class_superclass(this, result) or
-      ruby_class_child(this, _, result)
+      ruby_class_superclass(this, result)
     }
   }
 
@@ -592,15 +616,15 @@ module Ruby {
     /** Gets the name of the primary QL class for this element. */
     final override string getAPrimaryQlClass() { result = "DoBlock" }
 
+    /** Gets the node corresponding to the field `body`. */
+    final BodyStatement getBody() { ruby_do_block_body(this, result) }
+
     /** Gets the node corresponding to the field `parameters`. */
     final BlockParameters getParameters() { ruby_do_block_parameters(this, result) }
 
-    /** Gets the `i`th child of this node. */
-    final AstNode getChild(int i) { ruby_do_block_child(this, i, result) }
-
     /** Gets a field or child node of this node. */
     final override AstNode getAFieldOrChild() {
-      ruby_do_block_parameters(this, result) or ruby_do_block_child(this, _, result)
+      ruby_do_block_body(this, result) or ruby_do_block_parameters(this, result)
     }
   }
 
@@ -1106,20 +1130,20 @@ module Ruby {
     /** Gets the name of the primary QL class for this element. */
     final override string getAPrimaryQlClass() { result = "Method" }
 
+    /** Gets the node corresponding to the field `body`. */
+    final AstNode getBody() { ruby_method_body(this, result) }
+
     /** Gets the node corresponding to the field `name`. */
     final UnderscoreMethodName getName() { ruby_method_def(this, result) }
 
     /** Gets the node corresponding to the field `parameters`. */
     final MethodParameters getParameters() { ruby_method_parameters(this, result) }
 
-    /** Gets the `i`th child of this node. */
-    final AstNode getChild(int i) { ruby_method_child(this, i, result) }
-
     /** Gets a field or child node of this node. */
     final override AstNode getAFieldOrChild() {
+      ruby_method_body(this, result) or
       ruby_method_def(this, result) or
-      ruby_method_parameters(this, result) or
-      ruby_method_child(this, _, result)
+      ruby_method_parameters(this, result)
     }
   }
 
@@ -1140,15 +1164,15 @@ module Ruby {
     /** Gets the name of the primary QL class for this element. */
     final override string getAPrimaryQlClass() { result = "Module" }
 
+    /** Gets the node corresponding to the field `body`. */
+    final BodyStatement getBody() { ruby_module_body(this, result) }
+
     /** Gets the node corresponding to the field `name`. */
     final AstNode getName() { ruby_module_def(this, result) }
 
-    /** Gets the `i`th child of this node. */
-    final AstNode getChild(int i) { ruby_module_child(this, i, result) }
-
     /** Gets a field or child node of this node. */
     final override AstNode getAFieldOrChild() {
-      ruby_module_def(this, result) or ruby_module_child(this, _, result)
+      ruby_module_body(this, result) or ruby_module_def(this, result)
     }
   }
 
@@ -1504,15 +1528,15 @@ module Ruby {
     /** Gets the name of the primary QL class for this element. */
     final override string getAPrimaryQlClass() { result = "SingletonClass" }
 
+    /** Gets the node corresponding to the field `body`. */
+    final BodyStatement getBody() { ruby_singleton_class_body(this, result) }
+
     /** Gets the node corresponding to the field `value`. */
     final UnderscoreArg getValue() { ruby_singleton_class_def(this, result) }
 
-    /** Gets the `i`th child of this node. */
-    final AstNode getChild(int i) { ruby_singleton_class_child(this, i, result) }
-
     /** Gets a field or child node of this node. */
     final override AstNode getAFieldOrChild() {
-      ruby_singleton_class_def(this, result) or ruby_singleton_class_child(this, _, result)
+      ruby_singleton_class_body(this, result) or ruby_singleton_class_def(this, result)
     }
   }
 
@@ -1521,6 +1545,9 @@ module Ruby {
     /** Gets the name of the primary QL class for this element. */
     final override string getAPrimaryQlClass() { result = "SingletonMethod" }
 
+    /** Gets the node corresponding to the field `body`. */
+    final AstNode getBody() { ruby_singleton_method_body(this, result) }
+
     /** Gets the node corresponding to the field `name`. */
     final UnderscoreMethodName getName() { ruby_singleton_method_def(this, result, _) }
 
@@ -1530,15 +1557,12 @@ module Ruby {
     /** Gets the node corresponding to the field `parameters`. */
     final MethodParameters getParameters() { ruby_singleton_method_parameters(this, result) }
 
-    /** Gets the `i`th child of this node. */
-    final AstNode getChild(int i) { ruby_singleton_method_child(this, i, result) }
-
     /** Gets a field or child node of this node. */
     final override AstNode getAFieldOrChild() {
+      ruby_singleton_method_body(this, result) or
       ruby_singleton_method_def(this, result, _) or
       ruby_singleton_method_def(this, _, result) or
-      ruby_singleton_method_parameters(this, result) or
-      ruby_singleton_method_child(this, _, result)
+      ruby_singleton_method_parameters(this, result)
     }
   }
 
diff --git a/ruby/ql/lib/codeql/ruby/ast/internal/Variable.qll b/ruby/ql/lib/codeql/ruby/ast/internal/Variable.qll
index 64fcdbd669a..9e1e2c38de9 100644
--- a/ruby/ql/lib/codeql/ruby/ast/internal/Variable.qll
+++ b/ruby/ql/lib/codeql/ruby/ast/internal/Variable.qll
@@ -200,18 +200,18 @@ private module Cached {
     or
     i = any(Ruby::Binary x).getRight()
     or
-    i = any(Ruby::Block x).getChild(_)
-    or
     i = any(Ruby::BlockArgument x).getChild()
     or
+    i = any(Ruby::BlockBody x).getChild(_)
+    or
+    i = any(Ruby::BodyStatement x).getChild(_)
+    or
     i = any(Ruby::Call x).getReceiver()
     or
     i = any(Ruby::Case x).getValue()
     or
     i = any(Ruby::CaseMatch x).getValue()
     or
-    i = any(Ruby::Class x).getChild(_)
-    or
     i = any(Ruby::Conditional x).getCondition()
     or
     i = any(Ruby::Conditional x).getConsequence()
@@ -220,8 +220,6 @@ private module Cached {
     or
     i = any(Ruby::Do x).getChild(_)
     or
-    i = any(Ruby::DoBlock x).getChild(_)
-    or
     i = any(Ruby::ElementReference x).getChild(_)
     or
     i = any(Ruby::ElementReference x).getObject()
@@ -250,9 +248,7 @@ private module Cached {
     or
     i = any(Ruby::KeywordParameter x).getValue()
     or
-    i = any(Ruby::Method x).getChild(_)
-    or
-    i = any(Ruby::Module x).getChild(_)
+    i = any(Ruby::Method x).getBody()
     or
     i = any(Ruby::OperatorAssignment x).getRight()
     or
@@ -282,9 +278,7 @@ private module Cached {
     or
     i = any(Ruby::SingletonClass x).getValue()
     or
-    i = any(Ruby::SingletonClass x).getChild(_)
-    or
-    i = any(Ruby::SingletonMethod x).getChild(_)
+    i = any(Ruby::SingletonMethod x).getBody()
     or
     i = any(Ruby::SingletonMethod x).getObject()
     or
diff --git a/ruby/ql/lib/ruby.dbscheme b/ruby/ql/lib/ruby.dbscheme
index 4ba51641799..3595c826de6 100644
--- a/ruby/ql/lib/ruby.dbscheme
+++ b/ruby/ql/lib/ruby.dbscheme
@@ -247,20 +247,16 @@ ruby_binary_def(
   int right: @ruby_underscore_expression ref
 );
 
+ruby_block_body(
+  unique int ruby_block: @ruby_block ref,
+  unique int body: @ruby_block_body ref
+);
+
 ruby_block_parameters(
   unique int ruby_block: @ruby_block ref,
   unique int parameters: @ruby_block_parameters ref
 );
 
-@ruby_block_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
-
-#keyset[ruby_block, index]
-ruby_block_child(
-  int ruby_block: @ruby_block ref,
-  int index: int ref,
-  unique int child: @ruby_block_child_type ref
-);
-
 ruby_block_def(
   unique int id: @ruby_block
 );
@@ -274,6 +270,19 @@ ruby_block_argument_def(
   unique int id: @ruby_block_argument
 );
 
+@ruby_block_body_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_block_body, index]
+ruby_block_body_child(
+  int ruby_block_body: @ruby_block_body ref,
+  int index: int ref,
+  unique int child: @ruby_block_body_child_type ref
+);
+
+ruby_block_body_def(
+  unique int id: @ruby_block_body
+);
+
 ruby_block_parameter_name(
   unique int ruby_block_parameter: @ruby_block_parameter ref,
   unique int name: @ruby_token_identifier ref
@@ -303,6 +312,19 @@ ruby_block_parameters_def(
   unique int id: @ruby_block_parameters
 );
 
+@ruby_body_statement_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_body_statement, index]
+ruby_body_statement_child(
+  int ruby_body_statement: @ruby_body_statement ref,
+  int index: int ref,
+  unique int child: @ruby_body_statement_child_type ref
+);
+
+ruby_body_statement_def(
+  unique int id: @ruby_body_statement
+);
+
 ruby_break_child(
   unique int ruby_break: @ruby_break ref,
   unique int child: @ruby_argument_list ref
@@ -391,6 +413,11 @@ ruby_chained_string_def(
   unique int id: @ruby_chained_string
 );
 
+ruby_class_body(
+  unique int ruby_class: @ruby_class ref,
+  unique int body: @ruby_body_statement ref
+);
+
 @ruby_class_name_type = @ruby_scope_resolution | @ruby_token_constant
 
 ruby_class_superclass(
@@ -398,15 +425,6 @@ ruby_class_superclass(
   unique int superclass: @ruby_superclass ref
 );
 
-@ruby_class_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
-
-#keyset[ruby_class, index]
-ruby_class_child(
-  int ruby_class: @ruby_class ref,
-  int index: int ref,
-  unique int child: @ruby_class_child_type ref
-);
-
 ruby_class_def(
   unique int id: @ruby_class,
   int name: @ruby_class_name_type ref
@@ -478,20 +496,16 @@ ruby_do_def(
   unique int id: @ruby_do
 );
 
+ruby_do_block_body(
+  unique int ruby_do_block: @ruby_do_block ref,
+  unique int body: @ruby_body_statement ref
+);
+
 ruby_do_block_parameters(
   unique int ruby_do_block: @ruby_do_block ref,
   unique int parameters: @ruby_block_parameters ref
 );
 
-@ruby_do_block_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
-
-#keyset[ruby_do_block, index]
-ruby_do_block_child(
-  int ruby_do_block: @ruby_do_block ref,
-  int index: int ref,
-  unique int child: @ruby_do_block_child_type ref
-);
-
 ruby_do_block_def(
   unique int id: @ruby_do_block
 );
@@ -724,7 +738,7 @@ ruby_in_clause_def(
   int pattern: @ruby_underscore_pattern_top_expr_body ref
 );
 
-@ruby_interpolation_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+@ruby_interpolation_child_type = @ruby_token_empty_statement | @ruby_underscore_nonlocal_variable | @ruby_underscore_statement
 
 #keyset[ruby_interpolation, index]
 ruby_interpolation_child(
@@ -797,20 +811,18 @@ ruby_left_assignment_list_def(
   unique int id: @ruby_left_assignment_list
 );
 
+@ruby_method_body_type = @ruby_body_statement | @ruby_rescue_modifier | @ruby_underscore_arg
+
+ruby_method_body(
+  unique int ruby_method: @ruby_method ref,
+  unique int body: @ruby_method_body_type ref
+);
+
 ruby_method_parameters(
   unique int ruby_method: @ruby_method ref,
   unique int parameters: @ruby_method_parameters ref
 );
 
-@ruby_method_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_arg | @ruby_underscore_statement
-
-#keyset[ruby_method, index]
-ruby_method_child(
-  int ruby_method: @ruby_method ref,
-  int index: int ref,
-  unique int child: @ruby_method_child_type ref
-);
-
 ruby_method_def(
   unique int id: @ruby_method,
   int name: @ruby_underscore_method_name ref
@@ -829,17 +841,13 @@ ruby_method_parameters_def(
   unique int id: @ruby_method_parameters
 );
 
-@ruby_module_name_type = @ruby_scope_resolution | @ruby_token_constant
-
-@ruby_module_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
-
-#keyset[ruby_module, index]
-ruby_module_child(
-  int ruby_module: @ruby_module ref,
-  int index: int ref,
-  unique int child: @ruby_module_child_type ref
+ruby_module_body(
+  unique int ruby_module: @ruby_module ref,
+  unique int body: @ruby_body_statement ref
 );
 
+@ruby_module_name_type = @ruby_scope_resolution | @ruby_token_constant
+
 ruby_module_def(
   unique int id: @ruby_module,
   int name: @ruby_module_name_type ref
@@ -1074,13 +1082,9 @@ ruby_setter_def(
   int name: @ruby_token_identifier ref
 );
 
-@ruby_singleton_class_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
-
-#keyset[ruby_singleton_class, index]
-ruby_singleton_class_child(
-  int ruby_singleton_class: @ruby_singleton_class ref,
-  int index: int ref,
-  unique int child: @ruby_singleton_class_child_type ref
+ruby_singleton_class_body(
+  unique int ruby_singleton_class: @ruby_singleton_class ref,
+  unique int body: @ruby_body_statement ref
 );
 
 ruby_singleton_class_def(
@@ -1088,6 +1092,13 @@ ruby_singleton_class_def(
   int value: @ruby_underscore_arg ref
 );
 
+@ruby_singleton_method_body_type = @ruby_body_statement | @ruby_rescue_modifier | @ruby_underscore_arg
+
+ruby_singleton_method_body(
+  unique int ruby_singleton_method: @ruby_singleton_method ref,
+  unique int body: @ruby_singleton_method_body_type ref
+);
+
 @ruby_singleton_method_object_type = @ruby_underscore_arg | @ruby_underscore_variable
 
 ruby_singleton_method_parameters(
@@ -1095,15 +1106,6 @@ ruby_singleton_method_parameters(
   unique int parameters: @ruby_method_parameters ref
 );
 
-@ruby_singleton_method_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_arg | @ruby_underscore_statement
-
-#keyset[ruby_singleton_method, index]
-ruby_singleton_method_child(
-  int ruby_singleton_method: @ruby_singleton_method ref,
-  int index: int ref,
-  unique int child: @ruby_singleton_method_child_type ref
-);
-
 ruby_singleton_method_def(
   unique int id: @ruby_singleton_method,
   int name: @ruby_underscore_method_name ref,
@@ -1344,7 +1346,7 @@ case @ruby_token.kind of
 ;
 
 
-@ruby_ast_node = @ruby_alias | @ruby_alternative_pattern | @ruby_argument_list | @ruby_array | @ruby_array_pattern | @ruby_as_pattern | @ruby_assignment | @ruby_bare_string | @ruby_bare_symbol | @ruby_begin | @ruby_begin_block | @ruby_binary | @ruby_block | @ruby_block_argument | @ruby_block_parameter | @ruby_block_parameters | @ruby_break | @ruby_call | @ruby_case__ | @ruby_case_match | @ruby_chained_string | @ruby_class | @ruby_complex | @ruby_conditional | @ruby_delimited_symbol | @ruby_destructured_left_assignment | @ruby_destructured_parameter | @ruby_do | @ruby_do_block | @ruby_element_reference | @ruby_else | @ruby_elsif | @ruby_end_block | @ruby_ensure | @ruby_exception_variable | @ruby_exceptions | @ruby_expression_reference_pattern | @ruby_find_pattern | @ruby_for | @ruby_hash | @ruby_hash_pattern | @ruby_hash_splat_argument | @ruby_hash_splat_parameter | @ruby_heredoc_body | @ruby_if | @ruby_if_guard | @ruby_if_modifier | @ruby_in | @ruby_in_clause | @ruby_interpolation | @ruby_keyword_parameter | @ruby_keyword_pattern | @ruby_lambda | @ruby_lambda_parameters | @ruby_left_assignment_list | @ruby_method | @ruby_method_parameters | @ruby_module | @ruby_next | @ruby_operator_assignment | @ruby_optional_parameter | @ruby_pair | @ruby_parenthesized_pattern | @ruby_parenthesized_statements | @ruby_pattern | @ruby_program | @ruby_range | @ruby_rational | @ruby_redo | @ruby_regex | @ruby_rescue | @ruby_rescue_modifier | @ruby_rest_assignment | @ruby_retry | @ruby_return | @ruby_right_assignment_list | @ruby_scope_resolution | @ruby_setter | @ruby_singleton_class | @ruby_singleton_method | @ruby_splat_argument | @ruby_splat_parameter | @ruby_string__ | @ruby_string_array | @ruby_subshell | @ruby_superclass | @ruby_symbol_array | @ruby_then | @ruby_token | @ruby_unary | @ruby_undef | @ruby_unless | @ruby_unless_guard | @ruby_unless_modifier | @ruby_until | @ruby_until_modifier | @ruby_variable_reference_pattern | @ruby_when | @ruby_while | @ruby_while_modifier | @ruby_yield
+@ruby_ast_node = @ruby_alias | @ruby_alternative_pattern | @ruby_argument_list | @ruby_array | @ruby_array_pattern | @ruby_as_pattern | @ruby_assignment | @ruby_bare_string | @ruby_bare_symbol | @ruby_begin | @ruby_begin_block | @ruby_binary | @ruby_block | @ruby_block_argument | @ruby_block_body | @ruby_block_parameter | @ruby_block_parameters | @ruby_body_statement | @ruby_break | @ruby_call | @ruby_case__ | @ruby_case_match | @ruby_chained_string | @ruby_class | @ruby_complex | @ruby_conditional | @ruby_delimited_symbol | @ruby_destructured_left_assignment | @ruby_destructured_parameter | @ruby_do | @ruby_do_block | @ruby_element_reference | @ruby_else | @ruby_elsif | @ruby_end_block | @ruby_ensure | @ruby_exception_variable | @ruby_exceptions | @ruby_expression_reference_pattern | @ruby_find_pattern | @ruby_for | @ruby_hash | @ruby_hash_pattern | @ruby_hash_splat_argument | @ruby_hash_splat_parameter | @ruby_heredoc_body | @ruby_if | @ruby_if_guard | @ruby_if_modifier | @ruby_in | @ruby_in_clause | @ruby_interpolation | @ruby_keyword_parameter | @ruby_keyword_pattern | @ruby_lambda | @ruby_lambda_parameters | @ruby_left_assignment_list | @ruby_method | @ruby_method_parameters | @ruby_module | @ruby_next | @ruby_operator_assignment | @ruby_optional_parameter | @ruby_pair | @ruby_parenthesized_pattern | @ruby_parenthesized_statements | @ruby_pattern | @ruby_program | @ruby_range | @ruby_rational | @ruby_redo | @ruby_regex | @ruby_rescue | @ruby_rescue_modifier | @ruby_rest_assignment | @ruby_retry | @ruby_return | @ruby_right_assignment_list | @ruby_scope_resolution | @ruby_setter | @ruby_singleton_class | @ruby_singleton_method | @ruby_splat_argument | @ruby_splat_parameter | @ruby_string__ | @ruby_string_array | @ruby_subshell | @ruby_superclass | @ruby_symbol_array | @ruby_then | @ruby_token | @ruby_unary | @ruby_undef | @ruby_unless | @ruby_unless_guard | @ruby_unless_modifier | @ruby_until | @ruby_until_modifier | @ruby_variable_reference_pattern | @ruby_when | @ruby_while | @ruby_while_modifier | @ruby_yield
 
 @ruby_ast_node_parent = @file | @ruby_ast_node
 
diff --git a/ruby/ql/test/library-tests/ast/TreeSitter.expected b/ruby/ql/test/library-tests/ast/TreeSitter.expected
index cb5a17ebebb..bca7b42046c 100644
--- a/ruby/ql/test/library-tests/ast/TreeSitter.expected
+++ b/ruby/ql/test/library-tests/ast/TreeSitter.expected
@@ -37,10 +37,11 @@ calls/calls.rb:
 #   17|         0: [ReservedWord] |
 #   17|         1: [Identifier] x
 #   17|         2: [ReservedWord] |
-#   17|       2: [Binary] Binary
-#   17|         0: [Identifier] x
-#   17|         1: [ReservedWord] +
-#   17|         2: [Integer] 1
+#   17|       2: [BlockBody] BlockBody
+#   17|         0: [Binary] Binary
+#   17|           0: [Identifier] x
+#   17|           1: [ReservedWord] +
+#   17|           2: [Integer] 1
 #   17|       3: [ReservedWord] }
 #   20|   6: [Call] Call
 #   20|     0: [Identifier] foo
@@ -50,10 +51,11 @@ calls/calls.rb:
 #   20|         0: [ReservedWord] |
 #   20|         1: [Identifier] x
 #   20|         2: [ReservedWord] |
-#   21|       2: [Binary] Binary
-#   21|         0: [Identifier] x
-#   21|         1: [ReservedWord] +
-#   21|         2: [Integer] 1
+#   21|       2: [BodyStatement] BodyStatement
+#   21|         0: [Binary] Binary
+#   21|           0: [Identifier] x
+#   21|           1: [ReservedWord] +
+#   21|           2: [Integer] 1
 #   22|       3: [ReservedWord] end
 #   25|   7: [Call] Call
 #   25|     0: [Integer] 123
@@ -72,26 +74,29 @@ calls/calls.rb:
 #   25|         0: [ReservedWord] |
 #   25|         1: [Identifier] x
 #   25|         2: [ReservedWord] |
-#   26|       2: [Binary] Binary
-#   26|         0: [Identifier] x
-#   26|         1: [ReservedWord] +
-#   26|         2: [Integer] 1
+#   26|       2: [BodyStatement] BodyStatement
+#   26|         0: [Binary] Binary
+#   26|           0: [Identifier] x
+#   26|           1: [ReservedWord] +
+#   26|           2: [Integer] 1
 #   27|       3: [ReservedWord] end
 #   30|   8: [Method] Method
 #   30|     0: [ReservedWord] def
 #   30|     1: [Identifier] method_that_yields
-#   31|     2: [Yield] Yield
-#   31|       0: [ReservedWord] yield
+#   31|     2: [BodyStatement] BodyStatement
+#   31|       0: [Yield] Yield
+#   31|         0: [ReservedWord] yield
 #   32|     3: [ReservedWord] end
 #   35|   9: [Method] Method
 #   35|     0: [ReservedWord] def
 #   35|     1: [Identifier] another_method_that_yields
-#   36|     2: [Yield] Yield
-#   36|       0: [ReservedWord] yield
-#   36|       1: [ArgumentList] ArgumentList
-#   36|         0: [Integer] 100
-#   36|         1: [ReservedWord] ,
-#   36|         2: [Integer] 200
+#   36|     2: [BodyStatement] BodyStatement
+#   36|       0: [Yield] Yield
+#   36|         0: [ReservedWord] yield
+#   36|         1: [ArgumentList] ArgumentList
+#   36|           0: [Integer] 100
+#   36|           1: [ReservedWord] ,
+#   36|           2: [Integer] 200
 #   37|     3: [ReservedWord] end
 #   46|   10: [Identifier] foo
 #   47|   11: [Call] Call
@@ -218,13 +223,14 @@ calls/calls.rb:
 #   92|       1: [ReservedWord] )
 #   92|     2: [Block] Block
 #   92|       0: [ReservedWord] {
-#   92|       1: [Identifier] bar
-#   92|       2: [ReservedWord] ;
-#   92|       3: [Call] Call
-#   92|         0: [Constant] X
-#   92|         1: [ReservedWord] ::
-#   92|         2: [Identifier] baz
-#   92|       4: [ReservedWord] }
+#   92|       1: [BlockBody] BlockBody
+#   92|         0: [Identifier] bar
+#   92|         1: [ReservedWord] ;
+#   92|         2: [Call] Call
+#   92|           0: [Constant] X
+#   92|           1: [ReservedWord] ::
+#   92|           2: [Identifier] baz
+#   92|       2: [ReservedWord] }
 #   95|   30: [Call] Call
 #   95|     0: [Identifier] foo
 #   95|     1: [ArgumentList] ArgumentList
@@ -232,12 +238,13 @@ calls/calls.rb:
 #   95|       1: [ReservedWord] )
 #   95|     2: [DoBlock] DoBlock
 #   95|       0: [ReservedWord] do
-#   96|       1: [Identifier] bar
-#   97|       2: [Call] Call
-#   97|         0: [Constant] X
-#   97|         1: [ReservedWord] ::
-#   97|         2: [Identifier] baz
-#   98|       3: [ReservedWord] end
+#   96|       1: [BodyStatement] BodyStatement
+#   96|         0: [Identifier] bar
+#   97|         1: [Call] Call
+#   97|           0: [Constant] X
+#   97|           1: [ReservedWord] ::
+#   97|           2: [Identifier] baz
+#   98|       2: [ReservedWord] end
 #  101|   31: [Call] Call
 #  101|     0: [Identifier] foo
 #  101|     1: [ReservedWord] .
@@ -284,12 +291,13 @@ calls/calls.rb:
 #  116|   35: [Class] Class
 #  116|     0: [ReservedWord] class
 #  116|     1: [Constant] MyClass
-#  117|     2: [Identifier] foo
-#  118|     3: [Call] Call
-#  118|       0: [Constant] X
-#  118|       1: [ReservedWord] ::
-#  118|       2: [Identifier] bar
-#  119|     4: [ReservedWord] end
+#  117|     2: [BodyStatement] BodyStatement
+#  117|       0: [Identifier] foo
+#  118|       1: [Call] Call
+#  118|         0: [Constant] X
+#  118|         1: [ReservedWord] ::
+#  118|         2: [Identifier] bar
+#  119|     3: [ReservedWord] end
 #  122|   36: [Class] Class
 #  122|     0: [ReservedWord] class
 #  122|     1: [Constant] MyClass
@@ -311,7 +319,8 @@ calls/calls.rb:
 #  128|     0: [ReservedWord] class
 #  128|     1: [ReservedWord] <<
 #  128|     2: [Identifier] foo
-#  129|     3: [Identifier] bar
+#  129|     3: [BodyStatement] BodyStatement
+#  129|       0: [Identifier] bar
 #  130|     4: [ReservedWord] end
 #  131|   39: [SingletonClass] SingletonClass
 #  131|     0: [ReservedWord] class
@@ -320,31 +329,34 @@ calls/calls.rb:
 #  131|       0: [Constant] X
 #  131|       1: [ReservedWord] ::
 #  131|       2: [Identifier] foo
-#  132|     3: [Call] Call
-#  132|       0: [Constant] X
-#  132|       1: [ReservedWord] ::
-#  132|       2: [Identifier] bar
+#  132|     3: [BodyStatement] BodyStatement
+#  132|       0: [Call] Call
+#  132|         0: [Constant] X
+#  132|         1: [ReservedWord] ::
+#  132|         2: [Identifier] bar
 #  133|     4: [ReservedWord] end
 #  136|   40: [Method] Method
 #  136|     0: [ReservedWord] def
 #  136|     1: [Identifier] some_method
-#  137|     2: [Identifier] foo
-#  138|     3: [Call] Call
-#  138|       0: [Constant] X
-#  138|       1: [ReservedWord] ::
-#  138|       2: [Identifier] bar
-#  139|     4: [ReservedWord] end
+#  137|     2: [BodyStatement] BodyStatement
+#  137|       0: [Identifier] foo
+#  138|       1: [Call] Call
+#  138|         0: [Constant] X
+#  138|         1: [ReservedWord] ::
+#  138|         2: [Identifier] bar
+#  139|     3: [ReservedWord] end
 #  142|   41: [SingletonMethod] SingletonMethod
 #  142|     0: [ReservedWord] def
 #  142|     1: [Identifier] foo
 #  142|     2: [ReservedWord] .
 #  142|     3: [Identifier] some_method
-#  143|     4: [Identifier] bar
-#  144|     5: [Call] Call
-#  144|       0: [Constant] X
-#  144|       1: [ReservedWord] ::
-#  144|       2: [Identifier] baz
-#  145|     6: [ReservedWord] end
+#  143|     4: [BodyStatement] BodyStatement
+#  143|       0: [Identifier] bar
+#  144|       1: [Call] Call
+#  144|         0: [Constant] X
+#  144|         1: [ReservedWord] ::
+#  144|         2: [Identifier] baz
+#  145|     5: [ReservedWord] end
 #  148|   42: [Method] Method
 #  148|     0: [ReservedWord] def
 #  148|     1: [Identifier] method_with_keyword_param
@@ -398,12 +410,13 @@ calls/calls.rb:
 #  160|   46: [Module] Module
 #  160|     0: [ReservedWord] module
 #  160|     1: [Constant] SomeModule
-#  161|     2: [Identifier] foo
-#  162|     3: [Call] Call
-#  162|       0: [Constant] X
-#  162|       1: [ReservedWord] ::
-#  162|       2: [Identifier] bar
-#  163|     4: [ReservedWord] end
+#  161|     2: [BodyStatement] BodyStatement
+#  161|       0: [Identifier] foo
+#  162|       1: [Call] Call
+#  162|         0: [Constant] X
+#  162|         1: [ReservedWord] ::
+#  162|         2: [Identifier] bar
+#  163|     3: [ReservedWord] end
 #  166|   47: [Conditional] Conditional
 #  166|     0: [Identifier] foo
 #  166|     1: [ReservedWord] ?
@@ -809,111 +822,119 @@ calls/calls.rb:
 #  284|   88: [Class] Class
 #  284|     0: [ReservedWord] class
 #  284|     1: [Constant] MyClass
-#  285|     2: [Method] Method
-#  285|       0: [ReservedWord] def
-#  285|       1: [Identifier] my_method
-#  286|       2: [Super] super
-#  287|       3: [Call] Call
-#  287|         0: [Super] super
-#  287|         1: [ArgumentList] ArgumentList
-#  287|           0: [ReservedWord] (
-#  287|           1: [ReservedWord] )
-#  288|       4: [Call] Call
-#  288|         0: [Super] super
-#  288|         1: [ArgumentList] ArgumentList
-#  288|           0: [String] String
-#  288|             0: [ReservedWord] '
-#  288|             1: [StringContent] blah
-#  288|             2: [ReservedWord] '
-#  289|       5: [Call] Call
-#  289|         0: [Super] super
-#  289|         1: [ArgumentList] ArgumentList
-#  289|           0: [Integer] 1
-#  289|           1: [ReservedWord] ,
-#  289|           2: [Integer] 2
-#  289|           3: [ReservedWord] ,
-#  289|           4: [Integer] 3
-#  290|       6: [Call] Call
-#  290|         0: [Super] super
-#  290|         1: [Block] Block
-#  290|           0: [ReservedWord] {
-#  290|           1: [BlockParameters] BlockParameters
-#  290|             0: [ReservedWord] |
-#  290|             1: [Identifier] x
-#  290|             2: [ReservedWord] |
-#  290|           2: [Binary] Binary
-#  290|             0: [Identifier] x
-#  290|             1: [ReservedWord] +
-#  290|             2: [Integer] 1
-#  290|           3: [ReservedWord] }
-#  291|       7: [Call] Call
-#  291|         0: [Super] super
-#  291|         1: [DoBlock] DoBlock
-#  291|           0: [ReservedWord] do
-#  291|           1: [BlockParameters] BlockParameters
-#  291|             0: [ReservedWord] |
-#  291|             1: [Identifier] x
-#  291|             2: [ReservedWord] |
-#  291|           2: [Binary] Binary
-#  291|             0: [Identifier] x
-#  291|             1: [ReservedWord] *
-#  291|             2: [Integer] 2
-#  291|           3: [ReservedWord] end
-#  292|       8: [Call] Call
-#  292|         0: [Super] super
-#  292|         1: [ArgumentList] ArgumentList
-#  292|           0: [Integer] 4
-#  292|           1: [ReservedWord] ,
-#  292|           2: [Integer] 5
-#  292|         2: [Block] Block
-#  292|           0: [ReservedWord] {
-#  292|           1: [BlockParameters] BlockParameters
-#  292|             0: [ReservedWord] |
-#  292|             1: [Identifier] x
-#  292|             2: [ReservedWord] |
-#  292|           2: [Binary] Binary
-#  292|             0: [Identifier] x
-#  292|             1: [ReservedWord] +
-#  292|             2: [Integer] 100
-#  292|           3: [ReservedWord] }
-#  293|       9: [Call] Call
-#  293|         0: [Super] super
-#  293|         1: [ArgumentList] ArgumentList
-#  293|           0: [Integer] 6
-#  293|           1: [ReservedWord] ,
-#  293|           2: [Integer] 7
-#  293|         2: [DoBlock] DoBlock
-#  293|           0: [ReservedWord] do
-#  293|           1: [BlockParameters] BlockParameters
-#  293|             0: [ReservedWord] |
-#  293|             1: [Identifier] x
-#  293|             2: [ReservedWord] |
-#  293|           2: [Binary] Binary
-#  293|             0: [Identifier] x
-#  293|             1: [ReservedWord] +
-#  293|             2: [Integer] 200
-#  293|           3: [ReservedWord] end
-#  294|       10: [ReservedWord] end
+#  285|     2: [BodyStatement] BodyStatement
+#  285|       0: [Method] Method
+#  285|         0: [ReservedWord] def
+#  285|         1: [Identifier] my_method
+#  286|         2: [BodyStatement] BodyStatement
+#  286|           0: [Super] super
+#  287|           1: [Call] Call
+#  287|             0: [Super] super
+#  287|             1: [ArgumentList] ArgumentList
+#  287|               0: [ReservedWord] (
+#  287|               1: [ReservedWord] )
+#  288|           2: [Call] Call
+#  288|             0: [Super] super
+#  288|             1: [ArgumentList] ArgumentList
+#  288|               0: [String] String
+#  288|                 0: [ReservedWord] '
+#  288|                 1: [StringContent] blah
+#  288|                 2: [ReservedWord] '
+#  289|           3: [Call] Call
+#  289|             0: [Super] super
+#  289|             1: [ArgumentList] ArgumentList
+#  289|               0: [Integer] 1
+#  289|               1: [ReservedWord] ,
+#  289|               2: [Integer] 2
+#  289|               3: [ReservedWord] ,
+#  289|               4: [Integer] 3
+#  290|           4: [Call] Call
+#  290|             0: [Super] super
+#  290|             1: [Block] Block
+#  290|               0: [ReservedWord] {
+#  290|               1: [BlockParameters] BlockParameters
+#  290|                 0: [ReservedWord] |
+#  290|                 1: [Identifier] x
+#  290|                 2: [ReservedWord] |
+#  290|               2: [BlockBody] BlockBody
+#  290|                 0: [Binary] Binary
+#  290|                   0: [Identifier] x
+#  290|                   1: [ReservedWord] +
+#  290|                   2: [Integer] 1
+#  290|               3: [ReservedWord] }
+#  291|           5: [Call] Call
+#  291|             0: [Super] super
+#  291|             1: [DoBlock] DoBlock
+#  291|               0: [ReservedWord] do
+#  291|               1: [BlockParameters] BlockParameters
+#  291|                 0: [ReservedWord] |
+#  291|                 1: [Identifier] x
+#  291|                 2: [ReservedWord] |
+#  291|               2: [BodyStatement] BodyStatement
+#  291|                 0: [Binary] Binary
+#  291|                   0: [Identifier] x
+#  291|                   1: [ReservedWord] *
+#  291|                   2: [Integer] 2
+#  291|               3: [ReservedWord] end
+#  292|           6: [Call] Call
+#  292|             0: [Super] super
+#  292|             1: [ArgumentList] ArgumentList
+#  292|               0: [Integer] 4
+#  292|               1: [ReservedWord] ,
+#  292|               2: [Integer] 5
+#  292|             2: [Block] Block
+#  292|               0: [ReservedWord] {
+#  292|               1: [BlockParameters] BlockParameters
+#  292|                 0: [ReservedWord] |
+#  292|                 1: [Identifier] x
+#  292|                 2: [ReservedWord] |
+#  292|               2: [BlockBody] BlockBody
+#  292|                 0: [Binary] Binary
+#  292|                   0: [Identifier] x
+#  292|                   1: [ReservedWord] +
+#  292|                   2: [Integer] 100
+#  292|               3: [ReservedWord] }
+#  293|           7: [Call] Call
+#  293|             0: [Super] super
+#  293|             1: [ArgumentList] ArgumentList
+#  293|               0: [Integer] 6
+#  293|               1: [ReservedWord] ,
+#  293|               2: [Integer] 7
+#  293|             2: [DoBlock] DoBlock
+#  293|               0: [ReservedWord] do
+#  293|               1: [BlockParameters] BlockParameters
+#  293|                 0: [ReservedWord] |
+#  293|                 1: [Identifier] x
+#  293|                 2: [ReservedWord] |
+#  293|               2: [BodyStatement] BodyStatement
+#  293|                 0: [Binary] Binary
+#  293|                   0: [Identifier] x
+#  293|                   1: [ReservedWord] +
+#  293|                   2: [Integer] 200
+#  293|               3: [ReservedWord] end
+#  294|         3: [ReservedWord] end
 #  295|     3: [ReservedWord] end
 #  301|   89: [Class] Class
 #  301|     0: [ReservedWord] class
 #  301|     1: [Constant] AnotherClass
-#  302|     2: [Method] Method
-#  302|       0: [ReservedWord] def
-#  302|       1: [Identifier] another_method
-#  303|       2: [Call] Call
-#  303|         0: [Identifier] foo
-#  303|         1: [ReservedWord] .
-#  303|         2: [Identifier] super
-#  304|       3: [Call] Call
-#  304|         0: [Self] self
-#  304|         1: [ReservedWord] .
-#  304|         2: [Identifier] super
-#  305|       4: [Call] Call
-#  305|         0: [Super] super
-#  305|         1: [ReservedWord] .
-#  305|         2: [Identifier] super
-#  306|       5: [ReservedWord] end
+#  302|     2: [BodyStatement] BodyStatement
+#  302|       0: [Method] Method
+#  302|         0: [ReservedWord] def
+#  302|         1: [Identifier] another_method
+#  303|         2: [BodyStatement] BodyStatement
+#  303|           0: [Call] Call
+#  303|             0: [Identifier] foo
+#  303|             1: [ReservedWord] .
+#  303|             2: [Identifier] super
+#  304|           1: [Call] Call
+#  304|             0: [Self] self
+#  304|             1: [ReservedWord] .
+#  304|             2: [Identifier] super
+#  305|           2: [Call] Call
+#  305|             0: [Super] super
+#  305|             1: [ReservedWord] .
+#  305|             2: [Identifier] super
+#  306|         3: [ReservedWord] end
 #  307|     3: [ReservedWord] end
 #  310|   90: [Call] Call
 #  310|     0: [Identifier] foo
@@ -1100,13 +1121,14 @@ calls/calls.rb:
 #  331|       1: [ForwardParameter] ...
 #  331|         0: [ReservedWord] ...
 #  331|       2: [ReservedWord] )
-#  332|     3: [Call] Call
-#  332|       0: [Super] super
-#  332|       1: [ArgumentList] ArgumentList
-#  332|         0: [ReservedWord] (
-#  332|         1: [ForwardArgument] ...
-#  332|           0: [ReservedWord] ...
-#  332|         2: [ReservedWord] )
+#  332|     3: [BodyStatement] BodyStatement
+#  332|       0: [Call] Call
+#  332|         0: [Super] super
+#  332|         1: [ArgumentList] ArgumentList
+#  332|           0: [ReservedWord] (
+#  332|           1: [ForwardArgument] ...
+#  332|             0: [ReservedWord] ...
+#  332|           2: [ReservedWord] )
 #  333|     4: [ReservedWord] end
 #  335|   106: [Method] Method
 #  335|     0: [ReservedWord] def
@@ -1120,15 +1142,16 @@ calls/calls.rb:
 #  335|       5: [ForwardParameter] ...
 #  335|         0: [ReservedWord] ...
 #  335|       6: [ReservedWord] )
-#  336|     3: [Call] Call
-#  336|       0: [Identifier] bar
-#  336|       1: [ArgumentList] ArgumentList
-#  336|         0: [ReservedWord] (
-#  336|         1: [Identifier] b
-#  336|         2: [ReservedWord] ,
-#  336|         3: [ForwardArgument] ...
-#  336|           0: [ReservedWord] ...
-#  336|         4: [ReservedWord] )
+#  336|     3: [BodyStatement] BodyStatement
+#  336|       0: [Call] Call
+#  336|         0: [Identifier] bar
+#  336|         1: [ArgumentList] ArgumentList
+#  336|           0: [ReservedWord] (
+#  336|           1: [Identifier] b
+#  336|           2: [ReservedWord] ,
+#  336|           3: [ForwardArgument] ...
+#  336|             0: [ReservedWord] ...
+#  336|           4: [ReservedWord] )
 #  337|     4: [ReservedWord] end
 #  340|   107: [For] For
 #  340|     0: [ReservedWord] for
@@ -1223,7 +1246,8 @@ calls/calls.rb:
 #  351|         2: [ReservedWord] )
 #  351|       2: [Block] Block
 #  351|         0: [ReservedWord] {
-#  351|         1: [Identifier] y
+#  351|         1: [BlockBody] BlockBody
+#  351|           0: [Identifier] y
 #  351|         2: [ReservedWord] }
 #  352|   114: [Assignment] Assignment
 #  352|     0: [Identifier] f
@@ -1236,10 +1260,11 @@ calls/calls.rb:
 #  352|         2: [ReservedWord] )
 #  352|       2: [Block] Block
 #  352|         0: [ReservedWord] {
-#  352|         1: [Call] Call
-#  352|           0: [Identifier] foo
-#  352|           1: [ArgumentList] ArgumentList
-#  352|             0: [Identifier] x
+#  352|         1: [BlockBody] BlockBody
+#  352|           0: [Call] Call
+#  352|             0: [Identifier] foo
+#  352|             1: [ArgumentList] ArgumentList
+#  352|               0: [Identifier] x
 #  352|         2: [ReservedWord] }
 #  353|   115: [Assignment] Assignment
 #  353|     0: [Identifier] g
@@ -1252,7 +1277,8 @@ calls/calls.rb:
 #  353|         2: [ReservedWord] )
 #  353|       2: [Block] Block
 #  353|         0: [ReservedWord] {
-#  353|         1: [Identifier] unknown_call
+#  353|         1: [BlockBody] BlockBody
+#  353|           0: [Identifier] unknown_call
 #  353|         2: [ReservedWord] }
 #  354|   116: [Assignment] Assignment
 #  354|     0: [Identifier] h
@@ -1265,10 +1291,11 @@ calls/calls.rb:
 #  354|         2: [ReservedWord] )
 #  354|       2: [DoBlock] DoBlock
 #  354|         0: [ReservedWord] do
-#  355|         1: [Identifier] x
-#  356|         2: [Identifier] y
-#  357|         3: [Identifier] unknown_call
-#  358|         4: [ReservedWord] end
+#  355|         1: [BodyStatement] BodyStatement
+#  355|           0: [Identifier] x
+#  356|           1: [Identifier] y
+#  357|           2: [Identifier] unknown_call
+#  358|         2: [ReservedWord] end
 #  361|   117: [Call] Call
 #  361|     0: [Identifier] list
 #  361|     1: [ReservedWord] .
@@ -1297,7 +1324,8 @@ calls/calls.rb:
 #  364|         0: [ReservedWord] |
 #  364|         1: [Identifier] x
 #  364|         2: [ReservedWord] |
-#  364|       2: [Identifier] x
+#  364|       2: [BlockBody] BlockBody
+#  364|         0: [Identifier] x
 #  364|       3: [ReservedWord] }
 #    1| [Comment] # call with no receiver, arguments, or block
 #    4| [Comment] # call whose name is a scope resolution
@@ -1378,49 +1406,52 @@ constants/constants.rb:
 #    1|   0: [Module] Module
 #    1|     0: [ReservedWord] module
 #    1|     1: [Constant] ModuleA
-#    2|     2: [Class] Class
-#    2|       0: [ReservedWord] class
-#    2|       1: [Constant] ClassA
-#    3|       2: [Assignment] Assignment
-#    3|         0: [Constant] CONST_A
-#    3|         1: [ReservedWord] =
-#    3|         2: [String] String
-#    3|           0: [ReservedWord] "
-#    3|           1: [StringContent] const_a
-#    3|           2: [ReservedWord] "
-#    4|       3: [ReservedWord] end
-#    6|     3: [Assignment] Assignment
-#    6|       0: [Constant] CONST_B
-#    6|       1: [ReservedWord] =
-#    6|       2: [String] String
-#    6|         0: [ReservedWord] "
-#    6|         1: [StringContent] const_b
-#    6|         2: [ReservedWord] "
-#    8|     4: [Module] Module
-#    8|       0: [ReservedWord] module
-#    8|       1: [Constant] ModuleB
-#    9|       2: [Class] Class
-#    9|         0: [ReservedWord] class
-#    9|         1: [Constant] ClassB
-#    9|         2: [Superclass] Superclass
-#    9|           0: [ReservedWord] <
-#    9|           1: [Constant] Base
-#   10|         3: [ReservedWord] end
-#   12|       3: [Class] Class
-#   12|         0: [ReservedWord] class
-#   12|         1: [Constant] ClassC
-#   12|         2: [Superclass] Superclass
-#   12|           0: [ReservedWord] <
-#   12|           1: [ScopeResolution] ScopeResolution
-#   12|             0: [ScopeResolution] ScopeResolution
-#   12|               0: [Constant] X
-#   12|               1: [ReservedWord] ::
-#   12|               2: [Constant] Y
-#   12|             1: [ReservedWord] ::
-#   12|             2: [Constant] Z
-#   13|         3: [ReservedWord] end
-#   14|       4: [ReservedWord] end
-#   15|     5: [ReservedWord] end
+#    2|     2: [BodyStatement] BodyStatement
+#    2|       0: [Class] Class
+#    2|         0: [ReservedWord] class
+#    2|         1: [Constant] ClassA
+#    3|         2: [BodyStatement] BodyStatement
+#    3|           0: [Assignment] Assignment
+#    3|             0: [Constant] CONST_A
+#    3|             1: [ReservedWord] =
+#    3|             2: [String] String
+#    3|               0: [ReservedWord] "
+#    3|               1: [StringContent] const_a
+#    3|               2: [ReservedWord] "
+#    4|         3: [ReservedWord] end
+#    6|       1: [Assignment] Assignment
+#    6|         0: [Constant] CONST_B
+#    6|         1: [ReservedWord] =
+#    6|         2: [String] String
+#    6|           0: [ReservedWord] "
+#    6|           1: [StringContent] const_b
+#    6|           2: [ReservedWord] "
+#    8|       2: [Module] Module
+#    8|         0: [ReservedWord] module
+#    8|         1: [Constant] ModuleB
+#    9|         2: [BodyStatement] BodyStatement
+#    9|           0: [Class] Class
+#    9|             0: [ReservedWord] class
+#    9|             1: [Constant] ClassB
+#    9|             2: [Superclass] Superclass
+#    9|               0: [ReservedWord] <
+#    9|               1: [Constant] Base
+#   10|             3: [ReservedWord] end
+#   12|           1: [Class] Class
+#   12|             0: [ReservedWord] class
+#   12|             1: [Constant] ClassC
+#   12|             2: [Superclass] Superclass
+#   12|               0: [ReservedWord] <
+#   12|               1: [ScopeResolution] ScopeResolution
+#   12|                 0: [ScopeResolution] ScopeResolution
+#   12|                   0: [Constant] X
+#   12|                   1: [ReservedWord] ::
+#   12|                   2: [Constant] Y
+#   12|                 1: [ReservedWord] ::
+#   12|                 2: [Constant] Z
+#   13|             3: [ReservedWord] end
+#   14|         3: [ReservedWord] end
+#   15|     3: [ReservedWord] end
 #   17|   1: [Assignment] Assignment
 #   17|     0: [Constant] GREETING
 #   17|     1: [ReservedWord] =
@@ -1446,62 +1477,64 @@ constants/constants.rb:
 #   19|   2: [Method] Method
 #   19|     0: [ReservedWord] def
 #   19|     1: [Identifier] foo
-#   20|     2: [Assignment] Assignment
-#   20|       0: [Constant] Names
-#   20|       1: [ReservedWord] =
-#   20|       2: [Array] Array
-#   20|         0: [ReservedWord] [
-#   20|         1: [String] String
-#   20|           0: [ReservedWord] '
-#   20|           1: [StringContent] Vera
-#   20|           2: [ReservedWord] '
-#   20|         2: [ReservedWord] ,
-#   20|         3: [String] String
-#   20|           0: [ReservedWord] '
-#   20|           1: [StringContent] Chuck
-#   20|           2: [ReservedWord] '
-#   20|         4: [ReservedWord] ,
-#   20|         5: [String] String
-#   20|           0: [ReservedWord] '
-#   20|           1: [StringContent] Dave
-#   20|           2: [ReservedWord] '
-#   20|         6: [ReservedWord] ]
-#   22|     3: [Call] Call
-#   22|       0: [Constant] Names
-#   22|       1: [ReservedWord] .
-#   22|       2: [Identifier] each
-#   22|       3: [DoBlock] DoBlock
-#   22|         0: [ReservedWord] do
-#   22|         1: [BlockParameters] BlockParameters
-#   22|           0: [ReservedWord] |
-#   22|           1: [Identifier] name
-#   22|           2: [ReservedWord] |
-#   23|         2: [Call] Call
-#   23|           0: [Identifier] puts
-#   23|           1: [ArgumentList] ArgumentList
-#   23|             0: [String] String
-#   23|               0: [ReservedWord] "
-#   23|               1: [Interpolation] Interpolation
-#   23|                 0: [ReservedWord] #{
-#   23|                 1: [Constant] GREETING
-#   23|                 2: [ReservedWord] }
-#   23|               2: [StringContent]  
-#   23|               3: [Interpolation] Interpolation
-#   23|                 0: [ReservedWord] #{
-#   23|                 1: [Identifier] name
-#   23|                 2: [ReservedWord] }
-#   23|               4: [ReservedWord] "
-#   24|         3: [ReservedWord] end
-#   28|     4: [Call] Call
-#   28|       0: [Constant] Array
-#   28|       1: [ArgumentList] ArgumentList
-#   28|         0: [ReservedWord] (
-#   28|         1: [String] String
-#   28|           0: [ReservedWord] '
-#   28|           1: [StringContent] foo
-#   28|           2: [ReservedWord] '
-#   28|         2: [ReservedWord] )
-#   29|     5: [ReservedWord] end
+#   20|     2: [BodyStatement] BodyStatement
+#   20|       0: [Assignment] Assignment
+#   20|         0: [Constant] Names
+#   20|         1: [ReservedWord] =
+#   20|         2: [Array] Array
+#   20|           0: [ReservedWord] [
+#   20|           1: [String] String
+#   20|             0: [ReservedWord] '
+#   20|             1: [StringContent] Vera
+#   20|             2: [ReservedWord] '
+#   20|           2: [ReservedWord] ,
+#   20|           3: [String] String
+#   20|             0: [ReservedWord] '
+#   20|             1: [StringContent] Chuck
+#   20|             2: [ReservedWord] '
+#   20|           4: [ReservedWord] ,
+#   20|           5: [String] String
+#   20|             0: [ReservedWord] '
+#   20|             1: [StringContent] Dave
+#   20|             2: [ReservedWord] '
+#   20|           6: [ReservedWord] ]
+#   22|       1: [Call] Call
+#   22|         0: [Constant] Names
+#   22|         1: [ReservedWord] .
+#   22|         2: [Identifier] each
+#   22|         3: [DoBlock] DoBlock
+#   22|           0: [ReservedWord] do
+#   22|           1: [BlockParameters] BlockParameters
+#   22|             0: [ReservedWord] |
+#   22|             1: [Identifier] name
+#   22|             2: [ReservedWord] |
+#   23|           2: [BodyStatement] BodyStatement
+#   23|             0: [Call] Call
+#   23|               0: [Identifier] puts
+#   23|               1: [ArgumentList] ArgumentList
+#   23|                 0: [String] String
+#   23|                   0: [ReservedWord] "
+#   23|                   1: [Interpolation] Interpolation
+#   23|                     0: [ReservedWord] #{
+#   23|                     1: [Constant] GREETING
+#   23|                     2: [ReservedWord] }
+#   23|                   2: [StringContent]  
+#   23|                   3: [Interpolation] Interpolation
+#   23|                     0: [ReservedWord] #{
+#   23|                     1: [Identifier] name
+#   23|                     2: [ReservedWord] }
+#   23|                   4: [ReservedWord] "
+#   24|           3: [ReservedWord] end
+#   28|       2: [Call] Call
+#   28|         0: [Constant] Array
+#   28|         1: [ArgumentList] ArgumentList
+#   28|           0: [ReservedWord] (
+#   28|           1: [String] String
+#   28|             0: [ReservedWord] '
+#   28|             1: [StringContent] foo
+#   28|             2: [ReservedWord] '
+#   28|           2: [ReservedWord] )
+#   29|     3: [ReservedWord] end
 #   31|   3: [Class] Class
 #   31|     0: [ReservedWord] class
 #   31|     1: [ScopeResolution] ScopeResolution
@@ -1514,10 +1547,11 @@ constants/constants.rb:
 #   31|         0: [Constant] ModuleA
 #   31|         1: [ReservedWord] ::
 #   31|         2: [Constant] ClassA
-#   32|     3: [Assignment] Assignment
-#   32|       0: [Constant] FOURTY_TWO
-#   32|       1: [ReservedWord] =
-#   32|       2: [Integer] 42
+#   32|     3: [BodyStatement] BodyStatement
+#   32|       0: [Assignment] Assignment
+#   32|         0: [Constant] FOURTY_TWO
+#   32|         1: [ReservedWord] =
+#   32|         2: [Integer] 42
 #   33|     4: [ReservedWord] end
 #   35|   4: [Module] Module
 #   35|     0: [ReservedWord] module
@@ -1525,10 +1559,11 @@ constants/constants.rb:
 #   35|       0: [Constant] ModuleA
 #   35|       1: [ReservedWord] ::
 #   35|       2: [Constant] ModuleC
-#   36|     2: [Assignment] Assignment
-#   36|       0: [Constant] FOURTY_THREE
-#   36|       1: [ReservedWord] =
-#   36|       2: [Integer] 43
+#   36|     2: [BodyStatement] BodyStatement
+#   36|       0: [Assignment] Assignment
+#   36|         0: [Constant] FOURTY_THREE
+#   36|         1: [ReservedWord] =
+#   36|         2: [Integer] 43
 #   37|     3: [ReservedWord] end
 #   39|   5: [Assignment] Assignment
 #   39|     0: [ScopeResolution] ScopeResolution
@@ -1566,96 +1601,104 @@ constants/constants.rb:
 #   46|       0: [Constant] ModuleA
 #   46|       1: [ReservedWord] ::
 #   46|       2: [Constant] ModuleB
-#   47|     2: [Class] Class
-#   47|       0: [ReservedWord] class
-#   47|       1: [Constant] ClassB
-#   47|       2: [Superclass] Superclass
-#   47|         0: [ReservedWord] <
-#   47|         1: [Constant] Base
-#   48|       3: [Assignment] Assignment
-#   48|         0: [Constant] FOURTY_ONE
-#   48|         1: [ReservedWord] =
-#   48|         2: [Integer] 41
-#   49|       4: [ReservedWord] end
+#   47|     2: [BodyStatement] BodyStatement
+#   47|       0: [Class] Class
+#   47|         0: [ReservedWord] class
+#   47|         1: [Constant] ClassB
+#   47|         2: [Superclass] Superclass
+#   47|           0: [ReservedWord] <
+#   47|           1: [Constant] Base
+#   48|         3: [BodyStatement] BodyStatement
+#   48|           0: [Assignment] Assignment
+#   48|             0: [Constant] FOURTY_ONE
+#   48|             1: [ReservedWord] =
+#   48|             2: [Integer] 41
+#   49|         4: [ReservedWord] end
 #   50|     3: [ReservedWord] end
 #   52|   10: [Module] Module
 #   52|     0: [ReservedWord] module
 #   52|     1: [Constant] ModuleA
-#   53|     2: [Assignment] Assignment
-#   53|       0: [Constant] FOURTY_FOUR
-#   53|       1: [ReservedWord] =
-#   53|       2: [String] String
-#   53|         0: [ReservedWord] "
-#   53|         1: [StringContent] fourty-four
-#   53|         2: [ReservedWord] "
-#   54|     3: [Class] Class
-#   54|       0: [ReservedWord] class
-#   54|       1: [ScopeResolution] ScopeResolution
-#   54|         0: [Constant] ModuleB
-#   54|         1: [ReservedWord] ::
-#   54|         2: [Constant] ClassB
-#   54|       2: [Superclass] Superclass
-#   54|         0: [ReservedWord] <
-#   54|         1: [Constant] Base
-#   55|       3: [Assignment] Assignment
-#   55|         0: [ClassVariable] @@fourty_four
-#   55|         1: [ReservedWord] =
-#   55|         2: [Constant] FOURTY_FOUR
-#   56|       4: [Assignment] Assignment
-#   56|         0: [Constant] FOURTY_FOUR
-#   56|         1: [ReservedWord] =
-#   56|         2: [Integer] 44
-#   57|       5: [Assignment] Assignment
-#   57|         0: [ClassVariable] @@fourty_four
-#   57|         1: [ReservedWord] =
-#   57|         2: [Constant] FOURTY_FOUR
-#   58|       6: [ReservedWord] end
-#   59|     4: [ReservedWord] end
+#   53|     2: [BodyStatement] BodyStatement
+#   53|       0: [Assignment] Assignment
+#   53|         0: [Constant] FOURTY_FOUR
+#   53|         1: [ReservedWord] =
+#   53|         2: [String] String
+#   53|           0: [ReservedWord] "
+#   53|           1: [StringContent] fourty-four
+#   53|           2: [ReservedWord] "
+#   54|       1: [Class] Class
+#   54|         0: [ReservedWord] class
+#   54|         1: [ScopeResolution] ScopeResolution
+#   54|           0: [Constant] ModuleB
+#   54|           1: [ReservedWord] ::
+#   54|           2: [Constant] ClassB
+#   54|         2: [Superclass] Superclass
+#   54|           0: [ReservedWord] <
+#   54|           1: [Constant] Base
+#   55|         3: [BodyStatement] BodyStatement
+#   55|           0: [Assignment] Assignment
+#   55|             0: [ClassVariable] @@fourty_four
+#   55|             1: [ReservedWord] =
+#   55|             2: [Constant] FOURTY_FOUR
+#   56|           1: [Assignment] Assignment
+#   56|             0: [Constant] FOURTY_FOUR
+#   56|             1: [ReservedWord] =
+#   56|             2: [Integer] 44
+#   57|           2: [Assignment] Assignment
+#   57|             0: [ClassVariable] @@fourty_four
+#   57|             1: [ReservedWord] =
+#   57|             2: [Constant] FOURTY_FOUR
+#   58|         4: [ReservedWord] end
+#   59|     3: [ReservedWord] end
 #   61|   11: [Module] Module
 #   61|     0: [ReservedWord] module
 #   61|     1: [Constant] Mod1
-#   62|     2: [Module] Module
-#   62|       0: [ReservedWord] module
-#   62|       1: [Constant] Mod3
-#   63|       2: [Assignment] Assignment
-#   63|         0: [Constant] FOURTY_FIVE
-#   63|         1: [ReservedWord] =
-#   63|         2: [Integer] 45
-#   64|       3: [ReservedWord] end
-#   65|     3: [Assignment] Assignment
-#   65|       0: [ClassVariable] @@fourty_five
-#   65|       1: [ReservedWord] =
-#   65|       2: [ScopeResolution] ScopeResolution
-#   65|         0: [Constant] Mod3
-#   65|         1: [ReservedWord] ::
-#   65|         2: [Constant] FOURTY_FIVE
-#   66|     4: [ReservedWord] end
+#   62|     2: [BodyStatement] BodyStatement
+#   62|       0: [Module] Module
+#   62|         0: [ReservedWord] module
+#   62|         1: [Constant] Mod3
+#   63|         2: [BodyStatement] BodyStatement
+#   63|           0: [Assignment] Assignment
+#   63|             0: [Constant] FOURTY_FIVE
+#   63|             1: [ReservedWord] =
+#   63|             2: [Integer] 45
+#   64|         3: [ReservedWord] end
+#   65|       1: [Assignment] Assignment
+#   65|         0: [ClassVariable] @@fourty_five
+#   65|         1: [ReservedWord] =
+#   65|         2: [ScopeResolution] ScopeResolution
+#   65|           0: [Constant] Mod3
+#   65|           1: [ReservedWord] ::
+#   65|           2: [Constant] FOURTY_FIVE
+#   66|     3: [ReservedWord] end
 #   68|   12: [Module] Module
 #   68|     0: [ReservedWord] module
 #   68|     1: [Constant] Mod4
-#   69|     2: [Call] Call
-#   69|       0: [Identifier] include
-#   69|       1: [ArgumentList] ArgumentList
-#   69|         0: [Constant] Mod1
-#   70|     3: [Module] Module
-#   70|       0: [ReservedWord] module
-#   70|       1: [ScopeResolution] ScopeResolution
-#   70|         0: [Constant] Mod3
-#   70|         1: [ReservedWord] ::
-#   70|         2: [Constant] Mod5
-#   71|       2: [Assignment] Assignment
-#   71|         0: [Constant] FOURTY_SIX
-#   71|         1: [ReservedWord] =
-#   71|         2: [Integer] 46
-#   72|       3: [ReservedWord] end
-#   73|     4: [Assignment] Assignment
-#   73|       0: [ClassVariable] @@fourty_six
-#   73|       1: [ReservedWord] =
-#   73|       2: [ScopeResolution] ScopeResolution
-#   73|         0: [Constant] Mod3
-#   73|         1: [ReservedWord] ::
-#   73|         2: [Constant] FOURTY_SIX
-#   74|     5: [ReservedWord] end
+#   69|     2: [BodyStatement] BodyStatement
+#   69|       0: [Call] Call
+#   69|         0: [Identifier] include
+#   69|         1: [ArgumentList] ArgumentList
+#   69|           0: [Constant] Mod1
+#   70|       1: [Module] Module
+#   70|         0: [ReservedWord] module
+#   70|         1: [ScopeResolution] ScopeResolution
+#   70|           0: [Constant] Mod3
+#   70|           1: [ReservedWord] ::
+#   70|           2: [Constant] Mod5
+#   71|         2: [BodyStatement] BodyStatement
+#   71|           0: [Assignment] Assignment
+#   71|             0: [Constant] FOURTY_SIX
+#   71|             1: [ReservedWord] =
+#   71|             2: [Integer] 46
+#   72|         3: [ReservedWord] end
+#   73|       2: [Assignment] Assignment
+#   73|         0: [ClassVariable] @@fourty_six
+#   73|         1: [ReservedWord] =
+#   73|         2: [ScopeResolution] ScopeResolution
+#   73|           0: [Constant] Mod3
+#   73|           1: [ReservedWord] ::
+#   73|           2: [Constant] FOURTY_SIX
+#   74|     3: [ReservedWord] end
 #   78|   13: [Assignment] Assignment
 #   78|     0: [Identifier] a
 #   78|     1: [ReservedWord] =
@@ -2318,10 +2361,11 @@ control/cases.rb:
 #  101|           0: [Identifier] x
 #  101|         2: [Block] Block
 #  101|           0: [ReservedWord] {
-#  101|           1: [Binary] Binary
-#  101|             0: [Identifier] x
-#  101|             1: [ReservedWord] ==
-#  101|             2: [Integer] 10
+#  101|           1: [BlockBody] BlockBody
+#  101|             0: [Binary] Binary
+#  101|               0: [Identifier] x
+#  101|               1: [ReservedWord] ==
+#  101|               2: [Integer] 10
 #  101|           2: [ReservedWord] }
 #  102|     17: [InClause] InClause
 #  102|       0: [ReservedWord] in
@@ -3582,49 +3626,52 @@ gems/Gemfile:
 #    5|         2: [ReservedWord] '
 #    5|     2: [DoBlock] DoBlock
 #    5|       0: [ReservedWord] do
-#    6|       1: [Call] Call
-#    6|         0: [Identifier] gem
-#    6|         1: [ArgumentList] ArgumentList
-#    6|           0: [String] String
-#    6|             0: [ReservedWord] '
-#    6|             1: [StringContent] my_gem
-#    6|             2: [ReservedWord] '
-#    6|           1: [ReservedWord] ,
-#    6|           2: [String] String
-#    6|             0: [ReservedWord] '
-#    6|             1: [StringContent] 1.0
-#    6|             2: [ReservedWord] '
-#    7|       2: [Call] Call
-#    7|         0: [Identifier] gem
-#    7|         1: [ArgumentList] ArgumentList
-#    7|           0: [String] String
-#    7|             0: [ReservedWord] '
-#    7|             1: [StringContent] another_gem
-#    7|             2: [ReservedWord] '
-#    7|           1: [ReservedWord] ,
-#    7|           2: [String] String
-#    7|             0: [ReservedWord] '
-#    7|             1: [StringContent] 3.1.4
-#    7|             2: [ReservedWord] '
-#    8|       3: [ReservedWord] end
+#    6|       1: [BodyStatement] BodyStatement
+#    6|         0: [Call] Call
+#    6|           0: [Identifier] gem
+#    6|           1: [ArgumentList] ArgumentList
+#    6|             0: [String] String
+#    6|               0: [ReservedWord] '
+#    6|               1: [StringContent] my_gem
+#    6|               2: [ReservedWord] '
+#    6|             1: [ReservedWord] ,
+#    6|             2: [String] String
+#    6|               0: [ReservedWord] '
+#    6|               1: [StringContent] 1.0
+#    6|               2: [ReservedWord] '
+#    7|         1: [Call] Call
+#    7|           0: [Identifier] gem
+#    7|           1: [ArgumentList] ArgumentList
+#    7|             0: [String] String
+#    7|               0: [ReservedWord] '
+#    7|               1: [StringContent] another_gem
+#    7|               2: [ReservedWord] '
+#    7|             1: [ReservedWord] ,
+#    7|             2: [String] String
+#    7|               0: [ReservedWord] '
+#    7|               1: [StringContent] 3.1.4
+#    7|               2: [ReservedWord] '
+#    8|       2: [ReservedWord] end
 gems/lib/test.rb:
 #    1| [Program] Program
 #    1|   0: [Class] Class
 #    1|     0: [ReservedWord] class
 #    1|     1: [Constant] Foo
-#    2|     2: [SingletonMethod] SingletonMethod
-#    2|       0: [ReservedWord] def
-#    2|       1: [Self] self
-#    2|       2: [ReservedWord] .
-#    2|       3: [Identifier] greet
-#    3|       4: [Call] Call
-#    3|         0: [Identifier] puts
-#    3|         1: [ArgumentList] ArgumentList
-#    3|           0: [String] String
-#    3|             0: [ReservedWord] "
-#    3|             1: [StringContent] Hello
-#    3|             2: [ReservedWord] "
-#    4|       5: [ReservedWord] end
+#    2|     2: [BodyStatement] BodyStatement
+#    2|       0: [SingletonMethod] SingletonMethod
+#    2|         0: [ReservedWord] def
+#    2|         1: [Self] self
+#    2|         2: [ReservedWord] .
+#    2|         3: [Identifier] greet
+#    3|         4: [BodyStatement] BodyStatement
+#    3|           0: [Call] Call
+#    3|             0: [Identifier] puts
+#    3|             1: [ArgumentList] ArgumentList
+#    3|               0: [String] String
+#    3|                 0: [ReservedWord] "
+#    3|                 1: [StringContent] Hello
+#    3|                 2: [ReservedWord] "
+#    4|         5: [ReservedWord] end
 #    5|     3: [ReservedWord] end
 gems/test.gemspec:
 #    1| [Program] Program
@@ -3641,93 +3688,94 @@ gems/test.gemspec:
 #    1|         0: [ReservedWord] |
 #    1|         1: [Identifier] s
 #    1|         2: [ReservedWord] |
-#    2|       2: [Assignment] Assignment
-#    2|         0: [Call] Call
-#    2|           0: [Identifier] s
-#    2|           1: [ReservedWord] .
-#    2|           2: [Identifier] name
-#    2|         1: [ReservedWord] =
-#    2|         2: [String] String
-#    2|           0: [ReservedWord] '
-#    2|           1: [StringContent] test
-#    2|           2: [ReservedWord] '
-#    3|       3: [Assignment] Assignment
-#    3|         0: [Call] Call
-#    3|           0: [Identifier] s
-#    3|           1: [ReservedWord] .
-#    3|           2: [Identifier] version
-#    3|         1: [ReservedWord] =
-#    3|         2: [String] String
-#    3|           0: [ReservedWord] '
-#    3|           1: [StringContent] 0.0.0
-#    3|           2: [ReservedWord] '
-#    4|       4: [Assignment] Assignment
-#    4|         0: [Call] Call
-#    4|           0: [Identifier] s
-#    4|           1: [ReservedWord] .
-#    4|           2: [Identifier] summary
-#    4|         1: [ReservedWord] =
-#    4|         2: [String] String
-#    4|           0: [ReservedWord] "
-#    4|           1: [StringContent] foo!
-#    4|           2: [ReservedWord] "
-#    5|       5: [Assignment] Assignment
-#    5|         0: [Call] Call
-#    5|           0: [Identifier] s
-#    5|           1: [ReservedWord] .
-#    5|           2: [Identifier] description
-#    5|         1: [ReservedWord] =
-#    5|         2: [String] String
-#    5|           0: [ReservedWord] "
-#    5|           1: [StringContent] A test
-#    5|           2: [ReservedWord] "
-#    6|       6: [Assignment] Assignment
-#    6|         0: [Call] Call
-#    6|           0: [Identifier] s
-#    6|           1: [ReservedWord] .
-#    6|           2: [Identifier] authors
-#    6|         1: [ReservedWord] =
-#    6|         2: [Array] Array
-#    6|           0: [ReservedWord] [
-#    6|           1: [String] String
-#    6|             0: [ReservedWord] "
-#    6|             1: [StringContent] Mona Lisa
-#    6|             2: [ReservedWord] "
-#    6|           2: [ReservedWord] ]
-#    7|       7: [Assignment] Assignment
-#    7|         0: [Call] Call
-#    7|           0: [Identifier] s
-#    7|           1: [ReservedWord] .
-#    7|           2: [Identifier] email
-#    7|         1: [ReservedWord] =
-#    7|         2: [String] String
-#    7|           0: [ReservedWord] '
-#    7|           1: [StringContent] mona@example.com
-#    7|           2: [ReservedWord] '
-#    8|       8: [Assignment] Assignment
-#    8|         0: [Call] Call
-#    8|           0: [Identifier] s
-#    8|           1: [ReservedWord] .
-#    8|           2: [Identifier] files
-#    8|         1: [ReservedWord] =
-#    8|         2: [Array] Array
-#    8|           0: [ReservedWord] [
-#    8|           1: [String] String
-#    8|             0: [ReservedWord] "
-#    8|             1: [StringContent] lib/test.rb
-#    8|             2: [ReservedWord] "
-#    8|           2: [ReservedWord] ]
-#    9|       9: [Assignment] Assignment
-#    9|         0: [Call] Call
-#    9|           0: [Identifier] s
-#    9|           1: [ReservedWord] .
-#    9|           2: [Identifier] homepage
-#    9|         1: [ReservedWord] =
-#    9|         2: [String] String
-#    9|           0: [ReservedWord] '
-#    9|           1: [StringContent] https://github.com/github/codeql-ruby
-#    9|           2: [ReservedWord] '
-#   10|       10: [ReservedWord] end
+#    2|       2: [BodyStatement] BodyStatement
+#    2|         0: [Assignment] Assignment
+#    2|           0: [Call] Call
+#    2|             0: [Identifier] s
+#    2|             1: [ReservedWord] .
+#    2|             2: [Identifier] name
+#    2|           1: [ReservedWord] =
+#    2|           2: [String] String
+#    2|             0: [ReservedWord] '
+#    2|             1: [StringContent] test
+#    2|             2: [ReservedWord] '
+#    3|         1: [Assignment] Assignment
+#    3|           0: [Call] Call
+#    3|             0: [Identifier] s
+#    3|             1: [ReservedWord] .
+#    3|             2: [Identifier] version
+#    3|           1: [ReservedWord] =
+#    3|           2: [String] String
+#    3|             0: [ReservedWord] '
+#    3|             1: [StringContent] 0.0.0
+#    3|             2: [ReservedWord] '
+#    4|         2: [Assignment] Assignment
+#    4|           0: [Call] Call
+#    4|             0: [Identifier] s
+#    4|             1: [ReservedWord] .
+#    4|             2: [Identifier] summary
+#    4|           1: [ReservedWord] =
+#    4|           2: [String] String
+#    4|             0: [ReservedWord] "
+#    4|             1: [StringContent] foo!
+#    4|             2: [ReservedWord] "
+#    5|         3: [Assignment] Assignment
+#    5|           0: [Call] Call
+#    5|             0: [Identifier] s
+#    5|             1: [ReservedWord] .
+#    5|             2: [Identifier] description
+#    5|           1: [ReservedWord] =
+#    5|           2: [String] String
+#    5|             0: [ReservedWord] "
+#    5|             1: [StringContent] A test
+#    5|             2: [ReservedWord] "
+#    6|         4: [Assignment] Assignment
+#    6|           0: [Call] Call
+#    6|             0: [Identifier] s
+#    6|             1: [ReservedWord] .
+#    6|             2: [Identifier] authors
+#    6|           1: [ReservedWord] =
+#    6|           2: [Array] Array
+#    6|             0: [ReservedWord] [
+#    6|             1: [String] String
+#    6|               0: [ReservedWord] "
+#    6|               1: [StringContent] Mona Lisa
+#    6|               2: [ReservedWord] "
+#    6|             2: [ReservedWord] ]
+#    7|         5: [Assignment] Assignment
+#    7|           0: [Call] Call
+#    7|             0: [Identifier] s
+#    7|             1: [ReservedWord] .
+#    7|             2: [Identifier] email
+#    7|           1: [ReservedWord] =
+#    7|           2: [String] String
+#    7|             0: [ReservedWord] '
+#    7|             1: [StringContent] mona@example.com
+#    7|             2: [ReservedWord] '
+#    8|         6: [Assignment] Assignment
+#    8|           0: [Call] Call
+#    8|             0: [Identifier] s
+#    8|             1: [ReservedWord] .
+#    8|             2: [Identifier] files
+#    8|           1: [ReservedWord] =
+#    8|           2: [Array] Array
+#    8|             0: [ReservedWord] [
+#    8|             1: [String] String
+#    8|               0: [ReservedWord] "
+#    8|               1: [StringContent] lib/test.rb
+#    8|               2: [ReservedWord] "
+#    8|             2: [ReservedWord] ]
+#    9|         7: [Assignment] Assignment
+#    9|           0: [Call] Call
+#    9|             0: [Identifier] s
+#    9|             1: [ReservedWord] .
+#    9|             2: [Identifier] homepage
+#    9|           1: [ReservedWord] =
+#    9|           2: [String] String
+#    9|             0: [ReservedWord] '
+#    9|             1: [StringContent] https://github.com/github/codeql-ruby
+#    9|             2: [ReservedWord] '
+#   10|       3: [ReservedWord] end
 literals/literals.rb:
 #    1| [Program] Program
 #    2|   0: [Nil] nil
@@ -4444,10 +4492,11 @@ literals/literals.rb:
 #  174|   127: [Method] Method
 #  174|     0: [ReservedWord] def
 #  174|     1: [Identifier] m
-#  175|     2: [Assignment] Assignment
-#  175|       0: [Identifier] query
-#  175|       1: [ReservedWord] =
-#  175|       2: [HeredocBeginning] <<-BLA
+#  175|     2: [BodyStatement] BodyStatement
+#  175|       0: [Assignment] Assignment
+#  175|         0: [Identifier] query
+#  175|         1: [ReservedWord] =
+#  175|         2: [HeredocBeginning] <<-BLA
 #  178|     3: [ReservedWord] end
 #  180|   128: [Assignment] Assignment
 #  180|     0: [Identifier] query
@@ -4740,46 +4789,49 @@ modules/classes.rb:
 #   20|   5: [Class] Class
 #   20|     0: [ReservedWord] class
 #   20|     1: [Constant] Wibble
-#   21|     2: [Method] Method
-#   21|       0: [ReservedWord] def
-#   21|       1: [Identifier] method_a
-#   22|       2: [Call] Call
-#   22|         0: [Identifier] puts
-#   22|         1: [ArgumentList] ArgumentList
-#   22|           0: [String] String
-#   22|             0: [ReservedWord] '
-#   22|             1: [StringContent] a
-#   22|             2: [ReservedWord] '
-#   23|       3: [ReservedWord] end
-#   25|     3: [Method] Method
-#   25|       0: [ReservedWord] def
-#   25|       1: [Identifier] method_b
-#   26|       2: [Call] Call
-#   26|         0: [Identifier] puts
-#   26|         1: [ArgumentList] ArgumentList
-#   26|           0: [String] String
-#   26|             0: [ReservedWord] '
-#   26|             1: [StringContent] b
-#   26|             2: [ReservedWord] '
-#   27|       3: [ReservedWord] end
-#   29|     4: [Call] Call
-#   29|       0: [Identifier] some_method_call
-#   29|       1: [ArgumentList] ArgumentList
-#   29|         0: [ReservedWord] (
-#   29|         1: [ReservedWord] )
-#   30|     5: [Assignment] Assignment
-#   30|       0: [GlobalVariable] $global_var
-#   30|       1: [ReservedWord] =
-#   30|       2: [Integer] 123
-#   32|     6: [Class] Class
-#   32|       0: [ReservedWord] class
-#   32|       1: [Constant] ClassInWibble
-#   33|       2: [ReservedWord] end
-#   35|     7: [Module] Module
-#   35|       0: [ReservedWord] module
-#   35|       1: [Constant] ModuleInWibble
-#   36|       2: [ReservedWord] end
-#   37|     8: [ReservedWord] end
+#   21|     2: [BodyStatement] BodyStatement
+#   21|       0: [Method] Method
+#   21|         0: [ReservedWord] def
+#   21|         1: [Identifier] method_a
+#   22|         2: [BodyStatement] BodyStatement
+#   22|           0: [Call] Call
+#   22|             0: [Identifier] puts
+#   22|             1: [ArgumentList] ArgumentList
+#   22|               0: [String] String
+#   22|                 0: [ReservedWord] '
+#   22|                 1: [StringContent] a
+#   22|                 2: [ReservedWord] '
+#   23|         3: [ReservedWord] end
+#   25|       1: [Method] Method
+#   25|         0: [ReservedWord] def
+#   25|         1: [Identifier] method_b
+#   26|         2: [BodyStatement] BodyStatement
+#   26|           0: [Call] Call
+#   26|             0: [Identifier] puts
+#   26|             1: [ArgumentList] ArgumentList
+#   26|               0: [String] String
+#   26|                 0: [ReservedWord] '
+#   26|                 1: [StringContent] b
+#   26|                 2: [ReservedWord] '
+#   27|         3: [ReservedWord] end
+#   29|       2: [Call] Call
+#   29|         0: [Identifier] some_method_call
+#   29|         1: [ArgumentList] ArgumentList
+#   29|           0: [ReservedWord] (
+#   29|           1: [ReservedWord] )
+#   30|       3: [Assignment] Assignment
+#   30|         0: [GlobalVariable] $global_var
+#   30|         1: [ReservedWord] =
+#   30|         2: [Integer] 123
+#   32|       4: [Class] Class
+#   32|         0: [ReservedWord] class
+#   32|         1: [Constant] ClassInWibble
+#   33|         2: [ReservedWord] end
+#   35|       5: [Module] Module
+#   35|         0: [ReservedWord] module
+#   35|         1: [Constant] ModuleInWibble
+#   36|         2: [ReservedWord] end
+#   37|     3: [ReservedWord] end
 #   40|   6: [Assignment] Assignment
 #   40|     0: [Identifier] x
 #   40|     1: [ReservedWord] =
@@ -4791,31 +4843,34 @@ modules/classes.rb:
 #   41|     0: [ReservedWord] class
 #   41|     1: [ReservedWord] <<
 #   41|     2: [Identifier] x
-#   42|     3: [Method] Method
-#   42|       0: [ReservedWord] def
-#   42|       1: [Identifier] length
-#   43|       2: [Binary] Binary
-#   43|         0: [Integer] 100
-#   43|         1: [ReservedWord] *
-#   43|         2: [Super] super
-#   44|       3: [ReservedWord] end
-#   46|     4: [Method] Method
-#   46|       0: [ReservedWord] def
-#   46|       1: [Identifier] wibble
-#   47|       2: [Call] Call
-#   47|         0: [Identifier] puts
-#   47|         1: [ArgumentList] ArgumentList
-#   47|           0: [String] String
-#   47|             0: [ReservedWord] '
-#   47|             1: [StringContent] wibble
-#   47|             2: [ReservedWord] '
-#   48|       3: [ReservedWord] end
-#   50|     5: [Identifier] another_method_call
-#   51|     6: [Assignment] Assignment
-#   51|       0: [GlobalVariable] $global_var2
-#   51|       1: [ReservedWord] =
-#   51|       2: [Integer] 456
-#   52|     7: [ReservedWord] end
+#   42|     3: [BodyStatement] BodyStatement
+#   42|       0: [Method] Method
+#   42|         0: [ReservedWord] def
+#   42|         1: [Identifier] length
+#   43|         2: [BodyStatement] BodyStatement
+#   43|           0: [Binary] Binary
+#   43|             0: [Integer] 100
+#   43|             1: [ReservedWord] *
+#   43|             2: [Super] super
+#   44|         3: [ReservedWord] end
+#   46|       1: [Method] Method
+#   46|         0: [ReservedWord] def
+#   46|         1: [Identifier] wibble
+#   47|         2: [BodyStatement] BodyStatement
+#   47|           0: [Call] Call
+#   47|             0: [Identifier] puts
+#   47|             1: [ArgumentList] ArgumentList
+#   47|               0: [String] String
+#   47|                 0: [ReservedWord] '
+#   47|                 1: [StringContent] wibble
+#   47|                 2: [ReservedWord] '
+#   48|         3: [ReservedWord] end
+#   50|       2: [Identifier] another_method_call
+#   51|       3: [Assignment] Assignment
+#   51|         0: [GlobalVariable] $global_var2
+#   51|         1: [ReservedWord] =
+#   51|         2: [Integer] 456
+#   52|     4: [ReservedWord] end
 #   55|   8: [Class] Class
 #   55|     0: [ReservedWord] class
 #   55|     1: [ScopeResolution] ScopeResolution
@@ -4838,121 +4893,126 @@ modules/modules.rb:
 #    4|   1: [Module] Module
 #    4|     0: [ReservedWord] module
 #    4|     1: [Constant] Foo
-#    5|     2: [Module] Module
-#    5|       0: [ReservedWord] module
-#    5|       1: [Constant] Bar
-#    6|       2: [Class] Class
-#    6|         0: [ReservedWord] class
-#    6|         1: [Constant] ClassInFooBar
-#    7|         2: [ReservedWord] end
-#    9|       3: [Method] Method
-#    9|         0: [ReservedWord] def
-#    9|         1: [Identifier] method_in_foo_bar
-#   10|         2: [ReservedWord] end
-#   12|       4: [Call] Call
-#   12|         0: [Identifier] puts
-#   12|         1: [ArgumentList] ArgumentList
-#   12|           0: [String] String
-#   12|             0: [ReservedWord] '
-#   12|             1: [StringContent] module Foo::Bar
-#   12|             2: [ReservedWord] '
-#   13|       5: [Assignment] Assignment
-#   13|         0: [GlobalVariable] $global_var
-#   13|         1: [ReservedWord] =
-#   13|         2: [Integer] 0
-#   14|       6: [ReservedWord] end
-#   16|     3: [Method] Method
-#   16|       0: [ReservedWord] def
-#   16|       1: [Identifier] method_in_foo
-#   17|       2: [ReservedWord] end
-#   19|     4: [Class] Class
-#   19|       0: [ReservedWord] class
-#   19|       1: [Constant] ClassInFoo
-#   20|       2: [ReservedWord] end
-#   22|     5: [Call] Call
-#   22|       0: [Identifier] puts
-#   22|       1: [ArgumentList] ArgumentList
-#   22|         0: [String] String
-#   22|           0: [ReservedWord] '
-#   22|           1: [StringContent] module Foo
-#   22|           2: [ReservedWord] '
-#   23|     6: [Assignment] Assignment
-#   23|       0: [GlobalVariable] $global_var
-#   23|       1: [ReservedWord] =
-#   23|       2: [Integer] 1
-#   24|     7: [ReservedWord] end
+#    5|     2: [BodyStatement] BodyStatement
+#    5|       0: [Module] Module
+#    5|         0: [ReservedWord] module
+#    5|         1: [Constant] Bar
+#    6|         2: [BodyStatement] BodyStatement
+#    6|           0: [Class] Class
+#    6|             0: [ReservedWord] class
+#    6|             1: [Constant] ClassInFooBar
+#    7|             2: [ReservedWord] end
+#    9|           1: [Method] Method
+#    9|             0: [ReservedWord] def
+#    9|             1: [Identifier] method_in_foo_bar
+#   10|             2: [ReservedWord] end
+#   12|           2: [Call] Call
+#   12|             0: [Identifier] puts
+#   12|             1: [ArgumentList] ArgumentList
+#   12|               0: [String] String
+#   12|                 0: [ReservedWord] '
+#   12|                 1: [StringContent] module Foo::Bar
+#   12|                 2: [ReservedWord] '
+#   13|           3: [Assignment] Assignment
+#   13|             0: [GlobalVariable] $global_var
+#   13|             1: [ReservedWord] =
+#   13|             2: [Integer] 0
+#   14|         3: [ReservedWord] end
+#   16|       1: [Method] Method
+#   16|         0: [ReservedWord] def
+#   16|         1: [Identifier] method_in_foo
+#   17|         2: [ReservedWord] end
+#   19|       2: [Class] Class
+#   19|         0: [ReservedWord] class
+#   19|         1: [Constant] ClassInFoo
+#   20|         2: [ReservedWord] end
+#   22|       3: [Call] Call
+#   22|         0: [Identifier] puts
+#   22|         1: [ArgumentList] ArgumentList
+#   22|           0: [String] String
+#   22|             0: [ReservedWord] '
+#   22|             1: [StringContent] module Foo
+#   22|             2: [ReservedWord] '
+#   23|       4: [Assignment] Assignment
+#   23|         0: [GlobalVariable] $global_var
+#   23|         1: [ReservedWord] =
+#   23|         2: [Integer] 1
+#   24|     3: [ReservedWord] end
 #   26|   2: [Module] Module
 #   26|     0: [ReservedWord] module
 #   26|     1: [Constant] Foo
-#   27|     2: [Method] Method
-#   27|       0: [ReservedWord] def
-#   27|       1: [Identifier] method_in_another_definition_of_foo
-#   28|       2: [ReservedWord] end
-#   30|     3: [Class] Class
-#   30|       0: [ReservedWord] class
-#   30|       1: [Constant] ClassInAnotherDefinitionOfFoo
-#   31|       2: [ReservedWord] end
-#   33|     4: [Call] Call
-#   33|       0: [Identifier] puts
-#   33|       1: [ArgumentList] ArgumentList
-#   33|         0: [String] String
-#   33|           0: [ReservedWord] '
-#   33|           1: [StringContent] module Foo again
-#   33|           2: [ReservedWord] '
-#   34|     5: [Assignment] Assignment
-#   34|       0: [GlobalVariable] $global_var
-#   34|       1: [ReservedWord] =
-#   34|       2: [Integer] 2
-#   35|     6: [ReservedWord] end
+#   27|     2: [BodyStatement] BodyStatement
+#   27|       0: [Method] Method
+#   27|         0: [ReservedWord] def
+#   27|         1: [Identifier] method_in_another_definition_of_foo
+#   28|         2: [ReservedWord] end
+#   30|       1: [Class] Class
+#   30|         0: [ReservedWord] class
+#   30|         1: [Constant] ClassInAnotherDefinitionOfFoo
+#   31|         2: [ReservedWord] end
+#   33|       2: [Call] Call
+#   33|         0: [Identifier] puts
+#   33|         1: [ArgumentList] ArgumentList
+#   33|           0: [String] String
+#   33|             0: [ReservedWord] '
+#   33|             1: [StringContent] module Foo again
+#   33|             2: [ReservedWord] '
+#   34|       3: [Assignment] Assignment
+#   34|         0: [GlobalVariable] $global_var
+#   34|         1: [ReservedWord] =
+#   34|         2: [Integer] 2
+#   35|     3: [ReservedWord] end
 #   37|   3: [Module] Module
 #   37|     0: [ReservedWord] module
 #   37|     1: [Constant] Bar
-#   38|     2: [Method] Method
-#   38|       0: [ReservedWord] def
-#   38|       1: [Identifier] method_a
-#   39|       2: [ReservedWord] end
-#   41|     3: [Method] Method
-#   41|       0: [ReservedWord] def
-#   41|       1: [Identifier] method_b
-#   42|       2: [ReservedWord] end
-#   44|     4: [Call] Call
-#   44|       0: [Identifier] puts
-#   44|       1: [ArgumentList] ArgumentList
-#   44|         0: [String] String
-#   44|           0: [ReservedWord] '
-#   44|           1: [StringContent] module Bar
-#   44|           2: [ReservedWord] '
-#   45|     5: [Assignment] Assignment
-#   45|       0: [GlobalVariable] $global_var
-#   45|       1: [ReservedWord] =
-#   45|       2: [Integer] 3
-#   46|     6: [ReservedWord] end
+#   38|     2: [BodyStatement] BodyStatement
+#   38|       0: [Method] Method
+#   38|         0: [ReservedWord] def
+#   38|         1: [Identifier] method_a
+#   39|         2: [ReservedWord] end
+#   41|       1: [Method] Method
+#   41|         0: [ReservedWord] def
+#   41|         1: [Identifier] method_b
+#   42|         2: [ReservedWord] end
+#   44|       2: [Call] Call
+#   44|         0: [Identifier] puts
+#   44|         1: [ArgumentList] ArgumentList
+#   44|           0: [String] String
+#   44|             0: [ReservedWord] '
+#   44|             1: [StringContent] module Bar
+#   44|             2: [ReservedWord] '
+#   45|       3: [Assignment] Assignment
+#   45|         0: [GlobalVariable] $global_var
+#   45|         1: [ReservedWord] =
+#   45|         2: [Integer] 3
+#   46|     3: [ReservedWord] end
 #   48|   4: [Module] Module
 #   48|     0: [ReservedWord] module
 #   48|     1: [ScopeResolution] ScopeResolution
 #   48|       0: [Constant] Foo
 #   48|       1: [ReservedWord] ::
 #   48|       2: [Constant] Bar
-#   49|     2: [Class] Class
-#   49|       0: [ReservedWord] class
-#   49|       1: [Constant] ClassInAnotherDefinitionOfFooBar
-#   50|       2: [ReservedWord] end
-#   52|     3: [Method] Method
-#   52|       0: [ReservedWord] def
-#   52|       1: [Identifier] method_in_another_definition_of_foo_bar
-#   53|       2: [ReservedWord] end
-#   55|     4: [Call] Call
-#   55|       0: [Identifier] puts
-#   55|       1: [ArgumentList] ArgumentList
-#   55|         0: [String] String
-#   55|           0: [ReservedWord] '
-#   55|           1: [StringContent] module Foo::Bar again
-#   55|           2: [ReservedWord] '
-#   56|     5: [Assignment] Assignment
-#   56|       0: [GlobalVariable] $global_var
-#   56|       1: [ReservedWord] =
-#   56|       2: [Integer] 4
-#   57|     6: [ReservedWord] end
+#   49|     2: [BodyStatement] BodyStatement
+#   49|       0: [Class] Class
+#   49|         0: [ReservedWord] class
+#   49|         1: [Constant] ClassInAnotherDefinitionOfFooBar
+#   50|         2: [ReservedWord] end
+#   52|       1: [Method] Method
+#   52|         0: [ReservedWord] def
+#   52|         1: [Identifier] method_in_another_definition_of_foo_bar
+#   53|         2: [ReservedWord] end
+#   55|       2: [Call] Call
+#   55|         0: [Identifier] puts
+#   55|         1: [ArgumentList] ArgumentList
+#   55|           0: [String] String
+#   55|             0: [ReservedWord] '
+#   55|             1: [StringContent] module Foo::Bar again
+#   55|             2: [ReservedWord] '
+#   56|       3: [Assignment] Assignment
+#   56|         0: [GlobalVariable] $global_var
+#   56|         1: [ReservedWord] =
+#   56|         2: [Integer] 4
+#   57|     3: [ReservedWord] end
 #   60|   5: [Module] Module
 #   60|     0: [ReservedWord] module
 #   60|     1: [ScopeResolution] ScopeResolution
@@ -4962,126 +5022,136 @@ modules/modules.rb:
 #   63|   6: [Module] Module
 #   63|     0: [ReservedWord] module
 #   63|     1: [Constant] Test
-#   65|     2: [Module] Module
-#   65|       0: [ReservedWord] module
-#   65|       1: [Constant] Foo1
-#   66|       2: [Class] Class
-#   66|         0: [ReservedWord] class
-#   66|         1: [ScopeResolution] ScopeResolution
-#   66|           0: [Constant] Foo1
-#   66|           1: [ReservedWord] ::
-#   66|           2: [Constant] Bar
-#   67|         2: [ReservedWord] end
-#   68|       3: [ReservedWord] end
-#   70|     3: [Module] Module
-#   70|       0: [ReservedWord] module
-#   70|       1: [Constant] Foo2
-#   71|       2: [Module] Module
-#   71|         0: [ReservedWord] module
-#   71|         1: [Constant] Foo2
-#   71|         2: [ReservedWord] end
-#   72|       3: [Class] Class
-#   72|         0: [ReservedWord] class
-#   72|         1: [ScopeResolution] ScopeResolution
-#   72|           0: [Constant] Foo2
-#   72|           1: [ReservedWord] ::
-#   72|           2: [Constant] Bar
-#   73|         2: [ReservedWord] end
-#   74|       4: [ReservedWord] end
-#   76|     4: [Module] Module
-#   76|       0: [ReservedWord] module
-#   76|       1: [Constant] Foo3
-#   77|       2: [Assignment] Assignment
-#   77|         0: [Constant] Foo3
-#   77|         1: [ReservedWord] =
-#   77|         2: [Constant] Object
-#   78|       3: [Class] Class
-#   78|         0: [ReservedWord] class
-#   78|         1: [ScopeResolution] ScopeResolution
-#   78|           0: [Constant] Foo3
-#   78|           1: [ReservedWord] ::
-#   78|           2: [Constant] Bar
-#   79|         2: [ReservedWord] end
-#   80|       4: [ReservedWord] end
-#   81|     5: [ReservedWord] end
+#   65|     2: [BodyStatement] BodyStatement
+#   65|       0: [Module] Module
+#   65|         0: [ReservedWord] module
+#   65|         1: [Constant] Foo1
+#   66|         2: [BodyStatement] BodyStatement
+#   66|           0: [Class] Class
+#   66|             0: [ReservedWord] class
+#   66|             1: [ScopeResolution] ScopeResolution
+#   66|               0: [Constant] Foo1
+#   66|               1: [ReservedWord] ::
+#   66|               2: [Constant] Bar
+#   67|             2: [ReservedWord] end
+#   68|         3: [ReservedWord] end
+#   70|       1: [Module] Module
+#   70|         0: [ReservedWord] module
+#   70|         1: [Constant] Foo2
+#   71|         2: [BodyStatement] BodyStatement
+#   71|           0: [Module] Module
+#   71|             0: [ReservedWord] module
+#   71|             1: [Constant] Foo2
+#   71|             2: [ReservedWord] end
+#   72|           1: [Class] Class
+#   72|             0: [ReservedWord] class
+#   72|             1: [ScopeResolution] ScopeResolution
+#   72|               0: [Constant] Foo2
+#   72|               1: [ReservedWord] ::
+#   72|               2: [Constant] Bar
+#   73|             2: [ReservedWord] end
+#   74|         3: [ReservedWord] end
+#   76|       2: [Module] Module
+#   76|         0: [ReservedWord] module
+#   76|         1: [Constant] Foo3
+#   77|         2: [BodyStatement] BodyStatement
+#   77|           0: [Assignment] Assignment
+#   77|             0: [Constant] Foo3
+#   77|             1: [ReservedWord] =
+#   77|             2: [Constant] Object
+#   78|           1: [Class] Class
+#   78|             0: [ReservedWord] class
+#   78|             1: [ScopeResolution] ScopeResolution
+#   78|               0: [Constant] Foo3
+#   78|               1: [ReservedWord] ::
+#   78|               2: [Constant] Bar
+#   79|             2: [ReservedWord] end
+#   80|         3: [ReservedWord] end
+#   81|     3: [ReservedWord] end
 #   83|   7: [Module] Module
 #   83|     0: [ReservedWord] module
 #   83|     1: [Constant] Other
-#   84|     2: [Module] Module
-#   84|       0: [ReservedWord] module
-#   84|       1: [Constant] Foo1
-#   85|       2: [ReservedWord] end
+#   84|     2: [BodyStatement] BodyStatement
+#   84|       0: [Module] Module
+#   84|         0: [ReservedWord] module
+#   84|         1: [Constant] Foo1
+#   85|         2: [ReservedWord] end
 #   86|     3: [ReservedWord] end
 #   88|   8: [Module] Module
 #   88|     0: [ReservedWord] module
 #   88|     1: [Constant] IncludeTest
-#   89|     2: [Call] Call
-#   89|       0: [Identifier] include
-#   89|       1: [ArgumentList] ArgumentList
-#   89|         0: [ScopeResolution] ScopeResolution
-#   89|           0: [ReservedWord] ::
-#   89|           1: [Constant] Test
-#   90|     3: [Call] Call
-#   90|       0: [Constant] Object
-#   90|       1: [ReservedWord] .
-#   90|       2: [Identifier] module_eval
-#   90|       3: [Block] Block
-#   90|         0: [ReservedWord] {
-#   90|         1: [Call] Call
-#   90|           0: [Identifier] prepend
-#   90|           1: [ArgumentList] ArgumentList
-#   90|             0: [Constant] Other
-#   90|         2: [ReservedWord] }
-#   91|     4: [Module] Module
-#   91|       0: [ReservedWord] module
-#   91|       1: [ScopeResolution] ScopeResolution
-#   91|         0: [Constant] Foo1
-#   91|         1: [ReservedWord] ::
-#   91|         2: [Constant] Y
-#   92|       2: [ReservedWord] end
-#   93|     5: [ReservedWord] end
+#   89|     2: [BodyStatement] BodyStatement
+#   89|       0: [Call] Call
+#   89|         0: [Identifier] include
+#   89|         1: [ArgumentList] ArgumentList
+#   89|           0: [ScopeResolution] ScopeResolution
+#   89|             0: [ReservedWord] ::
+#   89|             1: [Constant] Test
+#   90|       1: [Call] Call
+#   90|         0: [Constant] Object
+#   90|         1: [ReservedWord] .
+#   90|         2: [Identifier] module_eval
+#   90|         3: [Block] Block
+#   90|           0: [ReservedWord] {
+#   90|           1: [BlockBody] BlockBody
+#   90|             0: [Call] Call
+#   90|               0: [Identifier] prepend
+#   90|               1: [ArgumentList] ArgumentList
+#   90|                 0: [Constant] Other
+#   90|           2: [ReservedWord] }
+#   91|       2: [Module] Module
+#   91|         0: [ReservedWord] module
+#   91|         1: [ScopeResolution] ScopeResolution
+#   91|           0: [Constant] Foo1
+#   91|           1: [ReservedWord] ::
+#   91|           2: [Constant] Y
+#   92|         2: [ReservedWord] end
+#   93|     3: [ReservedWord] end
 #   95|   9: [Module] Module
 #   95|     0: [ReservedWord] module
 #   95|     1: [Constant] IncludeTest2
-#   96|     2: [Call] Call
-#   96|       0: [Identifier] include
-#   96|       1: [ArgumentList] ArgumentList
-#   96|         0: [Constant] Test
-#   97|     3: [Module] Module
-#   97|       0: [ReservedWord] module
-#   97|       1: [ScopeResolution] ScopeResolution
-#   97|         0: [Constant] Foo1
-#   97|         1: [ReservedWord] ::
-#   97|         2: [Constant] Z
-#   98|       2: [ReservedWord] end
-#   99|     4: [ReservedWord] end
+#   96|     2: [BodyStatement] BodyStatement
+#   96|       0: [Call] Call
+#   96|         0: [Identifier] include
+#   96|         1: [ArgumentList] ArgumentList
+#   96|           0: [Constant] Test
+#   97|       1: [Module] Module
+#   97|         0: [ReservedWord] module
+#   97|         1: [ScopeResolution] ScopeResolution
+#   97|           0: [Constant] Foo1
+#   97|           1: [ReservedWord] ::
+#   97|           2: [Constant] Z
+#   98|         2: [ReservedWord] end
+#   99|     3: [ReservedWord] end
 #  101|   10: [Module] Module
 #  101|     0: [ReservedWord] module
 #  101|     1: [Constant] PrependTest
-#  102|     2: [Call] Call
-#  102|       0: [Identifier] prepend
-#  102|       1: [ArgumentList] ArgumentList
-#  102|         0: [ScopeResolution] ScopeResolution
-#  102|           0: [ReservedWord] ::
-#  102|           1: [Constant] Test
-#  103|     3: [Module] Module
-#  103|       0: [ReservedWord] module
-#  103|       1: [ScopeResolution] ScopeResolution
-#  103|         0: [Constant] Foo2
-#  103|         1: [ReservedWord] ::
-#  103|         2: [Constant] Y
-#  104|       2: [ReservedWord] end
-#  105|     4: [ReservedWord] end
+#  102|     2: [BodyStatement] BodyStatement
+#  102|       0: [Call] Call
+#  102|         0: [Identifier] prepend
+#  102|         1: [ArgumentList] ArgumentList
+#  102|           0: [ScopeResolution] ScopeResolution
+#  102|             0: [ReservedWord] ::
+#  102|             1: [Constant] Test
+#  103|       1: [Module] Module
+#  103|         0: [ReservedWord] module
+#  103|         1: [ScopeResolution] ScopeResolution
+#  103|           0: [Constant] Foo2
+#  103|           1: [ReservedWord] ::
+#  103|           2: [Constant] Y
+#  104|         2: [ReservedWord] end
+#  105|     3: [ReservedWord] end
 #  107|   11: [Module] Module
 #  107|     0: [ReservedWord] module
 #  107|     1: [Constant] MM
-#  108|     2: [Module] Module
-#  108|       0: [ReservedWord] module
-#  108|       1: [ScopeResolution] ScopeResolution
-#  108|         0: [Constant] MM
-#  108|         1: [ReservedWord] ::
-#  108|         2: [Constant] MM
-#  109|       2: [ReservedWord] end
+#  108|     2: [BodyStatement] BodyStatement
+#  108|       0: [Module] Module
+#  108|         0: [ReservedWord] module
+#  108|         1: [ScopeResolution] ScopeResolution
+#  108|           0: [Constant] MM
+#  108|           1: [ReservedWord] ::
+#  108|           2: [Constant] MM
+#  109|         2: [ReservedWord] end
 #  110|     3: [ReservedWord] end
 #  112|   12: [Class] Class
 #  112|     0: [ReservedWord] class
@@ -5090,13 +5160,14 @@ modules/modules.rb:
 #  115|   13: [Module] Module
 #  115|     0: [ReservedWord] module
 #  115|     1: [Constant] XX
-#  116|     2: [Class] Class
-#  116|       0: [ReservedWord] class
-#  116|       1: [Constant] YY
-#  116|       2: [Superclass] Superclass
-#  116|         0: [ReservedWord] <
+#  116|     2: [BodyStatement] BodyStatement
+#  116|       0: [Class] Class
+#  116|         0: [ReservedWord] class
 #  116|         1: [Constant] YY
-#  117|       3: [ReservedWord] end
+#  116|         2: [Superclass] Superclass
+#  116|           0: [ReservedWord] <
+#  116|           1: [Constant] YY
+#  117|         3: [ReservedWord] end
 #  118|     3: [ReservedWord] end
 #  120|   14: [Module] Module
 #  120|     0: [ReservedWord] module
@@ -5239,37 +5310,38 @@ operations/operations.rb:
 #   29|     0: [ReservedWord] def
 #   29|     1: [Identifier] foo
 #   29|     2: [ReservedWord] ;
-#   29|     3: [Return] Return
-#   29|       0: [ReservedWord] return
-#   29|       1: [ArgumentList] ArgumentList
-#   29|         0: [Integer] 1
-#   29|         1: [ReservedWord] ,
-#   29|         2: [SplatArgument] SplatArgument
-#   29|           0: [ReservedWord] *
-#   29|           1: [Array] Array
-#   29|             0: [ReservedWord] [
-#   29|             1: [Integer] 2
-#   29|             2: [ReservedWord] ]
-#   29|         3: [ReservedWord] ,
-#   29|         4: [Pair] Pair
-#   29|           0: [HashKeySymbol] a
-#   29|           1: [ReservedWord] :
-#   29|           2: [Integer] 3
-#   29|         5: [ReservedWord] ,
-#   29|         6: [HashSplatArgument] HashSplatArgument
-#   29|           0: [ReservedWord] **
-#   29|           1: [Hash] Hash
-#   29|             0: [ReservedWord] {
-#   29|             1: [Pair] Pair
-#   29|               0: [HashKeySymbol] b
-#   29|               1: [ReservedWord] :
-#   29|               2: [Integer] 4
-#   29|             2: [ReservedWord] ,
-#   29|             3: [Pair] Pair
-#   29|               0: [HashKeySymbol] c
-#   29|               1: [ReservedWord] :
-#   29|               2: [Integer] 5
-#   29|             4: [ReservedWord] }
+#   29|     3: [BodyStatement] BodyStatement
+#   29|       0: [Return] Return
+#   29|         0: [ReservedWord] return
+#   29|         1: [ArgumentList] ArgumentList
+#   29|           0: [Integer] 1
+#   29|           1: [ReservedWord] ,
+#   29|           2: [SplatArgument] SplatArgument
+#   29|             0: [ReservedWord] *
+#   29|             1: [Array] Array
+#   29|               0: [ReservedWord] [
+#   29|               1: [Integer] 2
+#   29|               2: [ReservedWord] ]
+#   29|           3: [ReservedWord] ,
+#   29|           4: [Pair] Pair
+#   29|             0: [HashKeySymbol] a
+#   29|             1: [ReservedWord] :
+#   29|             2: [Integer] 3
+#   29|           5: [ReservedWord] ,
+#   29|           6: [HashSplatArgument] HashSplatArgument
+#   29|             0: [ReservedWord] **
+#   29|             1: [Hash] Hash
+#   29|               0: [ReservedWord] {
+#   29|               1: [Pair] Pair
+#   29|                 0: [HashKeySymbol] b
+#   29|                 1: [ReservedWord] :
+#   29|                 2: [Integer] 4
+#   29|               2: [ReservedWord] ,
+#   29|               3: [Pair] Pair
+#   29|                 0: [HashKeySymbol] c
+#   29|                 1: [ReservedWord] :
+#   29|                 2: [Integer] 5
+#   29|               4: [ReservedWord] }
 #   29|     4: [ReservedWord] end
 #   32|   25: [Binary] Binary
 #   32|     0: [Identifier] w
@@ -5432,23 +5504,24 @@ operations/operations.rb:
 #   87|   63: [Class] Class
 #   87|     0: [ReservedWord] class
 #   87|     1: [Constant] X
-#   88|     2: [Assignment] Assignment
-#   88|       0: [InstanceVariable] @x
-#   88|       1: [ReservedWord] =
-#   88|       2: [Integer] 1
-#   89|     3: [OperatorAssignment] OperatorAssignment
-#   89|       0: [InstanceVariable] @x
-#   89|       1: [ReservedWord] +=
-#   89|       2: [Integer] 2
-#   91|     4: [Assignment] Assignment
-#   91|       0: [ClassVariable] @@y
-#   91|       1: [ReservedWord] =
-#   91|       2: [Integer] 3
-#   92|     5: [OperatorAssignment] OperatorAssignment
-#   92|       0: [ClassVariable] @@y
-#   92|       1: [ReservedWord] /=
-#   92|       2: [Integer] 4
-#   93|     6: [ReservedWord] end
+#   88|     2: [BodyStatement] BodyStatement
+#   88|       0: [Assignment] Assignment
+#   88|         0: [InstanceVariable] @x
+#   88|         1: [ReservedWord] =
+#   88|         2: [Integer] 1
+#   89|       1: [OperatorAssignment] OperatorAssignment
+#   89|         0: [InstanceVariable] @x
+#   89|         1: [ReservedWord] +=
+#   89|         2: [Integer] 2
+#   91|       2: [Assignment] Assignment
+#   91|         0: [ClassVariable] @@y
+#   91|         1: [ReservedWord] =
+#   91|         2: [Integer] 3
+#   92|       3: [OperatorAssignment] OperatorAssignment
+#   92|         0: [ClassVariable] @@y
+#   92|         1: [ReservedWord] /=
+#   92|         2: [Integer] 4
+#   93|     3: [ReservedWord] end
 #   95|   64: [Assignment] Assignment
 #   95|     0: [GlobalVariable] $global_var
 #   95|     1: [ReservedWord] =
@@ -5501,21 +5574,22 @@ params/params.rb:
 #    9|         2: [ReservedWord] ,
 #    9|         3: [Identifier] value
 #    9|         4: [ReservedWord] |
-#   10|       2: [Call] Call
-#   10|         0: [Identifier] puts
-#   10|         1: [ArgumentList] ArgumentList
-#   10|           0: [String] String
-#   10|             0: [ReservedWord] "
-#   10|             1: [Interpolation] Interpolation
-#   10|               0: [ReservedWord] #{
-#   10|               1: [Identifier] key
-#   10|               2: [ReservedWord] }
-#   10|             2: [StringContent]  -> 
-#   10|             3: [Interpolation] Interpolation
-#   10|               0: [ReservedWord] #{
-#   10|               1: [Identifier] value
-#   10|               2: [ReservedWord] }
-#   10|             4: [ReservedWord] "
+#   10|       2: [BodyStatement] BodyStatement
+#   10|         0: [Call] Call
+#   10|           0: [Identifier] puts
+#   10|           1: [ArgumentList] ArgumentList
+#   10|             0: [String] String
+#   10|               0: [ReservedWord] "
+#   10|               1: [Interpolation] Interpolation
+#   10|                 0: [ReservedWord] #{
+#   10|                 1: [Identifier] key
+#   10|                 2: [ReservedWord] }
+#   10|               2: [StringContent]  -> 
+#   10|               3: [Interpolation] Interpolation
+#   10|                 0: [ReservedWord] #{
+#   10|                 1: [Identifier] value
+#   10|                 2: [ReservedWord] }
+#   10|               4: [ReservedWord] "
 #   11|       3: [ReservedWord] end
 #   14|   3: [Assignment] Assignment
 #   14|     0: [Identifier] sum
@@ -5530,10 +5604,11 @@ params/params.rb:
 #   14|         4: [ReservedWord] )
 #   14|       2: [Block] Block
 #   14|         0: [ReservedWord] {
-#   14|         1: [Binary] Binary
-#   14|           0: [Identifier] foo
-#   14|           1: [ReservedWord] +
-#   14|           2: [Identifier] bar
+#   14|         1: [BlockBody] BlockBody
+#   14|           0: [Binary] Binary
+#   14|             0: [Identifier] foo
+#   14|             1: [ReservedWord] +
+#   14|             2: [Identifier] bar
 #   14|         2: [ReservedWord] }
 #   17|   4: [Method] Method
 #   17|     0: [ReservedWord] def
@@ -5571,13 +5646,14 @@ params/params.rb:
 #   22|           3: [Identifier] b
 #   22|           4: [ReservedWord] )
 #   22|         2: [ReservedWord] |
-#   22|       2: [Call] Call
-#   22|         0: [Identifier] puts
-#   22|         1: [ArgumentList] ArgumentList
-#   22|           0: [Binary] Binary
-#   22|             0: [Identifier] a
-#   22|             1: [ReservedWord] +
-#   22|             2: [Identifier] b
+#   22|       2: [BlockBody] BlockBody
+#   22|         0: [Call] Call
+#   22|           0: [Identifier] puts
+#   22|           1: [ArgumentList] ArgumentList
+#   22|             0: [Binary] Binary
+#   22|               0: [Identifier] a
+#   22|               1: [ReservedWord] +
+#   22|               2: [Identifier] b
 #   22|       3: [ReservedWord] }
 #   25|   7: [Assignment] Assignment
 #   25|     0: [Identifier] sum_four_values
@@ -5602,16 +5678,17 @@ params/params.rb:
 #   25|         4: [ReservedWord] )
 #   25|       2: [Block] Block
 #   25|         0: [ReservedWord] {
-#   26|         1: [Binary] Binary
+#   26|         1: [BlockBody] BlockBody
 #   26|           0: [Binary] Binary
 #   26|             0: [Binary] Binary
-#   26|               0: [Identifier] first
+#   26|               0: [Binary] Binary
+#   26|                 0: [Identifier] first
+#   26|                 1: [ReservedWord] +
+#   26|                 2: [Identifier] second
 #   26|               1: [ReservedWord] +
-#   26|               2: [Identifier] second
+#   26|               2: [Identifier] third
 #   26|             1: [ReservedWord] +
-#   26|             2: [Identifier] third
-#   26|           1: [ReservedWord] +
-#   26|           2: [Identifier] fourth
+#   26|             2: [Identifier] fourth
 #   27|         2: [ReservedWord] }
 #   30|   8: [Method] Method
 #   30|     0: [ReservedWord] def
@@ -5684,13 +5761,14 @@ params/params.rb:
 #   41|         1: [ReservedWord] :
 #   41|         2: [Integer] 7
 #   41|       6: [ReservedWord] )
-#   42|     3: [Binary] Binary
+#   42|     3: [BodyStatement] BodyStatement
 #   42|       0: [Binary] Binary
-#   42|         0: [Identifier] x
+#   42|         0: [Binary] Binary
+#   42|           0: [Identifier] x
+#   42|           1: [ReservedWord] +
+#   42|           2: [Identifier] foo
 #   42|         1: [ReservedWord] +
-#   42|         2: [Identifier] foo
-#   42|       1: [ReservedWord] +
-#   42|       2: [Identifier] bar
+#   42|         2: [Identifier] bar
 #   43|     4: [ReservedWord] end
 #   46|   12: [Method] Method
 #   46|     0: [ReservedWord] def
@@ -5701,25 +5779,26 @@ params/params.rb:
 #   46|         0: [ReservedWord] &
 #   46|         1: [Identifier] block
 #   46|       2: [ReservedWord] )
-#   47|     3: [Call] Call
-#   47|       0: [Identifier] puts
-#   47|       1: [ArgumentList] ArgumentList
-#   47|         0: [ReservedWord] (
-#   47|         1: [Call] Call
-#   47|           0: [Identifier] block
-#   47|           1: [ReservedWord] .
-#   47|           2: [Identifier] call
-#   47|           3: [ArgumentList] ArgumentList
-#   47|             0: [Pair] Pair
-#   47|               0: [HashKeySymbol] bar
-#   47|               1: [ReservedWord] :
-#   47|               2: [Integer] 2
-#   47|             1: [ReservedWord] ,
-#   47|             2: [Pair] Pair
-#   47|               0: [HashKeySymbol] foo
-#   47|               1: [ReservedWord] :
-#   47|               2: [Integer] 3
-#   47|         2: [ReservedWord] )
+#   47|     3: [BodyStatement] BodyStatement
+#   47|       0: [Call] Call
+#   47|         0: [Identifier] puts
+#   47|         1: [ArgumentList] ArgumentList
+#   47|           0: [ReservedWord] (
+#   47|           1: [Call] Call
+#   47|             0: [Identifier] block
+#   47|             1: [ReservedWord] .
+#   47|             2: [Identifier] call
+#   47|             3: [ArgumentList] ArgumentList
+#   47|               0: [Pair] Pair
+#   47|                 0: [HashKeySymbol] bar
+#   47|                 1: [ReservedWord] :
+#   47|                 2: [Integer] 2
+#   47|               1: [ReservedWord] ,
+#   47|               2: [Pair] Pair
+#   47|                 0: [HashKeySymbol] foo
+#   47|                 1: [ReservedWord] :
+#   47|                 2: [Integer] 3
+#   47|           2: [ReservedWord] )
 #   48|     4: [ReservedWord] end
 #   49|   13: [Call] Call
 #   49|     0: [Identifier] use_block_with_keyword
@@ -5736,10 +5815,11 @@ params/params.rb:
 #   49|           1: [ReservedWord] :
 #   49|           2: [Integer] 100
 #   49|         4: [ReservedWord] |
-#   50|       2: [Binary] Binary
-#   50|         0: [Identifier] xx
-#   50|         1: [ReservedWord] +
-#   50|         2: [Identifier] yy
+#   50|       2: [BodyStatement] BodyStatement
+#   50|         0: [Binary] Binary
+#   50|           0: [Identifier] xx
+#   50|           1: [ReservedWord] +
+#   50|           2: [Identifier] yy
 #   51|       3: [ReservedWord] end
 #   53|   14: [Assignment] Assignment
 #   53|     0: [Identifier] lambda_with_keyword_params
@@ -5761,13 +5841,14 @@ params/params.rb:
 #   53|         6: [ReservedWord] )
 #   53|       2: [Block] Block
 #   53|         0: [ReservedWord] {
-#   54|         1: [Binary] Binary
+#   54|         1: [BlockBody] BlockBody
 #   54|           0: [Binary] Binary
-#   54|             0: [Identifier] x
+#   54|             0: [Binary] Binary
+#   54|               0: [Identifier] x
+#   54|               1: [ReservedWord] +
+#   54|               2: [Identifier] y
 #   54|             1: [ReservedWord] +
-#   54|             2: [Identifier] y
-#   54|           1: [ReservedWord] +
-#   54|           2: [Identifier] z
+#   54|             2: [Identifier] z
 #   55|         2: [ReservedWord] }
 #   58|   15: [Method] Method
 #   58|     0: [ReservedWord] def
@@ -5796,15 +5877,16 @@ params/params.rb:
 #   62|         0: [ReservedWord] &
 #   62|         1: [Identifier] block
 #   62|       2: [ReservedWord] )
-#   63|     3: [Call] Call
-#   63|       0: [Identifier] block
-#   63|       1: [ReservedWord] .
-#   63|       2: [Identifier] call
-#   63|       3: [ArgumentList] ArgumentList
-#   63|         0: [String] String
-#   63|           0: [ReservedWord] '
-#   63|           1: [StringContent] Zeus
-#   63|           2: [ReservedWord] '
+#   63|     3: [BodyStatement] BodyStatement
+#   63|       0: [Call] Call
+#   63|         0: [Identifier] block
+#   63|         1: [ReservedWord] .
+#   63|         2: [Identifier] call
+#   63|         3: [ArgumentList] ArgumentList
+#   63|           0: [String] String
+#   63|             0: [ReservedWord] '
+#   63|             1: [StringContent] Zeus
+#   63|             2: [ReservedWord] '
 #   64|     4: [ReservedWord] end
 #   65|   17: [Call] Call
 #   65|     0: [Identifier] use_block_with_optional
@@ -5819,22 +5901,23 @@ params/params.rb:
 #   65|           1: [ReservedWord] =
 #   65|           2: [Integer] 99
 #   65|         4: [ReservedWord] |
-#   66|       2: [Call] Call
-#   66|         0: [Identifier] puts
-#   66|         1: [ArgumentList] ArgumentList
-#   66|           0: [String] String
-#   66|             0: [ReservedWord] "
-#   66|             1: [Interpolation] Interpolation
-#   66|               0: [ReservedWord] #{
-#   66|               1: [Identifier] name
-#   66|               2: [ReservedWord] }
-#   66|             2: [StringContent]  is 
-#   66|             3: [Interpolation] Interpolation
-#   66|               0: [ReservedWord] #{
-#   66|               1: [Identifier] age
-#   66|               2: [ReservedWord] }
-#   66|             4: [StringContent]  years old
-#   66|             5: [ReservedWord] "
+#   66|       2: [BodyStatement] BodyStatement
+#   66|         0: [Call] Call
+#   66|           0: [Identifier] puts
+#   66|           1: [ArgumentList] ArgumentList
+#   66|             0: [String] String
+#   66|               0: [ReservedWord] "
+#   66|               1: [Interpolation] Interpolation
+#   66|                 0: [ReservedWord] #{
+#   66|                 1: [Identifier] name
+#   66|                 2: [ReservedWord] }
+#   66|               2: [StringContent]  is 
+#   66|               3: [Interpolation] Interpolation
+#   66|                 0: [ReservedWord] #{
+#   66|                 1: [Identifier] age
+#   66|                 2: [ReservedWord] }
+#   66|               4: [StringContent]  years old
+#   66|               5: [ReservedWord] "
 #   67|       3: [ReservedWord] end
 #   70|   18: [Assignment] Assignment
 #   70|     0: [Identifier] lambda_with_optional_params
@@ -5857,13 +5940,14 @@ params/params.rb:
 #   70|         6: [ReservedWord] )
 #   70|       2: [Block] Block
 #   70|         0: [ReservedWord] {
-#   70|         1: [Binary] Binary
+#   70|         1: [BlockBody] BlockBody
 #   70|           0: [Binary] Binary
-#   70|             0: [Identifier] a
+#   70|             0: [Binary] Binary
+#   70|               0: [Identifier] a
+#   70|               1: [ReservedWord] +
+#   70|               2: [Identifier] b
 #   70|             1: [ReservedWord] +
-#   70|             2: [Identifier] b
-#   70|           1: [ReservedWord] +
-#   70|           2: [Identifier] c
+#   70|             2: [Identifier] c
 #   70|         2: [ReservedWord] }
 #   73|   19: [Method] Method
 #   73|     0: [ReservedWord] def
@@ -5902,23 +5986,24 @@ params/params.rb:
 #   81|       3: [BlockParameter] BlockParameter
 #   81|         0: [ReservedWord] &
 #   81|       4: [ReservedWord] )
-#   82|     3: [Call] Call
-#   82|       0: [Identifier] proc
-#   82|       1: [ArgumentList] ArgumentList
-#   82|         0: [ReservedWord] (
-#   82|         1: [BlockArgument] BlockArgument
-#   82|           0: [ReservedWord] &
-#   82|         2: [ReservedWord] )
-#   83|     4: [Call] Call
-#   83|       0: [Identifier] array
-#   83|       1: [ReservedWord] .
-#   83|       2: [Identifier] each
-#   83|       3: [ArgumentList] ArgumentList
-#   83|         0: [ReservedWord] (
-#   83|         1: [BlockArgument] BlockArgument
-#   83|           0: [ReservedWord] &
-#   83|         2: [ReservedWord] )
-#   84|     5: [ReservedWord] end
+#   82|     3: [BodyStatement] BodyStatement
+#   82|       0: [Call] Call
+#   82|         0: [Identifier] proc
+#   82|         1: [ArgumentList] ArgumentList
+#   82|           0: [ReservedWord] (
+#   82|           1: [BlockArgument] BlockArgument
+#   82|             0: [ReservedWord] &
+#   82|           2: [ReservedWord] )
+#   83|       1: [Call] Call
+#   83|         0: [Identifier] array
+#   83|         1: [ReservedWord] .
+#   83|         2: [Identifier] each
+#   83|         3: [ArgumentList] ArgumentList
+#   83|           0: [ReservedWord] (
+#   83|           1: [BlockArgument] BlockArgument
+#   83|             0: [ReservedWord] &
+#   83|           2: [ReservedWord] )
+#   84|     4: [ReservedWord] end
 #   86|   22: [Call] Call
 #   86|     0: [Identifier] run_block
 #   86|     1: [Block] Block
@@ -5931,10 +6016,11 @@ params/params.rb:
 #   86|         4: [ReservedWord] ,
 #   86|         5: [Identifier] z
 #   86|         6: [ReservedWord] |
-#   86|       2: [Call] Call
-#   86|         0: [Identifier] puts
-#   86|         1: [ArgumentList] ArgumentList
-#   86|           0: [Identifier] x
+#   86|       2: [BlockBody] BlockBody
+#   86|         0: [Call] Call
+#   86|           0: [Identifier] puts
+#   86|           1: [ArgumentList] ArgumentList
+#   86|             0: [Identifier] x
 #   86|       3: [ReservedWord] }
 #    1| [Comment] # Tests for the different kinds and contexts of parameters.
 #    3| [Comment] # Method containing identifier parameters

From ed005077fa88e44c5454a4c76055bc16c55cefa7 Mon Sep 17 00:00:00 2001
From: Arthur Baars <aibaars@github.com>
Date: Wed, 24 Aug 2022 17:52:04 +0200
Subject: [PATCH 021/203] Ruby: upgrade/downgrade scripts

---
 .../old.dbscheme                              | 1435 +++++++++++++++++
 .../ruby.dbscheme                             | 1433 ++++++++++++++++
 .../ruby_ast_node_info.ql                     |   28 +
 .../ruby_block_child.ql                       |    7 +
 .../ruby_class_child.ql                       |    7 +
 .../ruby_do_block_child.ql                    |    8 +
 .../ruby_method_child.ql                      |   14 +
 .../ruby_module_child.ql                      |    8 +
 .../ruby_singleton_class_child.ql             |    8 +
 .../ruby_singleton_method_child.ql            |   15 +
 .../upgrade.properties                        |   30 +
 .../locations_default.ql                      |   68 +
 .../old.dbscheme                              | 1433 ++++++++++++++++
 .../ruby.dbscheme                             | 1435 +++++++++++++++++
 .../ruby_ast_node_info.ql                     |   76 +
 .../ruby_block_body.ql                        |   11 +
 .../ruby_block_body_child.ql                  |   11 +
 .../ruby_block_body_def.ql                    |   18 +
 .../ruby_body_statement_child.ql              |   36 +
 .../ruby_body_statement_def.ql                |   43 +
 .../ruby_class_body.ql                        |   11 +
 .../ruby_do_block_body.ql                     |   11 +
 .../ruby_method_body.ql                       |   20 +
 .../ruby_module_body.ql                       |   11 +
 .../ruby_singleton_class_body.ql              |   11 +
 .../ruby_singleton_method_body.ql             |   17 +
 .../ruby_tokeninfo.ql                         |   46 +
 .../upgrade.properties                        |   33 +
 28 files changed, 6284 insertions(+)
 create mode 100644 ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/old.dbscheme
 create mode 100644 ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby.dbscheme
 create mode 100644 ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_ast_node_info.ql
 create mode 100644 ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_block_child.ql
 create mode 100644 ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_class_child.ql
 create mode 100644 ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_do_block_child.ql
 create mode 100644 ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_method_child.ql
 create mode 100644 ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_module_child.ql
 create mode 100644 ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_singleton_class_child.ql
 create mode 100644 ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_singleton_method_child.ql
 create mode 100644 ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/upgrade.properties
 create mode 100644 ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/locations_default.ql
 create mode 100644 ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/old.dbscheme
 create mode 100644 ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby.dbscheme
 create mode 100644 ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_ast_node_info.ql
 create mode 100644 ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_block_body.ql
 create mode 100644 ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_block_body_child.ql
 create mode 100644 ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_block_body_def.ql
 create mode 100644 ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_body_statement_child.ql
 create mode 100644 ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_body_statement_def.ql
 create mode 100644 ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_class_body.ql
 create mode 100644 ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_do_block_body.ql
 create mode 100644 ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_method_body.ql
 create mode 100644 ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_module_body.ql
 create mode 100644 ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_singleton_class_body.ql
 create mode 100644 ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_singleton_method_body.ql
 create mode 100644 ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_tokeninfo.ql
 create mode 100644 ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/upgrade.properties

diff --git a/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/old.dbscheme b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/old.dbscheme
new file mode 100644
index 00000000000..3595c826de6
--- /dev/null
+++ b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/old.dbscheme
@@ -0,0 +1,1435 @@
+// CodeQL database schema for Ruby
+// Automatically generated from the tree-sitter grammar; do not edit
+
+@location = @location_default
+
+locations_default(
+  unique int id: @location_default,
+  int file: @file ref,
+  int start_line: int ref,
+  int start_column: int ref,
+  int end_line: int ref,
+  int end_column: int ref
+);
+
+files(
+  unique int id: @file,
+  string name: string ref
+);
+
+folders(
+  unique int id: @folder,
+  string name: string ref
+);
+
+@container = @file | @folder
+
+containerparent(
+  int parent: @container ref,
+  unique int child: @container ref
+);
+
+sourceLocationPrefix(
+  string prefix: string ref
+);
+
+diagnostics(
+  unique int id: @diagnostic,
+  int severity: int ref,
+  string error_tag: string ref,
+  string error_message: string ref,
+  string full_error_message: string ref,
+  int location: @location_default ref
+);
+
+case @diagnostic.severity of
+  10 = @diagnostic_debug
+| 20 = @diagnostic_info
+| 30 = @diagnostic_warning
+| 40 = @diagnostic_error
+;
+
+
+@ruby_underscore_arg = @ruby_assignment | @ruby_binary | @ruby_conditional | @ruby_operator_assignment | @ruby_range | @ruby_unary | @ruby_underscore_primary
+
+@ruby_underscore_call_operator = @ruby_reserved_word
+
+@ruby_underscore_expression = @ruby_assignment | @ruby_binary | @ruby_break | @ruby_call | @ruby_next | @ruby_operator_assignment | @ruby_return | @ruby_unary | @ruby_underscore_arg | @ruby_yield
+
+@ruby_underscore_lhs = @ruby_call | @ruby_element_reference | @ruby_scope_resolution | @ruby_token_false | @ruby_token_nil | @ruby_token_true | @ruby_underscore_variable
+
+@ruby_underscore_method_name = @ruby_delimited_symbol | @ruby_setter | @ruby_token_constant | @ruby_token_identifier | @ruby_token_operator | @ruby_token_simple_symbol | @ruby_underscore_nonlocal_variable
+
+@ruby_underscore_nonlocal_variable = @ruby_token_class_variable | @ruby_token_global_variable | @ruby_token_instance_variable
+
+@ruby_underscore_pattern_constant = @ruby_scope_resolution | @ruby_token_constant
+
+@ruby_underscore_pattern_expr = @ruby_alternative_pattern | @ruby_as_pattern | @ruby_underscore_pattern_expr_basic
+
+@ruby_underscore_pattern_expr_basic = @ruby_array_pattern | @ruby_expression_reference_pattern | @ruby_find_pattern | @ruby_hash_pattern | @ruby_parenthesized_pattern | @ruby_range | @ruby_token_identifier | @ruby_underscore_pattern_constant | @ruby_underscore_pattern_primitive | @ruby_variable_reference_pattern
+
+@ruby_underscore_pattern_primitive = @ruby_delimited_symbol | @ruby_lambda | @ruby_regex | @ruby_string__ | @ruby_string_array | @ruby_subshell | @ruby_symbol_array | @ruby_token_encoding | @ruby_token_false | @ruby_token_file | @ruby_token_heredoc_beginning | @ruby_token_line | @ruby_token_nil | @ruby_token_self | @ruby_token_simple_symbol | @ruby_token_true | @ruby_unary | @ruby_underscore_simple_numeric
+
+@ruby_underscore_pattern_top_expr_body = @ruby_array_pattern | @ruby_find_pattern | @ruby_hash_pattern | @ruby_underscore_pattern_expr
+
+@ruby_underscore_primary = @ruby_array | @ruby_begin | @ruby_break | @ruby_call | @ruby_case__ | @ruby_case_match | @ruby_chained_string | @ruby_class | @ruby_delimited_symbol | @ruby_for | @ruby_hash | @ruby_if | @ruby_lambda | @ruby_method | @ruby_module | @ruby_next | @ruby_parenthesized_statements | @ruby_redo | @ruby_regex | @ruby_retry | @ruby_return | @ruby_singleton_class | @ruby_singleton_method | @ruby_string__ | @ruby_string_array | @ruby_subshell | @ruby_symbol_array | @ruby_token_character | @ruby_token_heredoc_beginning | @ruby_token_simple_symbol | @ruby_unary | @ruby_underscore_lhs | @ruby_underscore_simple_numeric | @ruby_unless | @ruby_until | @ruby_while | @ruby_yield
+
+@ruby_underscore_simple_numeric = @ruby_complex | @ruby_rational | @ruby_token_float | @ruby_token_integer
+
+@ruby_underscore_statement = @ruby_alias | @ruby_begin_block | @ruby_end_block | @ruby_if_modifier | @ruby_rescue_modifier | @ruby_undef | @ruby_underscore_expression | @ruby_unless_modifier | @ruby_until_modifier | @ruby_while_modifier
+
+@ruby_underscore_variable = @ruby_token_constant | @ruby_token_identifier | @ruby_token_self | @ruby_token_super | @ruby_underscore_nonlocal_variable
+
+ruby_alias_def(
+  unique int id: @ruby_alias,
+  int alias: @ruby_underscore_method_name ref,
+  int name: @ruby_underscore_method_name ref
+);
+
+#keyset[ruby_alternative_pattern, index]
+ruby_alternative_pattern_alternatives(
+  int ruby_alternative_pattern: @ruby_alternative_pattern ref,
+  int index: int ref,
+  unique int alternatives: @ruby_underscore_pattern_expr_basic ref
+);
+
+ruby_alternative_pattern_def(
+  unique int id: @ruby_alternative_pattern
+);
+
+@ruby_argument_list_child_type = @ruby_block_argument | @ruby_hash_splat_argument | @ruby_pair | @ruby_splat_argument | @ruby_token_forward_argument | @ruby_underscore_expression
+
+#keyset[ruby_argument_list, index]
+ruby_argument_list_child(
+  int ruby_argument_list: @ruby_argument_list ref,
+  int index: int ref,
+  unique int child: @ruby_argument_list_child_type ref
+);
+
+ruby_argument_list_def(
+  unique int id: @ruby_argument_list
+);
+
+@ruby_array_child_type = @ruby_block_argument | @ruby_hash_splat_argument | @ruby_pair | @ruby_splat_argument | @ruby_token_forward_argument | @ruby_underscore_expression
+
+#keyset[ruby_array, index]
+ruby_array_child(
+  int ruby_array: @ruby_array ref,
+  int index: int ref,
+  unique int child: @ruby_array_child_type ref
+);
+
+ruby_array_def(
+  unique int id: @ruby_array
+);
+
+ruby_array_pattern_class(
+  unique int ruby_array_pattern: @ruby_array_pattern ref,
+  unique int class: @ruby_underscore_pattern_constant ref
+);
+
+@ruby_array_pattern_child_type = @ruby_splat_parameter | @ruby_underscore_pattern_expr
+
+#keyset[ruby_array_pattern, index]
+ruby_array_pattern_child(
+  int ruby_array_pattern: @ruby_array_pattern ref,
+  int index: int ref,
+  unique int child: @ruby_array_pattern_child_type ref
+);
+
+ruby_array_pattern_def(
+  unique int id: @ruby_array_pattern
+);
+
+ruby_as_pattern_def(
+  unique int id: @ruby_as_pattern,
+  int name: @ruby_token_identifier ref,
+  int value: @ruby_underscore_pattern_expr ref
+);
+
+@ruby_assignment_left_type = @ruby_left_assignment_list | @ruby_underscore_lhs
+
+@ruby_assignment_right_type = @ruby_rescue_modifier | @ruby_right_assignment_list | @ruby_splat_argument | @ruby_underscore_expression
+
+ruby_assignment_def(
+  unique int id: @ruby_assignment,
+  int left: @ruby_assignment_left_type ref,
+  int right: @ruby_assignment_right_type ref
+);
+
+@ruby_bare_string_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_bare_string, index]
+ruby_bare_string_child(
+  int ruby_bare_string: @ruby_bare_string ref,
+  int index: int ref,
+  unique int child: @ruby_bare_string_child_type ref
+);
+
+ruby_bare_string_def(
+  unique int id: @ruby_bare_string
+);
+
+@ruby_bare_symbol_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_bare_symbol, index]
+ruby_bare_symbol_child(
+  int ruby_bare_symbol: @ruby_bare_symbol ref,
+  int index: int ref,
+  unique int child: @ruby_bare_symbol_child_type ref
+);
+
+ruby_bare_symbol_def(
+  unique int id: @ruby_bare_symbol
+);
+
+@ruby_begin_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_begin, index]
+ruby_begin_child(
+  int ruby_begin: @ruby_begin ref,
+  int index: int ref,
+  unique int child: @ruby_begin_child_type ref
+);
+
+ruby_begin_def(
+  unique int id: @ruby_begin
+);
+
+@ruby_begin_block_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_begin_block, index]
+ruby_begin_block_child(
+  int ruby_begin_block: @ruby_begin_block ref,
+  int index: int ref,
+  unique int child: @ruby_begin_block_child_type ref
+);
+
+ruby_begin_block_def(
+  unique int id: @ruby_begin_block
+);
+
+@ruby_binary_left_type = @ruby_underscore_expression | @ruby_underscore_simple_numeric
+
+case @ruby_binary.operator of
+  0 = @ruby_binary_bangequal
+| 1 = @ruby_binary_bangtilde
+| 2 = @ruby_binary_percent
+| 3 = @ruby_binary_ampersand
+| 4 = @ruby_binary_ampersandampersand
+| 5 = @ruby_binary_star
+| 6 = @ruby_binary_starstar
+| 7 = @ruby_binary_plus
+| 8 = @ruby_binary_minus
+| 9 = @ruby_binary_slash
+| 10 = @ruby_binary_langle
+| 11 = @ruby_binary_langlelangle
+| 12 = @ruby_binary_langleequal
+| 13 = @ruby_binary_langleequalrangle
+| 14 = @ruby_binary_equalequal
+| 15 = @ruby_binary_equalequalequal
+| 16 = @ruby_binary_equaltilde
+| 17 = @ruby_binary_rangle
+| 18 = @ruby_binary_rangleequal
+| 19 = @ruby_binary_ranglerangle
+| 20 = @ruby_binary_caret
+| 21 = @ruby_binary_and
+| 22 = @ruby_binary_or
+| 23 = @ruby_binary_pipe
+| 24 = @ruby_binary_pipepipe
+;
+
+
+ruby_binary_def(
+  unique int id: @ruby_binary,
+  int left: @ruby_binary_left_type ref,
+  int operator: int ref,
+  int right: @ruby_underscore_expression ref
+);
+
+ruby_block_body(
+  unique int ruby_block: @ruby_block ref,
+  unique int body: @ruby_block_body ref
+);
+
+ruby_block_parameters(
+  unique int ruby_block: @ruby_block ref,
+  unique int parameters: @ruby_block_parameters ref
+);
+
+ruby_block_def(
+  unique int id: @ruby_block
+);
+
+ruby_block_argument_child(
+  unique int ruby_block_argument: @ruby_block_argument ref,
+  unique int child: @ruby_underscore_arg ref
+);
+
+ruby_block_argument_def(
+  unique int id: @ruby_block_argument
+);
+
+@ruby_block_body_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_block_body, index]
+ruby_block_body_child(
+  int ruby_block_body: @ruby_block_body ref,
+  int index: int ref,
+  unique int child: @ruby_block_body_child_type ref
+);
+
+ruby_block_body_def(
+  unique int id: @ruby_block_body
+);
+
+ruby_block_parameter_name(
+  unique int ruby_block_parameter: @ruby_block_parameter ref,
+  unique int name: @ruby_token_identifier ref
+);
+
+ruby_block_parameter_def(
+  unique int id: @ruby_block_parameter
+);
+
+#keyset[ruby_block_parameters, index]
+ruby_block_parameters_locals(
+  int ruby_block_parameters: @ruby_block_parameters ref,
+  int index: int ref,
+  unique int locals: @ruby_token_identifier ref
+);
+
+@ruby_block_parameters_child_type = @ruby_block_parameter | @ruby_destructured_parameter | @ruby_hash_splat_parameter | @ruby_keyword_parameter | @ruby_optional_parameter | @ruby_splat_parameter | @ruby_token_forward_parameter | @ruby_token_hash_splat_nil | @ruby_token_identifier
+
+#keyset[ruby_block_parameters, index]
+ruby_block_parameters_child(
+  int ruby_block_parameters: @ruby_block_parameters ref,
+  int index: int ref,
+  unique int child: @ruby_block_parameters_child_type ref
+);
+
+ruby_block_parameters_def(
+  unique int id: @ruby_block_parameters
+);
+
+@ruby_body_statement_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_body_statement, index]
+ruby_body_statement_child(
+  int ruby_body_statement: @ruby_body_statement ref,
+  int index: int ref,
+  unique int child: @ruby_body_statement_child_type ref
+);
+
+ruby_body_statement_def(
+  unique int id: @ruby_body_statement
+);
+
+ruby_break_child(
+  unique int ruby_break: @ruby_break ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_break_def(
+  unique int id: @ruby_break
+);
+
+ruby_call_arguments(
+  unique int ruby_call: @ruby_call ref,
+  unique int arguments: @ruby_argument_list ref
+);
+
+@ruby_call_block_type = @ruby_block | @ruby_do_block
+
+ruby_call_block(
+  unique int ruby_call: @ruby_call ref,
+  unique int block: @ruby_call_block_type ref
+);
+
+@ruby_call_method_type = @ruby_token_operator | @ruby_underscore_variable
+
+ruby_call_method(
+  unique int ruby_call: @ruby_call ref,
+  unique int method: @ruby_call_method_type ref
+);
+
+ruby_call_operator(
+  unique int ruby_call: @ruby_call ref,
+  unique int operator: @ruby_underscore_call_operator ref
+);
+
+ruby_call_receiver(
+  unique int ruby_call: @ruby_call ref,
+  unique int receiver: @ruby_underscore_primary ref
+);
+
+ruby_call_def(
+  unique int id: @ruby_call
+);
+
+ruby_case_value(
+  unique int ruby_case__: @ruby_case__ ref,
+  unique int value: @ruby_underscore_statement ref
+);
+
+@ruby_case_child_type = @ruby_else | @ruby_when
+
+#keyset[ruby_case__, index]
+ruby_case_child(
+  int ruby_case__: @ruby_case__ ref,
+  int index: int ref,
+  unique int child: @ruby_case_child_type ref
+);
+
+ruby_case_def(
+  unique int id: @ruby_case__
+);
+
+#keyset[ruby_case_match, index]
+ruby_case_match_clauses(
+  int ruby_case_match: @ruby_case_match ref,
+  int index: int ref,
+  unique int clauses: @ruby_in_clause ref
+);
+
+ruby_case_match_else(
+  unique int ruby_case_match: @ruby_case_match ref,
+  unique int else: @ruby_else ref
+);
+
+ruby_case_match_def(
+  unique int id: @ruby_case_match,
+  int value: @ruby_underscore_statement ref
+);
+
+#keyset[ruby_chained_string, index]
+ruby_chained_string_child(
+  int ruby_chained_string: @ruby_chained_string ref,
+  int index: int ref,
+  unique int child: @ruby_string__ ref
+);
+
+ruby_chained_string_def(
+  unique int id: @ruby_chained_string
+);
+
+ruby_class_body(
+  unique int ruby_class: @ruby_class ref,
+  unique int body: @ruby_body_statement ref
+);
+
+@ruby_class_name_type = @ruby_scope_resolution | @ruby_token_constant
+
+ruby_class_superclass(
+  unique int ruby_class: @ruby_class ref,
+  unique int superclass: @ruby_superclass ref
+);
+
+ruby_class_def(
+  unique int id: @ruby_class,
+  int name: @ruby_class_name_type ref
+);
+
+@ruby_complex_child_type = @ruby_rational | @ruby_token_float | @ruby_token_integer
+
+ruby_complex_def(
+  unique int id: @ruby_complex,
+  int child: @ruby_complex_child_type ref
+);
+
+ruby_conditional_def(
+  unique int id: @ruby_conditional,
+  int alternative: @ruby_underscore_arg ref,
+  int condition: @ruby_underscore_arg ref,
+  int consequence: @ruby_underscore_arg ref
+);
+
+@ruby_delimited_symbol_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_delimited_symbol, index]
+ruby_delimited_symbol_child(
+  int ruby_delimited_symbol: @ruby_delimited_symbol ref,
+  int index: int ref,
+  unique int child: @ruby_delimited_symbol_child_type ref
+);
+
+ruby_delimited_symbol_def(
+  unique int id: @ruby_delimited_symbol
+);
+
+@ruby_destructured_left_assignment_child_type = @ruby_destructured_left_assignment | @ruby_rest_assignment | @ruby_underscore_lhs
+
+#keyset[ruby_destructured_left_assignment, index]
+ruby_destructured_left_assignment_child(
+  int ruby_destructured_left_assignment: @ruby_destructured_left_assignment ref,
+  int index: int ref,
+  unique int child: @ruby_destructured_left_assignment_child_type ref
+);
+
+ruby_destructured_left_assignment_def(
+  unique int id: @ruby_destructured_left_assignment
+);
+
+@ruby_destructured_parameter_child_type = @ruby_block_parameter | @ruby_destructured_parameter | @ruby_hash_splat_parameter | @ruby_keyword_parameter | @ruby_optional_parameter | @ruby_splat_parameter | @ruby_token_forward_parameter | @ruby_token_hash_splat_nil | @ruby_token_identifier
+
+#keyset[ruby_destructured_parameter, index]
+ruby_destructured_parameter_child(
+  int ruby_destructured_parameter: @ruby_destructured_parameter ref,
+  int index: int ref,
+  unique int child: @ruby_destructured_parameter_child_type ref
+);
+
+ruby_destructured_parameter_def(
+  unique int id: @ruby_destructured_parameter
+);
+
+@ruby_do_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_do, index]
+ruby_do_child(
+  int ruby_do: @ruby_do ref,
+  int index: int ref,
+  unique int child: @ruby_do_child_type ref
+);
+
+ruby_do_def(
+  unique int id: @ruby_do
+);
+
+ruby_do_block_body(
+  unique int ruby_do_block: @ruby_do_block ref,
+  unique int body: @ruby_body_statement ref
+);
+
+ruby_do_block_parameters(
+  unique int ruby_do_block: @ruby_do_block ref,
+  unique int parameters: @ruby_block_parameters ref
+);
+
+ruby_do_block_def(
+  unique int id: @ruby_do_block
+);
+
+@ruby_element_reference_child_type = @ruby_block_argument | @ruby_hash_splat_argument | @ruby_pair | @ruby_splat_argument | @ruby_token_forward_argument | @ruby_underscore_expression
+
+#keyset[ruby_element_reference, index]
+ruby_element_reference_child(
+  int ruby_element_reference: @ruby_element_reference ref,
+  int index: int ref,
+  unique int child: @ruby_element_reference_child_type ref
+);
+
+ruby_element_reference_def(
+  unique int id: @ruby_element_reference,
+  int object: @ruby_underscore_primary ref
+);
+
+@ruby_else_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_else, index]
+ruby_else_child(
+  int ruby_else: @ruby_else ref,
+  int index: int ref,
+  unique int child: @ruby_else_child_type ref
+);
+
+ruby_else_def(
+  unique int id: @ruby_else
+);
+
+@ruby_elsif_alternative_type = @ruby_else | @ruby_elsif
+
+ruby_elsif_alternative(
+  unique int ruby_elsif: @ruby_elsif ref,
+  unique int alternative: @ruby_elsif_alternative_type ref
+);
+
+ruby_elsif_consequence(
+  unique int ruby_elsif: @ruby_elsif ref,
+  unique int consequence: @ruby_then ref
+);
+
+ruby_elsif_def(
+  unique int id: @ruby_elsif,
+  int condition: @ruby_underscore_statement ref
+);
+
+@ruby_end_block_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_end_block, index]
+ruby_end_block_child(
+  int ruby_end_block: @ruby_end_block ref,
+  int index: int ref,
+  unique int child: @ruby_end_block_child_type ref
+);
+
+ruby_end_block_def(
+  unique int id: @ruby_end_block
+);
+
+@ruby_ensure_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_ensure, index]
+ruby_ensure_child(
+  int ruby_ensure: @ruby_ensure ref,
+  int index: int ref,
+  unique int child: @ruby_ensure_child_type ref
+);
+
+ruby_ensure_def(
+  unique int id: @ruby_ensure
+);
+
+ruby_exception_variable_def(
+  unique int id: @ruby_exception_variable,
+  int child: @ruby_underscore_lhs ref
+);
+
+@ruby_exceptions_child_type = @ruby_splat_argument | @ruby_underscore_arg
+
+#keyset[ruby_exceptions, index]
+ruby_exceptions_child(
+  int ruby_exceptions: @ruby_exceptions ref,
+  int index: int ref,
+  unique int child: @ruby_exceptions_child_type ref
+);
+
+ruby_exceptions_def(
+  unique int id: @ruby_exceptions
+);
+
+ruby_expression_reference_pattern_def(
+  unique int id: @ruby_expression_reference_pattern,
+  int value: @ruby_underscore_expression ref
+);
+
+ruby_find_pattern_class(
+  unique int ruby_find_pattern: @ruby_find_pattern ref,
+  unique int class: @ruby_underscore_pattern_constant ref
+);
+
+@ruby_find_pattern_child_type = @ruby_splat_parameter | @ruby_underscore_pattern_expr
+
+#keyset[ruby_find_pattern, index]
+ruby_find_pattern_child(
+  int ruby_find_pattern: @ruby_find_pattern ref,
+  int index: int ref,
+  unique int child: @ruby_find_pattern_child_type ref
+);
+
+ruby_find_pattern_def(
+  unique int id: @ruby_find_pattern
+);
+
+@ruby_for_pattern_type = @ruby_left_assignment_list | @ruby_underscore_lhs
+
+ruby_for_def(
+  unique int id: @ruby_for,
+  int body: @ruby_do ref,
+  int pattern: @ruby_for_pattern_type ref,
+  int value: @ruby_in ref
+);
+
+@ruby_hash_child_type = @ruby_hash_splat_argument | @ruby_pair
+
+#keyset[ruby_hash, index]
+ruby_hash_child(
+  int ruby_hash: @ruby_hash ref,
+  int index: int ref,
+  unique int child: @ruby_hash_child_type ref
+);
+
+ruby_hash_def(
+  unique int id: @ruby_hash
+);
+
+ruby_hash_pattern_class(
+  unique int ruby_hash_pattern: @ruby_hash_pattern ref,
+  unique int class: @ruby_underscore_pattern_constant ref
+);
+
+@ruby_hash_pattern_child_type = @ruby_hash_splat_parameter | @ruby_keyword_pattern | @ruby_token_hash_splat_nil
+
+#keyset[ruby_hash_pattern, index]
+ruby_hash_pattern_child(
+  int ruby_hash_pattern: @ruby_hash_pattern ref,
+  int index: int ref,
+  unique int child: @ruby_hash_pattern_child_type ref
+);
+
+ruby_hash_pattern_def(
+  unique int id: @ruby_hash_pattern
+);
+
+ruby_hash_splat_argument_def(
+  unique int id: @ruby_hash_splat_argument,
+  int child: @ruby_underscore_arg ref
+);
+
+ruby_hash_splat_parameter_name(
+  unique int ruby_hash_splat_parameter: @ruby_hash_splat_parameter ref,
+  unique int name: @ruby_token_identifier ref
+);
+
+ruby_hash_splat_parameter_def(
+  unique int id: @ruby_hash_splat_parameter
+);
+
+@ruby_heredoc_body_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_heredoc_content | @ruby_token_heredoc_end
+
+#keyset[ruby_heredoc_body, index]
+ruby_heredoc_body_child(
+  int ruby_heredoc_body: @ruby_heredoc_body ref,
+  int index: int ref,
+  unique int child: @ruby_heredoc_body_child_type ref
+);
+
+ruby_heredoc_body_def(
+  unique int id: @ruby_heredoc_body
+);
+
+@ruby_if_alternative_type = @ruby_else | @ruby_elsif
+
+ruby_if_alternative(
+  unique int ruby_if: @ruby_if ref,
+  unique int alternative: @ruby_if_alternative_type ref
+);
+
+ruby_if_consequence(
+  unique int ruby_if: @ruby_if ref,
+  unique int consequence: @ruby_then ref
+);
+
+ruby_if_def(
+  unique int id: @ruby_if,
+  int condition: @ruby_underscore_statement ref
+);
+
+ruby_if_guard_def(
+  unique int id: @ruby_if_guard,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_if_modifier_def(
+  unique int id: @ruby_if_modifier,
+  int body: @ruby_underscore_statement ref,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_in_def(
+  unique int id: @ruby_in,
+  int child: @ruby_underscore_arg ref
+);
+
+ruby_in_clause_body(
+  unique int ruby_in_clause: @ruby_in_clause ref,
+  unique int body: @ruby_then ref
+);
+
+@ruby_in_clause_guard_type = @ruby_if_guard | @ruby_unless_guard
+
+ruby_in_clause_guard(
+  unique int ruby_in_clause: @ruby_in_clause ref,
+  unique int guard: @ruby_in_clause_guard_type ref
+);
+
+ruby_in_clause_def(
+  unique int id: @ruby_in_clause,
+  int pattern: @ruby_underscore_pattern_top_expr_body ref
+);
+
+@ruby_interpolation_child_type = @ruby_token_empty_statement | @ruby_underscore_nonlocal_variable | @ruby_underscore_statement
+
+#keyset[ruby_interpolation, index]
+ruby_interpolation_child(
+  int ruby_interpolation: @ruby_interpolation ref,
+  int index: int ref,
+  unique int child: @ruby_interpolation_child_type ref
+);
+
+ruby_interpolation_def(
+  unique int id: @ruby_interpolation
+);
+
+ruby_keyword_parameter_value(
+  unique int ruby_keyword_parameter: @ruby_keyword_parameter ref,
+  unique int value: @ruby_underscore_arg ref
+);
+
+ruby_keyword_parameter_def(
+  unique int id: @ruby_keyword_parameter,
+  int name: @ruby_token_identifier ref
+);
+
+@ruby_keyword_pattern_key_type = @ruby_string__ | @ruby_token_hash_key_symbol
+
+ruby_keyword_pattern_value(
+  unique int ruby_keyword_pattern: @ruby_keyword_pattern ref,
+  unique int value: @ruby_underscore_pattern_expr ref
+);
+
+ruby_keyword_pattern_def(
+  unique int id: @ruby_keyword_pattern,
+  int key__: @ruby_keyword_pattern_key_type ref
+);
+
+@ruby_lambda_body_type = @ruby_block | @ruby_do_block
+
+ruby_lambda_parameters(
+  unique int ruby_lambda: @ruby_lambda ref,
+  unique int parameters: @ruby_lambda_parameters ref
+);
+
+ruby_lambda_def(
+  unique int id: @ruby_lambda,
+  int body: @ruby_lambda_body_type ref
+);
+
+@ruby_lambda_parameters_child_type = @ruby_block_parameter | @ruby_destructured_parameter | @ruby_hash_splat_parameter | @ruby_keyword_parameter | @ruby_optional_parameter | @ruby_splat_parameter | @ruby_token_forward_parameter | @ruby_token_hash_splat_nil | @ruby_token_identifier
+
+#keyset[ruby_lambda_parameters, index]
+ruby_lambda_parameters_child(
+  int ruby_lambda_parameters: @ruby_lambda_parameters ref,
+  int index: int ref,
+  unique int child: @ruby_lambda_parameters_child_type ref
+);
+
+ruby_lambda_parameters_def(
+  unique int id: @ruby_lambda_parameters
+);
+
+@ruby_left_assignment_list_child_type = @ruby_destructured_left_assignment | @ruby_rest_assignment | @ruby_underscore_lhs
+
+#keyset[ruby_left_assignment_list, index]
+ruby_left_assignment_list_child(
+  int ruby_left_assignment_list: @ruby_left_assignment_list ref,
+  int index: int ref,
+  unique int child: @ruby_left_assignment_list_child_type ref
+);
+
+ruby_left_assignment_list_def(
+  unique int id: @ruby_left_assignment_list
+);
+
+@ruby_method_body_type = @ruby_body_statement | @ruby_rescue_modifier | @ruby_underscore_arg
+
+ruby_method_body(
+  unique int ruby_method: @ruby_method ref,
+  unique int body: @ruby_method_body_type ref
+);
+
+ruby_method_parameters(
+  unique int ruby_method: @ruby_method ref,
+  unique int parameters: @ruby_method_parameters ref
+);
+
+ruby_method_def(
+  unique int id: @ruby_method,
+  int name: @ruby_underscore_method_name ref
+);
+
+@ruby_method_parameters_child_type = @ruby_block_parameter | @ruby_destructured_parameter | @ruby_hash_splat_parameter | @ruby_keyword_parameter | @ruby_optional_parameter | @ruby_splat_parameter | @ruby_token_forward_parameter | @ruby_token_hash_splat_nil | @ruby_token_identifier
+
+#keyset[ruby_method_parameters, index]
+ruby_method_parameters_child(
+  int ruby_method_parameters: @ruby_method_parameters ref,
+  int index: int ref,
+  unique int child: @ruby_method_parameters_child_type ref
+);
+
+ruby_method_parameters_def(
+  unique int id: @ruby_method_parameters
+);
+
+ruby_module_body(
+  unique int ruby_module: @ruby_module ref,
+  unique int body: @ruby_body_statement ref
+);
+
+@ruby_module_name_type = @ruby_scope_resolution | @ruby_token_constant
+
+ruby_module_def(
+  unique int id: @ruby_module,
+  int name: @ruby_module_name_type ref
+);
+
+ruby_next_child(
+  unique int ruby_next: @ruby_next ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_next_def(
+  unique int id: @ruby_next
+);
+
+case @ruby_operator_assignment.operator of
+  0 = @ruby_operator_assignment_percentequal
+| 1 = @ruby_operator_assignment_ampersandampersandequal
+| 2 = @ruby_operator_assignment_ampersandequal
+| 3 = @ruby_operator_assignment_starstarequal
+| 4 = @ruby_operator_assignment_starequal
+| 5 = @ruby_operator_assignment_plusequal
+| 6 = @ruby_operator_assignment_minusequal
+| 7 = @ruby_operator_assignment_slashequal
+| 8 = @ruby_operator_assignment_langlelangleequal
+| 9 = @ruby_operator_assignment_ranglerangleequal
+| 10 = @ruby_operator_assignment_caretequal
+| 11 = @ruby_operator_assignment_pipeequal
+| 12 = @ruby_operator_assignment_pipepipeequal
+;
+
+
+@ruby_operator_assignment_right_type = @ruby_rescue_modifier | @ruby_underscore_expression
+
+ruby_operator_assignment_def(
+  unique int id: @ruby_operator_assignment,
+  int left: @ruby_underscore_lhs ref,
+  int operator: int ref,
+  int right: @ruby_operator_assignment_right_type ref
+);
+
+ruby_optional_parameter_def(
+  unique int id: @ruby_optional_parameter,
+  int name: @ruby_token_identifier ref,
+  int value: @ruby_underscore_arg ref
+);
+
+@ruby_pair_key_type = @ruby_string__ | @ruby_token_hash_key_symbol | @ruby_underscore_arg
+
+ruby_pair_value(
+  unique int ruby_pair: @ruby_pair ref,
+  unique int value: @ruby_underscore_arg ref
+);
+
+ruby_pair_def(
+  unique int id: @ruby_pair,
+  int key__: @ruby_pair_key_type ref
+);
+
+ruby_parenthesized_pattern_def(
+  unique int id: @ruby_parenthesized_pattern,
+  int child: @ruby_underscore_pattern_expr ref
+);
+
+@ruby_parenthesized_statements_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_parenthesized_statements, index]
+ruby_parenthesized_statements_child(
+  int ruby_parenthesized_statements: @ruby_parenthesized_statements ref,
+  int index: int ref,
+  unique int child: @ruby_parenthesized_statements_child_type ref
+);
+
+ruby_parenthesized_statements_def(
+  unique int id: @ruby_parenthesized_statements
+);
+
+@ruby_pattern_child_type = @ruby_splat_argument | @ruby_underscore_arg
+
+ruby_pattern_def(
+  unique int id: @ruby_pattern,
+  int child: @ruby_pattern_child_type ref
+);
+
+@ruby_program_child_type = @ruby_token_empty_statement | @ruby_token_uninterpreted | @ruby_underscore_statement
+
+#keyset[ruby_program, index]
+ruby_program_child(
+  int ruby_program: @ruby_program ref,
+  int index: int ref,
+  unique int child: @ruby_program_child_type ref
+);
+
+ruby_program_def(
+  unique int id: @ruby_program
+);
+
+@ruby_range_begin_type = @ruby_underscore_arg | @ruby_underscore_pattern_primitive
+
+ruby_range_begin(
+  unique int ruby_range: @ruby_range ref,
+  unique int begin: @ruby_range_begin_type ref
+);
+
+@ruby_range_end_type = @ruby_underscore_arg | @ruby_underscore_pattern_primitive
+
+ruby_range_end(
+  unique int ruby_range: @ruby_range ref,
+  unique int end: @ruby_range_end_type ref
+);
+
+case @ruby_range.operator of
+  0 = @ruby_range_dotdot
+| 1 = @ruby_range_dotdotdot
+;
+
+
+ruby_range_def(
+  unique int id: @ruby_range,
+  int operator: int ref
+);
+
+@ruby_rational_child_type = @ruby_token_float | @ruby_token_integer
+
+ruby_rational_def(
+  unique int id: @ruby_rational,
+  int child: @ruby_rational_child_type ref
+);
+
+ruby_redo_child(
+  unique int ruby_redo: @ruby_redo ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_redo_def(
+  unique int id: @ruby_redo
+);
+
+@ruby_regex_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_regex, index]
+ruby_regex_child(
+  int ruby_regex: @ruby_regex ref,
+  int index: int ref,
+  unique int child: @ruby_regex_child_type ref
+);
+
+ruby_regex_def(
+  unique int id: @ruby_regex
+);
+
+ruby_rescue_body(
+  unique int ruby_rescue: @ruby_rescue ref,
+  unique int body: @ruby_then ref
+);
+
+ruby_rescue_exceptions(
+  unique int ruby_rescue: @ruby_rescue ref,
+  unique int exceptions: @ruby_exceptions ref
+);
+
+ruby_rescue_variable(
+  unique int ruby_rescue: @ruby_rescue ref,
+  unique int variable: @ruby_exception_variable ref
+);
+
+ruby_rescue_def(
+  unique int id: @ruby_rescue
+);
+
+@ruby_rescue_modifier_body_type = @ruby_underscore_arg | @ruby_underscore_statement
+
+ruby_rescue_modifier_def(
+  unique int id: @ruby_rescue_modifier,
+  int body: @ruby_rescue_modifier_body_type ref,
+  int handler: @ruby_underscore_expression ref
+);
+
+ruby_rest_assignment_child(
+  unique int ruby_rest_assignment: @ruby_rest_assignment ref,
+  unique int child: @ruby_underscore_lhs ref
+);
+
+ruby_rest_assignment_def(
+  unique int id: @ruby_rest_assignment
+);
+
+ruby_retry_child(
+  unique int ruby_retry: @ruby_retry ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_retry_def(
+  unique int id: @ruby_retry
+);
+
+ruby_return_child(
+  unique int ruby_return: @ruby_return ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_return_def(
+  unique int id: @ruby_return
+);
+
+@ruby_right_assignment_list_child_type = @ruby_splat_argument | @ruby_underscore_arg
+
+#keyset[ruby_right_assignment_list, index]
+ruby_right_assignment_list_child(
+  int ruby_right_assignment_list: @ruby_right_assignment_list ref,
+  int index: int ref,
+  unique int child: @ruby_right_assignment_list_child_type ref
+);
+
+ruby_right_assignment_list_def(
+  unique int id: @ruby_right_assignment_list
+);
+
+@ruby_scope_resolution_scope_type = @ruby_underscore_pattern_constant | @ruby_underscore_primary
+
+ruby_scope_resolution_scope(
+  unique int ruby_scope_resolution: @ruby_scope_resolution ref,
+  unique int scope: @ruby_scope_resolution_scope_type ref
+);
+
+ruby_scope_resolution_def(
+  unique int id: @ruby_scope_resolution,
+  int name: @ruby_token_constant ref
+);
+
+ruby_setter_def(
+  unique int id: @ruby_setter,
+  int name: @ruby_token_identifier ref
+);
+
+ruby_singleton_class_body(
+  unique int ruby_singleton_class: @ruby_singleton_class ref,
+  unique int body: @ruby_body_statement ref
+);
+
+ruby_singleton_class_def(
+  unique int id: @ruby_singleton_class,
+  int value: @ruby_underscore_arg ref
+);
+
+@ruby_singleton_method_body_type = @ruby_body_statement | @ruby_rescue_modifier | @ruby_underscore_arg
+
+ruby_singleton_method_body(
+  unique int ruby_singleton_method: @ruby_singleton_method ref,
+  unique int body: @ruby_singleton_method_body_type ref
+);
+
+@ruby_singleton_method_object_type = @ruby_underscore_arg | @ruby_underscore_variable
+
+ruby_singleton_method_parameters(
+  unique int ruby_singleton_method: @ruby_singleton_method ref,
+  unique int parameters: @ruby_method_parameters ref
+);
+
+ruby_singleton_method_def(
+  unique int id: @ruby_singleton_method,
+  int name: @ruby_underscore_method_name ref,
+  int object: @ruby_singleton_method_object_type ref
+);
+
+ruby_splat_argument_def(
+  unique int id: @ruby_splat_argument,
+  int child: @ruby_underscore_arg ref
+);
+
+ruby_splat_parameter_name(
+  unique int ruby_splat_parameter: @ruby_splat_parameter ref,
+  unique int name: @ruby_token_identifier ref
+);
+
+ruby_splat_parameter_def(
+  unique int id: @ruby_splat_parameter
+);
+
+@ruby_string_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_string__, index]
+ruby_string_child(
+  int ruby_string__: @ruby_string__ ref,
+  int index: int ref,
+  unique int child: @ruby_string_child_type ref
+);
+
+ruby_string_def(
+  unique int id: @ruby_string__
+);
+
+#keyset[ruby_string_array, index]
+ruby_string_array_child(
+  int ruby_string_array: @ruby_string_array ref,
+  int index: int ref,
+  unique int child: @ruby_bare_string ref
+);
+
+ruby_string_array_def(
+  unique int id: @ruby_string_array
+);
+
+@ruby_subshell_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_subshell, index]
+ruby_subshell_child(
+  int ruby_subshell: @ruby_subshell ref,
+  int index: int ref,
+  unique int child: @ruby_subshell_child_type ref
+);
+
+ruby_subshell_def(
+  unique int id: @ruby_subshell
+);
+
+ruby_superclass_def(
+  unique int id: @ruby_superclass,
+  int child: @ruby_underscore_expression ref
+);
+
+#keyset[ruby_symbol_array, index]
+ruby_symbol_array_child(
+  int ruby_symbol_array: @ruby_symbol_array ref,
+  int index: int ref,
+  unique int child: @ruby_bare_symbol ref
+);
+
+ruby_symbol_array_def(
+  unique int id: @ruby_symbol_array
+);
+
+@ruby_then_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_then, index]
+ruby_then_child(
+  int ruby_then: @ruby_then ref,
+  int index: int ref,
+  unique int child: @ruby_then_child_type ref
+);
+
+ruby_then_def(
+  unique int id: @ruby_then
+);
+
+@ruby_unary_operand_type = @ruby_parenthesized_statements | @ruby_underscore_expression | @ruby_underscore_simple_numeric
+
+case @ruby_unary.operator of
+  0 = @ruby_unary_bang
+| 1 = @ruby_unary_plus
+| 2 = @ruby_unary_minus
+| 3 = @ruby_unary_definedquestion
+| 4 = @ruby_unary_not
+| 5 = @ruby_unary_tilde
+;
+
+
+ruby_unary_def(
+  unique int id: @ruby_unary,
+  int operand: @ruby_unary_operand_type ref,
+  int operator: int ref
+);
+
+#keyset[ruby_undef, index]
+ruby_undef_child(
+  int ruby_undef: @ruby_undef ref,
+  int index: int ref,
+  unique int child: @ruby_underscore_method_name ref
+);
+
+ruby_undef_def(
+  unique int id: @ruby_undef
+);
+
+@ruby_unless_alternative_type = @ruby_else | @ruby_elsif
+
+ruby_unless_alternative(
+  unique int ruby_unless: @ruby_unless ref,
+  unique int alternative: @ruby_unless_alternative_type ref
+);
+
+ruby_unless_consequence(
+  unique int ruby_unless: @ruby_unless ref,
+  unique int consequence: @ruby_then ref
+);
+
+ruby_unless_def(
+  unique int id: @ruby_unless,
+  int condition: @ruby_underscore_statement ref
+);
+
+ruby_unless_guard_def(
+  unique int id: @ruby_unless_guard,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_unless_modifier_def(
+  unique int id: @ruby_unless_modifier,
+  int body: @ruby_underscore_statement ref,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_until_def(
+  unique int id: @ruby_until,
+  int body: @ruby_do ref,
+  int condition: @ruby_underscore_statement ref
+);
+
+ruby_until_modifier_def(
+  unique int id: @ruby_until_modifier,
+  int body: @ruby_underscore_statement ref,
+  int condition: @ruby_underscore_expression ref
+);
+
+@ruby_variable_reference_pattern_name_type = @ruby_token_identifier | @ruby_underscore_nonlocal_variable
+
+ruby_variable_reference_pattern_def(
+  unique int id: @ruby_variable_reference_pattern,
+  int name: @ruby_variable_reference_pattern_name_type ref
+);
+
+ruby_when_body(
+  unique int ruby_when: @ruby_when ref,
+  unique int body: @ruby_then ref
+);
+
+#keyset[ruby_when, index]
+ruby_when_pattern(
+  int ruby_when: @ruby_when ref,
+  int index: int ref,
+  unique int pattern: @ruby_pattern ref
+);
+
+ruby_when_def(
+  unique int id: @ruby_when
+);
+
+ruby_while_def(
+  unique int id: @ruby_while,
+  int body: @ruby_do ref,
+  int condition: @ruby_underscore_statement ref
+);
+
+ruby_while_modifier_def(
+  unique int id: @ruby_while_modifier,
+  int body: @ruby_underscore_statement ref,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_yield_child(
+  unique int ruby_yield: @ruby_yield ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_yield_def(
+  unique int id: @ruby_yield
+);
+
+ruby_tokeninfo(
+  unique int id: @ruby_token,
+  int kind: int ref,
+  string value: string ref
+);
+
+case @ruby_token.kind of
+  0 = @ruby_reserved_word
+| 1 = @ruby_token_character
+| 2 = @ruby_token_class_variable
+| 3 = @ruby_token_comment
+| 4 = @ruby_token_constant
+| 5 = @ruby_token_empty_statement
+| 6 = @ruby_token_encoding
+| 7 = @ruby_token_escape_sequence
+| 8 = @ruby_token_false
+| 9 = @ruby_token_file
+| 10 = @ruby_token_float
+| 11 = @ruby_token_forward_argument
+| 12 = @ruby_token_forward_parameter
+| 13 = @ruby_token_global_variable
+| 14 = @ruby_token_hash_key_symbol
+| 15 = @ruby_token_hash_splat_nil
+| 16 = @ruby_token_heredoc_beginning
+| 17 = @ruby_token_heredoc_content
+| 18 = @ruby_token_heredoc_end
+| 19 = @ruby_token_identifier
+| 20 = @ruby_token_instance_variable
+| 21 = @ruby_token_integer
+| 22 = @ruby_token_line
+| 23 = @ruby_token_nil
+| 24 = @ruby_token_operator
+| 25 = @ruby_token_self
+| 26 = @ruby_token_simple_symbol
+| 27 = @ruby_token_string_content
+| 28 = @ruby_token_super
+| 29 = @ruby_token_true
+| 30 = @ruby_token_uninterpreted
+;
+
+
+@ruby_ast_node = @ruby_alias | @ruby_alternative_pattern | @ruby_argument_list | @ruby_array | @ruby_array_pattern | @ruby_as_pattern | @ruby_assignment | @ruby_bare_string | @ruby_bare_symbol | @ruby_begin | @ruby_begin_block | @ruby_binary | @ruby_block | @ruby_block_argument | @ruby_block_body | @ruby_block_parameter | @ruby_block_parameters | @ruby_body_statement | @ruby_break | @ruby_call | @ruby_case__ | @ruby_case_match | @ruby_chained_string | @ruby_class | @ruby_complex | @ruby_conditional | @ruby_delimited_symbol | @ruby_destructured_left_assignment | @ruby_destructured_parameter | @ruby_do | @ruby_do_block | @ruby_element_reference | @ruby_else | @ruby_elsif | @ruby_end_block | @ruby_ensure | @ruby_exception_variable | @ruby_exceptions | @ruby_expression_reference_pattern | @ruby_find_pattern | @ruby_for | @ruby_hash | @ruby_hash_pattern | @ruby_hash_splat_argument | @ruby_hash_splat_parameter | @ruby_heredoc_body | @ruby_if | @ruby_if_guard | @ruby_if_modifier | @ruby_in | @ruby_in_clause | @ruby_interpolation | @ruby_keyword_parameter | @ruby_keyword_pattern | @ruby_lambda | @ruby_lambda_parameters | @ruby_left_assignment_list | @ruby_method | @ruby_method_parameters | @ruby_module | @ruby_next | @ruby_operator_assignment | @ruby_optional_parameter | @ruby_pair | @ruby_parenthesized_pattern | @ruby_parenthesized_statements | @ruby_pattern | @ruby_program | @ruby_range | @ruby_rational | @ruby_redo | @ruby_regex | @ruby_rescue | @ruby_rescue_modifier | @ruby_rest_assignment | @ruby_retry | @ruby_return | @ruby_right_assignment_list | @ruby_scope_resolution | @ruby_setter | @ruby_singleton_class | @ruby_singleton_method | @ruby_splat_argument | @ruby_splat_parameter | @ruby_string__ | @ruby_string_array | @ruby_subshell | @ruby_superclass | @ruby_symbol_array | @ruby_then | @ruby_token | @ruby_unary | @ruby_undef | @ruby_unless | @ruby_unless_guard | @ruby_unless_modifier | @ruby_until | @ruby_until_modifier | @ruby_variable_reference_pattern | @ruby_when | @ruby_while | @ruby_while_modifier | @ruby_yield
+
+@ruby_ast_node_parent = @file | @ruby_ast_node
+
+#keyset[parent, parent_index]
+ruby_ast_node_info(
+  unique int node: @ruby_ast_node ref,
+  int parent: @ruby_ast_node_parent ref,
+  int parent_index: int ref,
+  int loc: @location ref
+);
+
+erb_comment_directive_child(
+  unique int erb_comment_directive: @erb_comment_directive ref,
+  unique int child: @erb_token_comment ref
+);
+
+erb_comment_directive_def(
+  unique int id: @erb_comment_directive
+);
+
+erb_directive_child(
+  unique int erb_directive: @erb_directive ref,
+  unique int child: @erb_token_code ref
+);
+
+erb_directive_def(
+  unique int id: @erb_directive
+);
+
+erb_graphql_directive_child(
+  unique int erb_graphql_directive: @erb_graphql_directive ref,
+  unique int child: @erb_token_code ref
+);
+
+erb_graphql_directive_def(
+  unique int id: @erb_graphql_directive
+);
+
+erb_output_directive_child(
+  unique int erb_output_directive: @erb_output_directive ref,
+  unique int child: @erb_token_code ref
+);
+
+erb_output_directive_def(
+  unique int id: @erb_output_directive
+);
+
+@erb_template_child_type = @erb_comment_directive | @erb_directive | @erb_graphql_directive | @erb_output_directive | @erb_token_content
+
+#keyset[erb_template, index]
+erb_template_child(
+  int erb_template: @erb_template ref,
+  int index: int ref,
+  unique int child: @erb_template_child_type ref
+);
+
+erb_template_def(
+  unique int id: @erb_template
+);
+
+erb_tokeninfo(
+  unique int id: @erb_token,
+  int kind: int ref,
+  string value: string ref
+);
+
+case @erb_token.kind of
+  0 = @erb_reserved_word
+| 1 = @erb_token_code
+| 2 = @erb_token_comment
+| 3 = @erb_token_content
+;
+
+
+@erb_ast_node = @erb_comment_directive | @erb_directive | @erb_graphql_directive | @erb_output_directive | @erb_template | @erb_token
+
+@erb_ast_node_parent = @erb_ast_node | @file
+
+#keyset[parent, parent_index]
+erb_ast_node_info(
+  unique int node: @erb_ast_node ref,
+  int parent: @erb_ast_node_parent ref,
+  int parent_index: int ref,
+  int loc: @location ref
+);
+
diff --git a/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby.dbscheme b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby.dbscheme
new file mode 100644
index 00000000000..4ba51641799
--- /dev/null
+++ b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby.dbscheme
@@ -0,0 +1,1433 @@
+// CodeQL database schema for Ruby
+// Automatically generated from the tree-sitter grammar; do not edit
+
+@location = @location_default
+
+locations_default(
+  unique int id: @location_default,
+  int file: @file ref,
+  int start_line: int ref,
+  int start_column: int ref,
+  int end_line: int ref,
+  int end_column: int ref
+);
+
+files(
+  unique int id: @file,
+  string name: string ref
+);
+
+folders(
+  unique int id: @folder,
+  string name: string ref
+);
+
+@container = @file | @folder
+
+containerparent(
+  int parent: @container ref,
+  unique int child: @container ref
+);
+
+sourceLocationPrefix(
+  string prefix: string ref
+);
+
+diagnostics(
+  unique int id: @diagnostic,
+  int severity: int ref,
+  string error_tag: string ref,
+  string error_message: string ref,
+  string full_error_message: string ref,
+  int location: @location_default ref
+);
+
+case @diagnostic.severity of
+  10 = @diagnostic_debug
+| 20 = @diagnostic_info
+| 30 = @diagnostic_warning
+| 40 = @diagnostic_error
+;
+
+
+@ruby_underscore_arg = @ruby_assignment | @ruby_binary | @ruby_conditional | @ruby_operator_assignment | @ruby_range | @ruby_unary | @ruby_underscore_primary
+
+@ruby_underscore_call_operator = @ruby_reserved_word
+
+@ruby_underscore_expression = @ruby_assignment | @ruby_binary | @ruby_break | @ruby_call | @ruby_next | @ruby_operator_assignment | @ruby_return | @ruby_unary | @ruby_underscore_arg | @ruby_yield
+
+@ruby_underscore_lhs = @ruby_call | @ruby_element_reference | @ruby_scope_resolution | @ruby_token_false | @ruby_token_nil | @ruby_token_true | @ruby_underscore_variable
+
+@ruby_underscore_method_name = @ruby_delimited_symbol | @ruby_setter | @ruby_token_constant | @ruby_token_identifier | @ruby_token_operator | @ruby_token_simple_symbol | @ruby_underscore_nonlocal_variable
+
+@ruby_underscore_nonlocal_variable = @ruby_token_class_variable | @ruby_token_global_variable | @ruby_token_instance_variable
+
+@ruby_underscore_pattern_constant = @ruby_scope_resolution | @ruby_token_constant
+
+@ruby_underscore_pattern_expr = @ruby_alternative_pattern | @ruby_as_pattern | @ruby_underscore_pattern_expr_basic
+
+@ruby_underscore_pattern_expr_basic = @ruby_array_pattern | @ruby_expression_reference_pattern | @ruby_find_pattern | @ruby_hash_pattern | @ruby_parenthesized_pattern | @ruby_range | @ruby_token_identifier | @ruby_underscore_pattern_constant | @ruby_underscore_pattern_primitive | @ruby_variable_reference_pattern
+
+@ruby_underscore_pattern_primitive = @ruby_delimited_symbol | @ruby_lambda | @ruby_regex | @ruby_string__ | @ruby_string_array | @ruby_subshell | @ruby_symbol_array | @ruby_token_encoding | @ruby_token_false | @ruby_token_file | @ruby_token_heredoc_beginning | @ruby_token_line | @ruby_token_nil | @ruby_token_self | @ruby_token_simple_symbol | @ruby_token_true | @ruby_unary | @ruby_underscore_simple_numeric
+
+@ruby_underscore_pattern_top_expr_body = @ruby_array_pattern | @ruby_find_pattern | @ruby_hash_pattern | @ruby_underscore_pattern_expr
+
+@ruby_underscore_primary = @ruby_array | @ruby_begin | @ruby_break | @ruby_call | @ruby_case__ | @ruby_case_match | @ruby_chained_string | @ruby_class | @ruby_delimited_symbol | @ruby_for | @ruby_hash | @ruby_if | @ruby_lambda | @ruby_method | @ruby_module | @ruby_next | @ruby_parenthesized_statements | @ruby_redo | @ruby_regex | @ruby_retry | @ruby_return | @ruby_singleton_class | @ruby_singleton_method | @ruby_string__ | @ruby_string_array | @ruby_subshell | @ruby_symbol_array | @ruby_token_character | @ruby_token_heredoc_beginning | @ruby_token_simple_symbol | @ruby_unary | @ruby_underscore_lhs | @ruby_underscore_simple_numeric | @ruby_unless | @ruby_until | @ruby_while | @ruby_yield
+
+@ruby_underscore_simple_numeric = @ruby_complex | @ruby_rational | @ruby_token_float | @ruby_token_integer
+
+@ruby_underscore_statement = @ruby_alias | @ruby_begin_block | @ruby_end_block | @ruby_if_modifier | @ruby_rescue_modifier | @ruby_undef | @ruby_underscore_expression | @ruby_unless_modifier | @ruby_until_modifier | @ruby_while_modifier
+
+@ruby_underscore_variable = @ruby_token_constant | @ruby_token_identifier | @ruby_token_self | @ruby_token_super | @ruby_underscore_nonlocal_variable
+
+ruby_alias_def(
+  unique int id: @ruby_alias,
+  int alias: @ruby_underscore_method_name ref,
+  int name: @ruby_underscore_method_name ref
+);
+
+#keyset[ruby_alternative_pattern, index]
+ruby_alternative_pattern_alternatives(
+  int ruby_alternative_pattern: @ruby_alternative_pattern ref,
+  int index: int ref,
+  unique int alternatives: @ruby_underscore_pattern_expr_basic ref
+);
+
+ruby_alternative_pattern_def(
+  unique int id: @ruby_alternative_pattern
+);
+
+@ruby_argument_list_child_type = @ruby_block_argument | @ruby_hash_splat_argument | @ruby_pair | @ruby_splat_argument | @ruby_token_forward_argument | @ruby_underscore_expression
+
+#keyset[ruby_argument_list, index]
+ruby_argument_list_child(
+  int ruby_argument_list: @ruby_argument_list ref,
+  int index: int ref,
+  unique int child: @ruby_argument_list_child_type ref
+);
+
+ruby_argument_list_def(
+  unique int id: @ruby_argument_list
+);
+
+@ruby_array_child_type = @ruby_block_argument | @ruby_hash_splat_argument | @ruby_pair | @ruby_splat_argument | @ruby_token_forward_argument | @ruby_underscore_expression
+
+#keyset[ruby_array, index]
+ruby_array_child(
+  int ruby_array: @ruby_array ref,
+  int index: int ref,
+  unique int child: @ruby_array_child_type ref
+);
+
+ruby_array_def(
+  unique int id: @ruby_array
+);
+
+ruby_array_pattern_class(
+  unique int ruby_array_pattern: @ruby_array_pattern ref,
+  unique int class: @ruby_underscore_pattern_constant ref
+);
+
+@ruby_array_pattern_child_type = @ruby_splat_parameter | @ruby_underscore_pattern_expr
+
+#keyset[ruby_array_pattern, index]
+ruby_array_pattern_child(
+  int ruby_array_pattern: @ruby_array_pattern ref,
+  int index: int ref,
+  unique int child: @ruby_array_pattern_child_type ref
+);
+
+ruby_array_pattern_def(
+  unique int id: @ruby_array_pattern
+);
+
+ruby_as_pattern_def(
+  unique int id: @ruby_as_pattern,
+  int name: @ruby_token_identifier ref,
+  int value: @ruby_underscore_pattern_expr ref
+);
+
+@ruby_assignment_left_type = @ruby_left_assignment_list | @ruby_underscore_lhs
+
+@ruby_assignment_right_type = @ruby_rescue_modifier | @ruby_right_assignment_list | @ruby_splat_argument | @ruby_underscore_expression
+
+ruby_assignment_def(
+  unique int id: @ruby_assignment,
+  int left: @ruby_assignment_left_type ref,
+  int right: @ruby_assignment_right_type ref
+);
+
+@ruby_bare_string_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_bare_string, index]
+ruby_bare_string_child(
+  int ruby_bare_string: @ruby_bare_string ref,
+  int index: int ref,
+  unique int child: @ruby_bare_string_child_type ref
+);
+
+ruby_bare_string_def(
+  unique int id: @ruby_bare_string
+);
+
+@ruby_bare_symbol_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_bare_symbol, index]
+ruby_bare_symbol_child(
+  int ruby_bare_symbol: @ruby_bare_symbol ref,
+  int index: int ref,
+  unique int child: @ruby_bare_symbol_child_type ref
+);
+
+ruby_bare_symbol_def(
+  unique int id: @ruby_bare_symbol
+);
+
+@ruby_begin_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_begin, index]
+ruby_begin_child(
+  int ruby_begin: @ruby_begin ref,
+  int index: int ref,
+  unique int child: @ruby_begin_child_type ref
+);
+
+ruby_begin_def(
+  unique int id: @ruby_begin
+);
+
+@ruby_begin_block_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_begin_block, index]
+ruby_begin_block_child(
+  int ruby_begin_block: @ruby_begin_block ref,
+  int index: int ref,
+  unique int child: @ruby_begin_block_child_type ref
+);
+
+ruby_begin_block_def(
+  unique int id: @ruby_begin_block
+);
+
+@ruby_binary_left_type = @ruby_underscore_expression | @ruby_underscore_simple_numeric
+
+case @ruby_binary.operator of
+  0 = @ruby_binary_bangequal
+| 1 = @ruby_binary_bangtilde
+| 2 = @ruby_binary_percent
+| 3 = @ruby_binary_ampersand
+| 4 = @ruby_binary_ampersandampersand
+| 5 = @ruby_binary_star
+| 6 = @ruby_binary_starstar
+| 7 = @ruby_binary_plus
+| 8 = @ruby_binary_minus
+| 9 = @ruby_binary_slash
+| 10 = @ruby_binary_langle
+| 11 = @ruby_binary_langlelangle
+| 12 = @ruby_binary_langleequal
+| 13 = @ruby_binary_langleequalrangle
+| 14 = @ruby_binary_equalequal
+| 15 = @ruby_binary_equalequalequal
+| 16 = @ruby_binary_equaltilde
+| 17 = @ruby_binary_rangle
+| 18 = @ruby_binary_rangleequal
+| 19 = @ruby_binary_ranglerangle
+| 20 = @ruby_binary_caret
+| 21 = @ruby_binary_and
+| 22 = @ruby_binary_or
+| 23 = @ruby_binary_pipe
+| 24 = @ruby_binary_pipepipe
+;
+
+
+ruby_binary_def(
+  unique int id: @ruby_binary,
+  int left: @ruby_binary_left_type ref,
+  int operator: int ref,
+  int right: @ruby_underscore_expression ref
+);
+
+ruby_block_parameters(
+  unique int ruby_block: @ruby_block ref,
+  unique int parameters: @ruby_block_parameters ref
+);
+
+@ruby_block_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_block, index]
+ruby_block_child(
+  int ruby_block: @ruby_block ref,
+  int index: int ref,
+  unique int child: @ruby_block_child_type ref
+);
+
+ruby_block_def(
+  unique int id: @ruby_block
+);
+
+ruby_block_argument_child(
+  unique int ruby_block_argument: @ruby_block_argument ref,
+  unique int child: @ruby_underscore_arg ref
+);
+
+ruby_block_argument_def(
+  unique int id: @ruby_block_argument
+);
+
+ruby_block_parameter_name(
+  unique int ruby_block_parameter: @ruby_block_parameter ref,
+  unique int name: @ruby_token_identifier ref
+);
+
+ruby_block_parameter_def(
+  unique int id: @ruby_block_parameter
+);
+
+#keyset[ruby_block_parameters, index]
+ruby_block_parameters_locals(
+  int ruby_block_parameters: @ruby_block_parameters ref,
+  int index: int ref,
+  unique int locals: @ruby_token_identifier ref
+);
+
+@ruby_block_parameters_child_type = @ruby_block_parameter | @ruby_destructured_parameter | @ruby_hash_splat_parameter | @ruby_keyword_parameter | @ruby_optional_parameter | @ruby_splat_parameter | @ruby_token_forward_parameter | @ruby_token_hash_splat_nil | @ruby_token_identifier
+
+#keyset[ruby_block_parameters, index]
+ruby_block_parameters_child(
+  int ruby_block_parameters: @ruby_block_parameters ref,
+  int index: int ref,
+  unique int child: @ruby_block_parameters_child_type ref
+);
+
+ruby_block_parameters_def(
+  unique int id: @ruby_block_parameters
+);
+
+ruby_break_child(
+  unique int ruby_break: @ruby_break ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_break_def(
+  unique int id: @ruby_break
+);
+
+ruby_call_arguments(
+  unique int ruby_call: @ruby_call ref,
+  unique int arguments: @ruby_argument_list ref
+);
+
+@ruby_call_block_type = @ruby_block | @ruby_do_block
+
+ruby_call_block(
+  unique int ruby_call: @ruby_call ref,
+  unique int block: @ruby_call_block_type ref
+);
+
+@ruby_call_method_type = @ruby_token_operator | @ruby_underscore_variable
+
+ruby_call_method(
+  unique int ruby_call: @ruby_call ref,
+  unique int method: @ruby_call_method_type ref
+);
+
+ruby_call_operator(
+  unique int ruby_call: @ruby_call ref,
+  unique int operator: @ruby_underscore_call_operator ref
+);
+
+ruby_call_receiver(
+  unique int ruby_call: @ruby_call ref,
+  unique int receiver: @ruby_underscore_primary ref
+);
+
+ruby_call_def(
+  unique int id: @ruby_call
+);
+
+ruby_case_value(
+  unique int ruby_case__: @ruby_case__ ref,
+  unique int value: @ruby_underscore_statement ref
+);
+
+@ruby_case_child_type = @ruby_else | @ruby_when
+
+#keyset[ruby_case__, index]
+ruby_case_child(
+  int ruby_case__: @ruby_case__ ref,
+  int index: int ref,
+  unique int child: @ruby_case_child_type ref
+);
+
+ruby_case_def(
+  unique int id: @ruby_case__
+);
+
+#keyset[ruby_case_match, index]
+ruby_case_match_clauses(
+  int ruby_case_match: @ruby_case_match ref,
+  int index: int ref,
+  unique int clauses: @ruby_in_clause ref
+);
+
+ruby_case_match_else(
+  unique int ruby_case_match: @ruby_case_match ref,
+  unique int else: @ruby_else ref
+);
+
+ruby_case_match_def(
+  unique int id: @ruby_case_match,
+  int value: @ruby_underscore_statement ref
+);
+
+#keyset[ruby_chained_string, index]
+ruby_chained_string_child(
+  int ruby_chained_string: @ruby_chained_string ref,
+  int index: int ref,
+  unique int child: @ruby_string__ ref
+);
+
+ruby_chained_string_def(
+  unique int id: @ruby_chained_string
+);
+
+@ruby_class_name_type = @ruby_scope_resolution | @ruby_token_constant
+
+ruby_class_superclass(
+  unique int ruby_class: @ruby_class ref,
+  unique int superclass: @ruby_superclass ref
+);
+
+@ruby_class_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_class, index]
+ruby_class_child(
+  int ruby_class: @ruby_class ref,
+  int index: int ref,
+  unique int child: @ruby_class_child_type ref
+);
+
+ruby_class_def(
+  unique int id: @ruby_class,
+  int name: @ruby_class_name_type ref
+);
+
+@ruby_complex_child_type = @ruby_rational | @ruby_token_float | @ruby_token_integer
+
+ruby_complex_def(
+  unique int id: @ruby_complex,
+  int child: @ruby_complex_child_type ref
+);
+
+ruby_conditional_def(
+  unique int id: @ruby_conditional,
+  int alternative: @ruby_underscore_arg ref,
+  int condition: @ruby_underscore_arg ref,
+  int consequence: @ruby_underscore_arg ref
+);
+
+@ruby_delimited_symbol_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_delimited_symbol, index]
+ruby_delimited_symbol_child(
+  int ruby_delimited_symbol: @ruby_delimited_symbol ref,
+  int index: int ref,
+  unique int child: @ruby_delimited_symbol_child_type ref
+);
+
+ruby_delimited_symbol_def(
+  unique int id: @ruby_delimited_symbol
+);
+
+@ruby_destructured_left_assignment_child_type = @ruby_destructured_left_assignment | @ruby_rest_assignment | @ruby_underscore_lhs
+
+#keyset[ruby_destructured_left_assignment, index]
+ruby_destructured_left_assignment_child(
+  int ruby_destructured_left_assignment: @ruby_destructured_left_assignment ref,
+  int index: int ref,
+  unique int child: @ruby_destructured_left_assignment_child_type ref
+);
+
+ruby_destructured_left_assignment_def(
+  unique int id: @ruby_destructured_left_assignment
+);
+
+@ruby_destructured_parameter_child_type = @ruby_block_parameter | @ruby_destructured_parameter | @ruby_hash_splat_parameter | @ruby_keyword_parameter | @ruby_optional_parameter | @ruby_splat_parameter | @ruby_token_forward_parameter | @ruby_token_hash_splat_nil | @ruby_token_identifier
+
+#keyset[ruby_destructured_parameter, index]
+ruby_destructured_parameter_child(
+  int ruby_destructured_parameter: @ruby_destructured_parameter ref,
+  int index: int ref,
+  unique int child: @ruby_destructured_parameter_child_type ref
+);
+
+ruby_destructured_parameter_def(
+  unique int id: @ruby_destructured_parameter
+);
+
+@ruby_do_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_do, index]
+ruby_do_child(
+  int ruby_do: @ruby_do ref,
+  int index: int ref,
+  unique int child: @ruby_do_child_type ref
+);
+
+ruby_do_def(
+  unique int id: @ruby_do
+);
+
+ruby_do_block_parameters(
+  unique int ruby_do_block: @ruby_do_block ref,
+  unique int parameters: @ruby_block_parameters ref
+);
+
+@ruby_do_block_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_do_block, index]
+ruby_do_block_child(
+  int ruby_do_block: @ruby_do_block ref,
+  int index: int ref,
+  unique int child: @ruby_do_block_child_type ref
+);
+
+ruby_do_block_def(
+  unique int id: @ruby_do_block
+);
+
+@ruby_element_reference_child_type = @ruby_block_argument | @ruby_hash_splat_argument | @ruby_pair | @ruby_splat_argument | @ruby_token_forward_argument | @ruby_underscore_expression
+
+#keyset[ruby_element_reference, index]
+ruby_element_reference_child(
+  int ruby_element_reference: @ruby_element_reference ref,
+  int index: int ref,
+  unique int child: @ruby_element_reference_child_type ref
+);
+
+ruby_element_reference_def(
+  unique int id: @ruby_element_reference,
+  int object: @ruby_underscore_primary ref
+);
+
+@ruby_else_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_else, index]
+ruby_else_child(
+  int ruby_else: @ruby_else ref,
+  int index: int ref,
+  unique int child: @ruby_else_child_type ref
+);
+
+ruby_else_def(
+  unique int id: @ruby_else
+);
+
+@ruby_elsif_alternative_type = @ruby_else | @ruby_elsif
+
+ruby_elsif_alternative(
+  unique int ruby_elsif: @ruby_elsif ref,
+  unique int alternative: @ruby_elsif_alternative_type ref
+);
+
+ruby_elsif_consequence(
+  unique int ruby_elsif: @ruby_elsif ref,
+  unique int consequence: @ruby_then ref
+);
+
+ruby_elsif_def(
+  unique int id: @ruby_elsif,
+  int condition: @ruby_underscore_statement ref
+);
+
+@ruby_end_block_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_end_block, index]
+ruby_end_block_child(
+  int ruby_end_block: @ruby_end_block ref,
+  int index: int ref,
+  unique int child: @ruby_end_block_child_type ref
+);
+
+ruby_end_block_def(
+  unique int id: @ruby_end_block
+);
+
+@ruby_ensure_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_ensure, index]
+ruby_ensure_child(
+  int ruby_ensure: @ruby_ensure ref,
+  int index: int ref,
+  unique int child: @ruby_ensure_child_type ref
+);
+
+ruby_ensure_def(
+  unique int id: @ruby_ensure
+);
+
+ruby_exception_variable_def(
+  unique int id: @ruby_exception_variable,
+  int child: @ruby_underscore_lhs ref
+);
+
+@ruby_exceptions_child_type = @ruby_splat_argument | @ruby_underscore_arg
+
+#keyset[ruby_exceptions, index]
+ruby_exceptions_child(
+  int ruby_exceptions: @ruby_exceptions ref,
+  int index: int ref,
+  unique int child: @ruby_exceptions_child_type ref
+);
+
+ruby_exceptions_def(
+  unique int id: @ruby_exceptions
+);
+
+ruby_expression_reference_pattern_def(
+  unique int id: @ruby_expression_reference_pattern,
+  int value: @ruby_underscore_expression ref
+);
+
+ruby_find_pattern_class(
+  unique int ruby_find_pattern: @ruby_find_pattern ref,
+  unique int class: @ruby_underscore_pattern_constant ref
+);
+
+@ruby_find_pattern_child_type = @ruby_splat_parameter | @ruby_underscore_pattern_expr
+
+#keyset[ruby_find_pattern, index]
+ruby_find_pattern_child(
+  int ruby_find_pattern: @ruby_find_pattern ref,
+  int index: int ref,
+  unique int child: @ruby_find_pattern_child_type ref
+);
+
+ruby_find_pattern_def(
+  unique int id: @ruby_find_pattern
+);
+
+@ruby_for_pattern_type = @ruby_left_assignment_list | @ruby_underscore_lhs
+
+ruby_for_def(
+  unique int id: @ruby_for,
+  int body: @ruby_do ref,
+  int pattern: @ruby_for_pattern_type ref,
+  int value: @ruby_in ref
+);
+
+@ruby_hash_child_type = @ruby_hash_splat_argument | @ruby_pair
+
+#keyset[ruby_hash, index]
+ruby_hash_child(
+  int ruby_hash: @ruby_hash ref,
+  int index: int ref,
+  unique int child: @ruby_hash_child_type ref
+);
+
+ruby_hash_def(
+  unique int id: @ruby_hash
+);
+
+ruby_hash_pattern_class(
+  unique int ruby_hash_pattern: @ruby_hash_pattern ref,
+  unique int class: @ruby_underscore_pattern_constant ref
+);
+
+@ruby_hash_pattern_child_type = @ruby_hash_splat_parameter | @ruby_keyword_pattern | @ruby_token_hash_splat_nil
+
+#keyset[ruby_hash_pattern, index]
+ruby_hash_pattern_child(
+  int ruby_hash_pattern: @ruby_hash_pattern ref,
+  int index: int ref,
+  unique int child: @ruby_hash_pattern_child_type ref
+);
+
+ruby_hash_pattern_def(
+  unique int id: @ruby_hash_pattern
+);
+
+ruby_hash_splat_argument_def(
+  unique int id: @ruby_hash_splat_argument,
+  int child: @ruby_underscore_arg ref
+);
+
+ruby_hash_splat_parameter_name(
+  unique int ruby_hash_splat_parameter: @ruby_hash_splat_parameter ref,
+  unique int name: @ruby_token_identifier ref
+);
+
+ruby_hash_splat_parameter_def(
+  unique int id: @ruby_hash_splat_parameter
+);
+
+@ruby_heredoc_body_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_heredoc_content | @ruby_token_heredoc_end
+
+#keyset[ruby_heredoc_body, index]
+ruby_heredoc_body_child(
+  int ruby_heredoc_body: @ruby_heredoc_body ref,
+  int index: int ref,
+  unique int child: @ruby_heredoc_body_child_type ref
+);
+
+ruby_heredoc_body_def(
+  unique int id: @ruby_heredoc_body
+);
+
+@ruby_if_alternative_type = @ruby_else | @ruby_elsif
+
+ruby_if_alternative(
+  unique int ruby_if: @ruby_if ref,
+  unique int alternative: @ruby_if_alternative_type ref
+);
+
+ruby_if_consequence(
+  unique int ruby_if: @ruby_if ref,
+  unique int consequence: @ruby_then ref
+);
+
+ruby_if_def(
+  unique int id: @ruby_if,
+  int condition: @ruby_underscore_statement ref
+);
+
+ruby_if_guard_def(
+  unique int id: @ruby_if_guard,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_if_modifier_def(
+  unique int id: @ruby_if_modifier,
+  int body: @ruby_underscore_statement ref,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_in_def(
+  unique int id: @ruby_in,
+  int child: @ruby_underscore_arg ref
+);
+
+ruby_in_clause_body(
+  unique int ruby_in_clause: @ruby_in_clause ref,
+  unique int body: @ruby_then ref
+);
+
+@ruby_in_clause_guard_type = @ruby_if_guard | @ruby_unless_guard
+
+ruby_in_clause_guard(
+  unique int ruby_in_clause: @ruby_in_clause ref,
+  unique int guard: @ruby_in_clause_guard_type ref
+);
+
+ruby_in_clause_def(
+  unique int id: @ruby_in_clause,
+  int pattern: @ruby_underscore_pattern_top_expr_body ref
+);
+
+@ruby_interpolation_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_interpolation, index]
+ruby_interpolation_child(
+  int ruby_interpolation: @ruby_interpolation ref,
+  int index: int ref,
+  unique int child: @ruby_interpolation_child_type ref
+);
+
+ruby_interpolation_def(
+  unique int id: @ruby_interpolation
+);
+
+ruby_keyword_parameter_value(
+  unique int ruby_keyword_parameter: @ruby_keyword_parameter ref,
+  unique int value: @ruby_underscore_arg ref
+);
+
+ruby_keyword_parameter_def(
+  unique int id: @ruby_keyword_parameter,
+  int name: @ruby_token_identifier ref
+);
+
+@ruby_keyword_pattern_key_type = @ruby_string__ | @ruby_token_hash_key_symbol
+
+ruby_keyword_pattern_value(
+  unique int ruby_keyword_pattern: @ruby_keyword_pattern ref,
+  unique int value: @ruby_underscore_pattern_expr ref
+);
+
+ruby_keyword_pattern_def(
+  unique int id: @ruby_keyword_pattern,
+  int key__: @ruby_keyword_pattern_key_type ref
+);
+
+@ruby_lambda_body_type = @ruby_block | @ruby_do_block
+
+ruby_lambda_parameters(
+  unique int ruby_lambda: @ruby_lambda ref,
+  unique int parameters: @ruby_lambda_parameters ref
+);
+
+ruby_lambda_def(
+  unique int id: @ruby_lambda,
+  int body: @ruby_lambda_body_type ref
+);
+
+@ruby_lambda_parameters_child_type = @ruby_block_parameter | @ruby_destructured_parameter | @ruby_hash_splat_parameter | @ruby_keyword_parameter | @ruby_optional_parameter | @ruby_splat_parameter | @ruby_token_forward_parameter | @ruby_token_hash_splat_nil | @ruby_token_identifier
+
+#keyset[ruby_lambda_parameters, index]
+ruby_lambda_parameters_child(
+  int ruby_lambda_parameters: @ruby_lambda_parameters ref,
+  int index: int ref,
+  unique int child: @ruby_lambda_parameters_child_type ref
+);
+
+ruby_lambda_parameters_def(
+  unique int id: @ruby_lambda_parameters
+);
+
+@ruby_left_assignment_list_child_type = @ruby_destructured_left_assignment | @ruby_rest_assignment | @ruby_underscore_lhs
+
+#keyset[ruby_left_assignment_list, index]
+ruby_left_assignment_list_child(
+  int ruby_left_assignment_list: @ruby_left_assignment_list ref,
+  int index: int ref,
+  unique int child: @ruby_left_assignment_list_child_type ref
+);
+
+ruby_left_assignment_list_def(
+  unique int id: @ruby_left_assignment_list
+);
+
+ruby_method_parameters(
+  unique int ruby_method: @ruby_method ref,
+  unique int parameters: @ruby_method_parameters ref
+);
+
+@ruby_method_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_arg | @ruby_underscore_statement
+
+#keyset[ruby_method, index]
+ruby_method_child(
+  int ruby_method: @ruby_method ref,
+  int index: int ref,
+  unique int child: @ruby_method_child_type ref
+);
+
+ruby_method_def(
+  unique int id: @ruby_method,
+  int name: @ruby_underscore_method_name ref
+);
+
+@ruby_method_parameters_child_type = @ruby_block_parameter | @ruby_destructured_parameter | @ruby_hash_splat_parameter | @ruby_keyword_parameter | @ruby_optional_parameter | @ruby_splat_parameter | @ruby_token_forward_parameter | @ruby_token_hash_splat_nil | @ruby_token_identifier
+
+#keyset[ruby_method_parameters, index]
+ruby_method_parameters_child(
+  int ruby_method_parameters: @ruby_method_parameters ref,
+  int index: int ref,
+  unique int child: @ruby_method_parameters_child_type ref
+);
+
+ruby_method_parameters_def(
+  unique int id: @ruby_method_parameters
+);
+
+@ruby_module_name_type = @ruby_scope_resolution | @ruby_token_constant
+
+@ruby_module_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_module, index]
+ruby_module_child(
+  int ruby_module: @ruby_module ref,
+  int index: int ref,
+  unique int child: @ruby_module_child_type ref
+);
+
+ruby_module_def(
+  unique int id: @ruby_module,
+  int name: @ruby_module_name_type ref
+);
+
+ruby_next_child(
+  unique int ruby_next: @ruby_next ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_next_def(
+  unique int id: @ruby_next
+);
+
+case @ruby_operator_assignment.operator of
+  0 = @ruby_operator_assignment_percentequal
+| 1 = @ruby_operator_assignment_ampersandampersandequal
+| 2 = @ruby_operator_assignment_ampersandequal
+| 3 = @ruby_operator_assignment_starstarequal
+| 4 = @ruby_operator_assignment_starequal
+| 5 = @ruby_operator_assignment_plusequal
+| 6 = @ruby_operator_assignment_minusequal
+| 7 = @ruby_operator_assignment_slashequal
+| 8 = @ruby_operator_assignment_langlelangleequal
+| 9 = @ruby_operator_assignment_ranglerangleequal
+| 10 = @ruby_operator_assignment_caretequal
+| 11 = @ruby_operator_assignment_pipeequal
+| 12 = @ruby_operator_assignment_pipepipeequal
+;
+
+
+@ruby_operator_assignment_right_type = @ruby_rescue_modifier | @ruby_underscore_expression
+
+ruby_operator_assignment_def(
+  unique int id: @ruby_operator_assignment,
+  int left: @ruby_underscore_lhs ref,
+  int operator: int ref,
+  int right: @ruby_operator_assignment_right_type ref
+);
+
+ruby_optional_parameter_def(
+  unique int id: @ruby_optional_parameter,
+  int name: @ruby_token_identifier ref,
+  int value: @ruby_underscore_arg ref
+);
+
+@ruby_pair_key_type = @ruby_string__ | @ruby_token_hash_key_symbol | @ruby_underscore_arg
+
+ruby_pair_value(
+  unique int ruby_pair: @ruby_pair ref,
+  unique int value: @ruby_underscore_arg ref
+);
+
+ruby_pair_def(
+  unique int id: @ruby_pair,
+  int key__: @ruby_pair_key_type ref
+);
+
+ruby_parenthesized_pattern_def(
+  unique int id: @ruby_parenthesized_pattern,
+  int child: @ruby_underscore_pattern_expr ref
+);
+
+@ruby_parenthesized_statements_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_parenthesized_statements, index]
+ruby_parenthesized_statements_child(
+  int ruby_parenthesized_statements: @ruby_parenthesized_statements ref,
+  int index: int ref,
+  unique int child: @ruby_parenthesized_statements_child_type ref
+);
+
+ruby_parenthesized_statements_def(
+  unique int id: @ruby_parenthesized_statements
+);
+
+@ruby_pattern_child_type = @ruby_splat_argument | @ruby_underscore_arg
+
+ruby_pattern_def(
+  unique int id: @ruby_pattern,
+  int child: @ruby_pattern_child_type ref
+);
+
+@ruby_program_child_type = @ruby_token_empty_statement | @ruby_token_uninterpreted | @ruby_underscore_statement
+
+#keyset[ruby_program, index]
+ruby_program_child(
+  int ruby_program: @ruby_program ref,
+  int index: int ref,
+  unique int child: @ruby_program_child_type ref
+);
+
+ruby_program_def(
+  unique int id: @ruby_program
+);
+
+@ruby_range_begin_type = @ruby_underscore_arg | @ruby_underscore_pattern_primitive
+
+ruby_range_begin(
+  unique int ruby_range: @ruby_range ref,
+  unique int begin: @ruby_range_begin_type ref
+);
+
+@ruby_range_end_type = @ruby_underscore_arg | @ruby_underscore_pattern_primitive
+
+ruby_range_end(
+  unique int ruby_range: @ruby_range ref,
+  unique int end: @ruby_range_end_type ref
+);
+
+case @ruby_range.operator of
+  0 = @ruby_range_dotdot
+| 1 = @ruby_range_dotdotdot
+;
+
+
+ruby_range_def(
+  unique int id: @ruby_range,
+  int operator: int ref
+);
+
+@ruby_rational_child_type = @ruby_token_float | @ruby_token_integer
+
+ruby_rational_def(
+  unique int id: @ruby_rational,
+  int child: @ruby_rational_child_type ref
+);
+
+ruby_redo_child(
+  unique int ruby_redo: @ruby_redo ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_redo_def(
+  unique int id: @ruby_redo
+);
+
+@ruby_regex_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_regex, index]
+ruby_regex_child(
+  int ruby_regex: @ruby_regex ref,
+  int index: int ref,
+  unique int child: @ruby_regex_child_type ref
+);
+
+ruby_regex_def(
+  unique int id: @ruby_regex
+);
+
+ruby_rescue_body(
+  unique int ruby_rescue: @ruby_rescue ref,
+  unique int body: @ruby_then ref
+);
+
+ruby_rescue_exceptions(
+  unique int ruby_rescue: @ruby_rescue ref,
+  unique int exceptions: @ruby_exceptions ref
+);
+
+ruby_rescue_variable(
+  unique int ruby_rescue: @ruby_rescue ref,
+  unique int variable: @ruby_exception_variable ref
+);
+
+ruby_rescue_def(
+  unique int id: @ruby_rescue
+);
+
+@ruby_rescue_modifier_body_type = @ruby_underscore_arg | @ruby_underscore_statement
+
+ruby_rescue_modifier_def(
+  unique int id: @ruby_rescue_modifier,
+  int body: @ruby_rescue_modifier_body_type ref,
+  int handler: @ruby_underscore_expression ref
+);
+
+ruby_rest_assignment_child(
+  unique int ruby_rest_assignment: @ruby_rest_assignment ref,
+  unique int child: @ruby_underscore_lhs ref
+);
+
+ruby_rest_assignment_def(
+  unique int id: @ruby_rest_assignment
+);
+
+ruby_retry_child(
+  unique int ruby_retry: @ruby_retry ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_retry_def(
+  unique int id: @ruby_retry
+);
+
+ruby_return_child(
+  unique int ruby_return: @ruby_return ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_return_def(
+  unique int id: @ruby_return
+);
+
+@ruby_right_assignment_list_child_type = @ruby_splat_argument | @ruby_underscore_arg
+
+#keyset[ruby_right_assignment_list, index]
+ruby_right_assignment_list_child(
+  int ruby_right_assignment_list: @ruby_right_assignment_list ref,
+  int index: int ref,
+  unique int child: @ruby_right_assignment_list_child_type ref
+);
+
+ruby_right_assignment_list_def(
+  unique int id: @ruby_right_assignment_list
+);
+
+@ruby_scope_resolution_scope_type = @ruby_underscore_pattern_constant | @ruby_underscore_primary
+
+ruby_scope_resolution_scope(
+  unique int ruby_scope_resolution: @ruby_scope_resolution ref,
+  unique int scope: @ruby_scope_resolution_scope_type ref
+);
+
+ruby_scope_resolution_def(
+  unique int id: @ruby_scope_resolution,
+  int name: @ruby_token_constant ref
+);
+
+ruby_setter_def(
+  unique int id: @ruby_setter,
+  int name: @ruby_token_identifier ref
+);
+
+@ruby_singleton_class_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_singleton_class, index]
+ruby_singleton_class_child(
+  int ruby_singleton_class: @ruby_singleton_class ref,
+  int index: int ref,
+  unique int child: @ruby_singleton_class_child_type ref
+);
+
+ruby_singleton_class_def(
+  unique int id: @ruby_singleton_class,
+  int value: @ruby_underscore_arg ref
+);
+
+@ruby_singleton_method_object_type = @ruby_underscore_arg | @ruby_underscore_variable
+
+ruby_singleton_method_parameters(
+  unique int ruby_singleton_method: @ruby_singleton_method ref,
+  unique int parameters: @ruby_method_parameters ref
+);
+
+@ruby_singleton_method_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_arg | @ruby_underscore_statement
+
+#keyset[ruby_singleton_method, index]
+ruby_singleton_method_child(
+  int ruby_singleton_method: @ruby_singleton_method ref,
+  int index: int ref,
+  unique int child: @ruby_singleton_method_child_type ref
+);
+
+ruby_singleton_method_def(
+  unique int id: @ruby_singleton_method,
+  int name: @ruby_underscore_method_name ref,
+  int object: @ruby_singleton_method_object_type ref
+);
+
+ruby_splat_argument_def(
+  unique int id: @ruby_splat_argument,
+  int child: @ruby_underscore_arg ref
+);
+
+ruby_splat_parameter_name(
+  unique int ruby_splat_parameter: @ruby_splat_parameter ref,
+  unique int name: @ruby_token_identifier ref
+);
+
+ruby_splat_parameter_def(
+  unique int id: @ruby_splat_parameter
+);
+
+@ruby_string_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_string__, index]
+ruby_string_child(
+  int ruby_string__: @ruby_string__ ref,
+  int index: int ref,
+  unique int child: @ruby_string_child_type ref
+);
+
+ruby_string_def(
+  unique int id: @ruby_string__
+);
+
+#keyset[ruby_string_array, index]
+ruby_string_array_child(
+  int ruby_string_array: @ruby_string_array ref,
+  int index: int ref,
+  unique int child: @ruby_bare_string ref
+);
+
+ruby_string_array_def(
+  unique int id: @ruby_string_array
+);
+
+@ruby_subshell_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_subshell, index]
+ruby_subshell_child(
+  int ruby_subshell: @ruby_subshell ref,
+  int index: int ref,
+  unique int child: @ruby_subshell_child_type ref
+);
+
+ruby_subshell_def(
+  unique int id: @ruby_subshell
+);
+
+ruby_superclass_def(
+  unique int id: @ruby_superclass,
+  int child: @ruby_underscore_expression ref
+);
+
+#keyset[ruby_symbol_array, index]
+ruby_symbol_array_child(
+  int ruby_symbol_array: @ruby_symbol_array ref,
+  int index: int ref,
+  unique int child: @ruby_bare_symbol ref
+);
+
+ruby_symbol_array_def(
+  unique int id: @ruby_symbol_array
+);
+
+@ruby_then_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_then, index]
+ruby_then_child(
+  int ruby_then: @ruby_then ref,
+  int index: int ref,
+  unique int child: @ruby_then_child_type ref
+);
+
+ruby_then_def(
+  unique int id: @ruby_then
+);
+
+@ruby_unary_operand_type = @ruby_parenthesized_statements | @ruby_underscore_expression | @ruby_underscore_simple_numeric
+
+case @ruby_unary.operator of
+  0 = @ruby_unary_bang
+| 1 = @ruby_unary_plus
+| 2 = @ruby_unary_minus
+| 3 = @ruby_unary_definedquestion
+| 4 = @ruby_unary_not
+| 5 = @ruby_unary_tilde
+;
+
+
+ruby_unary_def(
+  unique int id: @ruby_unary,
+  int operand: @ruby_unary_operand_type ref,
+  int operator: int ref
+);
+
+#keyset[ruby_undef, index]
+ruby_undef_child(
+  int ruby_undef: @ruby_undef ref,
+  int index: int ref,
+  unique int child: @ruby_underscore_method_name ref
+);
+
+ruby_undef_def(
+  unique int id: @ruby_undef
+);
+
+@ruby_unless_alternative_type = @ruby_else | @ruby_elsif
+
+ruby_unless_alternative(
+  unique int ruby_unless: @ruby_unless ref,
+  unique int alternative: @ruby_unless_alternative_type ref
+);
+
+ruby_unless_consequence(
+  unique int ruby_unless: @ruby_unless ref,
+  unique int consequence: @ruby_then ref
+);
+
+ruby_unless_def(
+  unique int id: @ruby_unless,
+  int condition: @ruby_underscore_statement ref
+);
+
+ruby_unless_guard_def(
+  unique int id: @ruby_unless_guard,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_unless_modifier_def(
+  unique int id: @ruby_unless_modifier,
+  int body: @ruby_underscore_statement ref,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_until_def(
+  unique int id: @ruby_until,
+  int body: @ruby_do ref,
+  int condition: @ruby_underscore_statement ref
+);
+
+ruby_until_modifier_def(
+  unique int id: @ruby_until_modifier,
+  int body: @ruby_underscore_statement ref,
+  int condition: @ruby_underscore_expression ref
+);
+
+@ruby_variable_reference_pattern_name_type = @ruby_token_identifier | @ruby_underscore_nonlocal_variable
+
+ruby_variable_reference_pattern_def(
+  unique int id: @ruby_variable_reference_pattern,
+  int name: @ruby_variable_reference_pattern_name_type ref
+);
+
+ruby_when_body(
+  unique int ruby_when: @ruby_when ref,
+  unique int body: @ruby_then ref
+);
+
+#keyset[ruby_when, index]
+ruby_when_pattern(
+  int ruby_when: @ruby_when ref,
+  int index: int ref,
+  unique int pattern: @ruby_pattern ref
+);
+
+ruby_when_def(
+  unique int id: @ruby_when
+);
+
+ruby_while_def(
+  unique int id: @ruby_while,
+  int body: @ruby_do ref,
+  int condition: @ruby_underscore_statement ref
+);
+
+ruby_while_modifier_def(
+  unique int id: @ruby_while_modifier,
+  int body: @ruby_underscore_statement ref,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_yield_child(
+  unique int ruby_yield: @ruby_yield ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_yield_def(
+  unique int id: @ruby_yield
+);
+
+ruby_tokeninfo(
+  unique int id: @ruby_token,
+  int kind: int ref,
+  string value: string ref
+);
+
+case @ruby_token.kind of
+  0 = @ruby_reserved_word
+| 1 = @ruby_token_character
+| 2 = @ruby_token_class_variable
+| 3 = @ruby_token_comment
+| 4 = @ruby_token_constant
+| 5 = @ruby_token_empty_statement
+| 6 = @ruby_token_encoding
+| 7 = @ruby_token_escape_sequence
+| 8 = @ruby_token_false
+| 9 = @ruby_token_file
+| 10 = @ruby_token_float
+| 11 = @ruby_token_forward_argument
+| 12 = @ruby_token_forward_parameter
+| 13 = @ruby_token_global_variable
+| 14 = @ruby_token_hash_key_symbol
+| 15 = @ruby_token_hash_splat_nil
+| 16 = @ruby_token_heredoc_beginning
+| 17 = @ruby_token_heredoc_content
+| 18 = @ruby_token_heredoc_end
+| 19 = @ruby_token_identifier
+| 20 = @ruby_token_instance_variable
+| 21 = @ruby_token_integer
+| 22 = @ruby_token_line
+| 23 = @ruby_token_nil
+| 24 = @ruby_token_operator
+| 25 = @ruby_token_self
+| 26 = @ruby_token_simple_symbol
+| 27 = @ruby_token_string_content
+| 28 = @ruby_token_super
+| 29 = @ruby_token_true
+| 30 = @ruby_token_uninterpreted
+;
+
+
+@ruby_ast_node = @ruby_alias | @ruby_alternative_pattern | @ruby_argument_list | @ruby_array | @ruby_array_pattern | @ruby_as_pattern | @ruby_assignment | @ruby_bare_string | @ruby_bare_symbol | @ruby_begin | @ruby_begin_block | @ruby_binary | @ruby_block | @ruby_block_argument | @ruby_block_parameter | @ruby_block_parameters | @ruby_break | @ruby_call | @ruby_case__ | @ruby_case_match | @ruby_chained_string | @ruby_class | @ruby_complex | @ruby_conditional | @ruby_delimited_symbol | @ruby_destructured_left_assignment | @ruby_destructured_parameter | @ruby_do | @ruby_do_block | @ruby_element_reference | @ruby_else | @ruby_elsif | @ruby_end_block | @ruby_ensure | @ruby_exception_variable | @ruby_exceptions | @ruby_expression_reference_pattern | @ruby_find_pattern | @ruby_for | @ruby_hash | @ruby_hash_pattern | @ruby_hash_splat_argument | @ruby_hash_splat_parameter | @ruby_heredoc_body | @ruby_if | @ruby_if_guard | @ruby_if_modifier | @ruby_in | @ruby_in_clause | @ruby_interpolation | @ruby_keyword_parameter | @ruby_keyword_pattern | @ruby_lambda | @ruby_lambda_parameters | @ruby_left_assignment_list | @ruby_method | @ruby_method_parameters | @ruby_module | @ruby_next | @ruby_operator_assignment | @ruby_optional_parameter | @ruby_pair | @ruby_parenthesized_pattern | @ruby_parenthesized_statements | @ruby_pattern | @ruby_program | @ruby_range | @ruby_rational | @ruby_redo | @ruby_regex | @ruby_rescue | @ruby_rescue_modifier | @ruby_rest_assignment | @ruby_retry | @ruby_return | @ruby_right_assignment_list | @ruby_scope_resolution | @ruby_setter | @ruby_singleton_class | @ruby_singleton_method | @ruby_splat_argument | @ruby_splat_parameter | @ruby_string__ | @ruby_string_array | @ruby_subshell | @ruby_superclass | @ruby_symbol_array | @ruby_then | @ruby_token | @ruby_unary | @ruby_undef | @ruby_unless | @ruby_unless_guard | @ruby_unless_modifier | @ruby_until | @ruby_until_modifier | @ruby_variable_reference_pattern | @ruby_when | @ruby_while | @ruby_while_modifier | @ruby_yield
+
+@ruby_ast_node_parent = @file | @ruby_ast_node
+
+#keyset[parent, parent_index]
+ruby_ast_node_info(
+  unique int node: @ruby_ast_node ref,
+  int parent: @ruby_ast_node_parent ref,
+  int parent_index: int ref,
+  int loc: @location ref
+);
+
+erb_comment_directive_child(
+  unique int erb_comment_directive: @erb_comment_directive ref,
+  unique int child: @erb_token_comment ref
+);
+
+erb_comment_directive_def(
+  unique int id: @erb_comment_directive
+);
+
+erb_directive_child(
+  unique int erb_directive: @erb_directive ref,
+  unique int child: @erb_token_code ref
+);
+
+erb_directive_def(
+  unique int id: @erb_directive
+);
+
+erb_graphql_directive_child(
+  unique int erb_graphql_directive: @erb_graphql_directive ref,
+  unique int child: @erb_token_code ref
+);
+
+erb_graphql_directive_def(
+  unique int id: @erb_graphql_directive
+);
+
+erb_output_directive_child(
+  unique int erb_output_directive: @erb_output_directive ref,
+  unique int child: @erb_token_code ref
+);
+
+erb_output_directive_def(
+  unique int id: @erb_output_directive
+);
+
+@erb_template_child_type = @erb_comment_directive | @erb_directive | @erb_graphql_directive | @erb_output_directive | @erb_token_content
+
+#keyset[erb_template, index]
+erb_template_child(
+  int erb_template: @erb_template ref,
+  int index: int ref,
+  unique int child: @erb_template_child_type ref
+);
+
+erb_template_def(
+  unique int id: @erb_template
+);
+
+erb_tokeninfo(
+  unique int id: @erb_token,
+  int kind: int ref,
+  string value: string ref
+);
+
+case @erb_token.kind of
+  0 = @erb_reserved_word
+| 1 = @erb_token_code
+| 2 = @erb_token_comment
+| 3 = @erb_token_content
+;
+
+
+@erb_ast_node = @erb_comment_directive | @erb_directive | @erb_graphql_directive | @erb_output_directive | @erb_template | @erb_token
+
+@erb_ast_node_parent = @erb_ast_node | @file
+
+#keyset[parent, parent_index]
+erb_ast_node_info(
+  unique int node: @erb_ast_node ref,
+  int parent: @erb_ast_node_parent ref,
+  int parent_index: int ref,
+  int loc: @location ref
+);
+
diff --git a/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_ast_node_info.ql b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_ast_node_info.ql
new file mode 100644
index 00000000000..c418da98507
--- /dev/null
+++ b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_ast_node_info.ql
@@ -0,0 +1,28 @@
+class AstNode extends @ruby_ast_node_parent {
+  string toString() { none() }
+}
+
+class Location extends @location {
+  string toString() { none() }
+}
+
+class Wrapper = @ruby_body_statement or @ruby_block_body;
+
+predicate astNodeInfo(AstNode child, AstNode parent, int primaryIndex, int secondaryIndex) {
+  not parent instanceof Wrapper and
+  exists(AstNode node, Location l |
+    ruby_ast_node_info(node, parent, primaryIndex, _) and
+    (
+      not node instanceof Wrapper and secondaryIndex = 0 and child = node
+      or
+      node instanceof Wrapper and ruby_ast_node_info(child, node, secondaryIndex, _)
+    )
+  )
+}
+
+from AstNode node, AstNode parent, int parent_index, Location loc
+where
+  node =
+    rank[parent_index + 1](AstNode n, int i, int j | astNodeInfo(n, parent, i, j) | n order by i, j) and
+  ruby_ast_node_info(node, _, _, loc)
+select node, parent, parent_index, loc
diff --git a/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_block_child.ql b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_block_child.ql
new file mode 100644
index 00000000000..f12816e6f44
--- /dev/null
+++ b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_block_child.ql
@@ -0,0 +1,7 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+from AstNode ruby_block, AstNode body, int index, AstNode child
+where ruby_block_body(ruby_block, body) and ruby_block_body_child(body, index, child)
+select ruby_block, index, child
diff --git a/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_class_child.ql b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_class_child.ql
new file mode 100644
index 00000000000..bba0cc7ec3a
--- /dev/null
+++ b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_class_child.ql
@@ -0,0 +1,7 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+from AstNode ruby_class, AstNode body, int index, AstNode child
+where ruby_class_body(ruby_class, body) and ruby_body_statement_child(body, index, child)
+select ruby_class, index, child
diff --git a/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_do_block_child.ql b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_do_block_child.ql
new file mode 100644
index 00000000000..d08bb83a41c
--- /dev/null
+++ b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_do_block_child.ql
@@ -0,0 +1,8 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+from AstNode ruby_do_block, AstNode body, int index, AstNode child
+where ruby_do_block_body(ruby_do_block, body) and ruby_body_statement_child(body, index, child)
+select ruby_do_block, index, child
+
diff --git a/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_method_child.ql b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_method_child.ql
new file mode 100644
index 00000000000..fffa33ea4c7
--- /dev/null
+++ b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_method_child.ql
@@ -0,0 +1,14 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+from AstNode ruby_method, int index, AstNode child
+where
+  exists(AstNode body |
+    ruby_method_body(ruby_method, body) and ruby_body_statement_child(body, index, child)
+  )
+  or
+  ruby_method_body(ruby_method, child) and
+  not child instanceof @ruby_body_statement and
+  index = 0
+select ruby_method, index, child
diff --git a/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_module_child.ql b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_module_child.ql
new file mode 100644
index 00000000000..c7ea0dcdadf
--- /dev/null
+++ b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_module_child.ql
@@ -0,0 +1,8 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+from AstNode ruby_module, AstNode body, int index, AstNode child
+where ruby_module_body(ruby_module, body) and ruby_body_statement_child(body, index, child)
+select ruby_module, index, child
+
diff --git a/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_singleton_class_child.ql b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_singleton_class_child.ql
new file mode 100644
index 00000000000..3d2e45d0ec6
--- /dev/null
+++ b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_singleton_class_child.ql
@@ -0,0 +1,8 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+from AstNode ruby_singleton_class, AstNode body, int index, AstNode child
+where ruby_singleton_class_body(ruby_singleton_class, body) and ruby_body_statement_child(body, index, child)
+select ruby_singleton_class, index, child
+
diff --git a/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_singleton_method_child.ql b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_singleton_method_child.ql
new file mode 100644
index 00000000000..cc76fecefeb
--- /dev/null
+++ b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/ruby_singleton_method_child.ql
@@ -0,0 +1,15 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+from AstNode ruby_singleton_method, int index, AstNode child
+where
+  exists(AstNode body |
+    ruby_singleton_method_body(ruby_singleton_method, body) and
+    ruby_body_statement_child(body, index, child)
+  )
+  or
+  ruby_singleton_method_body(ruby_singleton_method, child) and
+  not child instanceof @ruby_body_statement and
+  index = 0
+select ruby_singleton_method, index, child
diff --git a/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/upgrade.properties b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/upgrade.properties
new file mode 100644
index 00000000000..6d90aac9b38
--- /dev/null
+++ b/ruby/downgrades/3595c826de6db850f16b9da265a54dbf24dd3126/upgrade.properties
@@ -0,0 +1,30 @@
+description: Wrap class, module, method, and block bodies in a named node
+compatibility: full
+
+ruby_block_body.rel: delete
+ruby_block_body_def.rel: delete
+ruby_block_body_child.rel: delete
+ruby_block_child.rel: run ruby_block_child.qlo
+
+ruby_body_statement_child.rel: delete
+ruby_body_statement_def.rel: delete
+
+ruby_class_body.rel: delete
+ruby_class_child.rel: run ruby_class_child.qlo
+
+ruby_do_block_body.rel: delete
+ruby_do_block_child.rel: run ruby_do_block_child.qlo
+
+ruby_method_body.rel: delete
+ruby_method_child.rel: run ruby_method_child.qlo
+
+ruby_module_body.rel: delete
+ruby_module_child.rel: run ruby_module_child.qlo
+
+ruby_singleton_class_body.rel: delete
+ruby_singleton_class_child.rel: run ruby_singleton_class_child.qlo
+
+ruby_singleton_method_body.rel: delete
+ruby_singleton_method_child.rel: run ruby_singleton_method_child.qlo
+
+ruby_ast_node_info.rel: run ruby_ast_node_info.qlo
\ No newline at end of file
diff --git a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/locations_default.ql b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/locations_default.ql
new file mode 100644
index 00000000000..7300d50b097
--- /dev/null
+++ b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/locations_default.ql
@@ -0,0 +1,68 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+class Location extends @location {
+  string toString() { none() }
+}
+
+class File extends @file {
+  string toString() { none() }
+}
+
+private predicate body_statement(AstNode body, int index, Location loc) {
+  exists(AstNode node, AstNode child | ruby_ast_node_info(child, _, _, loc) |
+    ruby_class_def(node, _) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_class_child(node, index, child)
+    or
+    ruby_do_block_def(node) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_do_block_child(node, index, child)
+    or
+    ruby_method_def(node, _) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_method_child(node, index, child)
+    or
+    ruby_module_def(node, _) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_module_child(node, index, child)
+    or
+    ruby_singleton_class_def(node, _) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_singleton_class_child(node, index, child)
+    or
+    ruby_singleton_method_def(node, _, _) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_singleton_method_child(node, index, child)
+    or
+    ruby_block_def(node) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "}") and
+    ruby_block_child(node, index, child)
+  )
+}
+
+from Location loc, File file, int start_line, int start_column, int end_line, int end_column
+where
+  locations_default(loc, file, start_line, start_column, end_line, end_column) and
+  not exists(AstNode node | ruby_ast_node_info(node, _, _, loc) and body_statement(node, _, _))
+  or
+  exists(AstNode node |
+    ruby_ast_node_info(node, _, _, loc) and
+    exists(Location first |
+      body_statement(node, 0, first) and
+      locations_default(first, file, start_line, start_column, _, _)
+    ) and
+    exists(Location last |
+      last = max(Location l, int i | body_statement(node, i, l) | l order by i) and
+      locations_default(last, file, _, _, end_line, end_column)
+    )
+  )
+select loc, file, start_line, start_column, end_line, end_column
diff --git a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/old.dbscheme b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/old.dbscheme
new file mode 100644
index 00000000000..4ba51641799
--- /dev/null
+++ b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/old.dbscheme
@@ -0,0 +1,1433 @@
+// CodeQL database schema for Ruby
+// Automatically generated from the tree-sitter grammar; do not edit
+
+@location = @location_default
+
+locations_default(
+  unique int id: @location_default,
+  int file: @file ref,
+  int start_line: int ref,
+  int start_column: int ref,
+  int end_line: int ref,
+  int end_column: int ref
+);
+
+files(
+  unique int id: @file,
+  string name: string ref
+);
+
+folders(
+  unique int id: @folder,
+  string name: string ref
+);
+
+@container = @file | @folder
+
+containerparent(
+  int parent: @container ref,
+  unique int child: @container ref
+);
+
+sourceLocationPrefix(
+  string prefix: string ref
+);
+
+diagnostics(
+  unique int id: @diagnostic,
+  int severity: int ref,
+  string error_tag: string ref,
+  string error_message: string ref,
+  string full_error_message: string ref,
+  int location: @location_default ref
+);
+
+case @diagnostic.severity of
+  10 = @diagnostic_debug
+| 20 = @diagnostic_info
+| 30 = @diagnostic_warning
+| 40 = @diagnostic_error
+;
+
+
+@ruby_underscore_arg = @ruby_assignment | @ruby_binary | @ruby_conditional | @ruby_operator_assignment | @ruby_range | @ruby_unary | @ruby_underscore_primary
+
+@ruby_underscore_call_operator = @ruby_reserved_word
+
+@ruby_underscore_expression = @ruby_assignment | @ruby_binary | @ruby_break | @ruby_call | @ruby_next | @ruby_operator_assignment | @ruby_return | @ruby_unary | @ruby_underscore_arg | @ruby_yield
+
+@ruby_underscore_lhs = @ruby_call | @ruby_element_reference | @ruby_scope_resolution | @ruby_token_false | @ruby_token_nil | @ruby_token_true | @ruby_underscore_variable
+
+@ruby_underscore_method_name = @ruby_delimited_symbol | @ruby_setter | @ruby_token_constant | @ruby_token_identifier | @ruby_token_operator | @ruby_token_simple_symbol | @ruby_underscore_nonlocal_variable
+
+@ruby_underscore_nonlocal_variable = @ruby_token_class_variable | @ruby_token_global_variable | @ruby_token_instance_variable
+
+@ruby_underscore_pattern_constant = @ruby_scope_resolution | @ruby_token_constant
+
+@ruby_underscore_pattern_expr = @ruby_alternative_pattern | @ruby_as_pattern | @ruby_underscore_pattern_expr_basic
+
+@ruby_underscore_pattern_expr_basic = @ruby_array_pattern | @ruby_expression_reference_pattern | @ruby_find_pattern | @ruby_hash_pattern | @ruby_parenthesized_pattern | @ruby_range | @ruby_token_identifier | @ruby_underscore_pattern_constant | @ruby_underscore_pattern_primitive | @ruby_variable_reference_pattern
+
+@ruby_underscore_pattern_primitive = @ruby_delimited_symbol | @ruby_lambda | @ruby_regex | @ruby_string__ | @ruby_string_array | @ruby_subshell | @ruby_symbol_array | @ruby_token_encoding | @ruby_token_false | @ruby_token_file | @ruby_token_heredoc_beginning | @ruby_token_line | @ruby_token_nil | @ruby_token_self | @ruby_token_simple_symbol | @ruby_token_true | @ruby_unary | @ruby_underscore_simple_numeric
+
+@ruby_underscore_pattern_top_expr_body = @ruby_array_pattern | @ruby_find_pattern | @ruby_hash_pattern | @ruby_underscore_pattern_expr
+
+@ruby_underscore_primary = @ruby_array | @ruby_begin | @ruby_break | @ruby_call | @ruby_case__ | @ruby_case_match | @ruby_chained_string | @ruby_class | @ruby_delimited_symbol | @ruby_for | @ruby_hash | @ruby_if | @ruby_lambda | @ruby_method | @ruby_module | @ruby_next | @ruby_parenthesized_statements | @ruby_redo | @ruby_regex | @ruby_retry | @ruby_return | @ruby_singleton_class | @ruby_singleton_method | @ruby_string__ | @ruby_string_array | @ruby_subshell | @ruby_symbol_array | @ruby_token_character | @ruby_token_heredoc_beginning | @ruby_token_simple_symbol | @ruby_unary | @ruby_underscore_lhs | @ruby_underscore_simple_numeric | @ruby_unless | @ruby_until | @ruby_while | @ruby_yield
+
+@ruby_underscore_simple_numeric = @ruby_complex | @ruby_rational | @ruby_token_float | @ruby_token_integer
+
+@ruby_underscore_statement = @ruby_alias | @ruby_begin_block | @ruby_end_block | @ruby_if_modifier | @ruby_rescue_modifier | @ruby_undef | @ruby_underscore_expression | @ruby_unless_modifier | @ruby_until_modifier | @ruby_while_modifier
+
+@ruby_underscore_variable = @ruby_token_constant | @ruby_token_identifier | @ruby_token_self | @ruby_token_super | @ruby_underscore_nonlocal_variable
+
+ruby_alias_def(
+  unique int id: @ruby_alias,
+  int alias: @ruby_underscore_method_name ref,
+  int name: @ruby_underscore_method_name ref
+);
+
+#keyset[ruby_alternative_pattern, index]
+ruby_alternative_pattern_alternatives(
+  int ruby_alternative_pattern: @ruby_alternative_pattern ref,
+  int index: int ref,
+  unique int alternatives: @ruby_underscore_pattern_expr_basic ref
+);
+
+ruby_alternative_pattern_def(
+  unique int id: @ruby_alternative_pattern
+);
+
+@ruby_argument_list_child_type = @ruby_block_argument | @ruby_hash_splat_argument | @ruby_pair | @ruby_splat_argument | @ruby_token_forward_argument | @ruby_underscore_expression
+
+#keyset[ruby_argument_list, index]
+ruby_argument_list_child(
+  int ruby_argument_list: @ruby_argument_list ref,
+  int index: int ref,
+  unique int child: @ruby_argument_list_child_type ref
+);
+
+ruby_argument_list_def(
+  unique int id: @ruby_argument_list
+);
+
+@ruby_array_child_type = @ruby_block_argument | @ruby_hash_splat_argument | @ruby_pair | @ruby_splat_argument | @ruby_token_forward_argument | @ruby_underscore_expression
+
+#keyset[ruby_array, index]
+ruby_array_child(
+  int ruby_array: @ruby_array ref,
+  int index: int ref,
+  unique int child: @ruby_array_child_type ref
+);
+
+ruby_array_def(
+  unique int id: @ruby_array
+);
+
+ruby_array_pattern_class(
+  unique int ruby_array_pattern: @ruby_array_pattern ref,
+  unique int class: @ruby_underscore_pattern_constant ref
+);
+
+@ruby_array_pattern_child_type = @ruby_splat_parameter | @ruby_underscore_pattern_expr
+
+#keyset[ruby_array_pattern, index]
+ruby_array_pattern_child(
+  int ruby_array_pattern: @ruby_array_pattern ref,
+  int index: int ref,
+  unique int child: @ruby_array_pattern_child_type ref
+);
+
+ruby_array_pattern_def(
+  unique int id: @ruby_array_pattern
+);
+
+ruby_as_pattern_def(
+  unique int id: @ruby_as_pattern,
+  int name: @ruby_token_identifier ref,
+  int value: @ruby_underscore_pattern_expr ref
+);
+
+@ruby_assignment_left_type = @ruby_left_assignment_list | @ruby_underscore_lhs
+
+@ruby_assignment_right_type = @ruby_rescue_modifier | @ruby_right_assignment_list | @ruby_splat_argument | @ruby_underscore_expression
+
+ruby_assignment_def(
+  unique int id: @ruby_assignment,
+  int left: @ruby_assignment_left_type ref,
+  int right: @ruby_assignment_right_type ref
+);
+
+@ruby_bare_string_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_bare_string, index]
+ruby_bare_string_child(
+  int ruby_bare_string: @ruby_bare_string ref,
+  int index: int ref,
+  unique int child: @ruby_bare_string_child_type ref
+);
+
+ruby_bare_string_def(
+  unique int id: @ruby_bare_string
+);
+
+@ruby_bare_symbol_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_bare_symbol, index]
+ruby_bare_symbol_child(
+  int ruby_bare_symbol: @ruby_bare_symbol ref,
+  int index: int ref,
+  unique int child: @ruby_bare_symbol_child_type ref
+);
+
+ruby_bare_symbol_def(
+  unique int id: @ruby_bare_symbol
+);
+
+@ruby_begin_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_begin, index]
+ruby_begin_child(
+  int ruby_begin: @ruby_begin ref,
+  int index: int ref,
+  unique int child: @ruby_begin_child_type ref
+);
+
+ruby_begin_def(
+  unique int id: @ruby_begin
+);
+
+@ruby_begin_block_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_begin_block, index]
+ruby_begin_block_child(
+  int ruby_begin_block: @ruby_begin_block ref,
+  int index: int ref,
+  unique int child: @ruby_begin_block_child_type ref
+);
+
+ruby_begin_block_def(
+  unique int id: @ruby_begin_block
+);
+
+@ruby_binary_left_type = @ruby_underscore_expression | @ruby_underscore_simple_numeric
+
+case @ruby_binary.operator of
+  0 = @ruby_binary_bangequal
+| 1 = @ruby_binary_bangtilde
+| 2 = @ruby_binary_percent
+| 3 = @ruby_binary_ampersand
+| 4 = @ruby_binary_ampersandampersand
+| 5 = @ruby_binary_star
+| 6 = @ruby_binary_starstar
+| 7 = @ruby_binary_plus
+| 8 = @ruby_binary_minus
+| 9 = @ruby_binary_slash
+| 10 = @ruby_binary_langle
+| 11 = @ruby_binary_langlelangle
+| 12 = @ruby_binary_langleequal
+| 13 = @ruby_binary_langleequalrangle
+| 14 = @ruby_binary_equalequal
+| 15 = @ruby_binary_equalequalequal
+| 16 = @ruby_binary_equaltilde
+| 17 = @ruby_binary_rangle
+| 18 = @ruby_binary_rangleequal
+| 19 = @ruby_binary_ranglerangle
+| 20 = @ruby_binary_caret
+| 21 = @ruby_binary_and
+| 22 = @ruby_binary_or
+| 23 = @ruby_binary_pipe
+| 24 = @ruby_binary_pipepipe
+;
+
+
+ruby_binary_def(
+  unique int id: @ruby_binary,
+  int left: @ruby_binary_left_type ref,
+  int operator: int ref,
+  int right: @ruby_underscore_expression ref
+);
+
+ruby_block_parameters(
+  unique int ruby_block: @ruby_block ref,
+  unique int parameters: @ruby_block_parameters ref
+);
+
+@ruby_block_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_block, index]
+ruby_block_child(
+  int ruby_block: @ruby_block ref,
+  int index: int ref,
+  unique int child: @ruby_block_child_type ref
+);
+
+ruby_block_def(
+  unique int id: @ruby_block
+);
+
+ruby_block_argument_child(
+  unique int ruby_block_argument: @ruby_block_argument ref,
+  unique int child: @ruby_underscore_arg ref
+);
+
+ruby_block_argument_def(
+  unique int id: @ruby_block_argument
+);
+
+ruby_block_parameter_name(
+  unique int ruby_block_parameter: @ruby_block_parameter ref,
+  unique int name: @ruby_token_identifier ref
+);
+
+ruby_block_parameter_def(
+  unique int id: @ruby_block_parameter
+);
+
+#keyset[ruby_block_parameters, index]
+ruby_block_parameters_locals(
+  int ruby_block_parameters: @ruby_block_parameters ref,
+  int index: int ref,
+  unique int locals: @ruby_token_identifier ref
+);
+
+@ruby_block_parameters_child_type = @ruby_block_parameter | @ruby_destructured_parameter | @ruby_hash_splat_parameter | @ruby_keyword_parameter | @ruby_optional_parameter | @ruby_splat_parameter | @ruby_token_forward_parameter | @ruby_token_hash_splat_nil | @ruby_token_identifier
+
+#keyset[ruby_block_parameters, index]
+ruby_block_parameters_child(
+  int ruby_block_parameters: @ruby_block_parameters ref,
+  int index: int ref,
+  unique int child: @ruby_block_parameters_child_type ref
+);
+
+ruby_block_parameters_def(
+  unique int id: @ruby_block_parameters
+);
+
+ruby_break_child(
+  unique int ruby_break: @ruby_break ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_break_def(
+  unique int id: @ruby_break
+);
+
+ruby_call_arguments(
+  unique int ruby_call: @ruby_call ref,
+  unique int arguments: @ruby_argument_list ref
+);
+
+@ruby_call_block_type = @ruby_block | @ruby_do_block
+
+ruby_call_block(
+  unique int ruby_call: @ruby_call ref,
+  unique int block: @ruby_call_block_type ref
+);
+
+@ruby_call_method_type = @ruby_token_operator | @ruby_underscore_variable
+
+ruby_call_method(
+  unique int ruby_call: @ruby_call ref,
+  unique int method: @ruby_call_method_type ref
+);
+
+ruby_call_operator(
+  unique int ruby_call: @ruby_call ref,
+  unique int operator: @ruby_underscore_call_operator ref
+);
+
+ruby_call_receiver(
+  unique int ruby_call: @ruby_call ref,
+  unique int receiver: @ruby_underscore_primary ref
+);
+
+ruby_call_def(
+  unique int id: @ruby_call
+);
+
+ruby_case_value(
+  unique int ruby_case__: @ruby_case__ ref,
+  unique int value: @ruby_underscore_statement ref
+);
+
+@ruby_case_child_type = @ruby_else | @ruby_when
+
+#keyset[ruby_case__, index]
+ruby_case_child(
+  int ruby_case__: @ruby_case__ ref,
+  int index: int ref,
+  unique int child: @ruby_case_child_type ref
+);
+
+ruby_case_def(
+  unique int id: @ruby_case__
+);
+
+#keyset[ruby_case_match, index]
+ruby_case_match_clauses(
+  int ruby_case_match: @ruby_case_match ref,
+  int index: int ref,
+  unique int clauses: @ruby_in_clause ref
+);
+
+ruby_case_match_else(
+  unique int ruby_case_match: @ruby_case_match ref,
+  unique int else: @ruby_else ref
+);
+
+ruby_case_match_def(
+  unique int id: @ruby_case_match,
+  int value: @ruby_underscore_statement ref
+);
+
+#keyset[ruby_chained_string, index]
+ruby_chained_string_child(
+  int ruby_chained_string: @ruby_chained_string ref,
+  int index: int ref,
+  unique int child: @ruby_string__ ref
+);
+
+ruby_chained_string_def(
+  unique int id: @ruby_chained_string
+);
+
+@ruby_class_name_type = @ruby_scope_resolution | @ruby_token_constant
+
+ruby_class_superclass(
+  unique int ruby_class: @ruby_class ref,
+  unique int superclass: @ruby_superclass ref
+);
+
+@ruby_class_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_class, index]
+ruby_class_child(
+  int ruby_class: @ruby_class ref,
+  int index: int ref,
+  unique int child: @ruby_class_child_type ref
+);
+
+ruby_class_def(
+  unique int id: @ruby_class,
+  int name: @ruby_class_name_type ref
+);
+
+@ruby_complex_child_type = @ruby_rational | @ruby_token_float | @ruby_token_integer
+
+ruby_complex_def(
+  unique int id: @ruby_complex,
+  int child: @ruby_complex_child_type ref
+);
+
+ruby_conditional_def(
+  unique int id: @ruby_conditional,
+  int alternative: @ruby_underscore_arg ref,
+  int condition: @ruby_underscore_arg ref,
+  int consequence: @ruby_underscore_arg ref
+);
+
+@ruby_delimited_symbol_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_delimited_symbol, index]
+ruby_delimited_symbol_child(
+  int ruby_delimited_symbol: @ruby_delimited_symbol ref,
+  int index: int ref,
+  unique int child: @ruby_delimited_symbol_child_type ref
+);
+
+ruby_delimited_symbol_def(
+  unique int id: @ruby_delimited_symbol
+);
+
+@ruby_destructured_left_assignment_child_type = @ruby_destructured_left_assignment | @ruby_rest_assignment | @ruby_underscore_lhs
+
+#keyset[ruby_destructured_left_assignment, index]
+ruby_destructured_left_assignment_child(
+  int ruby_destructured_left_assignment: @ruby_destructured_left_assignment ref,
+  int index: int ref,
+  unique int child: @ruby_destructured_left_assignment_child_type ref
+);
+
+ruby_destructured_left_assignment_def(
+  unique int id: @ruby_destructured_left_assignment
+);
+
+@ruby_destructured_parameter_child_type = @ruby_block_parameter | @ruby_destructured_parameter | @ruby_hash_splat_parameter | @ruby_keyword_parameter | @ruby_optional_parameter | @ruby_splat_parameter | @ruby_token_forward_parameter | @ruby_token_hash_splat_nil | @ruby_token_identifier
+
+#keyset[ruby_destructured_parameter, index]
+ruby_destructured_parameter_child(
+  int ruby_destructured_parameter: @ruby_destructured_parameter ref,
+  int index: int ref,
+  unique int child: @ruby_destructured_parameter_child_type ref
+);
+
+ruby_destructured_parameter_def(
+  unique int id: @ruby_destructured_parameter
+);
+
+@ruby_do_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_do, index]
+ruby_do_child(
+  int ruby_do: @ruby_do ref,
+  int index: int ref,
+  unique int child: @ruby_do_child_type ref
+);
+
+ruby_do_def(
+  unique int id: @ruby_do
+);
+
+ruby_do_block_parameters(
+  unique int ruby_do_block: @ruby_do_block ref,
+  unique int parameters: @ruby_block_parameters ref
+);
+
+@ruby_do_block_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_do_block, index]
+ruby_do_block_child(
+  int ruby_do_block: @ruby_do_block ref,
+  int index: int ref,
+  unique int child: @ruby_do_block_child_type ref
+);
+
+ruby_do_block_def(
+  unique int id: @ruby_do_block
+);
+
+@ruby_element_reference_child_type = @ruby_block_argument | @ruby_hash_splat_argument | @ruby_pair | @ruby_splat_argument | @ruby_token_forward_argument | @ruby_underscore_expression
+
+#keyset[ruby_element_reference, index]
+ruby_element_reference_child(
+  int ruby_element_reference: @ruby_element_reference ref,
+  int index: int ref,
+  unique int child: @ruby_element_reference_child_type ref
+);
+
+ruby_element_reference_def(
+  unique int id: @ruby_element_reference,
+  int object: @ruby_underscore_primary ref
+);
+
+@ruby_else_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_else, index]
+ruby_else_child(
+  int ruby_else: @ruby_else ref,
+  int index: int ref,
+  unique int child: @ruby_else_child_type ref
+);
+
+ruby_else_def(
+  unique int id: @ruby_else
+);
+
+@ruby_elsif_alternative_type = @ruby_else | @ruby_elsif
+
+ruby_elsif_alternative(
+  unique int ruby_elsif: @ruby_elsif ref,
+  unique int alternative: @ruby_elsif_alternative_type ref
+);
+
+ruby_elsif_consequence(
+  unique int ruby_elsif: @ruby_elsif ref,
+  unique int consequence: @ruby_then ref
+);
+
+ruby_elsif_def(
+  unique int id: @ruby_elsif,
+  int condition: @ruby_underscore_statement ref
+);
+
+@ruby_end_block_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_end_block, index]
+ruby_end_block_child(
+  int ruby_end_block: @ruby_end_block ref,
+  int index: int ref,
+  unique int child: @ruby_end_block_child_type ref
+);
+
+ruby_end_block_def(
+  unique int id: @ruby_end_block
+);
+
+@ruby_ensure_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_ensure, index]
+ruby_ensure_child(
+  int ruby_ensure: @ruby_ensure ref,
+  int index: int ref,
+  unique int child: @ruby_ensure_child_type ref
+);
+
+ruby_ensure_def(
+  unique int id: @ruby_ensure
+);
+
+ruby_exception_variable_def(
+  unique int id: @ruby_exception_variable,
+  int child: @ruby_underscore_lhs ref
+);
+
+@ruby_exceptions_child_type = @ruby_splat_argument | @ruby_underscore_arg
+
+#keyset[ruby_exceptions, index]
+ruby_exceptions_child(
+  int ruby_exceptions: @ruby_exceptions ref,
+  int index: int ref,
+  unique int child: @ruby_exceptions_child_type ref
+);
+
+ruby_exceptions_def(
+  unique int id: @ruby_exceptions
+);
+
+ruby_expression_reference_pattern_def(
+  unique int id: @ruby_expression_reference_pattern,
+  int value: @ruby_underscore_expression ref
+);
+
+ruby_find_pattern_class(
+  unique int ruby_find_pattern: @ruby_find_pattern ref,
+  unique int class: @ruby_underscore_pattern_constant ref
+);
+
+@ruby_find_pattern_child_type = @ruby_splat_parameter | @ruby_underscore_pattern_expr
+
+#keyset[ruby_find_pattern, index]
+ruby_find_pattern_child(
+  int ruby_find_pattern: @ruby_find_pattern ref,
+  int index: int ref,
+  unique int child: @ruby_find_pattern_child_type ref
+);
+
+ruby_find_pattern_def(
+  unique int id: @ruby_find_pattern
+);
+
+@ruby_for_pattern_type = @ruby_left_assignment_list | @ruby_underscore_lhs
+
+ruby_for_def(
+  unique int id: @ruby_for,
+  int body: @ruby_do ref,
+  int pattern: @ruby_for_pattern_type ref,
+  int value: @ruby_in ref
+);
+
+@ruby_hash_child_type = @ruby_hash_splat_argument | @ruby_pair
+
+#keyset[ruby_hash, index]
+ruby_hash_child(
+  int ruby_hash: @ruby_hash ref,
+  int index: int ref,
+  unique int child: @ruby_hash_child_type ref
+);
+
+ruby_hash_def(
+  unique int id: @ruby_hash
+);
+
+ruby_hash_pattern_class(
+  unique int ruby_hash_pattern: @ruby_hash_pattern ref,
+  unique int class: @ruby_underscore_pattern_constant ref
+);
+
+@ruby_hash_pattern_child_type = @ruby_hash_splat_parameter | @ruby_keyword_pattern | @ruby_token_hash_splat_nil
+
+#keyset[ruby_hash_pattern, index]
+ruby_hash_pattern_child(
+  int ruby_hash_pattern: @ruby_hash_pattern ref,
+  int index: int ref,
+  unique int child: @ruby_hash_pattern_child_type ref
+);
+
+ruby_hash_pattern_def(
+  unique int id: @ruby_hash_pattern
+);
+
+ruby_hash_splat_argument_def(
+  unique int id: @ruby_hash_splat_argument,
+  int child: @ruby_underscore_arg ref
+);
+
+ruby_hash_splat_parameter_name(
+  unique int ruby_hash_splat_parameter: @ruby_hash_splat_parameter ref,
+  unique int name: @ruby_token_identifier ref
+);
+
+ruby_hash_splat_parameter_def(
+  unique int id: @ruby_hash_splat_parameter
+);
+
+@ruby_heredoc_body_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_heredoc_content | @ruby_token_heredoc_end
+
+#keyset[ruby_heredoc_body, index]
+ruby_heredoc_body_child(
+  int ruby_heredoc_body: @ruby_heredoc_body ref,
+  int index: int ref,
+  unique int child: @ruby_heredoc_body_child_type ref
+);
+
+ruby_heredoc_body_def(
+  unique int id: @ruby_heredoc_body
+);
+
+@ruby_if_alternative_type = @ruby_else | @ruby_elsif
+
+ruby_if_alternative(
+  unique int ruby_if: @ruby_if ref,
+  unique int alternative: @ruby_if_alternative_type ref
+);
+
+ruby_if_consequence(
+  unique int ruby_if: @ruby_if ref,
+  unique int consequence: @ruby_then ref
+);
+
+ruby_if_def(
+  unique int id: @ruby_if,
+  int condition: @ruby_underscore_statement ref
+);
+
+ruby_if_guard_def(
+  unique int id: @ruby_if_guard,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_if_modifier_def(
+  unique int id: @ruby_if_modifier,
+  int body: @ruby_underscore_statement ref,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_in_def(
+  unique int id: @ruby_in,
+  int child: @ruby_underscore_arg ref
+);
+
+ruby_in_clause_body(
+  unique int ruby_in_clause: @ruby_in_clause ref,
+  unique int body: @ruby_then ref
+);
+
+@ruby_in_clause_guard_type = @ruby_if_guard | @ruby_unless_guard
+
+ruby_in_clause_guard(
+  unique int ruby_in_clause: @ruby_in_clause ref,
+  unique int guard: @ruby_in_clause_guard_type ref
+);
+
+ruby_in_clause_def(
+  unique int id: @ruby_in_clause,
+  int pattern: @ruby_underscore_pattern_top_expr_body ref
+);
+
+@ruby_interpolation_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_interpolation, index]
+ruby_interpolation_child(
+  int ruby_interpolation: @ruby_interpolation ref,
+  int index: int ref,
+  unique int child: @ruby_interpolation_child_type ref
+);
+
+ruby_interpolation_def(
+  unique int id: @ruby_interpolation
+);
+
+ruby_keyword_parameter_value(
+  unique int ruby_keyword_parameter: @ruby_keyword_parameter ref,
+  unique int value: @ruby_underscore_arg ref
+);
+
+ruby_keyword_parameter_def(
+  unique int id: @ruby_keyword_parameter,
+  int name: @ruby_token_identifier ref
+);
+
+@ruby_keyword_pattern_key_type = @ruby_string__ | @ruby_token_hash_key_symbol
+
+ruby_keyword_pattern_value(
+  unique int ruby_keyword_pattern: @ruby_keyword_pattern ref,
+  unique int value: @ruby_underscore_pattern_expr ref
+);
+
+ruby_keyword_pattern_def(
+  unique int id: @ruby_keyword_pattern,
+  int key__: @ruby_keyword_pattern_key_type ref
+);
+
+@ruby_lambda_body_type = @ruby_block | @ruby_do_block
+
+ruby_lambda_parameters(
+  unique int ruby_lambda: @ruby_lambda ref,
+  unique int parameters: @ruby_lambda_parameters ref
+);
+
+ruby_lambda_def(
+  unique int id: @ruby_lambda,
+  int body: @ruby_lambda_body_type ref
+);
+
+@ruby_lambda_parameters_child_type = @ruby_block_parameter | @ruby_destructured_parameter | @ruby_hash_splat_parameter | @ruby_keyword_parameter | @ruby_optional_parameter | @ruby_splat_parameter | @ruby_token_forward_parameter | @ruby_token_hash_splat_nil | @ruby_token_identifier
+
+#keyset[ruby_lambda_parameters, index]
+ruby_lambda_parameters_child(
+  int ruby_lambda_parameters: @ruby_lambda_parameters ref,
+  int index: int ref,
+  unique int child: @ruby_lambda_parameters_child_type ref
+);
+
+ruby_lambda_parameters_def(
+  unique int id: @ruby_lambda_parameters
+);
+
+@ruby_left_assignment_list_child_type = @ruby_destructured_left_assignment | @ruby_rest_assignment | @ruby_underscore_lhs
+
+#keyset[ruby_left_assignment_list, index]
+ruby_left_assignment_list_child(
+  int ruby_left_assignment_list: @ruby_left_assignment_list ref,
+  int index: int ref,
+  unique int child: @ruby_left_assignment_list_child_type ref
+);
+
+ruby_left_assignment_list_def(
+  unique int id: @ruby_left_assignment_list
+);
+
+ruby_method_parameters(
+  unique int ruby_method: @ruby_method ref,
+  unique int parameters: @ruby_method_parameters ref
+);
+
+@ruby_method_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_arg | @ruby_underscore_statement
+
+#keyset[ruby_method, index]
+ruby_method_child(
+  int ruby_method: @ruby_method ref,
+  int index: int ref,
+  unique int child: @ruby_method_child_type ref
+);
+
+ruby_method_def(
+  unique int id: @ruby_method,
+  int name: @ruby_underscore_method_name ref
+);
+
+@ruby_method_parameters_child_type = @ruby_block_parameter | @ruby_destructured_parameter | @ruby_hash_splat_parameter | @ruby_keyword_parameter | @ruby_optional_parameter | @ruby_splat_parameter | @ruby_token_forward_parameter | @ruby_token_hash_splat_nil | @ruby_token_identifier
+
+#keyset[ruby_method_parameters, index]
+ruby_method_parameters_child(
+  int ruby_method_parameters: @ruby_method_parameters ref,
+  int index: int ref,
+  unique int child: @ruby_method_parameters_child_type ref
+);
+
+ruby_method_parameters_def(
+  unique int id: @ruby_method_parameters
+);
+
+@ruby_module_name_type = @ruby_scope_resolution | @ruby_token_constant
+
+@ruby_module_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_module, index]
+ruby_module_child(
+  int ruby_module: @ruby_module ref,
+  int index: int ref,
+  unique int child: @ruby_module_child_type ref
+);
+
+ruby_module_def(
+  unique int id: @ruby_module,
+  int name: @ruby_module_name_type ref
+);
+
+ruby_next_child(
+  unique int ruby_next: @ruby_next ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_next_def(
+  unique int id: @ruby_next
+);
+
+case @ruby_operator_assignment.operator of
+  0 = @ruby_operator_assignment_percentequal
+| 1 = @ruby_operator_assignment_ampersandampersandequal
+| 2 = @ruby_operator_assignment_ampersandequal
+| 3 = @ruby_operator_assignment_starstarequal
+| 4 = @ruby_operator_assignment_starequal
+| 5 = @ruby_operator_assignment_plusequal
+| 6 = @ruby_operator_assignment_minusequal
+| 7 = @ruby_operator_assignment_slashequal
+| 8 = @ruby_operator_assignment_langlelangleequal
+| 9 = @ruby_operator_assignment_ranglerangleequal
+| 10 = @ruby_operator_assignment_caretequal
+| 11 = @ruby_operator_assignment_pipeequal
+| 12 = @ruby_operator_assignment_pipepipeequal
+;
+
+
+@ruby_operator_assignment_right_type = @ruby_rescue_modifier | @ruby_underscore_expression
+
+ruby_operator_assignment_def(
+  unique int id: @ruby_operator_assignment,
+  int left: @ruby_underscore_lhs ref,
+  int operator: int ref,
+  int right: @ruby_operator_assignment_right_type ref
+);
+
+ruby_optional_parameter_def(
+  unique int id: @ruby_optional_parameter,
+  int name: @ruby_token_identifier ref,
+  int value: @ruby_underscore_arg ref
+);
+
+@ruby_pair_key_type = @ruby_string__ | @ruby_token_hash_key_symbol | @ruby_underscore_arg
+
+ruby_pair_value(
+  unique int ruby_pair: @ruby_pair ref,
+  unique int value: @ruby_underscore_arg ref
+);
+
+ruby_pair_def(
+  unique int id: @ruby_pair,
+  int key__: @ruby_pair_key_type ref
+);
+
+ruby_parenthesized_pattern_def(
+  unique int id: @ruby_parenthesized_pattern,
+  int child: @ruby_underscore_pattern_expr ref
+);
+
+@ruby_parenthesized_statements_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_parenthesized_statements, index]
+ruby_parenthesized_statements_child(
+  int ruby_parenthesized_statements: @ruby_parenthesized_statements ref,
+  int index: int ref,
+  unique int child: @ruby_parenthesized_statements_child_type ref
+);
+
+ruby_parenthesized_statements_def(
+  unique int id: @ruby_parenthesized_statements
+);
+
+@ruby_pattern_child_type = @ruby_splat_argument | @ruby_underscore_arg
+
+ruby_pattern_def(
+  unique int id: @ruby_pattern,
+  int child: @ruby_pattern_child_type ref
+);
+
+@ruby_program_child_type = @ruby_token_empty_statement | @ruby_token_uninterpreted | @ruby_underscore_statement
+
+#keyset[ruby_program, index]
+ruby_program_child(
+  int ruby_program: @ruby_program ref,
+  int index: int ref,
+  unique int child: @ruby_program_child_type ref
+);
+
+ruby_program_def(
+  unique int id: @ruby_program
+);
+
+@ruby_range_begin_type = @ruby_underscore_arg | @ruby_underscore_pattern_primitive
+
+ruby_range_begin(
+  unique int ruby_range: @ruby_range ref,
+  unique int begin: @ruby_range_begin_type ref
+);
+
+@ruby_range_end_type = @ruby_underscore_arg | @ruby_underscore_pattern_primitive
+
+ruby_range_end(
+  unique int ruby_range: @ruby_range ref,
+  unique int end: @ruby_range_end_type ref
+);
+
+case @ruby_range.operator of
+  0 = @ruby_range_dotdot
+| 1 = @ruby_range_dotdotdot
+;
+
+
+ruby_range_def(
+  unique int id: @ruby_range,
+  int operator: int ref
+);
+
+@ruby_rational_child_type = @ruby_token_float | @ruby_token_integer
+
+ruby_rational_def(
+  unique int id: @ruby_rational,
+  int child: @ruby_rational_child_type ref
+);
+
+ruby_redo_child(
+  unique int ruby_redo: @ruby_redo ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_redo_def(
+  unique int id: @ruby_redo
+);
+
+@ruby_regex_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_regex, index]
+ruby_regex_child(
+  int ruby_regex: @ruby_regex ref,
+  int index: int ref,
+  unique int child: @ruby_regex_child_type ref
+);
+
+ruby_regex_def(
+  unique int id: @ruby_regex
+);
+
+ruby_rescue_body(
+  unique int ruby_rescue: @ruby_rescue ref,
+  unique int body: @ruby_then ref
+);
+
+ruby_rescue_exceptions(
+  unique int ruby_rescue: @ruby_rescue ref,
+  unique int exceptions: @ruby_exceptions ref
+);
+
+ruby_rescue_variable(
+  unique int ruby_rescue: @ruby_rescue ref,
+  unique int variable: @ruby_exception_variable ref
+);
+
+ruby_rescue_def(
+  unique int id: @ruby_rescue
+);
+
+@ruby_rescue_modifier_body_type = @ruby_underscore_arg | @ruby_underscore_statement
+
+ruby_rescue_modifier_def(
+  unique int id: @ruby_rescue_modifier,
+  int body: @ruby_rescue_modifier_body_type ref,
+  int handler: @ruby_underscore_expression ref
+);
+
+ruby_rest_assignment_child(
+  unique int ruby_rest_assignment: @ruby_rest_assignment ref,
+  unique int child: @ruby_underscore_lhs ref
+);
+
+ruby_rest_assignment_def(
+  unique int id: @ruby_rest_assignment
+);
+
+ruby_retry_child(
+  unique int ruby_retry: @ruby_retry ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_retry_def(
+  unique int id: @ruby_retry
+);
+
+ruby_return_child(
+  unique int ruby_return: @ruby_return ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_return_def(
+  unique int id: @ruby_return
+);
+
+@ruby_right_assignment_list_child_type = @ruby_splat_argument | @ruby_underscore_arg
+
+#keyset[ruby_right_assignment_list, index]
+ruby_right_assignment_list_child(
+  int ruby_right_assignment_list: @ruby_right_assignment_list ref,
+  int index: int ref,
+  unique int child: @ruby_right_assignment_list_child_type ref
+);
+
+ruby_right_assignment_list_def(
+  unique int id: @ruby_right_assignment_list
+);
+
+@ruby_scope_resolution_scope_type = @ruby_underscore_pattern_constant | @ruby_underscore_primary
+
+ruby_scope_resolution_scope(
+  unique int ruby_scope_resolution: @ruby_scope_resolution ref,
+  unique int scope: @ruby_scope_resolution_scope_type ref
+);
+
+ruby_scope_resolution_def(
+  unique int id: @ruby_scope_resolution,
+  int name: @ruby_token_constant ref
+);
+
+ruby_setter_def(
+  unique int id: @ruby_setter,
+  int name: @ruby_token_identifier ref
+);
+
+@ruby_singleton_class_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_singleton_class, index]
+ruby_singleton_class_child(
+  int ruby_singleton_class: @ruby_singleton_class ref,
+  int index: int ref,
+  unique int child: @ruby_singleton_class_child_type ref
+);
+
+ruby_singleton_class_def(
+  unique int id: @ruby_singleton_class,
+  int value: @ruby_underscore_arg ref
+);
+
+@ruby_singleton_method_object_type = @ruby_underscore_arg | @ruby_underscore_variable
+
+ruby_singleton_method_parameters(
+  unique int ruby_singleton_method: @ruby_singleton_method ref,
+  unique int parameters: @ruby_method_parameters ref
+);
+
+@ruby_singleton_method_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_arg | @ruby_underscore_statement
+
+#keyset[ruby_singleton_method, index]
+ruby_singleton_method_child(
+  int ruby_singleton_method: @ruby_singleton_method ref,
+  int index: int ref,
+  unique int child: @ruby_singleton_method_child_type ref
+);
+
+ruby_singleton_method_def(
+  unique int id: @ruby_singleton_method,
+  int name: @ruby_underscore_method_name ref,
+  int object: @ruby_singleton_method_object_type ref
+);
+
+ruby_splat_argument_def(
+  unique int id: @ruby_splat_argument,
+  int child: @ruby_underscore_arg ref
+);
+
+ruby_splat_parameter_name(
+  unique int ruby_splat_parameter: @ruby_splat_parameter ref,
+  unique int name: @ruby_token_identifier ref
+);
+
+ruby_splat_parameter_def(
+  unique int id: @ruby_splat_parameter
+);
+
+@ruby_string_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_string__, index]
+ruby_string_child(
+  int ruby_string__: @ruby_string__ ref,
+  int index: int ref,
+  unique int child: @ruby_string_child_type ref
+);
+
+ruby_string_def(
+  unique int id: @ruby_string__
+);
+
+#keyset[ruby_string_array, index]
+ruby_string_array_child(
+  int ruby_string_array: @ruby_string_array ref,
+  int index: int ref,
+  unique int child: @ruby_bare_string ref
+);
+
+ruby_string_array_def(
+  unique int id: @ruby_string_array
+);
+
+@ruby_subshell_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_subshell, index]
+ruby_subshell_child(
+  int ruby_subshell: @ruby_subshell ref,
+  int index: int ref,
+  unique int child: @ruby_subshell_child_type ref
+);
+
+ruby_subshell_def(
+  unique int id: @ruby_subshell
+);
+
+ruby_superclass_def(
+  unique int id: @ruby_superclass,
+  int child: @ruby_underscore_expression ref
+);
+
+#keyset[ruby_symbol_array, index]
+ruby_symbol_array_child(
+  int ruby_symbol_array: @ruby_symbol_array ref,
+  int index: int ref,
+  unique int child: @ruby_bare_symbol ref
+);
+
+ruby_symbol_array_def(
+  unique int id: @ruby_symbol_array
+);
+
+@ruby_then_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_then, index]
+ruby_then_child(
+  int ruby_then: @ruby_then ref,
+  int index: int ref,
+  unique int child: @ruby_then_child_type ref
+);
+
+ruby_then_def(
+  unique int id: @ruby_then
+);
+
+@ruby_unary_operand_type = @ruby_parenthesized_statements | @ruby_underscore_expression | @ruby_underscore_simple_numeric
+
+case @ruby_unary.operator of
+  0 = @ruby_unary_bang
+| 1 = @ruby_unary_plus
+| 2 = @ruby_unary_minus
+| 3 = @ruby_unary_definedquestion
+| 4 = @ruby_unary_not
+| 5 = @ruby_unary_tilde
+;
+
+
+ruby_unary_def(
+  unique int id: @ruby_unary,
+  int operand: @ruby_unary_operand_type ref,
+  int operator: int ref
+);
+
+#keyset[ruby_undef, index]
+ruby_undef_child(
+  int ruby_undef: @ruby_undef ref,
+  int index: int ref,
+  unique int child: @ruby_underscore_method_name ref
+);
+
+ruby_undef_def(
+  unique int id: @ruby_undef
+);
+
+@ruby_unless_alternative_type = @ruby_else | @ruby_elsif
+
+ruby_unless_alternative(
+  unique int ruby_unless: @ruby_unless ref,
+  unique int alternative: @ruby_unless_alternative_type ref
+);
+
+ruby_unless_consequence(
+  unique int ruby_unless: @ruby_unless ref,
+  unique int consequence: @ruby_then ref
+);
+
+ruby_unless_def(
+  unique int id: @ruby_unless,
+  int condition: @ruby_underscore_statement ref
+);
+
+ruby_unless_guard_def(
+  unique int id: @ruby_unless_guard,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_unless_modifier_def(
+  unique int id: @ruby_unless_modifier,
+  int body: @ruby_underscore_statement ref,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_until_def(
+  unique int id: @ruby_until,
+  int body: @ruby_do ref,
+  int condition: @ruby_underscore_statement ref
+);
+
+ruby_until_modifier_def(
+  unique int id: @ruby_until_modifier,
+  int body: @ruby_underscore_statement ref,
+  int condition: @ruby_underscore_expression ref
+);
+
+@ruby_variable_reference_pattern_name_type = @ruby_token_identifier | @ruby_underscore_nonlocal_variable
+
+ruby_variable_reference_pattern_def(
+  unique int id: @ruby_variable_reference_pattern,
+  int name: @ruby_variable_reference_pattern_name_type ref
+);
+
+ruby_when_body(
+  unique int ruby_when: @ruby_when ref,
+  unique int body: @ruby_then ref
+);
+
+#keyset[ruby_when, index]
+ruby_when_pattern(
+  int ruby_when: @ruby_when ref,
+  int index: int ref,
+  unique int pattern: @ruby_pattern ref
+);
+
+ruby_when_def(
+  unique int id: @ruby_when
+);
+
+ruby_while_def(
+  unique int id: @ruby_while,
+  int body: @ruby_do ref,
+  int condition: @ruby_underscore_statement ref
+);
+
+ruby_while_modifier_def(
+  unique int id: @ruby_while_modifier,
+  int body: @ruby_underscore_statement ref,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_yield_child(
+  unique int ruby_yield: @ruby_yield ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_yield_def(
+  unique int id: @ruby_yield
+);
+
+ruby_tokeninfo(
+  unique int id: @ruby_token,
+  int kind: int ref,
+  string value: string ref
+);
+
+case @ruby_token.kind of
+  0 = @ruby_reserved_word
+| 1 = @ruby_token_character
+| 2 = @ruby_token_class_variable
+| 3 = @ruby_token_comment
+| 4 = @ruby_token_constant
+| 5 = @ruby_token_empty_statement
+| 6 = @ruby_token_encoding
+| 7 = @ruby_token_escape_sequence
+| 8 = @ruby_token_false
+| 9 = @ruby_token_file
+| 10 = @ruby_token_float
+| 11 = @ruby_token_forward_argument
+| 12 = @ruby_token_forward_parameter
+| 13 = @ruby_token_global_variable
+| 14 = @ruby_token_hash_key_symbol
+| 15 = @ruby_token_hash_splat_nil
+| 16 = @ruby_token_heredoc_beginning
+| 17 = @ruby_token_heredoc_content
+| 18 = @ruby_token_heredoc_end
+| 19 = @ruby_token_identifier
+| 20 = @ruby_token_instance_variable
+| 21 = @ruby_token_integer
+| 22 = @ruby_token_line
+| 23 = @ruby_token_nil
+| 24 = @ruby_token_operator
+| 25 = @ruby_token_self
+| 26 = @ruby_token_simple_symbol
+| 27 = @ruby_token_string_content
+| 28 = @ruby_token_super
+| 29 = @ruby_token_true
+| 30 = @ruby_token_uninterpreted
+;
+
+
+@ruby_ast_node = @ruby_alias | @ruby_alternative_pattern | @ruby_argument_list | @ruby_array | @ruby_array_pattern | @ruby_as_pattern | @ruby_assignment | @ruby_bare_string | @ruby_bare_symbol | @ruby_begin | @ruby_begin_block | @ruby_binary | @ruby_block | @ruby_block_argument | @ruby_block_parameter | @ruby_block_parameters | @ruby_break | @ruby_call | @ruby_case__ | @ruby_case_match | @ruby_chained_string | @ruby_class | @ruby_complex | @ruby_conditional | @ruby_delimited_symbol | @ruby_destructured_left_assignment | @ruby_destructured_parameter | @ruby_do | @ruby_do_block | @ruby_element_reference | @ruby_else | @ruby_elsif | @ruby_end_block | @ruby_ensure | @ruby_exception_variable | @ruby_exceptions | @ruby_expression_reference_pattern | @ruby_find_pattern | @ruby_for | @ruby_hash | @ruby_hash_pattern | @ruby_hash_splat_argument | @ruby_hash_splat_parameter | @ruby_heredoc_body | @ruby_if | @ruby_if_guard | @ruby_if_modifier | @ruby_in | @ruby_in_clause | @ruby_interpolation | @ruby_keyword_parameter | @ruby_keyword_pattern | @ruby_lambda | @ruby_lambda_parameters | @ruby_left_assignment_list | @ruby_method | @ruby_method_parameters | @ruby_module | @ruby_next | @ruby_operator_assignment | @ruby_optional_parameter | @ruby_pair | @ruby_parenthesized_pattern | @ruby_parenthesized_statements | @ruby_pattern | @ruby_program | @ruby_range | @ruby_rational | @ruby_redo | @ruby_regex | @ruby_rescue | @ruby_rescue_modifier | @ruby_rest_assignment | @ruby_retry | @ruby_return | @ruby_right_assignment_list | @ruby_scope_resolution | @ruby_setter | @ruby_singleton_class | @ruby_singleton_method | @ruby_splat_argument | @ruby_splat_parameter | @ruby_string__ | @ruby_string_array | @ruby_subshell | @ruby_superclass | @ruby_symbol_array | @ruby_then | @ruby_token | @ruby_unary | @ruby_undef | @ruby_unless | @ruby_unless_guard | @ruby_unless_modifier | @ruby_until | @ruby_until_modifier | @ruby_variable_reference_pattern | @ruby_when | @ruby_while | @ruby_while_modifier | @ruby_yield
+
+@ruby_ast_node_parent = @file | @ruby_ast_node
+
+#keyset[parent, parent_index]
+ruby_ast_node_info(
+  unique int node: @ruby_ast_node ref,
+  int parent: @ruby_ast_node_parent ref,
+  int parent_index: int ref,
+  int loc: @location ref
+);
+
+erb_comment_directive_child(
+  unique int erb_comment_directive: @erb_comment_directive ref,
+  unique int child: @erb_token_comment ref
+);
+
+erb_comment_directive_def(
+  unique int id: @erb_comment_directive
+);
+
+erb_directive_child(
+  unique int erb_directive: @erb_directive ref,
+  unique int child: @erb_token_code ref
+);
+
+erb_directive_def(
+  unique int id: @erb_directive
+);
+
+erb_graphql_directive_child(
+  unique int erb_graphql_directive: @erb_graphql_directive ref,
+  unique int child: @erb_token_code ref
+);
+
+erb_graphql_directive_def(
+  unique int id: @erb_graphql_directive
+);
+
+erb_output_directive_child(
+  unique int erb_output_directive: @erb_output_directive ref,
+  unique int child: @erb_token_code ref
+);
+
+erb_output_directive_def(
+  unique int id: @erb_output_directive
+);
+
+@erb_template_child_type = @erb_comment_directive | @erb_directive | @erb_graphql_directive | @erb_output_directive | @erb_token_content
+
+#keyset[erb_template, index]
+erb_template_child(
+  int erb_template: @erb_template ref,
+  int index: int ref,
+  unique int child: @erb_template_child_type ref
+);
+
+erb_template_def(
+  unique int id: @erb_template
+);
+
+erb_tokeninfo(
+  unique int id: @erb_token,
+  int kind: int ref,
+  string value: string ref
+);
+
+case @erb_token.kind of
+  0 = @erb_reserved_word
+| 1 = @erb_token_code
+| 2 = @erb_token_comment
+| 3 = @erb_token_content
+;
+
+
+@erb_ast_node = @erb_comment_directive | @erb_directive | @erb_graphql_directive | @erb_output_directive | @erb_template | @erb_token
+
+@erb_ast_node_parent = @erb_ast_node | @file
+
+#keyset[parent, parent_index]
+erb_ast_node_info(
+  unique int node: @erb_ast_node ref,
+  int parent: @erb_ast_node_parent ref,
+  int parent_index: int ref,
+  int loc: @location ref
+);
+
diff --git a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby.dbscheme b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby.dbscheme
new file mode 100644
index 00000000000..3595c826de6
--- /dev/null
+++ b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby.dbscheme
@@ -0,0 +1,1435 @@
+// CodeQL database schema for Ruby
+// Automatically generated from the tree-sitter grammar; do not edit
+
+@location = @location_default
+
+locations_default(
+  unique int id: @location_default,
+  int file: @file ref,
+  int start_line: int ref,
+  int start_column: int ref,
+  int end_line: int ref,
+  int end_column: int ref
+);
+
+files(
+  unique int id: @file,
+  string name: string ref
+);
+
+folders(
+  unique int id: @folder,
+  string name: string ref
+);
+
+@container = @file | @folder
+
+containerparent(
+  int parent: @container ref,
+  unique int child: @container ref
+);
+
+sourceLocationPrefix(
+  string prefix: string ref
+);
+
+diagnostics(
+  unique int id: @diagnostic,
+  int severity: int ref,
+  string error_tag: string ref,
+  string error_message: string ref,
+  string full_error_message: string ref,
+  int location: @location_default ref
+);
+
+case @diagnostic.severity of
+  10 = @diagnostic_debug
+| 20 = @diagnostic_info
+| 30 = @diagnostic_warning
+| 40 = @diagnostic_error
+;
+
+
+@ruby_underscore_arg = @ruby_assignment | @ruby_binary | @ruby_conditional | @ruby_operator_assignment | @ruby_range | @ruby_unary | @ruby_underscore_primary
+
+@ruby_underscore_call_operator = @ruby_reserved_word
+
+@ruby_underscore_expression = @ruby_assignment | @ruby_binary | @ruby_break | @ruby_call | @ruby_next | @ruby_operator_assignment | @ruby_return | @ruby_unary | @ruby_underscore_arg | @ruby_yield
+
+@ruby_underscore_lhs = @ruby_call | @ruby_element_reference | @ruby_scope_resolution | @ruby_token_false | @ruby_token_nil | @ruby_token_true | @ruby_underscore_variable
+
+@ruby_underscore_method_name = @ruby_delimited_symbol | @ruby_setter | @ruby_token_constant | @ruby_token_identifier | @ruby_token_operator | @ruby_token_simple_symbol | @ruby_underscore_nonlocal_variable
+
+@ruby_underscore_nonlocal_variable = @ruby_token_class_variable | @ruby_token_global_variable | @ruby_token_instance_variable
+
+@ruby_underscore_pattern_constant = @ruby_scope_resolution | @ruby_token_constant
+
+@ruby_underscore_pattern_expr = @ruby_alternative_pattern | @ruby_as_pattern | @ruby_underscore_pattern_expr_basic
+
+@ruby_underscore_pattern_expr_basic = @ruby_array_pattern | @ruby_expression_reference_pattern | @ruby_find_pattern | @ruby_hash_pattern | @ruby_parenthesized_pattern | @ruby_range | @ruby_token_identifier | @ruby_underscore_pattern_constant | @ruby_underscore_pattern_primitive | @ruby_variable_reference_pattern
+
+@ruby_underscore_pattern_primitive = @ruby_delimited_symbol | @ruby_lambda | @ruby_regex | @ruby_string__ | @ruby_string_array | @ruby_subshell | @ruby_symbol_array | @ruby_token_encoding | @ruby_token_false | @ruby_token_file | @ruby_token_heredoc_beginning | @ruby_token_line | @ruby_token_nil | @ruby_token_self | @ruby_token_simple_symbol | @ruby_token_true | @ruby_unary | @ruby_underscore_simple_numeric
+
+@ruby_underscore_pattern_top_expr_body = @ruby_array_pattern | @ruby_find_pattern | @ruby_hash_pattern | @ruby_underscore_pattern_expr
+
+@ruby_underscore_primary = @ruby_array | @ruby_begin | @ruby_break | @ruby_call | @ruby_case__ | @ruby_case_match | @ruby_chained_string | @ruby_class | @ruby_delimited_symbol | @ruby_for | @ruby_hash | @ruby_if | @ruby_lambda | @ruby_method | @ruby_module | @ruby_next | @ruby_parenthesized_statements | @ruby_redo | @ruby_regex | @ruby_retry | @ruby_return | @ruby_singleton_class | @ruby_singleton_method | @ruby_string__ | @ruby_string_array | @ruby_subshell | @ruby_symbol_array | @ruby_token_character | @ruby_token_heredoc_beginning | @ruby_token_simple_symbol | @ruby_unary | @ruby_underscore_lhs | @ruby_underscore_simple_numeric | @ruby_unless | @ruby_until | @ruby_while | @ruby_yield
+
+@ruby_underscore_simple_numeric = @ruby_complex | @ruby_rational | @ruby_token_float | @ruby_token_integer
+
+@ruby_underscore_statement = @ruby_alias | @ruby_begin_block | @ruby_end_block | @ruby_if_modifier | @ruby_rescue_modifier | @ruby_undef | @ruby_underscore_expression | @ruby_unless_modifier | @ruby_until_modifier | @ruby_while_modifier
+
+@ruby_underscore_variable = @ruby_token_constant | @ruby_token_identifier | @ruby_token_self | @ruby_token_super | @ruby_underscore_nonlocal_variable
+
+ruby_alias_def(
+  unique int id: @ruby_alias,
+  int alias: @ruby_underscore_method_name ref,
+  int name: @ruby_underscore_method_name ref
+);
+
+#keyset[ruby_alternative_pattern, index]
+ruby_alternative_pattern_alternatives(
+  int ruby_alternative_pattern: @ruby_alternative_pattern ref,
+  int index: int ref,
+  unique int alternatives: @ruby_underscore_pattern_expr_basic ref
+);
+
+ruby_alternative_pattern_def(
+  unique int id: @ruby_alternative_pattern
+);
+
+@ruby_argument_list_child_type = @ruby_block_argument | @ruby_hash_splat_argument | @ruby_pair | @ruby_splat_argument | @ruby_token_forward_argument | @ruby_underscore_expression
+
+#keyset[ruby_argument_list, index]
+ruby_argument_list_child(
+  int ruby_argument_list: @ruby_argument_list ref,
+  int index: int ref,
+  unique int child: @ruby_argument_list_child_type ref
+);
+
+ruby_argument_list_def(
+  unique int id: @ruby_argument_list
+);
+
+@ruby_array_child_type = @ruby_block_argument | @ruby_hash_splat_argument | @ruby_pair | @ruby_splat_argument | @ruby_token_forward_argument | @ruby_underscore_expression
+
+#keyset[ruby_array, index]
+ruby_array_child(
+  int ruby_array: @ruby_array ref,
+  int index: int ref,
+  unique int child: @ruby_array_child_type ref
+);
+
+ruby_array_def(
+  unique int id: @ruby_array
+);
+
+ruby_array_pattern_class(
+  unique int ruby_array_pattern: @ruby_array_pattern ref,
+  unique int class: @ruby_underscore_pattern_constant ref
+);
+
+@ruby_array_pattern_child_type = @ruby_splat_parameter | @ruby_underscore_pattern_expr
+
+#keyset[ruby_array_pattern, index]
+ruby_array_pattern_child(
+  int ruby_array_pattern: @ruby_array_pattern ref,
+  int index: int ref,
+  unique int child: @ruby_array_pattern_child_type ref
+);
+
+ruby_array_pattern_def(
+  unique int id: @ruby_array_pattern
+);
+
+ruby_as_pattern_def(
+  unique int id: @ruby_as_pattern,
+  int name: @ruby_token_identifier ref,
+  int value: @ruby_underscore_pattern_expr ref
+);
+
+@ruby_assignment_left_type = @ruby_left_assignment_list | @ruby_underscore_lhs
+
+@ruby_assignment_right_type = @ruby_rescue_modifier | @ruby_right_assignment_list | @ruby_splat_argument | @ruby_underscore_expression
+
+ruby_assignment_def(
+  unique int id: @ruby_assignment,
+  int left: @ruby_assignment_left_type ref,
+  int right: @ruby_assignment_right_type ref
+);
+
+@ruby_bare_string_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_bare_string, index]
+ruby_bare_string_child(
+  int ruby_bare_string: @ruby_bare_string ref,
+  int index: int ref,
+  unique int child: @ruby_bare_string_child_type ref
+);
+
+ruby_bare_string_def(
+  unique int id: @ruby_bare_string
+);
+
+@ruby_bare_symbol_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_bare_symbol, index]
+ruby_bare_symbol_child(
+  int ruby_bare_symbol: @ruby_bare_symbol ref,
+  int index: int ref,
+  unique int child: @ruby_bare_symbol_child_type ref
+);
+
+ruby_bare_symbol_def(
+  unique int id: @ruby_bare_symbol
+);
+
+@ruby_begin_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_begin, index]
+ruby_begin_child(
+  int ruby_begin: @ruby_begin ref,
+  int index: int ref,
+  unique int child: @ruby_begin_child_type ref
+);
+
+ruby_begin_def(
+  unique int id: @ruby_begin
+);
+
+@ruby_begin_block_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_begin_block, index]
+ruby_begin_block_child(
+  int ruby_begin_block: @ruby_begin_block ref,
+  int index: int ref,
+  unique int child: @ruby_begin_block_child_type ref
+);
+
+ruby_begin_block_def(
+  unique int id: @ruby_begin_block
+);
+
+@ruby_binary_left_type = @ruby_underscore_expression | @ruby_underscore_simple_numeric
+
+case @ruby_binary.operator of
+  0 = @ruby_binary_bangequal
+| 1 = @ruby_binary_bangtilde
+| 2 = @ruby_binary_percent
+| 3 = @ruby_binary_ampersand
+| 4 = @ruby_binary_ampersandampersand
+| 5 = @ruby_binary_star
+| 6 = @ruby_binary_starstar
+| 7 = @ruby_binary_plus
+| 8 = @ruby_binary_minus
+| 9 = @ruby_binary_slash
+| 10 = @ruby_binary_langle
+| 11 = @ruby_binary_langlelangle
+| 12 = @ruby_binary_langleequal
+| 13 = @ruby_binary_langleequalrangle
+| 14 = @ruby_binary_equalequal
+| 15 = @ruby_binary_equalequalequal
+| 16 = @ruby_binary_equaltilde
+| 17 = @ruby_binary_rangle
+| 18 = @ruby_binary_rangleequal
+| 19 = @ruby_binary_ranglerangle
+| 20 = @ruby_binary_caret
+| 21 = @ruby_binary_and
+| 22 = @ruby_binary_or
+| 23 = @ruby_binary_pipe
+| 24 = @ruby_binary_pipepipe
+;
+
+
+ruby_binary_def(
+  unique int id: @ruby_binary,
+  int left: @ruby_binary_left_type ref,
+  int operator: int ref,
+  int right: @ruby_underscore_expression ref
+);
+
+ruby_block_body(
+  unique int ruby_block: @ruby_block ref,
+  unique int body: @ruby_block_body ref
+);
+
+ruby_block_parameters(
+  unique int ruby_block: @ruby_block ref,
+  unique int parameters: @ruby_block_parameters ref
+);
+
+ruby_block_def(
+  unique int id: @ruby_block
+);
+
+ruby_block_argument_child(
+  unique int ruby_block_argument: @ruby_block_argument ref,
+  unique int child: @ruby_underscore_arg ref
+);
+
+ruby_block_argument_def(
+  unique int id: @ruby_block_argument
+);
+
+@ruby_block_body_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_block_body, index]
+ruby_block_body_child(
+  int ruby_block_body: @ruby_block_body ref,
+  int index: int ref,
+  unique int child: @ruby_block_body_child_type ref
+);
+
+ruby_block_body_def(
+  unique int id: @ruby_block_body
+);
+
+ruby_block_parameter_name(
+  unique int ruby_block_parameter: @ruby_block_parameter ref,
+  unique int name: @ruby_token_identifier ref
+);
+
+ruby_block_parameter_def(
+  unique int id: @ruby_block_parameter
+);
+
+#keyset[ruby_block_parameters, index]
+ruby_block_parameters_locals(
+  int ruby_block_parameters: @ruby_block_parameters ref,
+  int index: int ref,
+  unique int locals: @ruby_token_identifier ref
+);
+
+@ruby_block_parameters_child_type = @ruby_block_parameter | @ruby_destructured_parameter | @ruby_hash_splat_parameter | @ruby_keyword_parameter | @ruby_optional_parameter | @ruby_splat_parameter | @ruby_token_forward_parameter | @ruby_token_hash_splat_nil | @ruby_token_identifier
+
+#keyset[ruby_block_parameters, index]
+ruby_block_parameters_child(
+  int ruby_block_parameters: @ruby_block_parameters ref,
+  int index: int ref,
+  unique int child: @ruby_block_parameters_child_type ref
+);
+
+ruby_block_parameters_def(
+  unique int id: @ruby_block_parameters
+);
+
+@ruby_body_statement_child_type = @ruby_else | @ruby_ensure | @ruby_rescue | @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_body_statement, index]
+ruby_body_statement_child(
+  int ruby_body_statement: @ruby_body_statement ref,
+  int index: int ref,
+  unique int child: @ruby_body_statement_child_type ref
+);
+
+ruby_body_statement_def(
+  unique int id: @ruby_body_statement
+);
+
+ruby_break_child(
+  unique int ruby_break: @ruby_break ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_break_def(
+  unique int id: @ruby_break
+);
+
+ruby_call_arguments(
+  unique int ruby_call: @ruby_call ref,
+  unique int arguments: @ruby_argument_list ref
+);
+
+@ruby_call_block_type = @ruby_block | @ruby_do_block
+
+ruby_call_block(
+  unique int ruby_call: @ruby_call ref,
+  unique int block: @ruby_call_block_type ref
+);
+
+@ruby_call_method_type = @ruby_token_operator | @ruby_underscore_variable
+
+ruby_call_method(
+  unique int ruby_call: @ruby_call ref,
+  unique int method: @ruby_call_method_type ref
+);
+
+ruby_call_operator(
+  unique int ruby_call: @ruby_call ref,
+  unique int operator: @ruby_underscore_call_operator ref
+);
+
+ruby_call_receiver(
+  unique int ruby_call: @ruby_call ref,
+  unique int receiver: @ruby_underscore_primary ref
+);
+
+ruby_call_def(
+  unique int id: @ruby_call
+);
+
+ruby_case_value(
+  unique int ruby_case__: @ruby_case__ ref,
+  unique int value: @ruby_underscore_statement ref
+);
+
+@ruby_case_child_type = @ruby_else | @ruby_when
+
+#keyset[ruby_case__, index]
+ruby_case_child(
+  int ruby_case__: @ruby_case__ ref,
+  int index: int ref,
+  unique int child: @ruby_case_child_type ref
+);
+
+ruby_case_def(
+  unique int id: @ruby_case__
+);
+
+#keyset[ruby_case_match, index]
+ruby_case_match_clauses(
+  int ruby_case_match: @ruby_case_match ref,
+  int index: int ref,
+  unique int clauses: @ruby_in_clause ref
+);
+
+ruby_case_match_else(
+  unique int ruby_case_match: @ruby_case_match ref,
+  unique int else: @ruby_else ref
+);
+
+ruby_case_match_def(
+  unique int id: @ruby_case_match,
+  int value: @ruby_underscore_statement ref
+);
+
+#keyset[ruby_chained_string, index]
+ruby_chained_string_child(
+  int ruby_chained_string: @ruby_chained_string ref,
+  int index: int ref,
+  unique int child: @ruby_string__ ref
+);
+
+ruby_chained_string_def(
+  unique int id: @ruby_chained_string
+);
+
+ruby_class_body(
+  unique int ruby_class: @ruby_class ref,
+  unique int body: @ruby_body_statement ref
+);
+
+@ruby_class_name_type = @ruby_scope_resolution | @ruby_token_constant
+
+ruby_class_superclass(
+  unique int ruby_class: @ruby_class ref,
+  unique int superclass: @ruby_superclass ref
+);
+
+ruby_class_def(
+  unique int id: @ruby_class,
+  int name: @ruby_class_name_type ref
+);
+
+@ruby_complex_child_type = @ruby_rational | @ruby_token_float | @ruby_token_integer
+
+ruby_complex_def(
+  unique int id: @ruby_complex,
+  int child: @ruby_complex_child_type ref
+);
+
+ruby_conditional_def(
+  unique int id: @ruby_conditional,
+  int alternative: @ruby_underscore_arg ref,
+  int condition: @ruby_underscore_arg ref,
+  int consequence: @ruby_underscore_arg ref
+);
+
+@ruby_delimited_symbol_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_delimited_symbol, index]
+ruby_delimited_symbol_child(
+  int ruby_delimited_symbol: @ruby_delimited_symbol ref,
+  int index: int ref,
+  unique int child: @ruby_delimited_symbol_child_type ref
+);
+
+ruby_delimited_symbol_def(
+  unique int id: @ruby_delimited_symbol
+);
+
+@ruby_destructured_left_assignment_child_type = @ruby_destructured_left_assignment | @ruby_rest_assignment | @ruby_underscore_lhs
+
+#keyset[ruby_destructured_left_assignment, index]
+ruby_destructured_left_assignment_child(
+  int ruby_destructured_left_assignment: @ruby_destructured_left_assignment ref,
+  int index: int ref,
+  unique int child: @ruby_destructured_left_assignment_child_type ref
+);
+
+ruby_destructured_left_assignment_def(
+  unique int id: @ruby_destructured_left_assignment
+);
+
+@ruby_destructured_parameter_child_type = @ruby_block_parameter | @ruby_destructured_parameter | @ruby_hash_splat_parameter | @ruby_keyword_parameter | @ruby_optional_parameter | @ruby_splat_parameter | @ruby_token_forward_parameter | @ruby_token_hash_splat_nil | @ruby_token_identifier
+
+#keyset[ruby_destructured_parameter, index]
+ruby_destructured_parameter_child(
+  int ruby_destructured_parameter: @ruby_destructured_parameter ref,
+  int index: int ref,
+  unique int child: @ruby_destructured_parameter_child_type ref
+);
+
+ruby_destructured_parameter_def(
+  unique int id: @ruby_destructured_parameter
+);
+
+@ruby_do_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_do, index]
+ruby_do_child(
+  int ruby_do: @ruby_do ref,
+  int index: int ref,
+  unique int child: @ruby_do_child_type ref
+);
+
+ruby_do_def(
+  unique int id: @ruby_do
+);
+
+ruby_do_block_body(
+  unique int ruby_do_block: @ruby_do_block ref,
+  unique int body: @ruby_body_statement ref
+);
+
+ruby_do_block_parameters(
+  unique int ruby_do_block: @ruby_do_block ref,
+  unique int parameters: @ruby_block_parameters ref
+);
+
+ruby_do_block_def(
+  unique int id: @ruby_do_block
+);
+
+@ruby_element_reference_child_type = @ruby_block_argument | @ruby_hash_splat_argument | @ruby_pair | @ruby_splat_argument | @ruby_token_forward_argument | @ruby_underscore_expression
+
+#keyset[ruby_element_reference, index]
+ruby_element_reference_child(
+  int ruby_element_reference: @ruby_element_reference ref,
+  int index: int ref,
+  unique int child: @ruby_element_reference_child_type ref
+);
+
+ruby_element_reference_def(
+  unique int id: @ruby_element_reference,
+  int object: @ruby_underscore_primary ref
+);
+
+@ruby_else_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_else, index]
+ruby_else_child(
+  int ruby_else: @ruby_else ref,
+  int index: int ref,
+  unique int child: @ruby_else_child_type ref
+);
+
+ruby_else_def(
+  unique int id: @ruby_else
+);
+
+@ruby_elsif_alternative_type = @ruby_else | @ruby_elsif
+
+ruby_elsif_alternative(
+  unique int ruby_elsif: @ruby_elsif ref,
+  unique int alternative: @ruby_elsif_alternative_type ref
+);
+
+ruby_elsif_consequence(
+  unique int ruby_elsif: @ruby_elsif ref,
+  unique int consequence: @ruby_then ref
+);
+
+ruby_elsif_def(
+  unique int id: @ruby_elsif,
+  int condition: @ruby_underscore_statement ref
+);
+
+@ruby_end_block_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_end_block, index]
+ruby_end_block_child(
+  int ruby_end_block: @ruby_end_block ref,
+  int index: int ref,
+  unique int child: @ruby_end_block_child_type ref
+);
+
+ruby_end_block_def(
+  unique int id: @ruby_end_block
+);
+
+@ruby_ensure_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_ensure, index]
+ruby_ensure_child(
+  int ruby_ensure: @ruby_ensure ref,
+  int index: int ref,
+  unique int child: @ruby_ensure_child_type ref
+);
+
+ruby_ensure_def(
+  unique int id: @ruby_ensure
+);
+
+ruby_exception_variable_def(
+  unique int id: @ruby_exception_variable,
+  int child: @ruby_underscore_lhs ref
+);
+
+@ruby_exceptions_child_type = @ruby_splat_argument | @ruby_underscore_arg
+
+#keyset[ruby_exceptions, index]
+ruby_exceptions_child(
+  int ruby_exceptions: @ruby_exceptions ref,
+  int index: int ref,
+  unique int child: @ruby_exceptions_child_type ref
+);
+
+ruby_exceptions_def(
+  unique int id: @ruby_exceptions
+);
+
+ruby_expression_reference_pattern_def(
+  unique int id: @ruby_expression_reference_pattern,
+  int value: @ruby_underscore_expression ref
+);
+
+ruby_find_pattern_class(
+  unique int ruby_find_pattern: @ruby_find_pattern ref,
+  unique int class: @ruby_underscore_pattern_constant ref
+);
+
+@ruby_find_pattern_child_type = @ruby_splat_parameter | @ruby_underscore_pattern_expr
+
+#keyset[ruby_find_pattern, index]
+ruby_find_pattern_child(
+  int ruby_find_pattern: @ruby_find_pattern ref,
+  int index: int ref,
+  unique int child: @ruby_find_pattern_child_type ref
+);
+
+ruby_find_pattern_def(
+  unique int id: @ruby_find_pattern
+);
+
+@ruby_for_pattern_type = @ruby_left_assignment_list | @ruby_underscore_lhs
+
+ruby_for_def(
+  unique int id: @ruby_for,
+  int body: @ruby_do ref,
+  int pattern: @ruby_for_pattern_type ref,
+  int value: @ruby_in ref
+);
+
+@ruby_hash_child_type = @ruby_hash_splat_argument | @ruby_pair
+
+#keyset[ruby_hash, index]
+ruby_hash_child(
+  int ruby_hash: @ruby_hash ref,
+  int index: int ref,
+  unique int child: @ruby_hash_child_type ref
+);
+
+ruby_hash_def(
+  unique int id: @ruby_hash
+);
+
+ruby_hash_pattern_class(
+  unique int ruby_hash_pattern: @ruby_hash_pattern ref,
+  unique int class: @ruby_underscore_pattern_constant ref
+);
+
+@ruby_hash_pattern_child_type = @ruby_hash_splat_parameter | @ruby_keyword_pattern | @ruby_token_hash_splat_nil
+
+#keyset[ruby_hash_pattern, index]
+ruby_hash_pattern_child(
+  int ruby_hash_pattern: @ruby_hash_pattern ref,
+  int index: int ref,
+  unique int child: @ruby_hash_pattern_child_type ref
+);
+
+ruby_hash_pattern_def(
+  unique int id: @ruby_hash_pattern
+);
+
+ruby_hash_splat_argument_def(
+  unique int id: @ruby_hash_splat_argument,
+  int child: @ruby_underscore_arg ref
+);
+
+ruby_hash_splat_parameter_name(
+  unique int ruby_hash_splat_parameter: @ruby_hash_splat_parameter ref,
+  unique int name: @ruby_token_identifier ref
+);
+
+ruby_hash_splat_parameter_def(
+  unique int id: @ruby_hash_splat_parameter
+);
+
+@ruby_heredoc_body_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_heredoc_content | @ruby_token_heredoc_end
+
+#keyset[ruby_heredoc_body, index]
+ruby_heredoc_body_child(
+  int ruby_heredoc_body: @ruby_heredoc_body ref,
+  int index: int ref,
+  unique int child: @ruby_heredoc_body_child_type ref
+);
+
+ruby_heredoc_body_def(
+  unique int id: @ruby_heredoc_body
+);
+
+@ruby_if_alternative_type = @ruby_else | @ruby_elsif
+
+ruby_if_alternative(
+  unique int ruby_if: @ruby_if ref,
+  unique int alternative: @ruby_if_alternative_type ref
+);
+
+ruby_if_consequence(
+  unique int ruby_if: @ruby_if ref,
+  unique int consequence: @ruby_then ref
+);
+
+ruby_if_def(
+  unique int id: @ruby_if,
+  int condition: @ruby_underscore_statement ref
+);
+
+ruby_if_guard_def(
+  unique int id: @ruby_if_guard,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_if_modifier_def(
+  unique int id: @ruby_if_modifier,
+  int body: @ruby_underscore_statement ref,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_in_def(
+  unique int id: @ruby_in,
+  int child: @ruby_underscore_arg ref
+);
+
+ruby_in_clause_body(
+  unique int ruby_in_clause: @ruby_in_clause ref,
+  unique int body: @ruby_then ref
+);
+
+@ruby_in_clause_guard_type = @ruby_if_guard | @ruby_unless_guard
+
+ruby_in_clause_guard(
+  unique int ruby_in_clause: @ruby_in_clause ref,
+  unique int guard: @ruby_in_clause_guard_type ref
+);
+
+ruby_in_clause_def(
+  unique int id: @ruby_in_clause,
+  int pattern: @ruby_underscore_pattern_top_expr_body ref
+);
+
+@ruby_interpolation_child_type = @ruby_token_empty_statement | @ruby_underscore_nonlocal_variable | @ruby_underscore_statement
+
+#keyset[ruby_interpolation, index]
+ruby_interpolation_child(
+  int ruby_interpolation: @ruby_interpolation ref,
+  int index: int ref,
+  unique int child: @ruby_interpolation_child_type ref
+);
+
+ruby_interpolation_def(
+  unique int id: @ruby_interpolation
+);
+
+ruby_keyword_parameter_value(
+  unique int ruby_keyword_parameter: @ruby_keyword_parameter ref,
+  unique int value: @ruby_underscore_arg ref
+);
+
+ruby_keyword_parameter_def(
+  unique int id: @ruby_keyword_parameter,
+  int name: @ruby_token_identifier ref
+);
+
+@ruby_keyword_pattern_key_type = @ruby_string__ | @ruby_token_hash_key_symbol
+
+ruby_keyword_pattern_value(
+  unique int ruby_keyword_pattern: @ruby_keyword_pattern ref,
+  unique int value: @ruby_underscore_pattern_expr ref
+);
+
+ruby_keyword_pattern_def(
+  unique int id: @ruby_keyword_pattern,
+  int key__: @ruby_keyword_pattern_key_type ref
+);
+
+@ruby_lambda_body_type = @ruby_block | @ruby_do_block
+
+ruby_lambda_parameters(
+  unique int ruby_lambda: @ruby_lambda ref,
+  unique int parameters: @ruby_lambda_parameters ref
+);
+
+ruby_lambda_def(
+  unique int id: @ruby_lambda,
+  int body: @ruby_lambda_body_type ref
+);
+
+@ruby_lambda_parameters_child_type = @ruby_block_parameter | @ruby_destructured_parameter | @ruby_hash_splat_parameter | @ruby_keyword_parameter | @ruby_optional_parameter | @ruby_splat_parameter | @ruby_token_forward_parameter | @ruby_token_hash_splat_nil | @ruby_token_identifier
+
+#keyset[ruby_lambda_parameters, index]
+ruby_lambda_parameters_child(
+  int ruby_lambda_parameters: @ruby_lambda_parameters ref,
+  int index: int ref,
+  unique int child: @ruby_lambda_parameters_child_type ref
+);
+
+ruby_lambda_parameters_def(
+  unique int id: @ruby_lambda_parameters
+);
+
+@ruby_left_assignment_list_child_type = @ruby_destructured_left_assignment | @ruby_rest_assignment | @ruby_underscore_lhs
+
+#keyset[ruby_left_assignment_list, index]
+ruby_left_assignment_list_child(
+  int ruby_left_assignment_list: @ruby_left_assignment_list ref,
+  int index: int ref,
+  unique int child: @ruby_left_assignment_list_child_type ref
+);
+
+ruby_left_assignment_list_def(
+  unique int id: @ruby_left_assignment_list
+);
+
+@ruby_method_body_type = @ruby_body_statement | @ruby_rescue_modifier | @ruby_underscore_arg
+
+ruby_method_body(
+  unique int ruby_method: @ruby_method ref,
+  unique int body: @ruby_method_body_type ref
+);
+
+ruby_method_parameters(
+  unique int ruby_method: @ruby_method ref,
+  unique int parameters: @ruby_method_parameters ref
+);
+
+ruby_method_def(
+  unique int id: @ruby_method,
+  int name: @ruby_underscore_method_name ref
+);
+
+@ruby_method_parameters_child_type = @ruby_block_parameter | @ruby_destructured_parameter | @ruby_hash_splat_parameter | @ruby_keyword_parameter | @ruby_optional_parameter | @ruby_splat_parameter | @ruby_token_forward_parameter | @ruby_token_hash_splat_nil | @ruby_token_identifier
+
+#keyset[ruby_method_parameters, index]
+ruby_method_parameters_child(
+  int ruby_method_parameters: @ruby_method_parameters ref,
+  int index: int ref,
+  unique int child: @ruby_method_parameters_child_type ref
+);
+
+ruby_method_parameters_def(
+  unique int id: @ruby_method_parameters
+);
+
+ruby_module_body(
+  unique int ruby_module: @ruby_module ref,
+  unique int body: @ruby_body_statement ref
+);
+
+@ruby_module_name_type = @ruby_scope_resolution | @ruby_token_constant
+
+ruby_module_def(
+  unique int id: @ruby_module,
+  int name: @ruby_module_name_type ref
+);
+
+ruby_next_child(
+  unique int ruby_next: @ruby_next ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_next_def(
+  unique int id: @ruby_next
+);
+
+case @ruby_operator_assignment.operator of
+  0 = @ruby_operator_assignment_percentequal
+| 1 = @ruby_operator_assignment_ampersandampersandequal
+| 2 = @ruby_operator_assignment_ampersandequal
+| 3 = @ruby_operator_assignment_starstarequal
+| 4 = @ruby_operator_assignment_starequal
+| 5 = @ruby_operator_assignment_plusequal
+| 6 = @ruby_operator_assignment_minusequal
+| 7 = @ruby_operator_assignment_slashequal
+| 8 = @ruby_operator_assignment_langlelangleequal
+| 9 = @ruby_operator_assignment_ranglerangleequal
+| 10 = @ruby_operator_assignment_caretequal
+| 11 = @ruby_operator_assignment_pipeequal
+| 12 = @ruby_operator_assignment_pipepipeequal
+;
+
+
+@ruby_operator_assignment_right_type = @ruby_rescue_modifier | @ruby_underscore_expression
+
+ruby_operator_assignment_def(
+  unique int id: @ruby_operator_assignment,
+  int left: @ruby_underscore_lhs ref,
+  int operator: int ref,
+  int right: @ruby_operator_assignment_right_type ref
+);
+
+ruby_optional_parameter_def(
+  unique int id: @ruby_optional_parameter,
+  int name: @ruby_token_identifier ref,
+  int value: @ruby_underscore_arg ref
+);
+
+@ruby_pair_key_type = @ruby_string__ | @ruby_token_hash_key_symbol | @ruby_underscore_arg
+
+ruby_pair_value(
+  unique int ruby_pair: @ruby_pair ref,
+  unique int value: @ruby_underscore_arg ref
+);
+
+ruby_pair_def(
+  unique int id: @ruby_pair,
+  int key__: @ruby_pair_key_type ref
+);
+
+ruby_parenthesized_pattern_def(
+  unique int id: @ruby_parenthesized_pattern,
+  int child: @ruby_underscore_pattern_expr ref
+);
+
+@ruby_parenthesized_statements_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_parenthesized_statements, index]
+ruby_parenthesized_statements_child(
+  int ruby_parenthesized_statements: @ruby_parenthesized_statements ref,
+  int index: int ref,
+  unique int child: @ruby_parenthesized_statements_child_type ref
+);
+
+ruby_parenthesized_statements_def(
+  unique int id: @ruby_parenthesized_statements
+);
+
+@ruby_pattern_child_type = @ruby_splat_argument | @ruby_underscore_arg
+
+ruby_pattern_def(
+  unique int id: @ruby_pattern,
+  int child: @ruby_pattern_child_type ref
+);
+
+@ruby_program_child_type = @ruby_token_empty_statement | @ruby_token_uninterpreted | @ruby_underscore_statement
+
+#keyset[ruby_program, index]
+ruby_program_child(
+  int ruby_program: @ruby_program ref,
+  int index: int ref,
+  unique int child: @ruby_program_child_type ref
+);
+
+ruby_program_def(
+  unique int id: @ruby_program
+);
+
+@ruby_range_begin_type = @ruby_underscore_arg | @ruby_underscore_pattern_primitive
+
+ruby_range_begin(
+  unique int ruby_range: @ruby_range ref,
+  unique int begin: @ruby_range_begin_type ref
+);
+
+@ruby_range_end_type = @ruby_underscore_arg | @ruby_underscore_pattern_primitive
+
+ruby_range_end(
+  unique int ruby_range: @ruby_range ref,
+  unique int end: @ruby_range_end_type ref
+);
+
+case @ruby_range.operator of
+  0 = @ruby_range_dotdot
+| 1 = @ruby_range_dotdotdot
+;
+
+
+ruby_range_def(
+  unique int id: @ruby_range,
+  int operator: int ref
+);
+
+@ruby_rational_child_type = @ruby_token_float | @ruby_token_integer
+
+ruby_rational_def(
+  unique int id: @ruby_rational,
+  int child: @ruby_rational_child_type ref
+);
+
+ruby_redo_child(
+  unique int ruby_redo: @ruby_redo ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_redo_def(
+  unique int id: @ruby_redo
+);
+
+@ruby_regex_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_regex, index]
+ruby_regex_child(
+  int ruby_regex: @ruby_regex ref,
+  int index: int ref,
+  unique int child: @ruby_regex_child_type ref
+);
+
+ruby_regex_def(
+  unique int id: @ruby_regex
+);
+
+ruby_rescue_body(
+  unique int ruby_rescue: @ruby_rescue ref,
+  unique int body: @ruby_then ref
+);
+
+ruby_rescue_exceptions(
+  unique int ruby_rescue: @ruby_rescue ref,
+  unique int exceptions: @ruby_exceptions ref
+);
+
+ruby_rescue_variable(
+  unique int ruby_rescue: @ruby_rescue ref,
+  unique int variable: @ruby_exception_variable ref
+);
+
+ruby_rescue_def(
+  unique int id: @ruby_rescue
+);
+
+@ruby_rescue_modifier_body_type = @ruby_underscore_arg | @ruby_underscore_statement
+
+ruby_rescue_modifier_def(
+  unique int id: @ruby_rescue_modifier,
+  int body: @ruby_rescue_modifier_body_type ref,
+  int handler: @ruby_underscore_expression ref
+);
+
+ruby_rest_assignment_child(
+  unique int ruby_rest_assignment: @ruby_rest_assignment ref,
+  unique int child: @ruby_underscore_lhs ref
+);
+
+ruby_rest_assignment_def(
+  unique int id: @ruby_rest_assignment
+);
+
+ruby_retry_child(
+  unique int ruby_retry: @ruby_retry ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_retry_def(
+  unique int id: @ruby_retry
+);
+
+ruby_return_child(
+  unique int ruby_return: @ruby_return ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_return_def(
+  unique int id: @ruby_return
+);
+
+@ruby_right_assignment_list_child_type = @ruby_splat_argument | @ruby_underscore_arg
+
+#keyset[ruby_right_assignment_list, index]
+ruby_right_assignment_list_child(
+  int ruby_right_assignment_list: @ruby_right_assignment_list ref,
+  int index: int ref,
+  unique int child: @ruby_right_assignment_list_child_type ref
+);
+
+ruby_right_assignment_list_def(
+  unique int id: @ruby_right_assignment_list
+);
+
+@ruby_scope_resolution_scope_type = @ruby_underscore_pattern_constant | @ruby_underscore_primary
+
+ruby_scope_resolution_scope(
+  unique int ruby_scope_resolution: @ruby_scope_resolution ref,
+  unique int scope: @ruby_scope_resolution_scope_type ref
+);
+
+ruby_scope_resolution_def(
+  unique int id: @ruby_scope_resolution,
+  int name: @ruby_token_constant ref
+);
+
+ruby_setter_def(
+  unique int id: @ruby_setter,
+  int name: @ruby_token_identifier ref
+);
+
+ruby_singleton_class_body(
+  unique int ruby_singleton_class: @ruby_singleton_class ref,
+  unique int body: @ruby_body_statement ref
+);
+
+ruby_singleton_class_def(
+  unique int id: @ruby_singleton_class,
+  int value: @ruby_underscore_arg ref
+);
+
+@ruby_singleton_method_body_type = @ruby_body_statement | @ruby_rescue_modifier | @ruby_underscore_arg
+
+ruby_singleton_method_body(
+  unique int ruby_singleton_method: @ruby_singleton_method ref,
+  unique int body: @ruby_singleton_method_body_type ref
+);
+
+@ruby_singleton_method_object_type = @ruby_underscore_arg | @ruby_underscore_variable
+
+ruby_singleton_method_parameters(
+  unique int ruby_singleton_method: @ruby_singleton_method ref,
+  unique int parameters: @ruby_method_parameters ref
+);
+
+ruby_singleton_method_def(
+  unique int id: @ruby_singleton_method,
+  int name: @ruby_underscore_method_name ref,
+  int object: @ruby_singleton_method_object_type ref
+);
+
+ruby_splat_argument_def(
+  unique int id: @ruby_splat_argument,
+  int child: @ruby_underscore_arg ref
+);
+
+ruby_splat_parameter_name(
+  unique int ruby_splat_parameter: @ruby_splat_parameter ref,
+  unique int name: @ruby_token_identifier ref
+);
+
+ruby_splat_parameter_def(
+  unique int id: @ruby_splat_parameter
+);
+
+@ruby_string_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_string__, index]
+ruby_string_child(
+  int ruby_string__: @ruby_string__ ref,
+  int index: int ref,
+  unique int child: @ruby_string_child_type ref
+);
+
+ruby_string_def(
+  unique int id: @ruby_string__
+);
+
+#keyset[ruby_string_array, index]
+ruby_string_array_child(
+  int ruby_string_array: @ruby_string_array ref,
+  int index: int ref,
+  unique int child: @ruby_bare_string ref
+);
+
+ruby_string_array_def(
+  unique int id: @ruby_string_array
+);
+
+@ruby_subshell_child_type = @ruby_interpolation | @ruby_token_escape_sequence | @ruby_token_string_content
+
+#keyset[ruby_subshell, index]
+ruby_subshell_child(
+  int ruby_subshell: @ruby_subshell ref,
+  int index: int ref,
+  unique int child: @ruby_subshell_child_type ref
+);
+
+ruby_subshell_def(
+  unique int id: @ruby_subshell
+);
+
+ruby_superclass_def(
+  unique int id: @ruby_superclass,
+  int child: @ruby_underscore_expression ref
+);
+
+#keyset[ruby_symbol_array, index]
+ruby_symbol_array_child(
+  int ruby_symbol_array: @ruby_symbol_array ref,
+  int index: int ref,
+  unique int child: @ruby_bare_symbol ref
+);
+
+ruby_symbol_array_def(
+  unique int id: @ruby_symbol_array
+);
+
+@ruby_then_child_type = @ruby_token_empty_statement | @ruby_underscore_statement
+
+#keyset[ruby_then, index]
+ruby_then_child(
+  int ruby_then: @ruby_then ref,
+  int index: int ref,
+  unique int child: @ruby_then_child_type ref
+);
+
+ruby_then_def(
+  unique int id: @ruby_then
+);
+
+@ruby_unary_operand_type = @ruby_parenthesized_statements | @ruby_underscore_expression | @ruby_underscore_simple_numeric
+
+case @ruby_unary.operator of
+  0 = @ruby_unary_bang
+| 1 = @ruby_unary_plus
+| 2 = @ruby_unary_minus
+| 3 = @ruby_unary_definedquestion
+| 4 = @ruby_unary_not
+| 5 = @ruby_unary_tilde
+;
+
+
+ruby_unary_def(
+  unique int id: @ruby_unary,
+  int operand: @ruby_unary_operand_type ref,
+  int operator: int ref
+);
+
+#keyset[ruby_undef, index]
+ruby_undef_child(
+  int ruby_undef: @ruby_undef ref,
+  int index: int ref,
+  unique int child: @ruby_underscore_method_name ref
+);
+
+ruby_undef_def(
+  unique int id: @ruby_undef
+);
+
+@ruby_unless_alternative_type = @ruby_else | @ruby_elsif
+
+ruby_unless_alternative(
+  unique int ruby_unless: @ruby_unless ref,
+  unique int alternative: @ruby_unless_alternative_type ref
+);
+
+ruby_unless_consequence(
+  unique int ruby_unless: @ruby_unless ref,
+  unique int consequence: @ruby_then ref
+);
+
+ruby_unless_def(
+  unique int id: @ruby_unless,
+  int condition: @ruby_underscore_statement ref
+);
+
+ruby_unless_guard_def(
+  unique int id: @ruby_unless_guard,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_unless_modifier_def(
+  unique int id: @ruby_unless_modifier,
+  int body: @ruby_underscore_statement ref,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_until_def(
+  unique int id: @ruby_until,
+  int body: @ruby_do ref,
+  int condition: @ruby_underscore_statement ref
+);
+
+ruby_until_modifier_def(
+  unique int id: @ruby_until_modifier,
+  int body: @ruby_underscore_statement ref,
+  int condition: @ruby_underscore_expression ref
+);
+
+@ruby_variable_reference_pattern_name_type = @ruby_token_identifier | @ruby_underscore_nonlocal_variable
+
+ruby_variable_reference_pattern_def(
+  unique int id: @ruby_variable_reference_pattern,
+  int name: @ruby_variable_reference_pattern_name_type ref
+);
+
+ruby_when_body(
+  unique int ruby_when: @ruby_when ref,
+  unique int body: @ruby_then ref
+);
+
+#keyset[ruby_when, index]
+ruby_when_pattern(
+  int ruby_when: @ruby_when ref,
+  int index: int ref,
+  unique int pattern: @ruby_pattern ref
+);
+
+ruby_when_def(
+  unique int id: @ruby_when
+);
+
+ruby_while_def(
+  unique int id: @ruby_while,
+  int body: @ruby_do ref,
+  int condition: @ruby_underscore_statement ref
+);
+
+ruby_while_modifier_def(
+  unique int id: @ruby_while_modifier,
+  int body: @ruby_underscore_statement ref,
+  int condition: @ruby_underscore_expression ref
+);
+
+ruby_yield_child(
+  unique int ruby_yield: @ruby_yield ref,
+  unique int child: @ruby_argument_list ref
+);
+
+ruby_yield_def(
+  unique int id: @ruby_yield
+);
+
+ruby_tokeninfo(
+  unique int id: @ruby_token,
+  int kind: int ref,
+  string value: string ref
+);
+
+case @ruby_token.kind of
+  0 = @ruby_reserved_word
+| 1 = @ruby_token_character
+| 2 = @ruby_token_class_variable
+| 3 = @ruby_token_comment
+| 4 = @ruby_token_constant
+| 5 = @ruby_token_empty_statement
+| 6 = @ruby_token_encoding
+| 7 = @ruby_token_escape_sequence
+| 8 = @ruby_token_false
+| 9 = @ruby_token_file
+| 10 = @ruby_token_float
+| 11 = @ruby_token_forward_argument
+| 12 = @ruby_token_forward_parameter
+| 13 = @ruby_token_global_variable
+| 14 = @ruby_token_hash_key_symbol
+| 15 = @ruby_token_hash_splat_nil
+| 16 = @ruby_token_heredoc_beginning
+| 17 = @ruby_token_heredoc_content
+| 18 = @ruby_token_heredoc_end
+| 19 = @ruby_token_identifier
+| 20 = @ruby_token_instance_variable
+| 21 = @ruby_token_integer
+| 22 = @ruby_token_line
+| 23 = @ruby_token_nil
+| 24 = @ruby_token_operator
+| 25 = @ruby_token_self
+| 26 = @ruby_token_simple_symbol
+| 27 = @ruby_token_string_content
+| 28 = @ruby_token_super
+| 29 = @ruby_token_true
+| 30 = @ruby_token_uninterpreted
+;
+
+
+@ruby_ast_node = @ruby_alias | @ruby_alternative_pattern | @ruby_argument_list | @ruby_array | @ruby_array_pattern | @ruby_as_pattern | @ruby_assignment | @ruby_bare_string | @ruby_bare_symbol | @ruby_begin | @ruby_begin_block | @ruby_binary | @ruby_block | @ruby_block_argument | @ruby_block_body | @ruby_block_parameter | @ruby_block_parameters | @ruby_body_statement | @ruby_break | @ruby_call | @ruby_case__ | @ruby_case_match | @ruby_chained_string | @ruby_class | @ruby_complex | @ruby_conditional | @ruby_delimited_symbol | @ruby_destructured_left_assignment | @ruby_destructured_parameter | @ruby_do | @ruby_do_block | @ruby_element_reference | @ruby_else | @ruby_elsif | @ruby_end_block | @ruby_ensure | @ruby_exception_variable | @ruby_exceptions | @ruby_expression_reference_pattern | @ruby_find_pattern | @ruby_for | @ruby_hash | @ruby_hash_pattern | @ruby_hash_splat_argument | @ruby_hash_splat_parameter | @ruby_heredoc_body | @ruby_if | @ruby_if_guard | @ruby_if_modifier | @ruby_in | @ruby_in_clause | @ruby_interpolation | @ruby_keyword_parameter | @ruby_keyword_pattern | @ruby_lambda | @ruby_lambda_parameters | @ruby_left_assignment_list | @ruby_method | @ruby_method_parameters | @ruby_module | @ruby_next | @ruby_operator_assignment | @ruby_optional_parameter | @ruby_pair | @ruby_parenthesized_pattern | @ruby_parenthesized_statements | @ruby_pattern | @ruby_program | @ruby_range | @ruby_rational | @ruby_redo | @ruby_regex | @ruby_rescue | @ruby_rescue_modifier | @ruby_rest_assignment | @ruby_retry | @ruby_return | @ruby_right_assignment_list | @ruby_scope_resolution | @ruby_setter | @ruby_singleton_class | @ruby_singleton_method | @ruby_splat_argument | @ruby_splat_parameter | @ruby_string__ | @ruby_string_array | @ruby_subshell | @ruby_superclass | @ruby_symbol_array | @ruby_then | @ruby_token | @ruby_unary | @ruby_undef | @ruby_unless | @ruby_unless_guard | @ruby_unless_modifier | @ruby_until | @ruby_until_modifier | @ruby_variable_reference_pattern | @ruby_when | @ruby_while | @ruby_while_modifier | @ruby_yield
+
+@ruby_ast_node_parent = @file | @ruby_ast_node
+
+#keyset[parent, parent_index]
+ruby_ast_node_info(
+  unique int node: @ruby_ast_node ref,
+  int parent: @ruby_ast_node_parent ref,
+  int parent_index: int ref,
+  int loc: @location ref
+);
+
+erb_comment_directive_child(
+  unique int erb_comment_directive: @erb_comment_directive ref,
+  unique int child: @erb_token_comment ref
+);
+
+erb_comment_directive_def(
+  unique int id: @erb_comment_directive
+);
+
+erb_directive_child(
+  unique int erb_directive: @erb_directive ref,
+  unique int child: @erb_token_code ref
+);
+
+erb_directive_def(
+  unique int id: @erb_directive
+);
+
+erb_graphql_directive_child(
+  unique int erb_graphql_directive: @erb_graphql_directive ref,
+  unique int child: @erb_token_code ref
+);
+
+erb_graphql_directive_def(
+  unique int id: @erb_graphql_directive
+);
+
+erb_output_directive_child(
+  unique int erb_output_directive: @erb_output_directive ref,
+  unique int child: @erb_token_code ref
+);
+
+erb_output_directive_def(
+  unique int id: @erb_output_directive
+);
+
+@erb_template_child_type = @erb_comment_directive | @erb_directive | @erb_graphql_directive | @erb_output_directive | @erb_token_content
+
+#keyset[erb_template, index]
+erb_template_child(
+  int erb_template: @erb_template ref,
+  int index: int ref,
+  unique int child: @erb_template_child_type ref
+);
+
+erb_template_def(
+  unique int id: @erb_template
+);
+
+erb_tokeninfo(
+  unique int id: @erb_token,
+  int kind: int ref,
+  string value: string ref
+);
+
+case @erb_token.kind of
+  0 = @erb_reserved_word
+| 1 = @erb_token_code
+| 2 = @erb_token_comment
+| 3 = @erb_token_content
+;
+
+
+@erb_ast_node = @erb_comment_directive | @erb_directive | @erb_graphql_directive | @erb_output_directive | @erb_template | @erb_token
+
+@erb_ast_node_parent = @erb_ast_node | @file
+
+#keyset[parent, parent_index]
+erb_ast_node_info(
+  unique int node: @erb_ast_node ref,
+  int parent: @erb_ast_node_parent ref,
+  int parent_index: int ref,
+  int loc: @location ref
+);
+
diff --git a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_ast_node_info.ql b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_ast_node_info.ql
new file mode 100644
index 00000000000..abc6f7bf144
--- /dev/null
+++ b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_ast_node_info.ql
@@ -0,0 +1,76 @@
+class AstNode extends @ruby_ast_node_parent {
+  string toString() { none() }
+}
+
+class Location extends @location {
+  string toString() { none() }
+}
+
+private predicate body_statement(AstNode body, AstNode firstChild) {
+  exists(AstNode node |
+    ruby_class_def(node, _) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_class_child(node, 0, firstChild)
+    or
+    ruby_do_block_def(node) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_do_block_child(node, 0, firstChild)
+    or
+    ruby_method_def(node, _) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_method_child(node, 0, firstChild)
+    or
+    ruby_module_def(node, _) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_module_child(node, 0, firstChild)
+    or
+    ruby_singleton_class_def(node, _) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_singleton_class_child(node, 0, firstChild)
+    or
+    ruby_singleton_method_def(node, _, _) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_singleton_method_child(node, 0, firstChild)
+    or
+    ruby_block_def(node) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "}") and
+    ruby_block_child(node, 0, firstChild)
+  )
+}
+
+private predicate body_statement_child(AstNode body, int index, AstNode child) {
+  exists(AstNode parent, AstNode firstChild, int firstChildIndex |
+    body_statement(body, firstChild) and
+    ruby_ast_node_info(firstChild, parent, firstChildIndex, _) and
+    child =
+      rank[index + 1](AstNode c, int i |
+        ruby_ast_node_info(c, parent, i, _) and i >= firstChildIndex and c != body
+      |
+        c order by i
+      )
+  )
+}
+
+private predicate astNodeInfo(AstNode node, AstNode parent, int parent_index, Location loc) {
+  ruby_ast_node_info(node, parent, parent_index, loc) and
+  not body_statement(node, _) and
+  not body_statement_child(_, _, node)
+}
+
+from AstNode node, AstNode parent, int parent_index, Location loc
+where
+  astNodeInfo(node, parent, parent_index, loc)
+  or
+  body_statement_child(parent, parent_index, node) and ruby_ast_node_info(node, _, _, loc)
+  or
+  body_statement(node, _) and
+  ruby_ast_node_info(node, parent, _, loc) and
+  parent_index = count(AstNode n | astNodeInfo(n, parent, _, _))
+select node, parent, parent_index, loc
diff --git a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_block_body.ql b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_block_body.ql
new file mode 100644
index 00000000000..51d629755a8
--- /dev/null
+++ b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_block_body.ql
@@ -0,0 +1,11 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+from AstNode ruby_block, AstNode body
+where
+  ruby_block_def(ruby_block) and
+  ruby_ast_node_info(body, ruby_block, _, _) and
+  ruby_tokeninfo(body, _, "}") and
+  ruby_block_child(ruby_block, _, _)
+select ruby_block, body
diff --git a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_block_body_child.ql b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_block_body_child.ql
new file mode 100644
index 00000000000..d0743a7a340
--- /dev/null
+++ b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_block_body_child.ql
@@ -0,0 +1,11 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+from AstNode ruby_block, AstNode body, int index, AstNode child
+where
+  ruby_block_def(ruby_block) and
+  ruby_ast_node_info(body, ruby_block, _, _) and
+  ruby_tokeninfo(body, _, "}") and
+  ruby_block_child(ruby_block, index, child)
+select body, index, child
diff --git a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_block_body_def.ql b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_block_body_def.ql
new file mode 100644
index 00000000000..78204867e6f
--- /dev/null
+++ b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_block_body_def.ql
@@ -0,0 +1,18 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+/*
+ * It's not possible to generate fresh IDs for the new ruby_block_body nodes,
+ * therefore we re-purpose the "}"-token that closes the block and use its ID instead.
+ * As a result the AST will be missing the "}" tokens, but those are unlikely to be used
+ * for anything.
+ */
+
+from AstNode ruby_block, AstNode body
+where
+  ruby_block_def(ruby_block) and
+  ruby_ast_node_info(body, ruby_block, _, _) and
+  ruby_tokeninfo(body, _, "}") and
+  ruby_block_child(ruby_block, _, _)
+select body
diff --git a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_body_statement_child.ql b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_body_statement_child.ql
new file mode 100644
index 00000000000..682c124cb49
--- /dev/null
+++ b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_body_statement_child.ql
@@ -0,0 +1,36 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+from AstNode node, AstNode body, int index, AstNode child
+where
+  ruby_class_def(node, _) and
+  ruby_ast_node_info(body, node, _, _) and
+  ruby_tokeninfo(body, _, "end") and
+  ruby_class_child(node, index, child)
+  or
+  ruby_do_block_def(node) and
+  ruby_ast_node_info(body, node, _, _) and
+  ruby_tokeninfo(body, _, "end") and
+  ruby_do_block_child(node, index, child)
+  or
+  ruby_method_def(node, _) and
+  ruby_ast_node_info(body, node, _, _) and
+  ruby_tokeninfo(body, _, "end") and
+  ruby_method_child(node, index, child)
+  or
+  ruby_module_def(node, _) and
+  ruby_ast_node_info(body, node, _, _) and
+  ruby_tokeninfo(body, _, "end") and
+  ruby_module_child(node, index, child)
+  or
+  ruby_singleton_class_def(node, _) and
+  ruby_ast_node_info(body, node, _, _) and
+  ruby_tokeninfo(body, _, "end") and
+  ruby_singleton_class_child(node, index, child)
+  or
+  ruby_singleton_method_def(node, _, _) and
+  ruby_ast_node_info(body, node, _, _) and
+  ruby_tokeninfo(body, _, "end") and
+  ruby_singleton_method_child(node, index, child)
+select body, index, child
diff --git a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_body_statement_def.ql b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_body_statement_def.ql
new file mode 100644
index 00000000000..603b5d13215
--- /dev/null
+++ b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_body_statement_def.ql
@@ -0,0 +1,43 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+/*
+ * It's not possible to generate fresh IDs for the new ruby_body_statement nodes,
+ * therefore we re-purpose the "end"-token that closes the block and use its ID instead.
+ * As a result the AST will be missing the "end" tokens, but those are unlikely to be used
+ * for anything.
+ */
+
+from AstNode node, AstNode body
+where
+  ruby_class_def(node, _) and
+  ruby_ast_node_info(body, node, _, _) and
+  ruby_tokeninfo(body, _, "end") and
+  ruby_class_child(node, _, _)
+  or
+  ruby_do_block_def(node) and
+  ruby_ast_node_info(body, node, _, _) and
+  ruby_tokeninfo(body, _, "end") and
+  ruby_do_block_child(node, _, _)
+  or
+  ruby_method_def(node, _) and
+  ruby_ast_node_info(body, node, _, _) and
+  ruby_tokeninfo(body, _, "end") and
+  ruby_method_child(node, _, _)
+  or
+  ruby_module_def(node, _) and
+  ruby_ast_node_info(body, node, _, _) and
+  ruby_tokeninfo(body, _, "end") and
+  ruby_module_child(node, _, _)
+  or
+  ruby_singleton_class_def(node, _) and
+  ruby_ast_node_info(body, node, _, _) and
+  ruby_tokeninfo(body, _, "end") and
+  ruby_singleton_class_child(node, _, _)
+  or
+  ruby_singleton_method_def(node, _, _) and
+  ruby_ast_node_info(body, node, _, _) and
+  ruby_tokeninfo(body, _, "end") and
+  ruby_singleton_method_child(node, _, _)
+select body
diff --git a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_class_body.ql b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_class_body.ql
new file mode 100644
index 00000000000..0a5a7acbc4d
--- /dev/null
+++ b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_class_body.ql
@@ -0,0 +1,11 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+from AstNode node, AstNode body
+where
+  ruby_class_def(node, _) and
+  ruby_ast_node_info(body, node, _, _) and
+  ruby_tokeninfo(body, _, "end") and
+  ruby_class_child(node, _, _)
+select node, body
diff --git a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_do_block_body.ql b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_do_block_body.ql
new file mode 100644
index 00000000000..dee41a91532
--- /dev/null
+++ b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_do_block_body.ql
@@ -0,0 +1,11 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+from AstNode node, AstNode body
+where
+  ruby_do_block_def(node) and
+  ruby_ast_node_info(body, node, _, _) and
+  ruby_tokeninfo(body, _, "end") and
+  ruby_do_block_child(node, _, _)
+select node, body
diff --git a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_method_body.ql b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_method_body.ql
new file mode 100644
index 00000000000..88889a382a4
--- /dev/null
+++ b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_method_body.ql
@@ -0,0 +1,20 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+from AstNode node, AstNode body
+where
+  ruby_method_def(node, _) and
+  (
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_method_child(node, _, _)
+    or
+    ruby_method_child(node, 0, body) and
+    not exists(AstNode n |
+      ruby_ast_node_info(n, node, _, _) and
+      ruby_tokeninfo(n, _, "end")
+    )
+  )
+// TODO : handle end-less methods
+select node, body
diff --git a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_module_body.ql b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_module_body.ql
new file mode 100644
index 00000000000..514dffc45fb
--- /dev/null
+++ b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_module_body.ql
@@ -0,0 +1,11 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+from AstNode node, AstNode body
+where
+  ruby_module_def(node, _) and
+  ruby_ast_node_info(body, node, _, _) and
+  ruby_tokeninfo(body, _, "end") and
+  ruby_module_child(node, _, _)
+select node, body
diff --git a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_singleton_class_body.ql b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_singleton_class_body.ql
new file mode 100644
index 00000000000..db90c1ded79
--- /dev/null
+++ b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_singleton_class_body.ql
@@ -0,0 +1,11 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+from AstNode node, AstNode body
+where
+  ruby_singleton_class_def(node, _) and
+  ruby_ast_node_info(body, node, _, _) and
+  ruby_tokeninfo(body, _, "end") and
+  ruby_singleton_class_child(node, _, _)
+select node, body
diff --git a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_singleton_method_body.ql b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_singleton_method_body.ql
new file mode 100644
index 00000000000..9d714fad0b8
--- /dev/null
+++ b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_singleton_method_body.ql
@@ -0,0 +1,17 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+from AstNode node, AstNode body
+where
+  ruby_singleton_method_def(node, _, _) and
+  ruby_ast_node_info(body, node, _, _) and
+  ruby_tokeninfo(body, _, "end") and
+  ruby_singleton_method_child(node, _, _)
+  or
+  ruby_singleton_method_child(node, 0, body) and
+  not exists(AstNode n |
+    ruby_ast_node_info(n, node, _, _) and
+    ruby_tokeninfo(n, _, "end")
+  )
+select node, body
diff --git a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_tokeninfo.ql b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_tokeninfo.ql
new file mode 100644
index 00000000000..358445c4204
--- /dev/null
+++ b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/ruby_tokeninfo.ql
@@ -0,0 +1,46 @@
+class AstNode extends @ruby_ast_node {
+  string toString() { none() }
+}
+
+private predicate body_statement(AstNode body) {
+  exists(AstNode node |
+    ruby_class_def(node, _) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_class_child(node, _, _)
+    or
+    ruby_do_block_def(node) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_do_block_child(node, _, _)
+    or
+    ruby_method_def(node, _) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_method_child(node, _, _)
+    or
+    ruby_module_def(node, _) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_module_child(node, _, _)
+    or
+    ruby_singleton_class_def(node, _) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_singleton_class_child(node, _, _)
+    or
+    ruby_singleton_method_def(node, _, _) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "end") and
+    ruby_singleton_method_child(node, _, _)
+    or
+    ruby_block_def(node) and
+    ruby_ast_node_info(body, node, _, _) and
+    ruby_tokeninfo(body, _, "}") and
+    ruby_block_child(node, _, _)
+  )
+}
+
+from AstNode token, int kind, string value
+where ruby_tokeninfo(token, kind, value) and not body_statement(token)
+select token, kind, value
diff --git a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/upgrade.properties b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/upgrade.properties
new file mode 100644
index 00000000000..6793ae3c109
--- /dev/null
+++ b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/upgrade.properties
@@ -0,0 +1,33 @@
+description: Wrap class, module, method, and block bodies in a named node
+compatibility: partial
+
+ruby_block_body.rel: run ruby_block_body.qlo
+ruby_block_body_def.rel: run ruby_block_body_def.qlo
+ruby_block_body_child.rel: run ruby_block_body_child.qlo
+ruby_block_child.rel: delete
+
+ruby_body_statement_child.rel: run ruby_body_statement_child.qlo
+ruby_body_statement_def.rel: run ruby_body_statement_def.qlo
+
+ruby_class_body.rel: run ruby_class_body.qlo
+ruby_class_child.rel: delete
+
+ruby_do_block_body.rel: run ruby_do_block_body.qlo
+ruby_do_block_child.rel: delete
+
+ruby_method_body.rel: run ruby_method_body.qlo
+ruby_method_child.rel: delete
+
+ruby_module_body.rel: run ruby_module_body.qlo
+ruby_module_child.rel: delete
+
+ruby_singleton_class_body.rel: run ruby_singleton_class_body.qlo
+ruby_singleton_class_child.rel: delete
+
+ruby_singleton_method_body.rel: run ruby_singleton_method_body.qlo
+ruby_singleton_method_child.rel: delete
+
+ruby_ast_node_info.rel: run ruby_ast_node_info.qlo
+ruby_tokeninfo.rel: run ruby_tokeninfo.qlo
+
+locations_default.rel: run locations_default.qlo
\ No newline at end of file

From f77c2ac3d0ec45c56b6f18034a1863dc966f26de Mon Sep 17 00:00:00 2001
From: Arthur Baars <aibaars@github.com>
Date: Tue, 2 Aug 2022 16:54:52 +0200
Subject: [PATCH 022/203] Update tests

---
 ruby/ql/test/library-tests/ast/Ast.expected   | 19 ++++++++++-----
 .../library-tests/ast/TreeSitter.expected     | 23 ++++++++++++-------
 .../test/library-tests/ast/ValueText.expected |  2 ++
 .../ast/literals/literals.expected            | 21 ++++++++++++-----
 .../library-tests/ast/literals/literals.rb    |  4 +++-
 5 files changed, 48 insertions(+), 21 deletions(-)

diff --git a/ruby/ql/test/library-tests/ast/Ast.expected b/ruby/ql/test/library-tests/ast/Ast.expected
index 4cb29e0f033..33229c64393 100644
--- a/ruby/ql/test/library-tests/ast/Ast.expected
+++ b/ruby/ql/test/library-tests/ast/Ast.expected
@@ -2260,12 +2260,8 @@ literals/literals.rb:
 #  189|     getAnOperand/getLeftOperand: [LocalVariableAccess] query
 #  189|     getAnOperand/getRightOperand: [HereDoc] <<'DOC'
 #  189|       getComponent: [StringTextComponent] 
-#  189|        text without 
-#  190|       getComponent: [StringInterpolationComponent] #{...}
-#  190|         getStmt: [MethodCall] call to interpolation
-#  190|           getReceiver: [SelfVariableAccess] self
-#  190|       getComponent: [StringTextComponent]  !
-#  190|       
+#  189|        text without #{ interpolation } !
+#  189|       
 #  193|   getStmt: [AssignExpr] ... = ...
 #  193|     getAnOperand/getLeftOperand: [LocalVariableAccess] output
 #  193|     getAnOperand/getRightOperand: [HereDoc] <<`SCRIPT`
@@ -2293,6 +2289,17 @@ literals/literals.rb:
 #  199|       getKey: [SymbolLiteral] :Z
 #  199|         getComponent: [StringTextComponent] Z
 #  199|       getValue: [ConstantReadAccess] Z
+#  201|   getStmt: [StringLiteral] "@foo: #{...} @@bar: #{...} $_..."
+#  201|     getComponent: [StringTextComponent] @foo: 
+#  201|     getComponent: [StringInterpolationComponent] #{...}
+#  201|       getStmt: [InstanceVariableAccess] @foo
+#  201|         getReceiver: [SelfVariableAccess] self
+#  201|     getComponent: [StringTextComponent]  @@bar: 
+#  201|     getComponent: [StringInterpolationComponent] #{...}
+#  201|       getStmt: [ClassVariableAccess] @@bar
+#  201|     getComponent: [StringTextComponent]  $_: 
+#  201|     getComponent: [StringInterpolationComponent] #{...}
+#  201|       getStmt: [GlobalVariableAccess] $_
 control/loops.rb:
 #    1| [Toplevel] loops.rb
 #    2|   getStmt: [AssignExpr] ... = ...
diff --git a/ruby/ql/test/library-tests/ast/TreeSitter.expected b/ruby/ql/test/library-tests/ast/TreeSitter.expected
index bca7b42046c..839ad55fb38 100644
--- a/ruby/ql/test/library-tests/ast/TreeSitter.expected
+++ b/ruby/ql/test/library-tests/ast/TreeSitter.expected
@@ -4539,6 +4539,18 @@ literals/literals.rb:
 #  199|       0: [HashKeySymbol] Z
 #  199|       1: [ReservedWord] :
 #  199|     4: [ReservedWord] }
+#  201|   135: [String] String
+#  201|     0: [ReservedWord] "
+#  201|     1: [StringContent] @foo: 
+#  201|     2: [Interpolation] Interpolation
+#  201|       0: [InstanceVariable] @foo
+#  201|     3: [StringContent]  @@bar: 
+#  201|     4: [Interpolation] Interpolation
+#  201|       0: [ClassVariable] @@bar
+#  201|     5: [StringContent]  $_: 
+#  201|     6: [Interpolation] Interpolation
+#  201|       0: [GlobalVariable] $_
+#  201|     7: [ReservedWord] "
 #    1| [Comment] # boolean values and nil
 #    9| [Comment] # decimal integers
 #   14| [Comment] # max value representable by QL's int type
@@ -4640,14 +4652,9 @@ literals/literals.rb:
 #  188| [Comment] # TODO: the parser currently does not handle single quoted heredocs correctly
 #  189| [HeredocBody] HeredocBody
 #  189|   0: [HeredocContent] 
-#  189|    text without 
-#  190|   1: [Interpolation] Interpolation
-#  190|     0: [ReservedWord] #{
-#  190|     1: [Identifier] interpolation
-#  190|     2: [ReservedWord] }
-#  190|   2: [HeredocContent]  !
-#  190|   
-#  191|   3: [HeredocEnd] DOC
+#  189|    text without #{ interpolation } !
+#  189|   
+#  191|   1: [HeredocEnd] DOC
 #  193| [HeredocBody] HeredocBody
 #  193|   0: [HeredocContent] 
 #  193|    cat file.txt
diff --git a/ruby/ql/test/library-tests/ast/ValueText.expected b/ruby/ql/test/library-tests/ast/ValueText.expected
index e66838fbe2c..1492d619e33 100644
--- a/ruby/ql/test/library-tests/ast/ValueText.expected
+++ b/ruby/ql/test/library-tests/ast/ValueText.expected
@@ -709,6 +709,7 @@ exprValue
 | literals/literals.rb:168:9:168:13 | <<SQL | \nselect * from table\n | string |
 | literals/literals.rb:175:11:175:16 | <<-BLA | \nsome text\nand some more\n   | string |
 | literals/literals.rb:180:9:180:19 | <<~SQUIGGLY | \n   indented stuff\n | string |
+| literals/literals.rb:189:9:189:15 | <<'DOC' | \n text without #{ interpolation } !\n | string |
 | literals/literals.rb:193:10:193:19 | <<`SCRIPT` | \n cat file.txt\n | string |
 | literals/literals.rb:197:5:197:6 | 42 | 42 | int |
 | literals/literals.rb:198:2:198:2 | :x | :x | symbol |
@@ -1585,6 +1586,7 @@ exprCfgNodeValue
 | literals/literals.rb:168:9:168:13 | <<SQL | \nselect * from table\n | string |
 | literals/literals.rb:175:11:175:16 | <<-BLA | \nsome text\nand some more\n   | string |
 | literals/literals.rb:180:9:180:19 | <<~SQUIGGLY | \n   indented stuff\n | string |
+| literals/literals.rb:189:9:189:15 | <<'DOC' | \n text without #{ interpolation } !\n | string |
 | literals/literals.rb:193:10:193:19 | <<`SCRIPT` | \n cat file.txt\n | string |
 | literals/literals.rb:197:5:197:6 | 42 | 42 | int |
 | literals/literals.rb:198:2:198:2 | :x | :x | symbol |
diff --git a/ruby/ql/test/library-tests/ast/literals/literals.expected b/ruby/ql/test/library-tests/ast/literals/literals.expected
index a11e5338d9b..b5fe30e46ac 100644
--- a/ruby/ql/test/library-tests/ast/literals/literals.expected
+++ b/ruby/ql/test/library-tests/ast/literals/literals.expected
@@ -227,7 +227,7 @@ allLiterals
 | literals.rb:175:11:175:16 | <<-BLA | HereDoc | \nsome text\nand some more\n   |
 | literals.rb:180:9:180:19 | <<~SQUIGGLY | HereDoc | \n   indented stuff\n |
 | literals.rb:184:9:184:15 | <<"DOC" | HereDoc | <none> |
-| literals.rb:189:9:189:15 | <<'DOC' | HereDoc | <none> |
+| literals.rb:189:9:189:15 | <<'DOC' | HereDoc | \n text without #{ interpolation } !\n |
 | literals.rb:193:10:193:19 | <<`SCRIPT` | HereDoc | \n cat file.txt\n |
 | literals.rb:197:5:197:6 | 42 | IntegerLiteral | 42 |
 | literals.rb:198:1:198:9 | {...} | HashLiteral | <none> |
@@ -237,6 +237,7 @@ allLiterals
 | literals.rb:199:1:199:9 | {...} | HashLiteral | <none> |
 | literals.rb:199:2:199:2 | :y | SymbolLiteral | :y |
 | literals.rb:199:7:199:7 | :Z | SymbolLiteral | :Z |
+| literals.rb:201:1:201:35 | "@foo: #{...} @@bar: #{...} $_..." | StringLiteral | <none> |
 stringlikeLiterals
 | literals.rb:59:1:59:2 | "" |  |
 | literals.rb:60:1:60:2 | "" |  |
@@ -345,12 +346,13 @@ stringlikeLiterals
 | literals.rb:175:11:175:16 | <<-BLA | \nsome text\nand some more\n   |
 | literals.rb:180:9:180:19 | <<~SQUIGGLY | \n   indented stuff\n |
 | literals.rb:184:9:184:15 | <<"DOC" | <none> |
-| literals.rb:189:9:189:15 | <<'DOC' | <none> |
+| literals.rb:189:9:189:15 | <<'DOC' | \n text without #{ interpolation } !\n |
 | literals.rb:193:10:193:19 | <<`SCRIPT` | \n cat file.txt\n |
 | literals.rb:198:2:198:2 | :x | :x |
 | literals.rb:198:6:198:6 | :y | :y |
 | literals.rb:199:2:199:2 | :y | :y |
 | literals.rb:199:7:199:7 | :Z | :Z |
+| literals.rb:201:1:201:35 | "@foo: #{...} @@bar: #{...} $_..." | <none> |
 stringLiterals
 | literals.rb:59:1:59:2 | "" |  |
 | literals.rb:60:1:60:2 | "" |  |
@@ -405,6 +407,7 @@ stringLiterals
 | literals.rb:163:1:163:34 | "abcdefghijklmnopqrstuvwxyzabcdef" | abcdefghijklmnopqrstuvwxyzabcdef |
 | literals.rb:164:1:164:35 | "foobarfoobarfoobarfoobarfooba..." | foobarfoobarfoobarfoobarfoobarfoo |
 | literals.rb:165:1:165:40 | "foobar\\\\foobar\\\\foobar\\\\fooba..." | foobar\\foobar\\foobar\\foobar\\foobar |
+| literals.rb:201:1:201:35 | "@foo: #{...} @@bar: #{...} $_..." | <none> |
 regExpLiterals
 | literals.rb:149:1:149:2 | // |  |  |
 | literals.rb:150:1:150:5 | /foo/ | foo |  |
@@ -626,14 +629,18 @@ stringComponents
 | literals.rb:184:9:184:15 | <<"DOC" | HereDoc | 0 | literals.rb:184:16:185:11 | \n text with  | StringTextComponent |
 | literals.rb:184:9:184:15 | <<"DOC" | HereDoc | 1 | literals.rb:185:12:185:29 | #{...} | StringInterpolationComponent |
 | literals.rb:184:9:184:15 | <<"DOC" | HereDoc | 2 | literals.rb:185:30:185:32 |  !\n | StringTextComponent |
-| literals.rb:189:9:189:15 | <<'DOC' | HereDoc | 0 | literals.rb:189:16:190:14 | \n text without  | StringTextComponent |
-| literals.rb:189:9:189:15 | <<'DOC' | HereDoc | 1 | literals.rb:190:15:190:32 | #{...} | StringInterpolationComponent |
-| literals.rb:189:9:189:15 | <<'DOC' | HereDoc | 2 | literals.rb:190:33:190:35 |  !\n | StringTextComponent |
+| literals.rb:189:9:189:15 | <<'DOC' | HereDoc | 0 | literals.rb:189:16:190:35 | \n text without #{ interpolation } !\n | StringTextComponent |
 | literals.rb:193:10:193:19 | <<`SCRIPT` | HereDoc | 0 | literals.rb:193:20:194:14 | \n cat file.txt\n | StringTextComponent |
 | literals.rb:198:2:198:2 | :x | SymbolLiteral | 0 | literals.rb:198:2:198:2 | x | StringTextComponent |
 | literals.rb:198:6:198:6 | :y | SymbolLiteral | 0 | literals.rb:198:6:198:6 | y | StringTextComponent |
 | literals.rb:199:2:199:2 | :y | SymbolLiteral | 0 | literals.rb:199:2:199:2 | y | StringTextComponent |
 | literals.rb:199:7:199:7 | :Z | SymbolLiteral | 0 | literals.rb:199:7:199:7 | Z | StringTextComponent |
+| literals.rb:201:1:201:35 | "@foo: #{...} @@bar: #{...} $_..." | StringLiteral | 0 | literals.rb:201:2:201:7 | @foo:  | StringTextComponent |
+| literals.rb:201:1:201:35 | "@foo: #{...} @@bar: #{...} $_..." | StringLiteral | 1 | literals.rb:201:8:201:12 | #{...} | StringInterpolationComponent |
+| literals.rb:201:1:201:35 | "@foo: #{...} @@bar: #{...} $_..." | StringLiteral | 2 | literals.rb:201:13:201:20 |  @@bar:  | StringTextComponent |
+| literals.rb:201:1:201:35 | "@foo: #{...} @@bar: #{...} $_..." | StringLiteral | 3 | literals.rb:201:21:201:26 | #{...} | StringInterpolationComponent |
+| literals.rb:201:1:201:35 | "@foo: #{...} @@bar: #{...} $_..." | StringLiteral | 4 | literals.rb:201:27:201:31 |  $_:  | StringTextComponent |
+| literals.rb:201:1:201:35 | "@foo: #{...} @@bar: #{...} $_..." | StringLiteral | 5 | literals.rb:201:32:201:34 | #{...} | StringInterpolationComponent |
 stringInterpolations
 | literals.rb:71:10:71:19 | #{...} | 0 | literals.rb:71:13:71:17 | ... + ... | AddExpr |
 | literals.rb:72:12:72:21 | #{...} | 0 | literals.rb:72:15:72:19 | ... + ... | AddExpr |
@@ -659,7 +666,9 @@ stringInterpolations
 | literals.rb:146:10:146:19 | #{...} | 0 | literals.rb:146:13:146:17 | ... - ... | SubExpr |
 | literals.rb:171:14:171:22 | #{...} | 0 | literals.rb:171:17:171:20 | call to name | MethodCall |
 | literals.rb:185:12:185:29 | #{...} | 0 | literals.rb:185:15:185:27 | call to interpolation | MethodCall |
-| literals.rb:190:15:190:32 | #{...} | 0 | literals.rb:190:18:190:30 | call to interpolation | MethodCall |
+| literals.rb:201:8:201:12 | #{...} | 0 | literals.rb:201:9:201:12 | @foo | InstanceVariableAccess |
+| literals.rb:201:21:201:26 | #{...} | 0 | literals.rb:201:22:201:26 | @@bar | ClassVariableAccess |
+| literals.rb:201:32:201:34 | #{...} | 0 | literals.rb:201:33:201:34 | $_ | GlobalVariableAccess |
 concatenatedStrings
 | literals.rb:75:1:75:17 | "..." "..." | foobarbaz | 0 | literals.rb:75:1:75:5 | "foo" |
 | literals.rb:75:1:75:17 | "..." "..." | foobarbaz | 1 | literals.rb:75:7:75:11 | "bar" |
diff --git a/ruby/ql/test/library-tests/ast/literals/literals.rb b/ruby/ql/test/library-tests/ast/literals/literals.rb
index 6ddfc74e88f..e3f13c6bfea 100644
--- a/ruby/ql/test/library-tests/ast/literals/literals.rb
+++ b/ruby/ql/test/library-tests/ast/literals/literals.rb
@@ -196,4 +196,6 @@ SCRIPT
 
 x = 42
 {x:, y:5}
-{y: , Z:}
\ No newline at end of file
+{y: , Z:}
+
+"@foo: #@foo @@bar: #@@bar $_: #$_"
\ No newline at end of file

From 24526108d35a5a1db0b15954c80859bef8cd2a17 Mon Sep 17 00:00:00 2001
From: Arthur Baars <aibaars@github.com>
Date: Thu, 25 Aug 2022 17:48:28 +0200
Subject: [PATCH 023/203] Ruby: update dbscheme stats

---
 ruby/ql/lib/ruby.dbscheme.stats | 8439 ++++++++++++++-----------------
 1 file changed, 3765 insertions(+), 4674 deletions(-)

diff --git a/ruby/ql/lib/ruby.dbscheme.stats b/ruby/ql/lib/ruby.dbscheme.stats
index 782ae4db56b..4a594923a20 100644
--- a/ruby/ql/lib/ruby.dbscheme.stats
+++ b/ruby/ql/lib/ruby.dbscheme.stats
@@ -5,7 +5,7 @@
         </e>
         <e>
             <k>@diagnostic_error</k>
-            <v>155</v>
+            <v>130</v>
         </e>
         <e>
             <k>@diagnostic_info</k>
@@ -21,7 +21,7 @@
         </e>
         <e>
             <k>@erb_directive</k>
-            <v>1414</v>
+            <v>1400</v>
         </e>
         <e>
             <k>@erb_graphql_directive</k>
@@ -29,19 +29,19 @@
         </e>
         <e>
             <k>@erb_output_directive</k>
-            <v>3806</v>
+            <v>3859</v>
         </e>
         <e>
             <k>@erb_reserved_word</k>
-            <v>10441</v>
+            <v>10520</v>
         </e>
         <e>
             <k>@erb_template</k>
-            <v>1563</v>
+            <v>1540</v>
         </e>
         <e>
             <k>@erb_token_code</k>
-            <v>5220</v>
+            <v>5260</v>
         </e>
         <e>
             <k>@erb_token_comment</k>
@@ -49,23 +49,23 @@
         </e>
         <e>
             <k>@erb_token_content</k>
-            <v>3761</v>
+            <v>5478</v>
         </e>
         <e>
             <k>@file</k>
-            <v>17168</v>
+            <v>17206</v>
         </e>
         <e>
             <k>@folder</k>
-            <v>4792</v>
+            <v>4799</v>
         </e>
         <e>
             <k>@location_default</k>
-            <v>8508604</v>
+            <v>8706731</v>
         </e>
-    <e>
+        <e>
             <k>@ruby_alias</k>
-            <v>1244</v>
+            <v>1264</v>
         </e>
         <e>
             <k>@ruby_alternative_pattern</k>
@@ -73,11 +73,11 @@
         </e>
         <e>
             <k>@ruby_argument_list</k>
-            <v>664517</v>
+            <v>670202</v>
         </e>
         <e>
             <k>@ruby_array</k>
-            <v>245561</v>
+            <v>246221</v>
         </e>
         <e>
             <k>@ruby_array_pattern</k>
@@ -89,19 +89,19 @@
         </e>
         <e>
             <k>@ruby_assignment</k>
-            <v>130246</v>
+            <v>131940</v>
         </e>
         <e>
             <k>@ruby_bare_string</k>
-            <v>11487</v>
+            <v>11622</v>
         </e>
         <e>
             <k>@ruby_bare_symbol</k>
-            <v>2106</v>
+            <v>2085</v>
         </e>
         <e>
             <k>@ruby_begin</k>
-            <v>2523</v>
+            <v>2549</v>
         </e>
         <e>
             <k>@ruby_begin_block</k>
@@ -109,87 +109,87 @@
         </e>
         <e>
             <k>@ruby_binary_ampersand</k>
-            <v>474</v>
+            <v>491</v>
         </e>
         <e>
             <k>@ruby_binary_ampersandampersand</k>
-            <v>8700</v>
+            <v>8705</v>
         </e>
         <e>
             <k>@ruby_binary_and</k>
-            <v>1348</v>
+            <v>1182</v>
         </e>
         <e>
             <k>@ruby_binary_bangequal</k>
-            <v>1586</v>
+            <v>1584</v>
         </e>
         <e>
             <k>@ruby_binary_bangtilde</k>
-            <v>178</v>
+            <v>177</v>
         </e>
         <e>
             <k>@ruby_binary_caret</k>
-            <v>155</v>
+            <v>157</v>
         </e>
         <e>
             <k>@ruby_binary_equalequal</k>
-            <v>31159</v>
+            <v>31539</v>
         </e>
         <e>
             <k>@ruby_binary_equalequalequal</k>
-            <v>603</v>
+            <v>631</v>
         </e>
         <e>
             <k>@ruby_binary_equaltilde</k>
-            <v>1820</v>
+            <v>1804</v>
         </e>
         <e>
             <k>@ruby_binary_langle</k>
-            <v>1334</v>
+            <v>1327</v>
         </e>
         <e>
             <k>@ruby_binary_langleequal</k>
-            <v>368</v>
+            <v>377</v>
         </e>
         <e>
             <k>@ruby_binary_langleequalrangle</k>
-            <v>749</v>
+            <v>758</v>
         </e>
         <e>
             <k>@ruby_binary_langlelangle</k>
-            <v>10368</v>
+            <v>10536</v>
         </e>
         <e>
             <k>@ruby_binary_minus</k>
-            <v>2381</v>
+            <v>2409</v>
         </e>
         <e>
             <k>@ruby_binary_or</k>
-            <v>665</v>
+            <v>622</v>
         </e>
         <e>
             <k>@ruby_binary_percent</k>
-            <v>1009</v>
+            <v>1017</v>
         </e>
         <e>
             <k>@ruby_binary_pipe</k>
-            <v>968</v>
+            <v>969</v>
         </e>
         <e>
             <k>@ruby_binary_pipepipe</k>
-            <v>8001</v>
+            <v>7935</v>
         </e>
         <e>
             <k>@ruby_binary_plus</k>
-            <v>6116</v>
+            <v>6173</v>
         </e>
         <e>
             <k>@ruby_binary_rangle</k>
-            <v>2400</v>
+            <v>2374</v>
         </e>
         <e>
             <k>@ruby_binary_rangleequal</k>
-            <v>558</v>
+            <v>575</v>
         </e>
         <e>
             <k>@ruby_binary_ranglerangle</k>
@@ -197,43 +197,51 @@
         </e>
         <e>
             <k>@ruby_binary_slash</k>
-            <v>1248</v>
+            <v>1257</v>
         </e>
         <e>
             <k>@ruby_binary_star</k>
-            <v>3286</v>
+            <v>3328</v>
         </e>
         <e>
             <k>@ruby_binary_starstar</k>
-            <v>1316</v>
+            <v>1332</v>
         </e>
         <e>
             <k>@ruby_block</k>
-            <v>97359</v>
+            <v>98296</v>
         </e>
         <e>
             <k>@ruby_block_argument</k>
-            <v>6050</v>
+            <v>6115</v>
+        </e>
+        <e>
+            <k>@ruby_block_body</k>
+            <v>97983</v>
         </e>
         <e>
             <k>@ruby_block_parameter</k>
-            <v>2410</v>
+            <v>2442</v>
         </e>
         <e>
             <k>@ruby_block_parameters</k>
-            <v>23336</v>
+            <v>23772</v>
+        </e>
+        <e>
+            <k>@ruby_body_statement</k>
+            <v>201560</v>
         </e>
         <e>
             <k>@ruby_break</k>
-            <v>3338</v>
+            <v>3355</v>
         </e>
         <e>
             <k>@ruby_call</k>
-            <v>965401</v>
+            <v>974897</v>
         </e>
         <e>
             <k>@ruby_case__</k>
-            <v>1219</v>
+            <v>1224</v>
         </e>
         <e>
             <k>@ruby_case_match</k>
@@ -241,11 +249,11 @@
         </e>
         <e>
             <k>@ruby_chained_string</k>
-            <v>885</v>
+            <v>877</v>
         </e>
         <e>
             <k>@ruby_class</k>
-            <v>16841</v>
+            <v>16946</v>
         </e>
         <e>
             <k>@ruby_complex</k>
@@ -253,11 +261,11 @@
         </e>
         <e>
             <k>@ruby_conditional</k>
-            <v>3464</v>
+            <v>3495</v>
         </e>
         <e>
             <k>@ruby_delimited_symbol</k>
-            <v>1257</v>
+            <v>1264</v>
         </e>
         <e>
             <k>@ruby_destructured_left_assignment</k>
@@ -269,23 +277,23 @@
         </e>
         <e>
             <k>@ruby_do</k>
-            <v>1610</v>
+            <v>1632</v>
         </e>
         <e>
             <k>@ruby_do_block</k>
-            <v>137435</v>
+            <v>138119</v>
         </e>
         <e>
             <k>@ruby_element_reference</k>
-            <v>82234</v>
+            <v>82869</v>
         </e>
         <e>
             <k>@ruby_else</k>
-            <v>6933</v>
+            <v>7138</v>
         </e>
         <e>
             <k>@ruby_elsif</k>
-            <v>1595</v>
+            <v>1578</v>
         </e>
         <e>
             <k>@ruby_end_block</k>
@@ -293,15 +301,15 @@
         </e>
         <e>
             <k>@ruby_ensure</k>
-            <v>3718</v>
+            <v>3803</v>
         </e>
         <e>
             <k>@ruby_exception_variable</k>
-            <v>1001</v>
+            <v>991</v>
         </e>
         <e>
             <k>@ruby_exceptions</k>
-            <v>1639</v>
+            <v>1654</v>
         </e>
         <e>
             <k>@ruby_expression_reference_pattern</k>
@@ -317,7 +325,7 @@
         </e>
         <e>
             <k>@ruby_hash</k>
-            <v>39413</v>
+            <v>39640</v>
         </e>
         <e>
             <k>@ruby_hash_pattern</k>
@@ -325,19 +333,19 @@
         </e>
         <e>
             <k>@ruby_hash_splat_argument</k>
-            <v>1856</v>
+            <v>1857</v>
         </e>
         <e>
             <k>@ruby_hash_splat_parameter</k>
-            <v>1355</v>
+            <v>1447</v>
         </e>
         <e>
             <k>@ruby_heredoc_body</k>
-            <v>5575</v>
+            <v>5789</v>
         </e>
         <e>
             <k>@ruby_if</k>
-            <v>18392</v>
+            <v>18341</v>
         </e>
         <e>
             <k>@ruby_if_guard</k>
@@ -345,7 +353,7 @@
         </e>
         <e>
             <k>@ruby_if_modifier</k>
-            <v>13620</v>
+            <v>13708</v>
         </e>
         <e>
             <k>@ruby_in</k>
@@ -357,11 +365,11 @@
         </e>
         <e>
             <k>@ruby_interpolation</k>
-            <v>38208</v>
+            <v>38051</v>
         </e>
         <e>
             <k>@ruby_keyword_parameter</k>
-            <v>3794</v>
+            <v>3939</v>
         </e>
         <e>
             <k>@ruby_keyword_pattern</k>
@@ -369,31 +377,31 @@
         </e>
         <e>
             <k>@ruby_lambda</k>
-            <v>7472</v>
+            <v>7557</v>
         </e>
         <e>
             <k>@ruby_lambda_parameters</k>
-            <v>1664</v>
+            <v>1665</v>
         </e>
         <e>
             <k>@ruby_left_assignment_list</k>
-            <v>2873</v>
+            <v>2910</v>
         </e>
         <e>
             <k>@ruby_method</k>
-            <v>98356</v>
+            <v>99525</v>
         </e>
         <e>
             <k>@ruby_method_parameters</k>
-            <v>28861</v>
+            <v>29417</v>
         </e>
         <e>
             <k>@ruby_module</k>
-            <v>21557</v>
+            <v>21589</v>
         </e>
         <e>
             <k>@ruby_next</k>
-            <v>2005</v>
+            <v>2021</v>
         </e>
         <e>
             <k>@ruby_operator_assignment_ampersandampersandequal</k>
@@ -401,7 +409,7 @@
         </e>
         <e>
             <k>@ruby_operator_assignment_ampersandequal</k>
-            <v>16</v>
+            <v>17</v>
         </e>
         <e>
             <k>@ruby_operator_assignment_caretequal</k>
@@ -413,23 +421,23 @@
         </e>
         <e>
             <k>@ruby_operator_assignment_minusequal</k>
-            <v>292</v>
+            <v>294</v>
         </e>
         <e>
             <k>@ruby_operator_assignment_percentequal</k>
-            <v>25</v>
+            <v>26</v>
         </e>
         <e>
             <k>@ruby_operator_assignment_pipeequal</k>
-            <v>138</v>
+            <v>142</v>
         </e>
         <e>
             <k>@ruby_operator_assignment_pipepipeequal</k>
-            <v>4611</v>
+            <v>4545</v>
         </e>
         <e>
             <k>@ruby_operator_assignment_plusequal</k>
-            <v>1759</v>
+            <v>1732</v>
         </e>
         <e>
             <k>@ruby_operator_assignment_ranglerangleequal</k>
@@ -437,11 +445,11 @@
         </e>
         <e>
             <k>@ruby_operator_assignment_slashequal</k>
-            <v>12</v>
+            <v>13</v>
         </e>
         <e>
             <k>@ruby_operator_assignment_starequal</k>
-            <v>49</v>
+            <v>50</v>
         </e>
         <e>
             <k>@ruby_operator_assignment_starstarequal</k>
@@ -449,11 +457,11 @@
         </e>
         <e>
             <k>@ruby_optional_parameter</k>
-            <v>6435</v>
+            <v>6540</v>
         </e>
         <e>
             <k>@ruby_pair</k>
-            <v>235158</v>
+            <v>237637</v>
         </e>
         <e>
             <k>@ruby_parenthesized_pattern</k>
@@ -461,27 +469,27 @@
         </e>
         <e>
             <k>@ruby_parenthesized_statements</k>
-            <v>10247</v>
+            <v>10510</v>
         </e>
         <e>
             <k>@ruby_pattern</k>
-            <v>3895</v>
+            <v>3918</v>
         </e>
         <e>
             <k>@ruby_program</k>
-            <v>17142</v>
+            <v>17193</v>
         </e>
         <e>
             <k>@ruby_range_dotdot</k>
-            <v>2831</v>
+            <v>2976</v>
         </e>
         <e>
             <k>@ruby_range_dotdotdot</k>
-            <v>1356</v>
+            <v>1459</v>
         </e>
         <e>
             <k>@ruby_rational</k>
-            <v>123</v>
+            <v>124</v>
         </e>
         <e>
             <k>@ruby_redo</k>
@@ -489,99 +497,99 @@
         </e>
         <e>
             <k>@ruby_regex</k>
-            <v>12854</v>
+            <v>13096</v>
         </e>
         <e>
             <k>@ruby_rescue</k>
-            <v>2061</v>
+            <v>2085</v>
         </e>
         <e>
             <k>@ruby_rescue_modifier</k>
-            <v>525</v>
+            <v>519</v>
         </e>
         <e>
             <k>@ruby_reserved_word</k>
-            <v>3667249</v>
+            <v>3700878</v>
         </e>
         <e>
             <k>@ruby_rest_assignment</k>
-            <v>398</v>
+            <v>399</v>
         </e>
         <e>
             <k>@ruby_retry</k>
-            <v>56</v>
+            <v>59</v>
         </e>
         <e>
             <k>@ruby_return</k>
-            <v>8495</v>
+            <v>8486</v>
         </e>
         <e>
             <k>@ruby_right_assignment_list</k>
-            <v>1288</v>
+            <v>1274</v>
         </e>
         <e>
             <k>@ruby_scope_resolution</k>
-            <v>80009</v>
+            <v>81024</v>
         </e>
         <e>
             <k>@ruby_setter</k>
-            <v>598</v>
+            <v>601</v>
         </e>
         <e>
             <k>@ruby_singleton_class</k>
-            <v>620</v>
+            <v>635</v>
         </e>
         <e>
             <k>@ruby_singleton_method</k>
-            <v>6539</v>
+            <v>6692</v>
         </e>
         <e>
             <k>@ruby_splat_argument</k>
-            <v>3046</v>
+            <v>3093</v>
         </e>
         <e>
             <k>@ruby_splat_parameter</k>
-            <v>2905</v>
+            <v>2978</v>
         </e>
         <e>
             <k>@ruby_string__</k>
-            <v>473533</v>
+            <v>476418</v>
         </e>
         <e>
             <k>@ruby_string_array</k>
-            <v>3840</v>
+            <v>3913</v>
         </e>
         <e>
             <k>@ruby_subshell</k>
-            <v>403</v>
+            <v>393</v>
         </e>
         <e>
             <k>@ruby_superclass</k>
-            <v>13318</v>
+            <v>13378</v>
         </e>
         <e>
             <k>@ruby_symbol_array</k>
-            <v>463</v>
+            <v>460</v>
         </e>
         <e>
             <k>@ruby_then</k>
-            <v>24329</v>
+            <v>24194</v>
         </e>
         <e>
             <k>@ruby_token_character</k>
-            <v>437</v>
+            <v>439</v>
         </e>
         <e>
             <k>@ruby_token_class_variable</k>
-            <v>857</v>
+            <v>858</v>
         </e>
         <e>
             <k>@ruby_token_comment</k>
-            <v>180978</v>
+            <v>182145</v>
         </e>
         <e>
             <k>@ruby_token_constant</k>
-            <v>283898</v>
+            <v>285989</v>
         </e>
         <e>
             <k>@ruby_token_empty_statement</k>
@@ -593,11 +601,11 @@
         </e>
         <e>
             <k>@ruby_token_escape_sequence</k>
-            <v>75715</v>
+            <v>76101</v>
         </e>
         <e>
             <k>@ruby_token_false</k>
-            <v>16909</v>
+            <v>17332</v>
         </e>
         <e>
             <k>@ruby_token_file</k>
@@ -605,23 +613,23 @@
         </e>
         <e>
             <k>@ruby_token_float</k>
-            <v>7830</v>
+            <v>7894</v>
         </e>
         <e>
             <k>@ruby_token_forward_argument</k>
-            <v>72</v>
+            <v>71</v>
         </e>
         <e>
             <k>@ruby_token_forward_parameter</k>
-            <v>94</v>
+            <v>111</v>
         </e>
         <e>
             <k>@ruby_token_global_variable</k>
-            <v>7057</v>
+            <v>7235</v>
         </e>
         <e>
             <k>@ruby_token_hash_key_symbol</k>
-            <v>228509</v>
+            <v>231030</v>
         </e>
         <e>
             <k>@ruby_token_hash_splat_nil</k>
@@ -629,27 +637,27 @@
         </e>
         <e>
             <k>@ruby_token_heredoc_beginning</k>
-            <v>5600</v>
+            <v>5789</v>
         </e>
         <e>
             <k>@ruby_token_heredoc_content</k>
-            <v>12542</v>
+            <v>12722</v>
         </e>
         <e>
             <k>@ruby_token_heredoc_end</k>
-            <v>5575</v>
+            <v>5789</v>
         </e>
         <e>
             <k>@ruby_token_identifier</k>
-            <v>1483080</v>
+            <v>1498233</v>
         </e>
         <e>
             <k>@ruby_token_instance_variable</k>
-            <v>81049</v>
+            <v>84088</v>
         </e>
         <e>
             <k>@ruby_token_integer</k>
-            <v>298658</v>
+            <v>300415</v>
         </e>
         <e>
             <k>@ruby_token_line</k>
@@ -657,31 +665,31 @@
         </e>
         <e>
             <k>@ruby_token_nil</k>
-            <v>17920</v>
+            <v>18114</v>
         </e>
         <e>
             <k>@ruby_token_operator</k>
-            <v>781</v>
+            <v>803</v>
         </e>
         <e>
             <k>@ruby_token_self</k>
-            <v>12958</v>
+            <v>13236</v>
         </e>
         <e>
             <k>@ruby_token_simple_symbol</k>
-            <v>249119</v>
+            <v>252789</v>
         </e>
         <e>
             <k>@ruby_token_string_content</k>
-            <v>488016</v>
+            <v>491238</v>
         </e>
         <e>
             <k>@ruby_token_super</k>
-            <v>5058</v>
+            <v>5049</v>
         </e>
         <e>
             <k>@ruby_token_true</k>
-            <v>23298</v>
+            <v>23791</v>
         </e>
         <e>
             <k>@ruby_token_uninterpreted</k>
@@ -689,35 +697,35 @@
         </e>
         <e>
             <k>@ruby_unary_bang</k>
-            <v>5788</v>
+            <v>5826</v>
         </e>
         <e>
             <k>@ruby_unary_definedquestion</k>
-            <v>1312</v>
+            <v>1320</v>
         </e>
         <e>
             <k>@ruby_unary_minus</k>
-            <v>9122</v>
+            <v>9472</v>
         </e>
         <e>
             <k>@ruby_unary_not</k>
-            <v>236</v>
+            <v>190</v>
         </e>
         <e>
             <k>@ruby_unary_plus</k>
-            <v>1386</v>
+            <v>1416</v>
         </e>
         <e>
             <k>@ruby_unary_tilde</k>
-            <v>88</v>
+            <v>89</v>
         </e>
         <e>
             <k>@ruby_undef</k>
-            <v>180</v>
+            <v>181</v>
         </e>
         <e>
             <k>@ruby_unless</k>
-            <v>2578</v>
+            <v>2594</v>
         </e>
         <e>
             <k>@ruby_unless_guard</k>
@@ -725,15 +733,15 @@
         </e>
         <e>
             <k>@ruby_unless_modifier</k>
-            <v>4207</v>
+            <v>4163</v>
         </e>
         <e>
             <k>@ruby_until</k>
-            <v>113</v>
+            <v>121</v>
         </e>
         <e>
             <k>@ruby_until_modifier</k>
-            <v>206</v>
+            <v>223</v>
         </e>
         <e>
             <k>@ruby_variable_reference_pattern</k>
@@ -741,32 +749,32 @@
         </e>
         <e>
             <k>@ruby_when</k>
-            <v>3239</v>
+            <v>3248</v>
         </e>
         <e>
             <k>@ruby_while</k>
-            <v>1335</v>
+            <v>1349</v>
         </e>
         <e>
             <k>@ruby_while_modifier</k>
-            <v>179</v>
+            <v>190</v>
         </e>
         <e>
             <k>@ruby_yield</k>
-            <v>2385</v>
+            <v>2389</v>
         </e>
         </typesizes>
   <stats><relation>
             <name>containerparent</name>
-            <cardinality>21934</cardinality>
+            <cardinality>21979</cardinality>
             <columnsizes>
                 <e>
                     <k>parent</k>
-                    <v>4792</v>
+                    <v>4799</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>21934</v>
+                    <v>21979</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -780,37 +788,37 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2142</v>
+                                    <v>2145</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>909</v>
+                                    <v>910</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>441</v>
+                                    <v>442</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>298</v>
+                                    <v>299</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>7</b>
-                                    <v>376</v>
+                                    <v>377</v>
                                 </b>
                                 <b>
                                     <a>7</a>
                                     <b>13</b>
-                                    <v>389</v>
+                                    <v>390</v>
                                 </b>
                                 <b>
                                     <a>13</a>
                                     <b>124</b>
-                                    <v>233</v>
+                                    <v>234</v>
                                 </b>
                             </bs>
                         </hist>
@@ -826,7 +834,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>21934</v>
+                                    <v>21979</v>
                                 </b>
                             </bs>
                         </hist>
@@ -836,31 +844,31 @@
         </relation>
         <relation>
             <name>diagnostics</name>
-            <cardinality>155</cardinality>
+            <cardinality>130</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>155</v>
+                    <v>130</v>
                 </e>
                 <e>
                     <k>severity</k>
-                    <v>12</v>
+                    <v>13</v>
                 </e>
                 <e>
                     <k>error_tag</k>
-                    <v>12</v>
+                    <v>13</v>
                 </e>
                 <e>
                     <k>error_message</k>
-                    <v>25</v>
+                    <v>26</v>
                 </e>
                 <e>
                     <k>full_error_message</k>
-                    <v>129</v>
+                    <v>104</v>
                 </e>
                 <e>
                     <k>location</k>
-                    <v>155</v>
+                    <v>130</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -874,7 +882,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>155</v>
+                                    <v>130</v>
                                 </b>
                             </bs>
                         </hist>
@@ -890,7 +898,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>155</v>
+                                    <v>130</v>
                                 </b>
                             </bs>
                         </hist>
@@ -906,7 +914,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>155</v>
+                                    <v>130</v>
                                 </b>
                             </bs>
                         </hist>
@@ -922,7 +930,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>155</v>
+                                    <v>130</v>
                                 </b>
                             </bs>
                         </hist>
@@ -938,7 +946,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>155</v>
+                                    <v>130</v>
                                 </b>
                             </bs>
                         </hist>
@@ -952,9 +960,9 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>12</a>
-                                    <b>13</b>
-                                    <v>12</v>
+                                    <a>10</a>
+                                    <b>11</b>
+                                    <v>13</v>
                                 </b>
                             </bs>
                         </hist>
@@ -970,7 +978,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>12</v>
+                                    <v>13</v>
                                 </b>
                             </bs>
                         </hist>
@@ -986,7 +994,7 @@
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>12</v>
+                                    <v>13</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1000,9 +1008,9 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>10</a>
-                                    <b>11</b>
-                                    <v>12</v>
+                                    <a>8</a>
+                                    <b>9</b>
+                                    <v>13</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1016,9 +1024,9 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>12</a>
-                                    <b>13</b>
-                                    <v>12</v>
+                                    <a>10</a>
+                                    <b>11</b>
+                                    <v>13</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1032,9 +1040,9 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>12</a>
-                                    <b>13</b>
-                                    <v>12</v>
+                                    <a>10</a>
+                                    <b>11</b>
+                                    <v>13</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1050,7 +1058,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>12</v>
+                                    <v>13</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1066,7 +1074,7 @@
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>12</v>
+                                    <v>13</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1080,9 +1088,9 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>10</a>
-                                    <b>11</b>
-                                    <v>12</v>
+                                    <a>8</a>
+                                    <b>9</b>
+                                    <v>13</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1096,9 +1104,9 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>12</a>
-                                    <b>13</b>
-                                    <v>12</v>
+                                    <a>10</a>
+                                    <b>11</b>
+                                    <v>13</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1114,65 +1122,65 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>12</v>
-                                </b>
-                                <b>
-                                    <a>11</a>
-                                    <b>12</b>
-                                    <v>12</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>error_message</src>
-                    <trg>severity</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>25</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>error_message</src>
-                    <trg>error_tag</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>25</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>error_message</src>
-                    <trg>full_error_message</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>12</v>
+                                    <v>13</v>
                                 </b>
                                 <b>
                                     <a>9</a>
                                     <b>10</b>
-                                    <v>12</v>
+                                    <v>13</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>error_message</src>
+                    <trg>severity</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>26</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>error_message</src>
+                    <trg>error_tag</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>26</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>error_message</src>
+                    <trg>full_error_message</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>13</v>
+                                </b>
+                                <b>
+                                    <a>7</a>
+                                    <b>8</b>
+                                    <v>13</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1188,12 +1196,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>12</v>
+                                    <v>13</v>
                                 </b>
                                 <b>
-                                    <a>11</a>
-                                    <b>12</b>
-                                    <v>12</v>
+                                    <a>9</a>
+                                    <b>10</b>
+                                    <v>13</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1209,12 +1217,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>103</v>
+                                    <v>78</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>25</v>
+                                    <v>26</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1230,7 +1238,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>129</v>
+                                    <v>104</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1246,7 +1254,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>129</v>
+                                    <v>104</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1262,7 +1270,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>129</v>
+                                    <v>104</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1278,12 +1286,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>103</v>
+                                    <v>78</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>25</v>
+                                    <v>26</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1299,7 +1307,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>155</v>
+                                    <v>130</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1315,7 +1323,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>155</v>
+                                    <v>130</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1331,7 +1339,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>155</v>
+                                    <v>130</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1347,7 +1355,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>155</v>
+                                    <v>130</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1363,7 +1371,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>155</v>
+                                    <v>130</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1373,23 +1381,23 @@
         </relation>
         <relation>
             <name>erb_ast_node_info</name>
-            <cardinality>25078</cardinality>
+            <cardinality>26945</cardinality>
             <columnsizes>
                 <e>
                     <k>node</k>
-                    <v>25078</v>
+                    <v>26945</v>
                 </e>
                 <e>
                     <k>parent</k>
-                    <v>6088</v>
+                    <v>6111</v>
                 </e>
                 <e>
                     <k>parent_index</k>
-                    <v>668</v>
+                    <v>688</v>
                 </e>
                 <e>
                     <k>loc</k>
-                    <v>25075</v>
+                    <v>26942</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -1403,7 +1411,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>25078</v>
+                                    <v>26945</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1419,7 +1427,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>25078</v>
+                                    <v>26945</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1435,7 +1443,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>25078</v>
+                                    <v>26945</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1451,17 +1459,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>3</b>
-                                    <v>460</v>
+                                    <v>446</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>5360</v>
+                                    <v>5403</v>
                                 </b>
                                 <b>
                                     <a>4</a>
-                                    <b>226</b>
-                                    <v>267</v>
+                                    <b>237</b>
+                                    <v>262</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1477,17 +1485,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>3</b>
-                                    <v>460</v>
+                                    <v>446</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>5360</v>
+                                    <v>5403</v>
                                 </b>
                                 <b>
                                     <a>4</a>
-                                    <b>226</b>
-                                    <v>267</v>
+                                    <b>237</b>
+                                    <v>262</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1503,17 +1511,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>3</b>
-                                    <v>460</v>
+                                    <v>446</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>5360</v>
+                                    <v>5403</v>
                                 </b>
                                 <b>
                                     <a>4</a>
-                                    <b>226</b>
-                                    <v>267</v>
+                                    <b>237</b>
+                                    <v>262</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1529,57 +1537,62 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>86</v>
+                                    <v>2</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>106</v>
+                                    <v>134</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>121</v>
+                                    <v>43</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>5</v>
+                                    <v>75</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>6</b>
-                                    <v>65</v>
+                                    <v>61</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>7</b>
-                                    <v>50</v>
+                                    <v>70</v>
                                 </b>
                                 <b>
                                     <a>7</a>
-                                    <b>11</b>
-                                    <v>50</v>
+                                    <b>9</b>
+                                    <v>61</v>
                                 </b>
                                 <b>
-                                    <a>11</a>
-                                    <b>19</b>
-                                    <v>53</v>
+                                    <a>10</a>
+                                    <b>16</b>
+                                    <v>55</v>
                                 </b>
                                 <b>
-                                    <a>19</a>
-                                    <b>38</b>
-                                    <v>53</v>
+                                    <a>16</a>
+                                    <b>23</b>
+                                    <v>52</v>
                                 </b>
                                 <b>
-                                    <a>39</a>
-                                    <b>72</b>
-                                    <v>50</v>
+                                    <a>23</a>
+                                    <b>43</b>
+                                    <v>52</v>
                                 </b>
                                 <b>
-                                    <a>74</a>
-                                    <b>2050</b>
-                                    <v>23</v>
+                                    <a>45</a>
+                                    <b>71</b>
+                                    <v>52</v>
+                                </b>
+                                <b>
+                                    <a>73</a>
+                                    <b>2096</b>
+                                    <v>26</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1595,57 +1608,62 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>86</v>
+                                    <v>2</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>106</v>
+                                    <v>134</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>121</v>
+                                    <v>43</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>5</v>
+                                    <v>75</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>6</b>
-                                    <v>65</v>
+                                    <v>61</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>7</b>
-                                    <v>50</v>
+                                    <v>70</v>
                                 </b>
                                 <b>
                                     <a>7</a>
-                                    <b>11</b>
-                                    <v>50</v>
+                                    <b>9</b>
+                                    <v>61</v>
                                 </b>
                                 <b>
-                                    <a>11</a>
-                                    <b>19</b>
-                                    <v>53</v>
+                                    <a>10</a>
+                                    <b>16</b>
+                                    <v>55</v>
                                 </b>
                                 <b>
-                                    <a>19</a>
-                                    <b>38</b>
-                                    <v>53</v>
+                                    <a>16</a>
+                                    <b>23</b>
+                                    <v>52</v>
                                 </b>
                                 <b>
-                                    <a>39</a>
-                                    <b>72</b>
-                                    <v>50</v>
+                                    <a>23</a>
+                                    <b>43</b>
+                                    <v>52</v>
                                 </b>
                                 <b>
-                                    <a>74</a>
-                                    <b>2050</b>
-                                    <v>23</v>
+                                    <a>45</a>
+                                    <b>71</b>
+                                    <v>52</v>
+                                </b>
+                                <b>
+                                    <a>73</a>
+                                    <b>2096</b>
+                                    <v>26</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1661,57 +1679,62 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>86</v>
+                                    <v>2</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>106</v>
+                                    <v>134</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>121</v>
+                                    <v>43</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>5</v>
+                                    <v>75</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>6</b>
-                                    <v>65</v>
+                                    <v>61</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>7</b>
-                                    <v>50</v>
+                                    <v>70</v>
                                 </b>
                                 <b>
                                     <a>7</a>
-                                    <b>11</b>
-                                    <v>50</v>
+                                    <b>9</b>
+                                    <v>61</v>
                                 </b>
                                 <b>
-                                    <a>11</a>
-                                    <b>19</b>
-                                    <v>53</v>
+                                    <a>10</a>
+                                    <b>16</b>
+                                    <v>55</v>
                                 </b>
                                 <b>
-                                    <a>19</a>
-                                    <b>38</b>
-                                    <v>53</v>
+                                    <a>16</a>
+                                    <b>23</b>
+                                    <v>52</v>
                                 </b>
                                 <b>
-                                    <a>39</a>
-                                    <b>72</b>
-                                    <v>50</v>
+                                    <a>23</a>
+                                    <b>43</b>
+                                    <v>52</v>
                                 </b>
                                 <b>
-                                    <a>74</a>
-                                    <b>2049</b>
-                                    <v>23</v>
+                                    <a>45</a>
+                                    <b>71</b>
+                                    <v>52</v>
+                                </b>
+                                <b>
+                                    <a>73</a>
+                                    <b>2095</b>
+                                    <v>26</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1727,7 +1750,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>25072</v>
+                                    <v>26939</v>
                                 </b>
                                 <b>
                                     <a>2</a>
@@ -1748,7 +1771,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>25072</v>
+                                    <v>26939</v>
                                 </b>
                                 <b>
                                     <a>2</a>
@@ -1769,7 +1792,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>25075</v>
+                                    <v>26942</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1778,11 +1801,11 @@
             </dependencies>
         </relation>
     <relation>
-            <name>erb_comment_directive_def</name>
+            <name>erb_comment_directive_child</name>
             <cardinality>40</cardinality>
             <columnsizes>
                 <e>
-                    <k>id</k>
+                    <k>erb_comment_directive</k>
                     <v>40</v>
                 </e>
                 <e>
@@ -1792,7 +1815,7 @@
             </columnsizes>
             <dependencies>
                 <dep>
-                    <src>id</src>
+                    <src>erb_comment_directive</src>
                     <trg>child</trg>
                     <val>
                         <hist>
@@ -1809,7 +1832,7 @@
                 </dep>
                 <dep>
                     <src>child</src>
-                    <trg>id</trg>
+                    <trg>erb_comment_directive</trg>
                     <val>
                         <hist>
                             <budget>12</budget>
@@ -1826,21 +1849,32 @@
             </dependencies>
         </relation>
         <relation>
-            <name>erb_directive_def</name>
-            <cardinality>1414</cardinality>
+            <name>erb_comment_directive_def</name>
+            <cardinality>40</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>1414</v>
+                    <v>40</v>
+                </e>
+            </columnsizes>
+            <dependencies/>
+        </relation>
+        <relation>
+            <name>erb_directive_child</name>
+            <cardinality>1400</cardinality>
+            <columnsizes>
+                <e>
+                    <k>erb_directive</k>
+                    <v>1400</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>1414</v>
+                    <v>1400</v>
                 </e>
             </columnsizes>
             <dependencies>
                 <dep>
-                    <src>id</src>
+                    <src>erb_directive</src>
                     <trg>child</trg>
                     <val>
                         <hist>
@@ -1849,7 +1883,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1414</v>
+                                    <v>1400</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1857,7 +1891,7 @@
                 </dep>
                 <dep>
                     <src>child</src>
-                    <trg>id</trg>
+                    <trg>erb_directive</trg>
                     <val>
                         <hist>
                             <budget>12</budget>
@@ -1865,7 +1899,66 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1414</v>
+                                    <v>1400</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+            </dependencies>
+        </relation>
+        <relation>
+            <name>erb_directive_def</name>
+            <cardinality>1400</cardinality>
+            <columnsizes>
+                <e>
+                    <k>id</k>
+                    <v>1400</v>
+                </e>
+            </columnsizes>
+            <dependencies/>
+        </relation>
+        <relation>
+            <name>erb_graphql_directive_child</name>
+            <cardinality>0</cardinality>
+            <columnsizes>
+                <e>
+                    <k>erb_graphql_directive</k>
+                    <v>0</v>
+                </e>
+                <e>
+                    <k>child</k>
+                    <v>0</v>
+                </e>
+            </columnsizes>
+            <dependencies>
+                <dep>
+                    <src>erb_graphql_directive</src>
+                    <trg>child</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>2</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>child</src>
+                    <trg>erb_graphql_directive</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>2</v>
                                 </b>
                             </bs>
                         </hist>
@@ -1881,14 +1974,291 @@
                     <k>id</k>
                     <v>0</v>
                 </e>
+            </columnsizes>
+            <dependencies/>
+        </relation>
+        <relation>
+            <name>erb_output_directive_child</name>
+            <cardinality>3859</cardinality>
+            <columnsizes>
+                <e>
+                    <k>erb_output_directive</k>
+                    <v>3859</v>
+                </e>
                 <e>
                     <k>child</k>
-                    <v>0</v>
+                    <v>3859</v>
                 </e>
             </columnsizes>
             <dependencies>
                 <dep>
-                    <src>id</src>
+                    <src>erb_output_directive</src>
+                    <trg>child</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>3859</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>child</src>
+                    <trg>erb_output_directive</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>3859</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+            </dependencies>
+        </relation>
+        <relation>
+            <name>erb_output_directive_def</name>
+            <cardinality>3859</cardinality>
+            <columnsizes>
+                <e>
+                    <k>id</k>
+                    <v>3859</v>
+                </e>
+            </columnsizes>
+            <dependencies/>
+        </relation>
+        <relation>
+            <name>erb_template_child</name>
+            <cardinality>10739</cardinality>
+            <columnsizes>
+                <e>
+                    <k>erb_template</k>
+                    <v>425</v>
+                </e>
+                <e>
+                    <k>index</k>
+                    <v>688</v>
+                </e>
+                <e>
+                    <k>child</k>
+                    <v>10739</v>
+                </e>
+            </columnsizes>
+            <dependencies>
+                <dep>
+                    <src>erb_template</src>
+                    <trg>index</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>3</b>
+                                    <v>20</v>
+                                </b>
+                                <b>
+                                    <a>3</a>
+                                    <b>4</b>
+                                    <v>142</v>
+                                </b>
+                                <b>
+                                    <a>4</a>
+                                    <b>7</b>
+                                    <v>26</v>
+                                </b>
+                                <b>
+                                    <a>7</a>
+                                    <b>10</b>
+                                    <v>32</v>
+                                </b>
+                                <b>
+                                    <a>10</a>
+                                    <b>14</b>
+                                    <v>32</v>
+                                </b>
+                                <b>
+                                    <a>14</a>
+                                    <b>24</b>
+                                    <v>32</v>
+                                </b>
+                                <b>
+                                    <a>24</a>
+                                    <b>32</b>
+                                    <v>35</v>
+                                </b>
+                                <b>
+                                    <a>33</a>
+                                    <b>42</b>
+                                    <v>35</v>
+                                </b>
+                                <b>
+                                    <a>43</a>
+                                    <b>68</b>
+                                    <v>32</v>
+                                </b>
+                                <b>
+                                    <a>70</a>
+                                    <b>190</b>
+                                    <v>32</v>
+                                </b>
+                                <b>
+                                    <a>235</a>
+                                    <b>237</b>
+                                    <v>5</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>erb_template</src>
+                    <trg>child</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>3</b>
+                                    <v>20</v>
+                                </b>
+                                <b>
+                                    <a>3</a>
+                                    <b>4</b>
+                                    <v>142</v>
+                                </b>
+                                <b>
+                                    <a>4</a>
+                                    <b>7</b>
+                                    <v>26</v>
+                                </b>
+                                <b>
+                                    <a>7</a>
+                                    <b>10</b>
+                                    <v>32</v>
+                                </b>
+                                <b>
+                                    <a>10</a>
+                                    <b>14</b>
+                                    <v>32</v>
+                                </b>
+                                <b>
+                                    <a>14</a>
+                                    <b>24</b>
+                                    <v>32</v>
+                                </b>
+                                <b>
+                                    <a>24</a>
+                                    <b>32</b>
+                                    <v>35</v>
+                                </b>
+                                <b>
+                                    <a>33</a>
+                                    <b>42</b>
+                                    <v>35</v>
+                                </b>
+                                <b>
+                                    <a>43</a>
+                                    <b>68</b>
+                                    <v>32</v>
+                                </b>
+                                <b>
+                                    <a>70</a>
+                                    <b>190</b>
+                                    <v>32</v>
+                                </b>
+                                <b>
+                                    <a>235</a>
+                                    <b>237</b>
+                                    <v>5</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>index</src>
+                    <trg>erb_template</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>2</v>
+                                </b>
+                                <b>
+                                    <a>2</a>
+                                    <b>3</b>
+                                    <v>134</v>
+                                </b>
+                                <b>
+                                    <a>3</a>
+                                    <b>4</b>
+                                    <v>43</v>
+                                </b>
+                                <b>
+                                    <a>4</a>
+                                    <b>5</b>
+                                    <v>75</v>
+                                </b>
+                                <b>
+                                    <a>5</a>
+                                    <b>6</b>
+                                    <v>61</v>
+                                </b>
+                                <b>
+                                    <a>6</a>
+                                    <b>7</b>
+                                    <v>70</v>
+                                </b>
+                                <b>
+                                    <a>7</a>
+                                    <b>9</b>
+                                    <v>61</v>
+                                </b>
+                                <b>
+                                    <a>10</a>
+                                    <b>16</b>
+                                    <v>55</v>
+                                </b>
+                                <b>
+                                    <a>16</a>
+                                    <b>23</b>
+                                    <v>52</v>
+                                </b>
+                                <b>
+                                    <a>23</a>
+                                    <b>43</b>
+                                    <v>52</v>
+                                </b>
+                                <b>
+                                    <a>45</a>
+                                    <b>71</b>
+                                    <v>52</v>
+                                </b>
+                                <b>
+                                    <a>73</a>
+                                    <b>147</b>
+                                    <v>26</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>index</src>
                     <trg>child</trg>
                     <val>
                         <hist>
@@ -1899,337 +2269,60 @@
                                     <b>2</b>
                                     <v>2</v>
                                 </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>child</src>
-                    <trg>id</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs/>
-                        </hist>
-                    </val>
-                </dep>
-            </dependencies>
-        </relation>
-        <relation>
-            <name>erb_output_directive_def</name>
-            <cardinality>3806</cardinality>
-            <columnsizes>
-                <e>
-                    <k>id</k>
-                    <v>3806</v>
-                </e>
-                <e>
-                    <k>child</k>
-                    <v>3806</v>
-                </e>
-            </columnsizes>
-            <dependencies>
-                <dep>
-                    <src>id</src>
-                    <trg>child</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>3806</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>child</src>
-                    <trg>id</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>3806</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-            </dependencies>
-        </relation>
-        <relation>
-            <name>erb_template_child</name>
-            <cardinality>8982</cardinality>
-            <columnsizes>
-                <e>
-                    <k>erb_template</k>
-                    <v>433</v>
-                </e>
-                <e>
-                    <k>index</k>
-                    <v>668</v>
-                </e>
-                <e>
-                    <k>child</k>
-                    <v>8982</v>
-                </e>
-            </columnsizes>
-            <dependencies>
-                <dep>
-                    <src>erb_template</src>
-                    <trg>index</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>3</b>
-                                    <v>26</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>139</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>7</b>
-                                    <v>26</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>9</b>
-                                    <v>29</v>
-                                </b>
-                                <b>
-                                    <a>9</a>
-                                    <b>12</b>
-                                    <v>35</v>
-                                </b>
-                                <b>
-                                    <a>12</a>
-                                    <b>17</b>
-                                    <v>38</v>
-                                </b>
-                                <b>
-                                    <a>17</a>
-                                    <b>29</b>
-                                    <v>32</v>
-                                </b>
-                                <b>
-                                    <a>29</a>
-                                    <b>35</b>
-                                    <v>35</v>
-                                </b>
-                                <b>
-                                    <a>35</a>
-                                    <b>56</b>
-                                    <v>35</v>
-                                </b>
-                                <b>
-                                    <a>61</a>
-                                    <b>226</b>
-                                    <v>32</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>erb_template</src>
-                    <trg>child</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>3</b>
-                                    <v>26</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>139</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>7</b>
-                                    <v>26</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>9</b>
-                                    <v>29</v>
-                                </b>
-                                <b>
-                                    <a>9</a>
-                                    <b>12</b>
-                                    <v>35</v>
-                                </b>
-                                <b>
-                                    <a>12</a>
-                                    <b>17</b>
-                                    <v>38</v>
-                                </b>
-                                <b>
-                                    <a>17</a>
-                                    <b>29</b>
-                                    <v>32</v>
-                                </b>
-                                <b>
-                                    <a>29</a>
-                                    <b>35</b>
-                                    <v>35</v>
-                                </b>
-                                <b>
-                                    <a>35</a>
-                                    <b>56</b>
-                                    <v>35</v>
-                                </b>
-                                <b>
-                                    <a>61</a>
-                                    <b>226</b>
-                                    <v>32</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>index</src>
-                    <trg>erb_template</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>86</v>
-                                </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>106</v>
+                                    <v>134</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>121</v>
+                                    <v>43</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>5</v>
+                                    <v>75</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>6</b>
-                                    <v>65</v>
+                                    <v>61</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>7</b>
-                                    <v>50</v>
+                                    <v>70</v>
                                 </b>
                                 <b>
                                     <a>7</a>
-                                    <b>11</b>
-                                    <v>50</v>
+                                    <b>9</b>
+                                    <v>61</v>
                                 </b>
                                 <b>
-                                    <a>11</a>
-                                    <b>19</b>
-                                    <v>53</v>
+                                    <a>10</a>
+                                    <b>16</b>
+                                    <v>55</v>
                                 </b>
                                 <b>
-                                    <a>19</a>
-                                    <b>38</b>
-                                    <v>53</v>
+                                    <a>16</a>
+                                    <b>23</b>
+                                    <v>52</v>
                                 </b>
                                 <b>
-                                    <a>39</a>
-                                    <b>72</b>
-                                    <v>50</v>
+                                    <a>23</a>
+                                    <b>43</b>
+                                    <v>52</v>
                                 </b>
                                 <b>
-                                    <a>74</a>
+                                    <a>45</a>
+                                    <b>71</b>
+                                    <v>52</v>
+                                </b>
+                                <b>
+                                    <a>73</a>
                                     <b>147</b>
-                                    <v>23</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>index</src>
-                    <trg>child</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>86</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>106</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>121</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>6</b>
-                                    <v>65</v>
-                                </b>
-                                <b>
-                                    <a>6</a>
-                                    <b>7</b>
-                                    <v>50</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>11</b>
-                                    <v>50</v>
-                                </b>
-                                <b>
-                                    <a>11</a>
-                                    <b>19</b>
-                                    <v>53</v>
-                                </b>
-                                <b>
-                                    <a>19</a>
-                                    <b>38</b>
-                                    <v>53</v>
-                                </b>
-                                <b>
-                                    <a>39</a>
-                                    <b>72</b>
-                                    <v>50</v>
-                                </b>
-                                <b>
-                                    <a>74</a>
-                                    <b>147</b>
-                                    <v>23</v>
+                                    <v>26</v>
                                 </b>
                             </bs>
                         </hist>
@@ -2245,7 +2338,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>8982</v>
+                                    <v>10739</v>
                                 </b>
                             </bs>
                         </hist>
@@ -2261,7 +2354,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>8982</v>
+                                    <v>10739</v>
                                 </b>
                             </bs>
                         </hist>
@@ -2271,22 +2364,22 @@
         </relation>
         <relation>
             <name>erb_template_def</name>
-            <cardinality>1563</cardinality>
+            <cardinality>1540</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>1563</v>
+                    <v>1540</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>erb_tokeninfo</name>
-            <cardinality>19423</cardinality>
+            <cardinality>21259</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>19423</v>
+                    <v>21259</v>
                 </e>
                 <e>
                     <k>kind</k>
@@ -2294,7 +2387,7 @@
                 </e>
                 <e>
                     <k>value</k>
-                    <v>5800</v>
+                    <v>5773</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -2308,7 +2401,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>19423</v>
+                                    <v>21259</v>
                                 </b>
                             </bs>
                         </hist>
@@ -2324,7 +2417,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>19423</v>
+                                    <v>21259</v>
                                 </b>
                             </bs>
                         </hist>
@@ -2338,18 +2431,18 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>1266</a>
-                                    <b>1267</b>
+                                    <a>1803</a>
+                                    <b>1804</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>1757</a>
-                                    <b>1758</b>
+                                    <a>1878</a>
+                                    <b>1879</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>3514</a>
-                                    <b>3515</b>
+                                    <a>3606</a>
+                                    <b>3607</b>
                                     <v>2</v>
                                 </b>
                             </bs>
@@ -2364,18 +2457,18 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>52</a>
-                                    <b>53</b>
+                                    <a>5</a>
+                                    <b>6</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>884</a>
-                                    <b>885</b>
+                                    <a>932</a>
+                                    <b>933</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>1016</a>
-                                    <b>1017</b>
+                                    <a>1042</a>
+                                    <b>1043</b>
                                     <v>2</v>
                                 </b>
                             </bs>
@@ -2392,22 +2485,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>4662</v>
+                                    <v>4667</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>659</v>
+                                    <v>679</v>
                                 </b>
                                 <b>
                                     <a>3</a>
-                                    <b>23</b>
-                                    <v>436</v>
-                                </b>
-                                <b>
-                                    <a>32</a>
-                                    <b>1696</b>
-                                    <v>41</v>
+                                    <b>1742</b>
+                                    <v>425</v>
                                 </b>
                             </bs>
                         </hist>
@@ -2423,7 +2511,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>5800</v>
+                                    <v>5773</v>
                                 </b>
                             </bs>
                         </hist>
@@ -2433,15 +2521,15 @@
         </relation>
         <relation>
             <name>files</name>
-            <cardinality>17168</cardinality>
+            <cardinality>17206</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>17168</v>
+                    <v>17206</v>
                 </e>
                 <e>
                     <k>name</k>
-                    <v>17168</v>
+                    <v>17206</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -2455,7 +2543,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>17168</v>
+                                    <v>17206</v>
                                 </b>
                             </bs>
                         </hist>
@@ -2471,7 +2559,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>17168</v>
+                                    <v>17206</v>
                                 </b>
                             </bs>
                         </hist>
@@ -2481,15 +2569,15 @@
         </relation>
         <relation>
             <name>folders</name>
-            <cardinality>4792</cardinality>
+            <cardinality>4799</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>4792</v>
+                    <v>4799</v>
                 </e>
                 <e>
                     <k>name</k>
-                    <v>4792</v>
+                    <v>4799</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -2503,7 +2591,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>4792</v>
+                                    <v>4799</v>
                                 </b>
                             </bs>
                         </hist>
@@ -2519,7 +2607,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>4792</v>
+                                    <v>4799</v>
                                 </b>
                             </bs>
                         </hist>
@@ -2529,31 +2617,31 @@
         </relation>
         <relation>
             <name>locations_default</name>
-            <cardinality>8508604</cardinality>
+            <cardinality>8706731</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>8508604</v>
+                    <v>8706731</v>
                 </e>
                 <e>
                     <k>file</k>
-                    <v>17168</v>
+                    <v>17206</v>
                 </e>
                 <e>
                     <k>start_line</k>
-                    <v>30674</v>
+                    <v>30719</v>
                 </e>
                 <e>
                     <k>start_column</k>
-                    <v>5064</v>
+                    <v>5072</v>
                 </e>
                 <e>
                     <k>end_line</k>
-                    <v>30674</v>
+                    <v>30719</v>
                 </e>
                 <e>
                     <k>end_column</k>
-                    <v>5129</v>
+                    <v>5163</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -2567,7 +2655,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>8508604</v>
+                                    <v>8706731</v>
                                 </b>
                             </bs>
                         </hist>
@@ -2583,7 +2671,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>8508604</v>
+                                    <v>8706731</v>
                                 </b>
                             </bs>
                         </hist>
@@ -2599,7 +2687,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>8508604</v>
+                                    <v>8706731</v>
                                 </b>
                             </bs>
                         </hist>
@@ -2615,7 +2703,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>8508604</v>
+                                    <v>8706731</v>
                                 </b>
                             </bs>
                         </hist>
@@ -2631,7 +2719,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>8508604</v>
+                                    <v>8706731</v>
                                 </b>
                             </bs>
                         </hist>
@@ -2647,67 +2735,67 @@
                                 <b>
                                     <a>1</a>
                                     <b>32</b>
-                                    <v>1337</v>
+                                    <v>1300</v>
                                 </b>
                                 <b>
                                     <a>32</a>
-                                    <b>48</b>
-                                    <v>1311</v>
+                                    <b>49</b>
+                                    <v>1339</v>
                                 </b>
                                 <b>
-                                    <a>48</a>
-                                    <b>72</b>
-                                    <v>1376</v>
+                                    <a>49</a>
+                                    <b>73</b>
+                                    <v>1482</v>
                                 </b>
                                 <b>
-                                    <a>72</a>
-                                    <b>94</b>
-                                    <v>1493</v>
+                                    <a>73</a>
+                                    <b>95</b>
+                                    <v>1352</v>
                                 </b>
                                 <b>
-                                    <a>94</a>
-                                    <b>127</b>
-                                    <v>1298</v>
+                                    <a>95</a>
+                                    <b>126</b>
+                                    <v>1313</v>
                                 </b>
                                 <b>
                                     <a>127</a>
-                                    <b>169</b>
-                                    <v>1311</v>
+                                    <b>170</b>
+                                    <v>1313</v>
                                 </b>
                                 <b>
-                                    <a>169</a>
-                                    <b>216</b>
-                                    <v>1298</v>
+                                    <a>170</a>
+                                    <b>218</b>
+                                    <v>1339</v>
                                 </b>
                                 <b>
-                                    <a>216</a>
-                                    <b>271</b>
-                                    <v>1298</v>
+                                    <a>218</a>
+                                    <b>277</b>
+                                    <v>1326</v>
                                 </b>
                                 <b>
-                                    <a>271</a>
-                                    <b>353</b>
-                                    <v>1311</v>
+                                    <a>277</a>
+                                    <b>359</b>
+                                    <v>1300</v>
                                 </b>
                                 <b>
-                                    <a>353</a>
-                                    <b>475</b>
-                                    <v>1298</v>
+                                    <a>361</a>
+                                    <b>489</b>
+                                    <v>1300</v>
                                 </b>
                                 <b>
-                                    <a>476</a>
-                                    <b>721</b>
-                                    <v>1298</v>
+                                    <a>492</a>
+                                    <b>736</b>
+                                    <v>1313</v>
                                 </b>
                                 <b>
-                                    <a>724</a>
-                                    <b>1480</b>
-                                    <v>1298</v>
+                                    <a>741</a>
+                                    <b>1508</b>
+                                    <v>1300</v>
                                 </b>
                                 <b>
-                                    <a>1481</a>
-                                    <b>22817</b>
-                                    <v>1233</v>
+                                    <a>1509</a>
+                                    <b>22819</b>
+                                    <v>1222</v>
                                 </b>
                             </bs>
                         </hist>
@@ -2716,158 +2804,6 @@
                 <dep>
                     <src>file</src>
                     <trg>start_line</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>7</b>
-                                    <v>1116</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>10</b>
-                                    <v>1545</v>
-                                </b>
-                                <b>
-                                    <a>10</a>
-                                    <b>13</b>
-                                    <v>1389</v>
-                                </b>
-                                <b>
-                                    <a>13</a>
-                                    <b>16</b>
-                                    <v>1493</v>
-                                </b>
-                                <b>
-                                    <a>16</a>
-                                    <b>20</b>
-                                    <v>1571</v>
-                                </b>
-                                <b>
-                                    <a>20</a>
-                                    <b>25</b>
-                                    <v>1363</v>
-                                </b>
-                                <b>
-                                    <a>25</a>
-                                    <b>31</b>
-                                    <v>1441</v>
-                                </b>
-                                <b>
-                                    <a>31</a>
-                                    <b>38</b>
-                                    <v>1350</v>
-                                </b>
-                                <b>
-                                    <a>38</a>
-                                    <b>49</b>
-                                    <v>1441</v>
-                                </b>
-                                <b>
-                                    <a>49</a>
-                                    <b>69</b>
-                                    <v>1324</v>
-                                </b>
-                                <b>
-                                    <a>69</a>
-                                    <b>117</b>
-                                    <v>1298</v>
-                                </b>
-                                <b>
-                                    <a>119</a>
-                                    <b>257</b>
-                                    <v>1298</v>
-                                </b>
-                                <b>
-                                    <a>260</a>
-                                    <b>2337</b>
-                                    <v>532</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>file</src>
-                    <trg>start_column</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>16</b>
-                                    <v>1415</v>
-                                </b>
-                                <b>
-                                    <a>16</a>
-                                    <b>25</b>
-                                    <v>1428</v>
-                                </b>
-                                <b>
-                                    <a>25</a>
-                                    <b>32</b>
-                                    <v>1363</v>
-                                </b>
-                                <b>
-                                    <a>32</a>
-                                    <b>41</b>
-                                    <v>1376</v>
-                                </b>
-                                <b>
-                                    <a>41</a>
-                                    <b>47</b>
-                                    <v>1506</v>
-                                </b>
-                                <b>
-                                    <a>47</a>
-                                    <b>54</b>
-                                    <v>1532</v>
-                                </b>
-                                <b>
-                                    <a>54</a>
-                                    <b>62</b>
-                                    <v>1363</v>
-                                </b>
-                                <b>
-                                    <a>62</a>
-                                    <b>69</b>
-                                    <v>1402</v>
-                                </b>
-                                <b>
-                                    <a>69</a>
-                                    <b>77</b>
-                                    <v>1428</v>
-                                </b>
-                                <b>
-                                    <a>77</a>
-                                    <b>87</b>
-                                    <v>1350</v>
-                                </b>
-                                <b>
-                                    <a>87</a>
-                                    <b>101</b>
-                                    <v>1324</v>
-                                </b>
-                                <b>
-                                    <a>101</a>
-                                    <b>130</b>
-                                    <v>1298</v>
-                                </b>
-                                <b>
-                                    <a>130</a>
-                                    <b>357</b>
-                                    <v>376</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>file</src>
-                    <trg>end_line</trg>
                     <val>
                         <hist>
                             <budget>12</budget>
@@ -2875,67 +2811,219 @@
                                 <b>
                                     <a>1</a>
                                     <b>8</b>
-                                    <v>1558</v>
+                                    <v>1586</v>
                                 </b>
                                 <b>
                                     <a>8</a>
                                     <b>11</b>
-                                    <v>1467</v>
+                                    <v>1443</v>
                                 </b>
                                 <b>
                                     <a>11</a>
                                     <b>14</b>
-                                    <v>1506</v>
+                                    <v>1521</v>
                                 </b>
                                 <b>
                                     <a>14</a>
                                     <b>17</b>
-                                    <v>1415</v>
+                                    <v>1430</v>
                                 </b>
                                 <b>
                                     <a>17</a>
                                     <b>21</b>
-                                    <v>1467</v>
+                                    <v>1417</v>
                                 </b>
                                 <b>
                                     <a>21</a>
                                     <b>26</b>
-                                    <v>1337</v>
+                                    <v>1352</v>
                                 </b>
                                 <b>
                                     <a>26</a>
                                     <b>32</b>
-                                    <v>1363</v>
+                                    <v>1378</v>
                                 </b>
                                 <b>
                                     <a>32</a>
                                     <b>39</b>
-                                    <v>1415</v>
+                                    <v>1378</v>
                                 </b>
                                 <b>
                                     <a>39</a>
                                     <b>51</b>
-                                    <v>1402</v>
+                                    <v>1417</v>
                                 </b>
                                 <b>
                                     <a>51</a>
                                     <b>75</b>
-                                    <v>1298</v>
+                                    <v>1326</v>
                                 </b>
                                 <b>
                                     <a>75</a>
                                     <b>126</b>
-                                    <v>1311</v>
+                                    <v>1313</v>
                                 </b>
                                 <b>
                                     <a>126</a>
                                     <b>343</b>
-                                    <v>1298</v>
+                                    <v>1300</v>
                                 </b>
                                 <b>
                                     <a>354</a>
                                     <b>2337</b>
-                                    <v>324</v>
+                                    <v>338</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>file</src>
+                    <trg>start_column</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>16</b>
+                                    <v>1404</v>
+                                </b>
+                                <b>
+                                    <a>16</a>
+                                    <b>25</b>
+                                    <v>1417</v>
+                                </b>
+                                <b>
+                                    <a>25</a>
+                                    <b>32</b>
+                                    <v>1378</v>
+                                </b>
+                                <b>
+                                    <a>32</a>
+                                    <b>41</b>
+                                    <v>1391</v>
+                                </b>
+                                <b>
+                                    <a>41</a>
+                                    <b>47</b>
+                                    <v>1495</v>
+                                </b>
+                                <b>
+                                    <a>47</a>
+                                    <b>54</b>
+                                    <v>1547</v>
+                                </b>
+                                <b>
+                                    <a>54</a>
+                                    <b>62</b>
+                                    <v>1339</v>
+                                </b>
+                                <b>
+                                    <a>62</a>
+                                    <b>69</b>
+                                    <v>1391</v>
+                                </b>
+                                <b>
+                                    <a>69</a>
+                                    <b>77</b>
+                                    <v>1443</v>
+                                </b>
+                                <b>
+                                    <a>77</a>
+                                    <b>87</b>
+                                    <v>1365</v>
+                                </b>
+                                <b>
+                                    <a>87</a>
+                                    <b>101</b>
+                                    <v>1326</v>
+                                </b>
+                                <b>
+                                    <a>101</a>
+                                    <b>129</b>
+                                    <v>1313</v>
+                                </b>
+                                <b>
+                                    <a>129</a>
+                                    <b>357</b>
+                                    <v>390</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>file</src>
+                    <trg>end_line</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>8</b>
+                                    <v>1547</v>
+                                </b>
+                                <b>
+                                    <a>8</a>
+                                    <b>11</b>
+                                    <v>1430</v>
+                                </b>
+                                <b>
+                                    <a>11</a>
+                                    <b>14</b>
+                                    <v>1547</v>
+                                </b>
+                                <b>
+                                    <a>14</a>
+                                    <b>17</b>
+                                    <v>1430</v>
+                                </b>
+                                <b>
+                                    <a>17</a>
+                                    <b>21</b>
+                                    <v>1430</v>
+                                </b>
+                                <b>
+                                    <a>21</a>
+                                    <b>26</b>
+                                    <v>1365</v>
+                                </b>
+                                <b>
+                                    <a>26</a>
+                                    <b>32</b>
+                                    <v>1378</v>
+                                </b>
+                                <b>
+                                    <a>32</a>
+                                    <b>39</b>
+                                    <v>1378</v>
+                                </b>
+                                <b>
+                                    <a>39</a>
+                                    <b>51</b>
+                                    <v>1417</v>
+                                </b>
+                                <b>
+                                    <a>51</a>
+                                    <b>75</b>
+                                    <v>1326</v>
+                                </b>
+                                <b>
+                                    <a>75</a>
+                                    <b>126</b>
+                                    <v>1313</v>
+                                </b>
+                                <b>
+                                    <a>126</a>
+                                    <b>343</b>
+                                    <v>1300</v>
+                                </b>
+                                <b>
+                                    <a>354</a>
+                                    <b>2337</b>
+                                    <v>338</v>
                                 </b>
                             </bs>
                         </hist>
@@ -2951,67 +3039,67 @@
                                 <b>
                                     <a>1</a>
                                     <b>20</b>
-                                    <v>1441</v>
+                                    <v>1430</v>
                                 </b>
                                 <b>
                                     <a>20</a>
                                     <b>28</b>
-                                    <v>1298</v>
+                                    <v>1300</v>
                                 </b>
                                 <b>
                                     <a>28</a>
                                     <b>36</b>
-                                    <v>1389</v>
+                                    <v>1404</v>
                                 </b>
                                 <b>
                                     <a>36</a>
                                     <b>45</b>
-                                    <v>1363</v>
+                                    <v>1365</v>
                                 </b>
                                 <b>
                                     <a>45</a>
                                     <b>50</b>
-                                    <v>1311</v>
+                                    <v>1313</v>
                                 </b>
                                 <b>
                                     <a>50</a>
                                     <b>57</b>
-                                    <v>1350</v>
+                                    <v>1352</v>
                                 </b>
                                 <b>
                                     <a>57</a>
                                     <b>64</b>
-                                    <v>1376</v>
+                                    <v>1339</v>
                                 </b>
                                 <b>
                                     <a>64</a>
                                     <b>71</b>
-                                    <v>1298</v>
+                                    <v>1300</v>
                                 </b>
                                 <b>
                                     <a>71</a>
                                     <b>78</b>
-                                    <v>1376</v>
+                                    <v>1391</v>
                                 </b>
                                 <b>
                                     <a>78</a>
                                     <b>87</b>
-                                    <v>1428</v>
+                                    <v>1443</v>
                                 </b>
                                 <b>
                                     <a>87</a>
                                     <b>99</b>
-                                    <v>1402</v>
+                                    <v>1417</v>
                                 </b>
                                 <b>
                                     <a>99</a>
                                     <b>120</b>
-                                    <v>1363</v>
+                                    <v>1365</v>
                                 </b>
                                 <b>
                                     <a>120</a>
                                     <b>367</b>
-                                    <v>766</v>
+                                    <v>780</v>
                                 </b>
                             </bs>
                         </hist>
@@ -3027,67 +3115,72 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1519</v>
+                                    <v>1430</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>4</b>
-                                    <v>1753</v>
+                                    <v>1716</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>6</b>
-                                    <v>3545</v>
+                                    <v>3316</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>10</b>
-                                    <v>2454</v>
+                                    <v>2523</v>
                                 </b>
                                 <b>
                                     <a>10</a>
-                                    <b>17</b>
-                                    <v>2805</v>
+                                    <b>16</b>
+                                    <v>2367</v>
                                 </b>
                                 <b>
-                                    <a>17</a>
-                                    <b>24</b>
-                                    <v>2441</v>
+                                    <a>16</a>
+                                    <b>22</b>
+                                    <v>2562</v>
                                 </b>
                                 <b>
-                                    <a>24</a>
-                                    <b>42</b>
-                                    <v>2350</v>
+                                    <a>22</a>
+                                    <b>37</b>
+                                    <v>2327</v>
                                 </b>
                                 <b>
-                                    <a>42</a>
-                                    <b>78</b>
-                                    <v>2337</v>
+                                    <a>37</a>
+                                    <b>68</b>
+                                    <v>2341</v>
                                 </b>
                                 <b>
-                                    <a>78</a>
-                                    <b>119</b>
-                                    <v>2311</v>
+                                    <a>68</a>
+                                    <b>110</b>
+                                    <v>2314</v>
                                 </b>
                                 <b>
-                                    <a>119</a>
-                                    <b>173</b>
-                                    <v>2324</v>
+                                    <a>110</a>
+                                    <b>161</b>
+                                    <v>2314</v>
                                 </b>
                                 <b>
-                                    <a>173</a>
-                                    <b>279</b>
-                                    <v>2311</v>
+                                    <a>161</a>
+                                    <b>249</b>
+                                    <v>2314</v>
                                 </b>
                                 <b>
-                                    <a>281</a>
-                                    <b>866</b>
-                                    <v>2311</v>
+                                    <a>250</a>
+                                    <b>596</b>
+                                    <v>2314</v>
                                 </b>
                                 <b>
-                                    <a>866</a>
-                                    <b>10012</b>
-                                    <v>2207</v>
+                                    <a>601</a>
+                                    <b>3089</b>
+                                    <v>2314</v>
+                                </b>
+                                <b>
+                                    <a>3257</a>
+                                    <b>10293</b>
+                                    <v>559</v>
                                 </b>
                             </bs>
                         </hist>
@@ -3103,47 +3196,47 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>10713</v>
+                                    <v>9884</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>4753</v>
+                                    <v>5605</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>6</b>
-                                    <v>2337</v>
+                                    <v>2341</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>9</b>
-                                    <v>2363</v>
+                                    <v>2341</v>
                                 </b>
                                 <b>
                                     <a>9</a>
                                     <b>14</b>
-                                    <v>2792</v>
+                                    <v>2419</v>
                                 </b>
                                 <b>
                                     <a>14</a>
                                     <b>22</b>
-                                    <v>2324</v>
+                                    <v>2484</v>
                                 </b>
                                 <b>
                                     <a>22</a>
-                                    <b>57</b>
-                                    <v>2311</v>
+                                    <b>49</b>
+                                    <v>2327</v>
                                 </b>
                                 <b>
-                                    <a>57</a>
-                                    <b>287</b>
-                                    <v>2311</v>
+                                    <a>49</a>
+                                    <b>220</b>
+                                    <v>2314</v>
                                 </b>
                                 <b>
-                                    <a>291</a>
-                                    <b>1322</b>
-                                    <v>766</v>
+                                    <a>223</a>
+                                    <b>1323</b>
+                                    <v>1001</v>
                                 </b>
                             </bs>
                         </hist>
@@ -3159,72 +3252,72 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1519</v>
+                                    <v>1430</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>1584</v>
+                                    <v>1495</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>2558</v>
+                                    <v>2510</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>6</b>
-                                    <v>2441</v>
+                                    <v>2419</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>8</b>
-                                    <v>1584</v>
+                                    <v>1573</v>
                                 </b>
                                 <b>
                                     <a>8</a>
-                                    <b>13</b>
-                                    <v>2818</v>
+                                    <b>12</b>
+                                    <v>2393</v>
                                 </b>
                                 <b>
-                                    <a>13</a>
-                                    <b>18</b>
-                                    <v>2610</v>
+                                    <a>12</a>
+                                    <b>16</b>
+                                    <v>2432</v>
                                 </b>
                                 <b>
-                                    <a>18</a>
-                                    <b>30</b>
-                                    <v>2506</v>
+                                    <a>16</a>
+                                    <b>25</b>
+                                    <v>2549</v>
                                 </b>
                                 <b>
-                                    <a>30</a>
-                                    <b>43</b>
-                                    <v>2363</v>
+                                    <a>25</a>
+                                    <b>39</b>
+                                    <v>2314</v>
                                 </b>
                                 <b>
-                                    <a>43</a>
-                                    <b>57</b>
-                                    <v>2428</v>
+                                    <a>39</a>
+                                    <b>53</b>
+                                    <v>2406</v>
                                 </b>
                                 <b>
-                                    <a>57</a>
-                                    <b>70</b>
-                                    <v>2324</v>
+                                    <a>53</a>
+                                    <b>66</b>
+                                    <v>2314</v>
                                 </b>
                                 <b>
-                                    <a>70</a>
-                                    <b>89</b>
-                                    <v>2350</v>
+                                    <a>66</a>
+                                    <b>81</b>
+                                    <v>2314</v>
                                 </b>
                                 <b>
-                                    <a>89</a>
-                                    <b>116</b>
-                                    <v>2311</v>
+                                    <a>81</a>
+                                    <b>104</b>
+                                    <v>2341</v>
                                 </b>
                                 <b>
-                                    <a>116</a>
-                                    <b>203</b>
-                                    <v>1272</v>
+                                    <a>104</a>
+                                    <b>205</b>
+                                    <v>2223</v>
                                 </b>
                             </bs>
                         </hist>
@@ -3240,42 +3333,42 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>12648</v>
+                                    <v>11106</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>6714</v>
+                                    <v>6294</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>2363</v>
+                                    <v>2275</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>1792</v>
+                                    <v>1547</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>7</b>
-                                    <v>2324</v>
+                                    <v>2653</v>
                                 </b>
                                 <b>
                                     <a>7</a>
-                                    <b>12</b>
-                                    <v>2337</v>
+                                    <b>10</b>
+                                    <v>2432</v>
                                 </b>
                                 <b>
-                                    <a>12</a>
-                                    <b>34</b>
-                                    <v>2311</v>
+                                    <a>10</a>
+                                    <b>18</b>
+                                    <v>2536</v>
                                 </b>
                                 <b>
-                                    <a>40</a>
+                                    <a>18</a>
                                     <b>241</b>
-                                    <v>181</v>
+                                    <v>1872</v>
                                 </b>
                             </bs>
                         </hist>
@@ -3291,67 +3384,67 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1519</v>
+                                    <v>1430</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>4</b>
-                                    <v>1766</v>
+                                    <v>1742</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>3636</v>
+                                    <v>3407</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>8</b>
-                                    <v>2662</v>
+                                    <v>2757</v>
                                 </b>
                                 <b>
                                     <a>8</a>
                                     <b>13</b>
-                                    <v>2792</v>
+                                    <v>2822</v>
                                 </b>
                                 <b>
                                     <a>13</a>
-                                    <b>17</b>
-                                    <v>2311</v>
+                                    <b>18</b>
+                                    <v>2562</v>
                                 </b>
                                 <b>
-                                    <a>17</a>
+                                    <a>18</a>
                                     <b>28</b>
-                                    <v>2376</v>
+                                    <v>2445</v>
                                 </b>
                                 <b>
                                     <a>28</a>
-                                    <b>42</b>
-                                    <v>2428</v>
+                                    <b>44</b>
+                                    <v>2367</v>
                                 </b>
                                 <b>
-                                    <a>42</a>
-                                    <b>57</b>
-                                    <v>2415</v>
+                                    <a>44</a>
+                                    <b>59</b>
+                                    <v>2419</v>
                                 </b>
                                 <b>
-                                    <a>57</a>
-                                    <b>71</b>
-                                    <v>2389</v>
+                                    <a>59</a>
+                                    <b>72</b>
+                                    <v>2367</v>
                                 </b>
                                 <b>
-                                    <a>71</a>
+                                    <a>72</a>
                                     <b>88</b>
-                                    <v>2363</v>
+                                    <v>2341</v>
                                 </b>
                                 <b>
                                     <a>88</a>
-                                    <b>113</b>
-                                    <v>2311</v>
+                                    <b>114</b>
+                                    <v>2314</v>
                                 </b>
                                 <b>
-                                    <a>113</a>
-                                    <b>203</b>
-                                    <v>1701</v>
+                                    <a>114</a>
+                                    <b>208</b>
+                                    <v>1742</v>
                                 </b>
                             </bs>
                         </hist>
@@ -3367,72 +3460,72 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>441</v>
+                                    <v>442</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>623</v>
+                                    <v>585</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>233</v>
+                                    <v>247</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>272</v>
+                                    <v>247</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>6</b>
-                                    <v>246</v>
+                                    <v>273</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>9</b>
-                                    <v>467</v>
+                                    <v>455</v>
                                 </b>
                                 <b>
                                     <a>9</a>
-                                    <b>16</b>
-                                    <v>415</v>
+                                    <b>15</b>
+                                    <v>403</v>
                                 </b>
                                 <b>
-                                    <a>16</a>
-                                    <b>41</b>
-                                    <v>389</v>
+                                    <a>15</a>
+                                    <b>37</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>46</a>
-                                    <b>172</b>
-                                    <v>389</v>
+                                    <a>37</a>
+                                    <b>159</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>181</a>
-                                    <b>773</b>
-                                    <v>389</v>
+                                    <a>159</a>
+                                    <b>700</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>791</a>
-                                    <b>2919</b>
-                                    <v>389</v>
+                                    <a>723</a>
+                                    <b>2453</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>2920</a>
-                                    <b>8125</b>
-                                    <v>389</v>
+                                    <a>2462</a>
+                                    <b>7702</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>8227</a>
-                                    <b>25706</b>
-                                    <v>389</v>
+                                    <a>7795</a>
+                                    <b>14906</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>33875</a>
-                                    <b>34983</b>
-                                    <v>25</v>
+                                    <a>16424</a>
+                                    <b>38206</b>
+                                    <v>78</v>
                                 </b>
                             </bs>
                         </hist>
@@ -3448,52 +3541,52 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1506</v>
+                                    <v>1456</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>545</v>
+                                    <v>481</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>428</v>
+                                    <v>481</v>
                                 </b>
                                 <b>
                                     <a>4</a>
-                                    <b>10</b>
-                                    <v>389</v>
+                                    <b>9</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>10</a>
-                                    <b>39</b>
-                                    <v>389</v>
+                                    <a>9</a>
+                                    <b>33</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>39</a>
-                                    <b>139</b>
-                                    <v>389</v>
+                                    <a>34</a>
+                                    <b>109</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>147</a>
-                                    <b>387</b>
-                                    <v>389</v>
+                                    <a>112</a>
+                                    <b>353</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>397</a>
-                                    <b>748</b>
-                                    <v>389</v>
+                                    <a>358</a>
+                                    <b>696</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>769</a>
-                                    <b>963</b>
-                                    <v>389</v>
+                                    <a>698</a>
+                                    <b>950</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>964</a>
-                                    <b>1322</b>
-                                    <v>246</v>
+                                    <a>950</a>
+                                    <b>1323</b>
+                                    <v>312</v>
                                 </b>
                             </bs>
                         </hist>
@@ -3509,62 +3602,62 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>545</v>
+                                    <v>533</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>675</v>
+                                    <v>637</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>337</v>
+                                    <v>351</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>6</b>
-                                    <v>402</v>
+                                    <v>416</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>9</b>
-                                    <v>467</v>
+                                    <v>455</v>
                                 </b>
                                 <b>
                                     <a>9</a>
-                                    <b>19</b>
-                                    <v>389</v>
+                                    <b>17</b>
+                                    <v>403</v>
                                 </b>
                                 <b>
-                                    <a>19</a>
-                                    <b>64</b>
-                                    <v>389</v>
+                                    <a>18</a>
+                                    <b>63</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>66</a>
-                                    <b>184</b>
-                                    <v>402</v>
+                                    <a>64</a>
+                                    <b>158</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>201</a>
-                                    <b>390</b>
-                                    <v>389</v>
+                                    <a>171</a>
+                                    <b>379</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>418</a>
-                                    <b>742</b>
-                                    <v>389</v>
+                                    <a>380</a>
+                                    <b>735</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>752</a>
-                                    <b>1025</b>
-                                    <v>389</v>
+                                    <a>735</a>
+                                    <b>1008</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>1028</a>
-                                    <b>1382</b>
-                                    <v>285</v>
+                                    <a>1010</a>
+                                    <b>1392</b>
+                                    <v>325</v>
                                 </b>
                             </bs>
                         </hist>
@@ -3580,62 +3673,62 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>545</v>
+                                    <v>533</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>675</v>
+                                    <v>637</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>337</v>
+                                    <v>351</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>6</b>
-                                    <v>402</v>
+                                    <v>416</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>9</b>
-                                    <v>467</v>
+                                    <v>455</v>
                                 </b>
                                 <b>
                                     <a>9</a>
-                                    <b>19</b>
-                                    <v>389</v>
+                                    <b>17</b>
+                                    <v>403</v>
                                 </b>
                                 <b>
-                                    <a>19</a>
+                                    <a>18</a>
                                     <b>64</b>
-                                    <v>389</v>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>66</a>
-                                    <b>184</b>
-                                    <v>389</v>
+                                    <a>64</a>
+                                    <b>159</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>184</a>
+                                    <a>171</a>
                                     <b>381</b>
-                                    <v>389</v>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>396</a>
-                                    <b>752</b>
-                                    <v>389</v>
+                                    <a>385</a>
+                                    <b>749</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>753</a>
-                                    <b>1034</b>
-                                    <v>402</v>
+                                    <a>750</a>
+                                    <b>1026</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>1050</a>
-                                    <b>1386</b>
-                                    <v>285</v>
+                                    <a>1027</a>
+                                    <b>1399</b>
+                                    <v>325</v>
                                 </b>
                             </bs>
                         </hist>
@@ -3651,52 +3744,52 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1285</v>
+                                    <v>1274</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>727</v>
+                                    <v>728</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>441</v>
+                                    <v>403</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>6</b>
-                                    <v>415</v>
+                                    <v>429</v>
                                 </b>
                                 <b>
                                     <a>6</a>
-                                    <b>16</b>
-                                    <v>389</v>
+                                    <b>14</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>16</a>
-                                    <b>37</b>
-                                    <v>389</v>
+                                    <a>14</a>
+                                    <b>35</b>
+                                    <v>403</v>
                                 </b>
                                 <b>
-                                    <a>37</a>
-                                    <b>67</b>
-                                    <v>402</v>
+                                    <a>35</a>
+                                    <b>66</b>
+                                    <v>429</v>
                                 </b>
                                 <b>
                                     <a>67</a>
-                                    <b>103</b>
-                                    <v>389</v>
+                                    <b>104</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
                                     <a>104</a>
                                     <b>127</b>
-                                    <v>402</v>
+                                    <v>403</v>
                                 </b>
                                 <b>
-                                    <a>127</a>
-                                    <b>177</b>
-                                    <v>220</v>
+                                    <a>128</a>
+                                    <b>178</b>
+                                    <v>221</v>
                                 </b>
                             </bs>
                         </hist>
@@ -3712,72 +3805,72 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>311</v>
+                                    <v>286</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>3532</v>
+                                    <v>3316</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>6</b>
-                                    <v>2636</v>
+                                    <v>2458</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>9</b>
-                                    <v>2415</v>
+                                    <v>2497</v>
                                 </b>
                                 <b>
                                     <a>9</a>
                                     <b>14</b>
-                                    <v>2350</v>
+                                    <v>2471</v>
                                 </b>
                                 <b>
                                     <a>14</a>
                                     <b>21</b>
-                                    <v>2467</v>
+                                    <v>2393</v>
                                 </b>
                                 <b>
                                     <a>21</a>
-                                    <b>34</b>
-                                    <v>2324</v>
+                                    <b>32</b>
+                                    <v>2341</v>
                                 </b>
                                 <b>
-                                    <a>34</a>
-                                    <b>64</b>
-                                    <v>2311</v>
+                                    <a>32</a>
+                                    <b>60</b>
+                                    <v>2367</v>
                                 </b>
                                 <b>
-                                    <a>64</a>
-                                    <b>103</b>
-                                    <v>2337</v>
+                                    <a>60</a>
+                                    <b>101</b>
+                                    <v>2314</v>
                                 </b>
                                 <b>
-                                    <a>103</a>
+                                    <a>101</a>
                                     <b>152</b>
-                                    <v>2311</v>
+                                    <v>2354</v>
                                 </b>
                                 <b>
                                     <a>152</a>
                                     <b>230</b>
-                                    <v>2311</v>
+                                    <v>2341</v>
                                 </b>
                                 <b>
                                     <a>230</a>
-                                    <b>525</b>
-                                    <v>2311</v>
+                                    <b>480</b>
+                                    <v>2314</v>
                                 </b>
                                 <b>
-                                    <a>528</a>
-                                    <b>2539</b>
-                                    <v>2311</v>
+                                    <a>482</a>
+                                    <b>2152</b>
+                                    <v>2314</v>
                                 </b>
                                 <b>
-                                    <a>2543</a>
-                                    <b>9864</b>
-                                    <v>740</v>
+                                    <a>2200</a>
+                                    <b>9921</b>
+                                    <v>949</v>
                                 </b>
                             </bs>
                         </hist>
@@ -3793,47 +3886,47 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>10713</v>
+                                    <v>9884</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>4753</v>
+                                    <v>5605</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>6</b>
-                                    <v>2337</v>
+                                    <v>2341</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>9</b>
-                                    <v>2363</v>
+                                    <v>2341</v>
                                 </b>
                                 <b>
                                     <a>9</a>
                                     <b>14</b>
-                                    <v>2792</v>
+                                    <v>2419</v>
                                 </b>
                                 <b>
                                     <a>14</a>
                                     <b>22</b>
-                                    <v>2324</v>
+                                    <v>2484</v>
                                 </b>
                                 <b>
                                     <a>22</a>
-                                    <b>57</b>
-                                    <v>2311</v>
+                                    <b>49</b>
+                                    <v>2327</v>
                                 </b>
                                 <b>
-                                    <a>57</a>
-                                    <b>287</b>
-                                    <v>2311</v>
+                                    <a>49</a>
+                                    <b>220</b>
+                                    <v>2314</v>
                                 </b>
                                 <b>
-                                    <a>291</a>
-                                    <b>1306</b>
-                                    <v>766</v>
+                                    <a>223</a>
+                                    <b>1307</b>
+                                    <v>1001</v>
                                 </b>
                             </bs>
                         </hist>
@@ -3849,42 +3942,42 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>12428</v>
+                                    <v>11327</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>6532</v>
+                                    <v>5839</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>2532</v>
+                                    <v>2197</v>
                                 </b>
                                 <b>
                                     <a>4</a>
-                                    <b>5</b>
-                                    <v>1753</v>
+                                    <b>6</b>
+                                    <v>2835</v>
                                 </b>
                                 <b>
-                                    <a>5</a>
-                                    <b>7</b>
-                                    <v>2207</v>
+                                    <a>6</a>
+                                    <b>8</b>
+                                    <v>2132</v>
                                 </b>
                                 <b>
-                                    <a>7</a>
+                                    <a>8</a>
                                     <b>12</b>
-                                    <v>2441</v>
+                                    <v>2419</v>
                                 </b>
                                 <b>
                                     <a>12</a>
-                                    <b>27</b>
-                                    <v>2363</v>
+                                    <b>24</b>
+                                    <v>2445</v>
                                 </b>
                                 <b>
-                                    <a>27</a>
-                                    <b>36</b>
-                                    <v>415</v>
+                                    <a>24</a>
+                                    <b>42</b>
+                                    <v>1521</v>
                                 </b>
                             </bs>
                         </hist>
@@ -3900,67 +3993,67 @@
                                 <b>
                                     <a>1</a>
                                     <b>3</b>
-                                    <v>1519</v>
+                                    <v>1430</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>3688</v>
+                                    <v>3446</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>6</b>
-                                    <v>2714</v>
+                                    <v>2757</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>8</b>
-                                    <v>1649</v>
+                                    <v>1729</v>
                                 </b>
                                 <b>
                                     <a>8</a>
-                                    <b>13</b>
-                                    <v>2766</v>
+                                    <b>12</b>
+                                    <v>2354</v>
                                 </b>
                                 <b>
-                                    <a>13</a>
-                                    <b>17</b>
-                                    <v>2363</v>
+                                    <a>12</a>
+                                    <b>16</b>
+                                    <v>2354</v>
                                 </b>
                                 <b>
-                                    <a>17</a>
-                                    <b>28</b>
-                                    <v>2415</v>
+                                    <a>16</a>
+                                    <b>24</b>
+                                    <v>2406</v>
                                 </b>
                                 <b>
-                                    <a>28</a>
-                                    <b>42</b>
-                                    <v>2415</v>
+                                    <a>24</a>
+                                    <b>39</b>
+                                    <v>2458</v>
                                 </b>
                                 <b>
-                                    <a>42</a>
-                                    <b>55</b>
-                                    <v>2337</v>
+                                    <a>39</a>
+                                    <b>53</b>
+                                    <v>2445</v>
                                 </b>
                                 <b>
-                                    <a>55</a>
-                                    <b>69</b>
-                                    <v>2441</v>
+                                    <a>53</a>
+                                    <b>67</b>
+                                    <v>2432</v>
                                 </b>
                                 <b>
-                                    <a>69</a>
-                                    <b>86</b>
-                                    <v>2415</v>
+                                    <a>67</a>
+                                    <b>82</b>
+                                    <v>2393</v>
                                 </b>
                                 <b>
-                                    <a>86</a>
-                                    <b>112</b>
-                                    <v>2376</v>
+                                    <a>82</a>
+                                    <b>105</b>
+                                    <v>2327</v>
                                 </b>
                                 <b>
-                                    <a>112</a>
-                                    <b>200</b>
-                                    <v>1571</v>
+                                    <a>105</a>
+                                    <b>204</b>
+                                    <v>2184</v>
                                 </b>
                             </bs>
                         </hist>
@@ -3976,72 +4069,72 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1506</v>
+                                    <v>1417</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>1623</v>
+                                    <v>1534</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>2558</v>
+                                    <v>2510</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>6</b>
-                                    <v>2402</v>
+                                    <v>2367</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>8</b>
-                                    <v>1649</v>
+                                    <v>1690</v>
                                 </b>
                                 <b>
                                     <a>8</a>
                                     <b>13</b>
-                                    <v>2688</v>
+                                    <v>2783</v>
                                 </b>
                                 <b>
                                     <a>13</a>
                                     <b>18</b>
-                                    <v>2636</v>
+                                    <v>2549</v>
                                 </b>
                                 <b>
                                     <a>18</a>
-                                    <b>30</b>
-                                    <v>2402</v>
+                                    <b>28</b>
+                                    <v>2432</v>
                                 </b>
                                 <b>
-                                    <a>30</a>
+                                    <a>28</a>
                                     <b>44</b>
-                                    <v>2389</v>
+                                    <v>2445</v>
                                 </b>
                                 <b>
                                     <a>44</a>
-                                    <b>58</b>
-                                    <v>2337</v>
+                                    <b>59</b>
+                                    <v>2393</v>
                                 </b>
                                 <b>
-                                    <a>58</a>
+                                    <a>59</a>
                                     <b>72</b>
-                                    <v>2324</v>
+                                    <v>2419</v>
                                 </b>
                                 <b>
                                     <a>72</a>
                                     <b>90</b>
-                                    <v>2389</v>
+                                    <v>2354</v>
                                 </b>
                                 <b>
                                     <a>90</a>
                                     <b>117</b>
-                                    <v>2311</v>
+                                    <v>2327</v>
                                 </b>
                                 <b>
                                     <a>117</a>
-                                    <b>202</b>
-                                    <v>1454</v>
+                                    <b>208</b>
+                                    <v>1495</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4057,72 +4150,67 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>350</v>
+                                    <v>338</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>480</v>
+                                    <v>468</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>5</b>
-                                    <v>402</v>
+                                    <v>455</v>
                                 </b>
                                 <b>
                                     <a>5</a>
-                                    <b>6</b>
-                                    <v>194</v>
+                                    <b>7</b>
+                                    <v>455</v>
                                 </b>
                                 <b>
-                                    <a>6</a>
-                                    <b>8</b>
-                                    <v>467</v>
+                                    <a>7</a>
+                                    <b>10</b>
+                                    <v>403</v>
                                 </b>
                                 <b>
-                                    <a>8</a>
-                                    <b>14</b>
-                                    <v>389</v>
+                                    <a>10</a>
+                                    <b>19</b>
+                                    <v>442</v>
                                 </b>
                                 <b>
-                                    <a>14</a>
-                                    <b>28</b>
-                                    <v>389</v>
+                                    <a>19</a>
+                                    <b>50</b>
+                                    <v>403</v>
                                 </b>
                                 <b>
-                                    <a>28</a>
-                                    <b>68</b>
-                                    <v>389</v>
+                                    <a>53</a>
+                                    <b>168</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>69</a>
-                                    <b>258</b>
-                                    <v>389</v>
+                                    <a>169</a>
+                                    <b>691</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>264</a>
-                                    <b>1063</b>
-                                    <v>389</v>
+                                    <a>806</a>
+                                    <b>2495</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>1113</a>
-                                    <b>3378</b>
-                                    <v>389</v>
+                                    <a>2618</a>
+                                    <b>6562</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>3687</a>
-                                    <b>8035</b>
-                                    <v>389</v>
+                                    <a>6710</a>
+                                    <b>9993</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>8096</a>
-                                    <b>10367</b>
-                                    <v>389</v>
-                                </b>
-                                <b>
-                                    <a>10416</a>
-                                    <b>17990</b>
-                                    <v>116</v>
+                                    <a>10241</a>
+                                    <b>19364</b>
+                                    <v>247</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4138,52 +4226,52 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1441</v>
+                                    <v>1404</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>610</v>
+                                    <v>585</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>428</v>
+                                    <v>429</v>
                                 </b>
                                 <b>
                                     <a>4</a>
-                                    <b>9</b>
-                                    <v>402</v>
+                                    <b>7</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>9</a>
-                                    <b>41</b>
-                                    <v>389</v>
+                                    <a>7</a>
+                                    <b>24</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>42</a>
-                                    <b>123</b>
-                                    <v>389</v>
+                                    <a>24</a>
+                                    <b>94</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>143</a>
-                                    <b>406</b>
-                                    <v>389</v>
+                                    <a>95</a>
+                                    <b>314</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>406</a>
-                                    <b>760</b>
-                                    <v>389</v>
+                                    <a>325</a>
+                                    <b>676</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>771</a>
-                                    <b>994</b>
-                                    <v>389</v>
+                                    <a>688</a>
+                                    <b>977</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>1006</a>
-                                    <b>1289</b>
-                                    <v>298</v>
+                                    <a>979</a>
+                                    <b>1290</b>
+                                    <v>403</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4199,67 +4287,67 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>519</v>
+                                    <v>507</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>675</v>
+                                    <v>650</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>298</v>
+                                    <v>338</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>6</b>
-                                    <v>402</v>
+                                    <v>429</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>9</b>
-                                    <v>454</v>
+                                    <v>429</v>
                                 </b>
                                 <b>
                                     <a>9</a>
-                                    <b>16</b>
-                                    <v>415</v>
+                                    <b>15</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
                                     <a>16</a>
                                     <b>39</b>
-                                    <v>389</v>
+                                    <v>429</v>
                                 </b>
                                 <b>
-                                    <a>39</a>
-                                    <b>136</b>
-                                    <v>389</v>
+                                    <a>40</a>
+                                    <b>138</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>136</a>
-                                    <b>344</b>
-                                    <v>389</v>
+                                    <a>141</a>
+                                    <b>332</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>353</a>
-                                    <b>637</b>
-                                    <v>389</v>
+                                    <a>352</a>
+                                    <b>653</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>675</a>
-                                    <b>1011</b>
-                                    <v>389</v>
+                                    <a>657</a>
+                                    <b>998</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
                                     <a>1011</a>
-                                    <b>1272</b>
-                                    <v>389</v>
+                                    <b>1264</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>1284</a>
-                                    <b>1387</b>
-                                    <v>25</v>
+                                    <a>1281</a>
+                                    <b>1401</b>
+                                    <v>39</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4275,62 +4363,62 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>896</v>
+                                    <v>884</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>311</v>
+                                    <v>338</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>506</v>
+                                    <v>520</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>350</v>
+                                    <v>325</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>8</b>
-                                    <v>441</v>
+                                    <v>416</v>
                                 </b>
                                 <b>
                                     <a>8</a>
-                                    <b>18</b>
-                                    <v>389</v>
+                                    <b>17</b>
+                                    <v>403</v>
                                 </b>
                                 <b>
-                                    <a>19</a>
+                                    <a>17</a>
                                     <b>33</b>
-                                    <v>389</v>
+                                    <v>429</v>
                                 </b>
                                 <b>
                                     <a>33</a>
                                     <b>49</b>
-                                    <v>389</v>
+                                    <v>390</v>
                                 </b>
                                 <b>
                                     <a>49</a>
                                     <b>64</b>
-                                    <v>402</v>
+                                    <v>390</v>
                                 </b>
                                 <b>
                                     <a>64</a>
-                                    <b>82</b>
-                                    <v>428</v>
+                                    <b>81</b>
+                                    <v>403</v>
                                 </b>
                                 <b>
-                                    <a>82</a>
+                                    <a>81</a>
                                     <b>95</b>
-                                    <v>402</v>
+                                    <v>429</v>
                                 </b>
                                 <b>
                                     <a>95</a>
-                                    <b>112</b>
-                                    <v>220</v>
+                                    <b>108</b>
+                                    <v>234</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4346,67 +4434,67 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>519</v>
+                                    <v>507</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>675</v>
+                                    <v>663</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>298</v>
+                                    <v>338</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>6</b>
-                                    <v>402</v>
+                                    <v>416</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>9</b>
-                                    <v>454</v>
+                                    <v>429</v>
                                 </b>
                                 <b>
                                     <a>9</a>
-                                    <b>16</b>
-                                    <v>415</v>
+                                    <b>15</b>
+                                    <v>403</v>
                                 </b>
                                 <b>
-                                    <a>16</a>
-                                    <b>39</b>
-                                    <v>402</v>
+                                    <a>15</a>
+                                    <b>36</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>48</a>
-                                    <b>141</b>
-                                    <v>389</v>
+                                    <a>37</a>
+                                    <b>131</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>142</a>
-                                    <b>352</b>
-                                    <v>389</v>
+                                    <a>133</a>
+                                    <b>314</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>359</a>
-                                    <b>637</b>
-                                    <v>389</v>
+                                    <a>314</a>
+                                    <b>632</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>674</a>
-                                    <b>999</b>
-                                    <v>389</v>
+                                    <a>637</a>
+                                    <b>969</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>1010</a>
-                                    <b>1283</b>
-                                    <v>389</v>
+                                    <a>970</a>
+                                    <b>1181</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>1381</a>
-                                    <b>1382</b>
-                                    <v>12</v>
+                                    <a>1211</a>
+                                    <b>1394</b>
+                                    <v>65</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4416,19 +4504,19 @@
         </relation>
         <relation>
             <name>ruby_alias_def</name>
-            <cardinality>1244</cardinality>
+            <cardinality>1264</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>1244</v>
+                    <v>1264</v>
                 </e>
                 <e>
                     <k>alias</k>
-                    <v>1244</v>
+                    <v>1264</v>
                 </e>
                 <e>
                     <k>name</k>
-                    <v>1244</v>
+                    <v>1264</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -4442,7 +4530,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1244</v>
+                                    <v>1264</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4458,7 +4546,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1244</v>
+                                    <v>1264</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4474,7 +4562,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1244</v>
+                                    <v>1264</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4490,7 +4578,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1244</v>
+                                    <v>1264</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4506,7 +4594,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1244</v>
+                                    <v>1264</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4522,7 +4610,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1244</v>
+                                    <v>1264</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4635,19 +4723,19 @@
         </relation>
         <relation>
             <name>ruby_argument_list_child</name>
-            <cardinality>823783</cardinality>
+            <cardinality>832018</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_argument_list</k>
-                    <v>664257</v>
+                    <v>669942</v>
                 </e>
                 <e>
                     <k>index</k>
-                    <v>428</v>
+                    <v>429</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>823783</v>
+                    <v>832018</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -4661,17 +4749,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>562976</v>
+                                    <v>567211</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>64088</v>
+                                    <v>64884</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>34</b>
-                                    <v>37193</v>
+                                    <v>37846</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4687,17 +4775,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>562976</v>
+                                    <v>567211</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>64088</v>
+                                    <v>64884</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>34</b>
-                                    <v>37193</v>
+                                    <v>37846</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4713,47 +4801,47 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>142</v>
+                                    <v>143</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>38</v>
+                                    <v>39</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>7</b>
-                                    <v>38</v>
+                                    <v>39</v>
                                 </b>
                                 <b>
                                     <a>7</a>
                                     <b>11</b>
-                                    <v>38</v>
+                                    <v>39</v>
                                 </b>
                                 <b>
                                     <a>11</a>
-                                    <b>20</b>
-                                    <v>38</v>
+                                    <b>21</b>
+                                    <v>39</v>
                                 </b>
                                 <b>
-                                    <a>22</a>
-                                    <b>42</b>
-                                    <v>38</v>
+                                    <a>23</a>
+                                    <b>43</b>
+                                    <v>39</v>
                                 </b>
                                 <b>
-                                    <a>55</a>
-                                    <b>372</b>
-                                    <v>38</v>
+                                    <a>56</a>
+                                    <b>378</b>
+                                    <v>39</v>
                                 </b>
                                 <b>
-                                    <a>900</a>
-                                    <b>7800</b>
-                                    <v>38</v>
+                                    <a>919</a>
+                                    <b>7900</b>
+                                    <v>39</v>
                                 </b>
                                 <b>
-                                    <a>51150</a>
-                                    <b>51151</b>
-                                    <v>12</v>
+                                    <a>51512</a>
+                                    <b>51513</b>
+                                    <v>13</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4769,47 +4857,47 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>142</v>
+                                    <v>143</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>38</v>
+                                    <v>39</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>7</b>
-                                    <v>38</v>
+                                    <v>39</v>
                                 </b>
                                 <b>
                                     <a>7</a>
                                     <b>11</b>
-                                    <v>38</v>
+                                    <v>39</v>
                                 </b>
                                 <b>
                                     <a>11</a>
-                                    <b>20</b>
-                                    <v>38</v>
+                                    <b>21</b>
+                                    <v>39</v>
                                 </b>
                                 <b>
-                                    <a>22</a>
-                                    <b>42</b>
-                                    <v>38</v>
+                                    <a>23</a>
+                                    <b>43</b>
+                                    <v>39</v>
                                 </b>
                                 <b>
-                                    <a>55</a>
-                                    <b>372</b>
-                                    <v>38</v>
+                                    <a>56</a>
+                                    <b>378</b>
+                                    <v>39</v>
                                 </b>
                                 <b>
-                                    <a>900</a>
-                                    <b>7800</b>
-                                    <v>38</v>
+                                    <a>919</a>
+                                    <b>7900</b>
+                                    <v>39</v>
                                 </b>
                                 <b>
-                                    <a>51150</a>
-                                    <b>51151</b>
-                                    <v>12</v>
+                                    <a>51512</a>
+                                    <b>51513</b>
+                                    <v>13</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4825,7 +4913,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>823783</v>
+                                    <v>832018</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4841,7 +4929,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>823783</v>
+                                    <v>832018</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4851,22 +4939,22 @@
         </relation>
         <relation>
             <name>ruby_argument_list_def</name>
-            <cardinality>664517</cardinality>
+            <cardinality>670202</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>664517</v>
+                    <v>670202</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_array_child</name>
-            <cardinality>699082</cardinality>
+            <cardinality>700387</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_array</k>
-                    <v>237416</v>
+                    <v>237942</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -4874,7 +4962,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>699082</v>
+                    <v>700387</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -4888,17 +4976,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>11987</v>
+                                    <v>12128</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>212081</v>
+                                    <v>212308</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>63361</b>
-                                    <v>13348</v>
+                                    <v>13506</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4914,17 +5002,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>11987</v>
+                                    <v>12128</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>212081</v>
+                                    <v>212308</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>63361</b>
-                                    <v>13348</v>
+                                    <v>13506</v>
                                 </b>
                             </bs>
                         </hist>
@@ -4964,7 +5052,7 @@
                                 </b>
                                 <b>
                                     <a>11</a>
-                                    <b>237417</b>
+                                    <b>237943</b>
                                     <v>1294</v>
                                 </b>
                             </bs>
@@ -5005,7 +5093,7 @@
                                 </b>
                                 <b>
                                     <a>11</a>
-                                    <b>237417</b>
+                                    <b>237943</b>
                                     <v>1294</v>
                                 </b>
                             </bs>
@@ -5022,7 +5110,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>699082</v>
+                                    <v>700387</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5038,7 +5126,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>699082</v>
+                                    <v>700387</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5048,11 +5136,11 @@
         </relation>
         <relation>
             <name>ruby_array_def</name>
-            <cardinality>245561</cardinality>
+            <cardinality>246221</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>245561</v>
+                    <v>246221</v>
                 </e>
             </columnsizes>
             <dependencies/>
@@ -5302,19 +5390,19 @@
         </relation>
         <relation>
             <name>ruby_assignment_def</name>
-            <cardinality>130246</cardinality>
+            <cardinality>131940</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>130246</v>
+                    <v>131940</v>
                 </e>
                 <e>
                     <k>left</k>
-                    <v>130246</v>
+                    <v>131940</v>
                 </e>
                 <e>
                     <k>right</k>
-                    <v>130246</v>
+                    <v>131940</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -5328,7 +5416,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>130246</v>
+                                    <v>131940</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5344,7 +5432,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>130246</v>
+                                    <v>131940</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5360,7 +5448,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>130246</v>
+                                    <v>131940</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5376,7 +5464,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>130246</v>
+                                    <v>131940</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5392,7 +5480,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>130246</v>
+                                    <v>131940</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5408,7 +5496,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>130246</v>
+                                    <v>131940</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5418,23 +5506,23 @@
         </relation>
         <relation>
             <name>ruby_ast_node_info</name>
-            <cardinality>8791047</cardinality>
+            <cardinality>9180290</cardinality>
             <columnsizes>
                 <e>
                     <k>node</k>
-                    <v>8791047</v>
+                    <v>9180290</v>
                 </e>
                 <e>
                     <k>parent</k>
-                    <v>2884450</v>
+                    <v>3212205</v>
                 </e>
                 <e>
                     <k>parent_index</k>
-                    <v>2792</v>
+                    <v>2796</v>
                 </e>
                 <e>
                     <k>loc</k>
-                    <v>8496293</v>
+                    <v>8693375</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -5448,7 +5536,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>8791047</v>
+                                    <v>9180290</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5464,7 +5552,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>8791047</v>
+                                    <v>9180290</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5480,7 +5568,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>8791047</v>
+                                    <v>9180290</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5496,27 +5584,27 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>325272</v>
+                                    <v>517803</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>393074</v>
+                                    <v>442358</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>1608542</v>
+                                    <v>1733980</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>344466</v>
+                                    <v>339055</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>216</b>
-                                    <v>213094</v>
+                                    <v>179008</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5532,27 +5620,27 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>325272</v>
+                                    <v>517803</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>393074</v>
+                                    <v>442358</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>1608542</v>
+                                    <v>1733980</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>344466</v>
+                                    <v>339055</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>216</b>
-                                    <v>213094</v>
+                                    <v>179008</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5568,27 +5656,27 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>325272</v>
+                                    <v>517803</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>393074</v>
+                                    <v>442358</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>1608542</v>
+                                    <v>1733980</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>344466</v>
+                                    <v>339055</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>216</b>
-                                    <v>213094</v>
+                                    <v>179008</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5604,52 +5692,57 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>649</v>
+                                    <v>455</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>389</v>
+                                    <v>195</v>
                                 </b>
                                 <b>
                                     <a>3</a>
-                                    <b>5</b>
-                                    <v>233</v>
+                                    <b>4</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>5</a>
+                                    <a>4</a>
                                     <b>6</b>
-                                    <v>233</v>
+                                    <v>234</v>
                                 </b>
                                 <b>
                                     <a>6</a>
-                                    <b>9</b>
-                                    <v>233</v>
+                                    <b>7</b>
+                                    <v>234</v>
                                 </b>
                                 <b>
-                                    <a>9</a>
+                                    <a>7</a>
+                                    <b>10</b>
+                                    <v>234</v>
+                                </b>
+                                <b>
+                                    <a>10</a>
                                     <b>21</b>
-                                    <v>246</v>
+                                    <v>208</v>
                                 </b>
                                 <b>
                                     <a>21</a>
-                                    <b>48</b>
-                                    <v>220</v>
+                                    <b>42</b>
+                                    <v>221</v>
                                 </b>
                                 <b>
-                                    <a>48</a>
-                                    <b>127</b>
-                                    <v>220</v>
+                                    <a>43</a>
+                                    <b>95</b>
+                                    <v>221</v>
                                 </b>
                                 <b>
-                                    <a>130</a>
-                                    <b>946</b>
-                                    <v>220</v>
+                                    <a>99</a>
+                                    <b>491</b>
+                                    <v>221</v>
                                 </b>
                                 <b>
-                                    <a>1416</a>
-                                    <b>222113</b>
-                                    <v>142</v>
+                                    <a>524</a>
+                                    <b>246988</b>
+                                    <v>182</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5665,52 +5758,57 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>649</v>
+                                    <v>455</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>389</v>
+                                    <v>195</v>
                                 </b>
                                 <b>
                                     <a>3</a>
-                                    <b>5</b>
-                                    <v>233</v>
+                                    <b>4</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>5</a>
+                                    <a>4</a>
                                     <b>6</b>
-                                    <v>233</v>
+                                    <v>234</v>
                                 </b>
                                 <b>
                                     <a>6</a>
-                                    <b>9</b>
-                                    <v>233</v>
+                                    <b>7</b>
+                                    <v>234</v>
                                 </b>
                                 <b>
-                                    <a>9</a>
+                                    <a>7</a>
+                                    <b>10</b>
+                                    <v>234</v>
+                                </b>
+                                <b>
+                                    <a>10</a>
                                     <b>21</b>
-                                    <v>246</v>
+                                    <v>208</v>
                                 </b>
                                 <b>
                                     <a>21</a>
-                                    <b>48</b>
-                                    <v>220</v>
+                                    <b>42</b>
+                                    <v>221</v>
                                 </b>
                                 <b>
-                                    <a>48</a>
-                                    <b>127</b>
-                                    <v>220</v>
+                                    <a>43</a>
+                                    <b>95</b>
+                                    <v>221</v>
                                 </b>
                                 <b>
-                                    <a>130</a>
-                                    <b>946</b>
-                                    <v>220</v>
+                                    <a>99</a>
+                                    <b>491</b>
+                                    <v>221</v>
                                 </b>
                                 <b>
-                                    <a>1416</a>
-                                    <b>222113</b>
-                                    <v>142</v>
+                                    <a>524</a>
+                                    <b>246988</b>
+                                    <v>182</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5726,52 +5824,57 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>649</v>
+                                    <v>455</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>389</v>
+                                    <v>195</v>
                                 </b>
                                 <b>
                                     <a>3</a>
-                                    <b>5</b>
-                                    <v>233</v>
+                                    <b>4</b>
+                                    <v>390</v>
                                 </b>
                                 <b>
-                                    <a>5</a>
+                                    <a>4</a>
                                     <b>6</b>
-                                    <v>233</v>
+                                    <v>234</v>
                                 </b>
                                 <b>
                                     <a>6</a>
-                                    <b>9</b>
-                                    <v>233</v>
+                                    <b>7</b>
+                                    <v>234</v>
                                 </b>
                                 <b>
-                                    <a>9</a>
+                                    <a>7</a>
+                                    <b>10</b>
+                                    <v>234</v>
+                                </b>
+                                <b>
+                                    <a>10</a>
                                     <b>21</b>
-                                    <v>246</v>
+                                    <v>208</v>
                                 </b>
                                 <b>
                                     <a>21</a>
-                                    <b>48</b>
-                                    <v>220</v>
+                                    <b>42</b>
+                                    <v>221</v>
                                 </b>
                                 <b>
-                                    <a>48</a>
-                                    <b>127</b>
-                                    <v>220</v>
+                                    <a>43</a>
+                                    <b>95</b>
+                                    <v>221</v>
                                 </b>
                                 <b>
-                                    <a>130</a>
-                                    <b>946</b>
-                                    <v>220</v>
+                                    <a>99</a>
+                                    <b>491</b>
+                                    <v>221</v>
                                 </b>
                                 <b>
-                                    <a>1416</a>
-                                    <b>221838</b>
-                                    <v>142</v>
+                                    <a>524</a>
+                                    <b>246621</b>
+                                    <v>182</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5787,12 +5890,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>8202149</v>
+                                    <v>8208085</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>4</b>
-                                    <v>294143</v>
+                                    <v>485289</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5808,12 +5911,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>8202149</v>
+                                    <v>8208085</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>4</b>
-                                    <v>294143</v>
+                                    <v>485289</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5829,12 +5932,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>8205110</v>
+                                    <v>8211232</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>291182</v>
+                                    <v>482142</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5844,11 +5947,11 @@
         </relation>
         <relation>
             <name>ruby_bare_string_child</name>
-            <cardinality>14936</cardinality>
+            <cardinality>15074</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_bare_string</k>
-                    <v>11487</v>
+                    <v>11622</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -5856,7 +5959,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>14936</v>
+                    <v>15074</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -5870,12 +5973,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>11159</v>
+                                    <v>11291</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>2233</b>
-                                    <v>328</v>
+                                    <v>331</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5891,12 +5994,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>11159</v>
+                                    <v>11291</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>2233</b>
-                                    <v>328</v>
+                                    <v>331</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5926,7 +6029,7 @@
                                 </b>
                                 <b>
                                     <a>4</a>
-                                    <b>11488</b>
+                                    <b>11623</b>
                                     <v>19</v>
                                 </b>
                             </bs>
@@ -5957,7 +6060,7 @@
                                 </b>
                                 <b>
                                     <a>4</a>
-                                    <b>11488</b>
+                                    <b>11623</b>
                                     <v>19</v>
                                 </b>
                             </bs>
@@ -5974,7 +6077,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>14936</v>
+                                    <v>15074</v>
                                 </b>
                             </bs>
                         </hist>
@@ -5990,7 +6093,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>14936</v>
+                                    <v>15074</v>
                                 </b>
                             </bs>
                         </hist>
@@ -6000,22 +6103,22 @@
         </relation>
         <relation>
             <name>ruby_bare_string_def</name>
-            <cardinality>11487</cardinality>
+            <cardinality>11622</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>11487</v>
+                    <v>11622</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_bare_symbol_child</name>
-            <cardinality>2106</cardinality>
+            <cardinality>2085</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_bare_symbol</k>
-                    <v>2106</v>
+                    <v>2085</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -6023,7 +6126,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>2106</v>
+                    <v>2085</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -6037,7 +6140,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2106</v>
+                                    <v>2085</v>
                                 </b>
                             </bs>
                         </hist>
@@ -6053,7 +6156,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2106</v>
+                                    <v>2085</v>
                                 </b>
                             </bs>
                         </hist>
@@ -6067,8 +6170,8 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>709</a>
-                                    <b>710</b>
+                                    <a>715</a>
+                                    <b>716</b>
                                     <v>2</v>
                                 </b>
                             </bs>
@@ -6083,8 +6186,8 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>709</a>
-                                    <b>710</b>
+                                    <a>715</a>
+                                    <b>716</b>
                                     <v>2</v>
                                 </b>
                             </bs>
@@ -6101,7 +6204,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2106</v>
+                                    <v>2085</v>
                                 </b>
                             </bs>
                         </hist>
@@ -6117,7 +6220,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2106</v>
+                                    <v>2085</v>
                                 </b>
                             </bs>
                         </hist>
@@ -6127,11 +6230,11 @@
         </relation>
         <relation>
             <name>ruby_bare_symbol_def</name>
-            <cardinality>2106</cardinality>
+            <cardinality>2085</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>2106</v>
+                    <v>2085</v>
                 </e>
             </columnsizes>
             <dependencies/>
@@ -6365,11 +6468,11 @@
         </relation>
         <relation>
             <name>ruby_begin_child</name>
-            <cardinality>7535</cardinality>
+            <cardinality>7615</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_begin</k>
-                    <v>2523</v>
+                    <v>2549</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -6377,7 +6480,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>7535</v>
+                    <v>7615</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -6391,17 +6494,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>164</v>
+                                    <v>160</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>1317</v>
+                                    <v>1328</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>516</v>
+                                    <v>531</v>
                                 </b>
                                 <b>
                                     <a>4</a>
@@ -6411,7 +6514,7 @@
                                 <b>
                                     <a>5</a>
                                     <b>8</b>
-                                    <v>230</v>
+                                    <v>234</v>
                                 </b>
                                 <b>
                                     <a>8</a>
@@ -6432,17 +6535,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>164</v>
+                                    <v>160</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>1317</v>
+                                    <v>1328</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>516</v>
+                                    <v>531</v>
                                 </b>
                                 <b>
                                     <a>4</a>
@@ -6452,7 +6555,7 @@
                                 <b>
                                     <a>5</a>
                                     <b>8</b>
-                                    <v>230</v>
+                                    <v>234</v>
                                 </b>
                                 <b>
                                     <a>8</a>
@@ -6502,11 +6605,11 @@
                                 </b>
                                 <b>
                                     <a>24</a>
-                                    <b>35</b>
+                                    <b>34</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>40</a>
+                                    <a>39</a>
                                     <b>63</b>
                                     <v>3</v>
                                 </b>
@@ -6516,13 +6619,13 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>314</a>
-                                    <b>1043</b>
+                                    <a>318</a>
+                                    <b>1062</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>2359</a>
-                                    <b>2524</b>
+                                    <a>2389</a>
+                                    <b>2550</b>
                                     <v>2</v>
                                 </b>
                             </bs>
@@ -6568,11 +6671,11 @@
                                 </b>
                                 <b>
                                     <a>24</a>
-                                    <b>35</b>
+                                    <b>34</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>40</a>
+                                    <a>39</a>
                                     <b>63</b>
                                     <v>3</v>
                                 </b>
@@ -6582,13 +6685,13 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>314</a>
-                                    <b>1043</b>
+                                    <a>318</a>
+                                    <b>1062</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>2359</a>
-                                    <b>2524</b>
+                                    <a>2389</a>
+                                    <b>2550</b>
                                     <v>2</v>
                                 </b>
                             </bs>
@@ -6605,7 +6708,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>7535</v>
+                                    <v>7615</v>
                                 </b>
                             </bs>
                         </hist>
@@ -6621,7 +6724,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>7535</v>
+                                    <v>7615</v>
                                 </b>
                             </bs>
                         </hist>
@@ -6631,26 +6734,26 @@
         </relation>
         <relation>
             <name>ruby_begin_def</name>
-            <cardinality>2523</cardinality>
+            <cardinality>2549</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>2523</v>
+                    <v>2549</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_binary_def</name>
-            <cardinality>67730</cardinality>
+            <cardinality>68619</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>67730</v>
+                    <v>68619</v>
                 </e>
                 <e>
                     <k>left</k>
-                    <v>67730</v>
+                    <v>68619</v>
                 </e>
                 <e>
                     <k>operator</k>
@@ -6658,7 +6761,7 @@
                 </e>
                 <e>
                     <k>right</k>
-                    <v>67730</v>
+                    <v>68619</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -6672,7 +6775,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>67730</v>
+                                    <v>68619</v>
                                 </b>
                             </bs>
                         </hist>
@@ -6688,7 +6791,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>67730</v>
+                                    <v>68619</v>
                                 </b>
                             </bs>
                         </hist>
@@ -6704,7 +6807,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>67730</v>
+                                    <v>68619</v>
                                 </b>
                             </bs>
                         </hist>
@@ -6720,7 +6823,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>67730</v>
+                                    <v>68619</v>
                                 </b>
                             </bs>
                         </hist>
@@ -6736,7 +6839,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>67730</v>
+                                    <v>68619</v>
                                 </b>
                             </bs>
                         </hist>
@@ -6752,7 +6855,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>67730</v>
+                                    <v>68619</v>
                                 </b>
                             </bs>
                         </hist>
@@ -6766,68 +6869,68 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>155</a>
-                                    <b>179</b>
+                                    <a>157</a>
+                                    <b>178</b>
                                     <v>2</v>
                                 </b>
                                 <b>
                                     <a>231</a>
-                                    <b>369</b>
+                                    <b>378</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>474</a>
-                                    <b>559</b>
+                                    <a>491</a>
+                                    <b>576</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>603</a>
-                                    <b>666</b>
+                                    <a>622</a>
+                                    <b>632</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>749</a>
-                                    <b>813</b>
+                                    <a>758</a>
+                                    <b>836</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>949</a>
-                                    <b>969</b>
+                                    <a>956</a>
+                                    <b>970</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>1000</a>
-                                    <b>1010</b>
+                                    <a>1011</a>
+                                    <b>1018</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>1248</a>
-                                    <b>1317</b>
+                                    <a>1182</a>
+                                    <b>1258</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>1348</a>
-                                    <b>1633</b>
+                                    <a>1332</a>
+                                    <b>1732</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>1820</a>
-                                    <b>1968</b>
+                                    <a>1804</a>
+                                    <b>2211</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>2381</a>
-                                    <b>3287</b>
+                                    <a>2409</a>
+                                    <b>3329</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>6116</a>
-                                    <b>6739</b>
+                                    <a>6173</a>
+                                    <b>6848</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>31159</a>
-                                    <b>31160</b>
+                                    <a>31539</a>
+                                    <b>31540</b>
                                     <v>1</v>
                                 </b>
                             </bs>
@@ -6842,68 +6945,68 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>155</a>
-                                    <b>179</b>
+                                    <a>157</a>
+                                    <b>178</b>
                                     <v>2</v>
                                 </b>
                                 <b>
                                     <a>231</a>
-                                    <b>369</b>
+                                    <b>378</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>474</a>
-                                    <b>559</b>
+                                    <a>491</a>
+                                    <b>576</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>603</a>
-                                    <b>666</b>
+                                    <a>622</a>
+                                    <b>632</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>749</a>
-                                    <b>813</b>
+                                    <a>758</a>
+                                    <b>836</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>949</a>
-                                    <b>969</b>
+                                    <a>956</a>
+                                    <b>970</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>1000</a>
-                                    <b>1010</b>
+                                    <a>1011</a>
+                                    <b>1018</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>1248</a>
-                                    <b>1317</b>
+                                    <a>1182</a>
+                                    <b>1258</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>1348</a>
-                                    <b>1633</b>
+                                    <a>1332</a>
+                                    <b>1732</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>1820</a>
-                                    <b>1968</b>
+                                    <a>1804</a>
+                                    <b>2211</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>2381</a>
-                                    <b>3287</b>
+                                    <a>2409</a>
+                                    <b>3329</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>6116</a>
-                                    <b>6739</b>
+                                    <a>6173</a>
+                                    <b>6848</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>31159</a>
-                                    <b>31160</b>
+                                    <a>31539</a>
+                                    <b>31540</b>
                                     <v>1</v>
                                 </b>
                             </bs>
@@ -6918,68 +7021,68 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>155</a>
-                                    <b>179</b>
+                                    <a>157</a>
+                                    <b>178</b>
                                     <v>2</v>
                                 </b>
                                 <b>
                                     <a>231</a>
-                                    <b>369</b>
+                                    <b>378</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>474</a>
-                                    <b>559</b>
+                                    <a>491</a>
+                                    <b>576</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>603</a>
-                                    <b>666</b>
+                                    <a>622</a>
+                                    <b>632</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>749</a>
-                                    <b>813</b>
+                                    <a>758</a>
+                                    <b>836</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>949</a>
-                                    <b>969</b>
+                                    <a>956</a>
+                                    <b>970</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>1000</a>
-                                    <b>1010</b>
+                                    <a>1011</a>
+                                    <b>1018</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>1248</a>
-                                    <b>1317</b>
+                                    <a>1182</a>
+                                    <b>1258</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>1348</a>
-                                    <b>1633</b>
+                                    <a>1332</a>
+                                    <b>1732</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>1820</a>
-                                    <b>1968</b>
+                                    <a>1804</a>
+                                    <b>2211</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>2381</a>
-                                    <b>3287</b>
+                                    <a>2409</a>
+                                    <b>3329</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>6116</a>
-                                    <b>6739</b>
+                                    <a>6173</a>
+                                    <b>6848</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>31159</a>
-                                    <b>31160</b>
+                                    <a>31539</a>
+                                    <b>31540</b>
                                     <v>1</v>
                                 </b>
                             </bs>
@@ -6996,7 +7099,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>67730</v>
+                                    <v>68619</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7012,7 +7115,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>67730</v>
+                                    <v>68619</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7028,7 +7131,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>67730</v>
+                                    <v>68619</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7038,15 +7141,15 @@
         </relation>
         <relation>
             <name>ruby_block_argument_child</name>
-            <cardinality>6050</cardinality>
+            <cardinality>6115</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_block_argument</k>
-                    <v>6050</v>
+                    <v>6115</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>6050</v>
+                    <v>6115</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -7060,7 +7163,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6050</v>
+                                    <v>6115</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7076,7 +7179,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6050</v>
+                                    <v>6115</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7086,36 +7189,32 @@
         </relation>
         <relation>
             <name>ruby_block_argument_def</name>
-            <cardinality>6050</cardinality>
+            <cardinality>6115</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>6050</v>
+                    <v>6115</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
-            <name>ruby_block_child</name>
-            <cardinality>97203</cardinality>
+            <name>ruby_block_body</name>
+            <cardinality>97983</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_block</k>
-                    <v>97060</v>
+                    <v>97983</v>
                 </e>
                 <e>
-                    <k>index</k>
-                    <v>51</v>
-                </e>
-                <e>
-                    <k>child</k>
-                    <v>97203</v>
+                    <k>body</k>
+                    <v>97983</v>
                 </e>
             </columnsizes>
             <dependencies>
                 <dep>
                     <src>ruby_block</src>
-                    <trg>index</trg>
+                    <trg>body</trg>
                     <val>
                         <hist>
                             <budget>12</budget>
@@ -7123,92 +7222,14 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>96969</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>5</b>
-                                    <v>90</v>
+                                    <v>97983</v>
                                 </b>
                             </bs>
                         </hist>
                     </val>
                 </dep>
                 <dep>
-                    <src>ruby_block</src>
-                    <trg>child</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>96969</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>5</b>
-                                    <v>90</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>index</src>
-                    <trg>ruby_block</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>25</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>8</b>
-                                    <v>12</v>
-                                </b>
-                                <b>
-                                    <a>7474</a>
-                                    <b>7475</b>
-                                    <v>12</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>index</src>
-                    <trg>child</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>25</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>8</b>
-                                    <v>12</v>
-                                </b>
-                                <b>
-                                    <a>7474</a>
-                                    <b>7475</b>
-                                    <v>12</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>child</src>
+                    <src>body</src>
                     <trg>ruby_block</trg>
                     <val>
                         <hist>
@@ -7217,23 +7238,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>97203</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>child</src>
-                    <trg>index</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>97203</v>
+                                    <v>97983</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7242,38 +7247,195 @@
             </dependencies>
         </relation>
         <relation>
-            <name>ruby_block_def</name>
-            <cardinality>97359</cardinality>
+            <name>ruby_block_body_child</name>
+            <cardinality>98126</cardinality>
+            <columnsizes>
+                <e>
+                    <k>ruby_block_body</k>
+                    <v>97983</v>
+                </e>
+                <e>
+                    <k>index</k>
+                    <v>52</v>
+                </e>
+                <e>
+                    <k>child</k>
+                    <v>98126</v>
+                </e>
+            </columnsizes>
+            <dependencies>
+                <dep>
+                    <src>ruby_block_body</src>
+                    <trg>index</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>97892</v>
+                                </b>
+                                <b>
+                                    <a>2</a>
+                                    <b>5</b>
+                                    <v>91</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>ruby_block_body</src>
+                    <trg>child</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>97892</v>
+                                </b>
+                                <b>
+                                    <a>2</a>
+                                    <b>5</b>
+                                    <v>91</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>index</src>
+                    <trg>ruby_block_body</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>2</a>
+                                    <b>3</b>
+                                    <v>26</v>
+                                </b>
+                                <b>
+                                    <a>7</a>
+                                    <b>8</b>
+                                    <v>13</v>
+                                </b>
+                                <b>
+                                    <a>7534</a>
+                                    <b>7535</b>
+                                    <v>13</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>index</src>
+                    <trg>child</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>2</a>
+                                    <b>3</b>
+                                    <v>26</v>
+                                </b>
+                                <b>
+                                    <a>7</a>
+                                    <b>8</b>
+                                    <v>13</v>
+                                </b>
+                                <b>
+                                    <a>7534</a>
+                                    <b>7535</b>
+                                    <v>13</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>child</src>
+                    <trg>ruby_block_body</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>98126</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>child</src>
+                    <trg>index</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>98126</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+            </dependencies>
+        </relation>
+        <relation>
+            <name>ruby_block_body_def</name>
+            <cardinality>97983</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>97359</v>
+                    <v>97983</v>
+                </e>
+            </columnsizes>
+            <dependencies/>
+        </relation>
+        <relation>
+            <name>ruby_block_def</name>
+            <cardinality>98296</cardinality>
+            <columnsizes>
+                <e>
+                    <k>id</k>
+                    <v>98296</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_block_parameter_def</name>
-            <cardinality>2410</cardinality>
+            <cardinality>2442</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>2410</v>
+                    <v>2442</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_block_parameter_name</name>
-            <cardinality>2410</cardinality>
+            <cardinality>2442</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_block_parameter</k>
-                    <v>2410</v>
+                    <v>2442</v>
                 </e>
                 <e>
                     <k>name</k>
-                    <v>2410</v>
+                    <v>2442</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -7287,7 +7449,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2410</v>
+                                    <v>2442</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7303,7 +7465,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2410</v>
+                                    <v>2442</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7313,15 +7475,15 @@
         </relation>
         <relation>
             <name>ruby_block_parameters</name>
-            <cardinality>10459</cardinality>
+            <cardinality>10539</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_block</k>
-                    <v>10459</v>
+                    <v>10539</v>
                 </e>
                 <e>
                     <k>parameters</k>
-                    <v>10459</v>
+                    <v>10539</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -7335,7 +7497,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>10459</v>
+                                    <v>10539</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7351,7 +7513,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>10459</v>
+                                    <v>10539</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7361,11 +7523,11 @@
         </relation>
         <relation>
             <name>ruby_block_parameters_child</name>
-            <cardinality>27190</cardinality>
+            <cardinality>27656</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_block_parameters</k>
-                    <v>23336</v>
+                    <v>23772</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -7373,7 +7535,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>27190</v>
+                    <v>27656</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -7387,17 +7549,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>19964</v>
+                                    <v>20371</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>3022</v>
+                                    <v>3053</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>6</b>
-                                    <v>349</v>
+                                    <v>347</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7413,17 +7575,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>19964</v>
+                                    <v>20371</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>3022</v>
+                                    <v>3053</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>6</b>
-                                    <v>349</v>
+                                    <v>347</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7437,28 +7599,28 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>9</a>
-                                    <b>10</b>
+                                    <a>10</a>
+                                    <b>11</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>33</a>
-                                    <b>34</b>
+                                    <a>34</a>
+                                    <b>35</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>111</a>
-                                    <b>112</b>
+                                    <a>112</a>
+                                    <b>113</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>1070</a>
-                                    <b>1071</b>
+                                    <a>1097</a>
+                                    <b>1098</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>7405</a>
-                                    <b>7406</b>
+                                    <a>7669</a>
+                                    <b>7670</b>
                                     <v>3</v>
                                 </b>
                             </bs>
@@ -7473,28 +7635,28 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>9</a>
-                                    <b>10</b>
+                                    <a>10</a>
+                                    <b>11</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>33</a>
-                                    <b>34</b>
+                                    <a>34</a>
+                                    <b>35</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>111</a>
-                                    <b>112</b>
+                                    <a>112</a>
+                                    <b>113</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>1070</a>
-                                    <b>1071</b>
+                                    <a>1097</a>
+                                    <b>1098</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>7405</a>
-                                    <b>7406</b>
+                                    <a>7669</a>
+                                    <b>7670</b>
                                     <v>3</v>
                                 </b>
                             </bs>
@@ -7511,7 +7673,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>27190</v>
+                                    <v>27656</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7527,7 +7689,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>27190</v>
+                                    <v>27656</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7537,11 +7699,11 @@
         </relation>
         <relation>
             <name>ruby_block_parameters_def</name>
-            <cardinality>23336</cardinality>
+            <cardinality>23772</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>23336</v>
+                    <v>23772</v>
                 </e>
             </columnsizes>
             <dependencies/>
@@ -7683,16 +7845,323 @@
             </dependencies>
         </relation>
         <relation>
-            <name>ruby_break_child</name>
-            <cardinality>350</cardinality>
+            <name>ruby_body_statement_child</name>
+            <cardinality>606175</cardinality>
             <columnsizes>
                 <e>
-                    <k>ruby_break</k>
-                    <v>350</v>
+                    <k>ruby_body_statement</k>
+                    <v>195703</v>
+                </e>
+                <e>
+                    <k>index</k>
+                    <v>1103</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>350</v>
+                    <v>606175</v>
+                </e>
+            </columnsizes>
+            <dependencies>
+                <dep>
+                    <src>ruby_body_statement</src>
+                    <trg>index</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>89956</v>
+                                </b>
+                                <b>
+                                    <a>2</a>
+                                    <b>3</b>
+                                    <v>35812</v>
+                                </b>
+                                <b>
+                                    <a>3</a>
+                                    <b>4</b>
+                                    <v>23304</v>
+                                </b>
+                                <b>
+                                    <a>4</a>
+                                    <b>5</b>
+                                    <v>14659</v>
+                                </b>
+                                <b>
+                                    <a>5</a>
+                                    <b>7</b>
+                                    <v>15433</v>
+                                </b>
+                                <b>
+                                    <a>7</a>
+                                    <b>22</b>
+                                    <v>14696</v>
+                                </b>
+                                <b>
+                                    <a>22</a>
+                                    <b>357</b>
+                                    <v>1841</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>ruby_body_statement</src>
+                    <trg>child</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>89956</v>
+                                </b>
+                                <b>
+                                    <a>2</a>
+                                    <b>3</b>
+                                    <v>35812</v>
+                                </b>
+                                <b>
+                                    <a>3</a>
+                                    <b>4</b>
+                                    <v>23304</v>
+                                </b>
+                                <b>
+                                    <a>4</a>
+                                    <b>5</b>
+                                    <v>14659</v>
+                                </b>
+                                <b>
+                                    <a>5</a>
+                                    <b>7</b>
+                                    <v>15433</v>
+                                </b>
+                                <b>
+                                    <a>7</a>
+                                    <b>22</b>
+                                    <v>14696</v>
+                                </b>
+                                <b>
+                                    <a>22</a>
+                                    <b>357</b>
+                                    <v>1841</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>index</src>
+                    <trg>ruby_body_statement</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>61</v>
+                                </b>
+                                <b>
+                                    <a>2</a>
+                                    <b>3</b>
+                                    <v>102</v>
+                                </b>
+                                <b>
+                                    <a>3</a>
+                                    <b>4</b>
+                                    <v>77</v>
+                                </b>
+                                <b>
+                                    <a>4</a>
+                                    <b>5</b>
+                                    <v>111</v>
+                                </b>
+                                <b>
+                                    <a>5</a>
+                                    <b>7</b>
+                                    <v>83</v>
+                                </b>
+                                <b>
+                                    <a>7</a>
+                                    <b>10</b>
+                                    <v>74</v>
+                                </b>
+                                <b>
+                                    <a>10</a>
+                                    <b>13</b>
+                                    <v>92</v>
+                                </b>
+                                <b>
+                                    <a>13</a>
+                                    <b>22</b>
+                                    <v>86</v>
+                                </b>
+                                <b>
+                                    <a>22</a>
+                                    <b>39</b>
+                                    <v>83</v>
+                                </b>
+                                <b>
+                                    <a>40</a>
+                                    <b>66</b>
+                                    <v>83</v>
+                                </b>
+                                <b>
+                                    <a>68</a>
+                                    <b>128</b>
+                                    <v>83</v>
+                                </b>
+                                <b>
+                                    <a>130</a>
+                                    <b>418</b>
+                                    <v>83</v>
+                                </b>
+                                <b>
+                                    <a>456</a>
+                                    <b>63135</b>
+                                    <v>77</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>index</src>
+                    <trg>child</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>61</v>
+                                </b>
+                                <b>
+                                    <a>2</a>
+                                    <b>3</b>
+                                    <v>102</v>
+                                </b>
+                                <b>
+                                    <a>3</a>
+                                    <b>4</b>
+                                    <v>77</v>
+                                </b>
+                                <b>
+                                    <a>4</a>
+                                    <b>5</b>
+                                    <v>111</v>
+                                </b>
+                                <b>
+                                    <a>5</a>
+                                    <b>7</b>
+                                    <v>83</v>
+                                </b>
+                                <b>
+                                    <a>7</a>
+                                    <b>10</b>
+                                    <v>74</v>
+                                </b>
+                                <b>
+                                    <a>10</a>
+                                    <b>13</b>
+                                    <v>92</v>
+                                </b>
+                                <b>
+                                    <a>13</a>
+                                    <b>22</b>
+                                    <v>86</v>
+                                </b>
+                                <b>
+                                    <a>22</a>
+                                    <b>39</b>
+                                    <v>83</v>
+                                </b>
+                                <b>
+                                    <a>40</a>
+                                    <b>66</b>
+                                    <v>83</v>
+                                </b>
+                                <b>
+                                    <a>68</a>
+                                    <b>128</b>
+                                    <v>83</v>
+                                </b>
+                                <b>
+                                    <a>130</a>
+                                    <b>418</b>
+                                    <v>83</v>
+                                </b>
+                                <b>
+                                    <a>456</a>
+                                    <b>63135</b>
+                                    <v>77</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>child</src>
+                    <trg>ruby_body_statement</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>606175</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+                <dep>
+                    <src>child</src>
+                    <trg>index</trg>
+                    <val>
+                        <hist>
+                            <budget>12</budget>
+                            <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>606175</v>
+                                </b>
+                            </bs>
+                        </hist>
+                    </val>
+                </dep>
+            </dependencies>
+        </relation>
+        <relation>
+            <name>ruby_body_statement_def</name>
+            <cardinality>201560</cardinality>
+            <columnsizes>
+                <e>
+                    <k>id</k>
+                    <v>201560</v>
+                </e>
+            </columnsizes>
+            <dependencies/>
+        </relation>
+        <relation>
+            <name>ruby_break_child</name>
+            <cardinality>354</cardinality>
+            <columnsizes>
+                <e>
+                    <k>ruby_break</k>
+                    <v>354</v>
+                </e>
+                <e>
+                    <k>child</k>
+                    <v>354</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -7706,7 +8175,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>350</v>
+                                    <v>354</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7722,7 +8191,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>350</v>
+                                    <v>354</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7732,26 +8201,26 @@
         </relation>
         <relation>
             <name>ruby_break_def</name>
-            <cardinality>3338</cardinality>
+            <cardinality>3355</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>3338</v>
+                    <v>3355</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_call_arguments</name>
-            <cardinality>661504</cardinality>
+            <cardinality>667146</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_call</k>
-                    <v>661504</v>
+                    <v>667146</v>
                 </e>
                 <e>
                     <k>arguments</k>
-                    <v>661504</v>
+                    <v>667146</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -7765,7 +8234,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>661504</v>
+                                    <v>667146</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7781,7 +8250,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>661504</v>
+                                    <v>667146</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7791,15 +8260,15 @@
         </relation>
         <relation>
             <name>ruby_call_block</name>
-            <cardinality>232457</cardinality>
+            <cardinality>233892</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_call</k>
-                    <v>232457</v>
+                    <v>233892</v>
                 </e>
                 <e>
                     <k>block</k>
-                    <v>232457</v>
+                    <v>233892</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -7813,7 +8282,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>232457</v>
+                                    <v>233892</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7829,7 +8298,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>232457</v>
+                                    <v>233892</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7839,26 +8308,26 @@
         </relation>
         <relation>
             <name>ruby_call_def</name>
-            <cardinality>965401</cardinality>
+            <cardinality>974897</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>965401</v>
+                    <v>974897</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_call_method</name>
-            <cardinality>965401</cardinality>
+            <cardinality>974897</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_call</k>
-                    <v>965401</v>
+                    <v>974897</v>
                 </e>
                 <e>
                     <k>method</k>
-                    <v>965401</v>
+                    <v>974897</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -7872,7 +8341,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>965401</v>
+                                    <v>974897</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7888,7 +8357,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>965401</v>
+                                    <v>974897</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7898,15 +8367,15 @@
         </relation>
         <relation>
             <name>ruby_call_operator</name>
-            <cardinality>540944</cardinality>
+            <cardinality>548273</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_call</k>
-                    <v>540944</v>
+                    <v>548273</v>
                 </e>
                 <e>
                     <k>operator</k>
-                    <v>540944</v>
+                    <v>548273</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -7920,7 +8389,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>540944</v>
+                                    <v>548273</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7936,7 +8405,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>540944</v>
+                                    <v>548273</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7946,15 +8415,15 @@
         </relation>
         <relation>
             <name>ruby_call_receiver</name>
-            <cardinality>540944</cardinality>
+            <cardinality>548273</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_call</k>
-                    <v>540944</v>
+                    <v>548273</v>
                 </e>
                 <e>
                     <k>receiver</k>
-                    <v>540944</v>
+                    <v>548273</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -7968,7 +8437,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>540944</v>
+                                    <v>548273</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7984,7 +8453,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>540944</v>
+                                    <v>548273</v>
                                 </b>
                             </bs>
                         </hist>
@@ -7994,19 +8463,19 @@
         </relation>
         <relation>
             <name>ruby_case_child</name>
-            <cardinality>4141</cardinality>
+            <cardinality>4153</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_case__</k>
-                    <v>1219</v>
+                    <v>1224</v>
                 </e>
                 <e>
                     <k>index</k>
-                    <v>69</v>
+                    <v>68</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>4141</v>
+                    <v>4153</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -8025,12 +8494,12 @@
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>315</v>
+                                    <v>316</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>504</v>
+                                    <v>511</v>
                                 </b>
                                 <b>
                                     <a>4</a>
@@ -8040,12 +8509,12 @@
                                 <b>
                                     <a>5</a>
                                     <b>7</b>
-                                    <v>107</v>
+                                    <v>105</v>
                                 </b>
                                 <b>
                                     <a>7</a>
                                     <b>23</b>
-                                    <v>66</v>
+                                    <v>65</v>
                                 </b>
                             </bs>
                         </hist>
@@ -8066,12 +8535,12 @@
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>315</v>
+                                    <v>316</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>504</v>
+                                    <v>511</v>
                                 </b>
                                 <b>
                                     <a>4</a>
@@ -8081,12 +8550,12 @@
                                 <b>
                                     <a>5</a>
                                     <b>7</b>
-                                    <v>107</v>
+                                    <v>105</v>
                                 </b>
                                 <b>
                                     <a>7</a>
                                     <b>23</b>
-                                    <v>66</v>
+                                    <v>65</v>
                                 </b>
                             </bs>
                         </hist>
@@ -8102,12 +8571,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>25</v>
+                                    <v>21</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>6</v>
+                                    <v>9</v>
                                 </b>
                                 <b>
                                     <a>3</a>
@@ -8125,18 +8594,18 @@
                                     <v>6</v>
                                 </b>
                                 <b>
-                                    <a>32</a>
+                                    <a>34</a>
                                     <b>56</b>
                                     <v>6</v>
                                 </b>
                                 <b>
-                                    <a>115</a>
-                                    <b>276</b>
+                                    <a>116</a>
+                                    <b>282</b>
                                     <v>6</v>
                                 </b>
                                 <b>
-                                    <a>375</a>
-                                    <b>388</b>
+                                    <a>383</a>
+                                    <b>396</b>
                                     <v>6</v>
                                 </b>
                             </bs>
@@ -8153,12 +8622,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>25</v>
+                                    <v>21</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>6</v>
+                                    <v>9</v>
                                 </b>
                                 <b>
                                     <a>3</a>
@@ -8176,18 +8645,18 @@
                                     <v>6</v>
                                 </b>
                                 <b>
-                                    <a>32</a>
+                                    <a>34</a>
                                     <b>56</b>
                                     <v>6</v>
                                 </b>
                                 <b>
-                                    <a>115</a>
-                                    <b>276</b>
+                                    <a>116</a>
+                                    <b>282</b>
                                     <v>6</v>
                                 </b>
                                 <b>
-                                    <a>375</a>
-                                    <b>388</b>
+                                    <a>383</a>
+                                    <b>396</b>
                                     <v>6</v>
                                 </b>
                             </bs>
@@ -8204,7 +8673,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>4141</v>
+                                    <v>4153</v>
                                 </b>
                             </bs>
                         </hist>
@@ -8220,7 +8689,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>4141</v>
+                                    <v>4153</v>
                                 </b>
                             </bs>
                         </hist>
@@ -8230,11 +8699,11 @@
         </relation>
         <relation>
             <name>ruby_case_def</name>
-            <cardinality>1219</cardinality>
+            <cardinality>1224</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>1219</v>
+                    <v>1224</v>
                 </e>
             </columnsizes>
             <dependencies/>
@@ -8423,15 +8892,15 @@
         </relation>
         <relation>
             <name>ruby_case_value</name>
-            <cardinality>1178</cardinality>
+            <cardinality>1184</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_case__</k>
-                    <v>1178</v>
+                    <v>1184</v>
                 </e>
                 <e>
                     <k>value</k>
-                    <v>1178</v>
+                    <v>1184</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -8445,7 +8914,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1178</v>
+                                    <v>1184</v>
                                 </b>
                             </bs>
                         </hist>
@@ -8461,7 +8930,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1178</v>
+                                    <v>1184</v>
                                 </b>
                             </bs>
                         </hist>
@@ -8471,11 +8940,11 @@
         </relation>
         <relation>
             <name>ruby_chained_string_child</name>
-            <cardinality>3353</cardinality>
+            <cardinality>3329</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_chained_string</k>
-                    <v>885</v>
+                    <v>877</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -8483,7 +8952,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>3353</v>
+                    <v>3329</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -8497,32 +8966,32 @@
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>302</v>
+                                    <v>291</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>195</v>
+                                    <v>201</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>135</v>
+                                    <v>133</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>6</b>
-                                    <v>122</v>
+                                    <v>123</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>8</b>
-                                    <v>66</v>
+                                    <v>65</v>
                                 </b>
                                 <b>
                                     <a>8</a>
                                     <b>13</b>
-                                    <v>63</v>
+                                    <v>61</v>
                                 </b>
                             </bs>
                         </hist>
@@ -8538,32 +9007,32 @@
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>302</v>
+                                    <v>291</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>195</v>
+                                    <v>201</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>135</v>
+                                    <v>133</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>6</b>
-                                    <v>122</v>
+                                    <v>123</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>8</b>
-                                    <v>66</v>
+                                    <v>65</v>
                                 </b>
                                 <b>
                                     <a>8</a>
                                     <b>13</b>
-                                    <v>63</v>
+                                    <v>61</v>
                                 </b>
                             </bs>
                         </hist>
@@ -8612,23 +9081,23 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>80</a>
-                                    <b>81</b>
+                                    <a>81</a>
+                                    <b>82</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>123</a>
-                                    <b>124</b>
+                                    <a>124</a>
+                                    <b>125</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>185</a>
-                                    <b>186</b>
+                                    <a>189</a>
+                                    <b>190</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>281</a>
-                                    <b>282</b>
+                                    <a>283</a>
+                                    <b>284</b>
                                     <v>6</v>
                                 </b>
                             </bs>
@@ -8678,23 +9147,23 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>80</a>
-                                    <b>81</b>
+                                    <a>81</a>
+                                    <b>82</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>123</a>
-                                    <b>124</b>
+                                    <a>124</a>
+                                    <b>125</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>185</a>
-                                    <b>186</b>
+                                    <a>189</a>
+                                    <b>190</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>281</a>
-                                    <b>282</b>
+                                    <a>283</a>
+                                    <b>284</b>
                                     <v>6</v>
                                 </b>
                             </bs>
@@ -8711,7 +9180,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3353</v>
+                                    <v>3329</v>
                                 </b>
                             </bs>
                         </hist>
@@ -8727,7 +9196,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3353</v>
+                                    <v>3329</v>
                                 </b>
                             </bs>
                         </hist>
@@ -8737,36 +9206,32 @@
         </relation>
         <relation>
             <name>ruby_chained_string_def</name>
-            <cardinality>885</cardinality>
+            <cardinality>877</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>885</v>
+                    <v>877</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
-            <name>ruby_class_child</name>
-            <cardinality>130958</cardinality>
+            <name>ruby_class_body</name>
+            <cardinality>15291</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_class</k>
-                    <v>15183</v>
+                    <v>15291</v>
                 </e>
                 <e>
-                    <k>index</k>
-                    <v>1055</v>
-                </e>
-                <e>
-                    <k>child</k>
-                    <v>130958</v>
+                    <k>body</k>
+                    <v>15291</v>
                 </e>
             </columnsizes>
             <dependencies>
                 <dep>
                     <src>ruby_class</src>
-                    <trg>index</trg>
+                    <trg>body</trg>
                     <val>
                         <hist>
                             <budget>12</budget>
@@ -8774,130 +9239,14 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3290</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>2407</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>1556</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>1263</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>6</b>
-                                    <v>961</v>
-                                </b>
-                                <b>
-                                    <a>6</a>
-                                    <b>7</b>
-                                    <v>838</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>9</b>
-                                    <v>1118</v>
-                                </b>
-                                <b>
-                                    <a>9</a>
-                                    <b>13</b>
-                                    <v>1266</v>
-                                </b>
-                                <b>
-                                    <a>13</a>
-                                    <b>21</b>
-                                    <v>1169</v>
-                                </b>
-                                <b>
-                                    <a>21</a>
-                                    <b>84</b>
-                                    <v>1143</v>
-                                </b>
-                                <b>
-                                    <a>85</a>
-                                    <b>336</b>
-                                    <v>167</v>
+                                    <v>15291</v>
                                 </b>
                             </bs>
                         </hist>
                     </val>
                 </dep>
                 <dep>
-                    <src>ruby_class</src>
-                    <trg>child</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>3290</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>2407</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>1556</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>1263</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>6</b>
-                                    <v>961</v>
-                                </b>
-                                <b>
-                                    <a>6</a>
-                                    <b>7</b>
-                                    <v>838</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>9</b>
-                                    <v>1118</v>
-                                </b>
-                                <b>
-                                    <a>9</a>
-                                    <b>13</b>
-                                    <v>1266</v>
-                                </b>
-                                <b>
-                                    <a>13</a>
-                                    <b>21</b>
-                                    <v>1169</v>
-                                </b>
-                                <b>
-                                    <a>21</a>
-                                    <b>84</b>
-                                    <v>1143</v>
-                                </b>
-                                <b>
-                                    <a>85</a>
-                                    <b>336</b>
-                                    <v>167</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>index</src>
+                    <src>body</src>
                     <trg>ruby_class</trg>
                     <val>
                         <hist>
@@ -8906,185 +9255,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>37</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>63</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>81</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>113</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>7</b>
-                                    <v>81</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>9</b>
-                                    <v>81</v>
-                                </b>
-                                <b>
-                                    <a>9</a>
-                                    <b>12</b>
-                                    <v>88</v>
-                                </b>
-                                <b>
-                                    <a>12</a>
-                                    <b>19</b>
-                                    <v>85</v>
-                                </b>
-                                <b>
-                                    <a>19</a>
-                                    <b>29</b>
-                                    <v>81</v>
-                                </b>
-                                <b>
-                                    <a>30</a>
-                                    <b>56</b>
-                                    <v>81</v>
-                                </b>
-                                <b>
-                                    <a>56</a>
-                                    <b>94</b>
-                                    <v>81</v>
-                                </b>
-                                <b>
-                                    <a>96</a>
-                                    <b>228</b>
-                                    <v>81</v>
-                                </b>
-                                <b>
-                                    <a>237</a>
-                                    <b>2116</b>
-                                    <v>81</v>
-                                </b>
-                                <b>
-                                    <a>2516</a>
-                                    <b>4819</b>
-                                    <v>12</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>index</src>
-                    <trg>child</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>37</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>63</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>81</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>113</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>7</b>
-                                    <v>81</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>9</b>
-                                    <v>81</v>
-                                </b>
-                                <b>
-                                    <a>9</a>
-                                    <b>12</b>
-                                    <v>88</v>
-                                </b>
-                                <b>
-                                    <a>12</a>
-                                    <b>19</b>
-                                    <v>85</v>
-                                </b>
-                                <b>
-                                    <a>19</a>
-                                    <b>29</b>
-                                    <v>81</v>
-                                </b>
-                                <b>
-                                    <a>30</a>
-                                    <b>56</b>
-                                    <v>81</v>
-                                </b>
-                                <b>
-                                    <a>56</a>
-                                    <b>94</b>
-                                    <v>81</v>
-                                </b>
-                                <b>
-                                    <a>96</a>
-                                    <b>228</b>
-                                    <v>81</v>
-                                </b>
-                                <b>
-                                    <a>237</a>
-                                    <b>2116</b>
-                                    <v>81</v>
-                                </b>
-                                <b>
-                                    <a>2516</a>
-                                    <b>4819</b>
-                                    <v>12</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>child</src>
-                    <trg>ruby_class</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>130958</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>child</src>
-                    <trg>index</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>130958</v>
+                                    <v>15291</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9094,15 +9265,15 @@
         </relation>
         <relation>
             <name>ruby_class_def</name>
-            <cardinality>16841</cardinality>
+            <cardinality>16946</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>16841</v>
+                    <v>16946</v>
                 </e>
                 <e>
                     <k>name</k>
-                    <v>16841</v>
+                    <v>16946</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -9116,7 +9287,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>16841</v>
+                                    <v>16946</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9132,7 +9303,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>16841</v>
+                                    <v>16946</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9142,15 +9313,15 @@
         </relation>
         <relation>
             <name>ruby_class_superclass</name>
-            <cardinality>13314</cardinality>
+            <cardinality>13378</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_class</k>
-                    <v>13314</v>
+                    <v>13378</v>
                 </e>
                 <e>
                     <k>superclass</k>
-                    <v>13314</v>
+                    <v>13378</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -9164,7 +9335,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>13314</v>
+                                    <v>13378</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9180,7 +9351,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>13314</v>
+                                    <v>13378</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9238,23 +9409,23 @@
         </relation>
         <relation>
             <name>ruby_conditional_def</name>
-            <cardinality>3464</cardinality>
+            <cardinality>3495</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>3464</v>
+                    <v>3495</v>
                 </e>
                 <e>
                     <k>alternative</k>
-                    <v>3464</v>
+                    <v>3495</v>
                 </e>
                 <e>
                     <k>condition</k>
-                    <v>3464</v>
+                    <v>3495</v>
                 </e>
                 <e>
                     <k>consequence</k>
-                    <v>3464</v>
+                    <v>3495</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -9268,7 +9439,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3464</v>
+                                    <v>3495</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9284,7 +9455,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3464</v>
+                                    <v>3495</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9300,7 +9471,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3464</v>
+                                    <v>3495</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9316,7 +9487,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3464</v>
+                                    <v>3495</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9332,7 +9503,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3464</v>
+                                    <v>3495</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9348,7 +9519,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3464</v>
+                                    <v>3495</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9364,7 +9535,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3464</v>
+                                    <v>3495</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9380,7 +9551,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3464</v>
+                                    <v>3495</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9396,7 +9567,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3464</v>
+                                    <v>3495</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9412,7 +9583,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3464</v>
+                                    <v>3495</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9428,7 +9599,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3464</v>
+                                    <v>3495</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9444,7 +9615,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3464</v>
+                                    <v>3495</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9454,19 +9625,19 @@
         </relation>
         <relation>
             <name>ruby_delimited_symbol_child</name>
-            <cardinality>1739</cardinality>
+            <cardinality>1757</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_delimited_symbol</k>
-                    <v>1257</v>
+                    <v>1264</v>
                 </e>
                 <e>
                     <k>index</k>
-                    <v>25</v>
+                    <v>24</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>1739</v>
+                    <v>1757</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -9480,17 +9651,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>939</v>
+                                    <v>936</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>245</v>
+                                    <v>254</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>9</b>
-                                    <v>72</v>
+                                    <v>74</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9506,17 +9677,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>939</v>
+                                    <v>936</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>245</v>
+                                    <v>254</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>9</b>
-                                    <v>72</v>
+                                    <v>74</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9555,18 +9726,18 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>23</a>
-                                    <b>24</b>
+                                    <a>24</a>
+                                    <b>25</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>101</a>
-                                    <b>102</b>
+                                    <a>106</a>
+                                    <b>107</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>399</a>
-                                    <b>400</b>
+                                    <a>408</a>
+                                    <b>409</b>
                                     <v>3</v>
                                 </b>
                             </bs>
@@ -9606,18 +9777,18 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>23</a>
-                                    <b>24</b>
+                                    <a>24</a>
+                                    <b>25</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>101</a>
-                                    <b>102</b>
+                                    <a>106</a>
+                                    <b>107</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>399</a>
-                                    <b>400</b>
+                                    <a>408</a>
+                                    <b>409</b>
                                     <v>3</v>
                                 </b>
                             </bs>
@@ -9634,7 +9805,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1739</v>
+                                    <v>1757</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9650,7 +9821,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1739</v>
+                                    <v>1757</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9660,11 +9831,11 @@
         </relation>
         <relation>
             <name>ruby_delimited_symbol_def</name>
-            <cardinality>1257</cardinality>
+            <cardinality>1264</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>1257</v>
+                    <v>1264</v>
                 </e>
             </columnsizes>
             <dependencies/>
@@ -9858,19 +10029,19 @@
         </relation>
         <relation>
             <name>ruby_destructured_parameter_child</name>
-            <cardinality>406</cardinality>
+            <cardinality>412</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_destructured_parameter</k>
-                    <v>198</v>
+                    <v>188</v>
                 </e>
                 <e>
                     <k>index</k>
-                    <v>12</v>
+                    <v>11</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>406</v>
+                    <v>412</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -9884,17 +10055,22 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>9</v>
+                                    <v>15</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>173</v>
+                                    <v>146</v>
                                 </b>
                                 <b>
                                     <a>3</a>
-                                    <b>5</b>
-                                    <v>15</v>
+                                    <b>4</b>
+                                    <v>18</v>
+                                </b>
+                                <b>
+                                    <a>4</a>
+                                    <b>12</b>
+                                    <v>9</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9910,17 +10086,22 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>9</v>
+                                    <v>15</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>173</v>
+                                    <v>146</v>
                                 </b>
                                 <b>
                                     <a>3</a>
-                                    <b>5</b>
-                                    <v>15</v>
+                                    <b>4</b>
+                                    <v>18</v>
+                                </b>
+                                <b>
+                                    <a>4</a>
+                                    <b>12</b>
+                                    <v>9</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9936,22 +10117,37 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3</v>
+                                    <v>1</v>
                                 </b>
                                 <b>
-                                    <a>5</a>
-                                    <b>6</b>
-                                    <v>3</v>
+                                    <a>2</a>
+                                    <b>3</b>
+                                    <v>5</v>
                                 </b>
                                 <b>
-                                    <a>60</a>
-                                    <b>61</b>
-                                    <v>3</v>
+                                    <a>4</a>
+                                    <b>5</b>
+                                    <v>1</v>
                                 </b>
                                 <b>
-                                    <a>63</a>
-                                    <b>64</b>
-                                    <v>3</v>
+                                    <a>9</a>
+                                    <b>10</b>
+                                    <v>1</v>
+                                </b>
+                                <b>
+                                    <a>27</a>
+                                    <b>28</b>
+                                    <v>1</v>
+                                </b>
+                                <b>
+                                    <a>173</a>
+                                    <b>174</b>
+                                    <v>1</v>
+                                </b>
+                                <b>
+                                    <a>188</a>
+                                    <b>189</b>
+                                    <v>1</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9967,22 +10163,37 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3</v>
+                                    <v>1</v>
                                 </b>
                                 <b>
-                                    <a>5</a>
-                                    <b>6</b>
-                                    <v>3</v>
+                                    <a>2</a>
+                                    <b>3</b>
+                                    <v>5</v>
                                 </b>
                                 <b>
-                                    <a>60</a>
-                                    <b>61</b>
-                                    <v>3</v>
+                                    <a>4</a>
+                                    <b>5</b>
+                                    <v>1</v>
                                 </b>
                                 <b>
-                                    <a>63</a>
-                                    <b>64</b>
-                                    <v>3</v>
+                                    <a>9</a>
+                                    <b>10</b>
+                                    <v>1</v>
+                                </b>
+                                <b>
+                                    <a>27</a>
+                                    <b>28</b>
+                                    <v>1</v>
+                                </b>
+                                <b>
+                                    <a>173</a>
+                                    <b>174</b>
+                                    <v>1</v>
+                                </b>
+                                <b>
+                                    <a>188</a>
+                                    <b>189</b>
+                                    <v>1</v>
                                 </b>
                             </bs>
                         </hist>
@@ -9998,7 +10209,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>406</v>
+                                    <v>412</v>
                                 </b>
                             </bs>
                         </hist>
@@ -10014,7 +10225,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>406</v>
+                                    <v>412</v>
                                 </b>
                             </bs>
                         </hist>
@@ -10034,26 +10245,22 @@
             <dependencies/>
         </relation>
         <relation>
-            <name>ruby_do_block_child</name>
-            <cardinality>395009</cardinality>
+            <name>ruby_do_block_body</name>
+            <cardinality>137963</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_do_block</k>
-                    <v>137279</v>
+                    <v>137963</v>
                 </e>
                 <e>
-                    <k>index</k>
-                    <v>935</v>
-                </e>
-                <e>
-                    <k>child</k>
-                    <v>395009</v>
+                    <k>body</k>
+                    <v>137963</v>
                 </e>
             </columnsizes>
             <dependencies>
                 <dep>
                     <src>ruby_do_block</src>
-                    <trg>index</trg>
+                    <trg>body</trg>
                     <val>
                         <hist>
                             <budget>12</budget>
@@ -10061,80 +10268,14 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>48036</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>36712</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>21583</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>10506</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>7</b>
-                                    <v>10583</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>73</b>
-                                    <v>9856</v>
+                                    <v>137963</v>
                                 </b>
                             </bs>
                         </hist>
                     </val>
                 </dep>
                 <dep>
-                    <src>ruby_do_block</src>
-                    <trg>child</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>48036</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>36712</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>21583</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>10506</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>7</b>
-                                    <v>10583</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>73</b>
-                                    <v>9856</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>index</src>
+                    <src>body</src>
                     <trg>ruby_do_block</trg>
                     <val>
                         <hist>
@@ -10143,165 +10284,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>51</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>220</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>7</b>
-                                    <v>77</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>8</b>
-                                    <v>51</v>
-                                </b>
-                                <b>
-                                    <a>8</a>
-                                    <b>11</b>
-                                    <v>77</v>
-                                </b>
-                                <b>
-                                    <a>11</a>
-                                    <b>14</b>
-                                    <v>51</v>
-                                </b>
-                                <b>
-                                    <a>14</a>
-                                    <b>18</b>
-                                    <v>77</v>
-                                </b>
-                                <b>
-                                    <a>21</a>
-                                    <b>54</b>
-                                    <v>77</v>
-                                </b>
-                                <b>
-                                    <a>62</a>
-                                    <b>142</b>
-                                    <v>77</v>
-                                </b>
-                                <b>
-                                    <a>175</a>
-                                    <b>592</b>
-                                    <v>77</v>
-                                </b>
-                                <b>
-                                    <a>759</a>
-                                    <b>6873</b>
-                                    <v>77</v>
-                                </b>
-                                <b>
-                                    <a>10571</a>
-                                    <b>10572</b>
-                                    <v>12</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>index</src>
-                    <trg>child</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>51</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>220</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>7</b>
-                                    <v>77</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>8</b>
-                                    <v>51</v>
-                                </b>
-                                <b>
-                                    <a>8</a>
-                                    <b>11</b>
-                                    <v>77</v>
-                                </b>
-                                <b>
-                                    <a>11</a>
-                                    <b>14</b>
-                                    <v>51</v>
-                                </b>
-                                <b>
-                                    <a>14</a>
-                                    <b>18</b>
-                                    <v>77</v>
-                                </b>
-                                <b>
-                                    <a>21</a>
-                                    <b>54</b>
-                                    <v>77</v>
-                                </b>
-                                <b>
-                                    <a>62</a>
-                                    <b>142</b>
-                                    <v>77</v>
-                                </b>
-                                <b>
-                                    <a>175</a>
-                                    <b>592</b>
-                                    <v>77</v>
-                                </b>
-                                <b>
-                                    <a>759</a>
-                                    <b>6873</b>
-                                    <v>77</v>
-                                </b>
-                                <b>
-                                    <a>10571</a>
-                                    <b>10572</b>
-                                    <v>12</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>child</src>
-                    <trg>ruby_do_block</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>395009</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>child</src>
-                    <trg>index</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>395009</v>
+                                    <v>137963</v>
                                 </b>
                             </bs>
                         </hist>
@@ -10311,26 +10294,26 @@
         </relation>
         <relation>
             <name>ruby_do_block_def</name>
-            <cardinality>137435</cardinality>
+            <cardinality>138119</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>137435</v>
+                    <v>138119</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_do_block_parameters</name>
-            <cardinality>15073</cardinality>
+            <cardinality>15269</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_do_block</k>
-                    <v>15073</v>
+                    <v>15269</v>
                 </e>
                 <e>
                     <k>parameters</k>
-                    <v>15073</v>
+                    <v>15269</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -10344,7 +10327,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>15073</v>
+                                    <v>15269</v>
                                 </b>
                             </bs>
                         </hist>
@@ -10360,7 +10343,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>15073</v>
+                                    <v>15269</v>
                                 </b>
                             </bs>
                         </hist>
@@ -10370,11 +10353,11 @@
         </relation>
         <relation>
             <name>ruby_do_child</name>
-            <cardinality>9177</cardinality>
+            <cardinality>9244</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_do</k>
-                    <v>1588</v>
+                    <v>1608</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -10382,7 +10365,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>9177</v>
+                    <v>9244</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -10396,27 +10379,27 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>324</v>
+                                    <v>331</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>273</v>
+                                    <v>279</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>191</v>
+                                    <v>194</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>77</v>
+                                    <v>78</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>7</b>
-                                    <v>104</v>
+                                    <v>106</v>
                                 </b>
                                 <b>
                                     <a>7</a>
@@ -10431,12 +10414,12 @@
                                 <b>
                                     <a>9</a>
                                     <b>14</b>
-                                    <v>117</v>
+                                    <v>115</v>
                                 </b>
                                 <b>
                                     <a>14</a>
                                     <b>18</b>
-                                    <v>121</v>
+                                    <v>124</v>
                                 </b>
                                 <b>
                                     <a>18</a>
@@ -10457,27 +10440,27 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>324</v>
+                                    <v>331</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>273</v>
+                                    <v>279</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>191</v>
+                                    <v>194</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>77</v>
+                                    <v>78</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>7</b>
-                                    <v>104</v>
+                                    <v>106</v>
                                 </b>
                                 <b>
                                     <a>7</a>
@@ -10492,12 +10475,12 @@
                                 <b>
                                     <a>9</a>
                                     <b>14</b>
-                                    <v>117</v>
+                                    <v>115</v>
                                 </b>
                                 <b>
                                     <a>14</a>
                                     <b>18</b>
-                                    <v>121</v>
+                                    <v>124</v>
                                 </b>
                                 <b>
                                     <a>18</a>
@@ -10537,12 +10520,12 @@
                                 </b>
                                 <b>
                                     <a>6</a>
-                                    <b>59</b>
+                                    <b>61</b>
                                     <v>16</v>
                                 </b>
                                 <b>
-                                    <a>112</a>
-                                    <b>1589</b>
+                                    <a>114</a>
+                                    <b>1609</b>
                                     <v>15</v>
                                 </b>
                             </bs>
@@ -10578,12 +10561,12 @@
                                 </b>
                                 <b>
                                     <a>6</a>
-                                    <b>59</b>
+                                    <b>61</b>
                                     <v>16</v>
                                 </b>
                                 <b>
-                                    <a>112</a>
-                                    <b>1589</b>
+                                    <a>114</a>
+                                    <b>1609</b>
                                     <v>15</v>
                                 </b>
                             </bs>
@@ -10600,7 +10583,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>9177</v>
+                                    <v>9244</v>
                                 </b>
                             </bs>
                         </hist>
@@ -10616,7 +10599,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>9177</v>
+                                    <v>9244</v>
                                 </b>
                             </bs>
                         </hist>
@@ -10626,22 +10609,22 @@
         </relation>
         <relation>
             <name>ruby_do_def</name>
-            <cardinality>1610</cardinality>
+            <cardinality>1632</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>1610</v>
+                    <v>1632</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_element_reference_child</name>
-            <cardinality>82398</cardinality>
+            <cardinality>83029</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_element_reference</k>
-                    <v>82228</v>
+                    <v>82863</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -10649,7 +10632,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>82398</v>
+                    <v>83029</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -10663,12 +10646,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>82059</v>
+                                    <v>82697</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>169</v>
+                                    <v>166</v>
                                 </b>
                             </bs>
                         </hist>
@@ -10684,12 +10667,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>82059</v>
+                                    <v>82697</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>169</v>
+                                    <v>166</v>
                                 </b>
                             </bs>
                         </hist>
@@ -10708,8 +10691,8 @@
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>27674</a>
-                                    <b>27675</b>
+                                    <a>28403</a>
+                                    <b>28404</b>
                                     <v>2</v>
                                 </b>
                             </bs>
@@ -10729,8 +10712,8 @@
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>27674</a>
-                                    <b>27675</b>
+                                    <a>28403</a>
+                                    <b>28404</b>
                                     <v>2</v>
                                 </b>
                             </bs>
@@ -10747,7 +10730,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>82398</v>
+                                    <v>83029</v>
                                 </b>
                             </bs>
                         </hist>
@@ -10763,7 +10746,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>82398</v>
+                                    <v>83029</v>
                                 </b>
                             </bs>
                         </hist>
@@ -10773,15 +10756,15 @@
         </relation>
         <relation>
             <name>ruby_element_reference_def</name>
-            <cardinality>82234</cardinality>
+            <cardinality>82869</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>82234</v>
+                    <v>82869</v>
                 </e>
                 <e>
                     <k>object</k>
-                    <v>82234</v>
+                    <v>82869</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -10795,7 +10778,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>82234</v>
+                                    <v>82869</v>
                                 </b>
                             </bs>
                         </hist>
@@ -10811,7 +10794,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>82234</v>
+                                    <v>82869</v>
                                 </b>
                             </bs>
                         </hist>
@@ -10821,11 +10804,11 @@
         </relation>
         <relation>
             <name>ruby_else_child</name>
-            <cardinality>8802</cardinality>
+            <cardinality>9054</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_else</k>
-                    <v>6923</v>
+                    <v>7126</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -10833,7 +10816,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>8802</v>
+                    <v>9054</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -10847,17 +10830,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>5833</v>
+                                    <v>6004</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>687</v>
+                                    <v>703</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>12</b>
-                                    <v>403</v>
+                                    <v>418</v>
                                 </b>
                             </bs>
                         </hist>
@@ -10873,17 +10856,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>5833</v>
+                                    <v>6004</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>687</v>
+                                    <v>703</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>12</b>
-                                    <v>403</v>
+                                    <v>418</v>
                                 </b>
                             </bs>
                         </hist>
@@ -10927,28 +10910,28 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>29</a>
-                                    <b>30</b>
+                                    <a>28</a>
+                                    <b>29</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>55</a>
-                                    <b>56</b>
+                                    <a>59</a>
+                                    <b>60</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>128</a>
-                                    <b>129</b>
+                                    <a>135</a>
+                                    <b>136</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>346</a>
-                                    <b>347</b>
+                                    <a>362</a>
+                                    <b>363</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>2197</a>
-                                    <b>2198</b>
+                                    <a>2299</a>
+                                    <b>2300</b>
                                     <v>3</v>
                                 </b>
                             </bs>
@@ -10993,28 +10976,28 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>29</a>
-                                    <b>30</b>
+                                    <a>28</a>
+                                    <b>29</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>55</a>
-                                    <b>56</b>
+                                    <a>59</a>
+                                    <b>60</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>128</a>
-                                    <b>129</b>
+                                    <a>135</a>
+                                    <b>136</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>346</a>
-                                    <b>347</b>
+                                    <a>362</a>
+                                    <b>363</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>2197</a>
-                                    <b>2198</b>
+                                    <a>2299</a>
+                                    <b>2300</b>
                                     <v>3</v>
                                 </b>
                             </bs>
@@ -11031,7 +11014,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>8802</v>
+                                    <v>9054</v>
                                 </b>
                             </bs>
                         </hist>
@@ -11047,7 +11030,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>8802</v>
+                                    <v>9054</v>
                                 </b>
                             </bs>
                         </hist>
@@ -11057,26 +11040,26 @@
         </relation>
         <relation>
             <name>ruby_else_def</name>
-            <cardinality>6933</cardinality>
+            <cardinality>7138</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>6933</v>
+                    <v>7138</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_elsif_alternative</name>
-            <cardinality>903</cardinality>
+            <cardinality>936</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_elsif</k>
-                    <v>903</v>
+                    <v>936</v>
                 </e>
                 <e>
                     <k>alternative</k>
-                    <v>903</v>
+                    <v>936</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -11090,7 +11073,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>903</v>
+                                    <v>936</v>
                                 </b>
                             </bs>
                         </hist>
@@ -11106,7 +11089,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>903</v>
+                                    <v>936</v>
                                 </b>
                             </bs>
                         </hist>
@@ -11116,15 +11099,15 @@
         </relation>
         <relation>
             <name>ruby_elsif_consequence</name>
-            <cardinality>1589</cardinality>
+            <cardinality>1572</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_elsif</k>
-                    <v>1589</v>
+                    <v>1572</v>
                 </e>
                 <e>
                     <k>consequence</k>
-                    <v>1589</v>
+                    <v>1572</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -11138,7 +11121,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1589</v>
+                                    <v>1572</v>
                                 </b>
                             </bs>
                         </hist>
@@ -11154,7 +11137,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1589</v>
+                                    <v>1572</v>
                                 </b>
                             </bs>
                         </hist>
@@ -11164,15 +11147,15 @@
         </relation>
         <relation>
             <name>ruby_elsif_def</name>
-            <cardinality>1595</cardinality>
+            <cardinality>1578</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>1595</v>
+                    <v>1578</v>
                 </e>
                 <e>
                     <k>condition</k>
-                    <v>1595</v>
+                    <v>1578</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -11186,7 +11169,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1595</v>
+                                    <v>1578</v>
                                 </b>
                             </bs>
                         </hist>
@@ -11202,7 +11185,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1595</v>
+                                    <v>1578</v>
                                 </b>
                             </bs>
                         </hist>
@@ -11399,19 +11382,19 @@
         </relation>
         <relation>
             <name>ruby_ensure_child</name>
-            <cardinality>4834</cardinality>
+            <cardinality>4925</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_ensure</k>
-                    <v>3718</v>
+                    <v>3803</v>
                 </e>
                 <e>
                     <k>index</k>
-                    <v>50</v>
+                    <v>49</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>4834</v>
+                    <v>4925</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -11425,17 +11408,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2956</v>
+                                    <v>3034</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>516</v>
+                                    <v>526</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>17</b>
-                                    <v>245</v>
+                                    <v>241</v>
                                 </b>
                             </bs>
                         </hist>
@@ -11451,17 +11434,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2956</v>
+                                    <v>3034</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>516</v>
+                                    <v>526</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>17</b>
-                                    <v>245</v>
+                                    <v>241</v>
                                 </b>
                             </bs>
                         </hist>
@@ -11477,7 +11460,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>25</v>
+                                    <v>24</v>
                                 </b>
                                 <b>
                                     <a>3</a>
@@ -11490,8 +11473,8 @@
                                     <v>6</v>
                                 </b>
                                 <b>
-                                    <a>12</a>
-                                    <b>13</b>
+                                    <a>14</a>
+                                    <b>15</b>
                                     <v>3</v>
                                 </b>
                                 <b>
@@ -11500,13 +11483,13 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>242</a>
-                                    <b>243</b>
+                                    <a>248</a>
+                                    <b>249</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>1180</a>
-                                    <b>1181</b>
+                                    <a>1227</a>
+                                    <b>1228</b>
                                     <v>3</v>
                                 </b>
                             </bs>
@@ -11523,7 +11506,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>25</v>
+                                    <v>24</v>
                                 </b>
                                 <b>
                                     <a>3</a>
@@ -11536,8 +11519,8 @@
                                     <v>6</v>
                                 </b>
                                 <b>
-                                    <a>12</a>
-                                    <b>13</b>
+                                    <a>14</a>
+                                    <b>15</b>
                                     <v>3</v>
                                 </b>
                                 <b>
@@ -11546,13 +11529,13 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>242</a>
-                                    <b>243</b>
+                                    <a>248</a>
+                                    <b>249</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>1180</a>
-                                    <b>1181</b>
+                                    <a>1227</a>
+                                    <b>1228</b>
                                     <v>3</v>
                                 </b>
                             </bs>
@@ -11569,7 +11552,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>4834</v>
+                                    <v>4925</v>
                                 </b>
                             </bs>
                         </hist>
@@ -11585,7 +11568,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>4834</v>
+                                    <v>4925</v>
                                 </b>
                             </bs>
                         </hist>
@@ -11595,26 +11578,26 @@
         </relation>
         <relation>
             <name>ruby_ensure_def</name>
-            <cardinality>3718</cardinality>
+            <cardinality>3803</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>3718</v>
+                    <v>3803</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_exception_variable_def</name>
-            <cardinality>1001</cardinality>
+            <cardinality>991</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>1001</v>
+                    <v>991</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>1001</v>
+                    <v>991</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -11628,7 +11611,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1001</v>
+                                    <v>991</v>
                                 </b>
                             </bs>
                         </hist>
@@ -11644,7 +11627,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1001</v>
+                                    <v>991</v>
                                 </b>
                             </bs>
                         </hist>
@@ -11654,11 +11637,11 @@
         </relation>
         <relation>
             <name>ruby_exceptions_child</name>
-            <cardinality>1849</cardinality>
+            <cardinality>1873</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_exceptions</k>
-                    <v>1639</v>
+                    <v>1654</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -11666,7 +11649,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>1849</v>
+                    <v>1873</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -11680,17 +11663,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1497</v>
+                                    <v>1509</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>4</b>
-                                    <v>129</v>
+                                    <v>131</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>10</b>
-                                    <v>13</v>
+                                    <v>14</v>
                                 </b>
                             </bs>
                         </hist>
@@ -11706,17 +11689,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1497</v>
+                                    <v>1509</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>4</b>
-                                    <v>129</v>
+                                    <v>131</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>10</b>
-                                    <v>13</v>
+                                    <v>14</v>
                                 </b>
                             </bs>
                         </hist>
@@ -11745,28 +11728,28 @@
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>8</a>
-                                    <b>9</b>
+                                    <a>9</a>
+                                    <b>10</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>13</a>
-                                    <b>14</b>
+                                    <a>14</a>
+                                    <b>15</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>38</a>
-                                    <b>39</b>
+                                    <a>42</a>
+                                    <b>43</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>142</a>
-                                    <b>143</b>
+                                    <a>145</a>
+                                    <b>146</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>1639</a>
-                                    <b>1640</b>
+                                    <a>1654</a>
+                                    <b>1655</b>
                                     <v>1</v>
                                 </b>
                             </bs>
@@ -11796,28 +11779,28 @@
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>8</a>
-                                    <b>9</b>
+                                    <a>9</a>
+                                    <b>10</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>13</a>
-                                    <b>14</b>
+                                    <a>14</a>
+                                    <b>15</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>38</a>
-                                    <b>39</b>
+                                    <a>42</a>
+                                    <b>43</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>142</a>
-                                    <b>143</b>
+                                    <a>145</a>
+                                    <b>146</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>1639</a>
-                                    <b>1640</b>
+                                    <a>1654</a>
+                                    <b>1655</b>
                                     <v>1</v>
                                 </b>
                             </bs>
@@ -11834,7 +11817,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1849</v>
+                                    <v>1873</v>
                                 </b>
                             </bs>
                         </hist>
@@ -11850,7 +11833,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1849</v>
+                                    <v>1873</v>
                                 </b>
                             </bs>
                         </hist>
@@ -11860,11 +11843,11 @@
         </relation>
         <relation>
             <name>ruby_exceptions_def</name>
-            <cardinality>1639</cardinality>
+            <cardinality>1654</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>1639</v>
+                    <v>1654</v>
                 </e>
             </columnsizes>
             <dependencies/>
@@ -12280,19 +12263,19 @@
         </relation>
         <relation>
             <name>ruby_hash_child</name>
-            <cardinality>88983</cardinality>
+            <cardinality>89413</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_hash</k>
-                    <v>35712</v>
+                    <v>35882</v>
                 </e>
                 <e>
                     <k>index</k>
-                    <v>1389</v>
+                    <v>1391</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>88983</v>
+                    <v>89413</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -12306,32 +12289,32 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>14778</v>
+                                    <v>14813</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>9960</v>
+                                    <v>10040</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>3960</v>
+                                    <v>3992</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>4142</v>
+                                    <v>4161</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>19</b>
-                                    <v>2688</v>
+                                    <v>2692</v>
                                 </b>
                                 <b>
                                     <a>19</a>
                                     <b>108</b>
-                                    <v>181</v>
+                                    <v>182</v>
                                 </b>
                             </bs>
                         </hist>
@@ -12347,32 +12330,32 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>14778</v>
+                                    <v>14813</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>9960</v>
+                                    <v>10040</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>3960</v>
+                                    <v>3992</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>4142</v>
+                                    <v>4161</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>19</b>
-                                    <v>2688</v>
+                                    <v>2692</v>
                                 </b>
                                 <b>
                                     <a>19</a>
                                     <b>108</b>
-                                    <v>181</v>
+                                    <v>182</v>
                                 </b>
                             </bs>
                         </hist>
@@ -12388,32 +12371,32 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>922</v>
+                                    <v>923</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>103</v>
+                                    <v>104</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>11</b>
-                                    <v>116</v>
+                                    <v>117</v>
                                 </b>
                                 <b>
                                     <a>14</a>
                                     <b>51</b>
-                                    <v>116</v>
+                                    <v>117</v>
                                 </b>
                                 <b>
                                     <a>57</a>
-                                    <b>1613</b>
-                                    <v>116</v>
+                                    <b>1621</b>
+                                    <v>117</v>
                                 </b>
                                 <b>
-                                    <a>2750</a>
-                                    <b>2751</b>
-                                    <v>12</v>
+                                    <a>2759</a>
+                                    <b>2760</b>
+                                    <v>13</v>
                                 </b>
                             </bs>
                         </hist>
@@ -12429,32 +12412,32 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>922</v>
+                                    <v>923</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>103</v>
+                                    <v>104</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>11</b>
-                                    <v>116</v>
+                                    <v>117</v>
                                 </b>
                                 <b>
                                     <a>14</a>
                                     <b>51</b>
-                                    <v>116</v>
+                                    <v>117</v>
                                 </b>
                                 <b>
                                     <a>57</a>
-                                    <b>1613</b>
-                                    <v>116</v>
+                                    <b>1621</b>
+                                    <v>117</v>
                                 </b>
                                 <b>
-                                    <a>2750</a>
-                                    <b>2751</b>
-                                    <v>12</v>
+                                    <a>2759</a>
+                                    <b>2760</b>
+                                    <v>13</v>
                                 </b>
                             </bs>
                         </hist>
@@ -12470,7 +12453,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>88983</v>
+                                    <v>89413</v>
                                 </b>
                             </bs>
                         </hist>
@@ -12486,7 +12469,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>88983</v>
+                                    <v>89413</v>
                                 </b>
                             </bs>
                         </hist>
@@ -12496,11 +12479,11 @@
         </relation>
         <relation>
             <name>ruby_hash_def</name>
-            <cardinality>39413</cardinality>
+            <cardinality>39640</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>39413</v>
+                    <v>39640</v>
                 </e>
             </columnsizes>
             <dependencies/>
@@ -12658,15 +12641,15 @@
         </relation>
         <relation>
             <name>ruby_hash_splat_argument_def</name>
-            <cardinality>1856</cardinality>
+            <cardinality>1857</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>1856</v>
+                    <v>1857</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>1856</v>
+                    <v>1857</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -12680,7 +12663,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1856</v>
+                                    <v>1857</v>
                                 </b>
                             </bs>
                         </hist>
@@ -12696,7 +12679,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1856</v>
+                                    <v>1857</v>
                                 </b>
                             </bs>
                         </hist>
@@ -12706,26 +12689,26 @@
         </relation>
         <relation>
             <name>ruby_hash_splat_parameter_def</name>
-            <cardinality>1355</cardinality>
+            <cardinality>1447</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>1355</v>
+                    <v>1447</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_hash_splat_parameter_name</name>
-            <cardinality>1134</cardinality>
+            <cardinality>1218</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_hash_splat_parameter</k>
-                    <v>1134</v>
+                    <v>1218</v>
                 </e>
                 <e>
                     <k>name</k>
-                    <v>1134</v>
+                    <v>1218</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -12739,7 +12722,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1134</v>
+                                    <v>1218</v>
                                 </b>
                             </bs>
                         </hist>
@@ -12755,7 +12738,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1134</v>
+                                    <v>1218</v>
                                 </b>
                             </bs>
                         </hist>
@@ -12765,19 +12748,19 @@
         </relation>
         <relation>
             <name>ruby_heredoc_body_child</name>
-            <cardinality>25318</cardinality>
+            <cardinality>25699</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_heredoc_body</k>
-                    <v>5363</v>
+                    <v>5519</v>
                 </e>
                 <e>
                     <k>index</k>
-                    <v>264</v>
+                    <v>259</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>25318</v>
+                    <v>25699</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -12791,12 +12774,12 @@
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>2929</v>
+                                    <v>3080</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>692</v>
+                                    <v>685</v>
                                 </b>
                                 <b>
                                     <a>5</a>
@@ -12806,22 +12789,22 @@
                                 <b>
                                     <a>6</a>
                                     <b>7</b>
-                                    <v>781</v>
+                                    <v>787</v>
                                 </b>
                                 <b>
                                     <a>7</a>
                                     <b>9</b>
-                                    <v>341</v>
+                                    <v>335</v>
                                 </b>
                                 <b>
                                     <a>10</a>
                                     <b>15</b>
-                                    <v>421</v>
+                                    <v>440</v>
                                 </b>
                                 <b>
                                     <a>16</a>
                                     <b>90</b>
-                                    <v>193</v>
+                                    <v>186</v>
                                 </b>
                             </bs>
                         </hist>
@@ -12837,12 +12820,12 @@
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>2929</v>
+                                    <v>3080</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>692</v>
+                                    <v>685</v>
                                 </b>
                                 <b>
                                     <a>5</a>
@@ -12852,22 +12835,22 @@
                                 <b>
                                     <a>6</a>
                                     <b>7</b>
-                                    <v>781</v>
+                                    <v>787</v>
                                 </b>
                                 <b>
                                     <a>7</a>
                                     <b>9</b>
-                                    <v>341</v>
+                                    <v>335</v>
                                 </b>
                                 <b>
                                     <a>10</a>
                                     <b>15</b>
-                                    <v>421</v>
+                                    <v>440</v>
                                 </b>
                                 <b>
                                     <a>16</a>
                                     <b>90</b>
-                                    <v>193</v>
+                                    <v>186</v>
                                 </b>
                             </bs>
                         </hist>
@@ -12883,12 +12866,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>50</v>
+                                    <v>49</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>83</v>
+                                    <v>46</v>
+                                </b>
+                                <b>
+                                    <a>3</a>
+                                    <b>4</b>
+                                    <v>35</v>
                                 </b>
                                 <b>
                                     <a>4</a>
@@ -12897,11 +12885,11 @@
                                 </b>
                                 <b>
                                     <a>8</a>
-                                    <b>12</b>
+                                    <b>13</b>
                                     <v>23</v>
                                 </b>
                                 <b>
-                                    <a>12</a>
+                                    <a>13</a>
                                     <b>26</b>
                                     <v>23</v>
                                 </b>
@@ -12912,12 +12900,12 @@
                                 </b>
                                 <b>
                                     <a>96</a>
-                                    <b>323</b>
+                                    <b>331</b>
                                     <v>20</v>
                                 </b>
                                 <b>
-                                    <a>585</a>
-                                    <b>1806</b>
+                                    <a>600</a>
+                                    <b>1893</b>
                                     <v>17</v>
                                 </b>
                             </bs>
@@ -12934,12 +12922,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>50</v>
+                                    <v>49</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>83</v>
+                                    <v>46</v>
+                                </b>
+                                <b>
+                                    <a>3</a>
+                                    <b>4</b>
+                                    <v>35</v>
                                 </b>
                                 <b>
                                     <a>4</a>
@@ -12948,11 +12941,11 @@
                                 </b>
                                 <b>
                                     <a>8</a>
-                                    <b>12</b>
+                                    <b>13</b>
                                     <v>23</v>
                                 </b>
                                 <b>
-                                    <a>12</a>
+                                    <a>13</a>
                                     <b>26</b>
                                     <v>23</v>
                                 </b>
@@ -12963,12 +12956,12 @@
                                 </b>
                                 <b>
                                     <a>96</a>
-                                    <b>323</b>
+                                    <b>331</b>
                                     <v>20</v>
                                 </b>
                                 <b>
-                                    <a>585</a>
-                                    <b>1806</b>
+                                    <a>600</a>
+                                    <b>1893</b>
                                     <v>17</v>
                                 </b>
                             </bs>
@@ -12985,7 +12978,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>25318</v>
+                                    <v>25699</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13001,7 +12994,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>25318</v>
+                                    <v>25699</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13011,26 +13004,26 @@
         </relation>
         <relation>
             <name>ruby_heredoc_body_def</name>
-            <cardinality>5575</cardinality>
+            <cardinality>5789</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>5575</v>
+                    <v>5789</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_if_alternative</name>
-            <cardinality>6454</cardinality>
+            <cardinality>6667</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_if</k>
-                    <v>6454</v>
+                    <v>6667</v>
                 </e>
                 <e>
                     <k>alternative</k>
-                    <v>6454</v>
+                    <v>6667</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -13044,7 +13037,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6454</v>
+                                    <v>6667</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13060,7 +13053,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6454</v>
+                                    <v>6667</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13070,15 +13063,15 @@
         </relation>
         <relation>
             <name>ruby_if_consequence</name>
-            <cardinality>18324</cardinality>
+            <cardinality>18280</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_if</k>
-                    <v>18324</v>
+                    <v>18280</v>
                 </e>
                 <e>
                     <k>consequence</k>
-                    <v>18324</v>
+                    <v>18280</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -13092,7 +13085,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>18324</v>
+                                    <v>18280</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13108,7 +13101,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>18324</v>
+                                    <v>18280</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13118,15 +13111,15 @@
         </relation>
         <relation>
             <name>ruby_if_def</name>
-            <cardinality>18392</cardinality>
+            <cardinality>18341</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>18392</v>
+                    <v>18341</v>
                 </e>
                 <e>
                     <k>condition</k>
-                    <v>18392</v>
+                    <v>18341</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -13140,7 +13133,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>18392</v>
+                                    <v>18341</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13156,7 +13149,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>18392</v>
+                                    <v>18341</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13208,19 +13201,19 @@
         </relation>
         <relation>
             <name>ruby_if_modifier_def</name>
-            <cardinality>13620</cardinality>
+            <cardinality>13708</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>13620</v>
+                    <v>13708</v>
                 </e>
                 <e>
                     <k>body</k>
-                    <v>13620</v>
+                    <v>13708</v>
                 </e>
                 <e>
                     <k>condition</k>
-                    <v>13620</v>
+                    <v>13708</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -13234,7 +13227,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>13620</v>
+                                    <v>13708</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13250,7 +13243,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>13620</v>
+                                    <v>13708</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13266,7 +13259,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>13620</v>
+                                    <v>13708</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13282,7 +13275,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>13620</v>
+                                    <v>13708</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13298,7 +13291,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>13620</v>
+                                    <v>13708</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13314,7 +13307,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>13620</v>
+                                    <v>13708</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13510,11 +13503,11 @@
         </relation>
         <relation>
             <name>ruby_interpolation_child</name>
-            <cardinality>38208</cardinality>
+            <cardinality>38051</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_interpolation</k>
-                    <v>38208</v>
+                    <v>38051</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -13522,7 +13515,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>38208</v>
+                    <v>38051</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -13536,7 +13529,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>38208</v>
+                                    <v>38051</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13552,7 +13545,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>38208</v>
+                                    <v>38051</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13566,8 +13559,8 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>12859</a>
-                                    <b>12860</b>
+                                    <a>13043</a>
+                                    <b>13044</b>
                                     <v>2</v>
                                 </b>
                             </bs>
@@ -13582,8 +13575,8 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>12859</a>
-                                    <b>12860</b>
+                                    <a>13043</a>
+                                    <b>13044</b>
                                     <v>2</v>
                                 </b>
                             </bs>
@@ -13600,7 +13593,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>38208</v>
+                                    <v>38051</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13616,7 +13609,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>38208</v>
+                                    <v>38051</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13626,26 +13619,26 @@
         </relation>
         <relation>
             <name>ruby_interpolation_def</name>
-            <cardinality>38208</cardinality>
+            <cardinality>38051</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>38208</v>
+                    <v>38051</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_keyword_parameter_def</name>
-            <cardinality>3794</cardinality>
+            <cardinality>3939</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>3794</v>
+                    <v>3939</v>
                 </e>
                 <e>
                     <k>name</k>
-                    <v>3794</v>
+                    <v>3939</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -13659,7 +13652,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3794</v>
+                                    <v>3939</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13675,7 +13668,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3794</v>
+                                    <v>3939</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13685,15 +13678,15 @@
         </relation>
         <relation>
             <name>ruby_keyword_parameter_value</name>
-            <cardinality>2874</cardinality>
+            <cardinality>2985</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_keyword_parameter</k>
-                    <v>2874</v>
+                    <v>2985</v>
                 </e>
                 <e>
                     <k>value</k>
-                    <v>2874</v>
+                    <v>2985</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -13707,7 +13700,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2874</v>
+                                    <v>2985</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13723,7 +13716,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2874</v>
+                                    <v>2985</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13823,15 +13816,15 @@
         </relation>
         <relation>
             <name>ruby_lambda_def</name>
-            <cardinality>7472</cardinality>
+            <cardinality>7557</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>7472</v>
+                    <v>7557</v>
                 </e>
                 <e>
                     <k>body</k>
-                    <v>7472</v>
+                    <v>7557</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -13845,7 +13838,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>7472</v>
+                                    <v>7557</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13861,7 +13854,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>7472</v>
+                                    <v>7557</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13871,15 +13864,15 @@
         </relation>
         <relation>
             <name>ruby_lambda_parameters</name>
-            <cardinality>1664</cardinality>
+            <cardinality>1665</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_lambda</k>
-                    <v>1664</v>
+                    <v>1665</v>
                 </e>
                 <e>
                     <k>parameters</k>
-                    <v>1664</v>
+                    <v>1665</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -13893,7 +13886,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1664</v>
+                                    <v>1665</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13909,7 +13902,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1664</v>
+                                    <v>1665</v>
                                 </b>
                             </bs>
                         </hist>
@@ -13919,11 +13912,11 @@
         </relation>
         <relation>
             <name>ruby_lambda_parameters_child</name>
-            <cardinality>1905</cardinality>
+            <cardinality>1907</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_lambda_parameters</k>
-                    <v>1655</v>
+                    <v>1656</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -13931,7 +13924,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>1905</v>
+                    <v>1907</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -13950,7 +13943,7 @@
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>144</v>
+                                    <v>145</v>
                                 </b>
                                 <b>
                                     <a>3</a>
@@ -13976,7 +13969,7 @@
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>144</v>
+                                    <v>145</v>
                                 </b>
                                 <b>
                                     <a>3</a>
@@ -14020,13 +14013,13 @@
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>183</a>
-                                    <b>184</b>
+                                    <a>184</a>
+                                    <b>185</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>1655</a>
-                                    <b>1656</b>
+                                    <a>1656</a>
+                                    <b>1657</b>
                                     <v>1</v>
                                 </b>
                             </bs>
@@ -14066,13 +14059,13 @@
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>183</a>
-                                    <b>184</b>
+                                    <a>184</a>
+                                    <b>185</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>1655</a>
-                                    <b>1656</b>
+                                    <a>1656</a>
+                                    <b>1657</b>
                                     <v>1</v>
                                 </b>
                             </bs>
@@ -14089,7 +14082,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1905</v>
+                                    <v>1907</v>
                                 </b>
                             </bs>
                         </hist>
@@ -14105,7 +14098,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1905</v>
+                                    <v>1907</v>
                                 </b>
                             </bs>
                         </hist>
@@ -14115,22 +14108,22 @@
         </relation>
         <relation>
             <name>ruby_lambda_parameters_def</name>
-            <cardinality>1664</cardinality>
+            <cardinality>1665</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>1664</v>
+                    <v>1665</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_left_assignment_list_child</name>
-            <cardinality>6358</cardinality>
+            <cardinality>6436</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_left_assignment_list</k>
-                    <v>2873</v>
+                    <v>2910</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -14138,7 +14131,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>6358</v>
+                    <v>6436</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -14152,17 +14145,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>360</v>
+                                    <v>361</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>1861</v>
+                                    <v>1892</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>489</v>
+                                    <v>494</v>
                                 </b>
                                 <b>
                                     <a>4</a>
@@ -14183,17 +14176,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>360</v>
+                                    <v>361</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>1861</v>
+                                    <v>1892</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>489</v>
+                                    <v>494</v>
                                 </b>
                                 <b>
                                     <a>4</a>
@@ -14257,18 +14250,18 @@
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>652</a>
-                                    <b>653</b>
+                                    <a>657</a>
+                                    <b>658</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>2513</a>
-                                    <b>2514</b>
+                                    <a>2549</a>
+                                    <b>2550</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>2873</a>
-                                    <b>2874</b>
+                                    <a>2910</a>
+                                    <b>2911</b>
                                     <v>1</v>
                                 </b>
                             </bs>
@@ -14328,18 +14321,18 @@
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>652</a>
-                                    <b>653</b>
+                                    <a>657</a>
+                                    <b>658</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>2513</a>
-                                    <b>2514</b>
+                                    <a>2549</a>
+                                    <b>2550</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>2873</a>
-                                    <b>2874</b>
+                                    <a>2910</a>
+                                    <b>2911</b>
                                     <v>1</v>
                                 </b>
                             </bs>
@@ -14356,7 +14349,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6358</v>
+                                    <v>6436</v>
                                 </b>
                             </bs>
                         </hist>
@@ -14372,7 +14365,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6358</v>
+                                    <v>6436</v>
                                 </b>
                             </bs>
                         </hist>
@@ -14382,36 +14375,32 @@
         </relation>
         <relation>
             <name>ruby_left_assignment_list_def</name>
-            <cardinality>2873</cardinality>
+            <cardinality>2910</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>2873</v>
+                    <v>2910</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
-            <name>ruby_method_child</name>
-            <cardinality>264218</cardinality>
+            <name>ruby_method_body</name>
+            <cardinality>98487</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_method</k>
-                    <v>97351</v>
+                    <v>98487</v>
                 </e>
                 <e>
-                    <k>index</k>
-                    <v>239</v>
-                </e>
-                <e>
-                    <k>child</k>
-                    <v>264218</v>
+                    <k>body</k>
+                    <v>98487</v>
                 </e>
             </columnsizes>
             <dependencies>
                 <dep>
                     <src>ruby_method</src>
-                    <trg>index</trg>
+                    <trg>body</trg>
                     <val>
                         <hist>
                             <budget>12</budget>
@@ -14419,80 +14408,14 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>43682</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>18007</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>12772</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>7790</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>7</b>
-                                    <v>8159</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>77</b>
-                                    <v>6939</v>
+                                    <v>98487</v>
                                 </b>
                             </bs>
                         </hist>
                     </val>
                 </dep>
                 <dep>
-                    <src>ruby_method</src>
-                    <trg>child</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>43682</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>18007</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>12772</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>7790</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>7</b>
-                                    <v>8159</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>77</b>
-                                    <v>6939</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>index</src>
+                    <src>body</src>
                     <trg>ruby_method</trg>
                     <val>
                         <hist>
@@ -14501,165 +14424,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>22</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>4</b>
-                                    <v>6</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>28</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>6</b>
-                                    <v>31</v>
-                                </b>
-                                <b>
-                                    <a>6</a>
-                                    <b>7</b>
-                                    <v>18</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>13</b>
-                                    <v>18</v>
-                                </b>
-                                <b>
-                                    <a>14</a>
-                                    <b>20</b>
-                                    <v>18</v>
-                                </b>
-                                <b>
-                                    <a>21</a>
-                                    <b>41</b>
-                                    <v>18</v>
-                                </b>
-                                <b>
-                                    <a>49</a>
-                                    <b>115</b>
-                                    <v>18</v>
-                                </b>
-                                <b>
-                                    <a>150</a>
-                                    <b>400</b>
-                                    <v>18</v>
-                                </b>
-                                <b>
-                                    <a>511</a>
-                                    <b>2203</b>
-                                    <v>18</v>
-                                </b>
-                                <b>
-                                    <a>3217</a>
-                                    <b>30892</b>
-                                    <v>18</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>index</src>
-                    <trg>child</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>22</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>4</b>
-                                    <v>6</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>28</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>6</b>
-                                    <v>31</v>
-                                </b>
-                                <b>
-                                    <a>6</a>
-                                    <b>7</b>
-                                    <v>18</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>13</b>
-                                    <v>18</v>
-                                </b>
-                                <b>
-                                    <a>14</a>
-                                    <b>20</b>
-                                    <v>18</v>
-                                </b>
-                                <b>
-                                    <a>21</a>
-                                    <b>41</b>
-                                    <v>18</v>
-                                </b>
-                                <b>
-                                    <a>49</a>
-                                    <b>115</b>
-                                    <v>18</v>
-                                </b>
-                                <b>
-                                    <a>150</a>
-                                    <b>400</b>
-                                    <v>18</v>
-                                </b>
-                                <b>
-                                    <a>511</a>
-                                    <b>2203</b>
-                                    <v>18</v>
-                                </b>
-                                <b>
-                                    <a>3217</a>
-                                    <b>30892</b>
-                                    <v>18</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>child</src>
-                    <trg>ruby_method</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>264218</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>child</src>
-                    <trg>index</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>264218</v>
+                                    <v>98487</v>
                                 </b>
                             </bs>
                         </hist>
@@ -14669,15 +14434,15 @@
         </relation>
         <relation>
             <name>ruby_method_def</name>
-            <cardinality>98356</cardinality>
+            <cardinality>99525</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>98356</v>
+                    <v>99525</v>
                 </e>
                 <e>
                     <k>name</k>
-                    <v>98356</v>
+                    <v>99525</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -14691,7 +14456,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>98356</v>
+                                    <v>99525</v>
                                 </b>
                             </bs>
                         </hist>
@@ -14707,7 +14472,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>98356</v>
+                                    <v>99525</v>
                                 </b>
                             </bs>
                         </hist>
@@ -14717,15 +14482,15 @@
         </relation>
         <relation>
             <name>ruby_method_parameters</name>
-            <cardinality>27238</cardinality>
+            <cardinality>27765</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_method</k>
-                    <v>27238</v>
+                    <v>27765</v>
                 </e>
                 <e>
                     <k>parameters</k>
-                    <v>27238</v>
+                    <v>27765</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -14739,7 +14504,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>27238</v>
+                                    <v>27765</v>
                                 </b>
                             </bs>
                         </hist>
@@ -14755,7 +14520,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>27238</v>
+                                    <v>27765</v>
                                 </b>
                             </bs>
                         </hist>
@@ -14765,19 +14530,19 @@
         </relation>
         <relation>
             <name>ruby_method_parameters_child</name>
-            <cardinality>47287</cardinality>
+            <cardinality>48416</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_method_parameters</k>
-                    <v>28643</v>
+                    <v>29203</v>
                 </e>
                 <e>
                     <k>index</k>
-                    <v>34</v>
+                    <v>37</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>47287</v>
+                    <v>48416</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -14791,22 +14556,22 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>17310</v>
+                                    <v>17656</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>7021</v>
+                                    <v>7064</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>2678</v>
+                                    <v>2765</v>
                                 </b>
                                 <b>
                                     <a>4</a>
-                                    <b>12</b>
-                                    <v>1632</v>
+                                    <b>13</b>
+                                    <v>1717</v>
                                 </b>
                             </bs>
                         </hist>
@@ -14822,22 +14587,22 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>17310</v>
+                                    <v>17656</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>7021</v>
+                                    <v>7064</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>2678</v>
+                                    <v>2765</v>
                                 </b>
                                 <b>
                                     <a>4</a>
-                                    <b>12</b>
-                                    <v>1632</v>
+                                    <b>13</b>
+                                    <v>1717</v>
                                 </b>
                             </bs>
                         </hist>
@@ -14850,6 +14615,11 @@
                         <hist>
                             <budget>12</budget>
                             <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>3</v>
+                                </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
@@ -14861,48 +14631,48 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>9</a>
-                                    <b>10</b>
+                                    <a>11</a>
+                                    <b>12</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>28</a>
-                                    <b>29</b>
+                                    <a>29</a>
+                                    <b>30</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>48</a>
-                                    <b>49</b>
+                                    <a>53</a>
+                                    <b>54</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>115</a>
-                                    <b>116</b>
+                                    <a>125</a>
+                                    <b>126</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>226</a>
-                                    <b>227</b>
+                                    <a>246</a>
+                                    <b>247</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>518</a>
-                                    <b>519</b>
+                                    <a>554</a>
+                                    <b>555</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>1368</a>
-                                    <b>1369</b>
+                                    <a>1446</a>
+                                    <b>1447</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>3596</a>
-                                    <b>3597</b>
+                                    <a>3725</a>
+                                    <b>3726</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>9089</a>
-                                    <b>9090</b>
+                                    <a>9421</a>
+                                    <b>9422</b>
                                     <v>3</v>
                                 </b>
                             </bs>
@@ -14916,6 +14686,11 @@
                         <hist>
                             <budget>12</budget>
                             <bs>
+                                <b>
+                                    <a>1</a>
+                                    <b>2</b>
+                                    <v>3</v>
+                                </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
@@ -14927,48 +14702,48 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>9</a>
-                                    <b>10</b>
+                                    <a>11</a>
+                                    <b>12</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>28</a>
-                                    <b>29</b>
+                                    <a>29</a>
+                                    <b>30</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>48</a>
-                                    <b>49</b>
+                                    <a>53</a>
+                                    <b>54</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>115</a>
-                                    <b>116</b>
+                                    <a>125</a>
+                                    <b>126</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>226</a>
-                                    <b>227</b>
+                                    <a>246</a>
+                                    <b>247</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>518</a>
-                                    <b>519</b>
+                                    <a>554</a>
+                                    <b>555</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>1368</a>
-                                    <b>1369</b>
+                                    <a>1446</a>
+                                    <b>1447</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>3596</a>
-                                    <b>3597</b>
+                                    <a>3725</a>
+                                    <b>3726</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>9089</a>
-                                    <b>9090</b>
+                                    <a>9421</a>
+                                    <b>9422</b>
                                     <v>3</v>
                                 </b>
                             </bs>
@@ -14985,7 +14760,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>47287</v>
+                                    <v>48416</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15001,7 +14776,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>47287</v>
+                                    <v>48416</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15011,36 +14786,32 @@
         </relation>
         <relation>
             <name>ruby_method_parameters_def</name>
-            <cardinality>28861</cardinality>
+            <cardinality>29417</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>28861</v>
+                    <v>29417</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
-            <name>ruby_module_child</name>
-            <cardinality>31303</cardinality>
+            <name>ruby_module_body</name>
+            <cardinality>21511</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_module</k>
-                    <v>10513</v>
+                    <v>21511</v>
                 </e>
                 <e>
-                    <k>index</k>
-                    <v>393</v>
-                </e>
-                <e>
-                    <k>child</k>
-                    <v>31303</v>
+                    <k>body</k>
+                    <v>21511</v>
                 </e>
             </columnsizes>
             <dependencies>
                 <dep>
                     <src>ruby_module</src>
-                    <trg>index</trg>
+                    <trg>body</trg>
                     <val>
                         <hist>
                             <budget>12</budget>
@@ -15048,70 +14819,14 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>7443</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>863</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>5</b>
-                                    <v>772</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>10</b>
-                                    <v>794</v>
-                                </b>
-                                <b>
-                                    <a>10</a>
-                                    <b>126</b>
-                                    <v>639</v>
+                                    <v>21511</v>
                                 </b>
                             </bs>
                         </hist>
                     </val>
                 </dep>
                 <dep>
-                    <src>ruby_module</src>
-                    <trg>child</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>7443</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>863</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>5</b>
-                                    <v>772</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>10</b>
-                                    <v>794</v>
-                                </b>
-                                <b>
-                                    <a>10</a>
-                                    <b>126</b>
-                                    <v>639</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>index</src>
+                    <src>body</src>
                     <trg>ruby_module</trg>
                     <val>
                         <hist>
@@ -15120,165 +14835,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>31</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>37</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>9</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>72</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>8</b>
-                                    <v>31</v>
-                                </b>
-                                <b>
-                                    <a>8</a>
-                                    <b>10</b>
-                                    <v>31</v>
-                                </b>
-                                <b>
-                                    <a>10</a>
-                                    <b>17</b>
-                                    <v>34</v>
-                                </b>
-                                <b>
-                                    <a>17</a>
-                                    <b>25</b>
-                                    <v>34</v>
-                                </b>
-                                <b>
-                                    <a>27</a>
-                                    <b>49</b>
-                                    <v>31</v>
-                                </b>
-                                <b>
-                                    <a>52</a>
-                                    <b>109</b>
-                                    <v>31</v>
-                                </b>
-                                <b>
-                                    <a>122</a>
-                                    <b>376</b>
-                                    <v>31</v>
-                                </b>
-                                <b>
-                                    <a>455</a>
-                                    <b>3337</b>
-                                    <v>15</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>index</src>
-                    <trg>child</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>31</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>37</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>9</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>72</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>8</b>
-                                    <v>31</v>
-                                </b>
-                                <b>
-                                    <a>8</a>
-                                    <b>10</b>
-                                    <v>31</v>
-                                </b>
-                                <b>
-                                    <a>10</a>
-                                    <b>17</b>
-                                    <v>34</v>
-                                </b>
-                                <b>
-                                    <a>17</a>
-                                    <b>25</b>
-                                    <v>34</v>
-                                </b>
-                                <b>
-                                    <a>27</a>
-                                    <b>49</b>
-                                    <v>31</v>
-                                </b>
-                                <b>
-                                    <a>52</a>
-                                    <b>109</b>
-                                    <v>31</v>
-                                </b>
-                                <b>
-                                    <a>122</a>
-                                    <b>376</b>
-                                    <v>31</v>
-                                </b>
-                                <b>
-                                    <a>455</a>
-                                    <b>3337</b>
-                                    <v>15</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>child</src>
-                    <trg>ruby_module</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>31303</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>child</src>
-                    <trg>index</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>31303</v>
+                                    <v>21511</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15288,15 +14845,15 @@
         </relation>
         <relation>
             <name>ruby_module_def</name>
-            <cardinality>21557</cardinality>
+            <cardinality>21589</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>21557</v>
+                    <v>21589</v>
                 </e>
                 <e>
                     <k>name</k>
-                    <v>21557</v>
+                    <v>21589</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -15310,7 +14867,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>21557</v>
+                                    <v>21589</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15326,7 +14883,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>21557</v>
+                                    <v>21589</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15336,15 +14893,15 @@
         </relation>
         <relation>
             <name>ruby_next_child</name>
-            <cardinality>240</cardinality>
+            <cardinality>245</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_next</k>
-                    <v>240</v>
+                    <v>245</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>240</v>
+                    <v>245</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -15358,7 +14915,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>240</v>
+                                    <v>245</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15374,7 +14931,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>240</v>
+                                    <v>245</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15384,26 +14941,26 @@
         </relation>
         <relation>
             <name>ruby_next_def</name>
-            <cardinality>2005</cardinality>
+            <cardinality>2021</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>2005</v>
+                    <v>2021</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_operator_assignment_def</name>
-            <cardinality>6596</cardinality>
+            <cardinality>6502</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>6596</v>
+                    <v>6502</v>
                 </e>
                 <e>
                     <k>left</k>
-                    <v>6596</v>
+                    <v>6502</v>
                 </e>
                 <e>
                     <k>operator</k>
@@ -15411,7 +14968,7 @@
                 </e>
                 <e>
                     <k>right</k>
-                    <v>6596</v>
+                    <v>6502</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -15425,7 +14982,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6596</v>
+                                    <v>6502</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15441,7 +14998,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6596</v>
+                                    <v>6502</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15457,7 +15014,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6596</v>
+                                    <v>6502</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15473,7 +15030,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6596</v>
+                                    <v>6502</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15489,7 +15046,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6596</v>
+                                    <v>6502</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15505,7 +15062,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6596</v>
+                                    <v>6502</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15534,18 +15091,18 @@
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>61</a>
-                                    <b>62</b>
+                                    <a>62</a>
+                                    <b>63</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>592</a>
-                                    <b>593</b>
+                                    <a>594</a>
+                                    <b>595</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>1552</a>
-                                    <b>1553</b>
+                                    <a>1558</a>
+                                    <b>1559</b>
                                     <v>2</v>
                                 </b>
                             </bs>
@@ -15575,18 +15132,18 @@
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>61</a>
-                                    <b>62</b>
+                                    <a>62</a>
+                                    <b>63</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>592</a>
-                                    <b>593</b>
+                                    <a>594</a>
+                                    <b>595</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>1552</a>
-                                    <b>1553</b>
+                                    <a>1558</a>
+                                    <b>1559</b>
                                     <v>2</v>
                                 </b>
                             </bs>
@@ -15616,18 +15173,18 @@
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>61</a>
-                                    <b>62</b>
+                                    <a>62</a>
+                                    <b>63</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>592</a>
-                                    <b>593</b>
+                                    <a>594</a>
+                                    <b>595</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>1552</a>
-                                    <b>1553</b>
+                                    <a>1558</a>
+                                    <b>1559</b>
                                     <v>2</v>
                                 </b>
                             </bs>
@@ -15644,7 +15201,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6596</v>
+                                    <v>6502</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15660,7 +15217,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6596</v>
+                                    <v>6502</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15676,7 +15233,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6596</v>
+                                    <v>6502</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15686,19 +15243,19 @@
         </relation>
         <relation>
             <name>ruby_optional_parameter_def</name>
-            <cardinality>6435</cardinality>
+            <cardinality>6540</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>6435</v>
+                    <v>6540</v>
                 </e>
                 <e>
                     <k>name</k>
-                    <v>6435</v>
+                    <v>6540</v>
                 </e>
                 <e>
                     <k>value</k>
-                    <v>6435</v>
+                    <v>6540</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -15712,7 +15269,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6435</v>
+                                    <v>6540</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15728,7 +15285,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6435</v>
+                                    <v>6540</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15744,7 +15301,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6435</v>
+                                    <v>6540</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15760,7 +15317,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6435</v>
+                                    <v>6540</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15776,7 +15333,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6435</v>
+                                    <v>6540</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15792,7 +15349,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6435</v>
+                                    <v>6540</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15802,15 +15359,15 @@
         </relation>
         <relation>
             <name>ruby_pair_def</name>
-            <cardinality>235158</cardinality>
+            <cardinality>237637</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>235158</v>
+                    <v>237637</v>
                 </e>
                 <e>
                     <k>key__</k>
-                    <v>235158</v>
+                    <v>237637</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -15824,7 +15381,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>235158</v>
+                                    <v>237637</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15840,7 +15397,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>235158</v>
+                                    <v>237637</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15850,15 +15407,15 @@
         </relation>
         <relation>
             <name>ruby_pair_value</name>
-            <cardinality>235158</cardinality>
+            <cardinality>237637</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_pair</k>
-                    <v>235158</v>
+                    <v>237637</v>
                 </e>
                 <e>
                     <k>value</k>
-                    <v>235158</v>
+                    <v>237637</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -15872,7 +15429,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>235158</v>
+                                    <v>237637</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15888,7 +15445,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>235158</v>
+                                    <v>237637</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15940,11 +15497,11 @@
         </relation>
         <relation>
             <name>ruby_parenthesized_statements_child</name>
-            <cardinality>10272</cardinality>
+            <cardinality>10537</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_parenthesized_statements</k>
-                    <v>10208</v>
+                    <v>10471</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -15952,7 +15509,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>10272</v>
+                    <v>10537</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -15966,12 +15523,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>10152</v>
+                                    <v>10413</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>5</b>
-                                    <v>56</v>
+                                    <v>58</v>
                                 </b>
                             </bs>
                         </hist>
@@ -15987,12 +15544,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>10152</v>
+                                    <v>10413</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>5</b>
-                                    <v>56</v>
+                                    <v>58</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16016,13 +15573,13 @@
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>56</a>
-                                    <b>57</b>
+                                    <a>58</a>
+                                    <b>59</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>10208</a>
-                                    <b>10209</b>
+                                    <a>10471</a>
+                                    <b>10472</b>
                                     <v>1</v>
                                 </b>
                             </bs>
@@ -16047,13 +15604,13 @@
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>56</a>
-                                    <b>57</b>
+                                    <a>58</a>
+                                    <b>59</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>10208</a>
-                                    <b>10209</b>
+                                    <a>10471</a>
+                                    <b>10472</b>
                                     <v>1</v>
                                 </b>
                             </bs>
@@ -16070,7 +15627,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>10272</v>
+                                    <v>10537</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16086,7 +15643,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>10272</v>
+                                    <v>10537</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16096,26 +15653,26 @@
         </relation>
         <relation>
             <name>ruby_parenthesized_statements_def</name>
-            <cardinality>10247</cardinality>
+            <cardinality>10510</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>10247</v>
+                    <v>10510</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_pattern_def</name>
-            <cardinality>3895</cardinality>
+            <cardinality>3918</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>3895</v>
+                    <v>3918</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>3895</v>
+                    <v>3918</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -16129,7 +15686,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3895</v>
+                                    <v>3918</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16145,7 +15702,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3895</v>
+                                    <v>3918</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16155,19 +15712,19 @@
         </relation>
         <relation>
             <name>ruby_program_child</name>
-            <cardinality>33147</cardinality>
+            <cardinality>33068</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_program</k>
-                    <v>10456</v>
+                    <v>10393</v>
                 </e>
                 <e>
                     <k>index</k>
-                    <v>236</v>
+                    <v>235</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>33147</v>
+                    <v>33068</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -16181,32 +15738,32 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3857</v>
+                                    <v>3809</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>2527</v>
+                                    <v>2513</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>1660</v>
+                                    <v>1661</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>791</v>
+                                    <v>796</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>8</b>
-                                    <v>910</v>
+                                    <v>895</v>
                                 </b>
                                 <b>
                                     <a>8</a>
-                                    <b>76</b>
-                                    <v>709</v>
+                                    <b>77</b>
+                                    <v>716</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16222,32 +15779,32 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3857</v>
+                                    <v>3809</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>2527</v>
+                                    <v>2513</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>1660</v>
+                                    <v>1661</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>791</v>
+                                    <v>796</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>8</b>
-                                    <v>910</v>
+                                    <v>895</v>
                                 </b>
                                 <b>
                                     <a>8</a>
-                                    <b>76</b>
-                                    <v>709</v>
+                                    <b>77</b>
+                                    <v>716</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16263,7 +15820,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>50</v>
+                                    <v>52</v>
                                 </b>
                                 <b>
                                     <a>2</a>
@@ -16272,16 +15829,16 @@
                                 </b>
                                 <b>
                                     <a>4</a>
-                                    <b>9</b>
+                                    <b>10</b>
                                     <v>18</v>
                                 </b>
                                 <b>
-                                    <a>9</a>
-                                    <b>15</b>
+                                    <a>11</a>
+                                    <b>16</b>
                                     <v>18</v>
                                 </b>
                                 <b>
-                                    <a>15</a>
+                                    <a>16</a>
                                     <b>23</b>
                                     <v>18</v>
                                 </b>
@@ -16291,23 +15848,23 @@
                                     <v>18</v>
                                 </b>
                                 <b>
-                                    <a>38</a>
-                                    <b>63</b>
+                                    <a>39</a>
+                                    <b>64</b>
                                     <v>18</v>
                                 </b>
                                 <b>
                                     <a>68</a>
-                                    <b>139</b>
+                                    <b>141</b>
                                     <v>18</v>
                                 </b>
                                 <b>
-                                    <a>157</a>
-                                    <b>515</b>
+                                    <a>159</a>
+                                    <b>521</b>
                                     <v>18</v>
                                 </b>
                                 <b>
-                                    <a>765</a>
-                                    <b>3319</b>
+                                    <a>777</a>
+                                    <b>3354</b>
                                     <v>12</v>
                                 </b>
                             </bs>
@@ -16324,7 +15881,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>50</v>
+                                    <v>52</v>
                                 </b>
                                 <b>
                                     <a>2</a>
@@ -16333,16 +15890,16 @@
                                 </b>
                                 <b>
                                     <a>4</a>
-                                    <b>9</b>
+                                    <b>10</b>
                                     <v>18</v>
                                 </b>
                                 <b>
-                                    <a>9</a>
-                                    <b>15</b>
+                                    <a>11</a>
+                                    <b>16</b>
                                     <v>18</v>
                                 </b>
                                 <b>
-                                    <a>15</a>
+                                    <a>16</a>
                                     <b>23</b>
                                     <v>18</v>
                                 </b>
@@ -16352,23 +15909,23 @@
                                     <v>18</v>
                                 </b>
                                 <b>
-                                    <a>38</a>
-                                    <b>63</b>
+                                    <a>39</a>
+                                    <b>64</b>
                                     <v>18</v>
                                 </b>
                                 <b>
                                     <a>68</a>
-                                    <b>139</b>
+                                    <b>141</b>
                                     <v>18</v>
                                 </b>
                                 <b>
-                                    <a>157</a>
-                                    <b>515</b>
+                                    <a>159</a>
+                                    <b>521</b>
                                     <v>18</v>
                                 </b>
                                 <b>
-                                    <a>765</a>
-                                    <b>3319</b>
+                                    <a>777</a>
+                                    <b>3354</b>
                                     <v>12</v>
                                 </b>
                             </bs>
@@ -16385,7 +15942,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>33147</v>
+                                    <v>33068</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16401,7 +15958,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>33147</v>
+                                    <v>33068</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16411,26 +15968,26 @@
         </relation>
         <relation>
             <name>ruby_program_def</name>
-            <cardinality>17142</cardinality>
+            <cardinality>17193</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>17142</v>
+                    <v>17193</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_range_begin</name>
-            <cardinality>3997</cardinality>
+            <cardinality>4174</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_range</k>
-                    <v>3997</v>
+                    <v>4174</v>
                 </e>
                 <e>
                     <k>begin</k>
-                    <v>3997</v>
+                    <v>4174</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -16444,7 +16001,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3997</v>
+                                    <v>4174</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16460,7 +16017,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3997</v>
+                                    <v>4174</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16470,11 +16027,11 @@
         </relation>
         <relation>
             <name>ruby_range_def</name>
-            <cardinality>4187</cardinality>
+            <cardinality>4435</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>4187</v>
+                    <v>4435</v>
                 </e>
                 <e>
                     <k>operator</k>
@@ -16492,7 +16049,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>4187</v>
+                                    <v>4435</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16506,13 +16063,13 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>1356</a>
-                                    <b>1357</b>
+                                    <a>1459</a>
+                                    <b>1460</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>2831</a>
-                                    <b>2832</b>
+                                    <a>2976</a>
+                                    <b>2977</b>
                                     <v>1</v>
                                 </b>
                             </bs>
@@ -16523,15 +16080,15 @@
         </relation>
         <relation>
             <name>ruby_range_end</name>
-            <cardinality>4070</cardinality>
+            <cardinality>4268</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_range</k>
-                    <v>4070</v>
+                    <v>4268</v>
                 </e>
                 <e>
                     <k>end</k>
-                    <v>4070</v>
+                    <v>4268</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -16545,7 +16102,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>4070</v>
+                                    <v>4268</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16561,7 +16118,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>4070</v>
+                                    <v>4268</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16571,15 +16128,15 @@
         </relation>
         <relation>
             <name>ruby_rational_def</name>
-            <cardinality>123</cardinality>
+            <cardinality>124</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>123</v>
+                    <v>124</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>123</v>
+                    <v>124</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -16593,7 +16150,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>123</v>
+                                    <v>124</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16609,7 +16166,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>123</v>
+                                    <v>124</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16678,19 +16235,19 @@
         </relation>
         <relation>
             <name>ruby_regex_child</name>
-            <cardinality>43301</cardinality>
+            <cardinality>43722</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_regex</k>
-                    <v>12839</v>
+                    <v>13081</v>
                 </e>
                 <e>
                     <k>index</k>
-                    <v>154</v>
+                    <v>151</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>43301</v>
+                    <v>43722</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -16704,42 +16261,42 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6577</v>
+                                    <v>6732</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>696</v>
+                                    <v>712</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>1723</v>
+                                    <v>1745</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>466</v>
+                                    <v>492</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>6</b>
-                                    <v>1087</v>
+                                    <v>1094</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>8</b>
-                                    <v>1002</v>
+                                    <v>1016</v>
                                 </b>
                                 <b>
                                     <a>8</a>
                                     <b>15</b>
-                                    <v>986</v>
+                                    <v>995</v>
                                 </b>
                                 <b>
                                     <a>15</a>
                                     <b>50</b>
-                                    <v>299</v>
+                                    <v>291</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16755,42 +16312,42 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6577</v>
+                                    <v>6732</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>696</v>
+                                    <v>712</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>1723</v>
+                                    <v>1745</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>466</v>
+                                    <v>492</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>6</b>
-                                    <v>1087</v>
+                                    <v>1094</v>
                                 </b>
                                 <b>
                                     <a>6</a>
                                     <b>8</b>
-                                    <v>1002</v>
+                                    <v>1016</v>
                                 </b>
                                 <b>
                                     <a>8</a>
                                     <b>15</b>
-                                    <v>986</v>
+                                    <v>995</v>
                                 </b>
                                 <b>
                                     <a>15</a>
                                     <b>50</b>
-                                    <v>299</v>
+                                    <v>291</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16830,17 +16387,17 @@
                                 </b>
                                 <b>
                                     <a>15</a>
-                                    <b>18</b>
+                                    <b>19</b>
                                     <v>12</v>
                                 </b>
                                 <b>
-                                    <a>18</a>
-                                    <b>22</b>
+                                    <a>19</a>
+                                    <b>23</b>
                                     <v>9</v>
                                 </b>
                                 <b>
-                                    <a>22</a>
-                                    <b>30</b>
+                                    <a>23</a>
+                                    <b>31</b>
                                     <v>12</v>
                                 </b>
                                 <b>
@@ -16849,23 +16406,23 @@
                                     <v>12</v>
                                 </b>
                                 <b>
-                                    <a>95</a>
+                                    <a>94</a>
                                     <b>165</b>
                                     <v>12</v>
                                 </b>
                                 <b>
-                                    <a>230</a>
-                                    <b>409</b>
+                                    <a>229</a>
+                                    <b>416</b>
                                     <v>12</v>
                                 </b>
                                 <b>
-                                    <a>645</a>
-                                    <b>1220</b>
+                                    <a>658</a>
+                                    <b>1256</b>
                                     <v>12</v>
                                 </b>
                                 <b>
-                                    <a>1766</a>
-                                    <b>4075</b>
+                                    <a>1818</a>
+                                    <b>4221</b>
                                     <v>9</v>
                                 </b>
                             </bs>
@@ -16906,17 +16463,17 @@
                                 </b>
                                 <b>
                                     <a>15</a>
-                                    <b>18</b>
+                                    <b>19</b>
                                     <v>12</v>
                                 </b>
                                 <b>
-                                    <a>18</a>
-                                    <b>22</b>
+                                    <a>19</a>
+                                    <b>23</b>
                                     <v>9</v>
                                 </b>
                                 <b>
-                                    <a>22</a>
-                                    <b>30</b>
+                                    <a>23</a>
+                                    <b>31</b>
                                     <v>12</v>
                                 </b>
                                 <b>
@@ -16925,23 +16482,23 @@
                                     <v>12</v>
                                 </b>
                                 <b>
-                                    <a>95</a>
+                                    <a>94</a>
                                     <b>165</b>
                                     <v>12</v>
                                 </b>
                                 <b>
-                                    <a>230</a>
-                                    <b>409</b>
+                                    <a>229</a>
+                                    <b>416</b>
                                     <v>12</v>
                                 </b>
                                 <b>
-                                    <a>645</a>
-                                    <b>1220</b>
+                                    <a>658</a>
+                                    <b>1256</b>
                                     <v>12</v>
                                 </b>
                                 <b>
-                                    <a>1766</a>
-                                    <b>4075</b>
+                                    <a>1818</a>
+                                    <b>4221</b>
                                     <v>9</v>
                                 </b>
                             </bs>
@@ -16958,7 +16515,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>43301</v>
+                                    <v>43722</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16974,7 +16531,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>43301</v>
+                                    <v>43722</v>
                                 </b>
                             </bs>
                         </hist>
@@ -16984,26 +16541,26 @@
         </relation>
         <relation>
             <name>ruby_regex_def</name>
-            <cardinality>12854</cardinality>
+            <cardinality>13096</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>12854</v>
+                    <v>13096</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_rescue_body</name>
-            <cardinality>1767</cardinality>
+            <cardinality>1762</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_rescue</k>
-                    <v>1767</v>
+                    <v>1762</v>
                 </e>
                 <e>
                     <k>body</k>
-                    <v>1767</v>
+                    <v>1762</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -17017,7 +16574,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1767</v>
+                                    <v>1762</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17033,7 +16590,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1767</v>
+                                    <v>1762</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17043,26 +16600,26 @@
         </relation>
         <relation>
             <name>ruby_rescue_def</name>
-            <cardinality>2061</cardinality>
+            <cardinality>2085</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>2061</v>
+                    <v>2085</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_rescue_exceptions</name>
-            <cardinality>1639</cardinality>
+            <cardinality>1654</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_rescue</k>
-                    <v>1639</v>
+                    <v>1654</v>
                 </e>
                 <e>
                     <k>exceptions</k>
-                    <v>1639</v>
+                    <v>1654</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -17076,7 +16633,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1639</v>
+                                    <v>1654</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17092,7 +16649,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1639</v>
+                                    <v>1654</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17102,19 +16659,19 @@
         </relation>
         <relation>
             <name>ruby_rescue_modifier_def</name>
-            <cardinality>525</cardinality>
+            <cardinality>519</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>525</v>
+                    <v>519</v>
                 </e>
                 <e>
                     <k>body</k>
-                    <v>525</v>
+                    <v>519</v>
                 </e>
                 <e>
                     <k>handler</k>
-                    <v>525</v>
+                    <v>519</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -17128,7 +16685,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>525</v>
+                                    <v>519</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17144,7 +16701,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>525</v>
+                                    <v>519</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17160,7 +16717,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>525</v>
+                                    <v>519</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17176,7 +16733,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>525</v>
+                                    <v>519</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17192,7 +16749,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>525</v>
+                                    <v>519</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17208,7 +16765,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>525</v>
+                                    <v>519</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17218,15 +16775,15 @@
         </relation>
         <relation>
             <name>ruby_rescue_variable</name>
-            <cardinality>1001</cardinality>
+            <cardinality>991</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_rescue</k>
-                    <v>1001</v>
+                    <v>991</v>
                 </e>
                 <e>
                     <k>variable</k>
-                    <v>1001</v>
+                    <v>991</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -17240,7 +16797,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1001</v>
+                                    <v>991</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17256,7 +16813,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1001</v>
+                                    <v>991</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17314,11 +16871,11 @@
         </relation>
         <relation>
             <name>ruby_rest_assignment_def</name>
-            <cardinality>398</cardinality>
+            <cardinality>399</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>398</v>
+                    <v>399</v>
                 </e>
             </columnsizes>
             <dependencies/>
@@ -17373,26 +16930,26 @@
         </relation>
         <relation>
             <name>ruby_retry_def</name>
-            <cardinality>56</cardinality>
+            <cardinality>59</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>56</v>
+                    <v>59</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_return_child</name>
-            <cardinality>5336</cardinality>
+            <cardinality>5330</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_return</k>
-                    <v>5336</v>
+                    <v>5330</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>5336</v>
+                    <v>5330</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -17406,7 +16963,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>5336</v>
+                                    <v>5330</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17422,7 +16979,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>5336</v>
+                                    <v>5330</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17432,22 +16989,22 @@
         </relation>
         <relation>
             <name>ruby_return_def</name>
-            <cardinality>8495</cardinality>
+            <cardinality>8486</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>8495</v>
+                    <v>8486</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_right_assignment_list_child</name>
-            <cardinality>2757</cardinality>
+            <cardinality>2721</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_right_assignment_list</k>
-                    <v>1288</v>
+                    <v>1274</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -17455,7 +17012,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>2757</v>
+                    <v>2721</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -17469,17 +17026,17 @@
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>1147</v>
+                                    <v>1134</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>110</v>
+                                    <v>111</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>6</b>
-                                    <v>31</v>
+                                    <v>27</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17495,17 +17052,17 @@
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>1147</v>
+                                    <v>1134</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>110</v>
+                                    <v>111</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>6</b>
-                                    <v>31</v>
+                                    <v>27</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17524,8 +17081,8 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>10</a>
-                                    <b>11</b>
+                                    <a>9</a>
+                                    <b>10</b>
                                     <v>3</v>
                                 </b>
                                 <b>
@@ -17534,8 +17091,8 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>409</a>
-                                    <b>410</b>
+                                    <a>411</a>
+                                    <b>412</b>
                                     <v>6</v>
                                 </b>
                             </bs>
@@ -17555,8 +17112,8 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>10</a>
-                                    <b>11</b>
+                                    <a>9</a>
+                                    <b>10</b>
                                     <v>3</v>
                                 </b>
                                 <b>
@@ -17565,8 +17122,8 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>409</a>
-                                    <b>410</b>
+                                    <a>411</a>
+                                    <b>412</b>
                                     <v>6</v>
                                 </b>
                             </bs>
@@ -17583,7 +17140,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2757</v>
+                                    <v>2721</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17599,7 +17156,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2757</v>
+                                    <v>2721</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17609,26 +17166,26 @@
         </relation>
         <relation>
             <name>ruby_right_assignment_list_def</name>
-            <cardinality>1288</cardinality>
+            <cardinality>1274</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>1288</v>
+                    <v>1274</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_scope_resolution_def</name>
-            <cardinality>80009</cardinality>
+            <cardinality>81024</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>80009</v>
+                    <v>81024</v>
                 </e>
                 <e>
                     <k>name</k>
-                    <v>80009</v>
+                    <v>81024</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -17642,7 +17199,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>80009</v>
+                                    <v>81024</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17658,7 +17215,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>80009</v>
+                                    <v>81024</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17668,15 +17225,15 @@
         </relation>
         <relation>
             <name>ruby_scope_resolution_scope</name>
-            <cardinality>78256</cardinality>
+            <cardinality>79203</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_scope_resolution</k>
-                    <v>78256</v>
+                    <v>79203</v>
                 </e>
                 <e>
                     <k>scope</k>
-                    <v>78256</v>
+                    <v>79203</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -17690,7 +17247,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>78256</v>
+                                    <v>79203</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17706,7 +17263,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>78256</v>
+                                    <v>79203</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17716,15 +17273,15 @@
         </relation>
         <relation>
             <name>ruby_setter_def</name>
-            <cardinality>598</cardinality>
+            <cardinality>601</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>598</v>
+                    <v>601</v>
                 </e>
                 <e>
                     <k>name</k>
-                    <v>598</v>
+                    <v>601</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -17738,7 +17295,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>598</v>
+                                    <v>601</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17754,7 +17311,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>598</v>
+                                    <v>601</v>
                                 </b>
                             </bs>
                         </hist>
@@ -17763,26 +17320,22 @@
             </dependencies>
         </relation>
         <relation>
-            <name>ruby_singleton_class_child</name>
-            <cardinality>2322</cardinality>
+            <name>ruby_singleton_class_body</name>
+            <cardinality>635</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_singleton_class</k>
-                    <v>620</v>
+                    <v>635</v>
                 </e>
                 <e>
-                    <k>index</k>
-                    <v>72</v>
-                </e>
-                <e>
-                    <k>child</k>
-                    <v>2322</v>
+                    <k>body</k>
+                    <v>635</v>
                 </e>
             </columnsizes>
             <dependencies>
                 <dep>
                     <src>ruby_singleton_class</src>
-                    <trg>index</trg>
+                    <trg>body</trg>
                     <val>
                         <hist>
                             <budget>12</budget>
@@ -17790,100 +17343,14 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>283</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>81</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>40</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>40</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>6</b>
-                                    <v>40</v>
-                                </b>
-                                <b>
-                                    <a>6</a>
-                                    <b>8</b>
-                                    <v>44</v>
-                                </b>
-                                <b>
-                                    <a>8</a>
-                                    <b>13</b>
-                                    <v>53</v>
-                                </b>
-                                <b>
-                                    <a>13</a>
-                                    <b>24</b>
-                                    <v>34</v>
+                                    <v>635</v>
                                 </b>
                             </bs>
                         </hist>
                     </val>
                 </dep>
                 <dep>
-                    <src>ruby_singleton_class</src>
-                    <trg>child</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>283</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>81</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>40</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>40</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>6</b>
-                                    <v>40</v>
-                                </b>
-                                <b>
-                                    <a>6</a>
-                                    <b>8</b>
-                                    <v>44</v>
-                                </b>
-                                <b>
-                                    <a>8</a>
-                                    <b>13</b>
-                                    <v>53</v>
-                                </b>
-                                <b>
-                                    <a>13</a>
-                                    <b>24</b>
-                                    <v>34</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>index</src>
+                    <src>body</src>
                     <trg>ruby_singleton_class</trg>
                     <val>
                         <hist>
@@ -17892,155 +17359,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>9</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>9</v>
-                                </b>
-                                <b>
-                                    <a>6</a>
-                                    <b>8</b>
-                                    <v>6</v>
-                                </b>
-                                <b>
-                                    <a>9</a>
-                                    <b>12</b>
-                                    <v>6</v>
-                                </b>
-                                <b>
-                                    <a>16</a>
-                                    <b>20</b>
-                                    <v>6</v>
-                                </b>
-                                <b>
-                                    <a>21</a>
-                                    <b>23</b>
-                                    <v>6</v>
-                                </b>
-                                <b>
-                                    <a>28</a>
-                                    <b>33</b>
-                                    <v>6</v>
-                                </b>
-                                <b>
-                                    <a>42</a>
-                                    <b>56</b>
-                                    <v>6</v>
-                                </b>
-                                <b>
-                                    <a>68</a>
-                                    <b>82</b>
-                                    <v>6</v>
-                                </b>
-                                <b>
-                                    <a>107</a>
-                                    <b>198</b>
-                                    <v>6</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>index</src>
-                    <trg>child</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>3</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>9</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>9</v>
-                                </b>
-                                <b>
-                                    <a>6</a>
-                                    <b>8</b>
-                                    <v>6</v>
-                                </b>
-                                <b>
-                                    <a>9</a>
-                                    <b>12</b>
-                                    <v>6</v>
-                                </b>
-                                <b>
-                                    <a>16</a>
-                                    <b>20</b>
-                                    <v>6</v>
-                                </b>
-                                <b>
-                                    <a>21</a>
-                                    <b>23</b>
-                                    <v>6</v>
-                                </b>
-                                <b>
-                                    <a>28</a>
-                                    <b>33</b>
-                                    <v>6</v>
-                                </b>
-                                <b>
-                                    <a>42</a>
-                                    <b>56</b>
-                                    <v>6</v>
-                                </b>
-                                <b>
-                                    <a>68</a>
-                                    <b>82</b>
-                                    <v>6</v>
-                                </b>
-                                <b>
-                                    <a>107</a>
-                                    <b>198</b>
-                                    <v>6</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>child</src>
-                    <trg>ruby_singleton_class</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>2322</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>child</src>
-                    <trg>index</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>2322</v>
+                                    <v>635</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18050,15 +17369,15 @@
         </relation>
         <relation>
             <name>ruby_singleton_class_def</name>
-            <cardinality>620</cardinality>
+            <cardinality>635</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>620</v>
+                    <v>635</v>
                 </e>
                 <e>
                     <k>value</k>
-                    <v>620</v>
+                    <v>635</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -18072,7 +17391,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>620</v>
+                                    <v>635</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18088,7 +17407,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>620</v>
+                                    <v>635</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18097,26 +17416,22 @@
             </dependencies>
         </relation>
         <relation>
-            <name>ruby_singleton_method_child</name>
-            <cardinality>16018</cardinality>
+            <name>ruby_singleton_method_body</name>
+            <cardinality>6677</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_singleton_method</k>
-                    <v>6539</v>
+                    <v>6677</v>
                 </e>
                 <e>
-                    <k>index</k>
-                    <v>89</v>
-                </e>
-                <e>
-                    <k>child</k>
-                    <v>16018</v>
+                    <k>body</k>
+                    <v>6677</v>
                 </e>
             </columnsizes>
             <dependencies>
                 <dep>
                     <src>ruby_singleton_method</src>
-                    <trg>index</trg>
+                    <trg>body</trg>
                     <val>
                         <hist>
                             <budget>12</budget>
@@ -18124,80 +17439,14 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3714</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>965</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>612</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>374</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>8</b>
-                                    <v>505</v>
-                                </b>
-                                <b>
-                                    <a>8</a>
-                                    <b>31</b>
-                                    <v>368</v>
+                                    <v>6677</v>
                                 </b>
                             </bs>
                         </hist>
                     </val>
                 </dep>
                 <dep>
-                    <src>ruby_singleton_method</src>
-                    <trg>child</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>3714</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>965</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>612</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>374</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>8</b>
-                                    <v>505</v>
-                                </b>
-                                <b>
-                                    <a>8</a>
-                                    <b>31</b>
-                                    <v>368</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>index</src>
+                    <src>body</src>
                     <trg>ruby_singleton_method</trg>
                     <val>
                         <hist>
@@ -18206,195 +17455,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>11</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>2</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>6</b>
-                                    <v>8</v>
-                                </b>
-                                <b>
-                                    <a>9</a>
-                                    <b>10</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>12</a>
-                                    <b>17</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>23</a>
-                                    <b>28</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>32</a>
-                                    <b>41</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>51</a>
-                                    <b>66</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>93</a>
-                                    <b>125</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>155</a>
-                                    <b>210</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>294</a>
-                                    <b>421</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>626</a>
-                                    <b>952</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>2201</a>
-                                    <b>2202</b>
-                                    <v>2</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>index</src>
-                    <trg>child</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>2</v>
-                                </b>
-                                <b>
-                                    <a>2</a>
-                                    <b>3</b>
-                                    <v>11</v>
-                                </b>
-                                <b>
-                                    <a>3</a>
-                                    <b>4</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>4</a>
-                                    <b>5</b>
-                                    <v>2</v>
-                                </b>
-                                <b>
-                                    <a>5</a>
-                                    <b>6</b>
-                                    <v>8</v>
-                                </b>
-                                <b>
-                                    <a>9</a>
-                                    <b>10</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>12</a>
-                                    <b>17</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>23</a>
-                                    <b>28</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>32</a>
-                                    <b>41</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>51</a>
-                                    <b>66</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>93</a>
-                                    <b>125</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>155</a>
-                                    <b>210</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>294</a>
-                                    <b>421</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>626</a>
-                                    <b>952</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>2201</a>
-                                    <b>2202</b>
-                                    <v>2</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>child</src>
-                    <trg>ruby_singleton_method</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>16018</v>
-                                </b>
-                            </bs>
-                        </hist>
-                    </val>
-                </dep>
-                <dep>
-                    <src>child</src>
-                    <trg>index</trg>
-                    <val>
-                        <hist>
-                            <budget>12</budget>
-                            <bs>
-                                <b>
-                                    <a>1</a>
-                                    <b>2</b>
-                                    <v>16018</v>
+                                    <v>6677</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18404,19 +17465,19 @@
         </relation>
         <relation>
             <name>ruby_singleton_method_def</name>
-            <cardinality>6539</cardinality>
+            <cardinality>6692</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>6539</v>
+                    <v>6692</v>
                 </e>
                 <e>
                     <k>name</k>
-                    <v>6539</v>
+                    <v>6692</v>
                 </e>
                 <e>
                     <k>object</k>
-                    <v>6539</v>
+                    <v>6692</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -18430,7 +17491,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6539</v>
+                                    <v>6692</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18446,7 +17507,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6539</v>
+                                    <v>6692</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18462,7 +17523,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6539</v>
+                                    <v>6692</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18478,7 +17539,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6539</v>
+                                    <v>6692</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18494,7 +17555,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6539</v>
+                                    <v>6692</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18510,7 +17571,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>6539</v>
+                                    <v>6692</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18520,15 +17581,15 @@
         </relation>
         <relation>
             <name>ruby_singleton_method_parameters</name>
-            <cardinality>4082</cardinality>
+            <cardinality>4183</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_singleton_method</k>
-                    <v>4082</v>
+                    <v>4183</v>
                 </e>
                 <e>
                     <k>parameters</k>
-                    <v>4082</v>
+                    <v>4183</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -18542,7 +17603,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>4082</v>
+                                    <v>4183</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18558,7 +17619,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>4082</v>
+                                    <v>4183</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18568,15 +17629,15 @@
         </relation>
         <relation>
             <name>ruby_splat_argument_def</name>
-            <cardinality>3046</cardinality>
+            <cardinality>3093</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>3046</v>
+                    <v>3093</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>3046</v>
+                    <v>3093</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -18590,7 +17651,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3046</v>
+                                    <v>3093</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18606,7 +17667,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3046</v>
+                                    <v>3093</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18616,26 +17677,26 @@
         </relation>
         <relation>
             <name>ruby_splat_parameter_def</name>
-            <cardinality>2905</cardinality>
+            <cardinality>2978</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>2905</v>
+                    <v>2978</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_splat_parameter_name</name>
-            <cardinality>2354</cardinality>
+            <cardinality>2383</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_splat_parameter</k>
-                    <v>2354</v>
+                    <v>2383</v>
                 </e>
                 <e>
                     <k>name</k>
-                    <v>2354</v>
+                    <v>2383</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -18649,7 +17710,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2354</v>
+                                    <v>2383</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18665,7 +17726,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2354</v>
+                                    <v>2383</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18675,11 +17736,11 @@
         </relation>
         <relation>
             <name>ruby_string_array_child</name>
-            <cardinality>11487</cardinality>
+            <cardinality>11622</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_string_array</k>
-                    <v>3704</v>
+                    <v>3773</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -18687,7 +17748,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>11487</v>
+                    <v>11622</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -18701,27 +17762,27 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1200</v>
+                                    <v>1222</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>1218</v>
+                                    <v>1256</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>576</v>
+                                    <v>581</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>294</v>
+                                    <v>296</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>10</b>
-                                    <v>282</v>
+                                    <v>284</v>
                                 </b>
                                 <b>
                                     <a>10</a>
@@ -18742,27 +17803,27 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1200</v>
+                                    <v>1222</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>1218</v>
+                                    <v>1256</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>576</v>
+                                    <v>581</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>5</b>
-                                    <v>294</v>
+                                    <v>296</v>
                                 </b>
                                 <b>
                                     <a>5</a>
                                     <b>10</b>
-                                    <v>282</v>
+                                    <v>284</v>
                                 </b>
                                 <b>
                                     <a>10</a>
@@ -18792,12 +17853,12 @@
                                 </b>
                                 <b>
                                     <a>17</a>
-                                    <b>417</b>
+                                    <b>419</b>
                                     <v>35</v>
                                 </b>
                                 <b>
-                                    <a>710</a>
-                                    <b>3705</b>
+                                    <a>714</a>
+                                    <b>3774</b>
                                     <v>4</v>
                                 </b>
                             </bs>
@@ -18823,12 +17884,12 @@
                                 </b>
                                 <b>
                                     <a>17</a>
-                                    <b>417</b>
+                                    <b>419</b>
                                     <v>35</v>
                                 </b>
                                 <b>
-                                    <a>710</a>
-                                    <b>3705</b>
+                                    <a>714</a>
+                                    <b>3774</b>
                                     <v>4</v>
                                 </b>
                             </bs>
@@ -18845,7 +17906,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>11487</v>
+                                    <v>11622</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18861,7 +17922,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>11487</v>
+                                    <v>11622</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18871,22 +17932,22 @@
         </relation>
         <relation>
             <name>ruby_string_array_def</name>
-            <cardinality>3840</cardinality>
+            <cardinality>3913</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>3840</v>
+                    <v>3913</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_string_child</name>
-            <cardinality>534498</cardinality>
+            <cardinality>538306</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_string__</k>
-                    <v>466613</v>
+                    <v>469399</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -18894,7 +17955,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>534498</v>
+                    <v>538306</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -18908,12 +17969,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>439982</v>
+                                    <v>442362</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>282</b>
-                                    <v>26631</v>
+                                    <v>27037</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18929,12 +17990,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>439982</v>
+                                    <v>442362</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>282</b>
-                                    <v>26631</v>
+                                    <v>27037</v>
                                 </b>
                             </bs>
                         </hist>
@@ -18974,7 +18035,7 @@
                                 </b>
                                 <b>
                                     <a>102</a>
-                                    <b>466614</b>
+                                    <b>469400</b>
                                     <v>22</v>
                                 </b>
                             </bs>
@@ -19015,7 +18076,7 @@
                                 </b>
                                 <b>
                                     <a>102</a>
-                                    <b>466614</b>
+                                    <b>469400</b>
                                     <v>22</v>
                                 </b>
                             </bs>
@@ -19032,7 +18093,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>534498</v>
+                                    <v>538306</v>
                                 </b>
                             </bs>
                         </hist>
@@ -19048,7 +18109,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>534498</v>
+                                    <v>538306</v>
                                 </b>
                             </bs>
                         </hist>
@@ -19058,22 +18119,22 @@
         </relation>
         <relation>
             <name>ruby_string_def</name>
-            <cardinality>473533</cardinality>
+            <cardinality>476418</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>473533</v>
+                    <v>476418</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_subshell_child</name>
-            <cardinality>620</cardinality>
+            <cardinality>604</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_subshell</k>
-                    <v>403</v>
+                    <v>393</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -19081,7 +18142,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>620</v>
+                    <v>604</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -19095,22 +18156,22 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>296</v>
+                                    <v>288</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>59</v>
+                                    <v>58</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>18</v>
+                                    <v>21</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>12</b>
-                                    <v>28</v>
+                                    <v>24</v>
                                 </b>
                             </bs>
                         </hist>
@@ -19126,22 +18187,22 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>296</v>
+                                    <v>288</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>59</v>
+                                    <v>58</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>18</v>
+                                    <v>21</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>12</b>
-                                    <v>28</v>
+                                    <v>24</v>
                                 </b>
                             </bs>
                         </hist>
@@ -19170,8 +18231,8 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>9</a>
-                                    <b>10</b>
+                                    <a>8</a>
+                                    <b>9</b>
                                     <v>3</v>
                                 </b>
                                 <b>
@@ -19185,8 +18246,8 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>128</a>
-                                    <b>129</b>
+                                    <a>127</a>
+                                    <b>128</b>
                                     <v>3</v>
                                 </b>
                             </bs>
@@ -19216,8 +18277,8 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>9</a>
-                                    <b>10</b>
+                                    <a>8</a>
+                                    <b>9</b>
                                     <v>3</v>
                                 </b>
                                 <b>
@@ -19231,8 +18292,8 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>128</a>
-                                    <b>129</b>
+                                    <a>127</a>
+                                    <b>128</b>
                                     <v>3</v>
                                 </b>
                             </bs>
@@ -19249,7 +18310,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>620</v>
+                                    <v>604</v>
                                 </b>
                             </bs>
                         </hist>
@@ -19265,7 +18326,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>620</v>
+                                    <v>604</v>
                                 </b>
                             </bs>
                         </hist>
@@ -19275,26 +18336,26 @@
         </relation>
         <relation>
             <name>ruby_subshell_def</name>
-            <cardinality>403</cardinality>
+            <cardinality>393</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>403</v>
+                    <v>393</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_superclass_def</name>
-            <cardinality>13318</cardinality>
+            <cardinality>13378</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>13318</v>
+                    <v>13378</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>13318</v>
+                    <v>13378</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -19308,7 +18369,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>13318</v>
+                                    <v>13378</v>
                                 </b>
                             </bs>
                         </hist>
@@ -19324,7 +18385,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>13318</v>
+                                    <v>13378</v>
                                 </b>
                             </bs>
                         </hist>
@@ -19334,19 +18395,19 @@
         </relation>
         <relation>
             <name>ruby_symbol_array_child</name>
-            <cardinality>2106</cardinality>
+            <cardinality>2085</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_symbol_array</k>
-                    <v>463</v>
+                    <v>460</v>
                 </e>
                 <e>
                     <k>index</k>
-                    <v>98</v>
+                    <v>96</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>2106</v>
+                    <v>2085</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -19360,17 +18421,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>184</v>
+                                    <v>180</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>92</v>
+                                    <v>93</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>38</v>
+                                    <v>40</v>
                                 </b>
                                 <b>
                                     <a>4</a>
@@ -19385,12 +18446,12 @@
                                 <b>
                                     <a>8</a>
                                     <b>13</b>
-                                    <v>38</v>
+                                    <v>37</v>
                                 </b>
                                 <b>
                                     <a>13</a>
                                     <b>22</b>
-                                    <v>38</v>
+                                    <v>37</v>
                                 </b>
                                 <b>
                                     <a>27</a>
@@ -19411,17 +18472,17 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>184</v>
+                                    <v>180</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>92</v>
+                                    <v>93</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>38</v>
+                                    <v>40</v>
                                 </b>
                                 <b>
                                     <a>4</a>
@@ -19436,12 +18497,12 @@
                                 <b>
                                     <a>8</a>
                                     <b>13</b>
-                                    <v>38</v>
+                                    <v>37</v>
                                 </b>
                                 <b>
                                     <a>13</a>
                                     <b>22</b>
-                                    <v>38</v>
+                                    <v>37</v>
                                 </b>
                                 <b>
                                     <a>27</a>
@@ -19462,12 +18523,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>11</v>
+                                    <v>8</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>5</v>
+                                    <v>8</v>
                                 </b>
                                 <b>
                                     <a>3</a>
@@ -19505,8 +18566,8 @@
                                     <v>8</v>
                                 </b>
                                 <b>
-                                    <a>63</a>
-                                    <b>157</b>
+                                    <a>64</a>
+                                    <b>159</b>
                                     <v>8</v>
                                 </b>
                             </bs>
@@ -19523,12 +18584,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>11</v>
+                                    <v>8</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>5</v>
+                                    <v>8</v>
                                 </b>
                                 <b>
                                     <a>3</a>
@@ -19566,8 +18627,8 @@
                                     <v>8</v>
                                 </b>
                                 <b>
-                                    <a>63</a>
-                                    <b>157</b>
+                                    <a>64</a>
+                                    <b>159</b>
                                     <v>8</v>
                                 </b>
                             </bs>
@@ -19584,7 +18645,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2106</v>
+                                    <v>2085</v>
                                 </b>
                             </bs>
                         </hist>
@@ -19600,7 +18661,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2106</v>
+                                    <v>2085</v>
                                 </b>
                             </bs>
                         </hist>
@@ -19610,30 +18671,30 @@
         </relation>
         <relation>
             <name>ruby_symbol_array_def</name>
-            <cardinality>463</cardinality>
+            <cardinality>460</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>463</v>
+                    <v>460</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_then_child</name>
-            <cardinality>41375</cardinality>
+            <cardinality>40747</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_then</k>
-                    <v>24329</v>
+                    <v>24194</v>
                 </e>
                 <e>
                     <k>index</k>
-                    <v>288</v>
+                    <v>105</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>41375</v>
+                    <v>40747</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -19647,22 +18708,22 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>15210</v>
+                                    <v>15103</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>5479</v>
+                                    <v>5505</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>2011</v>
+                                    <v>1954</v>
                                 </b>
                                 <b>
                                     <a>4</a>
-                                    <b>98</b>
-                                    <v>1628</v>
+                                    <b>37</b>
+                                    <v>1630</v>
                                 </b>
                             </bs>
                         </hist>
@@ -19678,22 +18739,22 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>15210</v>
+                                    <v>15103</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>5479</v>
+                                    <v>5505</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>2011</v>
+                                    <v>1954</v>
                                 </b>
                                 <b>
                                     <a>4</a>
-                                    <b>98</b>
-                                    <v>1628</v>
+                                    <b>37</b>
+                                    <v>1630</v>
                                 </b>
                             </bs>
                         </hist>
@@ -19709,33 +18770,48 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>184</v>
+                                    <v>35</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>4</b>
-                                    <v>20</v>
+                                    <v>8</v>
                                 </b>
                                 <b>
                                     <a>4</a>
-                                    <b>7</b>
-                                    <v>20</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>12</b>
-                                    <v>23</v>
-                                </b>
-                                <b>
-                                    <a>12</a>
-                                    <b>157</b>
-                                    <v>23</v>
-                                </b>
-                                <b>
-                                    <a>292</a>
-                                    <b>8189</b>
+                                    <b>5</b>
                                     <v>14</v>
                                 </b>
+                                <b>
+                                    <a>6</a>
+                                    <b>10</b>
+                                    <v>8</v>
+                                </b>
+                                <b>
+                                    <a>10</a>
+                                    <b>20</b>
+                                    <v>8</v>
+                                </b>
+                                <b>
+                                    <a>30</a>
+                                    <b>59</b>
+                                    <v>8</v>
+                                </b>
+                                <b>
+                                    <a>91</a>
+                                    <b>293</b>
+                                    <v>8</v>
+                                </b>
+                                <b>
+                                    <a>559</a>
+                                    <b>3117</b>
+                                    <v>8</v>
+                                </b>
+                                <b>
+                                    <a>8293</a>
+                                    <b>8294</b>
+                                    <v>2</v>
+                                </b>
                             </bs>
                         </hist>
                     </val>
@@ -19750,33 +18826,48 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>184</v>
+                                    <v>35</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>4</b>
-                                    <v>20</v>
+                                    <v>8</v>
                                 </b>
                                 <b>
                                     <a>4</a>
-                                    <b>7</b>
-                                    <v>20</v>
-                                </b>
-                                <b>
-                                    <a>7</a>
-                                    <b>12</b>
-                                    <v>23</v>
-                                </b>
-                                <b>
-                                    <a>12</a>
-                                    <b>157</b>
-                                    <v>23</v>
-                                </b>
-                                <b>
-                                    <a>292</a>
-                                    <b>8189</b>
+                                    <b>5</b>
                                     <v>14</v>
                                 </b>
+                                <b>
+                                    <a>6</a>
+                                    <b>10</b>
+                                    <v>8</v>
+                                </b>
+                                <b>
+                                    <a>10</a>
+                                    <b>20</b>
+                                    <v>8</v>
+                                </b>
+                                <b>
+                                    <a>30</a>
+                                    <b>59</b>
+                                    <v>8</v>
+                                </b>
+                                <b>
+                                    <a>91</a>
+                                    <b>293</b>
+                                    <v>8</v>
+                                </b>
+                                <b>
+                                    <a>559</a>
+                                    <b>3117</b>
+                                    <v>8</v>
+                                </b>
+                                <b>
+                                    <a>8293</a>
+                                    <b>8294</b>
+                                    <v>2</v>
+                                </b>
                             </bs>
                         </hist>
                     </val>
@@ -19791,7 +18882,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>41375</v>
+                                    <v>40747</v>
                                 </b>
                             </bs>
                         </hist>
@@ -19807,7 +18898,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>41375</v>
+                                    <v>40747</v>
                                 </b>
                             </bs>
                         </hist>
@@ -19817,30 +18908,30 @@
         </relation>
         <relation>
             <name>ruby_then_def</name>
-            <cardinality>24329</cardinality>
+            <cardinality>24194</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>24329</v>
+                    <v>24194</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_tokeninfo</name>
-            <cardinality>5932219</cardinality>
+            <cardinality>5993849</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>5932219</v>
+                    <v>5993849</v>
                 </e>
                 <e>
                     <k>kind</k>
-                    <v>65</v>
+                    <v>64</v>
                 </e>
                 <e>
                     <k>value</k>
-                    <v>268924</v>
+                    <v>272090</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -19854,7 +18945,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>5932219</v>
+                                    <v>5993849</v>
                                 </b>
                             </bs>
                         </hist>
@@ -19870,7 +18961,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>5932219</v>
+                                    <v>5993849</v>
                                 </b>
                             </bs>
                         </hist>
@@ -19884,65 +18975,65 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>36</a>
-                                    <b>154</b>
+                                    <a>38</a>
+                                    <b>162</b>
                                     <v>5</v>
                                 </b>
                                 <b>
-                                    <a>218</a>
+                                    <a>229</a>
                                     <b>427</b>
                                     <v>5</v>
                                 </b>
                                 <b>
-                                    <a>1610</a>
-                                    <b>1611</b>
+                                    <a>1651</a>
+                                    <b>1652</b>
                                     <v>2</v>
                                 </b>
                                 <b>
-                                    <a>1805</a>
-                                    <b>1806</b>
+                                    <a>1892</a>
+                                    <b>1893</b>
                                     <v>5</v>
                                 </b>
                                 <b>
-                                    <a>3990</a>
-                                    <b>4222</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>4225</a>
-                                    <b>5692</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>7841</a>
-                                    <b>9805</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>13552</a>
-                                    <b>17172</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>25328</a>
-                                    <b>54391</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>55573</a>
-                                    <b>79435</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>95059</a>
-                                    <b>499129</b>
-                                    <v>5</v>
-                                </b>
-                                <b>
-                                    <a>1115017</a>
-                                    <b>1115018</b>
+                                    <a>4175</a>
+                                    <b>4176</b>
                                     <v>2</v>
                                 </b>
+                                <b>
+                                    <a>4361</a>
+                                    <b>4362</b>
+                                    <v>5</v>
+                                </b>
+                                <b>
+                                    <a>5941</a>
+                                    <b>8156</b>
+                                    <v>5</v>
+                                </b>
+                                <b>
+                                    <a>9961</a>
+                                    <b>13707</b>
+                                    <v>5</v>
+                                </b>
+                                <b>
+                                    <a>17937</a>
+                                    <b>25691</b>
+                                    <v>5</v>
+                                </b>
+                                <b>
+                                    <a>55821</a>
+                                    <b>57168</b>
+                                    <v>5</v>
+                                </b>
+                                <b>
+                                    <a>82456</a>
+                                    <b>97584</b>
+                                    <v>5</v>
+                                </b>
+                                <b>
+                                    <a>513548</a>
+                                    <b>1147355</b>
+                                    <v>5</v>
+                                </b>
                             </bs>
                         </hist>
                     </val>
@@ -19961,47 +19052,47 @@
                                 </b>
                                 <b>
                                     <a>5</a>
-                                    <b>22</b>
+                                    <b>24</b>
                                     <v>5</v>
                                 </b>
                                 <b>
                                     <a>25</a>
-                                    <b>30</b>
+                                    <b>32</b>
                                     <v>5</v>
                                 </b>
                                 <b>
-                                    <a>69</a>
-                                    <b>123</b>
+                                    <a>71</a>
+                                    <b>122</b>
                                     <v>5</v>
                                 </b>
                                 <b>
-                                    <a>123</a>
+                                    <a>124</a>
                                     <b>148</b>
                                     <v>5</v>
                                 </b>
                                 <b>
-                                    <a>1480</a>
-                                    <b>1754</b>
+                                    <a>1483</a>
+                                    <b>1800</b>
                                     <v>5</v>
                                 </b>
                                 <b>
-                                    <a>3052</a>
-                                    <b>3730</b>
+                                    <a>3157</a>
+                                    <b>3799</b>
                                     <v>5</v>
                                 </b>
                                 <b>
-                                    <a>4632</a>
-                                    <b>7672</b>
+                                    <a>4735</a>
+                                    <b>7872</b>
                                     <v>5</v>
                                 </b>
                                 <b>
-                                    <a>10019</a>
-                                    <b>18637</b>
+                                    <a>10529</a>
+                                    <b>19137</b>
                                     <v>5</v>
                                 </b>
                                 <b>
-                                    <a>44586</a>
-                                    <b>44587</b>
+                                    <a>45798</a>
+                                    <b>45799</b>
                                     <v>2</v>
                                 </b>
                             </bs>
@@ -20018,32 +19109,32 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>159668</v>
+                                    <v>162126</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>39566</v>
+                                    <v>39738</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>4</b>
-                                    <v>18844</v>
+                                    <v>18995</v>
                                 </b>
                                 <b>
                                     <a>4</a>
                                     <b>7</b>
-                                    <v>22228</v>
+                                    <v>22513</v>
                                 </b>
                                 <b>
                                     <a>7</a>
                                     <b>27</b>
-                                    <v>20374</v>
+                                    <v>20459</v>
                                 </b>
                                 <b>
                                     <a>27</a>
-                                    <b>183191</b>
-                                    <v>8242</v>
+                                    <b>189123</b>
+                                    <v>8256</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20059,12 +19150,12 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>255594</v>
+                                    <v>259066</v>
                                 </b>
                                 <b>
                                     <a>2</a>
                                     <b>5</b>
-                                    <v>13329</v>
+                                    <v>13023</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20074,15 +19165,15 @@
         </relation>
         <relation>
             <name>ruby_unary_def</name>
-            <cardinality>13057</cardinality>
+            <cardinality>13450</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>13057</v>
+                    <v>13450</v>
                 </e>
                 <e>
                     <k>operand</k>
-                    <v>13057</v>
+                    <v>13450</v>
                 </e>
                 <e>
                     <k>operator</k>
@@ -20100,7 +19191,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>13057</v>
+                                    <v>13450</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20116,7 +19207,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>13057</v>
+                                    <v>13450</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20132,7 +19223,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>13057</v>
+                                    <v>13450</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20148,7 +19239,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>13057</v>
+                                    <v>13450</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20162,33 +19253,33 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>88</a>
-                                    <b>89</b>
+                                    <a>89</a>
+                                    <b>90</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>236</a>
-                                    <b>237</b>
+                                    <a>190</a>
+                                    <b>191</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>557</a>
-                                    <b>558</b>
+                                    <a>559</a>
+                                    <b>560</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>1312</a>
-                                    <b>1313</b>
+                                    <a>1320</a>
+                                    <b>1321</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>1742</a>
-                                    <b>1743</b>
+                                    <a>1820</a>
+                                    <b>1821</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>9122</a>
-                                    <b>9123</b>
+                                    <a>9472</a>
+                                    <b>9473</b>
                                     <v>1</v>
                                 </b>
                             </bs>
@@ -20203,33 +19294,33 @@
                             <budget>12</budget>
                             <bs>
                                 <b>
-                                    <a>88</a>
-                                    <b>89</b>
+                                    <a>89</a>
+                                    <b>90</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>236</a>
-                                    <b>237</b>
+                                    <a>190</a>
+                                    <b>191</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>557</a>
-                                    <b>558</b>
+                                    <a>559</a>
+                                    <b>560</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>1312</a>
-                                    <b>1313</b>
+                                    <a>1320</a>
+                                    <b>1321</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>1742</a>
-                                    <b>1743</b>
+                                    <a>1820</a>
+                                    <b>1821</b>
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>9122</a>
-                                    <b>9123</b>
+                                    <a>9472</a>
+                                    <b>9473</b>
                                     <v>1</v>
                                 </b>
                             </bs>
@@ -20240,11 +19331,11 @@
         </relation>
         <relation>
             <name>ruby_undef_child</name>
-            <cardinality>181</cardinality>
+            <cardinality>182</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_undef</k>
-                    <v>180</v>
+                    <v>181</v>
                 </e>
                 <e>
                     <k>index</k>
@@ -20252,7 +19343,7 @@
                 </e>
                 <e>
                     <k>child</k>
-                    <v>181</v>
+                    <v>182</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -20266,7 +19357,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>179</v>
+                                    <v>180</v>
                                 </b>
                                 <b>
                                     <a>2</a>
@@ -20287,7 +19378,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>179</v>
+                                    <v>180</v>
                                 </b>
                                 <b>
                                     <a>2</a>
@@ -20311,8 +19402,8 @@
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>180</a>
-                                    <b>181</b>
+                                    <a>181</a>
+                                    <b>182</b>
                                     <v>1</v>
                                 </b>
                             </bs>
@@ -20332,8 +19423,8 @@
                                     <v>1</v>
                                 </b>
                                 <b>
-                                    <a>180</a>
-                                    <b>181</b>
+                                    <a>181</a>
+                                    <b>182</b>
                                     <v>1</v>
                                 </b>
                             </bs>
@@ -20350,7 +19441,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>181</v>
+                                    <v>182</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20366,7 +19457,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>181</v>
+                                    <v>182</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20376,11 +19467,11 @@
         </relation>
         <relation>
             <name>ruby_undef_def</name>
-            <cardinality>180</cardinality>
+            <cardinality>181</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>180</v>
+                    <v>181</v>
                 </e>
             </columnsizes>
             <dependencies/>
@@ -20435,15 +19526,15 @@
         </relation>
         <relation>
             <name>ruby_unless_consequence</name>
-            <cardinality>2575</cardinality>
+            <cardinality>2593</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_unless</k>
-                    <v>2575</v>
+                    <v>2593</v>
                 </e>
                 <e>
                     <k>consequence</k>
-                    <v>2575</v>
+                    <v>2593</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -20457,7 +19548,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2575</v>
+                                    <v>2593</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20473,7 +19564,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2575</v>
+                                    <v>2593</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20483,15 +19574,15 @@
         </relation>
         <relation>
             <name>ruby_unless_def</name>
-            <cardinality>2578</cardinality>
+            <cardinality>2594</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>2578</v>
+                    <v>2594</v>
                 </e>
                 <e>
                     <k>condition</k>
-                    <v>2578</v>
+                    <v>2594</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -20505,7 +19596,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2578</v>
+                                    <v>2594</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20521,7 +19612,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>2578</v>
+                                    <v>2594</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20573,19 +19664,19 @@
         </relation>
         <relation>
             <name>ruby_unless_modifier_def</name>
-            <cardinality>4207</cardinality>
+            <cardinality>4163</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>4207</v>
+                    <v>4163</v>
                 </e>
                 <e>
                     <k>body</k>
-                    <v>4207</v>
+                    <v>4163</v>
                 </e>
                 <e>
                     <k>condition</k>
-                    <v>4207</v>
+                    <v>4163</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -20599,7 +19690,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>4207</v>
+                                    <v>4163</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20615,7 +19706,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>4207</v>
+                                    <v>4163</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20631,7 +19722,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>4207</v>
+                                    <v>4163</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20647,7 +19738,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>4207</v>
+                                    <v>4163</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20663,7 +19754,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>4207</v>
+                                    <v>4163</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20679,7 +19770,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>4207</v>
+                                    <v>4163</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20689,19 +19780,19 @@
         </relation>
         <relation>
             <name>ruby_until_def</name>
-            <cardinality>113</cardinality>
+            <cardinality>121</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>113</v>
+                    <v>121</v>
                 </e>
                 <e>
                     <k>body</k>
-                    <v>113</v>
+                    <v>121</v>
                 </e>
                 <e>
                     <k>condition</k>
-                    <v>113</v>
+                    <v>121</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -20715,7 +19806,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>113</v>
+                                    <v>121</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20731,7 +19822,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>113</v>
+                                    <v>121</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20747,7 +19838,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>113</v>
+                                    <v>121</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20763,7 +19854,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>113</v>
+                                    <v>121</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20779,7 +19870,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>113</v>
+                                    <v>121</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20795,7 +19886,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>113</v>
+                                    <v>121</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20805,19 +19896,19 @@
         </relation>
         <relation>
             <name>ruby_until_modifier_def</name>
-            <cardinality>206</cardinality>
+            <cardinality>223</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>206</v>
+                    <v>223</v>
                 </e>
                 <e>
                     <k>body</k>
-                    <v>206</v>
+                    <v>223</v>
                 </e>
                 <e>
                     <k>condition</k>
-                    <v>206</v>
+                    <v>223</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -20831,7 +19922,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>206</v>
+                                    <v>223</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20847,7 +19938,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>206</v>
+                                    <v>223</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20863,7 +19954,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>206</v>
+                                    <v>223</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20879,7 +19970,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>206</v>
+                                    <v>223</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20895,7 +19986,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>206</v>
+                                    <v>223</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20911,7 +20002,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>206</v>
+                                    <v>223</v>
                                 </b>
                             </bs>
                         </hist>
@@ -20963,15 +20054,15 @@
         </relation>
         <relation>
             <name>ruby_when_body</name>
-            <cardinality>3208</cardinality>
+            <cardinality>3211</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_when</k>
-                    <v>3208</v>
+                    <v>3211</v>
                 </e>
                 <e>
                     <k>body</k>
-                    <v>3208</v>
+                    <v>3211</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -20985,7 +20076,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3208</v>
+                                    <v>3211</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21001,7 +20092,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3208</v>
+                                    <v>3211</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21011,30 +20102,30 @@
         </relation>
         <relation>
             <name>ruby_when_def</name>
-            <cardinality>3239</cardinality>
+            <cardinality>3248</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>3239</v>
+                    <v>3248</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>ruby_when_pattern</name>
-            <cardinality>3895</cardinality>
+            <cardinality>3918</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_when</k>
-                    <v>3239</v>
+                    <v>3248</v>
                 </e>
                 <e>
                     <k>index</k>
-                    <v>44</v>
+                    <v>43</v>
                 </e>
                 <e>
                     <k>pattern</k>
-                    <v>3895</v>
+                    <v>3918</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -21053,12 +20144,12 @@
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>305</v>
+                                    <v>309</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>15</b>
-                                    <v>103</v>
+                                    <v>108</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21079,12 +20170,12 @@
                                 <b>
                                     <a>2</a>
                                     <b>3</b>
-                                    <v>305</v>
+                                    <v>309</v>
                                 </b>
                                 <b>
                                     <a>3</a>
                                     <b>15</b>
-                                    <v>103</v>
+                                    <v>108</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21118,23 +20209,23 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>12</a>
-                                    <b>13</b>
+                                    <a>13</a>
+                                    <b>14</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>33</a>
-                                    <b>34</b>
+                                    <a>35</a>
+                                    <b>36</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>130</a>
-                                    <b>131</b>
+                                    <a>135</a>
+                                    <b>136</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>1028</a>
-                                    <b>1029</b>
+                                    <a>1048</a>
+                                    <b>1049</b>
                                     <v>3</v>
                                 </b>
                             </bs>
@@ -21169,23 +20260,23 @@
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>12</a>
-                                    <b>13</b>
+                                    <a>13</a>
+                                    <b>14</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>33</a>
-                                    <b>34</b>
+                                    <a>35</a>
+                                    <b>36</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>130</a>
-                                    <b>131</b>
+                                    <a>135</a>
+                                    <b>136</b>
                                     <v>3</v>
                                 </b>
                                 <b>
-                                    <a>1028</a>
-                                    <b>1029</b>
+                                    <a>1048</a>
+                                    <b>1049</b>
                                     <v>3</v>
                                 </b>
                             </bs>
@@ -21202,7 +20293,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3895</v>
+                                    <v>3918</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21218,7 +20309,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>3895</v>
+                                    <v>3918</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21228,19 +20319,19 @@
         </relation>
         <relation>
             <name>ruby_while_def</name>
-            <cardinality>1335</cardinality>
+            <cardinality>1349</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>1335</v>
+                    <v>1349</v>
                 </e>
                 <e>
                     <k>body</k>
-                    <v>1335</v>
+                    <v>1349</v>
                 </e>
                 <e>
                     <k>condition</k>
-                    <v>1335</v>
+                    <v>1349</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -21254,7 +20345,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1335</v>
+                                    <v>1349</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21270,7 +20361,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1335</v>
+                                    <v>1349</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21286,7 +20377,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1335</v>
+                                    <v>1349</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21302,7 +20393,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1335</v>
+                                    <v>1349</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21318,7 +20409,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1335</v>
+                                    <v>1349</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21334,7 +20425,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1335</v>
+                                    <v>1349</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21344,19 +20435,19 @@
         </relation>
         <relation>
             <name>ruby_while_modifier_def</name>
-            <cardinality>179</cardinality>
+            <cardinality>190</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>179</v>
+                    <v>190</v>
                 </e>
                 <e>
                     <k>body</k>
-                    <v>179</v>
+                    <v>190</v>
                 </e>
                 <e>
                     <k>condition</k>
-                    <v>179</v>
+                    <v>190</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -21370,7 +20461,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>179</v>
+                                    <v>190</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21386,7 +20477,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>179</v>
+                                    <v>190</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21402,7 +20493,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>179</v>
+                                    <v>190</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21418,7 +20509,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>179</v>
+                                    <v>190</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21434,7 +20525,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>179</v>
+                                    <v>190</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21450,7 +20541,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>179</v>
+                                    <v>190</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21460,15 +20551,15 @@
         </relation>
         <relation>
             <name>ruby_yield_child</name>
-            <cardinality>1112</cardinality>
+            <cardinality>1097</cardinality>
             <columnsizes>
                 <e>
                     <k>ruby_yield</k>
-                    <v>1112</v>
+                    <v>1097</v>
                 </e>
                 <e>
                     <k>child</k>
-                    <v>1112</v>
+                    <v>1097</v>
                 </e>
             </columnsizes>
             <dependencies>
@@ -21482,7 +20573,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1112</v>
+                                    <v>1097</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21498,7 +20589,7 @@
                                 <b>
                                     <a>1</a>
                                     <b>2</b>
-                                    <v>1112</v>
+                                    <v>1097</v>
                                 </b>
                             </bs>
                         </hist>
@@ -21508,22 +20599,22 @@
         </relation>
         <relation>
             <name>ruby_yield_def</name>
-            <cardinality>2385</cardinality>
+            <cardinality>2389</cardinality>
             <columnsizes>
                 <e>
                     <k>id</k>
-                    <v>2385</v>
+                    <v>2389</v>
                 </e>
             </columnsizes>
             <dependencies/>
         </relation>
         <relation>
             <name>sourceLocationPrefix</name>
-            <cardinality>12</cardinality>
+            <cardinality>13</cardinality>
             <columnsizes>
                 <e>
                     <k>prefix</k>
-                    <v>12</v>
+                    <v>13</v>
                 </e>
             </columnsizes>
             <dependencies/>

From b51c6d665109e725fb89e1e713a2bce383280817 Mon Sep 17 00:00:00 2001
From: Raul Garcia <raulga@microsoft.com>
Date: Thu, 25 Aug 2022 16:40:50 -0700
Subject: [PATCH 024/203] Fixes based on PR feedback

---
 .../JsonWebTokenHandlerLib.qll                | 34 ++++++++-----------
 ...security-validations-always-return-true.ql |  3 +-
 2 files changed, 16 insertions(+), 21 deletions(-)

diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll
index f976556534e..316eff287d9 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
@@ -6,12 +6,11 @@ import DataFlow
  */
 class TokenValidationParametersPropertySensitiveValidation extends Property {
   TokenValidationParametersPropertySensitiveValidation() {
-    exists(Property p, Class c |
+    exists(Class c |
       c.hasQualifiedName("Microsoft.IdentityModel.Tokens.TokenValidationParameters")
     |
-      p = this and
-      c.getAProperty() = p and
-      p.getName() in [
+      c.getAProperty() = this and
+      this.getName() in [
           "ValidateIssuer", "ValidateAudience", "ValidateLifetime", "RequireExpirationTime",
           "RequireAudience"
         ]
@@ -34,8 +33,8 @@ class FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation
 
   override predicate isSink(DataFlow::Node sink) {
     exists(Assignment a |
-      sink.asExpr() = a.getRValue() and
-      a.getLValue().(PropertyAccess).getProperty() instanceof TokenValidationParametersPropertySensitiveValidation
+      sink.asExpr() =
+        any(TokenValidationParametersPropertySensitiveValidation p).getAnAssignedValue()
     )
   }
 }
@@ -106,12 +105,11 @@ private class FlowsToTokenValidationResultIsValidCall extends DataFlow::Configur
  */
 class TokenValidationParametersProperty extends Property {
   TokenValidationParametersProperty() {
-    exists(Property p, Class c |
+    exists(Class c |
       c.hasQualifiedName("Microsoft.IdentityModel.Tokens.TokenValidationParameters")
     |
-      p = this and
-      c.getAProperty() = p and
-      p.getName() in [
+      c.getAProperty() = this and
+      this.getName() in [
           "SignatureValidator", "TokenReplayValidator", "AlgorithmValidator", "AudienceValidator",
           "IssuerSigningKeyValidator", "LifetimeValidator"
         ]
@@ -153,9 +151,7 @@ class CallableAlwaysReturnsTrue extends Callable {
     or
     lambdaExprReturnsOnlyLiteralTrue(this)
     or
-    exists(AnonymousFunctionExpr le, Call call, Callable callable |
-      this = le
-    |
+    exists(AnonymousFunctionExpr le, Call call, Callable callable | this = le |
       callable.getACall() = call and
       call = le.getExpressionBody() and
       callableHasAReturnStmtAndAlwaysReturnsTrue(callable)
@@ -231,13 +227,13 @@ class CallableAlwaysReturnsParameter0 extends CallableReturnsStringAndArg0IsStri
 class CallableAlwaysReturnsParameter0MayThrowExceptions extends CallableReturnsStringAndArg0IsString {
   CallableAlwaysReturnsParameter0MayThrowExceptions() {
     forex(Expr ret | this.canReturn(ret) |
-    ret = this.getParameter(0).getAnAccess()
-    or
-    exists(CallableAlwaysReturnsParameter0MayThrowExceptions c |
-      ret = c.getACall() and
-      ret.(Call).getArgument(0) = this.getParameter(0).getAnAccess()
+      ret = this.getParameter(0).getAnAccess()
+      or
+      exists(CallableAlwaysReturnsParameter0MayThrowExceptions c |
+        ret = c.getACall() and
+        ret.(Call).getArgument(0) = this.getParameter(0).getAnAccess()
+      )
     )
-  )
   }
 }
 
diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql
index 39220e3cddf..5ec9e574202 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql	
@@ -15,8 +15,7 @@ import csharp
 import DataFlow
 import JsonWebTokenHandlerLib
 
-from
-  TokenValidationParametersProperty p , CallableAlwaysReturnsTrueHigherPrecision e
+from TokenValidationParametersProperty p, CallableAlwaysReturnsTrueHigherPrecision e
 where e = p.getAnAssignedValue()
 select e, "JsonWebTokenHandler security-sensitive property $@ is being delegated to $@.", p,
   p.getQualifiedName().toString(), e, "a callable that always returns \"true\""

From b5c54f5a3b83adc126badd7d540af3db06cb1356 Mon Sep 17 00:00:00 2001
From: Ed Minnix <egregius313@github.com>
Date: Tue, 30 Aug 2022 12:53:12 -0400
Subject: [PATCH 025/203] Add check for android:allowBackup explicitly set

`android:allowBackup` has a default value of `true`. So we want to flag
any file which explicitly sets it.
---
 java/ql/lib/semmle/code/xml/AndroidManifest.qll | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/java/ql/lib/semmle/code/xml/AndroidManifest.qll b/java/ql/lib/semmle/code/xml/AndroidManifest.qll
index 7911b1a8518..f795e91163b 100644
--- a/java/ql/lib/semmle/code/xml/AndroidManifest.qll
+++ b/java/ql/lib/semmle/code/xml/AndroidManifest.qll
@@ -85,6 +85,19 @@ class AndroidApplicationXmlElement extends XmlElement {
       attr.getValue() = "false"
     )
   }
+
+  /**
+   * Holds if this application element sets the `android:allowBackup` attribute to `true`.
+   *
+   * https://developer.android.com/guide/topics/data/autobackup
+   */
+  predicate allowsBackupExplicitly() {
+    exists(AndroidXmlAttribute attr |
+      this.getAnAttribute() = attr and
+      attr.getName() = "allowBackup" and
+      attr.getValue() = "true"
+    )
+  }
 }
 
 /**

From 500a6f3b8656ef2d982ae8cdd1e77db5036d44b9 Mon Sep 17 00:00:00 2001
From: Ed Minnix <egregius313@github.com>
Date: Tue, 30 Aug 2022 12:54:26 -0400
Subject: [PATCH 026/203] Add check for files which provide the app launcher

Adds support for filtering which applications include the
`android.intent.action.MAIN` intent.
---
 java/ql/lib/semmle/code/xml/AndroidManifest.qll        | 10 ++++++++++
 .../CWE/CWE-312/AllowBackupAttributeEnabled.ql         |  9 +++++++--
 2 files changed, 17 insertions(+), 2 deletions(-)

diff --git a/java/ql/lib/semmle/code/xml/AndroidManifest.qll b/java/ql/lib/semmle/code/xml/AndroidManifest.qll
index f795e91163b..c79a5d5c10f 100644
--- a/java/ql/lib/semmle/code/xml/AndroidManifest.qll
+++ b/java/ql/lib/semmle/code/xml/AndroidManifest.qll
@@ -98,6 +98,16 @@ class AndroidApplicationXmlElement extends XmlElement {
       attr.getValue() = "true"
     )
   }
+
+  predicate providesMainIntent() {
+    exists(AndroidActivityXmlElement activity |
+      activity = this.getAChild() and
+      exists(AndroidIntentFilterXmlElement intentFilter |
+        intentFilter = activity.getAChild() and
+        intentFilter.getAnActionElement().getActionName() = "android.intent.action.MAIN"
+      )
+    )
+  }
 }
 
 /**
diff --git a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
index 6e015c7a237..e8bd3487b00 100644
--- a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
+++ b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
@@ -15,6 +15,11 @@ import semmle.code.xml.AndroidManifest
 
 from AndroidApplicationXmlElement androidAppElem
 where
-  androidAppElem.allowsBackup() and
-  androidAppElem.getFile().(AndroidManifestXmlFile).isInBuildDirectory()
+  not androidAppElem.getFile().(AndroidManifestXmlFile).isInBuildDirectory() and
+  (
+    androidAppElem.allowsBackupExplicitly()
+    or
+    androidAppElem.providesMainIntent() and
+    androidAppElem.allowsBackup()
+  )
 select androidAppElem, "The 'android:allowBackup' attribute is enabled."

From 6485e73cd3a0f375ce5be1b8a9cc012251c10c97 Mon Sep 17 00:00:00 2001
From: Ed Minnix <egregius313@github.com>
Date: Tue, 30 Aug 2022 13:00:44 -0400
Subject: [PATCH 027/203] Added documentation for `providesMainIntent` pred

---
 java/ql/lib/semmle/code/xml/AndroidManifest.qll | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/java/ql/lib/semmle/code/xml/AndroidManifest.qll b/java/ql/lib/semmle/code/xml/AndroidManifest.qll
index c79a5d5c10f..155213212fc 100644
--- a/java/ql/lib/semmle/code/xml/AndroidManifest.qll
+++ b/java/ql/lib/semmle/code/xml/AndroidManifest.qll
@@ -99,6 +99,10 @@ class AndroidApplicationXmlElement extends XmlElement {
     )
   }
 
+  /**
+   * Holds if the application element contains a child element which provides the
+   * `android.intent.action.MAIN` intent.
+   */
   predicate providesMainIntent() {
     exists(AndroidActivityXmlElement activity |
       activity = this.getAChild() and

From 476562ec62abdd148d60c46dce7d51c2aad31440 Mon Sep 17 00:00:00 2001
From: Raul Garcia <raulga@microsoft.com>
Date: Wed, 31 Aug 2022 12:32:47 -0700
Subject: [PATCH 028/203] Fixes based on the PR comments

---
 .../JsonWebTokenHandler/JsonWebTokenHandlerLib.qll         | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll
index 316eff287d9..5f0b823d09c 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
@@ -32,10 +32,7 @@ class FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation
   }
 
   override predicate isSink(DataFlow::Node sink) {
-    exists(Assignment a |
-      sink.asExpr() =
-        any(TokenValidationParametersPropertySensitiveValidation p).getAnAssignedValue()
-    )
+    sink.asExpr() = any(TokenValidationParametersPropertySensitiveValidation p).getAnAssignedValue()
   }
 }
 
@@ -245,7 +242,7 @@ class CallableAlwaysReturnsParameter0MayThrowExceptions extends CallableReturnsS
 predicate isExpressionAlwaysTrue(Expr e) {
   e.(BoolLiteral).getBoolValue() = true
   or
-  e.(Expr).getValue() = "true"
+  e.getValue() = "true"
   or
   e instanceof ConditionalExpr and
   isExpressionAlwaysTrue(e.(ConditionalExpr).getThen()) and

From 0b0777addfef63e86f5b8439e1ae1c1baa3aed2c Mon Sep 17 00:00:00 2001
From: Raul Garcia <raulga@microsoft.com>
Date: Thu, 1 Sep 2022 09:45:11 -0700
Subject: [PATCH 029/203] Fixing the @id fields

---
 .../delegated-security-validations-always-return-true.ql        | 2 +-
 .../JsonWebTokenHandler/security-validation-disabled.ql         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql
index 5ec9e574202..57561944718 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql	
@@ -6,7 +6,7 @@
  * @tags security
  *       JsonWebTokenHandler
  *       manual-verification-required
- * @id cs/JsonWebTokenHandler/delegated-security-validations-always-return-true
+ * @id cs/json-webtoken-handler/delegated-security-validations-always-return-true
  * @problem.severity error
  * @precision high
  */
diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql
index 15a8813171d..cfc745e5314 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql	
@@ -5,7 +5,7 @@
  * @tags security
  *       JsonWebTokenHandler
  *       manual-verification-required
- * @id cs/JsonWebTokenHandler/security-validations-disabled
+ * @id cs/json-webtoken-handler/security-validations-disabled
  * @problem.severity error
  * @precision high
  */

From 93fcaf24c19edb8c855eb8c3d730c274e19cf326 Mon Sep 17 00:00:00 2001
From: Rasmus Lerchedahl Petersen <yoff@github.com>
Date: Thu, 1 Sep 2022 21:45:57 +0200
Subject: [PATCH 030/203] python: `RaisingTuple.ql` to not use `poins-to` Use
 local dataflow instead and simply check for tuple literals.

---
 python/ql/src/Exceptions/RaisingTuple.ql | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/python/ql/src/Exceptions/RaisingTuple.ql b/python/ql/src/Exceptions/RaisingTuple.ql
index abfe785e9cb..9116430ac18 100644
--- a/python/ql/src/Exceptions/RaisingTuple.ql
+++ b/python/ql/src/Exceptions/RaisingTuple.ql
@@ -10,11 +10,14 @@
  */
 
 import python
+import semmle.python.dataflow.new.DataFlow
 
-from Raise r, Value v, AstNode origin
+from Raise r, DataFlow::LocalSourceNode origin
 where
-  r.getException().pointsTo(v, origin) and
-  v.getClass() = ClassValue::tuple() and
+  exists(DataFlow::Node exception | exception.asExpr() = r.getException() |
+    origin.flowsTo(exception)
+  ) and
+  origin.asExpr() instanceof Tuple and
   major_version() = 2
 /* Raising a tuple is a type error in Python 3, so is handled by the IllegalRaise query. */
 select r,

From 163bfc4f71364d42dbebffdd9ef64fe196fb459f Mon Sep 17 00:00:00 2001
From: Rasmus Lerchedahl Petersen <yoff@github.com>
Date: Thu, 1 Sep 2022 22:47:32 +0200
Subject: [PATCH 031/203] python: replace `points-to` with API graph - values
 are identified via `API::builtin` - `points-to` is approximated by
 `getAValueReachableFromSource`

---
 .../ql/src/Exceptions/UnguardedNextInGenerator.ql | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/python/ql/src/Exceptions/UnguardedNextInGenerator.ql b/python/ql/src/Exceptions/UnguardedNextInGenerator.ql
index 0ff11dfd5b0..d4007facb9c 100644
--- a/python/ql/src/Exceptions/UnguardedNextInGenerator.ql
+++ b/python/ql/src/Exceptions/UnguardedNextInGenerator.ql
@@ -11,17 +11,22 @@
  */
 
 import python
+private import semmle.python.ApiGraphs
 
-FunctionValue iter() { result = Value::named("iter") }
+API::Node iter() { result = API::builtin("iter") }
 
-BuiltinFunctionValue next() { result = Value::named("next") }
+API::Node next() { result = API::builtin("next") }
+
+API::Node stopIteration() { result = API::builtin("StopIteration") }
 
 predicate call_to_iter(CallNode call, EssaVariable sequence) {
-  sequence.getAUse() = iter().getArgumentForCall(call, 0)
+  call = iter().getACall().asCfgNode() and
+  call.getArg(0) = sequence.getAUse()
 }
 
 predicate call_to_next(CallNode call, ControlFlowNode iter) {
-  iter = next().getArgumentForCall(call, 0)
+  call = next().getACall().asCfgNode() and
+  call.getArg(0) = iter
 }
 
 predicate call_to_next_has_default(CallNode call) {
@@ -47,7 +52,7 @@ predicate iter_not_exhausted(EssaVariable iterator) {
 predicate stop_iteration_handled(CallNode call) {
   exists(Try t |
     t.containsInScope(call.getNode()) and
-    t.getAHandler().getType().pointsTo(ClassValue::stopIteration())
+    t.getAHandler().getType() = stopIteration().getAValueReachableFromSource().asExpr()
   )
 }
 

From d102a84e0201f63bee39ddacdab97f8193e8d0ac Mon Sep 17 00:00:00 2001
From: Rasmus Lerchedahl Petersen <yoff@github.com>
Date: Thu, 1 Sep 2022 22:58:46 +0200
Subject: [PATCH 032/203] python: replace `points-to` with API graph

---
 python/ql/src/Exceptions/CatchingBaseException.ql | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/python/ql/src/Exceptions/CatchingBaseException.ql b/python/ql/src/Exceptions/CatchingBaseException.ql
index 828cbf46e4b..5205af33441 100644
--- a/python/ql/src/Exceptions/CatchingBaseException.ql
+++ b/python/ql/src/Exceptions/CatchingBaseException.ql
@@ -13,11 +13,12 @@
  */
 
 import python
+import semmle.python.ApiGraphs
 
 predicate doesnt_reraise(ExceptStmt ex) { ex.getAFlowNode().getBasicBlock().reachesExit() }
 
 predicate catches_base_exception(ExceptStmt ex) {
-  ex.getType().pointsTo(ClassValue::baseException())
+  ex.getType() = API::builtin("BaseException").getAValueReachableFromSource().asExpr()
   or
   not exists(ex.getType())
 }

From 0599e8ac35615c3a3e7791f560deb3bee50011bb Mon Sep 17 00:00:00 2001
From: Rasmus Lerchedahl Petersen <yoff@github.com>
Date: Thu, 1 Sep 2022 23:47:07 +0200
Subject: [PATCH 033/203] python: add version check and attempt to set version
 for tests

---
 python/ql/src/Exceptions/UnguardedNextInGenerator.ql     | 9 ++++++++-
 python/ql/test/query-tests/Exceptions/generators/options | 1 +
 2 files changed, 9 insertions(+), 1 deletion(-)
 create mode 100644 python/ql/test/query-tests/Exceptions/generators/options

diff --git a/python/ql/src/Exceptions/UnguardedNextInGenerator.ql b/python/ql/src/Exceptions/UnguardedNextInGenerator.ql
index d4007facb9c..c174732ed48 100644
--- a/python/ql/src/Exceptions/UnguardedNextInGenerator.ql
+++ b/python/ql/src/Exceptions/UnguardedNextInGenerator.ql
@@ -66,5 +66,12 @@ where
   ) and
   call.getNode().getScope().(Function).isGenerator() and
   not exists(Comp comp | comp.contains(call.getNode())) and
-  not stop_iteration_handled(call)
+  not stop_iteration_handled(call) and
+  // PEP 479 removes this concern from 3.5 onwards
+  // see: https://peps.python.org/pep-0479/
+  (
+    major_version() = 2
+    or
+    major_version() = 3 and minor_version() < 5
+  )
 select call, "Call to next() in a generator"
diff --git a/python/ql/test/query-tests/Exceptions/generators/options b/python/ql/test/query-tests/Exceptions/generators/options
new file mode 100644
index 00000000000..b5ac2abad45
--- /dev/null
+++ b/python/ql/test/query-tests/Exceptions/generators/options
@@ -0,0 +1 @@
+semmle-extractor-options: --lang=3 --version=3.2

From 0c971bcc8c3fded42d9d3c19120624e7d2a88d5c Mon Sep 17 00:00:00 2001
From: james <jf205@github.com>
Date: Fri, 2 Sep 2022 10:36:02 +0100
Subject: [PATCH 034/203] update info about downloading dbs in vs code

---
 .../analyzing-your-projects.rst                  |  4 +---
 .../customizing-settings.rst                     |  2 +-
 .../setting-up-codeql-in-visual-studio-code.rst  | 16 +---------------
 3 files changed, 3 insertions(+), 19 deletions(-)

diff --git a/docs/codeql/codeql-for-visual-studio-code/analyzing-your-projects.rst b/docs/codeql/codeql-for-visual-studio-code/analyzing-your-projects.rst
index 71f72223620..87776892114 100644
--- a/docs/codeql/codeql-for-visual-studio-code/analyzing-your-projects.rst
+++ b/docs/codeql/codeql-for-visual-studio-code/analyzing-your-projects.rst
@@ -14,7 +14,7 @@ To analyze a project, you need to add a :ref:`CodeQL database <codeql-database>`
 
 #. Open the CodeQL Databases view in the sidebar.
 
-#. Hover over the **Databases** title bar and click the appropriate icon to add your database. You can add a database from a local ZIP archive or folder, from a public URL, or from a project slug or URL on LGTM.com.
+#. Hover over the **Databases** title bar and click the appropriate icon to add your database. You can add a database from a local ZIP archive or folder, from a public URL, or from a project slug on GitHub.com.
 
    .. image:: ../images/codeql-for-visual-studio-code/choose-database.png
       :width: 350
@@ -31,8 +31,6 @@ If you have a CodeQL database saved locally, as an unarchived folder or as a ZIP
 
 - To create a database with the CodeQL CLI, see ":ref:`Creating CodeQL databases <creating-codeql-databases>`."
 
-- .. include:: ../reusables/download-lgtm-database.rst
-
 - To analyze a test database, add a ``.testproj`` folder to the Databases view.
   Test databases (that is, folders with a ``.testproj`` extension) are generated when you run regression tests on custom queries using the :ref:`CodeQL CLI <codeql-cli>`.
   If a query fails a regression test, you may want to analyze the test database in Visual Studio Code to debug the failure.
diff --git a/docs/codeql/codeql-for-visual-studio-code/customizing-settings.rst b/docs/codeql/codeql-for-visual-studio-code/customizing-settings.rst
index 940a8a0c50c..8899bc97bc7 100644
--- a/docs/codeql/codeql-for-visual-studio-code/customizing-settings.rst
+++ b/docs/codeql/codeql-for-visual-studio-code/customizing-settings.rst
@@ -28,7 +28,7 @@ Editing settings
 Choosing a version of the CodeQL CLI
 --------------------------------------
 
-The CodeQL extension uses the CodeQL CLI to run commands. If you already have the CLI installed and added to your ``PATH``, the extension uses that version. This might be the case if you create your own CodeQL databases instead of downloading them from LGTM.com. Otherwise, the extension automatically manages access to the executable of the CLI for you. For more information about creating databases, see ":ref:`Creating CodeQL databases <creating-codeql-databases>`" in the CLI help.
+The CodeQL extension uses the CodeQL CLI to run commands. If you already have the CLI installed and added to your ``PATH``, the extension uses that version. This might be the case if you create your own CodeQL databases instead of downloading them from GitHub.com. Otherwise, the extension automatically manages access to the executable of the CLI for you. For more information about creating databases, see ":ref:`Creating CodeQL databases <creating-codeql-databases>`" in the CLI help.
 
 To override the default behavior and use a different CLI, you can specify the CodeQL CLI **Executable Path**.
 
diff --git a/docs/codeql/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code.rst b/docs/codeql/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code.rst
index b4969ce785d..1451901d0b2 100644
--- a/docs/codeql/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code.rst
+++ b/docs/codeql/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code.rst
@@ -28,7 +28,7 @@ Configuring access to the CodeQL CLI
 
 The extension uses the CodeQL CLI to compile and run queries.
 
-If you already have the CLI installed and added to your ``PATH``, the extension uses that version. This might be the case if you create your own CodeQL databases instead of downloading them from LGTM.com. For more information, see ":ref:`CodeQL CLI <codeql-cli>`."
+If you already have the CLI installed and added to your ``PATH``, the extension uses that version. This might be the case if you create your own CodeQL databases instead of downloading them from GitHub.com. For more information, see ":ref:`CodeQL CLI <codeql-cli>`."
 
 Otherwise, the extension automatically manages access to the executable of the CLI for you. This ensures that the CLI is compatible with the CodeQL extension. You can also check for updates with the **CodeQL: Check for CLI Updates** command.
 
@@ -57,20 +57,6 @@ There are two ways to do this:
 
    For CLI users there is a third option: If you have followed the instructions in ":ref:`Getting started with the CodeQL CLI <getting-started-with-the-codeql-cli>`" to create a CodeQL directory (for example ``codeql-home``) containing the CodeQL libraries, you can open this directory in VS Code. This also gives the extension access to the CodeQL libraries.
 
-.. container:: toggle
-
-   .. container:: name
-
-      **Click to show information for LGTM Enterprise users**
-
-   Your local version of the CodeQL queries and libraries should match your version of LGTM Enterprise. For example, if you
-   use LGTM Enterprise 1.27, then you should clone the ``1.27.0`` branch of the `starter workspace <https://github.com/github/vscode-codeql-starter/>`__ (or the appropriate ``1.27.x`` branch, corresponding to each maintenance release).
-
-   This ensures that the queries and libraries you write in VS Code also work in the query console on LGTM Enterprise.
-
-   If you prefer to add the CodeQL queries and libraries to an :ref:`existing workspace <existing-workspace>` instead of the starter workspace, then you should
-   clone the appropriate branch of the `CodeQL repository <https://github.com/github/codeql>`__ and add it to your workspace.
-
 .. _starter-workspace:
 
 Using the starter workspace

From c0b9be0ecbddc2e11aa0f37263d9bb43e8a371a3 Mon Sep 17 00:00:00 2001
From: james <jf205@github.com>
Date: Fri, 2 Sep 2022 10:43:36 +0100
Subject: [PATCH 035/203] new screenshot

---
 .../choose-database.png                       | Bin 58515 -> 112731 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/docs/codeql/images/codeql-for-visual-studio-code/choose-database.png b/docs/codeql/images/codeql-for-visual-studio-code/choose-database.png
index 71ca5d6b4c3512bcdc641be0a14043c108a320a5..58287111cc162e7ed95e8e59ecbfc84e55d8b187 100644
GIT binary patch
literal 112731
zcmc$^g<q7-_dkq?q)1E0k|ME4H`1L-34(NYcP%a5tx_W0Af@EeNH+otNG!4BlF#M+
z`F?+&`}aJ5z_YK{wKLZ>ac0h$IcMg)Pqc=bJT5i`HVO&~uA+jB777X~3<c#;Cnh@Z
zWl5jF1_kA*y^XZAhN84IorbHErH#D>3W`E>nl6Uko5AP#23m^NkI;%Bt7u6Suaz)4
zg3svZF%{`P_h#b1J+RRH*%*sCKcP*~*Mw?1P{kh80e=2A)kBk%@}-j$>i0voHIX%e
z%X=ZWZHcWh*y`ipS&aO**^#!76Tz&BOb`qn`O;z@MfFGIWRI|Go}kefb6O1a$v%GZ
z__AxbjS@w3wOW|1^<L<~SXP%V_4Lu}eyLp6#M4ud_%jrvzKkJk6uOt^Iw?3sN}`me
zV&qTpH?);<E4!D{1mA??T`n;)In#AMMak;l9ISgZ(T;IGA{EFF`*r)Ywp@lT9pw|>
z(+!l)D3)M7@|&95+h`@jXSHGt8B$L-A61MT3D!UK7YISeH!bi?wT<qio)HWe`?Qxm
zSlQe+!**EF{pY(Si3aHjQ;|Ist3!EY#l5^yZH!s3YKPuQ-%7G;%uu7GzSNRoEI-gB
z>dbw-kMWewljK<H3mt!mph_|+QRS?aWpqyqe$Ps%8Ud+u3LQVh`?Cg3_SdF`7de@q
zF2ZN61_kXK@2S*hk92qUL+AyvDz}3e2wi7xGcA)|u#%X*?41qYNF|Hn19>LxFw2!W
z$UTo1eD#>0TQ-zC&@PGyl6?GuL_#N%2}fCDDFZf)f#~Cp>0Kt{Th*mgiqV+C5b4`F
zAHZ|_$%(^s0DDC9+28%_H7BZx!q=Bx2dx^(xnH-DbR3v!8kK!zlkI|yVvejMIJ$cr
zpo>IO=5KQwtWTWXzFnQL+ejKFzf@~~5lKp38iQes{^bz{1ch1SM-mouC>5O}-1bjs
z*IOQwU<`9QO3aY@cRV%pjX`p#)zP0YZyzP$Low!_T#jQ)f~JGWr@vK=(Uk`^)db0M
zdSknYN1^&0H-8CAGoLWP_D1E~2=d<f`7`ol`{(D}hs*0nZ~<IO+b=T|eZlf2v%yTS
zQpuz~(nSzZJDZ83T=o>M^I<*{$PK@F3OgCiKTe&H^Ok8*vu0V&r^{!%0S#$>qDDlP
z*(D(ZIGhcjyU`e%_leZpo9HdCocqN-(el$^iup-#$Wu4hy&R!!c}V~1r7rCt?^66J
z6_iRBbC<xzN6jaOp`Y4#-zol0j|XFalsp&tOJb*O59hbop1iU>sEJl2Ht)xnS!6Bx
zkKTBbI6WLsnP?2Jxs>}AzTX_5CGriS4EK=|`HQ7>$*yzn=G5lKzqO*Sr=o8C+*C<b
zON*|TeWJqeFM^q6h_z-xHZ?jkii@(<CU<^$&fob!9ZJ^VKQ($ojq+d?5D*aAxl5n$
zsAi6m<{@m&{em6Eofk#WE3rC}<ePg7LMr%y@ZE6{`6HeWPYz7P9e?0lh0x(+(@U}|
zpxS&8t*FC1bR*AvS`sGoi7YkL;sf7T6v`i#HPi>FH?JQHK2;0m`Ay&Qv?{F4`O-Z&
z;}d23;||QwM10}y*B|lSdeL2^mhqnx21Dq7DWE1tnA0spp=r`hCHW|@)}fZY<_GaX
zjbL=Hs6q)1pys4V1r`K45@PxScSc%O)4*MDNNT~FI2#f#UH?nbnn0NLeQ0{&%pbJ|
z8nF-~nd(CLALRy&$C>Ds!TKM@$Z$44)anVRhY!|d>0#+aXq$QH5&4hl)_PXp+(Z$%
zppW(Dtv`$Zk>VmQj#Us1?q@rOdy55Pcg0Bbww+X?3IBxrmN{l}#wx^GfDA%RrN~X#
z)=}1ZMU|-`UNZE*g01DxBCKA;WlHDD8LAk{FRO~G*)xbUUnD9pG9(iX77#0MBw;J`
z6*U&+6`2*W6+N58s6$`KJ&=3GP@2L7YlU$mo*^_5BnTc?uxyU0^ht5A7FudqYH=z@
zD)SJN5=L>xH|fU0>o+N1g{Fn3U2Un)dCzIiD<dKziX#%_+9UMLn&evhY2w@{@c6_h
z-EHD|pE<CrN*YKl$%&}7sro6GPC4vKp1J!z3c%`!2u!{YzL!k-y!&NvhS+*+vSPYo
zuKf#ADfWv+Vc#r8wRVwqNu%+8vQ7rS?2=AS;pkL;+555pjhhnBglE!L5VZ=m&N0(G
zYT+G^{QYEi2M=kFC*My!1orc%14e$3={$WFHl8^!-z_-$XM$mGVb|r{^-Ss9bGLEN
zV}F0o?@#F;^<UM~5?|IFgURP9oN*CP(<u&kT1<{@qIU5w@YfS%rS~EX$q}p0UriD}
zPt^1}H?Mp2sLQDoY7`n4Zpq=wUB<bX$!~gZ4)*WIsZ)C4&QR_Nq)IfH|LOefrJ_M3
zpMsWR!<?h~PQ_PcRHa9?xWrCXJ=-&jJo8D`R%Ru)i0!P+7#AKFX-+k_gynr`*|<5+
zY3A0*n-NDGqF79v@IK~PomeAfkzw=U*7P=xBLmG!Jso|W@`~)r@0FvK^7`t{RgIly
z(zPZFQTDU*xs5(fc2+sIZ9kfRUbN<Yrk<;UR?Qyfi>-)H1SSVG-tl34c{~i7Gs)|*
zke~iFr3us9^&Z6XK)4c$RJz$x%8_mJsBl;K&Z}Bw^DMPaw9X<w$A&033>#*kXXy4+
zMwa3ki{Bm`S6Ag%`BWJg9>q^k69}0eMwJjaEmN&rIi@+zE$<$h9M&&Wt{D3X`e2I9
z`Yj{Oz2gyvzZVXWeZx!2+uA!byAJTY_4iu=Da8XZW*nAzr=Tmen-PT2!RfEL;pQJ+
z1xE#eV}Y%KBDeVo4V0`@trjq|AmyO^2j+(h6wB9gKl+0&UdO&R`rz@qkgl9ga$@$A
zl|6>%Ge4Fa?Haop_N&*&e(_){^c`=^=Y%v`gp(BCD6^^F5nR)aaI=e4@K=Z|^Z38J
zI>D5ZdE1MK$}xPySzyouk3WmgCGdF}^E{1Ao8bJ#;;VPhS9r0hNrY^-zWTl5f0djW
zp@%;l_nzEOVvN&KYx%RcslTDW#qAV?0Bee9jG3E|h4E0qKZ7{8fp^!jE})LSRY;c2
z!d^*r=w>=`nxqU~7@3g&>e@8hC0nraRbFa-awlJhmCB#Y88hL2-*^rhKeODG7S_$N
z1Ob`?fqN)gC00Au4G$)H8Mz3z_^GMSOnbhHqouZ`KtYdjPY^36VFjT(_FXs|WW4US
zUdLQ){9@cFYlRh?I4$~nFO^I9m4}+lSVZn+Yi;Y2>kUHd)N?20lm~&Q<j&NZ{Dx?h
zSuJax*(3S6@)8SD?VVVe!E>gim-4VpSlkoe<HAl^lj<wQlNzp1HFd{5u++hu(myIm
zDmGbrf*!x7tz=DPyHt8gPfGdJn={3&u6xK2$a5^|d3db&$Lq5Bf^-HBju)18G<INP
zNQbKZWfHfC><r;*o6g<ag;UxG;`=uawU)INSKFvvPbi;n;Pl}bkhX%~wf(V+{sfaM
zv$N6P-RZmSBMqcEaYK#=DA%PoaGt;W9!TzzWxf!%6*AmhJ)y7JuyHb^$+oZiN;j?I
z+U^`OvokC@#9#5bO0&WSoWSX1XxHJnusBZgC1yYEXIfji%D3m*9mXtrUKRlp*WYnV
zD3t{K7hkM;+r7Cexwc)}s~hbd4bLfXR9tYqAe{yC8N@ZGJKoi))>Q`hbzi*UTjk>u
zQSoH2l(i#i%o7<nY;R{X*EP#?TPayVZ&SVu7K;%BUsxV=)Pik|PXlM~zZ*LQRto<R
z)X++pR<AsA#OG@eDB)|O{wO-X44ZTRojCm2A(G>nF3m5Ay0aJOe{Kr{24dpRsWNDe
zgp&d`Tuvd|Z7lKy?Vd01-|p{zo!S|L<O%tt2VBexJ-9`V-{ebphj@Hm|1#Hi{d_$A
zahK1%=ck$S#{1;U;{IXrjGRTeCh87C@2%dM#B!@Dm+JTJG;SSmIYgX+z`&|~7gNjm
zt>-Fy&I|kKY&9<+!MPgNd2v^V!HoAU$m=S=t4;SNDH4QdK*J>d{U-C_YKsV&GERM3
zFj<f;#uKD-x(r9IkJXF~gZtb6c(Vp9ENS0Hj?rpY9~j?VTTK*jtQ5A17!4a;cIe;E
z{((1jiQd~DM(_I^b3VL3x=F^9qiqT@4-ma!J)f#y9V}2R8154Ex4EV`KQ}TCG%iSG
z**p)z{^0ycUmvA?0UbpQ7X|%b>8sh>jt^aQ-|ib}LmnX7ccxw5k2Em4);8OI&yA|0
zT-b-eNnvxL9kx`|!Hl%Q-`nt>HA3r`SKb=(&X?lToSk=si&5Gzp%|y1pP%boo(C*E
z4GZtsbcz0kp^Z&&@szUFnERCHXBUBX(DnOxiPaEpRJ`NOJ7aRe#Lkv@)>Gj65o4jJ
zXsN1-@)F2nqM$vZKzRb>9s!T|Bg+4imwWUA<?%n?QBhDLZBWqur;Zws{{1Ba&)+ux
zNgpRipkM%Rguvtd3H5(#qryHt{@?tgPM{1$@{P2jB9Oi@bG5K=bhCDHFQW>Y20map
zE9kqSpgd>#`#e(AVmt==pS5|b=dP!!B5da5z-eOcWNN|b?cn^k9~4n<VIb>Z;ci0b
z?O^ZdChRRn|4$8JApiF>n4a#RD(-e-^m?iqbka_)7IgfaT%26=;@EU_bfT{2mcm*x
za{tpDcoU<yc6WCc27|r4yg0phIGtRrz^{aaguq<fU~X;>pazGVkE6SZH;1De!+$#Y
z-+p8)+{|2UoZW4l9O?e{Yhvo;;Vwo`|CiAJ`Tb{{7Tz}hrR3=LKhpvx2>x3Fe#OZJ
z{y%*KO-28H71prvwy@Wiv2g%+2G9`a<>eRsr~dz^<i8aE)l%=jEd_YF{@wClCI9c1
z+HMxE(oPNlNq6!8itB$G|GV&i8j6Dd&ir4T_z#=^`3mq^99tCpe`F?(-3PBp0K`aT
zBcuKnNP$K6&u<O*e*rvyQ{Wj|LGzZeM?rawq9`Nz*89=Hihhcrq9^UuYm$qA@|T~2
zUov8URV^%u6XgG5uTcL={OPFNsAD5^d+`>t5O4ZuV{&<#e!(}9=8S9du?0_M7IP_O
zqY3M$Z^7M0^BFHk?pinL9OdNt(+Q%Xy)MJhHsrO}<z|pXVAUF~I>nq~1|}nF^lSRW
z|0d&4LU0wK1vrOU*8lztRMNnoKklKu=i-BvFOzj5w{yle2aLV)MUj?iZ^mGRAu@CX
z3TXe6Scd$Fz@-!hcbsVrxEN+Y{0)0ceoJ5>iC>Sr_;<}r2DIeFaZQVl$!UzR!cVDz
z|1Q)M!DIv(i+E_eW<&hrwDl|n{!4%`1Oyb)qE57nsY!`D@g*Y_|Cct<#RrSOEy)AR
zX@s$m-=y=gnEy3Pt~Y;a60h#c=R^FjGc7;<n*pNgK%s>C8H<7l7831~MdH6_wM`bn
z2y-(Ox~ofvw9~%y0snhEjj^u@5qvsciqJW|a0^eOfANDX6et3rj4o|5!cKJ<vI_p)
zsZIn?n6}=$_c<l8S{Rn~;oofMk)^{zs;uV)!W5yU2{!$i{}oj9k5d_-@Kh!!v>_!?
z9pxSR|HXlL0tG4YfwU>Gog(z+bMoc?#n`sL>@o8I<nsS3ThZx`VTu7QCemX4=fQNy
z7X+CGXueA>hT{$qJZ4V-UfWfG{tlEReL)qFZmT59FFCbE$c^HSsiSK)xguIgEJ__I
z=k@D-9nqmpH<=Ib2@o$v`r{}?{w_QQ?>1a#!jD*cO2M=lo1&P9jIfkx^N7D(A|-j`
z??+>P85<Ln?sre{BTYvkW4kNSjxO@23CnsFW#Cm0t@!&te)mk3xVF+(!|5D(c_Lov
z3|gIpk+<UB$DiDG#`0X<@7kaE0kWI6j`%yg^Z3_<$LB^p`knd=iD&_{n3oAbEBJ^E
z<G|K>pVRHJ*-8T(keB!`_QEXYm{=UCz?%#BScl)GFdnV=f&bn4+<01Q^?NBAo@2r8
zIe*7oq4&6y=fZ(kT9xBl#w5-jef>p;KI#YgIGDiJ<a&&T@637gwh#2cf;uHb*S|FV
zNu6ls-sPvS)_#2JWFo`wHm@U2h$!zSw0uo4z7>bVFVPi^ia;Jp;6~x*A`V{f(!ug!
zDgvkVUrZ`fQrrrU!b-AH<8&mT-VPPuE<;^$8VMSfTkEos{tU%cWon05zq1zzu`zRV
zexYGKqL9Xz9}T?g<I3sP+RHp^c0?g`vuuL_)C0PN(h<~<*Uq_$d$v`W$R>v+VPK+c
z<`kNzIB^$rD82=ti#AXAp8aCOF8K*_O<$k;mXF=g+%r)1;(_qbg~bXZdt2z$aCl}m
z*Uz`qV!mfzvtXk3W3+r|D>5w18t`KSr2rZ4lw!v#ipXP!(0jx%vrY~rVSAZMl?tk0
zn779&p0^hB69k>T$lX@A{2#&W8Z26uUbLF3dFW+7^Ie>(xKW@SwD|n$WKMl*R*jZ-
z$2jAK$>aL#a);ylJ3pqNBug5i5K{7xKRqe<yNccIP(7=KIRR86g09kUi0MrAE{6&>
zsleYqLQI=nAMWqsX%Qc9KW^gR+}&Jecqg)>wyUD_-H7sS*@Y+0MV!07qV<J0>JBqv
z41U}qYk3)~I5tzRD`FhrQ4ZR^ESSkSrsQvb+ue1&S3bHoP!&-`KX-1if>|x@xZ1AY
zz1A5}u97=_c>!M%!N8;OZ?dI_H%WIk#sT8xUw29sCedxkFj;5dG;v%`yw_EwS~+WW
zSXvcw{t%>SoMW4#k%cMh`&Rcoq|NvI-IUHz`U~Vzt(pAK;h2Qz-#Z0Cnj7)Fr<s`T
zUoq)63zPRW@8V*%8a65UR?adopGtio)Dnxk+9MNtQR2_fiJB&$+5{S0wt*6GWjinq
z<ALPA4Y)}5W>#{ke{Mx1)H;l;5mQ%1z5~Jb9;N$T9`4h@6j%>nYd<0~Ps5z)r{}8I
ztfS!PC1ZyIGv`H#NARU)zV%D~bz{43C#UYomvhH^klCyf@~jRYqS}th>Cu&q@z@Ue
zcq*SJ+wQK0qNC;N1(eEV=^_HN-gh~li;X$`t?LR^&k0?Tnw;j>6QAdlM2ChHb7Ji*
zk}issGln2i293!zR^$1}PDIit1ww8mKX-hwavlH`KoDX>biz0XHf0;)#z6JBjV-?)
z(7eUeADFs#fvue22V1=07{FPW?h%F8g&wP>Bu>4J@WK8f)1%}@UPPtoOOuUgl!6j0
zN=H5;mFn==PnYrs8_Q)nk(%0e_w-`gL~^i8+?`EHjp25Rcpbiw$))v(RWWXLEk5xo
zRY}eaJ(#bpzj^~^RyX!Pkp*3hCHX+8Ud=*hwi@l`VkELJ9G3Qmy9}Bg*({l&+K(Hy
z04-s=vAQbI?!8zwXKpc7GK%|o_5F}1und!%NP>Zy8Qhq|sp#T2m$cSZ`KctRkfow-
zQ4p37<+^ClF9Ndgk9hR+Vfjy*X2yB^np*M(WIj*>zPhhJWyxiJV2BZw@AOx>vq_`G
zD?$y(n)qN)(v7&^pbZ6LdMsW>>S!1X?{1~FrKj)%q}}sA;O4^f`Sa)4mRv<oO0ncr
zY`!<!FD&9u286fJuW*U_UD*FZ<Jo<!MEX3QWD0lOx&~}Se6NF*@RkAI0OkF&2O9==
z*(+S0_mAuL$)JIBt+<Gutv9*Svv<c=U?62H`hxDR8?~zUT8+Iu#G#5u6Q8BkS?CRv
zZ?0}n$0^|=Umj}ER@!}(PyN+*&gYE5DYy<$w_U$qe27#EgrvewJ?Wzm#lb6A#`c@|
zA?rUJq~q3~r*!FSzGISM47iL)-LwXtoVCq8+ec;&Hizx_grPi5No>xR!gpO_q1QNh
zOk64Ch9)t_gNCOsL!sL<Dgv7OnUzeJf`c;<dvUYT2gcUy^t)91IYKx5oGKsKi>#3B
zk`~pLq{+>J1kwtyQM+E0FkEm1H`!>iNPh><r9{^1F!U-2xm7&*^@hN9TW)VMHof7X
zo1uSiiKq8!7!1z1J;#ywn8;Hr<awZ{uiEN&X*8(LSKRuB8GSM8nS8mEto${C6JBpM
z&IkV!NQjvEqmb3V%)s^W<0Zpz$7MRh?~eP3kXKa?CMR2`G9R)r$)@^UhLJ~1f9`J2
z+emHv_$_tlt!XIHerG`1XNW@+85HgFZPci-U^NW#(2xi!2AB$=uPXUFO|^6PRV<$a
zwQj1-`C0)Sxl;848%*Sk=~0Jw@Un)A&NCX(iQh<9P&G3@1rx4_X?eT-*Q^`}t}msA
z$Oe`8t*^AHSBCKCkS^zS|FUXL%=4=EZ6fjsI#bV2CX0+)oY(cePu%v9h^^r*Jx9^I
zfoIFMij5pWTFmq;YPm1iShdZ9Dvuy>=&R<vFGDhP(rz{rBv?-vc83Zm5d4!q_w*nx
zPVytBk=U(~Nm5C_J8&fY>wP*-!6i}1jLZjoeaD@`xwXmtzU<TD@r(kLV-W|fcwMf5
zxKVQFM`k5vOFoY0d0L65YPx>)QO5>%jhp*N;M?k10#9J&TVsH{7(Xs`El#}rK!B!c
zwsg=!;kb$=M7hVsB;<eP3@R`1M<^~R7Cm!}h4Y5}=y_f{L#7%5sOL57s<w3k*AjN#
zT?gI${WMe5ZbKQdTn80ne3&LC@&Ya*T-~nKGxe^XNy4j&GQZzoXXa#IjVo4H%H8vw
zkEIYI@&f~m*=c9o_yrNc_%+tEi+xX1A>Xq&({G5A0osf+RnDRuNc;OKpZhO#Tu~n{
z31Jr=)&Ba|6|o;~^e-L#D=Gq5#sSM5``Z3;$pCfJVX3itX(w*1=>@d=Xv0dokaB!c
z{@yp)T7u?gd0xe3tK-$lJ55W}{dv#)C7JG|)3L>3W#jZs)1Y%|zLTMH?}~}j2hqIt
z5e`to2uP-fTX9pN9!jgVEpHbGi`(oCdn$C{wjtlN@gk2A_P*%1+&)#dF*9=%vy@m2
zrGTgwWz(NMT%=gQwL9oXAwELszMR9a>$tW#pd#X|sq|}*OukNh5X5jvY)R#5MgBD2
zqnUvI$B)@iJ>S+QJKtVO>0@C^ImQk!!b0BC7&D?VvuvK+g;w#mtA6(zFP_?84D>D7
z@}RHLA>ev`F5J9$d6Nh3oSVsPK8kI=6rObLQlC8Wu3&Jy?5A`}Pjf!e3hiUYheuuc
zosOExO73*#O^M%~8J=`a7hGMW-o_p+3*{&+Tl*QDyID~7dt?kxt9a>`rL}&>-}KJX
zlFM*Y;C@4xty!O^h}Fv5%g`A(1`F<}rA1gTFk<<TvSvb9(MNgwt)T-T*d|0Cn&m~;
z%{#<wvWbr{S??R36~k=Bl3P+d8cHiK?jWCF0|k}4yO!`{3c*{B9U>F!O`3^@ySq=M
zw%3c`*%RKoJbW;RUc{~J>rYjo92_=a{rLSR8>LGlizOG1CeL>G4g9pPY<A{X-zDND
zL1qw|GfOr+uu8mKeR0P@)pz+w44Z_1`-FY+Pe=R>+<SAC5#VEwW)3SzK8gU;OA7Mp
zG%OzeW(DO%gneY-PqBtZl2Gb5kNkYwjVGxrwJNJB248M1PgJ~d?qR|7nNi}<QQiH$
zm;F@o9XuG-_?=T*+EW}_+TW6p1;27P8Sl3#B<l+`Qwo<j>iA#XvQGlRN2^^<7@0X1
z8=w8t5_$A}%CcMv*h+*ud!zBE6DYFY`m#0>y56t(pN=N4DM63;iL$2?y$s&wcf7#-
zBXNi6deqVKjC-}iNTv5C>G-%D&vX2ybP4a$Gc$1f)QG+&8}sRg4BWrrZst^Jelw6N
z9E*_pGM%Q}l=o0xxMS|HO?Mk(-KN_tyW%N^V+n++ww{ApiYD6yQmH#dwouesl6UUU
zM1hEMYBeK7Y$cXm+KJh7H2rdF|H*&7ACXwV*)+XZ;`KU~1JlD0w&dpG9=#_J*Wb4I
zX^FE|pnY)BuA2I#vi_pV%J{N!-r7fVX-9<f)$!-a+3Cs*;qih?Ei2r$8?Dl&8P6d|
zg<oq5Pm-Vy!W?vB?C(-r@w9h!f3dC(L{m#hM2jC2jWI=<66{}AALp81?S+=kusO7H
zcnScOA2A4yu5rH@-B>RhQ(SH|^#5$9-Vt1%bfV|NM!ka`eqCRLv{0+(UfOnSiks5x
zC?_Z@`dsafX57F<&%|lBgpK#8;wM$GeC99c7aCRr6>vi5#<fT7`Cz4>f@$+&<7K#?
zB6P``T}+-gX{;vB(}C8JnXT4T6RXStC*YHn0cZ-Hm$v^TnQ;fFU?2fZ4EMo3V#`0z
zLkYyf$(zPW^wh7dZo#{r(D4)MIlbqHc@5Q1Xy{7$e}#ql;2Lm)L)d8pkCkb8;R88v
zipqStOZ)lMyOT|MCS0fB8?Ho8VyXTj)L#-y^SSjQ)sXh=-z_C4<6sY4lHFN0)L{Yy
z|F5{yKy%T2(58z~!V2lB3F&xfL-Wy-rgfGo;MiIri{^{vdb4=d-`Am(y<(u!y>!1A
zXgB{$!6(ij%Do3am}HDt5ASp>P~1&wtn>LVIi*{C?%wtS9Mth!;AkWP(b>;Ow^)*b
zTzkKg(4_r)KyAXkt+TGNNrU&-+0Bhb_#bjCy1(1T8TAaqto@mcd)_T|SCi<QaQD;Z
zhs{t@;IQ80XV6>}{4%bE{-;sqfjo3ecAhIdCW8gHyNQoD-zLU$4t!e^0JWKh+f^Cb
z_ZD9wch19P6k52Kf(%zZgo#v$RJS(qT-2pH-#PG2WnrL|sP>0xFdVL&vdC7waJn(N
z`EL4)>Fit>xatA-ETz4dCpw{YJ{|I#9ydk?W`}{vh?(+-n9E#3*WM@5<l%r7*}N(s
z-k45Ih%m%|10l7vuiShrG$Mj;xlJEc_WjMk&UgXXNr>T~iK7nw`55|Ya!99uS^r82
z+MIFBJJPV3!HEo>h-0qwV^V`;qZ=~F@7a9YDkMa3FjZs-+f=At`3GZWm9mz)9FZD{
zIz(#Zs9a^SUt^alO5MRZ!h%*x?*nT=x~pLr#x|3yMqf<6xNZ$?ArPhQ0`BXqpfzLr
zC0c=-uYo6hI~Md)YNT@cpyM!|_(c<hC_$z?+T!A#=Y2ZiP9HN%{*CNa%b|Sll8eVU
z=>QAdyGf9COYuf0p9R$|0!6EXS6Q+_Ec(=_n|l13z|Dl-P&8rx(51FS^zd?<IV#}j
zuKkc6rLA=)F+sW}CDDt`gJ#TB!WFXU$hL=JBFl*DOF^B23#oHhbUDh0KNgW~vrll&
zcD+f!PPnD;4`=bOh-isqoU&!;l$?i$$7?Y3kL2^Z_iA4|goHqG-1cX6!#~ExqSFil
zeDHOMgfg5=b_Lw%3?|g^6#Jad0JjkklpW*xL&$9=u`};xlR>f<I4HY)B5}#&iR10i
zo1>vbtYF2bJO%r6<w6=F#y<I&6;II4&hHsp76aI%MUR*k55e;NoB9IwnN{wJ-Z%QH
zr8zp3ZO3z+89UKG+CdXEbM#J!<ZP|pMn^L_P~^t`H-ZGej&U<~1FAVwsa3Ud#@jRF
zxO(7R;71UwNr*6di*8sN;g2F%DKA|2Ue@}jalm<6T^JVOkY`Tt*T*h*ldPkS35Rr>
zQOu;cM6cwaHp?coagEPf)`&;>wPG~ZY&$2Tr(Ms(Brys)$f(d-MD6c?)iJcDO|RN3
zAmPjbw8v$;csR5tXN0ar1+gmz)_+u)VPcTX_8b+ioLA&E1$)5#MtOCmRF-tiJhUK?
z6WD}r5v%W{Khc7mh<*z?EycBwUYdmh^BL?s?Yl%CiQ7en>l(^a!2O2T$xYJz@_}QX
zK0UtKpsP(oK{MaRZDdJy!C|%X$ci1&5kKn@sZMT(&9tAo6)Go%?$oy(WS0ag$qldm
zZh~4t8{iBJp1jn7ADGZ+4W12$7cp$1^FqjKWlRZ7n8{WoYsU`4FX<Wm?9H|HWY%7D
zeoQ!QNZ|cV1s8ck433|5))vIneNWxcb^nfLPr0XIE$QBMoxz<dTob)Z@6oYJ_K0q3
zj*g-KE7nBjWVNtE@;7Oe0`r|~FZ7OC)<%4Lr^bs1mHsndI^JctfAe6~sV_Cf;bI7&
zyS}rndxCY=ZRh)BM7tHh3cg}N%w+i`x@qVg<A$ZmXxjvj%;WuhU!Vyh76L2{;kFH=
zL`T;Zggf8L;NnMw7cIbSH~mxg-gK`pttVN+e!jvCxG~E2A_&%hLEYvhFOq{)&a<hj
zYoHH}dg5ZZXC{6$t#+?vV^3kov&=zX)8qEu3f@h>wHZm9-+kaePf&6w&VbvShrYrR
zsLFr9F8wAxajFFvh!HUwIsrndm(3+Yo@qWU6QkBK<!}osn6+@;HE&)VQSBm65fV^D
zJ9j?MbO^t>yK4%7`OtF-0T#<4u2MOe;i73xuzJ(Ux-3kltxASc^BFzaC8TWAArW3&
z)ZR}?6vFu{BSS$1v6TsFkL#a2{n1YAsT=_AOo50>JZ)%^ecC=*<`ZS+FIN44GAHp3
z|LM66^~eC$n#Al(i@_6J5<TWOylYUwFGei-P3Qj8x!@*E<G6MU3czRj`iHGHILX0y
zz{k4o{f)<9<9-!-E_wFO+WkeBKTY2tFHwj`_z(3!1TA(Mzue5p@YRwSo~q9cIm)7W
zT>#CvR9IKlk8CZI-y}qZE`=&mfDd_@Kjr=(ckc_#X{>WouJ4TPY7J&gTu^T?C?O#{
znoUJJ@Km6yLvXTP3Gfrv5?r-)-6(?Q95{ReFe+a5`(m}CEpBt2`<9_gG{S~;Wr6cZ
z?d}bu1N5dlS>T_Z$#6o9q-e|y8C_OqgD;a$yq{;EC_%e+{dYvxSdmvh@$RiFZi{wg
ze#^@JUc1eCC?tL`zKspij1RhL4l=;>w6<@{Mx@ycrX+&bhLRJ(394%>z*hKI_a+ek
z8qeJK-h7(7gsxx<iCzE8wlxkU;6&E(DB2;V0_fih1f2?~^T9mj%8w*Hu*{gYhHVCs
zICJ7&U@RZH`m_1I=GZkY<GZ7xL8a`9GbeJN|2XU)Ve+;kv!08#do*r@jcQ8~jRj?V
zWcbth=2&&dZ|%k?nj2`I1GpmuQ9B^F0}}TqQyIc=M;$D01LakI3rWT>Z#*7@vcSll
z9oe%ai2uktbzEd-aPj3oZggM#KQr-u%L$2Xq!K3IceE*2nP6!j+wLpZuIHE<8DV0d
z03*YN@^}1mL3c+(C6Cj*FKq|+J(v<}7o@1%n$sR};rXXR{OLrMX_-OBF^a4IIMP2*
zq3K9LH)Y3wtETP1$_;$&zVa_hu{o`99q^0b4-+itTsNpADiP>x^U1hTeVPe{t6=GZ
z(!(r(4oGkguc}IQvhyPUgNl5{e9Em$&|>>D<B&AIH?lRx%rLSHoBQzgX6+$xP?`|&
zSv!e_FvJS;j1bXvJKSX-<>o(99r(a7^7f@r!ch#w(!X{A+m*a3;4puGcJuh6n>Hme
zVF3Uu60r1q)q!Ot^9duw2v>-ZrivDXhkB@QAWeg|Lh4rDf1ASydt?rHG+*KWk%!u}
zEyUe8M!3m{9zd5U5EJ<rC))yJ7M}wSh529_dV8}ZAPMK+uTNV~Mz`!DJH5S+Ryz>d
zy~Ta`x6h;w>vsYHM-xYZaF^?r($3*ZTZ+7}oWkRY4fT-(0>O@dV3y-t0<t0yo+*t1
zg^ug$JsCd7l|X>;_ETKs(e2n#Dq%^)t&pxeb5{xeUml*22K~~Nj_0M{`pi_#=vtfZ
zpScjjRR%I%6a|K|))f?Vdfvkk4v_%-z=;;wDK_7)!}~a>dzX)XhG9@csF23E0F1$>
zF~<8B_tC+ufB*s+@Eg^J4y@g+ta0e8ONp0LjCjv6{9Rn*54YnuyN6aylj_Pwik|qV
zKf#{Nprf_WSzM5Ouh-G)`-WLdM-Q8N+c(#w0d;L2gC(6N?6@+w+oL(*nd;9sy*~pS
zkJP<Z12~S9`k*DHcJV7$<f5MT;d*~yYvJf_^(YOM1yoS&JH9+3@Ry{##I+^}2JUJ<
z$&#ZI8VJeEg+z!}0a#Ca;2bWfwAHezJJoz3o_fo0-EzHG`Ed{cEl5GL21EmIy`L*`
zMDt)F2^A1>04h`gLW@{PU{jJvN#h4qZ?i`Ec(qCI96sD1v4D)FM?v+%EPt1e#7#Y|
z7}JKb@qv9##YZV9No__#F*R~B##jI%iY)~waS_`WJya4<e=4j1bHBtgoYAYENIV>n
zRbA-Ewq^=WETrwHTpIuw{K1Y-Rz#gaBlOO~#%tVV&LOU4KM;}|v3w_S6}AS}2eu)*
zE!U=D^*?0qrX<)P?FA9-4t0|Wi2`SB_{aQMP6a&^=O5im?3!Xi2QEzcltQ-ml=C!y
zQVakvO#x@=)49ac{VkQQ8VRdVseLi1wy8bJSK6;+Ft6<K<V1C%(T{8Z$fiRS@(U9=
z$$>`zR~oVD-M@%5H?i*PF=PUUI%`?dn2)a)pQvkLky!~DRLZPmzyF}Yw2<b7yJQ2@
zn4GN#aEQqb+^*C1=2uktJ$>SU2JC03{<~ltKwKl{;jP$_!IAu;V`0G<LJ9C^J??$a
z-UeMo25EGcMzsG(1l+|*|14GnOVHvAfv{lR`ZQbB38wYha}YiGJGY%>E~$KGHsx|A
zET8%}*hCqCUps^LP3p{Yzq3u+Q^0KbbBQB)fr)HWhS=aECgMeOPDw5{XCg$gkp6Q)
z+m7M{z}8GUpj$T)paFZ%?kkM}kY1@;N+Ph7)Rc$xfT7Y6kcIwWWM(s|A{423i`sb=
zKGrm-1mKEki3vm@;+X96P|}<VF70Tq!{<k`;#Cn;NEJ#%A4w7fAhPj1N%tR^a|AOa
z4d2z0)uel}9F#yRY%>^i945ius-BWYu5BvU#`%w8yB!G9YS`3Prs0Rh0w7W1d!lru
zI(Z&_MXAmPawZUPQ)$qK<^7|6ErWl2g;1SrzdWgG0zgVD4G_5n{V{P!8X;mn$Iv~^
zzUyuLqZ&U4z~>kzC#L?_UfPsHMgB7w6u<}Xy3N+G0sT%YOmH=wIR0sad&nc<wS<(B
zSEbpPjpDKSgm$|+EiCgHfEC6*L|JzK056CTS_AxR<jd^_i63SeB(y|``g4=c=~jeX
z+N*yM?FqaP7fc^7tF$dX*a^KAAtKOvr$gq0J6Z%0;t(f)rmEfchgm5Jq#d|8XHp=3
z{i+t<$xb|4>v~vN{VhHl#!mEO%H1;Hf>wUy4*#KCxB59kV${8agcKKFRl^>aztWp0
z|3CAO`#~o~WBKx~b8=T7*qMy5`l{NG53-UUo<pcS6)bP`IP+JJYE7f%!3QpmSVGC|
z050;Sk)N_0bs^{6BVo~IMlWx7hKbaL0Ve(whLd~x2SBIID$Vo%E>B`K9VO^s*I{JH
zcLQoqKA6$ot>mCm=d_SgTv36{C;FPy#0QsG+GT!8;MGVfCv2iLNeb6jEFjv_@R>X-
z)cRVf`{PK7+=a^xn<@dPRYMiU1ENF!WR>`Lbc>e&EI~Xf$Sv-mdixbgwhhKYazPM2
zfT9^;Lsf+CG+J^SgN1=yK@bidZI1dEk|$>^tqWYrQZ(QEvRxs|zbfpXKO2;VI<0lS
z=iRI_L%KiTtz;Zygt1A2djL}a0Ms9JAfioTMXZ3PIIUP$@vEe-p#nKM`H|6LDd8gR
zZH3q+nb!+=m|!uKMgE)pap51wm85CtyiMHm2Z4C@L}}3bzlu*5uyfUY?}kOYFahK`
z=)RH4&>c`yr;%3ou89!;`#natQ~((-1OYF+xs!mOfAKHE?a-T10vHEYX14$qETo~X
zx+N#D2hr((S}1}5-0U6yx3~D;5~@I$z-e_@?cdJWTPEH9@_+z!iVh}@{uZO^kdw_s
z`tV9V=uE!2w{>`kO55ME7>s&QFW|7aY?5xbi9IkM3Lw0y78yj39B%wC4_90dyjBDd
zubeIj5kWUj4-TiVKE;iW-*389&|;a29|Sfs9R-p>?+&XwPf1JqT|U}t2f6SS$csR~
z;vE9skx@%pPh`%55%ahwkxEJ$D)RP0SxWrDBUMNRusip_sE-nqR|8%V9KY&bX}fg4
zI9!=ps2_0hYV|zKA7vLbcolTLi*!9O3c5b{?)`4PixH;$Xt~b9t}JCcu79l3z?g5z
zRKolF`hdNHk1aG~_NU>RqLldDOiGqAK;RK(g|<{D0P&0gHdZ9QeBD~Q+OSot;Y)dv
zQAzE0%!%)|$^fRj-+q6+J{IyA0|zAEP2k?^4;&Swv3wc`;Kh}a1x37y(6+DPmi}{9
zdBu(gt$~1eBU0Bm*S?h*e=HDZRhL?=4C8Z2hxn_$ePhWD2<DouMh6R-<J7r;Y&5=^
ziQlwsQJ1)DI5oZ>4svMtQcxx5n$`c3;q~Jx4i0v9ceQ*`O$FNIF%>2ioy_Wa%S3}Q
z^CzHEp*gi%>q!<5fI1YQzSen{r)wmnxA(JYey-a1$RD}2g&57Y)!}}xl@Dn*z_8n3
z$3kX*Eg3Nfq<$v(p^^}Bx$0Ma+HrJOF7-u<ZK2egt&=3%8@30WOfU1^l&V#}7>jax
zJK71>4mzJ1m0R+y28G}iERIyYz#(r5e{J0lKy}N%O4M=%e>Ic|#CW!EIl!j4ERe7i
zbtMDjMl6_lHdQ?=v7XNghgQOKo06Zsi7BD`ydGp#=zt)QSR>JUuiKT{>apKcCq+;q
z!z_Q!c4+LuY20bpslU0Iq@J&GIeelB)opIl&3#9RAd$`__-m})q&`#<x%PUdXYWt+
z@<?Q&gA%UfW)6(MpIPkCKAg}B0|yImFBO)efEbz-PkdC@<!T#suVIeVG>gk;A^BeQ
zyz5V4nd;wI3(!GUMB~$z<M|zNLTY@i(RjiaL1k_|UraG}`F<Vy9e?mxDiGz?t<?%i
ztzXv_ILx8?v6Qh)E9yP(ui|=b><-w6uR<daz&!?8U5JF5<n0dQ5b_QS^z<DTXUJKS
zGz;&}G$0-p{~55gde{rFuHEP80v%xjS}AdbdRqSaW~a56%=j6c?|qe`XxKAmWG{F6
zwmZD$2qD<(9uMn1N+mFovUj5-!A7H3C!08V00=8!3|cc%pqUiLepQ-g(e<(AB?e1w
z1}@m>_KVy0$U-#V7O<azzyn)m@@fe`P~%}Yw}NzMW+K~Kp?re!63^fSjnz8-!S#%$
z2(*1U5zbOfW8HrK<dWa9p-^Si?+gzfm7;F!<#n)wZ#RC-CqGx%@;79OS3dBc2&NGi
zojsK<Y&-|cw;^0MNjf4Oil<rY`CveQVr<f)WmntaKSbf#P!=u78`?M-`@tJcrE1-F
zs-!gJ_{cw{Q4>G>)>1#RIjUl+?!2~TO}G(oT(&<50*mE2`?r2$L+QwNX&U^zVoBd?
z=|en4LWBh-4Mc8b6jLP<srf5BobS*5XH@|vtSfV!OaE1wnU`4nV2r01;FJy>Whuzz
z+{!ZA|I^=#_GBA4!?Vh#<bF#E(jZpu=RrPWdeg|d_U1O$g3KlG_G<sjih$;qt!i+H
z=aliGy<YopxLZ&UUeHy~FYAX-dWZ!*%n=a~;9Sh`Z{n{XSuJi^G#^nImE(IW)vsxG
zz!WcehDoWcAe^k$-PN!5H7n%%fcl*SC(p8GaAWfyAmk<HLT1sjcZJlh_l;tu`{8nQ
zz=yU`@$_bTxHp#k;)<dR2kDLA?w}X^(~38J^^nzZjX-7l3*Ed93427DnFMxqY`py?
zCMhxzqbqYodG5!{(eE%z%ZC=oPS8>lym*AKyN@DPfiZm_Qfjlo?+_#A1}`wUEcNJ8
zLn+dSKeBPNz4QIvFmhPp_X=OH9CDlIwR-4(v$Vz;u+??f+;wEwa=f7O^5D-ehP<Hr
z@u1?}eJ>FS<e<7RZQ#|fm`N-t&SXh6iKv5GGbi`^U5Ps#=@DaU*7q`NhdfhtKD4aA
z#Pg+i9OnqjAKhFYv6<n;!2v}YV_2lwq>R4dalV%}_BZmvXwt2~Feg0LpIX@c>uIG^
zK>6vI$PqEBs<?8&^GwSnL2hBtks3SH|J(xr!^$wWj+1vHX#?kxk-*uM`7l;>LC%l#
z0|ms;U}F2@5^cblX4tvz=*u7Rp<R9mQtvkYSzGDc8)nXKx7C80Z#+0aTu4)0PaGD?
z)3`xqJ7)Yl-o;;IX|gMWeiA#K-+4QmmX^Mj2>cBf6CSwS&P&9Qw2-zGDFq^*I3?eZ
z^ZNFVB~Js9E3uzs_{Ho*;(|`MzjeHFWB$<k_aMRX$l=i!rDOP_Mfq2;;zIHdaxTq|
zD=)+LM{@)yCa*kr3|4Q?ES`Bfcij94eAmG4F{u$<?4GLq9q#ar-XZX=cXaz>@Hgs*
zv8llU(@<=%a@Iy+BQ{8`?G(9Fz$bWa(7mLQE^h3zHA5I*Bl$<#Qeh2|jTP?Nlu_kS
zOY&F}{|f4NV?9ai8NfwqwUS?+?zhxbInInSTBy~9j=IJ7;;WSho8fm-(nm9EOXwTl
z{VL$SjmCNHBK?HNdqHH@CMKUx_q*=*!w*0tg|_hnl{SbeM)IF`;}1v)ud#eF5l7<K
z+XN+On4sfYXXV+x=9bm`R|eWJ%!e;3qrd5yi2-!PJrJ4kpij<%Z<KA0P|E{p^KN_c
zt&87ZrGy?8@y{_OgC6LOS=2jckZH!qw0KWO+9+DTqpPeJE!Bq@LhvdFU$YH!RIBc&
zr#RJ|4LMy8H(gFc-oCK3V10bo7FrR{ijT$p+-6Z&VTE>^hV5&gXkbBnn60(GChOi=
zExT_0rQ_l^6>jjw^G*slpzMGEuubkheF<H@BZHV_Exfs^_jb(hJ#P1Rx-N~<yi(#)
z%0Nf5ZX{LmEU>A%U21UtB3*NOWoSIDgc0<Wo~d)3+tzDBEM_MT<1WX9@#>hScGo7Q
z<;0VfHXEU5p7Atdi@8Uf)cS&`mqTe3I_(Ygw*=qe(Xah>%kuC{+{r?-Cip>Ik1xKA
zvH{39rsq?YnY96?YBbZQ(52=h>q)=jtBj`jVOC>&jnIKsQc1_<79-(Kc#2_UiLiZ*
zjrXeWekGxCPU7&|0Bz8+icysq6E8^t*$=EtKxOli9XK_3FAcG;7DY-o*nE|KjW3GX
z*?<hXT=7!&MX=J|tx}Qd(5U3!_97SUA}QMOh;w1u<P2hhx&}WeExI2|un`Q~Tq*y!
zZ9XKJXl{&aiUpv9drYA$gmTwerPOo4eruvz+(~w2M#Mf^>m^kzq`qAkzyFLsl-4Wp
z5>&t&r$4Zk1BT%0z~bB_-szP4JETz7eN}B)R|>)JoxchuL!aGqeXb^4-F5GqREsG@
zKB{;$U52M5RxLwBMMQr-K@(K*n+`_ne=NzP7HHJJV6v6-1eCFTbJVqFzwiC&Be|xd
z{AL`-lO?oeATpoGDXn6x+nlLiSx<4GrL1!KyGPrLp^w$fI2{ylF8zg8H+f?zN73o$
zaUH1<8^j5&%plrX#O$#f$z98@rV9pDxT(zn1#P5g|A)B?o*`t*31skz6eYxP5dq&3
zP4_p<k>s&?jo2G$wKZnw67ifM>zc*P(alzSKUm^#VEP5#;lD7sX(em-p{a6{QZ#(i
zJ@sOkoTO_&)#xSb>yPRM;_oNrHLyI8=|SeAmfZlbpbeU2#v8-(RugU@zEw7eO!YDs
zysars!Mg;m3~v-Vn5O8;HbUxYB~LDvj)=eDu&A}L=~ksPy{0x?)_g!`evE5sub;}5
z_#E|_Zk6gpA=Pm@DeWgZu41+T8yjP1TM^|ylM$qn3~GY#wV+Q=qiz|NyV=0Yy)1Y`
ztPeWq74}7bE(F%u@-_?(Xbt35ez_7-j`{`?(lpjXHmRjHJk-6|pwHy;lk?A0+}K>|
znMdm5yP6MRJQdL8L+q7&IT~#^w`!>itbUx6I2_l<V$%F+gDqJJ12Mtj+=`;56$JtR
zOe&3vPB(EBdma<0+2C0U31qn_>?zImc1WV#5wYnqyV2fLQ-}8Y4M!>-Ir8$mhKxWo
z;VA!1%WDmdCE0e*^v`d3?qlS|E*Y-iHE=iX2|bFsnmhY>;8Y$7;tktL)9}Pva8;aM
zSiF!L%X~JWbHRh9&*|?FOc_f}V_>qonB$olQBR0)u-NvyZ6W`YPpD&7IwN<%Yg?ph
zm8c%4E`J;$_~qN1i0w=vXm@w56j{&nxS*5FK6)q+)x#<?PPxzf2e^^iZB#L{rPa(@
zFt5Wl%c~vv&^n*FTlNc!zri23Sy({!eWYoXWlvJg8%F!2%5L-8I%f0?%Xl}-{1~j}
zI1r!5Br$Z5RTopr;oQxOQ7hrHQ8`(*6`6uzNpCfl%euapZJC)F+zWYqJ!D;z)ESK-
zaeS;YA4>`*$+a0IxVl^ms)p!}#i)CAYjRKAx)ppNsOJ8W#as~aDEjq0$EA(k<g2V&
z--(F|ErFWCECG<h<p%vHMftX8#DFFT#7g6nNAf7I*;}5^Bsv<+f02loJG3IIU_Y$|
zs*Z14RC!Z1UQ)U_T|%D|bUpQ8)SoQ;S-;)E2;X--iQD|CiNzv)HEj7S|6E~esh7nQ
z{Y_{flK13Y^x%l=38h)8@~y<pf;AflaDeQ$V@~X^z#-*Kt$W6;zdMuoX5L#e?KJe;
ziETEg&X*!da*Ji{Bl83o99luY3l(xFdBwR*)@P!>XLOD25S`5xzoE@1jzUD4TN~*K
zjIiO)Jdv03OfZE{3xX*LfWju$Dyn@#K&`_YN3<*T%{mhErSVt7Il4JzD4%Z$D`qkJ
zOFZH78z3T*mBI%1o&1@OC!cZaeFekhkIuV`K`F96jtV(ST+&~KPw0Z%=k<(v4?3r#
zxo9LhH6}x-r!t#Rcz@ERCMh8Wy)}HDNTo(3Sl;s(`J{Ha?f4VG<$Pw9p<8$a>9ju5
zQAz%xdPeRaiikm_eORF}KPcGo?UZvB+%t2b8P900^mL?yg*?#Y*K>Ph7XusU5vrJ=
zRmAVs8)pr4a3dOsw7^%`?_wEnV)U46@M)S^*>=;vM^5t>S!Jb0C<PW<4WPp@JM%B6
zL=|{eV#8if-6~PqXXxd?z5{V8QPaH3MKT4VUqWaulCAKme3*_BDaT-WCD|1Y!%GO~
z(4eG(6m^H%E!?v6Q!PdwDMSi;GL6qvg5DdH!PDsegFkbDa9zr*mabmO=fmJpR|$Fv
z$#i9W?&Pu<U+b<n;p`6s4_5`)CJ_roMCq$(IhzBdO5aT;%cx(ye|7Q94G?syn&4yH
zI<GcCGqmNnfLEGs?kmdBxXAuzV}davDpRt4e20T6F1YuII1LGJ=dKDF14){`b@YbK
zes2%e!58A2`=2soGGcR{sz`NG3A=d*8A??>!Va6TVWb$|98fmS|M-PI)l=?Q^vK15
zy;ftc7Y;dfMq>Q~Gb6!*Es<x3yG*tlkJUSD9~to^$@}>ThOP$s{3*RDad~Nv=`0WQ
z(96OE@t0^BIxF=}(r<ehr71QZeuv@3Mzp}IvG=HDU$gUqS6>8;jNzhBN;~2T(+V^#
zD{#;NSB`jD3WSkVRhTxn5ta~pcv`~zb0u+nzeQT)7Ht{R+s!QRmq}fQQD8s6vDgav
z1Wsm{^Vyp<v~0x~ZiT{rw{pxj5iiFK$;-RT@(4r!?up)d4=0iNTAyljKdUlQ{<}T3
zJEig83Q<bZzI!Uv1S1~F+yQa&A_+d?514;=7Uh@vJT6-<Fnyk$#TN>?wy1t!VH)e1
z+>0aC$ITLXQ4!4>Dsspl1;tvZ>M9UEmrNRkvSc+Al4d*9Az_2XV2fl)1>rg7X-)89
z^U1SOan;uETp=HH1`>?@_%!Af^KQ9a5CnACSsI6QLsRpzEC`bG1E}mxvYOu({q3d5
zGkVxafW7ypz((9HF7Y=Lg1+iFSORLZUQL-JI`z-yqN-0)LSur)T5At`qpL;*!{dbu
z>E2*qB6z9ktHz2=w45IT-w%3r)Ht`pPJ8eqUf%x5B;~eg6{Y(<^jfmmn3agWGneDq
z^`tjo_sMv)Um?wuxy9R}l0WJeVu7N|=1<CI^{iDFj2L1l1hu@%e`$eBS*yXChmPIw
zmpt0LSsd8%Q)O>(U4>r~I&BY|Td;yyGWV<KD7aAfSPZQ{;Zlqx2{&yzb$GPH!Y9%?
z<GX`K<i_(vbTM1G8t5GaUV^Ga4UG1bKOcW9x=|$0goTIo0e1#HNYhwY%O#I~h&EHH
zwltlnDSJXX!WxQIFoA+UI}p!7%x?WD9IrAWtNFH-WqEh1AT>Jb_N?>mOKO+ym>~IW
zrFdpC-hGJ22b(7wcb9DtL$YCeH0>oUX()c84t+yexMfX}lLMN*fIgAYH6)LgyDE3m
z(|DyAFu;1%5K+wh%@^?>?TCu$-ge(#4Lo#OtI0=OWfrV@pPOZ`n;<KgV{??&Dzi6#
zi4zku6T^1O-q7-vJ6OpFmN{$aC%$Maov@}H@NMRJO6lU#z_<C2@T(B_ACmqbrp`L5
z$+-Xf3J61KR60f@%8)LJfpiE+Nq2Wk35>2G-BKdmUDBhwOJInA)aZUL@87x4{rox3
z**Rm^H$R{E>$Uw+!uudB{3DGpfvrHnud{Nxw#h}*QQCcw!DsUdCM1~%o#`5SK07Ei
zWJGl`?y66JF!i#?!F0LGmmN|b{j5)7OL|v;QnJ;yNr3G~Uoz>Qc~x%lT?YTLhHN*U
z;dA9aA**7x{j7nAfz(!<O`%FL<a*b-tVYC4)v<C5Wj`aB2CGcqNaz(fHuY5*%hU@h
z5ZR>4jn$xAS~1z$s%xXKBKnGkAkl+@x~1C4y`?8s(*($?aJbrvo8Whz^qwmIq?C};
z^=T>;ge^Ok>PVZ$-4~YctYyr(FmCjkOTWpv$u*Z_D@-^>4zaZr%@>n&`Z^UH%RN8I
zc@s?kMzF;OmJ&jNy;5(tM+e2TP-+K(sa|tGJs>{9Xmjps{~b-qW|blARjnXK;Bh~i
zAwVw!1dR1Daoixwp)|8(t&Qtq@=6qCSzGUtu(tF>49)4pw0dAT>*uA4h`LlngUJ%%
z_tjbEo>Ix5_tAW-EIWfi=iS(v;hr<XAZA6gGPef)Rd;f)_IrRg(%-wB8WY*So$GiI
z6^dE*cIcS9(p<Zr8}ZAj0VBgOqhFJuC_0WicsMUC<IK9b;ih|{_nV^J=AXCI{r)me
z6_O7nXS?#+TK5HBuX+_;tr}TO#gAn2#kOnLuhR!zhm`cv+&pxtDRL1<XWzSeQ5>&^
z1^sAVbI3K(1>eMV5l53nz74%K#yqLXjyCsRNjJX{oW##nz%0iEXES61rE!y}kr$Rh
z(H6UWh(`J=(J(kgq_J@BT|MjL5rHhQ(x|mZsT@T`R7cE|<J-=B3`qn~511@SJZPX$
zQ;!c;;a>K{qwEQVZ$9p`-8_+FA_Ax^m8BBW{vWW6m(A;%!KU=#+%q!iN>fbcIjn_b
z(!Vby>RqYHjbRZ4-_59``Z_s)3A(fY8iTZoOM+37K(8fBCU%4hYWMQh8hI;rVCxP}
z7^l%U;jRf`A%_+fYyn%P48sz?O1Lh@S3Pi`tUNx66%lDI^CZ1iVnZ1iAIcs(m>0Bj
zd&?^Eg4+#Ed^3ua_@$uxU&f*A#s%kYpB%C%oaY&WMw}9Aqo*?O=#Q9iHfWcp^8%P;
zs(I-}G0D$Z51Guk=P>ie;qndj6$Rf#9pCxi`^c`zH|YP!wFBLFo>@RGQdKDl@mpbx
zw$ff$InOyC%5*Sh*}!x6XQKTo%WV$!9_7BiMVpAWmLp}swL1g<mJ{TCNPCY{0{_hw
zHZ;s~9Pw3_dj$EL1s4BTx~FY?ZC2P}e$mI+$KXV~{x`zTZ_@VS94WRvq8XcrKLh6x
z`6k)2iZ=&|&0Bt^$d%f6o|d}7ax8UKFcAyq$~KHK8qN#m`+bQAt1|z%v?qQQdrBqX
zJfGscJ8i3|!6a)z0Ok`R4~=3wqx$ZxNI|}0+I#7WMC_Rfb1Ug=@y+&mKA|v)cfv2?
zF}EyfivZs<IW79@Jt=A_vCLMmEZADUY_BwA^s|ti^W+KBnoD$Q>6qa}Sfu~LPyfTN
z83G*Jz+8nFY!hVm)kF)@)x(l*pc^v^4sL2mY}RMdp)uwQPjVPeLBEEQ0meb+0e@cd
zwyj?UyXlm`4t904J~xCzydVV-;ju=xmfYPlFo~=LAttO*D>F9^(*{N48__yuyl#+y
zPr}8|fS?ims+AS>-NB#9@4v`NV@V?1^fT2(2wln*5mx~a-8hH9xNxkI7=Bm&F6tcf
zuh2YYEd=uvC0Ybcqd~LlvDIxw;&r^HQAv1=`m;lHVfH{msZ~ej53kXyFVskm0@M|r
zBIQ^24&|)y?V$E%KjmO1ORSNZAkbhaK20KbVyI$Pr^2=SSlst)Zlj#?=CjY`1OC2b
z^;8~N9sHnDO{j=HuKoN(tK_})iLs6ga@BV;+qM0q!>8i}IV$fPzS(#j`alaaomck1
zUW>ft_dF64XvQOZc`yC${I`F9NZ;!17N4L4rLHA%KAdyGAw4XL{LuM65FT&B^b#ny
zsl>4%k7-G^whL*%v6XLgj5oSg(}&Zf?&;T1;_PW4CzL~PR|rO)!fU$hHfc{p%Vn9*
zILc*;2^m)SLf4Gro|NAG@4U9Durd3)-{Bg{Y}-FtCG>TlIb^IW0R`_Pd~y%THPS8>
z0y3S#A~Fae-@|8Y?gCYBz87O{(^j`VSdO@C3rwIvbA{gt@2NJ}7bEC{(^@IU`d8Eo
zBp0uNw&s(*PyE2q4KkbHU`I}Q65?Ah0oF`}JFsBjRS`Wfq#gfM3Z=4_IAD~5Xu290
zPmjByNlxITee=55!Lo6Eg!|$uYBXnx*0*b*#__n?d|#*z9hV-t@g4kDhk4leg}7j4
zoIPCIs(Fnu#X>%75vJ?o7@aBtes8$bsBg^kmNN_iQEUj0y@o48+&+&!De|yKp=q*D
z;z8|#yH9|v?gFXihi$`#jfo6P=XjBI{xk%m;8cJ~0B8riL3eLDJ~bE_3ks~`d>RT9
zN=_22#34hMRH#SFYwb)}M_-?R7TOm!5C#27f7|%J2)J$OdPCf#w58si6D?{JJ1-hw
zpg*>t*=r=C*jc?jTv=}As@+=|oj`x~e#jOl6*C7{n1p=4G?~7Q<NCNi&)?|8ix`FQ
zXq}do?OfPsIN*B_*ADox>6qYtO5dc<On8`>h<`S$qDmG7UsJK0!LmYlV+*7@n5Cl)
zkQyq8%S5mDA+Jl!qeg*0FWCuqT9+TkN|+Psc=4GlO!fZ8LV*>pr0=^WnG(!*`%~UO
zF7WU1R*R$A<am<i@#9xH4(jz`{NLh99VyPrn1aL(AS3OX330=NT1bt3oMnNyoiov7
zVz8cU;Bvl@j4&7@<i~yPMXt$3y>mv71pUAqLUta|PR8L&^46lnRS9|h_F1WK0&MaH
zC0p`lV^r48lRVHLb$MJl>jg$6vxX2l_o!l-B^f_V|0$h}XC`&3)1ATT;gZ(_UU1pK
zs8cn0KiOUx<vvz6+GLbLt5u@4o%1Y)S<pkWv%s~rQ@i|w-+WZ`uZoD1*`6pP)6JK0
z478EBeHcI^wCUQM&0bsS9{%}Cbg5L5g9~V-Ln8*@f|f#Fc>7p6@1IrRrT$3y$kCSL
z#&PAi#_$tEqTSj{F-3%Br+#zfgyb0j*w(dsWAB$@UmgE`_Z&kp8`!ZxsksVr7~Urj
zgQMM<59>4jvtD)=adh2q;vI$JfW!S4`nC<ewDCl2t{Z3T>A(#hZ<+(29*I<6GVLwr
z#44-|B)F1Z^xL2Fs{?NO;;58(|4R<NR8!;US24Z|(TRN!6HqAaQklYSUfODu1fs0D
z<K{rfY?+gnjE^NHN|BeG<0TnIR8E2_$}D4DfhbC}j|a(zvR%%Yp3ak8-p=M$Acf}H
zp&3Q-Fp*(xRqR7^kav~!Z<?Gmgh7qBX_7z25)X<em6p7Ku&d<n+fNc{FgRo;K{MT%
z3Q8|VSz><cPB<B+w{&XqQR|h{{y{Y~56m7-Ga$jcR~XaqVk2bP>QC(;s6|}DkNf)a
z+ZWEz0T{h>CAbQaeT4CNq<KK{rdzZd<mJsOk2M9xRmC8GOo*Q33bK*D3SZFxQCJad
zfV_l+g%`TKot{iEKTjZ`PKJ03oCJj+{nQlHdve%8pf1Jh%E@)3X5cbL_Xy@;aH%YE
z)p%)<obOcoUl#yMLM+A9i6gKfJGH|HyeY%|6`zg2GxCk7IIFJ`=@{jbQW}b(W7uey
z;kO}ctgt+>eimEB%*(C{oz-c0!?BObSUh|#?U1pyh6$;!MeiYE>mEklkLlgyzL@?n
zcLDTRvtu8uE#~@sw}NGa6cwP{$?_0)2d}*{;@;UMQ?!ZO%grft=9j=el)B_s6mPZ8
ztwE4WIYj7OO(X(3VIWRMTnxlJB!&+{YXS`wxbGeN;L2(HOuY}l+3VbSmm4HtZ)|K>
z`fMwqp4Om`4A`!sSK=%-Wms||`dM#FB1+4pmM-5=MR1#BoYcpY@YA7gf5zGI2NRDp
zI%_ZR-8*>>$+@dr748dTdqL=2{N4$GE1pb^-_H97D+)|n3<*j`=~YX;#U@LJibB~%
zKH)}xx*y59I&mpmr>_9fy<rn#C)dCr9gvK0ivr5xt(N`;#7q#GY&;l8nj3ww?OISH
zFmA&h(jBO6Ks%k#daFc5%KUBSF(AFmo%AQgJww2yS;15|Z%5h(TMj*&6I?l1h!a-i
z9GOiE*CZw&C4H@kx!cn<xfcAjp0g9L=%wg-%%5iF+fbUx@ihp!qi6451O60Q=G{dx
z`ZpKBW!?w+_LWP=QScLau}&r5x=dGvB!%UKaKpR>{LcJVSbQ}bGv##TchgYnGw1u;
z!3IK`ZPu|lYP3a(M94~OzuN`>ylHUjBqr|ab-e7i84BqOzoQ_U1jN4t&n^>ZL5&fH
zgDmH}mbjji<a+<91<!A9*=%B#yVm0~4IZ-ZFGk~AC<GshysRdkS@iNeb5*9cvy2K%
zU&CNWQNSq0DQq70a;_X+)lR^u7rpaOMA>goM!#1yBqnx4$hCdrG4GX5jBlQzXx^7Q
zUyqDJC4`r5;Qb`Lgu2erw{#u|RcAQaMnlKlK2fwYeUY8OFr?}8>7O_hC$oUZ?le}g
zX&KO-M^P>D6l3kk#Ok)Y?YXDQj2kc24cYS^#OI+DW6o>dF!w9cM)CCFc>3(=tXcOB
zYSIrlXGo&2$s-;vV;>s9Gj7>VR&{oWGf|<l9#6|slWH^_GoAxF<a130*(N`jPq*nv
za}VF3=+#>(Dt^bx>9<{Wx`hdWJQ+*uAg`!}-S9Fm%d7P-aEi6*<clNA$smW?O=oJ|
zZ+w~h{!WURUA(47%QRalOl&}F*G%-44JWRbDF)cVy~J9E`s<(f!a@0u%XmL9k&i@U
zQ%%m*gQXdG*hPa1={NdWBSWGnuNBJs?D`3y3f;`GtGNJ>P8T1!h#iDTj%%dC^&MA{
zrH%O_jM84S+|_PmE5NV>c9|%ZV*83p-7^rzDz!3z0j{Y3JQ*R|)%%<H6jba8DsB{x
ztlotwo>P?WC4HErZ)~kKM%!5K+1PJTPOA1iXfF`mnTxTanZs3F#u^ku{vl_=Bteg3
z)a3FAdfJ7z1~jaUx;xh-H@bqGb)JIhDaEmw*YgLmO_qA|WtzhT#HDHb85j_)uGkxw
zMezqq+bhXoOHSKYkwIVXzeU&T>3YQOg~Bfmq=>fsn%*+5wzj0&YQ}GjcHV^w9%kQK
zWLD6)3O*bvKV**<NU`<5Yg+U9xb>MnFMX2%_`*|4Y18u-pUXQ~-Z$`kj~OAYw%EQO
z-NRbl752JR-Jasw7MvT}H8eqa6oN_F5dH}QVMJ&M+b5lL@vIKOr6*xT&@1ecPGL0F
zwesC|LV9?lBa%!2QmSW>LPdAdM;iaK-w(!*;@W-NhkHg#wd3VcSe_;FYSE|!!6UjY
z-;7dJx=1JJk?ZX0f|6bQb!BX=YTb{*-SoqDrGzS#tNoUlyEGsEu{n^{M2GA%AzjB-
z=?C!^qz`x_GJdizraHy>6W7Ly<X(Q(3iCW7A{K!yUn+-(iJrMQl5aDrUlncM8<Q<S
z4psq*%9~I-*e0=#6DqQ#VEtp57KGhHuCl)kE$P)*k)}>bwY<e(9cjc{&wxuly89b2
zf*(o{kuKVkVfan^SF9s1`fq3r6$FrmaZkbYeC;2c9OMsK8C3b@Ke(fd{|HLqv;*T5
z6vh*aad$DjMf^A|02|z8#4sr^BHb&R)XRaRMv^S{NVe+|aYR_8MvpvqoHEr)`!5u2
zEXv|&eJo$<9c{0!9an7RY<eXhOBI(#_Jc|P?$Sn_MhCsE5q&F(9?0m-^k)E;I8z(#
z*@i}c7lF(X({vKC?%m|D_a1%#Neukr?{^}e<|;yB9e3{YGUeXhgO!`~`<0YL?sN)Y
z=iR)~Iw{~-=eD&6;Y&1uQEijLGF~%j!bgD1y6e(`{!{{x>F==euBn+!QjES`T3D#^
zGT2^U`E7%U&fOR-YtG!1JE7U>ok$Tgp8#=1i=`nXIWfV~UlYij3Khhct>6N@+kI)#
zBi>xkpH<S<`0XUOt8XymSr*?6tjYK<n;?O+?iA5g?iVOxK=n|r?QAxjPBdDlc6c&5
z)(=KW$k+MDSC$)P)(Q)#1_}~aKkO-?_LK#r#SzKLk;@)-t#;|9q}ij{73tiq5BI9^
ziROPYinty_bEB8Iw_ZP5Y$-WqQu6BM4#xg*@zU{8iMnF}S>YF=LZ|ZVkTyP%t$yZ>
zp~bc_?}~W%1s&)1T%vAt`~JE$iL}Iwtd$)$J+g96{Yh#n?N>Q2hw#y72_qVYxDzGo
z1j36q4o~Bz!M9y~3gm+Lbe3qel(v^|)$m8$Gmj5g?zzveTWy41av4jzpLeC6&DIX9
z?kUVf1a3j^Go*DVk@?EwLgy~GYz>!gruAC~ome?9G(Jr-exO=XYSwr{X{7LhqcGgl
z@G;-w=j{!b(N0YtCX6s1yC@$-?5UNYb?g3flI#)+t4Z>332IQejIw9^S46r`u>Vfe
zL1CO$hMazx2S%;He*6Bv^S?AXN&t*x8V%#m<;7d4ltS<w+Fsv{_DLcOMlu}^?EVTj
z-u-ZC0fX@=%D_P3O{tw+2SMJ0h{MS(sEydAhPICr%#G*M|D_}%Gq@C9YF&Q%EF!MB
zXa1up!@{!ieG-W2lH@8n8B+F<QrPnwi@5>;f#g*J))q(A2jws?QQSM{B^Ie!xDUCf
z+0Bl!|EC1CW7~Nra##k``dB{GEz)fN(2K~q<h+l@&4$xF>To;CAVE99m&x1oYxvh=
zH8SJ(m{_D{!t%IYq6u>oZC=dCJ<u+X_H(peNley?#cO6|W?`mB@eAK^F>~AFf1Va8
zBI1s{^asdvzxxQXVVJ*1;KnSbZ@#ue1QDcC-W=iX&(Sty4D`=Ic;b=KBOXuF=o`HI
z??>Y_S9g~?&Kgf5{cj%xlPPdn8-O8&fQ<Yt>eJoo3V!yUE7CJ&BV?<irtXU9IL0nh
z`XX(nZS27HK-VS#L!&G0eyoi9ArD!#k7Z?C-Q}L~a$)e%*HN$u;svE;On+)h?Nkb~
zmCs-Uj*s!_e%C=K^&>43wJ_Ej5o)p&OlQHkr4s{>-(QTC#Vf$y7b(!3fooE@w3IjU
z-UIjz!I?)}=&x%IxKCHsfXvwvd++HOYqX(*u+Pyiztlzn^6VrJ3i7RF68;MwuTq0K
zCY>mU1m_LOMQJi+#pg3s+|o`=kNEXjn5D3Z{U%Kr;aa@_Nvn?Gt;qEL5wCG22*IIU
zRPU_*wn<A!Ad^lbM@JKDzQVhyyq#|xXJAT}&P1C8RO$weN#Gz8yM{j_{t{4rg{N@W
zbGzZ^c%o8+`#1A96<m5w?kE$&XHJ^F`e*re!(HO^L1(*$_L|M7hzsQn<YHv|<>q9r
z*xS?nB~TADb9{mj9wf3v-a~Nv{%}l)PsBlCJ&ikyFyh5;(dxIm6LM6}kzw>@VFJWY
zV}6s8<-e2CEiA&ON$Objd7DQ|!4}u9iJ}v&y$xb|3gD;XQ5E?<K_G!CIU1BvEEQX?
zMiHT!=yoD(?jm%f_3HtyncM8sGM}z{4U@@QU<5ipJ!g70*`H0BT{p(~LON$_Z%!kB
zPnu|k@L`apopzH~gmm_yf8SveNK)sk{=Sd`B64Nv!`eXf5J$?e0Ji+a3{H=Q8-h6p
zP+=$sa@;GLB!yw)<V4RR_En)Ap7fp-AD=RpgZutWijlabYfov5!yrvT10L9|g(!tx
zdb7%8riP#Q)b7ZGX7<`a#zP0Yn>}y8mt#&Guah;gv#AHcdZybdy@7P>te)OHoZcP5
zU;X)bgJg^wafh0eN3i8&$NctZ1wX_?p;ic!2fH+9CNZXW;ys(B46TZzL2xdeC=Yl-
z{BKVlke4V9)|!q2;>-c5s~@DRqi0;Ntr!uafWTs|M_Lh~7~#Vg(SY$vPc*d!$VzKb
z2Z+OTS<qEqKbbqZE|;bHQEa{k+|uUV@xVqW@+Q3D-mO=D+pDALnf>V{I|%uU^b6&3
zKIGr#<X$$TREE`6j;TQhht{?$f6vXm(af4yL41eTtC>Z7%hr0KQq5_Bu8JB2YctbP
z7fF1mt%8q>-oz~&CF12)jad7EQ}T$y9I{wpp#QTfi@L*RVw16Mg_tqU4qDEc7FZ9m
z2~@BZ4r?f6?Fqd<)8p{<6u}nY?lLuV@RFUufQ>ZD2De)=^QCjKplkCe0-@qG%W|kL
z5W;+nRG<U0tLA|}`C+=4#Z0YfqGZ#!T0m^xcB)B`9Ay<Sc~gz7HSo*O5J`@-DBJdL
zaxR;_8&3$u%*Ku!K;OUnwxR;RT)T{ZD60XQN+~U#vS)zrVkg5+UsbQ@w?6?GUkw+z
z<i(?j&6Nm5kq=xFZRfTFioEUkI$*78e|s+e9y_(%ZBa04Jcc_$VAp63$vgwOR_Ufp
zV21`ck0X${$Ni{k{`OzOmW~5hkE!YYxZ4y<L)=D3O$!`ym>QdAvG+fXJz%Kw&d}zt
z;^T@yV=|^z@fWFrdGC__uabx4lWI4sY;bZLRY&|qp)p}}>)btwQ5~c}*g=A7CiXeC
zEfX!pVA7!N+8(=^{!_hMeFQhT3=zueTVsS15X638$yEf5fRtBgc|^|P<QccSlN?it
z1>`6mc|?QXl$X`o+*Y?xK`Gnqqw$YyRxre84+HJ}m5)-0jWiSyxl1Z_{tlkMf;0hY
zON5qNc3o2rQL-bKQZ)XxLJ!yLm!^l+!iugvi+4Bxy2hJ}_Z6hVD4*IO7y&FMF;V-U
zoa_BRFlcVYyI3lNQgVC=COrCZg#Yj@Um!ABkmQ9qBS~9!zQNXtjK<e9B6r{+^*&PI
z3mi|0bc25vx}DJVuHtAvGn{Nz1sd@WNag#}R1F^iTrb~%8luB98H9uyp3d6A4}N6>
zE^5H4CJfi22fElc`MI3w0O&AI@>s{XUT=nfMrd^NebMLD8Tef1D|dBm1w`D*ypx$C
z0gCq#fc_3Y{ztqwN6PW&iT_;UMUIxdX~f_CXiQzd(ant<7Mpw{^=+_mwmv742ETRC
z7lGBql^zNp7eO|CX+ZkDB<LqM$SXMmOT1#yndV3a+AesOQdA1TxF&Sgp~l3PZVbwx
zUjfJ?<px{^a5j4uSL_??t6}gc@byR<N`VxNtBv8-OL6q4NW(jI=s|(f-0fW_&8^?S
zoo;&RFla4`moVk|KaQ@@|JuS=K_l=R{pMN8xcI1qnn-a->vcAF!ycFJKM7vN|0H<7
z$k6f#QP-0RoveO(L?XAn03R^+YcyWc&=l|-Acq!W>8Fj_12Z5@$dx^W7{S@O+n7?=
z@t@##0E=g$p8Y>X-OK-=I@^9USadg-ZS&gu0RMP<fB2v;3#|B&hGUVEhP3}-yzc)>
zj}5C9d&yPY@uxdo6xX*ZB38B+8Crc0v=`wLMpY#dp~bFRx2Bisi*WpY%Uys6Ql^@W
z;s9od24R5sCuedxds482&G3Na_g6;sDDMtn!oMitivRQ<z>4PXk94r@#S~oAC2;~M
zPLNd~eKQ~N^%}#?VyWMD*wpKhPXTQ~Vj#f=z-PG6xnh8^@2L+`kVEV_AD{rg0`A7)
z{lQ^UZb8Vc*No%$mY4sbZtl1J??2wG_=mp87u4VV%kwW@0-zja??1er-hTn$ej)QN
z=ZP?Yo)crr1|B#Y)Q}Md&{jm}N#Z@Y=A-`G9)5*L0ON=#W<~EX{0C)qTt;@Vz*^>X
zpESjISJfF2p?0{FioyOL^*_+?^#Ou_$oc2D0Aqv}M)n@qgM>8!!Yqz{m2z^0an-3^
zOMcYhulWBlir9d8=Kmw1u9E$=ZF}MzmZ(D78u#?~J@3TE{}}8j+#KJlt6u4?ye;mC
z-8uvwA$5A{I{+=<vgF$Mw+B4Iz_daz8pvK6L-l37Rt`97k#~O)RtSKHgEE>E?coIg
zfSIhEW%rU$@kg}PhhU|ju;0RBa`A~`#z%x5dAg32b7itn{bZfpxdLO2!e9HC5|=J|
zBMNuUlMJ+pVc#!-|NnXC@DE^2|7xNgF99cq*DsgNsUI{Om^o3lkfX|@%7aL264&nc
z*It>);d%vt9~jZ-!Q;Th-mSR*j7?T?YgGgwZU+v>cx-m|FUVwZy=bd0W!U?Mb|SNJ
zIzG9;bi3ypolGoFevf1-rt>Bm+@U^Z?s!q7iI}s-Qoq|3_PMO|Iysx@;Ywcr5OY9}
zef3AHVC>)er~D5oEr~i{+|q;I>vWt|$OF>HF^d(8^54Y&1yo-WI^X`7)9r0@+V4*k
z!S;IK{eUg7P_M*;tn2(p!D0$@;-IVYedu)g4T{4-aQdxS8c{!~;VW$bvGS=S96S9t
zn->AxR0q3>Jm~A*C0S*$PdR6r)H2t_#@6Ve@1Zv%fWa5)*^sS$mim?qf4J-ywGZPm
zGrJSCNQZ~M0|s<xti@TQ(L|Ll_e0OrZNXlUSfYda!ua;_PaPYmM2xG$LUq9{VD>v#
zU@JGZ+n_>QyW<78GqPv_s2?E2`)4&A^a8vSbs5|=qFJ_>b)US3U4hR9Fl-@W6-gNx
zxSCr|{z53vm#7B$!9B6_l|#P<Nr3JiA2y-m_#bQB^nvGi-@1SAelwA|PEkGZi)MV1
zOk793{JtkebnkX2&r-ExRqR&9?=-j#27=#?pAM)h%{trnNyF*qbN2C0p3{OzjI5@6
z*Z*WW$_PMXQl>JV31NE<bqij~5}`UTk$^gpP>TYDLywdbmse`<Q%>QJwa|l(9`a=#
z0&w+{FTgUMM`g;sjsEZXGypg??%___3BXp6@H*w{<9b!N>keGnv@js;xL;<++o@-j
zamBy*&ML#tc@V0_W=mjgN)DEG6c}49=dDl9TF9V3-;nqtq4pp7BamCjvRYhPw{QdY
zXbpsUE3jDrUK>E2U=>PvK;42`c-O(pYVn=u0wJ~Cah1NNKVoe9Dg0-%<S$_TU=CIQ
zIK<)~QTUI~=r_dxn6}L{Bbx#F;m=|5>k{YEe-m)DAVfHfn=28>aK9vq&R}CfDYWc|
z!b2Y!w1;I{d~!GS0XUxbLov(rTcD=K9(lF)|HD6p{jIbL764$#Dz*++*nZJaFDJEQ
zdDJ0>*M50gVSK%@YUg2ioSLuN@a+2VmagVnz(&$JZYWZ%yd**9k$?`i7!M>$U9q~M
z+?wu>9`0w$L7*<^-^4%oUjlwW`CbBy)EnVf)gMv0CPe9TvUlo351OToMBLkFUB0+U
zBe0zoZINVPX;T0~72saXA=A7xVh6Q*!cnxp#Rmb_XbC`MG{XH8E<+0V{sIR{BT(7c
zwvhYZzpdwsHo*!aK9@fLPv`z9Ae^9>D)Qc|`N{Qa22ha+{)^9*n41Q+dv6WSm>c_g
zNU@sN1_2!T*Ez<c<Ut`(A$MB{D(Nqy4y$N!YZ+TS!gD4`Q}rOj2T78%Ry)ApJ~Z`W
zQt+|bw#UJ;S8;;)UmCvq7UH0K9EWU=p>hA=KZgwz*7Mp_4fWh6nk#ohFbNUXn8xA)
z?)uaZ_H3Jr-}p<S!jA4vgjsw<(jge1!|nJyB1goR9d4psq$L}vOX^#$qu=19W@9YG
zn6%CD$Xl&dI7#{tY6{)SEVVfnQQ<RO(+tGHjqZG3`+FR4Bgr4xUB*xeMT|qUnmh^P
zzvStqN_twCiVqU{24)d3{&E0Rk{H6dqO!|F60N7e&@V`71$hA2*pjvu|LQ`WjfIs9
z;J*3ebKFZZ!f-Mh`QbKhNQ>u}!nFP?h^VNa?UHIXT{)W;fHNFs@H^#pI%$GEfH*lD
zKi%&g4VnO2q$wX+i&><HUp*gZ>#L8@(XZa7b_CA*_oJCD!IfW|a#%@1XYh|dJ{hc+
z5>QioNgo3+D167uR@bAMOrtmNmsa)HamZqRxH#!me7{*ERb|H0Fl<P4>LvYN$`mm;
zWVaj^<-qFa4iMT2N<q%f7YA*CMbj-;`<M*reO&YXRa!H=LUF`NVn@0vNO5{@gTRXi
zAB6E(!(UgoVQj_5rn<#c2;`pbT0?W_(XkroX(PB^AtY{DI0gY)xEqzr{=RN{1gOPv
z-sj*}z!&NKk)Iqh%_$%7rw#?Y{VQUmEE7EY<TyFx5?cxSk-WwgICq5~-1bGwWC7ut
zJUg4AFyz$<i6CJ0bn)Z5qjavfnLCg|zyG}R!1U{%>NAyNjU{D3i3qj*fffC$<mZ9$
zV({wnLW_s;HsCg-%8y55z;tttr5_v6Ha$5R6NL=Iiy15ODY4fY91Kz&<HnF~LNOfP
z;=e2O+a_ycE1p(WM5G-=enfF2aJ@xXY;RI;cc%u~I{IF2M)_ol`nOYFHSEe0_EZcA
zyt(=&40>3w$WA=E#YHWRDobpVw+fE+sl-#1NM9U^vNY<b$XwhKhVi!PDlLvJVPrhe
z_TIYs>(L$PCx@L(`OZR0`MsxpTr?wv%j?Qqhv>g$mp_B*^Uy;`)Lx)Pa^R2fcL^7n
zw~`3%gr$o`iFeZ)38)KJ^~_V)f0_ffnqcH&#P-hsbO5vQD#Ynq<bgULEH^=AW;JBZ
z)0ggU@LgB^ZuX(}rMh}8?sX?y$p%SV{;Y)qgSN*seD1Atw6L&))wU9sqhFoIsz|}r
zvmB%t5!|LH^R~_J?(=rMvJ#1^9fg*291WXHC>|BN)A6Ani(JODSd7T2d<|jl355<i
zNShgH=J0ul?!6%QD$3^T54}N61zLbOm=FN`bZ_N}BQL0<Y?vtgZae!MXU9^b^jkfv
zQcMRrs-rgoIqcTj^G*iYuqaCTcsA2!!i3C(&qm)jUrCDH9J(F!?gRQA^$xr0H>DOs
zaZY1PV_gp{rmcH(+Ra-8S^#yAVK*PcR{1#fciOl$M3x<^@5e<PO7P2HzwZ;Yr`Rf{
zRxi<nQAxnP!LtgmZvv`E*ujd&nq6&p3;F)9kq}!wD+N{dm#W|ppCT7-O3f(}Tt4H^
zmq&ZS@WX|g7Wki&ZAiilE-YOeixGtT7ES&;fPWTd4kbfKs%6+G>FCQ=2|-YYVC40g
z%?SU8wYvExm;Nb_xAiZ!u%{|cwncrvhaWJvu%%MPO~imQoOTm6^;xgnVhrUez|Qu6
zIoIJHN(%#zwt@msn(=i@zG~d-952<;-ubO=$$sWWf&^}(oB)#K*#+hDU!p^I^FUY&
z$+jKZO4}Uc#(G0?=>`4f%;7Km$H(2l?rr*84}PFh3aC<8@IL?gd&3F8aXNz8I}AHf
zF{w6^9YS5Z=t%4@wcj)Kk!*k$L?w1+w#qNS4e*_gJc9DO@;s@E4>|wf!I&evmmnTn
zRvfO2!-+`~U$$#aH5;%mZl!EgxO;WEqd{Sg2LCqY2gj7md)k|}eVzMh<#3g=>Xd@Y
zn2b_F!rri!L64`yBOCkEJ)C4LagO1m4^M}inRN4u!t1I~)R7hcB@l4iw`Ei!n+ZOh
zZ=bZDt)2?I_5wo&wMPb;ckEd1B}{%O8UOkq<@;>H@L`XI{dg}D3%`95@OO?lE0u)K
z({8;LNOqrp9(sjF;Sv;lPFwa<eA&qRpq)EccoGM<;MP*;4z;&1=^XM9A>ZQjg5IvP
zVzyAvkRPTdsP|g1U|+=Z!=9p0%;#qmzdo&T4^2Q``NctwBa}1OS_-MJZFH|FdS`B9
z=i0ZPfJL2=mU(w8I)ek>AO0@XMB{X*3`*uHw9|(>v|pK9p(|(*IJ=eTr@H=K>!?U+
z{dv04E3dd>VE>$vFA`HY?BSozZl{xUq1AD{CRbKNWZm$4`9R1gzB=UOxOr({S5cb*
zN5^hI41YFpc)Grvx@FyG=PLc{96;jmB0qZ&dzIO^F;j0Qqx?|=%<m&1ZsdEK24xuf
z0(JXb7NgG@Kj4mO#&@y`*rhV*`^_(EI@7cWs-rL|M0ZNM|4g0vRPnxWAM96N3eIq>
zu=#9iJlV5|Ah@eGAiq_rY26ntOFntUTwAsawLhf}vOIZl*Wj(c*X&EReWukv6jpOL
z?A1u_pu6QHfB|I}irM?UTcCvOtEMsfj!v9bGp$AZ5%!XZR<ElM;}MwI$Hb75WZLMy
zH`4X&X}!_<?A}SUYSng;U4aMIwEqhzIghioBNs~v4TI9ne2s;}_P^BSxv}Hsbb)x{
z5y4B@W3>5X1N~PRjd#w!8h85aS;D?%5~T>W0S4!SeM@;%K0ci~D#}#1*|i8K1m*ne
z=l#E{b!mKLfADiprcz-Wib3Zq&Lyo9iHistGc|VftAiEqL9xh$r~TNWx?S79M=GAm
zY8UOifadwLFe`r3Gk&E~<c6-Z^$`M`sC{8@?4gjaa}uHYY-fv%xhwmJmLhrj1QxJ^
z5x&?&Gxr|F>&XvzI~>P3D#0YU#m!QjwYXcnvJ=$#>Q0T?ySiHJM^pCG!Ht9hXRum&
zg~*c|XKWHlobqJ$x8O!S)USeGP5q*?ig%XigJnv{Hl6I5S?zYKki<8)&C;tZ6qGY<
z0~i*O3Z}8VGs=3?yc$b9WPu+e&<7f9@Y78^OM4U-+a=IT^=pGZmD?03lqZs@%q9V@
z;6X1&q^6v&l}=WtjMvQm&Xh&Oz*oPLcK#myPaGkk?fFW%ZCto2{ie;WGV#JzhSq*7
zerSb);F9BA<(X4c58{Ve3pdc3`$O^i0iTnDck#g5r|Wcgx;JO?&&qEB{PCCz*pqHT
z2Vw8;Q>C*6T<Wd-`O;LM>_8*r-)i0}d(Rabn&x8Ckj^@VzU(+Z{Ha1_VysnFzW;P}
zG1>9@tNWaLSGT-(EVqJ|p}jM4%P1oBX1AnI?Zu0!R}MnTds~#>?dIBJ-f|uY%%1QA
zYMb-9b2feA@1OsEC-xf*DtxeB-WT#}r$hroDEr-9fGz<)23f8oKLMgP?CrN0okpX3
zY)}^i2FpWEFufMi=%rGtECQ_aBvd@8@0l!T7}19MrXsLn&Fy#3N0R@<ZHEm5)abL$
z_oRfWqy&UdV`$uL4fDhCCiC7Aa%_Gtd9!P}$lN716)Hx0I#Xl;9@ag9ba2BEtsLA)
zOy98*URnOYs)OW;ch(mmfwD^BXC(@Ytmz+M)U15JLe5DRCd}ic<dI$UmT?tmh?EC7
zrWGr5sa|(uQao*i<oj#^AO_0H%qfeYX9MmChyPfA)xx@R8%)D|{b@2f|FhjX&Z}=L
zB7QzOhOge3ea(8TyD*QP{m%Ql;qj=DL$c?L-HO?ku^J@(S^F+JICQN*-gc}+_RCG}
zA;(81e*e=6>0nUz<WLxZ$6Zg|&bHP+&>QbgX(WbGLht_>Titaok{j3*RtjXvg1&rW
zREgb{qZs!y1flO($7T&xd?w~|E{3EWSwWbL5!AxdMVEEyw3@eUC;c=Y*oH!fdD-4Y
ze%0q?t8t?U=GVIzjpdeBOM~qmhwY;idD3zM3bYAi^}C0NxI9I#i^KseN`;@od*^IH
zx^^Cw<LrT@dlHl8yOPBFTZT?uWUCp%KXua8W3MBwRWy;E>)p0<Es#8^>=;Lm^QqrG
zCGR@*J2o}nSxGM@-`W@~@)e4lVfjAATcn|I>Jc7fj<GyBI*~ADc2ZZ`XTR%}&lImO
z*h>A(`}<Y8H&Uf{szKx+`JCLY@%+vqt(k*5oujM9TE92PwtTNe-wi4oBQNo3mvNFK
z{G<EXuQ~Z6X4bt=AYwORd;Q?4`tG_-K!9jWbrBul)PBlOPL^C=xi2iKk7|7W*w=H?
z$)g<9q~vh)R)!3Q&E1s(PYIqvfGE-HT(Pwn25FT)5Jc5DzGA~}QqmWtM7se%n5WtS
z0!C%4*q)H^i4^+Zm@4E26ny2$o!#Fq4q6Tq9*_Qfv7UQ?gMsOv_DwFL+!cUhHFvez
zV$;jTweFES^HnBh<I(ljjM73pjaL0K0iTmJC5K=?e+I+p8y3kQYI{Hpw~<4J`#*5H
zSREMIbe^hIN!lMx?IaF7BI9R;D6B}p31bp{I6{-0jMnFKMZ%;0q@%*b=-&<oXbn{e
za$eH$4u&ryN^W-hy~>i?3J#l?DK{9Y8K{lw4TM^M8Nx#y;NZK&XfK7H>7n3f0NCTu
zap!I&EfbV1KI1VX=1%_LO^$m@QLx$*AnAKL5z2_$5@@O1c4ha|4kfQrS%@RoHNOy~
z*usmEol^S4Asz=M(PYS=v=yv<n=pU}UNjTdbSIACipK5+JU?>jeByOP<7J1%-{3I=
zsqUEcS6|pD*&esPS|V-~^kmy(*l$r{c-0i2{pZ<WZ0#WAYgBDZp<cF#?{@{MS~cGg
z)@M-mQs-iCX)_!WNp(-AH%HJ<d&P+}d2Izsr72p9Y9t&aSg-4puWIO=*1N7$4Ny{K
z`6~nI*Mu5vM~A6-wRIBviDaOTFu7Cgd&CPnsF3AcXuaF%ABqB>MNDP~Q#m-}m9w(Y
zRBWOOH4t<T!=^HRO>L)^njk@41}aLH(IKA<ebIyr^JL3&9w;1$_f)_bAm93sjZFGH
z8L~w}$V{W~X(q_iT9D~$Uq?S9wXbH2SDYTjgE)Wf-IJu-{yYBWx!H(|lPURMSL=&T
z(?Vxiyjk|#7^h(0PA6SH57_dff_P#~jI>eFA~ABzkiKncN5T&n^^a*WKSE7jDw#2Y
z=O);|(vJuf83qhZIk*v@56F!F$k@32j?yD5PkKB~`{kElaS2BN$0g}E+-gK-06`IS
zSmgGoJGV;paQJbbqNX5bVLbDi{l<zqCb8+1m}w=~CE2%HX7p?nZ6Dy*_p+L^gO=OT
zSEKC23e}}RNKLJvnIg5qLBj|HOXTe?4XD^vkygOS(qKz*O&o!n<(N_X5O(s9cW@$R
z#~hVI&?G<B{H(!?v%4$#c~FAQYojL|%DY~g!NicL`_5|D%qD0ofKw|yh2<Gt@#-`&
z=gF*2zkJ7YjkGR$R*qR}Kqx}w?E8Wc$ks#2U@u?B@a-HxV0a=RLP~*sWKVc}a3!F8
z0EkTcEL+Rn6Uid3E5br&ne?TqJil@5CNa5$nW4{Ny+Dd(prZcS#ZdBs5a5)w@(1x`
zOf%miXI!*s1)11)OJ^_6MzLsq94-~Kb&Go<Kaz@?ef3DwI{un0BalkBzu3-9j~rxw
zvy+wa&9_7}=6m8Z=#Okz{m1r#oVI?9o*r4!GnfCk2KM`u{nhF(2l8$>K8Wf^<Oh6z
zJnNo9x#PW9UU`%RsqW6FHb*_;I*ZbZ?B}Uw$DjORw2Q}*rHviwS46!isiQ4`@o`Cw
zndA8b5Ql>su#VN~97-XwMJTtXz9;na*dleVC*%CD=*MasoH9_r<`OqqUrSLfMv+jD
zvdr!S&&wHzhUDB%I}rr<&o7tUQ$Px$Q(1n9^6yYEZ8;`7ko%)B`>rwmUY;m;nv{P2
zpmaH{XIhM{HPalc)^)b0sY9E5-E>_lVwH`BeZg>WLA_T~kap}&x@|WX)8H#Qc0>OS
z@;-a_(B!JcMIJ#&MwP@dd1bN1t%Z&SmXpB%GdF_bwD}VgVU*Qw<L{;5D((?UXM4XW
z$a#^`JKcL`<Ax_TU#56*;GpsV={B;If0_{j^2}Uo_rHG}zr8l1U=aa)FPw;XwzjIc
z&o}dJzDzR_L<NV0k?E#z$Y@@>!HaMH45goL(Tf~`-(0CvU-VimNie;^)FCgK)Az2c
zeZP)7*m2nlk@HL|=ct3@b?FT_?Ne|_G7(trU!u%@<0q$A>$7VqPR8_Fjl0`c>!5zz
zUgMOJC^9J)i_i6lrDglN=iprCbcRIw&^3+<9PhYb{!M{R@N>NhVC5t}d!>&t?;`m~
z`$P5}sHxs0(DCS3K;V;w<4!ClL(QkF*PbhFW)__<7gYRr2YmCPEvk@8m(eFxk{O9F
zngrZ-gP0((@<MQfi<#tb;9`><HW)`Q{Y+L(X^Zdi2kL(-!Z6z&#LuZ1&eWsYx)_m2
z@LjO0$lEO^X1#)Hkgrgf4Ge^j7kX)4AIB`UZ^{?dmC??hNodJfGa8>U%A17--&*%G
z<s-B*|75-1n&lgK98XE?>IRK0Ur8n1p`jdBEG2NU8n4{L8huyeoZC+D$%!tHQ2!S7
zEo+Mmyic@s9TQt$o;4kO3r^c*b$rR5abFgFb?kt11wfK%+`AY>8&w~&<U@tO@@;uf
zr+n@dT}*M^>PTz#axnLq!gHR0jSdFPd|7HJ>w9OpsFa!VQ-UTAABB+1=dEk<3efTU
zm3#Pg2tXuWUBw$*srqx&qZMWDN%YyWy-b83vK+I7`myS9Dzz|f8|F~aB9CxVX|#Sj
zy+w2U>t<hfcp+rqQ$gf(Tzh!Y5>tD*7w;-OYC?l?%DBG(teA7K46&(W3t0pkYsr!X
z&`D~zDxLP<|LZ7ii6gTc)K)9rE%qz5lSF(SrxlYQIs7H4k&Gkm1+3DVx22~7@4G&o
zkOqtZZ8*E)c1GOt)Rhp6s*I?NzCe%e5|J(r!rrt*#~sDg+wz)jtqil3@*~6yiW8={
z#C$g@_TD9!K!BXU|NbO9xslK=sFfeb=T3ih5ASFCkQl@O(-r*>!{`?qM-9lXc;*j^
zo?b2{T3ch>K1_Ec=3{6Yf%*K9#GU%^mIS2?njK|^VFbsxpUYq8HUEb;RgEAw2LU`v
z{`q7${Tq#UhSFS@m&bX5kS;0oNZWsi+O&KveF+d~3;Y$&cLaUZ+i#V=i_?y1YRwWn
zi&T9uTFiOfMQfNtIAdRCDcPppbr%^J@7ZhizQ=_DFNDdk_N&pS?pQ|+xmQ(tPrXd<
z_WLBIwa^QlF;$*FG%At7z4!6s=so(a)~?0)P2$4Yh;d7Ft^;`UsCJk)qz(u;rRT&E
ziJ_v$zzS1p+qRy&g2=-z9>^7;WTWEv(BT+cdEIio@v7+uFKTy^hcoJrP0%8v+A}Ln
zfsZGzshp(lY-kcK)Bn5=-y0Q09gy73!9H~S`t?}zDm3`Kz(>IVh<)PuaTF2XmlWW#
zJn*wmPSMmU+O@RDcFp>0vYO}|n{LSo;p;lA6hpeZ2YLvN=A?V+*N%)!l<mPwV00Ft
z;@gve{BpZySrXeis~t-$Q0uuOb#aiZJfW77M4A3#x$lYyey`@G-mNXGfWyt6EFJZh
z(<8LK2sni)&Jo5dXzoeFle<TheSY~yL{VWuuGmIhNrvFpL59&($M8oO%GQV$^!xz4
zw{Jgyt6=rbMWQ+>>RmBmvy9g0(`DvgmbF0wbVe7?dPaWP!q;&~yT~aCNqQz9S$yFJ
zHBvL{?L)oarjUg}(E-H>IoAe9??hHYr=i);x1dxpQs5(F>@5rM9=mJ*xOpCmTle^b
z7cj~U5-Jt=3HXrkDZZWscgLxut@lDnKt+oAfyh!Xu)zV9Wlm7=q-5ytp!A3Cv0rcA
z&HvQDqkZJi;ae^2@rGvbhp_In4dc1HL*<i=Jf<wcoYVw(`l$>>j^wblufNLfC+fNy
zphA)0H-eP(E5LTSQipJysfl(u?&|9Lji%E29(5Kmjm185ViKy=F|#E$W;j3)!fwT6
zTjWdG#3dB|PSSPkz6=2gypEx<`0Vm6e}Teb;NwZGyJ`!_Uq)5v?uc(!Wl6yCn-V6o
z)mngNzJ+lFva_t{Y|<}*jGf7aNr7p6_c8C{*Uv%09AVcB=1Y>qnrGtFduqEX53~@Z
zw$|3~Q^@fiO;>P8tMF?!XC&GbC4|g9>kK@HlwINJw})2g8DDJa-VG`HwMe!MA<jtL
z+EU<C@VRT=ruSc|3d*tu2r!bO#w!w*A_Bv+oIZR)!bBv)Ibwq1&ou#ZB0}Lyq$`qs
zbp%_Wz!n)<t)oIKQOaMe>6UwN`2vfW^KQQVgz4?U@mQ%s+pE0m=ON1<9>NNa21&`?
z&LFxi9noriXMae_^BVR2<ttjqosQr5w)+U)#-v26R9{1{w1Mg-w~8PeSWJtsKBp+n
zy)49$b{e-YL;Q<lYQdKe^#IHtqeqe=@)wfEy*Oey9Dv^`_J!iFrNuQd>dpHp<MCYC
zDSQ4i8+Z|*VdCV#c7Sh6w@v+uPGh%A>nz4wPJ~bCPBv0}Xn|#Ll-wMWhgqkle44hy
zuj4^JH?s6EQoFfO@WXW-ygA8!$R(qsAqo8LcZzE_{bh9woUkE{Tx^LtJz09trxGTl
zCfC18;&UVHkx89?hSLOeys+V)Cn^Hr-IBU*#ilsvbU2Vqj7Za9&p5iCD6at5nK}^?
z)Dw3QC0YqC9mT&vM<ATi=g@@R<eKt{1xu0F$55R3W<pxQv^X5C<>B8zyHwmL-L-^>
zk6XSZG}wAS2$0ggno}X<hsL>U47$s&fss_pCE6H0)h^Lpx@Hx0U1{<wj5KYYm2HYB
zp1A~j5i4+8kco7$={m06!VXKG>3LWMubh<&5TK7vW*!6H9t1CeuwNJ6?(|b`V4L`U
zdYAUiW{OGYT2BG(GTdN9QxCg{93?jx1jh<l)NW}{bl6scsD5Jf)Ll#!d7M|z#aeBg
zcSl#U_^fHmhmvGpx!Lq_M!rSCQ2u*?ttZr#YW};3x_jsjcttw;>S+d{j}hXLbHR?a
z;yX%qt*=F>!V$+s-YHr$c>85{+yGN0D%XBS8IgE&LPtGN?zHTDAN|g5Zp@&=o3O9u
zZ4Ht5$vo|c{u_20Qmlj~PHiv@`zbneKzJB2!^A*8>pY7eHl`I3Ckz)XIZu=iGX))~
zY>@XW6QLqB2tJ^v1boQs&Q1!hSEFj&He>1O69f3qsUFf=g3Y1imTWD}jx4Y+=I6lg
z2QiK<1a5YA8Lkd1D3r<_Ehyc+XJklk(v6yYm2`gBuptNMdXZC+E0>=g%tsqC5K&+3
z>vzq%wAB23ZRtG4f|dw%`VD;6hVEDKuxi8Kjkhk~cUzXL$mK~s9!I$&-z|w*^_4k3
zQSQrVa_2cvn}0J;;W!hW?U?a6$epq?M>dF6$UBY4o)v7dx3Xd&1d_Le_WIuYlw#Pj
zun{`6ooRGxXZ~^U8w>`~?qqX+ms(6~r42(x3QwPV)Ld#S5kAtqde7fw`d<6{dqf;@
zV;4<5ih_yg$+yA>0vSkA+7}iIRnuHT;=uYfmC-Zlo@Zp)`My&LlN|JJyX36qF*(Af
zR(6_aQ~~kKCQF0XyMR-zFc^cS;WSZ4uLt%m)Blqux%1g~h*h%fVI4i2(Sa;6p8G=8
zl*(K$hQE%iG8G%2z#|7cF@NmbKTYkANIGO7VeWu<sfPb0u`@Yph|%k6ww@K-^NilK
zwjmR{;vIRsux5;`!q_YDp*12pZ&y5f$|Et74Ce}f6Bc2Q1AZT#@5>?1d`sZ9yQuHO
zMo9(2*IIQ?E;#QtCl6=9uV)0b8Dg}s!<^cqU5HQ`&w!s{xF9+TE27ys@POP3F_Ags
zy<KQ(H)(aEoEv!o=KHbJBl8?=^-BW5_Bf^VOVFdY{KQ}PPjS#N=JLPb$w9Khg}8q@
z9ljSnUsNDo&h{UbYE4TZHN<tsd<=Uoa43zaBU>ax*Yv$Q)Y!qn=n#Ky^!AI5GH~Hy
zmwcRR0yX|c%A*G>u^+3iA$S{vt79)eC=(D6?a2LWF#fzijXX+$6URNCz}Y<;giaYa
zoGr4?*pUL7rXqUXA|Efzcgb2|pzvJE&cu<IrMvHd{u-nTGC+r*6o*25Xxj&Ovp#dJ
zPsCbX5<EQ%Wa&G1Jv!2D+uhtn7~*t$vVIU)^FC}-^^nQ*T*r~HGj2*2Gzkn0tDLDj
zt%!cB!x<p<2u^dAvtE9`=XahHSGrXj+oET*dv1RuW=!z%lP~hU{(5!g_^he2w1mAh
z0r{`qGd%-L^@`ePR3Kd5ApO_$m>dYGlr+z^h4(e?Q-Gy^tV2U)MRwvZ&LnJ5KiCuG
zTP8$=)&3!c6QhK7W>XHeE@Ob?r$!Mu4H+r*K+6xVO{)a?-(DV1R&1^K?oW_HSBr)2
zf?DUydqYcGq}yfGygvfJ3;(&imKdfkRQENf4M3{~e-|FIq=$DUvL(Xf1s1nrsAL}U
z=(rLTDUwONl1NZ;0{KJ2a-!L$1@fOY8le*U%p_+fo>@D@i!DBbvAjx5#nN{l?{*qc
zg&ms9_=&=wXFXXt6<e8bj-Blji2IPS10^$HJI%YD8zYJPhZ+y&Tg7E1nx9lL&I}pY
z1;Mq7i>iy;R1a%fIa^H2>#tyFZ~AKtaMc`uL!%wKKt6tFc-vR04ziJ3?#Xg0?VLh6
z#7Io^;79Nfh2DBiH0VMq+ia!CUiNyVXCW~=T__LL|K>g737HZC#*>OWY`Vq4^v;OP
zf{54mI^ATw^$D7<f3fO6k-g4&U^4B?o_Ugro`xH22K!ZLDS^$XF9CRa*;mQ~)JB{4
z=Kpc^-hpg>{r^8ojo50{j2Lb0sJ&H<s#UE~n^?7}y+>^lv_&b3(w3UF_l~_<1ho=7
z_735f_x<_apU-{&{_;n1o$Gp?9OpXcyq?e3!#6svxo~Npxq&DS4tXl!d=V<Iy%tcV
zoz=iuaA>R$f#Z<Oo=G+$GQx#6(@iVc-obXJgzyU@<46_=q;nPyV&W>TnFWk1?TkC{
z<Dc3$z30xyq(^)polfbWVlKJayb~d+gQWeHk%4<zgzYVit$Aa+<OzJ`c-{&9_CD#T
zjXSJ$zNBAmRg<i;%L}a4P|HuH3p@*5jLwR7b9yL-a_c(zs(L8!2BSXr+`++Pg+UQZ
zglC$si?jv+-DmY}000c{{_zI?Q+7i46*^p+AC$eWYPkeWXhYC)y&G=2n{vQi@0t7r
zj`;BOb5)AXl5cbxb&Ybf8H0yQs(Y=ss#|or#W4L@V&!X%<HG<}a!>JFM8mt7DyQz8
z0@FP8q)l;GIXB-QLX0oALU6S)&Sv?qtobm7w$Z8kRgT85k47q5V_;*9&15QVlZnGk
zL9ztSlB7E`8*_kyT^Ik`Z1KNv4TsRp-W*4VixFl3!<n=7s&^><-Ah8|wv_8RYQA9>
zTgePdaotB-FD~w=A03fPtDybbx^hT@ZPcsujRK&;byfob)PMuV-jZ>)plDawFWk)d
z4ghAJt9Qf;AwpT!q7*@=wO_+zY5LS8LZ-oT1naZ*cA3t<R+@mH=F6Hf0Z|<(Koo(B
z{n&G}PAchjDQ%a|S*w1YAsYWxsi;t?H?9tbv4t1!ztSEl)$8Wyh~vwol##TJ<yE|2
zPTVBb1B+ElxL8vIb-8#tNIzEB?*24Teji$!d@-OzmJn%?5lW<nQc*I!Q0k#(@&eMM
zV+FN!$L=*EvUdK^&B7yKpcxHtK#cU0@??MCdf|jD_c_15(<R#RkdH<B`E)1PpNhLs
z9KVw9nA&sjIqxu`;l-!0x)!2Wipp(iu%!plo}mh3Izy^`HO)jWh(LVH<yhjhr=vR~
zBSC!y<0HC?z23u@cnxG1<#e;j-XIknzJp0(dAqwN%Ne5P7Aa*#Y!vUPV44uBII?T6
znJ4S8wvhEd#xT{RM{^EgE+4KlgaY<X^2Jb9iBb7g#5{~eb=Xv^v!Io(caxN9$(g`R
z2w6zbHHQkj<hQO)D)UsWW*kV3SAfx+E4T0Kt<agP-zFL%rY)~~XM4w7;zRBhm^AB<
zIeplD^VI3sPYy$s3qC0q7xGni(BRLu_CEO{pT}I!c2AaZyV^7_I}uk)<YFZ-uST)G
zhS;*D*9bm*MV^aFW3CIgoj)nk&ik%@n{}zSUh@lQGoQlA;!53tDiX))hB@f!euh1`
z*I-9((n!Nee?OCDMp};)X~3q^B)`aTfKzDJF-p?N3M~dO2<48Kkd3B8bgwUL(D%Eo
znjCnB=IpTr6xbpsZw3>N_YZgBbD|k=1JVG;x5le-WjC>|V?HD8uX*GC89LUihpY}g
zT}7{?G*ZNK(gZIiIG{yTqtOP-BDiRFy;(8KNeXt~aiX~o`gE*>H@<i=ib)Ux+aLvY
zkcMQ4%3>HAXu7gM^Zl(VFOiBs<@b#~QEsh|8S<nu=2w5zV13_tJ^G9W0WB^X*^ue>
zP%K1=zKqb1(Dt56N@b5>Ysm!sV*ZEX^^(e@F%8i>^0>aq$)75@Ps-iSSdTq)r=Y^%
zL+#IPW&CY_Mf$%hMiW~<sZOOr5v<f2ScRHAx8oJ_nVSZr33JY;Wng_Dt1CAUzU?8h
z$9#FR3(~_Vge`XQ=CbUCAV)y_abKK&->zlAgIVZoqC`M`8cb#PvW)xVXQM)C`0CzE
zkOV12B~K8^9tGx0e>&-=irc~9jCiTiwyU<&v|eXXNkQ5w<ss^XM^$MjBSuvZFG|{y
zMc>lXe0Ywe@p61l-zAd}QVLK%qm|NOv?No<@bR<KYf||J?o9u**9ky>DVfWxnTsnC
z>J&ev3fe_2fPMXeWqrGTgfqbo_29Vxo!4PoEWvwzkaT(D&CZvKXd-L1*{Qr9E}q<3
zRle<Ge0KH0Jwv)9|G{UQkD+B|56;wL;$(9-#ZC9(Mb($nyzeN?N$Mc0E}q6Aw9Te$
zZtpJ?F{KZOv6^i0J<1`LG;GUYKPl-^3AVia8-z)|L5fy;SSNaDBL+ycisb1`g43V!
zW=pQy8{dxLW<gox<C2vMg;lqt+PCWAf8Pq4I7I(2Z=Um+IUZYw&Xn6}v6*PDXd5bv
zlGa3c>S<<*J@8=@ao}tK>CLGRwq$fFU*-7B_!{h4TRtppU6XWa{p`zDf)^IiZSa&@
zz_fAEU^8;ceui0&(2_Ez+zh%r`SpC3C=IIQWGWA#5gmP=bS8D9k9o>T_z*+)o3Qw1
zBJoeipgl0ov-q!mvOf-Y{Ub6<@HH5qQFr#?R}k|_V<W;Q1H19yYBj~5EOG2~cfaFN
zE{ZGLIhbTLiuinJ-^C0M{bDvOY2pyCXj23DP_sBV_n2_>K-Fp)gmgNb=s%w?;5!yt
zgP&P52gciq&%N}@srGqG?i_K4CX#q{eT&!Qu|+f9Zgzlo*>>pp-*fG0;Wnv$pV7PN
zHRfHEprD<`ZB2r!qhdDcBU;_0s!gkO1`W;YS>{O13bNaG7qISq20;b^M7!rC&!rhs
zLj|4Lqk~Tn-Ezs=_(iMw(FxK|M$<*`jgUE}=9gm1Vy$l2`YXmO!?A@Z4x611!5%I{
zBTHQblqY%2#;5ev-S2N`lyrqBguKwRcY<vBw>R{^9hA`E36jAn=7Z5T&0%d(f?0fT
z?K~MmFzbjZqMb~mDlF?6Tl2&9Z!Q&L`?=O*$c5jH|E>kl53#1|d+w&Vt{QeDF)4}J
zM$#QewmT!cb&WIcvs|87ugraoj(<*Xvc7@bgxboF<;@2qxzp7xN0xdvDXc?i;~Pjn
z;cSo{T2&7uH_%L+e_dcXHs0BK-DzVUxT2;dRm}?6nDb>i*-yfQSA7;keI!L}?!kZh
z^4@@4AjqBV5?p2d!x871Y93N);@(428`hj9ZAhol_;EsT*0OnmuhhK=9T7<8+=>V6
z4yDaK>Sp-zoX2x)e~Zu0cJFekewaG>CSQ&pwHM@m6@9dwdrJ%w`ZPU>S4AfSEFF30
zMIk#2n1j%iFx+kH(^QEq<#*@yYJX<EUlnbf0(U+re@Hqh<(P^68PgIeJTIm;!<3Ep
zUHhrW2{SG7F8>Ut&|Li3Na780=7ht)*Y-}-x1On2zm*|&JHv%SJfsqcVG6I!A*KNm
zMU<ki2sksg+(xeYOGq#s2SV3dCnRK?IK*jaN&0+Krtk7qfVPXEjevz&>~pwrmox)c
zo21q0M+Mg8zoiB39p1Z0u5L>6{*SXjW*cipB!%qJ?@zx#5_KhJR4lfI>fAAM3B6wg
zntZY4$-cK(&lsKLUYnR4eZ_0e>sd<kEB#qY)1#4c&0xgs+E7N~NWk2{w?Mu-VR0zm
zDtE65VUrcdg+2{kk?Q%UvESX>yXl0IpJ{zDZD`76Uv?0Jfw1DiR<0JH(g>ql0m&ql
zy-JhWbY=aq)6f?TzGY)|H+MFSU8=Pe-X)>)u1~&&HbYqEzKHp-<^e9PklV(poqVpK
zlQ+a<%wd0ju}Cn02U-0Ry*-X>^}Wx~!D442c8r~?cMy^mvy*gKm=*^nHf*ztHOy2*
zB9!OaAk^CQV&)*esxa$V@|4(n_9|OWVJyIn5uhMa6b81#PMTod3rIRFFAu;Ib<Vb>
zG*<mK>krOa>`0|cV&ni4h6{K5l|7?1C>@3y?>BJtij%6y@KmtI=a;j&22%9j$EV#I
zFFsRH2fB~I!jj%@l5HVdu2hA6K8Z_tkFq0F;fREv&g##oNp*7DXu_>M*z1<iVY|+(
zsc>?37Bok_Nzg9$Z3<p|K9Q#epOsu>zQE_C7PNDQO>P!lb==`wVrF+`g_KqDMCUWj
z+>0&ZbxtV`V`Gbp31@0M<d70=V))2*$Zx$8$rlzE80)a^S^W|n8B5kNSE>T0p2=2v
z#cOJ)y6OQM&kR?R4VF8wDevp1R=+<UMEls+)@>4N-+S#RZ_Xr^x9e9opi8W|xIj6p
zjR6Qw+V%m$s2+({Tu_<(RY2fs;{0LSmG^$c0H_*&rm|>}pET(u5Vt!2bYtB<5qp%3
zzJrL3Akb}!_v8f%b7-R!XPsp?(%UE1FIzwACMqr8I9+}F8I~08FZ$!NyQWGm#4M(t
zD%K_ZvKv@mlN&<(mv1BI(Tn2pGpV<V;5*MCMyvMv?HhwwTYtXW6wlyGJjF}T<Ru&0
z3gZy~oH=ve)ghcs6>b-?nJ)H15`JwT5!4Vm4=%frkJM?AG+zHRqq|+f>GWD`wC54Y
zdzM+9lYgW<(;*q`Vs{*65eCjK6Y5sUoC<Q~2<O!u_om&UPex_8_v<(tHZG>yeP84i
zwH(fcw4|rm`pA~XC$l(1e{!K*ZjaXZDRlOEzxjcaY?t)w+u?hkq{&zurqI0L@4L_U
z-Xz_{_WBkmu)Odae}z3awA^3)HFG1Lej$j7&<&1fYP7+xj1SL#E3}1zr`UpQ^0*DJ
zHq9<nGaVneUQZ>9_9O>ff3IA?6-_(z<XJX-G9nuT6MMk@x{hzm|7sqO#=du{{8*B!
zO~y7YMaFH@na(R^U@0LG93JYDg}L(n_zd3vM3!VDH^w6uEhr@P@o5H#e^gcm`bk}`
zZ^!OxT0+s~DFA+%SuIp3TJQ2X2ouFJLwNGKj-6oi!&Jp*>Vdocm%-NeUeu?brZjM+
zyV`u__TF*YI@Wq0Z3a#hltS*Rt;j$X+l6@lf|hc5Hk5XLUVm!~RVMT$2WE_@^@)iI
z4Smk?=rI`(@XI+)+J)eubWN$0pRa!6?8FW?`HI!tG=9eEsayq<kAfg00&@$|y*dly
zF|gURk>2?Sg8NA_si$6)lI}mY!9vHtG5d`ytkCIBZ60w%LzR>plh5-A=-a6pTVS*P
zzUFv(K58jXoyD|-v2OW>fb>CCANKBU;UiP^$wvcfBxSY8>!3oJ(;8uD_=VGAau<Jn
zPwEHmQFz@S`4>Wk$;N9_ujZl`d_v8llD;olNEbiDqeXGKacX((znWLNqQz}+H1pXl
z(cD^&vT}PT>V4YL!i6)MNk8iJX_y%BH=y&9!p}tDk#pi@cIRBwhazrCP>>9gEdtT1
zF`a5e*aWKFC2joBl2reywXEcM<MOJSmg<mm+J+oUxy}tL$fBlUk!rQ|j1PavS@GPN
z2bHe8P(_a5+~7n2%(kYbdtW~ykY$U|fb^uhU#A5B2{Q0)nvP|*M8g`vzN9}CS?|^c
zYCpB2CE;!-7n=OpEBpxv{SX|?9BKOqj0`1LE$(M_uYgbIM~3q;tB=lrP@1Fa_>Ow*
z$TlO=%LbBZ41Gj`($jn{J(_PMFA3`y2<AV+K;zXbU}OqAJPlNuQi3|}OFc}Edz*#{
z*8cM?{dBH<W5e>Omi9<EK6JPF|6TZq0M||jil#%-vjvrB9(ZBH>_s@o?7{3AZ5Fc-
zlu`mulKrt-cCI6UOE9YboECjW_^(U;xpieW&8#nu!sOdS$eh7^zAaC<z}U=*3gGqU
zdsIhz^!eK#nd1L=Mqe?4`2-kfG3C4evxMP>k{_HKDc?C)4>y~_)SjKYGlITF2RA$Z
z7&Q4;ME~zDR#Jp@I7nLGXBKtb@JvY>igB=C05!|e+wo;QgZowc?#%x0^XSpcCX=|Z
zsH6mMASr0Pvb+cv8gXHKT(G)Eqh63+>P)+_nf`B=JtAnPiEveh+x6S^$vZ6Q)AyL!
zFN|cfyJlKW*Gvsa-T4_EEU7akv;LnUfC)@<VY0=m@sBS3pR|L%W-*Tm-ykR;IY2{|
zw)7I)|9|^}x^TPhzb#u6G1Vx-kIa5_eBd@jO`qSV7yQ5_r~5yV-*G?QzeBADRoam@
z4*Opn#>6!i@?Z8Uk~FeN(ft1V@)2-Jd#>E}=YM=zk`wpk0Cs}`;hQf>!wEq?Pd3~@
zND&+ri>&s4oBU^Z%u18EIH~M?d$!mU9~by3!S<2c>OwLk2Z4j_c=KAaY5qr#(BqT1
zn5g9TzhZrL826;#;3)o4^jQsy77waff5&I|KZYC{LRcpN^owDoIY;`b{=Pi?eABC#
z&1}kp$_BnvtoXkN#SN2I>e=dO)}*)w7HKSwz<Bmzpl=e_U7`x7Q~%Moj|k=|B0T-~
ze&61lxBm@rLjm42;>Ie;4I_F^X9CCj8A^}sy1V#TQsTD8&M)Z<eK^u|rHJ;}b@gpn
zygARD6eh8)X{bN0tG`58wppRESAHY<4H+XygIjExO-NN6pPf;vR6L(;XU0vo+%wIh
zmVo2B+3$a~{iz;h`Fp-heQvS!!|BWKKX=)xu)bOEuUjp+L%kdfZ-dSr-*Ftop#v1)
z2kTF6qq-IwPUj1^Zz<KOq&SVN4&68@vG-5waiLh@{;NnYC8o@HQ1j2N>1h1|1B?AI
zCtK^h8&M<LBexP`tCm~xq1Q#gMq$3+-H>c){{yRi97<+w-UoYgv{t%^y*dx%=jTt~
z{bq}+PO|@4D)7W{A1BmVbJE7aX}0Bq&dO}HWRXXjh*v@#l<aaZ+ay;zA}Yw@Rf{a!
zuAAk6&V}!EsjV&X{3@%mKx-e$Vb&6R&3w6vmQF6Wr;nETcodJ?{q}Qj+h{(GY+HuE
zeL0!lI$KUm*0ZZss(IOPYDBT!u2>vMOvV174)e$8kc|~$UFz(4QSl7>^`F61NAgmo
zZR90x4w5jKjqZ8s#>l`Bq@FT-FY*92Ftzx%*^eddAXr8Ic^$LrR<^s2WYM`Qume7f
zb3+B{=E`NcsI!^Y40)huCl=9Y7n5a9sj!<%hkcwjlFf9EIRol!q*+8Wo0YXiWw|Qx
zmwKKX<vwVG-fzc|sW&Pt8W}gW@kQd$iz;#s_V$AWqorq%_DfmaX%#q*gjmtHXn8Mk
z53usyb1frF@@}+WAjTtA@k&=EB|0cSoG9X5<&wOw5p#X06Qm;ySAPDADm|S~mqCuu
z8Jtv8`QZ}BVJoe^7|%6N47>es878ZgfHCAc5Ov#6pm@1J`voIIN{Ayc5GLeRB|n2J
zf@V#>@hjsvAz^NCRF#SzyJF~q>FYEE))}CQU|hpVJX>oV#w2>qAwU$n31%ZN<5Ss9
z22UHffloJgb7W+MUL^%>-r(`&{9vWK?Vx$H-gB2MRX*@U1K1~W`t3F1NNx|<aZz<p
z^`NG-rsX=H+C@ZGhMPadIP7>tl7}TJ4%C#;L`IPGzI4eVE`?vQU`^8khjiTkEPd>{
z#X$oFaba(0jBG3OTX2rG8mY>{qc+x`%q5}B3*onv9Jza+WyEJ@w+Fx*f_hfgi<WJ{
zUsI8X;jgpXdv65OLUzQ#P8$hSqIIvQ)j2(6EmA1@xDM^AB5*jXpO)W4U(jsEg-egN
zP44@Aw-|%@DLbpo7^)}$IqOZtz)kJfM_NE3jiRKzWERP1(;obkYnv0ct@~}+!aXxI
zH1lXi;hPCK)-JwcUp#zmVc~mPXU487JR>8co+~NOtk`q+k)O)1s7+u)il3C>yGpJZ
z5%o&DPl(;q9mzl(^Fc80ihN7XXZz*;PDQ(rswjv1PQx>H&_sE`B92J}5Y4cg*^oLW
z5UurB4IRsoHh@rEBAbQa$sVAsJ}#}WwZRWyN|V5Ss6n2hd&Y2sssBIxj^v-C;()m)
zUpexsrf{|PB>?aVH2nl_U>RulVf6-5<{Oock{dss(!>!>ez)OZ0ORCWf0xf3T^79f
zdgRIXNWFT7LKq6Et53gH<hd~7#>$e=Ck&^<zh?up)yF{57`I{^cJ&LUfHB3{h~yBe
zcw?+lTUIS_fip`EW;AHJ$=<~kl$}}2q&`X<pL?i0OvKUSZM_m(?U7ETMsAm%r+_Vm
zc%)iyV9ogwQ+^8z3VvXtDAMo^WmVa0X&P=ow<$mp-2XQHg<t;4vBZ%~Ee9}H!{Xpm
z9Ek6F{5CO7l&z%gY>o%2Ha@hvs=_SBwb$?9>(vKDHFAChn1uOvH`xcyzrMIQH<PN?
z2Rv=4q8Ui_Okm?l)Nk@3pAe$X{-$o-r|fezje9?4Z<W&?{UJ*%p+@sF7s;_aoQJ)$
z^;SzuPb^7magH>tFbmrpUs)wNmMe96>h@}AFN?L>YP99Y(x}<neaTTrHIKhI;^{r2
z;Qg<|n0#C8mgMMQo3P1WZg!2Rq~j>!x|`b@y`{JT7So+=K*Qxr05WYQeFBgp*UROZ
z5O|=ko98U%7r#+i;Y`|Cwt*XJLudY0tRZ1#c^yt~gOTfU>cHiBg&RB$Tfb@M#wV48
z9lkLw*`XF8<GLL55r0He;NN7LR<@W#4bOU}Vb3JC&U><2z+X@!=f8dWntt-hBxBMi
z46<SF5F?Bo%i)xwH@a^&FBDS+vqy2Kyj^f330U9`LXmU@6?bA@MqO5^%nDny%t8V=
z80O!zDdM#3z!QwpZ=89~u)5AAqwQD3uUXHCecUXsReUi~*iTerz1|ymG~_lmmgfqQ
zo!E2@OBDuR=q9jlifT^b_!O2W0XP}_WV<at13B`yrB?JYJF!0y<D0Sh)OzfIEf%JJ
z)t|7i&dyO&ebh4hUSalr^AJbfklPkP%>JUZ%1PTSkGTgB{pYIuI4kY=fdwKg#|Y|t
zLIWVjLO3Q;&<Fj@tDRo&DpX-pV_UKbPsycM2NbvYF_LZ}^qz?=qV~<Akbz5w-~`W_
zJAfw=tKKr6<YU1icX!o;FiD}w6F~?|n-XoWfcvQuBUB;sIPdFlw(_Cc=hwap1lD;R
z^S2_P3U$L6Wv8wgkGqXO#aD{!?YtxJ9WgThvbE!{3kelxD-nQM@#1;qk0y~FfH^d>
zxGqR5S8$7ZoSATvdg<yN-h9l4*@trM`jj5Ew$5iz-BYNGM;~OhCG|0Qh?|Su%|=Y~
zbFZ2lgggCS0C~<Bn6r|?R@pZP;Hvnit6`z+F25^h*!IKifr}2}0Y~CZuTGNNpS-B4
z<eYu7n5vPb_U{6xwk^9QeMt$zD)YSJa6f9|2#LrlJOGu1tu?NqFUt;}i_Oo_wCL~w
zE_XM#x?ir@riwI~G_+9TB=7MPTTwfjqRQCI%S)A;O-50v@dYL)xi5U3=GgYcTzE1y
z=LYgUH!7r=Y;vR=(@+I9;sL=G<{VPeJ*F4~h8ZEOYGmM{QJOa)skgYv;DN*&p@9AR
zrBHsP5y!)UlEqA_${J(++YHOm4`)fAlbb2^U&{+O4Y-e*W(NGp%hti2?rpg<jYr-5
zW4@crW5dHLhG2>|?Q<~BVrA<i=S#9bz*ow=l3ohJ3g6u;3OP)wI;x!U4UTiM6Rrwp
zQ~u`NZr#4;_f)oJs$XkVQ}}M773U#Q>prqVy^(XGd96fG>c-BSV#2;ko}PZCsOzxz
zs`?Zv;hJssFx|-2ap*MInOo@SO|+y&UFhoF73|uRnO>=`jFRMDpMYQ6KHn>HyCj=N
z>D=L+P;R&NA|fd;6=SbIfjU$B?YN~Cq4(1;m(i9I=b0L3+2_|1WpjtcFMr(b`V-Dl
zvuK)bgO{JdoAbrLI6o}iz2N<gmT=*%^OW~Noou<^FY&F0nMUw}7YQyGX`jPhZgAW3
zhkW(SG~gitpjZpW!~k5d2jwfqMD|&Z$})An-6np!88zYq)Qk}y=onDaYdPVOajWh#
z=`#|=;f0g|cK1R?CjfVC!r!nqaXy^o1k}|Hl$DD<{pel}^HjFf8_F*!?}%|}G<hDP
zo37EApvQKL+re)n5eeWkj`n5Y4=qJfo7l0ZQrX!TXItE{R6e$fnuw1SE_m-?XZ>}l
zV-$gEwG(Av?w5PQ4$Z1Dw$)8}ZQQ_3xn0uD?XcNj$Y&`&(;}Q17@3$&R~rHERJgL&
zt+2c`h|B4XJwDNB9NYR3YPXkqch|0uaz%GoMVCSN<d>O?<l4@+0xxM<m-!EeYfwP7
zWg?;Nbj78TgT_bEH0IpK4o=zZ_e82UC%`+q{_%ksLcOW<USp%9r??^}q5R%6mma<>
z$G@;A`QO1tW+fGshihq?u@h29^IyDNh?Kz`Hj;v4(D{Mt4q3eu+s-1X7f(hV#^4vB
zWthv0F78USo9D#T`;_;WHf8G+m$M|-eFL!U^SP8mu7O-mx*O=Nk`Rqu;_LW3GDRia
z`M|MKwWX{3=B)e*>MSIX>{-wpL-!m~Ybta$NqU<PH=Qc&gcv(=;M;F3+NuZ3$fnDE
z0aVv$wRQWDlm$Y#`LoQUlvrYoYz=yJs+$&}?E~uURUJMD({1M`o%Q~I7-S_aPx;+8
zwFJVQF{|7tl<&_oNUMQb$a>4l%ofNt+258u;N26U_X!85?QBq`KE?`j-0sGlCcER5
zRfh*fgO*lTe&gx+h1yUjeG2eG@)Zf5N=)WZhefk*D-0NouPGI#03OW}*B90V^+Q!j
z;5iSEApF_h>|ZTaV}dmXs1&dDFdIEYk5r?h7|99Q2qSXsmI*@%H9VB$V9!VAPf3*R
zV}J1sZT(^TEoNa$rs7!uv62o;|C_mLth|i6-`N|arKQDVDyWne@IEbiq2Nv<!!n^x
z#9e%myQsm2;20*$*1+19ZK|`x#O|FxDqIK2Vgo1q4~D=_rj>h0Sp$(n$sDdHH<fVZ
z;_<P8NFJ>5z0R&v<_2rWh&~}4I^7auXw>fZsgM|-Uh_*Kw}^*fhWuhn<L_VC2DpY_
ziretW$o<f&#BWqJ8ND$??%4C4C4oS2o&KrnVx4&w03qC^tc#(z%6xS8>(|>-YVRIi
z1}^0v*OZ{d=iDSW43T}s3d~zv8(%WJbHlE7XH;Tf+8C>_b(8l}iybMU*wdLwhR?=H
zW^KWZn=W#fOY~XEbmb`B)r@x8=}5D{rQjyt-PfRvLK_1Uhu@g*^=IWNg^vdRfj0_S
zIV|c#!lsguBJj$#5p|ivtCP11zF=Qpg4=^y8owJs0D%nHVK=xVT7he8;?^QM_*oJg
z$mg`1*d83MyR2T@P3e^pe=8w*boi0s5lO`k;zinm+7FxTEE5M=hQ{lHcdB!rZ%)7G
zO=?Xs%W4M<YljLmru5wbfWND=?{ZC}mF5}9BIc1VW+*x<ZSQP9Kv<q2_!Y9;#f6$h
zuJ2q65KIzx>4%kzve$hC)J-~K-TOfuc{q)JGwxuonM)#Kr(5)F?5=M9fGdKKZ}7{|
zB;1VjaZVPxYcN63B6>{!BXW&i6c_)SfgZ15jYy?EdQxRKHtiKcX|t59!Zi^hEy;uH
z%aV;(-Z&UVvu97fRy#&{F7)Qo47eT#T?RFPBqNhMgb%pHn8|U@bpuxaY=4sQlwYuU
ze~4FzCw0Id`fDMJ7URBj-H7mXB`f^=C2sj`PIJhUb((^;wOAr`e7E<LyeN1yXGSym
z$rHcInUXOg92^a!TR|P(yhRU;-H%^v^j6G}Kty_Sjr0*Q+R~HMLOp<tB+`iM<T6MI
z7$L5=M9|ljQg%qB9h>m?n;*`wH+f#aB*V`p@r0pB|JFr!zVAM+>Nb^(!R^6{7ikB2
z>-y4CD`Y`=31YCcPlAo7>rc$x9Q0o>V+wrz5an@CzLr$_b7kZ2bn`TB6sAb{jN0KF
z()gbAy%}bZnS;Z|{TzF;#dR7l?v6}TRPtvS=K==DPLz|gK+pQy!4bTx(aV)4-d!rB
zH|sPmc5@$c7?E(x`)_V=4#RP(AYj;BLa4zK!wZxamvmqV>ZcK=riOqDdq_cxcTJF8
zw<AWXQoifno?NrF4%zP6e~b3Etvl|hSSCW}Vl{ORWKTep2<6p^d;6xDfg^`fEP}wu
z6Ryl_O13P;YhJm_*L5o)J&z$?0*^wek8ml;yBs}#Z0d~WrWAva8-E;1sn`W1U2jbL
zl)~0o@&?sxXMP)_34&jtGlecmAoB#PCtJo=m4{*3h0>@(;_6EGX2yqwhnr(pOQ9^#
zooIdgo<DXR9>4OrDgwye0l`cY;$c1Ozijum#(X?fhXw1L5%MIJc6F<@&flY3_-*JK
za;x9Ou)<PLsUN56kLuMCDzF0k`2pN<q~zoaQ*<zXN+{?aT-t4vegbD&bVG_54c6v7
zIC^^ofyhZaMbl`e`K&25pYStzPJ&SY0DuRN)CKdWeK|JR;{r0Jm}RF<L>ZDg<KI#t
z50ytP%;WQXmg|Q){(xE;n_WCtB=LhJBT1=5RO{sIDcpuAoK*Z_PmPmb;P?VCMk`#E
z6vI9OV$5LKy;axejnr{S@V@Mdb0@?CMH!73b|n!^WPZ{1@S^L?<v94Q6c>?4IGvo`
z)Uv8#T*qfw^x9!8=Jw<Am<6GgKTwDS#SwO`AJ+?26#D3UDi}8uKEI{}rY2Smr(|Gc
zBtz8X+vqYtDwW_wArjApqUCEcG@t+B<M@n_CY2Ako^uSGw4i+*`0=#e6U5H1p=&_l
z>2b{oeNm~EnU;Nh@?*SYY#FQ=RtJ-nLQz%I*xH${Tm63WDJhn9yGA!rbN7=snr8hn
z%4*G~pTHz5`ugja_4b7<YYxmPhjC^}pT~}2aE-HVwYCYHRP%JKu;~=Xm35v-{`uFh
zro9f8ngID3m~{?_e|?ox#VuGwEs%$GR^apD*Ep$3jr#It?+v$!<flbv!*^z0JElT^
z_RGl{pkKxW*!8+ugjo*?ne8+rHdatbe3a-2>->~gtCy9V`)~$Ww*Ed41upp=|G9G5
zIPXm#Ex--3z-mY}%|O!kB}`&7#PzV5L^>q9IrWQQimclvABW<gLq`l6N4hs2Pm_&T
zKnT43UE<&?IJ!CG$<FjT9~L{B%%TIa*$7q^Y$nF{ju>tA75o76d+I_kV_?XG3Ri`L
zkeyjv4{{_+GML#$Us)X_rzQyBQx0`uBU2!dCQh{CBvlq!E&Us{*?(5vUrqXg#3PNA
zu2`!bjCjkZ#~B?d6baP>vgfo!dT=fgBp-67k=PApE2j<{nX1bjNjFB;?}n&ia9br|
zSI`_mlLXkq>w0%p%xjBrfP1FjAz)ry;-*y_PUNjjc}QP&51(WLv_GbJYj(mnZc51c
zE>fQ{I5}2_nh+pzVe!vPsWhbMN%4r(DZgH^*$L8pza+Fk0ej-U{zoB_GhN6zi*TS|
zbD`0jhkqjw(-?|<Eygf5Z`ftA)j0w1zanSvOC|xLPP8oc>rb-*dPm=NDWy8KLZTgT
z?{ZdzZ5~R(t*F6rH8;^ROx|*x?uD`f;K9YilPtnJ3Mu9$sy$bh^jzxdb0cD#@Z5KC
z&-uaj==HM8aE*yCm+1RFeGZxor?<F+qy#GXyKSkX4dY9|@jJoHFzb?0f_7oAES8is
zCck+hwV%RKpZaCxdfzQ+hN;%W1q(8xS<i5uYI{Gx0@|J$=-`c#^5Ar@PV%1Y8{r#y
zoaG_WrF&SY`~a!uxewZA=m`GM%Y3ENK2$N;+SKPj*)`3T7G{tJ3;I*Cvr@(ltiPD3
z2(az{QIQw&mCXkph9h0uh@oS1KW1D3I=E3OxfgO_EmRI??;M*wvnn17@odOjO2onX
zGm8@x!>Ph-Sl4Txz813h<)rMep?#<jWa|)Ie!iOkX<sYAER`#Vj~v+k-&^xxDeX~A
z?&Fjxs(#^a&Ty`D=3mI;hKGPEB#HF1&XgL}BqFbV{a|`=hd2R`3o<UwJ5dW<uL*GU
zKoXCmo4v^jrNJ$(N25$T>h`bNcS#@MHS1K0-c^Nqs~N)i3*#z{jTaojS(+DwU}*l6
zSwayc7JCl(T0Wc|PDxB;V!3m$V(+QK5Rq)ArBxV4=Sb^?C9}!WjLEZc>5H4?3WOAL
zbWYV)?#JveCGV}s8oa%`l*oAdAi6er|KwNp(<@ypiAu;9NV&a(t!O$%pM&x(jFMK(
z^RL-Jrk$cf2?sNVvka<0J$)wmovUuoT*?w%8^RVD4x9flVZS-UsL1n0_#3_aS-dB!
zGpWtOUWt<2?=VfcEsz>OD$88$vuiWFF&2w`Iz16t=pOc6_c&50RVtd*!X?}y*nZD=
z_LH*<tQ91<?ryr|0*Xw>v#Z)3U{!{18B9+_8gh7W7~Qb)Gmr2j_V%eJ>H=lEo=QU0
zL<YumtS5xbcXs+y07=8H#|-7y_a;fRE7}#z(RUB+#8L{f_^dMmITZX^hH&!}D=}q*
z=aI+6hb3!D%O;K1>JjeQ6I+GUyc@w^tYd>>3w==sN7<TswOTVIm6xAFh2}S|SZ%HO
zQnurL7@QC4k>5G0-((0u(gp}6RX?^OJdrbkFKVCYDj5Bu^2Sz!c1`Xb4qZo{3kXmj
zN$JorziH_0vJwHFHxluN5pYzT*qA|9sgk3Hv1}jD?IKJ`1N61A&|cg@bt^i&`&+bJ
zJsjz>b={IQJ#m{PeYoNRQVRUIABZ#Dq{qi^+?Qn>Y~*K^NV^|>ok0ts?&IEFxrp7L
zVJNn;0_JOD%P7leUJfJ`kwg>NJRh&;k$vY68E2@RU-}(Sc=>#O6wI=}-)`v`Iheh;
zx@r?(`7ssCi6WTG=dvQPh`YgF<$ANr-i<2%yV)uMjQ!BzUxho<B(DVo;8w@=Dv`^H
zBwd3-%8ae|>4J$26Vnvh800D`f(0q56$#<cj)&gR&5LZg($ktIg|5h#&3z2MC&%he
zd7%Q-QI12LVJ-O+>a<>9(|oD9BT-=3?B@CUeVlkvc@Q>)s@nlk7rs}HzTSS7g{_TV
znD}^1ahQBXK78klSTXCc&jlcDqo{cg;RWf?#m3h6a(6j>K}ykA3l=^TR&Ggo40+=t
z!MdfgXyvT49ffs{9bH-EMRmjTPV*Ek9~R97&j>A9k7n|b9Z86Z{e_49kV_daSehMh
z56$G)IR19Jh3)4E6S!cKoZoWLvt<+#E9<LJ1c)5f$om(!v#8zf(0JX1ms7jUFgc7e
z?{?u7XzEgSUSg%8XXvaW<~$&BSH?C1z`VQ6#K`tZkwJn%zRK}<^VK<7k1fTe{OmDf
zoZOK%yH~32e5ISeRux-aC$3+X#>@K=)tZSWyT;^Ye%{>kH5$tm)LsbpW6#}Su5PvH
zoM4wM`9{Wgx%lkfh>IQv$E69)-Q(RxP<IOA<p_*%)^|6IX8(#bUr6aUc>v=t-nXti
zD0~R59wBk(>NrfAGC7LDtaYP!^zyQ%H=b$`=Dn;jaa7Gg_-kJygqM0q1jOi8@I;A_
zFXfk3JF9p>SJg&pg4T$(6Na7~1YpVvP=1|Hoda<q<WY9Hry}IIo=V@t6wh+cV^S{F
zNIB}chCHkK!$R7lj)94E&e87e4;F-59q03rCd)f&6$+gyZ<d9n27e<cl;EvrjE|QX
z3dFv(b!hEtgxL$Q0rO2U6TBg7kq`Yu2)d;(hx6{9kf-Y@yFhl5=d30JY}C2~CfVQ5
zF4}KW8S8EiR{Yfy(_k!sB`z`CiTE6dzlxfZ!=^I^^36^J!IyQ<wwSo6?DL<|fL{#_
zdh4Tqo6i##Mj2{qIbSQkNfp~CeV)MBzH@%HANBxHYZk{@%&_3G|44CR<PK^+mDyXT
zc|GjPUIsO0_E=55bXNCljHB|W=k_sA`?Xiwud(T5^Q$>=UxX?5Zz=QaJlS$?&`8_r
zX8$sgFMic&-lgb+CvM7i5l+gbx>&*$sIaPSo=diwGW_<<I=uZI-Vkg`wAqN-^(Kv?
zBQ5!eFQumgDr6qTZK_wvXbWPIAFscRgUfF0iXr#uu>LMwS(~vGgE6L@og!cqu>$Py
z&)A5&vVQ1iZs5k93*ie0SGSbi+2s=n!uGFUjlWF^3%rR5{%PpDzl1|-iTyQFVJ9;U
zvVV=Y(n0jvgl3cm|LN@13I!J`5^n?goRch6@*x-xm(lq+92f3&y8VZ?GS!nAm&qlc
zs=#}Mw>37!MMx{D3{+CKxp|o7iTFhFJlC1U@==68@LM6Zm#!2%$-{o8!otVfPKa<-
z6OSM^oKFPst8a&ok<7eg0GHEc9#~!=vP6Assq|)G1X5ol(GAd^2zuaf6C9F0gM(Z+
z?hO_qkr7%D3gIdYUHHAFL8cOgS1sJ+c|xM2h&?f=0{9F>RW@!hY}M>2*Voi|+eHvN
zGmD;WzcMAM5D+z0GqlU!or8y`nX{d_^hbsKU{u74Rhyr_k6tJxfbM9on=mlhqm|nq
z*1xNKC#<65OZW(fw=oSlOLDBj0pH~CnIlTuKT}v(gc|qRGs0P?++a#j!H{W)O{#1i
zGxXEjWDG>q$Q!+##c009$1hDSbyPz{`1@K?!dIi@t&`hkUMM1CxDA8LQas2^Hn6<H
z?Jev?;e2I+C@t`w-_24LHNsLh$QKMBJd1sZ;=pN#DrijdoQIe$^#Os{YF!0r3MTqG
z&nC9g2wMIN8CVzfeo#lf4w3#{?sVHx)86=k<q7<zc$h+c5Ap{=A%D=%!1A_SyKeQ*
z1P>s5%SrNmUj|?cC(SkeS}ulC&<&|J3f0rM4AMj)GSPCE{R1#l_ybg>hzM~HXHyLc
zjabrB%W{TQDK}73cvid}|4Pz5X3D{-=%(J5+Ujb(VW#}6{r~Lx`GHi_G+quNsS?~g
zB$uC6xTznQj(`<NDAgap$+=LCf08vgr&$Z?2susP*KJ})Be*PbzT$B!`R&Y1z076o
z$5|;FkDlpts)SDom7p~MjWj~@RRltfM5+2DjS9Q8oT>y>O3}|b&EN$|6fdG2y9kuS
ziCAIUCP(^%{?TUC*;~=>as!<s6=JtEe99A7buic38d6ybFv>;6gMm=k>|nOLpJ%*=
zFG~-<$-Mn`v+LWww>M2nhA=K^ysm9>QAL5$S^g@C`D)5d5I@F|m}^=uXW`Wd<lrX?
zi_S5hh-jlxJ4KMrkJn+GYDnTREUp9Y#j>u|{B`71gz@rS6c5t`|Kx?5JG(J4ve<w$
zCU8dxj9n3URcxopq+gQJ{&FkCE7cE9r4+q}LS?#^vmXjFoVu4)iJaL9VEduld7}_(
zq$jlP-oRAa>N>joXeY0X0l*;TbVWkH5K=4*1{(Ca-HhM)EFcUz@yl*MhrZ(Q6c_Ry
zF92-e(r|ywY-Z32Y_S}PC1RH>0k(<V_k5e#ff)^sbS8-}izY8ppZQ!)NC4Hl2G*16
zci_&411Vh+NK;c914-p(-VJru_{4thz_EoXMHYZcX#Mr5n}GcYvy5{2r6{-YlEvl2
z<A@OrC0K2iT5m3zyOKVvMzT(o-ACYhw#b$TN$rJ9xIC_AK9Ay3{M!|^+X1DDO$6~X
ze13K@us?XQ?0N_u4QB7VyDe_Y81W2VU+#AInIUOF2N#TMDCK=acAl7OIW@jc_Hm-v
zcN%U?gv+V+=bRcm7%CH~R!(>qpFor$`qwTAz74NG2+thz)G88>6)h;xW4lP`?Ij=F
zU{)<1DIfX74Zr_%8%Tmu%7HmYM9X#O0B2$Z(mZqJcS;dd8HY?2V`(seRa`{-X$e+X
z84jv>uPe@EQQ>=^TGjSl#bGt+1=n2{6>5fyEof*6rDb$*00J~!eBXx2Qlm&AWLy&K
z=<qXCVDh&*3{pk3X!gx%e#2w5mqEqGlMlqlDeDz6Zt7pPCIRHD=pctK)bXWb5Wdsu
zk7m&i-VJNQ5v-;&B^*U@We+8<S(TN7*%ed7hS7Jw@MMprdKq)o1=ANu%kK19AQufp
zJS7ys2cv?z8Ek-KO;a>g1Q<FWo!fR#f<=~Ccd+)Y^pES40&|D_fw+Z3q80U3tuCu%
zm(&sHJBCZMCk%-#p4*@-kD7xjYEv!v%3YR=PkAJN*M`{Jx0&KL{5KABSHN%jMB-pO
zODZ2im_aUvhH{Pl$;VYp;q=WebY6MK+Thmfud4B7-n4JL@if<=15{e5_pM#9)=JUy
zr17tHvr5w$ni>AeMTn>y-072wA^1`N+uR#3?eb+^?0Ayk5g28#CXdbBS<h(vIx>Kp
z|AP*b`>_J`o;zdwA)UVs%uY&;;r>6;50AyKiI(sf>#T=s(d_@ElkJ<zqvh`Lilrln
zO%bfE%P3+s*2a$T6EEMbN+Nt^6+Mzj786NjP68W)QqME^9llS|lq*kgznb!$)U8Q(
zdlaDvp?U~Dx%C8Z)@g;MVq^+Puqx!HAj$onid#$M&%;~=wy`k=RH_#CKL6wwn6ik;
z>!w$c#&Gf1O2*m1nLUoM3!ASa?%S$&;j<K$fLuNb-!_dNitHL9TNzamT1%#lOlv5U
z#e?YJM&%9z<y9x~ZRdV*W~MD3pWo9^SD)SHRPrhYt5j%@I5daTLc}f%L!Vg-+N_Q}
zOQqla>aFHTO>&B;m)SOz0@80c`@S!*^j&+E_v~!`<GcerKU7djU>a^i$(0xpuu2a-
ze4dk@1i$&-9;mfs)YzXvdKvSKkWFoF6r&+r5QUdb6;Kf??RF@Wa=qR;oTQE!VNlsV
zKLJ{7vFwpG!k35JjeM2+k-sw{KI%_Hk5;~3?<xAvibe_BI4DC(D1nkU<5vewmQdJE
zqT(uFQU+@<S8GiW@_E=SFX}Kr;5BvNZV=V?U&uJ)^a*{2qKv$hfHlO5sPL)l;@s00
z1#P$m)wp;GoQJeKBUKBSUboeovs`G`Jo03w#_5>xGWLULrwLkVJR^fcqQ_``VWhvC
z!(^iU=67te*hyTi^qc#|*zuoZD^6v;+$&sL-MRGGXK2_=?VQBeKYE_^%zoLFx+f<0
zD{ft731`KwpaFliuLB`pSuE%pKUEVxOAnD`)Omjgxh(&R5Px;NwZy|EhnYD3u}7R{
zpB;ypFbu#+LR&Jb?@;_qUNsi^f#%7B+I~dJWCbRY4!dT4zMK6miSO#Yrn1GH>A6Ot
zpdJ2w8qS)I2Xx;_KK5}%r98i1@w~uQ4?q_&P=%K_WPd4JNf!C21`=F824ZJm*L<YK
z_vAW*@~JsCRnroz80E&x1KnszS3Ct-O_(sY^0tYnu5TGF#~RHMB4*zuWvZxQe4<qj
z45%L;{oq(q-E?tLhy=U)hZvwcwUfV06;Iu@<srD*vPXN81L4{*!6rr*qIH;L-SHm~
zKTh)p&zvGQHFyzvx}{;RYUUxy9)c48+C_c)jw4`7K&hC8>%Qu25Sse#Nv>-bg*_&k
z?u9GmLzWeK2{!z`)0EC=bnXh9%y_JXz%n(<F@o#<I)lbFE9-3Z@d?`7uGc^;a=c-&
zMafYum4kUY!<SY6m`oSR*Ir<bonX71XCC$3$)J?DpdzgecYs2okohJ1F5^8vpsf4h
zVy!izJyeacqA#4<X6*{-kh-$gcNT4l1CkQPP8!qHNkHk?@?pPY=9O2=(eH=en07R#
z>?yM<fa2pI2?1Re?Bd`)?RM0Wt*2Ufnfl$CK`9o1Jg{$WhRTw<DXF0&_t#e7nWNmp
z3?gV7GENIpnRqY~R=qoiWD$UEb(&d~9wdpO`luBm6-lnBt~})zPMk-1-R6*d$;nhN
zR|iCepIxm7;ZE-&G6A^7E=zJY`~%FuNXm{<A8%!tD=r%Ow3ucd{sLa)|5`Knin(xX
zm^1dl)PwOkj1lyXyO0y>e)j6Jv};Np$k0e+bFLzZM7^x-?2oz(Q6~8fq{tH6kSmrV
z+Ec$qO4he|e_yt#K$|C?0t|eDx=+X@CJNSb>o{)Yz!F=ePSC&*A3T59PEebU$7)@5
z-;}WVr)pDA@^&F#c}#~k!=8%xQD6y2-8xR<eyyB-x_C3+^{korlXr=zVV0zBS-fEA
z1z9F0JdZQWi>EUI<BBCIQ@%eN_cT?2MV_14J@jE_7v=OEm3cp9beoy(bcb}F+9V%}
zK}-2M_rqU82~FJujK=#WCv_KstlEan7u1YBAIoQ(L><M}U&&=>C0CwqW-Lt9H=UFP
zCmF#^Y@tbC$nB@GCCm2YXt8H<JNFmY3p_LFG-$Jn`N3QV7@j);)op<y2QmrQ(iVvU
zxIHu)BN^H-?jr=d)?u%Ee+059oVgtzmJvo1v!mnLItpDYc3zrp>`H}lr6*T*{f>NL
zkH}0?=D<Wpcrq)RcTX>Qln~1tSXi-pr|d1S%O9IxIq}8Uj7=Hs^k1zT$j*<EPo2LR
z3N{p`<rOU<*OTA9ny_3d7kG4qB|Mb;X#ZF{NQApRVABsdxD%qVNy20@K#|cCEof}T
zi6Rk~zK|QBW!l1N`+8_axvNj-^nPVDCD+-Sp}bo~r>ldgae2JV|6A8SOgvUze6t1W
z`0nM{=*kqs7Eu)Tikf7U5%C_#7|urFS)}T*N(j<Z)kBbPSYNpgjo-+VCU>Z=bFT5)
zo|7Wn{A!lcJ9dmZ{xMF#tICpx3x~}zB1K4_)tw-Ve@^7u=7yvsR(O)3Mk)teL`Q{Y
z>rT^|-qo<GDJn~J=N8<aqH(6-(YC(ARdxyAfKtc-4zPmS-;WzlZ;DgSNMn`_y#KaB
zX-Odx272DTJUwG1r^R9DO3<2>v@T+!;jmtPxULdd)3iIL{$VK?E<KJr-JmP<+^JU=
zZCqN3*Q*vj|J#xI8DUqoV};MgL(3*|P+0W0e<S@;aaWabj$^USMm_2t{3P)ByRcmn
zvRm)d4hz2!#3A!?-rcTs2_s7xoA|juC8|(FIFaKI{d~N_jC1c*MDtRDf9Pe8X#QLM
z+xZtHmFfB$IMuAB(ueo2NG~~;r@lO;UK#GH`sv$3G94H#C&m)_uBlskZw14~?b*VJ
z4+`ZFIL7$&Uvk3>7?Q-Q$O!IB9tjEvJdVEhFVTT~U&W>OykcH5__lx*aMku{k!G$`
z*+UZLp_o(2>XK8EMq93jVcEZCiImIbBD%EQeVLo?HPff$&Z_xE^ST8(*H=y}#PkZD
z&_gKqs*?A8G7H#Ql8j_nK8}~UhP=G2rIXna-fOlm>-*X6D}cNe1i2ZFS24=!GK>bO
z4v$2yySDcPJEhNBpU$}3)+}}DShY^HTr_;>n7-<s8EWgw<(2-}87<d#@<TQ>;);9i
zim4qlYN!^jZKTrnLHw6m-81+M-sIufu)hpdLqo$X?ATuj?8RjZVeyt^RMq%Mi#UFK
z*P)~N9>UkO4eXw)6qz$qElrS1z5@7`qwL3xuj#e~s;ndGXUc*4?9JdRP75~OQ@<ym
zv`YrW1{61Iv7FBBMuoGzM<D#?C^#N~aveIG(N->bG-2$T-d~Uxz@-hjpjPJNW2<($
zpzk<|n-fkk?@7;)C8j!c{KnO_xv_sFq;yO!Wq!=}CkKLi{xrbbC?nP5fv4J($-Gp}
z($^ceR>PQi(MKDLf{w7G<Tx+(Ue6QGy(e+UKe|`@p*>j#QW<;uuYH9GXsO(&Yh@iv
zct#z=f{Oz-xDK4u)*n!V_l)l^ogX4Db*J22eH{KrQ~Zy^K+jlCR+3#@{8cUqwd5NL
zZ(dJY?2N=Cf>N5er1Q7H=W*3R%-aN>;%cWA6Etz3D_T}scW81ZuKr$%BT2Nc{K;Ot
zf__E^kAx-A7^>Vn)Wb%*;v}2Q9>?pV4ou!dbuyC!R;H#~DN6P&G$jpHlDQ3Z5{TB;
z*M(e__ak)uQUZMxn-41zcHMqsN|?NPP<aG@bZ6~xf2kMd-u|bIJVH2J2{)$kPCT2+
zqJvpa-u(S9p|>g3KO3D~9f|kfXpbmXzH=D<TLb?u!MgANXp9a2(HI-k*Z-GOf%l)!
zNR>=?k+>E<sr``q4^8?@!oDZ@v`2>rSLj-P;4N;gM9Ke;z2V<BiQpHwHS}%Kflk}u
zGdLgA$+hagn$A$gT`U}bLlT0+%M&=(KKrkT1e0(PnHoz+sg_0uQ$IRw{oiK)QQOb|
zYwMP^_s<%gtaSCi;~~UFD~az|8e&FzX*i|vq2#}A>yL{_fju;@)fd;1Y)5m}|8-m4
z1l(=&?kx^TT996%M1KnYSJM}1xQlOiCOE$AKZC2|{WSa!I{{93|BeP{sQ~ahz#Koo
zs8qhT8U2^D;_80}mifQrsjn9PE1qmloRFOt&$SlH548N58gg}ZPRXJ0JNwhz)D=$f
z9C&+k<-U)rL)v=2zx1=sW5lw23C9$0$5B{XE81lA%EK;?><n(Tz1Ob9jofb)&(Vna
zB=0cyrM3|H_V%Fjy7TQnrHk2;eWpWhPptMW&JJFQ5zlt#f*mZ{L;tk2WpB2O*GV_I
zFD(}TZKW7Cuq)3hbQ#-e_FJFl-dK3aJcT<~f0l<fzgj<=uMb`Pxx-<WeJW8+8k&h-
zabA?%)mFLr9x2~aTwFZJ%2V3dREIsW6iJqDEwN%bv_AH9`~RqV>$oP{_ivm=q*N3{
z+5qX4W&=?{$s3fAZjh4BZ6F{bDJeNn5Rq<13{bkId&G#*jND-Cx$e*R_kDh!=dbJa
z;*X2%x{mWWkG;=#NYz<^Xj@JXT|0yWA3AT|=}Ma17E7FP{_huQQCb05E1j-yY-o%C
zCM5p=p7#zdtwiVyMFh;yqG4TBWoM~9OzC7}ef^bX3&5~0;;QtyMe3_nXmOxp1F-!4
z-R<pv#9XZP8@2!e7AFP<2FTpkwcDZ*ZF#DZfqdFoE<09@La&5h?4w{Ks(pNNqC&p$
z?CBUS9UYlnPJwVHap=jGUAptmjhE|Fy!t<`rz^c*Dz@GR?EgeoRb1d;*y8y|7B-P*
zjO?-_Kmdu+u%KSE`M-R0aLq~MdB)+I4uVk%gi$wEZ-x>Y|8{S`Se&B#UMF-p1*j=B
zBz|YrHQX-`50@jXbfPF%b*h(g1PGPcs*y{y#Y&Xa_~1k9wXlIqz8AALzgi6`d=<#%
z5)-@>4K}OD&FA7IsXJ8Ghqd*p#9IRNIn1`aeSPcB`bArlNdke8l*K=h@fmFwB@|W7
z_9Mk4ya`3H)18?_Gvd*(MvGcJ=Wfry(DAY6{=W)=hda-hIvCS(A-l7+ivS;=s$Cy7
zw|tFV&NKgPw;q-H{2n%{1gMJ^o^+Uwt$7cYQ{KCRXGM~}T?rqWz$J8b?`4g`(ay|K
z7XzUr8P`|;+`z~C;B24x3$y(m!%}It-Nlzw3csu*2_WF%%zvMM3L2bV#%i@&KH%?h
z-*eP4`F;x(V~5smen<nHJqR?8Tv@;l9m+q;TAP~&{S@*(7mLoW4L5Bu3Yk8U9I9ud
zcjy`Z(YG=fmk+X9^NSY2{xClQo?&#=<MR!!=%^FFhaYzu%nfc%-?{b>#?i^BP1uJK
zFLs=sF$iVdiX3L0_FXVhN2t74tfGh$MW<dq4x9TmTMoo1+1mn9KfCpbl&Sy|p6fIR
z1kv+u#rI9XXhy$qfG2KXB_GKW54$_{z&mTznWyha`7Wmb1I+&4Hom8}Jp3PODL<J-
zy!GWG1D^0Ugh=pf`B&b+_09o<UF(lf*RnRJSO$;PaM3DLEL7gSn$tP2lo>RI%mQ=*
z?IZjY#i!NRJVX@a%&hmSKe65>3}nM|P?CTF3XXYH<Kkt^@*xlrm>RMD!h?Jni0f35
zgmI=tP_D?m;^BJg{1-bYgG%0M{+ddAZTHAoz05joxg%=zInvbBK~La41Z8<q$2!$7
z@gkZE?EA1wFi)mV9N<qJ4@V|i{H;$6w9`4;TM)(9e!c6{u6M7L_=dulhAcQvuI9_W
zG2`c9?H(=s^e+Y7D$Z*N$+ks{?Hev9y{2e{b=W-3BX;w_ghCOWZ233W<V@6`UZHze
zzg_%WdAp0N-SH>mU@s~j*h16$W$Pp>3pd`5A%%-iA&|3$V7Z(J&W|n4o6ps%9~`{D
zp?K255!Y5}(;Y-h3kD1+jCeZIL<loCT3KucX`$0{I}hvPULxS+JV{?p6}aNOGpawW
zmYQe`HU}9=G+v%Oe)MVAuoKC`!jidj__yn<Riu{{&FtiJyPMUQ;^tqUXS;ywxB#h`
z4K3_F0P0p5`R%Cs2I#)OZL;&DC|<}fMZqKSj+*E4$;p(3j3*a=)$jgq0RaJs`Wp1(
z1&imt#zY|0KzcPxn00F)zq>`Wg_m<rupu$s)V5|x9MvuNS*>tSrSf}2!?}&IvU>1Z
z{FS9<`DJv(Fd)m(_^?{un&Xzi&H8+!R{ObSA&(`eEA7*vP>;r}U#{}y2>FfXQ6Ag6
zw%o+zetU19uO<_}N##gLu1CClrt<pD-;{*%Ng(yP_|Ry-9GKBm?fsC%qHBoEXW9I9
zUbPh!x<hhv5ieKz4Es|bY)O>%;DF}Y|8$zwcOzbnzeh>07&TU?!-5UiUtFjfQ68|%
z`(lJPOl380S!DmKV)VuB*}`x1coAYz2TXX~vo@Hi@#v59&6~D$qUm1y*4LlD)4cRd
zOO)jRL%;D%qf!SN(1~BEm|PPpb$Z|_`AHli*xon|cG;ZB^F{-YXFcaP{dT8A8v;+>
zwfm0@=KbkoKO<x3KhIK9umDm+p}GeU9CrW3V*OxH5NOi}X^Bx!jF<%Wv*@fpr*F!O
zuk9H8D?1#f`!rE6M7GiC<nf8!=9Z^+j{t}G#>3KaO7ilu!|H5+Ia*ws7CxW;qFsZe
zio}NHL&?((mrk<53$i4V>VG~q8xx<9isk&iuiLL^eEW1RCg^recU=uiWG7y@O5XuA
z<38^9rsTuiX{LkXmpdC06S3S}I_8^arEZ*qukPR6J+qTsOo$Hd61ABgN>C6CUhRst
zcT*JfdSs^x>RI{m#Gi+A_tw!3&O<caY7ErIjWsC~ID+-F8|Xp@vPw@W=wE+jEMxSL
zLE`82ryKY-&5OK0Z4cs<?lQ^QQQa)-C^uF74P)ExHwac#`rUAzxx?u8efs5bJ#(7u
z#vG?#jQAzntqn;ZeT!wrQN~k`5Z7t*<4~d6-9K{M+-_?9KHGLZ7^*x;AosC=zMDQ{
z2cG@><LSXN<|%X|GqbdppDFgd4_VE(svK<h4TqiR(C2LkvO*mlNpyQXvigJU-OWjq
z=GhRn{T92uKA8C^jLr5G(z}DdjO2nohFdg$Rhv#saKEi!ot6r(xLB_(<vZQtJNytG
z;C6GFlbMEBB8ZFE99Q`eJv5uC7R9zA?7VjbsPrz?{2vvwL&O>Kv)w<0ZR2GkyR@r8
zGd*wRW^OC&U(}vG+TP=}+-+o`gfdIb*7gIrm7(C4x9<<R4*beL+k}6=(;%H{lJj}u
zEU!X}ueWb+`uk|BNZhc$XqUrKN0Q|LKh*8kNsWcZb4$Hz;bzr?vB85&i=gc<cjCgT
zReI!ZG5t-=DgE=+Qk-O}H<kMzs4PQxR`pR+;2a{Mb#Z)VDwkxL4l%$o8loQ9aqp?M
zLYh@|JRQEyjgmLq@4?fds0RtNgQe()s<XBlWDIkSFd~$PjrF#=!#|rp_#9O2+9^<U
z!QP*O6JHWeZ?X}1B*;V(ABZ_eH*ZB=p>7Ag_!e`B?wyek^=vMSlFT~0zC6ibJR7c9
zu5trgQtCm|v3?uDsd&T1;<()ndi0udZZhXt=s19~++JF8(UvzUCXRF>KUy|a?i=xN
zt@F(%f9>9<J*+4d&a`hn@NEf*3BQ&<YcOmb4kheHG2m5BZ82T^dFAOZP~F$RIBnC4
z;D3mItv~4;dQq9wBYWy0u1(QnWHWzp-Rk}66szUxb8ilhrKxG_2L{IMJpxI^vE+I^
zr%RjElRJDH<XM>CjB|llG^Xu=;MPdt^J_$BkC!h_{}@b1eYZZ|Q(FC+o-QIyJeex|
zT>kcLqw%cT>}GuS5I|-hf)fjR?B~7RLme67^%90V*MDB03y<|JGex}J`@+ql^nCs5
zb&}Op<#eeBPqO-h;2D0H1ej<hxp;N6?)2#orS3UT-kZ;U+%!14TX&$}lgnsq<6p_w
zSd;L6XmP{#pY9LJSvKzP|AoVM=7P{i2=V(XTO%rq$Gvelh7Q8Teyb=!p(=6e5aP|%
zLGW(3;MnE2&3C5t(Xk4=3NDzY%dGh$Cgb<ZxCdeuyjh?DlimdhK|h<%P+o>5z#oGW
zwE%{B?eu$0?kdbSg2!}P>_YF{!uJo=TsjQ?Cj}G}rn&z1e7NB-85SJ~S&@9#68EPl
z&5%O+SqN;Mw%J!0o{~WOl)&9mE-R(Y@|QQ5p{+yGLrzp%?PiTxH;t$496}f1<3Z?o
zc~}xKU!jyNai&qqh{6P!jX#vvC?Z=b_)eyBc+QNc=MH(>dagqjrpNM#yr1jLR9QZK
z3Sp7a4hT0n7PS%e|3WK%>v;5(;%+M~-KXTX?iXKdWLyH?#n2_?Ci!NE@>@_EJe=H6
zCkeRYnn_;eT=$vMJ9I%Ba?7)-{qZ$7+sf}|4@EzvB78RDgo%Z*rV=$|nUsB%*xT2q
zG5Rnb8(S<!`5@9u<gV?c?a+-oJ`|%JG*0!qZkJ_K)DTCMY!Bszw;pTOAnEGpaJE8S
z2R!Z2k09EuB&llQ#dYkn6Na=t6lu!Be{%@`+-%ETzRG2`OVRGQ`WqxM<~R>EP0BYU
zs((4tvo|(s_(>gUQlEMck;9VBoyIIJQK6E5mL@)ug8w|_=&YkpJXC(FZBa1+yH#JZ
z@nqKm5-sEV;Ra8HdQqq4#p74ErVt<JdE8vm1}P3r1<+N+3}*4y)|*4qC07i~>m;ki
z4W0q}I869!g$yV(J1L11GISMl7MMi(!gnT%Ou_%cWtZVri;-9*`H9tDAoyC#^H07z
zx8_?i9U6s2vT-2O^}BQ(!r1m9b_P?oCtmAo0^hW9*ko+a)B1fpc799^Y|Bb?lq2L)
zu4<O$!M8|*SzDiJpEC*+O?Ah^Z-eb_x@cpa;-=f$8N!CG9J0EoRb^=Ze1O@cX=v<J
z%?+td8{P8gtqrqNp%m?$ufDddf$zA4AU^KrGlrYeJmnM*-4jAD_eLfzSpT+mO%B`^
z9(mP$()w9hjbgMr9JOhHtG?y=Fq7%9kM(Q#7gm2lJ0{{Fi>xZt`>Q3Cr9lqDK-N1m
z)HyB4v+pcMBPVgkm??c=qZ4!)`>aRzfi}C;%KO!>6KmQYJ1R@Gl-rhf(t|2!v+Xwu
zBiC!#s!tLQAIKDLOKGu(E)0Ij5#Uz8##v?VFgzqP#m+zF$QAV+tYQdh*L$B}HSF-S
z-xl~agro_swo7o@_%idkP^f2z&v>k?&DACD!!;rGuK^*Nv|WDti-NER=!2)s1GGK^
zw4OAtZJ**V&oxO{bSW1)C^$cHY7X#$KPY-SLhZRVvw9<i?CiDX7WIdlW4NBh?MQr7
z>pPk4b>ROK(tPkS8`&EzB_zYzI9I=lJA@S9y{dmG)^m7yIm0Nwdq?R9^88j6h6VTh
z=M7N915Sxlv)yL~<*~GxDz{>0$Re&rQI(aKp_D<ikPeX#;v*+1f@#q@&y;^(4KXWD
zyeU`8sZpt;(=cAqNCP2@#-?Y;AVvFrRev9R_$a$(Y(@JZJgMx4to$?I0UED=dNm&^
zm>RwBx>T+d_kG9N=ACSPl__KU7QUpD5|A?0E`M!bkEbIqUN%hIx6WyiE#BkzU(_s1
z(5!;`*qDd!T=N~jWYhfOOdYkC%>#a{fu|IL(00WtZh&NQ;*>{T-)YYmqRBkJ?s!r8
z$yaPM#=<7;z>ck~`aoB4FEI<#8WRC|ypsUqDfGoXx%$I!yXnIbpe!|JPvD33xI?F(
zd?%N-3qDw*ZQQe58%nDDN)5PPJwfYjesINrH|~25mc{BQNj%;{>*$wSa-4A939`xj
zJ}J2e7-%Ft<=zRbp~Df$Nl1vqH~JqO|JR&qXMx5<|K;)i1^wg4+&^WV6>9X)5Jay<
z_tw&&y|LZ#AxYT}pRapv>p%A)qf-CPy(s`>7dQQ|&_cZp+U;wzfDvlPcXVX|{k<2u
z=gT?}6F3O4_l_`Qh3mkuJh(9oH%zv)w9I9_ckkT`HMLA&nq5bMgU?5TFVDrharl$%
z&)bGX9_WR$lT(ostP}|?Bwn5Fnp9U*eC<1SEv#Nl!2!c+GY$w<%q%J@nisWqaL5EG
z71Gdm+h4wr4_4af52DewdrbSNR(CfPG6~GZ#npc}lqHvR@fS>-cl;L#p<`euknPSW
zHY}F{5(fJq8vqAuu-H&?@bYrQ9)--iyy{KjV<UK4S@A$le<6a-%(rZ~GNYn;*Ut}a
z1_8h#6Ofw90I<uTDB;aTY+T%vNJgD?#p7B)#4RH!DLEL;BI+49RZjfUUxF&?2IT6a
z!-x`MM@L@P-ub!zRTH$#yer}iXtZhD?_AW+0N8~eRj^)<8Y=MQ7`98RlLwSJbpc1~
zT4iC4$yHp#KEXt&bT<rt{Bp}(%WHiAV`~4l&p9x#@k@E|$H>Sd2PP(_fS5ocK(mRh
zbeMm~75G=R5qJXq8G!D{PAhg>zfikCJSd-)jm;Suj7uCVWE}(`rZg#qM4u$^0y+;0
zL>>3Fo{g!fy?CLQ&8IgL&$sY)_mM?;XQw+tF_Iy617y3SrPHcu2TQ|uM&_?Qvmk`q
z;|riK(f|-^P3q*%uDGmh!rT_1x#x$uwj}!mU7Tv|InNF|)D%SGc29Tb5Ut|~9ikwn
z4iERof0CWeA1WLhljOfDwRhW7oiqZAiyTJ*YR`GYn))jxF|n^(N{c`^sYHsa)EWKi
z`cSq4Le%eFq(mXZ52*3FM*v*b<NnzLg2@%WV++@;|2BJZ3<`K2sO`<wS||o!A8!AJ
zwgi`(HRaS^VAs4RN6*i(Yt910hx43UWfqU4E43uo>dVd-n!gc%^q!3Fc;qX!lf3Ov
z^7Zg?W7^rj{S5_$bsmI)7~BeKesXthjO*%rHGZBiHhZ*{tI#)H!^Q=+S7=yfI)qD?
zIld!`%m23KsiUopuGLYhX_b3A2Ow3l6IK=vkhLD~-;15G9mO?MK(t`vWnB#cyC~TH
z4?ME><ZFifETGwXbi#2MSp~v}2Mn?=*~JK!U)F5T&%2a)1u4nk&E)Y#I72Xy913%b
z@9d0Vf74>Bs$nNpI4}(B!(W}wxy$9$jY4PtF{3yvp|NQFd?r84)>jTcV{(6x)05r>
z%TrFfzFFOs2ygiqnoZ%!WKQWx`Gj;L>SxOmFDuiBsA1*P`rbS;1Zksz7-sUE*8;}W
zWqJB5>FDjD-wJ^Qn<8N1O@gSK>|*ApEqKlvzD2v#{xlfy-<XeMwu~OXBK#@R;TWPV
zc*&MP{w<7J<+5@eKy3p4lIHX7GjgqCtxZGFy07+M?<Mhi9ryw{+vB3(LdxA|aj@gf
z*Kg_8*>J{Enu}emxl?JPrVR-!93H^{i89R8T)E7YnGJHetlEYXF*I!kawn9g4B^2?
z>#j!tMA&TkifvO+Mr_0nW2NHbs*o`DN)ZRWx_qQVhHnlYhJ)c!nd%<Qo|jF2`vsLF
zQfVS)ee!R|WBA+jbA80q=E!~llC~UR^BSauKu}K^9l4YOzn(~a6pqO?L==c3a|z=n
zLBSVwU%S^14%CN;E1k3fq!S-ADY0bSySpcHwNovo$We0*M9TnQpTP#x$yjR}V@vx>
zQ386kTc;?#CS-nIZ!S!P<e7=47Ds=s<NO#~4<>T<o)qrVbXNV`6r5Bh;RG8ga8JP}
zU#Xew`k{ONzTTrHo-kn+kp!iLZ6-@?V);=iGFM9{$Hg_5<nLgnjAu}fjZbcT<xlOl
zZvT`zUxPgf5VNOAdEDF}D&!JIC<l8XVxj<}kD4!#9IFZ?q<FyY?8JO3{#$G~^jGOb
z_lw5gzpe`4EJhsaPVogko!ge2nPW84DHns8Q<(j7nnX2Ej*0&13w&)`^I;is%k_wF
zBx!M_KC(6>*!L7dWer*1ns|E^VJf}*TltX@-&z6WvdrRVn6y-mG667&@M_8=j}e9A
z%qm!=p#?n1L&$2^ps9A|Gs604L399=yrU~Da8~S{&D1rY%X@I?vg6%HBQx`Edy^Ki
zG8sjMR}Nz~ilcAwTR$1!k;@mio=*6#x7{0-{ZWZP$$l^Pc0Ip{qF#RxPG(XN67c8i
zN%d64cjX~#t1qNrsytFR3Gtt8FX-*46%)%PAHNysc=ucU=UjQI$FCDr)98<BinF2f
zANX~^u!morg_yLAdNj7*aMzDabW$cbd#Nap$xT(#IRV&K^x8m&h<Q_lsp6zik~Hmi
zX$M@jqp^2;UaouPCK;)L87*0^gO5!fGit@&s?me|r;)!&*ud`}ico>>?J4(LvZ!8K
zc5dpQ_!58Rh2M{-jcS<D*6ode^y}jzxJf=qP{j4<TI{yuot~7I<ZXK@7E9y)uIs?>
zoix46qGt6_wxtm%awneF)T45nUkg<R-kd|J{Iv25oS@*ZEYD~avPlt#fk*45C54qn
z7l-5Hm06%0V%oxJyYGhvwR(^J%1HEUx!)BJk|8{eKgqlkg?y^jCRRp?$yC&k4nXlV
zx|Vjy?h};fn-2K9)Bi{l02J9P!0ULwmAF3anoDtzM>IoT2JOil*F}v{cbJtEolwPw
z#`1-pW&+%0bqSg7Az7X?*VHXYG==*53K{Ufpdclsq`8{f++<&U1G_}{;SVUutBX4t
zrx#gnt;9RDI5_LlmSTl?LYjgJ07&*jw3Uv*Yp<a;&sZl+?rKch?3NDURd!*3na$vo
z|L|;{8<e`3dt!RT&t;r&47wqD^n2j5fS~Fw3a^eq#p}!Uo%>O5U*b?zaZ7q~W`=Xm
zk(27%1yx4Hv;7zX_^Kgi+i?iX+7ctzZZrW))+c)KEp^4hu$Ow^G1T_#+sW@$hq|J;
z{y(xX+~^B8-p*R>H2OcE`^t_YF9Bzh%s#P<ja#mH?xF5LXQcm#SRX6I%~SO`DsIDL
zc=pIr>D8hN=ht1qgZxtdSC__aNzj!jE}q-d0+cZhHou<0eBszQGDL4Dh1D&I<?*PV
zp($Hi51B*6&=aa3DEi5FDw`Ce%#-p_>L}a$9Q%gcX=x3-!c4J>1s4yVrjwX(A3f-+
z$i&vjRwXzqL}&G;^?!c;YUCsH^(j)b$$b{l&l=Iv99&!`q-fsY3TrD0_Swb{xBN@U
zpL3CaA-Necxjp~O-ioS&**=<MDt01OjF#9L&2sd67MhI};1hHxq(r<u?=Xa77MuLQ
zYe&3OQ`Uj}#u;WZQc_=8{wVml5vkEzcH+O-D5FgyJZPqmfo%r&npmV5_iGKca<Tz8
zb&6XHM!O1~^S{oHePqL!>+xKddi7;aTaq^M@@QD1p;nqqP^IHVe&e^>H+s|aCC0Zm
zZNy#7rnp8*Cm4$7irc!b#?z><;WS;Y9mk<SMVh_3T<IGdwUa-ov}f&MT!T7?sX2)7
z&-TwJHNHf?XkCArTS|)9cBBv(ggKwI0&A{kw$QEFfLv~Sqm?+DFq9uqXE*X#`SsFx
zHlNpfew4R>MgQoon_lgW;z$pxxHm)qy?3x2Gn7_<PeSt+?<n_o1=+QZm;*Cg|57P&
z3(Ux=IFRdiU}-G#;>AaOHqkYZ%TPJQ6!l{+f_9@Cx#$1^rZV$5aB9fHdF5XT@Xw|z
zYnO44<w9-?wsWB4j@G6T-OJSq4*_F?c%+RYtKn$5N_sLPPHsB_l$#}eHaP@LoM?R0
zq{bXV`-V>IAyz@P9q8$L1kf5n`{Hlg$+~eHZE$I;G*_{iSIqYd48tdh<6AY~udK5M
z2R%Gi&ATD4AU^#*W1-_dYo=n6W0J{rZi2F6z?8q;V$LhJxTxgQ_hrBeliK0SQM~_e
zk0e2kzy%$S6Ze2>Bz3$mlXutqN}5Cq&C8uq;h3RL_W~X?tXx8l(0`<rF#1GSCA)R*
zc~S1NQc~P;NQh!|M7iC`&huty`J2Lug!*x3YR_m>QqOuz6J<B6lGHbZ!Zn*k)*hA5
z5&z6m))-$IiI|W$9a5E+;W&FlZ4WG4jA=iGEJe_|5wssw+%rb**_+=bK}68A7mX$H
z3E5H#&4!wy9A?mox-8A95lxEVWk~L8VW9Lbjntzf+#cO{O`EkHLo>CYN$aVQupNe#
zW{zpsZg=2rv)(_gz>{1%coPzAhg6PQV;C6;KFJQ1V2E}H=US^sGGMA%xv*}brd(t#
z-eN49Y7@T~bil^+=whED<^Tfo<B=vZ_rJlGtUd7s3c?}5n_zB3PP_|!LX+xip`*^0
zpYuEt-J{y(A<Zqpls&BlNYmhq6Pev0;3P{?rdUCjd_bsmclDRP#n!qK#*fT(SUp*{
z&8QWbV=8^DCRPAvwK%TtC25wvAvM{0j5=M4n_TM`+*c0ZrA+1o51lv(kQam8$sceK
zo?ocLox^=zweHgQAWB|a`ttp1SpJ(Dl!Q#L>fLRNeX2D7q+&+ekJR~XH9NWIs%GXy
zT5XBG*#2FM4^T(9@iV8@p$~!Yqkp;CSpuhJsd+%aeHXpoih<ju!rH_YCwCg$BbPqq
z&%*VLGM0CW&W%2(%TD3WK;g$tS`mj<3^G#<s;VZqlY2U|H=l-<>g8rD1!;Myg*Jbv
zB(=F!#U0|XPfl^?FsNndnPWw|V|!?ngU|cYW4e`z8~cGt$-QIfb-U1{G|K0*+oZi)
z%|Hk%FfqO&BV+btD(Qs<2J)KN8@~zPYP#;y5a{@4Yt)*wn3;pAj#94~ue<)P9}apB
zvvMgh3NCQ|Fva(|zb{Ryk|iyLtfsTRSx8;(-Br2KV^N2n<UyUaXx}~eIU4k_1XSq#
zgx-Q1j|Hu6=q507NVtrsTy6~GHhqzH&O0HjHsdQg-%moC-K0#_Y}jI9#FGT>esFH3
z2j>vUIRGhc40@6N8YD&3)!iWHXTt`nS^5MOQ9E-S{38Qv;><lB(>YGNew^)%Vd-%y
z)9m^aNQfU&UaVbjs5Lb>KLh)}2geI$&dbNYYI1vf!hghbKn9zj@10%^d?UOXa$Be_
zc)7T^b3OJRet4qT&=c%@!o{eC99kW`OFqk;!id05;eh#ggEfnfPf1xJW8<1vQ=<`h
zR+Y8Bl~|Z5MS_suPV=Tjt<<_-76fgLW2BgQJyAE~%}wQJ$+Z*^CAYaeGsU)1(=g{R
zgE6(`am#OYe8d@zR~yEAs7EsPUDO9i`*d@Cb|al?WwsmWL+}$<_eEF)2vjkGPx}PU
z6hvO)!+j?1)*i};)~8js3}r)E&gKzhJ(OLfxY@N5ryBBrSi{ouGScO)>_e+TchZ2$
zgw;^<l_HC9UCZLz(~`>Of^<K3Jn4DEx>3w(O!0k2LZswvRhzgO2E8ZQ*Y`#xddc?g
z4cor60{X?2afq<_sJ9j$?JF%<6O<~U{B<3fT!QUC_5ohBqxtVDN5Mjt%<{<i#nnug
z`*x+b$`>N%$=33Or-C;1z*anoWmmSLRh!1sAzvvQLKro$gX1#mO#Z2ne~txdFBXnR
zzMkWgBWUk_>V7K1v2QXR5|3<NP<9j7V<{71en&_bQGS}fkVyS^kz9(|Tp0?SPvN|T
zmHCjJrglas;jWSoQk28YPSETt`!^KL*=^NzKQ1?2+hrz`<M*)tFl3O*gPOf%%xlHp
z`(~pqXxg43j=#^EpY7f0N2MJPkc^D-uCq0=5}7@`B2XuQg;f+Tj2CarXNITrBxuQn
zMpgN2!DcDi%o|^GUKOxu9PZAcz~e=6rp<4WZQArsO5?`MUH*+8-;JI^${;RpCvGON
zJ;0~aGe>(n8J1B|@)CqBH})6FNhaJ26AQ9h8?o~iP@~r-n7MWLz`2m3H2O!n6lq<E
zs;x*oyb5pH`YZDWAvb0YD^`MNXegN<#E?6|n^Z05-}87z_BGnB76x~HKnm#$>m5^}
z!w?KHB<oKgn}4Xw8H>QsL7!2b+7=I6PON1eZb+7Na%)378Cp(1prB1J;kUKzJ$g2t
z(iGb`{S0x1wWA7OS$XL8_soZrc1vCV$XHGo<0ztrVQC?kOS^ScTPL=duUfqoZQf^W
zYT$COR-8Ur|KhV6*KXnPg#Vh=Kf`AY)nduDM<t<+r%di{A|cIZfA5J;>RAqxBBI7D
zrL6o}{i*U$T3Nh$<kLD~w_j(<8d4`k$}(T4O>3pM6!j>0o^^eXS3W5{;zb~{d{U{i
zp9BR^Tuo$%h^Il-AIDdFYVxky3n*MLeA54LdP=otW|2NuNHDR~8fV@UG%UMh>COkt
zA*09ZvqDJGd|rx9lM%R~Y}nCC0l2b5j#t;B_U@}RxX5P3-P>Fv`hXYwgDIoCZ5`Sq
z2nmxV;4nAO@s0K^kHDD0vIuhor&3_nGd~w=gdM%haS&+5+e+?@&g!41@5pU~6(M*b
zcWEQa&{up1C8bX6?^Jg&l(ID`-ZjOCPIQ4z`m1l*Qn4qDXdlyleXuTL#&}xrIE${6
zq!-yIt5R}Rl6*Myn|b#w61OJ_V==z7zq=ybq<#??y-9s{txQMEI0_4=K&K;FKg&s8
zL%zAGlQNx4s=b11#KJ*oM1+@v7h$uIeyyEAayb*erBB&Gnu5r@nO{x&dY8|cAe8%t
zQ>>u)YB$ej?XQmGH)2t}L~&AVn#9brInB?7jEz5(K>bx!_qIV(I<wu8tArBTJ3SK<
z4F_U%jrYb(dmDB}Kt6eND=j2)75UX5f6QosDfPV!g&5U}!ROiw<4IQ&v(DyZSF<yU
zo7#Euc$3C1{x$=*Rnmjv;z}_Eg*2IF?=!KYtGC_6qm5%o%1KJ<<pAXPABLlc1Xcl;
z^Ivx?-m+2R(jr9}3j$>js1%1V_9kPYg{@q(T6pD8ks4{8sB+LO@=keHvMQI?r@@cI
zuIl5paQ`mV|7llVK)W(mnfYLy$WLC~*6_U7w!qVwl3X{dYC84%PdZ1Y+6LaQr@DM>
zOsNgbucL3Dqk1j#EWgxLyl|9g_Asv0b(GxAGt*4wPRb0W?4mGb?wbnW@#XM8HdaUo
zV`=~Gi5cx|es63Pay~HN?dAuIk2TKfH%8)P{h41(_4Yf2bpFm|zw@pJ4%&c#PoB_H
zJ+5mAgb9Yu^X3xrw3ql9_b8YpY&yTaWLrB;?@Ue|8;kSFG&a}lrxDGKm|O|dJDeE&
zN<z9tp)G`FOzebnE|4H9ul*v4jA(fKo!%<JK&HD!hB-DAAs3C&#6I8S>cOD`N2XSW
z5{s|4%7~k4*vj^wu0L8xG)cc8=m1A5CX9iwg6r$X>V*Aa0_tPP)h@F!9s}zuB~IW;
zEcd8EQ<28~Cokmz5TYfbxvQMe(d@8yf`sNO1^*zD>*F3bHIk||&fdQ3UUn!KZJ(Vv
zXme#BvAZD^C-vHEWTVE6biJB&0A1jct3mw5cH?BC?ktItLw4?AbUE>JIWYxf%6VN1
zd7|3L%2wvg#U<@HNm<A{fxpMJCv?}w&UA)?qZeYh;Ph7^Ax%Gd^H<iaDX6UhA3LVp
z^iy<jP!Lb4O37^iCCopW9ciHM_pajCV}#?1;?}9;F=sJ!vl9z<UeGoIhnH&}o3o=1
z8f@d21q;wu<DOow=VA7HyweBx1^>VHouf(#sOr6HmpL&H%wO$wD$7!s^F|}*IMig+
zmBT_HF3Gmx&k2*x#fxi{b+1Uh!k{J_-R7eU|8QZoDXYcqTJowe{Zw%v$@rwjy-k^v
z-cGxzrAHyQr1hSc|62|9)ID^W%uL0Nj2(1+k_tjon-u-rCxoWwgml;4YDBcAkmc@(
z%)1~b$!MNyB%dcFwvO-#Z$78uQ&w9)7e6=4Z4fhRE&%cvnI%A#%y!Y=>iz=pZvcwB
zE=7`k7V>4uuN}pm^&F*xF{v?8X7KJ)bzo-5!}q<7=`e&}xE9{6=t!Y#I<MLq+q?GI
z@WhpiO|ahi#7p#Tg*?CEL|o?%;0()Zv=#Q6*%U{nG#ly}9Xv7LaL{z<z(ZYT*|;@L
zqv%yI3Y$2aIIm*0{_-O)LN9$hWpdui#W#5ZHGAut0pwla!c}s4O<O9KzZey2pRM{X
z=<h3q-eDbBCd)fQAkcNma{E43B#GQ{JJ!j~y{dPUv$K<T&bX~Xzz1<pamA4DDea9o
zie_w8?~2IQGL9LHz!XU3#3Z|moP*d~$J9->TPe5fy%g%=1zjIA5`NzuV?0T3Tskiz
zdK?-B4A_YnOc5urn+guYIT|ORtPLlc$4wHBg0Am0N1{^u+?%7_y`GA;U2mMw!F8PJ
zXOb#s-dj}#C!`))ad@gd<@)I{Vc2rQg}EqVho-^YmG^4$Lg!O+jX>r;3)Ld(bLYD8
zWLv{tO*I$hO-z;`0k$;B0H*KImEtsqhqF^MyT3}jo$HT_Z8(T;;BUKUMO|)pxDL0@
zQN4+8To-Vj;eK4$G`SwFXBgrp>EyMPXOkK84)X&NVBD|&pisB}r;ht`MU2{iYU>Ed
zFmWhfjwDBrWnQB<N>T@QskTX4UbQ4+O3$ebTP@p_I>s9LbaFpj`g?&T%7pSl>?y3v
zZ=5Bof-YdzqT;>dgI(UuB{z;Rnfig+%Fe;xwxsY3`Bc6mYpdY;=5wsEh}$b|odjg(
zs|>2>tL4-}(9w>u+}XVKKYUP+0@r0Mw!TyO28yhZeMO<XKIi)C+ir%yYnmu5BH}x=
zj4?;6El<&s<x?HlR1Rd0toU?d5uj2$Cgk#PoLq=M`pSaE!$xf;nO2OHuB|u1-p#Eb
z{^8g9zqtz8ou%^8?sNi@#Ys{w?CnojxGHSs=UewpPXh7JQy+@%kua(M%Ji@guIk{=
ze9onaSS6K${Mcg-E~BaWb@G_s_Y6#*U)uVUEjmj&0TvXL&V<g>USsx0yb(4B6FOel
zD4C6Sk~@0a%)IGpy!n&uaR3X6Qf7bOeGNmuN6P7gndf#kl2{9cJL>!ui5Wtj!l*z2
zh{s%agmjUY>5~__scxfI0X`1byfF%$uHPmWYm7yEEVzmYMr?-f%|sWshLbzLl6iDh
z2MU%$_2w#1c`_LxH3ZX>49?tYmC;rujZsdEY}a>2&riZmJ@`<kr{l1#h8yLlk~Yr*
zjC@@EF_WCfO5HyM)L4l_f897%e_8xY+um9z`;}IM$>sQ!1Kn!sYR%PDo>jDF#}#qC
zR2|_g6Fyq=o{UnU+tn=W`gAlt*A1I6ysFJ1L9B%_<_A$4uGzj9L^ZgAgicDl9K|)$
zSr*nT>BNcmT0^p4Op<%q@}rbRTCsoC!No6b`|Qb>XYW`0A6h)FcuBc+7Ym@Jg`xA@
zPul2BbC>)=UR&JR)Uq_^HJVEIkFu+><sju&VC@TMVaEOnFwX7sNU<9g9lq<RBUV@{
z#5>DGhj(hPYN+^4a&1yww~eu~MnO<hZe1Hcn`Kudbd9;B>Y!(sZ15HN&>WvbbWTm@
zS=D9$4YpqQ_NT{dz-7zka3-z%i(6$)%CIpe<U>vJA6I*bE(hg)*jr`$v1JG(h2c(a
ziWdAd$AeoN*VMrHSfkWXONI}b1$t~CgBfXfBP!2Qin*3RVV4J&wH&?w)_aI+gD5ag
zMxm_zz>TMNXX1k!-P`wTG+m)LH+7-P`K5t0eU4*1Tz0P#(Vnm1lVnP-GH1deIQP6W
z<5ohr?>0tn+vEaXNA{v1#;%G=2vmMRtsGotfuqwLH3JoZgphc+^RGKE-r`@%X{o~9
zxLEL!_%TECQlx&{M<_Qkwf|)IM8bZOw$Elh8R}R<zj0-9F&^kK2Ofjs!zy!ieyQ@S
z;l6R=NSth5rl%O9q~UecxGmM1u`B2#=*@b(s9cWJZ1=*}Y5tqiu;7{~>DLTi@g8LN
zQ@$&Ga?sL)x-K7GPc1W95KSH|uF((m@NoI%3=^yGZ3-v*ffZlx`xs^(LvN>V-VMtZ
z)tJGc6@C0tO;%gqnc@=ynYA<!C$xSnvqu&pFATx2pasHx9$)ZzxgfllYwXKaeXs=V
zE0?2nwPTrh+C;5N^EYQXnAw6flaBF!up?y*oDiF)M31JbdpVHb(PvA-HqXnW>-Ll<
zZd*uzSt*sbb;{X@RC7Rqm8?fbuSrPOXSs@D;<@$ruiFq2rRdZMHMUJQbKWDjr^4~h
z!ko-S3pd`i9D9Y7n?ijJ%dI=#QOEDCmX)*|cJ5w#A7uR47-@WtG3(~;=Z>xno=+!P
zJw{ujnL%GMk4WU$oGsl+%RzbTRJsq7ug0=@-wZ=9UW(f7U(IUoj++q2z~l6r#U{qG
z*KK_*;%dvs-DZbPT~w)l2hyxtcV9Sldzv@y7d&>Oe<bYZ{<*Uz(^~^VYBiG(ZL?VK
z;S@`#)e~^;@AFXE-&_A&t4FvZTrUyko-$N$l|sgwEEb)NqguvGFK|&vY0LS(K3?*j
zQw8dhH(hIq>$OIp4@LE3mnNa}AH&w>FLh-=TW?n&jEaOV!Gb8FYG~;{xdX+hvtc(q
z)R=PF2dbaF_Z-Q|!i-2}CVu@>ewa=(dBF=Car+>mu*2@Ec16p*|6=|6n%(JQ2IbR?
z{$iE4Mv~EIHEne(es9$qizZG@#{^g`H*3wMiW+|!7MbinDg}+r4=dWzj>MFo##SC~
z*a^LLL?A2NqMcPvV$(V4b{`p);F`j)DU5fRKcyJB6ABB|z=5ZFr{-m@?uCn6`d<H(
zPwtzT)o%${OB#eU*DG+Cf&t(4ES?yjhJpS9dRj+j!<fAbha%AhqgKiaV|+vFWaPGQ
zi;ScQy2kwH+L-hc_~LARoioljq_%0W&@&~lsw~Yz@7T;D^JJ^~%AvMoYpZYn2tzSh
zyx-&VdCtB0q@NA`k*tN^^73_<g}eBe(IsFxj^w)8@}sJEJGAEc{QX_#`+(z<7;S(|
zJK69n5e{&HO(KtGgzMC`D=L~0Q}ZhkCS4gh*TE;GXp`?Y`BhD~#k%INZ(M9A)6(Xj
zwY{eA%Al{Lm-P2tY(8|`!DgRv!^P({#B$nO#0Se+2A)p`P}bx{+VmIQ<IEEEa;twN
zzHziW^>O`b<=cqsPQ#wVKW$w@98zA99)t8>H1Yy$T1J46JsLCoG}Qdg`C2G@a1#eZ
z2cq<~tW0jyDrK`4mV2IT&o1P`rBIawr!B~d+YKl4VQ;jt^RUI7zRweP3f?+XZgy)}
z$ip_xZQETkgHKir#vxG!&MrqjYjI2a*A&V_q{mN9pIw@p+BAwrLfaM`y+Hj78!U!<
z+LXs!d(P6>by`B+-JwaYDMHs=w!pKZ(_dskoIQ;G*A<L=&gctQ5u+>`1H)-)G_w#X
zVk1ph@bWqBkE93lBGjAwq0P!BKk4_d37T@>6-DP+dy-mp-gcy=>OoPXB8s>r23z9N
zZm18=cYk$CYj8C~*YfPKE~Fw<R?Oka8FxC={eg=<U6<0&2~6tAUeU|shqtd$`o0a_
zdintMPIucrXH#ZTdrB00fw(h$qzv+WUy`mE*v!h#>I@R1ld>3f_P7~-<g8JzG!~{l
z)9xDPOR-lXaY-3@i-hiT8aX^?vglqLH~2{o><3>TOVS(HL$B(Z1nsKxjJPoqb&IUZ
z^G7O(!uom;MS^?Fk1s23dLi(i9!A<Q{z7naWMu<Sg>L{WH2`Aja^E&83c-DE)_1e?
zbH2MRv)DJkTCQs;d40!>n|eSMqh20{VcX!1mm&Xy*=}s5e?qIl*+#k&=jqkVR<Sqq
zYOy83)cEt8VE%SLDs1@?P0!d&2Q5usXuyYKUPzZUGKD83Sa2ey=0E@H8s&d3=ZF8^
z9p#s6d{1tkjziNSEdEFN?*+dKW6jKE@98&sDJ=>r{)+<cPhzHCXrvbi`&VT<q^0mS
zl|1Y>t4bDyrn{zsTAistg`(h>%txhkKvfsn=ij*=PL`+q_{P7Nws=F!ebRucKpEgG
zlq?_GFD<>66iY;|Oz(%S_59`%#*Ee<M=)8eOC*Rw0#k-`vjiux!k$(%+{C}a?6}DP
zdn4t?6}8uQl(<ncvve_>&QuKSZd8$scKxzb$vc9`+S%i@*(yO=4V+9W7I%EI%;oS|
zPy@za_UVo?@@d@p1K_Ry-*2u|-nK}JwSynp`vZaP;1tdkP30V+HS(~QY{Mpf;ksmP
z(`Az@VMJ+gW)SfA{rZkV#gO2_w_;eD|NkbsmJYY46_k-Xk|6&jbu1e=Luj>EFQ-+-
zwJEqmW{#w{b$;qvVWc7pxWx@Q*gA6yjwQhk)@gJw{`Won_$#PG6gdJ?OIFEyb(&c<
zQV%K6+qf7;diwmMj<GLJm<?U|E?pzdZf22uJ`j+RnaX)-+Q%5&=myk1Y^ubKc?x2t
zZgCymqpA~qonH>aP<Y(Q!aU|+!8|&%RCbuKfi1xOIkq_Ar$!G(ZVc*S`B4LMYozEm
zGv}=T{ho&N+RCW01!yj0a-0miCTLZ4)gd$Q*h?7hvBAQ1m(_(qhfZdd`s@kyE!ovo
z9SfFBL_F<a(@go`hA1XF=$2+Y=iPU41=|d9vb={E2XgHfO**uLk+_KU?G1OF5H^qE
zz=nTuJny!<zuc~9^k8xFUbpwIHQ9Lq#ev}ODjl3P_K`(aP@>S9yNr)^01588&uTod
zD*o?#J8dRw;_4a0@N4wS1CQLX8g{7}m>_A~r$AwFNd8B4uwxo&zjdHahRw6Ls7m;=
zTHYH--{Y_db+c!Zg=vk@O%HP_jA+J`9jkC17d-4eC-8?}^v{S6&LJq~xR~#DXGR?o
z2A7ZJGt8-PCD4`yWtRn{neUHnYmgmJ7<f)WfOk{wrNfla>PBVMJLV)r2q(cpUq{RS
zZ>j%V@jK>}zTkwyqfR!^D)o;H$c&#NVS$JJl_ex_OWDiC^P#G=Uy4p|pD?>-s;e#_
z0I8eWw*AYgy>BK9t&mfklo$D1xyF69bd~4w26npVB}oub!Ci>rS~LpPs(rGWuD@rw
z)?>Ezrg44mh;cA8*_UtXPGOmltp(Qmwl!WZ;cAbMBH`@&+m8RIQqKe`wnG)uJ2ShA
z1ZcV<Pl0^Hq>ERDV(BH58#-~)YJ8_M7m-v+?q~Jugu>3_3uP})>wMN(nUQ8K11yGO
zCf;GR{vB@u2=dT)l<_vLT+cciD8tl<fv>><hXfz-lj9<7-@rBZ2?2Y$UXI>B1K>jI
z@FY}28zbbt@f@nKh8UnY)vRuC9&tPagKqRk5K@t~UWeN*N5bv?tK%u<m|!gEDM<j=
zx97?K{mOkS$(lHOs9*4AgsQgMadT<%mD16bc#9X!#yzqGr3;}S(EP-~U{}r41H+=y
zk%_}+`@L0=&7~_Bad-d`fgtYKNTzXTMn^|VQMT&ve%;`LO5jpquMSC1w;4M#hESK-
zsK2%Zw+scL<zA)dOGr=LxKZGNR10y%=4fSb1HF=HYM5Gjg!^`k8r74h5{EeRaa&|S
zl995HIl`vZu5s_H)_l74-^)nEz><+9An@zaLFZ*@R+!~{0GfmB#>Q$(e9$ZG&9nDw
zx)RpazHl9GrNm$)itifyB{P<9?5MYIVf|0GWuUb;%xk@)ef=E$UNU_Na=JRT-t`?}
zFQPOaAd6_vQdFG3^hGOEoe+bFkh<`~1r;cfX!=#1F^S;`qxrA{H!Kr-o-9o+_%yKL
z$mD}3Y7udM3MIqV3xf7e<69Wes;U>GKZ@qp&M)N_o*0>K)@^y1{ZFI*pMDK4_;-<U
zc=?}ul3~9`!P@;R9n0P5L93SRcjF7F6%b!FANAy@i|}i|#w7?X`dL6-%#noAVD$>Z
zBSbzrA(2g;829K#E7Yxd87~1h)i!^GI=mPLOViTq=xD`C@r{Ok<70?LN2(I{34U@M
zhdR9VX+(&}H&zYCFGzJLS_mzA>nluML`X2~!Ohl3+^_|qW`YbP%t4;2GQMIeG}zm_
zM$UJ~zYGT;mq&-I-JsW>9{=|Wyi~lt6Ugn?*f;V;aK_F~_^!J<gEA<6UgJEG+|hC`
zZ)nE05}6i~6@SK_mT1R4j9kU=Xj>AxXAWIn!ZON8C$;Tf?rjcYY^Ws@xY)R~m9J`X
zt!JsiXnvc+D;+ZIAq7#?LBE;eayV%pp>Kv{#AqH-prhUQ&|?NjV(_ZpsXzk2Vr*sQ
z;Bby(mmAHJ_mMC>#vQQ?Hu<?H1^wOdesMX44%!dTSc@I)((AbM|9tq{*Dt-5LCKs0
z>@OX@#PjwyBpJr>egb8epg51c%g+1jj|RW9z%%^%MFgpnPA=8S{4F8SEla#auKVC1
zA6LeP`}$G(TAU0z6M7#4l^_N6pAj>K&>?0$%1|c>lOFh^V)-RFG(`x_U%vmRoEDvw
z6q!lOG9&}!5WS1zR7xxWgppcD_>*FL;21Pa&RI?@{y+Qp|8D2y`TuScp(17mSQ>ts
zva?6r7V3OI{d-1PC^=qs-!p#&LJO@8QTz4v4XRc5rd?`CH|YEr9xfP;=i@q5eW0y@
zo4q`GFJiGls?B`%UF}u{U)miI`l$D0jTj_5*Q|+AU$Xr`AZ}ddU5a7;*l}THFp`YP
zWpu4S`d^)}f<0Djy#P}^TMlrF>E{<mEW#}?A~FDneSQRxI4RaTA!`n#K%`Edy}!RK
z<oh<#{{2W1I2xnf7TicX;`F_)s?ep|V!q|$=#TO2&&$hSg85beEt(T~zM}RvYA6Az
zB(oNDu+*-|yKvLk=sZK`>9?`XpJ&u#X2qfbsxOKg^sBOWZ#w;dQ^}6>zs)}0`%Je`
zbO+)6P6~Fk-bC?d|CZ5({m@_Uz|Z;yaRuKQBgg(m4$%@XR7khB6t246S247(kD2ip
zHl<K}7+PU38v02xYbBl+?wxv2Of#RP5#Y6oF+CE13}q6G<Wtu0m`b{{dh_6()FT~?
zQAc^Pw((1y^s7Wh9|QQIq=PmeEiPiGstTa?QdnT3lW!$}gHCG@KHI*3;Fk`b#-wny
zICj^r?rw>g4=5H<b7?NnvETffJs(2`muv#^nzQwN+yPfVTX=Uo*M@Y(KMSD8Iu56W
z8w%*4Qy2V?1&XD;PmV!sw+X9&*Rj)s7BEWq@Txl=GjK(*^FM>@zgx7$^H3!c^a4ka
zY|6ZL*^fvGzQoQTP-v|?Iyh-5qqr~qI5rEJ&gAEBbTpKNSa<a_W_?*Ph$X0f-cUT`
z>(z?r?;Xe#9qjgQ{M<%q5A!sU%PDJ0Z3}uxASiNV%ccpfg#;@ak7Rp^44Vvt(2+_k
zqxC*zpvX%@h0}yiFBB5ZkR03<dJeF*GXXA~1IhP)#nF=C-~ensK!$b$c*!tE#4Bf+
zkE)RjYw}#6VA%yFR;PcN*nlD%;6<PMH4fQt_q+vzK#Q7MT6SXgv2`~CPqyAH`n$0t
zG-<3cga$A0Sn=22OxT~FkEGa&%y0&hu48k+upE3xasC}6Q4y=mQoq=8_F5f*Fs&Yd
zqmwEVYX7lWuqds2*pBjP{pR)mto5Cke|NPef;IQmO5v!CyL{cj`@l9&SXE!8o{264
zFC04z%&~bIg(c0JpheW^XT>$yKejlK-?1_>buH8VeB-#SQ1tAkgl>LyUp%`2^ZEDQ
z`ydL55&uAlMw(pInh&08B&fIQikEO~df#g9Px)!5a&F{FQgq)$@l@jec@&+QP(B$6
z^-4S!xYzQkI=fCnTzn=AOf<o!fiuhujiCGUh@_G>OmrSpxq|=k<l!n!&+x+~!svW+
zzyp(F4GXgwi~3)m0xszo3I?Yu=@zA_YJv0|_@MF?AUU_+R^oP0f&pA=Ph1A-*L}1%
zl|JjoNDcV0B6-@~VKIO<&(ky%9<AwsP^}+o>}dMWQ*o*N_o<|va=2u8qnDRLi|pa>
ztGydra%eRsSuULs#Z;jw%aCP_M-EAy7XhAzhZCn<i9Yiffe>~_u9uTu78Kqxkjmlh
z<AB()9D3S|sP7NxxzFrWAN1k{gSGj>WKpKgX*BB!;DPiu2+zVt9lny_OxT1JW<wd@
z1g|jEHnxhTT%Er?1P7xkZqo*LfP>ZjZkZzol=n7<&&BvQoBR)-QhAD9p6)iS1ML18
ziFutScj=*?p3rfsB%DZRx@5?u7eMis!P;-KflFMgZm@+(Tg5eAuEuW%c#-ueNm?fT
ze#+2;IDgFzGzy<ToeqLw5(n9S8z1@^NMMI6&yik-l89HX1@@z}A`9;t_j3Ma@|yir
zw6KCk|Id%9@}F&c)Yx|Kpa6eGQrur#A@CU850pYgAOj*&K`pWT{OZ{2J<dcH5ihG`
z2QnUjgsnftvlTP)$=sP@<f~8Zq<Dm+*mSPSXNg|!GY$S;=zetD0T$S+b0hu{2&UlZ
z`R0pn;lXad>5<Q#6KL-}Hvx1|3g((=AwvTu1&&u6uq!@t+_cf*_aC%r^o$-L2wtjv
zNz>Eh>qSv;xAPoz0?Q*`+Jx%kMrZv6UlLq@+8BaJ`dixuS+`bxS)Jr2t>3k~VvRSC
z$hQG6FSY;O=|aav4K5ezVCItaGfayB3=gP=13`g`i_l=ppT_s@X)EV&?y>7IMijuw
zF)g*oO8o~PT#2>h2=~4D&m>}fXH0jvbp-X)SW<}CSG1F(dQ~KYt**=)IS;vEb96#b
zC#umPLihp$y7P^lP}n)~3Pl_v@yg4RNE~v~VU(`AUH#E5!cMVX?cEJr)iYq{7JUNQ
zBayRcQ<hA{;Q|VSYTyEiNX>URE44%8?N_G%^mmoq*>`?bX!o)#_kK<qlV%lT($^v#
z*_Z3+-lQ3=j*VhrG&a#MYF{dKO+mg&JD_?N>yZj;TC2!OUExtbNqG^JK9Mr{fyq3W
zNgzAr{}A_HVNI>k7HEoqNZS@bdaxl~LFpxcfQkar1EDAa(t8gOM8qvpl%~=}I)q+A
z2|=ZW-g^-URa&SC?Jl?boV(A%eZH^BmzA~VU)KER7;_A7f1!C)S)yL#@#xyCla(P%
zs94)!U*>ebrwWk1RD@1sb^1#<tf%F8`?KExIZbWQq{aQsJx1L8d6n%Nxuid<JfA<~
zpw?bP#-1h>K(f~IFl)#2hqUEOKiNMIR~F0|j~9LAWpZ-PjPk-Hh&|9H+w(lRv4)&&
zv$S%lm%T{Prg#WY+~j}Q?#>z8D4J#j2JQ=_4=m!rO#J=A*u~6@hsy>ky#jHwiUF}@
z^=1or9ku1WFj?m2Fq#M~U+@;dMkmT%O#~ksXZ<-*;>~nt4tKvEveO>{O>b85YYLh?
zhFPIkgw>!zbC%f`K4v?wKWbpQ)=u{0E#mWh@*upC<X3DKyRJ}X;mTdKs;>jfJURYc
zoiwIX`bzX#_<`hf2l=OO*$<hN!iUEXY<Q<St43CR=aBl<1;zKzvAE!Oe~p$cG=|WO
zhM@#kz<vkR+fme~EPiwffAub)FSR0mVQ>0G7jrQ(a<O;YWB?rx&%Mv}7(9iX@w==m
zx6Zs~(Lr@DsjaQ;2*Pr`JCptgKI5Cri@@!LwQ~t^l<4c`?rC#Nid$5U9abT!#{e~7
z_mj<O8Rx_Ng-(X&DAX@S?Tbvs21XEUV0Kk!s}~6CCm=alAt^slyW*@1F5chZ(Oh$v
z8!n7#f4c{r)0_scjWNHm6Xc-B8}OQ$mfMS_$GYEyrj<T4OudO)f!E5tDoCPXjE#sq
znJZ@<?qR+uaB-M5pdkJ+*XoU&1r_LWwHik(!|MnQ={2>(L(@&R)WBm8&-$ett(7^-
zM-;e1YI{4f5Q%-#QKtJj(N6Ka7OGe@fMsbfP^eyqXD*ZxjdjR7GLz`rmY!A#yP;#7
zKw8jAZt^VL`%qLWSmgFLUzoU04EKwB{7jhD@H$3CA`X-O{`SJt4IW>)oV_>y7Iw7p
zoDN+306L=r#~}*>Xg+6poVfzyA>igSXbJ7gJ@$>>3zS#OLiTh#iA}#`PqNq!k~Bw*
zMkc=7$x_WTYrhy|kTUtGt_B|_Y&Q${!0}KIO+9`-+gR}y$!W&6h?`1GXFcAk%Qt0u
zz0igoj6dssOnn*31_Hn2dc1UBEqVyoe!+0G@fvLZR@NOjb$iCDBS@~?wjYd#tB10a
zA7*52uMDoz&-Z~7Ek;8kEjVMLcY3aYxS}D=WL+(-?s>Nynvt!hhbwe1j6^hWO`iC>
zu*dA&c~r@$CP$%4Xe(GKf4etB7tvA!&Im~;%?&?!x}72F0dbQ-iwz6<JJvp9<9@^u
zOa8UdmFJi-yK&dM5z!QPI_Pnb7ZPOE&)1mhB?1b#wQ901_t9kMICQ`qRfNw@$`(;I
z+@)Tms2sk|eHZe6{$dcUUQIWk&sHn98*Jq0Af8Fz{MLR@iQB_<A|rJyO4U^HiHNPO
zH}OkEsjMO{zU{RVJHcREQe<8q&H00`swUPeH=IFD`l%XaOm$SJ6sy^nlgP_KwVRR3
z@M5r2O?6uLhUb<qmD>i{L>^yFYO8gsY;Iv9mcKJ0e>N`<=`4*%zzLYW`sd^wc%7=F
zXu(d=pFx&x-u9*Qht-GTa=rACd>YbHJP$9PT9k<G8Xv6T0+&tv;I>=t+rml*RoKPH
z+r$8|;Txx|4qO|G-VuYqt2b5UZ`*WgZspq0A{6EL6k}Cl8ZafLA=<vMy(kJKsa?0M
z-kUqp9w{_MOz{`fiE-th)fQfdr5PDFJQw6W0E0Z-{b(9InLfNM?$7T2DyC&sJ#;$V
z;N32ljE})k-Qm7Rd<$mz0i^3sA#+&zE4sSsWhR;xl`k3bA|fMMG;f}rKl3SayEfp^
zpi%_FqP=#sW^mL^drybw0SDF4_j7lr{CAd~3_YGS;+Gf7!;PJt2kG^+o8C)FGeY@7
zM}WR8zBosJG}1R|?3p{<28IysF7LSkGLk)*q|Uw=9d7=U6=cwQDJ-0}SWlfJk%npA
zrd2q`!26<MsL3Y3sFiz_+H`!FL>a%frlYomu5ESJ{NMv@MS5U<mxQ}eJ7KxK5G68D
z%Q^-(1|0z0N-WdJk^VuUg>YnDd0~kTQj#!vIV~T#Qe@ib&u=*TV#Scy)%XZQ^JZvc
zhhdA*oHgNjKEbRxMIp0p#mVxirIdt33PuzoLrT-)*QIE_F25ZcznbSnNe;|QAq@<#
zT)7g+K)8REct^xGe`EFH?Au|2y+T4~mS;ZCN+I#@)IYhY0aZu(!gra3J)N#(Dw1(&
zK%1C?Ujf^F+<eIQFjB4{2RU{)N0uZmJcVjb&Lge0JCp%=cY;FKHC>bTMK^I`j}gFk
zZTe==RX}|cGE<i31+k64RaIa*9ylchd(J%0-R`qBSMf0<AE2{YOBKHfQJOjPrSVPz
zqk+TbIr`X^g!AM>LYyF3+|whU(<qlO0wD=L>!QuNJXPZ<2>y=jqT6w4e?p!1lgJLG
zeW8~x9}T$<^yIO%W-={(WoT`*h@e}d@_p;90#|`E>cpnrJzg0U<d0Cnc92lJb~ntk
zH3!``vP(zrJMcx9y%S`Lpfc$Ca&<V(nQdqStL>D?={P{!y8M7|=n2OSMKCYE!uAWz
zW=8MYxVKI{>b>56wj1c7v0zKCE}y%Z$KX04vlAq~X%pa81u^Q==CGq7l47hzOu_7j
z<H-r7Y$nDS=h37$t42*W-5>Ie`(_WeE@BlQ8Y(^s<WM1sMIJedU*YkjX`_65e^ugj
zALV1w6V@V1N~egaW2@caYMI0>)r?H~aZ-AT$I>d6I$&XESy!6J(tO$`nT6G3)qMpf
zuQ08Uo!A{gJ~u>|lOK!glt?I?rF_9unBR;#5#>%xXb}5kA~#}-s`p<M8CqDsw$OF?
zH1v0tRUCHdmf>g1<6n1=F2nZWHl^<*k6M{D??SJ}n37}njj@46MGA8osTY$19;$QR
zNZq=DAS5dA%py%0BPx>NjDAKn$sB>C`P?LVy40}SO3_Vq@<!TC2w;_Kj{?KoW{P9}
z40xb^1XEouNqcDq|NiW3me2`WnQxH=Z%3blF>gpwgo2SOE0VVCbQte&ZkIlY!vuEQ
znVN@1;TA+00SD5tg#OrUP%NHHLn1oXxgr|M;3SXceDxOU;^1e8@{BogZa9wbhit<_
z_sT1`z;LaUoQ?c5aVvD|1j%PIL)v3P<rYDQXcX)_i6`jjy;AhL1ml{FTUA=9>^TXo
znf!~<<EWg}gEh1Uoq^Tv7Exz*TFbont8;Kq9%7l<{#2`|A~=cTf$Q~N1DI*e--)`4
zKaD-)Y-MB1Q89}7>+FMkDVbc+A)URwB}mP+YYb>d-D{IIx9>>cF&+-=N_WC*71W`C
zoWkG-A>m;yt%R$};ClPGP89xnvsR*(t#9uG+{!cYwDl>QLDqT8tJ!8~&TD1S{d(qB
zN=0-~E(fC_C`pHr!<%V7D{M&jnq?ICSocARYcwX%xL=pa&u4l;2Rl$v<6JoTW$VE|
zl|01+$k5+18+*oOJka@y*mecr<ose(Ck18H$JIL@^tnK@4LVXk<54l}^$H~_J9$>K
z_EY&~>zOWvxzrCf4@=+i!KTlpZVg@^{=Jg(c?i!NSI-O)N}Q*)&5VLs&U#Eqfv9eP
z`oF&d%$GIjj`m><HD>iErbuW~et?ikUSoH|=}BU{-4@L?$PE8F6)F(H8y>1HogB_!
zJlIW#2fYN6FpFP6V;$SA_35DKMhNmH3V!B?(}YWk_ZTX3N?WCZ6Z*hKC!jT$rN_Vt
zeWr&zRAy93lUjm@@~6#i+jVAEPyp{azBvCIQ0>AZADgbE&gBp!ahwrm$miGB(wvn!
z*YS3b8cq0$TM;(ngJoxThIoO#>PJEPu1cp08j373ygi^?GCb$4TtjOQmPXIBL+A&2
zJHv7x_jyx)Rd87EX~vJ=(D+p6AU6>1AMdftA)-Wh7SkH4UW<)CG3zUB?B}US-l;&0
zx^NQ6fb3AUQCfpFjD{c)HQS@c)6;EK1}<`ap_0WZp)fbMJpL-75$ABJ4;d=}^nS>-
zJYi+A^*iK>c9#@09ZOOOIuSaJWwKy3936&|AQRp0i8t-RZsuxtKkfFbr8M<e3vI%W
zC$MD*cgskFpLxoeXMdlO@&$^$gX<`<W$_zYxGp4OFDlbeX6>c3FG+HdFl(?mq#_;E
zG5fhR_UIe=t!O~9R?)mV;V#kMujFlZx5TPAuEx?yG8)<jR57eCKhLbVTxL<|C10{s
zI^kQq1(;}cD>jCM*yZYeyAJ=t^|TFIdDi<Kn@s8Iwut3`Z^YLpN;+G=NPizG{356r
z!mXqn044&xLeF6kv_*^X(K#Osjo>;<PY9y~Yr$ufUog{0$Xz7DC~q9PwseJu40wXY
zb{<OHMn42yqXL=mx0-O7G8w!$cPS2fCVvC)Zx;VpIc&(`5&^=KEPN*zVMS>-crc3P
zH)UAt13jg+nG*SibE_I;!B~*<m$d)U0&wfsmUS7`c2e@Mz@J8)aiKY>HL<*S#-f&X
z4DFR~YVcxJ{FZ}m+T)#1V_F04Hg~MosADDWBTeK&@RL+&P=5=gk|}BzG)Fn@>9K&=
zpA0o!(4-mGW4#?D7)Fxw+mWg&QpkEl`QUb`-Ou-O46|{K$54=iz&ll6kS%3UH}ss*
zYB$kGb61z=ufiy>8)Y1pqfvWOkvt4_b8T-ftzQ4gLFL+1rlhCXa=kB#j=m}tL=w_H
zV*Lj~FtFHwklmmn*O$CBePe_cptKz{eUiQqQe*nDZKDPg3PLL1bhHKev$e`se{w2<
zkmkj4XMXha3nWV0pfcQy?|TCU1_^kqNjr-!=xn^vq!F$WtZh+9Wn55_*7vf@u3c+f
zB^oJQc@;#9r`0q;8#kQ8akVN{Z+~o`yr2jSQG;Iv`Wjt@7_{)*{A@K8w)VTm)uY45
z;-pXydoB(aF^zw;Mw{c{B1850WwIYfL(TFfnBnwt?CVbTQFO7~Slay{+2EwtyTSN4
zIL^&d7hPslEoyGY(~9^^7hRjt2XS*u7j=sOx1f7Hflfd?^Sv_VTKi|)+LVX347&rG
z7M>D_DER|>cVYmG<rZgH&h!B?HNAE<Ur?h$d$?90EmcHVTjZ9=WBAD?@AMvIzfZDq
zpw>xXwIqxJN}jh5!87MM%;IQPH3QoHh33#mxq!#U;^Kv}#sCGmnz97c1`{@@%iYSr
zl(i~S!K+$pG;(r@6F$|)A4vBbnYHMK`hHnMY5G!cc+5Vme9O0LUE2NpFD<D`;ld<`
zd0TlZr6#MUkfh}YUGyve#Qhtvj6ymfo@?<Nz4TC6U0_MnG&!P-P;vzdF+di30Ij1(
z7ljI_K64DZXLKtupdl%Pp&_ccYL{}9Hl22C*~egmP_`57aDu6@(FHJf)dxG*3R?d7
z$vNBauKdH(lJ80dYQkrN@4z6lh=s=I{xhQVdWhCwJx>H!9_bHHJh0$IgX=Ywd>grp
zpjK8FJ!G8UJPa^Ym@opZdQck;L+aLwqgmTMM~hvKd%0CxJ~=F7WM1xVZOw)iPL(e`
z=Up6vj1a8X5o06FtlVqa0LlR@<b~-~E`~8^qZ8y<2GLr<XUG)TwE~l}Z8_xDyriyJ
z#$P;I0AH60cr#Tne?!O7Rzb&nPDL8rAQP1xQHaZ90N1(xWKXZ@Xr0~#gc>y0_7qzB
znc|epJ-qQ+9A{>V7~oi0x~wZ0y*@)0t3uq7bj;n8@pG^$Y5m9uG*Wu<_ARX(dk~pD
z;({|!Z^w(~;<Z5Y4F<K2lF^2D^F_&a8q%x`c!ryDJG2y|Eh87ikWpd)Bc@V(AOfnr
z9es7_y<|TBWqzi32I~>9N}8GtjY}Hn4d?-E$+_4<oENhSXIh;Cq&IBmTxGJe&1Un<
zSlcrj>O~daK-Dx8Kx;tnea9_z8e$D_fOvh2gAG3Qb|YOIH$&7gtCn;T)wY)OezD4@
zA+iLiw4ks4n`U;5XJy{s=_)9;eAo*ly{UI&*8-cxXOyWzrDTl0Z;WM(UTH{1C$UT@
z{P?Yk;dC+a{2IMWlcDGaRwbhdEW0-G*odyx(QC)@7&LFE@)`W-7&O!OLA92vwMkb*
zVQT&3O+GxvoLf&KTT}6q*4jdNK4Dp8Oi$j?fcWI;<O2QImwsykqR02KrgNF}Gp3&=
z_;cr+{Km36-hT`u*<i|e`xyJuu?M91l(ZuhHnR*thYf5Fc)fuwdETEJbQ7>nFb}G*
zElkW=u{SSVm53a}IoP?KpKJJYFyyC#wC)?ZZ(NEtoH1R#It6jI(0iK1T=dc}V8*GI
z)c_4P&L>{-fa-F9<Hw?w?=Taek@aZM4D3m<jd7r);_A{!5#b7))LHGG5mQLZT<%pL
zP$H@c%oxsp-+d*_4aC6o)zvDR<<>La1ko9gqEG`G$=1jxwRVZ810>Gk;|paQBN!&v
z0eZ5;Ga+;2dY$P6Tg#adSsO2{1zGBes{=gq4ouM;Qcwhq!rls<+VT&vN9r+jM!MZ!
zGQwDZZWHZE?438=gKgAQsJ<sh#*0JW3kqd<IT+?D&`6VUmt{UkwAW|a>LK-VE3n)8
zHDNkw7g4<Q`;AM>qMFoOINXMDK&RT@RP|Gx{KrjMy(($uZVlzjF;Ta(lflxg9|7LF
zNN@zr3nGSk(-FNBpu~|-ey*TD$qR1E*^sZ{2n~2>ej!REk;-lDOVnz3)Ah`xuU|A*
z($)zx2kOTvvVs}1CV><a>F|x3TKaW4fWr@LM>E4ZFf=NvVqX*N8)sFKnG_dq)hUc(
zkpVx)c<3X>`D(Ii$*Dr+P+BoYNdVpH=sDAaD6p|6y!SzSICQ-CRTr0nnr!|G*0u21
z`-Oe(n@mWf@yM%SGx9r#)Msf8p=EJu;m8wgrM4BSWDZ=h#;Z|H1fTZ}k#IB!<}AL?
zfhVNC?qfA4<7r_u((vYK0^Na9c-^2ODqb5V;s~Nyily<vVw_kinOc)SnW0|UX5xe@
z?ildwVpyz+Itm+ALh~D9#m9gaEy7-#W+XUybxCL9btKW_g;JRR{yNeAk(t@#D_{g_
zw*jKm3FHUyC+18v^%(b~fnlK2R&hIp;X@!^XWf~|%HsoZXTL0t*Ha**Cxc5U#XiG(
z0tP-zp7HLu2zdh^_MSnNmgbZ@<wZU#Mb0ZUQ`uGfaZPQa1eF%ZeAu>D;u#JIo^h`V
z(pnKr8S5!NVRa;^lzQxbvScFWcX)Uv<wS%AKGdoijgFONDEJrLI`F)7OVU`p#&mcr
zj$G2hU70Y?N-?!`TvSQU&qO-%+r&XH7kIE3SEZ2+%IqMw=~lYpoMF(j=4R-Q6?$v%
z*<^Td)076bx_pyJO+PrCVE?z}3h0yD@OD(w6K}X>8Q9NA4siu50eaFhrT@`Q{*5JX
zc6bAE<GLP?TlOG`4>r6`x*F-m@kW7lAQ%U1rCq+P_W7a&*Ovr6jCjwpxWe5+--q9A
zU^cSBNb_Q{c8cAW9+Qjk0Ik|F{F*!uK#7z*pT?X6apR!ZzL6sHW>Hmr7i23`V@6@a
zYw)x;264R3Q}^V0&$Q_oSts^_NxRTdgN*f!r9tmPhgVgEPS;<7ECN~=!s$NTaX7nM
zNV&x~BjS0Pz>b~M5ndi^w^_+^AT|kSfuxg>`N;L0>O(MLeEgFH-t4p>V2rxk2<Yqd
zpRKOkyUhV9cIvnMjzz$#Ms)(&2NUXue9n$m;+97*EZ3})*kxDvaH|yn%i_>!B*#_h
z&vE8GWaw3m#Ex+xh-Ah*{&My1P#4%a9}m<hfzBt<RUt!q10<d3$I&*6UcjrRX?_ep
z+e|YKasEj&0%tkGTCG2oW^sYF$ecZU&=xK#ypfs17C#WB|Cx@yU1Ig?{+amux4Ko&
zL_-qK!I>W(=}}wI+(GB0LXOcaro=Vpo--u+hnrMp_?ROym!SA9sA<7slYo3BXHhJc
z@x@=ZG2kVz^s0b;zFc-zB+<)nXX)wdM|ip%Kia!I$GxUtTldG{ETQ_{uNRKNcLZcR
z9k_ScMEDDG@x81!`30p|jIt_J2X(num<Co@ukDU?$3Cb*CuJIsgWR+q9zq(%(#tKE
zWtl(s|9n7;QF05_2uP3BSKQ=mG7=F_b&a<{3o+~tWf3(SdrvX_L#p3NJ($%UdEB(9
zxh9{KXN!tSS&vrML8PTnqHONUcgk6YfZRA#X1WL^R^f|jeq=>G(okrJh=sEFfr?K1
z?s3U-o#t{%JRbW-jn{&kuAk9QtGtcuIDUfIrIQ(Ly_sDz=#|eAungeX@mZ_Z*2dX&
zIrje+4ymYC<koD8c+qu+O_ei#;X_d%QVsg0SqrD}y++#mq-ZY55S}L@bc!FJC!f)U
zHBV336lSsd{0yOUY4lzDb)Y6!tUJqW@AtO}{O>^yPB5+QU^NLOH|weaRxoQmul>OW
zTM7EKkIqen9JnO}W6TIoW^(0RXd;&o?F?r%>PRjCy*}@U@aBr2ExH6UrOPG-_T6Ij
zdKMO@+MWyB(WdccLA#17k&W&I^DQMva?wpBkaB`@Y1)G*FDJjUF*Idl>prTZc^y|f
zk^BPj4w0XkzK$u{qAc5Zkc7~kOrSv~5SAf<fzv|N*zZm0?o5WlHM9mXrb<GONr}80
z+~)-=Uz)9f%#lk`T$8(TrOVLaJ|UL#4XfU>xi(beal|~1%2HZ^0DoR*w<V#0!0TqC
zALA8FNn+lYg!5lZP-k|QKejFE8`kiXxJcAgl3r7lA!Ij<y#cuev`F1%)f;BBx=sD?
z@bJRdP-In}jl4mulbKb>l}JkkN7Q$#(AU4w_?h7+c)#H;w)z1%bRBC&<&trPK5M`5
z!_w^Md6^Se=vxu}UNNfe%1rn2GO=*!n|sEhmo`DFRITBj_3&N4EtJ75gbuu;XVLEL
zvBd-9-=Y!wQBF;y5LuW|qsS#ziR;{YMB^XVU+Z6pE*q;1%e&~Z&+xgRxc*F!K|!w2
z0j||XM7?Oaa#id5x<~9i>H16vM>LI1{R(3Bi?HnvH+t?#rIJtOY`&x)k}u<BS%{Rr
zz0A`~X$2re|M;)&zJ`g$2l8Trg_)g{HRLMqDZBd7?xAO|&T*(gDj~>eMbZ41ZgA3W
zDsggIs^F)miluI^X>Eer5X2E#<Y#q6|Ia&f@d+L^x*^8}KY>z$n<?+%U2j{zw28G+
znqIaS`RyB(pVN!W0>2D2;qfx=G-^yU67>gWokrcW$7>4RpZ$aVf|zFr4TDU>WUQDO
z)pdi7h+x!BmBFU)NE^92P44L+J)x6{>r>bMvQOqPL)R>6-(6B|`Jih{^ZA@m)!o7)
zHKx<$Y#}`InNf2vc4uLs`bvewg~Dql$JzMjRRP&?-zW`(3I>=JvqXcs3+hKsgi0AR
zN!OvGU@d#avNl^9H{5J{=g{_uJ+bDll|v?L!=HNHA@f<-^s!_4msg7Ht%jFwoQ!y$
z(+l!D!KF>Cod%uO$MCE>h&q&18}Ly2*^I^&r<c4FZ`+pL+E@tN6o}r|_mafF?xX&&
zAr<5iPdZyKsLiuL<Ze1m%Bo$~L~PuBd-<Od@R1Ra=miy=$S-okr^=o;=$&yAEl3dh
z#w|rum<u++oDozhNdo?2#i@++x#CpJb%2J>dzkA(oE3(H2{$f8Ji!EZ9;IOQ?=6{v
zo%o5Pw9_x!Pba7y751y9bi@Dr$twtW-oJq9O!P(x_4v<O19K0SM~lhs-7cjX^32b}
z!pk&D1rwQWbxnT%I-FeFBEo-y5mNIE-HNe);;WhVqE?WOGxXd)$2CL2zu>t1#KpsJ
zRMA0259<0c@Gbr#CV%#swd|MW=4AV0v*WQr8B}al)>?ShG5MYIW7;cme^OeOe^Ocv
z>fd(}KKuH=T;pKi206}_k1H_3rX7VZ5dROK()}Dj=hkfCisFLf=02#u{wHq#a-JRX
zfnSabYz*;n!*RQx)!zR1%cJ|hWBZj7FwX^_3VU(>`u|IBRSq^SfP=^)PDz@oKsUwL
zhjo970)N<f_$mE=(m+!XncKejrqiEK|B$jcZUPYqhS#pmfk=}>SDvK&mqIC#4P10#
zXMAe}JTEKa`~32M$%>T%z%L6)P64w3al6R&>;L&ON)LuUQqP-Kp90SZykU9rzw~L~
z@*_<^1U6=ym-Wg)B+a}Z{{MZ*U#9<rb)4$|udvoi5qf&G#R0M;J;RzkH4RN-Q&SUw
zI+1s_P5hjTM;n5ID5$RpW6BVq2$xHyc=8Tf+lJfSiSAeQ*@TPVx)n`2?h_J1b^5kD
zi@pvHZv3sUxbtP)WoQjhNka^;4ZDj9uvjtvo_|0r7=Fj%wZT$4K!2BiQ$Zsl|3^x)
z*BXTq`hI&UaBJ4;H3>??cn45C1jHU&#IzLxkE(r7PXb;(VjdTYW%|m1hijg8d@7?o
z3H$u%)2AdHL*qBd=Cpq!wY7)Go#AkxR37M<BIi2+aA!(J&E)q}44%yXJIs?AzzDC~
zhGQOHfKSCe@?ZD@Fr4mYYo$5?HXRf1-o3k1R#w&th(C(MBcq}ub#-<BQG*mU$K9!N
znshR&_lrYwzH?@5rJ)HUQO}H&<N~5+8g0r7BXX#NTiJ?=r?%Y?GC*^&c5}P3>P4Dw
zD=#4@dDO;vPHM{6uDU>d=fuUtl6EVXUDbcs7froi!c4j9|2u8fey^0TJtBtyfj;4G
z>y2>nf0;(^J4?O4o;5-O7rT-dzK1cj{~;MY_x=Es74HCmjtOLbLb|!R`8S*EZo~1O
z3AGEk^n-gidC$=`=I-I`Ucl<&W4YXi4FM1dkYHR$4LWIqo2^SYM5S;Hd%=`^VhZ<x
zQsoDYPTWAVyYJlYa*XT+b4krBn131N2e!YrQ_II3a9j(!L&&VACbyG_SzUB+Qs@zY
z_H+Ug@Sm|*rZzi;PiV4_`vN`eGzm{qgDfncX-}+*c8`<x^ALbayHJG!Mzu)I({ZsK
zXYB*igAzY%zRRzXt%ZTy7&ad;`Eb8%Ja4gC=Ms#EN7VaX^-!JvzKHWBU<yQ=+Dm9&
z{ongR{Bu9T|8qYlH(^B<tyWfUZeot0h4|nkDzkLS#S3Lh6;*3<lXUZWa?z>G#o%YW
zLHp|gl^?=FQR6i#*EoN#Z+yxVV7KVLqtE{WL?%$r9Zm%LQTMn$yHBez`nf~haC2rB
zP-U(B?AQH(lXxlSxScNv)$T-fln>_TF=wKZ3AiWaVsXt}l#5Kr`nLM*+cVPkNm9|i
z|1K>CH%8jhF|fFC8D(ji!2qAr{JHG}@Lde3U5$qJH;Q)SEB%5rh~^!{Czw2?E~#Ui
zt1dskksTf{;Jz8RtN#|;!<v<E{q=Q6{s_^I>=R}}^%=_}HkRj~U*=2Vl#}`#L^08}
zar}bAxUc*@eb`%8Sw+g-U)h^#2$E6}O+_(%cROBgR>mRZ-BoK3q9i1gGzYip@Yz~C
z?x%gCp~i}Q>j$Q3zP`(b7+cdtcgI=^hPHmUUW|nx^<uZJablX7ZdwuAEt7fm_;(fk
zH<e+$2#p;<ZrBt(odG-<R^$zeus?PMFWrO>Kyb`FCoh9QVu9be=b;vsmX>UF!DsIS
zlCK&HBGGp=rw=xNTKf5HDS7oudAyJ_2_rj0wJi8SPh1-(0Jd+LdBsk36lk=!H-t<<
zxl*(etK(1a=JT~eQj`N)qnXDv#^9}JD7-JODxs#%ce_$Bf!UUxX`>q!H2dT4=I`mA
z86XS}1;!ChMdDWVMRY}aNI{w~tQ*nIZBFU~q2VL^=&?Isv4S**N#1t7iA5z*oHMiu
z6Z4O0>}zItA0);nh-SxVwAL0(FD)679w;VMq@))4Mb4K3t=>_(S_Abw^0s<+iSe@@
zpLI6+rdF;vCer(Dw{1|jO6D(?7I2&t|GhbZe*8AZoM4?rEHkHU2O|R;=qMi^r`rz}
z?XewCE#z~Ck?-#E8z%6xZH{lg&^W%hxq30THWMe2)Svy{ufJXDr}G9mxb*Um0nN@o
zA^#N%ydq^YcUXuQ;bx&i3fLxA%8SY!5*KwHC}aIrxEUSW7>GPx<y<CONwWgyf3s*$
z9}D`s8pKrB(S_?~S(S7)v$0U{UPmf0P~8Nx*&Z%CyC$O{gyZ?wpc=H81@$qA#b=lV
z7HrfKwXOHt^;3ZvN)oA(j__JZQYm1gn!EB=P#4g_XxSo}uUL@Dp7D7-u*Jp)k6SB$
z;>ypNfEm^Rpi-Arym`Q&EclL&<SvUA3f<Nh1o+Y*E4}37)K7MR8lEl2S=8@g;@zt9
z{r6UiTb8-?Od_kx>(n<zhn^GN*MOZ&;tZ*C^^?`cisEt1t{K^Z(e})1Dzrmc`h?~)
z@E~YBOWmZVOnbvCmZ9Y*(&kvNHrQ#GbtOx6+Cw?&<X7Vp^!kKv>UdAdw}i?P*W_;E
zXnTv<0-*)aM+K(tFD0r1)dfp{tMQa~L%&40+RU<|_MU^%2Y<1@&lL;R?WVV$<4I$B
z<zf%wfnPow44XOFpFX{I`LoIEnz=Ts`FpQnJ>SP#AxJagQ(51V%Ydlt4HGVTm*p35
zU(m0s>XFy*Y;Ab{-;AfsgEBT2;DoziN!OUKM2$Ccthj2Ad;GGLUpCFU)9f_8>(hXl
z2Ahv4@+MQrOYvel1%y<bYJG6Bn9T6e?y8}$dwOK9jPF%a3s2D3qn6Se5*PaWMa$IS
z*eOSCO>He!V#08`%0+%NtOjTyRnGTA`<gdAP(E1U@s6&HYv<;t8bKz!-oDw+Ko-)*
z&VL-$%l#tW&we8S3phSdpBNPF3eP7Fy5q99G90osle?_E4WD{>iP#<jO~TZ@rX1|6
z`JOsMr{&Jei995=CzF$n+Uic46b=i~?21kOgzmQ3ZkM6d^}hF&3<;@s^=`5nHe@44
zL4$&`HvhiKyaX+}PHoXip}p<TZsZsR3^qB|QcbS!4DzAt4njg0TJ}tFC~4@~C1_OI
zh;U#J<m<Sp42rr3e%IV=rY&r|LUR`MV20^qc`XuT_g793*lzQCDXm{VlT_<ZitF6#
zokg)b8mA62>UHS;@uW(zm8i78<4kG>OBLni%S57~_6C|(4Q@m`439QI=Yg78T)ON|
zdz+=YQ7V~8-d<!Yj}5JDsjxQ`{|L4t1Lin5!0@DUNif5&&S&e&D$yBchJ5_?Frp5q
z2YuMCY|CYFGqBiXYR=Bame+L$X@m@|OogX-5c!HG42#U#hJ0BT`liIC*ZQU|V(T-D
zQaHe5>)o$fqQMH0p9Z`E^R5_zIrlHUJs=@^ZbaSXQR><|y(8H3%X#LpRsi1hqtN73
zzqf7rF?q{9+%-()aD3jDj%CX(*n6LPKHGt`Td=ir_w__$bc&cB>qoPd%ftU>-#Zwz
z^nNyobZ)ju#^;vka~3|j_lEV!)3x_%1=T>lwo%WP-6Qw5=%rv;lb&C`(c6pM`Y8sH
zX!PQPRkiu<w6f0Cb;To#Cr`Am*w@M-Y%@DskSPTb1pF0xNO1N}uz)trJc)WA5Rz`6
zIrr)ezEyzmjj4m7IYMZj&`lAZq+=DaeghdxOYE*L4ZgKp;*nqG3L4tT7UhH>3uYz6
zX165)(=sP&xAnh-0534t<Axfa){CIGVciGUw=-z^kybk`ns5<w*ZP46sCBWvTLy#m
ztnvte9B;A`z&pIv7L$GIcxHkvXIjn<de7aPN5Ty;T97ike_;rK#<Du_6DWPtM?12K
zN*uiI9PPUR^~ufrDLC65yo)7D2qpd?5%0H@E?~U9Uvf7+2KraRruw6Tt33#&5ur)A
z&QB*rLHGVma7F^D0@-0zX^0twQ1JT(!Dtg7xHdTV<jB3Ufxo65DAX+d@V*QOX-s>x
zT?stgE2NLANH(Rlu2!p#9E@+OycoTDRnj^BpsA%6eRjz@`OL#zy}#fHNi-$VgQy#P
z1PHHo1w>uHRQ-}GEpYC&`w#O>of5ftykTO~uqSD(H7u#2`0;BBNQ-FE7$4|g9~Y_-
zQn$+n2mUIV-a}t9HKf6$%IVk;lbdVF29Pw(ai~wbde%<Nkao-+x*qdZvNyzSGY4tG
z9Xp<O_IO1a5MJ^~0r=QRuQ@>UN|sHzeIfUtyZ^Na!A4g{^1gkt3Xm2cM*IOtAFDw9
z1?-cYzoT-jIsFBT%i;pWu3|BW`^Jxm3N};jEen7mx-`bGR{Sf|$XS5Ke62|k-X&?8
z+RN7w#RBpjGaCD=RaZu6pN=j?8ff#%4451HC*P*%&t!w$SS0BTsN8~BeG1iweQ&N<
zn!P&bQjwNpz7=?{PA6N+DzqZ1BG&V>#@kA&I#Bdrk+NvCG|;+2eP`JH_R^Vobnjt*
zzhDDxj6Gbw^HmcE=jbnA#Vz*}uD_O@&1SZNz_#6T-<oZrA4_|Co%sMVw+D(0Iz8S;
zC3{H9ScNikO1Vy2q*LS4*nd=fk15q_@b&BHc(lk6Mzg1xA{Vz?{N4hKbDgs$?0Zs+
zvzylYT@QiX%E&GqFFuRpn5Xpta{r{&3EEcMZ@cL~ydfHYPZy=EIF`Z89WnK>CiMg3
z_int4h{&cSw+@fY5A2!I{Z0q+4N*O{Oh9Na#nu~tt4QtC=&jumJ^uch)SJ<gE3ZJr
z0RjQ|#=FB;nY`>&Zms*R*;}4zZLGFr4OsAIYOBcy^|Zg<h7S$yPMGiTyIcJ!8!88{
z8UBta-MPy&78ac^t#9W>KXWa4W9akr@kF=<H{6U`Rlb`I1+v2X07L|Obh1#>VBuHD
zm>rKB+#HSaYs!J9rqN6!D+CDa3lBY*$vD;f*n0|J0wm8$bE+cVpmyy=7^xmMOuvA*
zwMZ%eN19>4NiIn-@DBK}@wt-M$w6V=`Dm7zdcTT;c<)k|VOKRR4#u8g+E!CTRKLl|
zoY;n;)=WW{#1(=Ox^A1gpynJFSGn&8$Fa!=+lxNE8(lWD9a^+5u~1a{UVyJ)320@O
zF@yyjY(AlO)b2E_t7a6oYL{TW==j|*iLUS0FXT#0Q6IJI?aqh{HVPPvGnOnQh%#-k
zsWZ1K1%iA<3pxJmg*^=rMd9c&5$1+rw|hxVkF0{FZ&q#k1Xn@Cj>D^CZbMtc$C!WN
z+01Pn&*~XHmq(tx@rptv1*7^^yysOKT|_l6G>e4clc#riFr4s5iV!iO*n&<o(B{T-
z-h@-~Hh^MN_wGt=8}=8K=ahPxV|9=Q_+d2>L3j5uX+`4CnsmkAga@d1HiPwT&SBAc
z^2fpqp>d(@J9CzuVM!trH<p%nn0prF{YqoYI?hSdGh1NmS{qnlK)iOdL}B}nKx?v&
z_^(>5YlWtH;eEz%V0G?>nSHZ^8RG2f4Xi1oNz8U^d2rPU<3OkFSYm!eEkj>MSYXb^
zSwQx-ZOGHx1ZlIqEE2_#<ose6o{j4pYYk{$?r%q3hNoD)JN<L|enM5yHZ&0U(Zi6-
z-$>YdP#L2GYlT?8w>)-@&}Nl|GbZJ!>L*Qd$KKXN@UzIHA&(Gth%<<6rEB?DSJNJ|
zS%3#DG!JXDSYi9oa~loj1Ty*x{ut0||K<11*_5sNK3Xr@BsfU}Y@x5<yK0ZGN_ho|
zm4DO{cJ!OU#JyV|!M!q&onIU2Ja)<9Ueb+k4Ig(E^kt!+NiQV=vUbSir0xoPVv-9y
zOK!F-mTsj{8PhS_Ln6Cp7sU48tJWL2mm}yHkqU^mn#&K4k5oRD3OYeKnOG34&V0@D
zE)nzpSRpqsiUXVcUWD1$jD%wL*2YrYic@IVole~;cXjyT$k$O$Tlav@<|p;`{-bCg
zwQnIf%<!V=Mr2!i0#a*=&k^^0%>fyZWvX~1)!lJby!qU+y>1#%-qQ$guJ|XFbcpyp
z*-VV^)Eb|uvLXId?#xvmDHF;IHdNb%@4ftWXknr?r3-e37*-)1NGB0`uV>c#7IdJc
zrKOarXL|Q?os+2noRFy@7<?2cQ}}APSNPO!%aaRa?F!g~ws3b@<H7UXGKIe5f4yn1
zfFoVn-Duy$`uh20STd3QWcN0WDhsw{t*PRQoIB1CNdlY3sE$T9G}IVhWQ1>V<79DJ
zjIGUw6@PHEm5%4WT>gG=8ZTwKdP8|^#ZD;r=ReU~wx)-=tuYA2wY$E-_rGp|W^*4s
z=QU(H{?2Iutz?PTs4|y#)XQ^1)QOy!Fw9Tr%gH^kXCd`znGsJczpL9grWfTj$W%eG
z7u~B1^x7p;-FJIMhzH-?7U~ZG*On-9q}5d0T}rwbx$c`E$d{FYE#aS<Uvbm9qjESS
zrjb?Z;zXa-Q&MRwV!|i}9^J$lZFqB^`>)Xm;9Xm<Phj0klJ^%0ksbj(9n)$V!kNKZ
z4nd_5<0?3#!B?g;g2htSe{GIj8pt?6-C#n~v?5jzF^D9@l9EvSSD%?r=2fD>VCA&W
z707W-XV5&wBTr`vjeO)y&6#)>UoC$?@4yTbWvUmrsFC9q><kY)rc@MA8D84p&%X`R
zn??boX9vFao>ClgZeJ#4-Vj}9lt&)dm_8t#baXuAAqDR0NwT=Wi>3(KPJ}|nW{lkO
zug_zwKTMcf4+r~`-vK@-R`9F`RX_b<HoT{w7q43sYL10ajdM1ess=cW;434hGCT-x
zC73&GCQ1eL`tjQg3f>dxt5nAwYN|3;{VR0ED2eDp-pLngEdc2W@rU$;j})+QYyt=F
zv3pgt6YPMJ2lX{H+s&$v2)rKm55zm6O|uzWNo7C}fZ${t`IDm)4nd+z_6DaY=!D9_
zu7V{vRT|i>n7&;8Om#eyFF2*mp??0QPP*!6<=_+24401p3#mc;AS9ncCCr?M7Xw*-
z8ely(?YkeF{7p?^9yDx3`~rG77+isr4vs&0a#(ZZ2ud36R9+X~^a4Z@V|Dw1lf3A6
zp^rA1%s<$;_h73&uLD{ZbIVHE`I@O$1>~1+bhbocBV)^&4I$*Y*po+<GaM$$4So=t
zU{#|4M8u$}N!75)WSp-2yw%lGh3Nfkn?liqsNdUQ_Voh^9#_N@#l?z#efa@(Q^Kl0
zOq3%dB-fPh!;SSf^ox%_1#0?ZM3trePkgA|9TPruTB<0laTu&|{NJ^^a3r(8|9LhA
z>=swh2r*3Od|_1H4$&_lvUnRPDhhV&3Tk({3kC^j97OBJ?k4h7_IoCA-;TGaOVR!b
zHpBN)Al&gv@b!2_ItfXp;*KV;5VZMlpJzVo>iBrLekqEr>p8V{yc+20lA+aA!!&x%
zQW?_iMMiw4D$g9B2#;%Ug2K%=Cgy~82>n-($bADIs}w-WEg&HIgU$rKQ4ZJ!TtX_I
zItX$RUF*|gDP_8?fjMy~gFGX1LfcHLl4=!V2s7c41g>;rbH8Bw8Rt5^o{A?_jw?+h
zQEna&+yuVQ6pT4PtG8O)8R?_^I8}o-Z9~7i27Hm{qy7Hg-Ysjvqkdz5dqb;{hw>G=
z&U3{(hVZTg6M4?NZ7m#k`a=)nC_S3Vgn1<8BW~UoB=P_mBk+Rt<6e_O1~!$AX{<%<
z5s&k*vj4+|`p5Q)?-Nj_&bs_3PIn*9M_&3vmfnov*IqbEolwSnSWBN=c@BmWSvKqt
zR1cUtgq>J!Y^=T3X6ca%Lvr{5>bqm0^N&D?Tj|F}=}Jqvy4e>!c)Hd)xbVKj-TaZ@
z_ZM#_Ie^^+q=qWvY5vMP{!ziKE%;~{2ac3O8iC5;ekD@=X(Rbb`XV?H+wa;qh9{>x
z&jv-ACQ3fMyhAQA%BKsO(@}`mb&?_;y$CR*kRZFj)_q^*653jtm_h#xF=VT!74TC*
zm*majMP7KK(3aK!Vo!)CH7O9j**RUjDx7)>C`yl-zU~$WNLVCkf28ktqi30)0cenW
zWu8yo)-dYJS6eD0G{&@|*I*^r%*rf%vN?UvFcI&**tH;5Rtj~Cc0~3Y@bpe2ix|h6
zZ36eXg>5mI>#=1&G$sj>ZFvpdyQ;_cZw6HFH1ug1`}U}reibdUd$(zpYuUzs@~;HS
zhyqnd)xu2R!lb+{ueoq$6K9W4unb)tRr?jIpZTJ6#rqUydr#c)iSVfxepxcPp1TOb
zcndhsKBIo%En##IA=>zKHr#<I@4xqm+I_7h6bvtg>|GT2>mkQMIYmX%!eAyB^t|0F
zE!C|cQWu;oV!?y2A`CrGNTGD5Q=}t|T9uyqTc~ET(v`c7MY9Ztk%ZKC!)=zWR2SV`
z7rPopm8Y~CCX!O%{mrkaQd4$EqnyUR)DKOc;@+oBw-}vrO}}mvdo0Ppb`dit4p64h
zrj)yqHyoGr(|xu*1+ELlQ)B|`hNrZKid0eTe{h##({o28K!?6GCnV~br#(5|pXW!(
zW$?D&>an_r1!<iIRhbVxuJ)iaa#^nS>HQv|?#8jwGe##=#$vAvBIpogx>!e5KH=*d
zw9||yAR6Q<OpGzDGR$63N$|-;5E$@U{i>C!ksxBVS}isbeRQ}n`AcHUJa(sj#E6`w
zfe~gV>;_P1CGs^f>4lH;7`l#$x;9Hsw%b{~cc&M2p0gRUq?fmJEsg3Aj)}M}2HU@9
zh*D@1SWh?3ZYX}nx_0m8agCaz^LNVBLJ&*6j%4dof6@qw|7z$zha;eQr~rCQB5FP5
zEs8L0Od3Cj&KD5^y@Jn#P*r}Tg)bXcf3{Ingti*y86b5utzb4Kg-+_ssAVhNCRM1M
zj9U*ha%{`++%DY*qZhkYi_ZQdF{!TpH<?ViyF?U_CNJzPjd$-n9r-0Co0x^i9gqCj
zE1%tuhcLG;=W6wJE%e+_RQ^-00m@_WsUaGH*pN*-;i7e+!H7(*4#A|V>m_RqfSh;i
zNHW7;%Z-{$Yvg6#j+*z+glXi>P{rZq?(J1xR(6UT=J4XAZ?`{ez<M%(!7sYq;Q9IG
z{jIupG>wyNC-dAh^NF1{sab<BPqqcBv7ea};@pI6*uLX#k0d9p(BZH<SH1o%8%-Gi
zmH3Fgd~Gv}B2<6&{#gT4qcNU?=b^i!USS|o*Ez$PpV|4H=<9~)bMq2fYfM;AP2ys}
zuu7_g5T%$#KDkr}=`W*LfTWzd43$EpS!re%zU>}^w$=|du-~<{7MC~Dlh@tD1yz1y
zQD>?4J_EH?`*Ne&iX`UBn$iPAV^Rg@$8w&S>Pc-N;lnl(RD5>p7G|G4k*(^yAW6q0
z<K%tlAu<^iRJFUA5vI@%O{Mf1`wg5pTh5g;Q_f)k?tGV~qjFH4pUIP#@y<S@RnDgi
z0fG;?Z2tv3fp+#d#E@~quwauGQ3YqF+W5|7PpHUj!U!(?B3Ik2ka%Lo<T2C^G^s#Z
zYoG9A{tuM8@q3`GOql7e+CN?Wc+X|ZN!W&;X2Gl=Z2UZ=wMu31zW9GJQl4zQ7IYqt
zRX{I1y@SK-UJ429IJLh^d#i})g3M27>><ZZs2fwev`$neN>&*}_R3+m{V%S&Id|zG
z7d_z`n#Ot4nKe2gtc<!;OL{Yb@8*7B0J<18+Oo%)&k8@8qt=-J2TJ(^5v1e2Zf^F2
zq=(NlAzxZ*Ga>`d)9=48ER7zfnKb%Aj;%^H#JDESH$LoAX6&lE3SeGgdGD?NcPavF
zUr{qSmAZBODci^V%a^C~w%=!(r}JzMi!zcF?o-d;egU^W>Hq)r$SF_~#U(S<Vnjpx
zJtZ$FVQy4{rkVLizCP!hvUi8$HfSDnNYIcgZf=d(8an>%6bPJl$9;kS2F^4Mp8_FK
z;MZZ+RErX`^5C48PhF6>GuGQJOc1A;PKIW>ckTU$7Cf&E!>j97u^sm&F#tGhN>Ho$
zFSdJhnab;WG<0e&EgD~&LS+_EwThU*crw5+ffE*N*PtVs%N5xT6mMVsgQCD?=4R7&
z0kdt}u+zb1hn8so7f-kQ`hQfXqI4~W!O}iXL4%N&TYh=8Qq&zY0~$Ght!<oZN7X1{
zyT9@m?iuop3cfKMzN9!lsr%JbcuoQ&`;^&P)CS~R%f99R-zfW=2NP<6T(XjwC<DHo
ze`mF7nhq`UeD&bRk9%GmPqbmk$$Lj@em(2ipd>EEC3d)J|AnG{l>`OW;R@J9c;egr
zH{S&qf2_7oAHRvGtNI&=q$ID|J%&F>?>}`l3syi(2>?vXUKw7dP6M&u@;A?!ezP2a
z76vV@n0?Dswcur)KAf#($thBZ@39%=%A&m0h|=fk0pfauuD(+rcrSVbfYiq5k3Jp+
z-AlgO{V$IDX9u<Z9pA%esgxP(&}WK>Lhu$)eHV*8tmkS)R5c|gC3VC*Z5F<?Fxm7z
zl>V7tID5C-j=AWTh-T;(4-k|MKo)+@?#IS|$Lv=Cl^4*W^b};;;2Ps;0-84)WDXrP
z{wW9>?nYGS+iM(8*r5Hqyd<F5=>UUCU8AYSKq}W%|F-X1JsbMll=q$7@RO^9QFZ@r
zF@Mh8epI(^G_Qu;t!fJ6lq*9*R{_-7>Q<4$%sJX<#lWMFL0%uA_z+*k%<GIAl7ik;
zZp`sv_C`&Jc}EC*|8#mP;Fg-_^X2ai7p^Qmzr|+B;otmpwhPDOsn8qb&FA~UkrNan
z{xNAcWtyM4=7Y%>z{;K7aP)Ci%|_woKyKdRt2`6n*&l^62VT!qYc<qyF0Z+Bh8@BX
z{2H#3#@q9kkNX(|PTt{b_t=%Jv1*w2)<MIBD_w7v)AYV;*R^MVaJ`1R;7cCZjAs{L
zuYLG!QrEI6py7kg)p@~ONn_LhT<FEwI%!DUoX9J0k-tOhByuk-u-D8wUqh&d<q9dA
zZIockE|BcD_7ZO~8@Q#uKVlb*++oyJD_nKMNh&KSj>X<eS2v@?ao(q@DqWmuqC1wY
zQdTF&Xz3qONHd2exA{ny$U2c?OO6=-tyy1!Eq{oZ;U$@UtP`qkz!8O7KpZ04rWCJ>
zrt4&4RJp^y)BsRH!E_9t1e-r>aAIxQ3R}R#cVp=Fm9^L}f8#?J+b%k$Udw7Xes5s(
zPaIyHy>rF@3>hLTOkd6<Xgq9ve<j}aRb2{3M|k49Uf=P0oB*48HKHN&;RxL)folyH
zisK$O51QCi=o-LoOEIh3tLz*%M<)vBx?oA8W!bJZT_M^v+*y2I1+2^5)4w`S)(F#9
z9iKDv<O#MvZ&#|XoLBkduzWx3wJvQ0;NHAN|K(kEk;&rC$D;d>Iz;@Mr{{MXL&82W
ziRDkf_c^@E2!QzKT7YgJ(hDuC&cPJ6Pa<<X-#Qt&<vv<oetioI6ftKT-VMG`z573d
zYoQM-o;@r5^4%s(&FoDS>o*`%OTMNX9l&Ml71eJrudnh%pi$XtqT3F!?PnV3`}5pE
z_IXlcvbInuM-0e7)u}zcv-foGg2#ir{OniH49xYF^08xD#X+Yh*GQ2q1)`*uv2g9H
z6iiIe_2K!&WnF(}?i*we9_3Dfg6>w{4>eZpLq5|VO65~K-XlnX8&k&x_MMj9DU*|c
z7*+qnp!EstI$&YWI~@hgzi9xF@dmJ52l3DYz~^$3*q(4P@$Ie~&X7Dan$|-SS`r;P
zjQ`)+wpn=|Pg}6N?HYnzslLYIb`8}M$@QQhdYk<M`q5RMHv_lgR0+|LAHZsBKYkN=
zM0th6sA0-CDl!nQHv0sl3yLhG$+F(pMpe=Izh1oy>p07&^drS)Iwlx^HL^mnuj5)P
zE<BiGZn3}eL8!N2K<@7I?PTw%2RfbX=2kgF_fKKu^?HwGx4P*EfH4n+!F777BlXMu
zu1xH6w!iDW){J9=WLFL>&D772)Ou@q1L(Iyi}!TEex8$HgpmO!Kd)eL^tK<ToDXaf
z`gRmBC@poqsUZBnLpS4i6&O0->wQ!96NTRQ*m<iycBww2SX|Kq_PDNM=HX#hHy5DD
z+ffvBY)76rOYTU?;}rnDJNL!!nu<)c^AC>OuM_m-MKS6F@=cy&-{iPRC4l_I`dpNv
zCY_WtHt^Wbn@EW30MymxlN0QXrV!sXq}tn~2SqH0)*hst`7jKaoHidzeiJ}R3a@YA
z4xOgL2lAN^9;a#ZfzLV9ZLZslPFC1^UmyVnp{gfQwSag%6>md|Cx`VTdI6hUoQW;3
zVDaHh2$N2(z}ultJ)aJ~|MPejTrCKe(iG9ZLpjsW^Mwz<G|$GeYOp9r{?K!iXZ1OY
zx;`)Tz7-Kr@~%5jXAwy*__4vkn>s33FeEheMl8Por~dUl=0f}NHD{RNw?{_V{B|E!
zjT(xOSoXJ5$45>g$|6YOQtwp+<0$Ijub;SR;?hM9`KHjT<1~z%_aR;9M1$hpUe#Z4
z^Mr*d9&M`l*avpF*_?j=995tz@XF9(tXz77wRAR640)CuahYjdBvIXFal7)w%r;S`
ztp)Ip6@UJwMXBMpyQfRtekII~DDgkbZiX2m7#V$a`mC1x@z>_}S8tqU3^$lWk@J}A
zna;9Zi2_8Cu;P~92#)ixubgdL2=4sbca;^&hX0zeY>A|5o4WWERxtF2l&L*sl(nHA
zq;=7am#4M5Cmyg8yFQvZ50vk3JYV&)mSg3u;@$qvq<CMjf-bc5EE}L>W&NT&2K)2F
z|HIXL_%-z{-NQ<eAT1Q>ErcqeOK%c-uVRqi1f+vV2Z7LA=qOFP3etO3Y5);Iiu4vh
zLFo_z1b+G6=icXi?)wLv&)H{Y?|o)wt(o;_|7U%ptPjfTncc`dj-V5Xu>RV01<!9d
zoOx<p87&(gGOoDTdY}>g7@JIXA2&iGBu|Slu#%LXe-}s;TY>lbeFhy*FTJ9kqsUtH
z$#jkZomS22)yM&pq=(j6$eBc3yF|~xB!6ty>T0uGQ8NEu)0Ci&A^%2wGef7`hfa1S
z`6l3^bZ+}<BaK3bZml@e`4hv1cF>}%Wf(Emu)>G;Ad?=u5#;-&P(GMiv1lB0s65*3
z+AA6WnpW>_(hq(_k<ukt2R9zM)h*J;3BLW#@Yj;A24}?QwCM1gZONQv<bMQz(PgoG
zcG<4b^|gBndcg1B8qV}T|1=v6Q1~EkZ0uU`S-Z9!sP!|fnq-8R=aW~swqxm1)KgTD
zf!}g$E-b)ofoq*O?(JYxIwty2fI;9Gw&2?f5!8?O;P-4{7q$<rFLP$Dt}!Q?a1y>e
zax*@7pt}FB@5Nn(`3A>&1()2!T^2hWD7(*QF#o>`Z^|gv6+<sy#$?fKm;ka3stRQP
zTEdE=61Xf2fc=sn)N#lymRj>7&3PSyBTS5ltOqEW`kLCXMkyGUzdk4C6>YU2KBs3|
z+$?lg5-cLH+DXsVD_z(+pdlHp4{$YggfUnLqZ5i(aX{9<Z>Gjkc<p&YC{JZy9MFPb
zmi|vsL*$=5*)!7}=n6@@O4!VshSSYdfA9p6F+5N=yAwD2jd}6dw8n(^L&tp)DsGiD
zg9#jM;raVipXvJATz=(W>Bmho`AYYAJppwsn)}7hht3w=LE_#;++PDnG;U40;0kFE
zD$z89<#Hfc;K&I0>42rVJA3xphiBVuLDig&A3XL$8?PR|nJ8IM{C8|orvs>#f?6%Q
zueWNLzl1E%3X@Q}W)D(N=IVYFC_H0DgVbqvUl97Hs(Ol7sv)%xe!JRoNJw*x#?ejj
zZ0AKYgP1b&eSFqFzl8XcVZGSg(iW6NP}LO>RF@!%+|U7|_I-DLlZFfR;n~L-%6h0#
z+O`7d>HeH`BVv`_WSrApwTH5-p0k!mKP(qspFV@T+RM`8f6mekMsRFc*&}7!D`_(K
zikzG&8vd|ux){j6h$Es(yf%IebcdT(_grN?8Rcc{Zh+ksRFrs<v&iIfK4plj%?;w2
zU_Tye`r!t<36wzLhv(v^dTvFx1vYwoe9&Sn@q&byDy&Sd){a<EE230D$a)*p{-(_A
z{RHl>m+p{9k!c)PYiwFrk?w_4n}g`D_Ngpd?#W<WNscXd(mx(bYxz!N2IOK?`d{Nc
zHbv4N>zm=`mZ?k6efjLas}sgcqOhn46n12>Ew{=-<bjuWWI4m9uaJj%yo}zy+W)cq
z9fE4f?fr(D<m@l$Fr@1P$RmyBr_F9zgCAjw5IMguFH@tJ>>SgSzd_ztYt<;(An=3&
ztGCM<-$sXA%6Y+;p34v1vu%o}3Y?ycqG|`a3c@4GAEaS!t`0JgBx#3>>`*;cT!YP9
zhvcL*epF+SJ2LkvF^R}KB<Gkrv67dHT@j+Q1-9);{_**e&~zE84u(CR4X68)6g#dd
zL5bO$t1VB$@hjx^KBWvrua15YcKk!HET;nb0@+w>aUX~Iqm1QyE_bVnc<((C5jnrC
zKOdEPRlRmcTl39v4xJACH+$r6wA2-=QU#FxOJ5K$sQ#AbS5U7%2E5lJ$;Wqv8*>!M
zHr9MYS;2`JmmgBttEYYy@|=qYAJ?m>6&>dvk^hsl>Huhp9oi705GsRpqH5hv;0N7T
zd8(`4S-TTZa{GjyV|7i)hJ)?NwvStdPw8lyR)9`g&Q8Q87ShjfvTxXOV|1(aHZ6EG
z@@g-1q1@wg{#tT3bck%;y^Q(ZzkhaH$~J?P$6D2t5S2bW2V12UE|L<}{*uv4n1D%G
zYwp|?q=X93)$mhd9a<r6BGGhGF&UBb?PK0O%02XoY~k$VJcwC`+34BHI~76L$k<VY
z`bPQ)dx#=Ie0$*l<vf!Ll8gop<b%?Wl=r+pj(Zsda#me=@k=S*Q7!2bz7z_0czp5W
z5yM&dTU2&)o`ow9N%v*W5A&MJEUTV484ee@x}W`bl}y#)Zyjem<I4QQT`ODIy`t>q
zv(QJwY+S`^I%#sn?9m7|ZNe`X)27*Os3u+>ibglb_d;7g1N?B{D4o&dYy3V6^|PbA
zE3>ezT8{;;@IVd}fSXE45yd1pDgY0W%OcJ8MSnI8`1<?DDo+dqGYaN8{I0*C60!OF
zanSOPl;+v&+#x^wIxw?UVXwn;^(HrV$he)|3CFKV>>7Q(R&>6;=Bf4mTTP}ChGSz_
z`!4_N$?+Or?)=N$Zs6XhVuP-Xn0uqy=lxce%S4j6X7{k|cwru+IJNdvxzRkg)@k5B
z!9641SnTHnFp8E|CGu>X!^QA-h6jAvZe5nd$WjWTmDP4tZF{B=c<JVS(hvv6s}gbX
zY()6GOsXs(98~TL>Io=io{G%VXC{QW>p;V<FM^dEX1}txRS!o2q#NQMgWN_{xJN3l
zGc7O6^S4XgwC>{V6;y*Fvk>5X6l37qs>15lINoFAL%j&8pi>x?Wc}Vkd|AW&Do-v{
z+$RLfFc*hMx_883J8SW3qm#_QmM);(d-q1n=^MB7tlqlp5M$NpNCww{TDS?+!;NET
zmjs`{fK;}s<LX)vPH5$IT+q^|1-J+Oqp)dy)wQQQXA1o^4z=vTp66BP>{0pzlf7`J
zPL%KCZ_;GAtPc{PWq9<TSpYK}V*}d3UnL>a=j4Y7=aZMtCi25p@%@}TTXch@B0Fi6
z-w2d_-nsV(*%}HNfADImXbSWN&0bOz?(?AoZD!sMB=(i`&=A8d3K!rAir}Ia;w#FO
zA4dPqs~~Luiijv^?MaATTOCBy0<NF0pL(p<BVN2l9sG`7F!bJXASUVR;xsi51WEf+
z7I%3O-Wtahy}IoZfB}Zswf#XTU$kd)HFyU45UJiQ1qK7q?9h~J4F}@+CQy2Qx}gux
z>J7L0Tw=M}HA0WGQ6D*S6ar^fda!7rf&Rvcva1<6#Kk!ooXsBJLk_ypQwyJ1!_>o~
zQw%s><ckHOnOsF8W8U@P^41uA1LmHaOOu$m)7bI-WvH7TcVQ^h!<XMK>2Vcxh?`zk
zssnQ{sOPe8M?q;?EtEnr^r=SB{GSh&fYyVp#nj|l+FLE;NIZg8N|S3fXg9IcwBTCw
z)199Lt_Kk}65(yu03e}rZW+sNxh@d}>sM(~Z$W}KpieIth3uW!9WthB?cqS}{#MAw
z5z!C0Vs`mfpD6~+0}}uA-xus(sZ`KoW)!D!q9<Jt|Mz7tEQ!aTj%bvdRi&$Mc^6!p
zC}M>2$H{Z(eI#4IQGMC<bnI!f!ze!An^eF!+05ugIpy&bg~Sj@J?<=?8nR5SSqJ2@
zW$FXo<3b0#04JUlOSuyk0*bGYgnOtEc-JU9Ud>mnB{wM*QA)5a9+i<5q<_a);R?>o
zP!2GG!uFm$&{0_$;m*`ArrPBXcL3hau5}%0;d#x0+^q>c=H5fCN<FRts)HDf<Xf@2
z#O)$+8pc52TG-n}gz+=I!fW0KZ?&c;3S^7i1<*OL7o60AbW_CwUbChHxm-V;j($i?
zzQsQ!q&l#S)K{e0@q>54)Blhs6<juOd0FIOX6fCrHY*?@5)i6fUZT-sY`l6GCeM2=
zf}Ark-KuI?^z&kGj1#}=$EkIuBj_BfmeeQNtp|@i$U|})RQ1$xSH!ngBIVF$FaC8!
zkVOotzdQapim%3Jt103441q{^LD)(Ura?wW&!K5ow0@@fd;re)d~4fFqe@P<wtT-Q
zuF-yNYX8vPnbt>zSW_8kW|78K2CP?;ORG>KPV-Hr;}<c*oG*HA_An`37jo5O`9QsI
z=ZMWfQ2-O-@wIYZk*?9&ya!vBBY85RC*!T4RDCBHaz?*><DFBb4DX0S$rF9?d0_ny
zji91CB$YNF)KB3N7dqRN#`db|6dO8sg$1WG9?;_O`#hOuYx5Tm31+FaukvIn?UBp;
z;iIYF5r%;FT>pf`hQvOO?68XR`L<c|c%IjN_;VivoLdnT?s=>`5<YZem_zt=Sb7jh
zgXR(aTOln)x^k<V1+7<{XEAf_zKW#opgCG!+UUOLcAK#9x|gy;MhsC#hH_&#_3<m%
zIUmgNhv!k|5iJPyZ7!C0%V-5<lX<nj+*xEF7u{X{?_v{7fnaw*aV|*MS~nYxFb4<>
zWjR;TAOBhQw4#;lo$GxvbzntX9TeI<d{&cny}#8ulRMo#h}diAAb|`6SfNjd3t`9Y
zP+|+7S^9QmtM*^|1u|Kja2@vFV#Mv6H#IR`b&vzy`Ha@OJEj4lN=-=mbfi}3g_raW
zGXu1(pdwPvl%!pzu8^P3n>jN9qOTSv+lTMPadKARMJR$=DTi8+VAL*v>RYCX@~-k6
zn#ASr*<aKspQf3c?rI^&a(OrLK(~WJz+-{=duM+<cP)592eH+4E8t@%uxU?BH4P+T
z;}h8>!?#`UKR@dSa3Y(Z<RKk)Bb1Zat5w}Wm8<psjL!@F*lFlK4ehY7f<{-<a3NkW
zfY;?xeK~WJfcpMK8d#l5`)K}<J{qydGy4LAz=s7#@~b-Z99<hj72XWXa4cp*Pa<$a
z%I8c5H}I;s)LL2}cQ0nt-hNbNi;MsN#(*J!Ouum3>zA4U%&~Z=U-mSvOb}*2sRE;X
zs6`hUdecROzpSS%u~*9J@VJd&Pq^<ZlppkUb&Fauv7FJ6O$ABGG`vw?*l-_ggiMaD
zuQO4bR2t<;7sl}eIam2XPLpc?TmnbGV@(_!?_HN#%H7eB6HVsK2BvnJapMW<M6}+i
zFHH)n-|ip6W|HC;pzqv0W6-4QD6zt|+-Op%xgdCH_i<#uZZ{#wawk1}X-HM%VAu3Y
z8`2^=Z4I~|t(1rG!tO|(VR2=IlG}ko#nb~2M^Z_ST6xF>A=)xNI`|UT6j3;zz(gWG
zsHKQmj>_S6p%IjF6*?v}m-^T$BLGL7{BrILV#U>2wkVId)MxOeK3QbdF%{-cvHbw?
z3;V7%{mDwMgFb_;jPQu27&Q9qY11Ct9)NS|xLp5JulRfnvJo(U|D}!ccx$inDVI3(
z=6=Gp0o!Sm0q7GXLZW=0=64yTgL=ao!w_NUa6<Am`vFon+;>%<Sehe9+&+O4>Ik^1
zGtAgx4zv$dYlFSS<%<Py5^rA?J2Vzu8Re#6eh0*+T@t4;`<-&&r*|+iTjG7H0SWv;
zyiqNV_*s$u`9+7*#6D!M`3LQmlct=zpo4pMrLpE3_m@hlKot)W;`X}SC?X2SZW|TQ
z<B+Tf6^>zK$E*7DglM&&GbdQ|>cl~`Lja7DL>#J%dFKr3SYY;j*0eK33bnFdXx8oJ
zP2Gt3X@r+xhYowT5K7b^q*K;$(OsC=gFs~MP8I`LWl#~COpV>uKX)TT63ypQHDvR7
zna-&U&Lunx6&zJD4*r)4mAAiKS@Vxf=tpA7iUBfEy%C0O1q{d56KU-T=i7hRoIj_7
zzXLGo%3W=QkDv<F6IxCDwsvL$B25$-5HJeBIJNx&p&?c!dK~n3;f&KN`hsRdAs1my
zTq1^j%pA-N<SnBJ<b#K}CFr<oL(M<+0(yU#PJiK}ry<gcxY}++%+UvO?x98~G7LtD
z0!^(QIp!C}eava1ca%Ct)r`)5JSPCQKNnXIF+)c`GH`%prdgSWff$dorYY(j1!A~1
zDwleqE!s5-gK=@wqKVw4yfJazF{QgyzT&}1iGJy~>hnRL)YtuZW-nRt_bPP%mL5u(
zQY!iVDFw2wc4pgg<g0e|oW~{3Npg#C;h6Su0cU0G=u5WsiZ)PfCce~*)*miw#mmQ3
z&o_dFupPostM4BMo&_!xv)O8B9wOM?y&skI)>;b{gF~SyHpX^MY!a91d5P*u;oZod
z!_JJ{Qz59rpHLbCd$pebvp;brJ+|%U#cfRmYPDisfW#C^GYL|zAvqOof~#z9kNR!N
z1;O#>?J%^Wue)ZyXSV~|yMRwrsK3~bsJsQTqd8uTo<f^|G9XF_3d)SAplT3h2GMau
z<$w4mZ7m_QJb07~%>|0XbIO^1oANk<-B2o)(}{kjvS#o!#oW((KkFGY<kL{P!8(BB
z$C;EKtHgUsUi={Sq_pihN}mJ*)w|Nw@ch0t1p>_Hh^UC)=hc<xhK$os!~61@P3K3m
zPCd`y@7YB63KIg|YcKn|^^s{V6y!dNUzhaBEu1DIQ2E}Yk>9zcoP!4^&n{K0=gyOS
z{@Bt2Z=GdDYZU4}xNptdE@x+&X@pC=_Joh#x3fgmxILd~Z9Iq)AM23eucSJ*-8c3K
zZ*(?&kNxrQd_X(pF&L#yezZZ0GoX!J+EY_=&R85BnVy&~g&ib^q@jw1<Ve}pH;75r
z)|Y^vAKSM-IFF>^XouuxU4Uh>035H&Ntryx`Xf+^*tIt~F2yQ#TfL5n21)8l1O@h%
z)l+Yj4%h~?&4I`MtMWk3Kfk9jo05^jx}Mv{`a31ymR(ejR-c*1jC$ToEMCdqd)+by
zKwgGSLe!_#dvnfgR8PGwM7$3R?CICnSTUAuYnhpy-3!JvEyLW%eiujekmv}DUK}M`
zx0$Bjesk#f(TdRlRAXH^@cq%HXinuTj+2Gu-kzjHsL`2v;M(_7?*y+&Q=zuw>hDi7
zBM^z&>K0f*PZhIBe9~_IR6K(t3uJ~&6`l+A$A)R`&@Ia`4%fK)7JhTy#Fi>HD24CY
zJ9e6Rem{$(t8E#<M_>NWnFiUA)nx~=i8s?98&aCX_n1Izq#Px2)$B%bCH_LI+5l1?
zvugNOqm<byIwQCZv&^%<cs8?<bbZ0{#$NSr4wyn^{OtH81xLa!28-%kK=;-14r4J@
z4O=EW(Iin=6<?{UvcW(QhAn^dclLQUj$1UwJ+Z-MkaEc$u<u7E3J@#WGS;;H(3t$O
zFd^}e?&g{-`hh6y8=y7*yEwM2z^{=nv1--KosT+Qbp4l%<DwLwg{qPIT)#p0jQW&B
z9*wQF_i6XuI<eCU%tYh>Cn*y`x$a}#-rJJn51(0Sd%Hhp#Df*k_v6c@i`1((uJjrG
z=3LBjShcRvOcredMr{%Bx=;G=?q4c^=ByGP@Q1qhpN6X54bHe~`t-lCPZ+K!lZ+5j
z+$RyNr#xPNSCx(2{ic4OGHZ~7d22f9_>hs4azquG)*ns&K5PvBM5@q`_kN-PNz;#K
zaM;%zL?^Dgm7}#nwEUFVF7UG+=w0+uhi7|wsa~`d4Ri&4hqOjXn$fSLV8&iJ>B(JC
zwri-+N`_04mgT7@XcT~%D!8J!HPSmGHQ=q-Gt%4tP3;r9naNVWvin}(iPGLG$yoGK
z<>`Mg78?wuGdu(%5?)G$^Co$Z)}wCi!JrP|r{CA8C_A7lz=sa+f!>Y|@ll>k$L6*S
zI8B5JVdky4K>ufn;NRQ&<$5)I?qMvNp9Y$`syeSO%e-!mY4_%S2R)6Hw*FQgeieGv
z@#@@{A5EG3CG<(1!O+yE;SrlfPJ5g<p)R(3D&{&f{K}~q-97p)^nbE<vIs}jca+DD
z(O2UnuJG$|5eqWuOxQWN{cf70H7RZ|Y|fNu2jlMQZkrUqL_ak*T<h)8!Ap9O&PjRn
zillYn-`4*Gp)v%FAZr=79L^mzWDddXgPaf4#>|1v{pGM1BK>+=l(avlCWs<7i0k}|
z2bNAONE7CZl9AAZyaN5JP8?$T&vLSfB5=<V?WpqO(kay_A5|w#!Gb5#L-I@%1r3q8
zi6D>PJF#~n<;7-0+JFVoE9evDw&u2fJ=|r9dwn>rCDS4Zi~=jSJoJ3rGjJDdaz;ZI
z>iN0l)K|sk26oa;Y4$7BcjsrA%m0^`P#zBsztr?~gNJCYyT6hA5906-iVJ)7&o{k7
zu2z3mL#~qczViQHQ1c(qEGq_g)A4^&w=ynLLt5h-T($rEJN|{JeSWBnGwhRD+hjy-
z1G(#r`@diLFMAy_{<B=N$NYbHM(V|vQ5P}ag8vg^{*Nsf@v7J&awdviO%yHdb)~)?
zy15uuYyq>Wss1IaWixO6#Izdpp2@oRFPZO)*8f_yGoYG)pir@6S-vN*;zZ%a3wVgh
z0PXtaQF3Qz{4!5x{h4e>&IGG}hR|aBbmAS?v6BB<b^};gqNjq%y0bX==<qrEaJ09>
z30<3P5vzt&kNGq1`5tcZb96I!u5(9!CmepBm-Ex-KU?WPTj4$d_pCdv7kYV7S0Nbp
z7cjchWfEu#y=gFCly3{|2|oX|Z}ed1_`fWIvo@4q)?;bbeI>AM&q~e%9zyJGbz02?
zvVN&y9`nD*`akblxsR8O=zZ{Wwd*_1FU<Yf%Kz<`*Z=sXn2y!}w`RIK&pONh>jUqr
z;QaF7CtttG2g+kxgBNrEh1|n1fJe}t<11$yGTadbXkRt_*TWzG<<vRH@;;nfr&3&J
zJpQj+g-LK5*y(P=vm4xYYCbioa{8}@{p<9Hg_!=SO-4+tif?Y(FJHVp^7#8!e0ian
zdim|qQ4Le#ro466pF;WYN%_=&@WPH9As#1(ChmQ+Ru6Yc35i+x)K$w{QLBs${2Ftn
zIaTSJKuUcrzvXw=vwAuxzhk7UQx=n|A2qdW2ie}7W4nH#Lh7abMA!2i+0uri*jF|2
z5*^|0T_M>;S2*pEHyF9lbGfm<tFo*C)s}mO@gA0I#`Pc0it>{r96M1*#`%|l<7kZg
znzVK3uIGbRzdh~_U8Y%{Su~s6ZlPQ-?b=M0S_s9`$eSKstjJ`ty3=%6IBn>qR>kv?
z<v6ZSZ^v*mYzNvN@;zomSoJ&-T&K1dQ0Qg!@W#NddDu2{ll0+9+Cm#L4H(q#M#K!=
z4>T!qHDGp!8g#H%Ix%wVaQdaO?ZD*}lSt2>Arn>{s`&2f`ICPcm7Wl1Yjq`8Ld!(}
z=DI+H(!tjr_({NA!cVppxB2ePH#aGUT{d<4qLus)Zu<8pOL>+X*{iTk-kX;m=x^@J
zZ($b)iXqH%a{GmH^)|h~tg{1gD55ys#jt*%gH<Z4;_pJmyg-)p?$E1jPHMn#29JIx
zuDI0ukS=iOU8|b>YN*pwst%^sgIDNCW`$(ev<(bZdV|Z47>}{-<mHr4li$epI8wzm
zulE&$rkA_Xb)6@h-TOzIm12Og%QM%`Pu|$`fG<Srfrr9}aWYz&*~5l6{m!@jpYQ6`
zYD|SZczd?!vngG5A$<#99Qy2zPWiOF?vHlp4fWlI`k$P4M^iTPZM2csOy(?hwRr5#
z65dr|WQ%dTrWcJpRV3Fb8c)xV=I<B{e~&$2;bYYq?xfF|=wMSeO_pp>YtK3^MCjTF
z?wpS=w~Xf*t?<d9GD56-vG$|9cMG)Dj78$=+r)=P3h7t(lz)dYHiRh-ZH&vJjlS{l
z;rlw)jb0T$>BSw4|Nm)$weoZb<VkQVshXsfu$Z^P&jQ_-glT7+*iq<6#4z+`ZM~FJ
z!-avYs;LQ#JgM)$%DB_E|84ndxq#gT*<vE#zS!#iJB2x<a*;-5QwbP6x7_B<a~zUC
zmzCJb*%iAf1K+T<K-;4N_e_Ct7m)fgj^W@}?guGs3#+;WhFw7?dj8;=cIts^L*Q?v
zkx-;0N6I01cCnRaFv{sQmnnmPmj8|i+WsL(>A0UU&X+xzC@QX}(Mi3Pe_wrrjex;U
zcla#=2}Ksc@s4;GRW)sr^KHK{o3yX^k0m?R{t8sAq3~%Dph?5OdgafP%BG|Gd*b%G
zrSs((H@Yu>z~fZ~%|p@pFiS+Y02B2bCko`RAx%L5VT+!6B?*wm`=F1scnCjQT-1Sl
zL;3`HS6mh_ch&dZ$+@UKzx{@&$53sdcas;F|FRwUr*4Q*7;bzlLcThksrhS8ZO=;9
zo2Hs@c9y63sulYC^v&^7>&vHOmlerOq7-L8yGwyST07WWeBkk-_w6!0*dZ+Qrl?j|
z`^-E`+B7WQKZ2v4%8wXZMqwHx-x&F~NLBrH^^lFOGPOR0X!^&g^SGz;v(tp?bW+@n
z%f%wz`4)Fasc{a6w(>&?57=bCcQ*z*QITZ}+ww2XOpU>sKjtlN1dD5&wmJ!NyEMQ1
zyV}`!bxn6bnD&#=bT@W6Yp=CaOwmHGWGyUlOa=A3LtjDat;4w?%6Dtw@BZGw1Yugw
zo~Roqar~Y_;x$5yr1x6Tq9c3Yt0Mrrzr5IqfAD8Nh0xo{uoA!?vs%<mbJnrbP{fHk
zSZ;G#Ei6#l#);3;(c0XFkoX>TgMY@g`}E2Oi$Fdb_O{s^)UYfI>9guW6V_l$X2a3d
zxhh+>#j#ljwXu<he<^Y{upY3CN`YL(4?nAgvY95#1}88)R2^atTL!#bY^?IRaLnyZ
z*vC#U%#a2=$s(EP!!pzT2X?pL_E~<D6$=wv+m3LNctvwHB)+stzL5&YT=GljHkN2#
z<42!;?+nhU{wNf^zBE|%TQw-7WMmzN-0U3sF?>*-f3Hq{3WjRT_U0MIu5UDF{#Y!2
z{H$qR%Mg3`^GjQ}dMjv%#bV@nALH%kX({ei>tU%1<hj5y6VydKo3AhyeW2-ysLK+c
z^nCFdKl-ONvE$m_fe<`ol@IiS|52Gnr+5$VaaWk-!wj!Gq;950MiYLML?1utGu*eM
zvhqH&(9Fg1%&2NqHV=k$f|Fo0!{(&A#`iwlmbD0~nd2fIQkqpLE6(i%mU55ybL&!5
zR~7S3>)wb|sDkz9{0720tsoEku4epqI<)6J${z%HA{JLeFKq?a?AnDaJLj=`dt#bP
zS-d?V+6a1Ea)2~iaw-^voUxwj3*zU`KH96N2g&wcokrCyc>elEIN#~DrRHC+J^%ya
z#){Kn{^}lcG^qtd?e$z7zXZ0L<I@RoUZdjsHQ%R&l33NBDr%Q2L!|Ladmz++Ge!LZ
z-4Y?UdtWd(-MN=UQDt@M_o?5#cJ^(4fmy-szLc$wt>h?E?hYe`@)11GeQC2=<2dM>
zE7Kms(Zr7|3{$xXz^O%fTKn&mhJGm|vQyyogr~L=)ZhNPC_Y89FGHF&(g^`B)^wu7
z+9jo#(T@vdSO|oxJN<e;zq`)4?941hr@}ev<-0j0!PlFsm0`bXqI0%&sW9px>&I7!
z@J+b?FA<XSJG00uACVzO>F%q|s7%}S=S1j({V;~J#$3gqYpDbEcU(TY5#sx1ZMSEC
z+xItSn3nsIdoH8ibXJH%2bKVylX<pL{x{q^s8C2;Uku+wOb7O=^F&&rsvN7k(EAf@
zs(%k3-%M06aF#QGy>r3AEl-hlcb&azn|$l&ZC6q^XV**3i&$qGyc&Hid9an@E|N(#
z{=Hx3)0q8op69m3Udkqps+M-k5%K;To)i7=y5$@Bb%!K}7Yq+{348t1y6E4~>m~`X
z8rWvc_7Ilm76r73(ui(rWI2A<ocN6=`qfW(!Tp*wp<d^%Lhy|i+;GMEvBxc@6&FHj
zUEykbZ&-L7HV?maYYJ2RS<V{R(Sr2~9QsGTtmK#RsF(5zZ|q_rJx&R!n30M5*-rBG
z1U;c3Q#h~^Igora7f$TRt70C9ylJDDR0#W3KpI=`T+sWn+upXD9+S&yO^IgjDhdgB
zBv5Wmc-KDSlgRS3&pzleic~HU2#9>6*P8naPU0LlB?6=zI6I&<By*FezoI`@3WM45
zIZZUW4XIRK!vJQAW_=W@ERe`mIF2>d!vd0$#f!4OJyzL{;#?t5>XBul#js1H6FyGD
ztgyd`MgP@I%!gT?72*2g_h75&BOnA^*t|5?Ekp~dO`uE?kU@U;UpEB#pWktSyj;^(
zposbUCnc0fjta0g2cnPzp%1`_XosGfl|-y8<_d+XKfPeLn}e?0vL?I}IpXFMXsdtM
zsC9cu#{<Q%9Q2U(CH`8}c>`VGXGcQ_j+6z{NNk;A?c~@N*z9F8WeB!kBGJvCpJ-?&
z#nD&o8K(u@B0Kqt=<vo8K}9?L_|YcA@Al3Q=Ch8~$u}oX_42om61*cJ^lWSeQZ!mS
zm&hx<l++&e>ZgOPmy<9BAj~M=r&eP+=ghEVEq4{JVtCkOEq4Q@;%EtMl;_LiAn-6w
zzaA^*T_#~*;hw>y4Quc+I}#I%I~`FyNoCO=n9ubLOng4!*`L|CP@}2uYy*vmjq0Y_
zUTTL@xn99x#KqGG+hm&`i$<USqMJmgPL1{BKjchNvH^VvYN@7Bx9j0BmwT!>6!5!N
zseij5xE*@$eE9A4WH6Dj*~MbcYPovgPq{F?IdR<n3hw-8e?5)+`w|c{_<Io+Kv}48
z_j$eTB#rE~Exd(YOXKz44MVn<!$m)uoU6Wdev$wketW?k-@*{DdesdknmTTktPYEd
z8jOjyBo)<`J|5F*@)r`tX}MEUe-ynrpZR@_)dW%y*t<b2E|nz05@AHPxJljJbZ8FN
z@GCUhw!WKnpay2%3^RiSLsG*pu1l9*2Z<r2O0c?ZOJbZ{HKjm+>pUIxdOVmikJW+1
zR;kHj$S&?0=iPD()Gr_S(lvJMz?xD-$}v9>@j4ZcVx488gp3ZHDpX?CPbI<Rkb|%P
zGwy?R(MsxXV?SOVhz3O64ohiGQsR0=>oYqjR1ywkoc+SM;h^NxeKSUXRoBH41$lCr
zz-*WV*T8jqp04W!SbQ74`m}F$%9MyuC|&y17*)K)42Vui3SrCUpk2;0<mS)ZO9u|(
zWz*Ipd-Xe}qlv(KlxKg3k1Kb0E|)?X7AUd0lOI3CJa>-Gx%4F7a4f!Nhr08=UkJJS
zh6Sv5Ah0At!GcR9QHE5QMdst-lM@%-vO{c<P>)`;o~)I6-}KHVMM|0DqM9DTC7XzX
zkVX5vJaM@?>z-Zy;o-Fmv~M7%v4M%mI`m38CiV-}b}x48>H}ms&O5S>WO+*OXAcur
z-F8icO3z!G<{%u-Ov=AnYSVyl9f2Pef(+L&i*z8v>I&4`4Gxe?TxM9wVF)&qR{<1@
zTzHQ)Rc=o*cT^y+)<4_MYG1H{9LjVYbQ>Vf)#N1y>A_ByEA*VDHDIS!q}eHc{+QZI
zYiEvK%`1UfbkbwF;%$>z*WjSb!m0Mr5BD1bE0}eJ848!A<k%g=l{fH=eLL$kWAFa*
zx3Vk?`ToJ$H_NzpPIA*WZh_8qPN+{zHLyj{XxjH4y*uNt*`dOkaod3g@~~H;+Y!0F
zH>;~Xqk-?T=T|EKDG4zqJ~_i>qi>cS`=}W0@RX$nVv1x!6;=fRwEQC_Hg~D_5_uE6
zp9j_<u$Y6@muS0;xneKx#sHuCdQ$AFqLy1dp~u0uzqNL?(d_Jx?WR59XSrk7P@prD
z8f6c-UXvOWAZfA1jZ`G8ce0fL`I6Mc6Y59<q+O?H*q_td)cCmr8$%Up4m|P1ZEN1#
zC%mYgP|&f{WdOeLPT?2k4jS=;-fM|<OjcdpSu~7YGN3<OY_=ckf-hkKWFfG_?pjMR
zN|Iln+=vLD=VpqGj=io#uv_7))Z|MTr_`uuz^u(~CSuCf<EX}(!}h3s67yEq^(adX
z)*ESictDDF8Tv#$t$igtYHyg`0VKlEi>kvrUi{YNK1#Ojz!fT5E=L|rQix6bpU+1Q
z@Rqtv!;U}lZ8V|&ihaB<!=4S;t*gaMNBF!p%aET{y#jtyNovK7F~@8rle*mY)KwVL
zR0W%}uoBe!2#sNz-&dC20(s8p^!m~@&w*jHj!cOYaKayFB+?JKl>=KmHK8}&Nn*4X
zASJ*_70p?~EfKfW{8+L6U~m=17<LQc2Wv}BGL4S2TMxEhuPvr`-ODxrB=zbmN@Ziu
z#^<%A6+DL&0Jh3Q>|F}?OZeGD%ZhGkPCnNi%hw$zUO2|w!2cL*3~W@DO30AKef_mK
zJ~?-}5;C}PS!<v%ee2C@LepzVMS||(B`G|($47lnG6}Eneh6;?^d5su0JFzXu03Qe
ztyJz%@8izoPk#F@m)Ibq^r=!2E!C&<&2lbmgkPG6<0p5XBN?JmrZ!^MA8`nQ^J|Xd
z9lOE?28KcjIpe8(RtLQeZ>a~td~licqxs6P@u%6VFXG~l4)+j}_PZ0LM%!0`Lwgn&
z38(^{XjHE!JVaQK|7H<KC#0(<HOm#~x;?{;us<?Cp>LXtHf2{BjzY9~hU>hFt43rn
z^+|8EMu~vt%VNJ`#UaDT_HUFkr#KkP+Mn@B5Ha{@5tP8aEJ)I~OmZ?r?&ke$8FX+d
zR=@DIOZ@1hp-mNIr_}WLjfOxS8?!vHSJs^is>0DbufhaUFAKYMslO)XDt>JdPpHQW
zzc3_uH<){DJ0)Qz`%Lc-w|@l;gMpy@?y##B4GuuE=QKIEFR9*&F@y9I%^`hIx@<gs
zkZParIlN?`xhfpC4NHboff^N7$&QbefsXtBv@W>(tUWWWZFl)G{72{*ltJ`)aVh(k
z+`hq%hYDt-mqHxbtKwXozk@nThz5TSbG3gt?0(OK7asm1iYGGPmeH0t1|5&kW+lF_
zq<cIUdr4=grqkYKCX6*b=lG)!ZIT_j)2I6?i|=&Q3C*FjsxDiGR{ln=(%VsJ^zreW
zG#}vZ&HmC>QyVd5@pMYMg!_F$P@mG;$(Kog{JEUv-d^cEf}$)Fjy>8CM<e)U<u~?M
zz2vG7SkuorVpgt3E-sgy*aoCl%r&flvA1L!sigbl3~2et_c!5K|A6;U+wJ0yDi1tR
z+&dBM65A2CpRz+FzDU!=gt25Fi{;#2{$eV;M=&CHRC^Gnp^6PV<tf*XiyvP;Ao_OK
z1+9Bpi&?AxUidkOCqnL!bp}E7^J#7T&2!GfJj{>Zh5$?<pw<V)m)IG|Z@*Vslqn*6
zH1s#MN7(aYmAzfByg#2@qNK6jx~DIXJ$@>as%1M45?cd){gjDBcqj1aXQN+e6hGdv
zdINNxqn&S&1gC^1*SmJTpaxaM1r@#~8|^7|D0}*)_9*YH53RaCV3i}H5<f1sOU79H
z!4+0C!t=&kQFZ>>f}Dhxsnv47aK7y_SoxGqT7luO8q(H%qMrc-o7AV_PdI#MLfjts
zH*jg^veteg1LGXJHquXGj4>a!IcJ$LuV&hoP7t<FdL_dCi6p<l{XR(>T$W?MIaK3D
zaMUu%{6w4tlVj^_=eINHTc999XGs3nNn_CZ3S6#3cs@%%_m&6uU(Ug9x}JP4$aD<&
z7>lXhaKj!mlNN%o5<1eOGqu0pkObyh3WZ7*+%{Pp?Yh;lj=*?OhKt2|3&NwU30)Yn
z8yEOB+2`QARtX%CDJfE&JhDL0H`V3RAH!}nm;Tr~#p`vu9b5a}YP>3uZGaGD{u@uL
zjWu~6ABdorn1n_2q<K6^2}#MmV|uF)f1CZ1vLicMWP4fAazlhNK}lQ$^_xn>@NHfG
z$0JoC&N5b6B-G=s?+V&F$_wC#;e<@tCF@QB9KtgSFk_tADx4BU`{9+m_bB?4NA7=Z
z77A<XLYz2BAAR6CKH=bo)#wP0*a8AKfNc*c(u|4})!nY@XjKxsqVYwZ-It^ME3b6z
z#wyR49gtY=#pOWvr4a$<r{PS@=)PlpPo(Ve8F72`cm*%h%_$g~%nT!4i61mz<M<Ot
zjAy%UugR%6++X58b+gyoJC<P#r+>n67ai8{nSIl%UIRH?mij$kN>mroe~&qFcDcHe
zFvJ&9QSGp|83y9tJ$eGkgl6WeMLrIttzT>RiY0ZiF8oe?yph}c$&lNuq6-U_Kywso
zmf$hn@B3yT2vMus%n~7Q`^*yfp^$-O)f4He@Kl>WB!y6+&v{Cg(tYNYsM}ZP;30+B
zzK2UB@#(;%7a;%cqm!KQ28#(!)X)T57}oGSN-o)0(0i09@|S-l9Vq;ah9xwLS5r7Z
zvc{VQ<4v=B8$!uiPd|+P@$7h`^-#aim961JSdkil!tBB|;J%G&y>P|gjq9-NWDWpW
zikGfVKGGY?j_Q+(4*5JH7xfM>xq%V6b=%S<k%s;mkt58XjCiX1{`*s<uaqCYzid3X
z^fCwo>Y-1_7seuype1pguNDF?`z=1R_qh&iTv@^rhD&5uDDdJQF@{5i^%g&f%<c-o
zHCbs?E05XNH>L+=z<ZbCZ?jiV*so>f2zz8H|0==lw@J6U<SqmjA2jF<jnFVqKjS4e
z>`o#aO~Gs#(ZlFX0=knxz9rYlHeo8i65jUMGxLJ=m)lEO*Lfn!*SEz8^)t@kI(<TE
zFDy5yi1>6}>W2wmN}tNWtpz$i@s_oHVSGOyExN&GUYXP%#skzZrA8$ubomE_sE2()
z+Q-2__hyQU-bzi&nUkP3hi@W8MsY~WuIgA}5yksk$_tkLjnBVwT;te;3gr++G@)#Q
z3H(qcJX?49h%|*awV_O(m#9B8BSC%5X1S?QOtejL?}7UoribQiGIbDPNX~_XVWQU4
zbZYJ1fL#EW-<9swv~G_Nf}f-3@@|#^m^_Y)?0rvo*PWu`J4!Va>PZVbY%JQY?>8qP
zuyz-2?l`4*?Pcj{q%cV({V<h}517uABpm@HDewYjNVryiPhTBI(~^_CiDxl$w56&1
z8hLr(8HUu{ZKZ_TgOtdHzy_4&Zm+d1a-q-3RdkM8c>CdB#V;OJ<M+lztGh|J)*9e~
z#l6lXcX4l3aqHzGoGf?aRaWN|XKZ!g9bGPziy!HfQ=i>mQKg{}oWypmkFnGI&yQBL
z1|-B!do&l}+)X>BpNH`thG!frf`?|yWON!XWN*leVYt(oXfMZ-)~oP?jh3DyZt$*j
z9gqXO)Um)fYyC^}433*4Mu#8oS9E2DZ;JqND*b|gL8QI-&>U#2!>jt8+b+?Rs=e(g
zk4x)S)!<Ocj6SW5Lj;$;ya1=&n`pZBr?*)4M_jw{aCfpjX`itd?b4ZgBr8RfCbXMv
zg|VM2_(*zQA@1IPD}(qFdNh?o`$LF>dpdM9HqlsTl#hQ?GY0wLRYQI~6&Z&OwuSWa
zE8Yug{*VB5$l8MD4MKy2OUFj52H1blUlJq_IiUfQY^n3~_0u@0t+M|`{h)Vn7bgXZ
zqL3A~S~)Kj4(S*-gR-qq`fagdLqvl$L8e~{VM*io60wXt;SF@0Lm`Tsykg-bw{-&^
zDGFSxdVbJ8pcE@9Jg-mJmIJ@g_Hj+q-C|HI>f9N~gRP=~`HfIBWYB3>5!nU$D+a;<
zpxXPHKfST>Nz&a~z2_N6ZD0-ND1r%&4X}guasVskXd);Wb?~AK{#66@t2g}2Fa{HP
zH1meJGLy{I7GxOreDo>u9>z{{I}LQ(yPM2!B^Hq7q%Mc_cCCI-vcbcqCHm)UcvnJ~
zzyg>?H*9!Q=H#TtT}iFK?_;+r1MjRqYU!eh+~6gzRv_^4SLH-iq|>IB*)7T;DN4BM
zm-$I!;DSY+<k%`hEd8HvuNZ&SD8;eeyE&%?6+E>|-gM7RMHr)s?uGSTe$89)O^H(w
zEgZ=fjg|<b^9ho?6e12xs-3VCitlF4WUgdSdm@U|xVz&D;=i<XlaF>Z4uBwMgtva_
z@3jLZH-El;#u_8}=6?1y1DH212kOGZKL~3CKloBoXE?vnYp_dSgZx5vVib_i>oMld
zXbMJ2FFjrTho7%dRsWH8#d=`CE#lTm2Tr?9bdqnCrlLS=Pu)##lX37tjBCi`E12W_
zs_rofi;bV2t~578eM?a^VV?Nwa>_s;^@!1DnZ1tQ=<?~Z>saf8B;qh_e`yT@x)Ngx
z9p|Y|+xeR(ZW3Z?jMs5px~{aw6jTj&Wc%mUntKUA>Od<3v(}#)7Kzom5Z;<kTZyfX
z<@M}f!L5LL9?hnL7hXImnZ{`UD3$xfHr+>$G&@hj+g^&tvumert_4s+47evPP$ljQ
zX_Y1ecnT(Vlc~4Bs`Af2$}Tle*~*avHMQ^?7;ydbld;ROPr;|3S2*ujhlI*hH>2(Q
ztc#AY+#%Uw!$v;i&%W{r(FzP4I>Rg=q_q+lHD_v$FC{rYi8L#&L6K*fEXSPFcfNqw
zWFz05XWZ2PG8h<uH!u^oHwd$@e;YiPCn<@p8j1tIgWzWNGHJU6M7XsS00Na4C<(OU
zTY5E&3@v&bG-bEWo&bf52_Rvz8@5J8F&tH)$e8GxgL;HHy+92%xfFZZyYKs~5KmHz
z0Qxn-)sUYxpB_Kr?>B_Nv8o|QrRq^P18T=~cIz?keDwDNJyr8%UIxf(Dj$5IGM%=F
zOxk0i9<B1rpSB4L`z9)Gf4<S5|Jn=_4bMFJh32mRA>?<`?Dfvj-s>t*XlN%1L}5mC
zf5U`R<Y%VaeUMSawShtxuQ!7vv%7H2IOXNpronsPBAq1Slhoi5rU`OsRU=**lvThS
z6lxmqKFqZzDKO*u_+0_9wnWLQe%5Qg9G%>!O|j8a*f<&O597@_$}Lrn>CD&Ry|@uZ
zApJ3~)9!On&bb4k{*-3uVs>Zfrq;et_1*XgQj+2$<_o>#1ZMnN6F0g%h%s2Rrowx$
z%PHl7Rw>JETws4#`cg0@*49m|FTdUEZ<bC49?c1<^oHT<--+y>p%JuV4vrEaNpd|E
z=j<IbgP6e5Kjp&12JEo6e03Thf501x`oU%66Lvj73H1mL{gdeGUt$AK7e85c0cN@X
zZhiWGJ0#u}KpOZ^Vo=5|w8i5s9g<x+BZ{C})nQtWy=)XM@x(lpcQgsmpJ}h)z+Qau
zOWQst_VJZ}Of2H5(N&-a@BLYKBEDRGzRdvqb_1LeOKBhpUu&TOEPL}&wHorOaq!{g
z5+Lw*HD|?<hCBXEj&b&Wcudt)Ux*^@`}UL!W#pd9Q6P*K*wEuxz?Dxp54Y)SSgV&|
z4}IiC{kdpUN~K14HV{AWL4xDVZ(iDg)j{di-QmGeJ5MTcLs;g(>syI1_4iwj5p}O8
zQMxrflI_oI_~`c!^Z^z>0GT6cgg>DIkchl?!5|ufvZ*q=A0LU>K|vD1-nKW~cHb%f
z(rr`HCgi?@JRi*v;>e?Ib{3-I$^1N!S4=ud4!TpynXzxQ=CW~(-C?V6RFM~x5TiBO
zR~zZWC(3rLafe;Y(z1Fyp)K$aco_MfqsV#)-6y_3RA!k<Hm3W*+Zq%TY@|eGpG4a2
zfBN|0qhPx}|33~zhiO823c8m(;P6Cvndhutb#gSM`elUp2ESU4-BBz%3IexVK0}wY
zkNY(;Y5%UcNN&d9_>kYd6V#ow1e*%7Cbne;?8j-=DHS^eHDoYSlmzp57w&CS#;nSP
z0?4B95IH(geOJ}5H$!0Rv!IO3V)k`xeeMg{M2Xe_vZ{2+29!S*Plz)z$xI_ntrBEr
zL#d9fP9BP_|0PD{(R=4lk~Sv=<upZ?(Qss(L9Sa+ULvA$P@=9_N=jXUI1rv~NM5MI
zR(XceeI4*4xRPdplsNv9L47yry>SQfcfV8-3xj$XkX*EX)F~A|`f9U{LZY%#;&%i0
z+f`ULrH$<~nx@)*u}B*u_)^Zj2&8MSZcR<4!9uN(gygUoo#4>+Hs987KVb)eRS>6S
zxluLS)v-0PG`~Xhh=uB`d+r>$sAu7LUBX3jr9tik)%-0>jaZSCCUD`l5>Hre<Bv$z
zxir36ui<PCAJpu1IC~Ng4Su1xeRiaK4;}4Y*BAy?67<P*2y3yuoc(za!b#st4WO9p
zo#<ecOX*j?));^0mcM=9>`kb({2*Zp-vNk7t_H_E__p~vnahgLm2AqjAV5fOwIN5N
zOB`Ag`qXnJ1!#ctbjNBm2flJ8Sj0;e|A$yo-46euh(bc^U)66Sqp$Mo!fsaq*bb^T
zVY`uo6LyqC4iS7EPXf?gH>ND|G?ysgkU7jIj8>sP(M3MQQu;F5DK<LaP0ZoV)A0um
z7A$aq`&*YFJM<@Snq0fD3)v^h-=|M$24R#P4njGZduS8Il#c!J{fRj&E_~brJ}d5(
zgj&fAK^qm~;t0>?*ou(R^MQ+TPi|kP&oA?$9MlnysG|wTI5Ftji6JQSenaknju%@j
z|LQ>E_cuVD*|_tbIJ4)LsD+k0Z}WkFC?enIotoj0S+)8*-t})o+)@(F1mYGl9Tm8p
zse8s{s#PH2qxIk4vptoMyjIqUp-H-NA)vLW5_Df_cI-C|q)%)!rX@1<q9vIHV^GrL
zh7{{!ak)hJEaa}_qV^{#nq=gV1>;*D!>2;`qpsw>M~G81&~ur^;i@O_eTwzb*;E)C
zNw$=Y#}mE|e!4v>nFbKgFHie*iFNbG{zM7@X^!I@gR-^iP>FI)+No~Cm}^&!{-UV5
zw}*R_F>xf)7eya7yEqm(2Sz!WhWn^g3ppDGrV3|2vKz<U4V)xO*-;k6>7wQCdB^Qn
zWgE>hR}zm5a~s!pSO1~m9e5Iua8u!Cu)yo!Fk3SAa1_s!W`Jq=j5iOjjs`BLEYN2s
z#5usB)3ZOkp+U~4nl1qrhBiSukix2;quPLioXaI&J0o-JU=0bok|fgUslo=i(RK!S
z@Gf?g#a8A^>^3vD6AdnVKc{FGalvyXc{y?I%>minMTgg87Pj?8-{rR!LSse<?e0>*
zo{R~Q^tSY?{32*oY_H?lW(nrEyOE)?&$ml>lx}XH-;i8=-_WM%F@l~7I8R7@d<gI$
zNhOKgmeL2Y`ssh(6UOy9%-w@q1Wc~F^`yQ6#C}&JprTYqCM%;%c%y-E=39}2hdCTd
zN1KKYHb;4K$hyF(k!NumieQ2m(NdlJf*Vc>D8uyHGC2ZkYvNn#-Cq^~*w$(IwbxhN
zh)pg+(2a4x@z=#Xd**aHS~pihv&maMdn5e@rMnFbmp;sMGHf8BA;yXKaZVNk3tMnD
z*ECFw&sSH+iTn72w?k4KzC*odlpsk>W1H%UzQF0hkZAfvF%B~!hA^ukwZmkl&5JeA
zXt4?70ctr!2V)?i`UFPaE^!Np*kD+H&^SDH{W*9*OkilqZ(9fZ?SytlJ5Yk{7I>dF
zb<3y%NAsgv=K6|5aPR~h3{&r(syy}x_6VUq!FXXNn%Q#=bg1qfrO{_TvQ`=UEGCi%
zOJQBfDbscn#dB;>YipM_<L!wfVy@GY-eR9HBb!q!8R+1iysR23ntcsh!}iE>L$|`{
z8Kvk}GI+c{KF+sIPVy}P4fvs3qqziPMIxk!CU@){n|*r_)UyLiZ&))}w9|BJG?D$s
zuQPr9=MZ;QqRN>g=r+mm-5Ys*ci!f5QkP%CUV9ME)1*gS7&6nQAJZVXKL3bJK)4cZ
z5%EptTzaV`s46$`S|^OKiZr*?<%3cC{BXH%q5kKuAor-CBLy|RK%X6-3~H@}Hg}T8
zF$e-dizdxqn~W+c793p~q8s4)Qx1(d_G&X~C#vK4{b@6JNCnhvi`ly=7DOD#OWQ{V
z3(cSTdsmWHIX?e6Y10EPTKWcPh3!e`lDb;$aJM#&<oY{#QjN8Qv^4(aLZq*pR~9?4
z;R;f7KsKM(eQ%t;GG}&qwi&5Y_ul+;L=-bU{7baF>tP*q$Zcg>@!MMK+5#%tIk7#q
z>gwU79)$+*&6|PH-GCup{18tukSqXdShMkd+_|^@FBj>3@9(chvtu#rcGfYGPAedi
zZ9xLU>`Z3g=*(l_T>m#IbtL@j7Z(tGNs2Qk&U*RIPeqoGcDeUA-fk?5J<SRWp~Uuz
z>5bt=b__W^LzdQljE!5mMSCiwT*gGpLDd7y=>^jfu}XuQe4!Li1X7g<L6WyiUDU-k
z#gP1NVQd-lZS9^7*nyC*%6k$r5+^Cgk~iY>?f%#AU%)O3`)nk9Y{jaw(7<WBxDKG=
zrY#?F`z13;qGavEF$L9#E|T#@T2_Zq2p1kD4~a${*xM|H?<LLqTl8FQI$%N_Ig%&`
zTN+OU$UBDHmAJX7ddx%{ZDLruMjd7u;fVgTnG=9r%E!&I3+nWN+ySuLwQ<Xqq>l8Z
zQah>u^0Bm8Y%c1T{=l^<Qc;=FlL&&$yOAu)O=MU?_L^KRvzEJhvjx)lEC2#o%>IVn
z!%-ROq;?}6AKyNe<5lM!O0^}k*JW+`@ILZlmpIXT^_#nSl-o_Npu~XL(x0LKSJ!!m
zHT7(JUl9ZZCG;XC2_1qorArAQAWc9ZC?X|*N(U*CCX!I3g^pC|ph#1ClODQA?-CMF
zs)XKeJm>uGbG*;{?tk~Q%gkQ$U3+HM`Ye`j#NeqM`_D0`G~blI^u3;=VZAy_O0oBe
zqW4mHQy6=pHiiJ9HZuFAxGf0vUMrN(D?V3i#QMiU`g?2IdkT;uy)l4Zo2`IUMnf!$
zBUWP<wmpdA?ZpjU69l<1UCJ9!JA7XIz--*Hpl5^*oEK^g-;bBuF`rGD<k@?`70(u7
z*POE<B`U(hTVea$0<KUefGR2f@_{>l(b2J*@#Cz%k)Oh+;@@grg0>VypPX?~c>p{v
z=30ffT6sb-F<pIa{fuio6q|?*x5$}PfLfCM8JruiMnj0@Ob52ZI~Kx1b;GRh?~sNH
z(+UCJGQHt}lNl)8e9J@iJrPE_S|F8Y((+h2U~ky>xj6GH8<2Zh%3vgAv^(0*9m;BZ
zWLmARs~O@YN)9UP<}@T3rQ!6a(cicUx|^krp$5mB%oa81_8Sk5oX|(yj+lrL1aojn
zg2uXnmb9y~Iyo-8vT09!k;h-A?`5))Bg%gv*Kw6Fg9OdJoCn+zcXo?5$%^*;9&Z`b
zE`h{N(V*b?M%E=rJUo(oap~a3inkQ6uMc$@B^kP3t5KZ6pyw_%)hTsbnScawE9LGj
zB$`UTToB<cP^{n-_UuB%*6i8oXTGqRdI9Ele9X)Ag)dUp06aU8BlXwEG=s$*2mt6p
z;CLupGV$kFWuqxHS{WQ}9dzQ0c+tE}vm@mPAgp#;m59Y0&sS8hI_NQ$R?6<b7kjvy
z<wzC!wDZaYT6K}GPaPBG!l}8`Bl9h5)z-q}yl(%Uszvh;%Ih|27#iC_wtRmDBLz*!
z$PO`~<VUPbB2tIdcbVzzx~L6x(6UOi|JL~|QUS7khm>!k;b);D$h-DUv*qvt<Dcd1
zRTr-7oe3l^8Tqb`;rp?Y4)0t!(meD#>Erx0=5KWQy?~enBIsG(=S^=>+$9@HA3W)*
zZ%!yS`(N>Y_aha!S`6a5Nu1x8GngT%g;s#t)}7by(NBbm$Bra)+Na2ztgxFVH&C98
zd|TJ`DT)5#P%1{{wScmXJAVRDO?nibf76U<WHP3Q(b_;7<ld4-(czNXctR<zI;ktf
zr=u3!**=9UiC$GT_%`nMx{rYp{!8iz_SLMl)9YNw+(RDvt5($@{8hx0FF+cPb*mOV
z7XqT^cVs|GxAs*dt-g0g&{B0s9)N=M>L8OKPMr%}_q$@MyFdw<UN!jUV@oOdc;W*i
zcr+)SBwJc-TsaEQ4=F!xzo&h+p_RZ?L#(0zkuNE?o)R%k;NgKCmD;x+<J!5c#%9r#
zT9;2j3>0Ti28S2os9uwG73kf3kLK%0D5*UE>3s%CN;18|%6p-aa|;@dY(xv<zJs-j
z0Tw%bGE4&`a=~bgx~z~lmNqxFO}9@IcACvXF>VY>?sSUSNfpw8aB>A<NIXM<f)&Ue
z8UE@*LXRdJ*g{eH8gMFUKA!O6Y-v%k1i?T>vpeh!nVl+w<XMq16QHfxkoJL!B-h{?
zltq7&II?K<Y1%!JlH+vwSwSd;$kA`LHia>P(#7KYb=M=uJB&Q>Wt@=Su8h;U+(4hA
zb($dNoD!!lF2quzE0=(V?%wcHFPK|F8o_S)!%S~q*?rA}vQ3r6hmy7UUXVftKis@Y
zV3WZ(Nn<I?n>2bE*kRaTjSExU36YIL)pwvJ1^S<y9KX)Lf2u%fOkKA9K!FZ#{yY<m
z)GE62QK-(fo}9I!c*JK%4CM44Cd`$@fL-XyWY(9?bOLE$oJ>kqx(^(t_;Cr(Y-O8@
z9?1!g1|IJ9po24t9plq>NkcjlBsvT~IJa>QcKN%0u@AGqJ|)?8PD|+h%su8Qz_?lD
zn}rU<!oH`}EDD6o3W|NUX+7~gK$Nn$bH3UBeH-0kJ_HTW4}spx&bG{lzC5<ZoK2^j
zVq_}?Uuvh{J}UR+SGshGlU++q<)Jb2c%VnbaXZcC9?Rl_hGuRRGCyr)@>M}rAnQ&B
zLbDFim#NoZsbdz$6%&bgjz*aWWQIYM{9V?+PRg9=BG<P`DLL*~M2FgIN1lk`pNVR>
zxD6hv4wn~(sJ!<6ItkL47Ob9c3=@^XM`B-CR1{}fX&V+)z!lX;dpa^$xN(kxM#QA7
z@J+g9;+#as)r<$$3*ZT!{Hl?Pwl{gf#2vh#Top?`h2Ok=8Mqa;da(HDi<lOl4ZY5z
zX4QD9%RM7itPMAVYq)Zq!RHDPwNedWTw^y-qqbRLPjwu${1vEZq|XpVs8j0nd;7cu
zKW^g2TUp&VQJ@=P7xl?Qh-zYXMI}$?wN&qO{<TsvGOGvVJlzJS-P{k6d$IUpI%Ve$
zJP%Ggh`$6q>h6cze7V^E>tymv(WeCVYb^RCYlUd?h`4hbGD$O2Dp_~zE7CT%Bv%MX
zMCzb14G(nXJ8$Wjzf3RhPTbY?p`{IZ+^}m^q691B*y*OzQrzoozB|Kxwbl_VHzvPe
zVP2OKa8z*$rdd$Gi(-W_zzSerJMX+5!4EGY3^*mC6v9O(4k+qSV@JbG0xJ#<{OkgS
z#JoY^8JG!%oa5_}Czd1XV{zNl^eBvEkv`|*HHPZNR`gKSdA|*cX9V1`36Jv;TXo)H
zXruI4dZ5W@8)8pV%5Y-?S`>x<UWV7y+n^&s!sIf7!EKc<g2t4>@{Ob-$(SUr9oN{4
z+H#hQ)A(F^TV2=<p4N?Je!E<&w>`}OJh=?%KTepLc@xDG2jbDq@VQirLkZW$^ivK8
z)rhk(-)qoNsn9m>XaL*cG|pFP$W5%K5Wn^5QXe$N3d?x37}3EnN(%eV<J)V%XAGQa
z^#e4^U^TL8%~Y8E&iJ_ixdG~<$IlCCh6iUk1dp*6<avkPH;hqA`ni$5J6!csixY+?
zm>RUI-Wv4lSM7~Vins-Tm-KDrN}bPMFSuxwo$E6gD+zo=vfm9GQJNw9j2K$U4u*HZ
zS0eQ?no?|rpX<Wi8K8QX-P3`=)OBztMsSC<{8J*VAf7+-YHfS}qXLoT8*fdG6&6ny
z-1L<4XOAuCbJWV=fh?Sod*U}nuYjaorU81@7s61sfuJ*^P)Dzqax4=16;evFE>AFc
z`Rvh@mdGAr24(<X76g~9Dm9v1`95%`9LXZOd?(2tq!=B{QNZr&vmauciJCPBet9sd
zH@FxS;}zG}U{!aq(2~*Hd@hFTIkmiQ{8YcT$!n=QJ&mO;y3_CD!fy&ra)({0s?^Hb
z(z#0%T0c9R-ZQfmi{CPcR}Wb>9{iXdaM)3FMD5|vjgvHhLcF@a+R(}}HT<B3L@>8m
z+us#V?2H(X>@N_$%M|9j-9#BF9AA~Q6$d7vQ0&X6yjBdKI`q}a<EuHRr*@#AHbnYW
z?8{ob<-Ihl5e*yEQD`}{t$<fRfG!XfzL)^)_W_UZ?QAw4MU^9j=Rs6hYdWiUx?q+)
z9k5T;v%|*A5N;{%;)os;?~)_?kZn#g?cVou;_#ZTPVq4zySlA<ETB^|$M@jYJ<@g_
zZQ9`lF=Z3Ki?VW^qfh!65%ZWg6e*LjX4!%iGT?PM{W#;eI&v$`6;YX@sWthg{Ik$B
z@I!1HFF-nikHm^LhZ-g(f@Siq+#Wk%HoUA{GP-pJ1JbhjcYSz9UkZDc^nl4{54ghW
z%h^KN3Y@s}rFYwo0Z_<N6x?ak9`ZYmR1uTixoXkz?LgY|#e}axpnE3&HT62E9s5O5
zRG3p&PIsH^eQ5bd^@ZS247aV+)7Y|EODr4z9NNq#$nV-%HmQ#*vjX6~Ig5>7{Q`_o
zbL{TGJ#rjDVnff-25F3JWbE6B?e7-PED5#G@t;P8eLen~KnK_1&I}{zjKWX(VUMm-
z=*V)(L)Nn&P8RKp_XUh{fuz0DkI&5kK`Yzuvw`_;Tye;6a(40fOxya9#Oo2fovf{)
z?I$WFJ-8{ECL}auog0I79=j5RRzlGa^QulC7yxL_{1lhTX=YV01EP&o4A&=rIS@$}
zVPrQ!7eKvibk^M)t}2F$a+)ee`fr21)?6f9*xAUnFjtt7=7BBDd%F#Yx~^r30H5-x
zfkZfppYT#Z0y2XA&T4?E2zX}&qM`eFdX^2r8DwD*snzIYayE_|G0zoVQZWrbRmhSe
zE4xk;T50Bory)Q5%1T*^Jl!HPu{+p6`LO<K^b)<^o|vgqjBH<RzR!o4>)~a-hWt>i
z_h$Qu!BG#VAIN8GzT}sRlseHQVLlC4gG#fNn|HnmfS}9J9h7fRjN}61yx+eubomOC
z`%ct0R0X>SC}^jP5s1IO6F<=4s#3COZJsJ@{}{vJ`)n{DeN&Xs@ott})PsE}hx{jK
zwM^lfYC`T@V+{38S1}F4SN$0baywtD+hWKg`_n$p*;o`b1~3n)0LxZMO?N&a-hz}Z
zGHsR5lO>3m*r;1{&5E2Il_2vT3%)P|L*6AR<Xnr3N|AVLt_Zw6X^QCH@;Xe}!ub4F
zVpG3T2O#^~O{sNy-q_JvS1gUImk)K3>Wl=k1^ev(0x_|qy#csKq=p~p8>O{>&*zFq
zA!|A0YNbCVK&BzOgN0S$acQGS-e_@=yNloz3AkI&fUm*6<G^EIfDe5xKl-hy9iuR5
zbH}S`W0!0@yba2qK_c{0T<7;eaC?c-rfmgXbnC0vMG$FF=!o^=^NLu2Bo5Oqttb-!
z<eS^jx=+h^?Hvkj4s6w|CHn?-Y1<4fVW2`N?1K61?CWAe9Tc2(@#Zbu+|Lm=zQ6fx
zJi%+0!$1*4zz_+4>mnwu%<<a8E06A7s`HY(Cq*Gjf;1;qMx;GX8T+0)FGz75_a^2y
z{*=MiOfyc5{P}3Ic|+UN*#j-4GjJXr#eSfwCvh>^k=#+`y$*86(;iTy*tA2|HE9q>
z=cjnIw_Cj13thkmVo)b4s`DNBm2A4?;-{li_cfZWa-+Jq)VmL{vT<ky((bba?K7+F
zkcc7kIrv;fU<oW*TTN}xlVj^nQU-7TvR*{9qL|_yy?SyaFb@iW{g&M2={-Q2Ee&~G
z6Od$h*1=$<`i)jJZ~RKb?7;z$P65ze$iNQQWWRWd^*s>5si=nA{Mgm|@fyaBE)O<y
z%60gj!r&CdjSW-&dJPn)grhV72fKP?d9@F*|CCX~g=uqo9l@V$+=!5;a^s9(A?({C
z-}EFqwl`(1`k{7zKNN~-6fQ)TP|Oj;a_$I{hp~6I@@b2owOz%CHTGb;fZ>`So5!VW
zU<(GA`AD<|H3HDjRta^}Q3q?j15n<)GjN@ed*J0YCK4@0zpb7u$VB6(w$Km|Zn{Dg
z+gBx;CBVK>%t@S=E?muj0kU`fG4}1Kv8hYO{6))-(ASVtBY~cbX1G9QDCX+Q9a?P8
z-Q(QBh%R7VE!~a*9icWEol=NMDiK*W=*CpO5bl1YK|9{PX05YxpQ*9nB)oFZ2x`Ge
z4G*ZeN*TnOw)*%`%o5%HxguGG?qf8B#wgl%L$!SKabT3bO>BB<Xe2Y<@P0GZ5Rc#P
zU9xYr5_<g;%Q}>$<4i}_f?hri{2XZUh4kWdol>@S7kfU{i13JW%hF}f&6894^@W)0
zM%r2##yXiFtkL6;;y_G?jHI)+rDfiXt*{Xn>*hA0ZH)u)bPL+f!U4kcB5@{^^Xulc
zCH3z?cDJ9c7&nw<t#(BFG&b;?hZ@|7NLxeS+Af;Wwcb9-{??n-EjwChgH`bZyjGzB
zR``GiAvnmL*_yf|Atr|SC?D+&20CD5YmNXZ`4oQ)pH>8wLkw!y4<<3%nOE`zV#&m<
z)zC}@UGjg>t9wi3fzEtl2X(#kzV~XjLcCmlFy2c1ce+z?`F1Gy>QkzGvf0|C(aT;;
zAN|NGD&K>?QgHXl5niWjt_qx+QojwKZR4|xw`FzPc~1k^=mnE_jL*N2{mcR*tyIF2
zOqh`HhU{1iJX<vose2a_5TX9sGj44hx*DWQcn}uVrCCkZmKpRA*#4q024w<^1gx4j
zLiKi<F_YlnNzJkP!E3s=5LagPy%xP7Ov)QTRcr4d)M-6myGhQeL7ZRWCml8IGk}oV
z$H7m__uS1HFTLFs);F+p=`VNYh(HT#9QJ6p6tvNIbiA?Xa+6IO>3W_t7Jv<~zb+L`
zh@A#)F+Gyd8Sa_fdH_cWC6HTGpmkjokr8M%|K3%5_KMXHq5OF8dt8LyB;?+p;MV3+
zC)m4;^C6>8d0b2?hQ)UNXrd%MAvj^{S@6R|r4vrf*t-<dADUBdWVL~HmUnqpJk5V{
zb8`Fg&)Rd+<?3acyL_(vtuzr|b3}n~ia%n0r~T1Bfq%CY<66v*?W`Pnb?bIyVc(=!
z4V(AoXBTp>-Z70Xu1Ho>p;+%1A-({?Lbw47s`i<NQUxvmkjbAdoA6@iW`0>TrDs}L
z^Jok|Hi6E)w=aPO#V)qon5xt+nXM>ABIIrJn>1-^<hhv$=U}}>*c>yHeIpTtRm0n8
z+349=bc`~5c3yMjc?(*aZe!I`U5ZwzoY5~27NjW_lie{2w5V|Q`4*4RdnXp3@Pv_<
z<#)OtBPXXjWXubFWhu1q&FoG&t2_ZK`y&IKMG(I4yPh3}=!0dmfC;@iez_cx@Kvg(
z3w_!PslKRq*3hvN!7oEHYz6FHOiNH%J?Y%ra4t4*Y@oAwbhC882EF*L0nur#)?Tj=
z_J@8Bz6x{kp=p(ptV`-ok|oa8DeKe$m+cuB>c`-BY3aXyDYy+eEH2iI^$Etg!JIbd
zo6?d9Ry!>C`g<7iTw7(cmk`)hg}(PsmJ;8?keR3)I6;{OK$16>rzB9fkjJeQAL{#T
zVsnlEh})`k$vvt{tmn;IoMU%~WsXE$#Y>h+P7ADe#7kbEGX;OICawM^&Ac^{#!~ya
z2bre?pSr_!dC%BFGA1{5x>bLQu!l4FCr_#(46*(XtjX;1#ao#TEf~^OCiYuK^x|(u
zB>d)piC)bltn+V_(sWh0#s}Zo&cMBlUSIo4a-&3Y*?8jX5Y+y(ZGtD0rOQQ;yDcp1
zRa(bd!PI%9qlyq-ep!@n?+(a&J6gGy`J72ffAnP=71gI#Xjy_lPrDLaYCHU7FZbj#
zr)%WeT<F&ip}w)VsI)iqD_yvOeeuZMSC`%fDBqrKClTTDB=}b~duYr|zB{<*kES`4
z`K8>P%VX=R^m(~yeeu2?;x>=?9Om5-)2+5nJIvG3Aj3C06-iW}*B|SDGK+7<aLqi^
zYR>9fDc0yZ5W3bd`-6Q0$fdQq6yStxX-04!%1D*%y2M_%Kdk_Ba~-#(8}to}c9Hr)
zhL3~kY|IT^VOe+4;dH1kt&cOVd?({|H(1jf-<5{&+L#|rU(tt;%#$&GeEYIkUp5vM
z7q>)6RM=b2E&?LHmrg4>8DAVhO<v^M4YhOyziKm5YMr4EjVd%Pd?z3oFi|SUX_TGu
zfq&@DaeYYtHOT~;c2z9h67weG$|L42*YAPL$cI;RIHnC(PS#gaCK62<ISvn-g@${P
z;`-D&(rSoaUV8Y1!3SgKH5p`Z#fq={tuna_{)*@m$}15&O_$fSoPymkO6Km0VXyX#
z;06qRMWJ3})nkax9wB_TjCcSE70pGQk7qxBxWle=XRyRtfL2|Cu*18fY(?QKn>f{z
zNE?4CPDF3vu945vw!{3neYj7J^M@7y7fXt%z*%k5GVG(J`3i4kx@Va0?4M=v@l%sh
zdjM$7XeaQrV4g6h=%Ksca-=T*Y0GG1eW>Qxgy<OAPL>~Ch}s@c(Yt5xJw$o>^(B?x
zKp{ub@dmGl)I|st&oK0$7SA=4N4*+7_LF~{(G9`)6j(#E@unGdrJU9E<i6gP57i^c
z!cUq2Y|S@a#OKHBKD7r+x9O6S(${k$t>RD=f>!U!%}O6xhSYgyPo&^zZ;5|2yv3jz
z2U=RNjx9TM%&xF3hu(-!a7wIr0J7uri9pE#aqYcNmUB5-<>=pi2$gCq;9QM*T|czC
zcx<&fQvJvq0dzh39aD~`1X)(F^BPAa2YAa}tAs3c@KQvnDH;ie$+aPxiNop~iZN?)
zlv5vHZtz%k8M7|U+N1h@+vOrI|4=`*3CM5Jv~E9YlX>#0Ci1kR7j>sVNK3t#(tVGO
zea^ugP4mn4OW-Y4<xen?vf1}ptD@~qh2OO=M??yQB+O5ku`wGCExy<}{`evN*ItgY
zdT{P=ZnbZ79G#JbamS0{9j=G_9}yz01K_7KG=!e|uG)bFg0W)KYBE9sFK8)|WFf7j
zJD1_1@+AIlRV~K(tm+_BEXv{r?^jMh@u)+9ZEdxr+gqjGgEib2(?0c+NeaZv>8>a@
zPJ4j6XomNRSBLmLOwSrqcz`GnOW20~Mtz)ZL`aq>O2&L%TiD^t`t!B!Ug`g_dyBXA
z)j-=F^FiUY52hPme%v$C70{A$w?pjIyB`IfsyGI`bxr5N84QYr-yx-B3|>hQ6+h{V
zb+^uVq-mk?&~DWJ#buu=*s=KZr7kOa1Jy7=tyPep76&@ZU^xL?X_jrc3)sW>_C}42
zabTNYxrs<h(}&2L>J+3*#8M()iH?B2DERP7Np_e>+ZE<;bNB+a72?B&HRA^T>j~Q4
z>C)rOCAF3gX1L_ZlILM9j7{Y#;TScaEIo8a19>5Dp6IS#9nvw}6j$ASQKoB@Oyjw+
z-k)H6BEN0X_G<8!FDTId@zXo78|_xN-OY|&R|~9;Epeyz3uycv)j-m9-jT8&DI&s3
zJsv(KcG%O@6Q&2zr_6jSMl9-&b4^qiC2y`uAD!6iV}xVxbxAu-C)_H!DUGctRmsyZ
zQ@|VTplP5MJBaujscZB1Fe}gk{}u*{uwkY?f#p(UNk_*WHHi?wRrxjT$j$x{cnBuv
z34salqm6MyxWGTqN4<7HL(96Mv-9m#l^J@b`5%N%%1t6jp%5~Ys1tGXgIYZ;p^mKZ
zjIaY$F3DgqsYohG7(4zg#{gr6z3$kub#y?oeECA4{b5YUnX`bp7uL$bOQ{P``moSM
zbMu4beb$ZXe*;dkkYC^O<CxCbo+&{ne|kTt_!iCurM5dUckB|%=8Hlf7&v782QK~x
zwem0g3sn%KK8Ea^d%z+wC59wg=FuWIWTCF^Ig=nU1BK!COx0f$5H^yCsIPB%aV3k1
zk@9ihhLKdfIL`0E3BLH~8O}dfRH%QzPyB~U^`9%nu8{~Qp(mCoG9FpS^I#i^C^iKz
zk&>loP)RrIz6d@F9Rt4gpC<gnVIk5h?^$-zxih)Ztg2vQ?Z&qix<m%C9K3Zg`5B(G
z!LQiuVeO{4&(oAgI3I=8gZVw5+Rk7D%jXmSi?9E83rhe*E=uRf%bLv%zO1`HIW3M%
z57y7CVjZORyOqwj3mbSf2JM!whaHwa8C0-HCVezXDJ(5<_r5#dVYL%}yJatS|IE)s
z9>n#yCD-?8-7S4Z{!lAE*K(}%|B_S!NV~Abg-Z_7FGV@KBpprYK+FY|#IgiDxIxkb
zXi-)tw}pmQSd$-ME0snVF<@UsN2u_eso(w-TED$Fb1x|O$;{vVRt}~0IsfT(aJc+#
z@TBOu76kW)U~)a)#zAgTX#Vj(n9qLzFlQ8vew_SQ6ze94{HilzShO;=T!SA#8M3hl
z*}?l5+E0}ngIA>=>72c<ui5(F0u=x5@p(m(vz3*|M`;%_(10DgjxDvY{&G0GB{8zZ
z;;B^ZIDbI&wVz@W#QG-G_cv1i^T>ZAXg-n$Wr+}X{)EBbA6GkS(GlxoG!627C!#w2
zRuR7x8!q-YW)L6x48v52tKmT}`ab`~c9~KAVXuwhhzL`jIsJ8;sj$93z~`IToFNw+
zDeyUZMrL)^BP$t9Og&{Ns#f^Rb{p@K22>;2WB1(^z*Mrr(r==RVp3oK++|w4MIkFJ
z>)ygZOzz89uEJ0Kceno70R8^Vivwz4XkEv*kD<L9T8zp}ZY$~B%bK6J{=ZKW$}*=2
zG#^Wo6UL1hMu*M3|Me>~H}4uSLdGy!Ow^W$`w<*=Li~jUf(4KYWt~pZxf25g2On+j
z2o#f;e!}i;84y_T(|;%`AOHT~miRwFLH*-r5YBpfH=M;1y~?+C>*yly=7`!IqQ8o~
z0N>(0zaHTeQl!>@*tfDh*XIlwqHqBTD+N{i5C3-~--CYB6In-DWLk=p9s~8IX_Mcg
zKFy6r={l}=O_XePjh9?kjDDZ2o5k5LDSOnI=0_{OB#JHSSc$3cv8QR+JX&&I?;HW*
zos3o>&t|gzj{;l)z=n~td|HJ`GEKOnopQw(bb4wfu}okjRkFr_L#ZEMJIT2O#ep{5
zZ=ef^yBUmjxdCkkQR7uG-4mS-13J)iiOiHE32avuH!da^twaIk%wrd)iJK=Aw-<lf
zKMFNrq8~^y{TFfOAIwor%pcjIs9L(>l(4JF9Ggki_9{JFH<eISR!2b4B2Rv$ip=$e
z0~Z~zcbXNU#$a<^s0pldL?Uw=f2Ye&2+k{lSE)Da2!7u}t$h?xcu?QNujFN;znRzR
zS1NZ4cS58Vy?NA7_?L0^s{hd-nst>-4(^{Ev>d#$cgTus3`WlO?#O2)Td@Wz))n|l
zHG?RQ#>>&%OSGkQ;{;S*PqM*6;XyoFU$K75b6b`e*v!!Oo#F`kDu3=DUf;iZ)DjOa
zx2CMqnC8x+`UC_I%59D^9E~>OCiM0B`Rh;O)9MT7LN?VK`MNva${&|MYCAEd*_IVq
z?le4)%Rk-Da3(B9(e+AnY?L+R(Gn&=qX91e%|$A&2fzdt#(H`0hNh#~k6t#{Bo7e@
zsk3$1FvLLni7+(!W%s>-LYtcnp*D{j?B}`;uhWXANofc=e5;Cg!@eEJ6y<ir<IjYx
z1X~&e#ECLZ18wmCOWQ5?{?!5&*NP=6n{j^2Xp+yai5oLD-cZxor#p1@ae`7#UN^m7
z#;;X-&rNU4<)v(^gO~DO%g~A2^m2KLa?Y(<C^k3!>*mZaXIlO;v~wc>tO7ZkyPi>s
z-6Ixfj^yPcd&#s<to)dl*top(CDDEeTLewJJ>m4Le&D2G`?`EX_@RPSv)BAOsyVWZ
zH9{<<!r7^jUG*Gi2K)W=>Ne9=NlCh8V~aZl?4T`9^Iv@21*f`$M5lGi_+{g7n$-mb
zX@D2<^w&<9c1-T|?smCmyS`Ru-A4QV!_gzG$KGmc__p)h@wW3wNVxM!fehz%C)|5y
zb7ZsCMuV#|WT*!dT&^*x+Y#4N8z>IJd(Zz&ClG%gR<rm0|FY__@UKHL=<Z+0cq>}2
zh4PP&8}Q1~gNBOw*0fJ+yc%a%)ciaE+n=_lo87>lmR4L8R-G3j$ghy~Xnb4I7HyX}
zUq8<W;%e%}O$ahkwjiS5q27;g{sUV3mrR$t(;gnt5@d|?XKIBhjy8Sv^&2C2v-q86
z%L`_z{QYZuXQrJGl04^<fXfd2UG?%bnVt*gh{-1x+gb<fS^xqNzr(u{uQUWB$XpYj
z@5XMS^8Vjr<;RK!roo49rJ!l<kT~wwYBbDi2hu$XMXYESTI_9V0#}Zm7pjRTGCIC{
zP7q%npMNr!IHQ6gnpx)>1tPtcpuowr`+W*WQ|4`xxmx#{2>K;acBuKA71m18NDGQd
zTZtKgwO)5IcKC0b|KrR`yhyu<T$PO{ldB7Vi(+{y?cv4cGsliMGoM!>mxza!x}I7o
I)bh>$0HH%;UjP6A

literal 58515
zcmb5Vbx@mc@GpuxrMN?jyIXPBQZxh&?pid(rMR?Eq_`I+P#l6=ad#;McXzw=`@84N
zoOA!WnRzFZ-F-HXzPr!vXCu`=DPUueVZgz`VJj)hYQn+6557M8Xb7(qOwH8R*DrJz
zMLjn-I6U`%5B#bXHTac?>aL_Jhq{S^j)Bgl)T_Y$A4yKvUCP7V#@Q9Fq;gpCm4xN~
zN|Lp7Gk3Lhakq7Lg2P9DPy0&8_(zv<cKPCJYi;8WSB^6*{7QZEAJx^;^q=TEcUwnG
zIQ|<P^j8l0KaQ5OmAjXzt0kO~%gaA;%>R_zx|utezKXiSHFVT|dnKd&BLhucoot<~
z;X25-!(VBr|I^;X)!Y*9>Lujhe~HOBJ33lAxx-x#C%3=SQ2vQ&+qyeg!WAD+GQz=a
zfRtpVw84vqt*Gu6dLG43UFYZLZu%!rC!~keOBONQrYKwjC>wA;`AiV|=8^CnxJWa&
z-h8C8GC?RNC{qT|Cn>Wexw4cf7qTc-Wa#hbBu}qsvhv}BNpQN~qIACm+&JuA0{|t7
zJ_VDj2cOjT!thV-M#Ud8e69nSMYc7ywY78d^733SH`|#&fY)CHkSHJ_Az^PB3?L^b
zcUB4pXuN))EdQAQC+~kT{}0~()$o6K|8K*jAA!JzBDS}-aed}1ODb%Olj>UQ0BC7(
zF%zi4yll=uV`(~dSLy2d`ub{1=>Gox;o-siM`UIFFPB2#S?Oyx!6WpbcFxK8-J=r~
zPyXq-Q2Q<eilYhLNv?Xx%^I3dG1!BUXr`7CzogAW$(?ToWtOuE!+z1H(nz^?kz6_}
zb_ZjSd}%}JfhOTFuKp{96mWV*0e_C8D4}&?F~Mv=Mb5*o)@MW6xs-9@kdv9kFrbP}
zcV?W(v7&4;1t>@Va;8sp%I{ftpQ~md*U@n0cQtY(R?=pnrbd$`IiY&pvq)yo;_Gx1
z-(#<&WZOtjL{3T_*}tJdThb=$Rl8uUu5GBPK^^-oBkQoifil^B${7obPJiE?t%rz6
zn_gjb_~Z2r!`1+}bZ2^gTD`W6S(`2=rU&0#Ybqa6%vDCgr?$HEr^@mE;;&UHi+83R
zJ<ZMc3=H=zEo7`Kg*rMz2k8mj8zE=%eqR8ubDn;>m>yBrARt)pA+76PuWKOVQ8>0C
zZU$y&VJ@q5CKnbHn_nXRoI*6D=gbvB1OmV+iceBSC3rJzu#=LMFX^Av{chmcs2t9m
z*F4G_>Pw}w*si_H@(0=?FRbrrpA*bdIuHJwmW+D8`~nZL=--F;$%iM5tVi)EDQSGR
z)bh32Ka|ZAUt`sHU1KJY+ge>=Zm#h1IMvBsFTqkuOx<ia!j=#HVeVR86*Nyk+<W`d
zrmVeqJjt_yO?^q+)ylJc#3ucXhoJgWBAEp5<Q_Ydd*S*_!lb6!&{`-aZAII;CeRa_
zJWb#C>08m_KC5yjHxU7nu>5H3&CCo^6d{C#C2FoB2C*dTSeG$>b+l4f&AFZ4Pi&&O
zH0qr8D^Sg&*v-bO8PZ$Dew5bEA}qu!HmRwe;aR~);z0USTx43$P?un^$6o4lYJ=k;
ztSP83u%Tzo!<}vc7hM;2^8hX60IJ$qc=HjWBlBnyM5uMF^x3tmyl&NmcCZI6RnaXg
zqN+%jy_OHnLJG$zKcREwoBMBXK~Hrv1J!ODD}Y%xfbcGh^laU#x|GH}e?Xwh4&!|(
zW^`H2>y%7ut$6u6iH5Z<bRFE@MPpvL5pQ!C{!AD1@opReOmg#m_Re87+#CI<Ika{=
zZ31*0&wo9v0|ro(E)Ufa_KG*Q_Rc4@L~kygL+19=nzxCZ>c3sbdDbMaeT8{gfOE>K
z^ZqElmq!CimBBpP&-rPMpGv9buHH_}Ia7l@e3l90w=1)<EC%)0o0ZsD_dUUK6Ib3t
zlrWsc29NGJ+Hjy66G5-g_}{c%p*4ZNpw#$ThrS@47{riFIRi4(#eR+~N}GAEHw6nI
zBjlNqc+w#u_4r;Pt}otfGcLbl5tXY&g$N)9Y|iXAGhTGw-abCCYTY8O=4P0f-_i!Z
zN`z&_ikQM%Na$A3;{56GW=Zo$!laT4m!;F;LrK2@t2TWtgVv9Za$<T#^--dh>+_q-
z?ku{;%*$qWWkLxgVq&X9(>kfV@;Y7e3K~CY`GfNCh3X0wHAl1Hp!bgzD^EmN2HkZt
zohDm-8kCi`kwxd|5Vqm-x!LSAafwvrdY#0ia`RefDT|?j0pPHr_#n#!U|+tfRo`Y+
z#;3mWorHvnbhqT(Qt#*1b&4RPTI|Oxae!8D53n;Cvj$<rFT~uOwj_B`*~e6;>I1i{
zw_O!Itj0`)8@y7gCw|%iyb_A*N8daIos!vOXy0E~xvr6{6Ut2*>8~s<pwE4}s+#Ro
zWFd^Mle;a?DW-dCdteb{M-%^DMT|rN<=)KU*Sq^)cjYE_IqhCgt~{#&EDN)fZ`pK>
zcP+(Pf0B}a9KbfpG@|tIcc`)itcPuu1a;<i7Br2oWRhfLwTlWa%BPa|h0Im+^5V;I
z8|aH>{eHBvw=!sbc}Bey;^?n020*j8pkzJG81_mgG))|lHs(eyloq}O<aS4K#x1i0
zUZqY;QTm|2i!&=VpW|_+^F~Zh7|iVo;>N5XN;IU-<+{d-<Y;n>Er+ZntDEDgHTWgE
z)&?qm9`8ur%zC*qX5w9WuQ0-wj}rN051z$WsHfk22SBO5d?qADTEu^1s_m93iHorG
z6~aXc!YW<mbi7&}IVViYXR+n43tD`b5=!s?`f58UjOv960gNBp55KpZv?+Yc{~}a2
zfNof%oc{Me_6O*%>KP?~ZG-Xs<O+q?%2lC5_}~vFJv&*JA(YCIg$lGX@IN)e29AX@
zC}r=iKGAxSG>OSLX?;1Ts}U|pD;Pwo6R^m%b7;fUIV*LQT}UG=57yQ{XKz>@{CqLe
z@aL?TbG5vG;=`eLydB;-hINg!fHC^3(hvIJI!6Qn1LSf6fNkrG)u!>wmGO(E%(LDW
zQ=}2+bi6iEot2x;JA3?DTYB|>hVl(E#J03-M5mUD{Pi!$P9>hEh{a#-0`3)PUvgY8
zWlO_^^L`;UPG@54?N2i}=pes#==FcVGcy91LJNaj_}CE)EZT)v&rg3}p8h_q{C%p3
zAM?L<v+cJQzt9t_+=<si*5seY<(KnAw=R*|k6(1h6Bv>Gu7+_K1gm2tL!Z+=GL)VH
zP@>zbr2K>d0CV=GWj~Rt#<`;i>f=f_Q_xIHjO`X|Y5wpcU%xxuze)->SkS8yOp4eb
zD|PEf4d(1vweT`1U{SApozvg2<&tKzB6GILHklCLQMarz1uBYZp*p2Z&6;V5R#07=
zpgQ!|Mp7n5D<QvX=4WvPRm&8Ry$t)1j6)w`8?j>r&b_bCRed3NL}DmV%cEDnKSJ{?
z%^F<zsYI^`AwA_f2(hy)f|J13BL4`>*3ot^B7aH0typAn3L-F#BD(5#8wG%FlY%mJ
zfCLoVGF1!ApbIR>G&8@-lQ4T#)EotP<@`fKOIvFTG3RV1iPg{>T>{9R1-OnK@i(4|
zHqc6r0P-aaxUWs1t5>vDg|nG-cO|?w6OvNl0o7pz0qQ%;rg#EF<M_pfMOgp0>R$_}
z|J<ackbe8LbpRV8pM-pT`Ju+Yj+AKG=`b`FA5;v#3iOr@!f(vjf-MOK7L|JKv(}S@
z3#~G@U+FNwmhd{^4+<4p?y<8ioU$px|GJTwR_I@1sh8yeJJUaQj;n^tNl|@B-?#T-
z^QfyknjH+%hKdoCYeP#NVu3ra`VS(z>}Pus8POnA&R;xaM5qx0=i7{^2f(!@m0c%V
z(9%N`$Z*hUXd#S$>{R)6QKIHXVAr8!i^9U@)wh*&vojOg26~`l4%UCNSdj9?cuT~n
zIp1E^D^~j&0*JzYUY*##!S<F#!2tjE;_E?b^F6XR@Wb^<ITXkNi=l%HD@)GG!E$k3
z(feoM;7$`IrIObH%C24Eyqwl$KW;KQFSI_6{PjKLhun$vX23kcVOQQQ&1O?mQ<1WH
z1qHINhc1H+aS4{RlE!;>Kk@B3b_k&O?$%}TPDA$(ZRJh-3+GKoD7mxmUi#n1ZHck(
zf^BE9g3B)Xu5Q5Bz2X%NToRWw3TaZL(`*l|LU3<5Tp~3XGB8+@SLh$j5)<L(o>*Bq
z@@z5UNPz+9v(KU$aQV{J{Pw4uy{FQ>{Hy%Lv9Iv6Z#StLPx}KN8G96`tZ%FzOrkYs
zy8{l*sb5z9`i-y}--+1vJ3q}jx8L@1e$dtzd%0_WK2Les9s*sT6GPVo&j}&!QU2}O
zD=MgLq{H4=I5>iW4IOPEesX$j03)N7-S3l{ACX@7jc-3Ib!q$4(aAhu$^WM1g@WN2
z8xn8@3|LuQjM8fR7VwCFeYU3-kj6JvIs%05b&UkvrBH(>qCvijCVm&`e}gL!6?6y)
zByKO@Y@ZL>pM!x=SOe%HZ4P=G%9*eWx+(?!b)Pa|?#A&ymAPc1e%e*|`>=Y`c99uy
ze?Qm$OwZZ0{$=ce|M>28RglH71E}7C-jf-m<VkpXde${~S%}FiD1?WFRewLe$YkT-
zs4OWdDJ$b`KIM-&XFLY%@9)=8iROU;1JqDhH@X;s@t2d;*s8eJswy<TLu^Q=$;^TA
zi-PUW%kH<;*B(9A*hcN4R@4?3-_AguR}igP5A*HUSvBP$wZ1ulS)o)<SvSxd$!Xp1
z_sI>=Q0KC?*GA(q(EAyP|6I#+OtXm>tC^{LjPTwWc(2T*OjY50F5qd-8Qe|2dR^bZ
zowXK^6L1SrFV22g-l0STMKZ<jre<VVxS|^+XjbqT&tZPy#!O63mdnq?T9?V)_iOvH
zwIxm?>~(CYs`|6JX6(UNe0s-iVRJZ@_vz`05fxI2*U)dIuW9(Rg^pRQVa`A&@hPF-
znDpZh42jOy`{S{zai~XKg7c*4CAeq*3ZQKz>bQbeewsu&q*~IylTw7RwaT+&QvemM
zx|<jrR5rHFom$q?)r2iHM#5oY8jY?t^bpTy*ip-Abb0O&+LoY?b47pbH{8Z4Fk<H5
z5MBh!1?7eEF1?NJCG%uhkzaNi%YL~trg#T(qnM|$c^U4aMAHm7n#=kYf71}~kW?Jb
zR7w}d^Ef5pM_fvS!6U&WzkAv|*XsZBxpf`e*}?^`$;Q|w&iD~Vj2HwL;=YWRSBV!&
zk=W<+_d$Fg^IqM{f~e!n*~0_7H<ZU`4V;;ps;8$%N==O#U?`n$sN0C<mOruke5M?(
zsy;L{6dfI1^eK~tlhcch$|ShV-fBDM;%9ogfxdpT%Q`~Jr#GOXef*~Z8<|!}u?s70
zWLZ@eoA%T^FW)#J%P?QzEsK2uFR=300PL=9_4@b7G6xo8-!IMzSC6Cfg#qn?D!ApV
zOpu{oQ`&obR{LmtBz1lD<wZg67K_Xl9tnZvFBL!7BHnx(agGCD4W94C4SKMp*P@b<
zeHuwS1wuG7<JJ|e^MOokr4`Pp`tz5Mj}~r5LX#8Xe$4D2F3i`P-%%==tIQ4essgwB
z>|{FgV}b5`wJe$eV`4YZvsmZF0jVE_SfopN_mn6gjamN<LC~(KdSx~F+q%b8K>AV>
zb09KKOuq(I>Shqa(b3UvFV?`3j|m5I7Z%m$4`V0mw>^yF@b=@O)$gXvWpuak0(QJW
z$b*?dGQOiOT<r>18safnRYJV=IVnVCT~cc^_}{!P2*8<XX~BN9wE1tBBj@h#!?cP}
zZruVftDwH-7~GvVkB`uxt7I#kFewuHagc(%e8#&`FDQ{<kAgLE^0xK80r_A9%O7<*
zaqs8J$t|~TqZwpUg3&mjiVnwU+?8zQ3h5rzhX4)rX79Z&@NXvtaO|(XZQ`xXq$XY&
z%BEAhEGQ3Q#W_T48aTJ=Gy3Lv(7i~o%AbC6-rw7wJu~ma+2VYbkQ?_?ym=rnPU7xI
zL%wMcS5@7Q?n6H>Myy5h&-J~miJfGul|^!E2tVGlrSIJAh~IqZ8}j)@C9lSd6o()Z
zQ&HaivdJis)W=C+@NtqPB8Zmkc-0&C1Ib!`*>flL<9l6HSirUQi4`;9P{AMEZ7YZ0
zW;v1ry?mWYr7>qnKf<e$T-O8<qs!%Y#MY9S#sTT+>9&WPZ>9zK`OzmFpa>$_W9?(T
zh`H(!$hu5_z6PAZdh6>227SxYNpU`3>`fKvjk)Cgs*h5Ej#TIJ)(~4;qX?7nq90V)
zD#m1`8vhjWE9EuRN$3r$3Yx1+YFdv<V=4U&&G*`T%zMA`xasoH7wZ^e?xtd&!pX_b
z0cvh;77|%Cw#R;2S#{+c<GXs3Ays3fPa-ihlAUqc9BovYcDp&;o0QZ$ge9$0$zha1
zwX4{DFxcfDP+l!cP<bH2T9tW(0|1Xuu7|}%VwM4QbcnWhDp*zU9RdF4HN|^2*}A$d
z%}{sKyl)zLN&Dx=6YI~-*w9LLBVmzcP#Xso2IPI#&$e36tHHv(+|9nb&1qTVUGN&=
zU?5N<U;X$QO=Q=~^cI6s){(Cze7QOR8m#!N8og_D;!W(SlnVW&Iw(bd`vgCX`)Klr
z=6h5B6_YSQ4zu{jPks}=M;eMX`a82e^eP0A(R^neZEc?K3V#cB!7k3J{9NpTduHKJ
zmqij&)6-asrEKV?_6*l^ZPy+@rGm%~^0+48`Wm2H3>e`_SlRc}MLA<xb-?DgY!XTG
z<H3=5fjoXaIL})YVOH(jHVfd;_T4P2^_5k|Iwrophskj6A7T2<Glrz-<~-OlN$GAM
zUpDuqlgp+lZT5sc?w23$QiFCGy1Z%GOFow~>@awX&~8~Ss8~@#?8}B~ij;k=sufC#
z+G@PKO?zPnck5P7kk6-wp@nrbO=oU9zpRKLl^}76AMUyVcFkHvoRuJ>4D!7NxZ)vU
z5%KV@7O*GmF?FCRsg4!1NWoz8R9G<829pr{)Ol?CdY(xtDlb!O!xoqNw}Ep+oJJXY
zq}9W4_9=aNQte57%{JkMd6gBQEHQitu3N>@4l5@+J1(@61C(*>?D7Vjh9_ptX|VFA
zYgpFZ&t&V&+=rc6TnB8~m+_ac{nRR#R1z>jih~6C$i(dvlJ<iLmjz2Tp0G|5wQ%f9
z2Mot=x4X5qwIjfpjDGMP8IAjBDbDX52{(0{L<{^wJX%}HNCq+LhxvZc{bb6~dwGVE
zs^%O#|I-j^I?4UwB1ZH&iPIn)m}Q_Po(0BicfNshYpfn82GVJ@_j-l1A8Vbw7eY>r
zm8S@FRjpxqZZ6ym-1lbzOUl%OCR#%@(EQWh`PPt_nAmcpce>2Nvd$kPV`GUPx-&l9
zF42Hz(GVOx&=G;Vg|FGz=%}m2N=KyO&n=b<om%&6wS}*BKVcR2N138-rq{!YJY?5C
z^|FdYP=tAP6;}t-8OhQH49mQnv+3d9-nyA+{AyWaQGctw{lTqhtw@%1W4$x|B#LY~
zTO-kw{rv;wnBYOy3*xW?!F3PEyYo=DA_WG9A}daIqcpLZX<Z|SU%418OWt8p=aZo|
zv|>r?+=&1fwKERN7szs5teBQN+_>u<j1<(?3GO-J?k@D$=-3~GJ(6MpFNbJbCjueM
zOXCyH%=5b7>R&NfIM{u5%Y}2c+<ow{B<@3lzxM*}4L6R-?YGf4(7g(0|H1UEdras1
z(16yRzt`V@c{y?`Uv`W>#);6HMNW#Wp1ommCfCir7HR)jpyo3(rCWw%j}U|*{&7D2
z?#lRi%a}Q@LMNB|d)ra{5_gQSnzVsH5ksb~|IJ(4C@wACoF75LD|po*<o@k1PbVq8
zh+HXb`L+I=wA6Q};Sz=<Y`*VqJ4SAnrDLnIf>>m7SGxz{L5P=9RiT!8ZNxUiZ<8CP
zXX4_RMDp_-KuxZp1N2xBcg6=jg|Amcziw`_@v`!8L-buo7Gr8f)`b%L#mOV5ClE8I
zJs=zn4U;s7cgW>P6JaJs3MbPGO_)Rm_6S*q-4W$rb~HXuJuT(ei{#iFKAsOcBBHG>
zmL49azgxH|9BdS`4D=0}cqEd_*_b>XBj+S<hVO=0fsl+n=UAjNgS-u5;9N4%7|v`e
zKWb|IT-{7z=zzADR*7EiTL+~WV_i@SkKl(%kcQ?gmp6LI@qTaotfFN}-C+*R<b;S&
zT~)I<tLJC$P3`im8Du>Nh@1I(sYwu{I^eH|own6ZWo1PL$46{^yVjyh-F5!{vvT8r
z>#_Eeoq*#fiJP&Try=pPsN|@v>iql=jnn#r?5uMIHTuaS=o#~H74Of`DjyIJGKjg*
z3%Zdh($CueYRnqmCKDq2L=&iz@|h1?{(Oo5=9>sWdW%X=hJD7HeTPLExf#769flU_
z5lY>@v(Z4jJi1IK_LgYAwZbQK&6l<V0f!B)xZ9>53v*cc*}e<#F2V>QDfQ0J{i6<)
z$7KP>U;wQXk3gB*6XlKTh_yalUA+LzP#>;GuNw|jJv<1j!hh5Y8agVm*(3XzWnlOd
zB`jroEVfIh-HRMwRR`K!X5hn^v$ek!Jyl|2s$p~5^_awORXZAoMVJ4C*zGoN1$>qF
zcu<KpTsR#h3zeLkrr-7U*z1~CH|F~wB!oDx&N3FKL!3yoxOgzx>o#TX_w|FYd571X
zgMxid`Sfc{dsuJqsL*YyD9@<+cq*l`^844OTpPzwXbAnPq$A&qmtD@uBP?l#e;dZo
za?o{T=3}JS#wW5c_xJDI-#KFEt1rE22HTL*gTo_o3aXz*zpa{di2Cw!O;Ta}l#p7c
zKx7NAyl@Oq_Vcy1?;0X?Aa481LqOHe7xu7C5|;*^Hx|9D`=VLpOv4SWN8fI02(Us>
ze&#!y^u^Ivdj0hiq_#96%|S9@vVyn6@VLr1eoXgz>dy8%Yvbf$OrF_nHh_k8*Oh2<
zLN`PzqM|SkOMhFv^~D5@G*8p?A?beo&`w=eHUY3#B%IRQcoUSn+v__N$UIv$)0>7J
z*j825L8cosdOwqFNzZhZnp$~>xzndbnd>@sO&E_1p$ahfU1Jl_VyGIu<R>ITR?BR6
zwd6NX2=Le&bO(mAttxkymGuCqvJG`XdP9a<E?-O=yV5L|EPU9Ru24ljai$w^#C&Br
z5WWxJ{>^Tqn@VmAsW`ub4kP_R2<b`)-X6G!*3l*|N;B|jsA}~_@FzM<Cg({>OfhLO
zGTMj_tzNum>9rRI*=jR=_KmK?$1h#GvZVg<;c$a}WsHZ}s<@mv`+*w#dJP<tomByy
z<8?F;f-GJ4j+_HT*lr(pB*vZ|BFSQYZ^Mh7$xz>qs|v1s9SJIiXEG0nq53WThX0!X
z<h~VW<$ir^^-=Hg{>hiXeuFSmLo$pM^O~EATEJ{%)@ki3XH^E}Hb#*P+2oU0s~+6(
z`1srXChn%>VAqeWT3SVx6~QnMKb@*7zGVu>$XjJ)ujv6JgAX11g<*<>@(uGHjdhwH
zSA)I0h-XzTe+1o$y5R!GcvY<|Je`iudG=w8F!yDk{<d;|S=qeN>=!Fj(m;03(Xo+1
zE#mE+WSt2G$S5|_kTT}nnfKYS$!~UDLMI!g0kZO>8b81~L78QcxcwWVLuYxSWF0sf
zRto)eyz2V+>JlvyGbI;QE+J7j+tgzdr^b>G?-vh}hIabRJ~rqJY9l{oP1aiohRti2
zeWBCDr%Lagb@8yg))vAOa)%zf$#hYG{kAc)t}e;5-uFYGkHCQI5Qzs~>ig7he;>};
zTc1w+UycGg2CUmoQ++xP*4Ex(W91k8aJoJ_+!5=KOWX)(KMHsm4iDG{7=y2lDwkf)
zd8xnuSgsKq=7#<HVty^h=r`uGN}G-q_(>;MGiHsjuT#A5kkfY^Q?I6%DQi{=*V1UI
z{Q{9bv+?J)nH*Bup2*+3PszTmk6WBCvE-oJ<rJ}-(DtjmzrG`^t2gU60mnnx4~K}^
zt$VG4j!S0*o6FooeXNrGJb@lbb%ks=Ipzl3!4qp8XBfXr^xOf%ZAt0Kjl8z<h25kH
zooVdi!Y0WHAkQf;p`bv2f)=-dwqrs|Pg_r4CY=qI3m+6tHttJM3m0C=8>jLc439D0
zi${AEUZbrx%{eQm^ql0w-j*f7YT=$mf!&G;RdMehNy+k7vNzx%k(vr0<YH@Y8Gv8w
z2BymF4rc2>-_;3P)t_wP7PM?22UcGgiin!AvfBA%(?pnyN4*Dx)%u4jVz<?nq_>64
zOy^**dCZ)#?-6I-hrzQN>f43v+m`G#@I)qO^ZG1#*7ZQq=ku54%Yf@ZAWCUWVguQu
z_=enAE$!BAiQ40|+H<#>_(q&Hbbl52)TNL`!<c=RV11bCt}CsP!Og?7&=sszjvW)R
zU=tSUAb&J3!_57wU6-XJ=Isyt<?nUm^GlsDR2YBFMIoC?;~vDx`*|nprP;vv2K|Kb
zxVUwr)!6$4`=n`|6ym$h8?d1_=G|FC$}ReEH@1oclFDj*|2_<Nl#QfQ-DM5jI~<iK
zEF_e8=K+@tk3~>!0eA4|V~Gjh88znz^RP6{YvKK>IVjv$SyEV*Y--})Sh;xIILKPM
zRZ>?*e9!unH3DY$@<AOnn5*Q--mAp?azyV=m^*=a9@?R;a5`-v4AOA0_GvwybaCB3
zw1h!@+aP7VrVqu`8JRU7e-T^DTQh`nIy`5XI@N~Vu>w1Fz(>d5)Yycms+lAR=7Rux
zl1GR>7dkFaXNwC90~Yr>f)=o=qW06NvE~Ck!Bx+EKUWDbp;1D0JH^N2{5&3IWWnK@
z8a%4S!Dkf1l`&$o4|#q2gE4xhwiB7TBF@m0KI7)66#w(>?8lRa$D0@Lp@1jnm+Qa&
zFlv8Tk@&L~!R?Fh+{<IA;ES{lp!Ho*LogrI>E2`}Lafds5N!E`NF9>PU=5PyRb}`g
z+Yj*n==gq~n*h>M-A9lNBNJ3zwlvc$OjenNG!I2pE=+$J6nFMSH*teIaIS$z$PTL}
zn=`yjOcD~G+bZFC5S^%esb+?0=CQHm5;q*Xra0&)>T5Uqx0O#D>Fh6L*r}DwKSs}A
z(27aWl@%8x5_nJ2vbs~^Lp6zq$<7=WKO1-Y-4Ly?_EUy>L1D*0=;3k73U$-V^@CHu
z$`Z)gR=556@bwyt(g)SCazE$?o;1*Ifp7dy{I{MUz6VCmemf5@i6mR#YqxB-Kxp@B
zls~Eyi3o3dkLw(wHn8DdAZ4#ErR}m%5c=4+vvLcyZr}Vc1|Hz$ZWrB(ReLf%c?>Au
zP<xphYkhTk?jio$0lt?3qO9o%>EsZSpA+<{I=_<%^VHs8TT|_fX7<~36wFGse(jx2
zrm*zY`A&#5Z}GO0M|nO<+SZ<&0K%dmeH{Xn?_}Gsu8$INqsV@NNvybBU~{(J^=7wj
zxH$+_?NmS(Qn#pI&Zw(hx8p{|S3NJ5K)x3$PPeDA;SCD{`*bB{pQvN;+&cZ+f>*|*
zvd@OvuUOkJ(_U_XptG_u@T(W)zrpK&WvLe4<PPt1S|=ABR>k(+Y=pV&h8HJMm91v3
zXuU=>@Tm5O{BCzu^S<XI%UvK)r=}*r<P8*o812EQ{pO+R8?gP_E8r}@{dT(j%RcMs
zC5B?d&Wy%K8g8RDNB8S9`xAfhc=4l(cHd$f86$eYM?0~mC0j%-@qF<8n~&6=pqlO5
zTFvgjFq^3PFAJg3oW{I3^17oH2si+BqtssMZ&sm182r(Wu?epkpaD#19@lyAj=v%4
zB4&;MRiRpYR!_AAs}MQ|$TJ$apP06S0Z|y#VnYn5wbcebudqA*n@lta$=kcNbCa|C
zLt~#&E#rr1HNO?D?7J>&BQ+Qoh+)$B`N;SKI@nTwO#k>g*!qYRGA&XUz(@I6M)%j^
zbq>#KZX%8b6ziO1pto^%H}--*6gZ9RmDR*k@R~W<pF70+(vRDJkoAh+aNRr|Wck#|
z>LXPxfuCN;^1rhf7@(5R|79YoPFcRzoekE1EEg!c8-T(8%Txf8vDMqBc|0690Q3J7
z^v3{MdPXxa+ShQ6aYt$YuUv<YrN$f&r0~DAfGDVjgQ{u-5<~Mp*^Fsh@W?v4{C^27
zF6e90L^kNZWR0AMY7G_>=rwg8Zb#ktw;t!uIa}(Q=0BB|nnO*n8C{g)F~*_5*Brv1
zRO4RpHEk0;vJbx!jHNS$0l*?l$^SGOJ_Jr7uzr>MYbqN#5~qi|ovF9by*SX$-$k5k
zi`v3}@LBBJFw6H++=k6*;yU>ijgaa5su^345taWmN3c|x1$p2lSJTZ3Z_C)^mG9w>
zKIg{=sDJRL0nlm}wiWa5$B`9KWjd(VG;jadf1QL6Q5fY@vhThodFTsRyo^NT=xk;K
z;u7Ysq$!mw7fh0pbOj6?Yb2jbDqmy#wBd7n_(5-pFf%2ID*CtCP`f{V@N87dp_<#N
zI*=<>Dpp=W*Ns)^@u;@~7!m%<Cdn`!zMi{L47;gKfh0yXo-&zIrBXIl-HV?UQFD(3
z0)qt9gbq(W<>&|6=8k_btdZ*$;#y8`0@a!;D><M-%Z08+^eVB6mP)<ox|z!MR5e#z
zXZy@I038J~gC!9cbpnG|kA2ie!9YdJud#Hp2rR~CI<$Tvf7<I#ah9f}8&v+Ire3kd
zgQ`)>68ME;Y`vZL;uS1#<f8LK6;L#pHlWjcP!GF8?e<W0q%=B{RU3rvJUu;{KUF=?
zrSI?U9q&6h+Z9)wXOci+gp?<ejiS-Lu<#0PDlMoLeL1$?Y=+1O`yn6?(#t?1ugLI5
z_%SPsT2{f#Gz#FvE13V=f;SrY3MrT$o1L=ym<~hMnFsg4&e^srRJtdjxjC%Qs%i<_
z;~~cZT2q%Ru*plca6t(<?2UFFiYDg#^yw217zjQ7TJ`CVu#k^x;Rs7(DHR!6my8%y
z>ao@b1X#I{b?C1dkLOrg93n{Dpo^Qqu%;fnXFdO%f}M2Ivn#4!Yg?3whog~}eYl5#
zv2kfjO-cQtbCcl+4ipwu)YMcsmB10#*C&7d!Meds^!oDVW&_X9$>~jljjHNMhV|v5
zLqTDo<;F8ZUp+rRKP9Cup!qfhwIP<kqp__GJ|th1W^^GFOkWumCLbA`SXWoKUWK+(
z^JYXikas7Rym|MnTk-s>f_0Y)Sp}PliVE1@ic*#yXJ4zgjRbOjeqvNHXR2!aXOK+Q
zEP4zWe?!vvnL0}1fIOKnGyJ3>5UA$aNXj{NNjk}ZKIlG+n^BKP{H1e&V(Vk64TR6c
zSF2k`lol5)z%}7H=4~T(d`|u4b!q>5icbYuZ>y+8L4HYB6-Hvk6<jr~%oG^lhUO`w
zV+fjHz58pV;Qqn8B_Df6D!bqB@l4rl{HK+b)$QT8ZNKB?5B@T_gM;suKlt5W4h{}(
z4W($9yk}$V#O9cU<FIbb{>z1nh%uNltok`J;PakUJ{RlZ;^HEDMkAVqnOQKHn25*$
zdM@O7vbVR#Ydz}HJwJc@_$a!X9_lUmosW0=XJ#fPf7iG5^>vdf7JGLguMo@Ap}08N
z1cmR)e<gV$(7xjG{1oxIW{c->T4z}%Kphg5UKAR`UJj#n5vEG$8L>z%OW`nrp~}f}
zpYL2=V%=OYYD^KJN4YenO4E`i5;nwJohzyvKj_12Z(-eZ80QZe{L;l^Xrld+$i>LJ
z1f>f1E_ly>vfv#E_DK1Hh@Dwg2WcoOYt3b8tN_d$T_MqoR9i%)v@$O0YVBQ6_&^h=
zv^9Luq7A6H_;}sI!eW0V&j`VR*57Gwp&m18T;Ad%$ponvlOd@KtdS7F%>Bv~C)U=O
zN$}Eg!lg5|wk#tMLAlm6@oNpFY`|zurCU6<XQ9|aSGeYND_sOS%-xt`uwFhb5iHmk
zk5ZO4WD~O>Sb|TrL*e&?1$STq<vrnO2)L_&;v;iY>a0S1zbFPPGUQ!SLT<$PB`OMv
z;>+YDUgb|_Ru`ohBm)ETT>iY7^BowB=EhmP=Bul+R6N(bUFEDMtxM{1s!Ab+I*INN
z0r#B>GAPyDx)A!0;g_wPS#)ssM5ElG1<*|uU}9b1?lV}LmXAK9_<a{GoOR`ksgDQu
z;*~DU5>BN?VaR;Gg%D)BKki~Kl|)^EO%TjN${+FxP43+$0W#5RXohS(oQqiTEMkpz
z>KbF4fq?;CXWXiA41i|cTg_#qY!XF-?rSL<z)sFVye^V=fhW!w#9xq)8GljSA^CP*
zirXZXCT4pG`!QNaWie(0b_G_wZ*?cPPzNh(pn>+@n^eZY1u`Hb*C|n1qt&;Fz|*|X
z$JTOHIHAW*QmB&tj*_EfBLHF!hzkCGrz*T6UyMmg%5_#4qg6_U2>p#wmK)8F@Z@(k
zyO<LIw6m!yEEAcT%a#nn_WmXTGJX3~@<QLhpvCU%b}K71*xVs56&%XLg;}T;On8NF
zhx<;Adwf*5P7cil!@tlrA1<Ou5l@+(J1uAOu!$-{NuI8GW(I%&ul8u4T^m{!44hbq
zOyiYIR($_EljStr$w|WUkjem-G~6Z22%?YoWDe3^VvxE1B8$b$R1pl+3^oeBC`(74
z(LM973XiCa6vcuj%gl`uL_-p)e+{m25F0chsycrDh!k1bmu7cz*2gN;QHy$Og57Sr
z<1-Fw=ql4-RLRXkE7(AB5}||QQLeWL!Zu!*YBK1Uj(3>9$utg*NNZZPqJ6-IkYK|x
z+40~c_?6c#*+G1|S-JCSl~Z$Q-EeTs96PLFAK6h3y1JwtUsx2VAg}mMilb_V60-`a
z_J9T%UoSax1ur#c=R8_GbSiUb8uKp!vJZ`4$znpe?RnrNn4nICobWu8f()a0dhjT-
zM<wisaLbZtlKoT#ypFwq!=jirCB*3vOA*7~P-Zv+>E?1JgwSP4YMC_>)G8uVigy<0
zOmKyXitjhPT9{trubK#L6D3+DiSrgnkmZiY_sRH9C?$)FfVlUdA;h03Y+H3j`NCD<
z=qz52_Kep-RLO_{YI|sMeQj+QzdDUK{l#86req`{gz57<#d^-f-Xm%Ra5yIiH6s!s
z`aZ08Dr-@CT`q}%NY9E>%ixhg_t$w7{PZ~^dJUm&v20hpeg><MJS~Ic?_$iari6u5
zQj8IFPbBar6c{|!T+*nH!&&g^vql3f++Y^kOR){Yt+~zO!Qx7O*}<Hk#$9s<sF@Q3
zhqut5Au~=*CQS6=H%oXGd9Jl*`(>y6{XP%X+4TUV>vKvSRX4t@p5N*~W4D;IK@)t-
z?|m_|D8}l`l2pF%^0n3)&ZLE|C@$lRq?J@?AoTE11@-i$h(sn6>dR_kt6bTO^^9^3
zuI%wEw@4&7vNg1CCb4XoKTh_+6dCb9%O_0H5q9Y`b%b!q#>i^Q!w+3ni(|2oFb^%l
zFpQE4&9$^1McJ7*^}aVyLr2FrGsJx2ika<%KBcBF)VsR7F@p9~ZhwH$vt1cH8O{^~
z6RV;Ixx4IrxYm}sF9RA2YaVVlW`^yPxVRJyEaLIQ_2~W%xU#}AMp0of@Sen&k`4#U
zO)ELU$y~o9zCgHfQ#uakWD3K2v@8U^N#`s((MrDTdWXRMm*0JHs7amcPD`^_bz8H9
zcY%b1Wcu}WV8X5)S7^c&Pp9PmXnl<HLwXuSVm%FL7(U0vy|cVR_-OHJgg??u$PBnJ
z290mM#l_Kl$CPW<68K=)>uMJ+Q=<9iH^IkK<sxKV^e8y=<cQ5FlnFJ15k@34r(a9v
z!9$~zf<N%;2#YC*m+U);_de?L8cZm5G(0SnoHy6&O2;6+UzwD%Bp;}4EiK;U1g$)u
z57s+fJOO-|-p*It?^ifhw<#!A|6-+3hnBvgvI!t>B)$FWj>H@yXR>#TOG@WwHj|g|
zoxbU}5cG)9%(NH_<@|H9i#K^ecO5gp87n`(nZHvDjV%?1PuLm<T8nMR^@<*$$2X<F
z@u56!y_-Kjsg-1)LGwDATd`l!UT$+)qrcKvUPcLk&Hy)HmxJ*5j5g(Y%c~c@gmD2Z
zl(*<+CrpC&m+{L07RE^%>c1RCdhpHa+_f(GDUg>sN9#qEA<wzYP&Eu|{)2OGih+if
zXV@vN0*Drl>X<bFdTmMBKV8Ipobns5Z;G0i$n99Jo2hgELCopL&h|N2As7wiBFtO~
zT^lM2_FCqC1p<cn7{4!hbpb~Banmz`b@g%^E6J;A%6*IE-BRsd5SM@BE#Bk@>E#>Y
zmY%E)m9?!}KtsNH=`XQ;<Ls-`;hCWP=HXfOU377Qu=^>wuDeXm__2p?c1An7W#u8#
z;2)km0RpxRE=B0AW3`PzFdDf6_-}i%meOLgJ04{kogGsJHoqURP(zrPUt)Kzo*`U)
z$~XG2SvJ_ipbax!WW--@K-b<p_GHo8zzHJw7O5t7<UH2Qz(B=KOU6h@d!18)D+Kc2
zD5+mZ2`R30KCo(spT(3-FB99!`hCFm4{M(!+EXT>y);c9WiP6~bI~|d`9Dznb8N_S
z>EbUYa-%CVf(U`oEQ0#~Q24L(RTD>Z1!%uM-1sX<>!|%%9{v@A6{SoC<5$PGJ^G#8
z$gq*g9)Hv}_TO?afxLb-&hp8bC&SVr>IA;B`eyy+={;Ee8hgLMmlm7XyK(s(`b}^?
zg3K!jcDosY=3`ak`IQoKwj$l-(%F$Ud+0?UXCXAEYzwWovDf}E@Xy_0Ejw6hDL=aQ
zF>{QKAC&yE@Pn<N4ALR@XegD9i2fF*{A<_={>JE#hwSgj7ZPawnsH83Q|Q;T>Va2}
z;^b|X{;rXWc}NJ6AqSPB;VqkujZIH1NhZ;%r7pIO=%Aq+$|o{2`9|gH3!SCPuFrU#
zqz^2{{X#|pRcYztX5?M^GDSm({%(D3QB#rStL_m9#^`;dvLzd}m;o5K_TRyuZ*nq6
zBD>3$v_Kj|3~aNEz?F$#%{ebh)@3k$)$!o72E6Fr-q=Ch9##^V@na*LPVF3GKkH^!
z5s?TH9>Y=>Y%IPpkWAdF5o1wtpr?oKB}-f^Hk>1;k3_mM;pb;s!_2I#&K6=j{?eN;
zgjM-KTKU}$Fj0dT`LW%pwfP6plrlU{(3jIE`VyKVq37HST5eIrIWwQAP2|1->@hsr
z(FG>#`rq^b2lQWHVJWaBWAdVaxQ8nJhGT4Q;9o7BUtlpauvi+b$9}P}yMq-A8;OlN
z;&rpYVXBgbMDFG?MgC-ff;b`A&z&xN5n~FU@)U+@-oBNSt_%j2hW+RumdtNXSVX9y
zr6E-CRQ$m3rZQMVlFi>GHcB5p|8v$KTJSv#g-`E1B0xT`JDk?Q_0<eSb(x;%Z)i54
zCnX1TmfZ$ui)PYo1TJk{ho>(trQ7+c?K{lk_LpH6`SY!vV@q`|u*3_1Y*VjknY1Ps
zV`sH?7v45G`P!$f$<DTApEju;??^dStqkgWY@fLxsyQPae`W|njctg$DmV}6u&iQR
zDoyJb!y_ik5Q`hNGx4yJqTzotVDt&vMTUQPPv6N3Jloj^FK@)4&3qd_Jm+&^TaDZc
zIn=5W+U=u=FTujYq_PXj)X<oMXeJb3bRis!Al`Yb>#>a9-i*R}h-U~rc@uI-m^6Qm
zX2W{%dT0AsN#XNNh&|FZ@h*_bI0VflfufmAO9vW>`C-7c*Hj(0m4^%o3v8DU6-3HD
zxjJsFqoXrBJ9{e?LfmE|SWr0e?(SwViPf-BDL+~Y`|=&a4pv&6#;l>4&(<dbdUWcs
zB~eydJteGw$t=OOE$Mc1rdBAF4QPtJEzylhY-oZIwL3l;5$zK=t;1_2iN6fTGbzIn
z5vMqS7Lyaq;|NLoW{3w(_%!{IiV<7%6VY&vPv$ut$^F~kn<+geM*QxpRFEF&DgtK#
zs5d;R9s?j1XiB3*Lo1{)w#_$}gb%62hB8bUPPzs#fS8%iltx2}2ZDiYI8ltRp`4iy
z5E#5#t@RpB%_hl2j*=4;fxx9Zq}Yn-v#1JYVmt%55WAb;UBuZN-SN|Rl!9=2RrKol
zq|wJeB7r%>Oi6lVjq+wT13AjIMzB19Tf0<gdZQxN4L(CIItbkmuNynh*=jp@{2jvk
z4Wgw*FCJZF@eU%2Wpog|Lcv#NN|XtcP;1h6=?fpqQAc>NtaD=9A{j5v&LUrdGMQ^h
z>0iDh^w2r7-qu&Drhb=(@e^szZI=}$5)P11Q3-sSm~uTr2#wiQqO<&|$AH9iSJyI7
zaXMH-z*ZQJjJQJ7o1v{?{NsmKuDaq`!K*0*;U`MzQy!uIQS?bZyV7A>6KGVT6^zQ|
zzm(6+HJ$1}K|v{x?Pp;@!=}V=z<o!nFxt%^^yeuf=-o0LcOkzOEGgZ#AuzoIo|=r5
zqP()wv}Z&zDZR6H*VrcKZS43O0uwRR^<sS7CC-+}{8#z=(65F7LKeQ@_k>&vSSv&j
z$+ri*g|alJ_+y$3RgrK5oIpKv6Zu^Z{6&6Dc^y-sZ+kyXB0rm$e3$0sj2zmnu_WO1
zu&B%`v|zGGox}4JAUoPDxsY%CF>TeHksB8luApeDruOa9&Q=<wngvdEHM~}Z6wLme
zZ77jg3?3&gE^cO4J_cU)Uq#l6jfc=&erQKq=C01Cjlik#Fh_V~A|9R=n!cde&fk_C
zJ(;P)%9w8_DonU<x);j9^kO!lUEWSaY57m+=i@6GZ{P<IglK)YJJ;WUw*+6d{~#2|
zG$5xK8F42tGQKB^SZMkT$JcEmA{n7ZV@f@YoM@P|eB{dzi!0cRM$HVLCveD-JQ^r1
zxmA!8A-8?cyc1j2yKP5FKf98d<HE#&XZ0h_4m;c){X5IXX9u2i>;*QQVloPfyz$*;
z^;BNm)JWi^4aV0ucvl&Gyb15xd+aaG{uPyZgkW|cWN_!2j;S6YL2Ox3Er#PxX<0#*
zLhUlpb4KWQiA=CuHC}X)TUc5bflpbgFV3j}gN5sMb7EoIT7rkl?=V{&uty~YoGDj?
ztTfX)t?j5bq8E*oU6~9++@wxvYHnZ>9vhs++gARO#9;tzOOI>t=ZdcXGShTHcub)5
zr$svmme$Yq1Z2bliL%A?NZ=}|dR(8Kfo+M|?2HD(ZjBz}$SWqA5f{S8*yqkiWfJem
zV^Q>atjwor-^%ZXhXVs?4g`a`woOmC^ww~HHo8I0@(8Ea!{U2*Hjc-IzJ~#Y=mohx
z?XXb7_360xwE{45QV?qS?fdEI@b6>SX68+OQ|pv4_TE>?YB^Qm6nr9k5BO9Sg@QrP
z?8p+g^t+PpPZUr&=5Jz_+wVBC_Y^dPACsbBSDT9<+wfZML|on*O$U_HEiOLCdm(H{
z&Q}2x$ym}+6(1B-tWWSG>+6IGW~OU;Q`1j*&3I_#MW*@eQAZvI&?qG&tklA^x<}jD
zPr8Bg>(fNGYgQML+9d@+yj&67B7#3eZ=;i@s+Q#1d$FyybWCS2#~IHO3EFnUcsSMI
zHM0!sQttDY68KM}M6mUg!h#GOO0<yzG;u{$m^C7IZ*6{&yXooCBsmS#cOSlm5b!Kk
zyMNN`Er>c+W;s*zBY!RX^GgW5%z^&w{b&t`Y9-PrX|Oox&IGpnoyDNgji|=QyC$uY
zY~@=F-oia5=t|K3iH0;{2DZ=acyq>r=;*^!G=X=pM5ibHx>I<Z<B~B<HI|v))+Cmy
zp&Zg>8M@#M1b!~QCU_%JpLT~Uk*0Zz#H2D6fw}Ts9MLRzh>Vs*vayGcSZ)L``km|d
zFpiG5iF#kh;D$Cv6~mT#R<XSRCLvN?Q$U~MA^@Bz(4p2{<~t%6(5IBQhU@NWr*-&0
zFJOMZKLd)?6oKUK)FEB$5*maL3?rHhal|ob;+rU!gXpxA%IK(;;p7$zM9M@Ji4q!_
zKeek(k<vFmhqYQom0QvBQKP7)aYW@NlFPWdFeq&qbC9|cF4z%#GlyGI>U&Qd^NxZC
zfm1QT(T6aJqKn5Pgh7!grg^c8UJ^&QNtUAkX*YujyT}8%<FkjU%<g+v-vqU^fzV~8
zxE#jD6iY<+PrplzE0u+-sUm0`ew}OfI7tivmI^xVt5Q>WF-fJ(b_<#K?#@|M|B#Wo
zGko(3G5JF8K)*Qu1u>)67%q751akXY3owUBz{P}_93?;<`ay@7a=^i2J8wKD)F^c&
z%+2m#9ODw4QuMD_pxHQ{n;CJncO)2v@oyD1rYTn(!w~pyDl$)KX~cc96}p_U)z=}L
zG$=L7`6~w0>Q@q@t&9i2r|@+{Bdr7K-xUwP4g1<}2c*NoeP(ynkbeoPP`5hOJsJ3}
zM?`LElu;XCIy{;-HQe)auT$D_h9wHP!p*9N6lP}8GstEvlT+)&ra0~)_ey`Q#PFZi
zuQ|ZTCaelGeiK8rt>yQ>3t<0$7rFjl1+f30%Gs*{qU#%T#BPe?Q*Dgl)zxWn<hpQG
z$^|gFF_t*(InlaEpxN9A*6XG3OB|3QxvGi!Q|jf>@Ov<<>pg-9b<|R|QM{gE20JHY
zt)I&hNr6p>Z+P9@ihQ~SBU+%x;d8nV>gS;uX$=AHH^dljAb=OvzY)T&ieWRJTyaC3
z8|n2wsUJF7(>Pc0Pm`)FkWvhrx^YvCh1?7W-%=#5o5YuS+SISb1*r~}l}hVh{i`Io
z>R@fgs(Q7=otE#(7M}BeaYbgbSAUL-Q0s&ClnH6AN%=All1k6>z6Q%O;PJ_hiP1?L
zzPbE3{S5ow&G&wl$RYQb$&IRDQb}eJAWK0BYj<URY5X_!2SFSBE4Vk}$ls=f9DBcE
z3Qyw-J|B}pa@EmpHX607C^L^xAxP5e8|CoXEtj6(aqD5IF(bX)+sAZBHkc_TpP}n%
zl9Pw+98ljM`ukgwrMhxw-Z5v&_EJ|Sw~@jjngi`Nd>`tM6_k3|1qw*G5)|pwEi%CL
zA=ud1*VsY}eKmZC8&Vmfycq<X{-QIlCJGsb%j$&0S<%=5!+q}kR(rJZ4JD>bN+fh#
z6fe@`n05i|(%E{D#0oq`9?`lT@f7YEr6AZawl|SMLv_ssz2A(GI8td$A`&!2PR3t|
zx@~s<0hfV;F->xfAf#oc6Rea_A<p|n?$g8lJ$>!-vsP?utc~w$l+lf$WSmAsq=iY6
zic#0l+42`D1mmmZi&Soq90vT#_gpbBy>4&<9<9aXA)S#&9l$I>v@%%KRk=$@i7X<~
zP~}MLbK?7jBASoPUuu#QD0zY+D&CPD)v649kjzbVq5AYrWV0>`#xHS(foszd5+ZXN
zAEq3lKpzxX+gE;r$Qibt_wkA(DB(gL2~sPz_(9y#6uv^=$)xy?(8S4&4ELFo$_5>g
z5ET}R6yxF#xD?MJ?AidTpd^&p-tP#22wp$=U%!6c;`^hgd?8Z#dwYxY2QA#bfd_Zo
zRFa<QBU=Fm(i#s@1iqq-%*LNTOtu1~%6Pa99v;0U3K#E|=`ip<4s<Zoie9QmAg(n2
zK-DY(1=Hvv-e{ioh%G~LO}-^2T`C0wSK;poy9$=+j71YXz@KE@-_r$3(|%<7$en;2
z7!l6JlJ^%4oxwsIJRlw<BR{~rLe9*6{R2&(vG<c*32n;(!czwsW%8RqK8s|$&c!lH
z#Scn&f|g&Cx9=vH>fdWPl;{;E!LDRC2q~jH<)&hLVFe?#J9dex+V$l(QwX*Vy9_oQ
zu3>#jm<4qqz~3mWwmZumUo`0MxXqE?S@FL)MH?YM!V(W=)TSa6P$if?N6iPCZKBw2
zE=$UOg=0`WeG`jV@D=G|dY380jKRRLxUU%4X+l^+gT#?5g6X1&Q?iA1O0S?EIWP78
zMr9?Q?z;k!5G@LZFiy3JrjyOFJKWo-7?s0<SltfQR|o$KY~(0fr0jE`wG!bV=RGa`
z?Bt{}p*k*IAPAl<0i}9I(`GXhR!D*lfBIo6>^J(2wKb<YT3sEku&AcZN7REtq#I^>
z1D`Fd2*w3jcFy5#*Lnhj()@}Fv5V6GUb2Mq6Mv-Mt9}j-Qy~x=m$^XXPOS%in!L8T
zV@j$g8c=E+z?L*+g(jeU>hdOCm4-LV?F^v{8{T#5K;8|H9mhXqjDdp}>0u4(5bvr*
zx5Siu&)3o4rTI`mM`90miU6Vew&yXesb{5a{8#dxneSBj{~_xw!{P|GXi?nVU4naX
zm*DO&=-}=?xVyW%1Omz65Exv769^XE-Gc_nn{&>+@BMi5v%l%?>fO~<wbxpERX`b@
z<lzyqBA!3()jlHS$JmR-QMOQ?m95B&Z1%#FfeFm+*j!}`1WhQRWhrYKokX8{C*#hU
zZmU(_G00YoFxl6flkql)L+7VWGv!uZUt=oweBd#tFru%^0@UCG&YjpR_Os=y#xuAY
zf1;I^vrH=TaYUDx$WV1gpRu58x+Wmo(g$S^)NGizKrD%*t}^8$VQgGw6rn5qk7~iO
zQ2gFXo=2hKXIf{N^Xe-$s=%QlHRyx?&j~{m>u~z=k2Asu(W`kTFJtH@zfpk}-YG0E
z#TqW<x|SbklxmyyQC@8rQ?X)jm=Tzy2G};>50nTHR4i;csxj;9s~L4x_xXOI4C#%f
zP!=WlKJ-FM*YOhoy3z$i6u$|9-?y4@HV%f__Ny5p=@kS_8|6z@#ewzQ_wywd3QGfr
zST_j~?XW3d8bJIpdrs)v7YJ_A0PRFI{9^9Na;ky)p19M1oyEvcFz7Hhp4k*yxcNzR
zn8%Q+flKvT+$?<-3w2jL<q!1P>{2c*yR2{gjNHt9=Ebx#xMuX9D?mL|hp>hg@XEgS
z6lM1jR<>5ws|qpI$2_B0V`9yPj0w$3YwdQ|-|>Brf)mK0(uRCz++Uv<Cw)@@>>2Rz
zkvJ12^G(s=yhq_!#~#Of`Vl(>M3JhHii!xi8S6qAZ*Hd1HwUzLi@j`DDb>x_{-?=n
z3T5ra{Bf%`r12IP;w<4DoR*LE*-dZ<QnHphGX$<>1;b_O&*GeiaGbcE+ze+wjG)ny
zY#T9RSQUd8DdZx#YAh|tPd-<pEE+&0r?x~!sFT(RLm{;pmA_Lv4{jAv4dIjgRg!3q
zX6Gz$Fzi&#K4k&~GRo7k@4$G-*CE<|Aord8`#^y&D~l!(r)#@n|7uMkmX36e6y;{W
zNEd07#U&(19ATJEVY5pZHEzk019Y*E%R$qa<4zqmC@icNZAwHj=e7fdfwJ|GWk1ov
z8(MzG)1qQQI4_ys@z5qx$EDQD#0{XqQ>w~>ClJs{w`ju9^q4XeR;~-F%nD$x##2!q
zM|}Qp-HHfrNm^E+M5yeY(&oYXoCwe;Ywqf;YwPKub5v3YH1-Pa%t%#N=L9-1(O?*S
z+?6>9XR)N;aC97GpGts{xGd%SkO*|Bkj5`y?*D)@vjRKcZc$O}aZJ;q$39Nqx(?!J
z!MG&{x@W*V6VnVzkgnksGrQtY90b&3>TF{T=ZZ3<jgPaCAoE8xHp?eu(j!HnB%w_W
zHt<0TMwA+Y$mo?a6mVNK>(UTDdeEOO?u(^ne!TSz12MR>@Zm`T6;U6{bSIAf5wNs7
zbfd{y^Ppi>oapEu%^K?zAS9L~8nG_XD#stDYbo<*@%DflI@IU`c<@=MBh%^r9#WDO
z=-#4$53=>ra~{6Q@{Fi#y1k!Ws4?tPPTwzv^gYUk>PxjaySh5?!lCrbrnr&PvOAG$
zdF{W8sGMp=pOd<i3H?n8hEEoD@hqyYfr(RjMgK9^2%;db7q6)LipRW=>2uQR(hyFs
z3P*3f($!?W!9YgJ^gUcSpMpi<m$ifAS`1F~@iGY->X!OPNoLp|6UbcSDlPDu@lsoy
ze8bx-?+s-b^e$1$qi|dVs`E<Un@(Y-%IV;F+#O`ZV$I8>e$XG-Pd|Jts-SygUL}uq
zKG@iljFw(8v2;0J5V#-Xf6d;%0Y5vIjm=>nFjtp7OH_E)cSKNFyv_wf)X9M2;qE%d
z?D?l^_rsMJ)2+Fqqf7Q;@fA7em-e-oe<4hSU_(N2vb_83d0Pu<sJd1`Uy5odqt&|d
z?9(aT`*_3iYacJ~fxD((fUfW=R6%jJW*M*R#<Mg>R`-SZD64x4K<IjU8q-(@3N)>q
zuLSkjrpZMPS$^y^Bq8KsmY85cmM5Y3m66P!ws{u^_Eez$TtBNSy!tJ~=nIr|BC~fs
zIaRu66e)C+QRi<Hb1uG886|Z^f~uJQ<Git<?4v>+6Q&Dk`!?EP_|@e&?vI|YUm(;F
zXH*9xL)_jIMQ4es<G)CJ1xPJ3p(ckD0}SOOSJN^xE>TvUnz^zO!Aoel=FIae>#Iwf
ztMj^MI(h>v9sjeY=~4=Iv6oSauAIwJYz%s<l3ZAbzi7i=b8=x${x;CHlyXTQWB9we
z4lJ0h>Mck9E6eOZAo+ySkNO|fuI=aW!AtYu225-;m6WC%sOonXq_tM}XZ$@2d-u`C
zqBe-cn#n(`np`nDh%5sw=SFFK;r?@a!mf{1!_|H4X~EhaQbCV=Lp6B(a^`SVvp>+~
zci0ad;NnXDZu_RJf|se9o()5Nx^&w;M^n|kbwv-BPQ(8i9)MZY8x}oY^N^=yq!XV~
zqu42Oyw#B0T-8&@HX?{DUhK0taC`6c^ZS=}hLVUeaZ3J!kktR3TJRA3Nza8XZ#ZYw
zka~<~<}vqWwHs=aqurE)*0<#VtgXFNyt{`|EMyaJ2mdqjaUzqb|6;s!W0X6caLV@B
zHu{yzcF(0;s{i66C&JJiJxJ~Uc>4tQv!R=wi3I!&cwQ>2uBmBW@A`3Z^CYu~IVbC8
z7U~9R8$Hw63;S;jazQpbQvRJB1FW1m9zIY`K_>g%+(*r-JO8(GO&6IAFje7m`+wbp
zx<}Z;IQ|sQVm9!D-_9(*2CH$CFHx|rZFRB#_jQbq)IZx!>X5pgHww^)H7+GAU(U40
ztWLl`IseB<r6S`Wh~tavyRzw3t`XzaxlpKr_vOPeWY3_JE#$dmcs@69D%}9m{W5QA
z`e)r2u$CW47E4`w!hVbRANv<*FLVNZO?_N`R44fH`RW|vZoGV8ygS)JzvQZJva#c#
z@_737rg}}3_|mbsmup_<7%U8}$<HKjXR`(e`i|M<YKQFAMN_JD^ltqSXjmV;oO^j3
z97dWwU-(h;w>voPt?GAfLGt^`M2?Yp)L>3~klCPXqi~6(ljFlE<LCWc_C^K%_KNjq
zn-_OqC!6)iRB*7Z{yG?MPk*M#3#Fwss6;V@h1=syN(h9%(vs`keq6JEGwq{zrDtcC
zD|A=wnfip3k+94W^QPxxb93?%NaUu{u-R-?<vQ|vt($Z67oQQ1vzRc5(64b9D>eA(
z29^$}l!RS>{^8yBTFo+O|AH7y6G=il;!168=4isSEswa&Q$}?BE8|8l^Mo&uS0|z~
z0aq~Yymz8xckPgvV$TIJm-ThU&i1B}CIxhY=ljB*0?*8Ft5R^I^hsc3RxKsvlQQZu
z#@pLx>sdn+$hN68=Z@BgX)g5?tURpj({^!oXSO@zrxIFu?ZiF!8xh)GE?5yDp68Rc
zjxZj`Mkq8i_{ucCy6_QM|H#AX740xOVj>1V0ze>@Cad!CZ**dZnON^i^2gF^Wx6BQ
zl+QnbF19ZF%ekST>bPTRX6gjQ+BvYM(`(w4Ya-wk=97HTfwYpxKbsf$P5rnmPkE(W
zB+DY{B|LuAQC?fDe{QS_a9{@Dzqg$g%DHEF>$5I0a<krUo8~cqp3&h<Amn!b*XXrZ
z#~+0hE+A<kJ|zp&n`r9s({8p3G)r2S|5nEmCy$$sYvQ@%#3l%w<73f=WlQaso$x;b
z5tgRz{=!iGQ`Tu<w;qOXLUhRtOyvXi=`T(-EQGf#GM)oY|0;|1TEzlhw+uxE^p_Wm
z@OC6)h72jw$|iP}2#_^9<M~Tk>DHAJE7Y3Lk~^c|jD?c8cMOncz?w49OiY9w)c}U!
zgV?dfmvI+XL>%(EW{L?*=!y{?coUVtqRENN=qtY_%Eyq@ZX>BElN|?Ld}*s!;h-Vc
z@`XguiDLw+g|ML{4}Y{gC`o=b5)7jqV2gKlc5cq3l}qRCV<3I@$>bVfJ0&Oe05*#w
z?aKe;M8nsr7Sdbi0FIan3z1V%;bL#j=a=i^VL^fZWIyA+I(fE9-^D*deRag=sJeVR
z){bDvM{;Z<t}tC@e_X#l2;lAmL=s|~cj9mNQOd%)?DbbG04PV*F*yNgI!!+xA9AYe
zer3b_?0N#+gxOtoJMljbFONl6pkg8OALf7hDc)mt^y*Rv-jcj?pZh7(@euTOxDfe>
zC2>v`aJ<<I-s<82;yZPW5GB5ryAZC>MFW7YV%$Gp?W4A_`I7;p_w>`;UtBczE{@u>
zv$LVHskxIfjwn3w=-d)yVGaA&#CNzp^YHELG>5g87UF$8%<NG}wiUo#Dr`OUWS#*P
z$6_BvsA}LBnZuE%gNH{Gv^0_veaSQtIXd1~d5mV-tpk*uPl4Ci)s+AzSJmoEPN6Ba
zt`8rLPQ1iB@@B1n&H9|J0{vNjYb#E+JIswxp5#JOC_@4YNAkyjsv|mMrE!euNofrz
zTvgP+%ia%sIw|sv1_bS{>ifLVJJ0~@%p$6BI>T29uFmi%Q@DN=x#{STf_&!eG*ne*
z3IxMUG$RQZPlf5Li9nSgu#lvLM0mXxd1XF`fy?@nvP?p8Gefa(5kfr$ClEbi+OMtD
z3+86PI5X80bglqZ%qvJf%~FTH%v~|g1n;#EFGe)E6}`=*hTIkZxVi|vPN{QC4L*zA
z`upIAY}e;8JLA3b;)p-8+0Q-5=3FgzV+&74z~De)Pc6*&>sJyyWJv%>i*-?C8~Fg+
z$&H9Zz(k8>B~ON}MtKm8w~ZIxU-tFGV1`O!1<O3#9QYZ3Hi6G=fbAk#9?@?fFMWPW
zwa~j9FevmFW<^c3N`=P7<bVaGJ9IA$pTd1W*dS$Og-l2uuAhx*oGTn2F(JZ}26&jr
zoZo=!LB3~pi>@|C5Xz&-6m-c{_%oj(9WNqcP}(>lMKt>B^+=wADSfKcF-SIhlMoo6
z=&T*Qe)W+!3Z?Wk#XwuZem{}7qNy1xJPNni5I+MQOdvD>HOGm|^YBmTJSW73awj?}
z)5C0BtZs;QvZ1+t@o=*}aIyzDH-Dvm^;2%lkaDyxy9pHk8-<5YMc@i~y!9(FF#MZ3
z#s~>%c`Rq@eSUgmvh6c0di{&FOcGRg@14%&opha0;WraUiqR!oDhFG&aS02CZ1I4y
zexRc-N8&*$PNYb+w#;EKiiqqRnhcY}XkBS6$j`m<%RozrHum#n{_uL7-i~oH+kB>c
zEb}tFn?LbQTO9{sDKMC@alo>&V<sP*+V!K;%m(V+)s(YqKPNf2ZHAGfWTpwa@9m1y
z_E`q<+h68V;P#R<E0O%=cN8@=U)}g7p~caZLxlv4&n2(b{6vlza=H+9T)yT2KD&yn
z%Is8Ji%IwM1Mzdol)IpR5EWBFwmO5bE|Y?H0*yZ##<%6inDx~Yk4cy`U2i0&zMH?_
zcD$Z}-fmL+{%p)3mx7)GB_YkPS35i4EnCU?mu(J}E#rXwri`7~=3S^>Iy(H?V}NZ`
zVpEX}gDYTl+x1AtSRFE7vP1TT2#sKR6xe0I26S033p206heQ~m@O01)in^!%MI|E%
z;0?W?&`I>@ht*Vx{Xks1vyCK4;9k@Op`;1m42Ao2cMQJ>bTa>t#ne|6F78X}s_IhQ
zanFK7145jrU7LBGnJS`Hy;adt3{m>x0%-f(UIg!ZtDdoq1%c1SkQl3^q{(N%kru^(
zC@-!tXo#Gw2`O#0a{zHS1-Vbs2CEtBQ^rOvZyfVSY@#V>-LvteiUAM_CD2#LE+&z}
zn()o}KleWme$0y9MuJ0+Vx3aOhzdiVR3et4MlyTUuh->FA$QwDsRC+Z-hT5px?3_G
zCT}~Hsp6NE!Jx$KMz(JWW6;RJyA*`O>YPelJ051e`uN=QP<=LR)}#oq{YK#q)x)E*
zeIy%$E&K>KAC{lGs{tK{r37I`=KFa7SSz4t#9FQX+~ac?VFOhpC#gl)T|$Fjk``!C
zxkZ(WN<I$3_>770_OR2^>mUnNmGkrbzzmmMuFpYOG9baoJ19i-kBaH_w(E@}yWELK
zllr7X;IxTwn0QnsK?syUmd)Tmm0GU3s)`#XX*PyvA0iA+BPjZ7e;OW{tbvj?*JKXe
z-DlEBKyVl1zn;tW%1G>xe-j<Of^FAo8doB~e|^-i$2Zjfj(3pz2ub`kUEgni(xoS+
zCYuEZ?TSkN9l#C&?UY}oaJ?yvJPqaJoBTil+lnwuvCSlMdQHC!*Hf|^(T~wtyH>Ux
zjXGWC3;z7IzAi0vED8gcX$GzOAaKoz$^9zIB5nX#MJF7ii}aR06bN*5VuQGf{z3_+
z?;B>&F*e@GKCPsfDH(~H&mdiOy-}8bLP`y6gj-|s&w15uZ<N3XSLF=5M~aWmCIFb@
z$MduhH)6E@s3d*;&4YDL1U4t@j@A88#Ls1%MqlT#4V~UP?<b2}I&A;l-VcCN#074W
zne?ecTCKc?gswNPG(uk_sh=Mnk&fQoc37O`1~%Za0Y(2(hj*>w6+-WNt|Ym8Zw)Lj
zw>Ido?Ko#W^%kh;*4V)8U=}b}US>7N&v1a)kAi0kP<7Ky!XyEyBRk)xukg&!#k;PJ
z_4KjvD#>)AYy~=R+)OwiZd`|%XWiU31dSn;&%wZ}5tPlZbevkV&K}4n#?bGm;tPGv
zDF~Iplk7N(i1PhdzWe=b(NldGY2h{bJf5V#qHGYhA|H&*C4?B$%O=d{<nq>MN%ixz
z&@BVyo^(`8?+^&g4_md#fHwZ{=wd>2=weTq2K2<;gKTFELNYbS@Kqt>l$75c!5UOR
z_;lpe&sT~KCNi`wdX-z(Sd!j$w*!F+z2djm_|Q*dRk&TE?SAh{j4Chib<pbH^H^W#
z=f`zAvkNaW<dUbQ%G5ylW^&|}YnwF=loSH!q!X0Y#DPh&!mTq<pY-=TGNhvXCxK2K
zaL^)6<%PCZnGTwIm?J_<J~3fZkT4qUGn+kWkb$%j7yu<&zuQiz#gz+kB0y>!CHFN$
z$C7q=KbNP<ZWSIl7ftz`oUzr^<Z(jixt+bwEzDx0LIsPNYW3w1@1PMGGEpT~%R~L%
zfzQ~-qG9m?L})A^%#c3JAkMr2!#5iau>3(Kovg{IZPMIjg$?4*O2y$KWO}atd7QBD
z@RwfQ<=IpX-p_|iq@fmjGvN6q|3IN|CWNi`Z%?&CpJeyb6=Cp9HvGR1*PFn})PL6l
z3cVZr_dov*HY`MTOa<F{K1&)f6%vB|1e0C5lb5t!8p0m4A2a;C=TRg{f^6Oz`hm_;
zm2HprWpCG~P}q7ZVs0EW9K9&(*@i|gktg}bAe*nep>bw=*$?4q={!yOh>EsKYVO)B
zd3Cs=UtCqC{oKdn+L{F-;cMez-tIVUfOhZnwk}&0V!<i6#5BPl=cVT~Ryr`28P2^g
zvcKpVaE4P*CK3;^lu<|<){MK#Y#H%X|J^x93!t%b^wDP{=-|?qc<`ZBdU>YOmkX_x
zVhbfwR(>7+z*aCF(H>_wN64s@1mhX{KHM4p`8>;Aa%YS|WFz@4_2mF*f~dc`iT~nj
zBL}uOhp$IEohuE6C#~SM{0)=avh9l=?tw<^PEvFNZ_V00fn`oP-xFX|gmsx3Z1YX?
zEO&KwW7h!QeQka3&%c}D$W-y0pOsssW`V7~gW8JJBq7$<>C|BhT#vzThwpCf;GnB{
z=+G3hQ+Qb%)R}D%SjO0O5o@gQuhKx<J|>6I0XZPQ!FP%mR@<6`w=ay53-G11^%d$I
z2uu$=3-}#!&?u3h*3cwp(bVw)`+-6VRgSV>+t;S$BgNWKJ4nIo=NA&A8k?N+HAnLj
z)QNZf=V=Q9ZKyAtt~uKWXBQv)Kr9oB$P4WbL9TXh?ouKGLOTk%hk&UdJfc%#!;F%x
z^-_R+2$U9_aX}U{!))99e)4N2ay8TaWD+w{^!Kb>4`D4-5J?OCDvm1N3yxX6be0SZ
zbME2rC2hZ4=T7>s3K9E;wYxXu>z9Me!<)A?i)VRsCeu-B)waK@+FDw|Cm?=(I53-L
zV5kt5_0@5n4c({pu5%FD<X_)@&(=kOKiPjn6irQlb>A@lYX)2xbpfENz3ddsc=a6W
z&n1ub1xe}sd~GxT)gFlbUr<4v8CXj2ANN<N{p<hI@&9<m{RctNbJF_%?1ledmtbhZ
z{$E1&zyJ78_7CO$#Zv~=r=C*rk7^KY?E>5X{-D;a!wuP9kPY&^&{@I7MW&avcJm9Z
zifT>w2y!{7RTHC(TVq3$75uyQU<wUzi8o}oK2j~$BRxtGO91P@%tUwxm%jdA?;Fad
zrF*BetU9>b;dO*XF`6O!u(scB+-J?1T99d1N)ys&O_&jtDE=y|MH8!gvY%@riXP5W
zZcQObFo(Ya@Q|kEL=p6ZA9?z+lfj!lssR3hMf#6h)I)bbN9cVZ9s78_U7<<5alE^=
zucI2{A3B8B;Rsd`NJ4*=H6&q%O~vF_XvXVwWP<iXOLHmqb}a`F(N!`6F8v{HA#S~2
z@0A3~T6_TBq{RLZ*`wt0F20#aOyS~sSTW-n40#zXww%77!}r)%7=3xs_#INq6CD$-
z1A~%?T`Tj&`!62^@H@H@0!e~r+dEih5XTXWvx58X_!@;=9XD08I+EoT91I^nJez$%
znxwLySa@On9o7wyZ$Hz(ALPCxUG#B;dlibu8<0?J|Hc52sk^0m#`_U+#b%&Sz=oa#
z28grA;GuI)x}T4&xr*LbNL|~7Bg@ypP2{WRTJN(nPqY`=T1rYIPtiS)OMl%N!aO?l
z%)Z;pJ?}cfOjxdr1k_U!k>P4AEaQVaIk-0)>6)h{fN=gT9$txm-6<zN@wf&F?%RLU
z7Lt3>o%TctY20B6CU4rl!$FQ~m0uT1=%tewXOU4xjYdJ148zV19kuDG{=Flfh6Hhp
zsuuui-N8`jc6E2pS&aB&L;$v-`o3n27^swQ3`7PzaV0g{Nl0hkM#+d%FD;R0TX!+3
zy&zzD_oyxdojF67F?Tn*uyV?T+jW`eGRB`vr}->EpX?DVM@i)l`KhWOcdM=ojP}%O
zcHPC}|FZUm+(a~h#63V84N9hVdtnEsi=3(-MjY(1G?x8Y<o($2O;OW^J{d8F=+P3N
z+WGlK_@c{HXEi42$Uglfdhp<-DI2!$f|*+a9^hen@}dwi5HodFe6<sa4sO0?t%DQ4
zYmmx8SOZnBMTQmOwh$W9aBdo-#bP-Cu#%ZYfE*DKe&$)w%2Yg_gIQV&&lXVpXYj-v
z_mC5s@}0e7vI4VlhJr&S-CkJ<+^}&=TXkvmxIDAA_n))92eq4keoG`F+O7aHsw<p-
z^R#XU^PHIAg}3c(95gt1?E$tcYIr+foC95LrmF96BbZTy)fSUo+fAQMrcq_Sq!Uc;
zniy7ca4UsnD|Pun;^WCwlt*@;r@g_-nC1_tzv7dh<0&6)qLBjUSg$Osjv~F5JKnCj
z6``pH8B!=5*Qje!)+hLXM9v_d+!fqg^~mxHIb>Pq`f8SM_Yln)ljhH`BYuK__z1o+
zaeA1uwG_frX|13!bb3U#*D}M^Z!`WkD5dYI)?T~}s>1jZb%@#m!0|vG9p0UvO~0+Q
zn^k*JKKcdBU!%pCQ$OP&pNvwu_>V_D<rsRvgXyJA1}g7<Kh><Tpz(>~owPEF3Xh1(
z!e)c4!VB=h+5}~36=}PK{AtY1F*%Vj3%Hn2>UKsaKz&cD{YI9JrM$?G3UMGII{7hk
zL7N7H;EDG2AhuNqI5|X)!~(>Y1Nm&@j#WmGmS{%9q@P;nwG7p9gpel!89>zz+}iLI
ze5{-|(vxRn^rFd_vG)+c#z;U>XBqh_a&qjJW|(<72ev1C6FQJvC0>Lv*Sv$fQQwYH
z6{)dxlmaZ_#+u4|$PjIhECvTlPDUmyEG8zssYKG0Nm4PybXkQvfbWtamO(j_MhT<F
zCVd4jWo>dx$S<9#P9I?Zhi~kUy!Ax%4a-4f3??Eo#btS$j&~Le7@-(vyq^kLuUx~+
z3w;B|MnzU&tK)((p0YKaH9*vpsV7=|U!jwpq&Xfte#}Q7qJ4fR?n&;$^!9;re&%LE
zF+$QG_MBZ)KdW4e)u{*+9W$SehKYNcehlJ}i<~L;+r(r7juS~yledg&@2AK!`Qp7-
zT|PJ$A7PFs1Dttup&?!J-Gr%gji`1672)kseq=bzB(GKG)cV9nG;+p0#FnFM#D5VE
z1QbwcZkw)uQF2R!3WTTjT8#s&LJA*yjazv!3?Tjt^44<1|89AvXMixskjGXA0){)o
z0X8Ilvb?0L&f#K6oD{vww$gcHn98we(t_u<o~jSCW<_p#FrG%U+)*^6J7x_&ZgkjR
z`SUsZ&lvgfxpzM^l&Ek~fpwZQk<J9nd|Z{ydcR(uc81yd<Z|ixct5u06yu_M#CvF7
zD?e*m+ICGL&czkCa?`eCrZ?k69ott}M_q;=!{l#h;u<y6uazXt4A<xVV^$U6{VOaj
zu%PIUeNtY4MFF<|ML^e)ZXO_Nxqn|4OIMfl!%un$17ak-8y|-ib6PW7>0Zn7Cx8MC
zsKh({sf!QIJ=WrOckXwh)}*(y8bpPD1(<G`B(_1&`w3c%`?O7%ob)KAs%xmQ4qXcG
zTr+VDa}T-x&h88s%qVmK!C+;r;aCS0GY+o}^@S}`C8Gi7%8T~c9pqlms^GuI1^%Q)
z{p3vz11mVEvBq(-E!nITR?(Az)XGard+Yg!=4-*n@0o|l0p=9R2!G;Qi8g)egi5L#
z%BZ#*Z<N2|qGUzU%`|=W))fGTBQ`;Cp^NgaJmu*kZK-Qk{JZv5X&DCp^%%|=JeONb
z%BWGjz%-Rr`)7g%?~fTV;?Vk^0DlyPoOLa9d+XP24Jj!~k8E}ON@r21zv#sQe&A63
z8>a_qoD`8i8^|jzMFrwxZCFtmRD09<&aV?F2cW@(klb}g048ER@MsfRmN4|sVd(7B
z3FxA2j}k2foj&?T0WO`LT4E&ja|hG2XAs7_=ay`dSL_*=zSVUVky4k2eKo1pg%+zv
z1M1W_udI1&u;Cx$ms{&Npg4svmtc(mkYM#=Kir2fjQ#R7Jg!wz!Jj#unSftGd73#s
zj%=9V#=IC>8AYH(H}}s66nrB!5?Z}hHg0DRyb9d5DLKW=l2WsN0?{3unq^eADWD}a
z%^UqF@Yr!rZ`6+-?=B5&z^=X^jSnrBvYnbJcU?nMg0nvz=H%7dH$n?18y{wikEQgz
z1r0Y;bL8lw(Vzqc1jJDL3M&2LkJ(l_@*}mRC~I&obkm0@*K{V|v~hn=ncFT8YdSSL
zG)jop-e9h$3Y6`mhRV$=K3;!8D*K6(nCwj`g{H3TT@`N8Y?@?vqx?e#h1`amFZ#p|
zMEl45u9twtuo1p$2}H=^et3Bv<Plmx>WB{Ms-=vmMq}m-FzYt=*8_1^Vc?2jj5;Ec
z*GH1JjU7j=kN3}I8NgSvWw_+#xln9p>p-ZOAQ1wayqj*DUtEs-A7cOx&tf0m+Eo><
zBREOQf8`ju@wR_OL|!3En!yVv`+mckD#d4+6~5RWKRe7Of}4&Ptux|9Q<LOJ)_)T+
zM8ghGUOA}-YHPzFk>#Z^YfhSr2T%!$c+TtJNrkcJSGjlc3IaRY*R#3P?MJEc!)Aq3
z7*lnTQ&lo^Na|QB+`s)@K?6HfQlOzdqz|mCtdFyF;F9qxB5HA2hX?%@r(U3&G`yM6
zJE=al^mjq|p}+6vL_y<dAU}qob50zIcSwb1J?o^%d&7zz#X<yRC7V+}q#fa;Z(w3R
zqH9jbd5o2ATqahg)*vh-mbnRNa0YK@Jd8U1Fm7(ru0lC?<?n_f+NcSz#Rzihfq^eV
zk+;lefzFh_fqig>LJqm(qb3Rjri{oyEyuE$#%yBmSg!$SEh!wI6;9Z^MN53iD6qj1
zhFh*M%SPOmsN0?w_?7>t#>*2GJizRj8^mJ0m+g)cbsNrw$3I;n)yRs2a^ZpvVi?%o
ztb>{^>0@l!7Kf?W&dM2j86mao>ak9KBWP_25C3#4=a)xLNiV}Hr)#Uc*pMU2;Yj15
zb+v892C3*ymo{__e_%~GqPm_Sm&;FMk<PjN*}%{!Vm0RTAMSqwvlymcB?VixXs}+z
z@c=$;O3(E=+>^1mL62ry7a?0tOEU>VU-W7AAT9gwwkeWXzG$c8+2EVzO@M9`H*R)M
zbMv4R#~$t`E!k@c0ITt`09!pNdeX6j22~1%*w7B1t-5Xv#DJiRZ*B<y$>~@{F=x(*
zn%P0C72NxkQAv;`s{C=t@?_4^uL%4<8;Vb04o8n#oIMEuZL)<bg-N$uq5+=Mdpr)K
z{)VhD_V$WMAHG2yS3Xp9PBkdX2=t6H$lxz{J&l!S(T8fg&ZH_pBXf8;MaFn$iiki!
zHhJXbh9!ln>B{599377qqs~;n>tcoChH|B(54p{__SHhMRNDI93@z|(Y!cei-aH`=
zCxGe%`#<eu!=;bVKjeCf=BwstU?&9+Web;OX^`xT(;CD^44Qa^btFm(<}4Ygh52bP
zYEAj!e{T6!uLY41{!mH2DeRavsu7uMSkv>BLW<1-VH!GgBgm;_j=D)KwIj(w*M~43
zxab-;50lQlMS^Vj9K4cTP$cY@CmdcEhHNTAW~Q{%M?J_T5#aDg)?+S?K5S_)5OQ;1
zPkVBNJHs1m)uD<E6klO3evVjf*5!4v$YCEC0MSH8Y6`WV_8>zt&=U%z%Pxzer6L70
zW2<?@K4UP*H%kfHV(UPmlG=kr1JpE}PNpBDe6>apLhUdyl;Ud8!HatHxOXxFBD$wN
zSPbz4V&V+yym$jeS+<r(zoNDrDh_)GY2}}R28uK;ER<5#G=p=$Ja#udrv;&4*5IT+
zxZEf|1q+qF<8`uh>!mrjtkSbO*4=5`l2UPHt4iLkl0cSj*BsEbAyl}7&Hk~uf;FQk
z7Ze1pi$jyP`0mPwL{GU}MLS|{FpJoRPaU>0_Dz<r89j0h!DdO<k@AY{hjnN#A!Mv_
z^rfpAtoWU?7F+B`82{!Kr(!V{`3s|mGxNUUo52ar1tr&<H1ku!wYF%aRhWt}`GXKV
zBp4icOQnrcMgPbR?t4to+Yc{+PXxxwf|*D=xU{gUFn3qF194CUg=VcC6Px#R<!Kw|
zH|fIYCh0dNxSR&(PfMvH*7L22*R(3HMOdp@9|agPGLmyYuPa&Dy%h}JOp*^ixB4j|
zG{=bt0H_7sAS9cu`Nk*r7bfRkPMpfv_YqO!H1fTD85;scgQZ#itNVp5h~ojnd^@;n
z`sM|T|7JIfLw@+s+YN^P`<Ke<NE=s-&`(GYi}NC__%+8!Mdj4BZtYZ0WsT~EVs^!D
zl=mU&;t}xNsGW<bYeB0RVLe)2_ND95R$g9SjFdEAa8EwrV(c?@(|{CKEn9+MotB(t
zu)0`9&*ycxh3)%lTy)&VJ^P?LK98jmkJGu@IfK`((<eMmv9w@|*gQVR>%Y=<=gknA
zk&Y6^%+4;C7OhJ3&kcNNM8zS-A(cpA4&zUi@_R%us%vrr(YVnxlku4NYV4Rma)^NA
z-T8F@!=%ZkS!0sdIn}=W|Bf!y4md?F%O{iZJ6^BWYE}OK4tKeOiqot?CzrQF*|Cpq
zT+<qAYJ4D<g<7r1<-{^4onL;-j}KJT5}RAU1MbY99|rI9>ztt1=68fX5UGQwV}Q-k
z+mF~Q(V4xsp~$!5X$9=dO$fKB`0wqu|K5%Z4v6h5=<DnE@b~+~qpyH|j+<#|X>hNr
z^MBjbgL~ceay(ib=$8W!Z1;V9A?faG=?QRi@U;!_w5%9#s)RNkA^{JXF)jTQ?EAj-
zw)k};@<#<?Z0e%`;PQ?RahZ_}`uNZXJ!|QA3Mu;D>m6$K*grma^~ep?6!?4i9vb~G
z0-#_4P|vCP&iG0G_rgbk2do6*z{c*j_w9$lb=}D2BefJY&x#hWbIQW~v~A*9srfFU
zNnxfxqWH789Wy>5+zRUxT-%MzXAPApL7a8uZXzi_w8)!h1oC8BOYdz9JOW`tV^@^h
zEV&A$!{?zhbB*(b^Yy`vY=yP>(MuP%Z{nRTpy1|#vp>;*qi>?h-wzc61`w9>@-dh_
z6OI`jp0<mf*(&E#OxcB5l-n~>CErJC`NSHf1jtaOGyHCao66Do%!q^Z#*ib`9=C(f
zZ$wY^V&SNTx4#@cv7NLh>20XuF91g!Zl_veIPK6%GuV#$ySCDeHt2_s=*Hoy0O>&^
z&#~%HW~QbpGaWa3-zpD~KRly}<nG(PQKe^%z_yuDmd|&s9of$Ro*-j;=|4jO4;bJC
z?j3F*pS^+3_afgmrth-@{fLejp&bqsj786Z7MTUEX8a}of%><{x19tf$-d0jY;33Y
z_V({SFeutEbkr&dUnHJx1(my6f&r*M^!%A3`+h1%u#8E&LP?&|jBt*Tu2x8p*^wt9
z<q_*y0kWEox-f75JPlw)URz!wvf#eu-NANT&ig<XwCG;(u`UB;5;>#1wD+`OA9jBK
zg;Lpes(|E9)p~)R)KV#=g}4&Lg$yi(1bqw)-g$V7JzMj2rKCE)aQ-F^3G}kC-8IaC
zK)Va5r?m<lMbaHL{%L`KlC~`U0}4sgzkQh~_M5}~xy-Gp6)6+X>jBN*gx%K#1dX@q
zjMuyMJT?b=uO%O>`QQ^B5U)yz{hPuo@prNlzsSoNd1l>oSIOR@P>7-3jW6e03)rQq
znI^U}aD>Qg^OJ~*ulZR4mi-=H*3htg1*kT^x2$YYiryIYv-NPJB))mDc{lbAYFE~j
zJ_$aNk58Ykj~i9RmV2$^6c|yNnHd_|07w^|gku6Gjy^TY!PO+!B-Cj+8nke*?AdgZ
zM*tYu?1H7Ju0#+g(w8u?tMh!`b;aUti1Ol$zsR>W9fbj~^*iLk4G>iuW+;dNxQqjg
zO*D5N#&Q%9$b3;{7pf|7T7bRj^z1@94SHmaTUy5#sjw@IpYEeN-_=YdmUVYPUQGGN
z;8g>O<r93^u=eWe!fm{;UF2BvvE_`Pd?g!tWvC1T-+F)YDR~9!YfV#|Xsyu~7%TA1
z{fqh@KBrVZ-;tSYuxuXbn$_B@@qNwcYpNp8X>3o%tw4UyXP*gATE{_5CYe(44BCCZ
zfpFUSme#u=?9ds<7*3X)nKAkGlY?KWm&@Knu%|lF^lJ~~Fkp?>mHg+mM}R=P-wVkL
z2uj!wi3$=Q*35=C<)Q(t2)%QWLf@acrUMMn-$)kQl!m7TEjWq@QZN#uHK~IaG(KE-
z^tDJOP$|R=BBJwAobxnhAb2B1F(}{vwk!Rkwk~E|3njf%lsZq_vrIBLe)SplW>_+u
z?9UL)NOB1V4GhGyq&R?`YglktejZs<3nN239b38MbF&#|d9AtTpHS99ZaVABqV(8`
zoHsH}N(!XBw}So{3!cH@4JFleY{BMpUhAc9({5^7f?vsOY#kCQK-xFw3kTqKNzk>X
zOqp<dd~`n{;WPc3*KI{99*|ZGQF$F|f7VQnpTx$bzcP196-5~Vn10M&?X=c}bqVuf
z_IYT+_z5d=sNRO3E`X;cNJN2}*=MUy>z;g)2g~x_W~PiB{P1*B?hzqIsOUcf3ofW@
zQr@=5w3!_t-1LsU43V!-`qKC5`tLqT-tQ4nY-*P~v)fa*^;KYZhj;Mb?3iWMU*-vY
z<M2}))jza)t#$}2l#FLJGd)QuH2GJz>&z=~Nxm=wUf$os$4y_^^%@a!VQ|WJlH8Zd
zV(J)v?%R9s=%Hk=M5ufj^|Nx)gy&-m$E!DLYKR#5!kqreU@9$aj09u@4<V<hA^tc-
zr8^KXiwu6^KC<zQ&%d2%ozyY>t(hWiUZiYzOKcWIs?iulw-qgPFpnnKILL-I6vGp|
zq<M*#2mK%<c$$crpJ_BL$zYWUjzjJ(jl1u%$P!Bzb=X~9)M<`>nb&_CF6SJ(9ztgy
z+OgX}WNSuS<Bz{<x>goK$QZ!bho!MpLhyR!$s%u6#BWV+9}Z_o=7c!XwP`hgU-jJ^
z6!>!VpS1qH?_h_99l{>4yA+cHF-s?w6KI*pc9bh8dUK<Zz`wBlux63K@M*<{UH|Ou
z{%v2sJwA3&t(yj9@3bkHR@{9y;f{Np7^~m1z&j=WJ8hd0(gP>BNNxRg-h?^v<BdgP
z?k(yX#>sS?G@<8~dt=*aIS0;vD&r8AC;G|g0M&a}l@N5X7ZO^(5hen;*DX+)*pYCO
zD58W1GgQ8Hw=vHWwFhn!rkLX`F$o+QE_JuG6pGT~GTUv!jFm}iej}PZk0jO?FWm2@
z1oa$p2~2reIAtH<K=9DpzdQT*C<gAV(&&niU-9F|t-~xurdG=V?m!)Ka!Ea8TnXJS
zcOP6fTd7MCfv9PU_o5+LsPAJ-CY@0{cMI9|#ot)P?|nxH@8WRza__+5`HF-q_rT-^
zQcK}Oocyd-N|kT`8R0c0HrVKmk6a_4mGLd(X0#vavfFouRev0rX```FAqGuMKiAO<
zh!5%!5cYBM34GjkKT^FG@whl$zd$a0L;3V?F|ud+#g7PR3R;|YPGuljQ{XV5Mh8=!
zq->h-u0rFz_3OlSofmz$q4rxsf3f9|c=Si|PP(<nrt1kslJ<4qjbKU0N9-?h4y-oy
zhpU8PUDscP`xT!hU$2LtGw?B&sA_;+<DkjnyH$DL`#qQy+T#4RccHS*`c_y-4$JG&
z24nY^seqPQM`S6Qyq~S#8WJGr)UcRUW2$|FPJ_fSgE~`fu5x4%0M0M<1!j-^@?i*^
ztNmNpkS?Z~TO3FiEFXXoH9_nQ2mPjv65jpu?qN%ReTojjZ(IBbT2ko&mbdC2`M6fW
zDV+42oDG6sUvxq^C^E_7{*Xn?Vs3~7!>-Px9hKa}J}gdcR&EoPWumsTk-OH*1ft43
z#(G6eH0;I!x^b?`Ju{wV&p#k)^R`P7$aLx6x$L$@EYqAX5O9tEQ;%-Q)cGTryDadC
zg@wds;zxY++3aA&DH@>jWET$LgpbBIs+PK&wWTVPGHYo;E^uFeB~)U6SegtWrWJE^
zIsMEB*JA+ELl@?q9EVL8%lTLqq}tUojDLj?seTItBM?X@Fo<AKBZJ?L$)8Gs3TSer
z8weO=Yu(eTE(%D;0ifiquN>R#x5G%fB1AwxzgbkU2T3<ag5+g81X8A>t9(&!W%DJy
z*r2Vym3WPjlk%Sv36OW;guO5a?c;sIu`7eFGQsMLx5mAxLoXF&q{MX!PKcS})e~AS
ze<%TjY_#jTp#LuZnvALIA8;<Lv4Ezn*O#0+-#|IEM|9u$!wvpHR^FBKa<$%=W_YFd
z31RGV-Saz9eOq$!v^4pW_Z7#qnsE5_ev5I<;i2oMndueS$-}r<u`$5yCg{uvI^+1T
z{s`aX-R4C^j@fRz#6d`eiQsmhV8%qpC2c)DP-xu!^V1pKgh#IJ7s!4sxyO?I6X)S_
zywB#u2RuFmFkgw!BF}e@^QepDgr42lVkzbwt6I}rNwZl|vArE1)pH*dAYwW{>@oJ&
zz=fTGY7F6mx}d({R*~z!zp#)mHFj4ok0!(^DLP9p&iLmQN=A91c006VH`gLx<cuy@
zlIrT&2kyHp6c#ON<jEU%h{d%(Z$g=FEh(ApS|7tDwoj*WtaJA`sm{1($Y&>biTvyw
z1QYG+&4DL&KL(uyRsxiXBU@Vf&y4BXCsfT#bUg|g!mZqfQawpVq75F|V8QrrJHjO=
zQ-jklPULVk2g5m@qxF7>z8%Zd>!x`Hy}tKG<yMicynh7UBtcol;8-fd?m#c7h38$H
zms@a;u8MJzfG8}Cr7bgshJHcVw!^kw;<^T*K?)wmo-$j^9Z>$hQ!J@HfMOx5zL0@S
z0DhYpAO3idjd>rxF3u>oI*-Z;b;+ENpx~2TD1*9Xt3;=WtwVkP*%xv?THgw^939^o
zGYrV>)2#?ToyJ`<{bI%mhhXvmTMIidl&;I@QA-cRuPn~2D@@?R$Ac?P48+yEMiGRV
z-w}fL@#10G;h^(7EB;@*ix=h;b5(4zq~u(idc#?OVC4I^NnZkBn^CN7&n7ZeQ3Xh-
z7p}M2)gNOgheSNP%Q5J;s$!qLVym>*vD5}On`*<9vlh*oT`WM2cS;9uZvbWTVh2I;
zW7Cpn({;fny@vFkd^?(|nk~H_yR~S+?N<9)_&*cFm*dAzo(mtT#5#L~1l!!*7L_<s
zU#<`vBur|mA1}W)Tv6Ql8C*2@>)CqTJZuE|xp7QM5;ArQ1X|76HYgYiKpwW%R-t<e
zbhHZnYhWS-vVs;FMB?8^sHX12DCuS$M;*5LJ(O}@KhesugcI8MNbmHHS~S$dmQ0h?
zpLR-?9NZ1Wl_wis=e8kRG*tmLo*90Ys#PwK{jC+0<9_GfbZYP2W7>)1BXT1~0awuq
z5J!n0_h|<oivxfL$%MCTdeiTEM(sco(g=Wk2FK$&>!+R7?4BkW@|M<U-Hj6@8(YCV
zPdrjFWQeVym|ktyJ6(>DD+%YolG{R}o(ugm%^?X$&5l7zL%emeI;m5>@^n_BXJC&k
zE;Uz#&!dK(><ll?1GU~?OXzgpZ3*uQ)B5H78tv_*>K$s69-77(@pWx^%z8odCh6Kp
z>{wx!o=k;z`cK>p=00>LU)n_F8Q<MZ3<q$TaB#R?9<0~j7xx5jcip)AJGk2N7&j2P
zZfvbyFh%}03U2-0)YH+|-4x(wA>zta>SJ*-Gju=wPTq82p1T;>k^5~HINSuEd(j5>
z+KAJ5-`V-F>9<cqQGYiwkiVZhcit66=r(Ck-~g+0Zp6iG{g8!y>^;3Q8J(&U{O%di
z>=n09N*LS0Swd2~;V(q9GG_{i56tjPV{KOOoEl}9XuJMBU`|xY>2gDiW8bW@-%mhF
z%R5SfNo7PwRnX7F`zY44?6Uf#^<A4dT$hUwzV}P@)2$?ItWspf2meDOYCk5N$Id2L
zmC^Di8~9<9R--&o@m=i;A;|L=2cJh#oqeuU2i)HUdJA9Jb_VXmW^fT{j#ihuZpS!{
z*0hM$D+!D5ze#*!p&;5fM6;SAA<Vd?;pbIj=~^H^{iJ2C_p7Vl2{j;u27{6o$4V;$
zxR8qAt)NG4StZ9HB#}+~<LGlFxy(&b>FOGTB-ZHH66{vpK(5nT%Cgk@RW;eqmG{yo
zfBhQwBgw~pM<r2fM)^NV1GC@%sdxWzJUr}a``YtEZa;Y7%2lG%>*en{enB61UuScZ
zpeDoinOeB9pl#2Uh}YZb1v1sfRq0W4cgv34N_F&abkW@F+dcx7$mF5c(75dxLu`DO
zKtf55?%!7uZteJACyAOm$a+Y<y&dZ3(BpfInhU$XLo6a4L-Df_>xwU???2mH1^)Xe
z+JNP|^m1gU@nH2;$8X8+MY!{?`q}8jM&Tb`;=<6g+ab21U7<Xgx4#aoSN6r9QvK0_
zkPq^98Ri3;)CC*3UeE%5_w*N!e_OGW1k^$C6(lf|0t#c!Qad)*4?ORUtq_oxgFqpI
z?dMCEJ37?cADacG{#c}4TWNHro&B~cgEcm0b8ko7NXKI4jx$c2`2Ybq+Jdvy?Y6nZ
zh~;kb?$pWkP(QyTp^2BTqN%PM1=x@o)lL6K-%y83qsg{=)huFUc2R?0K~x8SOrnd<
zBVNzK78vXo*{h%^%Mm7+v9jY*!odHjw(rxnyW58Am%6><UJgJi_G7!?5+LVl!=zJd
zQ!p>cb>;72e?0@2dbRmKFOecXE@EHb%C$L<3+aa%zJO?Ea8tXCgxN=k5yWV1Rq_~&
zi~j9W!l+Xs@I3f&so&{0Vqjy-{q^QW{cLdoE1%=SF*LFGo&Wu%zR<YPn89i3eRPBT
z2jf&hU*BdZp;PH&*Xkn>EckygsT+%Br%bP9H+By8Z?3<ou0eJeOZVR^1M6$9x`M7d
zL-{7Ze$PLt8~=YXD!y(rrkYFfQ#V)f71M4nFW1x6pWFz3%N-OUHa03XgYorTG5-aS
zj`d;zcDS=!ou-iGq4&f3wu3eFmIDf+A1kWU(_HIK4)vkV^@81yET7;2$NvjVmBf9`
z{Il%#)s+(TY1_Q7RI59*zyEOcO;iOP+QxNA$1Xv{`<ao(w+k2WW;eee|Nn)>ez;8)
z6q^CL+-RxK$Euq|6nAzRB3{WMsNF$sKEY0(OHq97{tR4@|6i!>R0$PGeCc+6@pY@P
zTR=FS7nR!Oey<VH82dpM;S$J|TSMe3X|m-mw6p7tjs=Y>6c1zBg@21e$c&6MoK)K1
z5JY1P?b7xAT>1|M+Vh}@U_j;eeTMe`!Ny$v3lAcJ|93y=$%RXHGrk@*U4INlI?aR+
zi;d2%WtcXZKA+fF%?iIFtf@VLYHEZ9O*au@ca||wj_4-IRzR?^HG)u}ar>TyRTy1D
ziLtwUohr9f**E7UL)2lgmO_{--8!Ad;ONwsBt#<suTMqe!-1@z+XD_mb(yU8cq~c3
zn)2#_wB}kuW0hV%pr9@5H-jWS!}wgQ6%+-8Voqw?ZK0#X>qT$Ww_1Ik*QZnRWsH+M
zO()&62w;YPE1v2^xd)n-3jR0BU*b07ua&*6k6S*|e@-Kw$L+dR6S|qz^HWBDs>c$Z
z1>lMM!-y|#xBUkoT_yq^wCnVWB@t(<U&;+S;Yq-;pXiq20uSDGuqgO6kP|(LCtg`U
z%P7&Ul4FD4g$M9CRd|pc2gK9v3B9Q(TPeP((6}m6_5U}3kd$)Z(bk`sWp2XavC$hr
zUC@Os6Q${3d|y%owA5<)mDFfCd^!8q_`lDdPhU(y2P$x~{`<QqiDW9|uu|nNM-4Yj
zvseRXG%ojcO3WOLG%xTP0`Dg}i;sVQw|D23#4OvLY(bG+GqCKsc7K85dwJS(SynV6
zaw=`O7!e{mBq!ahs`34pP9tc2x-Xa=!V@@p?#9aFkWEv+huOonM@ulN*Y0Sv${`!z
z2PAp$j3fYVhZPs<znBs|QHQ?XK=%rUT1sRU1pjr2J=>s(W1nav7D~cPxL%g$=+*=I
z6q-DIl)G@eIo+C?a_&(>!Rw3?4-KX=a&3-4kQ#!_E3)H6!uEy!dwaxN%X2EsP$8}{
z{W0Wtg=P_QzX+&{%L>AR$P*YH5u4`@X7a?kXBko$EPm~zbv{NnJ#pO5HXu0g3erPV
z_D`mcb~4Sy6byR!eZ+b4iCqu0h=ZClA1|~}z7cg%rQljeRys=uZw$r8b5VddL+8Iy
zGg~kQNjk$}yb1IpOh*M!ju7=-Uz>mCjX1@@z*<n_2%6se1O~1_ZvV`N=C|3le>FfF
z7s_v~ka)d5a!nDO$a}U&eTA0!YghUNJ&lxbWAhD|l;y+nf|$L|@g%o?oeHRi)3gz1
zg=K2Rnd}gLK;d^}jNzt%M=B4#9+<VYvy)S&Mcf?2vHHgPt2p7FKiZzy)gu3(42qe>
zkbcAjKgaKmNSS#Nbar>!b&?%~)sIQl8W2L6g5hJ9Cxh*_R7fw`IBTsx-5m1)(q8PW
ziTZ5U@4bCUON+{3TCtSat}GVM)qceJjp~LQ{n;rzR~`v0gLoZ0259laP^9aiHDNjx
zH+`Tis&$2Su5P)(^i>M<V~6y*UbFU&Hj*M;XlS!9&D7@YMi131G1C#_>=S*$DdjDW
z)s)IC9umqlG*_0r*3Ea$-r!Nsj(~2#w>ahhT^jPyIWlAH4`0(VG#@+<zxt@N@2;~*
z1Kms+*<fB|idl@RBHMf9FJj4GG}j15q>rgXpVai}79xWgyyogG!BI$aFu^6tb}nv@
zJtO_~3A(3VwvRheKXnn#_nCh1ro#nWX~%z?Vceq+?{sX10rM;XK#P=SM5nuDU&OQX
zoYkrhTg==mP}4bdN8;t<KW=0GX%8LYQt#1NUWATSXNX`S3jq@h{6!tk)udQ}Ji5|v
zN9`hbO(0%38ic2Bw_YOu;kIgp>S{DKsnmwG98KXl#}I~^`Gz!8`6G$0I>;X;F&<5)
zaT7fp@VbY#wo~dA`=_7HPK{jU{Qm1e)r(Z}Y4#Fktwrjx7y;YUX}uY#`qP)Eqkeq^
z0OPndWE|v62GWzr^CcIyR^BvS6~P74xx4mq=qu#5tD}PV57l|17WkzIK#THzOZ<HB
zN+Kg$QT$o9AAefUKZxo>H@hXP_<vY?tEf1lu3Z;*3mPOy2<{f#A!u-y#+~5OxCamJ
z8r&OAkjCAEySoG$cQ~Ez-`^SM;_R!vZ)=R|URA4B)m-m<<~w<Se!^QkUjUo?o5}oI
z%E1es_sl*%KAf_Tr8=%#T_;mH@bRp8niPwqJE7|CVVO^3w=j7RY-MmAPCuiKbQ`;c
z=r3layO|~(I?cPTu?d};f2{GtaCg(>el7E=_tp2O$v>^q8Ykti?Ndj0WQ6nh5U)3;
zE_R#@sTdyND05p`4Ab^YAgwigSY2F1015O%ZBrtxZEYXv!6Y@@q~NG7Eg)ha&G#$*
zO>%tTH#@tm-jiQvpX<#$vFL@m4G5;Vg;4^6_%3}S`=K9e$m6m%=)6lx4+}-<VH(SK
z455LQ2A;@B83T(fOdA%qWOPx7HklZKJ{JWUfn9;usf1Evm4>4AK84fdECZ}f;JkNS
zrS(8A#KFgo0Qy1%c+U=34-uZZLenR9zi+^qIfRRZ;n1kK&yxN;<12D`)V|PF$uS&W
z<ri5940Rfr2=X7=i)MR#cTB<<wsx<PurdbEZZQ9NQ0W-`*4jwGjZpvY2P4=h@M;?}
zp-n#2-IcH0mg$QRkkhYw_s+&#7aN<gDXMIXmFM5J2n+&<KRcP{VNi~WzhGD-sk;*j
zNs-AtA-qpqv<9<7cAYCJ=mr2=nSnMOYviD)DN9B)d_FDa)M1N~xa0x!(E>E~OI;S<
zEf_N1r2}J!-Qi(OZa2drs>|fV(ozg0W-?z$!q3U{aU=r3T9WvlJk@3y&S?e@Q=e5o
zTw#nFIjmJ6L!I_F4khCz1g4D%T+xVw&jZCxVxh2i>78*$%#i9Y%J0mA!KgoR4A;_A
zyaHVyfyzmdeG##Wi$jlDz&gN?{aQ#W89WF|`91fu)pO3zq#k?HLCyFIZCZU~C2`4c
zTIv4;6ia10itBrdKqcrouWqVWpQUe?2~Yn?_vCExB#0A^)&x@82fN{vDj~(y)Ij>T
zt6DO6ZEr+R`ggVnMD%`sFWtmdgjnm8Q|wp;k$Mcp)|=pkTCDN^P+pK>QjoiwV=_Po
zt--uA9kXB56gSVtbHV&dt~-*2$jey24mZn9=$n3=Yk2_k+Va5r*l2794`wG1v?*gL
z5~F<&v#|*OlDS`r%@8WPmQM%?4Ywx=6A5BzH@>XluT2b<>F*Y2JjbT9IGJN1cp!OY
z0{8gcz;PyamzknReWN|zuJn#hcDOL%F<P)X2;4tG#GqGc^Hnkc47-;E^GchD@k>s9
zf>Z=?i}zkVW^ZxfA-a44YGqo7D5yL+qW$MV$UOJ47#m}L`tnXcHX+Ufc(7#UV41NR
zKZZ8gRjERm7Xgp5>`#UxczRZ|hv~e5pI+I859fgnn}0g9|7X^YaCI$)*k{5n(_+rT
zTSExy32~=}j*ff+Is61P^q_N`+i=n;x^AW}CJzmxO%aBxQ~j-vg%V<+Ib?h4P#tc;
z=R7Qol%o0sV8E8GejZE+9ff|bXENXi$aM&nhQJL|$JN{W=Up;stMO}Xwg_o99ZMmT
z&r7TM1cr4G#hud~6WQ4A6Gt@F?;6!OcA=3|bR(cSlcy6<r?WmPmi=cbJIJGVXVV<K
zz>7Urm@hjMnZ>#;98wq_yeYq>FIgo=sho4pYVqGS<WXuviWvnd?UT8WWuD*Tp;&Ka
zA^9M?l8Yfr;RBKPeK{G$`U&2^0C!7T#nau(^=57Ik9yu+@wQH;T`D31ZF1t|=LxwS
z_vE*`AB65z?+MmTc5Is&SNgr*6&mF_NP|{x_Fj{h1bg1*o-5-#rSOU8P4ia0MiA%z
z1wMIP$b1ZB^df7HxwJ|r4_F;O7qAxU%T)V3;o9qdlgBQ&QadQFq7Rpbuj6;&&wu{q
zkUP8~BLwv%{=b#)THiu>2ARnW8AEaP$xJ)I-<sHMhtDomexx<Yf9~r%?EVw|1`Uvb
z-{>r%dG7x=g${ia{Qu_A|8E@UQsb9#FUVehJG%mn*A<<YRhrKq^Hf^@i{no)K$lz!
zf3}4J22(`NTeF$yg=5UFa-zMbE>CHeh%QaW>bBY9y|-)*ea`^rxb@5b88H%QFrk19
zpGi6LnZADK9s;-Q@=@;3NB$HkzWQU2fVA4tgq8cg>Z@O<<{IDY{&R<x&401>rWCmk
zBRzuG_^m9Vy+~6ul-kj^-weZbLS~CBl9e<|81nWId|QIQdPwm1nMaq2j;v?S#;V<J
zvzODvII+}kK>xf@K?axO^qfNWH{F4Jy`$V2X2Yi^1(Ag`2^XyZNH;Pxm=@L9(v;6q
z7JaD_dy_28Jk`9+Xp_;KPaCp@#&V@UBP)}59o7vy-i(=9HUOD<8QwQrn!7(nTiV(@
zfkQ$Y;k1{5<XK7bE|y6ahrRnJarN!;<Ky9aIy&rzDNi%s9B<Ua*Ar`_mlVEM=n#J)
zVES9;<9i!DR*st;ql>H_ok$__Y~wv)wx>}cu~o0gB+6x~_I2(oO{EgwpE4`TBWS31
zx;8fUt8V__5bVk@PbJG%RJipm%Y#RKu}cPpupai6th?I28-;ejaiSEVnIRiF7iaCh
zxV@+Pt}TA@wQS87X6IqUp3dY}Q_931EubbJn|_tp{CdwKfv!zb*>lR!{LEo&*n%D2
z3~%b0@bYq+G?4kjsY4C(hJauXRG<r^=Cpn}wW1(&eF^-=W!ciSwJ??SbzrUcCwwLW
zi7Xsaw}Gop-GZX(#xb4m`o1!Q)_{$&bJL>eJtW9H;PomF0dK2+dwZLHJwGOkCX+RO
z3OzYM3x%A@89=jG2eXWOizrzEAK_wp(6FJIX+QTdovdATuBC`zI~`{BJ3=9|%_ao^
z{e~nI##{dCi7w9<ZFH4^jnEB`+&#-a1g6#CMJo1BhVL{^r>wM+7I20h_cKY0`4zlL
z>k=k;Uv1_6n1Ci6zU>9N5+k@(9bT^45^gZ?_Hhd5((QHaODrok7?72#r?(`)C*%w6
zygHm(9-&`eT(?jWJh^jN1Ey>duyfd?_h?<*Y6XPZs>(l_HSA}w^}_KXN^NhnWN7vZ
zzRxMHrUD`o#%EFtwq4&qH!UG-9l`K7!5FXmDkX>V23!QN7S9L{zkWS7+_bm*i3Q*T
zxCHm>(1sYF!zuhB(KTux!mp#*IuHT|u}I<BUcXgiow>SSocj}7MYAm#-L$%&+#Vn6
z6*V@xamDh)QlXi`ep`lPH6&=Ab4sK_ll>|JlMHY7(XmX0bE3|6EP{drmawtCqz;KO
zEqLFUXcF4*-4MuQ@Ge@uGGwe1sc-pYKXt8j$|7u`e5riz>&$3x$T+eq7Z>%pe(Uf0
zcI04+)%KT>9;V;uA`*CfE+hCAg!Ax(7J${AGq2S~qOK2N+LS$iN5=G0wIZ%~1Fl$%
z;mrMEO&q>+1{D=bX_1NX^&IUaz<MfCjKPU5@k8ULRk^e%Wj}(7%>CXHd@NV0rsMqQ
z_dv}brcFvL&e=`D0VLmdwj_ix-LgoU4EsXz6aqIjixt9VCFJ=$2`aYn6ydiGXt;TO
z`qF<&JE_~~EgYrgZqczqF6#$6R-k}S$bvQoV2MS@wCrO_X`|d30R^TKELMK+Ce^z>
zU%OfkI}9)!`ulFlvC|tVAj{UmN%vPE+LBjjytLviH^g=@u?G*64->pS!@Y`@SYn~Z
zHcg^(#W%DAv=x*cmzXhnz5I~u#`QM)P3!jM{%;_pq<s-4cxivH+&g8=>mm@Jwr8o7
z`qRtTcYJrr&e5x<gDMd+VxMVm^fn0;7s8l3nPi3^O=s=%RiQ5xHdsIyztZ_7Bo0Bp
z#W0Zb=bRL7E;MbwEru~$YcUcY>Ni^d+TU9_2d$tZKC#WZ5f=My^*&0ji?NyNERu=!
z@6)+x3qBAr*<T2E*&n(0K6G~QyB{(%10zp#gOiH5x&htrV#7aP3{t#3E_6PkyZ*E_
z1#Ow*>}EW)suZo2O<jdAMB3q@d!~+Z4$<p%2#azFUs(3o!TH*Ao^3JYZ3*>g>GY<+
z`)*QqT?lQ?!8qNW3Gcm!;nZjAo>>p;wWHlc6CwmO^?x#K?A9q@&9x^291$m9S8*6y
zC--FiVPUw?jKj2I`U9aYA`NIk`nG;Dqb$%+Uw`}=swcio30&UU|6(oEFnAB&{Ef7M
zq#Xy?B-;dhoB9!X&bPd=;@t>#^4nh~MFsiYshHzA)s8Vs>Zfi|SQz?f$R>MT<=)p)
z#)TbN{5*gK1!81((_%A@r<UB?5n+KCd(u%D?*0f9+e`W5rFZx}VLfx+X)C;UI`Rzb
zVzM4cM;3SeRdr$IY<i%@Pr9{+>-L&;a}(<#(WAe_N=tiE(b?SN^{{MY^T{_1yM0Rl
z-v_ZBb-6;qjODuJdS&BP>AC1{g~K)6rn{x3gO`P!GWWLtM~uG|LjJzBZFL^!12;#!
z?*JUs9jM+wolQ1<=28E`B@T4c{V50dk+Z7Jd!bDp*^w4_KyA!Pre?{(J2ISleE9KT
z0$Ca~if6=cX!t-)y^j@3WVc_bAbOuIzv3Yxb3M@u)sWF=Bz}F@{Chdq%8<p!h7LYi
z=LUbh-ZG-z)ffZZF}I<`G3fJh0}3eQj@$iP&&k-BgiIpr3CziBd$lg@6m++{nIG3z
zC_LPHoapY}>Yi90&$@E_2u?*kCD6}*|Dcyg{?O(Ap;M?QhQB30>O}8+H`DpTJ}4?~
zAGa31FT*aY(Yr`&4i80zfh@>+r?+EqhuyoS>l!@aD_(Kba{1S48(Jc+$r2OKOENO2
zi>V4Ms#eRX7T^=~uhrGjnPqi>Od>N$XZ*sJljBM$;TIYtk*od6qy2KgI95%=R4VjD
zk2~?Xs@vW;*mD)sAXGMn0y&Z!Xx!j0mFzY(Q@r1O&J_XAlub4CoIKy$to06t`<&d-
zg1-I$|Gn*vZGY(<{3kVgt8d-VU)+oR{BwLe(-#wmNhv~ou@g9|Vz?d%mqtV`7kZO@
za_POGKIbgacB1f~*b4FphO3XCMYt_29ag(ZPpg{v`Ya+2`Pn+=JF3t~^c+Q}ojh~Y
zU-R>L%ylFg{BH?QVgu-`O3tdzKXe4#1AYF^j~Aa5T6<aedA?n&-@XX)t|YKRf7=$~
z%?Vag{5r9wyC!njN%*wbnXvoVy*{v<(|__`LDd|{(q;jgSTk(e<+)W%8+_8Y^CYTK
z{soWvKWt+%WLai0(r$r>$WiYH`OW$MbZkaOd1R!=`u`w_xv+p}?3L2tsW;k*km~>Z
z>h(ac-Kf?dC}xQS+Szmu*m;dT;obj+D*EWSK5#o%{SwkU*mg2{=RoeG{J<;7CG1`e
zjg|gIURax&mPvyX_`qxHZ}{KNlB*Dq+w}EMs2%n6{eW+0)3Hnc)w6jZkDt6|-^&LV
z;yKhK+j+Xayly`${x1=iWxet@$Rk_4Q6%cuoqeZwXWoN_mFw=;tQA2A!9_!(wzdC4
znGQB~4oA1gKMH?;<~{qbw*DVg7|M1212>_A`ux8n_x~QgNukU@Bok!m9}Pjq-oOc)
zF~Z7E<{NsqO1IyfdiCX%=>a9N`Ban23#SO(b(`hIS6680K^By~!+N6>(t-qnKK5#U
zOEN|6E~_`B1x_@Pr+zI%MZFad279ANjwht?V3X-FSqW;v=wu@bzw5f+FMyw)NpKV6
zgqPd^XqYrscF>`9pO9{~k4U3<-+P|pZ+9xhq{oCF?!*Pa67BZD^+BiM-?0BF(Al5n
zelgd&w2h1jI5}=4(aK;+{S5gh&u$<9bF$hxe*NVO@?&V&-?#drDm=Zn-d>!*%d)QP
z-?$RKaI?373-A%*Y>~C|$@z`Ku$$(wZ~8KYc?qKhWGOEyb&34?XgDzMuiKtGITO;;
zn)XTmM)tL(+o&tlcW5gvM8<N2T6=)2x{=j~QEfReoN4!zXz*5vNbA{|>s*Z|=V{{u
z`|Ynv&X@;5VPnHgP*JUW-1oL)-Mr#b#QgQb8h+C@eBetzn?DtiJwdRkooll09-%57
zi&w&mkFBcXV~@Ht-$Vyki&X7>mVhc>ae-$W!9!KSwGE5B^zhmT;LYuC16xfI8mtvk
zjLLIO%p<@w*;jf$fpU%KnQZ@&){ly5YMMvUkzC!CF8FE>+Bz<^Pb-rQoIHDu+O%@A
z&r&~q+963bd1NXa?YRX=d3p3|XjL|2<r_1xIl$%KdpUfOBD;z+=`;Z?u9VjgHa>oa
zFXdDW6-+C(_&Zl~oyNeN%#5~%`u1~`ph2^v;X3#iS45?e=lZ64-<O+^1%E<2JCe?~
zm-Ei2v$k_|zt@L@dE#q&jF+u&ic9LbaApF)*Vz7#Z<lGE&DW)(FT;KO(fn@FVfVse
zExUHCkxKqAHw#dlF1FJjSrV64kIi(^R>Sx`<n&d9*B093(^-Cr%UWJsXX$B&;thpb
zUfOS_9{1)z^z9)@S>&OY;&rnkv8jJc$bb07b}C-yN6dW90L@@}7D1)E=h^DlRL43f
zS7-kKem*gJ+lK~-l#PY#L_lewRg{B4iU19JxshsqVd92>mlLCK<R;&Ty)>E!2W&d2
zAmquYtL?22Y>_`79XN-(PPh@?8DDVt><p4;$6wvSU*fCZ884?(xVK*Ypp@9ul)jf^
zizjc#wtNS7>gt+1Qk)-{LSLZrPUNMAu+lsfgvvNwttlznylHms23c0eO0CF8F^U*C
z?~~>nA<CONI%399nSe0}l^ZHwHp-LJoJlmvWp}TU9-38PfeoxEmmv=F211&SQ=%B9
z9>wM=)e=w#8YdbQR~jnvQ|FSoyWOn17CDO4X8}G^?xv4{bI|UccKEvnT3SA7uz)8N
zL17;si_*O5y%(#ZUMOjWeCLpT^?W*t0U7|<R(raW3mbEZ4eInBD*_pavplg4OU*gW
zkO2%quO6h7uEP!7d_Jf#jrdsCUAic;P*<qfNb;G_PQB9xrmaZkdzCpBYVtkZft4{b
zTZkrcbR9qC*Y<@Xh5FM+)z1en`h<$FqrtTpav1@P2sgfldU|l?_Awj?05jah!Wpzr
zc)a%sa@gH=7>dKo((*D}Ddl(*gA{i=@GzKtwFBuCZb|TDkH(9#`F~lr$jlJ{s9Mr}
z(i8UOVh<n=B$6&<X9gpt=dy+YH@kQ}vnCDc+<v6GK<R2)ZVYR|It{3rPSYm74G6;G
z*&c`KosDhshdSWQo-n-Zy<>p`ohjZGD^urLqs+){D+iW2ahBVK>};io{rc@0Q*V16
z*Jn@=Wa~K`?#B9{qBK55#LZ$8gUT<7Pc!QwU->s-3ktZz?W8W3Em*lHgb?=IA8D>W
zFG=(;$g@hicLs2XVSOQ~zf5`0QPME5t3A&>X6=*k*F6py+LjNq)aAG1#+36%RlTBJ
zJUUo541kS&fCsk^Y@c9WCK$)5-5ersbVE#&-$Y#C-oRRfQx!2$N3kD%=!}W=zHw$|
zKqoC7f#9dtr?dU;##SN)c;1+q@!hhI-(}8s2oco}$F1`G2nT24emmS;v;zNl{@Bxf
zfI4qSshM#s0AN@3JDCyQRouxxjh?OqzoKC|n~o-fY^|t{i${PcVB6%UUj8~`Ia1gY
z95CT8klNiQt-|~>E4X4P4(G4Dk<<BozPXm(FG7PztUhctHb?Tw)7mIFS}lx^^aJH$
z4kEd7S?>voyB4p?>gXC^50j3Z;1Fxc>o-|c%~lh<5Kx$SRFY6dXXb8hFyRoKY_EY5
zOg3#5T+QA>5c%5f627>L^9b~2BL;*86ufQts<Df~UZ!6cDpq@mZ0~~MSQwE2Ht&$O
z#iOT-441Ie#G@VlEFyF?-i=C>25Ixse{!aZrSZy<5at}S4#VofW_Yk-_AK`X&C0Q4
zs+jk4um60I{|rNh9?fWK(W=9u8aYk<(uJOiFP$TwUNbl+D{cIn6v?X`;>~b$*;Sbf
z|K*Dr)~rh26jH0iS6$vR#>~gr>C}lc<{0~_1yjc)#Qcq7GW(Q-Hg&3O`7~TIl@Er)
zZVc($M0X3*QM7(!cKoT|)^Xqq4-KC+88k~0xOpJ*L<HnzaNMk0$nnx~TtV*e1Gr>e
zUmC%RON_X}LTDh=t_vP$U!Ir4#KDl<kVQModOs9+ow`Y84^^1J69z~rs?&&3$WmPa
z3`idRc<viUJ`OlIPIXiTsIsqmXXF{eZm6<aoO8B=ij^FAX|Gp`136A}6IOxG<m0#`
zUK|^20S0MzCaYH8O0%uMtgri{MhYcZ`2sqM&Q{jeqP_F;UQT-(9q4c6;TgmnMin=Z
zfjOIEzR%VPPw;B&SnGQgTfaz1xUWwcws=-ekzz{f7UzF%rj&vRGu4SU(&71$0V$I3
zHi9{C&!{hIb>wv4G}~k{S~ev!eq0-#V?3LyJ&m4|)X;Yx_>Y~qNw8}qix+pF6o+dY
z|BPEAprh$^=LO0P^ZCUme9xFy<;(Otod`k$;ULGiNU<DZHljVcZ4qeJVwKS60X(v2
z@~ZZ9esNX4?6GwY&353Xr4rT$sX|-VE#1-s``;__(}1;LT?kCtTkZYkS|kObY#%}I
zC3XX$Q4?0LJ(3v#AY2L-0Bf<@g$5!?-;9i0s=K7}P<BV|mw)MB^|^yli3+puhgJK}
znJL%wFuyJaDqkSId34+cTXQrx^I_WCm)bJ3A~ZCIVjCLWm<TzQVfa77sep6T6<YQF
zx`u|mIwgG2E};2VaUl!3$J!rr7wo#O6(LcQ#qK0eRO#qoHJhg7vY|dzV6onL=Nl}`
z<&bUo`-EW}-SYNd%gCa~U#Ho3jRTi`FNaG9ipJ7nb&h*_XQYMQ-tL>~p;=QzfZ21T
zJ|?V;;rwh)qx^=I<+$-c7n9j2bCyl9SgQ_e4lKaNgbew+C-aI^RFG=N8D{ne(bR|8
z5%iD+=08~=np*2eVI+WwHA$s;2g?#J%9iz!?&eL7@mJkJL4SsfkR1jmEyD31R1G$U
z1A#nI?F+@#P;$I7Q){(yt;#MbQo$-%8wQPx0ZB!WgAa!ILUM3c|FKd=q*d_eF5cFh
z6|||>EM6R}KPDpb5OH64l2lUUY_l|%Ax)H$8O3HrkDUPhj`;pZ)RW5PmlAw$Q6@~Q
zkBB6>ksKxzE;C06b}nB0yp}vbVS+j*Z{?se<8AmxgjJR8=kaeEQKlR)cX2`50@d8h
zM@!ppO8vOd5Wc|QqPm2F=32oZP_>dbx8Sg)l-_$|fbYX;X_X_hFf=ns|6X;&OH(9t
zWQ0$U0v?nvUTnM7IDoC$Y&z%zT~<zIvNl~4+F@ehs!>u7fv7z_(e}<WUy>|L2V01(
z3u<_V;sbl>fdoM&w~A}@iCw(N&r;`_!$2Lq)^ev}8wRT8Z)4~n0stzS_SA2KX&gN_
zl5+wd`9B}rB=twWG};9{!Gb$-YTJ57KZ*x1p-@@jg&D;NbkLqjVY=zw0IEI9X+~p=
zmqnis(Szkr=ZwDR-yz?x#AQ^tX;h}j-C>|c@|cM!ww#Utc?q@Q-X%>DhJ0L`_mrQ>
zYL(pb*Cz5GEAXX76PDmT?wa4cvB34eFH&SuDOj=g$RModV$nMxdgJ7EgHM5S=B=X9
zV14}+{A4}!HLQL>T+a!`D`e2I^Q9e*N_G1?ie;>>#rMRLGQ?(V20W~vR9H<kKGJy<
zU^NS!qi)&no;!E-&IJ_sq!eT-dIN#!$l&);?d0enl5Hhd^ZlHb3N6V8j<w7vn7oN?
z*r3GbF1Q?a4Sv0!>bRS<u^bS2(+XF*{;tm|GYgV+3x$v<x$0ZKVfYW}#WuMgT&*Ps
zeR7n2se><-uQ+C6+kXUW4<Jq;*mu)-nNG@9dDIdB5u5#I7Z#DMykoQC=9*)r62=L>
zi`~@2VS?(ky|Z8w`Ee+#hd9mF_$litq^F(Ys6T3M*6A0W)G$AZq@fqve#pszhxP8!
zNUro2H*t$;#SPPwrA#Ns<OmwoD@%R+vw5Qy54#$w2YSB!oqX#_)7mH<=YD&Rq%r^J
ziOuiWFiP6*NSB3*Nyq{{4RiX%#@H_^42CB)Y3;N?;dSnhrs3qz6St4b7B)|P_rkRk
zmUB3UyG(OymK+!{76QssYX)f!i|M2q^5UbZ-}yP%d<Vpt?9g9?6|2h56xBptXqobO
zZhya<Kle}jTX6dM9S03CO0_?LA$mW$r|$s~=RNTKcjWHacOM<+gV|Y8Eg@o*lHEa7
z4lSa}uxT@7U|dfT#Q{77{ZH}B3HuBEz04nBmw>{dsV^<LYD5-8(?;GhRID66YX`V}
zgKAdiQ%Rd*^W7D+F;PX@F7UH3US2ow6D7mYUa(S(25KFG4Cb42FRgJU-EBjwvR`UV
z-dD0pciYwiP)Tryn=3$TdE?|XS`gKW0S{;9N5i}zst$IXv4&jv-FAoFAwW$<>KSue
zf1I{uwt7smhlc!j*i5ZCX7Nw(pWR<JL-Jar;N<6RzfB=(MC6+B0ifC>Z_W?*rPc%^
z0l(ydbESZsL+jI~C)56wK{>i7AmA*TQN|3!mKGC1({W+(%hiBVoI8J#=QDQ)IkF!#
z8Lz&X0>3wHlv`pCtg=IQWCqiAjX07dVq3Am#v_3YJJTm8I@=&Y;ZMVNMa346Zvq$(
z(9I=2kVl%pHosZ<Evp)o*EtN)o9Cb%CC@G0rG~qzCpfj}VLA{7Dd{3bkd25$8Kn>j
zlM8XB>+!CP!s!tPHDoLxym@sh{=<?^5PR(kIUwGVN6>TLl8y4T=`K4Y3sQ9vy)94u
z1qJn8aS&$b6}w>--X`7IZ2#ee2eaDf-D0~vA*LW?i@aE2UQn{@EHYmu>nm1!<)taT
z41V>sP1Cdfa7iON!|KH6Gbfg%`jn&IQ7n&tDf@rPt^X2W|G21sD!{+2=l|jH6ZC>a
zCgAkDsX{E{&fVQGH!DWExjE;BrzLAbwAkSk$oBB))A~10LXBaN`xxn&QdCcaS%Lg*
z8W9A|cd{-#?W=q#oei8U)38Qa=+5s*hh%#r*|(0$fI5vN4CqARZQU#?)`4(fwdlzC
zbI%sdFZiq0i50LeOdZq0{}vLfd>`5Z0#nobyl&VwDG7pIFbL#2)MUI~q~!dm#p|m?
zH6(h1GcopyA(AJ%d|hhe6sphfbxB<|cbP>7cc*OrsR?s|+G4kr5|X+dZ2VwO(b8S<
z#l-2e`fjFF5Dw7f6mC_rpN6Nm<>i_c?9!WbOlvcktI90*-g({<tGm)8X!gwcNQxzE
z2|YaxT3icNzBX^F>EyInCFN5Zpyr-NpH{4b7j_wywJOn3X<?)y!MhfesaLS3M1Ul%
z@Wb3Scf=o@-g2St^C1r5n{x(I^G%-uLKm=#uXTM!x5BmmgT`rY-MCCMY~F-TXKXf+
zb+u;iekV$dm#3@vupN;hA_xZL>x2>o8mrZdqJu{ojvBc35s}v!hbQ-vlYJLZ_vFTx
zHg8gbv?DbSD>EYC7hSvBl1Ir9WcU<JpZfzpEgCBj0Agz}MB@0AHd=ay|LP?!i_&N8
zbPUlL?KJ#p!A9zve&%7O%c^V4XZ&izI&2`g4`ZY3r6oW07~PwgLiv+}ZCG_=_{{)h
z+Vw&sb2ryjS$Jy0zCI1mbxg{Ovg=xhgk%(5$xqA{kzmS!aCS^q$g4W>@{1!m@LV5~
z)<C;wOIy1GBo^(d0{Tkt<kC-QR5h}pX3cs*s9;*ez#kF$MNc(Hp#Gzei<x2C(X#~W
zt8u~@e}w(S@ojvDf4(Rr3Qd)pZ+)VbbeeWBi@|7vjBLTdYLa}S4a(;jJO8vl0ga#5
zHSR{)IvFF&t=#b(ioag*#2tDT)MOv3o5^VwB`V(`eJEt_kng@+^W308XC@zr$oT^F
z__H{vDYMlEsVH=2mFABb{X@f=yjr&vWviJwB#K&hBY{xqG>!^qYdPJ0VZ!i}LMARu
zScts<Kau;A05E3?p@dwQQ1w-mR66+FW}`#X+hkMPxnVV5U%$00OyY!;u7ZUuZ4|$w
zUytPkX`jF-wgXIU@Da(9DL0b`L-5gxtk6og9aCnPlE0fY6FZGMV_GlfPH*yrOrk=J
z2-QZ*@b<+^N%7STu{EQG9uf5zh(+Cgud`VRw}<nfX;AZ69Jnp#R3y3Ut`PS=Ki@#V
zQAfnCO-{TA*H1BMTBOXrLGM$LnpHz#c)o}eL?nA<$+o@EETgawb0(Sl8dZocUw?)T
zTWqB%<3@gmz9sv(+d$&D(Shgo)T)wigrGId;W7t{!YkNlL=+#BU5-I88Ao3I6nK@`
zY+;M>>$n7?F4y!{o>np&84!te82Ve5`lSZdR)g&`bowTP4a>yuH~gPiSbFHF93Ahj
z2LA-bxY~ZgF;xz#Ph$e_rgg~S2P)3>XRYvfsI{nyFeBj?EI>D;IblplKsTFF?J!cK
zJ!%z(ZZ&(Mp;rkJ+w0^kXIVpz!ctk~QW*6L3lv2qmspp%{2^3&ESd8~Yg9|w-j|aT
zQu8cRUGXsO=X+sNRE^l*=HdbCUQ8rlz$fC?2Kx%59e*{W+pf5L0XIZr6CK_LG+tzY
zjmK;PHBM(_O)aeV4iZFLLQfmtIy?LwcM9oyAP+drq(u~kZXtErx|W1%HU!?t*`kj;
zOnoe+f(9g9@ItPN?<9l??qOgKL)Lm1VWJ=j8R0dzWKYH%+zG4*4S_B8LMXA;VBLZh
z!wIV_l!%9=RZfT*NKDjXXEA^cp6Oz8+th#8_RBh$G@|E#75rF%c1pbKmJzjB<c}a(
zj=0MHy2wKHRucdEp*X|&eWb*Sg5)|CPAn!Em)eF2_W9!Q3dIB}tnohEt&)?Hp@37B
zxF-)85IpD}#rYT?8<q2pu(V@!^or_2PbbuokPT>9*JKK#)|OU3mkMO^BLU>*s2%bb
zcdLSqd)_N4&bbr1&k;T5G&f?AE@LG-yJT*PWia37O~2C(|AaTgQ&0wx2Rr<EwKtk-
zX;nKv*@zyoo!PvRmipu7B;Z0{QYiD)yz}Mu&T`d)%>Os3Pi)~-r1>{QyOD|Rj;U00
z8D@*QZw?|tz8l3|m7oheCNP$?%Ti#eK)wft(v$@6AO2s1BpJwbVPA32BO#Ape+CO`
zbG{6Al8!W9FhK3MF4Vt&{2mO$XWmL#PF<HVMic3l+?CWfE4)ZaQ>~J=jCuggPvU>7
zX>B$UlaG!1+ryOAr!U@Xq68zKQDQ%jW$~AB4v_}-IJuS6S=<}Pw>BVRhe6W{hCHhM
z_^aaa4+k-%WV(XwK~+e_UlPrL;rqU+@20jO1{BE>`OU?{y<=4%rUTX@;Ab6D%I-$Z
zyD`<e1y-=>_rqkx40V#<+B41T8hY-Jh8g}8q3E>SXl5m*vzOcuJ!Wf6Ef>{FCU0{a
zyYFkNX2F_if?S5y>nD{6pzB<9JYmvh=8Vt*H$93IjrNIY_JGrAt+0g*3H%(i9>L6G
zr9!{31*lzAP~14a0uKW{PjOfwpVi!^<b!;dm6*yyY0yHUg1+8?%%d;@2xz8<CPebA
z*_81bUziCrAnP@Yl<d=p5}mu78p5IbNLu9g5ln8ld`Y>YMV<Y(r&1+`LIKC@z1H(#
zqSE<k^5K&K;vVnZN5up_O10*W9|sY?&#V{17MkB$L;70XZK6x>Eebd1b}RyY?N9(W
z36mMj0qazno8ccnge`C`J=U(5fL>~zaLq+YKxD9>U^-WCx|uhJIhxvz_@Iqq#wgb=
zJGf>Ew0#8kc)`|lf*#zkp1B{w+D$~HEVqv%T}-k(v?m&PV`g^+uHS&Rfzv~B>cpsg
zr0^j8WLVOSa_MWznE|eDCZiA%#2Fc9K=z6M7*R4)_c)0}Clk1S(%Y4Gs&G@2bX4)y
z?istAX`eW&;JamhHxJhaYknZK^_yYZE&Z1I7Q#fWGon#_BppOvrKtw!WVXpe9|xHU
z)9$3R9R`tA2#d+p&LL_UlF0?gd=(N-p)!GJysdriL;%=Cy!L##la5Jjczl5y!Jb3|
zEh}7Jq~%#0h;je?!mbPt>Wi>??`?0)ShoO0Q;{_1^)@O`;@!{x)?u;TL^v%&ZHyUi
zN8s?h;REXQAESCNOW%Hbe~k1E8sdPUoo>$t!k0wUXA6)6LeAfzlizD`1EIBq?2<;t
zTjWI>WT{dw^roMiU<!?cXx~4STM_}B^?`>p5~VEuuoRLI`2}aVFAdR@WvYqcldc+E
zFc@QPbSjnR_Hh9eLFU`@TS>Z>XW35rHaB$T=vVfUq?%e|poJXxT=~*6UP&U<z&KX0
zB^GG_m&A~WZ=OPYtEkauFYFatZ5v&HkIKQTWb$Fq>$rL(`Rgwn;GR`Wk*$+fH`Z)w
zSO3A1sIdyaFxVDulC`I50Jlle)h+g7C(F^lvH_}2NPnadmQILrxU2sgpy(v_0EOVt
zE6$b#Qj;?`_%Xq1RFH~+AYfeBLdV34jQGjOGV{E5#b*&4f4}N{?q6w>_+2pjwpxPE
z>e>R_D~;}^Q&F$#UVb~PZFm1(@Z!SFW^oF-5qVKLPhqcn=NX$R8&bcmNdx2qxENcl
z^U1M64(!@$KrJ69IIZUFosG`@-R&Sv<C4YQU6_4`a{S-Sd9R55e6vuN^Q{+Kw2UUs
zxC=8f9IKn@JKhDtH&r)9#=%bsc?D<$7V4o2W0L&-6rD{onqLleSNtPBP929@WYknN
z^!#d^HDa&~B>*^Y+a-Jpz#MT~JWPC=d%K<p0+6YpRLZ!8eqjKQ?Ks*tOKh+8s(a%8
z00@%E9iD!xaIY?1z?b;W$1I5Kjf9GZ6H_Dju`8&{;*kX21aw9UEnz77DN{f|jCirR
zKZa3T;rqgA$<HdO(K>k?pk?v%^EFwgE9GN8FJ4PYs7^5q`-v2Ae728m>5V;#Ek_Bq
zO!yltN@SznWi=#oSa<&mv99J;8l^w%#RiOlS_Py0WKb2K4&2}zl{Ms%v;6cr8;<y6
zQ7gnVEU<iuEU6IoL3*%P<(Nl=ZxiVj=^}YQ0c<PbJlI>gU9J#_i|rPc`lt4Stqhpj
zw8Ng%=gk#+_e6olfCH~mvN)}*pzn`O_K7>YJ*l4!hz9Vppj(ynAm^8gOOZ^mX^}Xl
z>4y{PjPoQj&?Lgsbo8u|VcPztnPHWGjD$Q(KtX4p^yw*Pl)sT<G%j@0PT(U@bzT3r
zrg5aj7rqva&+o^6IK%VH!)Tz|F#moRylej5evDDI#G>F#UeZ<3pBl3rL|E8N(!@k6
z1bqxexNrksD}v_rLP(bMb68)YSol)r=VO|8BVsHwWA^SUJAXPBsDPTl&&OKtY=~Ar
z<w5O27#Ku3wJiatq!w<dmnFOnPfcx&77J1&xi18bHCQW1v&=GhB3U1m)jle>A_O=1
z?H$?zLKf1#*FHDb@0BTw)N1+-%e3+5yJ*ccaS|Wpaho_S{uPabrxs8xVL5Ns%exdj
zHfUAN?)x1c3@_F<p3_RJ>`O}LK*?SJSliPed(>0t#W2%iFw|xv0CVIQPn!lD9a3Je
zq9>6@_FMkmnV!bmx>vb9F<+4k2v;FUm@E}ikiLf5ZXheDDUgkhsMJD`|9CKl;770*
z+K@ubqh*DYXQMI4Dsfn^y+7qh_oWKjd8TVA5~SC2Qg3!XOg+$WZ68Z_Z~VS&F6Bk%
z+&!%aM*i3>3y{wx%~8^pg(<Y>m>DnGV;jUc4vD9Vg3R>4;`Y3MC0JCgE*=|H_=|2k
z8L6wWwt$QJmqzH(ZBnE~V_U-2Yp3K_G=2T?3e#4tnxRqa9?cKuaO}f`Yl)T?(clX1
z+;C(lnp&49Ab`~*xTf3_QaGDB!i4bx3&W+cw|bz&4fOLnTr93Wvs3a7$`k!sBGL2Q
zSj)GDyjr~7ZCJo-z`*;~6UfoWp9apq6<pF)g-bYZufl_n2)}*fKfmY;pY75<(F4aS
zjCw$Y21EeAu9NMPjZ0?)>D{~lh#|!*Y3j)$huV|*f_jXm-JC;e-*4uHm)$Cc*lVxO
z<it)<_lQId-srD};7Jf0=pz(YP?}Vn%$Ax_U#Ni^F!?b+1fs@{_-a=dtJXx%xk6c^
z?kg;P`1OK_Tr&*Qzc?}*Vt`!&2+!AzIs$Ol+IU2H*EVk+zUDJWCf{vqE59YDC(AH%
z#w-(g@yl`dMxp&;`4zL_I$t(bi3v(lpJ5UVkF$Avf)~Jexo&?OT_4EF;)U)a|5G+b
zym|9FkZTr>h1N$dBEq-0!DQZEBzC$3f7RSxJ*OXi^<RX7xqCrkH15|Ox#+r|+tY3A
zrJuKhrPoQ|d25@8pThw5H=D};SU^om-pxNkTCWc0tNF^+8`MX$5CPf;mZd8bLH{3x
z;h#0t|Aw}O9zJycz7Sb%KentZ2nX`9LwB9Q12KaI1a@_m=Kja6%1Ux!X|L%U=pET<
z)d)l|5LyxW^g@LBOFO3o_?IATA=fN7Cq!52ojuA5ROcYV1mP(#t+cIAEw2E9R|8|4
zel^2K`f(l`cbp6Bk2$2S>d;vc08PsIy<IE6?b_dRl>Xs`-k+(fzy&*Pt22@18>OnD
zz^foZkkwZu<uxJ>J|Uq+gBE^K&%bja+E$z|lWz~AZ#$x|I{|O!Z#lEfUmc-n%60Ij
zyQz!qmU#D{mvLl;E3SpyFY8D8l`F`|FKHI%EQSFoN@Fe`+Y51DpP=W}-gLg6biTfx
zzpb~R9Vo45RS~F>r8O2_4X*Flt6Ra#3#-k1$;r)5-_zg>Q($*3LC)bTR-?l^sC13q
zV|KcqzY@{bC(X$@G%%Mz@3>8+t@@<7Fd6VV_4qiDzUuoAJqbD4UCrT9&<jUytK=oJ
zqKjiT`8v+x=x{FT5AJMnc^c>!sD*+zIh#!Ae?*^qMV~w0?%s?~pw}fTP;IHGw5cB0
zWI*J)flq=+|07I^b<x#aS#ZM()O~G^JHDVSa#VVd<Z#Gu6_m!|G(fywzaSgsNkt<7
z(y}ayLwhi;C2kdeWgT>EL)({SD2I2IL&KvZ>+#mcRF%Q|F3JT4B%n%6lf<ZoAPHjv
zl!=JaGYxgtmqkz8YDS~EW(ErmPIJPuCT0W{4fQ*CMBN{@H0!1>hX{!}Zvvj<-l(wq
zxsU)!vnU9BaXd0rOn<CObr<?<q1kOeM1+vjFOvymk(jV@#)=huKA!_AJ;^z9bvBX1
zfE%A6(p2T90*l@Xq+#A8;u#c0!xc!r0zFF(XW`WoUP+3iSjXk6axc(D<4pw-;NWj?
z@^L@dgnFR0H|Z~w%2-gRchrG9hI`jm3|iXQxty1_QrLPIUn~E-JsQ0!04D2}0w?7@
ze;RTc-aIjRf)0p{fZyUPoNerJiTH=Lcnc>vng~-fGrZJcm`tb-A)Qyrbh3-;lT6E3
zWq92d>AgL7_`0@F5{b`-YCHFgQ&nJ}wd)Az5^7h0x}~`KU5GmyV*k>1oSYa}j4kT-
zQ6^iIxjP?I23P`{U=@aLjNWdHOitcjI^VP_b`y0UM;NMQgXL=Gb41n%5aNN;o!j}t
z*^f1oF{w?GPX4Lo9M<}VhC9qx`-!ScyZCBF2raeuTEkO`jrHVYjjiWcm2mVCNzeiz
zyhNk<L1jgEegqH_u3}HVxx)NyB8mqC;w7v?<|5PFILQ6Mu`d2O(~In2v2s{O0We40
z`Ki?Aax---ACJc4`3x#Ss7<UzOzhkrsP>3QqMpVoNSx2Og=S$I4h(U+E$Mj@88FJn
zn&>}FGq(k4$YJDWe!)Phs8pjF$zl@J1>)fcx4^HT9R{Pd$yv)Yr(7AkvFCicLXmel
zMFYu0@{#r#Xwqj4Dx|Dp0gT|D2<e&=vnM@l&xLcg26e2ZvVc1+UXR=67AO#Qmqtqm
zpas*yKh@Pqf0?*==Mq-^5&j?cQRhEW^v53F$%(w5H6#mHr@Ji?(Z6#5kil(t!29rQ
zNX6?EAB4U!66e&dO~EI48|vI9Z@HPPQ)~6`OZQ%lG7H)l5gtUIkiNWQM3hLID;#&%
z^J4(u*H85j=!595ITUyN_;UVc{Aj?*ekac8Rr``_*~;?FloW{B#!B<;MV}@l+KK?h
z+V*sA9H&Ie%)$9Hl?~(Nf^Am97rc(QS07_!Sc1i`a>BGlkj-w%o`qCg)^p<FS#)l@
zeZeMpgVkfsCTnR-*d49eZR~*iLV#;0XjPxrOpf$s2#UBE;1J$4$hEOxFpX;#6H9X&
zDZ)=`@(J|Mb=f5cabFr|Dl(^gX-?<xcy~ab{f1g#fa`f}i9bKhhtqFD&Ag%)^_v7r
zQ~pTQGrRE(VhtI4P?DEu@iFi1A+HBcO*K~pW)Oeeq`SCtc)f;D1)cKyCXdK$T{o;H
zl039~-h0x%ZtOv{s%#{{n}%#~gibj&OtdEw)&w$09v;o2{NURJH4+Ra1H*=PS&?rI
zvDAz}_9kIX4zv&Om`bG6wuHpD>@<xVD-<l_$mH2dv2oaMC5X`U0L%|wz24RIAkTC<
zN%(ZyHofbgrD{%96iJ^F4zLbUMc=*eEmaT)nBG;fDv1s3w01SnGDTh)n>je-rn)Fa
z_Jr_J(f3E)nwIZ2|4niUu6=BWRS#LHyi)L-_t1%tIG(VP^G<(#t^Rw1tiXm2SRy#z
zF?xkw`q}yG#B7z1jfqLZ1-ur-7Q|#II&+B?W32k8^s%2d_tr%`e5RKviR;}&!DsDE
zO?YNjY_?Nw$jEH_tBNos3Zhh0r|-Ehq(ZC{1E77<7F1*VW1tl+7iOcY?YtjeIQ*`n
zog5*;awbF^f;yc;4shSlHhN*igB$NQ@f&pz0%vmf-ApKkY2B~&A@0)r!ih4fvT;^5
zRHMxGtMRFJDUFP{;Xq7XLvMFW&9ZY6qgp=e9{D+;i9gQW$ZhNmHK6gn*oUt<*$K&!
zsZ>xeEhhCmtNDBCYW!RKY`h%-$Ww_3@PJFde|zeDd-}(0BgDYg?y_}0AHO~4y}|24
zXZ<ZhJT*42)DN977$v=4EnO`Hb%dKr7!Taq-Rj}NU>xWdtUZ>E3+NU5-Cjc|>TvV#
zY9mw}=d-&ijXBaVe;X_apyK@bwC>u)l!iIreD$;C_&9Y1x_P(wlV#gYda$6r3<w1A
zl0)^>waDb=<M$BC%`1M^imXU&Gv_l#`xhvdO$FkQ|Gr6aAj##;qSoxQd0MBSZz=6;
z+4&*<n3M7SCldDdEr<Yrz*YCMM?kTy-Oa>v6IWH(TJwvOnR2MH)k*jCEIPEnh<+n9
z<cNS7P;tXVNKQmh=5;j}N2dSFd7h;vs0Y_l7)S{Gdq&2G495CP2GP(OTe@x8BGCAN
z4Emj43Z!PP+;njOYQlx`gzTS&2q~3W#d1K^f7S^`G&*u-p9b4g_fk?H8p3Mo<I@ak
zNhR*PrI8{*6XBl^hF}Q_6M~gwWKn2+M;@NBJL&5QLMQH#R}pCv)LEsiqki_+ES09+
z<&}R{;Z$+>!cqSUlm0KLZ2(BbKww5y2QSH$_ern?3ma-=aW-Mt{`sOH1im(|n~Mcy
zG#s&{3(ofW@5XDjAKZ4eMEJqtcLMrQ+C0Bo-6os~GjMKnu=X8Mr_E=|p39$s#C!BW
zi^e=6QwS9Q_J6xw+1P2R$+|G-fsVaDSFAd)tTGeZ0M~>pc;So@OjE*~ApT|Q04ms&
z+vWa|&0WC~7S|_H)BY<rpjn`h>`VWhRc)){Pt*@eCzS}yLXthIj8=bX5t8WN$N1X7
zaX7QJ8g#(Tj|6H+g}yKfpn>ZrG{2W;@TWx|d#BZ*W>uH365aco_v`-UcWrBm^E07l
zjw}0n?~WY!Yz8D_J2PJ$NAo2{h~wL>V-I49jag5!*>6nnH)UKf41Ek83c3XX+50)D
zC)jP^JNj~UsBzMWa_E{xtWQQuFnPN5m!&Xm_m=J)=FIU*?N~+cF~N5SAq&mMeZ~B?
z3j$|!bW?0W+GANUk{@T_WHWzn#@O;fQJkd${JLg@so<D+B`TX9sE#a=8q5{MPbn+4
zo8KA%_q%I?4cHZFqKv1Z+R>r@IiAI$<0II(-Vp=(!8iUy4PfESnRJtK9TMt>6$*Gf
zvdWAn;OCpLyQQ|QS1Tn%w2UJ`YHrtEme)@FM69Jqcg5kT!|lzr>3%t|Hn-jCP%YBz
zmFsChXXS{GJnvD{v~ra+Suc08`UDt78~E_ZvY6S#40Tx)W#3nK=oOInVo=B!dml`H
z9D@BwCHl*o8T^PQN6a6P6pfr)f9{SC=F~VGNHWa`)X9hvKm%2Tq<A303i39*T_B@m
zV*{L{X%ga36`e{WMN2_FcFWPd_qo6jK6%$(=pw5j{PnbZ=R(-6hPuCcp_%auR;<R%
zGhG#4%%*DEJg!nf)jJ5M!Uy>F3J*hPYCI?_70!gkpg5+A?cLn~_53EUS}DC>lkY7;
z>{W9SU9>IK+2j#lVe7cBpS_VSJtV27CT6d!x&JjmygB5911>Q)KHfhCDkQD#tLaYL
zU(@!U#6B@8;Q%*YD^kK=oF7jc-41ShtJ`1OBA-Y-OD$=Q;J~z4qmhBo;?NIkaFn^u
z^#feNwf3ZC4})dCKZtr`baRYG268f1G1%TSYA`yt>Ux|Z0rYj9PF#nmzvrUDS-MJy
zbA$yvPRUSIqB914UZ;S$;iK0`qY(W&V}*vSymOa&goFIWY3Y(6^WGLvC8mmx=#kdn
z<%bk9cIO<nHCtRPGDtBf2j;)af@?!-;z05S25kD*R-0<Oa?8i4k#R{}VZVLJcdIE8
zr%<tAS>GA_6~@L!0+ZVl8NgWm!-NLMpeS}uc~)PWXD;lwI8$zGG9Uap<h-JTl0M9g
z!4JVi&g{=lUaR=xC&fn<fsZ*i?>LSv40YGcJAJ3w?ixPkDJMTLhwE{BvuwIwbVCaS
zeKhmPMSD9%{yMID*+4Rhg~_%8mK0!Q>h)jY%I`g&R)rJV(pF|ZhX%8&MwGsdr}2id
zo{sYtBHm&4VEqNQQ66{Rde}2vlIRqE0g0cwU)+Yo{%wB=u`2dkX*g2?WPu-{Nh)%!
z)g)K&en2CAP*`hDw1TFoYhEV5-j!F2a4c+4u&D6Yr6xV1`HA)Q*UzuZh$4`}FhQ?`
z13r}tZnK{)4G}HCGZiLz^Fo?L>uZ57JGm=PPqT~thCkEOJ?>U*iU#f8H^n_CFz<aP
z9rBjwx@PeXLzhdUbQf9?1~xXz0+Mr!w`gyCH5=CMJ0k@{77FQLMc%X;iR4JzMIhdq
zLpIyX4O4xHU?QJ#&VHAr(7#nuL9<|VyOc<yZ1%kq8OuGw2<C;w+?3dhXSYS~v!?EU
z<UHVGs|I8w7I)-&{%i5&{IlH?n%4xe&S^XdbfPo;&szE4zW1L|%KvyI|MPGDkK^+H
z*<pZ$3ray!Rt|wMqqI(<AU~e5FaJc2OXII9IxJN`={O5#NF_J>^uz4fqB8pN2RaFy
z{>YYDGK!yMp5)_wbN|N08zC>S7*}K%Z@sxlN)}?|GDh};Eu0;?fox_&zC56R)&5~z
zfcNghs=NL1msppMZ~SY%Pkrwc$ca1!k`I~|D8hvVB4ko)+x%M70wyr3b={fxU1li#
zN|F+is97!K<JGZ=KJN-*wrDL>^Gf=NvW>)&!l#}I9RJ?;ar~EP?@y3yA@e!R)<wNZ
zkD{(QVim2)4Tky+G3`Jd8T06DQugWEKc`2~lYoCX&24<Pb1o`!9id@;{7O~+z16Bq
zoz9hHkeIYxDbKs`Q^CeXMBUr(uw<1>mYZxaYh}M9QW2o(?S3cj`xke9jwO3V2W}bf
zW5l?&t;ZWuqIBKDe`YXO2xu5Liv8jX?xs)sU3O{db%h<o)!z@&`;b6|k2%WnRz+}v
ztQ2aZ$k;{Ha{OdDroQq(o}vUU^JFIsZb8HKaO(xt1|EcC5*egX2>lw!;2Y<!pyeX6
z&kU+<y<rMHJ5WLIe~e-}I0dL%%o9T?!n7Z_Kj2bS2ga2ukuBg!qDV!d?$Y&K^L3Mt
z%P^4SY7iYUDAj=SKO3Vtxfj$_@e7lJJD~nHjzw?W2@if$t^aImvk<;Hyy6pBtXN96
z{QOkz@0*#}uX%-kSk%OsJ1za7jZk4Om;WQtn*$z_Ag4u!`5;p){<p_Yw^Oe#-6gSU
zMMKZOixoVAe<Ggddz<fDLsvg2oKPVUN1sucU|#2}XdaGuCq((T|Fb`PFh^%7W|J>K
zwoR!@!Hn8u&L%=e$3Akroh3Wml|?O#9(ITltz{%qqC(zdJxu!!y>ye#&*WG>kpC6j
zQ|UIaocQHv&`h#*?Lsbs7W3ip#1T@m0OeLw@(Tp&`m;zAGZ%1lNONE3=>MO_t}>{N
zuHWPC4n<0l;vS$l6n6_!N^p0lSaElPwzz9>DZ!-_3od<dCr}8q&_a=$=biiUzB6|}
z?9Qys+L=A)|Fhz|Ak^A}vz1q9$qgIq#{rFoBZu^pY)xh0_K1oy%D9RPdBQ70rFxs)
z?C)TT9+j+$n-MK#_O6~?4k+9)vzCC>NeWQ@`A))7Lspth?@vajZ}nXns=5)Hm;BF#
zvA7BqN6Nir1tIsTGPba2YKrWBAI>`%^67RW5}C^D`5bJ{n_0WVK40*kcHX<-2&B^H
z+AjUJjM!$ztS)i1^&sffcM(0}%m`CO<)5x_q^X20P~{<jOO#+?%9EG=NA*2GYLF9G
z{E&(GuRF1UQ;RZ4gz=cZFHqpk6~Ej3D;!C#^B6ZJK>>iZT>g38&eUo}sU}f|f>4jm
z?gPa@_l)tNmB=;iN;eZ-5JJ(_@3o9t+FhkB8CD@&C}|Wcdii$Y%hyTYv`@TsC45ja
z27y;*FlRK{;SwHVEYRVNmoSgP(tVJu221Sb8?Fv&tc`Rd5;PKdc~o;<%<hhkMiW)i
zyb=_w@REe-WAG3^@^72bv{u=_!a~=ir+9y+z((>xsloKDJ;3cpMhE9~J-)<G)S>hh
zQlcEh&Xe99+g+@?Dj5se90CK9wxvdxI?O%p@9&?WG#QW>{b68-@ObUEtBmn3j*alt
zU27gsb0JP>8;%L`D%0~rnNW=O9K{}81ny$-nx8Db!mT-JWg~D$1Z9k3+Zz80_VVIP
z_L@7%vKWl8I4Oo1S~;Dv=aolVgQiE;@TpVX@HMb9rfY4x`u91XrDlyQ-QFVb>a+=n
zIOgcx?CnLDhja@XJxz3Xf!sTKNOuX}paxHbFHeIUp__<(4I7~K2R1RIGX*1<G;l0)
z_>A!UD?b2l7Xo9XMTdB411m(Rl!BmK=crZX2s{SlX&s5~at#lRrIMaoD}H8RqeF_u
ze3Fg0!|{o-Mb*#HAVpk7OSVP~NYu{OU3VI%8uwj=$|Tw&d7xGr2dZ$v4)xxG{F+aj
zd=jrC(MBmv6B^I=8eTiT>%b7@S7XCG1(w_eAC-+ZXINwso00CEJM8qIxmB2pFu{Y;
z!p!j&=vsMkX>|3gT+mF>C$;_;EzBa6*{Ps8$!~Cbg({`*b|(vx;<j{t*A=+AZemtQ
z|Ni$(mb;otkk<z1mWRHpX@-PUbJ}^s3zK`NSuakEu<puHYsEjkpBQRC`L=WZ*7cko
z@$R*6-tGn)&Y<F{*AB4756@^k+4SA4wreBiB#O&GapYsmv#6*jbI14fSooTpLq+}#
zK1VXF27|!TV-D_Oi8I0o>2*`(XO0w%$Q4&)HTpD;3;{Y0Uri6~XREmu&%lF`dF)W~
zaEUgX3~jpEMVslXW{lVrv471XrU~>TzU0v<!~(SmG17mtWl|*5Ua#KJ$a3lb#gQz7
zRxmeN_yxA@Y0a*^{-^Z!rR*F7s{!;<#bLqrk#bwN@@@WNYRoFLAJ<U5MFKi<FbT-|
zHaEyuFrwRWhPJR0x+f)*N99?6N)XX&D>H8m@xX&d8urfRQ~j!~TZ~!VYn8Sq*nzxq
z@*>VPrM9apc@U|Bj(nB^hK?XTkFYeyjEz^tRTA{ZWqJ`3?d@Z0c^K*XJe9^^BaTUn
zoROphamS9}a1XJ9@ulqPkHm6q*nDnHSOzqj0ipq~pqXjv-x5dbP+)`*_alENZM5|Z
zX7WSdT|Y;sr1*!uC(V~A+g8kW*VRb1e4Ghf&YLb!2^gfZ3%HBLzCh?85<g0j%M=k~
zSNQl^L*Ha37<~rjr<{=P&#AAHKojvZ20D`vaO;kJ=rA|)-wi+f_IbBF>aVKF%iGbC
zzC&{b*_j<8ysxZ)XAE|5%qM^YRaPzoh|r4=#7_chBdny8%_=#=^!dBxviEzb#hDBT
z#s56+mj0{{3&d$87CV+vYITf5v=brv6D_auj^!{`oy3g*8o3nMJ=PcW*YO-pk!wTR
z53`&uGd5Ui>r5{&Mp5@ADt0%lJi$Yp5d=s<-a2P<9Sju`T`p3#BVkt@LT!*bTt9qQ
zAs+oQB35rGq8y<f<R_Ln(Ayi#_T|0-0ngx}S*g6^W4jHK39Kw*)ckBq0A0XNCY2Fg
zur;9nVz}d%s#09pDA9N|1Pl|LUAz=Az5K(5A6l;ZyN8#>B?RAFrr!98Y^Ouh@C6h!
zQG~4fFtu4l_;Qm=r-Ol;WWk}>Pxj{GS=My+rz6He!d$m>6S`>JlS$kOYxhCEPD#v^
zqtHq!lpqQacNIn{g*#RLrts!Yc(4d+Fdb0OgQBWgFuh{;9X0kwVUFW9*n%t=NfQwb
zWa8rb>&hO9xe*d8AtOF$ftAau?7pU<Wa=r4hg9U(-(DP7{FTChMCS-p#`~8|TXOF!
ziiwvD5(L|so_i%wd!z(~o^U|PTD8CBEDXPexVHQeci$8q<}L!H9Mncc2$vVWKwOTT
z?gDTR&ZelFc?1e>){tcAr+c*Eu@4{9Ximc~P#_@=>P73JW#jImh~Uo-x_;l-<}{7t
zlyPPRg_N$>b6)sO`hLyK^(S>QZ&>_vG2qJ2AQIT8y6_bYI^e#Ad85%LmtN2}2iJy3
z3$*R8w*Z3-L>H6Gr$6S4W#5#nEf(V;IT|Ra9Y#Ei@$pxNNZa;g@;z|vp`Y-3wzvNv
z*+&J9`y?yj@_)(YU-bFx;0^FgHigW=&r^rx{8^BPx>`&T2?GO13#T(r#s^)lzz#d!
z{)lu&i-elCgHQ^PX>eI3<F2WTq`Y6>YQsJ$4o`E%$V4cTWP%x*qR&p$HiP3CKC2fj
zl{)NVWKI#|z>E1If5?`4scnS2Nr)IBueb3Q$E4(;Z*im^JNt<9)lGh<Z5l=cJuyVW
zSOwg(%IGJgd+K=qR((wNhm+0v>z^_|7O0g7?|;DibxgvqM@r2JZ7Z8pi{vK#n+62I
zSe{Cs(azNSjV8dPufH;i%<tUXtp6@}gyo1ozl%4YPaXyJn&6Upzb&~HVZ&CDx<-zy
zIdqx7j)V3EBZ%inupAu%oTeU0SdFjpQ^b)hYdI5f&4wM3d5QPywsb_<raI|w@F28K
zk<A~XYioQ%&O5M_cPv>ODE}}~(obyZJek)GqW?YTbMwl;A?#{Gi*Y4lz$3ElHKD`w
zQgwQ`K0-D*Un7`v8g>sK>uo_#WX89BPNadC$dnhdxWrZ2PJte~W#B&T?X#rzLTd}f
zF~-=KT$%<4VQl`*mN;<Tq)*I{G_W!YSlB*HvbNcs>11)w=Wm!Zwe_$4)rbq|&S9DP
zLe9U_e>c0&{KdxZNDKG7ud&6~VA&9p72qyF#T)!X@iH1)_REZ{Y^%tC@YFPud4LBT
zMtEn;4$b?x%9>>PNEqjr>c23a5JtIaUEejub-!U=NQ1{u(Nv^5jEzhm4V+O!i%Pt2
z(h6|GuT}M{mCpP&V;aQOHk%-y6y)BdbSDj?627p&1GW%Xh@|#P-LzM4FCzAAZnzWM
zH3Fb7hzvBwh+xX^Ia#ImJm%_rFC>-Rwx+1&Rl`cOv!dR3L*gG_H_|}bf$C8?AZdSO
zAu^w4VXaJi^^4Fii0JDFrsYJ5v^Vc8vFfx}HU04$P*eC|bsV~LNLwVVJ_>wnT3Oke
z{*OY+-+oq2LL_Y4`61?;G_B5W#d3$*lcIh)Gk6OouF){9pMN6Jd~ARBPp_hoGPs;L
zQ;u}W*zT(Cw^6wlY50f*1G7vCjYgJE)an!wL||AXU4>R`=CgS^SjEU1@p=HMJG;p4
z+sqCjZ{eD2J9NpZyM|}rmRr~3|8&;dY8G&t_77+jcnAT;*Sb{I>u5xBTzDCN;4W%C
zW`0VwQl8`G&jz?kd!1%S^70d_`Q;C$F-ol=eT3NFe}@;}k9=3!=y{hAawkdQA%ShT
z4dBpgps@zk?H=}(<qa>9*J~xo{Mm7^plY3yjklz~-1!uT2gQ3CPkEGwIj_Gkn~(c1
zD?HR~H(O(Defq^CyY-V-hxRn7CtYik8yl<Ly@ULYLSpC#QaE>x3{Ewky6bnUmePRe
zR5pA76*_iVplj1ys9D3mRP!Hl!~bsp`2TWY`tNY@fA%)ezl@Rna}@s{TDu1qRAPBf
zJ|rng!y$C;O<n4x4<k_Q@a9Z~Xidx8pxUz#u&b|D`P0YYg}U4V$*ya;DMSSlKg*mC
z`9<oEWcE7-VrHZs=Ahj+5UY>D6%DJ)R}8fw+)#G&9u_>deTl_36ooI!$G4K8`xHzx
ze+;||$-jQgo~IAjUFut+rmQ%}t2$XxFwX1@O}vJKOwaMVu~y&T7k%_@$(g`iuu~RD
zEzr+M1UrJB^QxE+tj^cASph&cKDv?mp96*OKJg$;22|otu&_VJgAQCr1bcsto*vCQ
z27GRki7dLllGD6B6gO8j#<dPX)(S}h&~jrKE~qqx3t@xBj$b|P&BlLz;DQ5*<xBw=
z{rngH`wuofzz2Rp)_i{qJa#=R`%56>iChRE$yu8#t~Z3BG{5!kbVb(9`=naECeb`1
zrXg<3EY(OBOsl(OqS#zU>yt16ybqg~_CpcJ*pLV7)5WW(w+kiD*Ws!-zwp>{C3&Hf
zvYL_q*8lHd&kr#0pDt?kX9V#x;_~_Fvh@#LEyypBx6ZTBP)t;_PBdk(wTLGFO9m$w
z+KniFk3r%hQlKs}KS?jO_OsmQ$z?F(Z7JWO&0Dn5!FrL+%y86~0Ew+)!hp6oJQ*%4
zAGt&=<($l)@J<Zg3k!>Fq?bbBFutxc3F~zixU;A87Dr*(HtB<NdHXh#+cCWw&g26t
zb{2a<Mm#3B(UYJPzGqYWM%u`<T786*Q#aig5k}CJ#X=gyCbN6A0br5ZYQk=hf@jBV
z+7XNdno_z`;wNUJ0Ft$zEf+o#(sk^1Y8oc!RWVsyZVz0N=870BhjBVBUL2DaRvI`v
zVZ0gv{vayT?XPDPA(<>wR(t?Vmb+xC8(Eo?E`#6DDJgyh(J4`2$pRl)U;oyr-1|$`
zdc@eLc^GfUF-6qA`TaZJ#NY0UrAJ&)`49BF2JnM<pM=XPSBNnMiil3k#~a2^Nz^uZ
zrBVTxTYawUo%|>ufSHh2Sbgg64^Ike(U{K9i?Wa8*+G@Nl)~pm={OYZThDjL0}nqu
zK2pnlvqmB3a?%|r<GV-@Q`t}Ixz&y~_E!yMW@n0<48pM2`<*yHm$-QKRrYD#ZF0Io
z=VThn58(Q`KSs38yC!j}eN>ug@vxUwG3-x?!8+5ZmJbB{l>hPW-Ir79sv2dbu_Qfe
z%LQsd^odL?=YDL$;`2Dt`y_{!m%sNFEk@+$Iy*Wl$C1EM5_sGQKu%=s8qg)H@wk`7
z&%*KVaKMQo#JIPUq}PZQm9AMMOG{v;f4wf9LXsG|XYivqWZ|;Iq*VlrnE{a#o8BKH
zR0Jz$Ta_0#ZMb15RD?aBl&5WeyD?xO<s`f_cS<A#MahmNT*Sw3?ARl4)TA{iNHePA
z9o^lvDU;jdPjX3Xv7;_4w62vDEff`>QoXi1Vq7VK7Z20e3s@%+#vfn{30Ek{9)6~Z
zxv`WjEi!qAVI)eUV^Ph7*cl=ZmP_;(jDu~Siq_O6C7{)f>rcG@$cgudh_(YVE<na-
zoC_+&J##|-Lm!dM5SGA7sxJ@Lxz)d-ho6x^AsfR3e3;vje9w~cB}>7iB?n=f!?ACM
zl>zA__RSg={_ah8#Ozf?Dnl1iyr8qoCFK3Z<k<T4a6LRkS}J6q+wZbfGya?R9}0R@
zO#A#uT1z>VHvdBd$H9u;=Z9li;W2n}MTGMKLitkIWuK>wZB|L{b12n8fu1<lUN$`;
zk*+KnZfdw{bB)OFUesbWj08fH%Z1t5iv&a+2QeM46n@*DWf2w#KrV+^6h8RZls8PT
z%6-^>yeRYbL7mD+0JkoaATMyL22p`8H{KO<@EdbTpnwK9MTny7-d?%tCG~l%iuh_z
z!3S3Hxu`L<RaHfgn?+py3@eIQ!vuWMQ%tQ9;;|Q$g-iOM9r{h+U*OtI?HPP`dM(QA
zgshq%S=73iFn<U8_r|>0XFOr<$b1r5T^638iL=Kzih==VXuS7i`YlqMVJB6^NFfL7
z2TY7M(Z5V*pX2+zsIRUh+p$FGhZ4wwOtM^H#8a2Ji^(QS98f9m5=OsXLdKm**U7Qe
zIu(|X;_D)i@5cETdOPj(+4~}ueX_I2*iGEOdVw>|u!TXFfPxUZ%jGD5L@8C_gqf8B
zxM*6?wMy#E%asdK35Gzw>N01)b9zH31p-ZKIg!qa=!G?g>F`F1O1~!OLOy$8B(;A>
z_Nn{wRko>T@nAIFIt>Racgh&!tj=d*B#GkdkPJQh)NiCj8stxzag@cJhozRNe)3Wi
z4O3w*ZH^pgJorY#4(qsXYA{_Fr37{5Vn|=nP(%2yQU4c#+DoKLIgAs#HN0m7GWGO)
zdvOU&<W4~U^ZX2td6?V8n8usJdT$;7r8%j@^p-hKZYwiaiUS^5)|}Yff9?RE`uywH
zbo+0jfHBD~yq@IEYFL^CaND4|PP>bC^~;t0)p*Nwet(=&KEo!;P}^LYbH`rJw*`mp
z;^(>$cv@9Y(>~=<1M}a2vus?c_e|p&td`bvkyAr>$}R#T4e<mV9?E-%0(>@U{&~6Q
z=$hPW@z@Q&9uM>fxl`vr=i|N-B+(sI8Rl(5^{Cb02Dc+()0k8OkWJ!(zRO>fNlv6#
z!OXZ${D$d6qFD;Td{YcG>zp=*%Ib{d!eID}ryVn4B|J>bv?YyEItZ#Jp=P#6AHOVx
z?CehRd)Z+@Rv{lNnI}imL>gx(jbKzz@1QVTbprU+e#$ikQX-?&7)(W^fKdP~F-8Yv
z^E-@fV@Dzj3Du>IiopUA-Fu=f8*ezQ=>xUkQxu?t2<5iK=^em%!E!9_-yOf1GD0Ec
zeSiplcme*|C12Y_jUP%<9&D|Hw{OMLzjE?%*|EJt=C+@doz3HIj(=?DFFYJeh@R~t
zI%JtjaB6TB5oGPBXZ3xCH)U2RmzJBAWQ4G77z>HQK)(~9O;YoNaPE_|`a<p&LiX{8
z*vvd_@5TMOZ?^%v;G53f8<arcvOw!BCg>vv7v$nHx+NkHeJ8uBC)h7bAe!qU+PKkX
z!v4%y%Vh(6Zi;RwOSQWt1f{$2P?C7_KK&RCa!>m+q%Ets296RqhGEskOBI@^B)Lne
zafjMz7O)-fI?g0zvfhRp&wvF1E<2Qm3DFXdi+r__zS&M0TteoDP}OX&)i=|eT4Iu>
z3;-e&F{@V2+C8p>VE$oW2_OfYGTnH5+mk`=$9rEmNBi>~!oeo}Jh}prT@&pLY|u<D
z7KT~W5!NeQH_kykmRIXEL?Q%VPYzmr!pE&;-e}v};6XZC9!1yWBU|Q|&ZCT-rvXQ#
z_qq|?A8S3~)-QaG0uM=rsAgJ#I$3#`W0_+8>163N#@e<YsCr}FFMWu129z9a9Wg<h
zTzUfq(b4A@zlZ8i4QNd2N2z8uXu-JOJNEnijRFai9yU*vH)4&m+{LRbx8YM}bW|S%
zo)$xAQB&YpLo~E#lC_53heHC03`{%W(y+4>g2V*b0Bk53x_4@D$()kln}Gc|UZV{>
zZi4i4s~Ed2KjDc9fL8C0U*-ERZj+Pa&wGD%DIr#s^Wz$pjlqxi9hG6Pp|6tJ`<K=%
zilX;@h;$99LL*tb)vcSB@(t12iQF0$q$^e^6{>!wr{*Jk^kTAgwy3|~V<nPaO`I()
z#`z_yT;Vw%4a}F3epg@{Ek4Wcmwy|J3!X=vPAi{dtx^DdVi}(`-32}-sAQxZq|;_F
z*?oFw(T{w}Y`#&2v+|xwtzag^law?Ftgbpw)eXi1tNm|2(1K83nJ%ko5)Gr_xJynk
z&M&J+2BRcB>Fj31zdQbeZwz(Mjy*}lwu&re6MTuYmqE7_Aom0L@l5aN&C!b&bng-a
zee@~F5c36Q=O>94n>fFOW!J+K_V?Y80&d17Sm^8OETQ;+vc<gHT$f$upvm_@A$0UN
zMsC`~GqXMK1_a#{*X$9A`F>|Xds$7E-AwFs9^CIdh4DXW3pG0jUtvzkIW&v;W3hzi
zzMMrhuVgurmi}5c9pCR(y~oH5rQ;3kkh98i@_+pCPZvHyJ-D&nLd%i<m3YB4YTcAw
zg7B{y6O1!-oh2Jqdn?iqy;vb~i0hED$&N^ZX+meNw9;$H6^IR24T$vh)9L7u>;O5%
z5Y-^Zp_R7u-7T@x>@@0sG~ynoWZYTp3vofbWcI>{Qm%^5D@GI{6kjx|9#w*i?T;uK
z+`zN`rx!{)%N7MWpbWkN^ID~|gT4<CPk9*nhVI+snUC^C-x2TK-hDQO3_M(O=Wxk=
zyODprI6{F4_R*DPzdAv-?AN2o1T|VdbPUHCt>_5xenDohX^h?G{zlVw_`s8<*WAsd
zTaZaU`YKf?+MtMOsCd-tqG7SV1v7K~p1S7m6>ACFT?Tk3*`aC*`oe))O+|8*bY!t(
z82GU*4$XXZZ@dg?=!{JI!nh`vUf}bM1p%V)944$XR@7ur%~YG;Fa`pS6yIqQ=UfpW
zniif55$fv0>zr&^BlPryP-U1ETXwH825Q8+5J))zIY`+7Pq(zAuvL*FVJLIcU3;#U
zBz%vNR7YITtp|r5XlAMy5-+AnqQj(~G<mYS^cSn-bg&Pgm;8tCp)!TBok!ar(l8~-
zvL}zeto)Ca7d)Dir%>+`=2|019h#;<Oiy)($(x_tSr##8{f$j8s?K<*H(q4d_zbz0
zdQaM*2{gJ5y`GC$H8ab8X5IV)bD`Q4euW<!>wQs^d|@_LCRq_MGv4b5-?ja5aJO(T
z$UxCM?V0zi=}oLnywt)ZJ$tVmM=7ifATE|no*+p5&M`bF6jPe_Db}Jv+=>#u@#Rln
z^ithHF;<edzKwWcj-6W42X&auys*vJ69MPH(|Jh0<ZqwC%s}%n+H1emBkhWJI`27G
zzpC*VC3#5{N4<!m6nA|!j7?1`jA+%7P0E)wIZ&b6<fcv}iZhmQUEb5S>xnlKG;dTO
zWzlu1y^5kwe-TrA|MM8;;9w=KFL4`Z6S+#ON1PD$S1Ld_66dOz;Cf(Ggz5n+H*U|o
zH2>o!>u^3r4LeVnE=_Bal30N(H5O>5>@bG({@`0ywN9~2@GZ|}Y4e2eN)biMPpJo#
z5W(jy*0}~O?zQ<r7qU{f+{oB-(oDB{yMe5BxZQGdi<YmodZ&kG0)9L5{XpyLwauci
z4e70sK%;R<_5@JmbeAeAELpbn)OzrYM^H{$H<R4bf-pVcD45}fezBI<U1-?NG3+14
z>%B4J<+7EfCB*kQYvSrrwkoxqY+~Qu!-m@0T|Zn<Ap;6zx&<BdqFeK2g2RfLc{BsR
z2=p3vtx%2Y^U<+|_{R_fgGKBZV<LtgYLM!QZ;sr|h!0zn86@Pee&&<zeJDgrOA8qU
z@j;sn1P!`@Z}tXwY(ei}J(;8EDr6O%3D2TXQ2@Z4FHq@v)q6bF<7&Pq69XNzN+0YI
z=;rMF#TP-B>BsT+_iaz+IosN1v5+frCGv7D5|LY-o&VkE-}!%*|GW4vD<3^8WI=-$
zeUUd-2j!v5a-rZ|m)CjK#pd^_6ZnGAVojl&U!T~t9A0Ie-7Jp=-ccTD5ki>2(3q_&
z;p*>Dbl2lJcxn_JpW`_%6!nmWnLqjlnE3;i{n6FXBC`9gi?>zaPxJ6~S5@Q24QE{M
zhf(6FnJ(MT)nJp;e^BA{)Mr2Ox>S7j$)lM)`eD@pgWP6A8avRqe<J>X11ct}$?3#&
b)Sl7Hmup;LzbhV4kdvB{wqlclW#s<=JOCS{


From c38062ce93065137ac8730c0d642d572230839b8 Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Fri, 2 Sep 2022 20:26:31 +0200
Subject: [PATCH 036/203] convert RelevantState to a class in the
 PrefixConstruction module

---
 .../code/java/security/regexp/NfaUtils.qll    | 49 +++++++++----------
 .../javascript/security/regexp/NfaUtils.qll   | 49 +++++++++----------
 .../python/security/regexp/NfaUtils.qll       | 49 +++++++++----------
 .../codeql/ruby/security/regexp/NfaUtils.qll  | 49 +++++++++----------
 4 files changed, 88 insertions(+), 108 deletions(-)

diff --git a/java/ql/lib/semmle/code/java/security/regexp/NfaUtils.qll b/java/ql/lib/semmle/code/java/security/regexp/NfaUtils.qll
index 033b8aa8cfd..1c806c305ba 100644
--- a/java/ql/lib/semmle/code/java/security/regexp/NfaUtils.qll
+++ b/java/ql/lib/semmle/code/java/security/regexp/NfaUtils.qll
@@ -887,11 +887,10 @@ module PrefixConstruction<isCandidateSig/1 isCandidate> {
   /**
    * Holds if `state` is the textually last start state for the regular expression.
    */
-  private predicate lastStartState(State state) {
+  private predicate lastStartState(RelevantState state) {
     exists(RegExpRoot root |
       state =
         max(State s, Location l |
-          s = stateInRelevantRegexp() and
           isStartState(s) and
           getRoot(s.getRepr()) = root and
           l = s.getRepr().getLocation()
@@ -963,10 +962,13 @@ module PrefixConstruction<isCandidateSig/1 isCandidate> {
       min(string c | delta(prev, any(InputSymbol symbol | c = intersect(Any(), symbol)), next))
   }
 
-  /** Gets a state within a regular expression that contains a candidate state. */
-  pragma[noinline]
-  State stateInRelevantRegexp() {
-    exists(State s | isCandidate(s) | getRoot(s.getRepr()) = getRoot(result.getRepr()))
+  /** A state within a regular expression that contains a candidate state. */
+  class RelevantState instanceof State {
+    RelevantState() {
+      exists(State s | isCandidate(s) | getRoot(s.getRepr()) = getRoot(this.getRepr()))
+    }
+
+    string toString() { result = "RelevantState" }
   }
 }
 
@@ -1007,6 +1009,8 @@ module ReDoSPruning<isCandidateSig/2 isCandidate> {
 
   import PrefixConstruction<isCandidateState/1> as Prefix
 
+  class RelevantState = Prefix::RelevantState;
+
   /**
    * Predicates for testing the presence of a rejecting suffix.
    *
@@ -1040,32 +1044,26 @@ module ReDoSPruning<isCandidateSig/2 isCandidate> {
      * This predicate might find impossible suffixes when searching for suffixes of length > 1, which can cause FPs.
      */
     pragma[noinline]
-    private predicate isLikelyRejectable(State s) {
-      s = Prefix::stateInRelevantRegexp() and
-      (
-        // exists a reject edge with some char.
-        hasRejectEdge(s)
-        or
-        hasEdgeToLikelyRejectable(s)
-        or
-        // stopping here is rejection
-        isRejectState(s)
-      )
+    private predicate isLikelyRejectable(RelevantState s) {
+      // exists a reject edge with some char.
+      hasRejectEdge(s)
+      or
+      hasEdgeToLikelyRejectable(s)
+      or
+      // stopping here is rejection
+      isRejectState(s)
     }
 
     /**
      * Holds if `s` is not an accept state, and there is no epsilon transition to an accept state.
      */
-    predicate isRejectState(State s) {
-      s = Prefix::stateInRelevantRegexp() and not epsilonSucc*(s) = Accept(_)
-    }
+    predicate isRejectState(RelevantState s) { not epsilonSucc*(s) = Accept(_) }
 
     /**
      * Holds if there is likely a non-empty suffix leading to rejection starting in `s`.
      */
     pragma[noopt]
-    predicate hasEdgeToLikelyRejectable(State s) {
-      s = Prefix::stateInRelevantRegexp() and
+    predicate hasEdgeToLikelyRejectable(RelevantState s) {
       // all edges (at least one) with some char leads to another state that is rejectable.
       // the `next` states might not share a common suffix, which can cause FPs.
       exists(string char | char = hasEdgeToLikelyRejectableHelper(s) |
@@ -1080,8 +1078,7 @@ module ReDoSPruning<isCandidateSig/2 isCandidate> {
      * and `s` has not been found to be rejectable by `hasRejectEdge` or `isRejectState`.
      */
     pragma[noinline]
-    private string hasEdgeToLikelyRejectableHelper(State s) {
-      s = Prefix::stateInRelevantRegexp() and
+    private string hasEdgeToLikelyRejectableHelper(RelevantState s) {
       not hasRejectEdge(s) and
       not isRejectState(s) and
       deltaClosedChar(s, result, _)
@@ -1092,9 +1089,7 @@ module ReDoSPruning<isCandidateSig/2 isCandidate> {
      * along epsilon edges, such that there is a transition from
      * `prev` to `next` that the character symbol `char`.
      */
-    predicate deltaClosedChar(State prev, string char, State next) {
-      prev = Prefix::stateInRelevantRegexp() and
-      next = Prefix::stateInRelevantRegexp() and
+    predicate deltaClosedChar(RelevantState prev, string char, RelevantState next) {
       deltaClosed(prev, getAnInputSymbolMatchingRelevant(char), next)
     }
 
diff --git a/javascript/ql/lib/semmle/javascript/security/regexp/NfaUtils.qll b/javascript/ql/lib/semmle/javascript/security/regexp/NfaUtils.qll
index 033b8aa8cfd..1c806c305ba 100644
--- a/javascript/ql/lib/semmle/javascript/security/regexp/NfaUtils.qll
+++ b/javascript/ql/lib/semmle/javascript/security/regexp/NfaUtils.qll
@@ -887,11 +887,10 @@ module PrefixConstruction<isCandidateSig/1 isCandidate> {
   /**
    * Holds if `state` is the textually last start state for the regular expression.
    */
-  private predicate lastStartState(State state) {
+  private predicate lastStartState(RelevantState state) {
     exists(RegExpRoot root |
       state =
         max(State s, Location l |
-          s = stateInRelevantRegexp() and
           isStartState(s) and
           getRoot(s.getRepr()) = root and
           l = s.getRepr().getLocation()
@@ -963,10 +962,13 @@ module PrefixConstruction<isCandidateSig/1 isCandidate> {
       min(string c | delta(prev, any(InputSymbol symbol | c = intersect(Any(), symbol)), next))
   }
 
-  /** Gets a state within a regular expression that contains a candidate state. */
-  pragma[noinline]
-  State stateInRelevantRegexp() {
-    exists(State s | isCandidate(s) | getRoot(s.getRepr()) = getRoot(result.getRepr()))
+  /** A state within a regular expression that contains a candidate state. */
+  class RelevantState instanceof State {
+    RelevantState() {
+      exists(State s | isCandidate(s) | getRoot(s.getRepr()) = getRoot(this.getRepr()))
+    }
+
+    string toString() { result = "RelevantState" }
   }
 }
 
@@ -1007,6 +1009,8 @@ module ReDoSPruning<isCandidateSig/2 isCandidate> {
 
   import PrefixConstruction<isCandidateState/1> as Prefix
 
+  class RelevantState = Prefix::RelevantState;
+
   /**
    * Predicates for testing the presence of a rejecting suffix.
    *
@@ -1040,32 +1044,26 @@ module ReDoSPruning<isCandidateSig/2 isCandidate> {
      * This predicate might find impossible suffixes when searching for suffixes of length > 1, which can cause FPs.
      */
     pragma[noinline]
-    private predicate isLikelyRejectable(State s) {
-      s = Prefix::stateInRelevantRegexp() and
-      (
-        // exists a reject edge with some char.
-        hasRejectEdge(s)
-        or
-        hasEdgeToLikelyRejectable(s)
-        or
-        // stopping here is rejection
-        isRejectState(s)
-      )
+    private predicate isLikelyRejectable(RelevantState s) {
+      // exists a reject edge with some char.
+      hasRejectEdge(s)
+      or
+      hasEdgeToLikelyRejectable(s)
+      or
+      // stopping here is rejection
+      isRejectState(s)
     }
 
     /**
      * Holds if `s` is not an accept state, and there is no epsilon transition to an accept state.
      */
-    predicate isRejectState(State s) {
-      s = Prefix::stateInRelevantRegexp() and not epsilonSucc*(s) = Accept(_)
-    }
+    predicate isRejectState(RelevantState s) { not epsilonSucc*(s) = Accept(_) }
 
     /**
      * Holds if there is likely a non-empty suffix leading to rejection starting in `s`.
      */
     pragma[noopt]
-    predicate hasEdgeToLikelyRejectable(State s) {
-      s = Prefix::stateInRelevantRegexp() and
+    predicate hasEdgeToLikelyRejectable(RelevantState s) {
       // all edges (at least one) with some char leads to another state that is rejectable.
       // the `next` states might not share a common suffix, which can cause FPs.
       exists(string char | char = hasEdgeToLikelyRejectableHelper(s) |
@@ -1080,8 +1078,7 @@ module ReDoSPruning<isCandidateSig/2 isCandidate> {
      * and `s` has not been found to be rejectable by `hasRejectEdge` or `isRejectState`.
      */
     pragma[noinline]
-    private string hasEdgeToLikelyRejectableHelper(State s) {
-      s = Prefix::stateInRelevantRegexp() and
+    private string hasEdgeToLikelyRejectableHelper(RelevantState s) {
       not hasRejectEdge(s) and
       not isRejectState(s) and
       deltaClosedChar(s, result, _)
@@ -1092,9 +1089,7 @@ module ReDoSPruning<isCandidateSig/2 isCandidate> {
      * along epsilon edges, such that there is a transition from
      * `prev` to `next` that the character symbol `char`.
      */
-    predicate deltaClosedChar(State prev, string char, State next) {
-      prev = Prefix::stateInRelevantRegexp() and
-      next = Prefix::stateInRelevantRegexp() and
+    predicate deltaClosedChar(RelevantState prev, string char, RelevantState next) {
       deltaClosed(prev, getAnInputSymbolMatchingRelevant(char), next)
     }
 
diff --git a/python/ql/lib/semmle/python/security/regexp/NfaUtils.qll b/python/ql/lib/semmle/python/security/regexp/NfaUtils.qll
index 033b8aa8cfd..1c806c305ba 100644
--- a/python/ql/lib/semmle/python/security/regexp/NfaUtils.qll
+++ b/python/ql/lib/semmle/python/security/regexp/NfaUtils.qll
@@ -887,11 +887,10 @@ module PrefixConstruction<isCandidateSig/1 isCandidate> {
   /**
    * Holds if `state` is the textually last start state for the regular expression.
    */
-  private predicate lastStartState(State state) {
+  private predicate lastStartState(RelevantState state) {
     exists(RegExpRoot root |
       state =
         max(State s, Location l |
-          s = stateInRelevantRegexp() and
           isStartState(s) and
           getRoot(s.getRepr()) = root and
           l = s.getRepr().getLocation()
@@ -963,10 +962,13 @@ module PrefixConstruction<isCandidateSig/1 isCandidate> {
       min(string c | delta(prev, any(InputSymbol symbol | c = intersect(Any(), symbol)), next))
   }
 
-  /** Gets a state within a regular expression that contains a candidate state. */
-  pragma[noinline]
-  State stateInRelevantRegexp() {
-    exists(State s | isCandidate(s) | getRoot(s.getRepr()) = getRoot(result.getRepr()))
+  /** A state within a regular expression that contains a candidate state. */
+  class RelevantState instanceof State {
+    RelevantState() {
+      exists(State s | isCandidate(s) | getRoot(s.getRepr()) = getRoot(this.getRepr()))
+    }
+
+    string toString() { result = "RelevantState" }
   }
 }
 
@@ -1007,6 +1009,8 @@ module ReDoSPruning<isCandidateSig/2 isCandidate> {
 
   import PrefixConstruction<isCandidateState/1> as Prefix
 
+  class RelevantState = Prefix::RelevantState;
+
   /**
    * Predicates for testing the presence of a rejecting suffix.
    *
@@ -1040,32 +1044,26 @@ module ReDoSPruning<isCandidateSig/2 isCandidate> {
      * This predicate might find impossible suffixes when searching for suffixes of length > 1, which can cause FPs.
      */
     pragma[noinline]
-    private predicate isLikelyRejectable(State s) {
-      s = Prefix::stateInRelevantRegexp() and
-      (
-        // exists a reject edge with some char.
-        hasRejectEdge(s)
-        or
-        hasEdgeToLikelyRejectable(s)
-        or
-        // stopping here is rejection
-        isRejectState(s)
-      )
+    private predicate isLikelyRejectable(RelevantState s) {
+      // exists a reject edge with some char.
+      hasRejectEdge(s)
+      or
+      hasEdgeToLikelyRejectable(s)
+      or
+      // stopping here is rejection
+      isRejectState(s)
     }
 
     /**
      * Holds if `s` is not an accept state, and there is no epsilon transition to an accept state.
      */
-    predicate isRejectState(State s) {
-      s = Prefix::stateInRelevantRegexp() and not epsilonSucc*(s) = Accept(_)
-    }
+    predicate isRejectState(RelevantState s) { not epsilonSucc*(s) = Accept(_) }
 
     /**
      * Holds if there is likely a non-empty suffix leading to rejection starting in `s`.
      */
     pragma[noopt]
-    predicate hasEdgeToLikelyRejectable(State s) {
-      s = Prefix::stateInRelevantRegexp() and
+    predicate hasEdgeToLikelyRejectable(RelevantState s) {
       // all edges (at least one) with some char leads to another state that is rejectable.
       // the `next` states might not share a common suffix, which can cause FPs.
       exists(string char | char = hasEdgeToLikelyRejectableHelper(s) |
@@ -1080,8 +1078,7 @@ module ReDoSPruning<isCandidateSig/2 isCandidate> {
      * and `s` has not been found to be rejectable by `hasRejectEdge` or `isRejectState`.
      */
     pragma[noinline]
-    private string hasEdgeToLikelyRejectableHelper(State s) {
-      s = Prefix::stateInRelevantRegexp() and
+    private string hasEdgeToLikelyRejectableHelper(RelevantState s) {
       not hasRejectEdge(s) and
       not isRejectState(s) and
       deltaClosedChar(s, result, _)
@@ -1092,9 +1089,7 @@ module ReDoSPruning<isCandidateSig/2 isCandidate> {
      * along epsilon edges, such that there is a transition from
      * `prev` to `next` that the character symbol `char`.
      */
-    predicate deltaClosedChar(State prev, string char, State next) {
-      prev = Prefix::stateInRelevantRegexp() and
-      next = Prefix::stateInRelevantRegexp() and
+    predicate deltaClosedChar(RelevantState prev, string char, RelevantState next) {
       deltaClosed(prev, getAnInputSymbolMatchingRelevant(char), next)
     }
 
diff --git a/ruby/ql/lib/codeql/ruby/security/regexp/NfaUtils.qll b/ruby/ql/lib/codeql/ruby/security/regexp/NfaUtils.qll
index 033b8aa8cfd..1c806c305ba 100644
--- a/ruby/ql/lib/codeql/ruby/security/regexp/NfaUtils.qll
+++ b/ruby/ql/lib/codeql/ruby/security/regexp/NfaUtils.qll
@@ -887,11 +887,10 @@ module PrefixConstruction<isCandidateSig/1 isCandidate> {
   /**
    * Holds if `state` is the textually last start state for the regular expression.
    */
-  private predicate lastStartState(State state) {
+  private predicate lastStartState(RelevantState state) {
     exists(RegExpRoot root |
       state =
         max(State s, Location l |
-          s = stateInRelevantRegexp() and
           isStartState(s) and
           getRoot(s.getRepr()) = root and
           l = s.getRepr().getLocation()
@@ -963,10 +962,13 @@ module PrefixConstruction<isCandidateSig/1 isCandidate> {
       min(string c | delta(prev, any(InputSymbol symbol | c = intersect(Any(), symbol)), next))
   }
 
-  /** Gets a state within a regular expression that contains a candidate state. */
-  pragma[noinline]
-  State stateInRelevantRegexp() {
-    exists(State s | isCandidate(s) | getRoot(s.getRepr()) = getRoot(result.getRepr()))
+  /** A state within a regular expression that contains a candidate state. */
+  class RelevantState instanceof State {
+    RelevantState() {
+      exists(State s | isCandidate(s) | getRoot(s.getRepr()) = getRoot(this.getRepr()))
+    }
+
+    string toString() { result = "RelevantState" }
   }
 }
 
@@ -1007,6 +1009,8 @@ module ReDoSPruning<isCandidateSig/2 isCandidate> {
 
   import PrefixConstruction<isCandidateState/1> as Prefix
 
+  class RelevantState = Prefix::RelevantState;
+
   /**
    * Predicates for testing the presence of a rejecting suffix.
    *
@@ -1040,32 +1044,26 @@ module ReDoSPruning<isCandidateSig/2 isCandidate> {
      * This predicate might find impossible suffixes when searching for suffixes of length > 1, which can cause FPs.
      */
     pragma[noinline]
-    private predicate isLikelyRejectable(State s) {
-      s = Prefix::stateInRelevantRegexp() and
-      (
-        // exists a reject edge with some char.
-        hasRejectEdge(s)
-        or
-        hasEdgeToLikelyRejectable(s)
-        or
-        // stopping here is rejection
-        isRejectState(s)
-      )
+    private predicate isLikelyRejectable(RelevantState s) {
+      // exists a reject edge with some char.
+      hasRejectEdge(s)
+      or
+      hasEdgeToLikelyRejectable(s)
+      or
+      // stopping here is rejection
+      isRejectState(s)
     }
 
     /**
      * Holds if `s` is not an accept state, and there is no epsilon transition to an accept state.
      */
-    predicate isRejectState(State s) {
-      s = Prefix::stateInRelevantRegexp() and not epsilonSucc*(s) = Accept(_)
-    }
+    predicate isRejectState(RelevantState s) { not epsilonSucc*(s) = Accept(_) }
 
     /**
      * Holds if there is likely a non-empty suffix leading to rejection starting in `s`.
      */
     pragma[noopt]
-    predicate hasEdgeToLikelyRejectable(State s) {
-      s = Prefix::stateInRelevantRegexp() and
+    predicate hasEdgeToLikelyRejectable(RelevantState s) {
       // all edges (at least one) with some char leads to another state that is rejectable.
       // the `next` states might not share a common suffix, which can cause FPs.
       exists(string char | char = hasEdgeToLikelyRejectableHelper(s) |
@@ -1080,8 +1078,7 @@ module ReDoSPruning<isCandidateSig/2 isCandidate> {
      * and `s` has not been found to be rejectable by `hasRejectEdge` or `isRejectState`.
      */
     pragma[noinline]
-    private string hasEdgeToLikelyRejectableHelper(State s) {
-      s = Prefix::stateInRelevantRegexp() and
+    private string hasEdgeToLikelyRejectableHelper(RelevantState s) {
       not hasRejectEdge(s) and
       not isRejectState(s) and
       deltaClosedChar(s, result, _)
@@ -1092,9 +1089,7 @@ module ReDoSPruning<isCandidateSig/2 isCandidate> {
      * along epsilon edges, such that there is a transition from
      * `prev` to `next` that the character symbol `char`.
      */
-    predicate deltaClosedChar(State prev, string char, State next) {
-      prev = Prefix::stateInRelevantRegexp() and
-      next = Prefix::stateInRelevantRegexp() and
+    predicate deltaClosedChar(RelevantState prev, string char, RelevantState next) {
       deltaClosed(prev, getAnInputSymbolMatchingRelevant(char), next)
     }
 

From a8a042db57352631146a41932a858383608d71e3 Mon Sep 17 00:00:00 2001
From: Rasmus Lerchedahl Petersen <yoff@github.com>
Date: Sat, 3 Sep 2022 20:33:48 +0200
Subject: [PATCH 037/203] python: remove illegal option

---
 python/ql/test/query-tests/Exceptions/generators/options | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/python/ql/test/query-tests/Exceptions/generators/options b/python/ql/test/query-tests/Exceptions/generators/options
index b5ac2abad45..82e71280e70 100644
--- a/python/ql/test/query-tests/Exceptions/generators/options
+++ b/python/ql/test/query-tests/Exceptions/generators/options
@@ -1 +1 @@
-semmle-extractor-options: --lang=3 --version=3.2
+semmle-extractor-options: --lang=3.2

From afb50212a014ed04945a90d7f24ad82669979ada Mon Sep 17 00:00:00 2001
From: Rasmus Lerchedahl Petersen <yoff@github.com>
Date: Mon, 5 Sep 2022 10:50:53 +0200
Subject: [PATCH 038/203] Python: update version check doc said 3.5 experience
 says 3.7

---
 python/ql/src/Exceptions/UnguardedNextInGenerator.ql | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/python/ql/src/Exceptions/UnguardedNextInGenerator.ql b/python/ql/src/Exceptions/UnguardedNextInGenerator.ql
index c174732ed48..7e1e0f868be 100644
--- a/python/ql/src/Exceptions/UnguardedNextInGenerator.ql
+++ b/python/ql/src/Exceptions/UnguardedNextInGenerator.ql
@@ -69,9 +69,11 @@ where
   not stop_iteration_handled(call) and
   // PEP 479 removes this concern from 3.5 onwards
   // see: https://peps.python.org/pep-0479/
+  //
+  // However, testing it out, the problem is not removed until 3.7.
   (
     major_version() = 2
     or
-    major_version() = 3 and minor_version() < 5
+    major_version() = 3 and minor_version() < 7
   )
 select call, "Call to next() in a generator"

From 0162bc3c773182e967bc542c5caa69e71d68a2cd Mon Sep 17 00:00:00 2001
From: Erik Krogh Kristensen <erik-krogh@github.com>
Date: Mon, 5 Sep 2022 11:22:12 +0200
Subject: [PATCH 039/203] use `RelevantState` inside the `lastStartState`
 predicate

Co-authored-by: Arthur Baars <aibaars@github.com>
---
 java/ql/lib/semmle/code/java/security/regexp/NfaUtils.qll | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/ql/lib/semmle/code/java/security/regexp/NfaUtils.qll b/java/ql/lib/semmle/code/java/security/regexp/NfaUtils.qll
index 1c806c305ba..8706b827a6f 100644
--- a/java/ql/lib/semmle/code/java/security/regexp/NfaUtils.qll
+++ b/java/ql/lib/semmle/code/java/security/regexp/NfaUtils.qll
@@ -890,7 +890,7 @@ module PrefixConstruction<isCandidateSig/1 isCandidate> {
   private predicate lastStartState(RelevantState state) {
     exists(RegExpRoot root |
       state =
-        max(State s, Location l |
+        max(RelevantState s, Location l |
           isStartState(s) and
           getRoot(s.getRepr()) = root and
           l = s.getRepr().getLocation()

From 3f1cb04f3e8b450f5508781bf572b13f029a3e50 Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Mon, 5 Sep 2022 11:22:34 +0200
Subject: [PATCH 040/203] sync files

---
 .../ql/lib/semmle/javascript/security/regexp/NfaUtils.qll       | 2 +-
 python/ql/lib/semmle/python/security/regexp/NfaUtils.qll        | 2 +-
 ruby/ql/lib/codeql/ruby/security/regexp/NfaUtils.qll            | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/javascript/ql/lib/semmle/javascript/security/regexp/NfaUtils.qll b/javascript/ql/lib/semmle/javascript/security/regexp/NfaUtils.qll
index 1c806c305ba..8706b827a6f 100644
--- a/javascript/ql/lib/semmle/javascript/security/regexp/NfaUtils.qll
+++ b/javascript/ql/lib/semmle/javascript/security/regexp/NfaUtils.qll
@@ -890,7 +890,7 @@ module PrefixConstruction<isCandidateSig/1 isCandidate> {
   private predicate lastStartState(RelevantState state) {
     exists(RegExpRoot root |
       state =
-        max(State s, Location l |
+        max(RelevantState s, Location l |
           isStartState(s) and
           getRoot(s.getRepr()) = root and
           l = s.getRepr().getLocation()
diff --git a/python/ql/lib/semmle/python/security/regexp/NfaUtils.qll b/python/ql/lib/semmle/python/security/regexp/NfaUtils.qll
index 1c806c305ba..8706b827a6f 100644
--- a/python/ql/lib/semmle/python/security/regexp/NfaUtils.qll
+++ b/python/ql/lib/semmle/python/security/regexp/NfaUtils.qll
@@ -890,7 +890,7 @@ module PrefixConstruction<isCandidateSig/1 isCandidate> {
   private predicate lastStartState(RelevantState state) {
     exists(RegExpRoot root |
       state =
-        max(State s, Location l |
+        max(RelevantState s, Location l |
           isStartState(s) and
           getRoot(s.getRepr()) = root and
           l = s.getRepr().getLocation()
diff --git a/ruby/ql/lib/codeql/ruby/security/regexp/NfaUtils.qll b/ruby/ql/lib/codeql/ruby/security/regexp/NfaUtils.qll
index 1c806c305ba..8706b827a6f 100644
--- a/ruby/ql/lib/codeql/ruby/security/regexp/NfaUtils.qll
+++ b/ruby/ql/lib/codeql/ruby/security/regexp/NfaUtils.qll
@@ -890,7 +890,7 @@ module PrefixConstruction<isCandidateSig/1 isCandidate> {
   private predicate lastStartState(RelevantState state) {
     exists(RegExpRoot root |
       state =
-        max(State s, Location l |
+        max(RelevantState s, Location l |
           isStartState(s) and
           getRoot(s.getRepr()) = root and
           l = s.getRepr().getLocation()

From a86a940df7b26ccc57bd44a25b9d7774cf1d8100 Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Mon, 5 Sep 2022 13:27:34 +0200
Subject: [PATCH 041/203] add getRepr() and toString() on RelevantState

---
 java/ql/lib/semmle/code/java/security/regexp/NfaUtils.qll   | 6 +++++-
 .../ql/lib/semmle/javascript/security/regexp/NfaUtils.qll   | 6 +++++-
 python/ql/lib/semmle/python/security/regexp/NfaUtils.qll    | 6 +++++-
 ruby/ql/lib/codeql/ruby/security/regexp/NfaUtils.qll        | 6 +++++-
 4 files changed, 20 insertions(+), 4 deletions(-)

diff --git a/java/ql/lib/semmle/code/java/security/regexp/NfaUtils.qll b/java/ql/lib/semmle/code/java/security/regexp/NfaUtils.qll
index 8706b827a6f..5112bdad11e 100644
--- a/java/ql/lib/semmle/code/java/security/regexp/NfaUtils.qll
+++ b/java/ql/lib/semmle/code/java/security/regexp/NfaUtils.qll
@@ -968,7 +968,11 @@ module PrefixConstruction<isCandidateSig/1 isCandidate> {
       exists(State s | isCandidate(s) | getRoot(s.getRepr()) = getRoot(this.getRepr()))
     }
 
-    string toString() { result = "RelevantState" }
+    /** Gets a string representation for this state in a regular expression. */
+    string toString() { result = State.super.toString() }
+
+    /** Gets the term represented by this state. */
+    RegExpTerm getRepr() { result = State.super.getRepr() }
   }
 }
 
diff --git a/javascript/ql/lib/semmle/javascript/security/regexp/NfaUtils.qll b/javascript/ql/lib/semmle/javascript/security/regexp/NfaUtils.qll
index 8706b827a6f..5112bdad11e 100644
--- a/javascript/ql/lib/semmle/javascript/security/regexp/NfaUtils.qll
+++ b/javascript/ql/lib/semmle/javascript/security/regexp/NfaUtils.qll
@@ -968,7 +968,11 @@ module PrefixConstruction<isCandidateSig/1 isCandidate> {
       exists(State s | isCandidate(s) | getRoot(s.getRepr()) = getRoot(this.getRepr()))
     }
 
-    string toString() { result = "RelevantState" }
+    /** Gets a string representation for this state in a regular expression. */
+    string toString() { result = State.super.toString() }
+
+    /** Gets the term represented by this state. */
+    RegExpTerm getRepr() { result = State.super.getRepr() }
   }
 }
 
diff --git a/python/ql/lib/semmle/python/security/regexp/NfaUtils.qll b/python/ql/lib/semmle/python/security/regexp/NfaUtils.qll
index 8706b827a6f..5112bdad11e 100644
--- a/python/ql/lib/semmle/python/security/regexp/NfaUtils.qll
+++ b/python/ql/lib/semmle/python/security/regexp/NfaUtils.qll
@@ -968,7 +968,11 @@ module PrefixConstruction<isCandidateSig/1 isCandidate> {
       exists(State s | isCandidate(s) | getRoot(s.getRepr()) = getRoot(this.getRepr()))
     }
 
-    string toString() { result = "RelevantState" }
+    /** Gets a string representation for this state in a regular expression. */
+    string toString() { result = State.super.toString() }
+
+    /** Gets the term represented by this state. */
+    RegExpTerm getRepr() { result = State.super.getRepr() }
   }
 }
 
diff --git a/ruby/ql/lib/codeql/ruby/security/regexp/NfaUtils.qll b/ruby/ql/lib/codeql/ruby/security/regexp/NfaUtils.qll
index 8706b827a6f..5112bdad11e 100644
--- a/ruby/ql/lib/codeql/ruby/security/regexp/NfaUtils.qll
+++ b/ruby/ql/lib/codeql/ruby/security/regexp/NfaUtils.qll
@@ -968,7 +968,11 @@ module PrefixConstruction<isCandidateSig/1 isCandidate> {
       exists(State s | isCandidate(s) | getRoot(s.getRepr()) = getRoot(this.getRepr()))
     }
 
-    string toString() { result = "RelevantState" }
+    /** Gets a string representation for this state in a regular expression. */
+    string toString() { result = State.super.toString() }
+
+    /** Gets the term represented by this state. */
+    RegExpTerm getRepr() { result = State.super.getRepr() }
   }
 }
 

From 5fc1bbc8c5b4337d4bf8a9b34ccc874100249963 Mon Sep 17 00:00:00 2001
From: Rasmus Lerchedahl Petersen <yoff@github.com>
Date: Mon, 5 Sep 2022 13:38:14 +0200
Subject: [PATCH 042/203] Python: Only alert on Python 2 code since - Python 3
 is ok from 3.7 onwards - support for Python 3.6 was just dropped - we do not
 actually know the minor version of the analysed code   (only of the
 extractor)

---
 python/ql/src/Exceptions/UnguardedNextInGenerator.ql  | 11 ++++-------
 .../generators/UnguardedNextInGenerator.expected      |  0
 .../generators/UnguardedNextInGenerator.qlref         |  0
 .../{ => 2}/query-tests/Exceptions/generators/test.py |  0
 .../ql/test/query-tests/Exceptions/generators/options |  1 -
 5 files changed, 4 insertions(+), 8 deletions(-)
 rename python/ql/test/{ => 2}/query-tests/Exceptions/generators/UnguardedNextInGenerator.expected (100%)
 rename python/ql/test/{ => 2}/query-tests/Exceptions/generators/UnguardedNextInGenerator.qlref (100%)
 rename python/ql/test/{ => 2}/query-tests/Exceptions/generators/test.py (100%)
 delete mode 100644 python/ql/test/query-tests/Exceptions/generators/options

diff --git a/python/ql/src/Exceptions/UnguardedNextInGenerator.ql b/python/ql/src/Exceptions/UnguardedNextInGenerator.ql
index 7e1e0f868be..890df3374d9 100644
--- a/python/ql/src/Exceptions/UnguardedNextInGenerator.ql
+++ b/python/ql/src/Exceptions/UnguardedNextInGenerator.ql
@@ -67,13 +67,10 @@ where
   call.getNode().getScope().(Function).isGenerator() and
   not exists(Comp comp | comp.contains(call.getNode())) and
   not stop_iteration_handled(call) and
-  // PEP 479 removes this concern from 3.5 onwards
+  // PEP 479 removes this concern from 3.7 onwards
   // see: https://peps.python.org/pep-0479/
   //
-  // However, testing it out, the problem is not removed until 3.7.
-  (
-    major_version() = 2
-    or
-    major_version() = 3 and minor_version() < 7
-  )
+  // However, we do not know the minor version of the analysed code (only of the extractor),
+  // so we only alert on Python 2.
+  major_version() = 2
 select call, "Call to next() in a generator"
diff --git a/python/ql/test/query-tests/Exceptions/generators/UnguardedNextInGenerator.expected b/python/ql/test/2/query-tests/Exceptions/generators/UnguardedNextInGenerator.expected
similarity index 100%
rename from python/ql/test/query-tests/Exceptions/generators/UnguardedNextInGenerator.expected
rename to python/ql/test/2/query-tests/Exceptions/generators/UnguardedNextInGenerator.expected
diff --git a/python/ql/test/query-tests/Exceptions/generators/UnguardedNextInGenerator.qlref b/python/ql/test/2/query-tests/Exceptions/generators/UnguardedNextInGenerator.qlref
similarity index 100%
rename from python/ql/test/query-tests/Exceptions/generators/UnguardedNextInGenerator.qlref
rename to python/ql/test/2/query-tests/Exceptions/generators/UnguardedNextInGenerator.qlref
diff --git a/python/ql/test/query-tests/Exceptions/generators/test.py b/python/ql/test/2/query-tests/Exceptions/generators/test.py
similarity index 100%
rename from python/ql/test/query-tests/Exceptions/generators/test.py
rename to python/ql/test/2/query-tests/Exceptions/generators/test.py
diff --git a/python/ql/test/query-tests/Exceptions/generators/options b/python/ql/test/query-tests/Exceptions/generators/options
deleted file mode 100644
index 82e71280e70..00000000000
--- a/python/ql/test/query-tests/Exceptions/generators/options
+++ /dev/null
@@ -1 +0,0 @@
-semmle-extractor-options: --lang=3.2

From d31d763328f99512bc683d94a4a733d556a0d95c Mon Sep 17 00:00:00 2001
From: Rasmus Lerchedahl Petersen <yoff@github.com>
Date: Mon, 5 Sep 2022 16:45:43 +0200
Subject: [PATCH 043/203] Python: adjust test expectations We now locate a
 `DataFlow::Node` rather than an 'AstNode`.

---
 .../2/query-tests/Exceptions/raising/RaisingTuple.expected  | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/python/ql/test/2/query-tests/Exceptions/raising/RaisingTuple.expected b/python/ql/test/2/query-tests/Exceptions/raising/RaisingTuple.expected
index f95dd5defde..7200c147ea9 100644
--- a/python/ql/test/2/query-tests/Exceptions/raising/RaisingTuple.expected
+++ b/python/ql/test/2/query-tests/Exceptions/raising/RaisingTuple.expected
@@ -1,3 +1,3 @@
-| test.py:8:5:8:12 | Raise | Raising $@ will result in the first element (recursively) being raised and all other elements being discarded. | test.py:7:10:7:29 | Tuple | a tuple |
-| test.py:11:5:11:32 | Raise | Raising $@ will result in the first element (recursively) being raised and all other elements being discarded. | test.py:11:12:11:31 | Tuple | a tuple |
-| test.py:15:5:15:23 | Raise | Raising $@ will result in the first element (recursively) being raised and all other elements being discarded. | test.py:14:10:14:19 | Tuple | a tuple |
+| test.py:8:5:8:12 | Raise | Raising $@ will result in the first element (recursively) being raised and all other elements being discarded. | test.py:7:10:7:29 | ControlFlowNode for Tuple | a tuple |
+| test.py:11:5:11:32 | Raise | Raising $@ will result in the first element (recursively) being raised and all other elements being discarded. | test.py:11:12:11:31 | ControlFlowNode for Tuple | a tuple |
+| test.py:15:5:15:23 | Raise | Raising $@ will result in the first element (recursively) being raised and all other elements being discarded. | test.py:14:10:14:19 | ControlFlowNode for Tuple | a tuple |

From cb3c53dee72c6f4ef8b6d2f4b8cf17b08d16b56a Mon Sep 17 00:00:00 2001
From: Tamas Vajk <tamasvajk@github.com>
Date: Tue, 6 Sep 2022 11:31:24 +0200
Subject: [PATCH 044/203] Kotlin: Add test case for unexpected `vararg`
 extraction error

---
 .../test/kotlin/library-tests/vararg/args.expected   |  6 ++++++
 java/ql/test/kotlin/library-tests/vararg/args.ql     |  5 +++++
 java/ql/test/kotlin/library-tests/vararg/test.kt     | 12 +++++++++++-
 3 files changed, 22 insertions(+), 1 deletion(-)

diff --git a/java/ql/test/kotlin/library-tests/vararg/args.expected b/java/ql/test/kotlin/library-tests/vararg/args.expected
index 3d6a2347a95..dd966a10b2c 100644
--- a/java/ql/test/kotlin/library-tests/vararg/args.expected
+++ b/java/ql/test/kotlin/library-tests/vararg/args.expected
@@ -1,9 +1,12 @@
+diag
+| test.kt:55:15:55:35 | Unexpected IrVararg |
 varargsParams
 | test.kt:8:15:8:28 | xs | file://:0:0:0:0 | int[] |
 | test.kt:12:26:12:39 | xs | file://:0:0:0:0 | int[] |
 | test.kt:20:24:20:37 | xs | file://:0:0:0:0 | int[] |
 | test.kt:24:50:24:63 | xs | file://:0:0:0:0 | int[] |
 | test.kt:28:37:28:50 | xs | file://:0:0:0:0 | int[] |
+| test.kt:50:5:50:31 | s | file://:0:0:0:0 | String[] |
 explicitVarargsArguments
 | test.kt:12:50:12:51 | xs | test.kt:12:44:12:52 | this(...) |
 | test.kt:38:25:38:29 | array | test.kt:38:5:38:30 | funWithOnlyVarArgs(...) |
@@ -11,6 +14,7 @@ explicitVarargsArguments
 | test.kt:40:34:40:38 | array | test.kt:40:5:40:49 | funWithMiddleVarArgs(...) |
 | test.kt:44:27:44:31 | array | test.kt:44:5:44:32 | new HasVarargConstructor(...) |
 | test.kt:45:34:45:38 | array | test.kt:45:5:45:39 | new HasVarargConstructor(...) |
+| test.kt:55:15:55:35 | tmp0_s | test.kt:55:13:55:43 | new X(...) |
 implicitVarargsArguments
 | intList.kt:3:21:3:22 | 10 | intList.kt:3:14:3:31 | listOf(...) | 0 |
 | intList.kt:3:25:3:26 | 11 | intList.kt:3:14:3:31 | listOf(...) | 1 |
@@ -78,3 +82,5 @@ implicitVarargsArguments
 | test.kt:44:5:44:32 | new HasVarargConstructor(...) | 0 | test.kt:44:27:44:31 | array |
 | test.kt:45:5:45:39 | new HasVarargConstructor(...) | 0 | test.kt:45:27:45:29 | foo |
 | test.kt:45:5:45:39 | new HasVarargConstructor(...) | 1 | test.kt:45:34:45:38 | array |
+| test.kt:55:13:55:43 | new X(...) | 0 | test.kt:55:42:55:42 | 1 |
+| test.kt:55:13:55:43 | new X(...) | 1 | test.kt:55:15:55:35 | tmp0_s |
diff --git a/java/ql/test/kotlin/library-tests/vararg/args.ql b/java/ql/test/kotlin/library-tests/vararg/args.ql
index e58bf622e98..510ea0c2682 100644
--- a/java/ql/test/kotlin/library-tests/vararg/args.ql
+++ b/java/ql/test/kotlin/library-tests/vararg/args.ql
@@ -1,4 +1,9 @@
 import java
+import semmle.code.java.Diagnostics
+
+query predicate diag(Diagnostic d) {
+  d.getMessage() = "Unexpected IrVararg"
+}
 
 query predicate varargsParams(Parameter p, Type t) {
   p.getCallable().fromSource() and
diff --git a/java/ql/test/kotlin/library-tests/vararg/test.kt b/java/ql/test/kotlin/library-tests/vararg/test.kt
index 00dc8f13d78..966f9d0f5a9 100644
--- a/java/ql/test/kotlin/library-tests/vararg/test.kt
+++ b/java/ql/test/kotlin/library-tests/vararg/test.kt
@@ -1,6 +1,6 @@
 
 fun sink(sunk: Int) {
-    
+
 }
 
 open class HasVarargConstructor {
@@ -44,3 +44,13 @@ fun myFun() {
     HasVarargConstructor(*array)
     HasVarargConstructor("foo", *array)
 }
+
+open class X(
+    i: Int,
+    public vararg val s: String
+) { }
+
+fun fn(sl: List<String>) {
+    // reordered args:
+    val x = X(s = sl.toTypedArray(), i = 1)
+}

From 826bbdf834c92f15baa6b90175c82925f09f8cf2 Mon Sep 17 00:00:00 2001
From: Tamas Vajk <tamasvajk@github.com>
Date: Tue, 6 Sep 2022 11:32:09 +0200
Subject: [PATCH 045/203] Kotlin: Fix `vararg` extraction outside of method
 call

---
 .../src/main/kotlin/KotlinFileExtractor.kt                | 8 +++++++-
 java/ql/test/kotlin/library-tests/vararg/args.expected    | 2 +-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt b/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt
index fe88f8a2de4..d1603f0d58d 100644
--- a/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt
+++ b/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt
@@ -3056,7 +3056,13 @@ open class KotlinFileExtractor(
                     extractTypeOperatorCall(e, callable, exprParent.parent, exprParent.idx, exprParent.enclosingStmt)
                 }
                 is IrVararg -> {
-                    logger.errorElement("Unexpected IrVararg", e)
+                    if (e.elements.size != 1 || e.elements[0] !is IrSpreadElement) {
+                        logger.errorElement("Unexpected IrVararg", e)
+                        return
+                    }
+                    // There are lowered IR cases when the vararg expression is not within a call, such as
+                    // val temp0 = [*expr]
+                    extractExpression((e.elements[0] as IrSpreadElement).expression, callable, parent)
                 }
                 is IrGetObjectValue -> {
                     // For `object MyObject { ... }`, the .class has an
diff --git a/java/ql/test/kotlin/library-tests/vararg/args.expected b/java/ql/test/kotlin/library-tests/vararg/args.expected
index dd966a10b2c..317a907bdc8 100644
--- a/java/ql/test/kotlin/library-tests/vararg/args.expected
+++ b/java/ql/test/kotlin/library-tests/vararg/args.expected
@@ -1,5 +1,4 @@
 diag
-| test.kt:55:15:55:35 | Unexpected IrVararg |
 varargsParams
 | test.kt:8:15:8:28 | xs | file://:0:0:0:0 | int[] |
 | test.kt:12:26:12:39 | xs | file://:0:0:0:0 | int[] |
@@ -84,3 +83,4 @@ implicitVarargsArguments
 | test.kt:45:5:45:39 | new HasVarargConstructor(...) | 1 | test.kt:45:34:45:38 | array |
 | test.kt:55:13:55:43 | new X(...) | 0 | test.kt:55:42:55:42 | 1 |
 | test.kt:55:13:55:43 | new X(...) | 1 | test.kt:55:15:55:35 | tmp0_s |
+| test.kt:55:22:55:35 | toTypedArray(...) | 0 | test.kt:55:19:55:20 | sl |

From b745b5ab719ca1ac3fe42b8c4cd354cf25bdf39c Mon Sep 17 00:00:00 2001
From: Tony Torralba <atorralba@users.noreply.github.com>
Date: Tue, 6 Sep 2022 14:32:48 +0200
Subject: [PATCH 046/203] Add models for androidx.core.app.NotificationCompat

---
 ...2022-09-06-notificationcompat-summaries.md |   5 +
 .../java/frameworks/android/Notifications.qll |  36 +-
 .../frameworks/android/notification/Test.java | 646 +++++++++++++++-
 ...otificationBuilderWithBuilderAccessor.java |  10 +
 .../androidx/core/app/NotificationCompat.java | 720 ++++++++++++++++++
 .../androidx/core/app/RemoteInput.java        |  71 ++
 .../CustomVersionedParcelable.java            |  14 +
 .../VersionedParcelable.java                  |   8 +
 8 files changed, 1503 insertions(+), 7 deletions(-)
 create mode 100644 java/ql/lib/change-notes/2022-09-06-notificationcompat-summaries.md
 create mode 100644 java/ql/test/stubs/google-android-9.0.0/androidx/core/app/NotificationBuilderWithBuilderAccessor.java
 create mode 100644 java/ql/test/stubs/google-android-9.0.0/androidx/core/app/NotificationCompat.java
 create mode 100644 java/ql/test/stubs/google-android-9.0.0/androidx/core/app/RemoteInput.java
 create mode 100644 java/ql/test/stubs/google-android-9.0.0/androidx/versionedparcelable/CustomVersionedParcelable.java
 create mode 100644 java/ql/test/stubs/google-android-9.0.0/androidx/versionedparcelable/VersionedParcelable.java

diff --git a/java/ql/lib/change-notes/2022-09-06-notificationcompat-summaries.md b/java/ql/lib/change-notes/2022-09-06-notificationcompat-summaries.md
new file mode 100644
index 00000000000..e95ad457844
--- /dev/null
+++ b/java/ql/lib/change-notes/2022-09-06-notificationcompat-summaries.md
@@ -0,0 +1,5 @@
+---
+category: minorAnalysis
+---
+* Added new flow steps for `androidx.core.app.NotificationCompat` and its inner classes.
+  
\ No newline at end of file
diff --git a/java/ql/lib/semmle/code/java/frameworks/android/Notifications.qll b/java/ql/lib/semmle/code/java/frameworks/android/Notifications.qll
index f16af6dcf89..0f69f0bbe1d 100644
--- a/java/ql/lib/semmle/code/java/frameworks/android/Notifications.qll
+++ b/java/ql/lib/semmle/code/java/frameworks/android/Notifications.qll
@@ -19,6 +19,17 @@ private class NotificationBuildersSummaryModels extends SummaryModelCsv {
         "android.app;Notification$Action$Builder;true;build;;;Argument[-1];ReturnValue;taint;manual",
         "android.app;Notification$Action$Builder;true;build;;;Argument[-1].SyntheticField[android.content.Intent.extras];ReturnValue.SyntheticField[android.content.Intent.extras];value;manual",
         "android.app;Notification$Action$Builder;true;getExtras;;;Argument[-1].SyntheticField[android.content.Intent.extras];ReturnValue;value;manual",
+        "androidx.core.app;NotificationCompat$Action;true;Action;(int,CharSequence,PendingIntent);;Argument[2];Argument[-1];taint;manual",
+        "androidx.core.app;NotificationCompat$Action;true;Action;(IconCompat,CharSequence,PendingIntent);;Argument[2];Argument[-1];taint;manual",
+        "androidx.core.app;NotificationCompat$Action;true;getExtras;;;Argument[-1].SyntheticField[android.content.Intent.extras];ReturnValue;value;manual",
+        "androidx.core.app;NotificationCompat$Action$Builder;true;Builder;(int,CharSequence,PendingIntent);;Argument[2];Argument[-1];taint;manual",
+        "androidx.core.app;NotificationCompat$Action$Builder;true;Builder;(IconCompat,CharSequence,PendingIntent);;Argument[2];Argument[-1];taint;manual",
+        "androidx.core.app;NotificationCompat$Action$Builder;true;Builder;(Action);;Argument[0];Argument[-1];taint;manual",
+        "androidx.core.app;NotificationCompat$Action$Builder;true;addExtras;;;Argument[0].MapKey;Argument[-1].SyntheticField[android.content.Intent.extras].MapKey;value;manual",
+        "androidx.core.app;NotificationCompat$Action$Builder;true;addExtras;;;Argument[0].MapValue;Argument[-1].SyntheticField[android.content.Intent.extras].MapValue;value;manual",
+        "androidx.core.app;NotificationCompat$Action$Builder;true;build;;;Argument[-1];ReturnValue;taint;manual",
+        "androidx.core.app;NotificationCompat$Action$Builder;true;build;;;Argument[-1].SyntheticField[android.content.Intent.extras];ReturnValue.SyntheticField[android.content.Intent.extras];value;manual",
+        "androidx.core.app;NotificationCompat$Action$Builder;true;getExtras;;;Argument[-1].SyntheticField[android.content.Intent.extras];ReturnValue;value;manual",
         "android.app;Notification$Builder;true;addAction;(int,CharSequence,PendingIntent);;Argument[2];Argument[-1];taint;manual",
         "android.app;Notification$Builder;true;addAction;(Action);;Argument[0];Argument[-1];taint;manual",
         "android.app;Notification$Builder;true;addExtras;;;Argument[0].MapKey;Argument[-1].SyntheticField[android.content.Intent.extras].MapKey;value;manual",
@@ -32,18 +43,30 @@ private class NotificationBuildersSummaryModels extends SummaryModelCsv {
         "android.app;Notification$Builder;true;setExtras;;;Argument[0];Argument[-1].SyntheticField[android.content.Intent.extras];value;manual",
         "android.app;Notification$Builder;true;setDeleteIntent;;;Argument[0];Argument[-1];taint;manual",
         "android.app;Notification$Builder;true;setPublicVersion;;;Argument[0];Argument[-1];taint;manual",
+        "androidx.core.app;NotificationCompat$Builder;true;addAction;(int,CharSequence,PendingIntent);;Argument[2];Argument[-1];taint;manual",
+        "androidx.core.app;NotificationCompat$Builder;true;addAction;(Action);;Argument[0];Argument[-1];taint;manual",
+        "androidx.core.app;NotificationCompat$Builder;true;addExtras;;;Argument[0].MapKey;Argument[-1].SyntheticField[android.content.Intent.extras].MapKey;value;manual",
+        "androidx.core.app;NotificationCompat$Builder;true;addExtras;;;Argument[0].MapValue;Argument[-1].SyntheticField[android.content.Intent.extras].MapValue;value;manual",
+        "androidx.core.app;NotificationCompat$Builder;true;build;;;Argument[-1];ReturnValue;taint;manual",
+        "androidx.core.app;NotificationCompat$Builder;true;build;;;Argument[-1].SyntheticField[android.content.Intent.extras];ReturnValue.Field[android.app.Notification.extras];value;manual",
+        "androidx.core.app;NotificationCompat$Builder;true;setContentIntent;;;Argument[0];Argument[-1];taint;manual",
+        "androidx.core.app;NotificationCompat$Builder;true;getExtras;;;Argument[-1].SyntheticField[android.content.Intent.extras];ReturnValue;value;manual",
+        "androidx.core.app;NotificationCompat$Builder;true;setExtras;;;Argument[0];Argument[-1].SyntheticField[android.content.Intent.extras];value;manual",
+        "androidx.core.app;NotificationCompat$Builder;true;setDeleteIntent;;;Argument[0];Argument[-1];taint;manual",
+        "androidx.core.app;NotificationCompat$Builder;true;setPublicVersion;;;Argument[0];Argument[-1];taint;manual",
         "android.app;Notification$Style;true;build;;;Argument[-1];ReturnValue;taint;manual",
         "android.app;Notification$BigPictureStyle;true;BigPictureStyle;(Builder);;Argument[0];Argument[-1];taint;manual",
         "android.app;Notification$BigTextStyle;true;BigTextStyle;(Builder);;Argument[0];Argument[-1];taint;manual",
         "android.app;Notification$InboxStyle;true;InboxStyle;(Builder);;Argument[0];Argument[-1];taint;manual",
         "android.app;Notification$MediaStyle;true;MediaStyle;(Builder);;Argument[0];Argument[-1];taint;manual",
         // Fluent models
-        "android.app;Notification$Action$Builder;true;" +
+        ["android.app;Notification", "androidx.core.app;NotificationCompat"] +
+          "$Action$Builder;true;" +
           [
             "addExtras", "addRemoteInput", "extend", "setAllowGeneratedReplies",
             "setAuthenticationRequired", "setContextual", "setSemanticAction"
           ] + ";;;Argument[-1];ReturnValue;value;manual",
-        "android.app;Notification$Builder;true;" +
+        ["android.app;Notification", "androidx.core.app;NotificationCompat"] + "$Builder;true;" +
           [
             "addAction", "addExtras", "addPerson", "extend", "setActions", "setAutoCancel",
             "setBadgeIconType", "setBubbleMetadata", "setCategory", "setChannelId",
@@ -58,15 +81,16 @@ private class NotificationBuildersSummaryModels extends SummaryModelCsv {
             "setSubText", "setTicker", "setTimeoutAfter", "setUsesChronometer", "setVibrate",
             "setVisibility", "setWhen"
           ] + ";;;Argument[-1];ReturnValue;value;manual",
-        "android.app;Notification$BigPictureStyle;true;" +
+        ["android.app;Notification", "androidx.core.app;NotificationCompat"] +
+          "$BigPictureStyle;true;" +
           [
             "bigLargeIcon", "bigPicture", "setBigContentTitle", "setContentDescription",
             "setSummaryText", "showBigPictureWhenCollapsed"
           ] + ";;;Argument[-1];ReturnValue;value;manual",
-        "android.app;Notification$BigTextStyle;true;" +
-          ["bigText", "setBigContentTitle", "setSummaryText"] +
+        ["android.app;Notification", "androidx.core.app;NotificationCompat"] + "$BigTextStyle;true;"
+          + ["bigText", "setBigContentTitle", "setSummaryText"] +
           ";;;Argument[-1];ReturnValue;value;manual",
-        "android.app;Notification$InboxStyle;true;" +
+        ["android.app;Notification", "androidx.core.app;NotificationCompat"] + "$InboxStyle;true;" +
           ["addLine", "setBigContentTitle", "setSummaryText"] +
           ";;;Argument[-1];ReturnValue;value;manual",
         "android.app;Notification$MediaStyle;true;" +
diff --git a/java/ql/test/library-tests/frameworks/android/notification/Test.java b/java/ql/test/library-tests/frameworks/android/notification/Test.java
index 566c52b0a6e..d669e7421bf 100644
--- a/java/ql/test/library-tests/frameworks/android/notification/Test.java
+++ b/java/ql/test/library-tests/frameworks/android/notification/Test.java
@@ -1,11 +1,13 @@
 package generatedtest;
 
 import android.app.Notification;
+import androidx.core.app.NotificationCompat;
 import android.app.PendingIntent;
 import android.app.Person;
 import android.app.Notification.Action;
 import android.graphics.Bitmap;
 import android.graphics.drawable.Icon;
+import androidx.core.graphics.drawable.IconCompat;
 import android.media.AudioAttributes;
 import android.net.Uri;
 import android.os.Bundle;
@@ -103,7 +105,8 @@ public class Test {
 		}
 		{
 			// "android.app;Notification$Action$Builder;true;build;;;SyntheticField[android.content.Intent.extras]
-			// of Argument[-1];SyntheticField[android.content.Intent.extras] of ReturnValue;value;manual"
+			// of Argument[-1];SyntheticField[android.content.Intent.extras] of
+			// ReturnValue;value;manual"
 			Notification.Action out = null;
 			Notification.Action.Builder builder = null;
 			Bundle in = (Bundle) newWithMapValueDefault(source());
@@ -814,6 +817,647 @@ public class Test {
 			Notification.MediaStyle out = in.setShowActionsInCompactView(null);
 			sink(out); // $ hasValueFlow
 		}
+		{
+			// "androidx.core.app;NotificationCompat$Action$Builder;true;Builder;(Action);;Argument[0];Argument[-1];taint;manual"
+			NotificationCompat.Action.Builder out = null;
+			NotificationCompat.Action in = (NotificationCompat.Action) source();
+			out = new NotificationCompat.Action.Builder(in);
+			sink(out); // $ hasTaintFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Action$Builder;true;Builder;(IconCompat,CharSequence,PendingIntent);;Argument[2];Argument[-1];taint;manual"
+			NotificationCompat.Action.Builder out = null;
+			PendingIntent in = (PendingIntent) source();
+			out = new NotificationCompat.Action.Builder((IconCompat) null, (CharSequence) null, in);
+			sink(out); // $ hasTaintFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Action$Builder;true;Builder;(int,CharSequence,PendingIntent);;Argument[2];Argument[-1];taint;manual"
+			NotificationCompat.Action.Builder out = null;
+			PendingIntent in = (PendingIntent) source();
+			out = new NotificationCompat.Action.Builder(0, (CharSequence) null, in);
+			sink(out); // $ hasTaintFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Action$Builder;true;addExtras;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Action.Builder out = null;
+			NotificationCompat.Action.Builder in = (NotificationCompat.Action.Builder) source();
+			out = in.addExtras(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Action$Builder;true;addExtras;;;Argument[0].MapKey;Argument[-1].SyntheticField[android.content.Intent.extras].MapKey;value;manual"
+			NotificationCompat.Action.Builder out = null;
+			Bundle in = (Bundle) newWithMapKeyDefault(source());
+			out.addExtras(in);
+			sink(getMapKeyDefault(out.getExtras())); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Action$Builder;true;addExtras;;;Argument[0].MapValue;Argument[-1].SyntheticField[android.content.Intent.extras].MapValue;value;manual"
+			NotificationCompat.Action.Builder out = null;
+			Bundle in = (Bundle) newWithMapValueDefault(source());
+			out.addExtras(in);
+			sink(getMapValueDefault(out.getExtras())); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Action$Builder;true;addRemoteInput;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Action.Builder out = null;
+			NotificationCompat.Action.Builder in = (NotificationCompat.Action.Builder) source();
+			out = in.addRemoteInput(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Action$Builder;true;build;;;Argument[-1].SyntheticField[android.content.Intent.extras];ReturnValue.SyntheticField[android.content.Intent.extras];value;manual"
+			NotificationCompat.Action out = null;
+			NotificationCompat.Action.Builder builder = null;
+			Bundle in = (Bundle) newWithMapValueDefault(source());
+			builder.addExtras(in);
+			out = builder.build();
+			sink(getMapValueDefault(out.getExtras())); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Action$Builder;true;build;;;Argument[-1];ReturnValue;taint;manual"
+			NotificationCompat.Action out = null;
+			NotificationCompat.Action.Builder in = (NotificationCompat.Action.Builder) source();
+			out = in.build();
+			sink(out); // $ hasTaintFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Action$Builder;true;extend;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Action.Builder out = null;
+			NotificationCompat.Action.Builder in = (NotificationCompat.Action.Builder) source();
+			out = in.extend(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Action$Builder;true;getExtras;;;Argument[-1].SyntheticField[android.content.Intent.extras];ReturnValue;value;manual"
+			Bundle out = null;
+			NotificationCompat.Action.Builder in = (NotificationCompat.Action.Builder) source();
+			out = in.getExtras();
+			sink(out); // $ hasTaintFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Action$Builder;true;setAllowGeneratedReplies;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Action.Builder out = null;
+			NotificationCompat.Action.Builder in = (NotificationCompat.Action.Builder) source();
+			out = in.setAllowGeneratedReplies(false);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Action$Builder;true;setContextual;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Action.Builder out = null;
+			NotificationCompat.Action.Builder in = (NotificationCompat.Action.Builder) source();
+			out = in.setContextual(false);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Action$Builder;true;setSemanticAction;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Action.Builder out = null;
+			NotificationCompat.Action.Builder in = (NotificationCompat.Action.Builder) source();
+			out = in.setSemanticAction(0);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Action;true;Action;(IconCompat,CharSequence,PendingIntent);;Argument[2];Argument[-1];taint;manual"
+			NotificationCompat.Action out = null;
+			PendingIntent in = (PendingIntent) source();
+			out = new NotificationCompat.Action((IconCompat) null, (CharSequence) null, in);
+			sink(out); // $ hasTaintFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Action;true;Action;(int,CharSequence,PendingIntent);;Argument[2];Argument[-1];taint;manual"
+			NotificationCompat.Action out = null;
+			PendingIntent in = (PendingIntent) source();
+			out = new NotificationCompat.Action(0, (CharSequence) null, in);
+			sink(out); // $ hasTaintFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Action;true;getExtras;;;Argument[-1].SyntheticField[android.content.Intent.extras];ReturnValue;value;manual"
+			Bundle out = null;
+			NotificationCompat.Action in = (NotificationCompat.Action) source();
+			out = in.getExtras();
+			sink(out); // $ hasTaintFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$BigPictureStyle;true;bigLargeIcon;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.BigPictureStyle out = null;
+			NotificationCompat.BigPictureStyle in = (NotificationCompat.BigPictureStyle) source();
+			out = in.bigLargeIcon(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$BigPictureStyle;true;bigPicture;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.BigPictureStyle out = null;
+			NotificationCompat.BigPictureStyle in = (NotificationCompat.BigPictureStyle) source();
+			out = in.bigPicture(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$BigPictureStyle;true;setBigContentTitle;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.BigPictureStyle out = null;
+			NotificationCompat.BigPictureStyle in = (NotificationCompat.BigPictureStyle) source();
+			out = in.setBigContentTitle(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$BigPictureStyle;true;setSummaryText;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.BigPictureStyle out = null;
+			NotificationCompat.BigPictureStyle in = (NotificationCompat.BigPictureStyle) source();
+			out = in.setSummaryText(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$BigTextStyle;true;bigText;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.BigTextStyle out = null;
+			NotificationCompat.BigTextStyle in = (NotificationCompat.BigTextStyle) source();
+			out = in.bigText(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$BigTextStyle;true;setBigContentTitle;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.BigTextStyle out = null;
+			NotificationCompat.BigTextStyle in = (NotificationCompat.BigTextStyle) source();
+			out = in.setBigContentTitle(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$BigTextStyle;true;setSummaryText;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.BigTextStyle out = null;
+			NotificationCompat.BigTextStyle in = (NotificationCompat.BigTextStyle) source();
+			out = in.setSummaryText(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;addAction;(Action);;Argument[0];Argument[-1];taint;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Action in = (NotificationCompat.Action) source();
+			out.addAction(in);
+			sink(out); // $ hasTaintFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;addAction;(int,CharSequence,PendingIntent);;Argument[2];Argument[-1];taint;manual"
+			NotificationCompat.Builder out = null;
+			PendingIntent in = (PendingIntent) source();
+			out.addAction(0, null, in);
+			sink(out); // $ hasTaintFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;addAction;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.addAction(0, null, null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;addAction;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.addAction(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;addExtras;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.addExtras(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;addExtras;;;Argument[0].MapKey;Argument[-1].SyntheticField[android.content.Intent.extras].MapKey;value;manual"
+			NotificationCompat.Builder out = null;
+			Bundle in = (Bundle) newWithMapKeyDefault(source());
+			out.addExtras(in);
+			sink(getMapKeyDefault(out.getExtras())); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;addExtras;;;Argument[0].MapValue;Argument[-1].SyntheticField[android.content.Intent.extras].MapValue;value;manual"
+			NotificationCompat.Builder out = null;
+			Bundle in = (Bundle) newWithMapValueDefault(source());
+			out.addExtras(in);
+			sink(getMapValueDefault(out.getExtras())); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;addPerson;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.addPerson(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;build;;;Argument[-1].SyntheticField[android.content.Intent.extras];ReturnValue.Field[android.app.Notification.extras];value;manual"
+			Notification out = null;
+			NotificationCompat.Builder builder = null;
+			Bundle in = (Bundle) newWithMapValueDefault(source());
+			builder.addExtras(in);
+			out = builder.build();
+			sink(getMapValueDefault(out.extras)); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;build;;;Argument[-1];ReturnValue;taint;manual"
+			Notification out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.build();
+			sink(out); // $ hasTaintFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;extend;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.extend(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;getExtras;;;Argument[-1].SyntheticField[android.content.Intent.extras];ReturnValue;value;manual"
+			Bundle out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.getExtras();
+			sink(out); // $ hasTaintFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setAutoCancel;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setAutoCancel(false);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setBadgeIconType;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setBadgeIconType(0);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setBubbleMetadata;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setBubbleMetadata(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setCategory;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setCategory(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setChannelId;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setChannelId(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setChronometerCountDown;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setChronometerCountDown(false);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setColor;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setColor(0);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setColorized;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setColorized(false);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setContent;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setContent(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setContentInfo;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setContentInfo(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setContentIntent;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setContentIntent(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setContentIntent;;;Argument[0];Argument[-1];taint;manual"
+			NotificationCompat.Builder out = null;
+			PendingIntent in = (PendingIntent) source();
+			out.setContentIntent(in);
+			sink(out); // $ hasTaintFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setContentText;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setContentText(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setContentTitle;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setContentTitle(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setCustomBigContentView;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setCustomBigContentView(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setCustomHeadsUpContentView;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setCustomHeadsUpContentView(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setDefaults;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setDefaults(0);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setDeleteIntent;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setDeleteIntent(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setDeleteIntent;;;Argument[0];Argument[-1];taint;manual"
+			NotificationCompat.Builder out = null;
+			PendingIntent in = (PendingIntent) source();
+			out.setDeleteIntent(in);
+			sink(out); // $ hasTaintFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setExtras;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setExtras(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setExtras;;;Argument[0];Argument[-1].SyntheticField[android.content.Intent.extras];value;manual"
+			NotificationCompat.Builder out = null;
+			Bundle in = (Bundle) source();
+			out.setExtras(in);
+			sink(out.getExtras()); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setFullScreenIntent;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setFullScreenIntent(null, false);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setGroup;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setGroup(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setGroupAlertBehavior;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setGroupAlertBehavior(0);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setGroupSummary;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setGroupSummary(false);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setLargeIcon;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setLargeIcon(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setLights;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setLights(0, 0, 0);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setLocalOnly;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setLocalOnly(false);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setNumber;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setNumber(0);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setOngoing;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setOngoing(false);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setOnlyAlertOnce;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setOnlyAlertOnce(false);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setPriority;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setPriority(0);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setProgress;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setProgress(0, 0, false);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setPublicVersion;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setPublicVersion(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setPublicVersion;;;Argument[0];Argument[-1];taint;manual"
+			NotificationCompat.Builder out = null;
+			Notification in = (Notification) source();
+			out.setPublicVersion(in);
+			sink(out); // $ hasTaintFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setRemoteInputHistory;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setRemoteInputHistory(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setShortcutId;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setShortcutId(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setShowWhen;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setShowWhen(false);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setSmallIcon;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setSmallIcon(0);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setSmallIcon;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setSmallIcon(0, 0);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setSortKey;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setSortKey(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setSound;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setSound(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setSound;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setSound(null, 0);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setStyle;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setStyle(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setSubText;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setSubText(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setTicker;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setTicker(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setTicker;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setTicker(null, null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setTimeoutAfter;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setTimeoutAfter(0L);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setUsesChronometer;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setUsesChronometer(false);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setVibrate;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setVibrate(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setVisibility;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setVisibility(0);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$Builder;true;setWhen;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.Builder out = null;
+			NotificationCompat.Builder in = (NotificationCompat.Builder) source();
+			out = in.setWhen(0L);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$InboxStyle;true;addLine;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.InboxStyle out = null;
+			NotificationCompat.InboxStyle in = (NotificationCompat.InboxStyle) source();
+			out = in.addLine(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$InboxStyle;true;setBigContentTitle;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.InboxStyle out = null;
+			NotificationCompat.InboxStyle in = (NotificationCompat.InboxStyle) source();
+			out = in.setBigContentTitle(null);
+			sink(out); // $ hasValueFlow
+		}
+		{
+			// "androidx.core.app;NotificationCompat$InboxStyle;true;setSummaryText;;;Argument[-1];ReturnValue;value;manual"
+			NotificationCompat.InboxStyle out = null;
+			NotificationCompat.InboxStyle in = (NotificationCompat.InboxStyle) source();
+			out = in.setSummaryText(null);
+			sink(out); // $ hasValueFlow
+		}
 	}
 
 }
diff --git a/java/ql/test/stubs/google-android-9.0.0/androidx/core/app/NotificationBuilderWithBuilderAccessor.java b/java/ql/test/stubs/google-android-9.0.0/androidx/core/app/NotificationBuilderWithBuilderAccessor.java
new file mode 100644
index 00000000000..028807b3000
--- /dev/null
+++ b/java/ql/test/stubs/google-android-9.0.0/androidx/core/app/NotificationBuilderWithBuilderAccessor.java
@@ -0,0 +1,10 @@
+// Generated automatically from androidx.core.app.NotificationBuilderWithBuilderAccessor for testing
+// purposes
+
+package androidx.core.app;
+
+import android.app.Notification;
+
+public interface NotificationBuilderWithBuilderAccessor {
+    Notification.Builder getBuilder();
+}
diff --git a/java/ql/test/stubs/google-android-9.0.0/androidx/core/app/NotificationCompat.java b/java/ql/test/stubs/google-android-9.0.0/androidx/core/app/NotificationCompat.java
new file mode 100644
index 00000000000..58beaab5b9c
--- /dev/null
+++ b/java/ql/test/stubs/google-android-9.0.0/androidx/core/app/NotificationCompat.java
@@ -0,0 +1,720 @@
+// Generated automatically from androidx.core.app.NotificationCompat for testing purposes
+
+package androidx.core.app;
+
+import android.app.Notification;
+import android.app.PendingIntent;
+import android.content.Context;
+import android.graphics.Bitmap;
+import android.net.Uri;
+import android.os.Bundle;
+import android.widget.RemoteViews;
+import androidx.core.app.NotificationBuilderWithBuilderAccessor;
+import androidx.core.app.RemoteInput;
+import androidx.core.graphics.drawable.IconCompat;
+import java.util.ArrayList;
+import java.util.List;
+
+public class NotificationCompat {
+    abstract static public class Style {
+        protected NotificationCompat.Builder mBuilder = null;
+
+        protected void restoreFromCompatExtras(Bundle p0) {}
+
+        public Bitmap createColoredBitmap(int p0, int p1) {
+            return null;
+        }
+
+        public Notification build() {
+            return null;
+        }
+
+        public RemoteViews applyStandardTemplate(boolean p0, int p1, boolean p2) {
+            return null;
+        }
+
+        public RemoteViews makeBigContentView(NotificationBuilderWithBuilderAccessor p0) {
+            return null;
+        }
+
+        public RemoteViews makeContentView(NotificationBuilderWithBuilderAccessor p0) {
+            return null;
+        }
+
+        public RemoteViews makeHeadsUpContentView(NotificationBuilderWithBuilderAccessor p0) {
+            return null;
+        }
+
+        public Style() {}
+
+        public void addCompatExtras(Bundle p0) {}
+
+        public void apply(NotificationBuilderWithBuilderAccessor p0) {}
+
+        public void buildIntoRemoteViews(RemoteViews p0, RemoteViews p1) {}
+
+        public void setBuilder(NotificationCompat.Builder p0) {}
+    }
+
+    public NotificationCompat() {}
+
+    public static Bundle getExtras(Notification p0) {
+        return null;
+    }
+
+    public static CharSequence getContentTitle(Notification p0) {
+        return null;
+    }
+
+    public static List<NotificationCompat.Action> getInvisibleActions(Notification p0) {
+        return null;
+    }
+
+    public static NotificationCompat.Action getAction(Notification p0, int p1) {
+        return null;
+    }
+
+    public static NotificationCompat.BubbleMetadata getBubbleMetadata(Notification p0) {
+        return null;
+    }
+
+    public static String CATEGORY_ALARM = null;
+    public static String CATEGORY_CALL = null;
+    public static String CATEGORY_EMAIL = null;
+    public static String CATEGORY_ERROR = null;
+    public static String CATEGORY_EVENT = null;
+    public static String CATEGORY_MESSAGE = null;
+    public static String CATEGORY_NAVIGATION = null;
+    public static String CATEGORY_PROGRESS = null;
+    public static String CATEGORY_PROMO = null;
+    public static String CATEGORY_RECOMMENDATION = null;
+    public static String CATEGORY_REMINDER = null;
+    public static String CATEGORY_SERVICE = null;
+    public static String CATEGORY_SOCIAL = null;
+    public static String CATEGORY_STATUS = null;
+    public static String CATEGORY_SYSTEM = null;
+    public static String CATEGORY_TRANSPORT = null;
+    public static String EXTRA_AUDIO_CONTENTS_URI = null;
+    public static String EXTRA_BACKGROUND_IMAGE_URI = null;
+    public static String EXTRA_BIG_TEXT = null;
+    public static String EXTRA_CHRONOMETER_COUNT_DOWN = null;
+    public static String EXTRA_COMPACT_ACTIONS = null;
+    public static String EXTRA_CONVERSATION_TITLE = null;
+    public static String EXTRA_HIDDEN_CONVERSATION_TITLE = null;
+    public static String EXTRA_INFO_TEXT = null;
+    public static String EXTRA_IS_GROUP_CONVERSATION = null;
+    public static String EXTRA_LARGE_ICON = null;
+    public static String EXTRA_LARGE_ICON_BIG = null;
+    public static String EXTRA_MEDIA_SESSION = null;
+    public static String EXTRA_MESSAGES = null;
+    public static String EXTRA_MESSAGING_STYLE_USER = null;
+    public static String EXTRA_PEOPLE = null;
+    public static String EXTRA_PICTURE = null;
+    public static String EXTRA_PROGRESS = null;
+    public static String EXTRA_PROGRESS_INDETERMINATE = null;
+    public static String EXTRA_PROGRESS_MAX = null;
+    public static String EXTRA_REMOTE_INPUT_HISTORY = null;
+    public static String EXTRA_SELF_DISPLAY_NAME = null;
+    public static String EXTRA_SHOW_CHRONOMETER = null;
+    public static String EXTRA_SHOW_WHEN = null;
+    public static String EXTRA_SMALL_ICON = null;
+    public static String EXTRA_SUB_TEXT = null;
+    public static String EXTRA_SUMMARY_TEXT = null;
+    public static String EXTRA_TEMPLATE = null;
+    public static String EXTRA_TEXT = null;
+    public static String EXTRA_TEXT_LINES = null;
+    public static String EXTRA_TITLE = null;
+    public static String EXTRA_TITLE_BIG = null;
+    public static String GROUP_KEY_SILENT = null;
+
+    public static String getCategory(Notification p0) {
+        return null;
+    }
+
+    public static String getChannelId(Notification p0) {
+        return null;
+    }
+
+    public static String getGroup(Notification p0) {
+        return null;
+    }
+
+    public static String getShortcutId(Notification p0) {
+        return null;
+    }
+
+    public static String getSortKey(Notification p0) {
+        return null;
+    }
+
+    public static boolean getAllowSystemGeneratedContextualActions(Notification p0) {
+        return false;
+    }
+
+    public static boolean getLocalOnly(Notification p0) {
+        return false;
+    }
+
+    public static boolean isGroupSummary(Notification p0) {
+        return false;
+    }
+
+    public static int BADGE_ICON_LARGE = 0;
+    public static int BADGE_ICON_NONE = 0;
+    public static int BADGE_ICON_SMALL = 0;
+    public static int COLOR_DEFAULT = 0;
+    public static int DEFAULT_ALL = 0;
+    public static int DEFAULT_LIGHTS = 0;
+    public static int DEFAULT_SOUND = 0;
+    public static int DEFAULT_VIBRATE = 0;
+    public static int FLAG_AUTO_CANCEL = 0;
+    public static int FLAG_BUBBLE = 0;
+    public static int FLAG_FOREGROUND_SERVICE = 0;
+    public static int FLAG_GROUP_SUMMARY = 0;
+    public static int FLAG_HIGH_PRIORITY = 0;
+    public static int FLAG_INSISTENT = 0;
+    public static int FLAG_LOCAL_ONLY = 0;
+    public static int FLAG_NO_CLEAR = 0;
+    public static int FLAG_ONGOING_EVENT = 0;
+    public static int FLAG_ONLY_ALERT_ONCE = 0;
+    public static int FLAG_SHOW_LIGHTS = 0;
+    public static int GROUP_ALERT_ALL = 0;
+    public static int GROUP_ALERT_CHILDREN = 0;
+    public static int GROUP_ALERT_SUMMARY = 0;
+    public static int PRIORITY_DEFAULT = 0;
+    public static int PRIORITY_HIGH = 0;
+    public static int PRIORITY_LOW = 0;
+    public static int PRIORITY_MAX = 0;
+    public static int PRIORITY_MIN = 0;
+    public static int STREAM_DEFAULT = 0;
+    public static int VISIBILITY_PRIVATE = 0;
+    public static int VISIBILITY_PUBLIC = 0;
+    public static int VISIBILITY_SECRET = 0;
+
+    public static int getActionCount(Notification p0) {
+        return 0;
+    }
+
+    public static int getBadgeIconType(Notification p0) {
+        return 0;
+    }
+
+    public static int getGroupAlertBehavior(Notification p0) {
+        return 0;
+    }
+
+    public static long getTimeoutAfter(Notification p0) {
+        return 0;
+    }
+
+    static public class Action {
+        protected Action() {}
+
+        public Action(IconCompat p0, CharSequence p1, PendingIntent p2) {}
+
+        public Action(int p0, CharSequence p1, PendingIntent p2) {}
+
+        public Bundle getExtras() {
+            return null;
+        }
+
+        public CharSequence getTitle() {
+            return null;
+        }
+
+        public CharSequence title = null;
+
+        public IconCompat getIconCompat() {
+            return null;
+        }
+
+        public PendingIntent actionIntent = null;
+
+        public PendingIntent getActionIntent() {
+            return null;
+        }
+
+        public RemoteInput[] getDataOnlyRemoteInputs() {
+            return null;
+        }
+
+        public RemoteInput[] getRemoteInputs() {
+            return null;
+        }
+
+        public boolean getAllowGeneratedReplies() {
+            return false;
+        }
+
+        public boolean getShowsUserInterface() {
+            return false;
+        }
+
+        public boolean isContextual() {
+            return false;
+        }
+
+        public int getIcon() {
+            return 0;
+        }
+
+        public int getSemanticAction() {
+            return 0;
+        }
+
+        public int icon = 0;
+        public static int SEMANTIC_ACTION_ARCHIVE = 0;
+        public static int SEMANTIC_ACTION_CALL = 0;
+        public static int SEMANTIC_ACTION_DELETE = 0;
+        public static int SEMANTIC_ACTION_MARK_AS_READ = 0;
+        public static int SEMANTIC_ACTION_MARK_AS_UNREAD = 0;
+        public static int SEMANTIC_ACTION_MUTE = 0;
+        public static int SEMANTIC_ACTION_NONE = 0;
+        public static int SEMANTIC_ACTION_REPLY = 0;
+        public static int SEMANTIC_ACTION_THUMBS_DOWN = 0;
+        public static int SEMANTIC_ACTION_THUMBS_UP = 0;
+        public static int SEMANTIC_ACTION_UNMUTE = 0;
+
+        static public class Builder {
+            protected Builder() {}
+
+            public Builder(IconCompat p0, CharSequence p1, PendingIntent p2) {}
+
+            public Builder(NotificationCompat.Action p0) {}
+
+            public Builder(int p0, CharSequence p1, PendingIntent p2) {}
+
+            public Bundle getExtras() {
+                return null;
+            }
+
+            public NotificationCompat.Action build() {
+                return null;
+            }
+
+            public NotificationCompat.Action.Builder addExtras(Bundle p0) {
+                return null;
+            }
+
+            public NotificationCompat.Action.Builder addRemoteInput(RemoteInput p0) {
+                return null;
+            }
+
+            public NotificationCompat.Action.Builder extend(NotificationCompat.Action.Extender p0) {
+                return null;
+            }
+
+            public NotificationCompat.Action.Builder setAllowGeneratedReplies(boolean p0) {
+                return null;
+            }
+
+            public NotificationCompat.Action.Builder setContextual(boolean p0) {
+                return null;
+            }
+
+            public NotificationCompat.Action.Builder setSemanticAction(int p0) {
+                return null;
+            }
+
+            public NotificationCompat.Action.Builder setShowsUserInterface(boolean p0) {
+                return null;
+            }
+        }
+        static public interface Extender {
+            NotificationCompat.Action.Builder extend(NotificationCompat.Action.Builder p0);
+        }
+    }
+    static public class BigPictureStyle extends NotificationCompat.Style {
+        public BigPictureStyle() {}
+
+        public BigPictureStyle(NotificationCompat.Builder p0) {}
+
+        public NotificationCompat.BigPictureStyle bigLargeIcon(Bitmap p0) {
+            return null;
+        }
+
+        public NotificationCompat.BigPictureStyle bigPicture(Bitmap p0) {
+            return null;
+        }
+
+        public NotificationCompat.BigPictureStyle setBigContentTitle(CharSequence p0) {
+            return null;
+        }
+
+        public NotificationCompat.BigPictureStyle setSummaryText(CharSequence p0) {
+            return null;
+        }
+
+        public void apply(NotificationBuilderWithBuilderAccessor p0) {}
+    }
+    static public class BigTextStyle extends NotificationCompat.Style {
+        public BigTextStyle() {}
+
+        public BigTextStyle(NotificationCompat.Builder p0) {}
+
+        public NotificationCompat.BigTextStyle bigText(CharSequence p0) {
+            return null;
+        }
+
+        public NotificationCompat.BigTextStyle setBigContentTitle(CharSequence p0) {
+            return null;
+        }
+
+        public NotificationCompat.BigTextStyle setSummaryText(CharSequence p0) {
+            return null;
+        }
+
+        public void apply(NotificationBuilderWithBuilderAccessor p0) {}
+    }
+    static public class BubbleMetadata {
+        protected BubbleMetadata() {}
+
+        public IconCompat getIcon() {
+            return null;
+        }
+
+        public PendingIntent getDeleteIntent() {
+            return null;
+        }
+
+        public PendingIntent getIntent() {
+            return null;
+        }
+
+        public boolean getAutoExpandBubble() {
+            return false;
+        }
+
+        public boolean isNotificationSuppressed() {
+            return false;
+        }
+
+        public int getDesiredHeight() {
+            return 0;
+        }
+
+        public int getDesiredHeightResId() {
+            return 0;
+        }
+
+        public static Notification.BubbleMetadata toPlatform(NotificationCompat.BubbleMetadata p0) {
+            return null;
+        }
+
+        public static NotificationCompat.BubbleMetadata fromPlatform(
+                Notification.BubbleMetadata p0) {
+            return null;
+        }
+    }
+    static public class Builder {
+        protected Builder() {}
+
+        protected static CharSequence limitCharSequenceLength(CharSequence p0) {
+            return null;
+        }
+
+        public ArrayList<NotificationCompat.Action> mActions = null;
+        public ArrayList<String> mPeople = null;
+
+        public Builder(Context p0) {}
+
+        public Builder(Context p0, String p1) {}
+
+        public Bundle getExtras() {
+            return null;
+        }
+
+        public Context mContext = null;
+
+        public Notification build() {
+            return null;
+        }
+
+        public Notification getNotification() {
+            return null;
+        }
+
+        public NotificationCompat.BubbleMetadata getBubbleMetadata() {
+            return null;
+        }
+
+        public NotificationCompat.Builder addAction(NotificationCompat.Action p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder addAction(int p0, CharSequence p1, PendingIntent p2) {
+            return null;
+        }
+
+        public NotificationCompat.Builder addExtras(Bundle p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder addInvisibleAction(NotificationCompat.Action p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder addInvisibleAction(int p0, CharSequence p1,
+                PendingIntent p2) {
+            return null;
+        }
+
+        public NotificationCompat.Builder addPerson(String p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder extend(NotificationCompat.Extender p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setAllowSystemGeneratedContextualActions(boolean p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setAutoCancel(boolean p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setBadgeIconType(int p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setBubbleMetadata(NotificationCompat.BubbleMetadata p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setCategory(String p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setChannelId(String p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setChronometerCountDown(boolean p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setColor(int p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setColorized(boolean p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setContent(RemoteViews p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setContentInfo(CharSequence p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setContentIntent(PendingIntent p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setContentText(CharSequence p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setContentTitle(CharSequence p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setCustomBigContentView(RemoteViews p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setCustomContentView(RemoteViews p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setCustomHeadsUpContentView(RemoteViews p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setDefaults(int p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setDeleteIntent(PendingIntent p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setExtras(Bundle p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setFullScreenIntent(PendingIntent p0, boolean p1) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setGroup(String p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setGroupAlertBehavior(int p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setGroupSummary(boolean p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setLargeIcon(Bitmap p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setLights(int p0, int p1, int p2) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setLocalOnly(boolean p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setNotificationSilent() {
+            return null;
+        }
+
+        public NotificationCompat.Builder setNumber(int p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setOngoing(boolean p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setOnlyAlertOnce(boolean p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setPriority(int p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setProgress(int p0, int p1, boolean p2) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setPublicVersion(Notification p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setRemoteInputHistory(CharSequence[] p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setShortcutId(String p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setShowWhen(boolean p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setSmallIcon(int p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setSmallIcon(int p0, int p1) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setSortKey(String p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setSound(Uri p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setSound(Uri p0, int p1) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setStyle(NotificationCompat.Style p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setSubText(CharSequence p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setTicker(CharSequence p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setTicker(CharSequence p0, RemoteViews p1) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setTimeoutAfter(long p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setUsesChronometer(boolean p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setVibrate(long[] p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setVisibility(int p0) {
+            return null;
+        }
+
+        public NotificationCompat.Builder setWhen(long p0) {
+            return null;
+        }
+
+        public RemoteViews getBigContentView() {
+            return null;
+        }
+
+        public RemoteViews getContentView() {
+            return null;
+        }
+
+        public RemoteViews getHeadsUpContentView() {
+            return null;
+        }
+
+        public int getColor() {
+            return 0;
+        }
+
+        public int getPriority() {
+            return 0;
+        }
+
+        public long getWhenIfShowing() {
+            return 0;
+        }
+    }
+    static public class InboxStyle extends NotificationCompat.Style {
+        public InboxStyle() {}
+
+        public InboxStyle(NotificationCompat.Builder p0) {}
+
+        public NotificationCompat.InboxStyle addLine(CharSequence p0) {
+            return null;
+        }
+
+        public NotificationCompat.InboxStyle setBigContentTitle(CharSequence p0) {
+            return null;
+        }
+
+        public NotificationCompat.InboxStyle setSummaryText(CharSequence p0) {
+            return null;
+        }
+
+        public void apply(NotificationBuilderWithBuilderAccessor p0) {}
+    }
+    static public interface Extender {
+        NotificationCompat.Builder extend(NotificationCompat.Builder p0);
+    }
+}
diff --git a/java/ql/test/stubs/google-android-9.0.0/androidx/core/app/RemoteInput.java b/java/ql/test/stubs/google-android-9.0.0/androidx/core/app/RemoteInput.java
new file mode 100644
index 00000000000..8f684095110
--- /dev/null
+++ b/java/ql/test/stubs/google-android-9.0.0/androidx/core/app/RemoteInput.java
@@ -0,0 +1,71 @@
+// Generated automatically from androidx.core.app.RemoteInput for testing purposes
+
+package androidx.core.app;
+
+import android.content.Intent;
+import android.net.Uri;
+import android.os.Bundle;
+import java.util.Map;
+import java.util.Set;
+
+public class RemoteInput {
+    protected RemoteInput() {}
+
+    public Bundle getExtras() {
+        return null;
+    }
+
+    public CharSequence getLabel() {
+        return null;
+    }
+
+    public CharSequence[] getChoices() {
+        return null;
+    }
+
+    public Set<String> getAllowedDataTypes() {
+        return null;
+    }
+
+    public String getResultKey() {
+        return null;
+    }
+
+    public boolean getAllowFreeFormInput() {
+        return false;
+    }
+
+    public boolean isDataOnly() {
+        return false;
+    }
+
+    public int getEditChoicesBeforeSending() {
+        return 0;
+    }
+
+    public static Bundle getResultsFromIntent(Intent p0) {
+        return null;
+    }
+
+    public static Map<String, Uri> getDataResultsFromIntent(Intent p0, String p1) {
+        return null;
+    }
+
+    public static String EXTRA_RESULTS_DATA = null;
+    public static String RESULTS_CLIP_LABEL = null;
+    public static int EDIT_CHOICES_BEFORE_SENDING_AUTO = 0;
+    public static int EDIT_CHOICES_BEFORE_SENDING_DISABLED = 0;
+    public static int EDIT_CHOICES_BEFORE_SENDING_ENABLED = 0;
+    public static int SOURCE_CHOICE = 0;
+    public static int SOURCE_FREE_FORM_INPUT = 0;
+
+    public static int getResultsSource(Intent p0) {
+        return 0;
+    }
+
+    public static void addDataResultToIntent(RemoteInput p0, Intent p1, Map<String, Uri> p2) {}
+
+    public static void addResultsToIntent(RemoteInput[] p0, Intent p1, Bundle p2) {}
+
+    public static void setResultsSource(Intent p0, int p1) {}
+}
diff --git a/java/ql/test/stubs/google-android-9.0.0/androidx/versionedparcelable/CustomVersionedParcelable.java b/java/ql/test/stubs/google-android-9.0.0/androidx/versionedparcelable/CustomVersionedParcelable.java
new file mode 100644
index 00000000000..8ffcfef8989
--- /dev/null
+++ b/java/ql/test/stubs/google-android-9.0.0/androidx/versionedparcelable/CustomVersionedParcelable.java
@@ -0,0 +1,14 @@
+// Generated automatically from androidx.versionedparcelable.CustomVersionedParcelable for testing
+// purposes
+
+package androidx.versionedparcelable;
+
+import androidx.versionedparcelable.VersionedParcelable;
+
+abstract public class CustomVersionedParcelable implements VersionedParcelable {
+    public CustomVersionedParcelable() {}
+
+    public void onPostParceling() {}
+
+    public void onPreParceling(boolean p0) {}
+}
diff --git a/java/ql/test/stubs/google-android-9.0.0/androidx/versionedparcelable/VersionedParcelable.java b/java/ql/test/stubs/google-android-9.0.0/androidx/versionedparcelable/VersionedParcelable.java
new file mode 100644
index 00000000000..866f2e392ab
--- /dev/null
+++ b/java/ql/test/stubs/google-android-9.0.0/androidx/versionedparcelable/VersionedParcelable.java
@@ -0,0 +1,8 @@
+// Generated automatically from androidx.versionedparcelable.VersionedParcelable for testing
+// purposes
+
+package androidx.versionedparcelable;
+
+
+public interface VersionedParcelable {
+}

From 0a83cedeb799780f587db8ab27299c3c1e1cffde Mon Sep 17 00:00:00 2001
From: Ed Minnix <egregius313@github.com>
Date: Tue, 6 Sep 2022 13:52:43 -0400
Subject: [PATCH 047/203] Unit tests for android:allowBackup query

---
 .../CWE-312/AllowBackupEnabledTest.expected   |  0
 .../CWE-312/AllowBackupEnabledTest.java       |  3 +++
 .../CWE-312/AllowBackupEnabledTest.ql         | 21 +++++++++++++++++++
 .../security/CWE-312/AndroidManifest.xml      |  2 +-
 4 files changed, 25 insertions(+), 1 deletion(-)
 create mode 100644 java/ql/test/query-tests/security/CWE-312/AllowBackupEnabledTest.expected
 create mode 100644 java/ql/test/query-tests/security/CWE-312/AllowBackupEnabledTest.java
 create mode 100644 java/ql/test/query-tests/security/CWE-312/AllowBackupEnabledTest.ql

diff --git a/java/ql/test/query-tests/security/CWE-312/AllowBackupEnabledTest.expected b/java/ql/test/query-tests/security/CWE-312/AllowBackupEnabledTest.expected
new file mode 100644
index 00000000000..e69de29bb2d
diff --git a/java/ql/test/query-tests/security/CWE-312/AllowBackupEnabledTest.java b/java/ql/test/query-tests/security/CWE-312/AllowBackupEnabledTest.java
new file mode 100644
index 00000000000..f409a442f06
--- /dev/null
+++ b/java/ql/test/query-tests/security/CWE-312/AllowBackupEnabledTest.java
@@ -0,0 +1,3 @@
+class AllowBackupEnabledTest {
+
+}
diff --git a/java/ql/test/query-tests/security/CWE-312/AllowBackupEnabledTest.ql b/java/ql/test/query-tests/security/CWE-312/AllowBackupEnabledTest.ql
new file mode 100644
index 00000000000..604f50dffa7
--- /dev/null
+++ b/java/ql/test/query-tests/security/CWE-312/AllowBackupEnabledTest.ql
@@ -0,0 +1,21 @@
+import java
+import semmle.code.xml.AndroidManifest
+import TestUtilities.InlineExpectationsTest
+
+class AllowBackupEnabledTest extends InlineExpectationsTest {
+  AllowBackupEnabledTest() { this = "AllowBackupEnabledTest" }
+
+  override string getARelevantTag() { result = "hasAllowBackupEnabled" }
+
+  override predicate hasActualResult(Location location, string element, string tag, string value) {
+    tag = "hasAllowedBackupEnabled" and
+    exists(AndroidApplicationXmlElement androidAppElem |
+      androidAppElem.allowsBackup() and
+      not androidAppElem.getFile().(AndroidManifestXmlFile).isInBuildDirectory()
+    |
+      androidAppElem.getAttribute("allowBackup").getLocation() = location and
+      element = androidAppElem.getAttribute("debuggable").toString() and
+      value = ""
+    )
+  }
+}
diff --git a/java/ql/test/query-tests/security/CWE-312/AndroidManifest.xml b/java/ql/test/query-tests/security/CWE-312/AndroidManifest.xml
index d8af1947bd7..8cf208d0a48 100644
--- a/java/ql/test/query-tests/security/CWE-312/AndroidManifest.xml
+++ b/java/ql/test/query-tests/security/CWE-312/AndroidManifest.xml
@@ -4,7 +4,7 @@
     android:versionCode="1"
     android:versionName="0.1" >
 
-    <application>
+    <application android:allowBackup="true">
         <activity android:name=".CleartextStorageAndroidDatabaseTest"></activity>
         <activity android:name=".CleartextStorageAndroidFileSystemTest"></activity>
         <activity android:name=".CleartextStorageSharedPrefsTest"></activity>

From dca4cd221a38200d0be54f5911002b4151986269 Mon Sep 17 00:00:00 2001
From: Ed Minnix <egregius313@github.com>
Date: Tue, 6 Sep 2022 14:35:11 -0400
Subject: [PATCH 048/203] Documentation cleanup for allowBackup query

---
 java/ql/lib/semmle/code/xml/AndroidManifest.qll              | 2 +-
 .../src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql  | 5 ++++-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/java/ql/lib/semmle/code/xml/AndroidManifest.qll b/java/ql/lib/semmle/code/xml/AndroidManifest.qll
index 155213212fc..0965025b969 100644
--- a/java/ql/lib/semmle/code/xml/AndroidManifest.qll
+++ b/java/ql/lib/semmle/code/xml/AndroidManifest.qll
@@ -74,7 +74,7 @@ class AndroidApplicationXmlElement extends XmlElement {
   predicate requiresPermissions() { this.getAnAttribute().(AndroidPermissionXmlAttribute).isFull() }
 
   /**
-   * Holds if this application element enables the `android:allowBackup` attribute.
+   * Holds if this application element does not disable the `android:allowBackup` attribute.
    *
    * https://developer.android.com/guide/topics/data/autobackup
    */
diff --git a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
index e8bd3487b00..42163f4107a 100644
--- a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
+++ b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
@@ -1,6 +1,6 @@
 /**
  * @name Android allowBackup attribute enabled
- * @description
+ * @description Android manifests which do not disable the `android:allowBackup` attribute allow backups, which can store sensitive information.
  * @kind problem
  * @problem.severity recommendation
  * @security-severity 7.5
@@ -17,8 +17,11 @@ from AndroidApplicationXmlElement androidAppElem
 where
   not androidAppElem.getFile().(AndroidManifestXmlFile).isInBuildDirectory() and
   (
+    // explicitly sets android:allowBackup=true
     androidAppElem.allowsBackupExplicitly()
     or
+    // Manifest providing the main intent for an application, and does not explicitly
+    // disallow the allowBackup attribute
     androidAppElem.providesMainIntent() and
     androidAppElem.allowsBackup()
   )

From 46b7aa92aeca2f7f7c816b8f3a19e637c729d58a Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Tue, 6 Sep 2022 13:19:05 +0200
Subject: [PATCH 049/203] deprecate predicates in `protocols.qll` that were
 only retained for backwards compatibility

---
 python/ql/lib/semmle/python/protocols.qll | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/python/ql/lib/semmle/python/protocols.qll b/python/ql/lib/semmle/python/protocols.qll
index f1f7e6a3ed7..fc341dadc33 100644
--- a/python/ql/lib/semmle/python/protocols.qll
+++ b/python/ql/lib/semmle/python/protocols.qll
@@ -1,19 +1,19 @@
 import python
 
 /** Retained for backwards compatibility use ClassObject.isIterator() instead. */
-predicate is_iterator(ClassObject c) { c.isIterator() }
+deprecated predicate is_iterator(ClassObject c) { c.isIterator() }
 
 /** Retained for backwards compatibility use ClassObject.isIterable() instead. */
-predicate is_iterable(ClassObject c) { c.isIterable() }
+deprecated predicate is_iterable(ClassObject c) { c.isIterable() }
 
 /** Retained for backwards compatibility use ClassObject.isCollection() instead. */
-predicate is_collection(ClassObject c) { c.isCollection() }
+deprecated predicate is_collection(ClassObject c) { c.isCollection() }
 
 /** Retained for backwards compatibility use ClassObject.isMapping() instead. */
-predicate is_mapping(ClassObject c) { c.isMapping() }
+deprecated predicate is_mapping(ClassObject c) { c.isMapping() }
 
 /** Retained for backwards compatibility use ClassObject.isSequence() instead. */
-predicate is_sequence(ClassObject c) { c.isSequence() }
+deprecated predicate is_sequence(ClassObject c) { c.isSequence() }
 
 /** Retained for backwards compatibility use ClassObject.isContextManager() instead. */
-predicate is_context_manager(ClassObject c) { c.isContextManager() }
+deprecated predicate is_context_manager(ClassObject c) { c.isContextManager() }

From 1cbf28358c07a0aaab4bd9d0054a6d82bc49af95 Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Tue, 6 Sep 2022 13:19:59 +0200
Subject: [PATCH 050/203] deprecate unused code inside the points-to library

---
 .../ql/lib/semmle/python/objects/TObject.qll  |  6 ++-
 python/ql/lib/semmle/python/pointsto/Base.qll | 52 +++++++++++--------
 .../ql/lib/semmle/python/pointsto/Filters.qll |  4 +-
 .../python/pointsto/PointsToContext.qll       |  2 +-
 4 files changed, 36 insertions(+), 28 deletions(-)

diff --git a/python/ql/lib/semmle/python/objects/TObject.qll b/python/ql/lib/semmle/python/objects/TObject.qll
index ee6bcb8340d..58be33ddd91 100644
--- a/python/ql/lib/semmle/python/objects/TObject.qll
+++ b/python/ql/lib/semmle/python/objects/TObject.qll
@@ -334,7 +334,7 @@ predicate call3(
 }
 
 bindingset[self, function]
-predicate method_binding(
+deprecated predicate method_binding(
   AttrNode instantiation, ObjectInternal self, CallableObjectInternal function,
   PointsToContext context
 ) {
@@ -357,7 +357,9 @@ predicate method_binding(
 
 /** Helper for method_binding */
 pragma[noinline]
-predicate receiver(AttrNode instantiation, PointsToContext context, ObjectInternal obj, string name) {
+deprecated predicate receiver(
+  AttrNode instantiation, PointsToContext context, ObjectInternal obj, string name
+) {
   PointsToInternal::pointsTo(instantiation.getObject(name), context, obj, _)
 }
 
diff --git a/python/ql/lib/semmle/python/pointsto/Base.qll b/python/ql/lib/semmle/python/pointsto/Base.qll
index adc2abedaa0..a3407419da2 100644
--- a/python/ql/lib/semmle/python/pointsto/Base.qll
+++ b/python/ql/lib/semmle/python/pointsto/Base.qll
@@ -13,7 +13,7 @@ import semmle.python.essa.SsaDefinitions
 private import semmle.python.types.Builtins
 private import semmle.python.internal.CachedStages
 
-module BasePointsTo {
+deprecated module BasePointsTo {
   /** INTERNAL -- Use n.refersTo(value, _, origin) instead */
   pragma[noinline]
   predicate points_to(ControlFlowNode f, Object value, ControlFlowNode origin) {
@@ -27,13 +27,13 @@ module BasePointsTo {
 }
 
 /** Gets the kwargs parameter (`**kwargs`). In a function definition this is always a dict. */
-predicate kwargs_points_to(ControlFlowNode f, ClassObject cls) {
+deprecated predicate kwargs_points_to(ControlFlowNode f, ClassObject cls) {
   exists(Function func | func.getKwarg() = f.getNode()) and
   cls = theDictType()
 }
 
 /** Gets the varargs parameter (`*varargs`). In a function definition this is always a tuple. */
-predicate varargs_points_to(ControlFlowNode f, ClassObject cls) {
+deprecated predicate varargs_points_to(ControlFlowNode f, ClassObject cls) {
   exists(Function func | func.getVararg() = f.getNode()) and
   cls = theTupleType()
 }
@@ -45,7 +45,7 @@ predicate varargs_points_to(ControlFlowNode f, ClassObject cls) {
  *  This exists primarily for internal use. Use getAnInferredType() instead.
  */
 pragma[noinline]
-ClassObject simple_types(Object obj) {
+deprecated ClassObject simple_types(Object obj) {
   result = comprehension(obj.getOrigin())
   or
   result = collection_literal(obj.getOrigin())
@@ -59,7 +59,7 @@ ClassObject simple_types(Object obj) {
   obj = unknownValue() and result = theUnknownType()
 }
 
-private ClassObject comprehension(Expr e) {
+deprecated private ClassObject comprehension(Expr e) {
   e instanceof ListComp and result = theListType()
   or
   e instanceof SetComp and result = theSetType()
@@ -69,7 +69,7 @@ private ClassObject comprehension(Expr e) {
   e instanceof GeneratorExp and result = theGeneratorType()
 }
 
-private ClassObject collection_literal(Expr e) {
+deprecated private ClassObject collection_literal(Expr e) {
   e instanceof List and result = theListType()
   or
   e instanceof Set and result = theSetType()
@@ -79,7 +79,7 @@ private ClassObject collection_literal(Expr e) {
   e instanceof Tuple and result = theTupleType()
 }
 
-private int tuple_index_value(Object t, int i) {
+deprecated private int tuple_index_value(Object t, int i) {
   result = t.(TupleNode).getElement(i).getNode().(Num).getN().toInt()
   or
   exists(Object item |
@@ -89,7 +89,7 @@ private int tuple_index_value(Object t, int i) {
 }
 
 pragma[noinline]
-int version_tuple_value(Object t) {
+deprecated int version_tuple_value(Object t) {
   not exists(tuple_index_value(t, 1)) and result = tuple_index_value(t, 0) * 10
   or
   not exists(tuple_index_value(t, 2)) and
@@ -102,7 +102,7 @@ int version_tuple_value(Object t) {
 }
 
 /** Choose a version numbers that represent the extreme of supported versions. */
-private int major_minor() {
+deprecated private int major_minor() {
   if major_version() = 3
   then (
     result = 33 or result = 37
@@ -113,7 +113,7 @@ private int major_minor() {
 }
 
 /** Compares the given tuple object to both the maximum and minimum possible sys.version_info values */
-int version_tuple_compare(Object t) {
+deprecated int version_tuple_compare(Object t) {
   version_tuple_value(t) < major_minor() and result = -1
   or
   version_tuple_value(t) = major_minor() and result = 0
@@ -122,7 +122,7 @@ int version_tuple_compare(Object t) {
 }
 
 /** Holds if `cls` is a new-style class if it were to have no explicit base classes */
-predicate baseless_is_new_style(ClassObject cls) {
+deprecated predicate baseless_is_new_style(ClassObject cls) {
   cls.isBuiltin()
   or
   major_version() = 3 and exists(cls)
@@ -160,7 +160,7 @@ private predicate class_defines_name(Class cls, string name) {
 }
 
 /** Gets a return value CFG node, provided that is safe to track across returns */
-ControlFlowNode safe_return_node(PyFunctionObject func) {
+deprecated ControlFlowNode safe_return_node(PyFunctionObject func) {
   result = func.getAReturnedNode() and
   // Not a parameter
   not exists(Parameter p, SsaVariable pvar |
@@ -172,7 +172,7 @@ ControlFlowNode safe_return_node(PyFunctionObject func) {
 }
 
 /** Holds if it can be determined from the control flow graph alone that this function can never return */
-predicate function_can_never_return(FunctionObject func) {
+deprecated predicate function_can_never_return(FunctionObject func) {
   /*
    * A Python function never returns if it has no normal exits that are not dominated by a
    * call to a function which itself never returns.
@@ -188,7 +188,9 @@ predicate function_can_never_return(FunctionObject func) {
 
 /** Hold if outer contains inner, both are contained within a test and inner is a use is a plain use or an attribute lookup */
 pragma[noinline]
-predicate contains_interesting_expression_within_test(ControlFlowNode outer, ControlFlowNode inner) {
+deprecated predicate contains_interesting_expression_within_test(
+  ControlFlowNode outer, ControlFlowNode inner
+) {
   inner.isLoad() and
   exists(ControlFlowNode test |
     outer.getAChild*() = inner and
@@ -208,7 +210,7 @@ predicate test_contains(ControlFlowNode expr, ControlFlowNode use) {
 }
 
 /** Holds if `test` is a test (a branch), `use` is within that test and `def` is an edge from that test with `sense` */
-predicate refinement_test(
+deprecated predicate refinement_test(
   ControlFlowNode test, ControlFlowNode use, boolean sense, PyEdgeRefinement def
 ) {
   /*
@@ -224,7 +226,7 @@ predicate refinement_test(
 
 /** Holds if `f` is an import of the form `from .[...] import name` and the enclosing scope is an __init__ module */
 pragma[noinline]
-predicate live_import_from_dot_in_init(ImportMemberNode f, EssaVariable var) {
+deprecated predicate live_import_from_dot_in_init(ImportMemberNode f, EssaVariable var) {
   exists(string name |
     import_from_dot_in_init(f.getModule(name)) and
     var.getSourceVariable().getName() = name and
@@ -249,13 +251,13 @@ Object undefinedVariable() { py_special_objects(result, "_semmle_undefined_value
 /** Gets the pseudo-object representing an unknown value */
 Object unknownValue() { result.asBuiltin() = Builtin::unknown() }
 
-BuiltinCallable theTypeNewMethod() {
+deprecated BuiltinCallable theTypeNewMethod() {
   result.asBuiltin() = theTypeType().asBuiltin().getMember("__new__")
 }
 
 /** Gets the `value, cls, origin` that `f` would refer to if it has not been assigned some other value */
 pragma[noinline]
-predicate potential_builtin_points_to(
+deprecated predicate potential_builtin_points_to(
   NameNode f, Object value, ClassObject cls, ControlFlowNode origin
 ) {
   f.isGlobal() and
@@ -269,7 +271,7 @@ predicate potential_builtin_points_to(
 }
 
 pragma[noinline]
-predicate builtin_name_points_to(string name, Object value, ClassObject cls) {
+deprecated predicate builtin_name_points_to(string name, Object value, ClassObject cls) {
   value = Object::builtin(name) and cls.asBuiltin() = value.asBuiltin().getClass()
 }
 
@@ -331,7 +333,9 @@ module BaseFlow {
 }
 
 /** Points-to for syntactic elements where context is not relevant */
-predicate simple_points_to(ControlFlowNode f, Object value, ClassObject cls, ControlFlowNode origin) {
+deprecated predicate simple_points_to(
+  ControlFlowNode f, Object value, ClassObject cls, ControlFlowNode origin
+) {
   kwargs_points_to(f, cls) and value = f and origin = f
   or
   varargs_points_to(f, cls) and value = f and origin = f
@@ -347,7 +351,9 @@ predicate simple_points_to(ControlFlowNode f, Object value, ClassObject cls, Con
  * Holds if `bit` is a binary expression node with a bitwise operator.
  * Helper for `this_binary_expr_points_to`.
  */
-predicate bitwise_expression_node(BinaryExprNode bit, ControlFlowNode left, ControlFlowNode right) {
+deprecated predicate bitwise_expression_node(
+  BinaryExprNode bit, ControlFlowNode left, ControlFlowNode right
+) {
   exists(Operator op | op = bit.getNode().getOp() |
     op instanceof BitAnd or
     op instanceof BitOr or
@@ -357,13 +363,13 @@ predicate bitwise_expression_node(BinaryExprNode bit, ControlFlowNode left, Cont
   right = bit.getRight()
 }
 
-private Module theCollectionsAbcModule() {
+deprecated private Module theCollectionsAbcModule() {
   result.getName() = "_abcoll"
   or
   result.getName() = "_collections_abc"
 }
 
-ClassObject collectionsAbcClass(string name) {
+deprecated ClassObject collectionsAbcClass(string name) {
   exists(Class cls |
     result.getPyClass() = cls and
     cls.getName() = name and
diff --git a/python/ql/lib/semmle/python/pointsto/Filters.qll b/python/ql/lib/semmle/python/pointsto/Filters.qll
index 117845d3c7f..dbf9baf5279 100644
--- a/python/ql/lib/semmle/python/pointsto/Filters.qll
+++ b/python/ql/lib/semmle/python/pointsto/Filters.qll
@@ -13,7 +13,7 @@ predicate hasattr(CallNode c, ControlFlowNode obj, string attr) {
 }
 
 /** Holds if `c` is a call to `callable(obj)`. */
-predicate is_callable(CallNode c, ControlFlowNode obj) {
+deprecated predicate is_callable(CallNode c, ControlFlowNode obj) {
   c.getFunction().(NameNode).getId() = "callable" and
   obj = c.getArg(0)
 }
@@ -26,7 +26,7 @@ predicate isinstance(CallNode fc, ControlFlowNode cls, ControlFlowNode use) {
 }
 
 /** Holds if `c` is a call to `issubclass(use, cls)`. */
-predicate issubclass(CallNode fc, ControlFlowNode cls, ControlFlowNode use) {
+deprecated predicate issubclass(CallNode fc, ControlFlowNode cls, ControlFlowNode use) {
   fc.getFunction().(NameNode).getId() = "issubclass" and
   fc.getArg(0) = use and
   cls = fc.getArg(1)
diff --git a/python/ql/lib/semmle/python/pointsto/PointsToContext.qll b/python/ql/lib/semmle/python/pointsto/PointsToContext.qll
index ad86a49ba6f..a63381e5e20 100644
--- a/python/ql/lib/semmle/python/pointsto/PointsToContext.qll
+++ b/python/ql/lib/semmle/python/pointsto/PointsToContext.qll
@@ -122,7 +122,7 @@ private newtype TPointsToContext =
   } or
   TObjectContext(SelfInstanceInternal object)
 
-module Context {
+deprecated module Context {
   PointsToContext forObject(ObjectInternal object) { result = TObjectContext(object) }
 }
 

From 283c711de9f1449142012deac3daccef9a54cd6b Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Tue, 6 Sep 2022 13:21:48 +0200
Subject: [PATCH 051/203] deprecate unused predicate inside the `essa` module

---
 python/ql/lib/semmle/python/essa/SsaDefinitions.qll | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/python/ql/lib/semmle/python/essa/SsaDefinitions.qll b/python/ql/lib/semmle/python/essa/SsaDefinitions.qll
index 810afc3179a..4896016eb78 100644
--- a/python/ql/lib/semmle/python/essa/SsaDefinitions.qll
+++ b/python/ql/lib/semmle/python/essa/SsaDefinitions.qll
@@ -78,7 +78,9 @@ module SsaSource {
 
   /** Holds if `v` is defined by a `for` statement, the definition being `defn` */
   cached
-  predicate iteration_defined_variable(Variable v, ControlFlowNode defn, ControlFlowNode sequence) {
+  deprecated predicate iteration_defined_variable(
+    Variable v, ControlFlowNode defn, ControlFlowNode sequence
+  ) {
     exists(ForNode for | for.iterates(defn, sequence)) and
     defn.(NameNode).defines(v)
   }

From 0cfb49102bd72d48378a20256143054f9dc80f69 Mon Sep 17 00:00:00 2001
From: Rasmus Lerchedahl Petersen <yoff@github.com>
Date: Wed, 7 Sep 2022 09:30:42 +0200
Subject: [PATCH 052/203] Python: fix non-US spelling

---
 python/ql/src/Exceptions/UnguardedNextInGenerator.ql | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/python/ql/src/Exceptions/UnguardedNextInGenerator.ql b/python/ql/src/Exceptions/UnguardedNextInGenerator.ql
index 890df3374d9..0bd49f2c8c8 100644
--- a/python/ql/src/Exceptions/UnguardedNextInGenerator.ql
+++ b/python/ql/src/Exceptions/UnguardedNextInGenerator.ql
@@ -70,7 +70,7 @@ where
   // PEP 479 removes this concern from 3.7 onwards
   // see: https://peps.python.org/pep-0479/
   //
-  // However, we do not know the minor version of the analysed code (only of the extractor),
+  // However, we do not know the minor version of the analyzed code (only of the extractor),
   // so we only alert on Python 2.
   major_version() = 2
 select call, "Call to next() in a generator"

From 07038d0b3a91ab2715de278732071fb7ff728683 Mon Sep 17 00:00:00 2001
From: Tamas Vajk <tamasvajk@github.com>
Date: Wed, 7 Sep 2022 10:48:22 +0200
Subject: [PATCH 053/203] Fix QL formatting

---
 java/ql/test/kotlin/library-tests/vararg/args.ql | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/java/ql/test/kotlin/library-tests/vararg/args.ql b/java/ql/test/kotlin/library-tests/vararg/args.ql
index 510ea0c2682..4173094463b 100644
--- a/java/ql/test/kotlin/library-tests/vararg/args.ql
+++ b/java/ql/test/kotlin/library-tests/vararg/args.ql
@@ -1,9 +1,7 @@
 import java
 import semmle.code.java.Diagnostics
 
-query predicate diag(Diagnostic d) {
-  d.getMessage() = "Unexpected IrVararg"
-}
+query predicate diag(Diagnostic d) { d.getMessage() = "Unexpected IrVararg" }
 
 query predicate varargsParams(Parameter p, Type t) {
   p.getCallable().fromSource() and

From 8e0b4892eec1462098984ea2757ad036713c4c6a Mon Sep 17 00:00:00 2001
From: Tony Torralba <atorralba@users.noreply.github.com>
Date: Wed, 7 Sep 2022 10:48:44 +0200
Subject: [PATCH 054/203] Add Implicit PendingIntents sinks for Compat classes

---
 ...07-implicit-pendingintents-compat-sinks.md |  5 ++
 .../java/security/ImplicitPendingIntents.qll  |  6 +++
 .../CWE-927/ImplicitPendingIntentsTest.java   | 31 ++++++++++--
 .../android/app/AppComponentFactory.java      | 22 +++++++++
 .../android/app/AutomaticZenRule.java         | 37 +++++++++++++++
 .../service/notification/Condition.java       | 41 ++++++++++++++++
 .../notification/StatusBarNotification.java   | 37 +++++++++++++++
 .../service/notification/ZenPolicy.java       | 47 +++++++++++++++++++
 .../androidx/core/app/AlarmManagerCompat.java | 15 ++++++
 .../core/app/CoreComponentFactory.java        | 25 ++++++++++
 .../core/app/NotificationManagerCompat.java   | 43 +++++++++++++++++
 .../remotecallback/CallbackReceiver.java      | 10 ++++
 .../androidx/slice/Clock.java                 |  9 ++++
 .../builders/impl/TemplateBuilderImpl.java    | 23 +++++++++
 .../slice/compat/CompatPermissionManager.java | 16 +++++++
 15 files changed, 363 insertions(+), 4 deletions(-)
 create mode 100644 java/ql/lib/change-notes/2022-09-07-implicit-pendingintents-compat-sinks.md
 create mode 100644 java/ql/test/stubs/google-android-9.0.0/android/app/AppComponentFactory.java
 create mode 100644 java/ql/test/stubs/google-android-9.0.0/android/app/AutomaticZenRule.java
 create mode 100644 java/ql/test/stubs/google-android-9.0.0/android/service/notification/Condition.java
 create mode 100644 java/ql/test/stubs/google-android-9.0.0/android/service/notification/StatusBarNotification.java
 create mode 100644 java/ql/test/stubs/google-android-9.0.0/android/service/notification/ZenPolicy.java
 create mode 100644 java/ql/test/stubs/google-android-9.0.0/androidx/core/app/AlarmManagerCompat.java
 create mode 100644 java/ql/test/stubs/google-android-9.0.0/androidx/core/app/CoreComponentFactory.java
 create mode 100644 java/ql/test/stubs/google-android-9.0.0/androidx/core/app/NotificationManagerCompat.java
 create mode 100644 java/ql/test/stubs/google-android-9.0.0/androidx/remotecallback/CallbackReceiver.java
 create mode 100644 java/ql/test/stubs/google-android-9.0.0/androidx/slice/Clock.java
 create mode 100644 java/ql/test/stubs/google-android-9.0.0/androidx/slice/builders/impl/TemplateBuilderImpl.java
 create mode 100644 java/ql/test/stubs/google-android-9.0.0/androidx/slice/compat/CompatPermissionManager.java

diff --git a/java/ql/lib/change-notes/2022-09-07-implicit-pendingintents-compat-sinks.md b/java/ql/lib/change-notes/2022-09-07-implicit-pendingintents-compat-sinks.md
new file mode 100644
index 00000000000..a1ae10ac7d5
--- /dev/null
+++ b/java/ql/lib/change-notes/2022-09-07-implicit-pendingintents-compat-sinks.md
@@ -0,0 +1,5 @@
+---
+category: minorAnalysis
+---
+* Added new sinks to the query `java/android/implict-pendingintents` to take into account the classes `androidx.core.app.NotificationManagerCompat` and `androidx.core.app.AlarmManagerCompat`.
+  
\ No newline at end of file
diff --git a/java/ql/lib/semmle/code/java/security/ImplicitPendingIntents.qll b/java/ql/lib/semmle/code/java/security/ImplicitPendingIntents.qll
index 540b28445e5..3441cfaef18 100644
--- a/java/ql/lib/semmle/code/java/security/ImplicitPendingIntents.qll
+++ b/java/ql/lib/semmle/code/java/security/ImplicitPendingIntents.qll
@@ -102,6 +102,8 @@ private class PendingIntentSentSinkModels extends SinkModelCsv {
         "android.app;NotificationManager;true;notify;(String,int,Notification);;Argument[2];pending-intent-sent;manual",
         "android.app;NotificationManager;true;notifyAsPackage;(String,String,int,Notification);;Argument[3];pending-intent-sent;manual",
         "android.app;NotificationManager;true;notifyAsUser;(String,int,Notification,UserHandle);;Argument[2];pending-intent-sent;manual",
+        "androidx.core.app;NotificationManagerCompat;true;notify;(int,Notification);;Argument[1];pending-intent-sent;manual",
+        "androidx.core.app;NotificationManagerCompat;true;notify;(String,int,Notification);;Argument[2];pending-intent-sent;manual",
         "android.app;PendingIntent;false;send;(Context,int,Intent,OnFinished,Handler,String,Bundle);;Argument[2];pending-intent-sent;manual",
         "android.app;PendingIntent;false;send;(Context,int,Intent,OnFinished,Handler,String);;Argument[2];pending-intent-sent;manual",
         "android.app;PendingIntent;false;send;(Context,int,Intent,OnFinished,Handler);;Argument[2];pending-intent-sent;manual",
@@ -115,6 +117,10 @@ private class PendingIntentSentSinkModels extends SinkModelCsv {
         "android.app;AlarmManager;true;setInexactRepeating;;;Argument[3];pending-intent-sent;manual",
         "android.app;AlarmManager;true;setRepeating;;;Argument[3];pending-intent-sent;manual",
         "android.app;AlarmManager;true;setWindow;(int,long,long,PendingIntent);;Argument[3];pending-intent-sent;manual",
+        "androidx.core.app;AlarmManagerCompat;true;setAlarmClock;;;Argument[2..3];pending-intent-sent;manual",
+        "androidx.core.app;AlarmManagerCompat;true;setAndAllowWhileIdle;;;Argument[3];pending-intent-sent;manual",
+        "androidx.core.app;AlarmManagerCompat;true;setExact;;;Argument[3];pending-intent-sent;manual",
+        "androidx.core.app;AlarmManagerCompat;true;setExactAndAllowWhileIdle;;;Argument[3];pending-intent-sent;manual",
       ]
   }
 }
diff --git a/java/ql/test/query-tests/security/CWE-927/ImplicitPendingIntentsTest.java b/java/ql/test/query-tests/security/CWE-927/ImplicitPendingIntentsTest.java
index 3896a20799e..9c8f098d467 100644
--- a/java/ql/test/query-tests/security/CWE-927/ImplicitPendingIntentsTest.java
+++ b/java/ql/test/query-tests/security/CWE-927/ImplicitPendingIntentsTest.java
@@ -14,6 +14,8 @@ import android.net.Uri;
 import android.os.Bundle;
 import android.os.CancellationSignal;
 import android.os.RemoteException;
+import androidx.core.app.AlarmManagerCompat;
+import androidx.core.app.NotificationManagerCompat;
 import androidx.core.graphics.drawable.IconCompat;
 import androidx.slice.Slice;
 import androidx.slice.SliceProvider;
@@ -182,7 +184,7 @@ public class ImplicitPendingIntentsTest {
             Notification.Builder nBuilder =
                     new Notification.Builder(ctx).addAction(aBuilder.build());
             Notification notification = nBuilder.build();
-            NotificationManager nManager = new NotificationManager();
+            NotificationManager nManager = null;
             nManager.notifyAsPackage("targetPackage", "tag", 0, notification); // $hasImplicitPendingIntent
             nManager.notify(0, notification); // $hasImplicitPendingIntent
             nManager.notifyAsUser("", 0, notification, null); // $hasImplicitPendingIntent
@@ -195,7 +197,7 @@ public class ImplicitPendingIntentsTest {
             Notification.Builder nBuilder =
                     new Notification.Builder(ctx).addAction(aBuilder.build());
             Notification notification = nBuilder.build();
-            NotificationManager nManager = new NotificationManager();
+            NotificationManager nManager = null;
             nManager.notify(0, notification); // Safe
         }
         {
@@ -212,10 +214,21 @@ public class ImplicitPendingIntentsTest {
             Notification.Action action = new Notification.Action(0, "", pi2);
             Notification.Builder nBuilder = new Notification.Builder(ctx).addAction(action);
             Notification notification = nBuilder.build();
-            NotificationManager noMan = new NotificationManager();
+            NotificationManager noMan = null;
             noMan.notify(0, notification); // Safe
         }
-
+        // Compat sinks
+        {
+            Intent baseIntent = new Intent();
+            PendingIntent pi = PendingIntent.getActivity(ctx, 0, baseIntent, 0);
+            Notification.Action.Builder aBuilder = new Notification.Action.Builder(0, "", pi);
+            Notification.Builder nBuilder =
+                    new Notification.Builder(ctx).addAction(aBuilder.build());
+            Notification notification = nBuilder.build();
+            NotificationManagerCompat nManager = null;
+            nManager.notify(0, notification); // $hasImplicitPendingIntent
+            nManager.notify("", 0, notification); // $hasImplicitPendingIntent
+        }
     }
 
     public static void testPendingIntentInAnAlarm(Context ctx) {
@@ -238,6 +251,16 @@ public class ImplicitPendingIntentsTest {
                     PendingIntent.getActivity(ctx, 0, baseIntent, PendingIntent.FLAG_IMMUTABLE); // Sanitizer
             aManager.set(0, 0, pi); // Safe
         }
+        // Compat sinks
+        {
+            Intent baseIntent = new Intent();
+            PendingIntent pi = PendingIntent.getActivity(ctx, 0, baseIntent, 0);
+            AlarmManagerCompat.setAlarmClock(aManager, 0, pi, null); // $hasImplicitPendingIntent
+            AlarmManagerCompat.setAlarmClock(aManager, 0, null, pi); // $hasImplicitPendingIntent
+            AlarmManagerCompat.setAndAllowWhileIdle(aManager, 0, 0, pi); // $hasImplicitPendingIntent
+            AlarmManagerCompat.setExact(aManager, 0, 0, pi); // $hasImplicitPendingIntent
+            AlarmManagerCompat.setExactAndAllowWhileIdle(aManager, 0, 0, pi); // $hasImplicitPendingIntent
+        }
     }
 
     static class TestActivity extends Activity {
diff --git a/java/ql/test/stubs/google-android-9.0.0/android/app/AppComponentFactory.java b/java/ql/test/stubs/google-android-9.0.0/android/app/AppComponentFactory.java
new file mode 100644
index 00000000000..284510fc655
--- /dev/null
+++ b/java/ql/test/stubs/google-android-9.0.0/android/app/AppComponentFactory.java
@@ -0,0 +1,22 @@
+// Generated automatically from android.app.AppComponentFactory for testing purposes
+
+package android.app;
+
+import android.app.Activity;
+import android.app.Application;
+import android.app.Service;
+import android.content.BroadcastReceiver;
+import android.content.ContentProvider;
+import android.content.Intent;
+import android.content.pm.ApplicationInfo;
+
+public class AppComponentFactory
+{
+    public Activity instantiateActivity(ClassLoader p0, String p1, Intent p2){ return null; }
+    public AppComponentFactory(){}
+    public Application instantiateApplication(ClassLoader p0, String p1){ return null; }
+    public BroadcastReceiver instantiateReceiver(ClassLoader p0, String p1, Intent p2){ return null; }
+    public ClassLoader instantiateClassLoader(ClassLoader p0, ApplicationInfo p1){ return null; }
+    public ContentProvider instantiateProvider(ClassLoader p0, String p1){ return null; }
+    public Service instantiateService(ClassLoader p0, String p1, Intent p2){ return null; }
+}
diff --git a/java/ql/test/stubs/google-android-9.0.0/android/app/AutomaticZenRule.java b/java/ql/test/stubs/google-android-9.0.0/android/app/AutomaticZenRule.java
new file mode 100644
index 00000000000..3b97a1eca2d
--- /dev/null
+++ b/java/ql/test/stubs/google-android-9.0.0/android/app/AutomaticZenRule.java
@@ -0,0 +1,37 @@
+// Generated automatically from android.app.AutomaticZenRule for testing purposes
+
+package android.app;
+
+import android.content.ComponentName;
+import android.net.Uri;
+import android.os.Parcel;
+import android.os.Parcelable;
+import android.service.notification.ZenPolicy;
+
+public class AutomaticZenRule implements Parcelable
+{
+    protected AutomaticZenRule() {}
+    public AutomaticZenRule(Parcel p0){}
+    public AutomaticZenRule(String p0, ComponentName p1, ComponentName p2, Uri p3, ZenPolicy p4, int p5, boolean p6){}
+    public AutomaticZenRule(String p0, ComponentName p1, Uri p2, int p3, boolean p4){}
+    public ComponentName getConfigurationActivity(){ return null; }
+    public ComponentName getOwner(){ return null; }
+    public String getName(){ return null; }
+    public String toString(){ return null; }
+    public Uri getConditionId(){ return null; }
+    public ZenPolicy getZenPolicy(){ return null; }
+    public boolean equals(Object p0){ return false; }
+    public boolean isEnabled(){ return false; }
+    public int describeContents(){ return 0; }
+    public int getInterruptionFilter(){ return 0; }
+    public int hashCode(){ return 0; }
+    public long getCreationTime(){ return 0; }
+    public static Parcelable.Creator<AutomaticZenRule> CREATOR = null;
+    public void setConditionId(Uri p0){}
+    public void setConfigurationActivity(ComponentName p0){}
+    public void setEnabled(boolean p0){}
+    public void setInterruptionFilter(int p0){}
+    public void setName(String p0){}
+    public void setZenPolicy(ZenPolicy p0){}
+    public void writeToParcel(Parcel p0, int p1){}
+}
diff --git a/java/ql/test/stubs/google-android-9.0.0/android/service/notification/Condition.java b/java/ql/test/stubs/google-android-9.0.0/android/service/notification/Condition.java
new file mode 100644
index 00000000000..a7f94f23c42
--- /dev/null
+++ b/java/ql/test/stubs/google-android-9.0.0/android/service/notification/Condition.java
@@ -0,0 +1,41 @@
+// Generated automatically from android.service.notification.Condition for testing purposes
+
+package android.service.notification;
+
+import android.content.Context;
+import android.net.Uri;
+import android.os.Parcel;
+import android.os.Parcelable;
+
+public class Condition implements Parcelable
+{
+    protected Condition() {}
+    public Condition copy(){ return null; }
+    public Condition(Parcel p0){}
+    public Condition(Uri p0, String p1, String p2, String p3, int p4, int p5, int p6){}
+    public Condition(Uri p0, String p1, int p2){}
+    public String toString(){ return null; }
+    public boolean equals(Object p0){ return false; }
+    public final String line1 = null;
+    public final String line2 = null;
+    public final String summary = null;
+    public final Uri id = null;
+    public final int flags = 0;
+    public final int icon = 0;
+    public final int state = 0;
+    public int describeContents(){ return 0; }
+    public int hashCode(){ return 0; }
+    public static Parcelable.Creator<Condition> CREATOR = null;
+    public static String SCHEME = null;
+    public static String relevanceToString(int p0){ return null; }
+    public static String stateToString(int p0){ return null; }
+    public static Uri.Builder newId(Context p0){ return null; }
+    public static boolean isValidId(Uri p0, String p1){ return false; }
+    public static int FLAG_RELEVANT_ALWAYS = 0;
+    public static int FLAG_RELEVANT_NOW = 0;
+    public static int STATE_ERROR = 0;
+    public static int STATE_FALSE = 0;
+    public static int STATE_TRUE = 0;
+    public static int STATE_UNKNOWN = 0;
+    public void writeToParcel(Parcel p0, int p1){}
+}
diff --git a/java/ql/test/stubs/google-android-9.0.0/android/service/notification/StatusBarNotification.java b/java/ql/test/stubs/google-android-9.0.0/android/service/notification/StatusBarNotification.java
new file mode 100644
index 00000000000..e360a5ad3f1
--- /dev/null
+++ b/java/ql/test/stubs/google-android-9.0.0/android/service/notification/StatusBarNotification.java
@@ -0,0 +1,37 @@
+// Generated automatically from android.service.notification.StatusBarNotification for testing purposes
+
+package android.service.notification;
+
+import android.app.Notification;
+import android.os.Parcel;
+import android.os.Parcelable;
+import android.os.UserHandle;
+
+public class StatusBarNotification implements Parcelable
+{
+    protected StatusBarNotification() {}
+    public Notification getNotification(){ return null; }
+    public StatusBarNotification clone(){ return null; }
+    public StatusBarNotification(Parcel p0){}
+    public StatusBarNotification(String p0, String p1, int p2, String p3, int p4, int p5, int p6, Notification p7, UserHandle p8, long p9){}
+    public String getGroupKey(){ return null; }
+    public String getKey(){ return null; }
+    public String getOpPkg(){ return null; }
+    public String getOverrideGroupKey(){ return null; }
+    public String getPackageName(){ return null; }
+    public String getTag(){ return null; }
+    public String toString(){ return null; }
+    public UserHandle getUser(){ return null; }
+    public boolean isAppGroup(){ return false; }
+    public boolean isClearable(){ return false; }
+    public boolean isGroup(){ return false; }
+    public boolean isOngoing(){ return false; }
+    public int describeContents(){ return 0; }
+    public int getId(){ return 0; }
+    public int getUid(){ return 0; }
+    public int getUserId(){ return 0; }
+    public long getPostTime(){ return 0; }
+    public static Parcelable.Creator<StatusBarNotification> CREATOR = null;
+    public void setOverrideGroupKey(String p0){}
+    public void writeToParcel(Parcel p0, int p1){}
+}
diff --git a/java/ql/test/stubs/google-android-9.0.0/android/service/notification/ZenPolicy.java b/java/ql/test/stubs/google-android-9.0.0/android/service/notification/ZenPolicy.java
new file mode 100644
index 00000000000..81c52b0c18a
--- /dev/null
+++ b/java/ql/test/stubs/google-android-9.0.0/android/service/notification/ZenPolicy.java
@@ -0,0 +1,47 @@
+// Generated automatically from android.service.notification.ZenPolicy for testing purposes
+
+package android.service.notification;
+
+import android.os.Parcel;
+import android.os.Parcelable;
+
+public class ZenPolicy implements Parcelable
+{
+    public String toString(){ return null; }
+    public boolean equals(Object p0){ return false; }
+    public int describeContents(){ return 0; }
+    public int getPriorityCallSenders(){ return 0; }
+    public int getPriorityCategoryAlarms(){ return 0; }
+    public int getPriorityCategoryCalls(){ return 0; }
+    public int getPriorityCategoryConversations(){ return 0; }
+    public int getPriorityCategoryEvents(){ return 0; }
+    public int getPriorityCategoryMedia(){ return 0; }
+    public int getPriorityCategoryMessages(){ return 0; }
+    public int getPriorityCategoryReminders(){ return 0; }
+    public int getPriorityCategoryRepeatCallers(){ return 0; }
+    public int getPriorityCategorySystem(){ return 0; }
+    public int getPriorityConversationSenders(){ return 0; }
+    public int getPriorityMessageSenders(){ return 0; }
+    public int getVisualEffectAmbient(){ return 0; }
+    public int getVisualEffectBadge(){ return 0; }
+    public int getVisualEffectFullScreenIntent(){ return 0; }
+    public int getVisualEffectLights(){ return 0; }
+    public int getVisualEffectNotificationList(){ return 0; }
+    public int getVisualEffectPeek(){ return 0; }
+    public int getVisualEffectStatusBar(){ return 0; }
+    public int hashCode(){ return 0; }
+    public static Parcelable.Creator<ZenPolicy> CREATOR = null;
+    public static int CONVERSATION_SENDERS_ANYONE = 0;
+    public static int CONVERSATION_SENDERS_IMPORTANT = 0;
+    public static int CONVERSATION_SENDERS_NONE = 0;
+    public static int CONVERSATION_SENDERS_UNSET = 0;
+    public static int PEOPLE_TYPE_ANYONE = 0;
+    public static int PEOPLE_TYPE_CONTACTS = 0;
+    public static int PEOPLE_TYPE_NONE = 0;
+    public static int PEOPLE_TYPE_STARRED = 0;
+    public static int PEOPLE_TYPE_UNSET = 0;
+    public static int STATE_ALLOW = 0;
+    public static int STATE_DISALLOW = 0;
+    public static int STATE_UNSET = 0;
+    public void writeToParcel(Parcel p0, int p1){}
+}
diff --git a/java/ql/test/stubs/google-android-9.0.0/androidx/core/app/AlarmManagerCompat.java b/java/ql/test/stubs/google-android-9.0.0/androidx/core/app/AlarmManagerCompat.java
new file mode 100644
index 00000000000..adaf14a156b
--- /dev/null
+++ b/java/ql/test/stubs/google-android-9.0.0/androidx/core/app/AlarmManagerCompat.java
@@ -0,0 +1,15 @@
+// Generated automatically from androidx.core.app.AlarmManagerCompat for testing purposes
+
+package androidx.core.app;
+
+import android.app.AlarmManager;
+import android.app.PendingIntent;
+
+public class AlarmManagerCompat
+{
+    protected AlarmManagerCompat() {}
+    public static void setAlarmClock(AlarmManager p0, long p1, PendingIntent p2, PendingIntent p3){}
+    public static void setAndAllowWhileIdle(AlarmManager p0, int p1, long p2, PendingIntent p3){}
+    public static void setExact(AlarmManager p0, int p1, long p2, PendingIntent p3){}
+    public static void setExactAndAllowWhileIdle(AlarmManager p0, int p1, long p2, PendingIntent p3){}
+}
diff --git a/java/ql/test/stubs/google-android-9.0.0/androidx/core/app/CoreComponentFactory.java b/java/ql/test/stubs/google-android-9.0.0/androidx/core/app/CoreComponentFactory.java
new file mode 100644
index 00000000000..699156f3441
--- /dev/null
+++ b/java/ql/test/stubs/google-android-9.0.0/androidx/core/app/CoreComponentFactory.java
@@ -0,0 +1,25 @@
+// Generated automatically from androidx.core.app.CoreComponentFactory for testing purposes
+
+package androidx.core.app;
+
+import android.app.Activity;
+import android.app.AppComponentFactory;
+import android.app.Application;
+import android.app.Service;
+import android.content.BroadcastReceiver;
+import android.content.ContentProvider;
+import android.content.Intent;
+
+public class CoreComponentFactory extends AppComponentFactory
+{
+    public Activity instantiateActivity(ClassLoader p0, String p1, Intent p2){ return null; }
+    public Application instantiateApplication(ClassLoader p0, String p1){ return null; }
+    public BroadcastReceiver instantiateReceiver(ClassLoader p0, String p1, Intent p2){ return null; }
+    public ContentProvider instantiateProvider(ClassLoader p0, String p1){ return null; }
+    public CoreComponentFactory(){}
+    public Service instantiateService(ClassLoader p0, String p1, Intent p2){ return null; }
+    static public interface CompatWrapped
+    {
+        Object getWrapper();
+    }
+}
diff --git a/java/ql/test/stubs/google-android-9.0.0/androidx/core/app/NotificationManagerCompat.java b/java/ql/test/stubs/google-android-9.0.0/androidx/core/app/NotificationManagerCompat.java
new file mode 100644
index 00000000000..184c3cd25c7
--- /dev/null
+++ b/java/ql/test/stubs/google-android-9.0.0/androidx/core/app/NotificationManagerCompat.java
@@ -0,0 +1,43 @@
+// Generated automatically from androidx.core.app.NotificationManagerCompat for testing purposes
+
+package androidx.core.app;
+
+import android.app.Notification;
+import android.app.NotificationChannel;
+import android.app.NotificationChannelGroup;
+import android.content.Context;
+import java.util.List;
+import java.util.Set;
+
+public class NotificationManagerCompat
+{
+    protected NotificationManagerCompat() {}
+    public List<NotificationChannel> getNotificationChannels(){ return null; }
+    public List<NotificationChannelGroup> getNotificationChannelGroups(){ return null; }
+    public NotificationChannel getNotificationChannel(String p0){ return null; }
+    public NotificationChannelGroup getNotificationChannelGroup(String p0){ return null; }
+    public boolean areNotificationsEnabled(){ return false; }
+    public int getImportance(){ return 0; }
+    public static NotificationManagerCompat from(Context p0){ return null; }
+    public static Set<String> getEnabledListenerPackages(Context p0){ return null; }
+    public static String ACTION_BIND_SIDE_CHANNEL = null;
+    public static String EXTRA_USE_SIDE_CHANNEL = null;
+    public static int IMPORTANCE_DEFAULT = 0;
+    public static int IMPORTANCE_HIGH = 0;
+    public static int IMPORTANCE_LOW = 0;
+    public static int IMPORTANCE_MAX = 0;
+    public static int IMPORTANCE_MIN = 0;
+    public static int IMPORTANCE_NONE = 0;
+    public static int IMPORTANCE_UNSPECIFIED = 0;
+    public void cancel(String p0, int p1){}
+    public void cancel(int p0){}
+    public void cancelAll(){}
+    public void createNotificationChannel(NotificationChannel p0){}
+    public void createNotificationChannelGroup(NotificationChannelGroup p0){}
+    public void createNotificationChannelGroups(List<NotificationChannelGroup> p0){}
+    public void createNotificationChannels(List<NotificationChannel> p0){}
+    public void deleteNotificationChannel(String p0){}
+    public void deleteNotificationChannelGroup(String p0){}
+    public void notify(String p0, int p1, Notification p2){}
+    public void notify(int p0, Notification p1){}
+}
diff --git a/java/ql/test/stubs/google-android-9.0.0/androidx/remotecallback/CallbackReceiver.java b/java/ql/test/stubs/google-android-9.0.0/androidx/remotecallback/CallbackReceiver.java
new file mode 100644
index 00000000000..3215fe270d8
--- /dev/null
+++ b/java/ql/test/stubs/google-android-9.0.0/androidx/remotecallback/CallbackReceiver.java
@@ -0,0 +1,10 @@
+// Generated automatically from androidx.remotecallback.CallbackReceiver for testing purposes
+
+package androidx.remotecallback;
+
+import android.content.Context;
+
+public interface CallbackReceiver<T>
+{
+    T createRemoteCallback(Context p0);
+}
diff --git a/java/ql/test/stubs/google-android-9.0.0/androidx/slice/Clock.java b/java/ql/test/stubs/google-android-9.0.0/androidx/slice/Clock.java
new file mode 100644
index 00000000000..4aed87209c6
--- /dev/null
+++ b/java/ql/test/stubs/google-android-9.0.0/androidx/slice/Clock.java
@@ -0,0 +1,9 @@
+// Generated automatically from androidx.slice.Clock for testing purposes
+
+package androidx.slice;
+
+
+public interface Clock
+{
+    long currentTimeMillis();
+}
diff --git a/java/ql/test/stubs/google-android-9.0.0/androidx/slice/builders/impl/TemplateBuilderImpl.java b/java/ql/test/stubs/google-android-9.0.0/androidx/slice/builders/impl/TemplateBuilderImpl.java
new file mode 100644
index 00000000000..073ce2604c9
--- /dev/null
+++ b/java/ql/test/stubs/google-android-9.0.0/androidx/slice/builders/impl/TemplateBuilderImpl.java
@@ -0,0 +1,23 @@
+// Generated automatically from androidx.slice.builders.impl.TemplateBuilderImpl for testing purposes
+
+package androidx.slice.builders.impl;
+
+import androidx.slice.Clock;
+import androidx.slice.Slice;
+import androidx.slice.SliceSpec;
+import java.util.ArrayList;
+
+abstract public class TemplateBuilderImpl
+{
+    protected TemplateBuilderImpl() {}
+    protected ArrayList<String> parseImageMode(int p0, boolean p1){ return null; }
+    protected TemplateBuilderImpl(Slice.Builder p0, SliceSpec p1){}
+    protected TemplateBuilderImpl(Slice.Builder p0, SliceSpec p1, Clock p2){}
+    protected void setBuilder(Slice.Builder p0){}
+    public Clock getClock(){ return null; }
+    public Slice build(){ return null; }
+    public Slice.Builder createChildBuilder(){ return null; }
+    public Slice.Builder getBuilder(){ return null; }
+    public SliceSpec getSpec(){ return null; }
+    public abstract void apply(Slice.Builder p0);
+}
diff --git a/java/ql/test/stubs/google-android-9.0.0/androidx/slice/compat/CompatPermissionManager.java b/java/ql/test/stubs/google-android-9.0.0/androidx/slice/compat/CompatPermissionManager.java
new file mode 100644
index 00000000000..a04e2c809cd
--- /dev/null
+++ b/java/ql/test/stubs/google-android-9.0.0/androidx/slice/compat/CompatPermissionManager.java
@@ -0,0 +1,16 @@
+// Generated automatically from androidx.slice.compat.CompatPermissionManager for testing purposes
+
+package androidx.slice.compat;
+
+import android.content.Context;
+import android.net.Uri;
+
+public class CompatPermissionManager
+{
+    protected CompatPermissionManager() {}
+    public CompatPermissionManager(Context p0, String p1, int p2, String[] p3){}
+    public int checkSlicePermission(Uri p0, int p1, int p2){ return 0; }
+    public static String ALL_SUFFIX = null;
+    public void grantSlicePermission(Uri p0, String p1){}
+    public void revokeSlicePermission(Uri p0, String p1){}
+}

From 9ddfcf935bf28f5a9c91c351fae0c07b5ca64644 Mon Sep 17 00:00:00 2001
From: Edward Minnix III <egregius313@github.com>
Date: Wed, 7 Sep 2022 09:46:16 -0400
Subject: [PATCH 055/203] Update
 java/ql/src/change-notes/2022-08-18-android-allowbackup-query.md

Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
---
 .../ql/src/change-notes/2022-08-18-android-allowbackup-query.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/ql/src/change-notes/2022-08-18-android-allowbackup-query.md b/java/ql/src/change-notes/2022-08-18-android-allowbackup-query.md
index b7bfd85ac8c..e37abd0d755 100644
--- a/java/ql/src/change-notes/2022-08-18-android-allowbackup-query.md
+++ b/java/ql/src/change-notes/2022-08-18-android-allowbackup-query.md
@@ -1,4 +1,4 @@
 ---
 category: newQuery
 ---
-* Added a new query, `java/android/allowBackup-attribute-enabled`, to detect if the `android:allowBackup` attribute is enabled in the Android manifest.
+* Added a new query, `java/android/backup-enabled`, to detect if Android applications allow backups.

From f6c8144eed5a2e3af9b5ad1e4c5074b803a9fb13 Mon Sep 17 00:00:00 2001
From: Edward Minnix III <egregius313@github.com>
Date: Wed, 7 Sep 2022 09:46:36 -0400
Subject: [PATCH 056/203] Update
 java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql

Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
---
 java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
index 42163f4107a..97f4ec82982 100644
--- a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
+++ b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
@@ -4,7 +4,7 @@
  * @kind problem
  * @problem.severity recommendation
  * @security-severity 7.5
- * @id java/android/allowbackup-enabled
+ * @id java/android/backup-enabled
  * @tags security
  *       external/cwe/cwe-312
  * @precision very-high

From 19b13ee4e377e58054fdf1683bc60fc3198438da Mon Sep 17 00:00:00 2001
From: Paolo Tranquilli <redsun82@github.com>
Date: Wed, 7 Sep 2022 15:58:35 +0200
Subject: [PATCH 057/203] Swift: first draft of query targeting weak hashing

---
 .../ql/lib/codeql/swift/elements/AstNode.qll  | 29 ++++--
 .../CWE-328/WeakSensitiveDataHashing.qhelp    | 89 +++++++++++++++++++
 .../CWE-328/WeakSensitiveDataHashing.ql       | 57 ++++++++++++
 .../CWE-328/WeakSensitiveDataHashingBad.swift |  5 ++
 .../WeakSensitiveDataHashingGood.swift        |  4 +
 .../CWE-328/WeakSensitiveDataHashing.expected | 28 ++++++
 .../CWE-328/WeakSensitiveDataHashing.qlref    |  1 +
 .../Security/CWE-328/testCrypto.swift         | 68 ++++++++++++++
 8 files changed, 273 insertions(+), 8 deletions(-)
 create mode 100755 swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.qhelp
 create mode 100755 swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.ql
 create mode 100755 swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashingBad.swift
 create mode 100755 swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashingGood.swift
 create mode 100644 swift/ql/test/query-tests/Security/CWE-328/WeakSensitiveDataHashing.expected
 create mode 100644 swift/ql/test/query-tests/Security/CWE-328/WeakSensitiveDataHashing.qlref
 create mode 100644 swift/ql/test/query-tests/Security/CWE-328/testCrypto.swift

diff --git a/swift/ql/lib/codeql/swift/elements/AstNode.qll b/swift/ql/lib/codeql/swift/elements/AstNode.qll
index 01f0fedb710..33b4da963b7 100644
--- a/swift/ql/lib/codeql/swift/elements/AstNode.qll
+++ b/swift/ql/lib/codeql/swift/elements/AstNode.qll
@@ -1,17 +1,30 @@
 private import codeql.swift.generated.AstNode
 private import codeql.swift.elements.decl.AbstractFunctionDecl
+private import codeql.swift.elements.decl.Decl
 private import codeql.swift.generated.ParentChild
 
-private Element getEnclosingFunctionStep(Element e) {
-  not e instanceof AbstractFunctionDecl and
-  result = getImmediateParent(e)
-}
+private module Cached {
+  private Element getEnclosingDeclStep(Element e) {
+    not e instanceof Decl and
+    result = getImmediateParent(e)
+  }
 
-cached
-private AbstractFunctionDecl getEnclosingFunctionCached(AstNode ast) {
-  result = getEnclosingFunctionStep*(getImmediateParent(ast))
+  cached
+  Decl getEnclosingDecl(AstNode ast) { result = getEnclosingDeclStep*(getImmediateParent(ast)) }
+
+  private Element getEnclosingFunctionStep(Element e) {
+    not e instanceof AbstractFunctionDecl and
+    result = getEnclosingDecl(e)
+  }
+
+  cached
+  AbstractFunctionDecl getEnclosingFunction(AstNode ast) {
+    result = getEnclosingFunctionStep*(getEnclosingDecl(ast))
+  }
 }
 
 class AstNode extends AstNodeBase {
-  final AbstractFunctionDecl getEnclosingFunction() { result = getEnclosingFunctionCached(this) }
+  final AbstractFunctionDecl getEnclosingFunction() { result = Cached::getEnclosingFunction(this) }
+
+  final Decl getEnclosingDecl() { result = Cached::getEnclosingDecl(this) }
 }
diff --git a/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.qhelp b/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.qhelp
new file mode 100755
index 00000000000..0fc07271f8e
--- /dev/null
+++ b/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.qhelp
@@ -0,0 +1,89 @@
+<!DOCTYPE qhelp PUBLIC
+        "-//Semmle//qhelp//EN"
+        "qhelp.dtd">
+<qhelp>
+    <overview>
+        <p>
+            Using a broken or weak cryptographic hash function can leave data
+            vulnerable, and should not be used in security related code.
+        </p>
+
+        <p>
+            A strong cryptographic hash function should be resistant to:
+        </p>
+        <ul>
+            <li>
+                pre-image attacks: if you know a hash value <code>h(x)</code>,
+                you should not be able to easily find the input <code>x</code>.
+            </li>
+            <li>
+                collision attacks: if you know a hash value <code>h(x)</code>,
+                you should not be able to easily find a different input
+                <code>y</code>
+                with the same hash value <code>h(x) = h(y)</code>.
+            </li>
+        </ul>
+        <!--<p>
+             In cases with a limited input space, such as for passwords, the hash
+             function also needs to be computationally expensive to be resistant to
+             brute-force attacks. Passwords should also have an unique salt applied
+             before hashing, but that is not considered by this query.
+        </p>-->
+
+        <p>
+            As an example, both MD5 and SHA-1 are known to be vulnerable to collision attacks.
+        </p>
+
+        <p>
+            Since it's OK to use a weak cryptographic hash function in a non-security
+            context, this query only alerts when these are used to hash sensitive
+            data (such as passwords, certificates, usernames).
+        </p>
+
+    </overview>
+    <recommendation>
+
+        <p>
+            Ensure that you use a strong, modern cryptographic hash function:
+        </p>
+
+        <ul>
+            <li>
+                such as Argon2, scrypt, bcrypt, or PBKDF2 for passwords and other data with limited input space.
+            </li>
+            <li>
+                such as SHA-2, or SHA-3 in other cases.
+            </li>
+        </ul>
+
+    </recommendation>
+    <example>
+
+        <p>
+            The following examples show a function for checking whether the hash
+            of a certificate matches a known value -- to prevent tampering.
+
+            In the first case the MD5 hashing algorithm is used that is known to be vulnerable to collision attacks.
+        </p>
+        <sample src="WeakSensitiveDataHashingBad.swift"/>
+        <p>
+
+            Here is the same function using SHA-512 that is a strong cryptographic hashing function.
+        </p>
+        <sample src="WeakSensitiveDataHashingGood.swift"/>
+
+    </example>
+    <references>
+        <li>
+            OWASP:
+            <a href="https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html">Password Storage
+                Cheat Sheet
+            </a>
+            and
+            <a href="https://cheatsheetseries.owasp.org/cheatsheets/Transport_Layer_Protection_Cheat_Sheet.html#use-strong-cryptographic-hashing-algorithms">
+                Transport Layer Protection Cheat Sheet
+            </a>
+        </li>
+    </references>
+
+</qhelp>
diff --git a/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.ql b/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.ql
new file mode 100755
index 00000000000..8aa80028957
--- /dev/null
+++ b/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.ql
@@ -0,0 +1,57 @@
+/**
+ * @name Use of a broken or weak cryptographic hashing algorithm on sensitive data
+ * @description Using broken or weak cryptographic hashing algorithms can compromise security.
+ * @kind path-problem
+ * @problem.severity warning
+ * @security-severity 7.5
+ * @precision high
+ * @id py/weak-sensitive-data-hashing
+ * @tags security
+ *       external/cwe/cwe-327
+ *       external/cwe/cwe-328
+ */
+
+import swift
+import codeql.swift.security.SensitiveExprs
+import codeql.swift.dataflow.DataFlow
+import codeql.swift.dataflow.TaintTracking
+import DataFlow::PathGraph
+
+class WeakHashingConfig extends TaintTracking::Configuration {
+  WeakHashingConfig() { this = "WeakHashingConfig" }
+
+  override predicate isSource(DataFlow::Node node) {
+    exists(SensitiveExpr e |
+      node.asExpr() = e and
+      not e.isProbablySafe()
+    )
+  }
+
+  override predicate isSink(DataFlow::Node node) { node instanceof WeakHashingConfig::Sink }
+}
+
+module WeakHashingConfig {
+  class Sink extends DataFlow::Node {
+    string algorithm;
+
+    Sink() {
+      exists(ApplyExpr call, FuncDecl func |
+        call.getAnArgument().getExpr() = this.asExpr() and
+        call.getStaticTarget() = func and
+        func.getName().matches(["hash(%", "update(%"]) and
+        algorithm = func.getEnclosingDecl().(StructDecl).getName() and
+        algorithm = ["MD5", "SHA1"]
+      )
+    }
+
+    string getAlgorithm() { result = algorithm }
+  }
+}
+
+from WeakHashingConfig config, DataFlow::PathNode source, DataFlow::PathNode sink, string algorithm
+where
+  config.hasFlowPath(source, sink) and
+  algorithm = sink.getNode().(WeakHashingConfig::Sink).getAlgorithm()
+select sink.getNode(), source, sink,
+  "Insecure hashing algorithm (" + algorithm + ") depends on $@.", source.getNode(),
+  "sensitive data"
diff --git a/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashingBad.swift b/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashingBad.swift
new file mode 100755
index 00000000000..a39dd47edce
--- /dev/null
+++ b/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashingBad.swift
@@ -0,0 +1,5 @@
+typealias Hasher = Crypto.Insecure.MD5
+
+func checkCertificate(cert: Array[UInt8], hash: Array[UInt8]) -> Bool
+  return Hasher.hash(data: cert) == hash  // BAD
+}
diff --git a/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashingGood.swift b/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashingGood.swift
new file mode 100755
index 00000000000..7345b2ea49c
--- /dev/null
+++ b/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashingGood.swift
@@ -0,0 +1,4 @@
+typealias Hasher = Crypto.SHA512
+
+func checkCertificate(cert: Array[UInt8], hash: Array[UInt8]) -> Bool
+  return Hasher.hash(data: cert) == hash  // GOOD
diff --git a/swift/ql/test/query-tests/Security/CWE-328/WeakSensitiveDataHashing.expected b/swift/ql/test/query-tests/Security/CWE-328/WeakSensitiveDataHashing.expected
new file mode 100644
index 00000000000..0422d561ca8
--- /dev/null
+++ b/swift/ql/test/query-tests/Security/CWE-328/WeakSensitiveDataHashing.expected
@@ -0,0 +1,28 @@
+edges
+nodes
+| testCrypto.swift:25:47:25:47 | passwd | semmle.label | passwd |
+| testCrypto.swift:28:43:28:43 | credit_card_no | semmle.label | credit_card_no |
+| testCrypto.swift:32:48:32:48 | passwd | semmle.label | passwd |
+| testCrypto.swift:35:44:35:44 | credit_card_no | semmle.label | credit_card_no |
+| testCrypto.swift:40:23:40:23 | passwd | semmle.label | passwd |
+| testCrypto.swift:43:23:43:23 | credit_card_no | semmle.label | credit_card_no |
+| testCrypto.swift:48:23:48:23 | passwd | semmle.label | passwd |
+| testCrypto.swift:51:23:51:23 | credit_card_no | semmle.label | credit_card_no |
+| testCrypto.swift:56:32:56:32 | passwd | semmle.label | passwd |
+| testCrypto.swift:59:32:59:32 | credit_card_no | semmle.label | credit_card_no |
+| testCrypto.swift:64:32:64:32 | passwd | semmle.label | passwd |
+| testCrypto.swift:67:32:67:32 | credit_card_no | semmle.label | credit_card_no |
+subpaths
+#select
+| testCrypto.swift:25:47:25:47 | passwd | testCrypto.swift:25:47:25:47 | passwd | testCrypto.swift:25:47:25:47 | passwd | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:25:47:25:47 | passwd | sensitive data |
+| testCrypto.swift:28:43:28:43 | credit_card_no | testCrypto.swift:28:43:28:43 | credit_card_no | testCrypto.swift:28:43:28:43 | credit_card_no | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:28:43:28:43 | credit_card_no | sensitive data |
+| testCrypto.swift:32:48:32:48 | passwd | testCrypto.swift:32:48:32:48 | passwd | testCrypto.swift:32:48:32:48 | passwd | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:32:48:32:48 | passwd | sensitive data |
+| testCrypto.swift:35:44:35:44 | credit_card_no | testCrypto.swift:35:44:35:44 | credit_card_no | testCrypto.swift:35:44:35:44 | credit_card_no | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:35:44:35:44 | credit_card_no | sensitive data |
+| testCrypto.swift:40:23:40:23 | passwd | testCrypto.swift:40:23:40:23 | passwd | testCrypto.swift:40:23:40:23 | passwd | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:40:23:40:23 | passwd | sensitive data |
+| testCrypto.swift:43:23:43:23 | credit_card_no | testCrypto.swift:43:23:43:23 | credit_card_no | testCrypto.swift:43:23:43:23 | credit_card_no | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:43:23:43:23 | credit_card_no | sensitive data |
+| testCrypto.swift:48:23:48:23 | passwd | testCrypto.swift:48:23:48:23 | passwd | testCrypto.swift:48:23:48:23 | passwd | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:48:23:48:23 | passwd | sensitive data |
+| testCrypto.swift:51:23:51:23 | credit_card_no | testCrypto.swift:51:23:51:23 | credit_card_no | testCrypto.swift:51:23:51:23 | credit_card_no | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:51:23:51:23 | credit_card_no | sensitive data |
+| testCrypto.swift:56:32:56:32 | passwd | testCrypto.swift:56:32:56:32 | passwd | testCrypto.swift:56:32:56:32 | passwd | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:56:32:56:32 | passwd | sensitive data |
+| testCrypto.swift:59:32:59:32 | credit_card_no | testCrypto.swift:59:32:59:32 | credit_card_no | testCrypto.swift:59:32:59:32 | credit_card_no | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:59:32:59:32 | credit_card_no | sensitive data |
+| testCrypto.swift:64:32:64:32 | passwd | testCrypto.swift:64:32:64:32 | passwd | testCrypto.swift:64:32:64:32 | passwd | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:64:32:64:32 | passwd | sensitive data |
+| testCrypto.swift:67:32:67:32 | credit_card_no | testCrypto.swift:67:32:67:32 | credit_card_no | testCrypto.swift:67:32:67:32 | credit_card_no | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:67:32:67:32 | credit_card_no | sensitive data |
diff --git a/swift/ql/test/query-tests/Security/CWE-328/WeakSensitiveDataHashing.qlref b/swift/ql/test/query-tests/Security/CWE-328/WeakSensitiveDataHashing.qlref
new file mode 100644
index 00000000000..85270fde299
--- /dev/null
+++ b/swift/ql/test/query-tests/Security/CWE-328/WeakSensitiveDataHashing.qlref
@@ -0,0 +1 @@
+queries/Security/CWE-328/WeakSensitiveDataHashing.ql
diff --git a/swift/ql/test/query-tests/Security/CWE-328/testCrypto.swift b/swift/ql/test/query-tests/Security/CWE-328/testCrypto.swift
new file mode 100644
index 00000000000..9994aeb5008
--- /dev/null
+++ b/swift/ql/test/query-tests/Security/CWE-328/testCrypto.swift
@@ -0,0 +1,68 @@
+//codeql-extractor-options: -module-name Crypto
+
+enum Insecure {
+    struct MD5 {
+        static func hash<D>(data: D) -> [UInt8] {
+            return []
+        }
+
+        func update<D>(data: D) {}
+        func update(bufferPointer: UnsafeRawBufferPointer) {}
+        func finalize() -> [UInt8] { return [] }
+    }
+    struct SHA1 {
+        static func hash<D>(data: D) -> [UInt8] {
+            return []
+        }
+
+        func update<D>(data: D) {}
+        func update(bufferPointer: UnsafeRawBufferPointer) {}
+        func finalize() -> [UInt8] { return [] }
+    }
+}
+
+func test1(passwd : UnsafeRawBufferPointer, encrypted_passwd : String, account_no : String, credit_card_no : String) {
+    var hash = Crypto.Insecure.MD5.hash(data: passwd)  // BAD
+    hash = Crypto.Insecure.MD5.hash(data: encrypted_passwd)  // GOOD  (not sensitive)
+    hash = Crypto.Insecure.MD5.hash(data: account_no)   // BAD [NOT DETECTED]
+    hash = Crypto.Insecure.MD5.hash(data: credit_card_no)   // BAD
+}
+
+func test2(passwd : String, encrypted_passwd : String, account_no : String, credit_card_no : String) {
+    var hash = Crypto.Insecure.SHA1.hash(data: passwd)  // BAD
+    hash = Crypto.Insecure.SHA1.hash(data: encrypted_passwd)  // GOOD  (not sensitive)
+    hash = Crypto.Insecure.SHA1.hash(data: account_no)   // BAD [NOT DETECTED]
+    hash = Crypto.Insecure.SHA1.hash(data: credit_card_no)   // BAD
+}
+
+func test3(passwd : String, encrypted_passwd : String, account_no : String, credit_card_no : String) {
+    var hash = Crypto.Insecure.MD5()
+    hash.update(data: passwd)  // BAD
+    hash.update(data: encrypted_passwd)  // GOOD  (not sensitive)
+    hash.update(data: account_no)   // BAD [NOT DETECTED]
+    hash.update(data: credit_card_no)   // BAD
+}
+
+func test4(passwd : String, encrypted_passwd : String, account_no : String, credit_card_no : String) {
+    var hash = Crypto.Insecure.SHA1()
+    hash.update(data: passwd)  // BAD
+    hash.update(data: encrypted_passwd)  // GOOD  (not sensitive)
+    hash.update(data: account_no)   // BAD [NOT DETECTED]
+    hash.update(data: credit_card_no)   // BAD
+}
+
+func test5(passwd : UnsafeRawBufferPointer, encrypted_passwd : UnsafeRawBufferPointer, account_no : UnsafeRawBufferPointer, credit_card_no : UnsafeRawBufferPointer) {
+    var hash = Crypto.Insecure.MD5()
+    hash.update(bufferPointer: passwd)  // BAD
+    hash.update(bufferPointer: encrypted_passwd)  // GOOD  (not sensitive)
+    hash.update(bufferPointer: account_no)   // BAD [NOT DETECTED]
+    hash.update(bufferPointer: credit_card_no)   // BAD
+}
+
+func test6(passwd : UnsafeRawBufferPointer, encrypted_passwd : UnsafeRawBufferPointer, account_no : UnsafeRawBufferPointer, credit_card_no : UnsafeRawBufferPointer) {
+    var hash = Crypto.Insecure.SHA1()
+    hash.update(bufferPointer: passwd)  // BAD
+    hash.update(bufferPointer: encrypted_passwd)  // GOOD  (not sensitive)
+    hash.update(bufferPointer: account_no)   // BAD [NOT DETECTED]
+    hash.update(bufferPointer: credit_card_no)   // BAD
+}

From a5233c0d01c3e9c18a987f5994b69f8eb607edd1 Mon Sep 17 00:00:00 2001
From: Paolo Tranquilli <redsun82@github.com>
Date: Wed, 7 Sep 2022 16:17:45 +0200
Subject: [PATCH 058/203] Swift: fix `@id`

---
 .../ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.ql | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.ql b/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.ql
index 8aa80028957..5eb711434fa 100755
--- a/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.ql
+++ b/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.ql
@@ -5,7 +5,7 @@
  * @problem.severity warning
  * @security-severity 7.5
  * @precision high
- * @id py/weak-sensitive-data-hashing
+ * @id swift/weak-sensitive-data-hashing
  * @tags security
  *       external/cwe/cwe-327
  *       external/cwe/cwe-328

From 5206c792b099ce65cd41bc47ff66aadfab85aa9a Mon Sep 17 00:00:00 2001
From: Ed Minnix <egregius313@github.com>
Date: Wed, 7 Sep 2022 12:07:48 -0400
Subject: [PATCH 059/203] Additional Unit tests for the allowBackup query

---
 .../security/CWE-312/AndroidManifest.xml      |  2 +-
 .../backup}/AllowBackupEnabledTest.expected   |  0
 .../backup}/AllowBackupEnabledTest.java       |  0
 .../backup}/AllowBackupEnabledTest.ql         |  3 +-
 .../TestEmptyManifest/AndroidManifest.xml     |  3 ++
 .../AndroidManifest.xml                       | 29 +++++++++++++++++++
 .../TestExplicitlyEnabled/AndroidManifest.xml | 29 +++++++++++++++++++
 .../backup/TestLibrary/AndroidManifest.xml    |  6 ++++
 .../backup/TestMissing/AndroidManifest.xml    | 29 +++++++++++++++++++
 .../backup/Testbuild/AndroidManifest.xml      | 29 +++++++++++++++++++
 10 files changed, 127 insertions(+), 3 deletions(-)
 rename java/ql/test/query-tests/security/CWE-312/{ => android/backup}/AllowBackupEnabledTest.expected (100%)
 rename java/ql/test/query-tests/security/CWE-312/{ => android/backup}/AllowBackupEnabledTest.java (100%)
 rename java/ql/test/query-tests/security/CWE-312/{ => android/backup}/AllowBackupEnabledTest.ql (84%)
 create mode 100644 java/ql/test/query-tests/security/CWE-312/android/backup/TestEmptyManifest/AndroidManifest.xml
 create mode 100644 java/ql/test/query-tests/security/CWE-312/android/backup/TestExplicitlyDisabled/AndroidManifest.xml
 create mode 100644 java/ql/test/query-tests/security/CWE-312/android/backup/TestExplicitlyEnabled/AndroidManifest.xml
 create mode 100644 java/ql/test/query-tests/security/CWE-312/android/backup/TestLibrary/AndroidManifest.xml
 create mode 100644 java/ql/test/query-tests/security/CWE-312/android/backup/TestMissing/AndroidManifest.xml
 create mode 100644 java/ql/test/query-tests/security/CWE-312/android/backup/Testbuild/AndroidManifest.xml

diff --git a/java/ql/test/query-tests/security/CWE-312/AndroidManifest.xml b/java/ql/test/query-tests/security/CWE-312/AndroidManifest.xml
index 8cf208d0a48..d8af1947bd7 100644
--- a/java/ql/test/query-tests/security/CWE-312/AndroidManifest.xml
+++ b/java/ql/test/query-tests/security/CWE-312/AndroidManifest.xml
@@ -4,7 +4,7 @@
     android:versionCode="1"
     android:versionName="0.1" >
 
-    <application android:allowBackup="true">
+    <application>
         <activity android:name=".CleartextStorageAndroidDatabaseTest"></activity>
         <activity android:name=".CleartextStorageAndroidFileSystemTest"></activity>
         <activity android:name=".CleartextStorageSharedPrefsTest"></activity>
diff --git a/java/ql/test/query-tests/security/CWE-312/AllowBackupEnabledTest.expected b/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.expected
similarity index 100%
rename from java/ql/test/query-tests/security/CWE-312/AllowBackupEnabledTest.expected
rename to java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.expected
diff --git a/java/ql/test/query-tests/security/CWE-312/AllowBackupEnabledTest.java b/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.java
similarity index 100%
rename from java/ql/test/query-tests/security/CWE-312/AllowBackupEnabledTest.java
rename to java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.java
diff --git a/java/ql/test/query-tests/security/CWE-312/AllowBackupEnabledTest.ql b/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.ql
similarity index 84%
rename from java/ql/test/query-tests/security/CWE-312/AllowBackupEnabledTest.ql
rename to java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.ql
index 604f50dffa7..2ec9c6a0cd8 100644
--- a/java/ql/test/query-tests/security/CWE-312/AllowBackupEnabledTest.ql
+++ b/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.ql
@@ -10,8 +10,7 @@ class AllowBackupEnabledTest extends InlineExpectationsTest {
   override predicate hasActualResult(Location location, string element, string tag, string value) {
     tag = "hasAllowedBackupEnabled" and
     exists(AndroidApplicationXmlElement androidAppElem |
-      androidAppElem.allowsBackup() and
-      not androidAppElem.getFile().(AndroidManifestXmlFile).isInBuildDirectory()
+      androidAppElem.allowsBackup()
     |
       androidAppElem.getAttribute("allowBackup").getLocation() = location and
       element = androidAppElem.getAttribute("debuggable").toString() and
diff --git a/java/ql/test/query-tests/security/CWE-312/android/backup/TestEmptyManifest/AndroidManifest.xml b/java/ql/test/query-tests/security/CWE-312/android/backup/TestEmptyManifest/AndroidManifest.xml
new file mode 100644
index 00000000000..306f3852be8
--- /dev/null
+++ b/java/ql/test/query-tests/security/CWE-312/android/backup/TestEmptyManifest/AndroidManifest.xml
@@ -0,0 +1,3 @@
+<?xml version="1.0" encoding="utf-8"?>
+<manifest xmlns:android="http://schemas.android.com/apk/res/android"
+    package="com.example.myapplication" />
diff --git a/java/ql/test/query-tests/security/CWE-312/android/backup/TestExplicitlyDisabled/AndroidManifest.xml b/java/ql/test/query-tests/security/CWE-312/android/backup/TestExplicitlyDisabled/AndroidManifest.xml
new file mode 100644
index 00000000000..5f35eb615d5
--- /dev/null
+++ b/java/ql/test/query-tests/security/CWE-312/android/backup/TestExplicitlyDisabled/AndroidManifest.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="utf-8"?>
+<manifest xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:tools="http://schemas.android.com/tools"
+    package="com.example.myapplication">
+
+    <!-- Safe: 'android:allowBackup' explicitly disabled --> <application
+        android:allowBackup="false"
+        android:dataExtractionRules="@xml/data_extraction_rules"
+        android:fullBackupContent="@xml/backup_rules"
+        android:icon="@mipmap/ic_launcher"
+        android:label="@string/app_name"
+        android:roundIcon="@mipmap/ic_launcher_round"
+        android:supportsRtl="true"
+        android:theme="@style/Theme.MyApplication"
+        tools:targetApi="31">
+        <activity
+            android:name=".MainActivity"
+            android:exported="true"
+            android:label="@string/app_name"
+            android:theme="@style/Theme.MyApplication.NoActionBar">
+            <intent-filter>
+                <action android:name="android.intent.action.MAIN" />
+
+                <category android:name="android.intent.category.LAUNCHER" />
+            </intent-filter>
+        </activity>
+    </application>
+
+</manifest>
diff --git a/java/ql/test/query-tests/security/CWE-312/android/backup/TestExplicitlyEnabled/AndroidManifest.xml b/java/ql/test/query-tests/security/CWE-312/android/backup/TestExplicitlyEnabled/AndroidManifest.xml
new file mode 100644
index 00000000000..959c14c8507
--- /dev/null
+++ b/java/ql/test/query-tests/security/CWE-312/android/backup/TestExplicitlyEnabled/AndroidManifest.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="utf-8"?>
+<manifest xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:tools="http://schemas.android.com/tools"
+    package="com.example.myapplication">
+
+    <!-- $ hasAllowBackupEnabled --> <application
+        android:allowBackup="true"
+        android:dataExtractionRules="@xml/data_extraction_rules"
+        android:fullBackupContent="@xml/backup_rules"
+        android:icon="@mipmap/ic_launcher"
+        android:label="@string/app_name"
+        android:roundIcon="@mipmap/ic_launcher_round"
+        android:supportsRtl="true"
+        android:theme="@style/Theme.MyApplication"
+        tools:targetApi="31">
+        <activity
+            android:name=".MainActivity"
+            android:exported="true"
+            android:label="@string/app_name"
+            android:theme="@style/Theme.MyApplication.NoActionBar">
+            <intent-filter>
+                <action android:name="android.intent.action.MAIN" />
+
+                <category android:name="android.intent.category.LAUNCHER" />
+            </intent-filter>
+        </activity>
+    </application>
+
+</manifest>
diff --git a/java/ql/test/query-tests/security/CWE-312/android/backup/TestLibrary/AndroidManifest.xml b/java/ql/test/query-tests/security/CWE-312/android/backup/TestLibrary/AndroidManifest.xml
new file mode 100644
index 00000000000..e83d18d59e9
--- /dev/null
+++ b/java/ql/test/query-tests/security/CWE-312/android/backup/TestLibrary/AndroidManifest.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<manifest xmlns:android="http://schemas.android.com/apk/res/android"
+    package="com.example.myapplication" >
+    <!-- Safe: application element does not provide the MAIN intent --> <application  android:supportsRtl="true">
+    </application>
+</manifest>
diff --git a/java/ql/test/query-tests/security/CWE-312/android/backup/TestMissing/AndroidManifest.xml b/java/ql/test/query-tests/security/CWE-312/android/backup/TestMissing/AndroidManifest.xml
new file mode 100644
index 00000000000..43a966ac28e
--- /dev/null
+++ b/java/ql/test/query-tests/security/CWE-312/android/backup/TestMissing/AndroidManifest.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="utf-8"?>
+<manifest xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:tools="http://schemas.android.com/tools"
+    package="com.example.myapplication">
+
+    <!-- $ hasAllowBackupEnabled --> <application
+        android:dataExtractionRules="@xml/data_extraction_rules"
+        android:fullBackupContent="@xml/backup_rules"
+        android:icon="@mipmap/ic_launcher"
+        android:label="@string/app_name"
+        android:roundIcon="@mipmap/ic_launcher_round"
+        android:supportsRtl="true"
+        android:theme="@style/Theme.MyApplication"
+        tools:targetApi="31">
+        <activity
+            android:name=".ItemDetailHostActivity"
+            android:exported="true"
+            android:label="@string/app_name"
+            android:resizeableActivity="true"
+            tools:targetApi="24">
+            <intent-filter>
+                <action android:name="android.intent.action.MAIN" />
+
+                <category android:name="android.intent.category.LAUNCHER" />
+            </intent-filter>
+        </activity>
+    </application>
+
+</manifest>
diff --git a/java/ql/test/query-tests/security/CWE-312/android/backup/Testbuild/AndroidManifest.xml b/java/ql/test/query-tests/security/CWE-312/android/backup/Testbuild/AndroidManifest.xml
new file mode 100644
index 00000000000..097e7ed2b51
--- /dev/null
+++ b/java/ql/test/query-tests/security/CWE-312/android/backup/Testbuild/AndroidManifest.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="utf-8"?>
+<manifest xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:tools="http://schemas.android.com/tools"
+    package="com.example.myapplication">
+
+    <!-- Safe: files in the build directory are ignored --> <application
+        android:allowBackup="true"
+        android:dataExtractionRules="@xml/data_extraction_rules"
+        android:fullBackupContent="@xml/backup_rules"
+        android:icon="@mipmap/ic_launcher"
+        android:label="@string/app_name"
+        android:roundIcon="@mipmap/ic_launcher_round"
+        android:supportsRtl="true"
+        android:theme="@style/Theme.MyApplication"
+        tools:targetApi="31">
+        <activity
+            android:name=".MainActivity"
+            android:exported="true"
+            android:label="@string/app_name"
+            android:theme="@style/Theme.MyApplication.NoActionBar">
+            <intent-filter>
+                <action android:name="android.intent.action.MAIN" />
+
+                <category android:name="android.intent.category.LAUNCHER" />
+            </intent-filter>
+        </activity>
+    </application>
+
+</manifest>

From c69a2be9767b012bfd578308406e8856bb7b5a35 Mon Sep 17 00:00:00 2001
From: Ed Minnix <egregius313@github.com>
Date: Wed, 7 Sep 2022 12:08:25 -0400
Subject: [PATCH 060/203] Moved allowBackup query logic to allowsBackup pred

---
 .../lib/semmle/code/xml/AndroidManifest.qll   | 22 ++++++++++++++-----
 .../CWE-312/AllowBackupAttributeEnabled.ql    | 12 +---------
 2 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/java/ql/lib/semmle/code/xml/AndroidManifest.qll b/java/ql/lib/semmle/code/xml/AndroidManifest.qll
index 0965025b969..f53da67a650 100644
--- a/java/ql/lib/semmle/code/xml/AndroidManifest.qll
+++ b/java/ql/lib/semmle/code/xml/AndroidManifest.qll
@@ -79,10 +79,20 @@ class AndroidApplicationXmlElement extends XmlElement {
    * https://developer.android.com/guide/topics/data/autobackup
    */
   predicate allowsBackup() {
-    not exists(AndroidXmlAttribute attr |
-      this.getAnAttribute() = attr and
-      attr.getName() = "allowBackup" and
-      attr.getValue() = "false"
+    not this.getFile().(AndroidManifestXmlFile).isInBuildDirectory() and
+    (
+      // explicitly sets android:allowBackup="true"
+      this.allowsBackupExplicitly()
+      or
+      // Manifest providing the main intent for an application, and does not explicitly
+      // disallow the allowBackup attribute
+      this.providesMainIntent() and
+      // Check that android:allowBackup="false" is not present
+      not exists(AndroidXmlAttribute attr |
+        this.getAnAttribute() = attr and
+        attr.getName() = "allowBackup" and
+        attr.getValue() = "false"
+      )
     )
   }
 
@@ -91,7 +101,7 @@ class AndroidApplicationXmlElement extends XmlElement {
    *
    * https://developer.android.com/guide/topics/data/autobackup
    */
-  predicate allowsBackupExplicitly() {
+  private predicate allowsBackupExplicitly() {
     exists(AndroidXmlAttribute attr |
       this.getAnAttribute() = attr and
       attr.getName() = "allowBackup" and
@@ -103,7 +113,7 @@ class AndroidApplicationXmlElement extends XmlElement {
    * Holds if the application element contains a child element which provides the
    * `android.intent.action.MAIN` intent.
    */
-  predicate providesMainIntent() {
+  private predicate providesMainIntent() {
     exists(AndroidActivityXmlElement activity |
       activity = this.getAChild() and
       exists(AndroidIntentFilterXmlElement intentFilter |
diff --git a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
index 97f4ec82982..89421289765 100644
--- a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
+++ b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
@@ -14,15 +14,5 @@ import java
 import semmle.code.xml.AndroidManifest
 
 from AndroidApplicationXmlElement androidAppElem
-where
-  not androidAppElem.getFile().(AndroidManifestXmlFile).isInBuildDirectory() and
-  (
-    // explicitly sets android:allowBackup=true
-    androidAppElem.allowsBackupExplicitly()
-    or
-    // Manifest providing the main intent for an application, and does not explicitly
-    // disallow the allowBackup attribute
-    androidAppElem.providesMainIntent() and
-    androidAppElem.allowsBackup()
-  )
+where androidAppElem.allowsBackup()
 select androidAppElem, "The 'android:allowBackup' attribute is enabled."

From 09b723fc6d345dff3343bc31759f0b05bc2a5928 Mon Sep 17 00:00:00 2001
From: Ed Minnix <egregius313@github.com>
Date: Wed, 7 Sep 2022 13:30:19 -0400
Subject: [PATCH 061/203] Formatting fixes for allowBackup tests

---
 .../security/CWE-312/android/backup/AllowBackupEnabledTest.ql | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.ql b/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.ql
index 2ec9c6a0cd8..c79276402fe 100644
--- a/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.ql
+++ b/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.ql
@@ -9,9 +9,7 @@ class AllowBackupEnabledTest extends InlineExpectationsTest {
 
   override predicate hasActualResult(Location location, string element, string tag, string value) {
     tag = "hasAllowedBackupEnabled" and
-    exists(AndroidApplicationXmlElement androidAppElem |
-      androidAppElem.allowsBackup()
-    |
+    exists(AndroidApplicationXmlElement androidAppElem | androidAppElem.allowsBackup() |
       androidAppElem.getAttribute("allowBackup").getLocation() = location and
       element = androidAppElem.getAttribute("debuggable").toString() and
       value = ""

From d18ad665b61f86cb002bccccd0727c17c97b161b Mon Sep 17 00:00:00 2001
From: Alex Denisov <alexdenisov@github.com>
Date: Fri, 12 Aug 2022 17:20:28 +0200
Subject: [PATCH 062/203] Swift: CWE-757: Insecure TLS configuration

---
 .../Security/CWE-757/InsecureTLS.qhelp        |  29 +++
 .../queries/Security/CWE-757/InsecureTLS.ql   |  55 ++++++
 .../queries/Security/CWE-757/SecureTLS.swift  |  12 ++
 .../Security/CWE-757/InsecureTLS.expected     |  86 +++++++++
 .../Security/CWE-757/InsecureTLS.qlref        |   1 +
 .../Security/CWE-757/InsecureTLS.swift        | 173 ++++++++++++++++++
 6 files changed, 356 insertions(+)
 create mode 100644 swift/ql/src/queries/Security/CWE-757/InsecureTLS.qhelp
 create mode 100644 swift/ql/src/queries/Security/CWE-757/InsecureTLS.ql
 create mode 100644 swift/ql/src/queries/Security/CWE-757/SecureTLS.swift
 create mode 100644 swift/ql/test/query-tests/Security/CWE-757/InsecureTLS.expected
 create mode 100644 swift/ql/test/query-tests/Security/CWE-757/InsecureTLS.qlref
 create mode 100644 swift/ql/test/query-tests/Security/CWE-757/InsecureTLS.swift

diff --git a/swift/ql/src/queries/Security/CWE-757/InsecureTLS.qhelp b/swift/ql/src/queries/Security/CWE-757/InsecureTLS.qhelp
new file mode 100644
index 00000000000..673d17b7b23
--- /dev/null
+++ b/swift/ql/src/queries/Security/CWE-757/InsecureTLS.qhelp
@@ -0,0 +1,29 @@
+<!DOCTYPE qhelp PUBLIC
+  "-//Semmle//qhelp//EN"
+  "qhelp.dtd">
+<qhelp>
+<overview>
+<p>TLS v1.0 and v1.1 versions are known to be vulnerable.</p>
+</overview>
+<recommendation>
+
+<p>Use <code>tls_protocol_version_t.TLSv12</code> or <code>tls_protocol_version_t.TLSv13</code> when configuring <code>URLSession</code>.</p>
+
+</recommendation>
+<example>
+
+<p>Consider specifying newer <code>tls_protocol_version_t</code> explicitly, or omitting it completely as the OS will use secure defaults.</p>
+
+<sample src="SecureTLS.swift" />
+
+</example>
+<references>
+
+<li>
+  <a href="https://support.apple.com/en-gb/guide/security/sec100a75d12/web">Apple Platform Security - TLS security</a>
+  <a href="https://developer.apple.com/documentation/security/preventing_insecure_network_connections">Preventing Insecure Network Connections</a>
+  <a href="https://cwe.mitre.org/data/definitions/757.html">CWE-757: Selection of Less-Secure Algorithm During Negotiation</a>
+</li>
+
+</references>
+</qhelp>
diff --git a/swift/ql/src/queries/Security/CWE-757/InsecureTLS.ql b/swift/ql/src/queries/Security/CWE-757/InsecureTLS.ql
new file mode 100644
index 00000000000..3f0c1511136
--- /dev/null
+++ b/swift/ql/src/queries/Security/CWE-757/InsecureTLS.ql
@@ -0,0 +1,55 @@
+/**
+ * @name Insecure TLS configuration
+ * @description TLS v1.0 and v1.1 versions are known to be vulnerable.. TLS v1.2 or v1.3 should be used instead.
+ * @kind path-problem
+ * @problem.severity error
+ * @security-severity TODO
+ * @precision high
+ * @id swift/insecure-tls
+ * @tags security
+ *       external/cwe/cwe-757
+ */
+
+import swift
+import codeql.swift.dataflow.DataFlow
+import codeql.swift.dataflow.TaintTracking
+import codeql.swift.dataflow.FlowSources
+import DataFlow::PathGraph
+
+/**
+ * A taint config to detect insecure configuration of `NSURLSessionConfiguration`
+ */
+class InsecureTlsConfig extends TaintTracking::Configuration {
+  InsecureTlsConfig() { this = "InsecureTLSConfig" }
+
+  /**
+   * Holds for enum values that represent an insecure version of TLS
+   */
+  override predicate isSource(DataFlow::Node node) {
+    exists(MethodRefExpr expr, EnumElementDecl enum, string enumName |
+      node.asExpr() = expr and
+      expr.getMember() = enum and
+      enumName = enum.getName() and
+      enumName in ["TLSv10", "TLSv11", "tlsProtocol10", "tlsProtocol11"]
+    )
+  }
+
+  /**
+   * Holds for assignment of TLS-related properties of `NSURLSessionConfiguration`
+   */
+  override predicate isSink(DataFlow::Node node) {
+    exists(AssignExpr assign, MemberRefExpr member, string memberName |
+      assign.getSource() = node.asExpr() and
+      assign.getDest() = member and
+      memberName = member.getMember().(ConcreteVarDecl).getName() and
+      memberName in [
+          "tlsMinimumSupportedProtocolVersion", "tlsMinimumSupportedProtocol",
+          "tlsMaximumSupportedProtocolVersion", "tlsMaximumSupportedProtocol"
+        ]
+    )
+  }
+}
+
+from InsecureTlsConfig config, DataFlow::PathNode sourceNode, DataFlow::PathNode sinkNode
+where config.hasFlowPath(sourceNode, sinkNode)
+select sinkNode.getNode(), sourceNode, sinkNode, "Insecure TLS configuration"
diff --git a/swift/ql/src/queries/Security/CWE-757/SecureTLS.swift b/swift/ql/src/queries/Security/CWE-757/SecureTLS.swift
new file mode 100644
index 00000000000..0254638e824
--- /dev/null
+++ b/swift/ql/src/queries/Security/CWE-757/SecureTLS.swift
@@ -0,0 +1,12 @@
+// Set TLS version explicitly
+func createURLSession() -> URLSession {
+  let config = URLSessionConfiguration.default
+  config.tlsMinimumSupportedProtocolVersion = tls_protocol_version_t.TLSv13
+  return URLSession(configuration: config)
+}
+
+// Use the secure OS defaults
+func createURLSession() -> URLSession {
+  let config = URLSessionConfiguration.default
+  return URLSession(configuration: config)
+}
diff --git a/swift/ql/test/query-tests/Security/CWE-757/InsecureTLS.expected b/swift/ql/test/query-tests/Security/CWE-757/InsecureTLS.expected
new file mode 100644
index 00000000000..b42d6fbedf3
--- /dev/null
+++ b/swift/ql/test/query-tests/Security/CWE-757/InsecureTLS.expected
@@ -0,0 +1,86 @@
+edges
+| InsecureTLS.swift:19:7:19:7 | value :  | file://:0:0:0:0 | value |
+| InsecureTLS.swift:20:7:20:7 | value :  | file://:0:0:0:0 | value |
+| InsecureTLS.swift:22:7:22:7 | value :  | file://:0:0:0:0 | value |
+| InsecureTLS.swift:23:7:23:7 | value :  | file://:0:0:0:0 | value |
+| InsecureTLS.swift:40:47:40:70 | .TLSv10 :  | InsecureTLS.swift:19:7:19:7 | value :  |
+| InsecureTLS.swift:45:47:45:70 | .TLSv11 :  | InsecureTLS.swift:19:7:19:7 | value :  |
+| InsecureTLS.swift:57:47:57:70 | .TLSv10 :  | InsecureTLS.swift:20:7:20:7 | value :  |
+| InsecureTLS.swift:64:40:64:52 | .tlsProtocol10 :  | InsecureTLS.swift:22:7:22:7 | value :  |
+| InsecureTLS.swift:76:40:76:52 | .tlsProtocol10 :  | InsecureTLS.swift:23:7:23:7 | value :  |
+| InsecureTLS.swift:102:10:102:33 | .TLSv10 :  | InsecureTLS.swift:111:47:111:64 | call to getBadTLSVersion() |
+| InsecureTLS.swift:102:10:102:33 | .TLSv10 :  | InsecureTLS.swift:111:47:111:64 | call to getBadTLSVersion() :  |
+| InsecureTLS.swift:111:47:111:64 | call to getBadTLSVersion() :  | InsecureTLS.swift:19:7:19:7 | value :  |
+| InsecureTLS.swift:121:55:121:66 | version :  | InsecureTLS.swift:122:47:122:47 | version |
+| InsecureTLS.swift:121:55:121:66 | version :  | InsecureTLS.swift:122:47:122:47 | version :  |
+| InsecureTLS.swift:122:47:122:47 | version :  | InsecureTLS.swift:19:7:19:7 | value :  |
+| InsecureTLS.swift:127:25:127:48 | .TLSv11 :  | InsecureTLS.swift:121:55:121:66 | version :  |
+| InsecureTLS.swift:158:7:158:7 | self [TLSVersion] :  | file://:0:0:0:0 | self [TLSVersion] :  |
+| InsecureTLS.swift:158:7:158:7 | value :  | file://:0:0:0:0 | value :  |
+| InsecureTLS.swift:163:3:163:3 | [post] def [TLSVersion] :  | InsecureTLS.swift:165:47:165:47 | def [TLSVersion] :  |
+| InsecureTLS.swift:163:20:163:43 | .TLSv10 :  | InsecureTLS.swift:158:7:158:7 | value :  |
+| InsecureTLS.swift:163:20:163:43 | .TLSv10 :  | InsecureTLS.swift:163:3:163:3 | [post] def [TLSVersion] :  |
+| InsecureTLS.swift:165:47:165:47 | def [TLSVersion] :  | InsecureTLS.swift:158:7:158:7 | self [TLSVersion] :  |
+| InsecureTLS.swift:165:47:165:47 | def [TLSVersion] :  | InsecureTLS.swift:165:47:165:51 | .TLSVersion |
+| InsecureTLS.swift:165:47:165:47 | def [TLSVersion] :  | InsecureTLS.swift:165:47:165:51 | .TLSVersion :  |
+| InsecureTLS.swift:165:47:165:51 | .TLSVersion :  | InsecureTLS.swift:19:7:19:7 | value :  |
+| file://:0:0:0:0 | self [TLSVersion] :  | file://:0:0:0:0 | .TLSVersion :  |
+| file://:0:0:0:0 | value :  | file://:0:0:0:0 | [post] self [TLSVersion] :  |
+nodes
+| InsecureTLS.swift:19:7:19:7 | value :  | semmle.label | value :  |
+| InsecureTLS.swift:20:7:20:7 | value :  | semmle.label | value :  |
+| InsecureTLS.swift:22:7:22:7 | value :  | semmle.label | value :  |
+| InsecureTLS.swift:23:7:23:7 | value :  | semmle.label | value :  |
+| InsecureTLS.swift:40:47:40:70 | .TLSv10 | semmle.label | .TLSv10 |
+| InsecureTLS.swift:40:47:40:70 | .TLSv10 :  | semmle.label | .TLSv10 :  |
+| InsecureTLS.swift:45:47:45:70 | .TLSv11 | semmle.label | .TLSv11 |
+| InsecureTLS.swift:45:47:45:70 | .TLSv11 :  | semmle.label | .TLSv11 :  |
+| InsecureTLS.swift:57:47:57:70 | .TLSv10 | semmle.label | .TLSv10 |
+| InsecureTLS.swift:57:47:57:70 | .TLSv10 :  | semmle.label | .TLSv10 :  |
+| InsecureTLS.swift:64:40:64:52 | .tlsProtocol10 | semmle.label | .tlsProtocol10 |
+| InsecureTLS.swift:64:40:64:52 | .tlsProtocol10 :  | semmle.label | .tlsProtocol10 :  |
+| InsecureTLS.swift:76:40:76:52 | .tlsProtocol10 | semmle.label | .tlsProtocol10 |
+| InsecureTLS.swift:76:40:76:52 | .tlsProtocol10 :  | semmle.label | .tlsProtocol10 :  |
+| InsecureTLS.swift:102:10:102:33 | .TLSv10 :  | semmle.label | .TLSv10 :  |
+| InsecureTLS.swift:111:47:111:64 | call to getBadTLSVersion() | semmle.label | call to getBadTLSVersion() |
+| InsecureTLS.swift:111:47:111:64 | call to getBadTLSVersion() :  | semmle.label | call to getBadTLSVersion() :  |
+| InsecureTLS.swift:121:55:121:66 | version :  | semmle.label | version :  |
+| InsecureTLS.swift:122:47:122:47 | version | semmle.label | version |
+| InsecureTLS.swift:122:47:122:47 | version :  | semmle.label | version :  |
+| InsecureTLS.swift:127:25:127:48 | .TLSv11 :  | semmle.label | .TLSv11 :  |
+| InsecureTLS.swift:158:7:158:7 | self [TLSVersion] :  | semmle.label | self [TLSVersion] :  |
+| InsecureTLS.swift:158:7:158:7 | value :  | semmle.label | value :  |
+| InsecureTLS.swift:163:3:163:3 | [post] def [TLSVersion] :  | semmle.label | [post] def [TLSVersion] :  |
+| InsecureTLS.swift:163:20:163:43 | .TLSv10 :  | semmle.label | .TLSv10 :  |
+| InsecureTLS.swift:165:47:165:47 | def [TLSVersion] :  | semmle.label | def [TLSVersion] :  |
+| InsecureTLS.swift:165:47:165:51 | .TLSVersion | semmle.label | .TLSVersion |
+| InsecureTLS.swift:165:47:165:51 | .TLSVersion :  | semmle.label | .TLSVersion :  |
+| file://:0:0:0:0 | .TLSVersion :  | semmle.label | .TLSVersion :  |
+| file://:0:0:0:0 | [post] self [TLSVersion] :  | semmle.label | [post] self [TLSVersion] :  |
+| file://:0:0:0:0 | self [TLSVersion] :  | semmle.label | self [TLSVersion] :  |
+| file://:0:0:0:0 | value | semmle.label | value |
+| file://:0:0:0:0 | value | semmle.label | value |
+| file://:0:0:0:0 | value | semmle.label | value |
+| file://:0:0:0:0 | value | semmle.label | value |
+| file://:0:0:0:0 | value :  | semmle.label | value :  |
+subpaths
+| InsecureTLS.swift:163:20:163:43 | .TLSv10 :  | InsecureTLS.swift:158:7:158:7 | value :  | file://:0:0:0:0 | [post] self [TLSVersion] :  | InsecureTLS.swift:163:3:163:3 | [post] def [TLSVersion] :  |
+| InsecureTLS.swift:165:47:165:47 | def [TLSVersion] :  | InsecureTLS.swift:158:7:158:7 | self [TLSVersion] :  | file://:0:0:0:0 | .TLSVersion :  | InsecureTLS.swift:165:47:165:51 | .TLSVersion |
+| InsecureTLS.swift:165:47:165:47 | def [TLSVersion] :  | InsecureTLS.swift:158:7:158:7 | self [TLSVersion] :  | file://:0:0:0:0 | .TLSVersion :  | InsecureTLS.swift:165:47:165:51 | .TLSVersion :  |
+#select
+| InsecureTLS.swift:40:47:40:70 | .TLSv10 | InsecureTLS.swift:40:47:40:70 | .TLSv10 | InsecureTLS.swift:40:47:40:70 | .TLSv10 | Insecure TLS configuration |
+| InsecureTLS.swift:45:47:45:70 | .TLSv11 | InsecureTLS.swift:45:47:45:70 | .TLSv11 | InsecureTLS.swift:45:47:45:70 | .TLSv11 | Insecure TLS configuration |
+| InsecureTLS.swift:57:47:57:70 | .TLSv10 | InsecureTLS.swift:57:47:57:70 | .TLSv10 | InsecureTLS.swift:57:47:57:70 | .TLSv10 | Insecure TLS configuration |
+| InsecureTLS.swift:64:40:64:52 | .tlsProtocol10 | InsecureTLS.swift:64:40:64:52 | .tlsProtocol10 | InsecureTLS.swift:64:40:64:52 | .tlsProtocol10 | Insecure TLS configuration |
+| InsecureTLS.swift:76:40:76:52 | .tlsProtocol10 | InsecureTLS.swift:76:40:76:52 | .tlsProtocol10 | InsecureTLS.swift:76:40:76:52 | .tlsProtocol10 | Insecure TLS configuration |
+| InsecureTLS.swift:111:47:111:64 | call to getBadTLSVersion() | InsecureTLS.swift:102:10:102:33 | .TLSv10 :  | InsecureTLS.swift:111:47:111:64 | call to getBadTLSVersion() | Insecure TLS configuration |
+| InsecureTLS.swift:122:47:122:47 | version | InsecureTLS.swift:127:25:127:48 | .TLSv11 :  | InsecureTLS.swift:122:47:122:47 | version | Insecure TLS configuration |
+| InsecureTLS.swift:165:47:165:51 | .TLSVersion | InsecureTLS.swift:163:20:163:43 | .TLSv10 :  | InsecureTLS.swift:165:47:165:51 | .TLSVersion | Insecure TLS configuration |
+| file://:0:0:0:0 | value | InsecureTLS.swift:40:47:40:70 | .TLSv10 :  | file://:0:0:0:0 | value | Insecure TLS configuration |
+| file://:0:0:0:0 | value | InsecureTLS.swift:45:47:45:70 | .TLSv11 :  | file://:0:0:0:0 | value | Insecure TLS configuration |
+| file://:0:0:0:0 | value | InsecureTLS.swift:57:47:57:70 | .TLSv10 :  | file://:0:0:0:0 | value | Insecure TLS configuration |
+| file://:0:0:0:0 | value | InsecureTLS.swift:64:40:64:52 | .tlsProtocol10 :  | file://:0:0:0:0 | value | Insecure TLS configuration |
+| file://:0:0:0:0 | value | InsecureTLS.swift:76:40:76:52 | .tlsProtocol10 :  | file://:0:0:0:0 | value | Insecure TLS configuration |
+| file://:0:0:0:0 | value | InsecureTLS.swift:102:10:102:33 | .TLSv10 :  | file://:0:0:0:0 | value | Insecure TLS configuration |
+| file://:0:0:0:0 | value | InsecureTLS.swift:127:25:127:48 | .TLSv11 :  | file://:0:0:0:0 | value | Insecure TLS configuration |
+| file://:0:0:0:0 | value | InsecureTLS.swift:163:20:163:43 | .TLSv10 :  | file://:0:0:0:0 | value | Insecure TLS configuration |
diff --git a/swift/ql/test/query-tests/Security/CWE-757/InsecureTLS.qlref b/swift/ql/test/query-tests/Security/CWE-757/InsecureTLS.qlref
new file mode 100644
index 00000000000..af89770b496
--- /dev/null
+++ b/swift/ql/test/query-tests/Security/CWE-757/InsecureTLS.qlref
@@ -0,0 +1 @@
+queries/Security/CWE-757/InsecureTLS.ql
diff --git a/swift/ql/test/query-tests/Security/CWE-757/InsecureTLS.swift b/swift/ql/test/query-tests/Security/CWE-757/InsecureTLS.swift
new file mode 100644
index 00000000000..d06c9614ac3
--- /dev/null
+++ b/swift/ql/test/query-tests/Security/CWE-757/InsecureTLS.swift
@@ -0,0 +1,173 @@
+// Stubs
+
+enum tls_protocol_version_t : UInt16 {
+  case TLSv10
+  case TLSv11
+  case TLSv12
+  case TLSv13
+}
+
+enum SSLProtocol {
+  case tlsProtocol10
+  case tlsProtocol11
+  case tlsProtocol12
+  case tlsProtocol13
+}
+
+class URLSessionConfiguration {
+  init() {}
+  var tlsMinimumSupportedProtocolVersion: tls_protocol_version_t = tls_protocol_version_t.TLSv12
+  var tlsMaximumSupportedProtocolVersion: tls_protocol_version_t = tls_protocol_version_t.TLSv13
+
+  var tlsMinimumSupportedProtocol: SSLProtocol = SSLProtocol.tlsProtocol12
+  var tlsMaximumSupportedProtocol: SSLProtocol = SSLProtocol.tlsProtocol13
+}
+
+/// tlsMinimumSupportedProtocolVersion
+
+func case_0() {
+  let config = URLSessionConfiguration()
+  config.tlsMinimumSupportedProtocolVersion = tls_protocol_version_t.TLSv12 // GOOD
+}
+
+func case_1() {
+  let config = URLSessionConfiguration()
+  config.tlsMinimumSupportedProtocolVersion = tls_protocol_version_t.TLSv13 // GOOD
+}
+
+func case_2() {
+  let config = URLSessionConfiguration()
+  config.tlsMinimumSupportedProtocolVersion = tls_protocol_version_t.TLSv10 // BAD
+}
+
+func case_3() {
+  let config = URLSessionConfiguration()
+  config.tlsMinimumSupportedProtocolVersion = tls_protocol_version_t.TLSv11 // BAD
+}
+
+/// tlsMaximumSupportedProtocolVersion
+
+func case_4() {
+  let config = URLSessionConfiguration()
+  config.tlsMaximumSupportedProtocolVersion = tls_protocol_version_t.TLSv12 // GOOD
+}
+
+func case_5() {
+  let config = URLSessionConfiguration()
+  config.tlsMaximumSupportedProtocolVersion = tls_protocol_version_t.TLSv10 // BAD
+}
+
+/// tlsMinimumSupportedProtocol
+
+func case_6() {
+  let config = URLSessionConfiguration()
+  config.tlsMinimumSupportedProtocol = SSLProtocol.tlsProtocol10 // BAD
+}
+
+func case_7() {
+  let config = URLSessionConfiguration()
+  config.tlsMinimumSupportedProtocol = SSLProtocol.tlsProtocol12 // GOOD
+}
+
+/// tlsMaximumSupportedProtocol
+
+func case_8() {
+  let config = URLSessionConfiguration()
+  config.tlsMaximumSupportedProtocol = SSLProtocol.tlsProtocol10 // BAD
+}
+
+func case_9() {
+  let config = URLSessionConfiguration()
+  config.tlsMaximumSupportedProtocol = SSLProtocol.tlsProtocol12 // GOOD
+}
+
+/// Indirect assignment (global vars)
+
+let badGlobalVersion = tls_protocol_version_t.TLSv10
+let goodGlobalVersion = tls_protocol_version_t.TLSv12
+
+func case_10() {
+  let config = URLSessionConfiguration()
+  config.tlsMinimumSupportedProtocolVersion = badGlobalVersion // BAD [not detected]
+}
+
+func case_11() {
+  let config = URLSessionConfiguration()
+  config.tlsMinimumSupportedProtocolVersion = goodGlobalVersion // GOOD
+}
+
+/// Indirect assignment (function calls)
+
+func getBadTLSVersion() -> tls_protocol_version_t {
+  return tls_protocol_version_t.TLSv10
+}
+
+func getGoodTLSVersion() -> tls_protocol_version_t {
+  return tls_protocol_version_t.TLSv13
+}
+
+func case_12() {
+  let config = URLSessionConfiguration()
+  config.tlsMinimumSupportedProtocolVersion = getBadTLSVersion() // BAD
+}
+
+func case_13() {
+  let config = URLSessionConfiguration()
+  config.tlsMinimumSupportedProtocolVersion = getGoodTLSVersion() // GOOD
+}
+
+/// Indirect assignment (via call arguments)
+
+func setTLSVersion(_ config: URLSessionConfiguration, _ version: tls_protocol_version_t) {
+  config.tlsMinimumSupportedProtocolVersion = version
+}
+
+func case_14() {
+  let config = URLSessionConfiguration()
+  setTLSVersion(config, tls_protocol_version_t.TLSv11) // BAD
+}
+
+func case_15() {
+  let config = URLSessionConfiguration()
+  setTLSVersion(config, tls_protocol_version_t.TLSv13) // GOOD
+}
+
+/// Indirect assignment (via external entity)
+
+struct BadDefault {
+  let TLSVersion: tls_protocol_version_t = tls_protocol_version_t.TLSv11
+}
+
+func case_16() {
+  let def = BadDefault()
+  let config = URLSessionConfiguration()
+  config.tlsMinimumSupportedProtocolVersion = def.TLSVersion // BAD [not detected]
+}
+
+struct GoodDefault {
+  let TLSVersion: tls_protocol_version_t = tls_protocol_version_t.TLSv12
+}
+
+func case_17() {
+  let def = GoodDefault()
+  let config = URLSessionConfiguration()
+  config.tlsMinimumSupportedProtocolVersion = def.TLSVersion // GOOD
+}
+
+struct VarDefault {
+  var TLSVersion: tls_protocol_version_t = tls_protocol_version_t.TLSv12
+}
+
+func case_18() {
+  var def = VarDefault()
+  def.TLSVersion = tls_protocol_version_t.TLSv10
+  let config = URLSessionConfiguration()
+  config.tlsMinimumSupportedProtocolVersion = def.TLSVersion // BAD
+}
+
+func case_19() {
+  var def = VarDefault()
+  def.TLSVersion = tls_protocol_version_t.TLSv13
+  let config = URLSessionConfiguration()
+  config.tlsMinimumSupportedProtocolVersion = def.TLSVersion // GOOD
+}

From d455a557be2d3348ed20b7ab2771f2123b05002d Mon Sep 17 00:00:00 2001
From: Alex Denisov <alexdenisov@github.com>
Date: Thu, 8 Sep 2022 10:31:23 +0200
Subject: [PATCH 063/203] Swift: CWE-757: update docs and user facing text

---
 .../Security/CWE-757/InsecureTLS.qhelp        |  3 +-
 .../queries/Security/CWE-757/InsecureTLS.ql   |  4 +--
 .../Security/CWE-757/InsecureTLS.expected     | 32 +++++++++----------
 3 files changed, 19 insertions(+), 20 deletions(-)

diff --git a/swift/ql/src/queries/Security/CWE-757/InsecureTLS.qhelp b/swift/ql/src/queries/Security/CWE-757/InsecureTLS.qhelp
index 673d17b7b23..b0450580131 100644
--- a/swift/ql/src/queries/Security/CWE-757/InsecureTLS.qhelp
+++ b/swift/ql/src/queries/Security/CWE-757/InsecureTLS.qhelp
@@ -12,7 +12,7 @@
 </recommendation>
 <example>
 
-<p>Consider specifying newer <code>tls_protocol_version_t</code> explicitly, or omitting it completely as the OS will use secure defaults.</p>
+<p>Specify newer <code>tls_protocol_version_t</code> explicitly, or omit it completely as the OS will use secure defaults.</p>
 
 <sample src="SecureTLS.swift" />
 
@@ -22,7 +22,6 @@
 <li>
   <a href="https://support.apple.com/en-gb/guide/security/sec100a75d12/web">Apple Platform Security - TLS security</a>
   <a href="https://developer.apple.com/documentation/security/preventing_insecure_network_connections">Preventing Insecure Network Connections</a>
-  <a href="https://cwe.mitre.org/data/definitions/757.html">CWE-757: Selection of Less-Secure Algorithm During Negotiation</a>
 </li>
 
 </references>
diff --git a/swift/ql/src/queries/Security/CWE-757/InsecureTLS.ql b/swift/ql/src/queries/Security/CWE-757/InsecureTLS.ql
index 3f0c1511136..91bcf61c337 100644
--- a/swift/ql/src/queries/Security/CWE-757/InsecureTLS.ql
+++ b/swift/ql/src/queries/Security/CWE-757/InsecureTLS.ql
@@ -1,6 +1,6 @@
 /**
  * @name Insecure TLS configuration
- * @description TLS v1.0 and v1.1 versions are known to be vulnerable.. TLS v1.2 or v1.3 should be used instead.
+ * @description TLS v1.0 and v1.1 versions are known to be vulnerable. TLS v1.2 or v1.3 should be used instead.
  * @kind path-problem
  * @problem.severity error
  * @security-severity TODO
@@ -52,4 +52,4 @@ class InsecureTlsConfig extends TaintTracking::Configuration {
 
 from InsecureTlsConfig config, DataFlow::PathNode sourceNode, DataFlow::PathNode sinkNode
 where config.hasFlowPath(sourceNode, sinkNode)
-select sinkNode.getNode(), sourceNode, sinkNode, "Insecure TLS configuration"
+select sinkNode.getNode(), sourceNode, sinkNode, "This TLS configuration is insecure."
diff --git a/swift/ql/test/query-tests/Security/CWE-757/InsecureTLS.expected b/swift/ql/test/query-tests/Security/CWE-757/InsecureTLS.expected
index b42d6fbedf3..c6d2599be5e 100644
--- a/swift/ql/test/query-tests/Security/CWE-757/InsecureTLS.expected
+++ b/swift/ql/test/query-tests/Security/CWE-757/InsecureTLS.expected
@@ -68,19 +68,19 @@ subpaths
 | InsecureTLS.swift:165:47:165:47 | def [TLSVersion] :  | InsecureTLS.swift:158:7:158:7 | self [TLSVersion] :  | file://:0:0:0:0 | .TLSVersion :  | InsecureTLS.swift:165:47:165:51 | .TLSVersion |
 | InsecureTLS.swift:165:47:165:47 | def [TLSVersion] :  | InsecureTLS.swift:158:7:158:7 | self [TLSVersion] :  | file://:0:0:0:0 | .TLSVersion :  | InsecureTLS.swift:165:47:165:51 | .TLSVersion :  |
 #select
-| InsecureTLS.swift:40:47:40:70 | .TLSv10 | InsecureTLS.swift:40:47:40:70 | .TLSv10 | InsecureTLS.swift:40:47:40:70 | .TLSv10 | Insecure TLS configuration |
-| InsecureTLS.swift:45:47:45:70 | .TLSv11 | InsecureTLS.swift:45:47:45:70 | .TLSv11 | InsecureTLS.swift:45:47:45:70 | .TLSv11 | Insecure TLS configuration |
-| InsecureTLS.swift:57:47:57:70 | .TLSv10 | InsecureTLS.swift:57:47:57:70 | .TLSv10 | InsecureTLS.swift:57:47:57:70 | .TLSv10 | Insecure TLS configuration |
-| InsecureTLS.swift:64:40:64:52 | .tlsProtocol10 | InsecureTLS.swift:64:40:64:52 | .tlsProtocol10 | InsecureTLS.swift:64:40:64:52 | .tlsProtocol10 | Insecure TLS configuration |
-| InsecureTLS.swift:76:40:76:52 | .tlsProtocol10 | InsecureTLS.swift:76:40:76:52 | .tlsProtocol10 | InsecureTLS.swift:76:40:76:52 | .tlsProtocol10 | Insecure TLS configuration |
-| InsecureTLS.swift:111:47:111:64 | call to getBadTLSVersion() | InsecureTLS.swift:102:10:102:33 | .TLSv10 :  | InsecureTLS.swift:111:47:111:64 | call to getBadTLSVersion() | Insecure TLS configuration |
-| InsecureTLS.swift:122:47:122:47 | version | InsecureTLS.swift:127:25:127:48 | .TLSv11 :  | InsecureTLS.swift:122:47:122:47 | version | Insecure TLS configuration |
-| InsecureTLS.swift:165:47:165:51 | .TLSVersion | InsecureTLS.swift:163:20:163:43 | .TLSv10 :  | InsecureTLS.swift:165:47:165:51 | .TLSVersion | Insecure TLS configuration |
-| file://:0:0:0:0 | value | InsecureTLS.swift:40:47:40:70 | .TLSv10 :  | file://:0:0:0:0 | value | Insecure TLS configuration |
-| file://:0:0:0:0 | value | InsecureTLS.swift:45:47:45:70 | .TLSv11 :  | file://:0:0:0:0 | value | Insecure TLS configuration |
-| file://:0:0:0:0 | value | InsecureTLS.swift:57:47:57:70 | .TLSv10 :  | file://:0:0:0:0 | value | Insecure TLS configuration |
-| file://:0:0:0:0 | value | InsecureTLS.swift:64:40:64:52 | .tlsProtocol10 :  | file://:0:0:0:0 | value | Insecure TLS configuration |
-| file://:0:0:0:0 | value | InsecureTLS.swift:76:40:76:52 | .tlsProtocol10 :  | file://:0:0:0:0 | value | Insecure TLS configuration |
-| file://:0:0:0:0 | value | InsecureTLS.swift:102:10:102:33 | .TLSv10 :  | file://:0:0:0:0 | value | Insecure TLS configuration |
-| file://:0:0:0:0 | value | InsecureTLS.swift:127:25:127:48 | .TLSv11 :  | file://:0:0:0:0 | value | Insecure TLS configuration |
-| file://:0:0:0:0 | value | InsecureTLS.swift:163:20:163:43 | .TLSv10 :  | file://:0:0:0:0 | value | Insecure TLS configuration |
+| InsecureTLS.swift:40:47:40:70 | .TLSv10 | InsecureTLS.swift:40:47:40:70 | .TLSv10 | InsecureTLS.swift:40:47:40:70 | .TLSv10 | This TLS configuration is insecure. |
+| InsecureTLS.swift:45:47:45:70 | .TLSv11 | InsecureTLS.swift:45:47:45:70 | .TLSv11 | InsecureTLS.swift:45:47:45:70 | .TLSv11 | This TLS configuration is insecure. |
+| InsecureTLS.swift:57:47:57:70 | .TLSv10 | InsecureTLS.swift:57:47:57:70 | .TLSv10 | InsecureTLS.swift:57:47:57:70 | .TLSv10 | This TLS configuration is insecure. |
+| InsecureTLS.swift:64:40:64:52 | .tlsProtocol10 | InsecureTLS.swift:64:40:64:52 | .tlsProtocol10 | InsecureTLS.swift:64:40:64:52 | .tlsProtocol10 | This TLS configuration is insecure. |
+| InsecureTLS.swift:76:40:76:52 | .tlsProtocol10 | InsecureTLS.swift:76:40:76:52 | .tlsProtocol10 | InsecureTLS.swift:76:40:76:52 | .tlsProtocol10 | This TLS configuration is insecure. |
+| InsecureTLS.swift:111:47:111:64 | call to getBadTLSVersion() | InsecureTLS.swift:102:10:102:33 | .TLSv10 :  | InsecureTLS.swift:111:47:111:64 | call to getBadTLSVersion() | This TLS configuration is insecure. |
+| InsecureTLS.swift:122:47:122:47 | version | InsecureTLS.swift:127:25:127:48 | .TLSv11 :  | InsecureTLS.swift:122:47:122:47 | version | This TLS configuration is insecure. |
+| InsecureTLS.swift:165:47:165:51 | .TLSVersion | InsecureTLS.swift:163:20:163:43 | .TLSv10 :  | InsecureTLS.swift:165:47:165:51 | .TLSVersion | This TLS configuration is insecure. |
+| file://:0:0:0:0 | value | InsecureTLS.swift:40:47:40:70 | .TLSv10 :  | file://:0:0:0:0 | value | This TLS configuration is insecure. |
+| file://:0:0:0:0 | value | InsecureTLS.swift:45:47:45:70 | .TLSv11 :  | file://:0:0:0:0 | value | This TLS configuration is insecure. |
+| file://:0:0:0:0 | value | InsecureTLS.swift:57:47:57:70 | .TLSv10 :  | file://:0:0:0:0 | value | This TLS configuration is insecure. |
+| file://:0:0:0:0 | value | InsecureTLS.swift:64:40:64:52 | .tlsProtocol10 :  | file://:0:0:0:0 | value | This TLS configuration is insecure. |
+| file://:0:0:0:0 | value | InsecureTLS.swift:76:40:76:52 | .tlsProtocol10 :  | file://:0:0:0:0 | value | This TLS configuration is insecure. |
+| file://:0:0:0:0 | value | InsecureTLS.swift:102:10:102:33 | .TLSv10 :  | file://:0:0:0:0 | value | This TLS configuration is insecure. |
+| file://:0:0:0:0 | value | InsecureTLS.swift:127:25:127:48 | .TLSv11 :  | file://:0:0:0:0 | value | This TLS configuration is insecure. |
+| file://:0:0:0:0 | value | InsecureTLS.swift:163:20:163:43 | .TLSv10 :  | file://:0:0:0:0 | value | This TLS configuration is insecure. |

From a8a2c9e212a7890a105f2bc343d52ef639dc112f Mon Sep 17 00:00:00 2001
From: Alex Denisov <alexdenisov@github.com>
Date: Thu, 8 Sep 2022 10:40:16 +0200
Subject: [PATCH 064/203] Swift: CWE-757: update severity

---
 swift/ql/src/queries/Security/CWE-757/InsecureTLS.ql | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/swift/ql/src/queries/Security/CWE-757/InsecureTLS.ql b/swift/ql/src/queries/Security/CWE-757/InsecureTLS.ql
index 91bcf61c337..375da521dc0 100644
--- a/swift/ql/src/queries/Security/CWE-757/InsecureTLS.ql
+++ b/swift/ql/src/queries/Security/CWE-757/InsecureTLS.ql
@@ -3,7 +3,7 @@
  * @description TLS v1.0 and v1.1 versions are known to be vulnerable. TLS v1.2 or v1.3 should be used instead.
  * @kind path-problem
  * @problem.severity error
- * @security-severity TODO
+ * @security-severity 7.5
  * @precision high
  * @id swift/insecure-tls
  * @tags security

From fdf348850077cf3436658177f13b91083134e71e Mon Sep 17 00:00:00 2001
From: Tamas Vajk <tamasvajk@github.com>
Date: Wed, 7 Sep 2022 10:29:44 +0200
Subject: [PATCH 065/203] Kotlin: Add test with extraction error due to missing
 base class of `KFunctionX`

---
 .../kotlin/kotlin_kfunction/app/build.gradle  | 25 +++++++++++++++++++
 .../app/src/main/kotlin/testProject/App.kt    | 10 ++++++++
 .../kotlin_kfunction/diagnostics.expected     |  1 +
 .../kotlin/kotlin_kfunction/diagnostics.ql    |  4 +++
 .../kotlin/kotlin_kfunction/settings.gradle   | 11 ++++++++
 .../kotlin/kotlin_kfunction/test.py           |  5 ++++
 6 files changed, 56 insertions(+)
 create mode 100644 java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/app/build.gradle
 create mode 100644 java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/app/src/main/kotlin/testProject/App.kt
 create mode 100644 java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/diagnostics.expected
 create mode 100644 java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/diagnostics.ql
 create mode 100644 java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/settings.gradle
 create mode 100644 java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/test.py

diff --git a/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/app/build.gradle b/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/app/build.gradle
new file mode 100644
index 00000000000..924524190cf
--- /dev/null
+++ b/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/app/build.gradle
@@ -0,0 +1,25 @@
+/*
+ * This file was generated by the Gradle 'init' task.
+ *
+ * This generated file contains a sample Kotlin application project to get you started.
+ * For more details take a look at the 'Building Java & JVM projects' chapter in the Gradle
+ * User Manual available at https://docs.gradle.org/7.0.2/userguide/building_java_projects.html
+ */
+
+plugins {
+    // Apply the org.jetbrains.kotlin.jvm Plugin to add support for Kotlin.
+    id 'org.jetbrains.kotlin.jvm' version '1.6.20'
+
+    // Apply the application plugin to add support for building a CLI application in Java.
+    id 'application'
+}
+
+repositories {
+    // Use Maven Central for resolving dependencies.
+    mavenCentral()
+}
+
+application {
+    // Define the main class for the application.
+    mainClass = 'testProject.AppKt'
+}
diff --git a/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/app/src/main/kotlin/testProject/App.kt b/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/app/src/main/kotlin/testProject/App.kt
new file mode 100644
index 00000000000..283f9270626
--- /dev/null
+++ b/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/app/src/main/kotlin/testProject/App.kt
@@ -0,0 +1,10 @@
+import kotlin.reflect.*
+
+fun fn() {
+    val ref: KFunction2<Ccc, Int, Double> = Ccc::m
+    ref.invoke(Ccc(), 1)
+}
+
+class Ccc {
+    fun m(i:Int):Double = 5.0
+}
diff --git a/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/diagnostics.expected b/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/diagnostics.expected
new file mode 100644
index 00000000000..ba9c677f304
--- /dev/null
+++ b/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/diagnostics.expected
@@ -0,0 +1 @@
+| app/src/main/kotlin/testProject/App.kt:0:0:0:0 | Failed to find a class declaring invoke starting at KFunction2 |
diff --git a/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/diagnostics.ql b/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/diagnostics.ql
new file mode 100644
index 00000000000..071cbb1b6ec
--- /dev/null
+++ b/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/diagnostics.ql
@@ -0,0 +1,4 @@
+import java
+import semmle.code.java.Diagnostics
+
+query predicate diag(Diagnostic d) { any() }
diff --git a/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/settings.gradle b/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/settings.gradle
new file mode 100644
index 00000000000..a56fb7dd11c
--- /dev/null
+++ b/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/settings.gradle
@@ -0,0 +1,11 @@
+/*
+ * This file was generated by the Gradle 'init' task.
+ *
+ * The settings file is used to specify which projects to include in your build.
+ *
+ * Detailed information about configuring a multi-project build in Gradle can be found
+ * in the user manual at https://docs.gradle.org/7.0.2/userguide/multi_project_builds.html
+ */
+
+rootProject.name = 'testProject'
+include('app')
diff --git a/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/test.py b/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/test.py
new file mode 100644
index 00000000000..3a4f9d2032e
--- /dev/null
+++ b/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/test.py
@@ -0,0 +1,5 @@
+from create_database_utils import *
+
+run_codeql_database_create(
+    ["gradle build --no-daemon --no-build-cache --rerun-tasks"], lang="java")
+runSuccessfully(["gradle", "clean"])

From 56ef1739a36af0316d113b96b65980042a7ddf4c Mon Sep 17 00:00:00 2001
From: Tamas Vajk <tamasvajk@github.com>
Date: Thu, 8 Sep 2022 10:48:21 +0200
Subject: [PATCH 066/203] Kotlin: fix `KFunctionX.invoke` extraction

---
 .../src/main/kotlin/KotlinFileExtractor.kt                | 8 ++++++++
 .../kotlin/kotlin_kfunction/diagnostics.expected          | 1 -
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt b/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt
index fe88f8a2de4..dc6dc28c98f 100644
--- a/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt
+++ b/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt
@@ -1318,6 +1318,14 @@ open class KotlinFileExtractor(
         val receiverClass = receiverType.classifier.owner as? IrClass ?: return listOf()
         val ancestorTypes = ArrayList<IrSimpleType>()
 
+        // KFunctionX doesn't implement FunctionX on versions before 1.7.0:
+        if ((callTarget.name.asString() == "invoke") &&
+            (receiverClass.fqNameWhenAvailable?.asString()?.startsWith("kotlin.reflect.KFunction") == true) &&
+            (callTarget.parentClassOrNull?.fqNameWhenAvailable?.asString()?.startsWith("kotlin.Function") == true)
+        ) {
+            return receiverType.arguments
+        }
+
         // Populate ancestorTypes with the path from receiverType's class to its ancestor, callTarget's declaring type.
         fun walkFrom(c: IrClass): Boolean {
             if(declaringType == c)
diff --git a/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/diagnostics.expected b/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/diagnostics.expected
index ba9c677f304..e69de29bb2d 100644
--- a/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/diagnostics.expected
+++ b/java/ql/integration-tests/posix-only/kotlin/kotlin_kfunction/diagnostics.expected
@@ -1 +0,0 @@
-| app/src/main/kotlin/testProject/App.kt:0:0:0:0 | Failed to find a class declaring invoke starting at KFunction2 |

From 88f295fbb101a3fe16965cb570250fc2a44f87dd Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Thu, 8 Sep 2022 15:49:34 +0200
Subject: [PATCH 067/203] make a shared library of the typo database

---
 javascript/ql/src/Expressions/Misspelling.qll |    2 +-
 .../ql/src/Expressions/TypoDatabase.qll       | 9039 +----------------
 javascript/ql/src/qlpack.yml                  |    1 +
 .../src/codeql_ql/style/MisspellingQuery.qll  |    2 +-
 ql/ql/src/codeql_ql/style/TypoDatabase.qll    | 9039 +----------------
 ql/ql/src/qlpack.yml                          |    2 +
 shared/typos/codeql/typos/TypoDatabase.qll    | 9035 ++++++++++++++++
 shared/typos/qlpack.yml                       |    4 +
 8 files changed, 9052 insertions(+), 18072 deletions(-)
 create mode 100644 shared/typos/codeql/typos/TypoDatabase.qll
 create mode 100644 shared/typos/qlpack.yml

diff --git a/javascript/ql/src/Expressions/Misspelling.qll b/javascript/ql/src/Expressions/Misspelling.qll
index e7c35260edb..966e3d5e996 100644
--- a/javascript/ql/src/Expressions/Misspelling.qll
+++ b/javascript/ql/src/Expressions/Misspelling.qll
@@ -4,7 +4,7 @@
 
 import javascript
 // import typo database (generated from Wikipedia, licensed under CC BY-SA 3.0)
-import TypoDatabase
+import codeql.typos.TypoDatabase
 
 /**
  * Holds if `wrong` is a misspelling of `right` that might be intentional or
diff --git a/javascript/ql/src/Expressions/TypoDatabase.qll b/javascript/ql/src/Expressions/TypoDatabase.qll
index a41f003a8c0..f480b9ebc8b 100644
--- a/javascript/ql/src/Expressions/TypoDatabase.qll
+++ b/javascript/ql/src/Expressions/TypoDatabase.qll
@@ -1,9035 +1,4 @@
-/**
- * Holds if `wrong` is a common misspelling of `right`.
- *
- * This predicate was automatically generated by
- *     python buildutils-internal/scripts/generate-typos.py
- * which uses http://en.wikipedia.org/wiki/Wikipedia:Lists_of_common_misspellings/For_machines (with custom additions) on 2018-01-19.
- *
- * This file is available under the Creative Commons Attribution-ShareAlike License
- * (https://en.wikipedia.org/wiki/Wikipedia:Text_of_Creative_Commons_Attribution-ShareAlike_3.0_Unported_License).
- */
-predicate typos(string wrong, string right) {
-  wrong = "abandonned" and right = "abandoned"
-  or
-  wrong = "abbout" and right = "about"
-  or
-  wrong = "aberation" and right = "aberration"
-  or
-  wrong = "abilityes" and right = "abilities"
-  or
-  wrong = "abilties" and right = "abilities"
-  or
-  wrong = "abilty" and right = "ability"
-  or
-  wrong = "abondon" and right = "abandon"
-  or
-  wrong = "abondoned" and right = "abandoned"
-  or
-  wrong = "abondoning" and right = "abandoning"
-  or
-  wrong = "abondons" and right = "abandons"
-  or
-  wrong = "aborigene" and right = "aborigine"
-  or
-  wrong = "abortificant" and right = "abortifacient"
-  or
-  wrong = "abotu" and right = "about"
-  or
-  wrong = "abreviate" and right = "abbreviate"
-  or
-  wrong = "abreviated" and right = "abbreviated"
-  or
-  wrong = "abreviation" and right = "abbreviation"
-  or
-  wrong = "abritrary" and right = "arbitrary"
-  or
-  wrong = "absail" and right = "abseil"
-  or
-  wrong = "absailing" and right = "abseiling"
-  or
-  wrong = "abscence" and right = "absence"
-  or
-  wrong = "absense" and right = "absence"
-  or
-  wrong = "absolutly" and right = "absolutely"
-  or
-  wrong = "absorbsion" and right = "absorption"
-  or
-  wrong = "absorbtion" and right = "absorption"
-  or
-  wrong = "abudance" and right = "abundance"
-  or
-  wrong = "abundacies" and right = "abundances"
-  or
-  wrong = "abundancies" and right = "abundances"
-  or
-  wrong = "abundunt" and right = "abundant"
-  or
-  wrong = "abutts" and right = "abuts"
-  or
-  wrong = "acadamy" and right = "academy"
-  or
-  wrong = "acadmic" and right = "academic"
-  or
-  wrong = "accademic" and right = "academic"
-  or
-  wrong = "accademy" and right = "academy"
-  or
-  wrong = "acccess" and right = "access"
-  or
-  wrong = "acccused" and right = "accused"
-  or
-  wrong = "accelleration" and right = "acceleration"
-  or
-  wrong = "accension" and right = "accession"
-  or
-  wrong = "accension" and right = "ascension"
-  or
-  wrong = "acceptence" and right = "acceptance"
-  or
-  wrong = "acceptible" and right = "acceptable"
-  or
-  wrong = "accesories" and right = "accessories"
-  or
-  wrong = "accessable" and right = "accessible"
-  or
-  wrong = "accidant" and right = "accident"
-  or
-  wrong = "accidentaly" and right = "accidentally"
-  or
-  wrong = "accidently" and right = "accidentally"
-  or
-  wrong = "acclimitization" and right = "acclimatization"
-  or
-  wrong = "accomadate" and right = "accommodate"
-  or
-  wrong = "accomadated" and right = "accommodated"
-  or
-  wrong = "accomadates" and right = "accommodates"
-  or
-  wrong = "accomadating" and right = "accommodating"
-  or
-  wrong = "accomadation" and right = "accommodation"
-  or
-  wrong = "accomadations" and right = "accommodations"
-  or
-  wrong = "accomdate" and right = "accommodate"
-  or
-  wrong = "accomodate" and right = "accommodate"
-  or
-  wrong = "accomodated" and right = "accommodated"
-  or
-  wrong = "accomodates" and right = "accommodates"
-  or
-  wrong = "accomodating" and right = "accommodating"
-  or
-  wrong = "accomodation" and right = "accommodation"
-  or
-  wrong = "accomodations" and right = "accommodations"
-  or
-  wrong = "accompanyed" and right = "accompanied"
-  or
-  wrong = "accordeon" and right = "accordion"
-  or
-  wrong = "accordian" and right = "accordion"
-  or
-  wrong = "accoring" and right = "according"
-  or
-  wrong = "accoustic" and right = "acoustic"
-  or
-  wrong = "accquainted" and right = "acquainted"
-  or
-  wrong = "accrediation" and right = "accreditation"
-  or
-  wrong = "accredidation" and right = "accreditation"
-  or
-  wrong = "accross" and right = "across"
-  or
-  wrong = "accussed" and right = "accused"
-  or
-  wrong = "acedemic" and right = "academic"
-  or
-  wrong = "acheive" and right = "achieve"
-  or
-  wrong = "acheived" and right = "achieved"
-  or
-  wrong = "acheivement" and right = "achievement"
-  or
-  wrong = "acheivements" and right = "achievements"
-  or
-  wrong = "acheives" and right = "achieves"
-  or
-  wrong = "acheiving" and right = "achieving"
-  or
-  wrong = "acheivment" and right = "achievement"
-  or
-  wrong = "acheivments" and right = "achievements"
-  or
-  wrong = "achievment" and right = "achievement"
-  or
-  wrong = "achievments" and right = "achievements"
-  or
-  wrong = "achive" and right = "achieve"
-  or
-  wrong = "achive" and right = "archive"
-  or
-  wrong = "achived" and right = "achieved"
-  or
-  wrong = "achived" and right = "archived"
-  or
-  wrong = "achivement" and right = "achievement"
-  or
-  wrong = "achivements" and right = "achievements"
-  or
-  wrong = "acident" and right = "accident"
-  or
-  wrong = "acknowldeged" and right = "acknowledged"
-  or
-  wrong = "acknowledgeing" and right = "acknowledging"
-  or
-  wrong = "ackward" and right = "awkward"
-  or
-  wrong = "ackward" and right = "backward"
-  or
-  wrong = "acommodate" and right = "accommodate"
-  or
-  wrong = "acomplish" and right = "accomplish"
-  or
-  wrong = "acomplished" and right = "accomplished"
-  or
-  wrong = "acomplishment" and right = "accomplishment"
-  or
-  wrong = "acomplishments" and right = "accomplishments"
-  or
-  wrong = "acording" and right = "according"
-  or
-  wrong = "acordingly" and right = "accordingly"
-  or
-  wrong = "acquaintence" and right = "acquaintance"
-  or
-  wrong = "acquaintences" and right = "acquaintances"
-  or
-  wrong = "acquiantence" and right = "acquaintance"
-  or
-  wrong = "acquiantences" and right = "acquaintances"
-  or
-  wrong = "acquited" and right = "acquitted"
-  or
-  wrong = "activites" and right = "activities"
-  or
-  wrong = "activly" and right = "actively"
-  or
-  wrong = "actualy" and right = "actually"
-  or
-  wrong = "acuracy" and right = "accuracy"
-  or
-  wrong = "acused" and right = "accused"
-  or
-  wrong = "acustom" and right = "accustom"
-  or
-  wrong = "acustommed" and right = "accustomed"
-  or
-  wrong = "adapater" and right = "adapter"
-  or
-  wrong = "adavanced" and right = "advanced"
-  or
-  wrong = "adbandon" and right = "abandon"
-  or
-  wrong = "addional" and right = "additional"
-  or
-  wrong = "addionally" and right = "additionally"
-  or
-  wrong = "additinally" and right = "additionally"
-  or
-  wrong = "additionaly" and right = "additionally"
-  or
-  wrong = "additonal" and right = "additional"
-  or
-  wrong = "additonally" and right = "additionally"
-  or
-  wrong = "addmission" and right = "admission"
-  or
-  wrong = "addopt" and right = "adopt"
-  or
-  wrong = "addopted" and right = "adopted"
-  or
-  wrong = "addoptive" and right = "adoptive"
-  or
-  wrong = "addres" and right = "adders"
-  or
-  wrong = "addres" and right = "address"
-  or
-  wrong = "addresable" and right = "addressable"
-  or
-  wrong = "addresed" and right = "addressed"
-  or
-  wrong = "addresing" and right = "addressing"
-  or
-  wrong = "addressess" and right = "addresses"
-  or
-  wrong = "addtion" and right = "addition"
-  or
-  wrong = "addtional" and right = "additional"
-  or
-  wrong = "adecuate" and right = "adequate"
-  or
-  wrong = "adequit" and right = "adequate"
-  or
-  wrong = "adhearing" and right = "adhering"
-  or
-  wrong = "adherance" and right = "adherence"
-  or
-  wrong = "admendment" and right = "amendment"
-  or
-  wrong = "admininistrative" and right = "administrative"
-  or
-  wrong = "adminstered" and right = "administered"
-  or
-  wrong = "adminstrate" and right = "administrate"
-  or
-  wrong = "adminstration" and right = "administration"
-  or
-  wrong = "adminstrative" and right = "administrative"
-  or
-  wrong = "adminstrator" and right = "administrator"
-  or
-  wrong = "admissability" and right = "admissibility"
-  or
-  wrong = "admissable" and right = "admissible"
-  or
-  wrong = "admited" and right = "admitted"
-  or
-  wrong = "admitedly" and right = "admittedly"
-  or
-  wrong = "adn" and right = "and"
-  or
-  wrong = "adolecent" and right = "adolescent"
-  or
-  wrong = "adquire" and right = "acquire"
-  or
-  wrong = "adquired" and right = "acquired"
-  or
-  wrong = "adquires" and right = "acquires"
-  or
-  wrong = "adquiring" and right = "acquiring"
-  or
-  wrong = "adres" and right = "address"
-  or
-  wrong = "adresable" and right = "addressable"
-  or
-  wrong = "adresing" and right = "addressing"
-  or
-  wrong = "adress" and right = "address"
-  or
-  wrong = "adressable" and right = "addressable"
-  or
-  wrong = "adressed" and right = "addressed"
-  or
-  wrong = "adressing" and right = "addressing"
-  or
-  wrong = "adressing" and right = "dressing"
-  or
-  wrong = "adventrous" and right = "adventurous"
-  or
-  wrong = "advertisment" and right = "advertisement"
-  or
-  wrong = "advertisments" and right = "advertisements"
-  or
-  wrong = "advesary" and right = "adversary"
-  or
-  wrong = "adviced" and right = "advised"
-  or
-  wrong = "aeriel" and right = "aerial"
-  or
-  wrong = "aeriels" and right = "aerials"
-  or
-  wrong = "afair" and right = "affair"
-  or
-  wrong = "afficianados" and right = "aficionados"
-  or
-  wrong = "afficionado" and right = "aficionado"
-  or
-  wrong = "afficionados" and right = "aficionados"
-  or
-  wrong = "affilate" and right = "affiliate"
-  or
-  wrong = "affilliate" and right = "affiliate"
-  or
-  wrong = "affort" and right = "afford"
-  or
-  wrong = "affort" and right = "effort"
-  or
-  wrong = "aforememtioned" and right = "aforementioned"
-  or
-  wrong = "againnst" and right = "against"
-  or
-  wrong = "agains" and right = "against"
-  or
-  wrong = "agaisnt" and right = "against"
-  or
-  wrong = "aganist" and right = "against"
-  or
-  wrong = "aggaravates" and right = "aggravates"
-  or
-  wrong = "aggreed" and right = "agreed"
-  or
-  wrong = "aggreement" and right = "agreement"
-  or
-  wrong = "aggregious" and right = "egregious"
-  or
-  wrong = "aggresive" and right = "aggressive"
-  or
-  wrong = "agian" and right = "again"
-  or
-  wrong = "agianst" and right = "against"
-  or
-  wrong = "agin" and right = "again"
-  or
-  wrong = "agina" and right = "again"
-  or
-  wrong = "agina" and right = "angina"
-  or
-  wrong = "aginst" and right = "against"
-  or
-  wrong = "agravate" and right = "aggravate"
-  or
-  wrong = "agre" and right = "agree"
-  or
-  wrong = "agred" and right = "agreed"
-  or
-  wrong = "agreeement" and right = "agreement"
-  or
-  wrong = "agreemnt" and right = "agreement"
-  or
-  wrong = "agregate" and right = "aggregate"
-  or
-  wrong = "agregates" and right = "aggregates"
-  or
-  wrong = "agreing" and right = "agreeing"
-  or
-  wrong = "agression" and right = "aggression"
-  or
-  wrong = "agressive" and right = "aggressive"
-  or
-  wrong = "agressively" and right = "aggressively"
-  or
-  wrong = "agressor" and right = "aggressor"
-  or
-  wrong = "agricultue" and right = "agriculture"
-  or
-  wrong = "agriculure" and right = "agriculture"
-  or
-  wrong = "agricuture" and right = "agriculture"
-  or
-  wrong = "agrieved" and right = "aggrieved"
-  or
-  wrong = "agrument" and right = "argument"
-  or
-  wrong = "agruments" and right = "arguments"
-  or
-  wrong = "ahev" and right = "have"
-  or
-  wrong = "ahppen" and right = "happen"
-  or
-  wrong = "ahve" and right = "have"
-  or
-  wrong = "aicraft" and right = "aircraft"
-  or
-  wrong = "aiport" and right = "airport"
-  or
-  wrong = "airbourne" and right = "airborne"
-  or
-  wrong = "aircaft" and right = "aircraft"
-  or
-  wrong = "aircrafts" and right = "aircraft"
-  or
-  wrong = "airporta" and right = "airports"
-  or
-  wrong = "airrcraft" and right = "aircraft"
-  or
-  wrong = "aisian" and right = "asian"
-  or
-  wrong = "albiet" and right = "albeit"
-  or
-  wrong = "alchohol" and right = "alcohol"
-  or
-  wrong = "alchoholic" and right = "alcoholic"
-  or
-  wrong = "alchol" and right = "alcohol"
-  or
-  wrong = "alcholic" and right = "alcoholic"
-  or
-  wrong = "alcohal" and right = "alcohol"
-  or
-  wrong = "alcoholical" and right = "alcoholic"
-  or
-  wrong = "aledge" and right = "allege"
-  or
-  wrong = "aledged" and right = "alleged"
-  or
-  wrong = "aledges" and right = "alleges"
-  or
-  wrong = "alege" and right = "allege"
-  or
-  wrong = "aleged" and right = "alleged"
-  or
-  wrong = "alegience" and right = "allegiance"
-  or
-  wrong = "algebraical" and right = "algebraic"
-  or
-  wrong = "algorhitms" and right = "algorithms"
-  or
-  wrong = "algoritm" and right = "algorithm"
-  or
-  wrong = "algoritms" and right = "algorithms"
-  or
-  wrong = "alientating" and right = "alienating"
-  or
-  wrong = "alledge" and right = "allege"
-  or
-  wrong = "alledged" and right = "alleged"
-  or
-  wrong = "alledgedly" and right = "allegedly"
-  or
-  wrong = "alledges" and right = "alleges"
-  or
-  wrong = "allegedely" and right = "allegedly"
-  or
-  wrong = "allegedy" and right = "allegedly"
-  or
-  wrong = "allegely" and right = "allegedly"
-  or
-  wrong = "allegence" and right = "allegiance"
-  or
-  wrong = "allegience" and right = "allegiance"
-  or
-  wrong = "allign" and right = "align"
-  or
-  wrong = "alligned" and right = "aligned"
-  or
-  wrong = "alliviate" and right = "alleviate"
-  or
-  wrong = "allopone" and right = "allophone"
-  or
-  wrong = "allopones" and right = "allophones"
-  or
-  wrong = "allready" and right = "already"
-  or
-  wrong = "allthough" and right = "although"
-  or
-  wrong = "alltogether" and right = "altogether"
-  or
-  wrong = "almsot" and right = "almost"
-  or
-  wrong = "alochol" and right = "alcohol"
-  or
-  wrong = "alomst" and right = "almost"
-  or
-  wrong = "alot" and right = "allot"
-  or
-  wrong = "alotted" and right = "allotted"
-  or
-  wrong = "alowed" and right = "allowed"
-  or
-  wrong = "alowing" and right = "allowing"
-  or
-  wrong = "alreayd" and right = "already"
-  or
-  wrong = "alse" and right = "else"
-  or
-  wrong = "alsot" and right = "also"
-  or
-  wrong = "alternitives" and right = "alternatives"
-  or
-  wrong = "altho" and right = "although"
-  or
-  wrong = "althought" and right = "although"
-  or
-  wrong = "altough" and right = "although"
-  or
-  wrong = "alusion" and right = "allusion"
-  or
-  wrong = "alusion" and right = "illusion"
-  or
-  wrong = "alwasy" and right = "always"
-  or
-  wrong = "alwyas" and right = "always"
-  or
-  wrong = "amalgomated" and right = "amalgamated"
-  or
-  wrong = "amatuer" and right = "amateur"
-  or
-  wrong = "amature" and right = "amateur"
-  or
-  wrong = "amature" and right = "armature"
-  or
-  wrong = "amendmant" and right = "amendment"
-  or
-  wrong = "amercia" and right = "america"
-  or
-  wrong = "amerliorate" and right = "ameliorate"
-  or
-  wrong = "amke" and right = "make"
-  or
-  wrong = "amking" and right = "making"
-  or
-  wrong = "ammend" and right = "amend"
-  or
-  wrong = "ammended" and right = "amended"
-  or
-  wrong = "ammendment" and right = "amendment"
-  or
-  wrong = "ammendments" and right = "amendments"
-  or
-  wrong = "ammount" and right = "amount"
-  or
-  wrong = "ammused" and right = "amused"
-  or
-  wrong = "amoung" and right = "among"
-  or
-  wrong = "amoungst" and right = "amongst"
-  or
-  wrong = "amung" and right = "among"
-  or
-  wrong = "amunition" and right = "ammunition"
-  or
-  wrong = "analagous" and right = "analogous"
-  or
-  wrong = "analitic" and right = "analytic"
-  or
-  wrong = "analogeous" and right = "analogous"
-  or
-  wrong = "anarchim" and right = "anarchism"
-  or
-  wrong = "anarchistm" and right = "anarchism"
-  or
-  wrong = "anbd" and right = "and"
-  or
-  wrong = "ancestory" and right = "ancestry"
-  or
-  wrong = "ancilliary" and right = "ancillary"
-  or
-  wrong = "andd" and right = "and"
-  or
-  wrong = "androgenous" and right = "androgynous"
-  or
-  wrong = "androgeny" and right = "androgyny"
-  or
-  wrong = "anihilation" and right = "annihilation"
-  or
-  wrong = "aniversary" and right = "anniversary"
-  or
-  wrong = "annoint" and right = "anoint"
-  or
-  wrong = "annointed" and right = "anointed"
-  or
-  wrong = "annointing" and right = "anointing"
-  or
-  wrong = "annoints" and right = "anoints"
-  or
-  wrong = "annouced" and right = "announced"
-  or
-  wrong = "annualy" and right = "annually"
-  or
-  wrong = "annuled" and right = "annulled"
-  or
-  wrong = "anohter" and right = "another"
-  or
-  wrong = "anomolies" and right = "anomalies"
-  or
-  wrong = "anomolous" and right = "anomalous"
-  or
-  wrong = "anomoly" and right = "anomaly"
-  or
-  wrong = "anonimity" and right = "anonymity"
-  or
-  wrong = "anounced" and right = "announced"
-  or
-  wrong = "anouncement" and right = "announcement"
-  or
-  wrong = "ansalisation" and right = "nasalisation"
-  or
-  wrong = "ansalization" and right = "nasalization"
-  or
-  wrong = "ansestors" and right = "ancestors"
-  or
-  wrong = "antartic" and right = "antarctic"
-  or
-  wrong = "anthromorphization" and right = "anthropomorphization"
-  or
-  wrong = "anthropolgist" and right = "anthropologist"
-  or
-  wrong = "anthropolgy" and right = "anthropology"
-  or
-  wrong = "anual" and right = "annual"
-  or
-  wrong = "anulled" and right = "annulled"
-  or
-  wrong = "anwsered" and right = "answered"
-  or
-  wrong = "anyhwere" and right = "anywhere"
-  or
-  wrong = "anytying" and right = "anything"
-  or
-  wrong = "aparent" and right = "apparent"
-  or
-  wrong = "aparment" and right = "apartment"
-  or
-  wrong = "apenines" and right = "apennines"
-  or
-  wrong = "aplication" and right = "application"
-  or
-  wrong = "aplied" and right = "applied"
-  or
-  wrong = "apolegetics" and right = "apologetics"
-  or
-  wrong = "apon" and right = "apron"
-  or
-  wrong = "apon" and right = "upon"
-  or
-  wrong = "apparant" and right = "apparent"
-  or
-  wrong = "apparantly" and right = "apparently"
-  or
-  wrong = "appart" and right = "apart"
-  or
-  wrong = "appartment" and right = "apartment"
-  or
-  wrong = "appartments" and right = "apartments"
-  or
-  wrong = "appealling" and right = "appalling"
-  or
-  wrong = "appealling" and right = "appealing"
-  or
-  wrong = "appeareance" and right = "appearance"
-  or
-  wrong = "appearence" and right = "appearance"
-  or
-  wrong = "appearences" and right = "appearances"
-  or
-  wrong = "appenines" and right = "apennines"
-  or
-  wrong = "apperance" and right = "appearance"
-  or
-  wrong = "apperances" and right = "appearances"
-  or
-  wrong = "appereance" and right = "appearance"
-  or
-  wrong = "appereances" and right = "appearances"
-  or
-  wrong = "applicaiton" and right = "application"
-  or
-  wrong = "applicaitons" and right = "applications"
-  or
-  wrong = "appologies" and right = "apologies"
-  or
-  wrong = "appology" and right = "apology"
-  or
-  wrong = "apprearance" and right = "appearance"
-  or
-  wrong = "apprieciate" and right = "appreciate"
-  or
-  wrong = "approachs" and right = "approaches"
-  or
-  wrong = "appropiate" and right = "appropriate"
-  or
-  wrong = "appropraite" and right = "appropriate"
-  or
-  wrong = "appropropiate" and right = "appropriate"
-  or
-  wrong = "approproximate" and right = "approximate"
-  or
-  wrong = "approxamately" and right = "approximately"
-  or
-  wrong = "approxiately" and right = "approximately"
-  or
-  wrong = "approximitely" and right = "approximately"
-  or
-  wrong = "aprehensive" and right = "apprehensive"
-  or
-  wrong = "apropriate" and right = "appropriate"
-  or
-  wrong = "aproval" and right = "approval"
-  or
-  wrong = "aproximate" and right = "approximate"
-  or
-  wrong = "aproximately" and right = "approximately"
-  or
-  wrong = "aquaduct" and right = "aqueduct"
-  or
-  wrong = "aquaintance" and right = "acquaintance"
-  or
-  wrong = "aquainted" and right = "acquainted"
-  or
-  wrong = "aquiantance" and right = "acquaintance"
-  or
-  wrong = "aquire" and right = "acquire"
-  or
-  wrong = "aquired" and right = "acquired"
-  or
-  wrong = "aquiring" and right = "acquiring"
-  or
-  wrong = "aquisition" and right = "acquisition"
-  or
-  wrong = "aquitted" and right = "acquitted"
-  or
-  wrong = "aranged" and right = "arranged"
-  or
-  wrong = "arangement" and right = "arrangement"
-  or
-  wrong = "arbitarily" and right = "arbitrarily"
-  or
-  wrong = "arbitary" and right = "arbitrary"
-  or
-  wrong = "archaelogical" and right = "archaeological"
-  or
-  wrong = "archaelogists" and right = "archaeologists"
-  or
-  wrong = "archaelogy" and right = "archaeology"
-  or
-  wrong = "archaoelogy" and right = "archaeology"
-  or
-  wrong = "archaoelogy" and right = "archeology"
-  or
-  wrong = "archaology" and right = "archaeology"
-  or
-  wrong = "archaology" and right = "archeology"
-  or
-  wrong = "archeaologist" and right = "archaeologist"
-  or
-  wrong = "archeaologist" and right = "archeologist"
-  or
-  wrong = "archeaologists" and right = "archaeologists"
-  or
-  wrong = "archeaologists" and right = "archeologists"
-  or
-  wrong = "archetect" and right = "architect"
-  or
-  wrong = "archetects" and right = "architects"
-  or
-  wrong = "archetectural" and right = "architectural"
-  or
-  wrong = "archetecturally" and right = "architecturally"
-  or
-  wrong = "archetecture" and right = "architecture"
-  or
-  wrong = "archiac" and right = "archaic"
-  or
-  wrong = "archictect" and right = "architect"
-  or
-  wrong = "archimedian" and right = "archimedean"
-  or
-  wrong = "architecht" and right = "architect"
-  or
-  wrong = "architechturally" and right = "architecturally"
-  or
-  wrong = "architechture" and right = "architecture"
-  or
-  wrong = "architechtures" and right = "architectures"
-  or
-  wrong = "architectual" and right = "architectural"
-  or
-  wrong = "archtype" and right = "archetype"
-  or
-  wrong = "archtypes" and right = "archetypes"
-  or
-  wrong = "aready" and right = "already"
-  or
-  wrong = "areodynamics" and right = "aerodynamics"
-  or
-  wrong = "argubly" and right = "arguably"
-  or
-  wrong = "arguement" and right = "argument"
-  or
-  wrong = "arguements" and right = "arguments"
-  or
-  wrong = "arised" and right = "arose"
-  or
-  wrong = "arival" and right = "arrival"
-  or
-  wrong = "armamant" and right = "armament"
-  or
-  wrong = "armistace" and right = "armistice"
-  or
-  wrong = "arogant" and right = "arrogant"
-  or
-  wrong = "arogent" and right = "arrogant"
-  or
-  wrong = "aroud" and right = "around"
-  or
-  wrong = "arrangment" and right = "arrangement"
-  or
-  wrong = "arrangments" and right = "arrangements"
-  or
-  wrong = "arrengement" and right = "arrangement"
-  or
-  wrong = "arrengements" and right = "arrangements"
-  or
-  wrong = "arround" and right = "around"
-  or
-  wrong = "artcile" and right = "article"
-  or
-  wrong = "artical" and right = "article"
-  or
-  wrong = "artice" and right = "article"
-  or
-  wrong = "articel" and right = "article"
-  or
-  wrong = "artifical" and right = "artificial"
-  or
-  wrong = "artifically" and right = "artificially"
-  or
-  wrong = "artillary" and right = "artillery"
-  or
-  wrong = "arund" and right = "around"
-  or
-  wrong = "asetic" and right = "ascetic"
-  or
-  wrong = "asign" and right = "assign"
-  or
-  wrong = "aslo" and right = "also"
-  or
-  wrong = "asnyc" and right = "async"
-  or
-  wrong = "asociated" and right = "associated"
-  or
-  wrong = "asorbed" and right = "absorbed"
-  or
-  wrong = "asphyxation" and right = "asphyxiation"
-  or
-  wrong = "assasin" and right = "assassin"
-  or
-  wrong = "assasinate" and right = "assassinate"
-  or
-  wrong = "assasinated" and right = "assassinated"
-  or
-  wrong = "assasinates" and right = "assassinates"
-  or
-  wrong = "assasination" and right = "assassination"
-  or
-  wrong = "assasinations" and right = "assassinations"
-  or
-  wrong = "assasined" and right = "assassinated"
-  or
-  wrong = "assasins" and right = "assassins"
-  or
-  wrong = "assassintation" and right = "assassination"
-  or
-  wrong = "assemple" and right = "assemble"
-  or
-  wrong = "assertation" and right = "assertion"
-  or
-  wrong = "asside" and right = "aside"
-  or
-  wrong = "assisnate" and right = "assassinate"
-  or
-  wrong = "assit" and right = "assist"
-  or
-  wrong = "assitant" and right = "assistant"
-  or
-  wrong = "assocation" and right = "association"
-  or
-  wrong = "assoicate" and right = "associate"
-  or
-  wrong = "assoicated" and right = "associated"
-  or
-  wrong = "assoicates" and right = "associates"
-  or
-  wrong = "assosication" and right = "assassination"
-  or
-  wrong = "asssassans" and right = "assassins"
-  or
-  wrong = "assualt" and right = "assault"
-  or
-  wrong = "assualted" and right = "assaulted"
-  or
-  wrong = "assymetric" and right = "asymmetric"
-  or
-  wrong = "assymetrical" and right = "asymmetrical"
-  or
-  wrong = "asteriod" and right = "asteroid"
-  or
-  wrong = "asthetic" and right = "aesthetic"
-  or
-  wrong = "asthetical" and right = "aesthetical"
-  or
-  wrong = "asthetically" and right = "aesthetically"
-  or
-  wrong = "asume" and right = "assume"
-  or
-  wrong = "atain" and right = "attain"
-  or
-  wrong = "atempting" and right = "attempting"
-  or
-  wrong = "atheistical" and right = "atheistic"
-  or
-  wrong = "athenean" and right = "athenian"
-  or
-  wrong = "atheneans" and right = "athenians"
-  or
-  wrong = "athiesm" and right = "atheism"
-  or
-  wrong = "athiest" and right = "atheist"
-  or
-  wrong = "atorney" and right = "attorney"
-  or
-  wrong = "atribute" and right = "attribute"
-  or
-  wrong = "atributed" and right = "attributed"
-  or
-  wrong = "atributes" and right = "attributes"
-  or
-  wrong = "attaindre" and right = "attainder"
-  or
-  wrong = "attaindre" and right = "attained"
-  or
-  wrong = "attemp" and right = "attempt"
-  or
-  wrong = "attemped" and right = "attempted"
-  or
-  wrong = "attemt" and right = "attempt"
-  or
-  wrong = "attemted" and right = "attempted"
-  or
-  wrong = "attemting" and right = "attempting"
-  or
-  wrong = "attemts" and right = "attempts"
-  or
-  wrong = "attendence" and right = "attendance"
-  or
-  wrong = "attendent" and right = "attendant"
-  or
-  wrong = "attendents" and right = "attendants"
-  or
-  wrong = "attened" and right = "attended"
-  or
-  wrong = "attension" and right = "attention"
-  or
-  wrong = "attitide" and right = "attitude"
-  or
-  wrong = "attributred" and right = "attributed"
-  or
-  wrong = "attrocities" and right = "atrocities"
-  or
-  wrong = "audeince" and right = "audience"
-  or
-  wrong = "auromated" and right = "automated"
-  or
-  wrong = "austrailia" and right = "australia"
-  or
-  wrong = "austrailian" and right = "australian"
-  or
-  wrong = "auther" and right = "author"
-  or
-  wrong = "authobiographic" and right = "autobiographic"
-  or
-  wrong = "authobiography" and right = "autobiography"
-  or
-  wrong = "authorative" and right = "authoritative"
-  or
-  wrong = "authorites" and right = "authorities"
-  or
-  wrong = "authorithy" and right = "authority"
-  or
-  wrong = "authoritiers" and right = "authorities"
-  or
-  wrong = "authoritive" and right = "authoritative"
-  or
-  wrong = "authrorities" and right = "authorities"
-  or
-  wrong = "autochtonous" and right = "autochthonous"
-  or
-  wrong = "autoctonous" and right = "autochthonous"
-  or
-  wrong = "automaticly" and right = "automatically"
-  or
-  wrong = "automibile" and right = "automobile"
-  or
-  wrong = "automonomous" and right = "autonomous"
-  or
-  wrong = "autor" and right = "author"
-  or
-  wrong = "autority" and right = "authority"
-  or
-  wrong = "auxilary" and right = "auxiliary"
-  or
-  wrong = "auxillaries" and right = "auxiliaries"
-  or
-  wrong = "auxillary" and right = "auxiliary"
-  or
-  wrong = "auxilliaries" and right = "auxiliaries"
-  or
-  wrong = "auxilliary" and right = "auxiliary"
-  or
-  wrong = "availabe" and right = "available"
-  or
-  wrong = "availablity" and right = "availability"
-  or
-  wrong = "availaible" and right = "available"
-  or
-  wrong = "availble" and right = "available"
-  or
-  wrong = "availiable" and right = "available"
-  or
-  wrong = "availible" and right = "available"
-  or
-  wrong = "avalable" and right = "available"
-  or
-  wrong = "avalance" and right = "avalanche"
-  or
-  wrong = "avaliable" and right = "available"
-  or
-  wrong = "avation" and right = "aviation"
-  or
-  wrong = "averageed" and right = "averaged"
-  or
-  wrong = "avilable" and right = "available"
-  or
-  wrong = "awared" and right = "awarded"
-  or
-  wrong = "awya" and right = "away"
-  or
-  wrong = "baceause" and right = "because"
-  or
-  wrong = "backgorund" and right = "background"
-  or
-  wrong = "backrounds" and right = "backgrounds"
-  or
-  wrong = "bakc" and right = "back"
-  or
-  wrong = "banannas" and right = "bananas"
-  or
-  wrong = "bandwith" and right = "bandwidth"
-  or
-  wrong = "bankrupcy" and right = "bankruptcy"
-  or
-  wrong = "banruptcy" and right = "bankruptcy"
-  or
-  wrong = "baout" and right = "about"
-  or
-  wrong = "baout" and right = "bout"
-  or
-  wrong = "basicaly" and right = "basically"
-  or
-  wrong = "basicly" and right = "basically"
-  or
-  wrong = "bcak" and right = "back"
-  or
-  wrong = "beachead" and right = "beachhead"
-  or
-  wrong = "beacuse" and right = "because"
-  or
-  wrong = "beastiality" and right = "bestiality"
-  or
-  wrong = "beatiful" and right = "beautiful"
-  or
-  wrong = "beaurocracy" and right = "bureaucracy"
-  or
-  wrong = "beaurocratic" and right = "bureaucratic"
-  or
-  wrong = "beautyfull" and right = "beautiful"
-  or
-  wrong = "becamae" and right = "became"
-  or
-  wrong = "becames" and right = "became"
-  or
-  wrong = "becames" and right = "becomes"
-  or
-  wrong = "becasue" and right = "because"
-  or
-  wrong = "beccause" and right = "because"
-  or
-  wrong = "becomeing" and right = "becoming"
-  or
-  wrong = "becomming" and right = "becoming"
-  or
-  wrong = "becouse" and right = "because"
-  or
-  wrong = "becuase" and right = "because"
-  or
-  wrong = "bedore" and right = "before"
-  or
-  wrong = "beeing" and right = "being"
-  or
-  wrong = "befoer" and right = "before"
-  or
-  wrong = "beggin" and right = "begging"
-  or
-  wrong = "beggin" and right = "begin"
-  or
-  wrong = "begginer" and right = "beginner"
-  or
-  wrong = "begginers" and right = "beginners"
-  or
-  wrong = "beggining" and right = "beginning"
-  or
-  wrong = "begginings" and right = "beginnings"
-  or
-  wrong = "beggins" and right = "begins"
-  or
-  wrong = "begining" and right = "beginning"
-  or
-  wrong = "beginnig" and right = "beginning"
-  or
-  wrong = "behavour" and right = "behavior"
-  or
-  wrong = "behavour" and right = "behaviour"
-  or
-  wrong = "beleagured" and right = "beleaguered"
-  or
-  wrong = "beleif" and right = "belief"
-  or
-  wrong = "beleive" and right = "believe"
-  or
-  wrong = "beleived" and right = "believed"
-  or
-  wrong = "beleives" and right = "believes"
-  or
-  wrong = "beleiving" and right = "believing"
-  or
-  wrong = "beligum" and right = "belgium"
-  or
-  wrong = "belive" and right = "believe"
-  or
-  wrong = "belived" and right = "believed"
-  or
-  wrong = "belived" and right = "beloved"
-  or
-  wrong = "belives" and right = "beliefs"
-  or
-  wrong = "belives" and right = "believes"
-  or
-  wrong = "belligerant" and right = "belligerent"
-  or
-  wrong = "bellweather" and right = "bellwether"
-  or
-  wrong = "bemusemnt" and right = "bemusement"
-  or
-  wrong = "beneficary" and right = "beneficiary"
-  or
-  wrong = "beng" and right = "being"
-  or
-  wrong = "benificial" and right = "beneficial"
-  or
-  wrong = "benifit" and right = "benefit"
-  or
-  wrong = "benifits" and right = "benefits"
-  or
-  wrong = "bergamont" and right = "bergamot"
-  or
-  wrong = "bernouilli" and right = "bernoulli"
-  or
-  wrong = "beseige" and right = "besiege"
-  or
-  wrong = "beseiged" and right = "besieged"
-  or
-  wrong = "beseiging" and right = "besieging"
-  or
-  wrong = "beteen" and right = "between"
-  or
-  wrong = "betwen" and right = "between"
-  or
-  wrong = "beween" and right = "between"
-  or
-  wrong = "bewteen" and right = "between"
-  or
-  wrong = "bigining" and right = "beginning"
-  or
-  wrong = "biginning" and right = "beginning"
-  or
-  wrong = "bilateraly" and right = "bilaterally"
-  or
-  wrong = "billingualism" and right = "bilingualism"
-  or
-  wrong = "binominal" and right = "binomial"
-  or
-  wrong = "bizzare" and right = "bizarre"
-  or
-  wrong = "blaim" and right = "blame"
-  or
-  wrong = "blaimed" and right = "blamed"
-  or
-  wrong = "blessure" and right = "blessing"
-  or
-  wrong = "blitzkreig" and right = "blitzkrieg"
-  or
-  wrong = "boaut" and right = "about"
-  or
-  wrong = "boaut" and right = "boat"
-  or
-  wrong = "boaut" and right = "bout"
-  or
-  wrong = "bodydbuilder" and right = "bodybuilder"
-  or
-  wrong = "bolean" and right = "boolean"
-  or
-  wrong = "bombardement" and right = "bombardment"
-  or
-  wrong = "bombarment" and right = "bombardment"
-  or
-  wrong = "bondary" and right = "boundary"
-  or
-  wrong = "bonnano" and right = "bonanno"
-  or
-  wrong = "boook" and right = "book"
-  or
-  wrong = "borke" and right = "broke"
-  or
-  wrong = "boundry" and right = "boundary"
-  or
-  wrong = "bouyancy" and right = "buoyancy"
-  or
-  wrong = "bouyant" and right = "buoyant"
-  or
-  wrong = "boyant" and right = "buoyant"
-  or
-  wrong = "bradcast" and right = "broadcast"
-  or
-  wrong = "brasillian" and right = "brazilian"
-  or
-  wrong = "breakthough" and right = "breakthrough"
-  or
-  wrong = "breakthroughts" and right = "breakthroughs"
-  or
-  wrong = "breif" and right = "brief"
-  or
-  wrong = "breifly" and right = "briefly"
-  or
-  wrong = "brethen" and right = "brethren"
-  or
-  wrong = "bretheren" and right = "brethren"
-  or
-  wrong = "briliant" and right = "brilliant"
-  or
-  wrong = "brillant" and right = "brilliant"
-  or
-  wrong = "brimestone" and right = "brimstone"
-  or
-  wrong = "britian" and right = "britain"
-  or
-  wrong = "brittish" and right = "british"
-  or
-  wrong = "broacasted" and right = "broadcast"
-  or
-  wrong = "broadacasting" and right = "broadcasting"
-  or
-  wrong = "broady" and right = "broadly"
-  or
-  wrong = "buddah" and right = "buddha"
-  or
-  wrong = "buddist" and right = "buddhist"
-  or
-  wrong = "buisness" and right = "business"
-  or
-  wrong = "buisnessman" and right = "businessman"
-  or
-  wrong = "buoancy" and right = "buoyancy"
-  or
-  wrong = "buring" and right = "burin"
-  or
-  wrong = "buring" and right = "burning"
-  or
-  wrong = "buring" and right = "burying"
-  or
-  wrong = "buring" and right = "during"
-  or
-  wrong = "burried" and right = "buried"
-  or
-  wrong = "busines" and right = "business"
-  or
-  wrong = "busineses" and right = "business"
-  or
-  wrong = "busineses" and right = "businesses"
-  or
-  wrong = "busness" and right = "business"
-  or
-  wrong = "bussiness" and right = "business"
-  or
-  wrong = "caculater" and right = "calculator"
-  or
-  wrong = "cacuses" and right = "caucuses"
-  or
-  wrong = "cahracters" and right = "characters"
-  or
-  wrong = "calaber" and right = "caliber"
-  or
-  wrong = "calander" and right = "calendar"
-  or
-  wrong = "calander" and right = "calender"
-  or
-  wrong = "calander" and right = "colander"
-  or
-  wrong = "calculater" and right = "calculator"
-  or
-  wrong = "calculs" and right = "calculus"
-  or
-  wrong = "calender" and right = "calendar"
-  or
-  wrong = "calenders" and right = "calendars"
-  or
-  wrong = "caligraphy" and right = "calligraphy"
-  or
-  wrong = "caluclate" and right = "calculate"
-  or
-  wrong = "caluclated" and right = "calculated"
-  or
-  wrong = "caluculate" and right = "calculate"
-  or
-  wrong = "caluculated" and right = "calculated"
-  or
-  wrong = "calulate" and right = "calculate"
-  or
-  wrong = "calulated" and right = "calculated"
-  or
-  wrong = "calulater" and right = "calculator"
-  or
-  wrong = "cambrige" and right = "cambridge"
-  or
-  wrong = "camoflage" and right = "camouflage"
-  or
-  wrong = "campagin" and right = "campaign"
-  or
-  wrong = "campain" and right = "campaign"
-  or
-  wrong = "campains" and right = "campaigns"
-  or
-  wrong = "candadate" and right = "candidate"
-  or
-  wrong = "candiate" and right = "candidate"
-  or
-  wrong = "candidiate" and right = "candidate"
-  or
-  wrong = "cannister" and right = "canister"
-  or
-  wrong = "cannisters" and right = "canisters"
-  or
-  wrong = "cannnot" and right = "cannot"
-  or
-  wrong = "cannonical" and right = "canonical"
-  or
-  wrong = "cannotation" and right = "connotation"
-  or
-  wrong = "cannotations" and right = "connotations"
-  or
-  wrong = "caost" and right = "coast"
-  or
-  wrong = "caperbility" and right = "capability"
-  or
-  wrong = "capible" and right = "capable"
-  or
-  wrong = "captial" and right = "capital"
-  or
-  wrong = "captued" and right = "captured"
-  or
-  wrong = "capturd" and right = "captured"
-  or
-  wrong = "carachter" and right = "character"
-  or
-  wrong = "caracterized" and right = "characterized"
-  or
-  wrong = "carcas" and right = "caracas"
-  or
-  wrong = "carcas" and right = "carcass"
-  or
-  wrong = "carefull" and right = "careful"
-  or
-  wrong = "careing" and right = "caring"
-  or
-  wrong = "carismatic" and right = "charismatic"
-  or
-  wrong = "carmalite" and right = "carmelite"
-  or
-  wrong = "carnagie" and right = "carnegie"
-  or
-  wrong = "carnege" and right = "carnage"
-  or
-  wrong = "carnege" and right = "carnegie"
-  or
-  wrong = "carnige" and right = "carnage"
-  or
-  wrong = "carnige" and right = "carnegie"
-  or
-  wrong = "carnigie" and right = "carnegie"
-  or
-  wrong = "carreer" and right = "career"
-  or
-  wrong = "carrers" and right = "careers"
-  or
-  wrong = "carribbean" and right = "caribbean"
-  or
-  wrong = "carribean" and right = "caribbean"
-  or
-  wrong = "carryng" and right = "carrying"
-  or
-  wrong = "cartdridge" and right = "cartridge"
-  or
-  wrong = "carthagian" and right = "carthaginian"
-  or
-  wrong = "carthographer" and right = "cartographer"
-  or
-  wrong = "cartilege" and right = "cartilage"
-  or
-  wrong = "cartilidge" and right = "cartilage"
-  or
-  wrong = "cartrige" and right = "cartridge"
-  or
-  wrong = "casette" and right = "cassette"
-  or
-  wrong = "casion" and right = "caisson"
-  or
-  wrong = "cassawory" and right = "cassowary"
-  or
-  wrong = "cassowarry" and right = "cassowary"
-  or
-  wrong = "casue" and right = "cause"
-  or
-  wrong = "casued" and right = "caused"
-  or
-  wrong = "casues" and right = "causes"
-  or
-  wrong = "casuing" and right = "causing"
-  or
-  wrong = "casulaties" and right = "casualties"
-  or
-  wrong = "casulaty" and right = "casualty"
-  or
-  wrong = "catagories" and right = "categories"
-  or
-  wrong = "catagorized" and right = "categorized"
-  or
-  wrong = "catagory" and right = "category"
-  or
-  wrong = "cataline" and right = "catalina"
-  or
-  wrong = "cataline" and right = "catiline"
-  or
-  wrong = "catapillar" and right = "caterpillar"
-  or
-  wrong = "catapillars" and right = "caterpillars"
-  or
-  wrong = "catapiller" and right = "caterpillar"
-  or
-  wrong = "catapillers" and right = "caterpillars"
-  or
-  wrong = "catepillar" and right = "caterpillar"
-  or
-  wrong = "catepillars" and right = "caterpillars"
-  or
-  wrong = "catergorize" and right = "categorize"
-  or
-  wrong = "catergorized" and right = "categorized"
-  or
-  wrong = "caterpilar" and right = "caterpillar"
-  or
-  wrong = "caterpilars" and right = "caterpillars"
-  or
-  wrong = "caterpiller" and right = "caterpillar"
-  or
-  wrong = "caterpillers" and right = "caterpillars"
-  or
-  wrong = "cathlic" and right = "catholic"
-  or
-  wrong = "catholocism" and right = "catholicism"
-  or
-  wrong = "catterpilar" and right = "caterpillar"
-  or
-  wrong = "catterpilars" and right = "caterpillars"
-  or
-  wrong = "catterpillar" and right = "caterpillar"
-  or
-  wrong = "catterpillars" and right = "caterpillars"
-  or
-  wrong = "cattleship" and right = "battleship"
-  or
-  wrong = "causalities" and right = "casualties"
-  or
-  wrong = "ceasar" and right = "caesar"
-  or
-  wrong = "celcius" and right = "celsius"
-  or
-  wrong = "cellpading" and right = "cellpadding"
-  or
-  wrong = "cementary" and right = "cemetery"
-  or
-  wrong = "cemetarey" and right = "cemetery"
-  or
-  wrong = "cemetaries" and right = "cemeteries"
-  or
-  wrong = "cemetary" and right = "cemetery"
-  or
-  wrong = "cencus" and right = "census"
-  or
-  wrong = "censur" and right = "censor"
-  or
-  wrong = "censur" and right = "censure"
-  or
-  wrong = "cententenial" and right = "centennial"
-  or
-  wrong = "centruies" and right = "centuries"
-  or
-  wrong = "centruy" and right = "century"
-  or
-  wrong = "centuties" and right = "centuries"
-  or
-  wrong = "centuty" and right = "century"
-  or
-  wrong = "ceratin" and right = "certain"
-  or
-  wrong = "ceratin" and right = "keratin"
-  or
-  wrong = "cerimonial" and right = "ceremonial"
-  or
-  wrong = "cerimonies" and right = "ceremonies"
-  or
-  wrong = "cerimonious" and right = "ceremonious"
-  or
-  wrong = "cerimony" and right = "ceremony"
-  or
-  wrong = "ceromony" and right = "ceremony"
-  or
-  wrong = "certainity" and right = "certainty"
-  or
-  wrong = "certian" and right = "certain"
-  or
-  wrong = "cervial" and right = "cervical"
-  or
-  wrong = "cervial" and right = "serval"
-  or
-  wrong = "cervial" and right = "servile"
-  or
-  wrong = "chalenging" and right = "challenging"
-  or
-  wrong = "challange" and right = "challenge"
-  or
-  wrong = "challanged" and right = "challenged"
-  or
-  wrong = "challege" and right = "challenge"
-  or
-  wrong = "champange" and right = "champagne"
-  or
-  wrong = "changable" and right = "changeable"
-  or
-  wrong = "charachter" and right = "character"
-  or
-  wrong = "charachters" and right = "characters"
-  or
-  wrong = "charactersistic" and right = "characteristic"
-  or
-  wrong = "charactor" and right = "character"
-  or
-  wrong = "charactors" and right = "characters"
-  or
-  wrong = "charasmatic" and right = "charismatic"
-  or
-  wrong = "charaterized" and right = "characterized"
-  or
-  wrong = "chariman" and right = "chairman"
-  or
-  wrong = "charistics" and right = "characteristics"
-  or
-  wrong = "chasr" and right = "chase"
-  or
-  wrong = "chasr" and right = "chaser"
-  or
-  wrong = "cheif" and right = "chief"
-  or
-  wrong = "cheifs" and right = "chiefs"
-  or
-  wrong = "chemcial" and right = "chemical"
-  or
-  wrong = "chemcially" and right = "chemically"
-  or
-  wrong = "chemestry" and right = "chemistry"
-  or
-  wrong = "chemicaly" and right = "chemically"
-  or
-  wrong = "childbird" and right = "childbirth"
-  or
-  wrong = "childen" and right = "children"
-  or
-  wrong = "choclate" and right = "chocolate"
-  or
-  wrong = "choosen" and right = "chosen"
-  or
-  wrong = "chracter" and right = "character"
-  or
-  wrong = "chuch" and right = "church"
-  or
-  wrong = "churchs" and right = "churches"
-  or
-  wrong = "cincinatti" and right = "cincinnati"
-  or
-  wrong = "cincinnatti" and right = "cincinnati"
-  or
-  wrong = "circulaton" and right = "circulation"
-  or
-  wrong = "circumsicion" and right = "circumcision"
-  or
-  wrong = "circut" and right = "circuit"
-  or
-  wrong = "ciricuit" and right = "circuit"
-  or
-  wrong = "ciriculum" and right = "curriculum"
-  or
-  wrong = "civillian" and right = "civilian"
-  or
-  wrong = "claer" and right = "clear"
-  or
-  wrong = "claerer" and right = "clearer"
-  or
-  wrong = "claerly" and right = "clearly"
-  or
-  wrong = "claimes" and right = "claims"
-  or
-  wrong = "clas" and right = "class"
-  or
-  wrong = "clasic" and right = "classic"
-  or
-  wrong = "clasical" and right = "classical"
-  or
-  wrong = "clasically" and right = "classically"
-  or
-  wrong = "cleareance" and right = "clearance"
-  or
-  wrong = "clera" and right = "clear"
-  or
-  wrong = "clera" and right = "sclera"
-  or
-  wrong = "clincial" and right = "clinical"
-  or
-  wrong = "clinicaly" and right = "clinically"
-  or
-  wrong = "cmo" and right = "com"
-  or
-  wrong = "cmoputer" and right = "computer"
-  or
-  wrong = "coctail" and right = "cocktail"
-  or
-  wrong = "coform" and right = "conform"
-  or
-  wrong = "cognizent" and right = "cognizant"
-  or
-  wrong = "coincedentally" and right = "coincidentally"
-  or
-  wrong = "colaborations" and right = "collaborations"
-  or
-  wrong = "colateral" and right = "collateral"
-  or
-  wrong = "colelctive" and right = "collective"
-  or
-  wrong = "collaberative" and right = "collaborative"
-  or
-  wrong = "collecton" and right = "collection"
-  or
-  wrong = "collegue" and right = "colleague"
-  or
-  wrong = "collegues" and right = "colleagues"
-  or
-  wrong = "collonade" and right = "colonnade"
-  or
-  wrong = "collonies" and right = "colonies"
-  or
-  wrong = "collony" and right = "colony"
-  or
-  wrong = "collosal" and right = "colossal"
-  or
-  wrong = "colonizators" and right = "colonizers"
-  or
-  wrong = "comander" and right = "commandeer"
-  or
-  wrong = "comander" and right = "commander"
-  or
-  wrong = "comando" and right = "commando"
-  or
-  wrong = "comandos" and right = "commandos"
-  or
-  wrong = "comany" and right = "company"
-  or
-  wrong = "comapany" and right = "company"
-  or
-  wrong = "comback" and right = "comeback"
-  or
-  wrong = "combanations" and right = "combinations"
-  or
-  wrong = "combinatins" and right = "combinations"
-  or
-  wrong = "combusion" and right = "combustion"
-  or
-  wrong = "comdemnation" and right = "condemnation"
-  or
-  wrong = "comemmorates" and right = "commemorates"
-  or
-  wrong = "comemoretion" and right = "commemoration"
-  or
-  wrong = "comision" and right = "commission"
-  or
-  wrong = "comisioned" and right = "commissioned"
-  or
-  wrong = "comisioner" and right = "commissioner"
-  or
-  wrong = "comisioning" and right = "commissioning"
-  or
-  wrong = "comisions" and right = "commissions"
-  or
-  wrong = "comission" and right = "commission"
-  or
-  wrong = "comissioned" and right = "commissioned"
-  or
-  wrong = "comissioner" and right = "commissioner"
-  or
-  wrong = "comissioning" and right = "commissioning"
-  or
-  wrong = "comissions" and right = "commissions"
-  or
-  wrong = "comited" and right = "committed"
-  or
-  wrong = "comiting" and right = "committing"
-  or
-  wrong = "comitted" and right = "committed"
-  or
-  wrong = "comittee" and right = "committee"
-  or
-  wrong = "comitting" and right = "committing"
-  or
-  wrong = "commandoes" and right = "commandos"
-  or
-  wrong = "commedic" and right = "comedic"
-  or
-  wrong = "commemerative" and right = "commemorative"
-  or
-  wrong = "commemmorate" and right = "commemorate"
-  or
-  wrong = "commemmorating" and right = "commemorating"
-  or
-  wrong = "commerical" and right = "commercial"
-  or
-  wrong = "commerically" and right = "commercially"
-  or
-  wrong = "commericial" and right = "commercial"
-  or
-  wrong = "commericially" and right = "commercially"
-  or
-  wrong = "commerorative" and right = "commemorative"
-  or
-  wrong = "comming" and right = "coming"
-  or
-  wrong = "comminication" and right = "communication"
-  or
-  wrong = "commision" and right = "commission"
-  or
-  wrong = "commisioned" and right = "commissioned"
-  or
-  wrong = "commisioner" and right = "commissioner"
-  or
-  wrong = "commisioning" and right = "commissioning"
-  or
-  wrong = "commisions" and right = "commissions"
-  or
-  wrong = "commited" and right = "committed"
-  or
-  wrong = "commitee" and right = "committee"
-  or
-  wrong = "commiting" and right = "committing"
-  or
-  wrong = "committe" and right = "committee"
-  or
-  wrong = "committment" and right = "commitment"
-  or
-  wrong = "committments" and right = "commitments"
-  or
-  wrong = "commmemorated" and right = "commemorated"
-  or
-  wrong = "commongly" and right = "commonly"
-  or
-  wrong = "commonweath" and right = "commonwealth"
-  or
-  wrong = "commuications" and right = "communications"
-  or
-  wrong = "commuinications" and right = "communications"
-  or
-  wrong = "communciation" and right = "communication"
-  or
-  wrong = "communiation" and right = "communication"
-  or
-  wrong = "communites" and right = "communities"
-  or
-  wrong = "compability" and right = "compatibility"
-  or
-  wrong = "comparision" and right = "comparison"
-  or
-  wrong = "comparisions" and right = "comparisons"
-  or
-  wrong = "comparitive" and right = "comparative"
-  or
-  wrong = "comparitively" and right = "comparatively"
-  or
-  wrong = "compatabilities" and right = "compatibilities"
-  or
-  wrong = "compatability" and right = "compatibility"
-  or
-  wrong = "compatable" and right = "compatible"
-  or
-  wrong = "compatablities" and right = "compatibilities"
-  or
-  wrong = "compatablity" and right = "compatibility"
-  or
-  wrong = "compatiable" and right = "compatible"
-  or
-  wrong = "compatiblities" and right = "compatibilities"
-  or
-  wrong = "compatiblity" and right = "compatibility"
-  or
-  wrong = "compeitions" and right = "competitions"
-  or
-  wrong = "compensantion" and right = "compensation"
-  or
-  wrong = "competance" and right = "competence"
-  or
-  wrong = "competant" and right = "competent"
-  or
-  wrong = "competative" and right = "competitive"
-  or
-  wrong = "competion" and right = "competition"
-  or
-  wrong = "competion" and right = "completion"
-  or
-  wrong = "competitiion" and right = "competition"
-  or
-  wrong = "competive" and right = "competitive"
-  or
-  wrong = "competiveness" and right = "competitiveness"
-  or
-  wrong = "comphrehensive" and right = "comprehensive"
-  or
-  wrong = "compitent" and right = "competent"
-  or
-  wrong = "completelyl" and right = "completely"
-  or
-  wrong = "completetion" and right = "completion"
-  or
-  wrong = "complier" and right = "compiler"
-  or
-  wrong = "componant" and right = "component"
-  or
-  wrong = "comprable" and right = "comparable"
-  or
-  wrong = "comprimise" and right = "compromise"
-  or
-  wrong = "compulsary" and right = "compulsory"
-  or
-  wrong = "compulsery" and right = "compulsory"
-  or
-  wrong = "computarized" and right = "computerized"
-  or
-  wrong = "concensus" and right = "consensus"
-  or
-  wrong = "concider" and right = "consider"
-  or
-  wrong = "concidered" and right = "considered"
-  or
-  wrong = "concidering" and right = "considering"
-  or
-  wrong = "conciders" and right = "considers"
-  or
-  wrong = "concieted" and right = "conceited"
-  or
-  wrong = "concieved" and right = "conceived"
-  or
-  wrong = "concious" and right = "conscious"
-  or
-  wrong = "conciously" and right = "consciously"
-  or
-  wrong = "conciousness" and right = "consciousness"
-  or
-  wrong = "condamned" and right = "condemned"
-  or
-  wrong = "condemmed" and right = "condemned"
-  or
-  wrong = "condidtion" and right = "condition"
-  or
-  wrong = "condidtions" and right = "conditions"
-  or
-  wrong = "conected" and right = "connected"
-  or
-  wrong = "conection" and right = "connection"
-  or
-  wrong = "conesencus" and right = "consensus"
-  or
-  wrong = "confidental" and right = "confidential"
-  or
-  wrong = "confidentally" and right = "confidentially"
-  or
-  wrong = "confids" and right = "confides"
-  or
-  wrong = "configureable" and right = "configurable"
-  or
-  wrong = "confortable" and right = "comfortable"
-  or
-  wrong = "congradulations" and right = "congratulations"
-  or
-  wrong = "congresional" and right = "congressional"
-  or
-  wrong = "conived" and right = "connived"
-  or
-  wrong = "conjecutre" and right = "conjecture"
-  or
-  wrong = "conjuction" and right = "conjunction"
-  or
-  wrong = "connectinos" and right = "connections"
-  or
-  wrong = "conneticut" and right = "connecticut"
-  or
-  wrong = "conotations" and right = "connotations"
-  or
-  wrong = "conquerd" and right = "conquered"
-  or
-  wrong = "conquerer" and right = "conqueror"
-  or
-  wrong = "conquerers" and right = "conquerors"
-  or
-  wrong = "conqured" and right = "conquered"
-  or
-  wrong = "conscent" and right = "consent"
-  or
-  wrong = "consciouness" and right = "consciousness"
-  or
-  wrong = "consdider" and right = "consider"
-  or
-  wrong = "consdidered" and right = "considered"
-  or
-  wrong = "consdiered" and right = "considered"
-  or
-  wrong = "consectutive" and right = "consecutive"
-  or
-  wrong = "consenquently" and right = "consequently"
-  or
-  wrong = "consentrate" and right = "concentrate"
-  or
-  wrong = "consentrated" and right = "concentrated"
-  or
-  wrong = "consentrates" and right = "concentrates"
-  or
-  wrong = "consept" and right = "concept"
-  or
-  wrong = "consequentually" and right = "consequently"
-  or
-  wrong = "consequeseces" and right = "consequences"
-  or
-  wrong = "consern" and right = "concern"
-  or
-  wrong = "conserned" and right = "concerned"
-  or
-  wrong = "conserning" and right = "concerning"
-  or
-  wrong = "conservitive" and right = "conservative"
-  or
-  wrong = "consiciousness" and right = "consciousness"
-  or
-  wrong = "consicousness" and right = "consciousness"
-  or
-  wrong = "considerd" and right = "considered"
-  or
-  wrong = "consideres" and right = "considered"
-  or
-  wrong = "consious" and right = "conscious"
-  or
-  wrong = "consistant" and right = "consistent"
-  or
-  wrong = "consistantly" and right = "consistently"
-  or
-  wrong = "consituencies" and right = "constituencies"
-  or
-  wrong = "consituency" and right = "constituency"
-  or
-  wrong = "consituted" and right = "constituted"
-  or
-  wrong = "consitution" and right = "constitution"
-  or
-  wrong = "consitutional" and right = "constitutional"
-  or
-  wrong = "consolodate" and right = "consolidate"
-  or
-  wrong = "consolodated" and right = "consolidated"
-  or
-  wrong = "consonent" and right = "consonant"
-  or
-  wrong = "consonents" and right = "consonants"
-  or
-  wrong = "consorcium" and right = "consortium"
-  or
-  wrong = "conspiracys" and right = "conspiracies"
-  or
-  wrong = "conspiriator" and right = "conspirator"
-  or
-  wrong = "consructor" and right = "constructor"
-  or
-  wrong = "constaints" and right = "constraints"
-  or
-  wrong = "constanly" and right = "constantly"
-  or
-  wrong = "constarnation" and right = "consternation"
-  or
-  wrong = "constatn" and right = "constant"
-  or
-  wrong = "constinually" and right = "continually"
-  or
-  wrong = "constituant" and right = "constituent"
-  or
-  wrong = "constituants" and right = "constituents"
-  or
-  wrong = "constituion" and right = "constitution"
-  or
-  wrong = "constituional" and right = "constitutional"
-  or
-  wrong = "consttruction" and right = "construction"
-  or
-  wrong = "constuction" and right = "construction"
-  or
-  wrong = "consulant" and right = "consultant"
-  or
-  wrong = "consumate" and right = "consummate"
-  or
-  wrong = "consumated" and right = "consummated"
-  or
-  wrong = "contaiminate" and right = "contaminate"
-  or
-  wrong = "containes" and right = "contains"
-  or
-  wrong = "contamporaries" and right = "contemporaries"
-  or
-  wrong = "contamporary" and right = "contemporary"
-  or
-  wrong = "contempoary" and right = "contemporary"
-  or
-  wrong = "contemporaneus" and right = "contemporaneous"
-  or
-  wrong = "contempory" and right = "contemporary"
-  or
-  wrong = "contendor" and right = "contender"
-  or
-  wrong = "contian" and right = "contain"
-  or
-  wrong = "contians" and right = "contains"
-  or
-  wrong = "contibute" and right = "contribute"
-  or
-  wrong = "contibuted" and right = "contributed"
-  or
-  wrong = "contibutes" and right = "contributes"
-  or
-  wrong = "contigent" and right = "contingent"
-  or
-  wrong = "contined" and right = "continued"
-  or
-  wrong = "continential" and right = "continental"
-  or
-  wrong = "continous" and right = "continuous"
-  or
-  wrong = "continously" and right = "continuously"
-  or
-  wrong = "continueing" and right = "continuing"
-  or
-  wrong = "contravercial" and right = "controversial"
-  or
-  wrong = "contraversy" and right = "controversy"
-  or
-  wrong = "contributer" and right = "contributor"
-  or
-  wrong = "contributers" and right = "contributors"
-  or
-  wrong = "contritutions" and right = "contributions"
-  or
-  wrong = "controled" and right = "controlled"
-  or
-  wrong = "controling" and right = "controlling"
-  or
-  wrong = "controll" and right = "control"
-  or
-  wrong = "controlls" and right = "controls"
-  or
-  wrong = "controvercial" and right = "controversial"
-  or
-  wrong = "controvercy" and right = "controversy"
-  or
-  wrong = "controveries" and right = "controversies"
-  or
-  wrong = "controversal" and right = "controversial"
-  or
-  wrong = "controversey" and right = "controversy"
-  or
-  wrong = "controvertial" and right = "controversial"
-  or
-  wrong = "controvery" and right = "controversy"
-  or
-  wrong = "contruction" and right = "construction"
-  or
-  wrong = "contructor" and right = "constructor"
-  or
-  wrong = "contstruction" and right = "construction"
-  or
-  wrong = "conveinent" and right = "convenient"
-  or
-  wrong = "convenant" and right = "covenant"
-  or
-  wrong = "convential" and right = "conventional"
-  or
-  wrong = "convertables" and right = "convertibles"
-  or
-  wrong = "convertion" and right = "conversion"
-  or
-  wrong = "conviced" and right = "convinced"
-  or
-  wrong = "convienient" and right = "convenient"
-  or
-  wrong = "coordiantion" and right = "coordination"
-  or
-  wrong = "coorperation" and right = "cooperation"
-  or
-  wrong = "coorperation" and right = "corporation"
-  or
-  wrong = "coorperations" and right = "corporations"
-  or
-  wrong = "copmetitors" and right = "competitors"
-  or
-  wrong = "coputer" and right = "computer"
-  or
-  wrong = "copywrite" and right = "copyright"
-  or
-  wrong = "coridal" and right = "cordial"
-  or
-  wrong = "cornmitted" and right = "committed"
-  or
-  wrong = "corosion" and right = "corrosion"
-  or
-  wrong = "corparate" and right = "corporate"
-  or
-  wrong = "corperations" and right = "corporations"
-  or
-  wrong = "correcters" and right = "correctors"
-  or
-  wrong = "correponding" and right = "corresponding"
-  or
-  wrong = "correposding" and right = "corresponding"
-  or
-  wrong = "correspondant" and right = "correspondent"
-  or
-  wrong = "correspondants" and right = "correspondents"
-  or
-  wrong = "corridoors" and right = "corridors"
-  or
-  wrong = "corrispond" and right = "correspond"
-  or
-  wrong = "corrispondant" and right = "correspondent"
-  or
-  wrong = "corrispondants" and right = "correspondents"
-  or
-  wrong = "corrisponded" and right = "corresponded"
-  or
-  wrong = "corrisponding" and right = "corresponding"
-  or
-  wrong = "corrisponds" and right = "corresponds"
-  or
-  wrong = "costitution" and right = "constitution"
-  or
-  wrong = "coucil" and right = "council"
-  or
-  wrong = "coudl" and right = "cloud"
-  or
-  wrong = "coudl" and right = "could"
-  or
-  wrong = "councellor" and right = "councillor"
-  or
-  wrong = "councellor" and right = "councilor"
-  or
-  wrong = "councellor" and right = "counselor"
-  or
-  wrong = "councellors" and right = "councillors"
-  or
-  wrong = "councellors" and right = "councilors"
-  or
-  wrong = "councellors" and right = "counselors"
-  or
-  wrong = "counries" and right = "countries"
-  or
-  wrong = "countains" and right = "contains"
-  or
-  wrong = "countires" and right = "countries"
-  or
-  wrong = "coururier" and right = "courier"
-  or
-  wrong = "coururier" and right = "couturier"
-  or
-  wrong = "coverted" and right = "converted"
-  or
-  wrong = "coverted" and right = "covered"
-  or
-  wrong = "coverted" and right = "coveted"
-  or
-  wrong = "cpoy" and right = "copy"
-  or
-  wrong = "cpoy" and right = "coy"
-  or
-  wrong = "creaeted" and right = "created"
-  or
-  wrong = "creedence" and right = "credence"
-  or
-  wrong = "critereon" and right = "criterion"
-  or
-  wrong = "criterias" and right = "criteria"
-  or
-  wrong = "criticists" and right = "critics"
-  or
-  wrong = "critising" and right = "criticising"
-  or
-  wrong = "critising" and right = "criticizing"
-  or
-  wrong = "critisising" and right = "criticising"
-  or
-  wrong = "critisism" and right = "criticism"
-  or
-  wrong = "critisisms" and right = "criticisms"
-  or
-  wrong = "critisize" and right = "criticise"
-  or
-  wrong = "critisize" and right = "criticize"
-  or
-  wrong = "critisized" and right = "criticised"
-  or
-  wrong = "critisized" and right = "criticized"
-  or
-  wrong = "critisizes" and right = "criticises"
-  or
-  wrong = "critisizes" and right = "criticizes"
-  or
-  wrong = "critisizing" and right = "criticising"
-  or
-  wrong = "critisizing" and right = "criticizing"
-  or
-  wrong = "critized" and right = "criticized"
-  or
-  wrong = "critizing" and right = "criticizing"
-  or
-  wrong = "crockodiles" and right = "crocodiles"
-  or
-  wrong = "crowm" and right = "crown"
-  or
-  wrong = "crtical" and right = "critical"
-  or
-  wrong = "crticised" and right = "criticised"
-  or
-  wrong = "crucifiction" and right = "crucifixion"
-  or
-  wrong = "crusies" and right = "cruises"
-  or
-  wrong = "crutial" and right = "crucial"
-  or
-  wrong = "crystalisation" and right = "crystallisation"
-  or
-  wrong = "culiminating" and right = "culminating"
-  or
-  wrong = "cumulatative" and right = "cumulative"
-  or
-  wrong = "curch" and right = "church"
-  or
-  wrong = "curcuit" and right = "circuit"
-  or
-  wrong = "currenly" and right = "currently"
-  or
-  wrong = "curriculem" and right = "curriculum"
-  or
-  wrong = "cxan" and right = "cyan"
-  or
-  wrong = "cyclinder" and right = "cylinder"
-  or
-  wrong = "dacquiri" and right = "daiquiri"
-  or
-  wrong = "daed" and right = "dead"
-  or
-  wrong = "dael" and right = "dahl"
-  or
-  wrong = "dael" and right = "deal"
-  or
-  wrong = "dael" and right = "dial"
-  or
-  wrong = "dalmation" and right = "dalmatian"
-  or
-  wrong = "damenor" and right = "demeanor"
-  or
-  wrong = "dammage" and right = "damage"
-  or
-  wrong = "dardenelles" and right = "dardanelles"
-  or
-  wrong = "daugher" and right = "daughter"
-  or
-  wrong = "deafult" and right = "default"
-  or
-  wrong = "debateable" and right = "debatable"
-  or
-  wrong = "decendant" and right = "descendant"
-  or
-  wrong = "decendants" and right = "descendants"
-  or
-  wrong = "decendent" and right = "descendant"
-  or
-  wrong = "decendents" and right = "descendants"
-  or
-  wrong = "decideable" and right = "decidable"
-  or
-  wrong = "decidely" and right = "decidedly"
-  or
-  wrong = "decieved" and right = "deceived"
-  or
-  wrong = "decison" and right = "decision"
-  or
-  wrong = "decomissioned" and right = "decommissioned"
-  or
-  wrong = "decomposit" and right = "decompose"
-  or
-  wrong = "decomposited" and right = "decomposed"
-  or
-  wrong = "decompositing" and right = "decomposing"
-  or
-  wrong = "decomposits" and right = "decomposes"
-  or
-  wrong = "decress" and right = "decrees"
-  or
-  wrong = "decribe" and right = "describe"
-  or
-  wrong = "decribed" and right = "described"
-  or
-  wrong = "decribes" and right = "describes"
-  or
-  wrong = "decribing" and right = "describing"
-  or
-  wrong = "dectect" and right = "detect"
-  or
-  wrong = "defendent" and right = "defendant"
-  or
-  wrong = "defendents" and right = "defendants"
-  or
-  wrong = "deffensively" and right = "defensively"
-  or
-  wrong = "deffine" and right = "define"
-  or
-  wrong = "deffined" and right = "defined"
-  or
-  wrong = "definance" and right = "defiance"
-  or
-  wrong = "definate" and right = "definite"
-  or
-  wrong = "definately" and right = "definitely"
-  or
-  wrong = "definatly" and right = "definitely"
-  or
-  wrong = "definetly" and right = "definitely"
-  or
-  wrong = "definining" and right = "defining"
-  or
-  wrong = "definit" and right = "definite"
-  or
-  wrong = "definitly" and right = "definitely"
-  or
-  wrong = "definiton" and right = "definition"
-  or
-  wrong = "defintion" and right = "definition"
-  or
-  wrong = "defualt" and right = "default"
-  or
-  wrong = "defult" and right = "default"
-  or
-  wrong = "degrate" and right = "degrade"
-  or
-  wrong = "delagates" and right = "delegates"
-  or
-  wrong = "delapidated" and right = "dilapidated"
-  or
-  wrong = "delerious" and right = "delirious"
-  or
-  wrong = "delevopment" and right = "development"
-  or
-  wrong = "deliberatly" and right = "deliberately"
-  or
-  wrong = "delusionally" and right = "delusively"
-  or
-  wrong = "demenor" and right = "demeanor"
-  or
-  wrong = "demographical" and right = "demographic"
-  or
-  wrong = "demolision" and right = "demolition"
-  or
-  wrong = "demorcracy" and right = "democracy"
-  or
-  wrong = "demostration" and right = "demonstration"
-  or
-  wrong = "denegrating" and right = "denigrating"
-  or
-  wrong = "densly" and right = "densely"
-  or
-  wrong = "deparment" and right = "department"
-  or
-  wrong = "deparmental" and right = "departmental"
-  or
-  wrong = "deparments" and right = "departments"
-  or
-  wrong = "dependance" and right = "dependence"
-  or
-  wrong = "dependancy" and right = "dependency"
-  or
-  wrong = "deram" and right = "dram"
-  or
-  wrong = "deram" and right = "dream"
-  or
-  wrong = "deriviated" and right = "derived"
-  or
-  wrong = "derivitive" and right = "derivative"
-  or
-  wrong = "derogitory" and right = "derogatory"
-  or
-  wrong = "descendands" and right = "descendants"
-  or
-  wrong = "descibed" and right = "described"
-  or
-  wrong = "desciptors" and right = "descriptors"
-  or
-  wrong = "descision" and right = "decision"
-  or
-  wrong = "descisions" and right = "decisions"
-  or
-  wrong = "descriibes" and right = "describes"
-  or
-  wrong = "descripters" and right = "descriptors"
-  or
-  wrong = "descripton" and right = "description"
-  or
-  wrong = "desctruction" and right = "destruction"
-  or
-  wrong = "descuss" and right = "discuss"
-  or
-  wrong = "desgined" and right = "designed"
-  or
-  wrong = "deside" and right = "decide"
-  or
-  wrong = "desigining" and right = "designing"
-  or
-  wrong = "desinations" and right = "destinations"
-  or
-  wrong = "desintegrated" and right = "disintegrated"
-  or
-  wrong = "desintegration" and right = "disintegration"
-  or
-  wrong = "desireable" and right = "desirable"
-  or
-  wrong = "desitned" and right = "destined"
-  or
-  wrong = "desktiop" and right = "desktop"
-  or
-  wrong = "desorder" and right = "disorder"
-  or
-  wrong = "desoriented" and right = "disoriented"
-  or
-  wrong = "desparate" and right = "desperate"
-  or
-  wrong = "desparate" and right = "disparate"
-  or
-  wrong = "despict" and right = "depict"
-  or
-  wrong = "despiration" and right = "desperation"
-  or
-  wrong = "dessicated" and right = "desiccated"
-  or
-  wrong = "dessigned" and right = "designed"
-  or
-  wrong = "destablized" and right = "destabilized"
-  or
-  wrong = "destory" and right = "destroy"
-  or
-  wrong = "desugered" and right = "desugared"
-  or
-  wrong = "detailled" and right = "detailed"
-  or
-  wrong = "detatched" and right = "detached"
-  or
-  wrong = "deteoriated" and right = "deteriorated"
-  or
-  wrong = "deteriate" and right = "deteriorate"
-  or
-  wrong = "deterioriating" and right = "deteriorating"
-  or
-  wrong = "determinining" and right = "determining"
-  or
-  wrong = "detremental" and right = "detrimental"
-  or
-  wrong = "devasted" and right = "devastated"
-  or
-  wrong = "develope" and right = "develop"
-  or
-  wrong = "developement" and right = "development"
-  or
-  wrong = "developped" and right = "developed"
-  or
-  wrong = "develpment" and right = "development"
-  or
-  wrong = "devels" and right = "delves"
-  or
-  wrong = "devestated" and right = "devastated"
-  or
-  wrong = "devestating" and right = "devastating"
-  or
-  wrong = "devide" and right = "divide"
-  or
-  wrong = "devided" and right = "divided"
-  or
-  wrong = "devistating" and right = "devastating"
-  or
-  wrong = "devolopement" and right = "development"
-  or
-  wrong = "diablical" and right = "diabolical"
-  or
-  wrong = "diamons" and right = "diamonds"
-  or
-  wrong = "diaster" and right = "disaster"
-  or
-  wrong = "dichtomy" and right = "dichotomy"
-  or
-  wrong = "diconnects" and right = "disconnects"
-  or
-  wrong = "dicover" and right = "discover"
-  or
-  wrong = "dicovered" and right = "discovered"
-  or
-  wrong = "dicovering" and right = "discovering"
-  or
-  wrong = "dicovers" and right = "discovers"
-  or
-  wrong = "dicovery" and right = "discovery"
-  or
-  wrong = "dictionarys" and right = "dictionaries"
-  or
-  wrong = "dicussed" and right = "discussed"
-  or
-  wrong = "diea" and right = "die"
-  or
-  wrong = "diea" and right = "idea"
-  or
-  wrong = "dieing" and right = "dyeing"
-  or
-  wrong = "dieing" and right = "dying"
-  or
-  wrong = "dieties" and right = "deities"
-  or
-  wrong = "diety" and right = "deity"
-  or
-  wrong = "diferent" and right = "different"
-  or
-  wrong = "diferrent" and right = "different"
-  or
-  wrong = "differentiatiations" and right = "differentiations"
-  or
-  wrong = "differnt" and right = "different"
-  or
-  wrong = "difficulity" and right = "difficulty"
-  or
-  wrong = "diffrent" and right = "different"
-  or
-  wrong = "dificulties" and right = "difficulties"
-  or
-  wrong = "dificulty" and right = "difficulty"
-  or
-  wrong = "dimenions" and right = "dimensions"
-  or
-  wrong = "dimention" and right = "dimension"
-  or
-  wrong = "dimentional" and right = "dimensional"
-  or
-  wrong = "dimentions" and right = "dimensions"
-  or
-  wrong = "dimesnional" and right = "dimensional"
-  or
-  wrong = "diminuitive" and right = "diminutive"
-  or
-  wrong = "dimunitive" and right = "diminutive"
-  or
-  wrong = "diosese" and right = "diocese"
-  or
-  wrong = "diphtong" and right = "diphthong"
-  or
-  wrong = "diphtongs" and right = "diphthongs"
-  or
-  wrong = "diplomancy" and right = "diplomacy"
-  or
-  wrong = "dipthong" and right = "diphthong"
-  or
-  wrong = "dipthongs" and right = "diphthongs"
-  or
-  wrong = "directoty" and right = "directory"
-  or
-  wrong = "dirived" and right = "derived"
-  or
-  wrong = "disagreeed" and right = "disagreed"
-  or
-  wrong = "disapeared" and right = "disappeared"
-  or
-  wrong = "disapointing" and right = "disappointing"
-  or
-  wrong = "disappearred" and right = "disappeared"
-  or
-  wrong = "disaproval" and right = "disapproval"
-  or
-  wrong = "disasterous" and right = "disastrous"
-  or
-  wrong = "disatisfaction" and right = "dissatisfaction"
-  or
-  wrong = "disatisfied" and right = "dissatisfied"
-  or
-  wrong = "disatrous" and right = "disastrous"
-  or
-  wrong = "discontentment" and right = "discontent"
-  or
-  wrong = "discribe" and right = "describe"
-  or
-  wrong = "discribed" and right = "described"
-  or
-  wrong = "discribes" and right = "describes"
-  or
-  wrong = "discribing" and right = "describing"
-  or
-  wrong = "disctinction" and right = "distinction"
-  or
-  wrong = "disctinctive" and right = "distinctive"
-  or
-  wrong = "disemination" and right = "dissemination"
-  or
-  wrong = "disenchanged" and right = "disenchanted"
-  or
-  wrong = "disiplined" and right = "disciplined"
-  or
-  wrong = "disobediance" and right = "disobedience"
-  or
-  wrong = "disobediant" and right = "disobedient"
-  or
-  wrong = "disolved" and right = "dissolved"
-  or
-  wrong = "disover" and right = "discover"
-  or
-  wrong = "dispair" and right = "despair"
-  or
-  wrong = "disparingly" and right = "disparagingly"
-  or
-  wrong = "dispence" and right = "dispense"
-  or
-  wrong = "dispenced" and right = "dispensed"
-  or
-  wrong = "dispencing" and right = "dispensing"
-  or
-  wrong = "dispicable" and right = "despicable"
-  or
-  wrong = "dispite" and right = "despite"
-  or
-  wrong = "dispostion" and right = "disposition"
-  or
-  wrong = "disproportiate" and right = "disproportionate"
-  or
-  wrong = "disputandem" and right = "disputandum"
-  or
-  wrong = "disricts" and right = "districts"
-  or
-  wrong = "dissagreement" and right = "disagreement"
-  or
-  wrong = "dissapear" and right = "disappear"
-  or
-  wrong = "dissapearance" and right = "disappearance"
-  or
-  wrong = "dissapeared" and right = "disappeared"
-  or
-  wrong = "dissapearing" and right = "disappearing"
-  or
-  wrong = "dissapears" and right = "disappears"
-  or
-  wrong = "dissappear" and right = "disappear"
-  or
-  wrong = "dissappears" and right = "disappears"
-  or
-  wrong = "dissappointed" and right = "disappointed"
-  or
-  wrong = "dissarray" and right = "disarray"
-  or
-  wrong = "dissobediance" and right = "disobedience"
-  or
-  wrong = "dissobediant" and right = "disobedient"
-  or
-  wrong = "dissobedience" and right = "disobedience"
-  or
-  wrong = "dissobedient" and right = "disobedient"
-  or
-  wrong = "distiction" and right = "distinction"
-  or
-  wrong = "distingish" and right = "distinguish"
-  or
-  wrong = "distingished" and right = "distinguished"
-  or
-  wrong = "distingishes" and right = "distinguishes"
-  or
-  wrong = "distingishing" and right = "distinguishing"
-  or
-  wrong = "distingquished" and right = "distinguished"
-  or
-  wrong = "distrubution" and right = "distribution"
-  or
-  wrong = "distruction" and right = "destruction"
-  or
-  wrong = "distructive" and right = "destructive"
-  or
-  wrong = "ditributed" and right = "distributed"
-  or
-  wrong = "diversed" and right = "diverged"
-  or
-  wrong = "diversed" and right = "diverse"
-  or
-  wrong = "divice" and right = "device"
-  or
-  wrong = "divinition" and right = "divination"
-  or
-  wrong = "divison" and right = "division"
-  or
-  wrong = "divisons" and right = "divisions"
-  or
-  wrong = "doccument" and right = "document"
-  or
-  wrong = "doccumented" and right = "documented"
-  or
-  wrong = "doccuments" and right = "documents"
-  or
-  wrong = "docrines" and right = "doctrines"
-  or
-  wrong = "doctines" and right = "doctrines"
-  or
-  wrong = "documenatry" and right = "documentary"
-  or
-  wrong = "doens" and right = "does"
-  or
-  wrong = "doign" and right = "doing"
-  or
-  wrong = "dominaton" and right = "domination"
-  or
-  wrong = "dominent" and right = "dominant"
-  or
-  wrong = "dominiant" and right = "dominant"
-  or
-  wrong = "donig" and right = "doing"
-  or
-  wrong = "doub" and right = "daub"
-  or
-  wrong = "doub" and right = "doubt"
-  or
-  wrong = "doulbe" and right = "double"
-  or
-  wrong = "dowloads" and right = "downloads"
-  or
-  wrong = "dramtic" and right = "dramatic"
-  or
-  wrong = "draughtman" and right = "draughtsman"
-  or
-  wrong = "dravadian" and right = "dravidian"
-  or
-  wrong = "dreasm" and right = "dreams"
-  or
-  wrong = "driectly" and right = "directly"
-  or
-  wrong = "drnik" and right = "drink"
-  or
-  wrong = "druming" and right = "drumming"
-  or
-  wrong = "drummless" and right = "drumless"
-  or
-  wrong = "dum" and right = "dumb"
-  or
-  wrong = "dupicate" and right = "duplicate"
-  or
-  wrong = "durig" and right = "during"
-  or
-  wrong = "durring" and right = "during"
-  or
-  wrong = "duting" and right = "during"
-  or
-  wrong = "dyas" and right = "dryas"
-  or
-  wrong = "eahc" and right = "each"
-  or
-  wrong = "ealier" and right = "earlier"
-  or
-  wrong = "earlies" and right = "earliest"
-  or
-  wrong = "earnt" and right = "earned"
-  or
-  wrong = "ecclectic" and right = "eclectic"
-  or
-  wrong = "eceonomy" and right = "economy"
-  or
-  wrong = "ecidious" and right = "deciduous"
-  or
-  wrong = "eclispe" and right = "eclipse"
-  or
-  wrong = "ecomonic" and right = "economic"
-  or
-  wrong = "ect" and right = "etc"
-  or
-  wrong = "editting" and right = "editing"
-  or
-  wrong = "eearly" and right = "early"
-  or
-  wrong = "efel" and right = "evil"
-  or
-  wrong = "effeciency" and right = "efficiency"
-  or
-  wrong = "effecient" and right = "efficient"
-  or
-  wrong = "effeciently" and right = "efficiently"
-  or
-  wrong = "efficency" and right = "efficiency"
-  or
-  wrong = "efficent" and right = "efficient"
-  or
-  wrong = "efficently" and right = "efficiently"
-  or
-  wrong = "efford" and right = "afford"
-  or
-  wrong = "efford" and right = "effort"
-  or
-  wrong = "effords" and right = "affords"
-  or
-  wrong = "effords" and right = "efforts"
-  or
-  wrong = "effulence" and right = "effluence"
-  or
-  wrong = "eigth" and right = "eight"
-  or
-  wrong = "eigth" and right = "eighth"
-  or
-  wrong = "eiter" and right = "either"
-  or
-  wrong = "elction" and right = "election"
-  or
-  wrong = "electic" and right = "eclectic"
-  or
-  wrong = "electic" and right = "electric"
-  or
-  wrong = "electon" and right = "election"
-  or
-  wrong = "electon" and right = "electron"
-  or
-  wrong = "electrial" and right = "electrical"
-  or
-  wrong = "electricly" and right = "electrically"
-  or
-  wrong = "electricty" and right = "electricity"
-  or
-  wrong = "elementay" and right = "elementary"
-  or
-  wrong = "eleminated" and right = "eliminated"
-  or
-  wrong = "eleminating" and right = "eliminating"
-  or
-  wrong = "eles" and right = "eels"
-  or
-  wrong = "eletricity" and right = "electricity"
-  or
-  wrong = "elicided" and right = "elicited"
-  or
-  wrong = "eligable" and right = "eligible"
-  or
-  wrong = "elimentary" and right = "elementary"
-  or
-  wrong = "ellected" and right = "elected"
-  or
-  wrong = "elphant" and right = "elephant"
-  or
-  wrong = "embarass" and right = "embarrass"
-  or
-  wrong = "embarassed" and right = "embarrassed"
-  or
-  wrong = "embarassing" and right = "embarrassing"
-  or
-  wrong = "embarassment" and right = "embarrassment"
-  or
-  wrong = "embargos" and right = "embargoes"
-  or
-  wrong = "embarras" and right = "embarrass"
-  or
-  wrong = "embarrased" and right = "embarrassed"
-  or
-  wrong = "embarrasing" and right = "embarrassing"
-  or
-  wrong = "embarrasment" and right = "embarrassment"
-  or
-  wrong = "embezelled" and right = "embezzled"
-  or
-  wrong = "emblamatic" and right = "emblematic"
-  or
-  wrong = "eminate" and right = "emanate"
-  or
-  wrong = "eminated" and right = "emanated"
-  or
-  wrong = "emision" and right = "emission"
-  or
-  wrong = "emited" and right = "emitted"
-  or
-  wrong = "emiting" and right = "emitting"
-  or
-  wrong = "emition" and right = "emission"
-  or
-  wrong = "emition" and right = "emotion"
-  or
-  wrong = "emmediately" and right = "immediately"
-  or
-  wrong = "emmigrated" and right = "emigrated"
-  or
-  wrong = "emmigrated" and right = "immigrated"
-  or
-  wrong = "emminent" and right = "eminent"
-  or
-  wrong = "emminent" and right = "imminent"
-  or
-  wrong = "emminently" and right = "eminently"
-  or
-  wrong = "emmisaries" and right = "emissaries"
-  or
-  wrong = "emmisarries" and right = "emissaries"
-  or
-  wrong = "emmisarry" and right = "emissary"
-  or
-  wrong = "emmisary" and right = "emissary"
-  or
-  wrong = "emmision" and right = "emission"
-  or
-  wrong = "emmisions" and right = "emissions"
-  or
-  wrong = "emmited" and right = "emitted"
-  or
-  wrong = "emmiting" and right = "emitting"
-  or
-  wrong = "emmitted" and right = "emitted"
-  or
-  wrong = "emmitting" and right = "emitting"
-  or
-  wrong = "emnity" and right = "enmity"
-  or
-  wrong = "emperical" and right = "empirical"
-  or
-  wrong = "emphaised" and right = "emphasised"
-  or
-  wrong = "emphsis" and right = "emphasis"
-  or
-  wrong = "emphysyma" and right = "emphysema"
-  or
-  wrong = "empirial" and right = "empirical"
-  or
-  wrong = "empirial" and right = "imperial"
-  or
-  wrong = "emporer" and right = "emperor"
-  or
-  wrong = "emprisoned" and right = "imprisoned"
-  or
-  wrong = "enameld" and right = "enameled"
-  or
-  wrong = "enchancement" and right = "enhancement"
-  or
-  wrong = "encouraing" and right = "encouraging"
-  or
-  wrong = "encryptiion" and right = "encryption"
-  or
-  wrong = "encylopedia" and right = "encyclopedia"
-  or
-  wrong = "endevors" and right = "endeavors"
-  or
-  wrong = "endevour" and right = "endeavour"
-  or
-  wrong = "endig" and right = "ending"
-  or
-  wrong = "endolithes" and right = "endoliths"
-  or
-  wrong = "enduce" and right = "induce"
-  or
-  wrong = "ened" and right = "need"
-  or
-  wrong = "enforceing" and right = "enforcing"
-  or
-  wrong = "engagment" and right = "engagement"
-  or
-  wrong = "engeneer" and right = "engineer"
-  or
-  wrong = "engeneering" and right = "engineering"
-  or
-  wrong = "engieneer" and right = "engineer"
-  or
-  wrong = "engieneers" and right = "engineers"
-  or
-  wrong = "enlargment" and right = "enlargement"
-  or
-  wrong = "enlargments" and right = "enlargements"
-  or
-  wrong = "enlish" and right = "english"
-  or
-  wrong = "enlish" and right = "enlist"
-  or
-  wrong = "enourmous" and right = "enormous"
-  or
-  wrong = "enourmously" and right = "enormously"
-  or
-  wrong = "ensconsed" and right = "ensconced"
-  or
-  wrong = "entaglements" and right = "entanglements"
-  or
-  wrong = "enteratinment" and right = "entertainment"
-  or
-  wrong = "enthusiatic" and right = "enthusiastic"
-  or
-  wrong = "entitity" and right = "entity"
-  or
-  wrong = "entitlied" and right = "entitled"
-  or
-  wrong = "entrepeneur" and right = "entrepreneur"
-  or
-  wrong = "entrepeneurs" and right = "entrepreneurs"
-  or
-  wrong = "enviorment" and right = "environment"
-  or
-  wrong = "enviormental" and right = "environmental"
-  or
-  wrong = "enviormentally" and right = "environmentally"
-  or
-  wrong = "enviorments" and right = "environments"
-  or
-  wrong = "enviornment" and right = "environment"
-  or
-  wrong = "enviornmental" and right = "environmental"
-  or
-  wrong = "enviornmentalist" and right = "environmentalist"
-  or
-  wrong = "enviornmentally" and right = "environmentally"
-  or
-  wrong = "enviornments" and right = "environments"
-  or
-  wrong = "enviroment" and right = "environment"
-  or
-  wrong = "enviromental" and right = "environmental"
-  or
-  wrong = "enviromentalist" and right = "environmentalist"
-  or
-  wrong = "enviromentally" and right = "environmentally"
-  or
-  wrong = "enviroments" and right = "environments"
-  or
-  wrong = "environemnt" and right = "environment"
-  or
-  wrong = "envolutionary" and right = "evolutionary"
-  or
-  wrong = "envrionments" and right = "environments"
-  or
-  wrong = "enxt" and right = "next"
-  or
-  wrong = "epidsodes" and right = "episodes"
-  or
-  wrong = "epsiode" and right = "episode"
-  or
-  wrong = "equialent" and right = "equivalent"
-  or
-  wrong = "equilibium" and right = "equilibrium"
-  or
-  wrong = "equilibrum" and right = "equilibrium"
-  or
-  wrong = "equiped" and right = "equipped"
-  or
-  wrong = "equippment" and right = "equipment"
-  or
-  wrong = "equitorial" and right = "equatorial"
-  or
-  wrong = "equivelant" and right = "equivalent"
-  or
-  wrong = "equivelent" and right = "equivalent"
-  or
-  wrong = "equivilant" and right = "equivalent"
-  or
-  wrong = "equivilent" and right = "equivalent"
-  or
-  wrong = "equivlalent" and right = "equivalent"
-  or
-  wrong = "erally" and right = "orally"
-  or
-  wrong = "erally" and right = "really"
-  or
-  wrong = "eratic" and right = "erratic"
-  or
-  wrong = "eratically" and right = "erratically"
-  or
-  wrong = "eraticly" and right = "erratically"
-  or
-  wrong = "erested" and right = "arrested"
-  or
-  wrong = "erested" and right = "erected"
-  or
-  wrong = "errupted" and right = "erupted"
-  or
-  wrong = "esential" and right = "essential"
-  or
-  wrong = "esitmated" and right = "estimated"
-  or
-  wrong = "esle" and right = "else"
-  or
-  wrong = "especialy" and right = "especially"
-  or
-  wrong = "essencial" and right = "essential"
-  or
-  wrong = "essense" and right = "essence"
-  or
-  wrong = "essentail" and right = "essential"
-  or
-  wrong = "essentialy" and right = "essentially"
-  or
-  wrong = "essentual" and right = "essential"
-  or
-  wrong = "essesital" and right = "essential"
-  or
-  wrong = "estabishes" and right = "establishes"
-  or
-  wrong = "establising" and right = "establishing"
-  or
-  wrong = "ethnocentricm" and right = "ethnocentrism"
-  or
-  wrong = "ethose" and right = "ethos"
-  or
-  wrong = "ethose" and right = "those"
-  or
-  wrong = "europian" and right = "european"
-  or
-  wrong = "europians" and right = "europeans"
-  or
-  wrong = "eurpean" and right = "european"
-  or
-  wrong = "eurpoean" and right = "european"
-  or
-  wrong = "evenhtually" and right = "eventually"
-  or
-  wrong = "eventally" and right = "eventually"
-  or
-  wrong = "eventially" and right = "eventually"
-  or
-  wrong = "eventualy" and right = "eventually"
-  or
-  wrong = "everthing" and right = "everything"
-  or
-  wrong = "everyting" and right = "everything"
-  or
-  wrong = "eveyr" and right = "every"
-  or
-  wrong = "evidentally" and right = "evidently"
-  or
-  wrong = "exagerate" and right = "exaggerate"
-  or
-  wrong = "exagerated" and right = "exaggerated"
-  or
-  wrong = "exagerates" and right = "exaggerates"
-  or
-  wrong = "exagerating" and right = "exaggerating"
-  or
-  wrong = "exagerrate" and right = "exaggerate"
-  or
-  wrong = "exagerrated" and right = "exaggerated"
-  or
-  wrong = "exagerrates" and right = "exaggerates"
-  or
-  wrong = "exagerrating" and right = "exaggerating"
-  or
-  wrong = "examinated" and right = "examined"
-  or
-  wrong = "exampt" and right = "exempt"
-  or
-  wrong = "exapansion" and right = "expansion"
-  or
-  wrong = "excact" and right = "exact"
-  or
-  wrong = "excange" and right = "exchange"
-  or
-  wrong = "excecute" and right = "execute"
-  or
-  wrong = "excecuted" and right = "executed"
-  or
-  wrong = "excecutes" and right = "executes"
-  or
-  wrong = "excecuting" and right = "executing"
-  or
-  wrong = "excecution" and right = "execution"
-  or
-  wrong = "excedded" and right = "exceeded"
-  or
-  wrong = "excelent" and right = "excellent"
-  or
-  wrong = "excell" and right = "excel"
-  or
-  wrong = "excellance" and right = "excellence"
-  or
-  wrong = "excellant" and right = "excellent"
-  or
-  wrong = "excells" and right = "excels"
-  or
-  wrong = "excercise" and right = "exercise"
-  or
-  wrong = "exchanching" and right = "exchanging"
-  or
-  wrong = "excisted" and right = "existed"
-  or
-  wrong = "exculsivly" and right = "exclusively"
-  or
-  wrong = "execising" and right = "exercising"
-  or
-  wrong = "exection" and right = "execution"
-  or
-  wrong = "exectued" and right = "executed"
-  or
-  wrong = "exeedingly" and right = "exceedingly"
-  or
-  wrong = "exelent" and right = "excellent"
-  or
-  wrong = "exellent" and right = "excellent"
-  or
-  wrong = "exemple" and right = "example"
-  or
-  wrong = "exept" and right = "except"
-  or
-  wrong = "exeptional" and right = "exceptional"
-  or
-  wrong = "exerbate" and right = "exacerbate"
-  or
-  wrong = "exerbated" and right = "exacerbated"
-  or
-  wrong = "exerciese" and right = "exercises"
-  or
-  wrong = "exerpt" and right = "excerpt"
-  or
-  wrong = "exerpts" and right = "excerpts"
-  or
-  wrong = "exersize" and right = "exercise"
-  or
-  wrong = "exerternal" and right = "external"
-  or
-  wrong = "exhalted" and right = "exalted"
-  or
-  wrong = "exhibtion" and right = "exhibition"
-  or
-  wrong = "exibition" and right = "exhibition"
-  or
-  wrong = "exibitions" and right = "exhibitions"
-  or
-  wrong = "exicting" and right = "exciting"
-  or
-  wrong = "exinct" and right = "extinct"
-  or
-  wrong = "existance" and right = "existence"
-  or
-  wrong = "existant" and right = "existent"
-  or
-  wrong = "existince" and right = "existence"
-  or
-  wrong = "exliled" and right = "exiled"
-  or
-  wrong = "exludes" and right = "excludes"
-  or
-  wrong = "exmaple" and right = "example"
-  or
-  wrong = "exonorate" and right = "exonerate"
-  or
-  wrong = "exoskelaton" and right = "exoskeleton"
-  or
-  wrong = "expalin" and right = "explain"
-  or
-  wrong = "expatriot" and right = "expatriate"
-  or
-  wrong = "expeced" and right = "expected"
-  or
-  wrong = "expecially" and right = "especially"
-  or
-  wrong = "expeditonary" and right = "expeditionary"
-  or
-  wrong = "expeiments" and right = "experiments"
-  or
-  wrong = "expell" and right = "expel"
-  or
-  wrong = "expells" and right = "expels"
-  or
-  wrong = "experiance" and right = "experience"
-  or
-  wrong = "experianced" and right = "experienced"
-  or
-  wrong = "expession" and right = "expression"
-  or
-  wrong = "expessions" and right = "expressions"
-  or
-  wrong = "expiditions" and right = "expeditions"
-  or
-  wrong = "expierence" and right = "experience"
-  or
-  wrong = "explaination" and right = "explanation"
-  or
-  wrong = "explaning" and right = "explaining"
-  or
-  wrong = "explictly" and right = "explicitly"
-  or
-  wrong = "exploititive" and right = "exploitative"
-  or
-  wrong = "explotation" and right = "exploitation"
-  or
-  wrong = "expropiated" and right = "expropriated"
-  or
-  wrong = "expropiation" and right = "expropriation"
-  or
-  wrong = "exressed" and right = "expressed"
-  or
-  wrong = "extemely" and right = "extremely"
-  or
-  wrong = "extened" and right = "extended"
-  or
-  wrong = "extention" and right = "extension"
-  or
-  wrong = "extentions" and right = "extensions"
-  or
-  wrong = "extered" and right = "exerted"
-  or
-  wrong = "extermist" and right = "extremist"
-  or
-  wrong = "extint" and right = "extant"
-  or
-  wrong = "extint" and right = "extinct"
-  or
-  wrong = "extracter" and right = "extractor"
-  or
-  wrong = "extradiction" and right = "extradition"
-  or
-  wrong = "extraterrestial" and right = "extraterrestrial"
-  or
-  wrong = "extraterrestials" and right = "extraterrestrials"
-  or
-  wrong = "extravagent" and right = "extravagant"
-  or
-  wrong = "extrememly" and right = "extremely"
-  or
-  wrong = "extremeophile" and right = "extremophile"
-  or
-  wrong = "extremly" and right = "extremely"
-  or
-  wrong = "extrordinarily" and right = "extraordinarily"
-  or
-  wrong = "extrordinary" and right = "extraordinary"
-  or
-  wrong = "eyar" and right = "eyas"
-  or
-  wrong = "eyar" and right = "year"
-  or
-  wrong = "eyars" and right = "eyas"
-  or
-  wrong = "eyars" and right = "years"
-  or
-  wrong = "eyasr" and right = "eyas"
-  or
-  wrong = "eyasr" and right = "years"
-  or
-  wrong = "faciliate" and right = "facilitate"
-  or
-  wrong = "faciliated" and right = "facilitated"
-  or
-  wrong = "faciliates" and right = "facilitates"
-  or
-  wrong = "facilites" and right = "facilities"
-  or
-  wrong = "facillitate" and right = "facilitate"
-  or
-  wrong = "facinated" and right = "fascinated"
-  or
-  wrong = "facist" and right = "fascist"
-  or
-  wrong = "familes" and right = "families"
-  or
-  wrong = "familliar" and right = "familiar"
-  or
-  wrong = "famoust" and right = "famous"
-  or
-  wrong = "fanatism" and right = "fanaticism"
-  or
-  wrong = "farenheit" and right = "fahrenheit"
-  or
-  wrong = "fatc" and right = "fact"
-  or
-  wrong = "faught" and right = "fought"
-  or
-  wrong = "favoutrable" and right = "favourable"
-  or
-  wrong = "feasable" and right = "feasible"
-  or
-  wrong = "febuary" and right = "february"
-  or
-  wrong = "feburary" and right = "february"
-  or
-  wrong = "fedreally" and right = "federally"
-  or
-  wrong = "femminist" and right = "feminist"
-  or
-  wrong = "feromone" and right = "pheromone"
-  or
-  wrong = "fertily" and right = "fertility"
-  or
-  wrong = "fianite" and right = "finite"
-  or
-  wrong = "fianlly" and right = "finally"
-  or
-  wrong = "ficticious" and right = "fictitious"
-  or
-  wrong = "fictious" and right = "fictitious"
-  or
-  wrong = "fidn" and right = "find"
-  or
-  wrong = "fiel" and right = "feel"
-  or
-  wrong = "fiel" and right = "field"
-  or
-  wrong = "fiel" and right = "file"
-  or
-  wrong = "fiel" and right = "phial"
-  or
-  wrong = "fiels" and right = "feels"
-  or
-  wrong = "fiels" and right = "fields"
-  or
-  wrong = "fiels" and right = "files"
-  or
-  wrong = "fiels" and right = "phials"
-  or
-  wrong = "fiercly" and right = "fiercely"
-  or
-  wrong = "fightings" and right = "fighting"
-  or
-  wrong = "filiament" and right = "filament"
-  or
-  wrong = "fimilies" and right = "families"
-  or
-  wrong = "finacial" and right = "financial"
-  or
-  wrong = "finaly" and right = "finally"
-  or
-  wrong = "financialy" and right = "financially"
-  or
-  wrong = "firends" and right = "friends"
-  or
-  wrong = "firts" and right = "first"
-  or
-  wrong = "firts" and right = "flirts"
-  or
-  wrong = "fisionable" and right = "fissionable"
-  or
-  wrong = "flamable" and right = "flammable"
-  or
-  wrong = "flawess" and right = "flawless"
-  or
-  wrong = "fleed" and right = "fled"
-  or
-  wrong = "fleed" and right = "freed"
-  or
-  wrong = "flemmish" and right = "flemish"
-  or
-  wrong = "florescent" and right = "fluorescent"
-  or
-  wrong = "flourescent" and right = "fluorescent"
-  or
-  wrong = "flourine" and right = "fluorine"
-  or
-  wrong = "flourishment" and right = "flourishing"
-  or
-  wrong = "fluorish" and right = "flourish"
-  or
-  wrong = "follwoing" and right = "following"
-  or
-  wrong = "folowing" and right = "following"
-  or
-  wrong = "fomed" and right = "formed"
-  or
-  wrong = "fomr" and right = "form"
-  or
-  wrong = "fomr" and right = "from"
-  or
-  wrong = "fonetic" and right = "phonetic"
-  or
-  wrong = "fontrier" and right = "fontier"
-  or
-  wrong = "foootball" and right = "football"
-  or
-  wrong = "forbad" and right = "forbade"
-  or
-  wrong = "forbiden" and right = "forbidden"
-  or
-  wrong = "foreward" and right = "foreword"
-  or
-  wrong = "forfiet" and right = "forfeit"
-  or
-  wrong = "forhead" and right = "forehead"
-  or
-  wrong = "foriegn" and right = "foreign"
-  or
-  wrong = "formalhaut" and right = "fomalhaut"
-  or
-  wrong = "formallize" and right = "formalize"
-  or
-  wrong = "formallized" and right = "formalized"
-  or
-  wrong = "formaly" and right = "formally"
-  or
-  wrong = "formaly" and right = "formerly"
-  or
-  wrong = "formelly" and right = "formerly"
-  or
-  wrong = "formidible" and right = "formidable"
-  or
-  wrong = "formost" and right = "foremost"
-  or
-  wrong = "forsaw" and right = "foresaw"
-  or
-  wrong = "forseeable" and right = "foreseeable"
-  or
-  wrong = "fortelling" and right = "foretelling"
-  or
-  wrong = "forunner" and right = "forerunner"
-  or
-  wrong = "foucs" and right = "focus"
-  or
-  wrong = "foudn" and right = "found"
-  or
-  wrong = "fougth" and right = "fought"
-  or
-  wrong = "foundaries" and right = "foundries"
-  or
-  wrong = "foundary" and right = "foundry"
-  or
-  wrong = "foundland" and right = "newfoundland"
-  or
-  wrong = "fourties" and right = "forties"
-  or
-  wrong = "fourty" and right = "forty"
-  or
-  wrong = "fouth" and right = "fourth"
-  or
-  wrong = "foward" and right = "forward"
-  or
-  wrong = "framwork" and right = "framework"
-  or
-  wrong = "fransiscan" and right = "franciscan"
-  or
-  wrong = "fransiscans" and right = "franciscans"
-  or
-  wrong = "freind" and right = "friend"
-  or
-  wrong = "freindly" and right = "friendly"
-  or
-  wrong = "frequentily" and right = "frequently"
-  or
-  wrong = "frome" and right = "from"
-  or
-  wrong = "fromed" and right = "formed"
-  or
-  wrong = "froniter" and right = "frontier"
-  or
-  wrong = "fucntion" and right = "function"
-  or
-  wrong = "fucntioning" and right = "functioning"
-  or
-  wrong = "fufill" and right = "fulfill"
-  or
-  wrong = "fufilled" and right = "fulfilled"
-  or
-  wrong = "fulfiled" and right = "fulfilled"
-  or
-  wrong = "fullfill" and right = "fulfill"
-  or
-  wrong = "fullfilled" and right = "fulfilled"
-  or
-  wrong = "funcion" and right = "function"
-  or
-  wrong = "fundametal" and right = "fundamental"
-  or
-  wrong = "fundametals" and right = "fundamentals"
-  or
-  wrong = "funguses" and right = "fungi"
-  or
-  wrong = "funtion" and right = "function"
-  or
-  wrong = "funtions" and right = "functions"
-  or
-  wrong = "furuther" and right = "further"
-  or
-  wrong = "futher" and right = "further"
-  or
-  wrong = "futhermore" and right = "furthermore"
-  or
-  wrong = "futhroc" and right = "futhark"
-  or
-  wrong = "futhroc" and right = "futhorc"
-  or
-  wrong = "gae" and right = "gael"
-  or
-  wrong = "gae" and right = "gale"
-  or
-  wrong = "gae" and right = "game"
-  or
-  wrong = "galatic" and right = "galactic"
-  or
-  wrong = "galations" and right = "galatians"
-  or
-  wrong = "gallaxies" and right = "galaxies"
-  or
-  wrong = "galvinized" and right = "galvanized"
-  or
-  wrong = "ganerate" and right = "generate"
-  or
-  wrong = "ganes" and right = "games"
-  or
-  wrong = "ganster" and right = "gangster"
-  or
-  wrong = "garantee" and right = "guarantee"
-  or
-  wrong = "garanteed" and right = "guaranteed"
-  or
-  wrong = "garantees" and right = "guarantees"
-  or
-  wrong = "garnison" and right = "garrison"
-  or
-  wrong = "gaurantee" and right = "guarantee"
-  or
-  wrong = "gauranteed" and right = "guaranteed"
-  or
-  wrong = "gaurantees" and right = "guarantees"
-  or
-  wrong = "gaurd" and right = "gourd"
-  or
-  wrong = "gaurd" and right = "guard"
-  or
-  wrong = "gaurentee" and right = "guarantee"
-  or
-  wrong = "gaurenteed" and right = "guaranteed"
-  or
-  wrong = "gaurentees" and right = "guarantees"
-  or
-  wrong = "geneological" and right = "genealogical"
-  or
-  wrong = "geneologies" and right = "genealogies"
-  or
-  wrong = "geneology" and right = "genealogy"
-  or
-  wrong = "generaly" and right = "generally"
-  or
-  wrong = "generatting" and right = "generating"
-  or
-  wrong = "genialia" and right = "genitalia"
-  or
-  wrong = "geographicial" and right = "geographical"
-  or
-  wrong = "geometrician" and right = "geometer"
-  or
-  wrong = "geometricians" and right = "geometers"
-  or
-  wrong = "gerat" and right = "great"
-  or
-  wrong = "ghandi" and right = "gandhi"
-  or
-  wrong = "glamourous" and right = "glamorous"
-  or
-  wrong = "glight" and right = "flight"
-  or
-  wrong = "gnawwed" and right = "gnawed"
-  or
-  wrong = "godess" and right = "goddess"
-  or
-  wrong = "godesses" and right = "goddesses"
-  or
-  wrong = "godounov" and right = "godunov"
-  or
-  wrong = "gogin" and right = "gauguin"
-  or
-  wrong = "gogin" and right = "going"
-  or
-  wrong = "goign" and right = "going"
-  or
-  wrong = "gonig" and right = "going"
-  or
-  wrong = "gothenberg" and right = "gothenburg"
-  or
-  wrong = "gottleib" and right = "gottlieb"
-  or
-  wrong = "gouvener" and right = "governor"
-  or
-  wrong = "govement" and right = "government"
-  or
-  wrong = "govenment" and right = "government"
-  or
-  wrong = "govenrment" and right = "government"
-  or
-  wrong = "goverance" and right = "governance"
-  or
-  wrong = "goverment" and right = "government"
-  or
-  wrong = "govermental" and right = "governmental"
-  or
-  wrong = "governer" and right = "governor"
-  or
-  wrong = "governmnet" and right = "government"
-  or
-  wrong = "govorment" and right = "government"
-  or
-  wrong = "govormental" and right = "governmental"
-  or
-  wrong = "govornment" and right = "government"
-  or
-  wrong = "gracefull" and right = "graceful"
-  or
-  wrong = "graet" and right = "great"
-  or
-  wrong = "grafitti" and right = "graffiti"
-  or
-  wrong = "gramatically" and right = "grammatically"
-  or
-  wrong = "grammaticaly" and right = "grammatically"
-  or
-  wrong = "grammer" and right = "grammar"
-  or
-  wrong = "grat" and right = "great"
-  or
-  wrong = "gratuitious" and right = "gratuitous"
-  or
-  wrong = "greatful" and right = "grateful"
-  or
-  wrong = "greatfully" and right = "gratefully"
-  or
-  wrong = "greif" and right = "grief"
-  or
-  wrong = "gridles" and right = "griddles"
-  or
-  wrong = "gropu" and right = "group"
-  or
-  wrong = "grwo" and right = "grow"
-  or
-  wrong = "guaduloupe" and right = "guadalupe"
-  or
-  wrong = "guaduloupe" and right = "guadeloupe"
-  or
-  wrong = "guadulupe" and right = "guadalupe"
-  or
-  wrong = "guadulupe" and right = "guadeloupe"
-  or
-  wrong = "guage" and right = "gauge"
-  or
-  wrong = "guarentee" and right = "guarantee"
-  or
-  wrong = "guarenteed" and right = "guaranteed"
-  or
-  wrong = "guarentees" and right = "guarantees"
-  or
-  wrong = "guatamala" and right = "guatemala"
-  or
-  wrong = "guatamalan" and right = "guatemalan"
-  or
-  wrong = "guerrila" and right = "guerrilla"
-  or
-  wrong = "guerrilas" and right = "guerrillas"
-  or
-  wrong = "guidence" and right = "guidance"
-  or
-  wrong = "guilia" and right = "giulia"
-  or
-  wrong = "guilio" and right = "giulio"
-  or
-  wrong = "guiness" and right = "guinness"
-  or
-  wrong = "guiseppe" and right = "giuseppe"
-  or
-  wrong = "gunanine" and right = "guanine"
-  or
-  wrong = "gurantee" and right = "guarantee"
-  or
-  wrong = "guranteed" and right = "guaranteed"
-  or
-  wrong = "gurantees" and right = "guarantees"
-  or
-  wrong = "guttaral" and right = "guttural"
-  or
-  wrong = "gutteral" and right = "guttural"
-  or
-  wrong = "habaeus" and right = "habeas"
-  or
-  wrong = "habeus" and right = "habeas"
-  or
-  wrong = "habsbourg" and right = "habsburg"
-  or
-  wrong = "haemorrage" and right = "haemorrhage"
-  or
-  wrong = "haev" and right = "have"
-  or
-  wrong = "haev" and right = "heave"
-  or
-  wrong = "halarious" and right = "hilarious"
-  or
-  wrong = "hallowean" and right = "halloween"
-  or
-  wrong = "halp" and right = "help"
-  or
-  wrong = "hander" and right = "handler"
-  or
-  wrong = "hapen" and right = "happen"
-  or
-  wrong = "hapened" and right = "happened"
-  or
-  wrong = "hapening" and right = "happening"
-  or
-  wrong = "happend" and right = "happened"
-  or
-  wrong = "happended" and right = "happened"
-  or
-  wrong = "happenned" and right = "happened"
-  or
-  wrong = "harased" and right = "harassed"
-  or
-  wrong = "harases" and right = "harasses"
-  or
-  wrong = "harasment" and right = "harassment"
-  or
-  wrong = "harasments" and right = "harassments"
-  or
-  wrong = "harassement" and right = "harassment"
-  or
-  wrong = "harras" and right = "harass"
-  or
-  wrong = "harrased" and right = "harassed"
-  or
-  wrong = "harrases" and right = "harasses"
-  or
-  wrong = "harrasing" and right = "harassing"
-  or
-  wrong = "harrasment" and right = "harassment"
-  or
-  wrong = "harrasments" and right = "harassments"
-  or
-  wrong = "harrassed" and right = "harassed"
-  or
-  wrong = "harrasses" and right = "harassed"
-  or
-  wrong = "harrassing" and right = "harassing"
-  or
-  wrong = "harrassment" and right = "harassment"
-  or
-  wrong = "harrassments" and right = "harassments"
-  or
-  wrong = "hatian" and right = "haitian"
-  or
-  wrong = "haviest" and right = "heaviest"
-  or
-  wrong = "headquarer" and right = "headquarter"
-  or
-  wrong = "headquater" and right = "headquarter"
-  or
-  wrong = "headquatered" and right = "headquartered"
-  or
-  wrong = "headquaters" and right = "headquarters"
-  or
-  wrong = "healthercare" and right = "healthcare"
-  or
-  wrong = "heared" and right = "heard"
-  or
-  wrong = "heathy" and right = "healthy"
-  or
-  wrong = "heidelburg" and right = "heidelberg"
-  or
-  wrong = "heigher" and right = "higher"
-  or
-  wrong = "heirarchy" and right = "hierarchy"
-  or
-  wrong = "heiroglyphics" and right = "hieroglyphics"
-  or
-  wrong = "helment" and right = "helmet"
-  or
-  wrong = "helpfull" and right = "helpful"
-  or
-  wrong = "helpped" and right = "helped"
-  or
-  wrong = "hemmorhage" and right = "hemorrhage"
-  or
-  wrong = "herad" and right = "heard"
-  or
-  wrong = "herad" and right = "hera"
-  or
-  wrong = "heridity" and right = "heredity"
-  or
-  wrong = "heroe" and right = "hero"
-  or
-  wrong = "heros" and right = "heroes"
-  or
-  wrong = "hertiage" and right = "heritage"
-  or
-  wrong = "hertzs" and right = "hertz"
-  or
-  wrong = "hesistant" and right = "hesitant"
-  or
-  wrong = "heterogenous" and right = "heterogeneous"
-  or
-  wrong = "hieght" and right = "height"
-  or
-  wrong = "hierachical" and right = "hierarchical"
-  or
-  wrong = "hierachies" and right = "hierarchies"
-  or
-  wrong = "hierachy" and right = "hierarchy"
-  or
-  wrong = "hierarcical" and right = "hierarchical"
-  or
-  wrong = "hierarcy" and right = "hierarchy"
-  or
-  wrong = "hieroglph" and right = "hieroglyph"
-  or
-  wrong = "hieroglphs" and right = "hieroglyphs"
-  or
-  wrong = "higer" and right = "higher"
-  or
-  wrong = "higest" and right = "highest"
-  or
-  wrong = "higway" and right = "highway"
-  or
-  wrong = "hillarious" and right = "hilarious"
-  or
-  wrong = "himselv" and right = "himself"
-  or
-  wrong = "hinderance" and right = "hindrance"
-  or
-  wrong = "hinderence" and right = "hindrance"
-  or
-  wrong = "hindrence" and right = "hindrance"
-  or
-  wrong = "hipopotamus" and right = "hippopotamus"
-  or
-  wrong = "hismelf" and right = "himself"
-  or
-  wrong = "histocompatability" and right = "histocompatibility"
-  or
-  wrong = "historicians" and right = "historians"
-  or
-  wrong = "holf" and right = "hold"
-  or
-  wrong = "holliday" and right = "holiday"
-  or
-  wrong = "homogeneize" and right = "homogenize"
-  or
-  wrong = "homogeneized" and right = "homogenized"
-  or
-  wrong = "honory" and right = "honorary"
-  or
-  wrong = "horrifing" and right = "horrifying"
-  or
-  wrong = "hosited" and right = "hoisted"
-  or
-  wrong = "hospitible" and right = "hospitable"
-  or
-  wrong = "hounour" and right = "honour"
-  or
-  wrong = "housr" and right = "hours"
-  or
-  wrong = "housr" and right = "house"
-  or
-  wrong = "howver" and right = "however"
-  or
-  wrong = "hsitorians" and right = "historians"
-  or
-  wrong = "hstory" and right = "history"
-  or
-  wrong = "hten" and right = "hen"
-  or
-  wrong = "hten" and right = "the"
-  or
-  wrong = "hten" and right = "then"
-  or
-  wrong = "htere" and right = "here"
-  or
-  wrong = "htere" and right = "there"
-  or
-  wrong = "htey" and right = "they"
-  or
-  wrong = "htikn" and right = "think"
-  or
-  wrong = "hting" and right = "thing"
-  or
-  wrong = "htink" and right = "think"
-  or
-  wrong = "htis" and right = "this"
-  or
-  wrong = "humer" and right = "humor"
-  or
-  wrong = "humer" and right = "humour"
-  or
-  wrong = "humerous" and right = "humerus"
-  or
-  wrong = "humerous" and right = "humorous"
-  or
-  wrong = "huminoid" and right = "humanoid"
-  or
-  wrong = "humoural" and right = "humoral"
-  or
-  wrong = "humurous" and right = "humorous"
-  or
-  wrong = "husban" and right = "husband"
-  or
-  wrong = "hvae" and right = "have"
-  or
-  wrong = "hvaing" and right = "having"
-  or
-  wrong = "hvea" and right = "have"
-  or
-  wrong = "hvea" and right = "heave"
-  or
-  wrong = "hwihc" and right = "which"
-  or
-  wrong = "hwile" and right = "while"
-  or
-  wrong = "hwole" and right = "whole"
-  or
-  wrong = "hydogen" and right = "hydrogen"
-  or
-  wrong = "hydropile" and right = "hydrophile"
-  or
-  wrong = "hydropilic" and right = "hydrophilic"
-  or
-  wrong = "hydropobe" and right = "hydrophobe"
-  or
-  wrong = "hydropobic" and right = "hydrophobic"
-  or
-  wrong = "hygeine" and right = "hygiene"
-  or
-  wrong = "hyjack" and right = "hijack"
-  or
-  wrong = "hyjacking" and right = "hijacking"
-  or
-  wrong = "hypocracy" and right = "hypocrisy"
-  or
-  wrong = "hypocrasy" and right = "hypocrisy"
-  or
-  wrong = "hypocricy" and right = "hypocrisy"
-  or
-  wrong = "hypocrit" and right = "hypocrite"
-  or
-  wrong = "hypocrits" and right = "hypocrites"
-  or
-  wrong = "iconclastic" and right = "iconoclastic"
-  or
-  wrong = "idaeidae" and right = "idea"
-  or
-  wrong = "idaes" and right = "ideas"
-  or
-  wrong = "idealogies" and right = "ideologies"
-  or
-  wrong = "idealogy" and right = "ideology"
-  or
-  wrong = "identicial" and right = "identical"
-  or
-  wrong = "identifers" and right = "identifiers"
-  or
-  wrong = "ideosyncratic" and right = "idiosyncratic"
-  or
-  wrong = "idesa" and right = "ideas"
-  or
-  wrong = "idesa" and right = "ides"
-  or
-  wrong = "idiosyncracy" and right = "idiosyncrasy"
-  or
-  wrong = "ihaca" and right = "ithaca"
-  or
-  wrong = "illegimacy" and right = "illegitimacy"
-  or
-  wrong = "illegitmate" and right = "illegitimate"
-  or
-  wrong = "illess" and right = "illness"
-  or
-  wrong = "illiegal" and right = "illegal"
-  or
-  wrong = "illution" and right = "illusion"
-  or
-  wrong = "ilness" and right = "illness"
-  or
-  wrong = "ilogical" and right = "illogical"
-  or
-  wrong = "imagenary" and right = "imaginary"
-  or
-  wrong = "imagin" and right = "imagine"
-  or
-  wrong = "imaginery" and right = "imagery"
-  or
-  wrong = "imaginery" and right = "imaginary"
-  or
-  wrong = "imanent" and right = "eminent"
-  or
-  wrong = "imanent" and right = "imminent"
-  or
-  wrong = "imcomplete" and right = "incomplete"
-  or
-  wrong = "imediately" and right = "immediately"
-  or
-  wrong = "imense" and right = "immense"
-  or
-  wrong = "imigrant" and right = "emigrant"
-  or
-  wrong = "imigrant" and right = "immigrant"
-  or
-  wrong = "imigrated" and right = "emigrated"
-  or
-  wrong = "imigrated" and right = "immigrated"
-  or
-  wrong = "imigration" and right = "emigration"
-  or
-  wrong = "imigration" and right = "immigration"
-  or
-  wrong = "iminent" and right = "eminent"
-  or
-  wrong = "iminent" and right = "immanent"
-  or
-  wrong = "iminent" and right = "imminent"
-  or
-  wrong = "immediatley" and right = "immediately"
-  or
-  wrong = "immediatly" and right = "immediately"
-  or
-  wrong = "immidately" and right = "immediately"
-  or
-  wrong = "immidiately" and right = "immediately"
-  or
-  wrong = "immitate" and right = "imitate"
-  or
-  wrong = "immitated" and right = "imitated"
-  or
-  wrong = "immitating" and right = "imitating"
-  or
-  wrong = "immitator" and right = "imitator"
-  or
-  wrong = "immunosupressant" and right = "immunosuppressant"
-  or
-  wrong = "impecabbly" and right = "impeccably"
-  or
-  wrong = "impedence" and right = "impedance"
-  or
-  wrong = "implamenting" and right = "implementing"
-  or
-  wrong = "impliment" and right = "implement"
-  or
-  wrong = "implimented" and right = "implemented"
-  or
-  wrong = "imploys" and right = "employs"
-  or
-  wrong = "importamt" and right = "important"
-  or
-  wrong = "impressario" and right = "impresario"
-  or
-  wrong = "imprioned" and right = "imprisoned"
-  or
-  wrong = "imprisonned" and right = "imprisoned"
-  or
-  wrong = "improvision" and right = "improvisation"
-  or
-  wrong = "improvments" and right = "improvements"
-  or
-  wrong = "inablility" and right = "inability"
-  or
-  wrong = "inaccessable" and right = "inaccessible"
-  or
-  wrong = "inadiquate" and right = "inadequate"
-  or
-  wrong = "inadquate" and right = "inadequate"
-  or
-  wrong = "inadvertant" and right = "inadvertent"
-  or
-  wrong = "inadvertantly" and right = "inadvertently"
-  or
-  wrong = "inagurated" and right = "inaugurated"
-  or
-  wrong = "inaguration" and right = "inauguration"
-  or
-  wrong = "inappropiate" and right = "inappropriate"
-  or
-  wrong = "inaugures" and right = "inaugurates"
-  or
-  wrong = "inbalance" and right = "imbalance"
-  or
-  wrong = "inbalanced" and right = "imbalanced"
-  or
-  wrong = "inbetween" and right = "between"
-  or
-  wrong = "incarcirated" and right = "incarcerated"
-  or
-  wrong = "incidentially" and right = "incidentally"
-  or
-  wrong = "incidently" and right = "incidentally"
-  or
-  wrong = "inclreased" and right = "increased"
-  or
-  wrong = "includ" and right = "include"
-  or
-  wrong = "includng" and right = "including"
-  or
-  wrong = "incompatabilities" and right = "incompatibilities"
-  or
-  wrong = "incompatability" and right = "incompatibility"
-  or
-  wrong = "incompatable" and right = "incompatible"
-  or
-  wrong = "incompatablities" and right = "incompatibilities"
-  or
-  wrong = "incompatablity" and right = "incompatibility"
-  or
-  wrong = "incompatiblities" and right = "incompatibilities"
-  or
-  wrong = "incompatiblity" and right = "incompatibility"
-  or
-  wrong = "incompetance" and right = "incompetence"
-  or
-  wrong = "incompetant" and right = "incompetent"
-  or
-  wrong = "incomptable" and right = "incompatible"
-  or
-  wrong = "incomptetent" and right = "incompetent"
-  or
-  wrong = "inconsistant" and right = "inconsistent"
-  or
-  wrong = "incoroporated" and right = "incorporated"
-  or
-  wrong = "incorperation" and right = "incorporation"
-  or
-  wrong = "incorportaed" and right = "incorporated"
-  or
-  wrong = "incorprates" and right = "incorporates"
-  or
-  wrong = "incorruptable" and right = "incorruptible"
-  or
-  wrong = "incramentally" and right = "incrementally"
-  or
-  wrong = "increadible" and right = "incredible"
-  or
-  wrong = "incredable" and right = "incredible"
-  or
-  wrong = "inctroduce" and right = "introduce"
-  or
-  wrong = "inctroduced" and right = "introduced"
-  or
-  wrong = "incuding" and right = "including"
-  or
-  wrong = "incunabla" and right = "incunabula"
-  or
-  wrong = "indefinately" and right = "indefinitely"
-  or
-  wrong = "indefineable" and right = "undefinable"
-  or
-  wrong = "indefinitly" and right = "indefinitely"
-  or
-  wrong = "indentical" and right = "identical"
-  or
-  wrong = "indepedantly" and right = "independently"
-  or
-  wrong = "indepedence" and right = "independence"
-  or
-  wrong = "independance" and right = "independence"
-  or
-  wrong = "independant" and right = "independent"
-  or
-  wrong = "independantly" and right = "independently"
-  or
-  wrong = "independece" and right = "independence"
-  or
-  wrong = "independendet" and right = "independent"
-  or
-  wrong = "indespensable" and right = "indispensable"
-  or
-  wrong = "indespensible" and right = "indispensable"
-  or
-  wrong = "indictement" and right = "indictment"
-  or
-  wrong = "indigineous" and right = "indigenous"
-  or
-  wrong = "indipendence" and right = "independence"
-  or
-  wrong = "indipendent" and right = "independent"
-  or
-  wrong = "indipendently" and right = "independently"
-  or
-  wrong = "indispensible" and right = "indispensable"
-  or
-  wrong = "indisputible" and right = "indisputable"
-  or
-  wrong = "indisputibly" and right = "indisputably"
-  or
-  wrong = "indite" and right = "indict"
-  or
-  wrong = "individualy" and right = "individually"
-  or
-  wrong = "indpendent" and right = "independent"
-  or
-  wrong = "indpendently" and right = "independently"
-  or
-  wrong = "indulgue" and right = "indulge"
-  or
-  wrong = "indutrial" and right = "industrial"
-  or
-  wrong = "indviduals" and right = "individuals"
-  or
-  wrong = "inefficienty" and right = "inefficiently"
-  or
-  wrong = "inevatible" and right = "inevitable"
-  or
-  wrong = "inevitible" and right = "inevitable"
-  or
-  wrong = "inevititably" and right = "inevitably"
-  or
-  wrong = "infalability" and right = "infallibility"
-  or
-  wrong = "infallable" and right = "infallible"
-  or
-  wrong = "infectuous" and right = "infectious"
-  or
-  wrong = "infered" and right = "inferred"
-  or
-  wrong = "infilitrate" and right = "infiltrate"
-  or
-  wrong = "infilitrated" and right = "infiltrated"
-  or
-  wrong = "infilitration" and right = "infiltration"
-  or
-  wrong = "infinit" and right = "infinite"
-  or
-  wrong = "inflamation" and right = "inflammation"
-  or
-  wrong = "influencial" and right = "influential"
-  or
-  wrong = "influented" and right = "influenced"
-  or
-  wrong = "infomation" and right = "information"
-  or
-  wrong = "informtion" and right = "information"
-  or
-  wrong = "infrantryman" and right = "infantryman"
-  or
-  wrong = "infrigement" and right = "infringement"
-  or
-  wrong = "ingenius" and right = "ingenious"
-  or
-  wrong = "ingreediants" and right = "ingredients"
-  or
-  wrong = "inhabitans" and right = "inhabitants"
-  or
-  wrong = "inherantly" and right = "inherently"
-  or
-  wrong = "inheritage" and right = "heritage"
-  or
-  wrong = "inheritage" and right = "inheritance"
-  or
-  wrong = "inheritence" and right = "inheritance"
-  or
-  wrong = "inital" and right = "initial"
-  or
-  wrong = "initalize" and right = "initialize"
-  or
-  wrong = "initally" and right = "initially"
-  or
-  wrong = "initation" and right = "initiation"
-  or
-  wrong = "initiaitive" and right = "initiative"
-  or
-  wrong = "inlcuding" and right = "including"
-  or
-  wrong = "inmigrant" and right = "immigrant"
-  or
-  wrong = "inmigrants" and right = "immigrants"
-  or
-  wrong = "innoculated" and right = "inoculated"
-  or
-  wrong = "inocence" and right = "innocence"
-  or
-  wrong = "inofficial" and right = "unofficial"
-  or
-  wrong = "inot" and right = "into"
-  or
-  wrong = "inpeach" and right = "impeach"
-  or
-  wrong = "inpending" and right = "impending"
-  or
-  wrong = "inpenetrable" and right = "impenetrable"
-  or
-  wrong = "inpolite" and right = "impolite"
-  or
-  wrong = "inprisonment" and right = "imprisonment"
-  or
-  wrong = "inproving" and right = "improving"
-  or
-  wrong = "insectiverous" and right = "insectivorous"
-  or
-  wrong = "insensative" and right = "insensitive"
-  or
-  wrong = "inseperable" and right = "inseparable"
-  or
-  wrong = "insistance" and right = "insistence"
-  or
-  wrong = "insitution" and right = "institution"
-  or
-  wrong = "insitutions" and right = "institutions"
-  or
-  wrong = "inspite" and right = "inspire"
-  or
-  wrong = "instade" and right = "instead"
-  or
-  wrong = "instatance" and right = "instance"
-  or
-  wrong = "institue" and right = "institute"
-  or
-  wrong = "instuction" and right = "instruction"
-  or
-  wrong = "instuments" and right = "instruments"
-  or
-  wrong = "instutionalized" and right = "institutionalized"
-  or
-  wrong = "instutions" and right = "intuitions"
-  or
-  wrong = "insurence" and right = "insurance"
-  or
-  wrong = "intelectual" and right = "intellectual"
-  or
-  wrong = "inteligence" and right = "intelligence"
-  or
-  wrong = "inteligent" and right = "intelligent"
-  or
-  wrong = "intenational" and right = "international"
-  or
-  wrong = "intented" and right = "indented"
-  or
-  wrong = "intented" and right = "intended"
-  or
-  wrong = "intepretation" and right = "interpretation"
-  or
-  wrong = "intepretator" and right = "interpretor"
-  or
-  wrong = "interational" and right = "international"
-  or
-  wrong = "interbread" and right = "interbred"
-  or
-  wrong = "interbread" and right = "interbreed"
-  or
-  wrong = "interchangable" and right = "interchangeable"
-  or
-  wrong = "interchangably" and right = "interchangeably"
-  or
-  wrong = "intercontinential" and right = "intercontinental"
-  or
-  wrong = "intercontinetal" and right = "intercontinental"
-  or
-  wrong = "intered" and right = "interned"
-  or
-  wrong = "intered" and right = "interred"
-  or
-  wrong = "interelated" and right = "interrelated"
-  or
-  wrong = "interferance" and right = "interference"
-  or
-  wrong = "interfereing" and right = "interfering"
-  or
-  wrong = "intergrated" and right = "integrated"
-  or
-  wrong = "intergration" and right = "integration"
-  or
-  wrong = "interm" and right = "interim"
-  or
-  wrong = "internation" and right = "international"
-  or
-  wrong = "interpet" and right = "interpret"
-  or
-  wrong = "interrim" and right = "interim"
-  or
-  wrong = "interrugum" and right = "interregnum"
-  or
-  wrong = "intertaining" and right = "entertaining"
-  or
-  wrong = "interupt" and right = "interrupt"
-  or
-  wrong = "intervines" and right = "intervenes"
-  or
-  wrong = "intevene" and right = "intervene"
-  or
-  wrong = "intial" and right = "initial"
-  or
-  wrong = "intialize" and right = "initialize"
-  or
-  wrong = "intialized" and right = "initialized"
-  or
-  wrong = "intially" and right = "initially"
-  or
-  wrong = "intrduced" and right = "introduced"
-  or
-  wrong = "intrest" and right = "interest"
-  or
-  wrong = "introdued" and right = "introduced"
-  or
-  wrong = "intruduced" and right = "introduced"
-  or
-  wrong = "intrument" and right = "instrument"
-  or
-  wrong = "intrumental" and right = "instrumental"
-  or
-  wrong = "intruments" and right = "instruments"
-  or
-  wrong = "intrusted" and right = "entrusted"
-  or
-  wrong = "intutive" and right = "intuitive"
-  or
-  wrong = "intutively" and right = "intuitively"
-  or
-  wrong = "inudstry" and right = "industry"
-  or
-  wrong = "inumerable" and right = "enumerable"
-  or
-  wrong = "inumerable" and right = "innumerable"
-  or
-  wrong = "inventer" and right = "inventor"
-  or
-  wrong = "invertibrates" and right = "invertebrates"
-  or
-  wrong = "investingate" and right = "investigate"
-  or
-  wrong = "involvment" and right = "involvement"
-  or
-  wrong = "irelevent" and right = "irrelevant"
-  or
-  wrong = "iresistable" and right = "irresistible"
-  or
-  wrong = "iresistably" and right = "irresistibly"
-  or
-  wrong = "iresistible" and right = "irresistible"
-  or
-  wrong = "iresistibly" and right = "irresistibly"
-  or
-  wrong = "iritable" and right = "irritable"
-  or
-  wrong = "iritated" and right = "irritated"
-  or
-  wrong = "ironicly" and right = "ironically"
-  or
-  wrong = "irregardless" and right = "regardless"
-  or
-  wrong = "irrelevent" and right = "irrelevant"
-  or
-  wrong = "irreplacable" and right = "irreplaceable"
-  or
-  wrong = "irresistable" and right = "irresistible"
-  or
-  wrong = "irresistably" and right = "irresistibly"
-  or
-  wrong = "israelies" and right = "israelis"
-  or
-  wrong = "issueing" and right = "issuing"
-  or
-  wrong = "itnroduced" and right = "introduced"
-  or
-  wrong = "iunior" and right = "junior"
-  or
-  wrong = "iwll" and right = "will"
-  or
-  wrong = "iwth" and right = "with"
-  or
-  wrong = "janurary" and right = "january"
-  or
-  wrong = "januray" and right = "january"
-  or
-  wrong = "japanes" and right = "japanese"
-  or
-  wrong = "jaques" and right = "jacques"
-  or
-  wrong = "jeapardy" and right = "jeopardy"
-  or
-  wrong = "jewllery" and right = "jewellery"
-  or
-  wrong = "johanine" and right = "johannine"
-  or
-  wrong = "jorunal" and right = "journal"
-  or
-  wrong = "jospeh" and right = "joseph"
-  or
-  wrong = "jouney" and right = "journey"
-  or
-  wrong = "journied" and right = "journeyed"
-  or
-  wrong = "journies" and right = "journeys"
-  or
-  wrong = "jstu" and right = "just"
-  or
-  wrong = "jsut" and right = "just"
-  or
-  wrong = "juadaism" and right = "judaism"
-  or
-  wrong = "juadism" and right = "judaism"
-  or
-  wrong = "judical" and right = "judicial"
-  or
-  wrong = "judisuary" and right = "judiciary"
-  or
-  wrong = "juducial" and right = "judicial"
-  or
-  wrong = "juristiction" and right = "jurisdiction"
-  or
-  wrong = "juristictions" and right = "jurisdictions"
-  or
-  wrong = "kindergarden" and right = "kindergarten"
-  or
-  wrong = "klenex" and right = "kleenex"
-  or
-  wrong = "knifes" and right = "knives"
-  or
-  wrong = "knive" and right = "knife"
-  or
-  wrong = "knowlege" and right = "knowledge"
-  or
-  wrong = "knowlegeable" and right = "knowledgeable"
-  or
-  wrong = "knwo" and right = "know"
-  or
-  wrong = "knwos" and right = "knows"
-  or
-  wrong = "konw" and right = "know"
-  or
-  wrong = "konws" and right = "knows"
-  or
-  wrong = "kwno" and right = "know"
-  or
-  wrong = "labatory" and right = "laboratory"
-  or
-  wrong = "labatory" and right = "lavatory"
-  or
-  wrong = "labled" and right = "labeled"
-  or
-  wrong = "labled" and right = "labelled"
-  or
-  wrong = "labratory" and right = "laboratory"
-  or
-  wrong = "laguage" and right = "language"
-  or
-  wrong = "laguages" and right = "languages"
-  or
-  wrong = "langage" and right = "language"
-  or
-  wrong = "langauge" and right = "language"
-  or
-  wrong = "larg" and right = "large"
-  or
-  wrong = "largst" and right = "largest"
-  or
-  wrong = "larrry" and right = "larry"
-  or
-  wrong = "lastr" and right = "last"
-  or
-  wrong = "lattitude" and right = "latitude"
-  or
-  wrong = "launchs" and right = "launch"
-  or
-  wrong = "launchs" and right = "launches"
-  or
-  wrong = "launhed" and right = "launched"
-  or
-  wrong = "lavae" and right = "larvae"
-  or
-  wrong = "layed" and right = "laid"
-  or
-  wrong = "lazyness" and right = "laziness"
-  or
-  wrong = "leage" and right = "league"
-  or
-  wrong = "leanr" and right = "lean"
-  or
-  wrong = "leanr" and right = "leaner"
-  or
-  wrong = "leanr" and right = "learn"
-  or
-  wrong = "leathal" and right = "lethal"
-  or
-  wrong = "lefted" and right = "left"
-  or
-  wrong = "legitamate" and right = "legitimate"
-  or
-  wrong = "legitmate" and right = "legitimate"
-  or
-  wrong = "leibnitz" and right = "leibniz"
-  or
-  wrong = "lengh" and right = "length"
-  or
-  wrong = "lenght" and right = "length"
-  or
-  wrong = "lengt" and right = "length"
-  or
-  wrong = "lenth" and right = "length"
-  or
-  wrong = "leran" and right = "learn"
-  or
-  wrong = "lerans" and right = "learns"
-  or
-  wrong = "leutenant" and right = "lieutenant"
-  or
-  wrong = "levetate" and right = "levitate"
-  or
-  wrong = "levetated" and right = "levitated"
-  or
-  wrong = "levetates" and right = "levitates"
-  or
-  wrong = "levetating" and right = "levitating"
-  or
-  wrong = "levle" and right = "level"
-  or
-  wrong = "liasion" and right = "liaison"
-  or
-  wrong = "liason" and right = "liaison"
-  or
-  wrong = "liasons" and right = "liaisons"
-  or
-  wrong = "libaries" and right = "libraries"
-  or
-  wrong = "libary" and right = "library"
-  or
-  wrong = "libell" and right = "libel"
-  or
-  wrong = "libguistic" and right = "linguistic"
-  or
-  wrong = "libguistics" and right = "linguistics"
-  or
-  wrong = "libitarianisn" and right = "libertarianism"
-  or
-  wrong = "lible" and right = "liable"
-  or
-  wrong = "lible" and right = "libel"
-  or
-  wrong = "lieing" and right = "lying"
-  or
-  wrong = "liek" and right = "like"
-  or
-  wrong = "liekd" and right = "liked"
-  or
-  wrong = "liesure" and right = "leisure"
-  or
-  wrong = "lieuenant" and right = "lieutenant"
-  or
-  wrong = "lieved" and right = "lived"
-  or
-  wrong = "liftime" and right = "lifetime"
-  or
-  wrong = "likelyhood" and right = "likelihood"
-  or
-  wrong = "linnaena" and right = "linnaean"
-  or
-  wrong = "lippizaner" and right = "lipizzaner"
-  or
-  wrong = "liquify" and right = "liquefy"
-  or
-  wrong = "liscense" and right = "licence"
-  or
-  wrong = "liscense" and right = "license"
-  or
-  wrong = "lisence" and right = "licence"
-  or
-  wrong = "lisence" and right = "license"
-  or
-  wrong = "lisense" and right = "licence"
-  or
-  wrong = "lisense" and right = "license"
-  or
-  wrong = "listners" and right = "listeners"
-  or
-  wrong = "litature" and right = "literature"
-  or
-  wrong = "literaly" and right = "literally"
-  or
-  wrong = "literture" and right = "literature"
-  or
-  wrong = "littel" and right = "little"
-  or
-  wrong = "litterally" and right = "literally"
-  or
-  wrong = "liuke" and right = "like"
-  or
-  wrong = "livley" and right = "lively"
-  or
-  wrong = "lmits" and right = "limits"
-  or
-  wrong = "loev" and right = "love"
-  or
-  wrong = "lonelyness" and right = "loneliness"
-  or
-  wrong = "longitudonal" and right = "longitudinal"
-  or
-  wrong = "lonley" and right = "lonely"
-  or
-  wrong = "lonly" and right = "lonely"
-  or
-  wrong = "lonly" and right = "only"
-  or
-  wrong = "loosing" and right = "losing"
-  or
-  wrong = "lotharingen" and right = "lothringen"
-  or
-  wrong = "lsat" and right = "last"
-  or
-  wrong = "lukid" and right = "likud"
-  or
-  wrong = "lveo" and right = "love"
-  or
-  wrong = "lvoe" and right = "love"
-  or
-  wrong = "lybia" and right = "libya"
-  or
-  wrong = "maching" and right = "machine"
-  or
-  wrong = "maching" and right = "marching"
-  or
-  wrong = "maching" and right = "matching"
-  or
-  wrong = "mackeral" and right = "mackerel"
-  or
-  wrong = "magasine" and right = "magazine"
-  or
-  wrong = "magincian" and right = "magician"
-  or
-  wrong = "magisine" and right = "magazine"
-  or
-  wrong = "magizine" and right = "magazine"
-  or
-  wrong = "magnificient" and right = "magnificent"
-  or
-  wrong = "magolia" and right = "magnolia"
-  or
-  wrong = "mailny" and right = "mainly"
-  or
-  wrong = "maintainance" and right = "maintenance"
-  or
-  wrong = "maintainence" and right = "maintenance"
-  or
-  wrong = "maintance" and right = "maintenance"
-  or
-  wrong = "maintenence" and right = "maintenance"
-  or
-  wrong = "maintinaing" and right = "maintaining"
-  or
-  wrong = "maintioned" and right = "mentioned"
-  or
-  wrong = "majoroty" and right = "majority"
-  or
-  wrong = "maked" and right = "made"
-  or
-  wrong = "maked" and right = "marked"
-  or
-  wrong = "makse" and right = "makes"
-  or
-  wrong = "malcom" and right = "malcolm"
-  or
-  wrong = "maltesian" and right = "maltese"
-  or
-  wrong = "mamal" and right = "mammal"
-  or
-  wrong = "mamalian" and right = "mammalian"
-  or
-  wrong = "managable" and right = "manageable"
-  or
-  wrong = "managable" and right = "manageably"
-  or
-  wrong = "managment" and right = "management"
-  or
-  wrong = "maneouvre" and right = "manoeuvre"
-  or
-  wrong = "maneouvred" and right = "manoeuvred"
-  or
-  wrong = "maneouvres" and right = "manoeuvres"
-  or
-  wrong = "maneouvring" and right = "manoeuvring"
-  or
-  wrong = "manisfestations" and right = "manifestations"
-  or
-  wrong = "manoeuverability" and right = "maneuverability"
-  or
-  wrong = "manouver" and right = "maneuver"
-  or
-  wrong = "manouver" and right = "manoeuvre"
-  or
-  wrong = "manouverability" and right = "maneuverability"
-  or
-  wrong = "manouverability" and right = "manoeuverability"
-  or
-  wrong = "manouverability" and right = "manoeuvrability"
-  or
-  wrong = "manouverable" and right = "maneuverable"
-  or
-  wrong = "manouverable" and right = "manoeuvrable"
-  or
-  wrong = "manouvers" and right = "maneuvers"
-  or
-  wrong = "manouvers" and right = "manoeuvres"
-  or
-  wrong = "mantained" and right = "maintained"
-  or
-  wrong = "manuever" and right = "maneuver"
-  or
-  wrong = "manuever" and right = "manoeuvre"
-  or
-  wrong = "manuevers" and right = "maneuvers"
-  or
-  wrong = "manuevers" and right = "manoeuvres"
-  or
-  wrong = "manufacturedd" and right = "manufactured"
-  or
-  wrong = "manufature" and right = "manufacture"
-  or
-  wrong = "manufatured" and right = "manufactured"
-  or
-  wrong = "manufaturing" and right = "manufacturing"
-  or
-  wrong = "manuver" and right = "maneuver"
-  or
-  wrong = "mariage" and right = "marriage"
-  or
-  wrong = "marjority" and right = "majority"
-  or
-  wrong = "markes" and right = "marks"
-  or
-  wrong = "marketting" and right = "marketing"
-  or
-  wrong = "marmelade" and right = "marmalade"
-  or
-  wrong = "marrage" and right = "marriage"
-  or
-  wrong = "marraige" and right = "marriage"
-  or
-  wrong = "marrtyred" and right = "martyred"
-  or
-  wrong = "marryied" and right = "married"
-  or
-  wrong = "massachussets" and right = "massachusetts"
-  or
-  wrong = "massachussetts" and right = "massachusetts"
-  or
-  wrong = "masterbation" and right = "masturbation"
-  or
-  wrong = "mataphysical" and right = "metaphysical"
-  or
-  wrong = "materalists" and right = "materialist"
-  or
-  wrong = "mathamatics" and right = "mathematics"
-  or
-  wrong = "mathematican" and right = "mathematician"
-  or
-  wrong = "mathematicas" and right = "mathematics"
-  or
-  wrong = "matheticians" and right = "mathematicians"
-  or
-  wrong = "mathmatically" and right = "mathematically"
-  or
-  wrong = "mathmatician" and right = "mathematician"
-  or
-  wrong = "mathmaticians" and right = "mathematicians"
-  or
-  wrong = "mccarthyst" and right = "mccarthyist"
-  or
-  wrong = "mchanics" and right = "mechanics"
-  or
-  wrong = "meaninng" and right = "meaning"
-  or
-  wrong = "mear" and right = "mare"
-  or
-  wrong = "mear" and right = "mere"
-  or
-  wrong = "mear" and right = "wear"
-  or
-  wrong = "mechandise" and right = "merchandise"
-  or
-  wrong = "medacine" and right = "medicine"
-  or
-  wrong = "medeival" and right = "medieval"
-  or
-  wrong = "medevial" and right = "medieval"
-  or
-  wrong = "mediciney" and right = "mediciny"
-  or
-  wrong = "medievel" and right = "medieval"
-  or
-  wrong = "mediterainnean" and right = "mediterranean"
-  or
-  wrong = "mediteranean" and right = "mediterranean"
-  or
-  wrong = "meerkrat" and right = "meerkat"
-  or
-  wrong = "melieux" and right = "milieux"
-  or
-  wrong = "membranaphone" and right = "membranophone"
-  or
-  wrong = "memeber" and right = "member"
-  or
-  wrong = "menally" and right = "mentally"
-  or
-  wrong = "meranda" and right = "miranda"
-  or
-  wrong = "meranda" and right = "veranda"
-  or
-  wrong = "mercentile" and right = "mercantile"
-  or
-  wrong = "mesage" and right = "message"
-  or
-  wrong = "messanger" and right = "messenger"
-  or
-  wrong = "messenging" and right = "messaging"
-  or
-  wrong = "messsage" and right = "message"
-  or
-  wrong = "metalic" and right = "metallic"
-  or
-  wrong = "metalurgic" and right = "metallurgic"
-  or
-  wrong = "metalurgical" and right = "metallurgical"
-  or
-  wrong = "metalurgy" and right = "metallurgy"
-  or
-  wrong = "metamorphysis" and right = "metamorphosis"
-  or
-  wrong = "metaphoricial" and right = "metaphorical"
-  or
-  wrong = "meterologist" and right = "meteorologist"
-  or
-  wrong = "meterology" and right = "meteorology"
-  or
-  wrong = "methaphor" and right = "metaphor"
-  or
-  wrong = "methaphors" and right = "metaphors"
-  or
-  wrong = "michagan" and right = "michigan"
-  or
-  wrong = "micoscopy" and right = "microscopy"
-  or
-  wrong = "midwifes" and right = "midwives"
-  or
-  wrong = "mileau" and right = "milieu"
-  or
-  wrong = "milennia" and right = "millennia"
-  or
-  wrong = "milennium" and right = "millennium"
-  or
-  wrong = "mileu" and right = "milieu"
-  or
-  wrong = "miliary" and right = "military"
-  or
-  wrong = "miligram" and right = "milligram"
-  or
-  wrong = "milion" and right = "million"
-  or
-  wrong = "miliraty" and right = "military"
-  or
-  wrong = "millenia" and right = "millennia"
-  or
-  wrong = "millenial" and right = "millennial"
-  or
-  wrong = "millenialism" and right = "millennialism"
-  or
-  wrong = "millenium" and right = "millennium"
-  or
-  wrong = "millepede" and right = "millipede"
-  or
-  wrong = "millioniare" and right = "millionaire"
-  or
-  wrong = "millitant" and right = "militant"
-  or
-  wrong = "millitary" and right = "military"
-  or
-  wrong = "millon" and right = "million"
-  or
-  wrong = "miltary" and right = "military"
-  or
-  wrong = "minature" and right = "miniature"
-  or
-  wrong = "minerial" and right = "mineral"
-  or
-  wrong = "ministery" and right = "ministry"
-  or
-  wrong = "minsitry" and right = "ministry"
-  or
-  wrong = "minstries" and right = "ministries"
-  or
-  wrong = "minstry" and right = "ministry"
-  or
-  wrong = "minumum" and right = "minimum"
-  or
-  wrong = "mirrorred" and right = "mirrored"
-  or
-  wrong = "miscelaneous" and right = "miscellaneous"
-  or
-  wrong = "miscellanious" and right = "miscellaneous"
-  or
-  wrong = "miscellanous" and right = "miscellaneous"
-  or
-  wrong = "mischeivous" and right = "mischievous"
-  or
-  wrong = "mischevious" and right = "mischievous"
-  or
-  wrong = "mischievious" and right = "mischievous"
-  or
-  wrong = "misdameanor" and right = "misdemeanor"
-  or
-  wrong = "misdameanors" and right = "misdemeanors"
-  or
-  wrong = "misdemenor" and right = "misdemeanor"
-  or
-  wrong = "misdemenors" and right = "misdemeanors"
-  or
-  wrong = "misfourtunes" and right = "misfortunes"
-  or
-  wrong = "misile" and right = "missile"
-  or
-  wrong = "misouri" and right = "missouri"
-  or
-  wrong = "mispell" and right = "misspell"
-  or
-  wrong = "mispelled" and right = "misspelled"
-  or
-  wrong = "mispelling" and right = "misspelling"
-  or
-  wrong = "missen" and right = "mizzen"
-  or
-  wrong = "missisipi" and right = "mississippi"
-  or
-  wrong = "missisippi" and right = "mississippi"
-  or
-  wrong = "missle" and right = "missile"
-  or
-  wrong = "missonary" and right = "missionary"
-  or
-  wrong = "misterious" and right = "mysterious"
-  or
-  wrong = "mistery" and right = "mystery"
-  or
-  wrong = "misteryous" and right = "mysterious"
-  or
-  wrong = "mkae" and right = "make"
-  or
-  wrong = "mkaes" and right = "makes"
-  or
-  wrong = "mkaing" and right = "making"
-  or
-  wrong = "mkea" and right = "make"
-  or
-  wrong = "moderm" and right = "modem"
-  or
-  wrong = "modle" and right = "model"
-  or
-  wrong = "moent" and right = "moment"
-  or
-  wrong = "moeny" and right = "money"
-  or
-  wrong = "mohammedans" and right = "muslims"
-  or
-  wrong = "moil" and right = "mohel"
-  or
-  wrong = "moil" and right = "soil"
-  or
-  wrong = "moleclues" and right = "molecules"
-  or
-  wrong = "momento" and right = "memento"
-  or
-  wrong = "monestaries" and right = "monasteries"
-  or
-  wrong = "monestary" and right = "monastery"
-  or
-  wrong = "monestary" and right = "monetary"
-  or
-  wrong = "monickers" and right = "monikers"
-  or
-  wrong = "monolite" and right = "monolithic"
-  or
-  wrong = "monserrat" and right = "montserrat"
-  or
-  wrong = "montains" and right = "mountains"
-  or
-  wrong = "montanous" and right = "mountainous"
-  or
-  wrong = "montnana" and right = "montana"
-  or
-  wrong = "monts" and right = "months"
-  or
-  wrong = "montypic" and right = "monotypic"
-  or
-  wrong = "moreso" and right = "more"
-  or
-  wrong = "morgage" and right = "mortgage"
-  or
-  wrong = "morisette" and right = "morissette"
-  or
-  wrong = "morrisette" and right = "morissette"
-  or
-  wrong = "morroccan" and right = "moroccan"
-  or
-  wrong = "morrocco" and right = "morocco"
-  or
-  wrong = "morroco" and right = "morocco"
-  or
-  wrong = "mortage" and right = "mortgage"
-  or
-  wrong = "mosture" and right = "moisture"
-  or
-  wrong = "motiviated" and right = "motivated"
-  or
-  wrong = "mounth" and right = "month"
-  or
-  wrong = "movei" and right = "movie"
-  or
-  wrong = "movment" and right = "movement"
-  or
-  wrong = "mroe" and right = "more"
-  or
-  wrong = "mucuous" and right = "mucous"
-  or
-  wrong = "muder" and right = "murder"
-  or
-  wrong = "mudering" and right = "murdering"
-  or
-  wrong = "muhammadan" and right = "muslim"
-  or
-  wrong = "multicultralism" and right = "multiculturalism"
-  or
-  wrong = "multipled" and right = "multiplied"
-  or
-  wrong = "multiplers" and right = "multipliers"
-  or
-  wrong = "munbers" and right = "numbers"
-  or
-  wrong = "muncipalities" and right = "municipalities"
-  or
-  wrong = "muncipality" and right = "municipality"
-  or
-  wrong = "munnicipality" and right = "municipality"
-  or
-  wrong = "muscels" and right = "muscles"
-  or
-  wrong = "muscels" and right = "mussels"
-  or
-  wrong = "muscial" and right = "musical"
-  or
-  wrong = "muscician" and right = "musician"
-  or
-  wrong = "muscicians" and right = "musicians"
-  or
-  wrong = "mutiliated" and right = "mutilated"
-  or
-  wrong = "mutiple" and right = "multiple"
-  or
-  wrong = "myraid" and right = "myriad"
-  or
-  wrong = "mysef" and right = "myself"
-  or
-  wrong = "mysogynist" and right = "misogynist"
-  or
-  wrong = "mysogyny" and right = "misogyny"
-  or
-  wrong = "mysterous" and right = "mysterious"
-  or
-  wrong = "mythraic" and right = "mithraic"
-  or
-  wrong = "naieve" and right = "naive"
-  or
-  wrong = "naploeon" and right = "napoleon"
-  or
-  wrong = "napolean" and right = "napoleon"
-  or
-  wrong = "napoleonian" and right = "napoleonic"
-  or
-  wrong = "naturaly" and right = "naturally"
-  or
-  wrong = "naturely" and right = "naturally"
-  or
-  wrong = "naturual" and right = "natural"
-  or
-  wrong = "naturually" and right = "naturally"
-  or
-  wrong = "nazereth" and right = "nazareth"
-  or
-  wrong = "neccesarily" and right = "necessarily"
-  or
-  wrong = "neccesary" and right = "necessary"
-  or
-  wrong = "neccessarily" and right = "necessarily"
-  or
-  wrong = "neccessary" and right = "necessary"
-  or
-  wrong = "neccessities" and right = "necessities"
-  or
-  wrong = "necesarily" and right = "necessarily"
-  or
-  wrong = "necesary" and right = "necessary"
-  or
-  wrong = "necessiate" and right = "necessitate"
-  or
-  wrong = "neglible" and right = "negligible"
-  or
-  wrong = "negligable" and right = "negligible"
-  or
-  wrong = "negociate" and right = "negotiate"
-  or
-  wrong = "negociation" and right = "negotiation"
-  or
-  wrong = "negociations" and right = "negotiations"
-  or
-  wrong = "negotation" and right = "negotiation"
-  or
-  wrong = "neice" and right = "nice"
-  or
-  wrong = "neice" and right = "niece"
-  or
-  wrong = "neigborhood" and right = "neighborhood"
-  or
-  wrong = "neigbour" and right = "neighbor"
-  or
-  wrong = "neigbour" and right = "neighbour"
-  or
-  wrong = "neigbourhood" and right = "neighbourhood"
-  or
-  wrong = "neigbouring" and right = "neighboring"
-  or
-  wrong = "neigbouring" and right = "neighbouring"
-  or
-  wrong = "neigbours" and right = "neighbors"
-  or
-  wrong = "neigbours" and right = "neighbours"
-  or
-  wrong = "neolitic" and right = "neolithic"
-  or
-  wrong = "nessasarily" and right = "necessarily"
-  or
-  wrong = "nessecary" and right = "necessary"
-  or
-  wrong = "nestin" and right = "nesting"
-  or
-  wrong = "neverthless" and right = "nevertheless"
-  or
-  wrong = "newletters" and right = "newsletters"
-  or
-  wrong = "nickle" and right = "nickel"
-  or
-  wrong = "nightime" and right = "nighttime"
-  or
-  wrong = "nineth" and right = "ninth"
-  or
-  wrong = "ninteenth" and right = "nineteenth"
-  or
-  wrong = "ninty" and right = "ninety"
-  or
-  wrong = "nkow" and right = "know"
-  or
-  wrong = "nkwo" and right = "know"
-  or
-  wrong = "nmae" and right = "name"
-  or
-  wrong = "noncombatents" and right = "noncombatants"
-  or
-  wrong = "nonsence" and right = "nonsense"
-  or
-  wrong = "nontheless" and right = "nonetheless"
-  or
-  wrong = "norhern" and right = "northern"
-  or
-  wrong = "northen" and right = "northern"
-  or
-  wrong = "northereastern" and right = "northeastern"
-  or
-  wrong = "notabley" and right = "notably"
-  or
-  wrong = "noteable" and right = "notable"
-  or
-  wrong = "noteably" and right = "notably"
-  or
-  wrong = "noteriety" and right = "notoriety"
-  or
-  wrong = "noth" and right = "north"
-  or
-  wrong = "nothern" and right = "northern"
-  or
-  wrong = "noticable" and right = "noticeable"
-  or
-  wrong = "noticably" and right = "noticeably"
-  or
-  wrong = "notications" and right = "notifications"
-  or
-  wrong = "noticeing" and right = "noticing"
-  or
-  wrong = "noticible" and right = "noticeable"
-  or
-  wrong = "notwhithstanding" and right = "notwithstanding"
-  or
-  wrong = "noveau" and right = "nouveau"
-  or
-  wrong = "novermber" and right = "november"
-  or
-  wrong = "nowdays" and right = "nowadays"
-  or
-  wrong = "nowe" and right = "now"
-  or
-  wrong = "nto" and right = "not"
-  or
-  wrong = "nubmer" and right = "number"
-  or
-  wrong = "nucular" and right = "nuclear"
-  or
-  wrong = "nuculear" and right = "nuclear"
-  or
-  wrong = "nuisanse" and right = "nuisance"
-  or
-  wrong = "nullabour" and right = "nullarbor"
-  or
-  wrong = "numberous" and right = "numerous"
-  or
-  wrong = "nuremburg" and right = "nuremberg"
-  or
-  wrong = "nusance" and right = "nuisance"
-  or
-  wrong = "nutritent" and right = "nutrient"
-  or
-  wrong = "nutritents" and right = "nutrients"
-  or
-  wrong = "nuturing" and right = "nurturing"
-  or
-  wrong = "obect" and right = "object"
-  or
-  wrong = "obediance" and right = "obedience"
-  or
-  wrong = "obediant" and right = "obedient"
-  or
-  wrong = "obejct" and right = "object"
-  or
-  wrong = "obession" and right = "obsession"
-  or
-  wrong = "obssessed" and right = "obsessed"
-  or
-  wrong = "obstacal" and right = "obstacle"
-  or
-  wrong = "obstancles" and right = "obstacles"
-  or
-  wrong = "obstruced" and right = "obstructed"
-  or
-  wrong = "ocasion" and right = "occasion"
-  or
-  wrong = "ocasional" and right = "occasional"
-  or
-  wrong = "ocasionally" and right = "occasionally"
-  or
-  wrong = "ocasionaly" and right = "occasionally"
-  or
-  wrong = "ocasioned" and right = "occasioned"
-  or
-  wrong = "ocasions" and right = "occasions"
-  or
-  wrong = "ocassion" and right = "occasion"
-  or
-  wrong = "ocassional" and right = "occasional"
-  or
-  wrong = "ocassionally" and right = "occasionally"
-  or
-  wrong = "ocassionaly" and right = "occasionally"
-  or
-  wrong = "ocassioned" and right = "occasioned"
-  or
-  wrong = "ocassions" and right = "occasions"
-  or
-  wrong = "occaison" and right = "occasion"
-  or
-  wrong = "occassion" and right = "occasion"
-  or
-  wrong = "occassional" and right = "occasional"
-  or
-  wrong = "occassionally" and right = "occasionally"
-  or
-  wrong = "occassionaly" and right = "occasionally"
-  or
-  wrong = "occassioned" and right = "occasioned"
-  or
-  wrong = "occassions" and right = "occasions"
-  or
-  wrong = "occationally" and right = "occasionally"
-  or
-  wrong = "occour" and right = "occur"
-  or
-  wrong = "occurance" and right = "occurrence"
-  or
-  wrong = "occurances" and right = "occurrences"
-  or
-  wrong = "occured" and right = "occurred"
-  or
-  wrong = "occurence" and right = "occurrence"
-  or
-  wrong = "occurences" and right = "occurrences"
-  or
-  wrong = "occuring" and right = "occurring"
-  or
-  wrong = "occurr" and right = "occur"
-  or
-  wrong = "occurrance" and right = "occurrence"
-  or
-  wrong = "occurrances" and right = "occurrences"
-  or
-  wrong = "octohedra" and right = "octahedra"
-  or
-  wrong = "octohedral" and right = "octahedral"
-  or
-  wrong = "octohedron" and right = "octahedron"
-  or
-  wrong = "ocuntries" and right = "countries"
-  or
-  wrong = "ocuntry" and right = "country"
-  or
-  wrong = "ocurr" and right = "occur"
-  or
-  wrong = "ocurrance" and right = "occurrence"
-  or
-  wrong = "ocurred" and right = "occurred"
-  or
-  wrong = "ocurrence" and right = "occurrence"
-  or
-  wrong = "offcers" and right = "officers"
-  or
-  wrong = "offcially" and right = "officially"
-  or
-  wrong = "offereings" and right = "offerings"
-  or
-  wrong = "offical" and right = "official"
-  or
-  wrong = "offically" and right = "officially"
-  or
-  wrong = "officals" and right = "officials"
-  or
-  wrong = "officaly" and right = "officially"
-  or
-  wrong = "officialy" and right = "officially"
-  or
-  wrong = "offred" and right = "offered"
-  or
-  wrong = "oftenly" and right = "often"
-  or
-  wrong = "oging" and right = "going"
-  or
-  wrong = "oging" and right = "ogling"
-  or
-  wrong = "oject" and right = "object"
-  or
-  wrong = "omision" and right = "omission"
-  or
-  wrong = "omited" and right = "omitted"
-  or
-  wrong = "omiting" and right = "omitting"
-  or
-  wrong = "omlette" and right = "omelette"
-  or
-  wrong = "ommision" and right = "omission"
-  or
-  wrong = "ommited" and right = "omitted"
-  or
-  wrong = "ommiting" and right = "omitting"
-  or
-  wrong = "ommitted" and right = "omitted"
-  or
-  wrong = "ommitting" and right = "omitting"
-  or
-  wrong = "omniverous" and right = "omnivorous"
-  or
-  wrong = "omniverously" and right = "omnivorously"
-  or
-  wrong = "omre" and right = "more"
-  or
-  wrong = "onot" and right = "not"
-  or
-  wrong = "onot" and right = "note"
-  or
-  wrong = "onyl" and right = "only"
-  or
-  wrong = "openess" and right = "openness"
-  or
-  wrong = "oponent" and right = "opponent"
-  or
-  wrong = "oportunity" and right = "opportunity"
-  or
-  wrong = "opose" and right = "oppose"
-  or
-  wrong = "oposite" and right = "opposite"
-  or
-  wrong = "oposition" and right = "opposition"
-  or
-  wrong = "oppenly" and right = "openly"
-  or
-  wrong = "oppinion" and right = "opinion"
-  or
-  wrong = "opponant" and right = "opponent"
-  or
-  wrong = "oppononent" and right = "opponent"
-  or
-  wrong = "oppositition" and right = "opposition"
-  or
-  wrong = "oppossed" and right = "opposed"
-  or
-  wrong = "opprotunity" and right = "opportunity"
-  or
-  wrong = "opression" and right = "oppression"
-  or
-  wrong = "opressive" and right = "oppressive"
-  or
-  wrong = "opthalmic" and right = "ophthalmic"
-  or
-  wrong = "opthalmologist" and right = "ophthalmologist"
-  or
-  wrong = "opthalmology" and right = "ophthalmology"
-  or
-  wrong = "opthamologist" and right = "ophthalmologist"
-  or
-  wrong = "optmizations" and right = "optimizations"
-  or
-  wrong = "optomism" and right = "optimism"
-  or
-  wrong = "orded" and right = "ordered"
-  or
-  wrong = "organim" and right = "organism"
-  or
-  wrong = "organistion" and right = "organisation"
-  or
-  wrong = "organiztion" and right = "organization"
-  or
-  wrong = "orgin" and right = "organ"
-  or
-  wrong = "orgin" and right = "origin"
-  or
-  wrong = "orginal" and right = "original"
-  or
-  wrong = "orginally" and right = "originally"
-  or
-  wrong = "orginize" and right = "organise"
-  or
-  wrong = "oridinarily" and right = "ordinarily"
-  or
-  wrong = "origanaly" and right = "originally"
-  or
-  wrong = "originall" and right = "original"
-  or
-  wrong = "originall" and right = "originally"
-  or
-  wrong = "originaly" and right = "originally"
-  or
-  wrong = "originially" and right = "originally"
-  or
-  wrong = "originnally" and right = "originally"
-  or
-  wrong = "origional" and right = "original"
-  or
-  wrong = "orignally" and right = "originally"
-  or
-  wrong = "orignially" and right = "originally"
-  or
-  wrong = "otehr" and right = "other"
-  or
-  wrong = "oublisher" and right = "publisher"
-  or
-  wrong = "ouevre" and right = "oeuvre"
-  or
-  wrong = "ouput" and right = "output"
-  or
-  wrong = "oustanding" and right = "outstanding"
-  or
-  wrong = "overriden" and right = "overridden"
-  or
-  wrong = "overshaddowed" and right = "overshadowed"
-  or
-  wrong = "overwelming" and right = "overwhelming"
-  or
-  wrong = "overwheliming" and right = "overwhelming"
-  or
-  wrong = "owrk" and right = "work"
-  or
-  wrong = "owudl" and right = "would"
-  or
-  wrong = "oxigen" and right = "oxygen"
-  or
-  wrong = "oximoron" and right = "oxymoron"
-  or
-  wrong = "p0enis" and right = "penis"
-  or
-  wrong = "paide" and right = "paid"
-  or
-  wrong = "paitience" and right = "patience"
-  or
-  wrong = "palce" and right = "palace"
-  or
-  wrong = "palce" and right = "place"
-  or
-  wrong = "paleolitic" and right = "paleolithic"
-  or
-  wrong = "paliamentarian" and right = "parliamentarian"
-  or
-  wrong = "palistian" and right = "palestinian"
-  or
-  wrong = "palistinian" and right = "palestinian"
-  or
-  wrong = "palistinians" and right = "palestinians"
-  or
-  wrong = "pallete" and right = "palette"
-  or
-  wrong = "pamflet" and right = "pamphlet"
-  or
-  wrong = "pamplet" and right = "pamphlet"
-  or
-  wrong = "pantomine" and right = "pantomime"
-  or
-  wrong = "papanicalou" and right = "papanicolaou"
-  or
-  wrong = "paralel" and right = "parallel"
-  or
-  wrong = "paralell" and right = "parallel"
-  or
-  wrong = "paralelly" and right = "parallelly"
-  or
-  wrong = "paralely" and right = "parallelly"
-  or
-  wrong = "parallely" and right = "parallelly"
-  or
-  wrong = "paramater" and right = "parameter"
-  or
-  wrong = "paramters" and right = "parameters"
-  or
-  wrong = "parametarized" and right = "parameterized"
-  or
-  wrong = "paranthesis" and right = "parenthesis"
-  or
-  wrong = "paraphenalia" and right = "paraphernalia"
-  or
-  wrong = "parellels" and right = "parallels"
-  or
-  wrong = "parisitic" and right = "parasitic"
-  or
-  wrong = "parituclar" and right = "particular"
-  or
-  wrong = "parliment" and right = "parliament"
-  or
-  wrong = "parrakeets" and right = "parakeets"
-  or
-  wrong = "parralel" and right = "parallel"
-  or
-  wrong = "parrallel" and right = "parallel"
-  or
-  wrong = "parrallell" and right = "parallel"
-  or
-  wrong = "parrallelly" and right = "parallelly"
-  or
-  wrong = "parrallely" and right = "parallelly"
-  or
-  wrong = "partialy" and right = "partially"
-  or
-  wrong = "particually" and right = "particularly"
-  or
-  wrong = "particualr" and right = "particular"
-  or
-  wrong = "particuarly" and right = "particularly"
-  or
-  wrong = "particularily" and right = "particularly"
-  or
-  wrong = "particulary" and right = "particularly"
-  or
-  wrong = "pary" and right = "party"
-  or
-  wrong = "pased" and right = "passed"
-  or
-  wrong = "pasengers" and right = "passengers"
-  or
-  wrong = "passerbys" and right = "passersby"
-  or
-  wrong = "pasttime" and right = "pastime"
-  or
-  wrong = "pastural" and right = "pastoral"
-  or
-  wrong = "paticular" and right = "particular"
-  or
-  wrong = "pattented" and right = "patented"
-  or
-  wrong = "pavillion" and right = "pavilion"
-  or
-  wrong = "payed" and right = "paid"
-  or
-  wrong = "pblisher" and right = "publisher"
-  or
-  wrong = "pbulisher" and right = "publisher"
-  or
-  wrong = "peageant" and right = "pageant"
-  or
-  wrong = "peaple" and right = "people"
-  or
-  wrong = "peaples" and right = "peoples"
-  or
-  wrong = "peculure" and right = "peculiar"
-  or
-  wrong = "pedestrain" and right = "pedestrian"
-  or
-  wrong = "peformed" and right = "performed"
-  or
-  wrong = "peice" and right = "piece"
-  or
-  wrong = "peloponnes" and right = "peloponnesus"
-  or
-  wrong = "penatly" and right = "penalty"
-  or
-  wrong = "penerator" and right = "penetrator"
-  or
-  wrong = "penisula" and right = "peninsula"
-  or
-  wrong = "penisular" and right = "peninsular"
-  or
-  wrong = "penninsula" and right = "peninsula"
-  or
-  wrong = "penninsular" and right = "peninsular"
-  or
-  wrong = "pennisula" and right = "peninsula"
-  or
-  wrong = "pennyslvania" and right = "pennsylvania"
-  or
-  wrong = "pensinula" and right = "peninsula"
-  or
-  wrong = "pensle" and right = "pencil"
-  or
-  wrong = "peom" and right = "poem"
-  or
-  wrong = "peoms" and right = "poems"
-  or
-  wrong = "peopel" and right = "people"
-  or
-  wrong = "peopels" and right = "peoples"
-  or
-  wrong = "peotry" and right = "poetry"
-  or
-  wrong = "perade" and right = "parade"
-  or
-  wrong = "percepted" and right = "perceived"
-  or
-  wrong = "percieve" and right = "perceive"
-  or
-  wrong = "percieved" and right = "perceived"
-  or
-  wrong = "perenially" and right = "perennially"
-  or
-  wrong = "peretrator" and right = "perpetrator"
-  or
-  wrong = "perfomance" and right = "performance"
-  or
-  wrong = "perfomers" and right = "performers"
-  or
-  wrong = "performence" and right = "performance"
-  or
-  wrong = "performes" and right = "performed"
-  or
-  wrong = "performes" and right = "performs"
-  or
-  wrong = "perhasp" and right = "perhaps"
-  or
-  wrong = "perheaps" and right = "perhaps"
-  or
-  wrong = "perhpas" and right = "perhaps"
-  or
-  wrong = "peripathetic" and right = "peripatetic"
-  or
-  wrong = "peristent" and right = "persistent"
-  or
-  wrong = "perjery" and right = "perjury"
-  or
-  wrong = "perjorative" and right = "pejorative"
-  or
-  wrong = "permanant" and right = "permanent"
-  or
-  wrong = "permenant" and right = "permanent"
-  or
-  wrong = "permenantly" and right = "permanently"
-  or
-  wrong = "permissable" and right = "permissible"
-  or
-  wrong = "perogative" and right = "prerogative"
-  or
-  wrong = "peronal" and right = "personal"
-  or
-  wrong = "perosnality" and right = "personality"
-  or
-  wrong = "perpertrated" and right = "perpetrated"
-  or
-  wrong = "perphas" and right = "perhaps"
-  or
-  wrong = "perpindicular" and right = "perpendicular"
-  or
-  wrong = "persan" and right = "person"
-  or
-  wrong = "perseverence" and right = "perseverance"
-  or
-  wrong = "persistance" and right = "persistence"
-  or
-  wrong = "persistant" and right = "persistent"
-  or
-  wrong = "personel" and right = "personal"
-  or
-  wrong = "personel" and right = "personnel"
-  or
-  wrong = "personell" and right = "personnel"
-  or
-  wrong = "personnell" and right = "personnel"
-  or
-  wrong = "persuded" and right = "persuaded"
-  or
-  wrong = "persue" and right = "pursue"
-  or
-  wrong = "persued" and right = "pursued"
-  or
-  wrong = "persuing" and right = "pursuing"
-  or
-  wrong = "persuit" and right = "pursuit"
-  or
-  wrong = "persuits" and right = "pursuits"
-  or
-  wrong = "pertubation" and right = "perturbation"
-  or
-  wrong = "pertubations" and right = "perturbations"
-  or
-  wrong = "pessiary" and right = "pessary"
-  or
-  wrong = "petetion" and right = "petition"
-  or
-  wrong = "pharoah" and right = "pharaoh"
-  or
-  wrong = "phenomenom" and right = "phenomenon"
-  or
-  wrong = "phenomenonal" and right = "phenomenal"
-  or
-  wrong = "phenomenonly" and right = "phenomenally"
-  or
-  wrong = "phenomonenon" and right = "phenomenon"
-  or
-  wrong = "phenomonon" and right = "phenomenon"
-  or
-  wrong = "phenonmena" and right = "phenomena"
-  or
-  wrong = "philipines" and right = "philippines"
-  or
-  wrong = "philisopher" and right = "philosopher"
-  or
-  wrong = "philisophical" and right = "philosophical"
-  or
-  wrong = "philisophy" and right = "philosophy"
-  or
-  wrong = "phillipine" and right = "philippine"
-  or
-  wrong = "phillipines" and right = "philippines"
-  or
-  wrong = "phillippines" and right = "philippines"
-  or
-  wrong = "phillosophically" and right = "philosophically"
-  or
-  wrong = "philospher" and right = "philosopher"
-  or
-  wrong = "philosphies" and right = "philosophies"
-  or
-  wrong = "philosphy" and right = "philosophy"
-  or
-  wrong = "phonecian" and right = "phoenecian"
-  or
-  wrong = "phongraph" and right = "phonograph"
-  or
-  wrong = "phylosophical" and right = "philosophical"
-  or
-  wrong = "physicaly" and right = "physically"
-  or
-  wrong = "piblisher" and right = "publisher"
-  or
-  wrong = "pich" and right = "pitch"
-  or
-  wrong = "pilgrimmage" and right = "pilgrimage"
-  or
-  wrong = "pilgrimmages" and right = "pilgrimages"
-  or
-  wrong = "pinapple" and right = "pineapple"
-  or
-  wrong = "pinnaple" and right = "pineapple"
-  or
-  wrong = "pinoneered" and right = "pioneered"
-  or
-  wrong = "plagarism" and right = "plagiarism"
-  or
-  wrong = "planation" and right = "plantation"
-  or
-  wrong = "planed" and right = "planned"
-  or
-  wrong = "plantiff" and right = "plaintiff"
-  or
-  wrong = "plateu" and right = "plateau"
-  or
-  wrong = "plausable" and right = "plausible"
-  or
-  wrong = "playright" and right = "playwright"
-  or
-  wrong = "playwrite" and right = "playwright"
-  or
-  wrong = "playwrites" and right = "playwrights"
-  or
-  wrong = "pleasent" and right = "pleasant"
-  or
-  wrong = "plebicite" and right = "plebiscite"
-  or
-  wrong = "plesant" and right = "pleasant"
-  or
-  wrong = "poenis" and right = "penis"
-  or
-  wrong = "poeoples" and right = "peoples"
-  or
-  wrong = "poety" and right = "poetry"
-  or
-  wrong = "poisin" and right = "poison"
-  or
-  wrong = "polical" and right = "political"
-  or
-  wrong = "polinator" and right = "pollinator"
-  or
-  wrong = "polinators" and right = "pollinators"
-  or
-  wrong = "politican" and right = "politician"
-  or
-  wrong = "politicans" and right = "politicians"
-  or
-  wrong = "poltical" and right = "political"
-  or
-  wrong = "polute" and right = "pollute"
-  or
-  wrong = "poluted" and right = "polluted"
-  or
-  wrong = "polutes" and right = "pollutes"
-  or
-  wrong = "poluting" and right = "polluting"
-  or
-  wrong = "polution" and right = "pollution"
-  or
-  wrong = "polyphonyic" and right = "polyphonic"
-  or
-  wrong = "polysaccaride" and right = "polysaccharide"
-  or
-  wrong = "polysaccharid" and right = "polysaccharide"
-  or
-  wrong = "pomegranite" and right = "pomegranate"
-  or
-  wrong = "pomotion" and right = "promotion"
-  or
-  wrong = "poportional" and right = "proportional"
-  or
-  wrong = "popoulation" and right = "population"
-  or
-  wrong = "popularaty" and right = "popularity"
-  or
-  wrong = "populare" and right = "popular"
-  or
-  wrong = "populer" and right = "popular"
-  or
-  wrong = "porshan" and right = "portion"
-  or
-  wrong = "porshon" and right = "portion"
-  or
-  wrong = "portait" and right = "portrait"
-  or
-  wrong = "portayed" and right = "portrayed"
-  or
-  wrong = "portraing" and right = "portraying"
-  or
-  wrong = "portugese" and right = "portuguese"
-  or
-  wrong = "portuguease" and right = "portuguese"
-  or
-  wrong = "portugues" and right = "portuguese"
-  or
-  wrong = "posess" and right = "possess"
-  or
-  wrong = "posessed" and right = "possessed"
-  or
-  wrong = "posesses" and right = "possesses"
-  or
-  wrong = "posessing" and right = "possessing"
-  or
-  wrong = "posession" and right = "possession"
-  or
-  wrong = "posessions" and right = "possessions"
-  or
-  wrong = "posion" and right = "poison"
-  or
-  wrong = "positon" and right = "position"
-  or
-  wrong = "positon" and right = "positron"
-  or
-  wrong = "possable" and right = "possible"
-  or
-  wrong = "possably" and right = "possibly"
-  or
-  wrong = "posseses" and right = "possesses"
-  or
-  wrong = "possesing" and right = "possessing"
-  or
-  wrong = "possesion" and right = "possession"
-  or
-  wrong = "possessess" and right = "possesses"
-  or
-  wrong = "possibile" and right = "possible"
-  or
-  wrong = "possibilty" and right = "possibility"
-  or
-  wrong = "possiblility" and right = "possibility"
-  or
-  wrong = "possiblilty" and right = "possibility"
-  or
-  wrong = "possiblities" and right = "possibilities"
-  or
-  wrong = "possiblity" and right = "possibility"
-  or
-  wrong = "possition" and right = "position"
-  or
-  wrong = "postdam" and right = "potsdam"
-  or
-  wrong = "posthomous" and right = "posthumous"
-  or
-  wrong = "postion" and right = "position"
-  or
-  wrong = "postive" and right = "positive"
-  or
-  wrong = "potatos" and right = "potatoes"
-  or
-  wrong = "potrait" and right = "portrait"
-  or
-  wrong = "potrayed" and right = "portrayed"
-  or
-  wrong = "poulations" and right = "populations"
-  or
-  wrong = "poverful" and right = "powerful"
-  or
-  wrong = "poweful" and right = "powerful"
-  or
-  wrong = "powerfull" and right = "powerful"
-  or
-  wrong = "ppublisher" and right = "publisher"
-  or
-  wrong = "practial" and right = "practical"
-  or
-  wrong = "practially" and right = "practically"
-  or
-  wrong = "practicaly" and right = "practically"
-  or
-  wrong = "practicioner" and right = "practitioner"
-  or
-  wrong = "practicioners" and right = "practitioners"
-  or
-  wrong = "practicly" and right = "practically"
-  or
-  wrong = "practioner" and right = "practitioner"
-  or
-  wrong = "practioners" and right = "practitioners"
-  or
-  wrong = "prairy" and right = "prairie"
-  or
-  wrong = "prarie" and right = "prairie"
-  or
-  wrong = "praries" and right = "prairies"
-  or
-  wrong = "pratice" and right = "practice"
-  or
-  wrong = "preample" and right = "preamble"
-  or
-  wrong = "precedessor" and right = "predecessor"
-  or
-  wrong = "preceed" and right = "precede"
-  or
-  wrong = "preceeded" and right = "preceded"
-  or
-  wrong = "preceeding" and right = "preceding"
-  or
-  wrong = "preceeds" and right = "precedes"
-  or
-  wrong = "precendence" and right = "precedence"
-  or
-  wrong = "precentage" and right = "percentage"
-  or
-  wrong = "precice" and right = "precise"
-  or
-  wrong = "precisly" and right = "precisely"
-  or
-  wrong = "precurser" and right = "precursor"
-  or
-  wrong = "predecesors" and right = "predecessors"
-  or
-  wrong = "predicatble" and right = "predictable"
-  or
-  wrong = "predicitons" and right = "predictions"
-  or
-  wrong = "predomiantly" and right = "predominately"
-  or
-  wrong = "prefered" and right = "preferred"
-  or
-  wrong = "prefering" and right = "preferring"
-  or
-  wrong = "preferrably" and right = "preferably"
-  or
-  wrong = "pregancies" and right = "pregnancies"
-  or
-  wrong = "preiod" and right = "period"
-  or
-  wrong = "preliferation" and right = "proliferation"
-  or
-  wrong = "premeire" and right = "premiere"
-  or
-  wrong = "premeired" and right = "premiered"
-  or
-  wrong = "premillenial" and right = "premillennial"
-  or
-  wrong = "preminence" and right = "preeminence"
-  or
-  wrong = "premission" and right = "permission"
-  or
-  wrong = "premonasterians" and right = "premonstratensians"
-  or
-  wrong = "preocupation" and right = "preoccupation"
-  or
-  wrong = "prepair" and right = "prepare"
-  or
-  wrong = "prepartion" and right = "preparation"
-  or
-  wrong = "prepatory" and right = "preparatory"
-  or
-  wrong = "preperation" and right = "preparation"
-  or
-  wrong = "preperations" and right = "preparations"
-  or
-  wrong = "preriod" and right = "period"
-  or
-  wrong = "presedential" and right = "presidential"
-  or
-  wrong = "presense" and right = "presence"
-  or
-  wrong = "presidenital" and right = "presidential"
-  or
-  wrong = "presidental" and right = "presidential"
-  or
-  wrong = "presitgious" and right = "prestigious"
-  or
-  wrong = "prespective" and right = "perspective"
-  or
-  wrong = "prestigeous" and right = "prestigious"
-  or
-  wrong = "prestigous" and right = "prestigious"
-  or
-  wrong = "presumabely" and right = "presumably"
-  or
-  wrong = "presumibly" and right = "presumably"
-  or
-  wrong = "pretection" and right = "protection"
-  or
-  wrong = "prevelant" and right = "prevalent"
-  or
-  wrong = "preverse" and right = "perverse"
-  or
-  wrong = "previvous" and right = "previous"
-  or
-  wrong = "pricipal" and right = "principal"
-  or
-  wrong = "priciple" and right = "principle"
-  or
-  wrong = "priestood" and right = "priesthood"
-  or
-  wrong = "primarly" and right = "primarily"
-  or
-  wrong = "primative" and right = "primitive"
-  or
-  wrong = "primatively" and right = "primitively"
-  or
-  wrong = "primatives" and right = "primitives"
-  or
-  wrong = "primordal" and right = "primordial"
-  or
-  wrong = "principaly" and right = "principality"
-  or
-  wrong = "principial" and right = "principal"
-  or
-  wrong = "principlaity" and right = "principality"
-  or
-  wrong = "principly" and right = "principally"
-  or
-  wrong = "prinicipal" and right = "principal"
-  or
-  wrong = "privalege" and right = "privilege"
-  or
-  wrong = "privaleges" and right = "privileges"
-  or
-  wrong = "priveledges" and right = "privileges"
-  or
-  wrong = "privelege" and right = "privilege"
-  or
-  wrong = "priveleged" and right = "privileged"
-  or
-  wrong = "priveleges" and right = "privileges"
-  or
-  wrong = "privelige" and right = "privilege"
-  or
-  wrong = "priveliged" and right = "privileged"
-  or
-  wrong = "priveliges" and right = "privileges"
-  or
-  wrong = "privelleges" and right = "privileges"
-  or
-  wrong = "privilage" and right = "privilege"
-  or
-  wrong = "priviledge" and right = "privilege"
-  or
-  wrong = "priviledges" and right = "privileges"
-  or
-  wrong = "privledge" and right = "privilege"
-  or
-  wrong = "privte" and right = "private"
-  or
-  wrong = "probabilaty" and right = "probability"
-  or
-  wrong = "probablistic" and right = "probabilistic"
-  or
-  wrong = "probablly" and right = "probably"
-  or
-  wrong = "probalibity" and right = "probability"
-  or
-  wrong = "probaly" and right = "probably"
-  or
-  wrong = "probelm" and right = "problem"
-  or
-  wrong = "proccess" and right = "process"
-  or
-  wrong = "proccessing" and right = "processing"
-  or
-  wrong = "procede" and right = "precede"
-  or
-  wrong = "procede" and right = "proceed"
-  or
-  wrong = "proceded" and right = "preceded"
-  or
-  wrong = "proceded" and right = "proceeded"
-  or
-  wrong = "procedes" and right = "precedes"
-  or
-  wrong = "procedes" and right = "proceeds"
-  or
-  wrong = "procedger" and right = "procedure"
-  or
-  wrong = "proceding" and right = "preceding"
-  or
-  wrong = "proceding" and right = "proceeding"
-  or
-  wrong = "procedings" and right = "proceedings"
-  or
-  wrong = "proceedure" and right = "procedure"
-  or
-  wrong = "proces" and right = "process"
-  or
-  wrong = "procesed" and right = "processed"
-  or
-  wrong = "processer" and right = "processor"
-  or
-  wrong = "proclaimation" and right = "proclamation"
-  or
-  wrong = "proclamed" and right = "proclaimed"
-  or
-  wrong = "proclaming" and right = "proclaiming"
-  or
-  wrong = "proclomation" and right = "proclamation"
-  or
-  wrong = "profesion" and right = "profession"
-  or
-  wrong = "profesion" and right = "profusion"
-  or
-  wrong = "profesor" and right = "professor"
-  or
-  wrong = "professer" and right = "professor"
-  or
-  wrong = "proffesed" and right = "professed"
-  or
-  wrong = "proffesion" and right = "profession"
-  or
-  wrong = "proffesional" and right = "professional"
-  or
-  wrong = "proffesor" and right = "professor"
-  or
-  wrong = "profilic" and right = "prolific"
-  or
-  wrong = "progessed" and right = "progressed"
-  or
-  wrong = "progidy" and right = "prodigy"
-  or
-  wrong = "programable" and right = "programmable"
-  or
-  wrong = "progrom" and right = "pogrom"
-  or
-  wrong = "progrom" and right = "program"
-  or
-  wrong = "progroms" and right = "pogroms"
-  or
-  wrong = "progroms" and right = "programs"
-  or
-  wrong = "prohabition" and right = "prohibition"
-  or
-  wrong = "prologomena" and right = "prolegomena"
-  or
-  wrong = "prominance" and right = "prominence"
-  or
-  wrong = "prominant" and right = "prominent"
-  or
-  wrong = "prominantly" and right = "prominently"
-  or
-  wrong = "prominately" and right = "predominately"
-  or
-  wrong = "prominately" and right = "prominently"
-  or
-  wrong = "promiscous" and right = "promiscuous"
-  or
-  wrong = "promotted" and right = "promoted"
-  or
-  wrong = "pronomial" and right = "pronominal"
-  or
-  wrong = "pronouced" and right = "pronounced"
-  or
-  wrong = "pronounched" and right = "pronounced"
-  or
-  wrong = "pronounciation" and right = "pronunciation"
-  or
-  wrong = "proove" and right = "prove"
-  or
-  wrong = "prooved" and right = "proved"
-  or
-  wrong = "prophacy" and right = "prophecy"
-  or
-  wrong = "propietary" and right = "proprietary"
-  or
-  wrong = "propmted" and right = "prompted"
-  or
-  wrong = "propoganda" and right = "propaganda"
-  or
-  wrong = "propogate" and right = "propagate"
-  or
-  wrong = "propogates" and right = "propagates"
-  or
-  wrong = "propogation" and right = "propagation"
-  or
-  wrong = "propostion" and right = "proposition"
-  or
-  wrong = "propotions" and right = "proportions"
-  or
-  wrong = "propper" and right = "proper"
-  or
-  wrong = "propperly" and right = "properly"
-  or
-  wrong = "proprietory" and right = "proprietary"
-  or
-  wrong = "proseletyzing" and right = "proselytizing"
-  or
-  wrong = "protaganist" and right = "protagonist"
-  or
-  wrong = "protaganists" and right = "protagonists"
-  or
-  wrong = "protocal" and right = "protocol"
-  or
-  wrong = "protoganist" and right = "protagonist"
-  or
-  wrong = "prototpe" and right = "prototype"
-  or
-  wrong = "protoype" and right = "prototype"
-  or
-  wrong = "protrayed" and right = "portrayed"
-  or
-  wrong = "protruberance" and right = "protuberance"
-  or
-  wrong = "protruberances" and right = "protuberances"
-  or
-  wrong = "prouncements" and right = "pronouncements"
-  or
-  wrong = "provacative" and right = "provocative"
-  or
-  wrong = "provded" and right = "provided"
-  or
-  wrong = "provicial" and right = "provincial"
-  or
-  wrong = "provinicial" and right = "provincial"
-  or
-  wrong = "provisiosn" and right = "provision"
-  or
-  wrong = "provisonal" and right = "provisional"
-  or
-  wrong = "proximty" and right = "proximity"
-  or
-  wrong = "pseudononymous" and right = "pseudonymous"
-  or
-  wrong = "pseudonyn" and right = "pseudonym"
-  or
-  wrong = "psuedo" and right = "pseudo"
-  or
-  wrong = "psycology" and right = "psychology"
-  or
-  wrong = "psyhic" and right = "psychic"
-  or
-  wrong = "pubilsher" and right = "publisher"
-  or
-  wrong = "pubisher" and right = "publisher"
-  or
-  wrong = "publiaher" and right = "publisher"
-  or
-  wrong = "publically" and right = "publicly"
-  or
-  wrong = "publicaly" and right = "publicly"
-  or
-  wrong = "publicher" and right = "publisher"
-  or
-  wrong = "publihser" and right = "publisher"
-  or
-  wrong = "publisehr" and right = "publisher"
-  or
-  wrong = "publiser" and right = "publisher"
-  or
-  wrong = "publisger" and right = "publisher"
-  or
-  wrong = "publisheed" and right = "published"
-  or
-  wrong = "publisherr" and right = "publisher"
-  or
-  wrong = "publishher" and right = "publisher"
-  or
-  wrong = "publishor" and right = "publisher"
-  or
-  wrong = "publishre" and right = "publisher"
-  or
-  wrong = "publissher" and right = "publisher"
-  or
-  wrong = "publlisher" and right = "publisher"
-  or
-  wrong = "publsiher" and right = "publisher"
-  or
-  wrong = "publusher" and right = "publisher"
-  or
-  wrong = "puchasing" and right = "purchasing"
-  or
-  wrong = "pucini" and right = "puccini"
-  or
-  wrong = "pulisher" and right = "publisher"
-  or
-  wrong = "pumkin" and right = "pumpkin"
-  or
-  wrong = "puplisher" and right = "publisher"
-  or
-  wrong = "puritannical" and right = "puritanical"
-  or
-  wrong = "purposedly" and right = "purposely"
-  or
-  wrong = "purpotedly" and right = "purportedly"
-  or
-  wrong = "pursuade" and right = "persuade"
-  or
-  wrong = "pursuaded" and right = "persuaded"
-  or
-  wrong = "pursuades" and right = "persuades"
-  or
-  wrong = "pususading" and right = "persuading"
-  or
-  wrong = "puting" and right = "putting"
-  or
-  wrong = "pwoer" and right = "power"
-  or
-  wrong = "pyscic" and right = "psychic"
-  or
-  wrong = "qtuie" and right = "quiet"
-  or
-  wrong = "qtuie" and right = "quite"
-  or
-  wrong = "quantaty" and right = "quantity"
-  or
-  wrong = "quantitiy" and right = "quantity"
-  or
-  wrong = "quarantaine" and right = "quarantine"
-  or
-  wrong = "queenland" and right = "queensland"
-  or
-  wrong = "questonable" and right = "questionable"
-  or
-  wrong = "quicklyu" and right = "quickly"
-  or
-  wrong = "quinessential" and right = "quintessential"
-  or
-  wrong = "quitted" and right = "quit"
-  or
-  wrong = "quizes" and right = "quizzes"
-  or
-  wrong = "qutie" and right = "quiet"
-  or
-  wrong = "qutie" and right = "quite"
-  or
-  wrong = "rabinnical" and right = "rabbinical"
-  or
-  wrong = "racaus" and right = "raucous"
-  or
-  wrong = "radiactive" and right = "radioactive"
-  or
-  wrong = "radify" and right = "ratify"
-  or
-  wrong = "raelly" and right = "really"
-  or
-  wrong = "rarified" and right = "rarefied"
-  or
-  wrong = "reaccurring" and right = "recurring"
-  or
-  wrong = "reacing" and right = "reaching"
-  or
-  wrong = "reacll" and right = "recall"
-  or
-  wrong = "readmition" and right = "readmission"
-  or
-  wrong = "realitvely" and right = "relatively"
-  or
-  wrong = "realsitic" and right = "realistic"
-  or
-  wrong = "realtions" and right = "relations"
-  or
-  wrong = "realy" and right = "really"
-  or
-  wrong = "realyl" and right = "really"
-  or
-  wrong = "reasearch" and right = "research"
-  or
-  wrong = "rebiulding" and right = "rebuilding"
-  or
-  wrong = "rebllions" and right = "rebellions"
-  or
-  wrong = "rebounce" and right = "rebound"
-  or
-  wrong = "reccomend" and right = "recommend"
-  or
-  wrong = "reccomendations" and right = "recommendations"
-  or
-  wrong = "reccomended" and right = "recommended"
-  or
-  wrong = "reccomending" and right = "recommending"
-  or
-  wrong = "reccommend" and right = "recommend"
-  or
-  wrong = "reccommended" and right = "recommended"
-  or
-  wrong = "reccommending" and right = "recommending"
-  or
-  wrong = "reccuring" and right = "recurring"
-  or
-  wrong = "receeded" and right = "receded"
-  or
-  wrong = "receeding" and right = "receding"
-  or
-  wrong = "recepient" and right = "recipient"
-  or
-  wrong = "recepients" and right = "recipients"
-  or
-  wrong = "receving" and right = "receiving"
-  or
-  wrong = "rechargable" and right = "rechargeable"
-  or
-  wrong = "reched" and right = "reached"
-  or
-  wrong = "recide" and right = "reside"
-  or
-  wrong = "recided" and right = "resided"
-  or
-  wrong = "recident" and right = "resident"
-  or
-  wrong = "recidents" and right = "residents"
-  or
-  wrong = "reciding" and right = "residing"
-  or
-  wrong = "reciepents" and right = "recipients"
-  or
-  wrong = "reciept" and right = "receipt"
-  or
-  wrong = "recieve" and right = "receive"
-  or
-  wrong = "recieved" and right = "received"
-  or
-  wrong = "reciever" and right = "receiver"
-  or
-  wrong = "recievers" and right = "receivers"
-  or
-  wrong = "recieves" and right = "receives"
-  or
-  wrong = "recieving" and right = "receiving"
-  or
-  wrong = "recipiant" and right = "recipient"
-  or
-  wrong = "recipiants" and right = "recipients"
-  or
-  wrong = "recived" and right = "received"
-  or
-  wrong = "recivership" and right = "receivership"
-  or
-  wrong = "recogise" and right = "recognise"
-  or
-  wrong = "recogize" and right = "recognize"
-  or
-  wrong = "recomend" and right = "recommend"
-  or
-  wrong = "recomended" and right = "recommended"
-  or
-  wrong = "recomending" and right = "recommending"
-  or
-  wrong = "recomends" and right = "recommends"
-  or
-  wrong = "recommedations" and right = "recommendations"
-  or
-  wrong = "recompence" and right = "recompense"
-  or
-  wrong = "reconaissance" and right = "reconnaissance"
-  or
-  wrong = "reconcilation" and right = "reconciliation"
-  or
-  wrong = "reconized" and right = "recognized"
-  or
-  wrong = "reconnaisance" and right = "reconnaissance"
-  or
-  wrong = "reconnaissence" and right = "reconnaissance"
-  or
-  wrong = "recontructed" and right = "reconstructed"
-  or
-  wrong = "recquired" and right = "required"
-  or
-  wrong = "recrational" and right = "recreational"
-  or
-  wrong = "recrod" and right = "record"
-  or
-  wrong = "recuiting" and right = "recruiting"
-  or
-  wrong = "recuring" and right = "recurring"
-  or
-  wrong = "recurrance" and right = "recurrence"
-  or
-  wrong = "rediculous" and right = "ridiculous"
-  or
-  wrong = "reedeming" and right = "redeeming"
-  or
-  wrong = "reenforced" and right = "reinforced"
-  or
-  wrong = "refect" and right = "reflect"
-  or
-  wrong = "refedendum" and right = "referendum"
-  or
-  wrong = "referal" and right = "referral"
-  or
-  wrong = "referece" and right = "reference"
-  or
-  wrong = "refereces" and right = "references"
-  or
-  wrong = "refered" and right = "referred"
-  or
-  wrong = "referemce" and right = "reference"
-  or
-  wrong = "referemces" and right = "references"
-  or
-  wrong = "referencs" and right = "references"
-  or
-  wrong = "referenece" and right = "reference"
-  or
-  wrong = "refereneced" and right = "referenced"
-  or
-  wrong = "refereneces" and right = "references"
-  or
-  wrong = "referiang" and right = "referring"
-  or
-  wrong = "refering" and right = "referring"
-  or
-  wrong = "refernce" and right = "reference"
-  or
-  wrong = "refernce" and right = "references"
-  or
-  wrong = "refernces" and right = "references"
-  or
-  wrong = "referrence" and right = "reference"
-  or
-  wrong = "referrences" and right = "references"
-  or
-  wrong = "referrs" and right = "refers"
-  or
-  wrong = "reffered" and right = "referred"
-  or
-  wrong = "refference" and right = "reference"
-  or
-  wrong = "reffering" and right = "referring"
-  or
-  wrong = "refrence" and right = "reference"
-  or
-  wrong = "refrences" and right = "references"
-  or
-  wrong = "refrers" and right = "refers"
-  or
-  wrong = "refridgeration" and right = "refrigeration"
-  or
-  wrong = "refridgerator" and right = "refrigerator"
-  or
-  wrong = "refromist" and right = "reformist"
-  or
-  wrong = "refusla" and right = "refusal"
-  or
-  wrong = "regardes" and right = "regards"
-  or
-  wrong = "regluar" and right = "regular"
-  or
-  wrong = "reguarly" and right = "regularly"
-  or
-  wrong = "regulaion" and right = "regulation"
-  or
-  wrong = "regulaotrs" and right = "regulators"
-  or
-  wrong = "regularily" and right = "regularly"
-  or
-  wrong = "rehersal" and right = "rehearsal"
-  or
-  wrong = "reicarnation" and right = "reincarnation"
-  or
-  wrong = "reigining" and right = "reigning"
-  or
-  wrong = "reknown" and right = "renown"
-  or
-  wrong = "reknowned" and right = "renowned"
-  or
-  wrong = "rela" and right = "real"
-  or
-  wrong = "relaly" and right = "really"
-  or
-  wrong = "relatiopnship" and right = "relationship"
-  or
-  wrong = "relativly" and right = "relatively"
-  or
-  wrong = "relected" and right = "reelected"
-  or
-  wrong = "releive" and right = "relieve"
-  or
-  wrong = "releived" and right = "relieved"
-  or
-  wrong = "releiver" and right = "reliever"
-  or
-  wrong = "releses" and right = "releases"
-  or
-  wrong = "relevence" and right = "relevance"
-  or
-  wrong = "relevent" and right = "relevant"
-  or
-  wrong = "reliablity" and right = "reliability"
-  or
-  wrong = "relient" and right = "reliant"
-  or
-  wrong = "religeous" and right = "religious"
-  or
-  wrong = "religous" and right = "religious"
-  or
-  wrong = "religously" and right = "religiously"
-  or
-  wrong = "relinqushment" and right = "relinquishment"
-  or
-  wrong = "relitavely" and right = "relatively"
-  or
-  wrong = "relized" and right = "realised"
-  or
-  wrong = "relized" and right = "realized"
-  or
-  wrong = "relpacement" and right = "replacement"
-  or
-  wrong = "remaing" and right = "remaining"
-  or
-  wrong = "remeber" and right = "remember"
-  or
-  wrong = "rememberable" and right = "memorable"
-  or
-  wrong = "rememberance" and right = "remembrance"
-  or
-  wrong = "remembrence" and right = "remembrance"
-  or
-  wrong = "remenant" and right = "remnant"
-  or
-  wrong = "remenicent" and right = "reminiscent"
-  or
-  wrong = "reminent" and right = "remnant"
-  or
-  wrong = "reminescent" and right = "reminiscent"
-  or
-  wrong = "reminscent" and right = "reminiscent"
-  or
-  wrong = "reminsicent" and right = "reminiscent"
-  or
-  wrong = "rendevous" and right = "rendezvous"
-  or
-  wrong = "rendezous" and right = "rendezvous"
-  or
-  wrong = "renedered" and right = "rende"
-  or
-  wrong = "renewl" and right = "renewal"
-  or
-  wrong = "rennovate" and right = "renovate"
-  or
-  wrong = "rennovated" and right = "renovated"
-  or
-  wrong = "rennovating" and right = "renovating"
-  or
-  wrong = "rennovation" and right = "renovation"
-  or
-  wrong = "rentors" and right = "renters"
-  or
-  wrong = "reoccurrence" and right = "recurrence"
-  or
-  wrong = "reorganision" and right = "reorganisation"
-  or
-  wrong = "repatition" and right = "repartition"
-  or
-  wrong = "repatition" and right = "repetition"
-  or
-  wrong = "repblic" and right = "republic"
-  or
-  wrong = "repblican" and right = "republican"
-  or
-  wrong = "repblicans" and right = "republicans"
-  or
-  wrong = "repblics" and right = "republics"
-  or
-  wrong = "repectively" and right = "respectively"
-  or
-  wrong = "repeition" and right = "repetition"
-  or
-  wrong = "repentence" and right = "repentance"
-  or
-  wrong = "repentent" and right = "repentant"
-  or
-  wrong = "repeteadly" and right = "repeatedly"
-  or
-  wrong = "repetion" and right = "repetition"
-  or
-  wrong = "repid" and right = "rapid"
-  or
-  wrong = "reponse" and right = "response"
-  or
-  wrong = "reponsible" and right = "responsible"
-  or
-  wrong = "reportadly" and right = "reportedly"
-  or
-  wrong = "represantative" and right = "representative"
-  or
-  wrong = "representive" and right = "representative"
-  or
-  wrong = "representives" and right = "representatives"
-  or
-  wrong = "reproducable" and right = "reproducible"
-  or
-  wrong = "reprtoire" and right = "repertoire"
-  or
-  wrong = "repsectively" and right = "respectively"
-  or
-  wrong = "reptition" and right = "repetition"
-  or
-  wrong = "repubic" and right = "republic"
-  or
-  wrong = "repubican" and right = "republican"
-  or
-  wrong = "repubicans" and right = "republicans"
-  or
-  wrong = "repubics" and right = "republics"
-  or
-  wrong = "republi" and right = "republic"
-  or
-  wrong = "republian" and right = "republican"
-  or
-  wrong = "republians" and right = "republicans"
-  or
-  wrong = "republis" and right = "republics"
-  or
-  wrong = "repulic" and right = "republic"
-  or
-  wrong = "repulican" and right = "republican"
-  or
-  wrong = "repulicans" and right = "republicans"
-  or
-  wrong = "repulics" and right = "republics"
-  or
-  wrong = "requirment" and right = "requirement"
-  or
-  wrong = "requred" and right = "required"
-  or
-  wrong = "resaurant" and right = "restaurant"
-  or
-  wrong = "resembelance" and right = "resemblance"
-  or
-  wrong = "resembes" and right = "resembles"
-  or
-  wrong = "resemblence" and right = "resemblance"
-  or
-  wrong = "resevoir" and right = "reservoir"
-  or
-  wrong = "residental" and right = "residential"
-  or
-  wrong = "resignement" and right = "resignment"
-  or
-  wrong = "resistable" and right = "resistible"
-  or
-  wrong = "resistence" and right = "resistance"
-  or
-  wrong = "resistent" and right = "resistant"
-  or
-  wrong = "respectivly" and right = "respectively"
-  or
-  wrong = "responce" and right = "response"
-  or
-  wrong = "responibilities" and right = "responsibilities"
-  or
-  wrong = "responisble" and right = "responsible"
-  or
-  wrong = "responnsibilty" and right = "responsibility"
-  or
-  wrong = "responsability" and right = "responsibility"
-  or
-  wrong = "responsibile" and right = "responsible"
-  or
-  wrong = "responsibilites" and right = "responsibilities"
-  or
-  wrong = "responsiblities" and right = "responsibilities"
-  or
-  wrong = "responsiblity" and right = "responsibility"
-  or
-  wrong = "ressemblance" and right = "resemblance"
-  or
-  wrong = "ressemble" and right = "resemble"
-  or
-  wrong = "ressembled" and right = "resembled"
-  or
-  wrong = "ressemblence" and right = "resemblance"
-  or
-  wrong = "ressembling" and right = "resembling"
-  or
-  wrong = "resssurecting" and right = "resurrecting"
-  or
-  wrong = "ressurect" and right = "resurrect"
-  or
-  wrong = "ressurected" and right = "resurrected"
-  or
-  wrong = "ressurection" and right = "resurrection"
-  or
-  wrong = "ressurrection" and right = "resurrection"
-  or
-  wrong = "restarant" and right = "restaurant"
-  or
-  wrong = "restarants" and right = "restaurants"
-  or
-  wrong = "restaraunt" and right = "restaurant"
-  or
-  wrong = "restaraunteur" and right = "restaurateur"
-  or
-  wrong = "restaraunteurs" and right = "restaurateurs"
-  or
-  wrong = "restaraunts" and right = "restaurants"
-  or
-  wrong = "restauranteurs" and right = "restaurateurs"
-  or
-  wrong = "restauration" and right = "restoration"
-  or
-  wrong = "restauraunt" and right = "restaurant"
-  or
-  wrong = "resteraunt" and right = "restaurant"
-  or
-  wrong = "resteraunts" and right = "restaurants"
-  or
-  wrong = "resticted" and right = "restricted"
-  or
-  wrong = "restraunt" and right = "restaurant"
-  or
-  wrong = "restraunt" and right = "restraint"
-  or
-  wrong = "resturant" and right = "restaurant"
-  or
-  wrong = "resturants" and right = "restaurants"
-  or
-  wrong = "resturaunt" and right = "restaurant"
-  or
-  wrong = "resturaunts" and right = "restaurants"
-  or
-  wrong = "resurecting" and right = "resurrecting"
-  or
-  wrong = "retalitated" and right = "retaliated"
-  or
-  wrong = "retalitation" and right = "retaliation"
-  or
-  wrong = "retreive" and right = "retrieve"
-  or
-  wrong = "retrive" and right = "retrieve"
-  or
-  wrong = "returnd" and right = "returned"
-  or
-  wrong = "revaluated" and right = "reevaluated"
-  or
-  wrong = "reveiw" and right = "review"
-  or
-  wrong = "reveral" and right = "reversal"
-  or
-  wrong = "reversable" and right = "reversible"
-  or
-  wrong = "revolutionar" and right = "revolutionary"
-  or
-  wrong = "rewitten" and right = "rewritten"
-  or
-  wrong = "rewriet" and right = "rewrite"
-  or
-  wrong = "rference" and right = "reference"
-  or
-  wrong = "rferences" and right = "references"
-  or
-  wrong = "rhymme" and right = "rhyme"
-  or
-  wrong = "rhythem" and right = "rhythm"
-  or
-  wrong = "rhythim" and right = "rhythm"
-  or
-  wrong = "rhytmic" and right = "rhythmic"
-  or
-  wrong = "rigeur" and right = "rigor"
-  or
-  wrong = "rigeur" and right = "rigour"
-  or
-  wrong = "rigeur" and right = "rigueur"
-  or
-  wrong = "rigourous" and right = "rigorous"
-  or
-  wrong = "rininging" and right = "ringing"
-  or
-  wrong = "rised" and right = "raised"
-  or
-  wrong = "rised" and right = "rose"
-  or
-  wrong = "rockerfeller" and right = "rockefeller"
-  or
-  wrong = "rococco" and right = "rococo"
-  or
-  wrong = "rocord" and right = "record"
-  or
-  wrong = "roomate" and right = "roommate"
-  or
-  wrong = "rougly" and right = "roughly"
-  or
-  wrong = "rucuperate" and right = "recuperate"
-  or
-  wrong = "rudimentatry" and right = "rudimentary"
-  or
-  wrong = "rulle" and right = "rule"
-  or
-  wrong = "runing" and right = "running"
-  or
-  wrong = "runnung" and right = "running"
-  or
-  wrong = "russina" and right = "russian"
-  or
-  wrong = "russion" and right = "russian"
-  or
-  wrong = "rwite" and right = "write"
-  or
-  wrong = "rythem" and right = "rhythm"
-  or
-  wrong = "rythim" and right = "rhythm"
-  or
-  wrong = "rythm" and right = "rhythm"
-  or
-  wrong = "rythmic" and right = "rhythmic"
-  or
-  wrong = "rythyms" and right = "rhythms"
-  or
-  wrong = "sacrafice" and right = "sacrifice"
-  or
-  wrong = "sacreligious" and right = "sacrilegious"
-  or
-  wrong = "sacremento" and right = "sacramento"
-  or
-  wrong = "sacrifical" and right = "sacrificial"
-  or
-  wrong = "saftey" and right = "safety"
-  or
-  wrong = "safty" and right = "safety"
-  or
-  wrong = "salery" and right = "salary"
-  or
-  wrong = "sanctionning" and right = "sanctioning"
-  or
-  wrong = "sandwhich" and right = "sandwich"
-  or
-  wrong = "sanhedrim" and right = "sanhedrin"
-  or
-  wrong = "santioned" and right = "sanctioned"
-  or
-  wrong = "sargant" and right = "sergeant"
-  or
-  wrong = "sargeant" and right = "sergeant"
-  or
-  wrong = "sasy" and right = "sassy"
-  or
-  wrong = "sasy" and right = "says"
-  or
-  wrong = "satelite" and right = "satellite"
-  or
-  wrong = "satelites" and right = "satellites"
-  or
-  wrong = "saterday" and right = "saturday"
-  or
-  wrong = "saterdays" and right = "saturdays"
-  or
-  wrong = "satisfactority" and right = "satisfactorily"
-  or
-  wrong = "satric" and right = "satiric"
-  or
-  wrong = "satrical" and right = "satirical"
-  or
-  wrong = "satrically" and right = "satirically"
-  or
-  wrong = "sattelite" and right = "satellite"
-  or
-  wrong = "sattelites" and right = "satellites"
-  or
-  wrong = "saught" and right = "sought"
-  or
-  wrong = "saveing" and right = "saving"
-  or
-  wrong = "saxaphone" and right = "saxophone"
-  or
-  wrong = "scaleable" and right = "scalable"
-  or
-  wrong = "scandanavia" and right = "scandinavia"
-  or
-  wrong = "scaricity" and right = "scarcity"
-  or
-  wrong = "scavanged" and right = "scavenged"
-  or
-  wrong = "schedual" and right = "schedule"
-  or
-  wrong = "scholarhip" and right = "scholarship"
-  or
-  wrong = "scholarstic" and right = "scholarly"
-  or
-  wrong = "scholarstic" and right = "scholastic"
-  or
-  wrong = "scientfic" and right = "scientific"
-  or
-  wrong = "scientifc" and right = "scientific"
-  or
-  wrong = "scientis" and right = "scientist"
-  or
-  wrong = "scince" and right = "science"
-  or
-  wrong = "scinece" and right = "science"
-  or
-  wrong = "scirpt" and right = "script"
-  or
-  wrong = "scoll" and right = "scroll"
-  or
-  wrong = "screenwrighter" and right = "screenwriter"
-  or
-  wrong = "scrutinity" and right = "scrutiny"
-  or
-  wrong = "scuptures" and right = "sculptures"
-  or
-  wrong = "seach" and right = "search"
-  or
-  wrong = "seached" and right = "searched"
-  or
-  wrong = "seaches" and right = "searches"
-  or
-  wrong = "secceeded" and right = "seceded"
-  or
-  wrong = "secceeded" and right = "succeeded"
-  or
-  wrong = "seceed" and right = "secede"
-  or
-  wrong = "seceed" and right = "succeed"
-  or
-  wrong = "seceeded" and right = "seceded"
-  or
-  wrong = "seceeded" and right = "succeeded"
-  or
-  wrong = "secratary" and right = "secretary"
-  or
-  wrong = "secretery" and right = "secretary"
-  or
-  wrong = "sedereal" and right = "sidereal"
-  or
-  wrong = "seeked" and right = "sought"
-  or
-  wrong = "segementation" and right = "segmentation"
-  or
-  wrong = "seguoys" and right = "segues"
-  or
-  wrong = "seige" and right = "siege"
-  or
-  wrong = "seing" and right = "seeing"
-  or
-  wrong = "seinor" and right = "senior"
-  or
-  wrong = "seldomly" and right = "seldom"
-  or
-  wrong = "senarios" and right = "scenarios"
-  or
-  wrong = "sence" and right = "sense"
-  or
-  wrong = "sence" and right = "since"
-  or
-  wrong = "senstive" and right = "sensitive"
-  or
-  wrong = "sensure" and right = "censure"
-  or
-  wrong = "seperate" and right = "separate"
-  or
-  wrong = "seperated" and right = "separated"
-  or
-  wrong = "seperately" and right = "separately"
-  or
-  wrong = "seperates" and right = "separates"
-  or
-  wrong = "seperating" and right = "separating"
-  or
-  wrong = "seperation" and right = "separation"
-  or
-  wrong = "seperatism" and right = "separatism"
-  or
-  wrong = "seperatist" and right = "separatist"
-  or
-  wrong = "seperator" and right = "separator"
-  or
-  wrong = "sepina" and right = "subpoena"
-  or
-  wrong = "sepulchure" and right = "sepulcher"
-  or
-  wrong = "sepulchure" and right = "sepulchre"
-  or
-  wrong = "sepulcre" and right = "sepulcher"
-  or
-  wrong = "sepulcre" and right = "sepulchre"
-  or
-  wrong = "sergent" and right = "sergeant"
-  or
-  wrong = "settelement" and right = "settlement"
-  or
-  wrong = "settlment" and right = "settlement"
-  or
-  wrong = "settting" and right = "setting"
-  or
-  wrong = "severeal" and right = "several"
-  or
-  wrong = "severley" and right = "severely"
-  or
-  wrong = "severly" and right = "severely"
-  or
-  wrong = "sevice" and right = "service"
-  or
-  wrong = "shadasloo" and right = "shadaloo"
-  or
-  wrong = "shaddow" and right = "shadow"
-  or
-  wrong = "shadoloo" and right = "shadaloo"
-  or
-  wrong = "shamen" and right = "shaman"
-  or
-  wrong = "shamen" and right = "shamans"
-  or
-  wrong = "sheat" and right = "cheat"
-  or
-  wrong = "sheat" and right = "sheath"
-  or
-  wrong = "sheat" and right = "sheet"
-  or
-  wrong = "sheild" and right = "shield"
-  or
-  wrong = "sherif" and right = "sheriff"
-  or
-  wrong = "shineing" and right = "shining"
-  or
-  wrong = "shiped" and right = "shipped"
-  or
-  wrong = "shiping" and right = "shipping"
-  or
-  wrong = "shopkeeepers" and right = "shopkeepers"
-  or
-  wrong = "shorly" and right = "shortly"
-  or
-  wrong = "shoudl" and right = "should"
-  or
-  wrong = "shoudln" and right = "should"
-  or
-  wrong = "shreak" and right = "shriek"
-  or
-  wrong = "shrinked" and right = "shrunk"
-  or
-  wrong = "sicne" and right = "since"
-  or
-  wrong = "sideral" and right = "sidereal"
-  or
-  wrong = "sieze" and right = "seize"
-  or
-  wrong = "sieze" and right = "size"
-  or
-  wrong = "siezed" and right = "seized"
-  or
-  wrong = "siezed" and right = "sized"
-  or
-  wrong = "siezing" and right = "seizing"
-  or
-  wrong = "siezing" and right = "sizing"
-  or
-  wrong = "siezure" and right = "seizure"
-  or
-  wrong = "siezures" and right = "seizures"
-  or
-  wrong = "siginificant" and right = "significant"
-  or
-  wrong = "signficant" and right = "significant"
-  or
-  wrong = "signficiant" and right = "significant"
-  or
-  wrong = "signfies" and right = "signifies"
-  or
-  wrong = "signifantly" and right = "significantly"
-  or
-  wrong = "significently" and right = "significantly"
-  or
-  wrong = "signifigant" and right = "significant"
-  or
-  wrong = "signifigantly" and right = "significantly"
-  or
-  wrong = "signitories" and right = "signatories"
-  or
-  wrong = "signitory" and right = "signatory"
-  or
-  wrong = "similarily" and right = "similarly"
-  or
-  wrong = "similiar" and right = "similar"
-  or
-  wrong = "similiarity" and right = "similarity"
-  or
-  wrong = "similiarly" and right = "similarly"
-  or
-  wrong = "simmilar" and right = "similar"
-  or
-  wrong = "simpley" and right = "simply"
-  or
-  wrong = "simplier" and right = "simpler"
-  or
-  wrong = "simultanous" and right = "simultaneous"
-  or
-  wrong = "simultanously" and right = "simultaneously"
-  or
-  wrong = "sincerley" and right = "sincerely"
-  or
-  wrong = "singsog" and right = "singsong"
-  or
-  wrong = "sinse" and right = "since"
-  or
-  wrong = "sinse" and right = "sines"
-  or
-  wrong = "sionist" and right = "zionist"
-  or
-  wrong = "sionists" and right = "zionists"
-  or
-  wrong = "sixtin" and right = "sistine"
-  or
-  wrong = "skagerak" and right = "skagerrak"
-  or
-  wrong = "skateing" and right = "skating"
-  or
-  wrong = "slaugterhouses" and right = "slaughterhouses"
-  or
-  wrong = "slighly" and right = "slightly"
-  or
-  wrong = "slippy" and right = "slippery"
-  or
-  wrong = "slowy" and right = "slowly"
-  or
-  wrong = "smae" and right = "same"
-  or
-  wrong = "smealting" and right = "smelting"
-  or
-  wrong = "smoe" and right = "some"
-  or
-  wrong = "sneeks" and right = "sneaks"
-  or
-  wrong = "snese" and right = "sneeze"
-  or
-  wrong = "socalism" and right = "socialism"
-  or
-  wrong = "socities" and right = "societies"
-  or
-  wrong = "soem" and right = "some"
-  or
-  wrong = "sofware" and right = "software"
-  or
-  wrong = "sohw" and right = "show"
-  or
-  wrong = "soilders" and right = "soldiers"
-  or
-  wrong = "solatary" and right = "solitary"
-  or
-  wrong = "soley" and right = "solely"
-  or
-  wrong = "soliders" and right = "soldiers"
-  or
-  wrong = "soliliquy" and right = "soliloquy"
-  or
-  wrong = "soluable" and right = "soluble"
-  or
-  wrong = "somene" and right = "someone"
-  or
-  wrong = "somtimes" and right = "sometimes"
-  or
-  wrong = "somwhere" and right = "somewhere"
-  or
-  wrong = "sophicated" and right = "sophisticated"
-  or
-  wrong = "sophmore" and right = "sophomore"
-  or
-  wrong = "sorceror" and right = "sorcerer"
-  or
-  wrong = "sorrounding" and right = "surrounding"
-  or
-  wrong = "sotry" and right = "story"
-  or
-  wrong = "sotyr" and right = "satyr"
-  or
-  wrong = "sotyr" and right = "story"
-  or
-  wrong = "soudn" and right = "sound"
-  or
-  wrong = "soudns" and right = "sounds"
-  or
-  wrong = "sould" and right = "could"
-  or
-  wrong = "sould" and right = "should"
-  or
-  wrong = "sould" and right = "sold"
-  or
-  wrong = "sould" and right = "soul"
-  or
-  wrong = "sountrack" and right = "soundtrack"
-  or
-  wrong = "sourth" and right = "south"
-  or
-  wrong = "sourthern" and right = "southern"
-  or
-  wrong = "souvenier" and right = "souvenir"
-  or
-  wrong = "souveniers" and right = "souvenirs"
-  or
-  wrong = "soveits" and right = "soviets"
-  or
-  wrong = "sovereignity" and right = "sovereignty"
-  or
-  wrong = "soverign" and right = "sovereign"
-  or
-  wrong = "soverignity" and right = "sovereignty"
-  or
-  wrong = "soverignty" and right = "sovereignty"
-  or
-  wrong = "spainish" and right = "spanish"
-  or
-  wrong = "speach" and right = "speech"
-  or
-  wrong = "specfic" and right = "specific"
-  or
-  wrong = "speciallized" and right = "specialised"
-  or
-  wrong = "speciallized" and right = "specialized"
-  or
-  wrong = "specif" and right = "specific"
-  or
-  wrong = "specif" and right = "specify"
-  or
-  wrong = "specifiying" and right = "specifying"
-  or
-  wrong = "speciman" and right = "specimen"
-  or
-  wrong = "spectauclar" and right = "spectacular"
-  or
-  wrong = "spectaulars" and right = "spectaculars"
-  or
-  wrong = "spects" and right = "aspects"
-  or
-  wrong = "spects" and right = "expects"
-  or
-  wrong = "spectum" and right = "spectrum"
-  or
-  wrong = "speices" and right = "species"
-  or
-  wrong = "spendour" and right = "splendour"
-  or
-  wrong = "spermatozoan" and right = "spermatozoon"
-  or
-  wrong = "spoace" and right = "space"
-  or
-  wrong = "sponser" and right = "sponsor"
-  or
-  wrong = "sponsered" and right = "sponsored"
-  or
-  wrong = "spontanous" and right = "spontaneous"
-  or
-  wrong = "sponzored" and right = "sponsored"
-  or
-  wrong = "spoonfulls" and right = "spoonfuls"
-  or
-  wrong = "sppeches" and right = "speeches"
-  or
-  wrong = "spreaded" and right = "spread"
-  or
-  wrong = "sprech" and right = "speech"
-  or
-  wrong = "spred" and right = "spread"
-  or
-  wrong = "spriritual" and right = "spiritual"
-  or
-  wrong = "spritual" and right = "spiritual"
-  or
-  wrong = "sqaure" and right = "square"
-  or
-  wrong = "sring" and right = "string"
-  or
-  wrong = "stablility" and right = "stability"
-  or
-  wrong = "stainlees" and right = "stainless"
-  or
-  wrong = "staion" and right = "station"
-  or
-  wrong = "standars" and right = "standards"
-  or
-  wrong = "stange" and right = "strange"
-  or
-  wrong = "startegic" and right = "strategic"
-  or
-  wrong = "startegies" and right = "strategies"
-  or
-  wrong = "startegy" and right = "strategy"
-  or
-  wrong = "stateman" and right = "statesman"
-  or
-  wrong = "statememts" and right = "statements"
-  or
-  wrong = "statment" and right = "statement"
-  or
-  wrong = "steriods" and right = "steroids"
-  or
-  wrong = "sterotypes" and right = "stereotypes"
-  or
-  wrong = "stilus" and right = "stylus"
-  or
-  wrong = "stingent" and right = "stringent"
-  or
-  wrong = "stiring" and right = "stirring"
-  or
-  wrong = "stirrs" and right = "stirs"
-  or
-  wrong = "stlye" and right = "style"
-  or
-  wrong = "stomache" and right = "stomach"
-  or
-  wrong = "stong" and right = "strong"
-  or
-  wrong = "stopry" and right = "story"
-  or
-  wrong = "storeis" and right = "stories"
-  or
-  wrong = "storise" and right = "stories"
-  or
-  wrong = "stornegst" and right = "strongest"
-  or
-  wrong = "stoyr" and right = "story"
-  or
-  wrong = "stpo" and right = "stop"
-  or
-  wrong = "stradegies" and right = "strategies"
-  or
-  wrong = "stradegy" and right = "strategy"
-  or
-  wrong = "strat" and right = "start"
-  or
-  wrong = "strat" and right = "strata"
-  or
-  wrong = "stratagically" and right = "strategically"
-  or
-  wrong = "streemlining" and right = "streamlining"
-  or
-  wrong = "stregth" and right = "strength"
-  or
-  wrong = "strenghen" and right = "strengthen"
-  or
-  wrong = "strenghened" and right = "strengthened"
-  or
-  wrong = "strenghening" and right = "strengthening"
-  or
-  wrong = "strenght" and right = "strength"
-  or
-  wrong = "strenghten" and right = "strengthen"
-  or
-  wrong = "strenghtened" and right = "strengthened"
-  or
-  wrong = "strenghtening" and right = "strengthening"
-  or
-  wrong = "strengtened" and right = "strengthened"
-  or
-  wrong = "strenous" and right = "strenuous"
-  or
-  wrong = "strictist" and right = "strictest"
-  or
-  wrong = "strikely" and right = "strikingly"
-  or
-  wrong = "strnad" and right = "strand"
-  or
-  wrong = "stroy" and right = "destroy"
-  or
-  wrong = "stroy" and right = "story"
-  or
-  wrong = "structual" and right = "structural"
-  or
-  wrong = "stubborness" and right = "stubbornness"
-  or
-  wrong = "stucture" and right = "structure"
-  or
-  wrong = "stuctured" and right = "structured"
-  or
-  wrong = "studdy" and right = "study"
-  or
-  wrong = "studing" and right = "studying"
-  or
-  wrong = "stuggling" and right = "struggling"
-  or
-  wrong = "sturcture" and right = "structure"
-  or
-  wrong = "subcatagories" and right = "subcategories"
-  or
-  wrong = "subcatagory" and right = "subcategory"
-  or
-  wrong = "subconsiously" and right = "subconsciously"
-  or
-  wrong = "subjudgation" and right = "subjugation"
-  or
-  wrong = "submachne" and right = "submachine"
-  or
-  wrong = "subpecies" and right = "subspecies"
-  or
-  wrong = "subsidary" and right = "subsidiary"
-  or
-  wrong = "subsiduary" and right = "subsidiary"
-  or
-  wrong = "subsquent" and right = "subsequent"
-  or
-  wrong = "subsquently" and right = "subsequently"
-  or
-  wrong = "substace" and right = "substance"
-  or
-  wrong = "substancial" and right = "substantial"
-  or
-  wrong = "substatial" and right = "substantial"
-  or
-  wrong = "substituded" and right = "substituted"
-  or
-  wrong = "substract" and right = "subtract"
-  or
-  wrong = "substracted" and right = "subtracted"
-  or
-  wrong = "substracting" and right = "subtracting"
-  or
-  wrong = "substraction" and right = "subtraction"
-  or
-  wrong = "substracts" and right = "subtracts"
-  or
-  wrong = "subtances" and right = "substances"
-  or
-  wrong = "subterranian" and right = "subterranean"
-  or
-  wrong = "suburburban" and right = "suburban"
-  or
-  wrong = "succceeded" and right = "succeeded"
-  or
-  wrong = "succcesses" and right = "successes"
-  or
-  wrong = "succedded" and right = "succeeded"
-  or
-  wrong = "succeded" and right = "succeeded"
-  or
-  wrong = "succeds" and right = "succeeds"
-  or
-  wrong = "succesful" and right = "successful"
-  or
-  wrong = "succesfully" and right = "successfully"
-  or
-  wrong = "succesfuly" and right = "successfully"
-  or
-  wrong = "succesion" and right = "succession"
-  or
-  wrong = "succesive" and right = "successive"
-  or
-  wrong = "successfull" and right = "successful"
-  or
-  wrong = "successully" and right = "successfully"
-  or
-  wrong = "succsess" and right = "success"
-  or
-  wrong = "succsessfull" and right = "successful"
-  or
-  wrong = "suceed" and right = "succeed"
-  or
-  wrong = "suceeded" and right = "succeeded"
-  or
-  wrong = "suceeding" and right = "succeeding"
-  or
-  wrong = "suceeds" and right = "succeeds"
-  or
-  wrong = "sucesful" and right = "successful"
-  or
-  wrong = "sucesfully" and right = "successfully"
-  or
-  wrong = "sucesfuly" and right = "successfully"
-  or
-  wrong = "sucesion" and right = "succession"
-  or
-  wrong = "sucess" and right = "success"
-  or
-  wrong = "sucesses" and right = "successes"
-  or
-  wrong = "sucessful" and right = "successful"
-  or
-  wrong = "sucessfull" and right = "successful"
-  or
-  wrong = "sucessfully" and right = "successfully"
-  or
-  wrong = "sucessfuly" and right = "successfully"
-  or
-  wrong = "sucession" and right = "succession"
-  or
-  wrong = "sucessive" and right = "successive"
-  or
-  wrong = "sucessor" and right = "successor"
-  or
-  wrong = "sucessot" and right = "successor"
-  or
-  wrong = "sucide" and right = "suicide"
-  or
-  wrong = "sucidial" and right = "suicidal"
-  or
-  wrong = "sudent" and right = "student"
-  or
-  wrong = "sudents" and right = "students"
-  or
-  wrong = "sufferage" and right = "suffrage"
-  or
-  wrong = "sufferred" and right = "suffered"
-  or
-  wrong = "sufferring" and right = "suffering"
-  or
-  wrong = "sufficent" and right = "sufficient"
-  or
-  wrong = "sufficently" and right = "sufficiently"
-  or
-  wrong = "sumary" and right = "summary"
-  or
-  wrong = "sunglases" and right = "sunglasses"
-  or
-  wrong = "suop" and right = "soup"
-  or
-  wrong = "superceeded" and right = "superseded"
-  or
-  wrong = "superintendant" and right = "superintendent"
-  or
-  wrong = "suphisticated" and right = "sophisticated"
-  or
-  wrong = "suplimented" and right = "supplemented"
-  or
-  wrong = "suported" and right = "supported"
-  or
-  wrong = "supose" and right = "suppose"
-  or
-  wrong = "suposed" and right = "supposed"
-  or
-  wrong = "suposedly" and right = "supposedly"
-  or
-  wrong = "suposes" and right = "supposes"
-  or
-  wrong = "suposing" and right = "supposing"
-  or
-  wrong = "supplamented" and right = "supplemented"
-  or
-  wrong = "suppliementing" and right = "supplementing"
-  or
-  wrong = "suppoed" and right = "supposed"
-  or
-  wrong = "supposingly" and right = "supposedly"
-  or
-  wrong = "suppy" and right = "supply"
-  or
-  wrong = "suprassing" and right = "surpassing"
-  or
-  wrong = "supress" and right = "suppress"
-  or
-  wrong = "supressed" and right = "suppressed"
-  or
-  wrong = "supresses" and right = "suppresses"
-  or
-  wrong = "supressing" and right = "suppressing"
-  or
-  wrong = "suprise" and right = "surprise"
-  or
-  wrong = "suprised" and right = "surprised"
-  or
-  wrong = "suprising" and right = "surprising"
-  or
-  wrong = "suprisingly" and right = "surprisingly"
-  or
-  wrong = "suprize" and right = "surprise"
-  or
-  wrong = "suprized" and right = "surprised"
-  or
-  wrong = "suprizing" and right = "surprising"
-  or
-  wrong = "suprizingly" and right = "surprisingly"
-  or
-  wrong = "surfce" and right = "surface"
-  or
-  wrong = "surley" and right = "surely"
-  or
-  wrong = "surley" and right = "surly"
-  or
-  wrong = "suround" and right = "surround"
-  or
-  wrong = "surounded" and right = "surrounded"
-  or
-  wrong = "surounding" and right = "surrounding"
-  or
-  wrong = "suroundings" and right = "surroundings"
-  or
-  wrong = "surounds" and right = "surrounds"
-  or
-  wrong = "surplanted" and right = "supplanted"
-  or
-  wrong = "surpress" and right = "suppress"
-  or
-  wrong = "surpressed" and right = "suppressed"
-  or
-  wrong = "surprize" and right = "surprise"
-  or
-  wrong = "surprized" and right = "surprised"
-  or
-  wrong = "surprizing" and right = "surprising"
-  or
-  wrong = "surprizingly" and right = "surprisingly"
-  or
-  wrong = "surrended" and right = "surrendered"
-  or
-  wrong = "surrended" and right = "surrounded"
-  or
-  wrong = "surrepetitious" and right = "surreptitious"
-  or
-  wrong = "surrepetitiously" and right = "surreptitiously"
-  or
-  wrong = "surreptious" and right = "surreptitious"
-  or
-  wrong = "surreptiously" and right = "surreptitiously"
-  or
-  wrong = "surronded" and right = "surrounded"
-  or
-  wrong = "surrouded" and right = "surrounded"
-  or
-  wrong = "surrouding" and right = "surrounding"
-  or
-  wrong = "surrundering" and right = "surrendering"
-  or
-  wrong = "surveilence" and right = "surveillance"
-  or
-  wrong = "surveill" and right = "surveil"
-  or
-  wrong = "surveyer" and right = "surveyor"
-  or
-  wrong = "surviver" and right = "survivor"
-  or
-  wrong = "survivers" and right = "survivors"
-  or
-  wrong = "survivied" and right = "survived"
-  or
-  wrong = "suseptable" and right = "susceptible"
-  or
-  wrong = "suseptible" and right = "susceptible"
-  or
-  wrong = "suspention" and right = "suspension"
-  or
-  wrong = "swaer" and right = "swear"
-  or
-  wrong = "swaers" and right = "swears"
-  or
-  wrong = "swepth" and right = "swept"
-  or
-  wrong = "swiming" and right = "swimming"
-  or
-  wrong = "syas" and right = "says"
-  or
-  wrong = "symetrical" and right = "symmetrical"
-  or
-  wrong = "symetrically" and right = "symmetrically"
-  or
-  wrong = "symetry" and right = "symmetry"
-  or
-  wrong = "symettric" and right = "symmetric"
-  or
-  wrong = "symmetral" and right = "symmetric"
-  or
-  wrong = "symmetricaly" and right = "symmetrically"
-  or
-  wrong = "synagouge" and right = "synagogue"
-  or
-  wrong = "syncronization" and right = "synchronization"
-  or
-  wrong = "synonomous" and right = "synonymous"
-  or
-  wrong = "synonymns" and right = "synonyms"
-  or
-  wrong = "synphony" and right = "symphony"
-  or
-  wrong = "syphyllis" and right = "syphilis"
-  or
-  wrong = "sypmtoms" and right = "symptoms"
-  or
-  wrong = "syrap" and right = "syrup"
-  or
-  wrong = "sysmatically" and right = "systematically"
-  or
-  wrong = "sytem" and right = "system"
-  or
-  wrong = "sytle" and right = "style"
-  or
-  wrong = "tabacco" and right = "tobacco"
-  or
-  wrong = "tahn" and right = "than"
-  or
-  wrong = "taht" and right = "that"
-  or
-  wrong = "talekd" and right = "talked"
-  or
-  wrong = "targetted" and right = "targeted"
-  or
-  wrong = "targetting" and right = "targeting"
-  or
-  wrong = "tast" and right = "taste"
-  or
-  wrong = "tath" and right = "that"
-  or
-  wrong = "tatoo" and right = "tattoo"
-  or
-  wrong = "tattooes" and right = "tattoos"
-  or
-  wrong = "taxanomic" and right = "taxonomic"
-  or
-  wrong = "taxanomy" and right = "taxonomy"
-  or
-  wrong = "teached" and right = "taught"
-  or
-  wrong = "techician" and right = "technician"
-  or
-  wrong = "techicians" and right = "technicians"
-  or
-  wrong = "techiniques" and right = "techniques"
-  or
-  wrong = "technitian" and right = "technician"
-  or
-  wrong = "technnology" and right = "technology"
-  or
-  wrong = "technolgy" and right = "technology"
-  or
-  wrong = "teh" and right = "the"
-  or
-  wrong = "tehy" and right = "they"
-  or
-  wrong = "telelevision" and right = "television"
-  or
-  wrong = "televsion" and right = "television"
-  or
-  wrong = "telphony" and right = "telephony"
-  or
-  wrong = "temerature" and right = "temperature"
-  or
-  wrong = "tempalte" and right = "template"
-  or
-  wrong = "tempaltes" and right = "templates"
-  or
-  wrong = "temparate" and right = "temperate"
-  or
-  wrong = "temperarily" and right = "temporarily"
-  or
-  wrong = "temperment" and right = "temperament"
-  or
-  wrong = "tempertaure" and right = "temperature"
-  or
-  wrong = "temperture" and right = "temperature"
-  or
-  wrong = "temprary" and right = "temporary"
-  or
-  wrong = "tenacle" and right = "tentacle"
-  or
-  wrong = "tenacles" and right = "tentacles"
-  or
-  wrong = "tendacy" and right = "tendency"
-  or
-  wrong = "tendancies" and right = "tendencies"
-  or
-  wrong = "tendancy" and right = "tendency"
-  or
-  wrong = "tepmorarily" and right = "temporarily"
-  or
-  wrong = "terrestial" and right = "terrestrial"
-  or
-  wrong = "terriories" and right = "territories"
-  or
-  wrong = "terriory" and right = "territory"
-  or
-  wrong = "territorist" and right = "terrorist"
-  or
-  wrong = "territoy" and right = "territory"
-  or
-  wrong = "terroist" and right = "terrorist"
-  or
-  wrong = "testiclular" and right = "testicular"
-  or
-  wrong = "testomony" and right = "testimony"
-  or
-  wrong = "tghe" and right = "the"
-  or
-  wrong = "thast" and right = "that"
-  or
-  wrong = "theather" and right = "theater"
-  or
-  wrong = "theese" and right = "these"
-  or
-  wrong = "theif" and right = "thief"
-  or
-  wrong = "theives" and right = "thieves"
-  or
-  wrong = "themselfs" and right = "themselves"
-  or
-  wrong = "themslves" and right = "themselves"
-  or
-  wrong = "ther" and right = "the"
-  or
-  wrong = "ther" and right = "their"
-  or
-  wrong = "ther" and right = "there"
-  or
-  wrong = "therafter" and right = "thereafter"
-  or
-  wrong = "therby" and right = "thereby"
-  or
-  wrong = "theri" and right = "their"
-  or
-  wrong = "thgat" and right = "that"
-  or
-  wrong = "thge" and right = "the"
-  or
-  wrong = "thier" and right = "their"
-  or
-  wrong = "thign" and right = "thing"
-  or
-  wrong = "thigns" and right = "things"
-  or
-  wrong = "thigsn" and right = "things"
-  or
-  wrong = "thikn" and right = "think"
-  or
-  wrong = "thikning" and right = "thickening"
-  or
-  wrong = "thikning" and right = "thinking"
-  or
-  wrong = "thikns" and right = "thinks"
-  or
-  wrong = "thiunk" and right = "think"
-  or
-  wrong = "thn" and right = "then"
-  or
-  wrong = "thna" and right = "than"
-  or
-  wrong = "thne" and right = "then"
-  or
-  wrong = "thnig" and right = "thing"
-  or
-  wrong = "thnigs" and right = "things"
-  or
-  wrong = "thoughout" and right = "throughout"
-  or
-  wrong = "threatend" and right = "threatened"
-  or
-  wrong = "threatning" and right = "threatening"
-  or
-  wrong = "threee" and right = "three"
-  or
-  wrong = "threshhold" and right = "threshold"
-  or
-  wrong = "thrid" and right = "third"
-  or
-  wrong = "throrough" and right = "thorough"
-  or
-  wrong = "throughly" and right = "thoroughly"
-  or
-  wrong = "throught" and right = "thought"
-  or
-  wrong = "throught" and right = "through"
-  or
-  wrong = "throught" and right = "throughout"
-  or
-  wrong = "througout" and right = "throughout"
-  or
-  wrong = "thru" and right = "through"
-  or
-  wrong = "thsi" and right = "this"
-  or
-  wrong = "thsoe" and right = "those"
-  or
-  wrong = "thta" and right = "that"
-  or
-  wrong = "thyat" and right = "that"
-  or
-  wrong = "tiem" and right = "tim"
-  or
-  wrong = "tiem" and right = "time"
-  or
-  wrong = "tihkn" and right = "think"
-  or
-  wrong = "tihs" and right = "this"
-  or
-  wrong = "timne" and right = "time"
-  or
-  wrong = "tiome" and right = "time"
-  or
-  wrong = "tiome" and right = "tome"
-  or
-  wrong = "tje" and right = "the"
-  or
-  wrong = "tjhe" and right = "the"
-  or
-  wrong = "tjpanishad" and right = "upanishad"
-  or
-  wrong = "tkae" and right = "take"
-  or
-  wrong = "tkaes" and right = "takes"
-  or
-  wrong = "tkaing" and right = "taking"
-  or
-  wrong = "tlaking" and right = "talking"
-  or
-  wrong = "tobbaco" and right = "tobacco"
-  or
-  wrong = "todya" and right = "today"
-  or
-  wrong = "toghether" and right = "together"
-  or
-  wrong = "toke" and right = "took"
-  or
-  wrong = "tolerence" and right = "tolerance"
-  or
-  wrong = "tolkein" and right = "tolkien"
-  or
-  wrong = "tomatos" and right = "tomatoes"
-  or
-  wrong = "tommorow" and right = "tomorrow"
-  or
-  wrong = "tommorrow" and right = "tomorrow"
-  or
-  wrong = "tongiht" and right = "tonight"
-  or
-  wrong = "toriodal" and right = "toroidal"
-  or
-  wrong = "tormenters" and right = "tormentors"
-  or
-  wrong = "tornadoe" and right = "tornado"
-  or
-  wrong = "torpeados" and right = "torpedoes"
-  or
-  wrong = "torpedos" and right = "torpedoes"
-  or
-  wrong = "tortise" and right = "tortoise"
-  or
-  wrong = "toubles" and right = "troubles"
-  or
-  wrong = "tounge" and right = "tongue"
-  or
-  wrong = "tourch" and right = "torch"
-  or
-  wrong = "tourch" and right = "touch"
-  or
-  wrong = "towords" and right = "towards"
-  or
-  wrong = "towrad" and right = "toward"
-  or
-  wrong = "tradionally" and right = "traditionally"
-  or
-  wrong = "traditionaly" and right = "traditionally"
-  or
-  wrong = "traditionnal" and right = "traditional"
-  or
-  wrong = "traditition" and right = "tradition"
-  or
-  wrong = "tradtionally" and right = "traditionally"
-  or
-  wrong = "trafficed" and right = "trafficked"
-  or
-  wrong = "trafficing" and right = "trafficking"
-  or
-  wrong = "trafic" and right = "traffic"
-  or
-  wrong = "trancendent" and right = "transcendent"
-  or
-  wrong = "trancending" and right = "transcending"
-  or
-  wrong = "tranform" and right = "transform"
-  or
-  wrong = "tranformed" and right = "transformed"
-  or
-  wrong = "transcendance" and right = "transcendence"
-  or
-  wrong = "transcendant" and right = "transcendent"
-  or
-  wrong = "transcendentational" and right = "transcendental"
-  or
-  wrong = "transcripting" and right = "transcribing"
-  or
-  wrong = "transcripting" and right = "transcription"
-  or
-  wrong = "transending" and right = "transcending"
-  or
-  wrong = "transesxuals" and right = "transsexuals"
-  or
-  wrong = "transfered" and right = "transferred"
-  or
-  wrong = "transfering" and right = "transferring"
-  or
-  wrong = "transformaton" and right = "transformation"
-  or
-  wrong = "transistion" and right = "transition"
-  or
-  wrong = "translater" and right = "translator"
-  or
-  wrong = "translaters" and right = "translators"
-  or
-  wrong = "transmissable" and right = "transmissible"
-  or
-  wrong = "transporation" and right = "transportation"
-  or
-  wrong = "tremelo" and right = "tremolo"
-  or
-  wrong = "tremelos" and right = "tremolos"
-  or
-  wrong = "treshold" and right = "threshold"
-  or
-  wrong = "triguered" and right = "triggered"
-  or
-  wrong = "triology" and right = "trilogy"
-  or
-  wrong = "troling" and right = "trolling"
-  or
-  wrong = "troup" and right = "troupe"
-  or
-  wrong = "troups" and right = "troops"
-  or
-  wrong = "troups" and right = "troupes"
-  or
-  wrong = "truely" and right = "truly"
-  or
-  wrong = "trustworthyness" and right = "trustworthiness"
-  or
-  wrong = "turnk" and right = "trunk"
-  or
-  wrong = "turnk" and right = "turnkey"
-  or
-  wrong = "tuscon" and right = "tucson"
-  or
-  wrong = "tust" and right = "trust"
-  or
-  wrong = "twelth" and right = "twelfth"
-  or
-  wrong = "twon" and right = "town"
-  or
-  wrong = "twpo" and right = "two"
-  or
-  wrong = "tyhat" and right = "that"
-  or
-  wrong = "tyhe" and right = "they"
-  or
-  wrong = "typcial" and right = "typical"
-  or
-  wrong = "typicaly" and right = "typically"
-  or
-  wrong = "tyranies" and right = "tyrannies"
-  or
-  wrong = "tyrany" and right = "tyranny"
-  or
-  wrong = "tyrranies" and right = "tyrannies"
-  or
-  wrong = "tyrrany" and right = "tyranny"
-  or
-  wrong = "ubiquitious" and right = "ubiquitous"
-  or
-  wrong = "ublisher" and right = "publisher"
-  or
-  wrong = "udpate" and right = "update"
-  or
-  wrong = "uise" and right = "use"
-  or
-  wrong = "ukranian" and right = "ukrainian"
-  or
-  wrong = "ultimely" and right = "ultimately"
-  or
-  wrong = "unacompanied" and right = "unaccompanied"
-  or
-  wrong = "unahppy" and right = "unhappy"
-  or
-  wrong = "unanymous" and right = "unanimous"
-  or
-  wrong = "unathorised" and right = "unauthorised"
-  or
-  wrong = "unavailible" and right = "unavailable"
-  or
-  wrong = "unballance" and right = "unbalance"
-  or
-  wrong = "unbeknowst" and right = "unbeknownst"
-  or
-  wrong = "unbeleivable" and right = "unbelievable"
-  or
-  wrong = "uncertainity" and right = "uncertainty"
-  or
-  wrong = "unchallengable" and right = "unchallengeable"
-  or
-  wrong = "unchangable" and right = "unchangeable"
-  or
-  wrong = "uncompetive" and right = "uncompetitive"
-  or
-  wrong = "unconcious" and right = "unconscious"
-  or
-  wrong = "unconciousness" and right = "unconsciousness"
-  or
-  wrong = "unconfortability" and right = "discomfort"
-  or
-  wrong = "uncontitutional" and right = "unconstitutional"
-  or
-  wrong = "unconvential" and right = "unconventional"
-  or
-  wrong = "undecideable" and right = "undecidable"
-  or
-  wrong = "understoon" and right = "understood"
-  or
-  wrong = "undesireable" and right = "undesirable"
-  or
-  wrong = "undetecable" and right = "undetectable"
-  or
-  wrong = "undoubtely" and right = "undoubtedly"
-  or
-  wrong = "undreground" and right = "underground"
-  or
-  wrong = "uneccesary" and right = "unnecessary"
-  or
-  wrong = "unecessary" and right = "unnecessary"
-  or
-  wrong = "unequalities" and right = "inequalities"
-  or
-  wrong = "unforetunately" and right = "unfortunately"
-  or
-  wrong = "unforgetable" and right = "unforgettable"
-  or
-  wrong = "unforgiveable" and right = "unforgivable"
-  or
-  wrong = "unforseen" and right = "unforeseen"
-  or
-  wrong = "unfortunatley" and right = "unfortunately"
-  or
-  wrong = "unfortunatly" and right = "unfortunately"
-  or
-  wrong = "unfourtunately" and right = "unfortunately"
-  or
-  wrong = "unihabited" and right = "uninhabited"
-  or
-  wrong = "unilateraly" and right = "unilaterally"
-  or
-  wrong = "unilatreal" and right = "unilateral"
-  or
-  wrong = "unilatreally" and right = "unilaterally"
-  or
-  wrong = "uninterruped" and right = "uninterrupted"
-  or
-  wrong = "uninterupted" and right = "uninterrupted"
-  or
-  wrong = "unintialized" and right = "uninitialized"
-  or
-  wrong = "unitesstates" and right = "unitedstates"
-  or
-  wrong = "univeral" and right = "universal"
-  or
-  wrong = "univeristies" and right = "universities"
-  or
-  wrong = "univeristy" and right = "university"
-  or
-  wrong = "univerity" and right = "university"
-  or
-  wrong = "universtiy" and right = "university"
-  or
-  wrong = "univesities" and right = "universities"
-  or
-  wrong = "univesity" and right = "university"
-  or
-  wrong = "unkown" and right = "unknown"
-  or
-  wrong = "unlikey" and right = "unlikely"
-  or
-  wrong = "unmanouverable" and right = "unmaneuverable"
-  or
-  wrong = "unmanouverable" and right = "unmanoeuvrable"
-  or
-  wrong = "unmistakeably" and right = "unmistakably"
-  or
-  wrong = "unneccesarily" and right = "unnecessarily"
-  or
-  wrong = "unneccesary" and right = "unnecessary"
-  or
-  wrong = "unneccessarily" and right = "unnecessarily"
-  or
-  wrong = "unneccessary" and right = "unnecessary"
-  or
-  wrong = "unnecesarily" and right = "unnecessarily"
-  or
-  wrong = "unnecesary" and right = "unnecessary"
-  or
-  wrong = "unoffical" and right = "unofficial"
-  or
-  wrong = "unoperational" and right = "nonoperational"
-  or
-  wrong = "unoticeable" and right = "unnoticeable"
-  or
-  wrong = "unplease" and right = "displease"
-  or
-  wrong = "unplesant" and right = "unpleasant"
-  or
-  wrong = "unprecendented" and right = "unprecedented"
-  or
-  wrong = "unprecidented" and right = "unprecedented"
-  or
-  wrong = "unrepentent" and right = "unrepentant"
-  or
-  wrong = "unrepetant" and right = "unrepentant"
-  or
-  wrong = "unrepetent" and right = "unrepentant"
-  or
-  wrong = "unsed" and right = "unsaid"
-  or
-  wrong = "unsed" and right = "unused"
-  or
-  wrong = "unsed" and right = "used"
-  or
-  wrong = "unsubstanciated" and right = "unsubstantiated"
-  or
-  wrong = "unsuccesful" and right = "unsuccessful"
-  or
-  wrong = "unsuccesfully" and right = "unsuccessfully"
-  or
-  wrong = "unsuccessfull" and right = "unsuccessful"
-  or
-  wrong = "unsucesful" and right = "unsuccessful"
-  or
-  wrong = "unsucesfuly" and right = "unsuccessfully"
-  or
-  wrong = "unsucessful" and right = "unsuccessful"
-  or
-  wrong = "unsucessfull" and right = "unsuccessful"
-  or
-  wrong = "unsucessfully" and right = "unsuccessfully"
-  or
-  wrong = "unsuprised" and right = "unsurprised"
-  or
-  wrong = "unsuprising" and right = "unsurprising"
-  or
-  wrong = "unsuprisingly" and right = "unsurprisingly"
-  or
-  wrong = "unsuprized" and right = "unsurprised"
-  or
-  wrong = "unsuprizing" and right = "unsurprising"
-  or
-  wrong = "unsuprizingly" and right = "unsurprisingly"
-  or
-  wrong = "unsurprized" and right = "unsurprised"
-  or
-  wrong = "unsurprizing" and right = "unsurprising"
-  or
-  wrong = "unsurprizingly" and right = "unsurprisingly"
-  or
-  wrong = "untill" and right = "until"
-  or
-  wrong = "untranslateable" and right = "untranslatable"
-  or
-  wrong = "unuseable" and right = "unusable"
-  or
-  wrong = "unusuable" and right = "unusable"
-  or
-  wrong = "unviersity" and right = "university"
-  or
-  wrong = "unwarrented" and right = "unwarranted"
-  or
-  wrong = "unweildly" and right = "unwieldy"
-  or
-  wrong = "unwieldly" and right = "unwieldy"
-  or
-  wrong = "upcomming" and right = "upcoming"
-  or
-  wrong = "upgradded" and right = "upgraded"
-  or
-  wrong = "usally" and right = "usually"
-  or
-  wrong = "useage" and right = "usage"
-  or
-  wrong = "usefull" and right = "useful"
-  or
-  wrong = "usefuly" and right = "usefully"
-  or
-  wrong = "useing" and right = "using"
-  or
-  wrong = "usualy" and right = "usually"
-  or
-  wrong = "ususally" and right = "usually"
-  or
-  wrong = "vaccum" and right = "vacuum"
-  or
-  wrong = "vaccume" and right = "vacuum"
-  or
-  wrong = "vacinity" and right = "vicinity"
-  or
-  wrong = "vaguaries" and right = "vagaries"
-  or
-  wrong = "vaieties" and right = "varieties"
-  or
-  wrong = "vailidty" and right = "validity"
-  or
-  wrong = "valetta" and right = "valletta"
-  or
-  wrong = "valuble" and right = "valuable"
-  or
-  wrong = "valueable" and right = "valuable"
-  or
-  wrong = "varations" and right = "variations"
-  or
-  wrong = "varient" and right = "variant"
-  or
-  wrong = "variey" and right = "variety"
-  or
-  wrong = "varing" and right = "varying"
-  or
-  wrong = "varities" and right = "varieties"
-  or
-  wrong = "varity" and right = "variety"
-  or
-  wrong = "vasall" and right = "vassal"
-  or
-  wrong = "vasalls" and right = "vassals"
-  or
-  wrong = "vaule" and right = "value"
-  or
-  wrong = "vegatarian" and right = "vegetarian"
-  or
-  wrong = "vegitable" and right = "vegetable"
-  or
-  wrong = "vegitables" and right = "vegetables"
-  or
-  wrong = "vegtable" and right = "vegetable"
-  or
-  wrong = "vehicule" and right = "vehicle"
-  or
-  wrong = "vell" and right = "well"
-  or
-  wrong = "venemous" and right = "venomous"
-  or
-  wrong = "vengance" and right = "vengeance"
-  or
-  wrong = "vengence" and right = "vengeance"
-  or
-  wrong = "verfication" and right = "verification"
-  or
-  wrong = "verison" and right = "version"
-  or
-  wrong = "verisons" and right = "versions"
-  or
-  wrong = "vermillion" and right = "vermilion"
-  or
-  wrong = "versitilaty" and right = "versatility"
-  or
-  wrong = "versitlity" and right = "versatility"
-  or
-  wrong = "vetween" and right = "between"
-  or
-  wrong = "veyr" and right = "very"
-  or
-  wrong = "vigeur" and right = "vigor"
-  or
-  wrong = "vigeur" and right = "vigour"
-  or
-  wrong = "vigeur" and right = "vigueur"
-  or
-  wrong = "vigilence" and right = "vigilance"
-  or
-  wrong = "vigourous" and right = "vigorous"
-  or
-  wrong = "villian" and right = "villain"
-  or
-  wrong = "villification" and right = "vilification"
-  or
-  wrong = "villify" and right = "vilify"
-  or
-  wrong = "villin" and right = "villain"
-  or
-  wrong = "villin" and right = "villein"
-  or
-  wrong = "villin" and right = "villi"
-  or
-  wrong = "vincinity" and right = "vicinity"
-  or
-  wrong = "violentce" and right = "violence"
-  or
-  wrong = "virtualy" and right = "virtually"
-  or
-  wrong = "virutal" and right = "virtual"
-  or
-  wrong = "virutally" and right = "virtually"
-  or
-  wrong = "visable" and right = "visible"
-  or
-  wrong = "visably" and right = "visibly"
-  or
-  wrong = "visting" and right = "visiting"
-  or
-  wrong = "vistors" and right = "visitors"
-  or
-  wrong = "vitories" and right = "victories"
-  or
-  wrong = "volcanoe" and right = "volcano"
-  or
-  wrong = "voleyball" and right = "volleyball"
-  or
-  wrong = "volontary" and right = "voluntary"
-  or
-  wrong = "volonteer" and right = "volunteer"
-  or
-  wrong = "volonteered" and right = "volunteered"
-  or
-  wrong = "volonteering" and right = "volunteering"
-  or
-  wrong = "volonteers" and right = "volunteers"
-  or
-  wrong = "volounteer" and right = "volunteer"
-  or
-  wrong = "volounteered" and right = "volunteered"
-  or
-  wrong = "volounteering" and right = "volunteering"
-  or
-  wrong = "volounteers" and right = "volunteers"
-  or
-  wrong = "volumne" and right = "volume"
-  or
-  wrong = "vreity" and right = "variety"
-  or
-  wrong = "vrey" and right = "very"
-  or
-  wrong = "vriety" and right = "variety"
-  or
-  wrong = "vulnerablility" and right = "vulnerability"
-  or
-  wrong = "vyer" and right = "very"
-  or
-  wrong = "vyre" and right = "very"
-  or
-  wrong = "waht" and right = "what"
-  or
-  wrong = "warantee" and right = "warranty"
-  or
-  wrong = "wardobe" and right = "wardrobe"
-  or
-  wrong = "warrent" and right = "warrant"
-  or
-  wrong = "warrriors" and right = "warriors"
-  or
-  wrong = "wass" and right = "was"
-  or
-  wrong = "watn" and right = "want"
-  or
-  wrong = "wayword" and right = "wayward"
-  or
-  wrong = "weaponary" and right = "weaponry"
-  or
-  wrong = "weas" and right = "was"
-  or
-  wrong = "wehn" and right = "when"
-  or
-  wrong = "weild" and right = "wield"
-  or
-  wrong = "weild" and right = "wild"
-  or
-  wrong = "weilded" and right = "wielded"
-  or
-  wrong = "wendsay" and right = "wednesday"
-  or
-  wrong = "wensday" and right = "wednesday"
-  or
-  wrong = "wereabouts" and right = "whereabouts"
-  or
-  wrong = "whant" and right = "want"
-  or
-  wrong = "whants" and right = "wants"
-  or
-  wrong = "whcih" and right = "which"
-  or
-  wrong = "wheras" and right = "whereas"
-  or
-  wrong = "wherease" and right = "whereas"
-  or
-  wrong = "whereever" and right = "wherever"
-  or
-  wrong = "whic" and right = "which"
-  or
-  wrong = "whihc" and right = "which"
-  or
-  wrong = "whith" and right = "with"
-  or
-  wrong = "whlch" and right = "which"
-  or
-  wrong = "whn" and right = "when"
-  or
-  wrong = "wholey" and right = "wholly"
-  or
-  wrong = "wholy" and right = "holy"
-  or
-  wrong = "wholy" and right = "wholly"
-  or
-  wrong = "whta" and right = "what"
-  or
-  wrong = "whther" and right = "whether"
-  or
-  wrong = "wich" and right = "which"
-  or
-  wrong = "wich" and right = "witch"
-  or
-  wrong = "widesread" and right = "widespread"
-  or
-  wrong = "wief" and right = "wife"
-  or
-  wrong = "wierd" and right = "weird"
-  or
-  wrong = "wiew" and right = "view"
-  or
-  wrong = "wih" and right = "with"
-  or
-  wrong = "wiht" and right = "with"
-  or
-  wrong = "wille" and right = "will"
-  or
-  wrong = "willingless" and right = "willingness"
-  or
-  wrong = "willk" and right = "will"
-  or
-  wrong = "wirting" and right = "writing"
-  or
-  wrong = "withdrawl" and right = "withdraw"
-  or
-  wrong = "withdrawl" and right = "withdrawal"
-  or
-  wrong = "witheld" and right = "withheld"
-  or
-  wrong = "withh" and right = "with"
-  or
-  wrong = "withing" and right = "within"
-  or
-  wrong = "withold" and right = "withhold"
-  or
-  wrong = "witht" and right = "with"
-  or
-  wrong = "witn" and right = "with"
-  or
-  wrong = "wiull" and right = "will"
-  or
-  wrong = "wnat" and right = "want"
-  or
-  wrong = "wnated" and right = "wanted"
-  or
-  wrong = "wnats" and right = "wants"
-  or
-  wrong = "wohle" and right = "whole"
-  or
-  wrong = "wokr" and right = "work"
-  or
-  wrong = "wokring" and right = "working"
-  or
-  wrong = "wonderfull" and right = "wonderful"
-  or
-  wrong = "wordlwide" and right = "worldwide"
-  or
-  wrong = "workststion" and right = "workstation"
-  or
-  wrong = "worls" and right = "world"
-  or
-  wrong = "worstened" and right = "worsened"
-  or
-  wrong = "woudl" and right = "would"
-  or
-  wrong = "wresters" and right = "wrestlers"
-  or
-  wrong = "wriet" and right = "write"
-  or
-  wrong = "writen" and right = "written"
-  or
-  wrong = "wroet" and right = "wrote"
-  or
-  wrong = "wrok" and right = "work"
-  or
-  wrong = "wroking" and right = "working"
-  or
-  wrong = "wtih" and right = "with"
-  or
-  wrong = "wupport" and right = "support"
-  or
-  wrong = "xenophoby" and right = "xenophobia"
-  or
-  wrong = "yaching" and right = "yachting"
-  or
-  wrong = "yaer" and right = "year"
-  or
-  wrong = "yaerly" and right = "yearly"
-  or
-  wrong = "yaers" and right = "years"
-  or
-  wrong = "yatch" and right = "yacht"
-  or
-  wrong = "yearm" and right = "year"
-  or
-  wrong = "yeasr" and right = "years"
-  or
-  wrong = "yeild" and right = "yield"
-  or
-  wrong = "yeilding" and right = "yielding"
-  or
-  wrong = "yementite" and right = "yemeni"
-  or
-  wrong = "yementite" and right = "yemenite"
-  or
-  wrong = "yera" and right = "year"
-  or
-  wrong = "yeras" and right = "years"
-  or
-  wrong = "yersa" and right = "years"
-  or
-  wrong = "yotube" and right = "youtube"
-  or
-  wrong = "youseff" and right = "yousef"
-  or
-  wrong = "youself" and right = "yourself"
-  or
-  wrong = "yrea" and right = "year"
-  or
-  wrong = "ytou" and right = "you"
-  or
-  wrong = "yuo" and right = "you"
-  or
-  wrong = "zeebra" and right = "zebra"
-}
+import codeql.typos.TypoDatabase as DB
+
+/** DEPRECATED: Use the `codeql/typos` pack instead. */
+deprecated predicate typos = DB::typos/2;
diff --git a/javascript/ql/src/qlpack.yml b/javascript/ql/src/qlpack.yml
index b371302105e..a364849d264 100644
--- a/javascript/ql/src/qlpack.yml
+++ b/javascript/ql/src/qlpack.yml
@@ -9,3 +9,4 @@ defaultSuiteFile: codeql-suites/javascript-code-scanning.qls
 dependencies:
   codeql/javascript-all: "*"
   codeql/suite-helpers: "*"
+  codeql/typos: "*"
diff --git a/ql/ql/src/codeql_ql/style/MisspellingQuery.qll b/ql/ql/src/codeql_ql/style/MisspellingQuery.qll
index 822a1cfcb07..ad1fd800fb3 100644
--- a/ql/ql/src/codeql_ql/style/MisspellingQuery.qll
+++ b/ql/ql/src/codeql_ql/style/MisspellingQuery.qll
@@ -1,6 +1,6 @@
 import ql
 private import NodeName
-private import TypoDatabase
+private import codeql.typos.TypoDatabase
 
 predicate misspelling(string wrong, string right, string mistake) {
   mistake = "common misspelling" and
diff --git a/ql/ql/src/codeql_ql/style/TypoDatabase.qll b/ql/ql/src/codeql_ql/style/TypoDatabase.qll
index a41f003a8c0..f480b9ebc8b 100644
--- a/ql/ql/src/codeql_ql/style/TypoDatabase.qll
+++ b/ql/ql/src/codeql_ql/style/TypoDatabase.qll
@@ -1,9035 +1,4 @@
-/**
- * Holds if `wrong` is a common misspelling of `right`.
- *
- * This predicate was automatically generated by
- *     python buildutils-internal/scripts/generate-typos.py
- * which uses http://en.wikipedia.org/wiki/Wikipedia:Lists_of_common_misspellings/For_machines (with custom additions) on 2018-01-19.
- *
- * This file is available under the Creative Commons Attribution-ShareAlike License
- * (https://en.wikipedia.org/wiki/Wikipedia:Text_of_Creative_Commons_Attribution-ShareAlike_3.0_Unported_License).
- */
-predicate typos(string wrong, string right) {
-  wrong = "abandonned" and right = "abandoned"
-  or
-  wrong = "abbout" and right = "about"
-  or
-  wrong = "aberation" and right = "aberration"
-  or
-  wrong = "abilityes" and right = "abilities"
-  or
-  wrong = "abilties" and right = "abilities"
-  or
-  wrong = "abilty" and right = "ability"
-  or
-  wrong = "abondon" and right = "abandon"
-  or
-  wrong = "abondoned" and right = "abandoned"
-  or
-  wrong = "abondoning" and right = "abandoning"
-  or
-  wrong = "abondons" and right = "abandons"
-  or
-  wrong = "aborigene" and right = "aborigine"
-  or
-  wrong = "abortificant" and right = "abortifacient"
-  or
-  wrong = "abotu" and right = "about"
-  or
-  wrong = "abreviate" and right = "abbreviate"
-  or
-  wrong = "abreviated" and right = "abbreviated"
-  or
-  wrong = "abreviation" and right = "abbreviation"
-  or
-  wrong = "abritrary" and right = "arbitrary"
-  or
-  wrong = "absail" and right = "abseil"
-  or
-  wrong = "absailing" and right = "abseiling"
-  or
-  wrong = "abscence" and right = "absence"
-  or
-  wrong = "absense" and right = "absence"
-  or
-  wrong = "absolutly" and right = "absolutely"
-  or
-  wrong = "absorbsion" and right = "absorption"
-  or
-  wrong = "absorbtion" and right = "absorption"
-  or
-  wrong = "abudance" and right = "abundance"
-  or
-  wrong = "abundacies" and right = "abundances"
-  or
-  wrong = "abundancies" and right = "abundances"
-  or
-  wrong = "abundunt" and right = "abundant"
-  or
-  wrong = "abutts" and right = "abuts"
-  or
-  wrong = "acadamy" and right = "academy"
-  or
-  wrong = "acadmic" and right = "academic"
-  or
-  wrong = "accademic" and right = "academic"
-  or
-  wrong = "accademy" and right = "academy"
-  or
-  wrong = "acccess" and right = "access"
-  or
-  wrong = "acccused" and right = "accused"
-  or
-  wrong = "accelleration" and right = "acceleration"
-  or
-  wrong = "accension" and right = "accession"
-  or
-  wrong = "accension" and right = "ascension"
-  or
-  wrong = "acceptence" and right = "acceptance"
-  or
-  wrong = "acceptible" and right = "acceptable"
-  or
-  wrong = "accesories" and right = "accessories"
-  or
-  wrong = "accessable" and right = "accessible"
-  or
-  wrong = "accidant" and right = "accident"
-  or
-  wrong = "accidentaly" and right = "accidentally"
-  or
-  wrong = "accidently" and right = "accidentally"
-  or
-  wrong = "acclimitization" and right = "acclimatization"
-  or
-  wrong = "accomadate" and right = "accommodate"
-  or
-  wrong = "accomadated" and right = "accommodated"
-  or
-  wrong = "accomadates" and right = "accommodates"
-  or
-  wrong = "accomadating" and right = "accommodating"
-  or
-  wrong = "accomadation" and right = "accommodation"
-  or
-  wrong = "accomadations" and right = "accommodations"
-  or
-  wrong = "accomdate" and right = "accommodate"
-  or
-  wrong = "accomodate" and right = "accommodate"
-  or
-  wrong = "accomodated" and right = "accommodated"
-  or
-  wrong = "accomodates" and right = "accommodates"
-  or
-  wrong = "accomodating" and right = "accommodating"
-  or
-  wrong = "accomodation" and right = "accommodation"
-  or
-  wrong = "accomodations" and right = "accommodations"
-  or
-  wrong = "accompanyed" and right = "accompanied"
-  or
-  wrong = "accordeon" and right = "accordion"
-  or
-  wrong = "accordian" and right = "accordion"
-  or
-  wrong = "accoring" and right = "according"
-  or
-  wrong = "accoustic" and right = "acoustic"
-  or
-  wrong = "accquainted" and right = "acquainted"
-  or
-  wrong = "accrediation" and right = "accreditation"
-  or
-  wrong = "accredidation" and right = "accreditation"
-  or
-  wrong = "accross" and right = "across"
-  or
-  wrong = "accussed" and right = "accused"
-  or
-  wrong = "acedemic" and right = "academic"
-  or
-  wrong = "acheive" and right = "achieve"
-  or
-  wrong = "acheived" and right = "achieved"
-  or
-  wrong = "acheivement" and right = "achievement"
-  or
-  wrong = "acheivements" and right = "achievements"
-  or
-  wrong = "acheives" and right = "achieves"
-  or
-  wrong = "acheiving" and right = "achieving"
-  or
-  wrong = "acheivment" and right = "achievement"
-  or
-  wrong = "acheivments" and right = "achievements"
-  or
-  wrong = "achievment" and right = "achievement"
-  or
-  wrong = "achievments" and right = "achievements"
-  or
-  wrong = "achive" and right = "achieve"
-  or
-  wrong = "achive" and right = "archive"
-  or
-  wrong = "achived" and right = "achieved"
-  or
-  wrong = "achived" and right = "archived"
-  or
-  wrong = "achivement" and right = "achievement"
-  or
-  wrong = "achivements" and right = "achievements"
-  or
-  wrong = "acident" and right = "accident"
-  or
-  wrong = "acknowldeged" and right = "acknowledged"
-  or
-  wrong = "acknowledgeing" and right = "acknowledging"
-  or
-  wrong = "ackward" and right = "awkward"
-  or
-  wrong = "ackward" and right = "backward"
-  or
-  wrong = "acommodate" and right = "accommodate"
-  or
-  wrong = "acomplish" and right = "accomplish"
-  or
-  wrong = "acomplished" and right = "accomplished"
-  or
-  wrong = "acomplishment" and right = "accomplishment"
-  or
-  wrong = "acomplishments" and right = "accomplishments"
-  or
-  wrong = "acording" and right = "according"
-  or
-  wrong = "acordingly" and right = "accordingly"
-  or
-  wrong = "acquaintence" and right = "acquaintance"
-  or
-  wrong = "acquaintences" and right = "acquaintances"
-  or
-  wrong = "acquiantence" and right = "acquaintance"
-  or
-  wrong = "acquiantences" and right = "acquaintances"
-  or
-  wrong = "acquited" and right = "acquitted"
-  or
-  wrong = "activites" and right = "activities"
-  or
-  wrong = "activly" and right = "actively"
-  or
-  wrong = "actualy" and right = "actually"
-  or
-  wrong = "acuracy" and right = "accuracy"
-  or
-  wrong = "acused" and right = "accused"
-  or
-  wrong = "acustom" and right = "accustom"
-  or
-  wrong = "acustommed" and right = "accustomed"
-  or
-  wrong = "adapater" and right = "adapter"
-  or
-  wrong = "adavanced" and right = "advanced"
-  or
-  wrong = "adbandon" and right = "abandon"
-  or
-  wrong = "addional" and right = "additional"
-  or
-  wrong = "addionally" and right = "additionally"
-  or
-  wrong = "additinally" and right = "additionally"
-  or
-  wrong = "additionaly" and right = "additionally"
-  or
-  wrong = "additonal" and right = "additional"
-  or
-  wrong = "additonally" and right = "additionally"
-  or
-  wrong = "addmission" and right = "admission"
-  or
-  wrong = "addopt" and right = "adopt"
-  or
-  wrong = "addopted" and right = "adopted"
-  or
-  wrong = "addoptive" and right = "adoptive"
-  or
-  wrong = "addres" and right = "adders"
-  or
-  wrong = "addres" and right = "address"
-  or
-  wrong = "addresable" and right = "addressable"
-  or
-  wrong = "addresed" and right = "addressed"
-  or
-  wrong = "addresing" and right = "addressing"
-  or
-  wrong = "addressess" and right = "addresses"
-  or
-  wrong = "addtion" and right = "addition"
-  or
-  wrong = "addtional" and right = "additional"
-  or
-  wrong = "adecuate" and right = "adequate"
-  or
-  wrong = "adequit" and right = "adequate"
-  or
-  wrong = "adhearing" and right = "adhering"
-  or
-  wrong = "adherance" and right = "adherence"
-  or
-  wrong = "admendment" and right = "amendment"
-  or
-  wrong = "admininistrative" and right = "administrative"
-  or
-  wrong = "adminstered" and right = "administered"
-  or
-  wrong = "adminstrate" and right = "administrate"
-  or
-  wrong = "adminstration" and right = "administration"
-  or
-  wrong = "adminstrative" and right = "administrative"
-  or
-  wrong = "adminstrator" and right = "administrator"
-  or
-  wrong = "admissability" and right = "admissibility"
-  or
-  wrong = "admissable" and right = "admissible"
-  or
-  wrong = "admited" and right = "admitted"
-  or
-  wrong = "admitedly" and right = "admittedly"
-  or
-  wrong = "adn" and right = "and"
-  or
-  wrong = "adolecent" and right = "adolescent"
-  or
-  wrong = "adquire" and right = "acquire"
-  or
-  wrong = "adquired" and right = "acquired"
-  or
-  wrong = "adquires" and right = "acquires"
-  or
-  wrong = "adquiring" and right = "acquiring"
-  or
-  wrong = "adres" and right = "address"
-  or
-  wrong = "adresable" and right = "addressable"
-  or
-  wrong = "adresing" and right = "addressing"
-  or
-  wrong = "adress" and right = "address"
-  or
-  wrong = "adressable" and right = "addressable"
-  or
-  wrong = "adressed" and right = "addressed"
-  or
-  wrong = "adressing" and right = "addressing"
-  or
-  wrong = "adressing" and right = "dressing"
-  or
-  wrong = "adventrous" and right = "adventurous"
-  or
-  wrong = "advertisment" and right = "advertisement"
-  or
-  wrong = "advertisments" and right = "advertisements"
-  or
-  wrong = "advesary" and right = "adversary"
-  or
-  wrong = "adviced" and right = "advised"
-  or
-  wrong = "aeriel" and right = "aerial"
-  or
-  wrong = "aeriels" and right = "aerials"
-  or
-  wrong = "afair" and right = "affair"
-  or
-  wrong = "afficianados" and right = "aficionados"
-  or
-  wrong = "afficionado" and right = "aficionado"
-  or
-  wrong = "afficionados" and right = "aficionados"
-  or
-  wrong = "affilate" and right = "affiliate"
-  or
-  wrong = "affilliate" and right = "affiliate"
-  or
-  wrong = "affort" and right = "afford"
-  or
-  wrong = "affort" and right = "effort"
-  or
-  wrong = "aforememtioned" and right = "aforementioned"
-  or
-  wrong = "againnst" and right = "against"
-  or
-  wrong = "agains" and right = "against"
-  or
-  wrong = "agaisnt" and right = "against"
-  or
-  wrong = "aganist" and right = "against"
-  or
-  wrong = "aggaravates" and right = "aggravates"
-  or
-  wrong = "aggreed" and right = "agreed"
-  or
-  wrong = "aggreement" and right = "agreement"
-  or
-  wrong = "aggregious" and right = "egregious"
-  or
-  wrong = "aggresive" and right = "aggressive"
-  or
-  wrong = "agian" and right = "again"
-  or
-  wrong = "agianst" and right = "against"
-  or
-  wrong = "agin" and right = "again"
-  or
-  wrong = "agina" and right = "again"
-  or
-  wrong = "agina" and right = "angina"
-  or
-  wrong = "aginst" and right = "against"
-  or
-  wrong = "agravate" and right = "aggravate"
-  or
-  wrong = "agre" and right = "agree"
-  or
-  wrong = "agred" and right = "agreed"
-  or
-  wrong = "agreeement" and right = "agreement"
-  or
-  wrong = "agreemnt" and right = "agreement"
-  or
-  wrong = "agregate" and right = "aggregate"
-  or
-  wrong = "agregates" and right = "aggregates"
-  or
-  wrong = "agreing" and right = "agreeing"
-  or
-  wrong = "agression" and right = "aggression"
-  or
-  wrong = "agressive" and right = "aggressive"
-  or
-  wrong = "agressively" and right = "aggressively"
-  or
-  wrong = "agressor" and right = "aggressor"
-  or
-  wrong = "agricultue" and right = "agriculture"
-  or
-  wrong = "agriculure" and right = "agriculture"
-  or
-  wrong = "agricuture" and right = "agriculture"
-  or
-  wrong = "agrieved" and right = "aggrieved"
-  or
-  wrong = "agrument" and right = "argument"
-  or
-  wrong = "agruments" and right = "arguments"
-  or
-  wrong = "ahev" and right = "have"
-  or
-  wrong = "ahppen" and right = "happen"
-  or
-  wrong = "ahve" and right = "have"
-  or
-  wrong = "aicraft" and right = "aircraft"
-  or
-  wrong = "aiport" and right = "airport"
-  or
-  wrong = "airbourne" and right = "airborne"
-  or
-  wrong = "aircaft" and right = "aircraft"
-  or
-  wrong = "aircrafts" and right = "aircraft"
-  or
-  wrong = "airporta" and right = "airports"
-  or
-  wrong = "airrcraft" and right = "aircraft"
-  or
-  wrong = "aisian" and right = "asian"
-  or
-  wrong = "albiet" and right = "albeit"
-  or
-  wrong = "alchohol" and right = "alcohol"
-  or
-  wrong = "alchoholic" and right = "alcoholic"
-  or
-  wrong = "alchol" and right = "alcohol"
-  or
-  wrong = "alcholic" and right = "alcoholic"
-  or
-  wrong = "alcohal" and right = "alcohol"
-  or
-  wrong = "alcoholical" and right = "alcoholic"
-  or
-  wrong = "aledge" and right = "allege"
-  or
-  wrong = "aledged" and right = "alleged"
-  or
-  wrong = "aledges" and right = "alleges"
-  or
-  wrong = "alege" and right = "allege"
-  or
-  wrong = "aleged" and right = "alleged"
-  or
-  wrong = "alegience" and right = "allegiance"
-  or
-  wrong = "algebraical" and right = "algebraic"
-  or
-  wrong = "algorhitms" and right = "algorithms"
-  or
-  wrong = "algoritm" and right = "algorithm"
-  or
-  wrong = "algoritms" and right = "algorithms"
-  or
-  wrong = "alientating" and right = "alienating"
-  or
-  wrong = "alledge" and right = "allege"
-  or
-  wrong = "alledged" and right = "alleged"
-  or
-  wrong = "alledgedly" and right = "allegedly"
-  or
-  wrong = "alledges" and right = "alleges"
-  or
-  wrong = "allegedely" and right = "allegedly"
-  or
-  wrong = "allegedy" and right = "allegedly"
-  or
-  wrong = "allegely" and right = "allegedly"
-  or
-  wrong = "allegence" and right = "allegiance"
-  or
-  wrong = "allegience" and right = "allegiance"
-  or
-  wrong = "allign" and right = "align"
-  or
-  wrong = "alligned" and right = "aligned"
-  or
-  wrong = "alliviate" and right = "alleviate"
-  or
-  wrong = "allopone" and right = "allophone"
-  or
-  wrong = "allopones" and right = "allophones"
-  or
-  wrong = "allready" and right = "already"
-  or
-  wrong = "allthough" and right = "although"
-  or
-  wrong = "alltogether" and right = "altogether"
-  or
-  wrong = "almsot" and right = "almost"
-  or
-  wrong = "alochol" and right = "alcohol"
-  or
-  wrong = "alomst" and right = "almost"
-  or
-  wrong = "alot" and right = "allot"
-  or
-  wrong = "alotted" and right = "allotted"
-  or
-  wrong = "alowed" and right = "allowed"
-  or
-  wrong = "alowing" and right = "allowing"
-  or
-  wrong = "alreayd" and right = "already"
-  or
-  wrong = "alse" and right = "else"
-  or
-  wrong = "alsot" and right = "also"
-  or
-  wrong = "alternitives" and right = "alternatives"
-  or
-  wrong = "altho" and right = "although"
-  or
-  wrong = "althought" and right = "although"
-  or
-  wrong = "altough" and right = "although"
-  or
-  wrong = "alusion" and right = "allusion"
-  or
-  wrong = "alusion" and right = "illusion"
-  or
-  wrong = "alwasy" and right = "always"
-  or
-  wrong = "alwyas" and right = "always"
-  or
-  wrong = "amalgomated" and right = "amalgamated"
-  or
-  wrong = "amatuer" and right = "amateur"
-  or
-  wrong = "amature" and right = "amateur"
-  or
-  wrong = "amature" and right = "armature"
-  or
-  wrong = "amendmant" and right = "amendment"
-  or
-  wrong = "amercia" and right = "america"
-  or
-  wrong = "amerliorate" and right = "ameliorate"
-  or
-  wrong = "amke" and right = "make"
-  or
-  wrong = "amking" and right = "making"
-  or
-  wrong = "ammend" and right = "amend"
-  or
-  wrong = "ammended" and right = "amended"
-  or
-  wrong = "ammendment" and right = "amendment"
-  or
-  wrong = "ammendments" and right = "amendments"
-  or
-  wrong = "ammount" and right = "amount"
-  or
-  wrong = "ammused" and right = "amused"
-  or
-  wrong = "amoung" and right = "among"
-  or
-  wrong = "amoungst" and right = "amongst"
-  or
-  wrong = "amung" and right = "among"
-  or
-  wrong = "amunition" and right = "ammunition"
-  or
-  wrong = "analagous" and right = "analogous"
-  or
-  wrong = "analitic" and right = "analytic"
-  or
-  wrong = "analogeous" and right = "analogous"
-  or
-  wrong = "anarchim" and right = "anarchism"
-  or
-  wrong = "anarchistm" and right = "anarchism"
-  or
-  wrong = "anbd" and right = "and"
-  or
-  wrong = "ancestory" and right = "ancestry"
-  or
-  wrong = "ancilliary" and right = "ancillary"
-  or
-  wrong = "andd" and right = "and"
-  or
-  wrong = "androgenous" and right = "androgynous"
-  or
-  wrong = "androgeny" and right = "androgyny"
-  or
-  wrong = "anihilation" and right = "annihilation"
-  or
-  wrong = "aniversary" and right = "anniversary"
-  or
-  wrong = "annoint" and right = "anoint"
-  or
-  wrong = "annointed" and right = "anointed"
-  or
-  wrong = "annointing" and right = "anointing"
-  or
-  wrong = "annoints" and right = "anoints"
-  or
-  wrong = "annouced" and right = "announced"
-  or
-  wrong = "annualy" and right = "annually"
-  or
-  wrong = "annuled" and right = "annulled"
-  or
-  wrong = "anohter" and right = "another"
-  or
-  wrong = "anomolies" and right = "anomalies"
-  or
-  wrong = "anomolous" and right = "anomalous"
-  or
-  wrong = "anomoly" and right = "anomaly"
-  or
-  wrong = "anonimity" and right = "anonymity"
-  or
-  wrong = "anounced" and right = "announced"
-  or
-  wrong = "anouncement" and right = "announcement"
-  or
-  wrong = "ansalisation" and right = "nasalisation"
-  or
-  wrong = "ansalization" and right = "nasalization"
-  or
-  wrong = "ansestors" and right = "ancestors"
-  or
-  wrong = "antartic" and right = "antarctic"
-  or
-  wrong = "anthromorphization" and right = "anthropomorphization"
-  or
-  wrong = "anthropolgist" and right = "anthropologist"
-  or
-  wrong = "anthropolgy" and right = "anthropology"
-  or
-  wrong = "anual" and right = "annual"
-  or
-  wrong = "anulled" and right = "annulled"
-  or
-  wrong = "anwsered" and right = "answered"
-  or
-  wrong = "anyhwere" and right = "anywhere"
-  or
-  wrong = "anytying" and right = "anything"
-  or
-  wrong = "aparent" and right = "apparent"
-  or
-  wrong = "aparment" and right = "apartment"
-  or
-  wrong = "apenines" and right = "apennines"
-  or
-  wrong = "aplication" and right = "application"
-  or
-  wrong = "aplied" and right = "applied"
-  or
-  wrong = "apolegetics" and right = "apologetics"
-  or
-  wrong = "apon" and right = "apron"
-  or
-  wrong = "apon" and right = "upon"
-  or
-  wrong = "apparant" and right = "apparent"
-  or
-  wrong = "apparantly" and right = "apparently"
-  or
-  wrong = "appart" and right = "apart"
-  or
-  wrong = "appartment" and right = "apartment"
-  or
-  wrong = "appartments" and right = "apartments"
-  or
-  wrong = "appealling" and right = "appalling"
-  or
-  wrong = "appealling" and right = "appealing"
-  or
-  wrong = "appeareance" and right = "appearance"
-  or
-  wrong = "appearence" and right = "appearance"
-  or
-  wrong = "appearences" and right = "appearances"
-  or
-  wrong = "appenines" and right = "apennines"
-  or
-  wrong = "apperance" and right = "appearance"
-  or
-  wrong = "apperances" and right = "appearances"
-  or
-  wrong = "appereance" and right = "appearance"
-  or
-  wrong = "appereances" and right = "appearances"
-  or
-  wrong = "applicaiton" and right = "application"
-  or
-  wrong = "applicaitons" and right = "applications"
-  or
-  wrong = "appologies" and right = "apologies"
-  or
-  wrong = "appology" and right = "apology"
-  or
-  wrong = "apprearance" and right = "appearance"
-  or
-  wrong = "apprieciate" and right = "appreciate"
-  or
-  wrong = "approachs" and right = "approaches"
-  or
-  wrong = "appropiate" and right = "appropriate"
-  or
-  wrong = "appropraite" and right = "appropriate"
-  or
-  wrong = "appropropiate" and right = "appropriate"
-  or
-  wrong = "approproximate" and right = "approximate"
-  or
-  wrong = "approxamately" and right = "approximately"
-  or
-  wrong = "approxiately" and right = "approximately"
-  or
-  wrong = "approximitely" and right = "approximately"
-  or
-  wrong = "aprehensive" and right = "apprehensive"
-  or
-  wrong = "apropriate" and right = "appropriate"
-  or
-  wrong = "aproval" and right = "approval"
-  or
-  wrong = "aproximate" and right = "approximate"
-  or
-  wrong = "aproximately" and right = "approximately"
-  or
-  wrong = "aquaduct" and right = "aqueduct"
-  or
-  wrong = "aquaintance" and right = "acquaintance"
-  or
-  wrong = "aquainted" and right = "acquainted"
-  or
-  wrong = "aquiantance" and right = "acquaintance"
-  or
-  wrong = "aquire" and right = "acquire"
-  or
-  wrong = "aquired" and right = "acquired"
-  or
-  wrong = "aquiring" and right = "acquiring"
-  or
-  wrong = "aquisition" and right = "acquisition"
-  or
-  wrong = "aquitted" and right = "acquitted"
-  or
-  wrong = "aranged" and right = "arranged"
-  or
-  wrong = "arangement" and right = "arrangement"
-  or
-  wrong = "arbitarily" and right = "arbitrarily"
-  or
-  wrong = "arbitary" and right = "arbitrary"
-  or
-  wrong = "archaelogical" and right = "archaeological"
-  or
-  wrong = "archaelogists" and right = "archaeologists"
-  or
-  wrong = "archaelogy" and right = "archaeology"
-  or
-  wrong = "archaoelogy" and right = "archaeology"
-  or
-  wrong = "archaoelogy" and right = "archeology"
-  or
-  wrong = "archaology" and right = "archaeology"
-  or
-  wrong = "archaology" and right = "archeology"
-  or
-  wrong = "archeaologist" and right = "archaeologist"
-  or
-  wrong = "archeaologist" and right = "archeologist"
-  or
-  wrong = "archeaologists" and right = "archaeologists"
-  or
-  wrong = "archeaologists" and right = "archeologists"
-  or
-  wrong = "archetect" and right = "architect"
-  or
-  wrong = "archetects" and right = "architects"
-  or
-  wrong = "archetectural" and right = "architectural"
-  or
-  wrong = "archetecturally" and right = "architecturally"
-  or
-  wrong = "archetecture" and right = "architecture"
-  or
-  wrong = "archiac" and right = "archaic"
-  or
-  wrong = "archictect" and right = "architect"
-  or
-  wrong = "archimedian" and right = "archimedean"
-  or
-  wrong = "architecht" and right = "architect"
-  or
-  wrong = "architechturally" and right = "architecturally"
-  or
-  wrong = "architechture" and right = "architecture"
-  or
-  wrong = "architechtures" and right = "architectures"
-  or
-  wrong = "architectual" and right = "architectural"
-  or
-  wrong = "archtype" and right = "archetype"
-  or
-  wrong = "archtypes" and right = "archetypes"
-  or
-  wrong = "aready" and right = "already"
-  or
-  wrong = "areodynamics" and right = "aerodynamics"
-  or
-  wrong = "argubly" and right = "arguably"
-  or
-  wrong = "arguement" and right = "argument"
-  or
-  wrong = "arguements" and right = "arguments"
-  or
-  wrong = "arised" and right = "arose"
-  or
-  wrong = "arival" and right = "arrival"
-  or
-  wrong = "armamant" and right = "armament"
-  or
-  wrong = "armistace" and right = "armistice"
-  or
-  wrong = "arogant" and right = "arrogant"
-  or
-  wrong = "arogent" and right = "arrogant"
-  or
-  wrong = "aroud" and right = "around"
-  or
-  wrong = "arrangment" and right = "arrangement"
-  or
-  wrong = "arrangments" and right = "arrangements"
-  or
-  wrong = "arrengement" and right = "arrangement"
-  or
-  wrong = "arrengements" and right = "arrangements"
-  or
-  wrong = "arround" and right = "around"
-  or
-  wrong = "artcile" and right = "article"
-  or
-  wrong = "artical" and right = "article"
-  or
-  wrong = "artice" and right = "article"
-  or
-  wrong = "articel" and right = "article"
-  or
-  wrong = "artifical" and right = "artificial"
-  or
-  wrong = "artifically" and right = "artificially"
-  or
-  wrong = "artillary" and right = "artillery"
-  or
-  wrong = "arund" and right = "around"
-  or
-  wrong = "asetic" and right = "ascetic"
-  or
-  wrong = "asign" and right = "assign"
-  or
-  wrong = "aslo" and right = "also"
-  or
-  wrong = "asnyc" and right = "async"
-  or
-  wrong = "asociated" and right = "associated"
-  or
-  wrong = "asorbed" and right = "absorbed"
-  or
-  wrong = "asphyxation" and right = "asphyxiation"
-  or
-  wrong = "assasin" and right = "assassin"
-  or
-  wrong = "assasinate" and right = "assassinate"
-  or
-  wrong = "assasinated" and right = "assassinated"
-  or
-  wrong = "assasinates" and right = "assassinates"
-  or
-  wrong = "assasination" and right = "assassination"
-  or
-  wrong = "assasinations" and right = "assassinations"
-  or
-  wrong = "assasined" and right = "assassinated"
-  or
-  wrong = "assasins" and right = "assassins"
-  or
-  wrong = "assassintation" and right = "assassination"
-  or
-  wrong = "assemple" and right = "assemble"
-  or
-  wrong = "assertation" and right = "assertion"
-  or
-  wrong = "asside" and right = "aside"
-  or
-  wrong = "assisnate" and right = "assassinate"
-  or
-  wrong = "assit" and right = "assist"
-  or
-  wrong = "assitant" and right = "assistant"
-  or
-  wrong = "assocation" and right = "association"
-  or
-  wrong = "assoicate" and right = "associate"
-  or
-  wrong = "assoicated" and right = "associated"
-  or
-  wrong = "assoicates" and right = "associates"
-  or
-  wrong = "assosication" and right = "assassination"
-  or
-  wrong = "asssassans" and right = "assassins"
-  or
-  wrong = "assualt" and right = "assault"
-  or
-  wrong = "assualted" and right = "assaulted"
-  or
-  wrong = "assymetric" and right = "asymmetric"
-  or
-  wrong = "assymetrical" and right = "asymmetrical"
-  or
-  wrong = "asteriod" and right = "asteroid"
-  or
-  wrong = "asthetic" and right = "aesthetic"
-  or
-  wrong = "asthetical" and right = "aesthetical"
-  or
-  wrong = "asthetically" and right = "aesthetically"
-  or
-  wrong = "asume" and right = "assume"
-  or
-  wrong = "atain" and right = "attain"
-  or
-  wrong = "atempting" and right = "attempting"
-  or
-  wrong = "atheistical" and right = "atheistic"
-  or
-  wrong = "athenean" and right = "athenian"
-  or
-  wrong = "atheneans" and right = "athenians"
-  or
-  wrong = "athiesm" and right = "atheism"
-  or
-  wrong = "athiest" and right = "atheist"
-  or
-  wrong = "atorney" and right = "attorney"
-  or
-  wrong = "atribute" and right = "attribute"
-  or
-  wrong = "atributed" and right = "attributed"
-  or
-  wrong = "atributes" and right = "attributes"
-  or
-  wrong = "attaindre" and right = "attainder"
-  or
-  wrong = "attaindre" and right = "attained"
-  or
-  wrong = "attemp" and right = "attempt"
-  or
-  wrong = "attemped" and right = "attempted"
-  or
-  wrong = "attemt" and right = "attempt"
-  or
-  wrong = "attemted" and right = "attempted"
-  or
-  wrong = "attemting" and right = "attempting"
-  or
-  wrong = "attemts" and right = "attempts"
-  or
-  wrong = "attendence" and right = "attendance"
-  or
-  wrong = "attendent" and right = "attendant"
-  or
-  wrong = "attendents" and right = "attendants"
-  or
-  wrong = "attened" and right = "attended"
-  or
-  wrong = "attension" and right = "attention"
-  or
-  wrong = "attitide" and right = "attitude"
-  or
-  wrong = "attributred" and right = "attributed"
-  or
-  wrong = "attrocities" and right = "atrocities"
-  or
-  wrong = "audeince" and right = "audience"
-  or
-  wrong = "auromated" and right = "automated"
-  or
-  wrong = "austrailia" and right = "australia"
-  or
-  wrong = "austrailian" and right = "australian"
-  or
-  wrong = "auther" and right = "author"
-  or
-  wrong = "authobiographic" and right = "autobiographic"
-  or
-  wrong = "authobiography" and right = "autobiography"
-  or
-  wrong = "authorative" and right = "authoritative"
-  or
-  wrong = "authorites" and right = "authorities"
-  or
-  wrong = "authorithy" and right = "authority"
-  or
-  wrong = "authoritiers" and right = "authorities"
-  or
-  wrong = "authoritive" and right = "authoritative"
-  or
-  wrong = "authrorities" and right = "authorities"
-  or
-  wrong = "autochtonous" and right = "autochthonous"
-  or
-  wrong = "autoctonous" and right = "autochthonous"
-  or
-  wrong = "automaticly" and right = "automatically"
-  or
-  wrong = "automibile" and right = "automobile"
-  or
-  wrong = "automonomous" and right = "autonomous"
-  or
-  wrong = "autor" and right = "author"
-  or
-  wrong = "autority" and right = "authority"
-  or
-  wrong = "auxilary" and right = "auxiliary"
-  or
-  wrong = "auxillaries" and right = "auxiliaries"
-  or
-  wrong = "auxillary" and right = "auxiliary"
-  or
-  wrong = "auxilliaries" and right = "auxiliaries"
-  or
-  wrong = "auxilliary" and right = "auxiliary"
-  or
-  wrong = "availabe" and right = "available"
-  or
-  wrong = "availablity" and right = "availability"
-  or
-  wrong = "availaible" and right = "available"
-  or
-  wrong = "availble" and right = "available"
-  or
-  wrong = "availiable" and right = "available"
-  or
-  wrong = "availible" and right = "available"
-  or
-  wrong = "avalable" and right = "available"
-  or
-  wrong = "avalance" and right = "avalanche"
-  or
-  wrong = "avaliable" and right = "available"
-  or
-  wrong = "avation" and right = "aviation"
-  or
-  wrong = "averageed" and right = "averaged"
-  or
-  wrong = "avilable" and right = "available"
-  or
-  wrong = "awared" and right = "awarded"
-  or
-  wrong = "awya" and right = "away"
-  or
-  wrong = "baceause" and right = "because"
-  or
-  wrong = "backgorund" and right = "background"
-  or
-  wrong = "backrounds" and right = "backgrounds"
-  or
-  wrong = "bakc" and right = "back"
-  or
-  wrong = "banannas" and right = "bananas"
-  or
-  wrong = "bandwith" and right = "bandwidth"
-  or
-  wrong = "bankrupcy" and right = "bankruptcy"
-  or
-  wrong = "banruptcy" and right = "bankruptcy"
-  or
-  wrong = "baout" and right = "about"
-  or
-  wrong = "baout" and right = "bout"
-  or
-  wrong = "basicaly" and right = "basically"
-  or
-  wrong = "basicly" and right = "basically"
-  or
-  wrong = "bcak" and right = "back"
-  or
-  wrong = "beachead" and right = "beachhead"
-  or
-  wrong = "beacuse" and right = "because"
-  or
-  wrong = "beastiality" and right = "bestiality"
-  or
-  wrong = "beatiful" and right = "beautiful"
-  or
-  wrong = "beaurocracy" and right = "bureaucracy"
-  or
-  wrong = "beaurocratic" and right = "bureaucratic"
-  or
-  wrong = "beautyfull" and right = "beautiful"
-  or
-  wrong = "becamae" and right = "became"
-  or
-  wrong = "becames" and right = "became"
-  or
-  wrong = "becames" and right = "becomes"
-  or
-  wrong = "becasue" and right = "because"
-  or
-  wrong = "beccause" and right = "because"
-  or
-  wrong = "becomeing" and right = "becoming"
-  or
-  wrong = "becomming" and right = "becoming"
-  or
-  wrong = "becouse" and right = "because"
-  or
-  wrong = "becuase" and right = "because"
-  or
-  wrong = "bedore" and right = "before"
-  or
-  wrong = "beeing" and right = "being"
-  or
-  wrong = "befoer" and right = "before"
-  or
-  wrong = "beggin" and right = "begging"
-  or
-  wrong = "beggin" and right = "begin"
-  or
-  wrong = "begginer" and right = "beginner"
-  or
-  wrong = "begginers" and right = "beginners"
-  or
-  wrong = "beggining" and right = "beginning"
-  or
-  wrong = "begginings" and right = "beginnings"
-  or
-  wrong = "beggins" and right = "begins"
-  or
-  wrong = "begining" and right = "beginning"
-  or
-  wrong = "beginnig" and right = "beginning"
-  or
-  wrong = "behavour" and right = "behavior"
-  or
-  wrong = "behavour" and right = "behaviour"
-  or
-  wrong = "beleagured" and right = "beleaguered"
-  or
-  wrong = "beleif" and right = "belief"
-  or
-  wrong = "beleive" and right = "believe"
-  or
-  wrong = "beleived" and right = "believed"
-  or
-  wrong = "beleives" and right = "believes"
-  or
-  wrong = "beleiving" and right = "believing"
-  or
-  wrong = "beligum" and right = "belgium"
-  or
-  wrong = "belive" and right = "believe"
-  or
-  wrong = "belived" and right = "believed"
-  or
-  wrong = "belived" and right = "beloved"
-  or
-  wrong = "belives" and right = "beliefs"
-  or
-  wrong = "belives" and right = "believes"
-  or
-  wrong = "belligerant" and right = "belligerent"
-  or
-  wrong = "bellweather" and right = "bellwether"
-  or
-  wrong = "bemusemnt" and right = "bemusement"
-  or
-  wrong = "beneficary" and right = "beneficiary"
-  or
-  wrong = "beng" and right = "being"
-  or
-  wrong = "benificial" and right = "beneficial"
-  or
-  wrong = "benifit" and right = "benefit"
-  or
-  wrong = "benifits" and right = "benefits"
-  or
-  wrong = "bergamont" and right = "bergamot"
-  or
-  wrong = "bernouilli" and right = "bernoulli"
-  or
-  wrong = "beseige" and right = "besiege"
-  or
-  wrong = "beseiged" and right = "besieged"
-  or
-  wrong = "beseiging" and right = "besieging"
-  or
-  wrong = "beteen" and right = "between"
-  or
-  wrong = "betwen" and right = "between"
-  or
-  wrong = "beween" and right = "between"
-  or
-  wrong = "bewteen" and right = "between"
-  or
-  wrong = "bigining" and right = "beginning"
-  or
-  wrong = "biginning" and right = "beginning"
-  or
-  wrong = "bilateraly" and right = "bilaterally"
-  or
-  wrong = "billingualism" and right = "bilingualism"
-  or
-  wrong = "binominal" and right = "binomial"
-  or
-  wrong = "bizzare" and right = "bizarre"
-  or
-  wrong = "blaim" and right = "blame"
-  or
-  wrong = "blaimed" and right = "blamed"
-  or
-  wrong = "blessure" and right = "blessing"
-  or
-  wrong = "blitzkreig" and right = "blitzkrieg"
-  or
-  wrong = "boaut" and right = "about"
-  or
-  wrong = "boaut" and right = "boat"
-  or
-  wrong = "boaut" and right = "bout"
-  or
-  wrong = "bodydbuilder" and right = "bodybuilder"
-  or
-  wrong = "bolean" and right = "boolean"
-  or
-  wrong = "bombardement" and right = "bombardment"
-  or
-  wrong = "bombarment" and right = "bombardment"
-  or
-  wrong = "bondary" and right = "boundary"
-  or
-  wrong = "bonnano" and right = "bonanno"
-  or
-  wrong = "boook" and right = "book"
-  or
-  wrong = "borke" and right = "broke"
-  or
-  wrong = "boundry" and right = "boundary"
-  or
-  wrong = "bouyancy" and right = "buoyancy"
-  or
-  wrong = "bouyant" and right = "buoyant"
-  or
-  wrong = "boyant" and right = "buoyant"
-  or
-  wrong = "bradcast" and right = "broadcast"
-  or
-  wrong = "brasillian" and right = "brazilian"
-  or
-  wrong = "breakthough" and right = "breakthrough"
-  or
-  wrong = "breakthroughts" and right = "breakthroughs"
-  or
-  wrong = "breif" and right = "brief"
-  or
-  wrong = "breifly" and right = "briefly"
-  or
-  wrong = "brethen" and right = "brethren"
-  or
-  wrong = "bretheren" and right = "brethren"
-  or
-  wrong = "briliant" and right = "brilliant"
-  or
-  wrong = "brillant" and right = "brilliant"
-  or
-  wrong = "brimestone" and right = "brimstone"
-  or
-  wrong = "britian" and right = "britain"
-  or
-  wrong = "brittish" and right = "british"
-  or
-  wrong = "broacasted" and right = "broadcast"
-  or
-  wrong = "broadacasting" and right = "broadcasting"
-  or
-  wrong = "broady" and right = "broadly"
-  or
-  wrong = "buddah" and right = "buddha"
-  or
-  wrong = "buddist" and right = "buddhist"
-  or
-  wrong = "buisness" and right = "business"
-  or
-  wrong = "buisnessman" and right = "businessman"
-  or
-  wrong = "buoancy" and right = "buoyancy"
-  or
-  wrong = "buring" and right = "burin"
-  or
-  wrong = "buring" and right = "burning"
-  or
-  wrong = "buring" and right = "burying"
-  or
-  wrong = "buring" and right = "during"
-  or
-  wrong = "burried" and right = "buried"
-  or
-  wrong = "busines" and right = "business"
-  or
-  wrong = "busineses" and right = "business"
-  or
-  wrong = "busineses" and right = "businesses"
-  or
-  wrong = "busness" and right = "business"
-  or
-  wrong = "bussiness" and right = "business"
-  or
-  wrong = "caculater" and right = "calculator"
-  or
-  wrong = "cacuses" and right = "caucuses"
-  or
-  wrong = "cahracters" and right = "characters"
-  or
-  wrong = "calaber" and right = "caliber"
-  or
-  wrong = "calander" and right = "calendar"
-  or
-  wrong = "calander" and right = "calender"
-  or
-  wrong = "calander" and right = "colander"
-  or
-  wrong = "calculater" and right = "calculator"
-  or
-  wrong = "calculs" and right = "calculus"
-  or
-  wrong = "calender" and right = "calendar"
-  or
-  wrong = "calenders" and right = "calendars"
-  or
-  wrong = "caligraphy" and right = "calligraphy"
-  or
-  wrong = "caluclate" and right = "calculate"
-  or
-  wrong = "caluclated" and right = "calculated"
-  or
-  wrong = "caluculate" and right = "calculate"
-  or
-  wrong = "caluculated" and right = "calculated"
-  or
-  wrong = "calulate" and right = "calculate"
-  or
-  wrong = "calulated" and right = "calculated"
-  or
-  wrong = "calulater" and right = "calculator"
-  or
-  wrong = "cambrige" and right = "cambridge"
-  or
-  wrong = "camoflage" and right = "camouflage"
-  or
-  wrong = "campagin" and right = "campaign"
-  or
-  wrong = "campain" and right = "campaign"
-  or
-  wrong = "campains" and right = "campaigns"
-  or
-  wrong = "candadate" and right = "candidate"
-  or
-  wrong = "candiate" and right = "candidate"
-  or
-  wrong = "candidiate" and right = "candidate"
-  or
-  wrong = "cannister" and right = "canister"
-  or
-  wrong = "cannisters" and right = "canisters"
-  or
-  wrong = "cannnot" and right = "cannot"
-  or
-  wrong = "cannonical" and right = "canonical"
-  or
-  wrong = "cannotation" and right = "connotation"
-  or
-  wrong = "cannotations" and right = "connotations"
-  or
-  wrong = "caost" and right = "coast"
-  or
-  wrong = "caperbility" and right = "capability"
-  or
-  wrong = "capible" and right = "capable"
-  or
-  wrong = "captial" and right = "capital"
-  or
-  wrong = "captued" and right = "captured"
-  or
-  wrong = "capturd" and right = "captured"
-  or
-  wrong = "carachter" and right = "character"
-  or
-  wrong = "caracterized" and right = "characterized"
-  or
-  wrong = "carcas" and right = "caracas"
-  or
-  wrong = "carcas" and right = "carcass"
-  or
-  wrong = "carefull" and right = "careful"
-  or
-  wrong = "careing" and right = "caring"
-  or
-  wrong = "carismatic" and right = "charismatic"
-  or
-  wrong = "carmalite" and right = "carmelite"
-  or
-  wrong = "carnagie" and right = "carnegie"
-  or
-  wrong = "carnege" and right = "carnage"
-  or
-  wrong = "carnege" and right = "carnegie"
-  or
-  wrong = "carnige" and right = "carnage"
-  or
-  wrong = "carnige" and right = "carnegie"
-  or
-  wrong = "carnigie" and right = "carnegie"
-  or
-  wrong = "carreer" and right = "career"
-  or
-  wrong = "carrers" and right = "careers"
-  or
-  wrong = "carribbean" and right = "caribbean"
-  or
-  wrong = "carribean" and right = "caribbean"
-  or
-  wrong = "carryng" and right = "carrying"
-  or
-  wrong = "cartdridge" and right = "cartridge"
-  or
-  wrong = "carthagian" and right = "carthaginian"
-  or
-  wrong = "carthographer" and right = "cartographer"
-  or
-  wrong = "cartilege" and right = "cartilage"
-  or
-  wrong = "cartilidge" and right = "cartilage"
-  or
-  wrong = "cartrige" and right = "cartridge"
-  or
-  wrong = "casette" and right = "cassette"
-  or
-  wrong = "casion" and right = "caisson"
-  or
-  wrong = "cassawory" and right = "cassowary"
-  or
-  wrong = "cassowarry" and right = "cassowary"
-  or
-  wrong = "casue" and right = "cause"
-  or
-  wrong = "casued" and right = "caused"
-  or
-  wrong = "casues" and right = "causes"
-  or
-  wrong = "casuing" and right = "causing"
-  or
-  wrong = "casulaties" and right = "casualties"
-  or
-  wrong = "casulaty" and right = "casualty"
-  or
-  wrong = "catagories" and right = "categories"
-  or
-  wrong = "catagorized" and right = "categorized"
-  or
-  wrong = "catagory" and right = "category"
-  or
-  wrong = "cataline" and right = "catalina"
-  or
-  wrong = "cataline" and right = "catiline"
-  or
-  wrong = "catapillar" and right = "caterpillar"
-  or
-  wrong = "catapillars" and right = "caterpillars"
-  or
-  wrong = "catapiller" and right = "caterpillar"
-  or
-  wrong = "catapillers" and right = "caterpillars"
-  or
-  wrong = "catepillar" and right = "caterpillar"
-  or
-  wrong = "catepillars" and right = "caterpillars"
-  or
-  wrong = "catergorize" and right = "categorize"
-  or
-  wrong = "catergorized" and right = "categorized"
-  or
-  wrong = "caterpilar" and right = "caterpillar"
-  or
-  wrong = "caterpilars" and right = "caterpillars"
-  or
-  wrong = "caterpiller" and right = "caterpillar"
-  or
-  wrong = "caterpillers" and right = "caterpillars"
-  or
-  wrong = "cathlic" and right = "catholic"
-  or
-  wrong = "catholocism" and right = "catholicism"
-  or
-  wrong = "catterpilar" and right = "caterpillar"
-  or
-  wrong = "catterpilars" and right = "caterpillars"
-  or
-  wrong = "catterpillar" and right = "caterpillar"
-  or
-  wrong = "catterpillars" and right = "caterpillars"
-  or
-  wrong = "cattleship" and right = "battleship"
-  or
-  wrong = "causalities" and right = "casualties"
-  or
-  wrong = "ceasar" and right = "caesar"
-  or
-  wrong = "celcius" and right = "celsius"
-  or
-  wrong = "cellpading" and right = "cellpadding"
-  or
-  wrong = "cementary" and right = "cemetery"
-  or
-  wrong = "cemetarey" and right = "cemetery"
-  or
-  wrong = "cemetaries" and right = "cemeteries"
-  or
-  wrong = "cemetary" and right = "cemetery"
-  or
-  wrong = "cencus" and right = "census"
-  or
-  wrong = "censur" and right = "censor"
-  or
-  wrong = "censur" and right = "censure"
-  or
-  wrong = "cententenial" and right = "centennial"
-  or
-  wrong = "centruies" and right = "centuries"
-  or
-  wrong = "centruy" and right = "century"
-  or
-  wrong = "centuties" and right = "centuries"
-  or
-  wrong = "centuty" and right = "century"
-  or
-  wrong = "ceratin" and right = "certain"
-  or
-  wrong = "ceratin" and right = "keratin"
-  or
-  wrong = "cerimonial" and right = "ceremonial"
-  or
-  wrong = "cerimonies" and right = "ceremonies"
-  or
-  wrong = "cerimonious" and right = "ceremonious"
-  or
-  wrong = "cerimony" and right = "ceremony"
-  or
-  wrong = "ceromony" and right = "ceremony"
-  or
-  wrong = "certainity" and right = "certainty"
-  or
-  wrong = "certian" and right = "certain"
-  or
-  wrong = "cervial" and right = "cervical"
-  or
-  wrong = "cervial" and right = "serval"
-  or
-  wrong = "cervial" and right = "servile"
-  or
-  wrong = "chalenging" and right = "challenging"
-  or
-  wrong = "challange" and right = "challenge"
-  or
-  wrong = "challanged" and right = "challenged"
-  or
-  wrong = "challege" and right = "challenge"
-  or
-  wrong = "champange" and right = "champagne"
-  or
-  wrong = "changable" and right = "changeable"
-  or
-  wrong = "charachter" and right = "character"
-  or
-  wrong = "charachters" and right = "characters"
-  or
-  wrong = "charactersistic" and right = "characteristic"
-  or
-  wrong = "charactor" and right = "character"
-  or
-  wrong = "charactors" and right = "characters"
-  or
-  wrong = "charasmatic" and right = "charismatic"
-  or
-  wrong = "charaterized" and right = "characterized"
-  or
-  wrong = "chariman" and right = "chairman"
-  or
-  wrong = "charistics" and right = "characteristics"
-  or
-  wrong = "chasr" and right = "chase"
-  or
-  wrong = "chasr" and right = "chaser"
-  or
-  wrong = "cheif" and right = "chief"
-  or
-  wrong = "cheifs" and right = "chiefs"
-  or
-  wrong = "chemcial" and right = "chemical"
-  or
-  wrong = "chemcially" and right = "chemically"
-  or
-  wrong = "chemestry" and right = "chemistry"
-  or
-  wrong = "chemicaly" and right = "chemically"
-  or
-  wrong = "childbird" and right = "childbirth"
-  or
-  wrong = "childen" and right = "children"
-  or
-  wrong = "choclate" and right = "chocolate"
-  or
-  wrong = "choosen" and right = "chosen"
-  or
-  wrong = "chracter" and right = "character"
-  or
-  wrong = "chuch" and right = "church"
-  or
-  wrong = "churchs" and right = "churches"
-  or
-  wrong = "cincinatti" and right = "cincinnati"
-  or
-  wrong = "cincinnatti" and right = "cincinnati"
-  or
-  wrong = "circulaton" and right = "circulation"
-  or
-  wrong = "circumsicion" and right = "circumcision"
-  or
-  wrong = "circut" and right = "circuit"
-  or
-  wrong = "ciricuit" and right = "circuit"
-  or
-  wrong = "ciriculum" and right = "curriculum"
-  or
-  wrong = "civillian" and right = "civilian"
-  or
-  wrong = "claer" and right = "clear"
-  or
-  wrong = "claerer" and right = "clearer"
-  or
-  wrong = "claerly" and right = "clearly"
-  or
-  wrong = "claimes" and right = "claims"
-  or
-  wrong = "clas" and right = "class"
-  or
-  wrong = "clasic" and right = "classic"
-  or
-  wrong = "clasical" and right = "classical"
-  or
-  wrong = "clasically" and right = "classically"
-  or
-  wrong = "cleareance" and right = "clearance"
-  or
-  wrong = "clera" and right = "clear"
-  or
-  wrong = "clera" and right = "sclera"
-  or
-  wrong = "clincial" and right = "clinical"
-  or
-  wrong = "clinicaly" and right = "clinically"
-  or
-  wrong = "cmo" and right = "com"
-  or
-  wrong = "cmoputer" and right = "computer"
-  or
-  wrong = "coctail" and right = "cocktail"
-  or
-  wrong = "coform" and right = "conform"
-  or
-  wrong = "cognizent" and right = "cognizant"
-  or
-  wrong = "coincedentally" and right = "coincidentally"
-  or
-  wrong = "colaborations" and right = "collaborations"
-  or
-  wrong = "colateral" and right = "collateral"
-  or
-  wrong = "colelctive" and right = "collective"
-  or
-  wrong = "collaberative" and right = "collaborative"
-  or
-  wrong = "collecton" and right = "collection"
-  or
-  wrong = "collegue" and right = "colleague"
-  or
-  wrong = "collegues" and right = "colleagues"
-  or
-  wrong = "collonade" and right = "colonnade"
-  or
-  wrong = "collonies" and right = "colonies"
-  or
-  wrong = "collony" and right = "colony"
-  or
-  wrong = "collosal" and right = "colossal"
-  or
-  wrong = "colonizators" and right = "colonizers"
-  or
-  wrong = "comander" and right = "commandeer"
-  or
-  wrong = "comander" and right = "commander"
-  or
-  wrong = "comando" and right = "commando"
-  or
-  wrong = "comandos" and right = "commandos"
-  or
-  wrong = "comany" and right = "company"
-  or
-  wrong = "comapany" and right = "company"
-  or
-  wrong = "comback" and right = "comeback"
-  or
-  wrong = "combanations" and right = "combinations"
-  or
-  wrong = "combinatins" and right = "combinations"
-  or
-  wrong = "combusion" and right = "combustion"
-  or
-  wrong = "comdemnation" and right = "condemnation"
-  or
-  wrong = "comemmorates" and right = "commemorates"
-  or
-  wrong = "comemoretion" and right = "commemoration"
-  or
-  wrong = "comision" and right = "commission"
-  or
-  wrong = "comisioned" and right = "commissioned"
-  or
-  wrong = "comisioner" and right = "commissioner"
-  or
-  wrong = "comisioning" and right = "commissioning"
-  or
-  wrong = "comisions" and right = "commissions"
-  or
-  wrong = "comission" and right = "commission"
-  or
-  wrong = "comissioned" and right = "commissioned"
-  or
-  wrong = "comissioner" and right = "commissioner"
-  or
-  wrong = "comissioning" and right = "commissioning"
-  or
-  wrong = "comissions" and right = "commissions"
-  or
-  wrong = "comited" and right = "committed"
-  or
-  wrong = "comiting" and right = "committing"
-  or
-  wrong = "comitted" and right = "committed"
-  or
-  wrong = "comittee" and right = "committee"
-  or
-  wrong = "comitting" and right = "committing"
-  or
-  wrong = "commandoes" and right = "commandos"
-  or
-  wrong = "commedic" and right = "comedic"
-  or
-  wrong = "commemerative" and right = "commemorative"
-  or
-  wrong = "commemmorate" and right = "commemorate"
-  or
-  wrong = "commemmorating" and right = "commemorating"
-  or
-  wrong = "commerical" and right = "commercial"
-  or
-  wrong = "commerically" and right = "commercially"
-  or
-  wrong = "commericial" and right = "commercial"
-  or
-  wrong = "commericially" and right = "commercially"
-  or
-  wrong = "commerorative" and right = "commemorative"
-  or
-  wrong = "comming" and right = "coming"
-  or
-  wrong = "comminication" and right = "communication"
-  or
-  wrong = "commision" and right = "commission"
-  or
-  wrong = "commisioned" and right = "commissioned"
-  or
-  wrong = "commisioner" and right = "commissioner"
-  or
-  wrong = "commisioning" and right = "commissioning"
-  or
-  wrong = "commisions" and right = "commissions"
-  or
-  wrong = "commited" and right = "committed"
-  or
-  wrong = "commitee" and right = "committee"
-  or
-  wrong = "commiting" and right = "committing"
-  or
-  wrong = "committe" and right = "committee"
-  or
-  wrong = "committment" and right = "commitment"
-  or
-  wrong = "committments" and right = "commitments"
-  or
-  wrong = "commmemorated" and right = "commemorated"
-  or
-  wrong = "commongly" and right = "commonly"
-  or
-  wrong = "commonweath" and right = "commonwealth"
-  or
-  wrong = "commuications" and right = "communications"
-  or
-  wrong = "commuinications" and right = "communications"
-  or
-  wrong = "communciation" and right = "communication"
-  or
-  wrong = "communiation" and right = "communication"
-  or
-  wrong = "communites" and right = "communities"
-  or
-  wrong = "compability" and right = "compatibility"
-  or
-  wrong = "comparision" and right = "comparison"
-  or
-  wrong = "comparisions" and right = "comparisons"
-  or
-  wrong = "comparitive" and right = "comparative"
-  or
-  wrong = "comparitively" and right = "comparatively"
-  or
-  wrong = "compatabilities" and right = "compatibilities"
-  or
-  wrong = "compatability" and right = "compatibility"
-  or
-  wrong = "compatable" and right = "compatible"
-  or
-  wrong = "compatablities" and right = "compatibilities"
-  or
-  wrong = "compatablity" and right = "compatibility"
-  or
-  wrong = "compatiable" and right = "compatible"
-  or
-  wrong = "compatiblities" and right = "compatibilities"
-  or
-  wrong = "compatiblity" and right = "compatibility"
-  or
-  wrong = "compeitions" and right = "competitions"
-  or
-  wrong = "compensantion" and right = "compensation"
-  or
-  wrong = "competance" and right = "competence"
-  or
-  wrong = "competant" and right = "competent"
-  or
-  wrong = "competative" and right = "competitive"
-  or
-  wrong = "competion" and right = "competition"
-  or
-  wrong = "competion" and right = "completion"
-  or
-  wrong = "competitiion" and right = "competition"
-  or
-  wrong = "competive" and right = "competitive"
-  or
-  wrong = "competiveness" and right = "competitiveness"
-  or
-  wrong = "comphrehensive" and right = "comprehensive"
-  or
-  wrong = "compitent" and right = "competent"
-  or
-  wrong = "completelyl" and right = "completely"
-  or
-  wrong = "completetion" and right = "completion"
-  or
-  wrong = "complier" and right = "compiler"
-  or
-  wrong = "componant" and right = "component"
-  or
-  wrong = "comprable" and right = "comparable"
-  or
-  wrong = "comprimise" and right = "compromise"
-  or
-  wrong = "compulsary" and right = "compulsory"
-  or
-  wrong = "compulsery" and right = "compulsory"
-  or
-  wrong = "computarized" and right = "computerized"
-  or
-  wrong = "concensus" and right = "consensus"
-  or
-  wrong = "concider" and right = "consider"
-  or
-  wrong = "concidered" and right = "considered"
-  or
-  wrong = "concidering" and right = "considering"
-  or
-  wrong = "conciders" and right = "considers"
-  or
-  wrong = "concieted" and right = "conceited"
-  or
-  wrong = "concieved" and right = "conceived"
-  or
-  wrong = "concious" and right = "conscious"
-  or
-  wrong = "conciously" and right = "consciously"
-  or
-  wrong = "conciousness" and right = "consciousness"
-  or
-  wrong = "condamned" and right = "condemned"
-  or
-  wrong = "condemmed" and right = "condemned"
-  or
-  wrong = "condidtion" and right = "condition"
-  or
-  wrong = "condidtions" and right = "conditions"
-  or
-  wrong = "conected" and right = "connected"
-  or
-  wrong = "conection" and right = "connection"
-  or
-  wrong = "conesencus" and right = "consensus"
-  or
-  wrong = "confidental" and right = "confidential"
-  or
-  wrong = "confidentally" and right = "confidentially"
-  or
-  wrong = "confids" and right = "confides"
-  or
-  wrong = "configureable" and right = "configurable"
-  or
-  wrong = "confortable" and right = "comfortable"
-  or
-  wrong = "congradulations" and right = "congratulations"
-  or
-  wrong = "congresional" and right = "congressional"
-  or
-  wrong = "conived" and right = "connived"
-  or
-  wrong = "conjecutre" and right = "conjecture"
-  or
-  wrong = "conjuction" and right = "conjunction"
-  or
-  wrong = "connectinos" and right = "connections"
-  or
-  wrong = "conneticut" and right = "connecticut"
-  or
-  wrong = "conotations" and right = "connotations"
-  or
-  wrong = "conquerd" and right = "conquered"
-  or
-  wrong = "conquerer" and right = "conqueror"
-  or
-  wrong = "conquerers" and right = "conquerors"
-  or
-  wrong = "conqured" and right = "conquered"
-  or
-  wrong = "conscent" and right = "consent"
-  or
-  wrong = "consciouness" and right = "consciousness"
-  or
-  wrong = "consdider" and right = "consider"
-  or
-  wrong = "consdidered" and right = "considered"
-  or
-  wrong = "consdiered" and right = "considered"
-  or
-  wrong = "consectutive" and right = "consecutive"
-  or
-  wrong = "consenquently" and right = "consequently"
-  or
-  wrong = "consentrate" and right = "concentrate"
-  or
-  wrong = "consentrated" and right = "concentrated"
-  or
-  wrong = "consentrates" and right = "concentrates"
-  or
-  wrong = "consept" and right = "concept"
-  or
-  wrong = "consequentually" and right = "consequently"
-  or
-  wrong = "consequeseces" and right = "consequences"
-  or
-  wrong = "consern" and right = "concern"
-  or
-  wrong = "conserned" and right = "concerned"
-  or
-  wrong = "conserning" and right = "concerning"
-  or
-  wrong = "conservitive" and right = "conservative"
-  or
-  wrong = "consiciousness" and right = "consciousness"
-  or
-  wrong = "consicousness" and right = "consciousness"
-  or
-  wrong = "considerd" and right = "considered"
-  or
-  wrong = "consideres" and right = "considered"
-  or
-  wrong = "consious" and right = "conscious"
-  or
-  wrong = "consistant" and right = "consistent"
-  or
-  wrong = "consistantly" and right = "consistently"
-  or
-  wrong = "consituencies" and right = "constituencies"
-  or
-  wrong = "consituency" and right = "constituency"
-  or
-  wrong = "consituted" and right = "constituted"
-  or
-  wrong = "consitution" and right = "constitution"
-  or
-  wrong = "consitutional" and right = "constitutional"
-  or
-  wrong = "consolodate" and right = "consolidate"
-  or
-  wrong = "consolodated" and right = "consolidated"
-  or
-  wrong = "consonent" and right = "consonant"
-  or
-  wrong = "consonents" and right = "consonants"
-  or
-  wrong = "consorcium" and right = "consortium"
-  or
-  wrong = "conspiracys" and right = "conspiracies"
-  or
-  wrong = "conspiriator" and right = "conspirator"
-  or
-  wrong = "consructor" and right = "constructor"
-  or
-  wrong = "constaints" and right = "constraints"
-  or
-  wrong = "constanly" and right = "constantly"
-  or
-  wrong = "constarnation" and right = "consternation"
-  or
-  wrong = "constatn" and right = "constant"
-  or
-  wrong = "constinually" and right = "continually"
-  or
-  wrong = "constituant" and right = "constituent"
-  or
-  wrong = "constituants" and right = "constituents"
-  or
-  wrong = "constituion" and right = "constitution"
-  or
-  wrong = "constituional" and right = "constitutional"
-  or
-  wrong = "consttruction" and right = "construction"
-  or
-  wrong = "constuction" and right = "construction"
-  or
-  wrong = "consulant" and right = "consultant"
-  or
-  wrong = "consumate" and right = "consummate"
-  or
-  wrong = "consumated" and right = "consummated"
-  or
-  wrong = "contaiminate" and right = "contaminate"
-  or
-  wrong = "containes" and right = "contains"
-  or
-  wrong = "contamporaries" and right = "contemporaries"
-  or
-  wrong = "contamporary" and right = "contemporary"
-  or
-  wrong = "contempoary" and right = "contemporary"
-  or
-  wrong = "contemporaneus" and right = "contemporaneous"
-  or
-  wrong = "contempory" and right = "contemporary"
-  or
-  wrong = "contendor" and right = "contender"
-  or
-  wrong = "contian" and right = "contain"
-  or
-  wrong = "contians" and right = "contains"
-  or
-  wrong = "contibute" and right = "contribute"
-  or
-  wrong = "contibuted" and right = "contributed"
-  or
-  wrong = "contibutes" and right = "contributes"
-  or
-  wrong = "contigent" and right = "contingent"
-  or
-  wrong = "contined" and right = "continued"
-  or
-  wrong = "continential" and right = "continental"
-  or
-  wrong = "continous" and right = "continuous"
-  or
-  wrong = "continously" and right = "continuously"
-  or
-  wrong = "continueing" and right = "continuing"
-  or
-  wrong = "contravercial" and right = "controversial"
-  or
-  wrong = "contraversy" and right = "controversy"
-  or
-  wrong = "contributer" and right = "contributor"
-  or
-  wrong = "contributers" and right = "contributors"
-  or
-  wrong = "contritutions" and right = "contributions"
-  or
-  wrong = "controled" and right = "controlled"
-  or
-  wrong = "controling" and right = "controlling"
-  or
-  wrong = "controll" and right = "control"
-  or
-  wrong = "controlls" and right = "controls"
-  or
-  wrong = "controvercial" and right = "controversial"
-  or
-  wrong = "controvercy" and right = "controversy"
-  or
-  wrong = "controveries" and right = "controversies"
-  or
-  wrong = "controversal" and right = "controversial"
-  or
-  wrong = "controversey" and right = "controversy"
-  or
-  wrong = "controvertial" and right = "controversial"
-  or
-  wrong = "controvery" and right = "controversy"
-  or
-  wrong = "contruction" and right = "construction"
-  or
-  wrong = "contructor" and right = "constructor"
-  or
-  wrong = "contstruction" and right = "construction"
-  or
-  wrong = "conveinent" and right = "convenient"
-  or
-  wrong = "convenant" and right = "covenant"
-  or
-  wrong = "convential" and right = "conventional"
-  or
-  wrong = "convertables" and right = "convertibles"
-  or
-  wrong = "convertion" and right = "conversion"
-  or
-  wrong = "conviced" and right = "convinced"
-  or
-  wrong = "convienient" and right = "convenient"
-  or
-  wrong = "coordiantion" and right = "coordination"
-  or
-  wrong = "coorperation" and right = "cooperation"
-  or
-  wrong = "coorperation" and right = "corporation"
-  or
-  wrong = "coorperations" and right = "corporations"
-  or
-  wrong = "copmetitors" and right = "competitors"
-  or
-  wrong = "coputer" and right = "computer"
-  or
-  wrong = "copywrite" and right = "copyright"
-  or
-  wrong = "coridal" and right = "cordial"
-  or
-  wrong = "cornmitted" and right = "committed"
-  or
-  wrong = "corosion" and right = "corrosion"
-  or
-  wrong = "corparate" and right = "corporate"
-  or
-  wrong = "corperations" and right = "corporations"
-  or
-  wrong = "correcters" and right = "correctors"
-  or
-  wrong = "correponding" and right = "corresponding"
-  or
-  wrong = "correposding" and right = "corresponding"
-  or
-  wrong = "correspondant" and right = "correspondent"
-  or
-  wrong = "correspondants" and right = "correspondents"
-  or
-  wrong = "corridoors" and right = "corridors"
-  or
-  wrong = "corrispond" and right = "correspond"
-  or
-  wrong = "corrispondant" and right = "correspondent"
-  or
-  wrong = "corrispondants" and right = "correspondents"
-  or
-  wrong = "corrisponded" and right = "corresponded"
-  or
-  wrong = "corrisponding" and right = "corresponding"
-  or
-  wrong = "corrisponds" and right = "corresponds"
-  or
-  wrong = "costitution" and right = "constitution"
-  or
-  wrong = "coucil" and right = "council"
-  or
-  wrong = "coudl" and right = "cloud"
-  or
-  wrong = "coudl" and right = "could"
-  or
-  wrong = "councellor" and right = "councillor"
-  or
-  wrong = "councellor" and right = "councilor"
-  or
-  wrong = "councellor" and right = "counselor"
-  or
-  wrong = "councellors" and right = "councillors"
-  or
-  wrong = "councellors" and right = "councilors"
-  or
-  wrong = "councellors" and right = "counselors"
-  or
-  wrong = "counries" and right = "countries"
-  or
-  wrong = "countains" and right = "contains"
-  or
-  wrong = "countires" and right = "countries"
-  or
-  wrong = "coururier" and right = "courier"
-  or
-  wrong = "coururier" and right = "couturier"
-  or
-  wrong = "coverted" and right = "converted"
-  or
-  wrong = "coverted" and right = "covered"
-  or
-  wrong = "coverted" and right = "coveted"
-  or
-  wrong = "cpoy" and right = "copy"
-  or
-  wrong = "cpoy" and right = "coy"
-  or
-  wrong = "creaeted" and right = "created"
-  or
-  wrong = "creedence" and right = "credence"
-  or
-  wrong = "critereon" and right = "criterion"
-  or
-  wrong = "criterias" and right = "criteria"
-  or
-  wrong = "criticists" and right = "critics"
-  or
-  wrong = "critising" and right = "criticising"
-  or
-  wrong = "critising" and right = "criticizing"
-  or
-  wrong = "critisising" and right = "criticising"
-  or
-  wrong = "critisism" and right = "criticism"
-  or
-  wrong = "critisisms" and right = "criticisms"
-  or
-  wrong = "critisize" and right = "criticise"
-  or
-  wrong = "critisize" and right = "criticize"
-  or
-  wrong = "critisized" and right = "criticised"
-  or
-  wrong = "critisized" and right = "criticized"
-  or
-  wrong = "critisizes" and right = "criticises"
-  or
-  wrong = "critisizes" and right = "criticizes"
-  or
-  wrong = "critisizing" and right = "criticising"
-  or
-  wrong = "critisizing" and right = "criticizing"
-  or
-  wrong = "critized" and right = "criticized"
-  or
-  wrong = "critizing" and right = "criticizing"
-  or
-  wrong = "crockodiles" and right = "crocodiles"
-  or
-  wrong = "crowm" and right = "crown"
-  or
-  wrong = "crtical" and right = "critical"
-  or
-  wrong = "crticised" and right = "criticised"
-  or
-  wrong = "crucifiction" and right = "crucifixion"
-  or
-  wrong = "crusies" and right = "cruises"
-  or
-  wrong = "crutial" and right = "crucial"
-  or
-  wrong = "crystalisation" and right = "crystallisation"
-  or
-  wrong = "culiminating" and right = "culminating"
-  or
-  wrong = "cumulatative" and right = "cumulative"
-  or
-  wrong = "curch" and right = "church"
-  or
-  wrong = "curcuit" and right = "circuit"
-  or
-  wrong = "currenly" and right = "currently"
-  or
-  wrong = "curriculem" and right = "curriculum"
-  or
-  wrong = "cxan" and right = "cyan"
-  or
-  wrong = "cyclinder" and right = "cylinder"
-  or
-  wrong = "dacquiri" and right = "daiquiri"
-  or
-  wrong = "daed" and right = "dead"
-  or
-  wrong = "dael" and right = "dahl"
-  or
-  wrong = "dael" and right = "deal"
-  or
-  wrong = "dael" and right = "dial"
-  or
-  wrong = "dalmation" and right = "dalmatian"
-  or
-  wrong = "damenor" and right = "demeanor"
-  or
-  wrong = "dammage" and right = "damage"
-  or
-  wrong = "dardenelles" and right = "dardanelles"
-  or
-  wrong = "daugher" and right = "daughter"
-  or
-  wrong = "deafult" and right = "default"
-  or
-  wrong = "debateable" and right = "debatable"
-  or
-  wrong = "decendant" and right = "descendant"
-  or
-  wrong = "decendants" and right = "descendants"
-  or
-  wrong = "decendent" and right = "descendant"
-  or
-  wrong = "decendents" and right = "descendants"
-  or
-  wrong = "decideable" and right = "decidable"
-  or
-  wrong = "decidely" and right = "decidedly"
-  or
-  wrong = "decieved" and right = "deceived"
-  or
-  wrong = "decison" and right = "decision"
-  or
-  wrong = "decomissioned" and right = "decommissioned"
-  or
-  wrong = "decomposit" and right = "decompose"
-  or
-  wrong = "decomposited" and right = "decomposed"
-  or
-  wrong = "decompositing" and right = "decomposing"
-  or
-  wrong = "decomposits" and right = "decomposes"
-  or
-  wrong = "decress" and right = "decrees"
-  or
-  wrong = "decribe" and right = "describe"
-  or
-  wrong = "decribed" and right = "described"
-  or
-  wrong = "decribes" and right = "describes"
-  or
-  wrong = "decribing" and right = "describing"
-  or
-  wrong = "dectect" and right = "detect"
-  or
-  wrong = "defendent" and right = "defendant"
-  or
-  wrong = "defendents" and right = "defendants"
-  or
-  wrong = "deffensively" and right = "defensively"
-  or
-  wrong = "deffine" and right = "define"
-  or
-  wrong = "deffined" and right = "defined"
-  or
-  wrong = "definance" and right = "defiance"
-  or
-  wrong = "definate" and right = "definite"
-  or
-  wrong = "definately" and right = "definitely"
-  or
-  wrong = "definatly" and right = "definitely"
-  or
-  wrong = "definetly" and right = "definitely"
-  or
-  wrong = "definining" and right = "defining"
-  or
-  wrong = "definit" and right = "definite"
-  or
-  wrong = "definitly" and right = "definitely"
-  or
-  wrong = "definiton" and right = "definition"
-  or
-  wrong = "defintion" and right = "definition"
-  or
-  wrong = "defualt" and right = "default"
-  or
-  wrong = "defult" and right = "default"
-  or
-  wrong = "degrate" and right = "degrade"
-  or
-  wrong = "delagates" and right = "delegates"
-  or
-  wrong = "delapidated" and right = "dilapidated"
-  or
-  wrong = "delerious" and right = "delirious"
-  or
-  wrong = "delevopment" and right = "development"
-  or
-  wrong = "deliberatly" and right = "deliberately"
-  or
-  wrong = "delusionally" and right = "delusively"
-  or
-  wrong = "demenor" and right = "demeanor"
-  or
-  wrong = "demographical" and right = "demographic"
-  or
-  wrong = "demolision" and right = "demolition"
-  or
-  wrong = "demorcracy" and right = "democracy"
-  or
-  wrong = "demostration" and right = "demonstration"
-  or
-  wrong = "denegrating" and right = "denigrating"
-  or
-  wrong = "densly" and right = "densely"
-  or
-  wrong = "deparment" and right = "department"
-  or
-  wrong = "deparmental" and right = "departmental"
-  or
-  wrong = "deparments" and right = "departments"
-  or
-  wrong = "dependance" and right = "dependence"
-  or
-  wrong = "dependancy" and right = "dependency"
-  or
-  wrong = "deram" and right = "dram"
-  or
-  wrong = "deram" and right = "dream"
-  or
-  wrong = "deriviated" and right = "derived"
-  or
-  wrong = "derivitive" and right = "derivative"
-  or
-  wrong = "derogitory" and right = "derogatory"
-  or
-  wrong = "descendands" and right = "descendants"
-  or
-  wrong = "descibed" and right = "described"
-  or
-  wrong = "desciptors" and right = "descriptors"
-  or
-  wrong = "descision" and right = "decision"
-  or
-  wrong = "descisions" and right = "decisions"
-  or
-  wrong = "descriibes" and right = "describes"
-  or
-  wrong = "descripters" and right = "descriptors"
-  or
-  wrong = "descripton" and right = "description"
-  or
-  wrong = "desctruction" and right = "destruction"
-  or
-  wrong = "descuss" and right = "discuss"
-  or
-  wrong = "desgined" and right = "designed"
-  or
-  wrong = "deside" and right = "decide"
-  or
-  wrong = "desigining" and right = "designing"
-  or
-  wrong = "desinations" and right = "destinations"
-  or
-  wrong = "desintegrated" and right = "disintegrated"
-  or
-  wrong = "desintegration" and right = "disintegration"
-  or
-  wrong = "desireable" and right = "desirable"
-  or
-  wrong = "desitned" and right = "destined"
-  or
-  wrong = "desktiop" and right = "desktop"
-  or
-  wrong = "desorder" and right = "disorder"
-  or
-  wrong = "desoriented" and right = "disoriented"
-  or
-  wrong = "desparate" and right = "desperate"
-  or
-  wrong = "desparate" and right = "disparate"
-  or
-  wrong = "despict" and right = "depict"
-  or
-  wrong = "despiration" and right = "desperation"
-  or
-  wrong = "dessicated" and right = "desiccated"
-  or
-  wrong = "dessigned" and right = "designed"
-  or
-  wrong = "destablized" and right = "destabilized"
-  or
-  wrong = "destory" and right = "destroy"
-  or
-  wrong = "desugered" and right = "desugared"
-  or
-  wrong = "detailled" and right = "detailed"
-  or
-  wrong = "detatched" and right = "detached"
-  or
-  wrong = "deteoriated" and right = "deteriorated"
-  or
-  wrong = "deteriate" and right = "deteriorate"
-  or
-  wrong = "deterioriating" and right = "deteriorating"
-  or
-  wrong = "determinining" and right = "determining"
-  or
-  wrong = "detremental" and right = "detrimental"
-  or
-  wrong = "devasted" and right = "devastated"
-  or
-  wrong = "develope" and right = "develop"
-  or
-  wrong = "developement" and right = "development"
-  or
-  wrong = "developped" and right = "developed"
-  or
-  wrong = "develpment" and right = "development"
-  or
-  wrong = "devels" and right = "delves"
-  or
-  wrong = "devestated" and right = "devastated"
-  or
-  wrong = "devestating" and right = "devastating"
-  or
-  wrong = "devide" and right = "divide"
-  or
-  wrong = "devided" and right = "divided"
-  or
-  wrong = "devistating" and right = "devastating"
-  or
-  wrong = "devolopement" and right = "development"
-  or
-  wrong = "diablical" and right = "diabolical"
-  or
-  wrong = "diamons" and right = "diamonds"
-  or
-  wrong = "diaster" and right = "disaster"
-  or
-  wrong = "dichtomy" and right = "dichotomy"
-  or
-  wrong = "diconnects" and right = "disconnects"
-  or
-  wrong = "dicover" and right = "discover"
-  or
-  wrong = "dicovered" and right = "discovered"
-  or
-  wrong = "dicovering" and right = "discovering"
-  or
-  wrong = "dicovers" and right = "discovers"
-  or
-  wrong = "dicovery" and right = "discovery"
-  or
-  wrong = "dictionarys" and right = "dictionaries"
-  or
-  wrong = "dicussed" and right = "discussed"
-  or
-  wrong = "diea" and right = "die"
-  or
-  wrong = "diea" and right = "idea"
-  or
-  wrong = "dieing" and right = "dyeing"
-  or
-  wrong = "dieing" and right = "dying"
-  or
-  wrong = "dieties" and right = "deities"
-  or
-  wrong = "diety" and right = "deity"
-  or
-  wrong = "diferent" and right = "different"
-  or
-  wrong = "diferrent" and right = "different"
-  or
-  wrong = "differentiatiations" and right = "differentiations"
-  or
-  wrong = "differnt" and right = "different"
-  or
-  wrong = "difficulity" and right = "difficulty"
-  or
-  wrong = "diffrent" and right = "different"
-  or
-  wrong = "dificulties" and right = "difficulties"
-  or
-  wrong = "dificulty" and right = "difficulty"
-  or
-  wrong = "dimenions" and right = "dimensions"
-  or
-  wrong = "dimention" and right = "dimension"
-  or
-  wrong = "dimentional" and right = "dimensional"
-  or
-  wrong = "dimentions" and right = "dimensions"
-  or
-  wrong = "dimesnional" and right = "dimensional"
-  or
-  wrong = "diminuitive" and right = "diminutive"
-  or
-  wrong = "dimunitive" and right = "diminutive"
-  or
-  wrong = "diosese" and right = "diocese"
-  or
-  wrong = "diphtong" and right = "diphthong"
-  or
-  wrong = "diphtongs" and right = "diphthongs"
-  or
-  wrong = "diplomancy" and right = "diplomacy"
-  or
-  wrong = "dipthong" and right = "diphthong"
-  or
-  wrong = "dipthongs" and right = "diphthongs"
-  or
-  wrong = "directoty" and right = "directory"
-  or
-  wrong = "dirived" and right = "derived"
-  or
-  wrong = "disagreeed" and right = "disagreed"
-  or
-  wrong = "disapeared" and right = "disappeared"
-  or
-  wrong = "disapointing" and right = "disappointing"
-  or
-  wrong = "disappearred" and right = "disappeared"
-  or
-  wrong = "disaproval" and right = "disapproval"
-  or
-  wrong = "disasterous" and right = "disastrous"
-  or
-  wrong = "disatisfaction" and right = "dissatisfaction"
-  or
-  wrong = "disatisfied" and right = "dissatisfied"
-  or
-  wrong = "disatrous" and right = "disastrous"
-  or
-  wrong = "discontentment" and right = "discontent"
-  or
-  wrong = "discribe" and right = "describe"
-  or
-  wrong = "discribed" and right = "described"
-  or
-  wrong = "discribes" and right = "describes"
-  or
-  wrong = "discribing" and right = "describing"
-  or
-  wrong = "disctinction" and right = "distinction"
-  or
-  wrong = "disctinctive" and right = "distinctive"
-  or
-  wrong = "disemination" and right = "dissemination"
-  or
-  wrong = "disenchanged" and right = "disenchanted"
-  or
-  wrong = "disiplined" and right = "disciplined"
-  or
-  wrong = "disobediance" and right = "disobedience"
-  or
-  wrong = "disobediant" and right = "disobedient"
-  or
-  wrong = "disolved" and right = "dissolved"
-  or
-  wrong = "disover" and right = "discover"
-  or
-  wrong = "dispair" and right = "despair"
-  or
-  wrong = "disparingly" and right = "disparagingly"
-  or
-  wrong = "dispence" and right = "dispense"
-  or
-  wrong = "dispenced" and right = "dispensed"
-  or
-  wrong = "dispencing" and right = "dispensing"
-  or
-  wrong = "dispicable" and right = "despicable"
-  or
-  wrong = "dispite" and right = "despite"
-  or
-  wrong = "dispostion" and right = "disposition"
-  or
-  wrong = "disproportiate" and right = "disproportionate"
-  or
-  wrong = "disputandem" and right = "disputandum"
-  or
-  wrong = "disricts" and right = "districts"
-  or
-  wrong = "dissagreement" and right = "disagreement"
-  or
-  wrong = "dissapear" and right = "disappear"
-  or
-  wrong = "dissapearance" and right = "disappearance"
-  or
-  wrong = "dissapeared" and right = "disappeared"
-  or
-  wrong = "dissapearing" and right = "disappearing"
-  or
-  wrong = "dissapears" and right = "disappears"
-  or
-  wrong = "dissappear" and right = "disappear"
-  or
-  wrong = "dissappears" and right = "disappears"
-  or
-  wrong = "dissappointed" and right = "disappointed"
-  or
-  wrong = "dissarray" and right = "disarray"
-  or
-  wrong = "dissobediance" and right = "disobedience"
-  or
-  wrong = "dissobediant" and right = "disobedient"
-  or
-  wrong = "dissobedience" and right = "disobedience"
-  or
-  wrong = "dissobedient" and right = "disobedient"
-  or
-  wrong = "distiction" and right = "distinction"
-  or
-  wrong = "distingish" and right = "distinguish"
-  or
-  wrong = "distingished" and right = "distinguished"
-  or
-  wrong = "distingishes" and right = "distinguishes"
-  or
-  wrong = "distingishing" and right = "distinguishing"
-  or
-  wrong = "distingquished" and right = "distinguished"
-  or
-  wrong = "distrubution" and right = "distribution"
-  or
-  wrong = "distruction" and right = "destruction"
-  or
-  wrong = "distructive" and right = "destructive"
-  or
-  wrong = "ditributed" and right = "distributed"
-  or
-  wrong = "diversed" and right = "diverged"
-  or
-  wrong = "diversed" and right = "diverse"
-  or
-  wrong = "divice" and right = "device"
-  or
-  wrong = "divinition" and right = "divination"
-  or
-  wrong = "divison" and right = "division"
-  or
-  wrong = "divisons" and right = "divisions"
-  or
-  wrong = "doccument" and right = "document"
-  or
-  wrong = "doccumented" and right = "documented"
-  or
-  wrong = "doccuments" and right = "documents"
-  or
-  wrong = "docrines" and right = "doctrines"
-  or
-  wrong = "doctines" and right = "doctrines"
-  or
-  wrong = "documenatry" and right = "documentary"
-  or
-  wrong = "doens" and right = "does"
-  or
-  wrong = "doign" and right = "doing"
-  or
-  wrong = "dominaton" and right = "domination"
-  or
-  wrong = "dominent" and right = "dominant"
-  or
-  wrong = "dominiant" and right = "dominant"
-  or
-  wrong = "donig" and right = "doing"
-  or
-  wrong = "doub" and right = "daub"
-  or
-  wrong = "doub" and right = "doubt"
-  or
-  wrong = "doulbe" and right = "double"
-  or
-  wrong = "dowloads" and right = "downloads"
-  or
-  wrong = "dramtic" and right = "dramatic"
-  or
-  wrong = "draughtman" and right = "draughtsman"
-  or
-  wrong = "dravadian" and right = "dravidian"
-  or
-  wrong = "dreasm" and right = "dreams"
-  or
-  wrong = "driectly" and right = "directly"
-  or
-  wrong = "drnik" and right = "drink"
-  or
-  wrong = "druming" and right = "drumming"
-  or
-  wrong = "drummless" and right = "drumless"
-  or
-  wrong = "dum" and right = "dumb"
-  or
-  wrong = "dupicate" and right = "duplicate"
-  or
-  wrong = "durig" and right = "during"
-  or
-  wrong = "durring" and right = "during"
-  or
-  wrong = "duting" and right = "during"
-  or
-  wrong = "dyas" and right = "dryas"
-  or
-  wrong = "eahc" and right = "each"
-  or
-  wrong = "ealier" and right = "earlier"
-  or
-  wrong = "earlies" and right = "earliest"
-  or
-  wrong = "earnt" and right = "earned"
-  or
-  wrong = "ecclectic" and right = "eclectic"
-  or
-  wrong = "eceonomy" and right = "economy"
-  or
-  wrong = "ecidious" and right = "deciduous"
-  or
-  wrong = "eclispe" and right = "eclipse"
-  or
-  wrong = "ecomonic" and right = "economic"
-  or
-  wrong = "ect" and right = "etc"
-  or
-  wrong = "editting" and right = "editing"
-  or
-  wrong = "eearly" and right = "early"
-  or
-  wrong = "efel" and right = "evil"
-  or
-  wrong = "effeciency" and right = "efficiency"
-  or
-  wrong = "effecient" and right = "efficient"
-  or
-  wrong = "effeciently" and right = "efficiently"
-  or
-  wrong = "efficency" and right = "efficiency"
-  or
-  wrong = "efficent" and right = "efficient"
-  or
-  wrong = "efficently" and right = "efficiently"
-  or
-  wrong = "efford" and right = "afford"
-  or
-  wrong = "efford" and right = "effort"
-  or
-  wrong = "effords" and right = "affords"
-  or
-  wrong = "effords" and right = "efforts"
-  or
-  wrong = "effulence" and right = "effluence"
-  or
-  wrong = "eigth" and right = "eight"
-  or
-  wrong = "eigth" and right = "eighth"
-  or
-  wrong = "eiter" and right = "either"
-  or
-  wrong = "elction" and right = "election"
-  or
-  wrong = "electic" and right = "eclectic"
-  or
-  wrong = "electic" and right = "electric"
-  or
-  wrong = "electon" and right = "election"
-  or
-  wrong = "electon" and right = "electron"
-  or
-  wrong = "electrial" and right = "electrical"
-  or
-  wrong = "electricly" and right = "electrically"
-  or
-  wrong = "electricty" and right = "electricity"
-  or
-  wrong = "elementay" and right = "elementary"
-  or
-  wrong = "eleminated" and right = "eliminated"
-  or
-  wrong = "eleminating" and right = "eliminating"
-  or
-  wrong = "eles" and right = "eels"
-  or
-  wrong = "eletricity" and right = "electricity"
-  or
-  wrong = "elicided" and right = "elicited"
-  or
-  wrong = "eligable" and right = "eligible"
-  or
-  wrong = "elimentary" and right = "elementary"
-  or
-  wrong = "ellected" and right = "elected"
-  or
-  wrong = "elphant" and right = "elephant"
-  or
-  wrong = "embarass" and right = "embarrass"
-  or
-  wrong = "embarassed" and right = "embarrassed"
-  or
-  wrong = "embarassing" and right = "embarrassing"
-  or
-  wrong = "embarassment" and right = "embarrassment"
-  or
-  wrong = "embargos" and right = "embargoes"
-  or
-  wrong = "embarras" and right = "embarrass"
-  or
-  wrong = "embarrased" and right = "embarrassed"
-  or
-  wrong = "embarrasing" and right = "embarrassing"
-  or
-  wrong = "embarrasment" and right = "embarrassment"
-  or
-  wrong = "embezelled" and right = "embezzled"
-  or
-  wrong = "emblamatic" and right = "emblematic"
-  or
-  wrong = "eminate" and right = "emanate"
-  or
-  wrong = "eminated" and right = "emanated"
-  or
-  wrong = "emision" and right = "emission"
-  or
-  wrong = "emited" and right = "emitted"
-  or
-  wrong = "emiting" and right = "emitting"
-  or
-  wrong = "emition" and right = "emission"
-  or
-  wrong = "emition" and right = "emotion"
-  or
-  wrong = "emmediately" and right = "immediately"
-  or
-  wrong = "emmigrated" and right = "emigrated"
-  or
-  wrong = "emmigrated" and right = "immigrated"
-  or
-  wrong = "emminent" and right = "eminent"
-  or
-  wrong = "emminent" and right = "imminent"
-  or
-  wrong = "emminently" and right = "eminently"
-  or
-  wrong = "emmisaries" and right = "emissaries"
-  or
-  wrong = "emmisarries" and right = "emissaries"
-  or
-  wrong = "emmisarry" and right = "emissary"
-  or
-  wrong = "emmisary" and right = "emissary"
-  or
-  wrong = "emmision" and right = "emission"
-  or
-  wrong = "emmisions" and right = "emissions"
-  or
-  wrong = "emmited" and right = "emitted"
-  or
-  wrong = "emmiting" and right = "emitting"
-  or
-  wrong = "emmitted" and right = "emitted"
-  or
-  wrong = "emmitting" and right = "emitting"
-  or
-  wrong = "emnity" and right = "enmity"
-  or
-  wrong = "emperical" and right = "empirical"
-  or
-  wrong = "emphaised" and right = "emphasised"
-  or
-  wrong = "emphsis" and right = "emphasis"
-  or
-  wrong = "emphysyma" and right = "emphysema"
-  or
-  wrong = "empirial" and right = "empirical"
-  or
-  wrong = "empirial" and right = "imperial"
-  or
-  wrong = "emporer" and right = "emperor"
-  or
-  wrong = "emprisoned" and right = "imprisoned"
-  or
-  wrong = "enameld" and right = "enameled"
-  or
-  wrong = "enchancement" and right = "enhancement"
-  or
-  wrong = "encouraing" and right = "encouraging"
-  or
-  wrong = "encryptiion" and right = "encryption"
-  or
-  wrong = "encylopedia" and right = "encyclopedia"
-  or
-  wrong = "endevors" and right = "endeavors"
-  or
-  wrong = "endevour" and right = "endeavour"
-  or
-  wrong = "endig" and right = "ending"
-  or
-  wrong = "endolithes" and right = "endoliths"
-  or
-  wrong = "enduce" and right = "induce"
-  or
-  wrong = "ened" and right = "need"
-  or
-  wrong = "enforceing" and right = "enforcing"
-  or
-  wrong = "engagment" and right = "engagement"
-  or
-  wrong = "engeneer" and right = "engineer"
-  or
-  wrong = "engeneering" and right = "engineering"
-  or
-  wrong = "engieneer" and right = "engineer"
-  or
-  wrong = "engieneers" and right = "engineers"
-  or
-  wrong = "enlargment" and right = "enlargement"
-  or
-  wrong = "enlargments" and right = "enlargements"
-  or
-  wrong = "enlish" and right = "english"
-  or
-  wrong = "enlish" and right = "enlist"
-  or
-  wrong = "enourmous" and right = "enormous"
-  or
-  wrong = "enourmously" and right = "enormously"
-  or
-  wrong = "ensconsed" and right = "ensconced"
-  or
-  wrong = "entaglements" and right = "entanglements"
-  or
-  wrong = "enteratinment" and right = "entertainment"
-  or
-  wrong = "enthusiatic" and right = "enthusiastic"
-  or
-  wrong = "entitity" and right = "entity"
-  or
-  wrong = "entitlied" and right = "entitled"
-  or
-  wrong = "entrepeneur" and right = "entrepreneur"
-  or
-  wrong = "entrepeneurs" and right = "entrepreneurs"
-  or
-  wrong = "enviorment" and right = "environment"
-  or
-  wrong = "enviormental" and right = "environmental"
-  or
-  wrong = "enviormentally" and right = "environmentally"
-  or
-  wrong = "enviorments" and right = "environments"
-  or
-  wrong = "enviornment" and right = "environment"
-  or
-  wrong = "enviornmental" and right = "environmental"
-  or
-  wrong = "enviornmentalist" and right = "environmentalist"
-  or
-  wrong = "enviornmentally" and right = "environmentally"
-  or
-  wrong = "enviornments" and right = "environments"
-  or
-  wrong = "enviroment" and right = "environment"
-  or
-  wrong = "enviromental" and right = "environmental"
-  or
-  wrong = "enviromentalist" and right = "environmentalist"
-  or
-  wrong = "enviromentally" and right = "environmentally"
-  or
-  wrong = "enviroments" and right = "environments"
-  or
-  wrong = "environemnt" and right = "environment"
-  or
-  wrong = "envolutionary" and right = "evolutionary"
-  or
-  wrong = "envrionments" and right = "environments"
-  or
-  wrong = "enxt" and right = "next"
-  or
-  wrong = "epidsodes" and right = "episodes"
-  or
-  wrong = "epsiode" and right = "episode"
-  or
-  wrong = "equialent" and right = "equivalent"
-  or
-  wrong = "equilibium" and right = "equilibrium"
-  or
-  wrong = "equilibrum" and right = "equilibrium"
-  or
-  wrong = "equiped" and right = "equipped"
-  or
-  wrong = "equippment" and right = "equipment"
-  or
-  wrong = "equitorial" and right = "equatorial"
-  or
-  wrong = "equivelant" and right = "equivalent"
-  or
-  wrong = "equivelent" and right = "equivalent"
-  or
-  wrong = "equivilant" and right = "equivalent"
-  or
-  wrong = "equivilent" and right = "equivalent"
-  or
-  wrong = "equivlalent" and right = "equivalent"
-  or
-  wrong = "erally" and right = "orally"
-  or
-  wrong = "erally" and right = "really"
-  or
-  wrong = "eratic" and right = "erratic"
-  or
-  wrong = "eratically" and right = "erratically"
-  or
-  wrong = "eraticly" and right = "erratically"
-  or
-  wrong = "erested" and right = "arrested"
-  or
-  wrong = "erested" and right = "erected"
-  or
-  wrong = "errupted" and right = "erupted"
-  or
-  wrong = "esential" and right = "essential"
-  or
-  wrong = "esitmated" and right = "estimated"
-  or
-  wrong = "esle" and right = "else"
-  or
-  wrong = "especialy" and right = "especially"
-  or
-  wrong = "essencial" and right = "essential"
-  or
-  wrong = "essense" and right = "essence"
-  or
-  wrong = "essentail" and right = "essential"
-  or
-  wrong = "essentialy" and right = "essentially"
-  or
-  wrong = "essentual" and right = "essential"
-  or
-  wrong = "essesital" and right = "essential"
-  or
-  wrong = "estabishes" and right = "establishes"
-  or
-  wrong = "establising" and right = "establishing"
-  or
-  wrong = "ethnocentricm" and right = "ethnocentrism"
-  or
-  wrong = "ethose" and right = "ethos"
-  or
-  wrong = "ethose" and right = "those"
-  or
-  wrong = "europian" and right = "european"
-  or
-  wrong = "europians" and right = "europeans"
-  or
-  wrong = "eurpean" and right = "european"
-  or
-  wrong = "eurpoean" and right = "european"
-  or
-  wrong = "evenhtually" and right = "eventually"
-  or
-  wrong = "eventally" and right = "eventually"
-  or
-  wrong = "eventially" and right = "eventually"
-  or
-  wrong = "eventualy" and right = "eventually"
-  or
-  wrong = "everthing" and right = "everything"
-  or
-  wrong = "everyting" and right = "everything"
-  or
-  wrong = "eveyr" and right = "every"
-  or
-  wrong = "evidentally" and right = "evidently"
-  or
-  wrong = "exagerate" and right = "exaggerate"
-  or
-  wrong = "exagerated" and right = "exaggerated"
-  or
-  wrong = "exagerates" and right = "exaggerates"
-  or
-  wrong = "exagerating" and right = "exaggerating"
-  or
-  wrong = "exagerrate" and right = "exaggerate"
-  or
-  wrong = "exagerrated" and right = "exaggerated"
-  or
-  wrong = "exagerrates" and right = "exaggerates"
-  or
-  wrong = "exagerrating" and right = "exaggerating"
-  or
-  wrong = "examinated" and right = "examined"
-  or
-  wrong = "exampt" and right = "exempt"
-  or
-  wrong = "exapansion" and right = "expansion"
-  or
-  wrong = "excact" and right = "exact"
-  or
-  wrong = "excange" and right = "exchange"
-  or
-  wrong = "excecute" and right = "execute"
-  or
-  wrong = "excecuted" and right = "executed"
-  or
-  wrong = "excecutes" and right = "executes"
-  or
-  wrong = "excecuting" and right = "executing"
-  or
-  wrong = "excecution" and right = "execution"
-  or
-  wrong = "excedded" and right = "exceeded"
-  or
-  wrong = "excelent" and right = "excellent"
-  or
-  wrong = "excell" and right = "excel"
-  or
-  wrong = "excellance" and right = "excellence"
-  or
-  wrong = "excellant" and right = "excellent"
-  or
-  wrong = "excells" and right = "excels"
-  or
-  wrong = "excercise" and right = "exercise"
-  or
-  wrong = "exchanching" and right = "exchanging"
-  or
-  wrong = "excisted" and right = "existed"
-  or
-  wrong = "exculsivly" and right = "exclusively"
-  or
-  wrong = "execising" and right = "exercising"
-  or
-  wrong = "exection" and right = "execution"
-  or
-  wrong = "exectued" and right = "executed"
-  or
-  wrong = "exeedingly" and right = "exceedingly"
-  or
-  wrong = "exelent" and right = "excellent"
-  or
-  wrong = "exellent" and right = "excellent"
-  or
-  wrong = "exemple" and right = "example"
-  or
-  wrong = "exept" and right = "except"
-  or
-  wrong = "exeptional" and right = "exceptional"
-  or
-  wrong = "exerbate" and right = "exacerbate"
-  or
-  wrong = "exerbated" and right = "exacerbated"
-  or
-  wrong = "exerciese" and right = "exercises"
-  or
-  wrong = "exerpt" and right = "excerpt"
-  or
-  wrong = "exerpts" and right = "excerpts"
-  or
-  wrong = "exersize" and right = "exercise"
-  or
-  wrong = "exerternal" and right = "external"
-  or
-  wrong = "exhalted" and right = "exalted"
-  or
-  wrong = "exhibtion" and right = "exhibition"
-  or
-  wrong = "exibition" and right = "exhibition"
-  or
-  wrong = "exibitions" and right = "exhibitions"
-  or
-  wrong = "exicting" and right = "exciting"
-  or
-  wrong = "exinct" and right = "extinct"
-  or
-  wrong = "existance" and right = "existence"
-  or
-  wrong = "existant" and right = "existent"
-  or
-  wrong = "existince" and right = "existence"
-  or
-  wrong = "exliled" and right = "exiled"
-  or
-  wrong = "exludes" and right = "excludes"
-  or
-  wrong = "exmaple" and right = "example"
-  or
-  wrong = "exonorate" and right = "exonerate"
-  or
-  wrong = "exoskelaton" and right = "exoskeleton"
-  or
-  wrong = "expalin" and right = "explain"
-  or
-  wrong = "expatriot" and right = "expatriate"
-  or
-  wrong = "expeced" and right = "expected"
-  or
-  wrong = "expecially" and right = "especially"
-  or
-  wrong = "expeditonary" and right = "expeditionary"
-  or
-  wrong = "expeiments" and right = "experiments"
-  or
-  wrong = "expell" and right = "expel"
-  or
-  wrong = "expells" and right = "expels"
-  or
-  wrong = "experiance" and right = "experience"
-  or
-  wrong = "experianced" and right = "experienced"
-  or
-  wrong = "expession" and right = "expression"
-  or
-  wrong = "expessions" and right = "expressions"
-  or
-  wrong = "expiditions" and right = "expeditions"
-  or
-  wrong = "expierence" and right = "experience"
-  or
-  wrong = "explaination" and right = "explanation"
-  or
-  wrong = "explaning" and right = "explaining"
-  or
-  wrong = "explictly" and right = "explicitly"
-  or
-  wrong = "exploititive" and right = "exploitative"
-  or
-  wrong = "explotation" and right = "exploitation"
-  or
-  wrong = "expropiated" and right = "expropriated"
-  or
-  wrong = "expropiation" and right = "expropriation"
-  or
-  wrong = "exressed" and right = "expressed"
-  or
-  wrong = "extemely" and right = "extremely"
-  or
-  wrong = "extened" and right = "extended"
-  or
-  wrong = "extention" and right = "extension"
-  or
-  wrong = "extentions" and right = "extensions"
-  or
-  wrong = "extered" and right = "exerted"
-  or
-  wrong = "extermist" and right = "extremist"
-  or
-  wrong = "extint" and right = "extant"
-  or
-  wrong = "extint" and right = "extinct"
-  or
-  wrong = "extracter" and right = "extractor"
-  or
-  wrong = "extradiction" and right = "extradition"
-  or
-  wrong = "extraterrestial" and right = "extraterrestrial"
-  or
-  wrong = "extraterrestials" and right = "extraterrestrials"
-  or
-  wrong = "extravagent" and right = "extravagant"
-  or
-  wrong = "extrememly" and right = "extremely"
-  or
-  wrong = "extremeophile" and right = "extremophile"
-  or
-  wrong = "extremly" and right = "extremely"
-  or
-  wrong = "extrordinarily" and right = "extraordinarily"
-  or
-  wrong = "extrordinary" and right = "extraordinary"
-  or
-  wrong = "eyar" and right = "eyas"
-  or
-  wrong = "eyar" and right = "year"
-  or
-  wrong = "eyars" and right = "eyas"
-  or
-  wrong = "eyars" and right = "years"
-  or
-  wrong = "eyasr" and right = "eyas"
-  or
-  wrong = "eyasr" and right = "years"
-  or
-  wrong = "faciliate" and right = "facilitate"
-  or
-  wrong = "faciliated" and right = "facilitated"
-  or
-  wrong = "faciliates" and right = "facilitates"
-  or
-  wrong = "facilites" and right = "facilities"
-  or
-  wrong = "facillitate" and right = "facilitate"
-  or
-  wrong = "facinated" and right = "fascinated"
-  or
-  wrong = "facist" and right = "fascist"
-  or
-  wrong = "familes" and right = "families"
-  or
-  wrong = "familliar" and right = "familiar"
-  or
-  wrong = "famoust" and right = "famous"
-  or
-  wrong = "fanatism" and right = "fanaticism"
-  or
-  wrong = "farenheit" and right = "fahrenheit"
-  or
-  wrong = "fatc" and right = "fact"
-  or
-  wrong = "faught" and right = "fought"
-  or
-  wrong = "favoutrable" and right = "favourable"
-  or
-  wrong = "feasable" and right = "feasible"
-  or
-  wrong = "febuary" and right = "february"
-  or
-  wrong = "feburary" and right = "february"
-  or
-  wrong = "fedreally" and right = "federally"
-  or
-  wrong = "femminist" and right = "feminist"
-  or
-  wrong = "feromone" and right = "pheromone"
-  or
-  wrong = "fertily" and right = "fertility"
-  or
-  wrong = "fianite" and right = "finite"
-  or
-  wrong = "fianlly" and right = "finally"
-  or
-  wrong = "ficticious" and right = "fictitious"
-  or
-  wrong = "fictious" and right = "fictitious"
-  or
-  wrong = "fidn" and right = "find"
-  or
-  wrong = "fiel" and right = "feel"
-  or
-  wrong = "fiel" and right = "field"
-  or
-  wrong = "fiel" and right = "file"
-  or
-  wrong = "fiel" and right = "phial"
-  or
-  wrong = "fiels" and right = "feels"
-  or
-  wrong = "fiels" and right = "fields"
-  or
-  wrong = "fiels" and right = "files"
-  or
-  wrong = "fiels" and right = "phials"
-  or
-  wrong = "fiercly" and right = "fiercely"
-  or
-  wrong = "fightings" and right = "fighting"
-  or
-  wrong = "filiament" and right = "filament"
-  or
-  wrong = "fimilies" and right = "families"
-  or
-  wrong = "finacial" and right = "financial"
-  or
-  wrong = "finaly" and right = "finally"
-  or
-  wrong = "financialy" and right = "financially"
-  or
-  wrong = "firends" and right = "friends"
-  or
-  wrong = "firts" and right = "first"
-  or
-  wrong = "firts" and right = "flirts"
-  or
-  wrong = "fisionable" and right = "fissionable"
-  or
-  wrong = "flamable" and right = "flammable"
-  or
-  wrong = "flawess" and right = "flawless"
-  or
-  wrong = "fleed" and right = "fled"
-  or
-  wrong = "fleed" and right = "freed"
-  or
-  wrong = "flemmish" and right = "flemish"
-  or
-  wrong = "florescent" and right = "fluorescent"
-  or
-  wrong = "flourescent" and right = "fluorescent"
-  or
-  wrong = "flourine" and right = "fluorine"
-  or
-  wrong = "flourishment" and right = "flourishing"
-  or
-  wrong = "fluorish" and right = "flourish"
-  or
-  wrong = "follwoing" and right = "following"
-  or
-  wrong = "folowing" and right = "following"
-  or
-  wrong = "fomed" and right = "formed"
-  or
-  wrong = "fomr" and right = "form"
-  or
-  wrong = "fomr" and right = "from"
-  or
-  wrong = "fonetic" and right = "phonetic"
-  or
-  wrong = "fontrier" and right = "fontier"
-  or
-  wrong = "foootball" and right = "football"
-  or
-  wrong = "forbad" and right = "forbade"
-  or
-  wrong = "forbiden" and right = "forbidden"
-  or
-  wrong = "foreward" and right = "foreword"
-  or
-  wrong = "forfiet" and right = "forfeit"
-  or
-  wrong = "forhead" and right = "forehead"
-  or
-  wrong = "foriegn" and right = "foreign"
-  or
-  wrong = "formalhaut" and right = "fomalhaut"
-  or
-  wrong = "formallize" and right = "formalize"
-  or
-  wrong = "formallized" and right = "formalized"
-  or
-  wrong = "formaly" and right = "formally"
-  or
-  wrong = "formaly" and right = "formerly"
-  or
-  wrong = "formelly" and right = "formerly"
-  or
-  wrong = "formidible" and right = "formidable"
-  or
-  wrong = "formost" and right = "foremost"
-  or
-  wrong = "forsaw" and right = "foresaw"
-  or
-  wrong = "forseeable" and right = "foreseeable"
-  or
-  wrong = "fortelling" and right = "foretelling"
-  or
-  wrong = "forunner" and right = "forerunner"
-  or
-  wrong = "foucs" and right = "focus"
-  or
-  wrong = "foudn" and right = "found"
-  or
-  wrong = "fougth" and right = "fought"
-  or
-  wrong = "foundaries" and right = "foundries"
-  or
-  wrong = "foundary" and right = "foundry"
-  or
-  wrong = "foundland" and right = "newfoundland"
-  or
-  wrong = "fourties" and right = "forties"
-  or
-  wrong = "fourty" and right = "forty"
-  or
-  wrong = "fouth" and right = "fourth"
-  or
-  wrong = "foward" and right = "forward"
-  or
-  wrong = "framwork" and right = "framework"
-  or
-  wrong = "fransiscan" and right = "franciscan"
-  or
-  wrong = "fransiscans" and right = "franciscans"
-  or
-  wrong = "freind" and right = "friend"
-  or
-  wrong = "freindly" and right = "friendly"
-  or
-  wrong = "frequentily" and right = "frequently"
-  or
-  wrong = "frome" and right = "from"
-  or
-  wrong = "fromed" and right = "formed"
-  or
-  wrong = "froniter" and right = "frontier"
-  or
-  wrong = "fucntion" and right = "function"
-  or
-  wrong = "fucntioning" and right = "functioning"
-  or
-  wrong = "fufill" and right = "fulfill"
-  or
-  wrong = "fufilled" and right = "fulfilled"
-  or
-  wrong = "fulfiled" and right = "fulfilled"
-  or
-  wrong = "fullfill" and right = "fulfill"
-  or
-  wrong = "fullfilled" and right = "fulfilled"
-  or
-  wrong = "funcion" and right = "function"
-  or
-  wrong = "fundametal" and right = "fundamental"
-  or
-  wrong = "fundametals" and right = "fundamentals"
-  or
-  wrong = "funguses" and right = "fungi"
-  or
-  wrong = "funtion" and right = "function"
-  or
-  wrong = "funtions" and right = "functions"
-  or
-  wrong = "furuther" and right = "further"
-  or
-  wrong = "futher" and right = "further"
-  or
-  wrong = "futhermore" and right = "furthermore"
-  or
-  wrong = "futhroc" and right = "futhark"
-  or
-  wrong = "futhroc" and right = "futhorc"
-  or
-  wrong = "gae" and right = "gael"
-  or
-  wrong = "gae" and right = "gale"
-  or
-  wrong = "gae" and right = "game"
-  or
-  wrong = "galatic" and right = "galactic"
-  or
-  wrong = "galations" and right = "galatians"
-  or
-  wrong = "gallaxies" and right = "galaxies"
-  or
-  wrong = "galvinized" and right = "galvanized"
-  or
-  wrong = "ganerate" and right = "generate"
-  or
-  wrong = "ganes" and right = "games"
-  or
-  wrong = "ganster" and right = "gangster"
-  or
-  wrong = "garantee" and right = "guarantee"
-  or
-  wrong = "garanteed" and right = "guaranteed"
-  or
-  wrong = "garantees" and right = "guarantees"
-  or
-  wrong = "garnison" and right = "garrison"
-  or
-  wrong = "gaurantee" and right = "guarantee"
-  or
-  wrong = "gauranteed" and right = "guaranteed"
-  or
-  wrong = "gaurantees" and right = "guarantees"
-  or
-  wrong = "gaurd" and right = "gourd"
-  or
-  wrong = "gaurd" and right = "guard"
-  or
-  wrong = "gaurentee" and right = "guarantee"
-  or
-  wrong = "gaurenteed" and right = "guaranteed"
-  or
-  wrong = "gaurentees" and right = "guarantees"
-  or
-  wrong = "geneological" and right = "genealogical"
-  or
-  wrong = "geneologies" and right = "genealogies"
-  or
-  wrong = "geneology" and right = "genealogy"
-  or
-  wrong = "generaly" and right = "generally"
-  or
-  wrong = "generatting" and right = "generating"
-  or
-  wrong = "genialia" and right = "genitalia"
-  or
-  wrong = "geographicial" and right = "geographical"
-  or
-  wrong = "geometrician" and right = "geometer"
-  or
-  wrong = "geometricians" and right = "geometers"
-  or
-  wrong = "gerat" and right = "great"
-  or
-  wrong = "ghandi" and right = "gandhi"
-  or
-  wrong = "glamourous" and right = "glamorous"
-  or
-  wrong = "glight" and right = "flight"
-  or
-  wrong = "gnawwed" and right = "gnawed"
-  or
-  wrong = "godess" and right = "goddess"
-  or
-  wrong = "godesses" and right = "goddesses"
-  or
-  wrong = "godounov" and right = "godunov"
-  or
-  wrong = "gogin" and right = "gauguin"
-  or
-  wrong = "gogin" and right = "going"
-  or
-  wrong = "goign" and right = "going"
-  or
-  wrong = "gonig" and right = "going"
-  or
-  wrong = "gothenberg" and right = "gothenburg"
-  or
-  wrong = "gottleib" and right = "gottlieb"
-  or
-  wrong = "gouvener" and right = "governor"
-  or
-  wrong = "govement" and right = "government"
-  or
-  wrong = "govenment" and right = "government"
-  or
-  wrong = "govenrment" and right = "government"
-  or
-  wrong = "goverance" and right = "governance"
-  or
-  wrong = "goverment" and right = "government"
-  or
-  wrong = "govermental" and right = "governmental"
-  or
-  wrong = "governer" and right = "governor"
-  or
-  wrong = "governmnet" and right = "government"
-  or
-  wrong = "govorment" and right = "government"
-  or
-  wrong = "govormental" and right = "governmental"
-  or
-  wrong = "govornment" and right = "government"
-  or
-  wrong = "gracefull" and right = "graceful"
-  or
-  wrong = "graet" and right = "great"
-  or
-  wrong = "grafitti" and right = "graffiti"
-  or
-  wrong = "gramatically" and right = "grammatically"
-  or
-  wrong = "grammaticaly" and right = "grammatically"
-  or
-  wrong = "grammer" and right = "grammar"
-  or
-  wrong = "grat" and right = "great"
-  or
-  wrong = "gratuitious" and right = "gratuitous"
-  or
-  wrong = "greatful" and right = "grateful"
-  or
-  wrong = "greatfully" and right = "gratefully"
-  or
-  wrong = "greif" and right = "grief"
-  or
-  wrong = "gridles" and right = "griddles"
-  or
-  wrong = "gropu" and right = "group"
-  or
-  wrong = "grwo" and right = "grow"
-  or
-  wrong = "guaduloupe" and right = "guadalupe"
-  or
-  wrong = "guaduloupe" and right = "guadeloupe"
-  or
-  wrong = "guadulupe" and right = "guadalupe"
-  or
-  wrong = "guadulupe" and right = "guadeloupe"
-  or
-  wrong = "guage" and right = "gauge"
-  or
-  wrong = "guarentee" and right = "guarantee"
-  or
-  wrong = "guarenteed" and right = "guaranteed"
-  or
-  wrong = "guarentees" and right = "guarantees"
-  or
-  wrong = "guatamala" and right = "guatemala"
-  or
-  wrong = "guatamalan" and right = "guatemalan"
-  or
-  wrong = "guerrila" and right = "guerrilla"
-  or
-  wrong = "guerrilas" and right = "guerrillas"
-  or
-  wrong = "guidence" and right = "guidance"
-  or
-  wrong = "guilia" and right = "giulia"
-  or
-  wrong = "guilio" and right = "giulio"
-  or
-  wrong = "guiness" and right = "guinness"
-  or
-  wrong = "guiseppe" and right = "giuseppe"
-  or
-  wrong = "gunanine" and right = "guanine"
-  or
-  wrong = "gurantee" and right = "guarantee"
-  or
-  wrong = "guranteed" and right = "guaranteed"
-  or
-  wrong = "gurantees" and right = "guarantees"
-  or
-  wrong = "guttaral" and right = "guttural"
-  or
-  wrong = "gutteral" and right = "guttural"
-  or
-  wrong = "habaeus" and right = "habeas"
-  or
-  wrong = "habeus" and right = "habeas"
-  or
-  wrong = "habsbourg" and right = "habsburg"
-  or
-  wrong = "haemorrage" and right = "haemorrhage"
-  or
-  wrong = "haev" and right = "have"
-  or
-  wrong = "haev" and right = "heave"
-  or
-  wrong = "halarious" and right = "hilarious"
-  or
-  wrong = "hallowean" and right = "halloween"
-  or
-  wrong = "halp" and right = "help"
-  or
-  wrong = "hander" and right = "handler"
-  or
-  wrong = "hapen" and right = "happen"
-  or
-  wrong = "hapened" and right = "happened"
-  or
-  wrong = "hapening" and right = "happening"
-  or
-  wrong = "happend" and right = "happened"
-  or
-  wrong = "happended" and right = "happened"
-  or
-  wrong = "happenned" and right = "happened"
-  or
-  wrong = "harased" and right = "harassed"
-  or
-  wrong = "harases" and right = "harasses"
-  or
-  wrong = "harasment" and right = "harassment"
-  or
-  wrong = "harasments" and right = "harassments"
-  or
-  wrong = "harassement" and right = "harassment"
-  or
-  wrong = "harras" and right = "harass"
-  or
-  wrong = "harrased" and right = "harassed"
-  or
-  wrong = "harrases" and right = "harasses"
-  or
-  wrong = "harrasing" and right = "harassing"
-  or
-  wrong = "harrasment" and right = "harassment"
-  or
-  wrong = "harrasments" and right = "harassments"
-  or
-  wrong = "harrassed" and right = "harassed"
-  or
-  wrong = "harrasses" and right = "harassed"
-  or
-  wrong = "harrassing" and right = "harassing"
-  or
-  wrong = "harrassment" and right = "harassment"
-  or
-  wrong = "harrassments" and right = "harassments"
-  or
-  wrong = "hatian" and right = "haitian"
-  or
-  wrong = "haviest" and right = "heaviest"
-  or
-  wrong = "headquarer" and right = "headquarter"
-  or
-  wrong = "headquater" and right = "headquarter"
-  or
-  wrong = "headquatered" and right = "headquartered"
-  or
-  wrong = "headquaters" and right = "headquarters"
-  or
-  wrong = "healthercare" and right = "healthcare"
-  or
-  wrong = "heared" and right = "heard"
-  or
-  wrong = "heathy" and right = "healthy"
-  or
-  wrong = "heidelburg" and right = "heidelberg"
-  or
-  wrong = "heigher" and right = "higher"
-  or
-  wrong = "heirarchy" and right = "hierarchy"
-  or
-  wrong = "heiroglyphics" and right = "hieroglyphics"
-  or
-  wrong = "helment" and right = "helmet"
-  or
-  wrong = "helpfull" and right = "helpful"
-  or
-  wrong = "helpped" and right = "helped"
-  or
-  wrong = "hemmorhage" and right = "hemorrhage"
-  or
-  wrong = "herad" and right = "heard"
-  or
-  wrong = "herad" and right = "hera"
-  or
-  wrong = "heridity" and right = "heredity"
-  or
-  wrong = "heroe" and right = "hero"
-  or
-  wrong = "heros" and right = "heroes"
-  or
-  wrong = "hertiage" and right = "heritage"
-  or
-  wrong = "hertzs" and right = "hertz"
-  or
-  wrong = "hesistant" and right = "hesitant"
-  or
-  wrong = "heterogenous" and right = "heterogeneous"
-  or
-  wrong = "hieght" and right = "height"
-  or
-  wrong = "hierachical" and right = "hierarchical"
-  or
-  wrong = "hierachies" and right = "hierarchies"
-  or
-  wrong = "hierachy" and right = "hierarchy"
-  or
-  wrong = "hierarcical" and right = "hierarchical"
-  or
-  wrong = "hierarcy" and right = "hierarchy"
-  or
-  wrong = "hieroglph" and right = "hieroglyph"
-  or
-  wrong = "hieroglphs" and right = "hieroglyphs"
-  or
-  wrong = "higer" and right = "higher"
-  or
-  wrong = "higest" and right = "highest"
-  or
-  wrong = "higway" and right = "highway"
-  or
-  wrong = "hillarious" and right = "hilarious"
-  or
-  wrong = "himselv" and right = "himself"
-  or
-  wrong = "hinderance" and right = "hindrance"
-  or
-  wrong = "hinderence" and right = "hindrance"
-  or
-  wrong = "hindrence" and right = "hindrance"
-  or
-  wrong = "hipopotamus" and right = "hippopotamus"
-  or
-  wrong = "hismelf" and right = "himself"
-  or
-  wrong = "histocompatability" and right = "histocompatibility"
-  or
-  wrong = "historicians" and right = "historians"
-  or
-  wrong = "holf" and right = "hold"
-  or
-  wrong = "holliday" and right = "holiday"
-  or
-  wrong = "homogeneize" and right = "homogenize"
-  or
-  wrong = "homogeneized" and right = "homogenized"
-  or
-  wrong = "honory" and right = "honorary"
-  or
-  wrong = "horrifing" and right = "horrifying"
-  or
-  wrong = "hosited" and right = "hoisted"
-  or
-  wrong = "hospitible" and right = "hospitable"
-  or
-  wrong = "hounour" and right = "honour"
-  or
-  wrong = "housr" and right = "hours"
-  or
-  wrong = "housr" and right = "house"
-  or
-  wrong = "howver" and right = "however"
-  or
-  wrong = "hsitorians" and right = "historians"
-  or
-  wrong = "hstory" and right = "history"
-  or
-  wrong = "hten" and right = "hen"
-  or
-  wrong = "hten" and right = "the"
-  or
-  wrong = "hten" and right = "then"
-  or
-  wrong = "htere" and right = "here"
-  or
-  wrong = "htere" and right = "there"
-  or
-  wrong = "htey" and right = "they"
-  or
-  wrong = "htikn" and right = "think"
-  or
-  wrong = "hting" and right = "thing"
-  or
-  wrong = "htink" and right = "think"
-  or
-  wrong = "htis" and right = "this"
-  or
-  wrong = "humer" and right = "humor"
-  or
-  wrong = "humer" and right = "humour"
-  or
-  wrong = "humerous" and right = "humerus"
-  or
-  wrong = "humerous" and right = "humorous"
-  or
-  wrong = "huminoid" and right = "humanoid"
-  or
-  wrong = "humoural" and right = "humoral"
-  or
-  wrong = "humurous" and right = "humorous"
-  or
-  wrong = "husban" and right = "husband"
-  or
-  wrong = "hvae" and right = "have"
-  or
-  wrong = "hvaing" and right = "having"
-  or
-  wrong = "hvea" and right = "have"
-  or
-  wrong = "hvea" and right = "heave"
-  or
-  wrong = "hwihc" and right = "which"
-  or
-  wrong = "hwile" and right = "while"
-  or
-  wrong = "hwole" and right = "whole"
-  or
-  wrong = "hydogen" and right = "hydrogen"
-  or
-  wrong = "hydropile" and right = "hydrophile"
-  or
-  wrong = "hydropilic" and right = "hydrophilic"
-  or
-  wrong = "hydropobe" and right = "hydrophobe"
-  or
-  wrong = "hydropobic" and right = "hydrophobic"
-  or
-  wrong = "hygeine" and right = "hygiene"
-  or
-  wrong = "hyjack" and right = "hijack"
-  or
-  wrong = "hyjacking" and right = "hijacking"
-  or
-  wrong = "hypocracy" and right = "hypocrisy"
-  or
-  wrong = "hypocrasy" and right = "hypocrisy"
-  or
-  wrong = "hypocricy" and right = "hypocrisy"
-  or
-  wrong = "hypocrit" and right = "hypocrite"
-  or
-  wrong = "hypocrits" and right = "hypocrites"
-  or
-  wrong = "iconclastic" and right = "iconoclastic"
-  or
-  wrong = "idaeidae" and right = "idea"
-  or
-  wrong = "idaes" and right = "ideas"
-  or
-  wrong = "idealogies" and right = "ideologies"
-  or
-  wrong = "idealogy" and right = "ideology"
-  or
-  wrong = "identicial" and right = "identical"
-  or
-  wrong = "identifers" and right = "identifiers"
-  or
-  wrong = "ideosyncratic" and right = "idiosyncratic"
-  or
-  wrong = "idesa" and right = "ideas"
-  or
-  wrong = "idesa" and right = "ides"
-  or
-  wrong = "idiosyncracy" and right = "idiosyncrasy"
-  or
-  wrong = "ihaca" and right = "ithaca"
-  or
-  wrong = "illegimacy" and right = "illegitimacy"
-  or
-  wrong = "illegitmate" and right = "illegitimate"
-  or
-  wrong = "illess" and right = "illness"
-  or
-  wrong = "illiegal" and right = "illegal"
-  or
-  wrong = "illution" and right = "illusion"
-  or
-  wrong = "ilness" and right = "illness"
-  or
-  wrong = "ilogical" and right = "illogical"
-  or
-  wrong = "imagenary" and right = "imaginary"
-  or
-  wrong = "imagin" and right = "imagine"
-  or
-  wrong = "imaginery" and right = "imagery"
-  or
-  wrong = "imaginery" and right = "imaginary"
-  or
-  wrong = "imanent" and right = "eminent"
-  or
-  wrong = "imanent" and right = "imminent"
-  or
-  wrong = "imcomplete" and right = "incomplete"
-  or
-  wrong = "imediately" and right = "immediately"
-  or
-  wrong = "imense" and right = "immense"
-  or
-  wrong = "imigrant" and right = "emigrant"
-  or
-  wrong = "imigrant" and right = "immigrant"
-  or
-  wrong = "imigrated" and right = "emigrated"
-  or
-  wrong = "imigrated" and right = "immigrated"
-  or
-  wrong = "imigration" and right = "emigration"
-  or
-  wrong = "imigration" and right = "immigration"
-  or
-  wrong = "iminent" and right = "eminent"
-  or
-  wrong = "iminent" and right = "immanent"
-  or
-  wrong = "iminent" and right = "imminent"
-  or
-  wrong = "immediatley" and right = "immediately"
-  or
-  wrong = "immediatly" and right = "immediately"
-  or
-  wrong = "immidately" and right = "immediately"
-  or
-  wrong = "immidiately" and right = "immediately"
-  or
-  wrong = "immitate" and right = "imitate"
-  or
-  wrong = "immitated" and right = "imitated"
-  or
-  wrong = "immitating" and right = "imitating"
-  or
-  wrong = "immitator" and right = "imitator"
-  or
-  wrong = "immunosupressant" and right = "immunosuppressant"
-  or
-  wrong = "impecabbly" and right = "impeccably"
-  or
-  wrong = "impedence" and right = "impedance"
-  or
-  wrong = "implamenting" and right = "implementing"
-  or
-  wrong = "impliment" and right = "implement"
-  or
-  wrong = "implimented" and right = "implemented"
-  or
-  wrong = "imploys" and right = "employs"
-  or
-  wrong = "importamt" and right = "important"
-  or
-  wrong = "impressario" and right = "impresario"
-  or
-  wrong = "imprioned" and right = "imprisoned"
-  or
-  wrong = "imprisonned" and right = "imprisoned"
-  or
-  wrong = "improvision" and right = "improvisation"
-  or
-  wrong = "improvments" and right = "improvements"
-  or
-  wrong = "inablility" and right = "inability"
-  or
-  wrong = "inaccessable" and right = "inaccessible"
-  or
-  wrong = "inadiquate" and right = "inadequate"
-  or
-  wrong = "inadquate" and right = "inadequate"
-  or
-  wrong = "inadvertant" and right = "inadvertent"
-  or
-  wrong = "inadvertantly" and right = "inadvertently"
-  or
-  wrong = "inagurated" and right = "inaugurated"
-  or
-  wrong = "inaguration" and right = "inauguration"
-  or
-  wrong = "inappropiate" and right = "inappropriate"
-  or
-  wrong = "inaugures" and right = "inaugurates"
-  or
-  wrong = "inbalance" and right = "imbalance"
-  or
-  wrong = "inbalanced" and right = "imbalanced"
-  or
-  wrong = "inbetween" and right = "between"
-  or
-  wrong = "incarcirated" and right = "incarcerated"
-  or
-  wrong = "incidentially" and right = "incidentally"
-  or
-  wrong = "incidently" and right = "incidentally"
-  or
-  wrong = "inclreased" and right = "increased"
-  or
-  wrong = "includ" and right = "include"
-  or
-  wrong = "includng" and right = "including"
-  or
-  wrong = "incompatabilities" and right = "incompatibilities"
-  or
-  wrong = "incompatability" and right = "incompatibility"
-  or
-  wrong = "incompatable" and right = "incompatible"
-  or
-  wrong = "incompatablities" and right = "incompatibilities"
-  or
-  wrong = "incompatablity" and right = "incompatibility"
-  or
-  wrong = "incompatiblities" and right = "incompatibilities"
-  or
-  wrong = "incompatiblity" and right = "incompatibility"
-  or
-  wrong = "incompetance" and right = "incompetence"
-  or
-  wrong = "incompetant" and right = "incompetent"
-  or
-  wrong = "incomptable" and right = "incompatible"
-  or
-  wrong = "incomptetent" and right = "incompetent"
-  or
-  wrong = "inconsistant" and right = "inconsistent"
-  or
-  wrong = "incoroporated" and right = "incorporated"
-  or
-  wrong = "incorperation" and right = "incorporation"
-  or
-  wrong = "incorportaed" and right = "incorporated"
-  or
-  wrong = "incorprates" and right = "incorporates"
-  or
-  wrong = "incorruptable" and right = "incorruptible"
-  or
-  wrong = "incramentally" and right = "incrementally"
-  or
-  wrong = "increadible" and right = "incredible"
-  or
-  wrong = "incredable" and right = "incredible"
-  or
-  wrong = "inctroduce" and right = "introduce"
-  or
-  wrong = "inctroduced" and right = "introduced"
-  or
-  wrong = "incuding" and right = "including"
-  or
-  wrong = "incunabla" and right = "incunabula"
-  or
-  wrong = "indefinately" and right = "indefinitely"
-  or
-  wrong = "indefineable" and right = "undefinable"
-  or
-  wrong = "indefinitly" and right = "indefinitely"
-  or
-  wrong = "indentical" and right = "identical"
-  or
-  wrong = "indepedantly" and right = "independently"
-  or
-  wrong = "indepedence" and right = "independence"
-  or
-  wrong = "independance" and right = "independence"
-  or
-  wrong = "independant" and right = "independent"
-  or
-  wrong = "independantly" and right = "independently"
-  or
-  wrong = "independece" and right = "independence"
-  or
-  wrong = "independendet" and right = "independent"
-  or
-  wrong = "indespensable" and right = "indispensable"
-  or
-  wrong = "indespensible" and right = "indispensable"
-  or
-  wrong = "indictement" and right = "indictment"
-  or
-  wrong = "indigineous" and right = "indigenous"
-  or
-  wrong = "indipendence" and right = "independence"
-  or
-  wrong = "indipendent" and right = "independent"
-  or
-  wrong = "indipendently" and right = "independently"
-  or
-  wrong = "indispensible" and right = "indispensable"
-  or
-  wrong = "indisputible" and right = "indisputable"
-  or
-  wrong = "indisputibly" and right = "indisputably"
-  or
-  wrong = "indite" and right = "indict"
-  or
-  wrong = "individualy" and right = "individually"
-  or
-  wrong = "indpendent" and right = "independent"
-  or
-  wrong = "indpendently" and right = "independently"
-  or
-  wrong = "indulgue" and right = "indulge"
-  or
-  wrong = "indutrial" and right = "industrial"
-  or
-  wrong = "indviduals" and right = "individuals"
-  or
-  wrong = "inefficienty" and right = "inefficiently"
-  or
-  wrong = "inevatible" and right = "inevitable"
-  or
-  wrong = "inevitible" and right = "inevitable"
-  or
-  wrong = "inevititably" and right = "inevitably"
-  or
-  wrong = "infalability" and right = "infallibility"
-  or
-  wrong = "infallable" and right = "infallible"
-  or
-  wrong = "infectuous" and right = "infectious"
-  or
-  wrong = "infered" and right = "inferred"
-  or
-  wrong = "infilitrate" and right = "infiltrate"
-  or
-  wrong = "infilitrated" and right = "infiltrated"
-  or
-  wrong = "infilitration" and right = "infiltration"
-  or
-  wrong = "infinit" and right = "infinite"
-  or
-  wrong = "inflamation" and right = "inflammation"
-  or
-  wrong = "influencial" and right = "influential"
-  or
-  wrong = "influented" and right = "influenced"
-  or
-  wrong = "infomation" and right = "information"
-  or
-  wrong = "informtion" and right = "information"
-  or
-  wrong = "infrantryman" and right = "infantryman"
-  or
-  wrong = "infrigement" and right = "infringement"
-  or
-  wrong = "ingenius" and right = "ingenious"
-  or
-  wrong = "ingreediants" and right = "ingredients"
-  or
-  wrong = "inhabitans" and right = "inhabitants"
-  or
-  wrong = "inherantly" and right = "inherently"
-  or
-  wrong = "inheritage" and right = "heritage"
-  or
-  wrong = "inheritage" and right = "inheritance"
-  or
-  wrong = "inheritence" and right = "inheritance"
-  or
-  wrong = "inital" and right = "initial"
-  or
-  wrong = "initalize" and right = "initialize"
-  or
-  wrong = "initally" and right = "initially"
-  or
-  wrong = "initation" and right = "initiation"
-  or
-  wrong = "initiaitive" and right = "initiative"
-  or
-  wrong = "inlcuding" and right = "including"
-  or
-  wrong = "inmigrant" and right = "immigrant"
-  or
-  wrong = "inmigrants" and right = "immigrants"
-  or
-  wrong = "innoculated" and right = "inoculated"
-  or
-  wrong = "inocence" and right = "innocence"
-  or
-  wrong = "inofficial" and right = "unofficial"
-  or
-  wrong = "inot" and right = "into"
-  or
-  wrong = "inpeach" and right = "impeach"
-  or
-  wrong = "inpending" and right = "impending"
-  or
-  wrong = "inpenetrable" and right = "impenetrable"
-  or
-  wrong = "inpolite" and right = "impolite"
-  or
-  wrong = "inprisonment" and right = "imprisonment"
-  or
-  wrong = "inproving" and right = "improving"
-  or
-  wrong = "insectiverous" and right = "insectivorous"
-  or
-  wrong = "insensative" and right = "insensitive"
-  or
-  wrong = "inseperable" and right = "inseparable"
-  or
-  wrong = "insistance" and right = "insistence"
-  or
-  wrong = "insitution" and right = "institution"
-  or
-  wrong = "insitutions" and right = "institutions"
-  or
-  wrong = "inspite" and right = "inspire"
-  or
-  wrong = "instade" and right = "instead"
-  or
-  wrong = "instatance" and right = "instance"
-  or
-  wrong = "institue" and right = "institute"
-  or
-  wrong = "instuction" and right = "instruction"
-  or
-  wrong = "instuments" and right = "instruments"
-  or
-  wrong = "instutionalized" and right = "institutionalized"
-  or
-  wrong = "instutions" and right = "intuitions"
-  or
-  wrong = "insurence" and right = "insurance"
-  or
-  wrong = "intelectual" and right = "intellectual"
-  or
-  wrong = "inteligence" and right = "intelligence"
-  or
-  wrong = "inteligent" and right = "intelligent"
-  or
-  wrong = "intenational" and right = "international"
-  or
-  wrong = "intented" and right = "indented"
-  or
-  wrong = "intented" and right = "intended"
-  or
-  wrong = "intepretation" and right = "interpretation"
-  or
-  wrong = "intepretator" and right = "interpretor"
-  or
-  wrong = "interational" and right = "international"
-  or
-  wrong = "interbread" and right = "interbred"
-  or
-  wrong = "interbread" and right = "interbreed"
-  or
-  wrong = "interchangable" and right = "interchangeable"
-  or
-  wrong = "interchangably" and right = "interchangeably"
-  or
-  wrong = "intercontinential" and right = "intercontinental"
-  or
-  wrong = "intercontinetal" and right = "intercontinental"
-  or
-  wrong = "intered" and right = "interned"
-  or
-  wrong = "intered" and right = "interred"
-  or
-  wrong = "interelated" and right = "interrelated"
-  or
-  wrong = "interferance" and right = "interference"
-  or
-  wrong = "interfereing" and right = "interfering"
-  or
-  wrong = "intergrated" and right = "integrated"
-  or
-  wrong = "intergration" and right = "integration"
-  or
-  wrong = "interm" and right = "interim"
-  or
-  wrong = "internation" and right = "international"
-  or
-  wrong = "interpet" and right = "interpret"
-  or
-  wrong = "interrim" and right = "interim"
-  or
-  wrong = "interrugum" and right = "interregnum"
-  or
-  wrong = "intertaining" and right = "entertaining"
-  or
-  wrong = "interupt" and right = "interrupt"
-  or
-  wrong = "intervines" and right = "intervenes"
-  or
-  wrong = "intevene" and right = "intervene"
-  or
-  wrong = "intial" and right = "initial"
-  or
-  wrong = "intialize" and right = "initialize"
-  or
-  wrong = "intialized" and right = "initialized"
-  or
-  wrong = "intially" and right = "initially"
-  or
-  wrong = "intrduced" and right = "introduced"
-  or
-  wrong = "intrest" and right = "interest"
-  or
-  wrong = "introdued" and right = "introduced"
-  or
-  wrong = "intruduced" and right = "introduced"
-  or
-  wrong = "intrument" and right = "instrument"
-  or
-  wrong = "intrumental" and right = "instrumental"
-  or
-  wrong = "intruments" and right = "instruments"
-  or
-  wrong = "intrusted" and right = "entrusted"
-  or
-  wrong = "intutive" and right = "intuitive"
-  or
-  wrong = "intutively" and right = "intuitively"
-  or
-  wrong = "inudstry" and right = "industry"
-  or
-  wrong = "inumerable" and right = "enumerable"
-  or
-  wrong = "inumerable" and right = "innumerable"
-  or
-  wrong = "inventer" and right = "inventor"
-  or
-  wrong = "invertibrates" and right = "invertebrates"
-  or
-  wrong = "investingate" and right = "investigate"
-  or
-  wrong = "involvment" and right = "involvement"
-  or
-  wrong = "irelevent" and right = "irrelevant"
-  or
-  wrong = "iresistable" and right = "irresistible"
-  or
-  wrong = "iresistably" and right = "irresistibly"
-  or
-  wrong = "iresistible" and right = "irresistible"
-  or
-  wrong = "iresistibly" and right = "irresistibly"
-  or
-  wrong = "iritable" and right = "irritable"
-  or
-  wrong = "iritated" and right = "irritated"
-  or
-  wrong = "ironicly" and right = "ironically"
-  or
-  wrong = "irregardless" and right = "regardless"
-  or
-  wrong = "irrelevent" and right = "irrelevant"
-  or
-  wrong = "irreplacable" and right = "irreplaceable"
-  or
-  wrong = "irresistable" and right = "irresistible"
-  or
-  wrong = "irresistably" and right = "irresistibly"
-  or
-  wrong = "israelies" and right = "israelis"
-  or
-  wrong = "issueing" and right = "issuing"
-  or
-  wrong = "itnroduced" and right = "introduced"
-  or
-  wrong = "iunior" and right = "junior"
-  or
-  wrong = "iwll" and right = "will"
-  or
-  wrong = "iwth" and right = "with"
-  or
-  wrong = "janurary" and right = "january"
-  or
-  wrong = "januray" and right = "january"
-  or
-  wrong = "japanes" and right = "japanese"
-  or
-  wrong = "jaques" and right = "jacques"
-  or
-  wrong = "jeapardy" and right = "jeopardy"
-  or
-  wrong = "jewllery" and right = "jewellery"
-  or
-  wrong = "johanine" and right = "johannine"
-  or
-  wrong = "jorunal" and right = "journal"
-  or
-  wrong = "jospeh" and right = "joseph"
-  or
-  wrong = "jouney" and right = "journey"
-  or
-  wrong = "journied" and right = "journeyed"
-  or
-  wrong = "journies" and right = "journeys"
-  or
-  wrong = "jstu" and right = "just"
-  or
-  wrong = "jsut" and right = "just"
-  or
-  wrong = "juadaism" and right = "judaism"
-  or
-  wrong = "juadism" and right = "judaism"
-  or
-  wrong = "judical" and right = "judicial"
-  or
-  wrong = "judisuary" and right = "judiciary"
-  or
-  wrong = "juducial" and right = "judicial"
-  or
-  wrong = "juristiction" and right = "jurisdiction"
-  or
-  wrong = "juristictions" and right = "jurisdictions"
-  or
-  wrong = "kindergarden" and right = "kindergarten"
-  or
-  wrong = "klenex" and right = "kleenex"
-  or
-  wrong = "knifes" and right = "knives"
-  or
-  wrong = "knive" and right = "knife"
-  or
-  wrong = "knowlege" and right = "knowledge"
-  or
-  wrong = "knowlegeable" and right = "knowledgeable"
-  or
-  wrong = "knwo" and right = "know"
-  or
-  wrong = "knwos" and right = "knows"
-  or
-  wrong = "konw" and right = "know"
-  or
-  wrong = "konws" and right = "knows"
-  or
-  wrong = "kwno" and right = "know"
-  or
-  wrong = "labatory" and right = "laboratory"
-  or
-  wrong = "labatory" and right = "lavatory"
-  or
-  wrong = "labled" and right = "labeled"
-  or
-  wrong = "labled" and right = "labelled"
-  or
-  wrong = "labratory" and right = "laboratory"
-  or
-  wrong = "laguage" and right = "language"
-  or
-  wrong = "laguages" and right = "languages"
-  or
-  wrong = "langage" and right = "language"
-  or
-  wrong = "langauge" and right = "language"
-  or
-  wrong = "larg" and right = "large"
-  or
-  wrong = "largst" and right = "largest"
-  or
-  wrong = "larrry" and right = "larry"
-  or
-  wrong = "lastr" and right = "last"
-  or
-  wrong = "lattitude" and right = "latitude"
-  or
-  wrong = "launchs" and right = "launch"
-  or
-  wrong = "launchs" and right = "launches"
-  or
-  wrong = "launhed" and right = "launched"
-  or
-  wrong = "lavae" and right = "larvae"
-  or
-  wrong = "layed" and right = "laid"
-  or
-  wrong = "lazyness" and right = "laziness"
-  or
-  wrong = "leage" and right = "league"
-  or
-  wrong = "leanr" and right = "lean"
-  or
-  wrong = "leanr" and right = "leaner"
-  or
-  wrong = "leanr" and right = "learn"
-  or
-  wrong = "leathal" and right = "lethal"
-  or
-  wrong = "lefted" and right = "left"
-  or
-  wrong = "legitamate" and right = "legitimate"
-  or
-  wrong = "legitmate" and right = "legitimate"
-  or
-  wrong = "leibnitz" and right = "leibniz"
-  or
-  wrong = "lengh" and right = "length"
-  or
-  wrong = "lenght" and right = "length"
-  or
-  wrong = "lengt" and right = "length"
-  or
-  wrong = "lenth" and right = "length"
-  or
-  wrong = "leran" and right = "learn"
-  or
-  wrong = "lerans" and right = "learns"
-  or
-  wrong = "leutenant" and right = "lieutenant"
-  or
-  wrong = "levetate" and right = "levitate"
-  or
-  wrong = "levetated" and right = "levitated"
-  or
-  wrong = "levetates" and right = "levitates"
-  or
-  wrong = "levetating" and right = "levitating"
-  or
-  wrong = "levle" and right = "level"
-  or
-  wrong = "liasion" and right = "liaison"
-  or
-  wrong = "liason" and right = "liaison"
-  or
-  wrong = "liasons" and right = "liaisons"
-  or
-  wrong = "libaries" and right = "libraries"
-  or
-  wrong = "libary" and right = "library"
-  or
-  wrong = "libell" and right = "libel"
-  or
-  wrong = "libguistic" and right = "linguistic"
-  or
-  wrong = "libguistics" and right = "linguistics"
-  or
-  wrong = "libitarianisn" and right = "libertarianism"
-  or
-  wrong = "lible" and right = "liable"
-  or
-  wrong = "lible" and right = "libel"
-  or
-  wrong = "lieing" and right = "lying"
-  or
-  wrong = "liek" and right = "like"
-  or
-  wrong = "liekd" and right = "liked"
-  or
-  wrong = "liesure" and right = "leisure"
-  or
-  wrong = "lieuenant" and right = "lieutenant"
-  or
-  wrong = "lieved" and right = "lived"
-  or
-  wrong = "liftime" and right = "lifetime"
-  or
-  wrong = "likelyhood" and right = "likelihood"
-  or
-  wrong = "linnaena" and right = "linnaean"
-  or
-  wrong = "lippizaner" and right = "lipizzaner"
-  or
-  wrong = "liquify" and right = "liquefy"
-  or
-  wrong = "liscense" and right = "licence"
-  or
-  wrong = "liscense" and right = "license"
-  or
-  wrong = "lisence" and right = "licence"
-  or
-  wrong = "lisence" and right = "license"
-  or
-  wrong = "lisense" and right = "licence"
-  or
-  wrong = "lisense" and right = "license"
-  or
-  wrong = "listners" and right = "listeners"
-  or
-  wrong = "litature" and right = "literature"
-  or
-  wrong = "literaly" and right = "literally"
-  or
-  wrong = "literture" and right = "literature"
-  or
-  wrong = "littel" and right = "little"
-  or
-  wrong = "litterally" and right = "literally"
-  or
-  wrong = "liuke" and right = "like"
-  or
-  wrong = "livley" and right = "lively"
-  or
-  wrong = "lmits" and right = "limits"
-  or
-  wrong = "loev" and right = "love"
-  or
-  wrong = "lonelyness" and right = "loneliness"
-  or
-  wrong = "longitudonal" and right = "longitudinal"
-  or
-  wrong = "lonley" and right = "lonely"
-  or
-  wrong = "lonly" and right = "lonely"
-  or
-  wrong = "lonly" and right = "only"
-  or
-  wrong = "loosing" and right = "losing"
-  or
-  wrong = "lotharingen" and right = "lothringen"
-  or
-  wrong = "lsat" and right = "last"
-  or
-  wrong = "lukid" and right = "likud"
-  or
-  wrong = "lveo" and right = "love"
-  or
-  wrong = "lvoe" and right = "love"
-  or
-  wrong = "lybia" and right = "libya"
-  or
-  wrong = "maching" and right = "machine"
-  or
-  wrong = "maching" and right = "marching"
-  or
-  wrong = "maching" and right = "matching"
-  or
-  wrong = "mackeral" and right = "mackerel"
-  or
-  wrong = "magasine" and right = "magazine"
-  or
-  wrong = "magincian" and right = "magician"
-  or
-  wrong = "magisine" and right = "magazine"
-  or
-  wrong = "magizine" and right = "magazine"
-  or
-  wrong = "magnificient" and right = "magnificent"
-  or
-  wrong = "magolia" and right = "magnolia"
-  or
-  wrong = "mailny" and right = "mainly"
-  or
-  wrong = "maintainance" and right = "maintenance"
-  or
-  wrong = "maintainence" and right = "maintenance"
-  or
-  wrong = "maintance" and right = "maintenance"
-  or
-  wrong = "maintenence" and right = "maintenance"
-  or
-  wrong = "maintinaing" and right = "maintaining"
-  or
-  wrong = "maintioned" and right = "mentioned"
-  or
-  wrong = "majoroty" and right = "majority"
-  or
-  wrong = "maked" and right = "made"
-  or
-  wrong = "maked" and right = "marked"
-  or
-  wrong = "makse" and right = "makes"
-  or
-  wrong = "malcom" and right = "malcolm"
-  or
-  wrong = "maltesian" and right = "maltese"
-  or
-  wrong = "mamal" and right = "mammal"
-  or
-  wrong = "mamalian" and right = "mammalian"
-  or
-  wrong = "managable" and right = "manageable"
-  or
-  wrong = "managable" and right = "manageably"
-  or
-  wrong = "managment" and right = "management"
-  or
-  wrong = "maneouvre" and right = "manoeuvre"
-  or
-  wrong = "maneouvred" and right = "manoeuvred"
-  or
-  wrong = "maneouvres" and right = "manoeuvres"
-  or
-  wrong = "maneouvring" and right = "manoeuvring"
-  or
-  wrong = "manisfestations" and right = "manifestations"
-  or
-  wrong = "manoeuverability" and right = "maneuverability"
-  or
-  wrong = "manouver" and right = "maneuver"
-  or
-  wrong = "manouver" and right = "manoeuvre"
-  or
-  wrong = "manouverability" and right = "maneuverability"
-  or
-  wrong = "manouverability" and right = "manoeuverability"
-  or
-  wrong = "manouverability" and right = "manoeuvrability"
-  or
-  wrong = "manouverable" and right = "maneuverable"
-  or
-  wrong = "manouverable" and right = "manoeuvrable"
-  or
-  wrong = "manouvers" and right = "maneuvers"
-  or
-  wrong = "manouvers" and right = "manoeuvres"
-  or
-  wrong = "mantained" and right = "maintained"
-  or
-  wrong = "manuever" and right = "maneuver"
-  or
-  wrong = "manuever" and right = "manoeuvre"
-  or
-  wrong = "manuevers" and right = "maneuvers"
-  or
-  wrong = "manuevers" and right = "manoeuvres"
-  or
-  wrong = "manufacturedd" and right = "manufactured"
-  or
-  wrong = "manufature" and right = "manufacture"
-  or
-  wrong = "manufatured" and right = "manufactured"
-  or
-  wrong = "manufaturing" and right = "manufacturing"
-  or
-  wrong = "manuver" and right = "maneuver"
-  or
-  wrong = "mariage" and right = "marriage"
-  or
-  wrong = "marjority" and right = "majority"
-  or
-  wrong = "markes" and right = "marks"
-  or
-  wrong = "marketting" and right = "marketing"
-  or
-  wrong = "marmelade" and right = "marmalade"
-  or
-  wrong = "marrage" and right = "marriage"
-  or
-  wrong = "marraige" and right = "marriage"
-  or
-  wrong = "marrtyred" and right = "martyred"
-  or
-  wrong = "marryied" and right = "married"
-  or
-  wrong = "massachussets" and right = "massachusetts"
-  or
-  wrong = "massachussetts" and right = "massachusetts"
-  or
-  wrong = "masterbation" and right = "masturbation"
-  or
-  wrong = "mataphysical" and right = "metaphysical"
-  or
-  wrong = "materalists" and right = "materialist"
-  or
-  wrong = "mathamatics" and right = "mathematics"
-  or
-  wrong = "mathematican" and right = "mathematician"
-  or
-  wrong = "mathematicas" and right = "mathematics"
-  or
-  wrong = "matheticians" and right = "mathematicians"
-  or
-  wrong = "mathmatically" and right = "mathematically"
-  or
-  wrong = "mathmatician" and right = "mathematician"
-  or
-  wrong = "mathmaticians" and right = "mathematicians"
-  or
-  wrong = "mccarthyst" and right = "mccarthyist"
-  or
-  wrong = "mchanics" and right = "mechanics"
-  or
-  wrong = "meaninng" and right = "meaning"
-  or
-  wrong = "mear" and right = "mare"
-  or
-  wrong = "mear" and right = "mere"
-  or
-  wrong = "mear" and right = "wear"
-  or
-  wrong = "mechandise" and right = "merchandise"
-  or
-  wrong = "medacine" and right = "medicine"
-  or
-  wrong = "medeival" and right = "medieval"
-  or
-  wrong = "medevial" and right = "medieval"
-  or
-  wrong = "mediciney" and right = "mediciny"
-  or
-  wrong = "medievel" and right = "medieval"
-  or
-  wrong = "mediterainnean" and right = "mediterranean"
-  or
-  wrong = "mediteranean" and right = "mediterranean"
-  or
-  wrong = "meerkrat" and right = "meerkat"
-  or
-  wrong = "melieux" and right = "milieux"
-  or
-  wrong = "membranaphone" and right = "membranophone"
-  or
-  wrong = "memeber" and right = "member"
-  or
-  wrong = "menally" and right = "mentally"
-  or
-  wrong = "meranda" and right = "miranda"
-  or
-  wrong = "meranda" and right = "veranda"
-  or
-  wrong = "mercentile" and right = "mercantile"
-  or
-  wrong = "mesage" and right = "message"
-  or
-  wrong = "messanger" and right = "messenger"
-  or
-  wrong = "messenging" and right = "messaging"
-  or
-  wrong = "messsage" and right = "message"
-  or
-  wrong = "metalic" and right = "metallic"
-  or
-  wrong = "metalurgic" and right = "metallurgic"
-  or
-  wrong = "metalurgical" and right = "metallurgical"
-  or
-  wrong = "metalurgy" and right = "metallurgy"
-  or
-  wrong = "metamorphysis" and right = "metamorphosis"
-  or
-  wrong = "metaphoricial" and right = "metaphorical"
-  or
-  wrong = "meterologist" and right = "meteorologist"
-  or
-  wrong = "meterology" and right = "meteorology"
-  or
-  wrong = "methaphor" and right = "metaphor"
-  or
-  wrong = "methaphors" and right = "metaphors"
-  or
-  wrong = "michagan" and right = "michigan"
-  or
-  wrong = "micoscopy" and right = "microscopy"
-  or
-  wrong = "midwifes" and right = "midwives"
-  or
-  wrong = "mileau" and right = "milieu"
-  or
-  wrong = "milennia" and right = "millennia"
-  or
-  wrong = "milennium" and right = "millennium"
-  or
-  wrong = "mileu" and right = "milieu"
-  or
-  wrong = "miliary" and right = "military"
-  or
-  wrong = "miligram" and right = "milligram"
-  or
-  wrong = "milion" and right = "million"
-  or
-  wrong = "miliraty" and right = "military"
-  or
-  wrong = "millenia" and right = "millennia"
-  or
-  wrong = "millenial" and right = "millennial"
-  or
-  wrong = "millenialism" and right = "millennialism"
-  or
-  wrong = "millenium" and right = "millennium"
-  or
-  wrong = "millepede" and right = "millipede"
-  or
-  wrong = "millioniare" and right = "millionaire"
-  or
-  wrong = "millitant" and right = "militant"
-  or
-  wrong = "millitary" and right = "military"
-  or
-  wrong = "millon" and right = "million"
-  or
-  wrong = "miltary" and right = "military"
-  or
-  wrong = "minature" and right = "miniature"
-  or
-  wrong = "minerial" and right = "mineral"
-  or
-  wrong = "ministery" and right = "ministry"
-  or
-  wrong = "minsitry" and right = "ministry"
-  or
-  wrong = "minstries" and right = "ministries"
-  or
-  wrong = "minstry" and right = "ministry"
-  or
-  wrong = "minumum" and right = "minimum"
-  or
-  wrong = "mirrorred" and right = "mirrored"
-  or
-  wrong = "miscelaneous" and right = "miscellaneous"
-  or
-  wrong = "miscellanious" and right = "miscellaneous"
-  or
-  wrong = "miscellanous" and right = "miscellaneous"
-  or
-  wrong = "mischeivous" and right = "mischievous"
-  or
-  wrong = "mischevious" and right = "mischievous"
-  or
-  wrong = "mischievious" and right = "mischievous"
-  or
-  wrong = "misdameanor" and right = "misdemeanor"
-  or
-  wrong = "misdameanors" and right = "misdemeanors"
-  or
-  wrong = "misdemenor" and right = "misdemeanor"
-  or
-  wrong = "misdemenors" and right = "misdemeanors"
-  or
-  wrong = "misfourtunes" and right = "misfortunes"
-  or
-  wrong = "misile" and right = "missile"
-  or
-  wrong = "misouri" and right = "missouri"
-  or
-  wrong = "mispell" and right = "misspell"
-  or
-  wrong = "mispelled" and right = "misspelled"
-  or
-  wrong = "mispelling" and right = "misspelling"
-  or
-  wrong = "missen" and right = "mizzen"
-  or
-  wrong = "missisipi" and right = "mississippi"
-  or
-  wrong = "missisippi" and right = "mississippi"
-  or
-  wrong = "missle" and right = "missile"
-  or
-  wrong = "missonary" and right = "missionary"
-  or
-  wrong = "misterious" and right = "mysterious"
-  or
-  wrong = "mistery" and right = "mystery"
-  or
-  wrong = "misteryous" and right = "mysterious"
-  or
-  wrong = "mkae" and right = "make"
-  or
-  wrong = "mkaes" and right = "makes"
-  or
-  wrong = "mkaing" and right = "making"
-  or
-  wrong = "mkea" and right = "make"
-  or
-  wrong = "moderm" and right = "modem"
-  or
-  wrong = "modle" and right = "model"
-  or
-  wrong = "moent" and right = "moment"
-  or
-  wrong = "moeny" and right = "money"
-  or
-  wrong = "mohammedans" and right = "muslims"
-  or
-  wrong = "moil" and right = "mohel"
-  or
-  wrong = "moil" and right = "soil"
-  or
-  wrong = "moleclues" and right = "molecules"
-  or
-  wrong = "momento" and right = "memento"
-  or
-  wrong = "monestaries" and right = "monasteries"
-  or
-  wrong = "monestary" and right = "monastery"
-  or
-  wrong = "monestary" and right = "monetary"
-  or
-  wrong = "monickers" and right = "monikers"
-  or
-  wrong = "monolite" and right = "monolithic"
-  or
-  wrong = "monserrat" and right = "montserrat"
-  or
-  wrong = "montains" and right = "mountains"
-  or
-  wrong = "montanous" and right = "mountainous"
-  or
-  wrong = "montnana" and right = "montana"
-  or
-  wrong = "monts" and right = "months"
-  or
-  wrong = "montypic" and right = "monotypic"
-  or
-  wrong = "moreso" and right = "more"
-  or
-  wrong = "morgage" and right = "mortgage"
-  or
-  wrong = "morisette" and right = "morissette"
-  or
-  wrong = "morrisette" and right = "morissette"
-  or
-  wrong = "morroccan" and right = "moroccan"
-  or
-  wrong = "morrocco" and right = "morocco"
-  or
-  wrong = "morroco" and right = "morocco"
-  or
-  wrong = "mortage" and right = "mortgage"
-  or
-  wrong = "mosture" and right = "moisture"
-  or
-  wrong = "motiviated" and right = "motivated"
-  or
-  wrong = "mounth" and right = "month"
-  or
-  wrong = "movei" and right = "movie"
-  or
-  wrong = "movment" and right = "movement"
-  or
-  wrong = "mroe" and right = "more"
-  or
-  wrong = "mucuous" and right = "mucous"
-  or
-  wrong = "muder" and right = "murder"
-  or
-  wrong = "mudering" and right = "murdering"
-  or
-  wrong = "muhammadan" and right = "muslim"
-  or
-  wrong = "multicultralism" and right = "multiculturalism"
-  or
-  wrong = "multipled" and right = "multiplied"
-  or
-  wrong = "multiplers" and right = "multipliers"
-  or
-  wrong = "munbers" and right = "numbers"
-  or
-  wrong = "muncipalities" and right = "municipalities"
-  or
-  wrong = "muncipality" and right = "municipality"
-  or
-  wrong = "munnicipality" and right = "municipality"
-  or
-  wrong = "muscels" and right = "muscles"
-  or
-  wrong = "muscels" and right = "mussels"
-  or
-  wrong = "muscial" and right = "musical"
-  or
-  wrong = "muscician" and right = "musician"
-  or
-  wrong = "muscicians" and right = "musicians"
-  or
-  wrong = "mutiliated" and right = "mutilated"
-  or
-  wrong = "mutiple" and right = "multiple"
-  or
-  wrong = "myraid" and right = "myriad"
-  or
-  wrong = "mysef" and right = "myself"
-  or
-  wrong = "mysogynist" and right = "misogynist"
-  or
-  wrong = "mysogyny" and right = "misogyny"
-  or
-  wrong = "mysterous" and right = "mysterious"
-  or
-  wrong = "mythraic" and right = "mithraic"
-  or
-  wrong = "naieve" and right = "naive"
-  or
-  wrong = "naploeon" and right = "napoleon"
-  or
-  wrong = "napolean" and right = "napoleon"
-  or
-  wrong = "napoleonian" and right = "napoleonic"
-  or
-  wrong = "naturaly" and right = "naturally"
-  or
-  wrong = "naturely" and right = "naturally"
-  or
-  wrong = "naturual" and right = "natural"
-  or
-  wrong = "naturually" and right = "naturally"
-  or
-  wrong = "nazereth" and right = "nazareth"
-  or
-  wrong = "neccesarily" and right = "necessarily"
-  or
-  wrong = "neccesary" and right = "necessary"
-  or
-  wrong = "neccessarily" and right = "necessarily"
-  or
-  wrong = "neccessary" and right = "necessary"
-  or
-  wrong = "neccessities" and right = "necessities"
-  or
-  wrong = "necesarily" and right = "necessarily"
-  or
-  wrong = "necesary" and right = "necessary"
-  or
-  wrong = "necessiate" and right = "necessitate"
-  or
-  wrong = "neglible" and right = "negligible"
-  or
-  wrong = "negligable" and right = "negligible"
-  or
-  wrong = "negociate" and right = "negotiate"
-  or
-  wrong = "negociation" and right = "negotiation"
-  or
-  wrong = "negociations" and right = "negotiations"
-  or
-  wrong = "negotation" and right = "negotiation"
-  or
-  wrong = "neice" and right = "nice"
-  or
-  wrong = "neice" and right = "niece"
-  or
-  wrong = "neigborhood" and right = "neighborhood"
-  or
-  wrong = "neigbour" and right = "neighbor"
-  or
-  wrong = "neigbour" and right = "neighbour"
-  or
-  wrong = "neigbourhood" and right = "neighbourhood"
-  or
-  wrong = "neigbouring" and right = "neighboring"
-  or
-  wrong = "neigbouring" and right = "neighbouring"
-  or
-  wrong = "neigbours" and right = "neighbors"
-  or
-  wrong = "neigbours" and right = "neighbours"
-  or
-  wrong = "neolitic" and right = "neolithic"
-  or
-  wrong = "nessasarily" and right = "necessarily"
-  or
-  wrong = "nessecary" and right = "necessary"
-  or
-  wrong = "nestin" and right = "nesting"
-  or
-  wrong = "neverthless" and right = "nevertheless"
-  or
-  wrong = "newletters" and right = "newsletters"
-  or
-  wrong = "nickle" and right = "nickel"
-  or
-  wrong = "nightime" and right = "nighttime"
-  or
-  wrong = "nineth" and right = "ninth"
-  or
-  wrong = "ninteenth" and right = "nineteenth"
-  or
-  wrong = "ninty" and right = "ninety"
-  or
-  wrong = "nkow" and right = "know"
-  or
-  wrong = "nkwo" and right = "know"
-  or
-  wrong = "nmae" and right = "name"
-  or
-  wrong = "noncombatents" and right = "noncombatants"
-  or
-  wrong = "nonsence" and right = "nonsense"
-  or
-  wrong = "nontheless" and right = "nonetheless"
-  or
-  wrong = "norhern" and right = "northern"
-  or
-  wrong = "northen" and right = "northern"
-  or
-  wrong = "northereastern" and right = "northeastern"
-  or
-  wrong = "notabley" and right = "notably"
-  or
-  wrong = "noteable" and right = "notable"
-  or
-  wrong = "noteably" and right = "notably"
-  or
-  wrong = "noteriety" and right = "notoriety"
-  or
-  wrong = "noth" and right = "north"
-  or
-  wrong = "nothern" and right = "northern"
-  or
-  wrong = "noticable" and right = "noticeable"
-  or
-  wrong = "noticably" and right = "noticeably"
-  or
-  wrong = "notications" and right = "notifications"
-  or
-  wrong = "noticeing" and right = "noticing"
-  or
-  wrong = "noticible" and right = "noticeable"
-  or
-  wrong = "notwhithstanding" and right = "notwithstanding"
-  or
-  wrong = "noveau" and right = "nouveau"
-  or
-  wrong = "novermber" and right = "november"
-  or
-  wrong = "nowdays" and right = "nowadays"
-  or
-  wrong = "nowe" and right = "now"
-  or
-  wrong = "nto" and right = "not"
-  or
-  wrong = "nubmer" and right = "number"
-  or
-  wrong = "nucular" and right = "nuclear"
-  or
-  wrong = "nuculear" and right = "nuclear"
-  or
-  wrong = "nuisanse" and right = "nuisance"
-  or
-  wrong = "nullabour" and right = "nullarbor"
-  or
-  wrong = "numberous" and right = "numerous"
-  or
-  wrong = "nuremburg" and right = "nuremberg"
-  or
-  wrong = "nusance" and right = "nuisance"
-  or
-  wrong = "nutritent" and right = "nutrient"
-  or
-  wrong = "nutritents" and right = "nutrients"
-  or
-  wrong = "nuturing" and right = "nurturing"
-  or
-  wrong = "obect" and right = "object"
-  or
-  wrong = "obediance" and right = "obedience"
-  or
-  wrong = "obediant" and right = "obedient"
-  or
-  wrong = "obejct" and right = "object"
-  or
-  wrong = "obession" and right = "obsession"
-  or
-  wrong = "obssessed" and right = "obsessed"
-  or
-  wrong = "obstacal" and right = "obstacle"
-  or
-  wrong = "obstancles" and right = "obstacles"
-  or
-  wrong = "obstruced" and right = "obstructed"
-  or
-  wrong = "ocasion" and right = "occasion"
-  or
-  wrong = "ocasional" and right = "occasional"
-  or
-  wrong = "ocasionally" and right = "occasionally"
-  or
-  wrong = "ocasionaly" and right = "occasionally"
-  or
-  wrong = "ocasioned" and right = "occasioned"
-  or
-  wrong = "ocasions" and right = "occasions"
-  or
-  wrong = "ocassion" and right = "occasion"
-  or
-  wrong = "ocassional" and right = "occasional"
-  or
-  wrong = "ocassionally" and right = "occasionally"
-  or
-  wrong = "ocassionaly" and right = "occasionally"
-  or
-  wrong = "ocassioned" and right = "occasioned"
-  or
-  wrong = "ocassions" and right = "occasions"
-  or
-  wrong = "occaison" and right = "occasion"
-  or
-  wrong = "occassion" and right = "occasion"
-  or
-  wrong = "occassional" and right = "occasional"
-  or
-  wrong = "occassionally" and right = "occasionally"
-  or
-  wrong = "occassionaly" and right = "occasionally"
-  or
-  wrong = "occassioned" and right = "occasioned"
-  or
-  wrong = "occassions" and right = "occasions"
-  or
-  wrong = "occationally" and right = "occasionally"
-  or
-  wrong = "occour" and right = "occur"
-  or
-  wrong = "occurance" and right = "occurrence"
-  or
-  wrong = "occurances" and right = "occurrences"
-  or
-  wrong = "occured" and right = "occurred"
-  or
-  wrong = "occurence" and right = "occurrence"
-  or
-  wrong = "occurences" and right = "occurrences"
-  or
-  wrong = "occuring" and right = "occurring"
-  or
-  wrong = "occurr" and right = "occur"
-  or
-  wrong = "occurrance" and right = "occurrence"
-  or
-  wrong = "occurrances" and right = "occurrences"
-  or
-  wrong = "octohedra" and right = "octahedra"
-  or
-  wrong = "octohedral" and right = "octahedral"
-  or
-  wrong = "octohedron" and right = "octahedron"
-  or
-  wrong = "ocuntries" and right = "countries"
-  or
-  wrong = "ocuntry" and right = "country"
-  or
-  wrong = "ocurr" and right = "occur"
-  or
-  wrong = "ocurrance" and right = "occurrence"
-  or
-  wrong = "ocurred" and right = "occurred"
-  or
-  wrong = "ocurrence" and right = "occurrence"
-  or
-  wrong = "offcers" and right = "officers"
-  or
-  wrong = "offcially" and right = "officially"
-  or
-  wrong = "offereings" and right = "offerings"
-  or
-  wrong = "offical" and right = "official"
-  or
-  wrong = "offically" and right = "officially"
-  or
-  wrong = "officals" and right = "officials"
-  or
-  wrong = "officaly" and right = "officially"
-  or
-  wrong = "officialy" and right = "officially"
-  or
-  wrong = "offred" and right = "offered"
-  or
-  wrong = "oftenly" and right = "often"
-  or
-  wrong = "oging" and right = "going"
-  or
-  wrong = "oging" and right = "ogling"
-  or
-  wrong = "oject" and right = "object"
-  or
-  wrong = "omision" and right = "omission"
-  or
-  wrong = "omited" and right = "omitted"
-  or
-  wrong = "omiting" and right = "omitting"
-  or
-  wrong = "omlette" and right = "omelette"
-  or
-  wrong = "ommision" and right = "omission"
-  or
-  wrong = "ommited" and right = "omitted"
-  or
-  wrong = "ommiting" and right = "omitting"
-  or
-  wrong = "ommitted" and right = "omitted"
-  or
-  wrong = "ommitting" and right = "omitting"
-  or
-  wrong = "omniverous" and right = "omnivorous"
-  or
-  wrong = "omniverously" and right = "omnivorously"
-  or
-  wrong = "omre" and right = "more"
-  or
-  wrong = "onot" and right = "not"
-  or
-  wrong = "onot" and right = "note"
-  or
-  wrong = "onyl" and right = "only"
-  or
-  wrong = "openess" and right = "openness"
-  or
-  wrong = "oponent" and right = "opponent"
-  or
-  wrong = "oportunity" and right = "opportunity"
-  or
-  wrong = "opose" and right = "oppose"
-  or
-  wrong = "oposite" and right = "opposite"
-  or
-  wrong = "oposition" and right = "opposition"
-  or
-  wrong = "oppenly" and right = "openly"
-  or
-  wrong = "oppinion" and right = "opinion"
-  or
-  wrong = "opponant" and right = "opponent"
-  or
-  wrong = "oppononent" and right = "opponent"
-  or
-  wrong = "oppositition" and right = "opposition"
-  or
-  wrong = "oppossed" and right = "opposed"
-  or
-  wrong = "opprotunity" and right = "opportunity"
-  or
-  wrong = "opression" and right = "oppression"
-  or
-  wrong = "opressive" and right = "oppressive"
-  or
-  wrong = "opthalmic" and right = "ophthalmic"
-  or
-  wrong = "opthalmologist" and right = "ophthalmologist"
-  or
-  wrong = "opthalmology" and right = "ophthalmology"
-  or
-  wrong = "opthamologist" and right = "ophthalmologist"
-  or
-  wrong = "optmizations" and right = "optimizations"
-  or
-  wrong = "optomism" and right = "optimism"
-  or
-  wrong = "orded" and right = "ordered"
-  or
-  wrong = "organim" and right = "organism"
-  or
-  wrong = "organistion" and right = "organisation"
-  or
-  wrong = "organiztion" and right = "organization"
-  or
-  wrong = "orgin" and right = "organ"
-  or
-  wrong = "orgin" and right = "origin"
-  or
-  wrong = "orginal" and right = "original"
-  or
-  wrong = "orginally" and right = "originally"
-  or
-  wrong = "orginize" and right = "organise"
-  or
-  wrong = "oridinarily" and right = "ordinarily"
-  or
-  wrong = "origanaly" and right = "originally"
-  or
-  wrong = "originall" and right = "original"
-  or
-  wrong = "originall" and right = "originally"
-  or
-  wrong = "originaly" and right = "originally"
-  or
-  wrong = "originially" and right = "originally"
-  or
-  wrong = "originnally" and right = "originally"
-  or
-  wrong = "origional" and right = "original"
-  or
-  wrong = "orignally" and right = "originally"
-  or
-  wrong = "orignially" and right = "originally"
-  or
-  wrong = "otehr" and right = "other"
-  or
-  wrong = "oublisher" and right = "publisher"
-  or
-  wrong = "ouevre" and right = "oeuvre"
-  or
-  wrong = "ouput" and right = "output"
-  or
-  wrong = "oustanding" and right = "outstanding"
-  or
-  wrong = "overriden" and right = "overridden"
-  or
-  wrong = "overshaddowed" and right = "overshadowed"
-  or
-  wrong = "overwelming" and right = "overwhelming"
-  or
-  wrong = "overwheliming" and right = "overwhelming"
-  or
-  wrong = "owrk" and right = "work"
-  or
-  wrong = "owudl" and right = "would"
-  or
-  wrong = "oxigen" and right = "oxygen"
-  or
-  wrong = "oximoron" and right = "oxymoron"
-  or
-  wrong = "p0enis" and right = "penis"
-  or
-  wrong = "paide" and right = "paid"
-  or
-  wrong = "paitience" and right = "patience"
-  or
-  wrong = "palce" and right = "palace"
-  or
-  wrong = "palce" and right = "place"
-  or
-  wrong = "paleolitic" and right = "paleolithic"
-  or
-  wrong = "paliamentarian" and right = "parliamentarian"
-  or
-  wrong = "palistian" and right = "palestinian"
-  or
-  wrong = "palistinian" and right = "palestinian"
-  or
-  wrong = "palistinians" and right = "palestinians"
-  or
-  wrong = "pallete" and right = "palette"
-  or
-  wrong = "pamflet" and right = "pamphlet"
-  or
-  wrong = "pamplet" and right = "pamphlet"
-  or
-  wrong = "pantomine" and right = "pantomime"
-  or
-  wrong = "papanicalou" and right = "papanicolaou"
-  or
-  wrong = "paralel" and right = "parallel"
-  or
-  wrong = "paralell" and right = "parallel"
-  or
-  wrong = "paralelly" and right = "parallelly"
-  or
-  wrong = "paralely" and right = "parallelly"
-  or
-  wrong = "parallely" and right = "parallelly"
-  or
-  wrong = "paramater" and right = "parameter"
-  or
-  wrong = "paramters" and right = "parameters"
-  or
-  wrong = "parametarized" and right = "parameterized"
-  or
-  wrong = "paranthesis" and right = "parenthesis"
-  or
-  wrong = "paraphenalia" and right = "paraphernalia"
-  or
-  wrong = "parellels" and right = "parallels"
-  or
-  wrong = "parisitic" and right = "parasitic"
-  or
-  wrong = "parituclar" and right = "particular"
-  or
-  wrong = "parliment" and right = "parliament"
-  or
-  wrong = "parrakeets" and right = "parakeets"
-  or
-  wrong = "parralel" and right = "parallel"
-  or
-  wrong = "parrallel" and right = "parallel"
-  or
-  wrong = "parrallell" and right = "parallel"
-  or
-  wrong = "parrallelly" and right = "parallelly"
-  or
-  wrong = "parrallely" and right = "parallelly"
-  or
-  wrong = "partialy" and right = "partially"
-  or
-  wrong = "particually" and right = "particularly"
-  or
-  wrong = "particualr" and right = "particular"
-  or
-  wrong = "particuarly" and right = "particularly"
-  or
-  wrong = "particularily" and right = "particularly"
-  or
-  wrong = "particulary" and right = "particularly"
-  or
-  wrong = "pary" and right = "party"
-  or
-  wrong = "pased" and right = "passed"
-  or
-  wrong = "pasengers" and right = "passengers"
-  or
-  wrong = "passerbys" and right = "passersby"
-  or
-  wrong = "pasttime" and right = "pastime"
-  or
-  wrong = "pastural" and right = "pastoral"
-  or
-  wrong = "paticular" and right = "particular"
-  or
-  wrong = "pattented" and right = "patented"
-  or
-  wrong = "pavillion" and right = "pavilion"
-  or
-  wrong = "payed" and right = "paid"
-  or
-  wrong = "pblisher" and right = "publisher"
-  or
-  wrong = "pbulisher" and right = "publisher"
-  or
-  wrong = "peageant" and right = "pageant"
-  or
-  wrong = "peaple" and right = "people"
-  or
-  wrong = "peaples" and right = "peoples"
-  or
-  wrong = "peculure" and right = "peculiar"
-  or
-  wrong = "pedestrain" and right = "pedestrian"
-  or
-  wrong = "peformed" and right = "performed"
-  or
-  wrong = "peice" and right = "piece"
-  or
-  wrong = "peloponnes" and right = "peloponnesus"
-  or
-  wrong = "penatly" and right = "penalty"
-  or
-  wrong = "penerator" and right = "penetrator"
-  or
-  wrong = "penisula" and right = "peninsula"
-  or
-  wrong = "penisular" and right = "peninsular"
-  or
-  wrong = "penninsula" and right = "peninsula"
-  or
-  wrong = "penninsular" and right = "peninsular"
-  or
-  wrong = "pennisula" and right = "peninsula"
-  or
-  wrong = "pennyslvania" and right = "pennsylvania"
-  or
-  wrong = "pensinula" and right = "peninsula"
-  or
-  wrong = "pensle" and right = "pencil"
-  or
-  wrong = "peom" and right = "poem"
-  or
-  wrong = "peoms" and right = "poems"
-  or
-  wrong = "peopel" and right = "people"
-  or
-  wrong = "peopels" and right = "peoples"
-  or
-  wrong = "peotry" and right = "poetry"
-  or
-  wrong = "perade" and right = "parade"
-  or
-  wrong = "percepted" and right = "perceived"
-  or
-  wrong = "percieve" and right = "perceive"
-  or
-  wrong = "percieved" and right = "perceived"
-  or
-  wrong = "perenially" and right = "perennially"
-  or
-  wrong = "peretrator" and right = "perpetrator"
-  or
-  wrong = "perfomance" and right = "performance"
-  or
-  wrong = "perfomers" and right = "performers"
-  or
-  wrong = "performence" and right = "performance"
-  or
-  wrong = "performes" and right = "performed"
-  or
-  wrong = "performes" and right = "performs"
-  or
-  wrong = "perhasp" and right = "perhaps"
-  or
-  wrong = "perheaps" and right = "perhaps"
-  or
-  wrong = "perhpas" and right = "perhaps"
-  or
-  wrong = "peripathetic" and right = "peripatetic"
-  or
-  wrong = "peristent" and right = "persistent"
-  or
-  wrong = "perjery" and right = "perjury"
-  or
-  wrong = "perjorative" and right = "pejorative"
-  or
-  wrong = "permanant" and right = "permanent"
-  or
-  wrong = "permenant" and right = "permanent"
-  or
-  wrong = "permenantly" and right = "permanently"
-  or
-  wrong = "permissable" and right = "permissible"
-  or
-  wrong = "perogative" and right = "prerogative"
-  or
-  wrong = "peronal" and right = "personal"
-  or
-  wrong = "perosnality" and right = "personality"
-  or
-  wrong = "perpertrated" and right = "perpetrated"
-  or
-  wrong = "perphas" and right = "perhaps"
-  or
-  wrong = "perpindicular" and right = "perpendicular"
-  or
-  wrong = "persan" and right = "person"
-  or
-  wrong = "perseverence" and right = "perseverance"
-  or
-  wrong = "persistance" and right = "persistence"
-  or
-  wrong = "persistant" and right = "persistent"
-  or
-  wrong = "personel" and right = "personal"
-  or
-  wrong = "personel" and right = "personnel"
-  or
-  wrong = "personell" and right = "personnel"
-  or
-  wrong = "personnell" and right = "personnel"
-  or
-  wrong = "persuded" and right = "persuaded"
-  or
-  wrong = "persue" and right = "pursue"
-  or
-  wrong = "persued" and right = "pursued"
-  or
-  wrong = "persuing" and right = "pursuing"
-  or
-  wrong = "persuit" and right = "pursuit"
-  or
-  wrong = "persuits" and right = "pursuits"
-  or
-  wrong = "pertubation" and right = "perturbation"
-  or
-  wrong = "pertubations" and right = "perturbations"
-  or
-  wrong = "pessiary" and right = "pessary"
-  or
-  wrong = "petetion" and right = "petition"
-  or
-  wrong = "pharoah" and right = "pharaoh"
-  or
-  wrong = "phenomenom" and right = "phenomenon"
-  or
-  wrong = "phenomenonal" and right = "phenomenal"
-  or
-  wrong = "phenomenonly" and right = "phenomenally"
-  or
-  wrong = "phenomonenon" and right = "phenomenon"
-  or
-  wrong = "phenomonon" and right = "phenomenon"
-  or
-  wrong = "phenonmena" and right = "phenomena"
-  or
-  wrong = "philipines" and right = "philippines"
-  or
-  wrong = "philisopher" and right = "philosopher"
-  or
-  wrong = "philisophical" and right = "philosophical"
-  or
-  wrong = "philisophy" and right = "philosophy"
-  or
-  wrong = "phillipine" and right = "philippine"
-  or
-  wrong = "phillipines" and right = "philippines"
-  or
-  wrong = "phillippines" and right = "philippines"
-  or
-  wrong = "phillosophically" and right = "philosophically"
-  or
-  wrong = "philospher" and right = "philosopher"
-  or
-  wrong = "philosphies" and right = "philosophies"
-  or
-  wrong = "philosphy" and right = "philosophy"
-  or
-  wrong = "phonecian" and right = "phoenecian"
-  or
-  wrong = "phongraph" and right = "phonograph"
-  or
-  wrong = "phylosophical" and right = "philosophical"
-  or
-  wrong = "physicaly" and right = "physically"
-  or
-  wrong = "piblisher" and right = "publisher"
-  or
-  wrong = "pich" and right = "pitch"
-  or
-  wrong = "pilgrimmage" and right = "pilgrimage"
-  or
-  wrong = "pilgrimmages" and right = "pilgrimages"
-  or
-  wrong = "pinapple" and right = "pineapple"
-  or
-  wrong = "pinnaple" and right = "pineapple"
-  or
-  wrong = "pinoneered" and right = "pioneered"
-  or
-  wrong = "plagarism" and right = "plagiarism"
-  or
-  wrong = "planation" and right = "plantation"
-  or
-  wrong = "planed" and right = "planned"
-  or
-  wrong = "plantiff" and right = "plaintiff"
-  or
-  wrong = "plateu" and right = "plateau"
-  or
-  wrong = "plausable" and right = "plausible"
-  or
-  wrong = "playright" and right = "playwright"
-  or
-  wrong = "playwrite" and right = "playwright"
-  or
-  wrong = "playwrites" and right = "playwrights"
-  or
-  wrong = "pleasent" and right = "pleasant"
-  or
-  wrong = "plebicite" and right = "plebiscite"
-  or
-  wrong = "plesant" and right = "pleasant"
-  or
-  wrong = "poenis" and right = "penis"
-  or
-  wrong = "poeoples" and right = "peoples"
-  or
-  wrong = "poety" and right = "poetry"
-  or
-  wrong = "poisin" and right = "poison"
-  or
-  wrong = "polical" and right = "political"
-  or
-  wrong = "polinator" and right = "pollinator"
-  or
-  wrong = "polinators" and right = "pollinators"
-  or
-  wrong = "politican" and right = "politician"
-  or
-  wrong = "politicans" and right = "politicians"
-  or
-  wrong = "poltical" and right = "political"
-  or
-  wrong = "polute" and right = "pollute"
-  or
-  wrong = "poluted" and right = "polluted"
-  or
-  wrong = "polutes" and right = "pollutes"
-  or
-  wrong = "poluting" and right = "polluting"
-  or
-  wrong = "polution" and right = "pollution"
-  or
-  wrong = "polyphonyic" and right = "polyphonic"
-  or
-  wrong = "polysaccaride" and right = "polysaccharide"
-  or
-  wrong = "polysaccharid" and right = "polysaccharide"
-  or
-  wrong = "pomegranite" and right = "pomegranate"
-  or
-  wrong = "pomotion" and right = "promotion"
-  or
-  wrong = "poportional" and right = "proportional"
-  or
-  wrong = "popoulation" and right = "population"
-  or
-  wrong = "popularaty" and right = "popularity"
-  or
-  wrong = "populare" and right = "popular"
-  or
-  wrong = "populer" and right = "popular"
-  or
-  wrong = "porshan" and right = "portion"
-  or
-  wrong = "porshon" and right = "portion"
-  or
-  wrong = "portait" and right = "portrait"
-  or
-  wrong = "portayed" and right = "portrayed"
-  or
-  wrong = "portraing" and right = "portraying"
-  or
-  wrong = "portugese" and right = "portuguese"
-  or
-  wrong = "portuguease" and right = "portuguese"
-  or
-  wrong = "portugues" and right = "portuguese"
-  or
-  wrong = "posess" and right = "possess"
-  or
-  wrong = "posessed" and right = "possessed"
-  or
-  wrong = "posesses" and right = "possesses"
-  or
-  wrong = "posessing" and right = "possessing"
-  or
-  wrong = "posession" and right = "possession"
-  or
-  wrong = "posessions" and right = "possessions"
-  or
-  wrong = "posion" and right = "poison"
-  or
-  wrong = "positon" and right = "position"
-  or
-  wrong = "positon" and right = "positron"
-  or
-  wrong = "possable" and right = "possible"
-  or
-  wrong = "possably" and right = "possibly"
-  or
-  wrong = "posseses" and right = "possesses"
-  or
-  wrong = "possesing" and right = "possessing"
-  or
-  wrong = "possesion" and right = "possession"
-  or
-  wrong = "possessess" and right = "possesses"
-  or
-  wrong = "possibile" and right = "possible"
-  or
-  wrong = "possibilty" and right = "possibility"
-  or
-  wrong = "possiblility" and right = "possibility"
-  or
-  wrong = "possiblilty" and right = "possibility"
-  or
-  wrong = "possiblities" and right = "possibilities"
-  or
-  wrong = "possiblity" and right = "possibility"
-  or
-  wrong = "possition" and right = "position"
-  or
-  wrong = "postdam" and right = "potsdam"
-  or
-  wrong = "posthomous" and right = "posthumous"
-  or
-  wrong = "postion" and right = "position"
-  or
-  wrong = "postive" and right = "positive"
-  or
-  wrong = "potatos" and right = "potatoes"
-  or
-  wrong = "potrait" and right = "portrait"
-  or
-  wrong = "potrayed" and right = "portrayed"
-  or
-  wrong = "poulations" and right = "populations"
-  or
-  wrong = "poverful" and right = "powerful"
-  or
-  wrong = "poweful" and right = "powerful"
-  or
-  wrong = "powerfull" and right = "powerful"
-  or
-  wrong = "ppublisher" and right = "publisher"
-  or
-  wrong = "practial" and right = "practical"
-  or
-  wrong = "practially" and right = "practically"
-  or
-  wrong = "practicaly" and right = "practically"
-  or
-  wrong = "practicioner" and right = "practitioner"
-  or
-  wrong = "practicioners" and right = "practitioners"
-  or
-  wrong = "practicly" and right = "practically"
-  or
-  wrong = "practioner" and right = "practitioner"
-  or
-  wrong = "practioners" and right = "practitioners"
-  or
-  wrong = "prairy" and right = "prairie"
-  or
-  wrong = "prarie" and right = "prairie"
-  or
-  wrong = "praries" and right = "prairies"
-  or
-  wrong = "pratice" and right = "practice"
-  or
-  wrong = "preample" and right = "preamble"
-  or
-  wrong = "precedessor" and right = "predecessor"
-  or
-  wrong = "preceed" and right = "precede"
-  or
-  wrong = "preceeded" and right = "preceded"
-  or
-  wrong = "preceeding" and right = "preceding"
-  or
-  wrong = "preceeds" and right = "precedes"
-  or
-  wrong = "precendence" and right = "precedence"
-  or
-  wrong = "precentage" and right = "percentage"
-  or
-  wrong = "precice" and right = "precise"
-  or
-  wrong = "precisly" and right = "precisely"
-  or
-  wrong = "precurser" and right = "precursor"
-  or
-  wrong = "predecesors" and right = "predecessors"
-  or
-  wrong = "predicatble" and right = "predictable"
-  or
-  wrong = "predicitons" and right = "predictions"
-  or
-  wrong = "predomiantly" and right = "predominately"
-  or
-  wrong = "prefered" and right = "preferred"
-  or
-  wrong = "prefering" and right = "preferring"
-  or
-  wrong = "preferrably" and right = "preferably"
-  or
-  wrong = "pregancies" and right = "pregnancies"
-  or
-  wrong = "preiod" and right = "period"
-  or
-  wrong = "preliferation" and right = "proliferation"
-  or
-  wrong = "premeire" and right = "premiere"
-  or
-  wrong = "premeired" and right = "premiered"
-  or
-  wrong = "premillenial" and right = "premillennial"
-  or
-  wrong = "preminence" and right = "preeminence"
-  or
-  wrong = "premission" and right = "permission"
-  or
-  wrong = "premonasterians" and right = "premonstratensians"
-  or
-  wrong = "preocupation" and right = "preoccupation"
-  or
-  wrong = "prepair" and right = "prepare"
-  or
-  wrong = "prepartion" and right = "preparation"
-  or
-  wrong = "prepatory" and right = "preparatory"
-  or
-  wrong = "preperation" and right = "preparation"
-  or
-  wrong = "preperations" and right = "preparations"
-  or
-  wrong = "preriod" and right = "period"
-  or
-  wrong = "presedential" and right = "presidential"
-  or
-  wrong = "presense" and right = "presence"
-  or
-  wrong = "presidenital" and right = "presidential"
-  or
-  wrong = "presidental" and right = "presidential"
-  or
-  wrong = "presitgious" and right = "prestigious"
-  or
-  wrong = "prespective" and right = "perspective"
-  or
-  wrong = "prestigeous" and right = "prestigious"
-  or
-  wrong = "prestigous" and right = "prestigious"
-  or
-  wrong = "presumabely" and right = "presumably"
-  or
-  wrong = "presumibly" and right = "presumably"
-  or
-  wrong = "pretection" and right = "protection"
-  or
-  wrong = "prevelant" and right = "prevalent"
-  or
-  wrong = "preverse" and right = "perverse"
-  or
-  wrong = "previvous" and right = "previous"
-  or
-  wrong = "pricipal" and right = "principal"
-  or
-  wrong = "priciple" and right = "principle"
-  or
-  wrong = "priestood" and right = "priesthood"
-  or
-  wrong = "primarly" and right = "primarily"
-  or
-  wrong = "primative" and right = "primitive"
-  or
-  wrong = "primatively" and right = "primitively"
-  or
-  wrong = "primatives" and right = "primitives"
-  or
-  wrong = "primordal" and right = "primordial"
-  or
-  wrong = "principaly" and right = "principality"
-  or
-  wrong = "principial" and right = "principal"
-  or
-  wrong = "principlaity" and right = "principality"
-  or
-  wrong = "principly" and right = "principally"
-  or
-  wrong = "prinicipal" and right = "principal"
-  or
-  wrong = "privalege" and right = "privilege"
-  or
-  wrong = "privaleges" and right = "privileges"
-  or
-  wrong = "priveledges" and right = "privileges"
-  or
-  wrong = "privelege" and right = "privilege"
-  or
-  wrong = "priveleged" and right = "privileged"
-  or
-  wrong = "priveleges" and right = "privileges"
-  or
-  wrong = "privelige" and right = "privilege"
-  or
-  wrong = "priveliged" and right = "privileged"
-  or
-  wrong = "priveliges" and right = "privileges"
-  or
-  wrong = "privelleges" and right = "privileges"
-  or
-  wrong = "privilage" and right = "privilege"
-  or
-  wrong = "priviledge" and right = "privilege"
-  or
-  wrong = "priviledges" and right = "privileges"
-  or
-  wrong = "privledge" and right = "privilege"
-  or
-  wrong = "privte" and right = "private"
-  or
-  wrong = "probabilaty" and right = "probability"
-  or
-  wrong = "probablistic" and right = "probabilistic"
-  or
-  wrong = "probablly" and right = "probably"
-  or
-  wrong = "probalibity" and right = "probability"
-  or
-  wrong = "probaly" and right = "probably"
-  or
-  wrong = "probelm" and right = "problem"
-  or
-  wrong = "proccess" and right = "process"
-  or
-  wrong = "proccessing" and right = "processing"
-  or
-  wrong = "procede" and right = "precede"
-  or
-  wrong = "procede" and right = "proceed"
-  or
-  wrong = "proceded" and right = "preceded"
-  or
-  wrong = "proceded" and right = "proceeded"
-  or
-  wrong = "procedes" and right = "precedes"
-  or
-  wrong = "procedes" and right = "proceeds"
-  or
-  wrong = "procedger" and right = "procedure"
-  or
-  wrong = "proceding" and right = "preceding"
-  or
-  wrong = "proceding" and right = "proceeding"
-  or
-  wrong = "procedings" and right = "proceedings"
-  or
-  wrong = "proceedure" and right = "procedure"
-  or
-  wrong = "proces" and right = "process"
-  or
-  wrong = "procesed" and right = "processed"
-  or
-  wrong = "processer" and right = "processor"
-  or
-  wrong = "proclaimation" and right = "proclamation"
-  or
-  wrong = "proclamed" and right = "proclaimed"
-  or
-  wrong = "proclaming" and right = "proclaiming"
-  or
-  wrong = "proclomation" and right = "proclamation"
-  or
-  wrong = "profesion" and right = "profession"
-  or
-  wrong = "profesion" and right = "profusion"
-  or
-  wrong = "profesor" and right = "professor"
-  or
-  wrong = "professer" and right = "professor"
-  or
-  wrong = "proffesed" and right = "professed"
-  or
-  wrong = "proffesion" and right = "profession"
-  or
-  wrong = "proffesional" and right = "professional"
-  or
-  wrong = "proffesor" and right = "professor"
-  or
-  wrong = "profilic" and right = "prolific"
-  or
-  wrong = "progessed" and right = "progressed"
-  or
-  wrong = "progidy" and right = "prodigy"
-  or
-  wrong = "programable" and right = "programmable"
-  or
-  wrong = "progrom" and right = "pogrom"
-  or
-  wrong = "progrom" and right = "program"
-  or
-  wrong = "progroms" and right = "pogroms"
-  or
-  wrong = "progroms" and right = "programs"
-  or
-  wrong = "prohabition" and right = "prohibition"
-  or
-  wrong = "prologomena" and right = "prolegomena"
-  or
-  wrong = "prominance" and right = "prominence"
-  or
-  wrong = "prominant" and right = "prominent"
-  or
-  wrong = "prominantly" and right = "prominently"
-  or
-  wrong = "prominately" and right = "predominately"
-  or
-  wrong = "prominately" and right = "prominently"
-  or
-  wrong = "promiscous" and right = "promiscuous"
-  or
-  wrong = "promotted" and right = "promoted"
-  or
-  wrong = "pronomial" and right = "pronominal"
-  or
-  wrong = "pronouced" and right = "pronounced"
-  or
-  wrong = "pronounched" and right = "pronounced"
-  or
-  wrong = "pronounciation" and right = "pronunciation"
-  or
-  wrong = "proove" and right = "prove"
-  or
-  wrong = "prooved" and right = "proved"
-  or
-  wrong = "prophacy" and right = "prophecy"
-  or
-  wrong = "propietary" and right = "proprietary"
-  or
-  wrong = "propmted" and right = "prompted"
-  or
-  wrong = "propoganda" and right = "propaganda"
-  or
-  wrong = "propogate" and right = "propagate"
-  or
-  wrong = "propogates" and right = "propagates"
-  or
-  wrong = "propogation" and right = "propagation"
-  or
-  wrong = "propostion" and right = "proposition"
-  or
-  wrong = "propotions" and right = "proportions"
-  or
-  wrong = "propper" and right = "proper"
-  or
-  wrong = "propperly" and right = "properly"
-  or
-  wrong = "proprietory" and right = "proprietary"
-  or
-  wrong = "proseletyzing" and right = "proselytizing"
-  or
-  wrong = "protaganist" and right = "protagonist"
-  or
-  wrong = "protaganists" and right = "protagonists"
-  or
-  wrong = "protocal" and right = "protocol"
-  or
-  wrong = "protoganist" and right = "protagonist"
-  or
-  wrong = "prototpe" and right = "prototype"
-  or
-  wrong = "protoype" and right = "prototype"
-  or
-  wrong = "protrayed" and right = "portrayed"
-  or
-  wrong = "protruberance" and right = "protuberance"
-  or
-  wrong = "protruberances" and right = "protuberances"
-  or
-  wrong = "prouncements" and right = "pronouncements"
-  or
-  wrong = "provacative" and right = "provocative"
-  or
-  wrong = "provded" and right = "provided"
-  or
-  wrong = "provicial" and right = "provincial"
-  or
-  wrong = "provinicial" and right = "provincial"
-  or
-  wrong = "provisiosn" and right = "provision"
-  or
-  wrong = "provisonal" and right = "provisional"
-  or
-  wrong = "proximty" and right = "proximity"
-  or
-  wrong = "pseudononymous" and right = "pseudonymous"
-  or
-  wrong = "pseudonyn" and right = "pseudonym"
-  or
-  wrong = "psuedo" and right = "pseudo"
-  or
-  wrong = "psycology" and right = "psychology"
-  or
-  wrong = "psyhic" and right = "psychic"
-  or
-  wrong = "pubilsher" and right = "publisher"
-  or
-  wrong = "pubisher" and right = "publisher"
-  or
-  wrong = "publiaher" and right = "publisher"
-  or
-  wrong = "publically" and right = "publicly"
-  or
-  wrong = "publicaly" and right = "publicly"
-  or
-  wrong = "publicher" and right = "publisher"
-  or
-  wrong = "publihser" and right = "publisher"
-  or
-  wrong = "publisehr" and right = "publisher"
-  or
-  wrong = "publiser" and right = "publisher"
-  or
-  wrong = "publisger" and right = "publisher"
-  or
-  wrong = "publisheed" and right = "published"
-  or
-  wrong = "publisherr" and right = "publisher"
-  or
-  wrong = "publishher" and right = "publisher"
-  or
-  wrong = "publishor" and right = "publisher"
-  or
-  wrong = "publishre" and right = "publisher"
-  or
-  wrong = "publissher" and right = "publisher"
-  or
-  wrong = "publlisher" and right = "publisher"
-  or
-  wrong = "publsiher" and right = "publisher"
-  or
-  wrong = "publusher" and right = "publisher"
-  or
-  wrong = "puchasing" and right = "purchasing"
-  or
-  wrong = "pucini" and right = "puccini"
-  or
-  wrong = "pulisher" and right = "publisher"
-  or
-  wrong = "pumkin" and right = "pumpkin"
-  or
-  wrong = "puplisher" and right = "publisher"
-  or
-  wrong = "puritannical" and right = "puritanical"
-  or
-  wrong = "purposedly" and right = "purposely"
-  or
-  wrong = "purpotedly" and right = "purportedly"
-  or
-  wrong = "pursuade" and right = "persuade"
-  or
-  wrong = "pursuaded" and right = "persuaded"
-  or
-  wrong = "pursuades" and right = "persuades"
-  or
-  wrong = "pususading" and right = "persuading"
-  or
-  wrong = "puting" and right = "putting"
-  or
-  wrong = "pwoer" and right = "power"
-  or
-  wrong = "pyscic" and right = "psychic"
-  or
-  wrong = "qtuie" and right = "quiet"
-  or
-  wrong = "qtuie" and right = "quite"
-  or
-  wrong = "quantaty" and right = "quantity"
-  or
-  wrong = "quantitiy" and right = "quantity"
-  or
-  wrong = "quarantaine" and right = "quarantine"
-  or
-  wrong = "queenland" and right = "queensland"
-  or
-  wrong = "questonable" and right = "questionable"
-  or
-  wrong = "quicklyu" and right = "quickly"
-  or
-  wrong = "quinessential" and right = "quintessential"
-  or
-  wrong = "quitted" and right = "quit"
-  or
-  wrong = "quizes" and right = "quizzes"
-  or
-  wrong = "qutie" and right = "quiet"
-  or
-  wrong = "qutie" and right = "quite"
-  or
-  wrong = "rabinnical" and right = "rabbinical"
-  or
-  wrong = "racaus" and right = "raucous"
-  or
-  wrong = "radiactive" and right = "radioactive"
-  or
-  wrong = "radify" and right = "ratify"
-  or
-  wrong = "raelly" and right = "really"
-  or
-  wrong = "rarified" and right = "rarefied"
-  or
-  wrong = "reaccurring" and right = "recurring"
-  or
-  wrong = "reacing" and right = "reaching"
-  or
-  wrong = "reacll" and right = "recall"
-  or
-  wrong = "readmition" and right = "readmission"
-  or
-  wrong = "realitvely" and right = "relatively"
-  or
-  wrong = "realsitic" and right = "realistic"
-  or
-  wrong = "realtions" and right = "relations"
-  or
-  wrong = "realy" and right = "really"
-  or
-  wrong = "realyl" and right = "really"
-  or
-  wrong = "reasearch" and right = "research"
-  or
-  wrong = "rebiulding" and right = "rebuilding"
-  or
-  wrong = "rebllions" and right = "rebellions"
-  or
-  wrong = "rebounce" and right = "rebound"
-  or
-  wrong = "reccomend" and right = "recommend"
-  or
-  wrong = "reccomendations" and right = "recommendations"
-  or
-  wrong = "reccomended" and right = "recommended"
-  or
-  wrong = "reccomending" and right = "recommending"
-  or
-  wrong = "reccommend" and right = "recommend"
-  or
-  wrong = "reccommended" and right = "recommended"
-  or
-  wrong = "reccommending" and right = "recommending"
-  or
-  wrong = "reccuring" and right = "recurring"
-  or
-  wrong = "receeded" and right = "receded"
-  or
-  wrong = "receeding" and right = "receding"
-  or
-  wrong = "recepient" and right = "recipient"
-  or
-  wrong = "recepients" and right = "recipients"
-  or
-  wrong = "receving" and right = "receiving"
-  or
-  wrong = "rechargable" and right = "rechargeable"
-  or
-  wrong = "reched" and right = "reached"
-  or
-  wrong = "recide" and right = "reside"
-  or
-  wrong = "recided" and right = "resided"
-  or
-  wrong = "recident" and right = "resident"
-  or
-  wrong = "recidents" and right = "residents"
-  or
-  wrong = "reciding" and right = "residing"
-  or
-  wrong = "reciepents" and right = "recipients"
-  or
-  wrong = "reciept" and right = "receipt"
-  or
-  wrong = "recieve" and right = "receive"
-  or
-  wrong = "recieved" and right = "received"
-  or
-  wrong = "reciever" and right = "receiver"
-  or
-  wrong = "recievers" and right = "receivers"
-  or
-  wrong = "recieves" and right = "receives"
-  or
-  wrong = "recieving" and right = "receiving"
-  or
-  wrong = "recipiant" and right = "recipient"
-  or
-  wrong = "recipiants" and right = "recipients"
-  or
-  wrong = "recived" and right = "received"
-  or
-  wrong = "recivership" and right = "receivership"
-  or
-  wrong = "recogise" and right = "recognise"
-  or
-  wrong = "recogize" and right = "recognize"
-  or
-  wrong = "recomend" and right = "recommend"
-  or
-  wrong = "recomended" and right = "recommended"
-  or
-  wrong = "recomending" and right = "recommending"
-  or
-  wrong = "recomends" and right = "recommends"
-  or
-  wrong = "recommedations" and right = "recommendations"
-  or
-  wrong = "recompence" and right = "recompense"
-  or
-  wrong = "reconaissance" and right = "reconnaissance"
-  or
-  wrong = "reconcilation" and right = "reconciliation"
-  or
-  wrong = "reconized" and right = "recognized"
-  or
-  wrong = "reconnaisance" and right = "reconnaissance"
-  or
-  wrong = "reconnaissence" and right = "reconnaissance"
-  or
-  wrong = "recontructed" and right = "reconstructed"
-  or
-  wrong = "recquired" and right = "required"
-  or
-  wrong = "recrational" and right = "recreational"
-  or
-  wrong = "recrod" and right = "record"
-  or
-  wrong = "recuiting" and right = "recruiting"
-  or
-  wrong = "recuring" and right = "recurring"
-  or
-  wrong = "recurrance" and right = "recurrence"
-  or
-  wrong = "rediculous" and right = "ridiculous"
-  or
-  wrong = "reedeming" and right = "redeeming"
-  or
-  wrong = "reenforced" and right = "reinforced"
-  or
-  wrong = "refect" and right = "reflect"
-  or
-  wrong = "refedendum" and right = "referendum"
-  or
-  wrong = "referal" and right = "referral"
-  or
-  wrong = "referece" and right = "reference"
-  or
-  wrong = "refereces" and right = "references"
-  or
-  wrong = "refered" and right = "referred"
-  or
-  wrong = "referemce" and right = "reference"
-  or
-  wrong = "referemces" and right = "references"
-  or
-  wrong = "referencs" and right = "references"
-  or
-  wrong = "referenece" and right = "reference"
-  or
-  wrong = "refereneced" and right = "referenced"
-  or
-  wrong = "refereneces" and right = "references"
-  or
-  wrong = "referiang" and right = "referring"
-  or
-  wrong = "refering" and right = "referring"
-  or
-  wrong = "refernce" and right = "reference"
-  or
-  wrong = "refernce" and right = "references"
-  or
-  wrong = "refernces" and right = "references"
-  or
-  wrong = "referrence" and right = "reference"
-  or
-  wrong = "referrences" and right = "references"
-  or
-  wrong = "referrs" and right = "refers"
-  or
-  wrong = "reffered" and right = "referred"
-  or
-  wrong = "refference" and right = "reference"
-  or
-  wrong = "reffering" and right = "referring"
-  or
-  wrong = "refrence" and right = "reference"
-  or
-  wrong = "refrences" and right = "references"
-  or
-  wrong = "refrers" and right = "refers"
-  or
-  wrong = "refridgeration" and right = "refrigeration"
-  or
-  wrong = "refridgerator" and right = "refrigerator"
-  or
-  wrong = "refromist" and right = "reformist"
-  or
-  wrong = "refusla" and right = "refusal"
-  or
-  wrong = "regardes" and right = "regards"
-  or
-  wrong = "regluar" and right = "regular"
-  or
-  wrong = "reguarly" and right = "regularly"
-  or
-  wrong = "regulaion" and right = "regulation"
-  or
-  wrong = "regulaotrs" and right = "regulators"
-  or
-  wrong = "regularily" and right = "regularly"
-  or
-  wrong = "rehersal" and right = "rehearsal"
-  or
-  wrong = "reicarnation" and right = "reincarnation"
-  or
-  wrong = "reigining" and right = "reigning"
-  or
-  wrong = "reknown" and right = "renown"
-  or
-  wrong = "reknowned" and right = "renowned"
-  or
-  wrong = "rela" and right = "real"
-  or
-  wrong = "relaly" and right = "really"
-  or
-  wrong = "relatiopnship" and right = "relationship"
-  or
-  wrong = "relativly" and right = "relatively"
-  or
-  wrong = "relected" and right = "reelected"
-  or
-  wrong = "releive" and right = "relieve"
-  or
-  wrong = "releived" and right = "relieved"
-  or
-  wrong = "releiver" and right = "reliever"
-  or
-  wrong = "releses" and right = "releases"
-  or
-  wrong = "relevence" and right = "relevance"
-  or
-  wrong = "relevent" and right = "relevant"
-  or
-  wrong = "reliablity" and right = "reliability"
-  or
-  wrong = "relient" and right = "reliant"
-  or
-  wrong = "religeous" and right = "religious"
-  or
-  wrong = "religous" and right = "religious"
-  or
-  wrong = "religously" and right = "religiously"
-  or
-  wrong = "relinqushment" and right = "relinquishment"
-  or
-  wrong = "relitavely" and right = "relatively"
-  or
-  wrong = "relized" and right = "realised"
-  or
-  wrong = "relized" and right = "realized"
-  or
-  wrong = "relpacement" and right = "replacement"
-  or
-  wrong = "remaing" and right = "remaining"
-  or
-  wrong = "remeber" and right = "remember"
-  or
-  wrong = "rememberable" and right = "memorable"
-  or
-  wrong = "rememberance" and right = "remembrance"
-  or
-  wrong = "remembrence" and right = "remembrance"
-  or
-  wrong = "remenant" and right = "remnant"
-  or
-  wrong = "remenicent" and right = "reminiscent"
-  or
-  wrong = "reminent" and right = "remnant"
-  or
-  wrong = "reminescent" and right = "reminiscent"
-  or
-  wrong = "reminscent" and right = "reminiscent"
-  or
-  wrong = "reminsicent" and right = "reminiscent"
-  or
-  wrong = "rendevous" and right = "rendezvous"
-  or
-  wrong = "rendezous" and right = "rendezvous"
-  or
-  wrong = "renedered" and right = "rende"
-  or
-  wrong = "renewl" and right = "renewal"
-  or
-  wrong = "rennovate" and right = "renovate"
-  or
-  wrong = "rennovated" and right = "renovated"
-  or
-  wrong = "rennovating" and right = "renovating"
-  or
-  wrong = "rennovation" and right = "renovation"
-  or
-  wrong = "rentors" and right = "renters"
-  or
-  wrong = "reoccurrence" and right = "recurrence"
-  or
-  wrong = "reorganision" and right = "reorganisation"
-  or
-  wrong = "repatition" and right = "repartition"
-  or
-  wrong = "repatition" and right = "repetition"
-  or
-  wrong = "repblic" and right = "republic"
-  or
-  wrong = "repblican" and right = "republican"
-  or
-  wrong = "repblicans" and right = "republicans"
-  or
-  wrong = "repblics" and right = "republics"
-  or
-  wrong = "repectively" and right = "respectively"
-  or
-  wrong = "repeition" and right = "repetition"
-  or
-  wrong = "repentence" and right = "repentance"
-  or
-  wrong = "repentent" and right = "repentant"
-  or
-  wrong = "repeteadly" and right = "repeatedly"
-  or
-  wrong = "repetion" and right = "repetition"
-  or
-  wrong = "repid" and right = "rapid"
-  or
-  wrong = "reponse" and right = "response"
-  or
-  wrong = "reponsible" and right = "responsible"
-  or
-  wrong = "reportadly" and right = "reportedly"
-  or
-  wrong = "represantative" and right = "representative"
-  or
-  wrong = "representive" and right = "representative"
-  or
-  wrong = "representives" and right = "representatives"
-  or
-  wrong = "reproducable" and right = "reproducible"
-  or
-  wrong = "reprtoire" and right = "repertoire"
-  or
-  wrong = "repsectively" and right = "respectively"
-  or
-  wrong = "reptition" and right = "repetition"
-  or
-  wrong = "repubic" and right = "republic"
-  or
-  wrong = "repubican" and right = "republican"
-  or
-  wrong = "repubicans" and right = "republicans"
-  or
-  wrong = "repubics" and right = "republics"
-  or
-  wrong = "republi" and right = "republic"
-  or
-  wrong = "republian" and right = "republican"
-  or
-  wrong = "republians" and right = "republicans"
-  or
-  wrong = "republis" and right = "republics"
-  or
-  wrong = "repulic" and right = "republic"
-  or
-  wrong = "repulican" and right = "republican"
-  or
-  wrong = "repulicans" and right = "republicans"
-  or
-  wrong = "repulics" and right = "republics"
-  or
-  wrong = "requirment" and right = "requirement"
-  or
-  wrong = "requred" and right = "required"
-  or
-  wrong = "resaurant" and right = "restaurant"
-  or
-  wrong = "resembelance" and right = "resemblance"
-  or
-  wrong = "resembes" and right = "resembles"
-  or
-  wrong = "resemblence" and right = "resemblance"
-  or
-  wrong = "resevoir" and right = "reservoir"
-  or
-  wrong = "residental" and right = "residential"
-  or
-  wrong = "resignement" and right = "resignment"
-  or
-  wrong = "resistable" and right = "resistible"
-  or
-  wrong = "resistence" and right = "resistance"
-  or
-  wrong = "resistent" and right = "resistant"
-  or
-  wrong = "respectivly" and right = "respectively"
-  or
-  wrong = "responce" and right = "response"
-  or
-  wrong = "responibilities" and right = "responsibilities"
-  or
-  wrong = "responisble" and right = "responsible"
-  or
-  wrong = "responnsibilty" and right = "responsibility"
-  or
-  wrong = "responsability" and right = "responsibility"
-  or
-  wrong = "responsibile" and right = "responsible"
-  or
-  wrong = "responsibilites" and right = "responsibilities"
-  or
-  wrong = "responsiblities" and right = "responsibilities"
-  or
-  wrong = "responsiblity" and right = "responsibility"
-  or
-  wrong = "ressemblance" and right = "resemblance"
-  or
-  wrong = "ressemble" and right = "resemble"
-  or
-  wrong = "ressembled" and right = "resembled"
-  or
-  wrong = "ressemblence" and right = "resemblance"
-  or
-  wrong = "ressembling" and right = "resembling"
-  or
-  wrong = "resssurecting" and right = "resurrecting"
-  or
-  wrong = "ressurect" and right = "resurrect"
-  or
-  wrong = "ressurected" and right = "resurrected"
-  or
-  wrong = "ressurection" and right = "resurrection"
-  or
-  wrong = "ressurrection" and right = "resurrection"
-  or
-  wrong = "restarant" and right = "restaurant"
-  or
-  wrong = "restarants" and right = "restaurants"
-  or
-  wrong = "restaraunt" and right = "restaurant"
-  or
-  wrong = "restaraunteur" and right = "restaurateur"
-  or
-  wrong = "restaraunteurs" and right = "restaurateurs"
-  or
-  wrong = "restaraunts" and right = "restaurants"
-  or
-  wrong = "restauranteurs" and right = "restaurateurs"
-  or
-  wrong = "restauration" and right = "restoration"
-  or
-  wrong = "restauraunt" and right = "restaurant"
-  or
-  wrong = "resteraunt" and right = "restaurant"
-  or
-  wrong = "resteraunts" and right = "restaurants"
-  or
-  wrong = "resticted" and right = "restricted"
-  or
-  wrong = "restraunt" and right = "restaurant"
-  or
-  wrong = "restraunt" and right = "restraint"
-  or
-  wrong = "resturant" and right = "restaurant"
-  or
-  wrong = "resturants" and right = "restaurants"
-  or
-  wrong = "resturaunt" and right = "restaurant"
-  or
-  wrong = "resturaunts" and right = "restaurants"
-  or
-  wrong = "resurecting" and right = "resurrecting"
-  or
-  wrong = "retalitated" and right = "retaliated"
-  or
-  wrong = "retalitation" and right = "retaliation"
-  or
-  wrong = "retreive" and right = "retrieve"
-  or
-  wrong = "retrive" and right = "retrieve"
-  or
-  wrong = "returnd" and right = "returned"
-  or
-  wrong = "revaluated" and right = "reevaluated"
-  or
-  wrong = "reveiw" and right = "review"
-  or
-  wrong = "reveral" and right = "reversal"
-  or
-  wrong = "reversable" and right = "reversible"
-  or
-  wrong = "revolutionar" and right = "revolutionary"
-  or
-  wrong = "rewitten" and right = "rewritten"
-  or
-  wrong = "rewriet" and right = "rewrite"
-  or
-  wrong = "rference" and right = "reference"
-  or
-  wrong = "rferences" and right = "references"
-  or
-  wrong = "rhymme" and right = "rhyme"
-  or
-  wrong = "rhythem" and right = "rhythm"
-  or
-  wrong = "rhythim" and right = "rhythm"
-  or
-  wrong = "rhytmic" and right = "rhythmic"
-  or
-  wrong = "rigeur" and right = "rigor"
-  or
-  wrong = "rigeur" and right = "rigour"
-  or
-  wrong = "rigeur" and right = "rigueur"
-  or
-  wrong = "rigourous" and right = "rigorous"
-  or
-  wrong = "rininging" and right = "ringing"
-  or
-  wrong = "rised" and right = "raised"
-  or
-  wrong = "rised" and right = "rose"
-  or
-  wrong = "rockerfeller" and right = "rockefeller"
-  or
-  wrong = "rococco" and right = "rococo"
-  or
-  wrong = "rocord" and right = "record"
-  or
-  wrong = "roomate" and right = "roommate"
-  or
-  wrong = "rougly" and right = "roughly"
-  or
-  wrong = "rucuperate" and right = "recuperate"
-  or
-  wrong = "rudimentatry" and right = "rudimentary"
-  or
-  wrong = "rulle" and right = "rule"
-  or
-  wrong = "runing" and right = "running"
-  or
-  wrong = "runnung" and right = "running"
-  or
-  wrong = "russina" and right = "russian"
-  or
-  wrong = "russion" and right = "russian"
-  or
-  wrong = "rwite" and right = "write"
-  or
-  wrong = "rythem" and right = "rhythm"
-  or
-  wrong = "rythim" and right = "rhythm"
-  or
-  wrong = "rythm" and right = "rhythm"
-  or
-  wrong = "rythmic" and right = "rhythmic"
-  or
-  wrong = "rythyms" and right = "rhythms"
-  or
-  wrong = "sacrafice" and right = "sacrifice"
-  or
-  wrong = "sacreligious" and right = "sacrilegious"
-  or
-  wrong = "sacremento" and right = "sacramento"
-  or
-  wrong = "sacrifical" and right = "sacrificial"
-  or
-  wrong = "saftey" and right = "safety"
-  or
-  wrong = "safty" and right = "safety"
-  or
-  wrong = "salery" and right = "salary"
-  or
-  wrong = "sanctionning" and right = "sanctioning"
-  or
-  wrong = "sandwhich" and right = "sandwich"
-  or
-  wrong = "sanhedrim" and right = "sanhedrin"
-  or
-  wrong = "santioned" and right = "sanctioned"
-  or
-  wrong = "sargant" and right = "sergeant"
-  or
-  wrong = "sargeant" and right = "sergeant"
-  or
-  wrong = "sasy" and right = "sassy"
-  or
-  wrong = "sasy" and right = "says"
-  or
-  wrong = "satelite" and right = "satellite"
-  or
-  wrong = "satelites" and right = "satellites"
-  or
-  wrong = "saterday" and right = "saturday"
-  or
-  wrong = "saterdays" and right = "saturdays"
-  or
-  wrong = "satisfactority" and right = "satisfactorily"
-  or
-  wrong = "satric" and right = "satiric"
-  or
-  wrong = "satrical" and right = "satirical"
-  or
-  wrong = "satrically" and right = "satirically"
-  or
-  wrong = "sattelite" and right = "satellite"
-  or
-  wrong = "sattelites" and right = "satellites"
-  or
-  wrong = "saught" and right = "sought"
-  or
-  wrong = "saveing" and right = "saving"
-  or
-  wrong = "saxaphone" and right = "saxophone"
-  or
-  wrong = "scaleable" and right = "scalable"
-  or
-  wrong = "scandanavia" and right = "scandinavia"
-  or
-  wrong = "scaricity" and right = "scarcity"
-  or
-  wrong = "scavanged" and right = "scavenged"
-  or
-  wrong = "schedual" and right = "schedule"
-  or
-  wrong = "scholarhip" and right = "scholarship"
-  or
-  wrong = "scholarstic" and right = "scholarly"
-  or
-  wrong = "scholarstic" and right = "scholastic"
-  or
-  wrong = "scientfic" and right = "scientific"
-  or
-  wrong = "scientifc" and right = "scientific"
-  or
-  wrong = "scientis" and right = "scientist"
-  or
-  wrong = "scince" and right = "science"
-  or
-  wrong = "scinece" and right = "science"
-  or
-  wrong = "scirpt" and right = "script"
-  or
-  wrong = "scoll" and right = "scroll"
-  or
-  wrong = "screenwrighter" and right = "screenwriter"
-  or
-  wrong = "scrutinity" and right = "scrutiny"
-  or
-  wrong = "scuptures" and right = "sculptures"
-  or
-  wrong = "seach" and right = "search"
-  or
-  wrong = "seached" and right = "searched"
-  or
-  wrong = "seaches" and right = "searches"
-  or
-  wrong = "secceeded" and right = "seceded"
-  or
-  wrong = "secceeded" and right = "succeeded"
-  or
-  wrong = "seceed" and right = "secede"
-  or
-  wrong = "seceed" and right = "succeed"
-  or
-  wrong = "seceeded" and right = "seceded"
-  or
-  wrong = "seceeded" and right = "succeeded"
-  or
-  wrong = "secratary" and right = "secretary"
-  or
-  wrong = "secretery" and right = "secretary"
-  or
-  wrong = "sedereal" and right = "sidereal"
-  or
-  wrong = "seeked" and right = "sought"
-  or
-  wrong = "segementation" and right = "segmentation"
-  or
-  wrong = "seguoys" and right = "segues"
-  or
-  wrong = "seige" and right = "siege"
-  or
-  wrong = "seing" and right = "seeing"
-  or
-  wrong = "seinor" and right = "senior"
-  or
-  wrong = "seldomly" and right = "seldom"
-  or
-  wrong = "senarios" and right = "scenarios"
-  or
-  wrong = "sence" and right = "sense"
-  or
-  wrong = "sence" and right = "since"
-  or
-  wrong = "senstive" and right = "sensitive"
-  or
-  wrong = "sensure" and right = "censure"
-  or
-  wrong = "seperate" and right = "separate"
-  or
-  wrong = "seperated" and right = "separated"
-  or
-  wrong = "seperately" and right = "separately"
-  or
-  wrong = "seperates" and right = "separates"
-  or
-  wrong = "seperating" and right = "separating"
-  or
-  wrong = "seperation" and right = "separation"
-  or
-  wrong = "seperatism" and right = "separatism"
-  or
-  wrong = "seperatist" and right = "separatist"
-  or
-  wrong = "seperator" and right = "separator"
-  or
-  wrong = "sepina" and right = "subpoena"
-  or
-  wrong = "sepulchure" and right = "sepulcher"
-  or
-  wrong = "sepulchure" and right = "sepulchre"
-  or
-  wrong = "sepulcre" and right = "sepulcher"
-  or
-  wrong = "sepulcre" and right = "sepulchre"
-  or
-  wrong = "sergent" and right = "sergeant"
-  or
-  wrong = "settelement" and right = "settlement"
-  or
-  wrong = "settlment" and right = "settlement"
-  or
-  wrong = "settting" and right = "setting"
-  or
-  wrong = "severeal" and right = "several"
-  or
-  wrong = "severley" and right = "severely"
-  or
-  wrong = "severly" and right = "severely"
-  or
-  wrong = "sevice" and right = "service"
-  or
-  wrong = "shadasloo" and right = "shadaloo"
-  or
-  wrong = "shaddow" and right = "shadow"
-  or
-  wrong = "shadoloo" and right = "shadaloo"
-  or
-  wrong = "shamen" and right = "shaman"
-  or
-  wrong = "shamen" and right = "shamans"
-  or
-  wrong = "sheat" and right = "cheat"
-  or
-  wrong = "sheat" and right = "sheath"
-  or
-  wrong = "sheat" and right = "sheet"
-  or
-  wrong = "sheild" and right = "shield"
-  or
-  wrong = "sherif" and right = "sheriff"
-  or
-  wrong = "shineing" and right = "shining"
-  or
-  wrong = "shiped" and right = "shipped"
-  or
-  wrong = "shiping" and right = "shipping"
-  or
-  wrong = "shopkeeepers" and right = "shopkeepers"
-  or
-  wrong = "shorly" and right = "shortly"
-  or
-  wrong = "shoudl" and right = "should"
-  or
-  wrong = "shoudln" and right = "should"
-  or
-  wrong = "shreak" and right = "shriek"
-  or
-  wrong = "shrinked" and right = "shrunk"
-  or
-  wrong = "sicne" and right = "since"
-  or
-  wrong = "sideral" and right = "sidereal"
-  or
-  wrong = "sieze" and right = "seize"
-  or
-  wrong = "sieze" and right = "size"
-  or
-  wrong = "siezed" and right = "seized"
-  or
-  wrong = "siezed" and right = "sized"
-  or
-  wrong = "siezing" and right = "seizing"
-  or
-  wrong = "siezing" and right = "sizing"
-  or
-  wrong = "siezure" and right = "seizure"
-  or
-  wrong = "siezures" and right = "seizures"
-  or
-  wrong = "siginificant" and right = "significant"
-  or
-  wrong = "signficant" and right = "significant"
-  or
-  wrong = "signficiant" and right = "significant"
-  or
-  wrong = "signfies" and right = "signifies"
-  or
-  wrong = "signifantly" and right = "significantly"
-  or
-  wrong = "significently" and right = "significantly"
-  or
-  wrong = "signifigant" and right = "significant"
-  or
-  wrong = "signifigantly" and right = "significantly"
-  or
-  wrong = "signitories" and right = "signatories"
-  or
-  wrong = "signitory" and right = "signatory"
-  or
-  wrong = "similarily" and right = "similarly"
-  or
-  wrong = "similiar" and right = "similar"
-  or
-  wrong = "similiarity" and right = "similarity"
-  or
-  wrong = "similiarly" and right = "similarly"
-  or
-  wrong = "simmilar" and right = "similar"
-  or
-  wrong = "simpley" and right = "simply"
-  or
-  wrong = "simplier" and right = "simpler"
-  or
-  wrong = "simultanous" and right = "simultaneous"
-  or
-  wrong = "simultanously" and right = "simultaneously"
-  or
-  wrong = "sincerley" and right = "sincerely"
-  or
-  wrong = "singsog" and right = "singsong"
-  or
-  wrong = "sinse" and right = "since"
-  or
-  wrong = "sinse" and right = "sines"
-  or
-  wrong = "sionist" and right = "zionist"
-  or
-  wrong = "sionists" and right = "zionists"
-  or
-  wrong = "sixtin" and right = "sistine"
-  or
-  wrong = "skagerak" and right = "skagerrak"
-  or
-  wrong = "skateing" and right = "skating"
-  or
-  wrong = "slaugterhouses" and right = "slaughterhouses"
-  or
-  wrong = "slighly" and right = "slightly"
-  or
-  wrong = "slippy" and right = "slippery"
-  or
-  wrong = "slowy" and right = "slowly"
-  or
-  wrong = "smae" and right = "same"
-  or
-  wrong = "smealting" and right = "smelting"
-  or
-  wrong = "smoe" and right = "some"
-  or
-  wrong = "sneeks" and right = "sneaks"
-  or
-  wrong = "snese" and right = "sneeze"
-  or
-  wrong = "socalism" and right = "socialism"
-  or
-  wrong = "socities" and right = "societies"
-  or
-  wrong = "soem" and right = "some"
-  or
-  wrong = "sofware" and right = "software"
-  or
-  wrong = "sohw" and right = "show"
-  or
-  wrong = "soilders" and right = "soldiers"
-  or
-  wrong = "solatary" and right = "solitary"
-  or
-  wrong = "soley" and right = "solely"
-  or
-  wrong = "soliders" and right = "soldiers"
-  or
-  wrong = "soliliquy" and right = "soliloquy"
-  or
-  wrong = "soluable" and right = "soluble"
-  or
-  wrong = "somene" and right = "someone"
-  or
-  wrong = "somtimes" and right = "sometimes"
-  or
-  wrong = "somwhere" and right = "somewhere"
-  or
-  wrong = "sophicated" and right = "sophisticated"
-  or
-  wrong = "sophmore" and right = "sophomore"
-  or
-  wrong = "sorceror" and right = "sorcerer"
-  or
-  wrong = "sorrounding" and right = "surrounding"
-  or
-  wrong = "sotry" and right = "story"
-  or
-  wrong = "sotyr" and right = "satyr"
-  or
-  wrong = "sotyr" and right = "story"
-  or
-  wrong = "soudn" and right = "sound"
-  or
-  wrong = "soudns" and right = "sounds"
-  or
-  wrong = "sould" and right = "could"
-  or
-  wrong = "sould" and right = "should"
-  or
-  wrong = "sould" and right = "sold"
-  or
-  wrong = "sould" and right = "soul"
-  or
-  wrong = "sountrack" and right = "soundtrack"
-  or
-  wrong = "sourth" and right = "south"
-  or
-  wrong = "sourthern" and right = "southern"
-  or
-  wrong = "souvenier" and right = "souvenir"
-  or
-  wrong = "souveniers" and right = "souvenirs"
-  or
-  wrong = "soveits" and right = "soviets"
-  or
-  wrong = "sovereignity" and right = "sovereignty"
-  or
-  wrong = "soverign" and right = "sovereign"
-  or
-  wrong = "soverignity" and right = "sovereignty"
-  or
-  wrong = "soverignty" and right = "sovereignty"
-  or
-  wrong = "spainish" and right = "spanish"
-  or
-  wrong = "speach" and right = "speech"
-  or
-  wrong = "specfic" and right = "specific"
-  or
-  wrong = "speciallized" and right = "specialised"
-  or
-  wrong = "speciallized" and right = "specialized"
-  or
-  wrong = "specif" and right = "specific"
-  or
-  wrong = "specif" and right = "specify"
-  or
-  wrong = "specifiying" and right = "specifying"
-  or
-  wrong = "speciman" and right = "specimen"
-  or
-  wrong = "spectauclar" and right = "spectacular"
-  or
-  wrong = "spectaulars" and right = "spectaculars"
-  or
-  wrong = "spects" and right = "aspects"
-  or
-  wrong = "spects" and right = "expects"
-  or
-  wrong = "spectum" and right = "spectrum"
-  or
-  wrong = "speices" and right = "species"
-  or
-  wrong = "spendour" and right = "splendour"
-  or
-  wrong = "spermatozoan" and right = "spermatozoon"
-  or
-  wrong = "spoace" and right = "space"
-  or
-  wrong = "sponser" and right = "sponsor"
-  or
-  wrong = "sponsered" and right = "sponsored"
-  or
-  wrong = "spontanous" and right = "spontaneous"
-  or
-  wrong = "sponzored" and right = "sponsored"
-  or
-  wrong = "spoonfulls" and right = "spoonfuls"
-  or
-  wrong = "sppeches" and right = "speeches"
-  or
-  wrong = "spreaded" and right = "spread"
-  or
-  wrong = "sprech" and right = "speech"
-  or
-  wrong = "spred" and right = "spread"
-  or
-  wrong = "spriritual" and right = "spiritual"
-  or
-  wrong = "spritual" and right = "spiritual"
-  or
-  wrong = "sqaure" and right = "square"
-  or
-  wrong = "sring" and right = "string"
-  or
-  wrong = "stablility" and right = "stability"
-  or
-  wrong = "stainlees" and right = "stainless"
-  or
-  wrong = "staion" and right = "station"
-  or
-  wrong = "standars" and right = "standards"
-  or
-  wrong = "stange" and right = "strange"
-  or
-  wrong = "startegic" and right = "strategic"
-  or
-  wrong = "startegies" and right = "strategies"
-  or
-  wrong = "startegy" and right = "strategy"
-  or
-  wrong = "stateman" and right = "statesman"
-  or
-  wrong = "statememts" and right = "statements"
-  or
-  wrong = "statment" and right = "statement"
-  or
-  wrong = "steriods" and right = "steroids"
-  or
-  wrong = "sterotypes" and right = "stereotypes"
-  or
-  wrong = "stilus" and right = "stylus"
-  or
-  wrong = "stingent" and right = "stringent"
-  or
-  wrong = "stiring" and right = "stirring"
-  or
-  wrong = "stirrs" and right = "stirs"
-  or
-  wrong = "stlye" and right = "style"
-  or
-  wrong = "stomache" and right = "stomach"
-  or
-  wrong = "stong" and right = "strong"
-  or
-  wrong = "stopry" and right = "story"
-  or
-  wrong = "storeis" and right = "stories"
-  or
-  wrong = "storise" and right = "stories"
-  or
-  wrong = "stornegst" and right = "strongest"
-  or
-  wrong = "stoyr" and right = "story"
-  or
-  wrong = "stpo" and right = "stop"
-  or
-  wrong = "stradegies" and right = "strategies"
-  or
-  wrong = "stradegy" and right = "strategy"
-  or
-  wrong = "strat" and right = "start"
-  or
-  wrong = "strat" and right = "strata"
-  or
-  wrong = "stratagically" and right = "strategically"
-  or
-  wrong = "streemlining" and right = "streamlining"
-  or
-  wrong = "stregth" and right = "strength"
-  or
-  wrong = "strenghen" and right = "strengthen"
-  or
-  wrong = "strenghened" and right = "strengthened"
-  or
-  wrong = "strenghening" and right = "strengthening"
-  or
-  wrong = "strenght" and right = "strength"
-  or
-  wrong = "strenghten" and right = "strengthen"
-  or
-  wrong = "strenghtened" and right = "strengthened"
-  or
-  wrong = "strenghtening" and right = "strengthening"
-  or
-  wrong = "strengtened" and right = "strengthened"
-  or
-  wrong = "strenous" and right = "strenuous"
-  or
-  wrong = "strictist" and right = "strictest"
-  or
-  wrong = "strikely" and right = "strikingly"
-  or
-  wrong = "strnad" and right = "strand"
-  or
-  wrong = "stroy" and right = "destroy"
-  or
-  wrong = "stroy" and right = "story"
-  or
-  wrong = "structual" and right = "structural"
-  or
-  wrong = "stubborness" and right = "stubbornness"
-  or
-  wrong = "stucture" and right = "structure"
-  or
-  wrong = "stuctured" and right = "structured"
-  or
-  wrong = "studdy" and right = "study"
-  or
-  wrong = "studing" and right = "studying"
-  or
-  wrong = "stuggling" and right = "struggling"
-  or
-  wrong = "sturcture" and right = "structure"
-  or
-  wrong = "subcatagories" and right = "subcategories"
-  or
-  wrong = "subcatagory" and right = "subcategory"
-  or
-  wrong = "subconsiously" and right = "subconsciously"
-  or
-  wrong = "subjudgation" and right = "subjugation"
-  or
-  wrong = "submachne" and right = "submachine"
-  or
-  wrong = "subpecies" and right = "subspecies"
-  or
-  wrong = "subsidary" and right = "subsidiary"
-  or
-  wrong = "subsiduary" and right = "subsidiary"
-  or
-  wrong = "subsquent" and right = "subsequent"
-  or
-  wrong = "subsquently" and right = "subsequently"
-  or
-  wrong = "substace" and right = "substance"
-  or
-  wrong = "substancial" and right = "substantial"
-  or
-  wrong = "substatial" and right = "substantial"
-  or
-  wrong = "substituded" and right = "substituted"
-  or
-  wrong = "substract" and right = "subtract"
-  or
-  wrong = "substracted" and right = "subtracted"
-  or
-  wrong = "substracting" and right = "subtracting"
-  or
-  wrong = "substraction" and right = "subtraction"
-  or
-  wrong = "substracts" and right = "subtracts"
-  or
-  wrong = "subtances" and right = "substances"
-  or
-  wrong = "subterranian" and right = "subterranean"
-  or
-  wrong = "suburburban" and right = "suburban"
-  or
-  wrong = "succceeded" and right = "succeeded"
-  or
-  wrong = "succcesses" and right = "successes"
-  or
-  wrong = "succedded" and right = "succeeded"
-  or
-  wrong = "succeded" and right = "succeeded"
-  or
-  wrong = "succeds" and right = "succeeds"
-  or
-  wrong = "succesful" and right = "successful"
-  or
-  wrong = "succesfully" and right = "successfully"
-  or
-  wrong = "succesfuly" and right = "successfully"
-  or
-  wrong = "succesion" and right = "succession"
-  or
-  wrong = "succesive" and right = "successive"
-  or
-  wrong = "successfull" and right = "successful"
-  or
-  wrong = "successully" and right = "successfully"
-  or
-  wrong = "succsess" and right = "success"
-  or
-  wrong = "succsessfull" and right = "successful"
-  or
-  wrong = "suceed" and right = "succeed"
-  or
-  wrong = "suceeded" and right = "succeeded"
-  or
-  wrong = "suceeding" and right = "succeeding"
-  or
-  wrong = "suceeds" and right = "succeeds"
-  or
-  wrong = "sucesful" and right = "successful"
-  or
-  wrong = "sucesfully" and right = "successfully"
-  or
-  wrong = "sucesfuly" and right = "successfully"
-  or
-  wrong = "sucesion" and right = "succession"
-  or
-  wrong = "sucess" and right = "success"
-  or
-  wrong = "sucesses" and right = "successes"
-  or
-  wrong = "sucessful" and right = "successful"
-  or
-  wrong = "sucessfull" and right = "successful"
-  or
-  wrong = "sucessfully" and right = "successfully"
-  or
-  wrong = "sucessfuly" and right = "successfully"
-  or
-  wrong = "sucession" and right = "succession"
-  or
-  wrong = "sucessive" and right = "successive"
-  or
-  wrong = "sucessor" and right = "successor"
-  or
-  wrong = "sucessot" and right = "successor"
-  or
-  wrong = "sucide" and right = "suicide"
-  or
-  wrong = "sucidial" and right = "suicidal"
-  or
-  wrong = "sudent" and right = "student"
-  or
-  wrong = "sudents" and right = "students"
-  or
-  wrong = "sufferage" and right = "suffrage"
-  or
-  wrong = "sufferred" and right = "suffered"
-  or
-  wrong = "sufferring" and right = "suffering"
-  or
-  wrong = "sufficent" and right = "sufficient"
-  or
-  wrong = "sufficently" and right = "sufficiently"
-  or
-  wrong = "sumary" and right = "summary"
-  or
-  wrong = "sunglases" and right = "sunglasses"
-  or
-  wrong = "suop" and right = "soup"
-  or
-  wrong = "superceeded" and right = "superseded"
-  or
-  wrong = "superintendant" and right = "superintendent"
-  or
-  wrong = "suphisticated" and right = "sophisticated"
-  or
-  wrong = "suplimented" and right = "supplemented"
-  or
-  wrong = "suported" and right = "supported"
-  or
-  wrong = "supose" and right = "suppose"
-  or
-  wrong = "suposed" and right = "supposed"
-  or
-  wrong = "suposedly" and right = "supposedly"
-  or
-  wrong = "suposes" and right = "supposes"
-  or
-  wrong = "suposing" and right = "supposing"
-  or
-  wrong = "supplamented" and right = "supplemented"
-  or
-  wrong = "suppliementing" and right = "supplementing"
-  or
-  wrong = "suppoed" and right = "supposed"
-  or
-  wrong = "supposingly" and right = "supposedly"
-  or
-  wrong = "suppy" and right = "supply"
-  or
-  wrong = "suprassing" and right = "surpassing"
-  or
-  wrong = "supress" and right = "suppress"
-  or
-  wrong = "supressed" and right = "suppressed"
-  or
-  wrong = "supresses" and right = "suppresses"
-  or
-  wrong = "supressing" and right = "suppressing"
-  or
-  wrong = "suprise" and right = "surprise"
-  or
-  wrong = "suprised" and right = "surprised"
-  or
-  wrong = "suprising" and right = "surprising"
-  or
-  wrong = "suprisingly" and right = "surprisingly"
-  or
-  wrong = "suprize" and right = "surprise"
-  or
-  wrong = "suprized" and right = "surprised"
-  or
-  wrong = "suprizing" and right = "surprising"
-  or
-  wrong = "suprizingly" and right = "surprisingly"
-  or
-  wrong = "surfce" and right = "surface"
-  or
-  wrong = "surley" and right = "surely"
-  or
-  wrong = "surley" and right = "surly"
-  or
-  wrong = "suround" and right = "surround"
-  or
-  wrong = "surounded" and right = "surrounded"
-  or
-  wrong = "surounding" and right = "surrounding"
-  or
-  wrong = "suroundings" and right = "surroundings"
-  or
-  wrong = "surounds" and right = "surrounds"
-  or
-  wrong = "surplanted" and right = "supplanted"
-  or
-  wrong = "surpress" and right = "suppress"
-  or
-  wrong = "surpressed" and right = "suppressed"
-  or
-  wrong = "surprize" and right = "surprise"
-  or
-  wrong = "surprized" and right = "surprised"
-  or
-  wrong = "surprizing" and right = "surprising"
-  or
-  wrong = "surprizingly" and right = "surprisingly"
-  or
-  wrong = "surrended" and right = "surrendered"
-  or
-  wrong = "surrended" and right = "surrounded"
-  or
-  wrong = "surrepetitious" and right = "surreptitious"
-  or
-  wrong = "surrepetitiously" and right = "surreptitiously"
-  or
-  wrong = "surreptious" and right = "surreptitious"
-  or
-  wrong = "surreptiously" and right = "surreptitiously"
-  or
-  wrong = "surronded" and right = "surrounded"
-  or
-  wrong = "surrouded" and right = "surrounded"
-  or
-  wrong = "surrouding" and right = "surrounding"
-  or
-  wrong = "surrundering" and right = "surrendering"
-  or
-  wrong = "surveilence" and right = "surveillance"
-  or
-  wrong = "surveill" and right = "surveil"
-  or
-  wrong = "surveyer" and right = "surveyor"
-  or
-  wrong = "surviver" and right = "survivor"
-  or
-  wrong = "survivers" and right = "survivors"
-  or
-  wrong = "survivied" and right = "survived"
-  or
-  wrong = "suseptable" and right = "susceptible"
-  or
-  wrong = "suseptible" and right = "susceptible"
-  or
-  wrong = "suspention" and right = "suspension"
-  or
-  wrong = "swaer" and right = "swear"
-  or
-  wrong = "swaers" and right = "swears"
-  or
-  wrong = "swepth" and right = "swept"
-  or
-  wrong = "swiming" and right = "swimming"
-  or
-  wrong = "syas" and right = "says"
-  or
-  wrong = "symetrical" and right = "symmetrical"
-  or
-  wrong = "symetrically" and right = "symmetrically"
-  or
-  wrong = "symetry" and right = "symmetry"
-  or
-  wrong = "symettric" and right = "symmetric"
-  or
-  wrong = "symmetral" and right = "symmetric"
-  or
-  wrong = "symmetricaly" and right = "symmetrically"
-  or
-  wrong = "synagouge" and right = "synagogue"
-  or
-  wrong = "syncronization" and right = "synchronization"
-  or
-  wrong = "synonomous" and right = "synonymous"
-  or
-  wrong = "synonymns" and right = "synonyms"
-  or
-  wrong = "synphony" and right = "symphony"
-  or
-  wrong = "syphyllis" and right = "syphilis"
-  or
-  wrong = "sypmtoms" and right = "symptoms"
-  or
-  wrong = "syrap" and right = "syrup"
-  or
-  wrong = "sysmatically" and right = "systematically"
-  or
-  wrong = "sytem" and right = "system"
-  or
-  wrong = "sytle" and right = "style"
-  or
-  wrong = "tabacco" and right = "tobacco"
-  or
-  wrong = "tahn" and right = "than"
-  or
-  wrong = "taht" and right = "that"
-  or
-  wrong = "talekd" and right = "talked"
-  or
-  wrong = "targetted" and right = "targeted"
-  or
-  wrong = "targetting" and right = "targeting"
-  or
-  wrong = "tast" and right = "taste"
-  or
-  wrong = "tath" and right = "that"
-  or
-  wrong = "tatoo" and right = "tattoo"
-  or
-  wrong = "tattooes" and right = "tattoos"
-  or
-  wrong = "taxanomic" and right = "taxonomic"
-  or
-  wrong = "taxanomy" and right = "taxonomy"
-  or
-  wrong = "teached" and right = "taught"
-  or
-  wrong = "techician" and right = "technician"
-  or
-  wrong = "techicians" and right = "technicians"
-  or
-  wrong = "techiniques" and right = "techniques"
-  or
-  wrong = "technitian" and right = "technician"
-  or
-  wrong = "technnology" and right = "technology"
-  or
-  wrong = "technolgy" and right = "technology"
-  or
-  wrong = "teh" and right = "the"
-  or
-  wrong = "tehy" and right = "they"
-  or
-  wrong = "telelevision" and right = "television"
-  or
-  wrong = "televsion" and right = "television"
-  or
-  wrong = "telphony" and right = "telephony"
-  or
-  wrong = "temerature" and right = "temperature"
-  or
-  wrong = "tempalte" and right = "template"
-  or
-  wrong = "tempaltes" and right = "templates"
-  or
-  wrong = "temparate" and right = "temperate"
-  or
-  wrong = "temperarily" and right = "temporarily"
-  or
-  wrong = "temperment" and right = "temperament"
-  or
-  wrong = "tempertaure" and right = "temperature"
-  or
-  wrong = "temperture" and right = "temperature"
-  or
-  wrong = "temprary" and right = "temporary"
-  or
-  wrong = "tenacle" and right = "tentacle"
-  or
-  wrong = "tenacles" and right = "tentacles"
-  or
-  wrong = "tendacy" and right = "tendency"
-  or
-  wrong = "tendancies" and right = "tendencies"
-  or
-  wrong = "tendancy" and right = "tendency"
-  or
-  wrong = "tepmorarily" and right = "temporarily"
-  or
-  wrong = "terrestial" and right = "terrestrial"
-  or
-  wrong = "terriories" and right = "territories"
-  or
-  wrong = "terriory" and right = "territory"
-  or
-  wrong = "territorist" and right = "terrorist"
-  or
-  wrong = "territoy" and right = "territory"
-  or
-  wrong = "terroist" and right = "terrorist"
-  or
-  wrong = "testiclular" and right = "testicular"
-  or
-  wrong = "testomony" and right = "testimony"
-  or
-  wrong = "tghe" and right = "the"
-  or
-  wrong = "thast" and right = "that"
-  or
-  wrong = "theather" and right = "theater"
-  or
-  wrong = "theese" and right = "these"
-  or
-  wrong = "theif" and right = "thief"
-  or
-  wrong = "theives" and right = "thieves"
-  or
-  wrong = "themselfs" and right = "themselves"
-  or
-  wrong = "themslves" and right = "themselves"
-  or
-  wrong = "ther" and right = "the"
-  or
-  wrong = "ther" and right = "their"
-  or
-  wrong = "ther" and right = "there"
-  or
-  wrong = "therafter" and right = "thereafter"
-  or
-  wrong = "therby" and right = "thereby"
-  or
-  wrong = "theri" and right = "their"
-  or
-  wrong = "thgat" and right = "that"
-  or
-  wrong = "thge" and right = "the"
-  or
-  wrong = "thier" and right = "their"
-  or
-  wrong = "thign" and right = "thing"
-  or
-  wrong = "thigns" and right = "things"
-  or
-  wrong = "thigsn" and right = "things"
-  or
-  wrong = "thikn" and right = "think"
-  or
-  wrong = "thikning" and right = "thickening"
-  or
-  wrong = "thikning" and right = "thinking"
-  or
-  wrong = "thikns" and right = "thinks"
-  or
-  wrong = "thiunk" and right = "think"
-  or
-  wrong = "thn" and right = "then"
-  or
-  wrong = "thna" and right = "than"
-  or
-  wrong = "thne" and right = "then"
-  or
-  wrong = "thnig" and right = "thing"
-  or
-  wrong = "thnigs" and right = "things"
-  or
-  wrong = "thoughout" and right = "throughout"
-  or
-  wrong = "threatend" and right = "threatened"
-  or
-  wrong = "threatning" and right = "threatening"
-  or
-  wrong = "threee" and right = "three"
-  or
-  wrong = "threshhold" and right = "threshold"
-  or
-  wrong = "thrid" and right = "third"
-  or
-  wrong = "throrough" and right = "thorough"
-  or
-  wrong = "throughly" and right = "thoroughly"
-  or
-  wrong = "throught" and right = "thought"
-  or
-  wrong = "throught" and right = "through"
-  or
-  wrong = "throught" and right = "throughout"
-  or
-  wrong = "througout" and right = "throughout"
-  or
-  wrong = "thru" and right = "through"
-  or
-  wrong = "thsi" and right = "this"
-  or
-  wrong = "thsoe" and right = "those"
-  or
-  wrong = "thta" and right = "that"
-  or
-  wrong = "thyat" and right = "that"
-  or
-  wrong = "tiem" and right = "tim"
-  or
-  wrong = "tiem" and right = "time"
-  or
-  wrong = "tihkn" and right = "think"
-  or
-  wrong = "tihs" and right = "this"
-  or
-  wrong = "timne" and right = "time"
-  or
-  wrong = "tiome" and right = "time"
-  or
-  wrong = "tiome" and right = "tome"
-  or
-  wrong = "tje" and right = "the"
-  or
-  wrong = "tjhe" and right = "the"
-  or
-  wrong = "tjpanishad" and right = "upanishad"
-  or
-  wrong = "tkae" and right = "take"
-  or
-  wrong = "tkaes" and right = "takes"
-  or
-  wrong = "tkaing" and right = "taking"
-  or
-  wrong = "tlaking" and right = "talking"
-  or
-  wrong = "tobbaco" and right = "tobacco"
-  or
-  wrong = "todya" and right = "today"
-  or
-  wrong = "toghether" and right = "together"
-  or
-  wrong = "toke" and right = "took"
-  or
-  wrong = "tolerence" and right = "tolerance"
-  or
-  wrong = "tolkein" and right = "tolkien"
-  or
-  wrong = "tomatos" and right = "tomatoes"
-  or
-  wrong = "tommorow" and right = "tomorrow"
-  or
-  wrong = "tommorrow" and right = "tomorrow"
-  or
-  wrong = "tongiht" and right = "tonight"
-  or
-  wrong = "toriodal" and right = "toroidal"
-  or
-  wrong = "tormenters" and right = "tormentors"
-  or
-  wrong = "tornadoe" and right = "tornado"
-  or
-  wrong = "torpeados" and right = "torpedoes"
-  or
-  wrong = "torpedos" and right = "torpedoes"
-  or
-  wrong = "tortise" and right = "tortoise"
-  or
-  wrong = "toubles" and right = "troubles"
-  or
-  wrong = "tounge" and right = "tongue"
-  or
-  wrong = "tourch" and right = "torch"
-  or
-  wrong = "tourch" and right = "touch"
-  or
-  wrong = "towords" and right = "towards"
-  or
-  wrong = "towrad" and right = "toward"
-  or
-  wrong = "tradionally" and right = "traditionally"
-  or
-  wrong = "traditionaly" and right = "traditionally"
-  or
-  wrong = "traditionnal" and right = "traditional"
-  or
-  wrong = "traditition" and right = "tradition"
-  or
-  wrong = "tradtionally" and right = "traditionally"
-  or
-  wrong = "trafficed" and right = "trafficked"
-  or
-  wrong = "trafficing" and right = "trafficking"
-  or
-  wrong = "trafic" and right = "traffic"
-  or
-  wrong = "trancendent" and right = "transcendent"
-  or
-  wrong = "trancending" and right = "transcending"
-  or
-  wrong = "tranform" and right = "transform"
-  or
-  wrong = "tranformed" and right = "transformed"
-  or
-  wrong = "transcendance" and right = "transcendence"
-  or
-  wrong = "transcendant" and right = "transcendent"
-  or
-  wrong = "transcendentational" and right = "transcendental"
-  or
-  wrong = "transcripting" and right = "transcribing"
-  or
-  wrong = "transcripting" and right = "transcription"
-  or
-  wrong = "transending" and right = "transcending"
-  or
-  wrong = "transesxuals" and right = "transsexuals"
-  or
-  wrong = "transfered" and right = "transferred"
-  or
-  wrong = "transfering" and right = "transferring"
-  or
-  wrong = "transformaton" and right = "transformation"
-  or
-  wrong = "transistion" and right = "transition"
-  or
-  wrong = "translater" and right = "translator"
-  or
-  wrong = "translaters" and right = "translators"
-  or
-  wrong = "transmissable" and right = "transmissible"
-  or
-  wrong = "transporation" and right = "transportation"
-  or
-  wrong = "tremelo" and right = "tremolo"
-  or
-  wrong = "tremelos" and right = "tremolos"
-  or
-  wrong = "treshold" and right = "threshold"
-  or
-  wrong = "triguered" and right = "triggered"
-  or
-  wrong = "triology" and right = "trilogy"
-  or
-  wrong = "troling" and right = "trolling"
-  or
-  wrong = "troup" and right = "troupe"
-  or
-  wrong = "troups" and right = "troops"
-  or
-  wrong = "troups" and right = "troupes"
-  or
-  wrong = "truely" and right = "truly"
-  or
-  wrong = "trustworthyness" and right = "trustworthiness"
-  or
-  wrong = "turnk" and right = "trunk"
-  or
-  wrong = "turnk" and right = "turnkey"
-  or
-  wrong = "tuscon" and right = "tucson"
-  or
-  wrong = "tust" and right = "trust"
-  or
-  wrong = "twelth" and right = "twelfth"
-  or
-  wrong = "twon" and right = "town"
-  or
-  wrong = "twpo" and right = "two"
-  or
-  wrong = "tyhat" and right = "that"
-  or
-  wrong = "tyhe" and right = "they"
-  or
-  wrong = "typcial" and right = "typical"
-  or
-  wrong = "typicaly" and right = "typically"
-  or
-  wrong = "tyranies" and right = "tyrannies"
-  or
-  wrong = "tyrany" and right = "tyranny"
-  or
-  wrong = "tyrranies" and right = "tyrannies"
-  or
-  wrong = "tyrrany" and right = "tyranny"
-  or
-  wrong = "ubiquitious" and right = "ubiquitous"
-  or
-  wrong = "ublisher" and right = "publisher"
-  or
-  wrong = "udpate" and right = "update"
-  or
-  wrong = "uise" and right = "use"
-  or
-  wrong = "ukranian" and right = "ukrainian"
-  or
-  wrong = "ultimely" and right = "ultimately"
-  or
-  wrong = "unacompanied" and right = "unaccompanied"
-  or
-  wrong = "unahppy" and right = "unhappy"
-  or
-  wrong = "unanymous" and right = "unanimous"
-  or
-  wrong = "unathorised" and right = "unauthorised"
-  or
-  wrong = "unavailible" and right = "unavailable"
-  or
-  wrong = "unballance" and right = "unbalance"
-  or
-  wrong = "unbeknowst" and right = "unbeknownst"
-  or
-  wrong = "unbeleivable" and right = "unbelievable"
-  or
-  wrong = "uncertainity" and right = "uncertainty"
-  or
-  wrong = "unchallengable" and right = "unchallengeable"
-  or
-  wrong = "unchangable" and right = "unchangeable"
-  or
-  wrong = "uncompetive" and right = "uncompetitive"
-  or
-  wrong = "unconcious" and right = "unconscious"
-  or
-  wrong = "unconciousness" and right = "unconsciousness"
-  or
-  wrong = "unconfortability" and right = "discomfort"
-  or
-  wrong = "uncontitutional" and right = "unconstitutional"
-  or
-  wrong = "unconvential" and right = "unconventional"
-  or
-  wrong = "undecideable" and right = "undecidable"
-  or
-  wrong = "understoon" and right = "understood"
-  or
-  wrong = "undesireable" and right = "undesirable"
-  or
-  wrong = "undetecable" and right = "undetectable"
-  or
-  wrong = "undoubtely" and right = "undoubtedly"
-  or
-  wrong = "undreground" and right = "underground"
-  or
-  wrong = "uneccesary" and right = "unnecessary"
-  or
-  wrong = "unecessary" and right = "unnecessary"
-  or
-  wrong = "unequalities" and right = "inequalities"
-  or
-  wrong = "unforetunately" and right = "unfortunately"
-  or
-  wrong = "unforgetable" and right = "unforgettable"
-  or
-  wrong = "unforgiveable" and right = "unforgivable"
-  or
-  wrong = "unforseen" and right = "unforeseen"
-  or
-  wrong = "unfortunatley" and right = "unfortunately"
-  or
-  wrong = "unfortunatly" and right = "unfortunately"
-  or
-  wrong = "unfourtunately" and right = "unfortunately"
-  or
-  wrong = "unihabited" and right = "uninhabited"
-  or
-  wrong = "unilateraly" and right = "unilaterally"
-  or
-  wrong = "unilatreal" and right = "unilateral"
-  or
-  wrong = "unilatreally" and right = "unilaterally"
-  or
-  wrong = "uninterruped" and right = "uninterrupted"
-  or
-  wrong = "uninterupted" and right = "uninterrupted"
-  or
-  wrong = "unintialized" and right = "uninitialized"
-  or
-  wrong = "unitesstates" and right = "unitedstates"
-  or
-  wrong = "univeral" and right = "universal"
-  or
-  wrong = "univeristies" and right = "universities"
-  or
-  wrong = "univeristy" and right = "university"
-  or
-  wrong = "univerity" and right = "university"
-  or
-  wrong = "universtiy" and right = "university"
-  or
-  wrong = "univesities" and right = "universities"
-  or
-  wrong = "univesity" and right = "university"
-  or
-  wrong = "unkown" and right = "unknown"
-  or
-  wrong = "unlikey" and right = "unlikely"
-  or
-  wrong = "unmanouverable" and right = "unmaneuverable"
-  or
-  wrong = "unmanouverable" and right = "unmanoeuvrable"
-  or
-  wrong = "unmistakeably" and right = "unmistakably"
-  or
-  wrong = "unneccesarily" and right = "unnecessarily"
-  or
-  wrong = "unneccesary" and right = "unnecessary"
-  or
-  wrong = "unneccessarily" and right = "unnecessarily"
-  or
-  wrong = "unneccessary" and right = "unnecessary"
-  or
-  wrong = "unnecesarily" and right = "unnecessarily"
-  or
-  wrong = "unnecesary" and right = "unnecessary"
-  or
-  wrong = "unoffical" and right = "unofficial"
-  or
-  wrong = "unoperational" and right = "nonoperational"
-  or
-  wrong = "unoticeable" and right = "unnoticeable"
-  or
-  wrong = "unplease" and right = "displease"
-  or
-  wrong = "unplesant" and right = "unpleasant"
-  or
-  wrong = "unprecendented" and right = "unprecedented"
-  or
-  wrong = "unprecidented" and right = "unprecedented"
-  or
-  wrong = "unrepentent" and right = "unrepentant"
-  or
-  wrong = "unrepetant" and right = "unrepentant"
-  or
-  wrong = "unrepetent" and right = "unrepentant"
-  or
-  wrong = "unsed" and right = "unsaid"
-  or
-  wrong = "unsed" and right = "unused"
-  or
-  wrong = "unsed" and right = "used"
-  or
-  wrong = "unsubstanciated" and right = "unsubstantiated"
-  or
-  wrong = "unsuccesful" and right = "unsuccessful"
-  or
-  wrong = "unsuccesfully" and right = "unsuccessfully"
-  or
-  wrong = "unsuccessfull" and right = "unsuccessful"
-  or
-  wrong = "unsucesful" and right = "unsuccessful"
-  or
-  wrong = "unsucesfuly" and right = "unsuccessfully"
-  or
-  wrong = "unsucessful" and right = "unsuccessful"
-  or
-  wrong = "unsucessfull" and right = "unsuccessful"
-  or
-  wrong = "unsucessfully" and right = "unsuccessfully"
-  or
-  wrong = "unsuprised" and right = "unsurprised"
-  or
-  wrong = "unsuprising" and right = "unsurprising"
-  or
-  wrong = "unsuprisingly" and right = "unsurprisingly"
-  or
-  wrong = "unsuprized" and right = "unsurprised"
-  or
-  wrong = "unsuprizing" and right = "unsurprising"
-  or
-  wrong = "unsuprizingly" and right = "unsurprisingly"
-  or
-  wrong = "unsurprized" and right = "unsurprised"
-  or
-  wrong = "unsurprizing" and right = "unsurprising"
-  or
-  wrong = "unsurprizingly" and right = "unsurprisingly"
-  or
-  wrong = "untill" and right = "until"
-  or
-  wrong = "untranslateable" and right = "untranslatable"
-  or
-  wrong = "unuseable" and right = "unusable"
-  or
-  wrong = "unusuable" and right = "unusable"
-  or
-  wrong = "unviersity" and right = "university"
-  or
-  wrong = "unwarrented" and right = "unwarranted"
-  or
-  wrong = "unweildly" and right = "unwieldy"
-  or
-  wrong = "unwieldly" and right = "unwieldy"
-  or
-  wrong = "upcomming" and right = "upcoming"
-  or
-  wrong = "upgradded" and right = "upgraded"
-  or
-  wrong = "usally" and right = "usually"
-  or
-  wrong = "useage" and right = "usage"
-  or
-  wrong = "usefull" and right = "useful"
-  or
-  wrong = "usefuly" and right = "usefully"
-  or
-  wrong = "useing" and right = "using"
-  or
-  wrong = "usualy" and right = "usually"
-  or
-  wrong = "ususally" and right = "usually"
-  or
-  wrong = "vaccum" and right = "vacuum"
-  or
-  wrong = "vaccume" and right = "vacuum"
-  or
-  wrong = "vacinity" and right = "vicinity"
-  or
-  wrong = "vaguaries" and right = "vagaries"
-  or
-  wrong = "vaieties" and right = "varieties"
-  or
-  wrong = "vailidty" and right = "validity"
-  or
-  wrong = "valetta" and right = "valletta"
-  or
-  wrong = "valuble" and right = "valuable"
-  or
-  wrong = "valueable" and right = "valuable"
-  or
-  wrong = "varations" and right = "variations"
-  or
-  wrong = "varient" and right = "variant"
-  or
-  wrong = "variey" and right = "variety"
-  or
-  wrong = "varing" and right = "varying"
-  or
-  wrong = "varities" and right = "varieties"
-  or
-  wrong = "varity" and right = "variety"
-  or
-  wrong = "vasall" and right = "vassal"
-  or
-  wrong = "vasalls" and right = "vassals"
-  or
-  wrong = "vaule" and right = "value"
-  or
-  wrong = "vegatarian" and right = "vegetarian"
-  or
-  wrong = "vegitable" and right = "vegetable"
-  or
-  wrong = "vegitables" and right = "vegetables"
-  or
-  wrong = "vegtable" and right = "vegetable"
-  or
-  wrong = "vehicule" and right = "vehicle"
-  or
-  wrong = "vell" and right = "well"
-  or
-  wrong = "venemous" and right = "venomous"
-  or
-  wrong = "vengance" and right = "vengeance"
-  or
-  wrong = "vengence" and right = "vengeance"
-  or
-  wrong = "verfication" and right = "verification"
-  or
-  wrong = "verison" and right = "version"
-  or
-  wrong = "verisons" and right = "versions"
-  or
-  wrong = "vermillion" and right = "vermilion"
-  or
-  wrong = "versitilaty" and right = "versatility"
-  or
-  wrong = "versitlity" and right = "versatility"
-  or
-  wrong = "vetween" and right = "between"
-  or
-  wrong = "veyr" and right = "very"
-  or
-  wrong = "vigeur" and right = "vigor"
-  or
-  wrong = "vigeur" and right = "vigour"
-  or
-  wrong = "vigeur" and right = "vigueur"
-  or
-  wrong = "vigilence" and right = "vigilance"
-  or
-  wrong = "vigourous" and right = "vigorous"
-  or
-  wrong = "villian" and right = "villain"
-  or
-  wrong = "villification" and right = "vilification"
-  or
-  wrong = "villify" and right = "vilify"
-  or
-  wrong = "villin" and right = "villain"
-  or
-  wrong = "villin" and right = "villein"
-  or
-  wrong = "villin" and right = "villi"
-  or
-  wrong = "vincinity" and right = "vicinity"
-  or
-  wrong = "violentce" and right = "violence"
-  or
-  wrong = "virtualy" and right = "virtually"
-  or
-  wrong = "virutal" and right = "virtual"
-  or
-  wrong = "virutally" and right = "virtually"
-  or
-  wrong = "visable" and right = "visible"
-  or
-  wrong = "visably" and right = "visibly"
-  or
-  wrong = "visting" and right = "visiting"
-  or
-  wrong = "vistors" and right = "visitors"
-  or
-  wrong = "vitories" and right = "victories"
-  or
-  wrong = "volcanoe" and right = "volcano"
-  or
-  wrong = "voleyball" and right = "volleyball"
-  or
-  wrong = "volontary" and right = "voluntary"
-  or
-  wrong = "volonteer" and right = "volunteer"
-  or
-  wrong = "volonteered" and right = "volunteered"
-  or
-  wrong = "volonteering" and right = "volunteering"
-  or
-  wrong = "volonteers" and right = "volunteers"
-  or
-  wrong = "volounteer" and right = "volunteer"
-  or
-  wrong = "volounteered" and right = "volunteered"
-  or
-  wrong = "volounteering" and right = "volunteering"
-  or
-  wrong = "volounteers" and right = "volunteers"
-  or
-  wrong = "volumne" and right = "volume"
-  or
-  wrong = "vreity" and right = "variety"
-  or
-  wrong = "vrey" and right = "very"
-  or
-  wrong = "vriety" and right = "variety"
-  or
-  wrong = "vulnerablility" and right = "vulnerability"
-  or
-  wrong = "vyer" and right = "very"
-  or
-  wrong = "vyre" and right = "very"
-  or
-  wrong = "waht" and right = "what"
-  or
-  wrong = "warantee" and right = "warranty"
-  or
-  wrong = "wardobe" and right = "wardrobe"
-  or
-  wrong = "warrent" and right = "warrant"
-  or
-  wrong = "warrriors" and right = "warriors"
-  or
-  wrong = "wass" and right = "was"
-  or
-  wrong = "watn" and right = "want"
-  or
-  wrong = "wayword" and right = "wayward"
-  or
-  wrong = "weaponary" and right = "weaponry"
-  or
-  wrong = "weas" and right = "was"
-  or
-  wrong = "wehn" and right = "when"
-  or
-  wrong = "weild" and right = "wield"
-  or
-  wrong = "weild" and right = "wild"
-  or
-  wrong = "weilded" and right = "wielded"
-  or
-  wrong = "wendsay" and right = "wednesday"
-  or
-  wrong = "wensday" and right = "wednesday"
-  or
-  wrong = "wereabouts" and right = "whereabouts"
-  or
-  wrong = "whant" and right = "want"
-  or
-  wrong = "whants" and right = "wants"
-  or
-  wrong = "whcih" and right = "which"
-  or
-  wrong = "wheras" and right = "whereas"
-  or
-  wrong = "wherease" and right = "whereas"
-  or
-  wrong = "whereever" and right = "wherever"
-  or
-  wrong = "whic" and right = "which"
-  or
-  wrong = "whihc" and right = "which"
-  or
-  wrong = "whith" and right = "with"
-  or
-  wrong = "whlch" and right = "which"
-  or
-  wrong = "whn" and right = "when"
-  or
-  wrong = "wholey" and right = "wholly"
-  or
-  wrong = "wholy" and right = "holy"
-  or
-  wrong = "wholy" and right = "wholly"
-  or
-  wrong = "whta" and right = "what"
-  or
-  wrong = "whther" and right = "whether"
-  or
-  wrong = "wich" and right = "which"
-  or
-  wrong = "wich" and right = "witch"
-  or
-  wrong = "widesread" and right = "widespread"
-  or
-  wrong = "wief" and right = "wife"
-  or
-  wrong = "wierd" and right = "weird"
-  or
-  wrong = "wiew" and right = "view"
-  or
-  wrong = "wih" and right = "with"
-  or
-  wrong = "wiht" and right = "with"
-  or
-  wrong = "wille" and right = "will"
-  or
-  wrong = "willingless" and right = "willingness"
-  or
-  wrong = "willk" and right = "will"
-  or
-  wrong = "wirting" and right = "writing"
-  or
-  wrong = "withdrawl" and right = "withdraw"
-  or
-  wrong = "withdrawl" and right = "withdrawal"
-  or
-  wrong = "witheld" and right = "withheld"
-  or
-  wrong = "withh" and right = "with"
-  or
-  wrong = "withing" and right = "within"
-  or
-  wrong = "withold" and right = "withhold"
-  or
-  wrong = "witht" and right = "with"
-  or
-  wrong = "witn" and right = "with"
-  or
-  wrong = "wiull" and right = "will"
-  or
-  wrong = "wnat" and right = "want"
-  or
-  wrong = "wnated" and right = "wanted"
-  or
-  wrong = "wnats" and right = "wants"
-  or
-  wrong = "wohle" and right = "whole"
-  or
-  wrong = "wokr" and right = "work"
-  or
-  wrong = "wokring" and right = "working"
-  or
-  wrong = "wonderfull" and right = "wonderful"
-  or
-  wrong = "wordlwide" and right = "worldwide"
-  or
-  wrong = "workststion" and right = "workstation"
-  or
-  wrong = "worls" and right = "world"
-  or
-  wrong = "worstened" and right = "worsened"
-  or
-  wrong = "woudl" and right = "would"
-  or
-  wrong = "wresters" and right = "wrestlers"
-  or
-  wrong = "wriet" and right = "write"
-  or
-  wrong = "writen" and right = "written"
-  or
-  wrong = "wroet" and right = "wrote"
-  or
-  wrong = "wrok" and right = "work"
-  or
-  wrong = "wroking" and right = "working"
-  or
-  wrong = "wtih" and right = "with"
-  or
-  wrong = "wupport" and right = "support"
-  or
-  wrong = "xenophoby" and right = "xenophobia"
-  or
-  wrong = "yaching" and right = "yachting"
-  or
-  wrong = "yaer" and right = "year"
-  or
-  wrong = "yaerly" and right = "yearly"
-  or
-  wrong = "yaers" and right = "years"
-  or
-  wrong = "yatch" and right = "yacht"
-  or
-  wrong = "yearm" and right = "year"
-  or
-  wrong = "yeasr" and right = "years"
-  or
-  wrong = "yeild" and right = "yield"
-  or
-  wrong = "yeilding" and right = "yielding"
-  or
-  wrong = "yementite" and right = "yemeni"
-  or
-  wrong = "yementite" and right = "yemenite"
-  or
-  wrong = "yera" and right = "year"
-  or
-  wrong = "yeras" and right = "years"
-  or
-  wrong = "yersa" and right = "years"
-  or
-  wrong = "yotube" and right = "youtube"
-  or
-  wrong = "youseff" and right = "yousef"
-  or
-  wrong = "youself" and right = "yourself"
-  or
-  wrong = "yrea" and right = "year"
-  or
-  wrong = "ytou" and right = "you"
-  or
-  wrong = "yuo" and right = "you"
-  or
-  wrong = "zeebra" and right = "zebra"
-}
+import codeql.typos.TypoDatabase as DB
+
+/** DEPRECATED: Use the `codeql/typos` pack instead. */
+deprecated predicate typos = DB::typos/2;
diff --git a/ql/ql/src/qlpack.yml b/ql/ql/src/qlpack.yml
index 9ae2cb13787..9ee790bdfe5 100644
--- a/ql/ql/src/qlpack.yml
+++ b/ql/ql/src/qlpack.yml
@@ -5,3 +5,5 @@ dbscheme: ql.dbscheme
 suites: codeql-suites
 defaultSuiteFile: codeql-suites/ql-code-scanning.qls
 extractor: ql
+dependencies:
+  codeql/typos: "*"
diff --git a/shared/typos/codeql/typos/TypoDatabase.qll b/shared/typos/codeql/typos/TypoDatabase.qll
new file mode 100644
index 00000000000..a41f003a8c0
--- /dev/null
+++ b/shared/typos/codeql/typos/TypoDatabase.qll
@@ -0,0 +1,9035 @@
+/**
+ * Holds if `wrong` is a common misspelling of `right`.
+ *
+ * This predicate was automatically generated by
+ *     python buildutils-internal/scripts/generate-typos.py
+ * which uses http://en.wikipedia.org/wiki/Wikipedia:Lists_of_common_misspellings/For_machines (with custom additions) on 2018-01-19.
+ *
+ * This file is available under the Creative Commons Attribution-ShareAlike License
+ * (https://en.wikipedia.org/wiki/Wikipedia:Text_of_Creative_Commons_Attribution-ShareAlike_3.0_Unported_License).
+ */
+predicate typos(string wrong, string right) {
+  wrong = "abandonned" and right = "abandoned"
+  or
+  wrong = "abbout" and right = "about"
+  or
+  wrong = "aberation" and right = "aberration"
+  or
+  wrong = "abilityes" and right = "abilities"
+  or
+  wrong = "abilties" and right = "abilities"
+  or
+  wrong = "abilty" and right = "ability"
+  or
+  wrong = "abondon" and right = "abandon"
+  or
+  wrong = "abondoned" and right = "abandoned"
+  or
+  wrong = "abondoning" and right = "abandoning"
+  or
+  wrong = "abondons" and right = "abandons"
+  or
+  wrong = "aborigene" and right = "aborigine"
+  or
+  wrong = "abortificant" and right = "abortifacient"
+  or
+  wrong = "abotu" and right = "about"
+  or
+  wrong = "abreviate" and right = "abbreviate"
+  or
+  wrong = "abreviated" and right = "abbreviated"
+  or
+  wrong = "abreviation" and right = "abbreviation"
+  or
+  wrong = "abritrary" and right = "arbitrary"
+  or
+  wrong = "absail" and right = "abseil"
+  or
+  wrong = "absailing" and right = "abseiling"
+  or
+  wrong = "abscence" and right = "absence"
+  or
+  wrong = "absense" and right = "absence"
+  or
+  wrong = "absolutly" and right = "absolutely"
+  or
+  wrong = "absorbsion" and right = "absorption"
+  or
+  wrong = "absorbtion" and right = "absorption"
+  or
+  wrong = "abudance" and right = "abundance"
+  or
+  wrong = "abundacies" and right = "abundances"
+  or
+  wrong = "abundancies" and right = "abundances"
+  or
+  wrong = "abundunt" and right = "abundant"
+  or
+  wrong = "abutts" and right = "abuts"
+  or
+  wrong = "acadamy" and right = "academy"
+  or
+  wrong = "acadmic" and right = "academic"
+  or
+  wrong = "accademic" and right = "academic"
+  or
+  wrong = "accademy" and right = "academy"
+  or
+  wrong = "acccess" and right = "access"
+  or
+  wrong = "acccused" and right = "accused"
+  or
+  wrong = "accelleration" and right = "acceleration"
+  or
+  wrong = "accension" and right = "accession"
+  or
+  wrong = "accension" and right = "ascension"
+  or
+  wrong = "acceptence" and right = "acceptance"
+  or
+  wrong = "acceptible" and right = "acceptable"
+  or
+  wrong = "accesories" and right = "accessories"
+  or
+  wrong = "accessable" and right = "accessible"
+  or
+  wrong = "accidant" and right = "accident"
+  or
+  wrong = "accidentaly" and right = "accidentally"
+  or
+  wrong = "accidently" and right = "accidentally"
+  or
+  wrong = "acclimitization" and right = "acclimatization"
+  or
+  wrong = "accomadate" and right = "accommodate"
+  or
+  wrong = "accomadated" and right = "accommodated"
+  or
+  wrong = "accomadates" and right = "accommodates"
+  or
+  wrong = "accomadating" and right = "accommodating"
+  or
+  wrong = "accomadation" and right = "accommodation"
+  or
+  wrong = "accomadations" and right = "accommodations"
+  or
+  wrong = "accomdate" and right = "accommodate"
+  or
+  wrong = "accomodate" and right = "accommodate"
+  or
+  wrong = "accomodated" and right = "accommodated"
+  or
+  wrong = "accomodates" and right = "accommodates"
+  or
+  wrong = "accomodating" and right = "accommodating"
+  or
+  wrong = "accomodation" and right = "accommodation"
+  or
+  wrong = "accomodations" and right = "accommodations"
+  or
+  wrong = "accompanyed" and right = "accompanied"
+  or
+  wrong = "accordeon" and right = "accordion"
+  or
+  wrong = "accordian" and right = "accordion"
+  or
+  wrong = "accoring" and right = "according"
+  or
+  wrong = "accoustic" and right = "acoustic"
+  or
+  wrong = "accquainted" and right = "acquainted"
+  or
+  wrong = "accrediation" and right = "accreditation"
+  or
+  wrong = "accredidation" and right = "accreditation"
+  or
+  wrong = "accross" and right = "across"
+  or
+  wrong = "accussed" and right = "accused"
+  or
+  wrong = "acedemic" and right = "academic"
+  or
+  wrong = "acheive" and right = "achieve"
+  or
+  wrong = "acheived" and right = "achieved"
+  or
+  wrong = "acheivement" and right = "achievement"
+  or
+  wrong = "acheivements" and right = "achievements"
+  or
+  wrong = "acheives" and right = "achieves"
+  or
+  wrong = "acheiving" and right = "achieving"
+  or
+  wrong = "acheivment" and right = "achievement"
+  or
+  wrong = "acheivments" and right = "achievements"
+  or
+  wrong = "achievment" and right = "achievement"
+  or
+  wrong = "achievments" and right = "achievements"
+  or
+  wrong = "achive" and right = "achieve"
+  or
+  wrong = "achive" and right = "archive"
+  or
+  wrong = "achived" and right = "achieved"
+  or
+  wrong = "achived" and right = "archived"
+  or
+  wrong = "achivement" and right = "achievement"
+  or
+  wrong = "achivements" and right = "achievements"
+  or
+  wrong = "acident" and right = "accident"
+  or
+  wrong = "acknowldeged" and right = "acknowledged"
+  or
+  wrong = "acknowledgeing" and right = "acknowledging"
+  or
+  wrong = "ackward" and right = "awkward"
+  or
+  wrong = "ackward" and right = "backward"
+  or
+  wrong = "acommodate" and right = "accommodate"
+  or
+  wrong = "acomplish" and right = "accomplish"
+  or
+  wrong = "acomplished" and right = "accomplished"
+  or
+  wrong = "acomplishment" and right = "accomplishment"
+  or
+  wrong = "acomplishments" and right = "accomplishments"
+  or
+  wrong = "acording" and right = "according"
+  or
+  wrong = "acordingly" and right = "accordingly"
+  or
+  wrong = "acquaintence" and right = "acquaintance"
+  or
+  wrong = "acquaintences" and right = "acquaintances"
+  or
+  wrong = "acquiantence" and right = "acquaintance"
+  or
+  wrong = "acquiantences" and right = "acquaintances"
+  or
+  wrong = "acquited" and right = "acquitted"
+  or
+  wrong = "activites" and right = "activities"
+  or
+  wrong = "activly" and right = "actively"
+  or
+  wrong = "actualy" and right = "actually"
+  or
+  wrong = "acuracy" and right = "accuracy"
+  or
+  wrong = "acused" and right = "accused"
+  or
+  wrong = "acustom" and right = "accustom"
+  or
+  wrong = "acustommed" and right = "accustomed"
+  or
+  wrong = "adapater" and right = "adapter"
+  or
+  wrong = "adavanced" and right = "advanced"
+  or
+  wrong = "adbandon" and right = "abandon"
+  or
+  wrong = "addional" and right = "additional"
+  or
+  wrong = "addionally" and right = "additionally"
+  or
+  wrong = "additinally" and right = "additionally"
+  or
+  wrong = "additionaly" and right = "additionally"
+  or
+  wrong = "additonal" and right = "additional"
+  or
+  wrong = "additonally" and right = "additionally"
+  or
+  wrong = "addmission" and right = "admission"
+  or
+  wrong = "addopt" and right = "adopt"
+  or
+  wrong = "addopted" and right = "adopted"
+  or
+  wrong = "addoptive" and right = "adoptive"
+  or
+  wrong = "addres" and right = "adders"
+  or
+  wrong = "addres" and right = "address"
+  or
+  wrong = "addresable" and right = "addressable"
+  or
+  wrong = "addresed" and right = "addressed"
+  or
+  wrong = "addresing" and right = "addressing"
+  or
+  wrong = "addressess" and right = "addresses"
+  or
+  wrong = "addtion" and right = "addition"
+  or
+  wrong = "addtional" and right = "additional"
+  or
+  wrong = "adecuate" and right = "adequate"
+  or
+  wrong = "adequit" and right = "adequate"
+  or
+  wrong = "adhearing" and right = "adhering"
+  or
+  wrong = "adherance" and right = "adherence"
+  or
+  wrong = "admendment" and right = "amendment"
+  or
+  wrong = "admininistrative" and right = "administrative"
+  or
+  wrong = "adminstered" and right = "administered"
+  or
+  wrong = "adminstrate" and right = "administrate"
+  or
+  wrong = "adminstration" and right = "administration"
+  or
+  wrong = "adminstrative" and right = "administrative"
+  or
+  wrong = "adminstrator" and right = "administrator"
+  or
+  wrong = "admissability" and right = "admissibility"
+  or
+  wrong = "admissable" and right = "admissible"
+  or
+  wrong = "admited" and right = "admitted"
+  or
+  wrong = "admitedly" and right = "admittedly"
+  or
+  wrong = "adn" and right = "and"
+  or
+  wrong = "adolecent" and right = "adolescent"
+  or
+  wrong = "adquire" and right = "acquire"
+  or
+  wrong = "adquired" and right = "acquired"
+  or
+  wrong = "adquires" and right = "acquires"
+  or
+  wrong = "adquiring" and right = "acquiring"
+  or
+  wrong = "adres" and right = "address"
+  or
+  wrong = "adresable" and right = "addressable"
+  or
+  wrong = "adresing" and right = "addressing"
+  or
+  wrong = "adress" and right = "address"
+  or
+  wrong = "adressable" and right = "addressable"
+  or
+  wrong = "adressed" and right = "addressed"
+  or
+  wrong = "adressing" and right = "addressing"
+  or
+  wrong = "adressing" and right = "dressing"
+  or
+  wrong = "adventrous" and right = "adventurous"
+  or
+  wrong = "advertisment" and right = "advertisement"
+  or
+  wrong = "advertisments" and right = "advertisements"
+  or
+  wrong = "advesary" and right = "adversary"
+  or
+  wrong = "adviced" and right = "advised"
+  or
+  wrong = "aeriel" and right = "aerial"
+  or
+  wrong = "aeriels" and right = "aerials"
+  or
+  wrong = "afair" and right = "affair"
+  or
+  wrong = "afficianados" and right = "aficionados"
+  or
+  wrong = "afficionado" and right = "aficionado"
+  or
+  wrong = "afficionados" and right = "aficionados"
+  or
+  wrong = "affilate" and right = "affiliate"
+  or
+  wrong = "affilliate" and right = "affiliate"
+  or
+  wrong = "affort" and right = "afford"
+  or
+  wrong = "affort" and right = "effort"
+  or
+  wrong = "aforememtioned" and right = "aforementioned"
+  or
+  wrong = "againnst" and right = "against"
+  or
+  wrong = "agains" and right = "against"
+  or
+  wrong = "agaisnt" and right = "against"
+  or
+  wrong = "aganist" and right = "against"
+  or
+  wrong = "aggaravates" and right = "aggravates"
+  or
+  wrong = "aggreed" and right = "agreed"
+  or
+  wrong = "aggreement" and right = "agreement"
+  or
+  wrong = "aggregious" and right = "egregious"
+  or
+  wrong = "aggresive" and right = "aggressive"
+  or
+  wrong = "agian" and right = "again"
+  or
+  wrong = "agianst" and right = "against"
+  or
+  wrong = "agin" and right = "again"
+  or
+  wrong = "agina" and right = "again"
+  or
+  wrong = "agina" and right = "angina"
+  or
+  wrong = "aginst" and right = "against"
+  or
+  wrong = "agravate" and right = "aggravate"
+  or
+  wrong = "agre" and right = "agree"
+  or
+  wrong = "agred" and right = "agreed"
+  or
+  wrong = "agreeement" and right = "agreement"
+  or
+  wrong = "agreemnt" and right = "agreement"
+  or
+  wrong = "agregate" and right = "aggregate"
+  or
+  wrong = "agregates" and right = "aggregates"
+  or
+  wrong = "agreing" and right = "agreeing"
+  or
+  wrong = "agression" and right = "aggression"
+  or
+  wrong = "agressive" and right = "aggressive"
+  or
+  wrong = "agressively" and right = "aggressively"
+  or
+  wrong = "agressor" and right = "aggressor"
+  or
+  wrong = "agricultue" and right = "agriculture"
+  or
+  wrong = "agriculure" and right = "agriculture"
+  or
+  wrong = "agricuture" and right = "agriculture"
+  or
+  wrong = "agrieved" and right = "aggrieved"
+  or
+  wrong = "agrument" and right = "argument"
+  or
+  wrong = "agruments" and right = "arguments"
+  or
+  wrong = "ahev" and right = "have"
+  or
+  wrong = "ahppen" and right = "happen"
+  or
+  wrong = "ahve" and right = "have"
+  or
+  wrong = "aicraft" and right = "aircraft"
+  or
+  wrong = "aiport" and right = "airport"
+  or
+  wrong = "airbourne" and right = "airborne"
+  or
+  wrong = "aircaft" and right = "aircraft"
+  or
+  wrong = "aircrafts" and right = "aircraft"
+  or
+  wrong = "airporta" and right = "airports"
+  or
+  wrong = "airrcraft" and right = "aircraft"
+  or
+  wrong = "aisian" and right = "asian"
+  or
+  wrong = "albiet" and right = "albeit"
+  or
+  wrong = "alchohol" and right = "alcohol"
+  or
+  wrong = "alchoholic" and right = "alcoholic"
+  or
+  wrong = "alchol" and right = "alcohol"
+  or
+  wrong = "alcholic" and right = "alcoholic"
+  or
+  wrong = "alcohal" and right = "alcohol"
+  or
+  wrong = "alcoholical" and right = "alcoholic"
+  or
+  wrong = "aledge" and right = "allege"
+  or
+  wrong = "aledged" and right = "alleged"
+  or
+  wrong = "aledges" and right = "alleges"
+  or
+  wrong = "alege" and right = "allege"
+  or
+  wrong = "aleged" and right = "alleged"
+  or
+  wrong = "alegience" and right = "allegiance"
+  or
+  wrong = "algebraical" and right = "algebraic"
+  or
+  wrong = "algorhitms" and right = "algorithms"
+  or
+  wrong = "algoritm" and right = "algorithm"
+  or
+  wrong = "algoritms" and right = "algorithms"
+  or
+  wrong = "alientating" and right = "alienating"
+  or
+  wrong = "alledge" and right = "allege"
+  or
+  wrong = "alledged" and right = "alleged"
+  or
+  wrong = "alledgedly" and right = "allegedly"
+  or
+  wrong = "alledges" and right = "alleges"
+  or
+  wrong = "allegedely" and right = "allegedly"
+  or
+  wrong = "allegedy" and right = "allegedly"
+  or
+  wrong = "allegely" and right = "allegedly"
+  or
+  wrong = "allegence" and right = "allegiance"
+  or
+  wrong = "allegience" and right = "allegiance"
+  or
+  wrong = "allign" and right = "align"
+  or
+  wrong = "alligned" and right = "aligned"
+  or
+  wrong = "alliviate" and right = "alleviate"
+  or
+  wrong = "allopone" and right = "allophone"
+  or
+  wrong = "allopones" and right = "allophones"
+  or
+  wrong = "allready" and right = "already"
+  or
+  wrong = "allthough" and right = "although"
+  or
+  wrong = "alltogether" and right = "altogether"
+  or
+  wrong = "almsot" and right = "almost"
+  or
+  wrong = "alochol" and right = "alcohol"
+  or
+  wrong = "alomst" and right = "almost"
+  or
+  wrong = "alot" and right = "allot"
+  or
+  wrong = "alotted" and right = "allotted"
+  or
+  wrong = "alowed" and right = "allowed"
+  or
+  wrong = "alowing" and right = "allowing"
+  or
+  wrong = "alreayd" and right = "already"
+  or
+  wrong = "alse" and right = "else"
+  or
+  wrong = "alsot" and right = "also"
+  or
+  wrong = "alternitives" and right = "alternatives"
+  or
+  wrong = "altho" and right = "although"
+  or
+  wrong = "althought" and right = "although"
+  or
+  wrong = "altough" and right = "although"
+  or
+  wrong = "alusion" and right = "allusion"
+  or
+  wrong = "alusion" and right = "illusion"
+  or
+  wrong = "alwasy" and right = "always"
+  or
+  wrong = "alwyas" and right = "always"
+  or
+  wrong = "amalgomated" and right = "amalgamated"
+  or
+  wrong = "amatuer" and right = "amateur"
+  or
+  wrong = "amature" and right = "amateur"
+  or
+  wrong = "amature" and right = "armature"
+  or
+  wrong = "amendmant" and right = "amendment"
+  or
+  wrong = "amercia" and right = "america"
+  or
+  wrong = "amerliorate" and right = "ameliorate"
+  or
+  wrong = "amke" and right = "make"
+  or
+  wrong = "amking" and right = "making"
+  or
+  wrong = "ammend" and right = "amend"
+  or
+  wrong = "ammended" and right = "amended"
+  or
+  wrong = "ammendment" and right = "amendment"
+  or
+  wrong = "ammendments" and right = "amendments"
+  or
+  wrong = "ammount" and right = "amount"
+  or
+  wrong = "ammused" and right = "amused"
+  or
+  wrong = "amoung" and right = "among"
+  or
+  wrong = "amoungst" and right = "amongst"
+  or
+  wrong = "amung" and right = "among"
+  or
+  wrong = "amunition" and right = "ammunition"
+  or
+  wrong = "analagous" and right = "analogous"
+  or
+  wrong = "analitic" and right = "analytic"
+  or
+  wrong = "analogeous" and right = "analogous"
+  or
+  wrong = "anarchim" and right = "anarchism"
+  or
+  wrong = "anarchistm" and right = "anarchism"
+  or
+  wrong = "anbd" and right = "and"
+  or
+  wrong = "ancestory" and right = "ancestry"
+  or
+  wrong = "ancilliary" and right = "ancillary"
+  or
+  wrong = "andd" and right = "and"
+  or
+  wrong = "androgenous" and right = "androgynous"
+  or
+  wrong = "androgeny" and right = "androgyny"
+  or
+  wrong = "anihilation" and right = "annihilation"
+  or
+  wrong = "aniversary" and right = "anniversary"
+  or
+  wrong = "annoint" and right = "anoint"
+  or
+  wrong = "annointed" and right = "anointed"
+  or
+  wrong = "annointing" and right = "anointing"
+  or
+  wrong = "annoints" and right = "anoints"
+  or
+  wrong = "annouced" and right = "announced"
+  or
+  wrong = "annualy" and right = "annually"
+  or
+  wrong = "annuled" and right = "annulled"
+  or
+  wrong = "anohter" and right = "another"
+  or
+  wrong = "anomolies" and right = "anomalies"
+  or
+  wrong = "anomolous" and right = "anomalous"
+  or
+  wrong = "anomoly" and right = "anomaly"
+  or
+  wrong = "anonimity" and right = "anonymity"
+  or
+  wrong = "anounced" and right = "announced"
+  or
+  wrong = "anouncement" and right = "announcement"
+  or
+  wrong = "ansalisation" and right = "nasalisation"
+  or
+  wrong = "ansalization" and right = "nasalization"
+  or
+  wrong = "ansestors" and right = "ancestors"
+  or
+  wrong = "antartic" and right = "antarctic"
+  or
+  wrong = "anthromorphization" and right = "anthropomorphization"
+  or
+  wrong = "anthropolgist" and right = "anthropologist"
+  or
+  wrong = "anthropolgy" and right = "anthropology"
+  or
+  wrong = "anual" and right = "annual"
+  or
+  wrong = "anulled" and right = "annulled"
+  or
+  wrong = "anwsered" and right = "answered"
+  or
+  wrong = "anyhwere" and right = "anywhere"
+  or
+  wrong = "anytying" and right = "anything"
+  or
+  wrong = "aparent" and right = "apparent"
+  or
+  wrong = "aparment" and right = "apartment"
+  or
+  wrong = "apenines" and right = "apennines"
+  or
+  wrong = "aplication" and right = "application"
+  or
+  wrong = "aplied" and right = "applied"
+  or
+  wrong = "apolegetics" and right = "apologetics"
+  or
+  wrong = "apon" and right = "apron"
+  or
+  wrong = "apon" and right = "upon"
+  or
+  wrong = "apparant" and right = "apparent"
+  or
+  wrong = "apparantly" and right = "apparently"
+  or
+  wrong = "appart" and right = "apart"
+  or
+  wrong = "appartment" and right = "apartment"
+  or
+  wrong = "appartments" and right = "apartments"
+  or
+  wrong = "appealling" and right = "appalling"
+  or
+  wrong = "appealling" and right = "appealing"
+  or
+  wrong = "appeareance" and right = "appearance"
+  or
+  wrong = "appearence" and right = "appearance"
+  or
+  wrong = "appearences" and right = "appearances"
+  or
+  wrong = "appenines" and right = "apennines"
+  or
+  wrong = "apperance" and right = "appearance"
+  or
+  wrong = "apperances" and right = "appearances"
+  or
+  wrong = "appereance" and right = "appearance"
+  or
+  wrong = "appereances" and right = "appearances"
+  or
+  wrong = "applicaiton" and right = "application"
+  or
+  wrong = "applicaitons" and right = "applications"
+  or
+  wrong = "appologies" and right = "apologies"
+  or
+  wrong = "appology" and right = "apology"
+  or
+  wrong = "apprearance" and right = "appearance"
+  or
+  wrong = "apprieciate" and right = "appreciate"
+  or
+  wrong = "approachs" and right = "approaches"
+  or
+  wrong = "appropiate" and right = "appropriate"
+  or
+  wrong = "appropraite" and right = "appropriate"
+  or
+  wrong = "appropropiate" and right = "appropriate"
+  or
+  wrong = "approproximate" and right = "approximate"
+  or
+  wrong = "approxamately" and right = "approximately"
+  or
+  wrong = "approxiately" and right = "approximately"
+  or
+  wrong = "approximitely" and right = "approximately"
+  or
+  wrong = "aprehensive" and right = "apprehensive"
+  or
+  wrong = "apropriate" and right = "appropriate"
+  or
+  wrong = "aproval" and right = "approval"
+  or
+  wrong = "aproximate" and right = "approximate"
+  or
+  wrong = "aproximately" and right = "approximately"
+  or
+  wrong = "aquaduct" and right = "aqueduct"
+  or
+  wrong = "aquaintance" and right = "acquaintance"
+  or
+  wrong = "aquainted" and right = "acquainted"
+  or
+  wrong = "aquiantance" and right = "acquaintance"
+  or
+  wrong = "aquire" and right = "acquire"
+  or
+  wrong = "aquired" and right = "acquired"
+  or
+  wrong = "aquiring" and right = "acquiring"
+  or
+  wrong = "aquisition" and right = "acquisition"
+  or
+  wrong = "aquitted" and right = "acquitted"
+  or
+  wrong = "aranged" and right = "arranged"
+  or
+  wrong = "arangement" and right = "arrangement"
+  or
+  wrong = "arbitarily" and right = "arbitrarily"
+  or
+  wrong = "arbitary" and right = "arbitrary"
+  or
+  wrong = "archaelogical" and right = "archaeological"
+  or
+  wrong = "archaelogists" and right = "archaeologists"
+  or
+  wrong = "archaelogy" and right = "archaeology"
+  or
+  wrong = "archaoelogy" and right = "archaeology"
+  or
+  wrong = "archaoelogy" and right = "archeology"
+  or
+  wrong = "archaology" and right = "archaeology"
+  or
+  wrong = "archaology" and right = "archeology"
+  or
+  wrong = "archeaologist" and right = "archaeologist"
+  or
+  wrong = "archeaologist" and right = "archeologist"
+  or
+  wrong = "archeaologists" and right = "archaeologists"
+  or
+  wrong = "archeaologists" and right = "archeologists"
+  or
+  wrong = "archetect" and right = "architect"
+  or
+  wrong = "archetects" and right = "architects"
+  or
+  wrong = "archetectural" and right = "architectural"
+  or
+  wrong = "archetecturally" and right = "architecturally"
+  or
+  wrong = "archetecture" and right = "architecture"
+  or
+  wrong = "archiac" and right = "archaic"
+  or
+  wrong = "archictect" and right = "architect"
+  or
+  wrong = "archimedian" and right = "archimedean"
+  or
+  wrong = "architecht" and right = "architect"
+  or
+  wrong = "architechturally" and right = "architecturally"
+  or
+  wrong = "architechture" and right = "architecture"
+  or
+  wrong = "architechtures" and right = "architectures"
+  or
+  wrong = "architectual" and right = "architectural"
+  or
+  wrong = "archtype" and right = "archetype"
+  or
+  wrong = "archtypes" and right = "archetypes"
+  or
+  wrong = "aready" and right = "already"
+  or
+  wrong = "areodynamics" and right = "aerodynamics"
+  or
+  wrong = "argubly" and right = "arguably"
+  or
+  wrong = "arguement" and right = "argument"
+  or
+  wrong = "arguements" and right = "arguments"
+  or
+  wrong = "arised" and right = "arose"
+  or
+  wrong = "arival" and right = "arrival"
+  or
+  wrong = "armamant" and right = "armament"
+  or
+  wrong = "armistace" and right = "armistice"
+  or
+  wrong = "arogant" and right = "arrogant"
+  or
+  wrong = "arogent" and right = "arrogant"
+  or
+  wrong = "aroud" and right = "around"
+  or
+  wrong = "arrangment" and right = "arrangement"
+  or
+  wrong = "arrangments" and right = "arrangements"
+  or
+  wrong = "arrengement" and right = "arrangement"
+  or
+  wrong = "arrengements" and right = "arrangements"
+  or
+  wrong = "arround" and right = "around"
+  or
+  wrong = "artcile" and right = "article"
+  or
+  wrong = "artical" and right = "article"
+  or
+  wrong = "artice" and right = "article"
+  or
+  wrong = "articel" and right = "article"
+  or
+  wrong = "artifical" and right = "artificial"
+  or
+  wrong = "artifically" and right = "artificially"
+  or
+  wrong = "artillary" and right = "artillery"
+  or
+  wrong = "arund" and right = "around"
+  or
+  wrong = "asetic" and right = "ascetic"
+  or
+  wrong = "asign" and right = "assign"
+  or
+  wrong = "aslo" and right = "also"
+  or
+  wrong = "asnyc" and right = "async"
+  or
+  wrong = "asociated" and right = "associated"
+  or
+  wrong = "asorbed" and right = "absorbed"
+  or
+  wrong = "asphyxation" and right = "asphyxiation"
+  or
+  wrong = "assasin" and right = "assassin"
+  or
+  wrong = "assasinate" and right = "assassinate"
+  or
+  wrong = "assasinated" and right = "assassinated"
+  or
+  wrong = "assasinates" and right = "assassinates"
+  or
+  wrong = "assasination" and right = "assassination"
+  or
+  wrong = "assasinations" and right = "assassinations"
+  or
+  wrong = "assasined" and right = "assassinated"
+  or
+  wrong = "assasins" and right = "assassins"
+  or
+  wrong = "assassintation" and right = "assassination"
+  or
+  wrong = "assemple" and right = "assemble"
+  or
+  wrong = "assertation" and right = "assertion"
+  or
+  wrong = "asside" and right = "aside"
+  or
+  wrong = "assisnate" and right = "assassinate"
+  or
+  wrong = "assit" and right = "assist"
+  or
+  wrong = "assitant" and right = "assistant"
+  or
+  wrong = "assocation" and right = "association"
+  or
+  wrong = "assoicate" and right = "associate"
+  or
+  wrong = "assoicated" and right = "associated"
+  or
+  wrong = "assoicates" and right = "associates"
+  or
+  wrong = "assosication" and right = "assassination"
+  or
+  wrong = "asssassans" and right = "assassins"
+  or
+  wrong = "assualt" and right = "assault"
+  or
+  wrong = "assualted" and right = "assaulted"
+  or
+  wrong = "assymetric" and right = "asymmetric"
+  or
+  wrong = "assymetrical" and right = "asymmetrical"
+  or
+  wrong = "asteriod" and right = "asteroid"
+  or
+  wrong = "asthetic" and right = "aesthetic"
+  or
+  wrong = "asthetical" and right = "aesthetical"
+  or
+  wrong = "asthetically" and right = "aesthetically"
+  or
+  wrong = "asume" and right = "assume"
+  or
+  wrong = "atain" and right = "attain"
+  or
+  wrong = "atempting" and right = "attempting"
+  or
+  wrong = "atheistical" and right = "atheistic"
+  or
+  wrong = "athenean" and right = "athenian"
+  or
+  wrong = "atheneans" and right = "athenians"
+  or
+  wrong = "athiesm" and right = "atheism"
+  or
+  wrong = "athiest" and right = "atheist"
+  or
+  wrong = "atorney" and right = "attorney"
+  or
+  wrong = "atribute" and right = "attribute"
+  or
+  wrong = "atributed" and right = "attributed"
+  or
+  wrong = "atributes" and right = "attributes"
+  or
+  wrong = "attaindre" and right = "attainder"
+  or
+  wrong = "attaindre" and right = "attained"
+  or
+  wrong = "attemp" and right = "attempt"
+  or
+  wrong = "attemped" and right = "attempted"
+  or
+  wrong = "attemt" and right = "attempt"
+  or
+  wrong = "attemted" and right = "attempted"
+  or
+  wrong = "attemting" and right = "attempting"
+  or
+  wrong = "attemts" and right = "attempts"
+  or
+  wrong = "attendence" and right = "attendance"
+  or
+  wrong = "attendent" and right = "attendant"
+  or
+  wrong = "attendents" and right = "attendants"
+  or
+  wrong = "attened" and right = "attended"
+  or
+  wrong = "attension" and right = "attention"
+  or
+  wrong = "attitide" and right = "attitude"
+  or
+  wrong = "attributred" and right = "attributed"
+  or
+  wrong = "attrocities" and right = "atrocities"
+  or
+  wrong = "audeince" and right = "audience"
+  or
+  wrong = "auromated" and right = "automated"
+  or
+  wrong = "austrailia" and right = "australia"
+  or
+  wrong = "austrailian" and right = "australian"
+  or
+  wrong = "auther" and right = "author"
+  or
+  wrong = "authobiographic" and right = "autobiographic"
+  or
+  wrong = "authobiography" and right = "autobiography"
+  or
+  wrong = "authorative" and right = "authoritative"
+  or
+  wrong = "authorites" and right = "authorities"
+  or
+  wrong = "authorithy" and right = "authority"
+  or
+  wrong = "authoritiers" and right = "authorities"
+  or
+  wrong = "authoritive" and right = "authoritative"
+  or
+  wrong = "authrorities" and right = "authorities"
+  or
+  wrong = "autochtonous" and right = "autochthonous"
+  or
+  wrong = "autoctonous" and right = "autochthonous"
+  or
+  wrong = "automaticly" and right = "automatically"
+  or
+  wrong = "automibile" and right = "automobile"
+  or
+  wrong = "automonomous" and right = "autonomous"
+  or
+  wrong = "autor" and right = "author"
+  or
+  wrong = "autority" and right = "authority"
+  or
+  wrong = "auxilary" and right = "auxiliary"
+  or
+  wrong = "auxillaries" and right = "auxiliaries"
+  or
+  wrong = "auxillary" and right = "auxiliary"
+  or
+  wrong = "auxilliaries" and right = "auxiliaries"
+  or
+  wrong = "auxilliary" and right = "auxiliary"
+  or
+  wrong = "availabe" and right = "available"
+  or
+  wrong = "availablity" and right = "availability"
+  or
+  wrong = "availaible" and right = "available"
+  or
+  wrong = "availble" and right = "available"
+  or
+  wrong = "availiable" and right = "available"
+  or
+  wrong = "availible" and right = "available"
+  or
+  wrong = "avalable" and right = "available"
+  or
+  wrong = "avalance" and right = "avalanche"
+  or
+  wrong = "avaliable" and right = "available"
+  or
+  wrong = "avation" and right = "aviation"
+  or
+  wrong = "averageed" and right = "averaged"
+  or
+  wrong = "avilable" and right = "available"
+  or
+  wrong = "awared" and right = "awarded"
+  or
+  wrong = "awya" and right = "away"
+  or
+  wrong = "baceause" and right = "because"
+  or
+  wrong = "backgorund" and right = "background"
+  or
+  wrong = "backrounds" and right = "backgrounds"
+  or
+  wrong = "bakc" and right = "back"
+  or
+  wrong = "banannas" and right = "bananas"
+  or
+  wrong = "bandwith" and right = "bandwidth"
+  or
+  wrong = "bankrupcy" and right = "bankruptcy"
+  or
+  wrong = "banruptcy" and right = "bankruptcy"
+  or
+  wrong = "baout" and right = "about"
+  or
+  wrong = "baout" and right = "bout"
+  or
+  wrong = "basicaly" and right = "basically"
+  or
+  wrong = "basicly" and right = "basically"
+  or
+  wrong = "bcak" and right = "back"
+  or
+  wrong = "beachead" and right = "beachhead"
+  or
+  wrong = "beacuse" and right = "because"
+  or
+  wrong = "beastiality" and right = "bestiality"
+  or
+  wrong = "beatiful" and right = "beautiful"
+  or
+  wrong = "beaurocracy" and right = "bureaucracy"
+  or
+  wrong = "beaurocratic" and right = "bureaucratic"
+  or
+  wrong = "beautyfull" and right = "beautiful"
+  or
+  wrong = "becamae" and right = "became"
+  or
+  wrong = "becames" and right = "became"
+  or
+  wrong = "becames" and right = "becomes"
+  or
+  wrong = "becasue" and right = "because"
+  or
+  wrong = "beccause" and right = "because"
+  or
+  wrong = "becomeing" and right = "becoming"
+  or
+  wrong = "becomming" and right = "becoming"
+  or
+  wrong = "becouse" and right = "because"
+  or
+  wrong = "becuase" and right = "because"
+  or
+  wrong = "bedore" and right = "before"
+  or
+  wrong = "beeing" and right = "being"
+  or
+  wrong = "befoer" and right = "before"
+  or
+  wrong = "beggin" and right = "begging"
+  or
+  wrong = "beggin" and right = "begin"
+  or
+  wrong = "begginer" and right = "beginner"
+  or
+  wrong = "begginers" and right = "beginners"
+  or
+  wrong = "beggining" and right = "beginning"
+  or
+  wrong = "begginings" and right = "beginnings"
+  or
+  wrong = "beggins" and right = "begins"
+  or
+  wrong = "begining" and right = "beginning"
+  or
+  wrong = "beginnig" and right = "beginning"
+  or
+  wrong = "behavour" and right = "behavior"
+  or
+  wrong = "behavour" and right = "behaviour"
+  or
+  wrong = "beleagured" and right = "beleaguered"
+  or
+  wrong = "beleif" and right = "belief"
+  or
+  wrong = "beleive" and right = "believe"
+  or
+  wrong = "beleived" and right = "believed"
+  or
+  wrong = "beleives" and right = "believes"
+  or
+  wrong = "beleiving" and right = "believing"
+  or
+  wrong = "beligum" and right = "belgium"
+  or
+  wrong = "belive" and right = "believe"
+  or
+  wrong = "belived" and right = "believed"
+  or
+  wrong = "belived" and right = "beloved"
+  or
+  wrong = "belives" and right = "beliefs"
+  or
+  wrong = "belives" and right = "believes"
+  or
+  wrong = "belligerant" and right = "belligerent"
+  or
+  wrong = "bellweather" and right = "bellwether"
+  or
+  wrong = "bemusemnt" and right = "bemusement"
+  or
+  wrong = "beneficary" and right = "beneficiary"
+  or
+  wrong = "beng" and right = "being"
+  or
+  wrong = "benificial" and right = "beneficial"
+  or
+  wrong = "benifit" and right = "benefit"
+  or
+  wrong = "benifits" and right = "benefits"
+  or
+  wrong = "bergamont" and right = "bergamot"
+  or
+  wrong = "bernouilli" and right = "bernoulli"
+  or
+  wrong = "beseige" and right = "besiege"
+  or
+  wrong = "beseiged" and right = "besieged"
+  or
+  wrong = "beseiging" and right = "besieging"
+  or
+  wrong = "beteen" and right = "between"
+  or
+  wrong = "betwen" and right = "between"
+  or
+  wrong = "beween" and right = "between"
+  or
+  wrong = "bewteen" and right = "between"
+  or
+  wrong = "bigining" and right = "beginning"
+  or
+  wrong = "biginning" and right = "beginning"
+  or
+  wrong = "bilateraly" and right = "bilaterally"
+  or
+  wrong = "billingualism" and right = "bilingualism"
+  or
+  wrong = "binominal" and right = "binomial"
+  or
+  wrong = "bizzare" and right = "bizarre"
+  or
+  wrong = "blaim" and right = "blame"
+  or
+  wrong = "blaimed" and right = "blamed"
+  or
+  wrong = "blessure" and right = "blessing"
+  or
+  wrong = "blitzkreig" and right = "blitzkrieg"
+  or
+  wrong = "boaut" and right = "about"
+  or
+  wrong = "boaut" and right = "boat"
+  or
+  wrong = "boaut" and right = "bout"
+  or
+  wrong = "bodydbuilder" and right = "bodybuilder"
+  or
+  wrong = "bolean" and right = "boolean"
+  or
+  wrong = "bombardement" and right = "bombardment"
+  or
+  wrong = "bombarment" and right = "bombardment"
+  or
+  wrong = "bondary" and right = "boundary"
+  or
+  wrong = "bonnano" and right = "bonanno"
+  or
+  wrong = "boook" and right = "book"
+  or
+  wrong = "borke" and right = "broke"
+  or
+  wrong = "boundry" and right = "boundary"
+  or
+  wrong = "bouyancy" and right = "buoyancy"
+  or
+  wrong = "bouyant" and right = "buoyant"
+  or
+  wrong = "boyant" and right = "buoyant"
+  or
+  wrong = "bradcast" and right = "broadcast"
+  or
+  wrong = "brasillian" and right = "brazilian"
+  or
+  wrong = "breakthough" and right = "breakthrough"
+  or
+  wrong = "breakthroughts" and right = "breakthroughs"
+  or
+  wrong = "breif" and right = "brief"
+  or
+  wrong = "breifly" and right = "briefly"
+  or
+  wrong = "brethen" and right = "brethren"
+  or
+  wrong = "bretheren" and right = "brethren"
+  or
+  wrong = "briliant" and right = "brilliant"
+  or
+  wrong = "brillant" and right = "brilliant"
+  or
+  wrong = "brimestone" and right = "brimstone"
+  or
+  wrong = "britian" and right = "britain"
+  or
+  wrong = "brittish" and right = "british"
+  or
+  wrong = "broacasted" and right = "broadcast"
+  or
+  wrong = "broadacasting" and right = "broadcasting"
+  or
+  wrong = "broady" and right = "broadly"
+  or
+  wrong = "buddah" and right = "buddha"
+  or
+  wrong = "buddist" and right = "buddhist"
+  or
+  wrong = "buisness" and right = "business"
+  or
+  wrong = "buisnessman" and right = "businessman"
+  or
+  wrong = "buoancy" and right = "buoyancy"
+  or
+  wrong = "buring" and right = "burin"
+  or
+  wrong = "buring" and right = "burning"
+  or
+  wrong = "buring" and right = "burying"
+  or
+  wrong = "buring" and right = "during"
+  or
+  wrong = "burried" and right = "buried"
+  or
+  wrong = "busines" and right = "business"
+  or
+  wrong = "busineses" and right = "business"
+  or
+  wrong = "busineses" and right = "businesses"
+  or
+  wrong = "busness" and right = "business"
+  or
+  wrong = "bussiness" and right = "business"
+  or
+  wrong = "caculater" and right = "calculator"
+  or
+  wrong = "cacuses" and right = "caucuses"
+  or
+  wrong = "cahracters" and right = "characters"
+  or
+  wrong = "calaber" and right = "caliber"
+  or
+  wrong = "calander" and right = "calendar"
+  or
+  wrong = "calander" and right = "calender"
+  or
+  wrong = "calander" and right = "colander"
+  or
+  wrong = "calculater" and right = "calculator"
+  or
+  wrong = "calculs" and right = "calculus"
+  or
+  wrong = "calender" and right = "calendar"
+  or
+  wrong = "calenders" and right = "calendars"
+  or
+  wrong = "caligraphy" and right = "calligraphy"
+  or
+  wrong = "caluclate" and right = "calculate"
+  or
+  wrong = "caluclated" and right = "calculated"
+  or
+  wrong = "caluculate" and right = "calculate"
+  or
+  wrong = "caluculated" and right = "calculated"
+  or
+  wrong = "calulate" and right = "calculate"
+  or
+  wrong = "calulated" and right = "calculated"
+  or
+  wrong = "calulater" and right = "calculator"
+  or
+  wrong = "cambrige" and right = "cambridge"
+  or
+  wrong = "camoflage" and right = "camouflage"
+  or
+  wrong = "campagin" and right = "campaign"
+  or
+  wrong = "campain" and right = "campaign"
+  or
+  wrong = "campains" and right = "campaigns"
+  or
+  wrong = "candadate" and right = "candidate"
+  or
+  wrong = "candiate" and right = "candidate"
+  or
+  wrong = "candidiate" and right = "candidate"
+  or
+  wrong = "cannister" and right = "canister"
+  or
+  wrong = "cannisters" and right = "canisters"
+  or
+  wrong = "cannnot" and right = "cannot"
+  or
+  wrong = "cannonical" and right = "canonical"
+  or
+  wrong = "cannotation" and right = "connotation"
+  or
+  wrong = "cannotations" and right = "connotations"
+  or
+  wrong = "caost" and right = "coast"
+  or
+  wrong = "caperbility" and right = "capability"
+  or
+  wrong = "capible" and right = "capable"
+  or
+  wrong = "captial" and right = "capital"
+  or
+  wrong = "captued" and right = "captured"
+  or
+  wrong = "capturd" and right = "captured"
+  or
+  wrong = "carachter" and right = "character"
+  or
+  wrong = "caracterized" and right = "characterized"
+  or
+  wrong = "carcas" and right = "caracas"
+  or
+  wrong = "carcas" and right = "carcass"
+  or
+  wrong = "carefull" and right = "careful"
+  or
+  wrong = "careing" and right = "caring"
+  or
+  wrong = "carismatic" and right = "charismatic"
+  or
+  wrong = "carmalite" and right = "carmelite"
+  or
+  wrong = "carnagie" and right = "carnegie"
+  or
+  wrong = "carnege" and right = "carnage"
+  or
+  wrong = "carnege" and right = "carnegie"
+  or
+  wrong = "carnige" and right = "carnage"
+  or
+  wrong = "carnige" and right = "carnegie"
+  or
+  wrong = "carnigie" and right = "carnegie"
+  or
+  wrong = "carreer" and right = "career"
+  or
+  wrong = "carrers" and right = "careers"
+  or
+  wrong = "carribbean" and right = "caribbean"
+  or
+  wrong = "carribean" and right = "caribbean"
+  or
+  wrong = "carryng" and right = "carrying"
+  or
+  wrong = "cartdridge" and right = "cartridge"
+  or
+  wrong = "carthagian" and right = "carthaginian"
+  or
+  wrong = "carthographer" and right = "cartographer"
+  or
+  wrong = "cartilege" and right = "cartilage"
+  or
+  wrong = "cartilidge" and right = "cartilage"
+  or
+  wrong = "cartrige" and right = "cartridge"
+  or
+  wrong = "casette" and right = "cassette"
+  or
+  wrong = "casion" and right = "caisson"
+  or
+  wrong = "cassawory" and right = "cassowary"
+  or
+  wrong = "cassowarry" and right = "cassowary"
+  or
+  wrong = "casue" and right = "cause"
+  or
+  wrong = "casued" and right = "caused"
+  or
+  wrong = "casues" and right = "causes"
+  or
+  wrong = "casuing" and right = "causing"
+  or
+  wrong = "casulaties" and right = "casualties"
+  or
+  wrong = "casulaty" and right = "casualty"
+  or
+  wrong = "catagories" and right = "categories"
+  or
+  wrong = "catagorized" and right = "categorized"
+  or
+  wrong = "catagory" and right = "category"
+  or
+  wrong = "cataline" and right = "catalina"
+  or
+  wrong = "cataline" and right = "catiline"
+  or
+  wrong = "catapillar" and right = "caterpillar"
+  or
+  wrong = "catapillars" and right = "caterpillars"
+  or
+  wrong = "catapiller" and right = "caterpillar"
+  or
+  wrong = "catapillers" and right = "caterpillars"
+  or
+  wrong = "catepillar" and right = "caterpillar"
+  or
+  wrong = "catepillars" and right = "caterpillars"
+  or
+  wrong = "catergorize" and right = "categorize"
+  or
+  wrong = "catergorized" and right = "categorized"
+  or
+  wrong = "caterpilar" and right = "caterpillar"
+  or
+  wrong = "caterpilars" and right = "caterpillars"
+  or
+  wrong = "caterpiller" and right = "caterpillar"
+  or
+  wrong = "caterpillers" and right = "caterpillars"
+  or
+  wrong = "cathlic" and right = "catholic"
+  or
+  wrong = "catholocism" and right = "catholicism"
+  or
+  wrong = "catterpilar" and right = "caterpillar"
+  or
+  wrong = "catterpilars" and right = "caterpillars"
+  or
+  wrong = "catterpillar" and right = "caterpillar"
+  or
+  wrong = "catterpillars" and right = "caterpillars"
+  or
+  wrong = "cattleship" and right = "battleship"
+  or
+  wrong = "causalities" and right = "casualties"
+  or
+  wrong = "ceasar" and right = "caesar"
+  or
+  wrong = "celcius" and right = "celsius"
+  or
+  wrong = "cellpading" and right = "cellpadding"
+  or
+  wrong = "cementary" and right = "cemetery"
+  or
+  wrong = "cemetarey" and right = "cemetery"
+  or
+  wrong = "cemetaries" and right = "cemeteries"
+  or
+  wrong = "cemetary" and right = "cemetery"
+  or
+  wrong = "cencus" and right = "census"
+  or
+  wrong = "censur" and right = "censor"
+  or
+  wrong = "censur" and right = "censure"
+  or
+  wrong = "cententenial" and right = "centennial"
+  or
+  wrong = "centruies" and right = "centuries"
+  or
+  wrong = "centruy" and right = "century"
+  or
+  wrong = "centuties" and right = "centuries"
+  or
+  wrong = "centuty" and right = "century"
+  or
+  wrong = "ceratin" and right = "certain"
+  or
+  wrong = "ceratin" and right = "keratin"
+  or
+  wrong = "cerimonial" and right = "ceremonial"
+  or
+  wrong = "cerimonies" and right = "ceremonies"
+  or
+  wrong = "cerimonious" and right = "ceremonious"
+  or
+  wrong = "cerimony" and right = "ceremony"
+  or
+  wrong = "ceromony" and right = "ceremony"
+  or
+  wrong = "certainity" and right = "certainty"
+  or
+  wrong = "certian" and right = "certain"
+  or
+  wrong = "cervial" and right = "cervical"
+  or
+  wrong = "cervial" and right = "serval"
+  or
+  wrong = "cervial" and right = "servile"
+  or
+  wrong = "chalenging" and right = "challenging"
+  or
+  wrong = "challange" and right = "challenge"
+  or
+  wrong = "challanged" and right = "challenged"
+  or
+  wrong = "challege" and right = "challenge"
+  or
+  wrong = "champange" and right = "champagne"
+  or
+  wrong = "changable" and right = "changeable"
+  or
+  wrong = "charachter" and right = "character"
+  or
+  wrong = "charachters" and right = "characters"
+  or
+  wrong = "charactersistic" and right = "characteristic"
+  or
+  wrong = "charactor" and right = "character"
+  or
+  wrong = "charactors" and right = "characters"
+  or
+  wrong = "charasmatic" and right = "charismatic"
+  or
+  wrong = "charaterized" and right = "characterized"
+  or
+  wrong = "chariman" and right = "chairman"
+  or
+  wrong = "charistics" and right = "characteristics"
+  or
+  wrong = "chasr" and right = "chase"
+  or
+  wrong = "chasr" and right = "chaser"
+  or
+  wrong = "cheif" and right = "chief"
+  or
+  wrong = "cheifs" and right = "chiefs"
+  or
+  wrong = "chemcial" and right = "chemical"
+  or
+  wrong = "chemcially" and right = "chemically"
+  or
+  wrong = "chemestry" and right = "chemistry"
+  or
+  wrong = "chemicaly" and right = "chemically"
+  or
+  wrong = "childbird" and right = "childbirth"
+  or
+  wrong = "childen" and right = "children"
+  or
+  wrong = "choclate" and right = "chocolate"
+  or
+  wrong = "choosen" and right = "chosen"
+  or
+  wrong = "chracter" and right = "character"
+  or
+  wrong = "chuch" and right = "church"
+  or
+  wrong = "churchs" and right = "churches"
+  or
+  wrong = "cincinatti" and right = "cincinnati"
+  or
+  wrong = "cincinnatti" and right = "cincinnati"
+  or
+  wrong = "circulaton" and right = "circulation"
+  or
+  wrong = "circumsicion" and right = "circumcision"
+  or
+  wrong = "circut" and right = "circuit"
+  or
+  wrong = "ciricuit" and right = "circuit"
+  or
+  wrong = "ciriculum" and right = "curriculum"
+  or
+  wrong = "civillian" and right = "civilian"
+  or
+  wrong = "claer" and right = "clear"
+  or
+  wrong = "claerer" and right = "clearer"
+  or
+  wrong = "claerly" and right = "clearly"
+  or
+  wrong = "claimes" and right = "claims"
+  or
+  wrong = "clas" and right = "class"
+  or
+  wrong = "clasic" and right = "classic"
+  or
+  wrong = "clasical" and right = "classical"
+  or
+  wrong = "clasically" and right = "classically"
+  or
+  wrong = "cleareance" and right = "clearance"
+  or
+  wrong = "clera" and right = "clear"
+  or
+  wrong = "clera" and right = "sclera"
+  or
+  wrong = "clincial" and right = "clinical"
+  or
+  wrong = "clinicaly" and right = "clinically"
+  or
+  wrong = "cmo" and right = "com"
+  or
+  wrong = "cmoputer" and right = "computer"
+  or
+  wrong = "coctail" and right = "cocktail"
+  or
+  wrong = "coform" and right = "conform"
+  or
+  wrong = "cognizent" and right = "cognizant"
+  or
+  wrong = "coincedentally" and right = "coincidentally"
+  or
+  wrong = "colaborations" and right = "collaborations"
+  or
+  wrong = "colateral" and right = "collateral"
+  or
+  wrong = "colelctive" and right = "collective"
+  or
+  wrong = "collaberative" and right = "collaborative"
+  or
+  wrong = "collecton" and right = "collection"
+  or
+  wrong = "collegue" and right = "colleague"
+  or
+  wrong = "collegues" and right = "colleagues"
+  or
+  wrong = "collonade" and right = "colonnade"
+  or
+  wrong = "collonies" and right = "colonies"
+  or
+  wrong = "collony" and right = "colony"
+  or
+  wrong = "collosal" and right = "colossal"
+  or
+  wrong = "colonizators" and right = "colonizers"
+  or
+  wrong = "comander" and right = "commandeer"
+  or
+  wrong = "comander" and right = "commander"
+  or
+  wrong = "comando" and right = "commando"
+  or
+  wrong = "comandos" and right = "commandos"
+  or
+  wrong = "comany" and right = "company"
+  or
+  wrong = "comapany" and right = "company"
+  or
+  wrong = "comback" and right = "comeback"
+  or
+  wrong = "combanations" and right = "combinations"
+  or
+  wrong = "combinatins" and right = "combinations"
+  or
+  wrong = "combusion" and right = "combustion"
+  or
+  wrong = "comdemnation" and right = "condemnation"
+  or
+  wrong = "comemmorates" and right = "commemorates"
+  or
+  wrong = "comemoretion" and right = "commemoration"
+  or
+  wrong = "comision" and right = "commission"
+  or
+  wrong = "comisioned" and right = "commissioned"
+  or
+  wrong = "comisioner" and right = "commissioner"
+  or
+  wrong = "comisioning" and right = "commissioning"
+  or
+  wrong = "comisions" and right = "commissions"
+  or
+  wrong = "comission" and right = "commission"
+  or
+  wrong = "comissioned" and right = "commissioned"
+  or
+  wrong = "comissioner" and right = "commissioner"
+  or
+  wrong = "comissioning" and right = "commissioning"
+  or
+  wrong = "comissions" and right = "commissions"
+  or
+  wrong = "comited" and right = "committed"
+  or
+  wrong = "comiting" and right = "committing"
+  or
+  wrong = "comitted" and right = "committed"
+  or
+  wrong = "comittee" and right = "committee"
+  or
+  wrong = "comitting" and right = "committing"
+  or
+  wrong = "commandoes" and right = "commandos"
+  or
+  wrong = "commedic" and right = "comedic"
+  or
+  wrong = "commemerative" and right = "commemorative"
+  or
+  wrong = "commemmorate" and right = "commemorate"
+  or
+  wrong = "commemmorating" and right = "commemorating"
+  or
+  wrong = "commerical" and right = "commercial"
+  or
+  wrong = "commerically" and right = "commercially"
+  or
+  wrong = "commericial" and right = "commercial"
+  or
+  wrong = "commericially" and right = "commercially"
+  or
+  wrong = "commerorative" and right = "commemorative"
+  or
+  wrong = "comming" and right = "coming"
+  or
+  wrong = "comminication" and right = "communication"
+  or
+  wrong = "commision" and right = "commission"
+  or
+  wrong = "commisioned" and right = "commissioned"
+  or
+  wrong = "commisioner" and right = "commissioner"
+  or
+  wrong = "commisioning" and right = "commissioning"
+  or
+  wrong = "commisions" and right = "commissions"
+  or
+  wrong = "commited" and right = "committed"
+  or
+  wrong = "commitee" and right = "committee"
+  or
+  wrong = "commiting" and right = "committing"
+  or
+  wrong = "committe" and right = "committee"
+  or
+  wrong = "committment" and right = "commitment"
+  or
+  wrong = "committments" and right = "commitments"
+  or
+  wrong = "commmemorated" and right = "commemorated"
+  or
+  wrong = "commongly" and right = "commonly"
+  or
+  wrong = "commonweath" and right = "commonwealth"
+  or
+  wrong = "commuications" and right = "communications"
+  or
+  wrong = "commuinications" and right = "communications"
+  or
+  wrong = "communciation" and right = "communication"
+  or
+  wrong = "communiation" and right = "communication"
+  or
+  wrong = "communites" and right = "communities"
+  or
+  wrong = "compability" and right = "compatibility"
+  or
+  wrong = "comparision" and right = "comparison"
+  or
+  wrong = "comparisions" and right = "comparisons"
+  or
+  wrong = "comparitive" and right = "comparative"
+  or
+  wrong = "comparitively" and right = "comparatively"
+  or
+  wrong = "compatabilities" and right = "compatibilities"
+  or
+  wrong = "compatability" and right = "compatibility"
+  or
+  wrong = "compatable" and right = "compatible"
+  or
+  wrong = "compatablities" and right = "compatibilities"
+  or
+  wrong = "compatablity" and right = "compatibility"
+  or
+  wrong = "compatiable" and right = "compatible"
+  or
+  wrong = "compatiblities" and right = "compatibilities"
+  or
+  wrong = "compatiblity" and right = "compatibility"
+  or
+  wrong = "compeitions" and right = "competitions"
+  or
+  wrong = "compensantion" and right = "compensation"
+  or
+  wrong = "competance" and right = "competence"
+  or
+  wrong = "competant" and right = "competent"
+  or
+  wrong = "competative" and right = "competitive"
+  or
+  wrong = "competion" and right = "competition"
+  or
+  wrong = "competion" and right = "completion"
+  or
+  wrong = "competitiion" and right = "competition"
+  or
+  wrong = "competive" and right = "competitive"
+  or
+  wrong = "competiveness" and right = "competitiveness"
+  or
+  wrong = "comphrehensive" and right = "comprehensive"
+  or
+  wrong = "compitent" and right = "competent"
+  or
+  wrong = "completelyl" and right = "completely"
+  or
+  wrong = "completetion" and right = "completion"
+  or
+  wrong = "complier" and right = "compiler"
+  or
+  wrong = "componant" and right = "component"
+  or
+  wrong = "comprable" and right = "comparable"
+  or
+  wrong = "comprimise" and right = "compromise"
+  or
+  wrong = "compulsary" and right = "compulsory"
+  or
+  wrong = "compulsery" and right = "compulsory"
+  or
+  wrong = "computarized" and right = "computerized"
+  or
+  wrong = "concensus" and right = "consensus"
+  or
+  wrong = "concider" and right = "consider"
+  or
+  wrong = "concidered" and right = "considered"
+  or
+  wrong = "concidering" and right = "considering"
+  or
+  wrong = "conciders" and right = "considers"
+  or
+  wrong = "concieted" and right = "conceited"
+  or
+  wrong = "concieved" and right = "conceived"
+  or
+  wrong = "concious" and right = "conscious"
+  or
+  wrong = "conciously" and right = "consciously"
+  or
+  wrong = "conciousness" and right = "consciousness"
+  or
+  wrong = "condamned" and right = "condemned"
+  or
+  wrong = "condemmed" and right = "condemned"
+  or
+  wrong = "condidtion" and right = "condition"
+  or
+  wrong = "condidtions" and right = "conditions"
+  or
+  wrong = "conected" and right = "connected"
+  or
+  wrong = "conection" and right = "connection"
+  or
+  wrong = "conesencus" and right = "consensus"
+  or
+  wrong = "confidental" and right = "confidential"
+  or
+  wrong = "confidentally" and right = "confidentially"
+  or
+  wrong = "confids" and right = "confides"
+  or
+  wrong = "configureable" and right = "configurable"
+  or
+  wrong = "confortable" and right = "comfortable"
+  or
+  wrong = "congradulations" and right = "congratulations"
+  or
+  wrong = "congresional" and right = "congressional"
+  or
+  wrong = "conived" and right = "connived"
+  or
+  wrong = "conjecutre" and right = "conjecture"
+  or
+  wrong = "conjuction" and right = "conjunction"
+  or
+  wrong = "connectinos" and right = "connections"
+  or
+  wrong = "conneticut" and right = "connecticut"
+  or
+  wrong = "conotations" and right = "connotations"
+  or
+  wrong = "conquerd" and right = "conquered"
+  or
+  wrong = "conquerer" and right = "conqueror"
+  or
+  wrong = "conquerers" and right = "conquerors"
+  or
+  wrong = "conqured" and right = "conquered"
+  or
+  wrong = "conscent" and right = "consent"
+  or
+  wrong = "consciouness" and right = "consciousness"
+  or
+  wrong = "consdider" and right = "consider"
+  or
+  wrong = "consdidered" and right = "considered"
+  or
+  wrong = "consdiered" and right = "considered"
+  or
+  wrong = "consectutive" and right = "consecutive"
+  or
+  wrong = "consenquently" and right = "consequently"
+  or
+  wrong = "consentrate" and right = "concentrate"
+  or
+  wrong = "consentrated" and right = "concentrated"
+  or
+  wrong = "consentrates" and right = "concentrates"
+  or
+  wrong = "consept" and right = "concept"
+  or
+  wrong = "consequentually" and right = "consequently"
+  or
+  wrong = "consequeseces" and right = "consequences"
+  or
+  wrong = "consern" and right = "concern"
+  or
+  wrong = "conserned" and right = "concerned"
+  or
+  wrong = "conserning" and right = "concerning"
+  or
+  wrong = "conservitive" and right = "conservative"
+  or
+  wrong = "consiciousness" and right = "consciousness"
+  or
+  wrong = "consicousness" and right = "consciousness"
+  or
+  wrong = "considerd" and right = "considered"
+  or
+  wrong = "consideres" and right = "considered"
+  or
+  wrong = "consious" and right = "conscious"
+  or
+  wrong = "consistant" and right = "consistent"
+  or
+  wrong = "consistantly" and right = "consistently"
+  or
+  wrong = "consituencies" and right = "constituencies"
+  or
+  wrong = "consituency" and right = "constituency"
+  or
+  wrong = "consituted" and right = "constituted"
+  or
+  wrong = "consitution" and right = "constitution"
+  or
+  wrong = "consitutional" and right = "constitutional"
+  or
+  wrong = "consolodate" and right = "consolidate"
+  or
+  wrong = "consolodated" and right = "consolidated"
+  or
+  wrong = "consonent" and right = "consonant"
+  or
+  wrong = "consonents" and right = "consonants"
+  or
+  wrong = "consorcium" and right = "consortium"
+  or
+  wrong = "conspiracys" and right = "conspiracies"
+  or
+  wrong = "conspiriator" and right = "conspirator"
+  or
+  wrong = "consructor" and right = "constructor"
+  or
+  wrong = "constaints" and right = "constraints"
+  or
+  wrong = "constanly" and right = "constantly"
+  or
+  wrong = "constarnation" and right = "consternation"
+  or
+  wrong = "constatn" and right = "constant"
+  or
+  wrong = "constinually" and right = "continually"
+  or
+  wrong = "constituant" and right = "constituent"
+  or
+  wrong = "constituants" and right = "constituents"
+  or
+  wrong = "constituion" and right = "constitution"
+  or
+  wrong = "constituional" and right = "constitutional"
+  or
+  wrong = "consttruction" and right = "construction"
+  or
+  wrong = "constuction" and right = "construction"
+  or
+  wrong = "consulant" and right = "consultant"
+  or
+  wrong = "consumate" and right = "consummate"
+  or
+  wrong = "consumated" and right = "consummated"
+  or
+  wrong = "contaiminate" and right = "contaminate"
+  or
+  wrong = "containes" and right = "contains"
+  or
+  wrong = "contamporaries" and right = "contemporaries"
+  or
+  wrong = "contamporary" and right = "contemporary"
+  or
+  wrong = "contempoary" and right = "contemporary"
+  or
+  wrong = "contemporaneus" and right = "contemporaneous"
+  or
+  wrong = "contempory" and right = "contemporary"
+  or
+  wrong = "contendor" and right = "contender"
+  or
+  wrong = "contian" and right = "contain"
+  or
+  wrong = "contians" and right = "contains"
+  or
+  wrong = "contibute" and right = "contribute"
+  or
+  wrong = "contibuted" and right = "contributed"
+  or
+  wrong = "contibutes" and right = "contributes"
+  or
+  wrong = "contigent" and right = "contingent"
+  or
+  wrong = "contined" and right = "continued"
+  or
+  wrong = "continential" and right = "continental"
+  or
+  wrong = "continous" and right = "continuous"
+  or
+  wrong = "continously" and right = "continuously"
+  or
+  wrong = "continueing" and right = "continuing"
+  or
+  wrong = "contravercial" and right = "controversial"
+  or
+  wrong = "contraversy" and right = "controversy"
+  or
+  wrong = "contributer" and right = "contributor"
+  or
+  wrong = "contributers" and right = "contributors"
+  or
+  wrong = "contritutions" and right = "contributions"
+  or
+  wrong = "controled" and right = "controlled"
+  or
+  wrong = "controling" and right = "controlling"
+  or
+  wrong = "controll" and right = "control"
+  or
+  wrong = "controlls" and right = "controls"
+  or
+  wrong = "controvercial" and right = "controversial"
+  or
+  wrong = "controvercy" and right = "controversy"
+  or
+  wrong = "controveries" and right = "controversies"
+  or
+  wrong = "controversal" and right = "controversial"
+  or
+  wrong = "controversey" and right = "controversy"
+  or
+  wrong = "controvertial" and right = "controversial"
+  or
+  wrong = "controvery" and right = "controversy"
+  or
+  wrong = "contruction" and right = "construction"
+  or
+  wrong = "contructor" and right = "constructor"
+  or
+  wrong = "contstruction" and right = "construction"
+  or
+  wrong = "conveinent" and right = "convenient"
+  or
+  wrong = "convenant" and right = "covenant"
+  or
+  wrong = "convential" and right = "conventional"
+  or
+  wrong = "convertables" and right = "convertibles"
+  or
+  wrong = "convertion" and right = "conversion"
+  or
+  wrong = "conviced" and right = "convinced"
+  or
+  wrong = "convienient" and right = "convenient"
+  or
+  wrong = "coordiantion" and right = "coordination"
+  or
+  wrong = "coorperation" and right = "cooperation"
+  or
+  wrong = "coorperation" and right = "corporation"
+  or
+  wrong = "coorperations" and right = "corporations"
+  or
+  wrong = "copmetitors" and right = "competitors"
+  or
+  wrong = "coputer" and right = "computer"
+  or
+  wrong = "copywrite" and right = "copyright"
+  or
+  wrong = "coridal" and right = "cordial"
+  or
+  wrong = "cornmitted" and right = "committed"
+  or
+  wrong = "corosion" and right = "corrosion"
+  or
+  wrong = "corparate" and right = "corporate"
+  or
+  wrong = "corperations" and right = "corporations"
+  or
+  wrong = "correcters" and right = "correctors"
+  or
+  wrong = "correponding" and right = "corresponding"
+  or
+  wrong = "correposding" and right = "corresponding"
+  or
+  wrong = "correspondant" and right = "correspondent"
+  or
+  wrong = "correspondants" and right = "correspondents"
+  or
+  wrong = "corridoors" and right = "corridors"
+  or
+  wrong = "corrispond" and right = "correspond"
+  or
+  wrong = "corrispondant" and right = "correspondent"
+  or
+  wrong = "corrispondants" and right = "correspondents"
+  or
+  wrong = "corrisponded" and right = "corresponded"
+  or
+  wrong = "corrisponding" and right = "corresponding"
+  or
+  wrong = "corrisponds" and right = "corresponds"
+  or
+  wrong = "costitution" and right = "constitution"
+  or
+  wrong = "coucil" and right = "council"
+  or
+  wrong = "coudl" and right = "cloud"
+  or
+  wrong = "coudl" and right = "could"
+  or
+  wrong = "councellor" and right = "councillor"
+  or
+  wrong = "councellor" and right = "councilor"
+  or
+  wrong = "councellor" and right = "counselor"
+  or
+  wrong = "councellors" and right = "councillors"
+  or
+  wrong = "councellors" and right = "councilors"
+  or
+  wrong = "councellors" and right = "counselors"
+  or
+  wrong = "counries" and right = "countries"
+  or
+  wrong = "countains" and right = "contains"
+  or
+  wrong = "countires" and right = "countries"
+  or
+  wrong = "coururier" and right = "courier"
+  or
+  wrong = "coururier" and right = "couturier"
+  or
+  wrong = "coverted" and right = "converted"
+  or
+  wrong = "coverted" and right = "covered"
+  or
+  wrong = "coverted" and right = "coveted"
+  or
+  wrong = "cpoy" and right = "copy"
+  or
+  wrong = "cpoy" and right = "coy"
+  or
+  wrong = "creaeted" and right = "created"
+  or
+  wrong = "creedence" and right = "credence"
+  or
+  wrong = "critereon" and right = "criterion"
+  or
+  wrong = "criterias" and right = "criteria"
+  or
+  wrong = "criticists" and right = "critics"
+  or
+  wrong = "critising" and right = "criticising"
+  or
+  wrong = "critising" and right = "criticizing"
+  or
+  wrong = "critisising" and right = "criticising"
+  or
+  wrong = "critisism" and right = "criticism"
+  or
+  wrong = "critisisms" and right = "criticisms"
+  or
+  wrong = "critisize" and right = "criticise"
+  or
+  wrong = "critisize" and right = "criticize"
+  or
+  wrong = "critisized" and right = "criticised"
+  or
+  wrong = "critisized" and right = "criticized"
+  or
+  wrong = "critisizes" and right = "criticises"
+  or
+  wrong = "critisizes" and right = "criticizes"
+  or
+  wrong = "critisizing" and right = "criticising"
+  or
+  wrong = "critisizing" and right = "criticizing"
+  or
+  wrong = "critized" and right = "criticized"
+  or
+  wrong = "critizing" and right = "criticizing"
+  or
+  wrong = "crockodiles" and right = "crocodiles"
+  or
+  wrong = "crowm" and right = "crown"
+  or
+  wrong = "crtical" and right = "critical"
+  or
+  wrong = "crticised" and right = "criticised"
+  or
+  wrong = "crucifiction" and right = "crucifixion"
+  or
+  wrong = "crusies" and right = "cruises"
+  or
+  wrong = "crutial" and right = "crucial"
+  or
+  wrong = "crystalisation" and right = "crystallisation"
+  or
+  wrong = "culiminating" and right = "culminating"
+  or
+  wrong = "cumulatative" and right = "cumulative"
+  or
+  wrong = "curch" and right = "church"
+  or
+  wrong = "curcuit" and right = "circuit"
+  or
+  wrong = "currenly" and right = "currently"
+  or
+  wrong = "curriculem" and right = "curriculum"
+  or
+  wrong = "cxan" and right = "cyan"
+  or
+  wrong = "cyclinder" and right = "cylinder"
+  or
+  wrong = "dacquiri" and right = "daiquiri"
+  or
+  wrong = "daed" and right = "dead"
+  or
+  wrong = "dael" and right = "dahl"
+  or
+  wrong = "dael" and right = "deal"
+  or
+  wrong = "dael" and right = "dial"
+  or
+  wrong = "dalmation" and right = "dalmatian"
+  or
+  wrong = "damenor" and right = "demeanor"
+  or
+  wrong = "dammage" and right = "damage"
+  or
+  wrong = "dardenelles" and right = "dardanelles"
+  or
+  wrong = "daugher" and right = "daughter"
+  or
+  wrong = "deafult" and right = "default"
+  or
+  wrong = "debateable" and right = "debatable"
+  or
+  wrong = "decendant" and right = "descendant"
+  or
+  wrong = "decendants" and right = "descendants"
+  or
+  wrong = "decendent" and right = "descendant"
+  or
+  wrong = "decendents" and right = "descendants"
+  or
+  wrong = "decideable" and right = "decidable"
+  or
+  wrong = "decidely" and right = "decidedly"
+  or
+  wrong = "decieved" and right = "deceived"
+  or
+  wrong = "decison" and right = "decision"
+  or
+  wrong = "decomissioned" and right = "decommissioned"
+  or
+  wrong = "decomposit" and right = "decompose"
+  or
+  wrong = "decomposited" and right = "decomposed"
+  or
+  wrong = "decompositing" and right = "decomposing"
+  or
+  wrong = "decomposits" and right = "decomposes"
+  or
+  wrong = "decress" and right = "decrees"
+  or
+  wrong = "decribe" and right = "describe"
+  or
+  wrong = "decribed" and right = "described"
+  or
+  wrong = "decribes" and right = "describes"
+  or
+  wrong = "decribing" and right = "describing"
+  or
+  wrong = "dectect" and right = "detect"
+  or
+  wrong = "defendent" and right = "defendant"
+  or
+  wrong = "defendents" and right = "defendants"
+  or
+  wrong = "deffensively" and right = "defensively"
+  or
+  wrong = "deffine" and right = "define"
+  or
+  wrong = "deffined" and right = "defined"
+  or
+  wrong = "definance" and right = "defiance"
+  or
+  wrong = "definate" and right = "definite"
+  or
+  wrong = "definately" and right = "definitely"
+  or
+  wrong = "definatly" and right = "definitely"
+  or
+  wrong = "definetly" and right = "definitely"
+  or
+  wrong = "definining" and right = "defining"
+  or
+  wrong = "definit" and right = "definite"
+  or
+  wrong = "definitly" and right = "definitely"
+  or
+  wrong = "definiton" and right = "definition"
+  or
+  wrong = "defintion" and right = "definition"
+  or
+  wrong = "defualt" and right = "default"
+  or
+  wrong = "defult" and right = "default"
+  or
+  wrong = "degrate" and right = "degrade"
+  or
+  wrong = "delagates" and right = "delegates"
+  or
+  wrong = "delapidated" and right = "dilapidated"
+  or
+  wrong = "delerious" and right = "delirious"
+  or
+  wrong = "delevopment" and right = "development"
+  or
+  wrong = "deliberatly" and right = "deliberately"
+  or
+  wrong = "delusionally" and right = "delusively"
+  or
+  wrong = "demenor" and right = "demeanor"
+  or
+  wrong = "demographical" and right = "demographic"
+  or
+  wrong = "demolision" and right = "demolition"
+  or
+  wrong = "demorcracy" and right = "democracy"
+  or
+  wrong = "demostration" and right = "demonstration"
+  or
+  wrong = "denegrating" and right = "denigrating"
+  or
+  wrong = "densly" and right = "densely"
+  or
+  wrong = "deparment" and right = "department"
+  or
+  wrong = "deparmental" and right = "departmental"
+  or
+  wrong = "deparments" and right = "departments"
+  or
+  wrong = "dependance" and right = "dependence"
+  or
+  wrong = "dependancy" and right = "dependency"
+  or
+  wrong = "deram" and right = "dram"
+  or
+  wrong = "deram" and right = "dream"
+  or
+  wrong = "deriviated" and right = "derived"
+  or
+  wrong = "derivitive" and right = "derivative"
+  or
+  wrong = "derogitory" and right = "derogatory"
+  or
+  wrong = "descendands" and right = "descendants"
+  or
+  wrong = "descibed" and right = "described"
+  or
+  wrong = "desciptors" and right = "descriptors"
+  or
+  wrong = "descision" and right = "decision"
+  or
+  wrong = "descisions" and right = "decisions"
+  or
+  wrong = "descriibes" and right = "describes"
+  or
+  wrong = "descripters" and right = "descriptors"
+  or
+  wrong = "descripton" and right = "description"
+  or
+  wrong = "desctruction" and right = "destruction"
+  or
+  wrong = "descuss" and right = "discuss"
+  or
+  wrong = "desgined" and right = "designed"
+  or
+  wrong = "deside" and right = "decide"
+  or
+  wrong = "desigining" and right = "designing"
+  or
+  wrong = "desinations" and right = "destinations"
+  or
+  wrong = "desintegrated" and right = "disintegrated"
+  or
+  wrong = "desintegration" and right = "disintegration"
+  or
+  wrong = "desireable" and right = "desirable"
+  or
+  wrong = "desitned" and right = "destined"
+  or
+  wrong = "desktiop" and right = "desktop"
+  or
+  wrong = "desorder" and right = "disorder"
+  or
+  wrong = "desoriented" and right = "disoriented"
+  or
+  wrong = "desparate" and right = "desperate"
+  or
+  wrong = "desparate" and right = "disparate"
+  or
+  wrong = "despict" and right = "depict"
+  or
+  wrong = "despiration" and right = "desperation"
+  or
+  wrong = "dessicated" and right = "desiccated"
+  or
+  wrong = "dessigned" and right = "designed"
+  or
+  wrong = "destablized" and right = "destabilized"
+  or
+  wrong = "destory" and right = "destroy"
+  or
+  wrong = "desugered" and right = "desugared"
+  or
+  wrong = "detailled" and right = "detailed"
+  or
+  wrong = "detatched" and right = "detached"
+  or
+  wrong = "deteoriated" and right = "deteriorated"
+  or
+  wrong = "deteriate" and right = "deteriorate"
+  or
+  wrong = "deterioriating" and right = "deteriorating"
+  or
+  wrong = "determinining" and right = "determining"
+  or
+  wrong = "detremental" and right = "detrimental"
+  or
+  wrong = "devasted" and right = "devastated"
+  or
+  wrong = "develope" and right = "develop"
+  or
+  wrong = "developement" and right = "development"
+  or
+  wrong = "developped" and right = "developed"
+  or
+  wrong = "develpment" and right = "development"
+  or
+  wrong = "devels" and right = "delves"
+  or
+  wrong = "devestated" and right = "devastated"
+  or
+  wrong = "devestating" and right = "devastating"
+  or
+  wrong = "devide" and right = "divide"
+  or
+  wrong = "devided" and right = "divided"
+  or
+  wrong = "devistating" and right = "devastating"
+  or
+  wrong = "devolopement" and right = "development"
+  or
+  wrong = "diablical" and right = "diabolical"
+  or
+  wrong = "diamons" and right = "diamonds"
+  or
+  wrong = "diaster" and right = "disaster"
+  or
+  wrong = "dichtomy" and right = "dichotomy"
+  or
+  wrong = "diconnects" and right = "disconnects"
+  or
+  wrong = "dicover" and right = "discover"
+  or
+  wrong = "dicovered" and right = "discovered"
+  or
+  wrong = "dicovering" and right = "discovering"
+  or
+  wrong = "dicovers" and right = "discovers"
+  or
+  wrong = "dicovery" and right = "discovery"
+  or
+  wrong = "dictionarys" and right = "dictionaries"
+  or
+  wrong = "dicussed" and right = "discussed"
+  or
+  wrong = "diea" and right = "die"
+  or
+  wrong = "diea" and right = "idea"
+  or
+  wrong = "dieing" and right = "dyeing"
+  or
+  wrong = "dieing" and right = "dying"
+  or
+  wrong = "dieties" and right = "deities"
+  or
+  wrong = "diety" and right = "deity"
+  or
+  wrong = "diferent" and right = "different"
+  or
+  wrong = "diferrent" and right = "different"
+  or
+  wrong = "differentiatiations" and right = "differentiations"
+  or
+  wrong = "differnt" and right = "different"
+  or
+  wrong = "difficulity" and right = "difficulty"
+  or
+  wrong = "diffrent" and right = "different"
+  or
+  wrong = "dificulties" and right = "difficulties"
+  or
+  wrong = "dificulty" and right = "difficulty"
+  or
+  wrong = "dimenions" and right = "dimensions"
+  or
+  wrong = "dimention" and right = "dimension"
+  or
+  wrong = "dimentional" and right = "dimensional"
+  or
+  wrong = "dimentions" and right = "dimensions"
+  or
+  wrong = "dimesnional" and right = "dimensional"
+  or
+  wrong = "diminuitive" and right = "diminutive"
+  or
+  wrong = "dimunitive" and right = "diminutive"
+  or
+  wrong = "diosese" and right = "diocese"
+  or
+  wrong = "diphtong" and right = "diphthong"
+  or
+  wrong = "diphtongs" and right = "diphthongs"
+  or
+  wrong = "diplomancy" and right = "diplomacy"
+  or
+  wrong = "dipthong" and right = "diphthong"
+  or
+  wrong = "dipthongs" and right = "diphthongs"
+  or
+  wrong = "directoty" and right = "directory"
+  or
+  wrong = "dirived" and right = "derived"
+  or
+  wrong = "disagreeed" and right = "disagreed"
+  or
+  wrong = "disapeared" and right = "disappeared"
+  or
+  wrong = "disapointing" and right = "disappointing"
+  or
+  wrong = "disappearred" and right = "disappeared"
+  or
+  wrong = "disaproval" and right = "disapproval"
+  or
+  wrong = "disasterous" and right = "disastrous"
+  or
+  wrong = "disatisfaction" and right = "dissatisfaction"
+  or
+  wrong = "disatisfied" and right = "dissatisfied"
+  or
+  wrong = "disatrous" and right = "disastrous"
+  or
+  wrong = "discontentment" and right = "discontent"
+  or
+  wrong = "discribe" and right = "describe"
+  or
+  wrong = "discribed" and right = "described"
+  or
+  wrong = "discribes" and right = "describes"
+  or
+  wrong = "discribing" and right = "describing"
+  or
+  wrong = "disctinction" and right = "distinction"
+  or
+  wrong = "disctinctive" and right = "distinctive"
+  or
+  wrong = "disemination" and right = "dissemination"
+  or
+  wrong = "disenchanged" and right = "disenchanted"
+  or
+  wrong = "disiplined" and right = "disciplined"
+  or
+  wrong = "disobediance" and right = "disobedience"
+  or
+  wrong = "disobediant" and right = "disobedient"
+  or
+  wrong = "disolved" and right = "dissolved"
+  or
+  wrong = "disover" and right = "discover"
+  or
+  wrong = "dispair" and right = "despair"
+  or
+  wrong = "disparingly" and right = "disparagingly"
+  or
+  wrong = "dispence" and right = "dispense"
+  or
+  wrong = "dispenced" and right = "dispensed"
+  or
+  wrong = "dispencing" and right = "dispensing"
+  or
+  wrong = "dispicable" and right = "despicable"
+  or
+  wrong = "dispite" and right = "despite"
+  or
+  wrong = "dispostion" and right = "disposition"
+  or
+  wrong = "disproportiate" and right = "disproportionate"
+  or
+  wrong = "disputandem" and right = "disputandum"
+  or
+  wrong = "disricts" and right = "districts"
+  or
+  wrong = "dissagreement" and right = "disagreement"
+  or
+  wrong = "dissapear" and right = "disappear"
+  or
+  wrong = "dissapearance" and right = "disappearance"
+  or
+  wrong = "dissapeared" and right = "disappeared"
+  or
+  wrong = "dissapearing" and right = "disappearing"
+  or
+  wrong = "dissapears" and right = "disappears"
+  or
+  wrong = "dissappear" and right = "disappear"
+  or
+  wrong = "dissappears" and right = "disappears"
+  or
+  wrong = "dissappointed" and right = "disappointed"
+  or
+  wrong = "dissarray" and right = "disarray"
+  or
+  wrong = "dissobediance" and right = "disobedience"
+  or
+  wrong = "dissobediant" and right = "disobedient"
+  or
+  wrong = "dissobedience" and right = "disobedience"
+  or
+  wrong = "dissobedient" and right = "disobedient"
+  or
+  wrong = "distiction" and right = "distinction"
+  or
+  wrong = "distingish" and right = "distinguish"
+  or
+  wrong = "distingished" and right = "distinguished"
+  or
+  wrong = "distingishes" and right = "distinguishes"
+  or
+  wrong = "distingishing" and right = "distinguishing"
+  or
+  wrong = "distingquished" and right = "distinguished"
+  or
+  wrong = "distrubution" and right = "distribution"
+  or
+  wrong = "distruction" and right = "destruction"
+  or
+  wrong = "distructive" and right = "destructive"
+  or
+  wrong = "ditributed" and right = "distributed"
+  or
+  wrong = "diversed" and right = "diverged"
+  or
+  wrong = "diversed" and right = "diverse"
+  or
+  wrong = "divice" and right = "device"
+  or
+  wrong = "divinition" and right = "divination"
+  or
+  wrong = "divison" and right = "division"
+  or
+  wrong = "divisons" and right = "divisions"
+  or
+  wrong = "doccument" and right = "document"
+  or
+  wrong = "doccumented" and right = "documented"
+  or
+  wrong = "doccuments" and right = "documents"
+  or
+  wrong = "docrines" and right = "doctrines"
+  or
+  wrong = "doctines" and right = "doctrines"
+  or
+  wrong = "documenatry" and right = "documentary"
+  or
+  wrong = "doens" and right = "does"
+  or
+  wrong = "doign" and right = "doing"
+  or
+  wrong = "dominaton" and right = "domination"
+  or
+  wrong = "dominent" and right = "dominant"
+  or
+  wrong = "dominiant" and right = "dominant"
+  or
+  wrong = "donig" and right = "doing"
+  or
+  wrong = "doub" and right = "daub"
+  or
+  wrong = "doub" and right = "doubt"
+  or
+  wrong = "doulbe" and right = "double"
+  or
+  wrong = "dowloads" and right = "downloads"
+  or
+  wrong = "dramtic" and right = "dramatic"
+  or
+  wrong = "draughtman" and right = "draughtsman"
+  or
+  wrong = "dravadian" and right = "dravidian"
+  or
+  wrong = "dreasm" and right = "dreams"
+  or
+  wrong = "driectly" and right = "directly"
+  or
+  wrong = "drnik" and right = "drink"
+  or
+  wrong = "druming" and right = "drumming"
+  or
+  wrong = "drummless" and right = "drumless"
+  or
+  wrong = "dum" and right = "dumb"
+  or
+  wrong = "dupicate" and right = "duplicate"
+  or
+  wrong = "durig" and right = "during"
+  or
+  wrong = "durring" and right = "during"
+  or
+  wrong = "duting" and right = "during"
+  or
+  wrong = "dyas" and right = "dryas"
+  or
+  wrong = "eahc" and right = "each"
+  or
+  wrong = "ealier" and right = "earlier"
+  or
+  wrong = "earlies" and right = "earliest"
+  or
+  wrong = "earnt" and right = "earned"
+  or
+  wrong = "ecclectic" and right = "eclectic"
+  or
+  wrong = "eceonomy" and right = "economy"
+  or
+  wrong = "ecidious" and right = "deciduous"
+  or
+  wrong = "eclispe" and right = "eclipse"
+  or
+  wrong = "ecomonic" and right = "economic"
+  or
+  wrong = "ect" and right = "etc"
+  or
+  wrong = "editting" and right = "editing"
+  or
+  wrong = "eearly" and right = "early"
+  or
+  wrong = "efel" and right = "evil"
+  or
+  wrong = "effeciency" and right = "efficiency"
+  or
+  wrong = "effecient" and right = "efficient"
+  or
+  wrong = "effeciently" and right = "efficiently"
+  or
+  wrong = "efficency" and right = "efficiency"
+  or
+  wrong = "efficent" and right = "efficient"
+  or
+  wrong = "efficently" and right = "efficiently"
+  or
+  wrong = "efford" and right = "afford"
+  or
+  wrong = "efford" and right = "effort"
+  or
+  wrong = "effords" and right = "affords"
+  or
+  wrong = "effords" and right = "efforts"
+  or
+  wrong = "effulence" and right = "effluence"
+  or
+  wrong = "eigth" and right = "eight"
+  or
+  wrong = "eigth" and right = "eighth"
+  or
+  wrong = "eiter" and right = "either"
+  or
+  wrong = "elction" and right = "election"
+  or
+  wrong = "electic" and right = "eclectic"
+  or
+  wrong = "electic" and right = "electric"
+  or
+  wrong = "electon" and right = "election"
+  or
+  wrong = "electon" and right = "electron"
+  or
+  wrong = "electrial" and right = "electrical"
+  or
+  wrong = "electricly" and right = "electrically"
+  or
+  wrong = "electricty" and right = "electricity"
+  or
+  wrong = "elementay" and right = "elementary"
+  or
+  wrong = "eleminated" and right = "eliminated"
+  or
+  wrong = "eleminating" and right = "eliminating"
+  or
+  wrong = "eles" and right = "eels"
+  or
+  wrong = "eletricity" and right = "electricity"
+  or
+  wrong = "elicided" and right = "elicited"
+  or
+  wrong = "eligable" and right = "eligible"
+  or
+  wrong = "elimentary" and right = "elementary"
+  or
+  wrong = "ellected" and right = "elected"
+  or
+  wrong = "elphant" and right = "elephant"
+  or
+  wrong = "embarass" and right = "embarrass"
+  or
+  wrong = "embarassed" and right = "embarrassed"
+  or
+  wrong = "embarassing" and right = "embarrassing"
+  or
+  wrong = "embarassment" and right = "embarrassment"
+  or
+  wrong = "embargos" and right = "embargoes"
+  or
+  wrong = "embarras" and right = "embarrass"
+  or
+  wrong = "embarrased" and right = "embarrassed"
+  or
+  wrong = "embarrasing" and right = "embarrassing"
+  or
+  wrong = "embarrasment" and right = "embarrassment"
+  or
+  wrong = "embezelled" and right = "embezzled"
+  or
+  wrong = "emblamatic" and right = "emblematic"
+  or
+  wrong = "eminate" and right = "emanate"
+  or
+  wrong = "eminated" and right = "emanated"
+  or
+  wrong = "emision" and right = "emission"
+  or
+  wrong = "emited" and right = "emitted"
+  or
+  wrong = "emiting" and right = "emitting"
+  or
+  wrong = "emition" and right = "emission"
+  or
+  wrong = "emition" and right = "emotion"
+  or
+  wrong = "emmediately" and right = "immediately"
+  or
+  wrong = "emmigrated" and right = "emigrated"
+  or
+  wrong = "emmigrated" and right = "immigrated"
+  or
+  wrong = "emminent" and right = "eminent"
+  or
+  wrong = "emminent" and right = "imminent"
+  or
+  wrong = "emminently" and right = "eminently"
+  or
+  wrong = "emmisaries" and right = "emissaries"
+  or
+  wrong = "emmisarries" and right = "emissaries"
+  or
+  wrong = "emmisarry" and right = "emissary"
+  or
+  wrong = "emmisary" and right = "emissary"
+  or
+  wrong = "emmision" and right = "emission"
+  or
+  wrong = "emmisions" and right = "emissions"
+  or
+  wrong = "emmited" and right = "emitted"
+  or
+  wrong = "emmiting" and right = "emitting"
+  or
+  wrong = "emmitted" and right = "emitted"
+  or
+  wrong = "emmitting" and right = "emitting"
+  or
+  wrong = "emnity" and right = "enmity"
+  or
+  wrong = "emperical" and right = "empirical"
+  or
+  wrong = "emphaised" and right = "emphasised"
+  or
+  wrong = "emphsis" and right = "emphasis"
+  or
+  wrong = "emphysyma" and right = "emphysema"
+  or
+  wrong = "empirial" and right = "empirical"
+  or
+  wrong = "empirial" and right = "imperial"
+  or
+  wrong = "emporer" and right = "emperor"
+  or
+  wrong = "emprisoned" and right = "imprisoned"
+  or
+  wrong = "enameld" and right = "enameled"
+  or
+  wrong = "enchancement" and right = "enhancement"
+  or
+  wrong = "encouraing" and right = "encouraging"
+  or
+  wrong = "encryptiion" and right = "encryption"
+  or
+  wrong = "encylopedia" and right = "encyclopedia"
+  or
+  wrong = "endevors" and right = "endeavors"
+  or
+  wrong = "endevour" and right = "endeavour"
+  or
+  wrong = "endig" and right = "ending"
+  or
+  wrong = "endolithes" and right = "endoliths"
+  or
+  wrong = "enduce" and right = "induce"
+  or
+  wrong = "ened" and right = "need"
+  or
+  wrong = "enforceing" and right = "enforcing"
+  or
+  wrong = "engagment" and right = "engagement"
+  or
+  wrong = "engeneer" and right = "engineer"
+  or
+  wrong = "engeneering" and right = "engineering"
+  or
+  wrong = "engieneer" and right = "engineer"
+  or
+  wrong = "engieneers" and right = "engineers"
+  or
+  wrong = "enlargment" and right = "enlargement"
+  or
+  wrong = "enlargments" and right = "enlargements"
+  or
+  wrong = "enlish" and right = "english"
+  or
+  wrong = "enlish" and right = "enlist"
+  or
+  wrong = "enourmous" and right = "enormous"
+  or
+  wrong = "enourmously" and right = "enormously"
+  or
+  wrong = "ensconsed" and right = "ensconced"
+  or
+  wrong = "entaglements" and right = "entanglements"
+  or
+  wrong = "enteratinment" and right = "entertainment"
+  or
+  wrong = "enthusiatic" and right = "enthusiastic"
+  or
+  wrong = "entitity" and right = "entity"
+  or
+  wrong = "entitlied" and right = "entitled"
+  or
+  wrong = "entrepeneur" and right = "entrepreneur"
+  or
+  wrong = "entrepeneurs" and right = "entrepreneurs"
+  or
+  wrong = "enviorment" and right = "environment"
+  or
+  wrong = "enviormental" and right = "environmental"
+  or
+  wrong = "enviormentally" and right = "environmentally"
+  or
+  wrong = "enviorments" and right = "environments"
+  or
+  wrong = "enviornment" and right = "environment"
+  or
+  wrong = "enviornmental" and right = "environmental"
+  or
+  wrong = "enviornmentalist" and right = "environmentalist"
+  or
+  wrong = "enviornmentally" and right = "environmentally"
+  or
+  wrong = "enviornments" and right = "environments"
+  or
+  wrong = "enviroment" and right = "environment"
+  or
+  wrong = "enviromental" and right = "environmental"
+  or
+  wrong = "enviromentalist" and right = "environmentalist"
+  or
+  wrong = "enviromentally" and right = "environmentally"
+  or
+  wrong = "enviroments" and right = "environments"
+  or
+  wrong = "environemnt" and right = "environment"
+  or
+  wrong = "envolutionary" and right = "evolutionary"
+  or
+  wrong = "envrionments" and right = "environments"
+  or
+  wrong = "enxt" and right = "next"
+  or
+  wrong = "epidsodes" and right = "episodes"
+  or
+  wrong = "epsiode" and right = "episode"
+  or
+  wrong = "equialent" and right = "equivalent"
+  or
+  wrong = "equilibium" and right = "equilibrium"
+  or
+  wrong = "equilibrum" and right = "equilibrium"
+  or
+  wrong = "equiped" and right = "equipped"
+  or
+  wrong = "equippment" and right = "equipment"
+  or
+  wrong = "equitorial" and right = "equatorial"
+  or
+  wrong = "equivelant" and right = "equivalent"
+  or
+  wrong = "equivelent" and right = "equivalent"
+  or
+  wrong = "equivilant" and right = "equivalent"
+  or
+  wrong = "equivilent" and right = "equivalent"
+  or
+  wrong = "equivlalent" and right = "equivalent"
+  or
+  wrong = "erally" and right = "orally"
+  or
+  wrong = "erally" and right = "really"
+  or
+  wrong = "eratic" and right = "erratic"
+  or
+  wrong = "eratically" and right = "erratically"
+  or
+  wrong = "eraticly" and right = "erratically"
+  or
+  wrong = "erested" and right = "arrested"
+  or
+  wrong = "erested" and right = "erected"
+  or
+  wrong = "errupted" and right = "erupted"
+  or
+  wrong = "esential" and right = "essential"
+  or
+  wrong = "esitmated" and right = "estimated"
+  or
+  wrong = "esle" and right = "else"
+  or
+  wrong = "especialy" and right = "especially"
+  or
+  wrong = "essencial" and right = "essential"
+  or
+  wrong = "essense" and right = "essence"
+  or
+  wrong = "essentail" and right = "essential"
+  or
+  wrong = "essentialy" and right = "essentially"
+  or
+  wrong = "essentual" and right = "essential"
+  or
+  wrong = "essesital" and right = "essential"
+  or
+  wrong = "estabishes" and right = "establishes"
+  or
+  wrong = "establising" and right = "establishing"
+  or
+  wrong = "ethnocentricm" and right = "ethnocentrism"
+  or
+  wrong = "ethose" and right = "ethos"
+  or
+  wrong = "ethose" and right = "those"
+  or
+  wrong = "europian" and right = "european"
+  or
+  wrong = "europians" and right = "europeans"
+  or
+  wrong = "eurpean" and right = "european"
+  or
+  wrong = "eurpoean" and right = "european"
+  or
+  wrong = "evenhtually" and right = "eventually"
+  or
+  wrong = "eventally" and right = "eventually"
+  or
+  wrong = "eventially" and right = "eventually"
+  or
+  wrong = "eventualy" and right = "eventually"
+  or
+  wrong = "everthing" and right = "everything"
+  or
+  wrong = "everyting" and right = "everything"
+  or
+  wrong = "eveyr" and right = "every"
+  or
+  wrong = "evidentally" and right = "evidently"
+  or
+  wrong = "exagerate" and right = "exaggerate"
+  or
+  wrong = "exagerated" and right = "exaggerated"
+  or
+  wrong = "exagerates" and right = "exaggerates"
+  or
+  wrong = "exagerating" and right = "exaggerating"
+  or
+  wrong = "exagerrate" and right = "exaggerate"
+  or
+  wrong = "exagerrated" and right = "exaggerated"
+  or
+  wrong = "exagerrates" and right = "exaggerates"
+  or
+  wrong = "exagerrating" and right = "exaggerating"
+  or
+  wrong = "examinated" and right = "examined"
+  or
+  wrong = "exampt" and right = "exempt"
+  or
+  wrong = "exapansion" and right = "expansion"
+  or
+  wrong = "excact" and right = "exact"
+  or
+  wrong = "excange" and right = "exchange"
+  or
+  wrong = "excecute" and right = "execute"
+  or
+  wrong = "excecuted" and right = "executed"
+  or
+  wrong = "excecutes" and right = "executes"
+  or
+  wrong = "excecuting" and right = "executing"
+  or
+  wrong = "excecution" and right = "execution"
+  or
+  wrong = "excedded" and right = "exceeded"
+  or
+  wrong = "excelent" and right = "excellent"
+  or
+  wrong = "excell" and right = "excel"
+  or
+  wrong = "excellance" and right = "excellence"
+  or
+  wrong = "excellant" and right = "excellent"
+  or
+  wrong = "excells" and right = "excels"
+  or
+  wrong = "excercise" and right = "exercise"
+  or
+  wrong = "exchanching" and right = "exchanging"
+  or
+  wrong = "excisted" and right = "existed"
+  or
+  wrong = "exculsivly" and right = "exclusively"
+  or
+  wrong = "execising" and right = "exercising"
+  or
+  wrong = "exection" and right = "execution"
+  or
+  wrong = "exectued" and right = "executed"
+  or
+  wrong = "exeedingly" and right = "exceedingly"
+  or
+  wrong = "exelent" and right = "excellent"
+  or
+  wrong = "exellent" and right = "excellent"
+  or
+  wrong = "exemple" and right = "example"
+  or
+  wrong = "exept" and right = "except"
+  or
+  wrong = "exeptional" and right = "exceptional"
+  or
+  wrong = "exerbate" and right = "exacerbate"
+  or
+  wrong = "exerbated" and right = "exacerbated"
+  or
+  wrong = "exerciese" and right = "exercises"
+  or
+  wrong = "exerpt" and right = "excerpt"
+  or
+  wrong = "exerpts" and right = "excerpts"
+  or
+  wrong = "exersize" and right = "exercise"
+  or
+  wrong = "exerternal" and right = "external"
+  or
+  wrong = "exhalted" and right = "exalted"
+  or
+  wrong = "exhibtion" and right = "exhibition"
+  or
+  wrong = "exibition" and right = "exhibition"
+  or
+  wrong = "exibitions" and right = "exhibitions"
+  or
+  wrong = "exicting" and right = "exciting"
+  or
+  wrong = "exinct" and right = "extinct"
+  or
+  wrong = "existance" and right = "existence"
+  or
+  wrong = "existant" and right = "existent"
+  or
+  wrong = "existince" and right = "existence"
+  or
+  wrong = "exliled" and right = "exiled"
+  or
+  wrong = "exludes" and right = "excludes"
+  or
+  wrong = "exmaple" and right = "example"
+  or
+  wrong = "exonorate" and right = "exonerate"
+  or
+  wrong = "exoskelaton" and right = "exoskeleton"
+  or
+  wrong = "expalin" and right = "explain"
+  or
+  wrong = "expatriot" and right = "expatriate"
+  or
+  wrong = "expeced" and right = "expected"
+  or
+  wrong = "expecially" and right = "especially"
+  or
+  wrong = "expeditonary" and right = "expeditionary"
+  or
+  wrong = "expeiments" and right = "experiments"
+  or
+  wrong = "expell" and right = "expel"
+  or
+  wrong = "expells" and right = "expels"
+  or
+  wrong = "experiance" and right = "experience"
+  or
+  wrong = "experianced" and right = "experienced"
+  or
+  wrong = "expession" and right = "expression"
+  or
+  wrong = "expessions" and right = "expressions"
+  or
+  wrong = "expiditions" and right = "expeditions"
+  or
+  wrong = "expierence" and right = "experience"
+  or
+  wrong = "explaination" and right = "explanation"
+  or
+  wrong = "explaning" and right = "explaining"
+  or
+  wrong = "explictly" and right = "explicitly"
+  or
+  wrong = "exploititive" and right = "exploitative"
+  or
+  wrong = "explotation" and right = "exploitation"
+  or
+  wrong = "expropiated" and right = "expropriated"
+  or
+  wrong = "expropiation" and right = "expropriation"
+  or
+  wrong = "exressed" and right = "expressed"
+  or
+  wrong = "extemely" and right = "extremely"
+  or
+  wrong = "extened" and right = "extended"
+  or
+  wrong = "extention" and right = "extension"
+  or
+  wrong = "extentions" and right = "extensions"
+  or
+  wrong = "extered" and right = "exerted"
+  or
+  wrong = "extermist" and right = "extremist"
+  or
+  wrong = "extint" and right = "extant"
+  or
+  wrong = "extint" and right = "extinct"
+  or
+  wrong = "extracter" and right = "extractor"
+  or
+  wrong = "extradiction" and right = "extradition"
+  or
+  wrong = "extraterrestial" and right = "extraterrestrial"
+  or
+  wrong = "extraterrestials" and right = "extraterrestrials"
+  or
+  wrong = "extravagent" and right = "extravagant"
+  or
+  wrong = "extrememly" and right = "extremely"
+  or
+  wrong = "extremeophile" and right = "extremophile"
+  or
+  wrong = "extremly" and right = "extremely"
+  or
+  wrong = "extrordinarily" and right = "extraordinarily"
+  or
+  wrong = "extrordinary" and right = "extraordinary"
+  or
+  wrong = "eyar" and right = "eyas"
+  or
+  wrong = "eyar" and right = "year"
+  or
+  wrong = "eyars" and right = "eyas"
+  or
+  wrong = "eyars" and right = "years"
+  or
+  wrong = "eyasr" and right = "eyas"
+  or
+  wrong = "eyasr" and right = "years"
+  or
+  wrong = "faciliate" and right = "facilitate"
+  or
+  wrong = "faciliated" and right = "facilitated"
+  or
+  wrong = "faciliates" and right = "facilitates"
+  or
+  wrong = "facilites" and right = "facilities"
+  or
+  wrong = "facillitate" and right = "facilitate"
+  or
+  wrong = "facinated" and right = "fascinated"
+  or
+  wrong = "facist" and right = "fascist"
+  or
+  wrong = "familes" and right = "families"
+  or
+  wrong = "familliar" and right = "familiar"
+  or
+  wrong = "famoust" and right = "famous"
+  or
+  wrong = "fanatism" and right = "fanaticism"
+  or
+  wrong = "farenheit" and right = "fahrenheit"
+  or
+  wrong = "fatc" and right = "fact"
+  or
+  wrong = "faught" and right = "fought"
+  or
+  wrong = "favoutrable" and right = "favourable"
+  or
+  wrong = "feasable" and right = "feasible"
+  or
+  wrong = "febuary" and right = "february"
+  or
+  wrong = "feburary" and right = "february"
+  or
+  wrong = "fedreally" and right = "federally"
+  or
+  wrong = "femminist" and right = "feminist"
+  or
+  wrong = "feromone" and right = "pheromone"
+  or
+  wrong = "fertily" and right = "fertility"
+  or
+  wrong = "fianite" and right = "finite"
+  or
+  wrong = "fianlly" and right = "finally"
+  or
+  wrong = "ficticious" and right = "fictitious"
+  or
+  wrong = "fictious" and right = "fictitious"
+  or
+  wrong = "fidn" and right = "find"
+  or
+  wrong = "fiel" and right = "feel"
+  or
+  wrong = "fiel" and right = "field"
+  or
+  wrong = "fiel" and right = "file"
+  or
+  wrong = "fiel" and right = "phial"
+  or
+  wrong = "fiels" and right = "feels"
+  or
+  wrong = "fiels" and right = "fields"
+  or
+  wrong = "fiels" and right = "files"
+  or
+  wrong = "fiels" and right = "phials"
+  or
+  wrong = "fiercly" and right = "fiercely"
+  or
+  wrong = "fightings" and right = "fighting"
+  or
+  wrong = "filiament" and right = "filament"
+  or
+  wrong = "fimilies" and right = "families"
+  or
+  wrong = "finacial" and right = "financial"
+  or
+  wrong = "finaly" and right = "finally"
+  or
+  wrong = "financialy" and right = "financially"
+  or
+  wrong = "firends" and right = "friends"
+  or
+  wrong = "firts" and right = "first"
+  or
+  wrong = "firts" and right = "flirts"
+  or
+  wrong = "fisionable" and right = "fissionable"
+  or
+  wrong = "flamable" and right = "flammable"
+  or
+  wrong = "flawess" and right = "flawless"
+  or
+  wrong = "fleed" and right = "fled"
+  or
+  wrong = "fleed" and right = "freed"
+  or
+  wrong = "flemmish" and right = "flemish"
+  or
+  wrong = "florescent" and right = "fluorescent"
+  or
+  wrong = "flourescent" and right = "fluorescent"
+  or
+  wrong = "flourine" and right = "fluorine"
+  or
+  wrong = "flourishment" and right = "flourishing"
+  or
+  wrong = "fluorish" and right = "flourish"
+  or
+  wrong = "follwoing" and right = "following"
+  or
+  wrong = "folowing" and right = "following"
+  or
+  wrong = "fomed" and right = "formed"
+  or
+  wrong = "fomr" and right = "form"
+  or
+  wrong = "fomr" and right = "from"
+  or
+  wrong = "fonetic" and right = "phonetic"
+  or
+  wrong = "fontrier" and right = "fontier"
+  or
+  wrong = "foootball" and right = "football"
+  or
+  wrong = "forbad" and right = "forbade"
+  or
+  wrong = "forbiden" and right = "forbidden"
+  or
+  wrong = "foreward" and right = "foreword"
+  or
+  wrong = "forfiet" and right = "forfeit"
+  or
+  wrong = "forhead" and right = "forehead"
+  or
+  wrong = "foriegn" and right = "foreign"
+  or
+  wrong = "formalhaut" and right = "fomalhaut"
+  or
+  wrong = "formallize" and right = "formalize"
+  or
+  wrong = "formallized" and right = "formalized"
+  or
+  wrong = "formaly" and right = "formally"
+  or
+  wrong = "formaly" and right = "formerly"
+  or
+  wrong = "formelly" and right = "formerly"
+  or
+  wrong = "formidible" and right = "formidable"
+  or
+  wrong = "formost" and right = "foremost"
+  or
+  wrong = "forsaw" and right = "foresaw"
+  or
+  wrong = "forseeable" and right = "foreseeable"
+  or
+  wrong = "fortelling" and right = "foretelling"
+  or
+  wrong = "forunner" and right = "forerunner"
+  or
+  wrong = "foucs" and right = "focus"
+  or
+  wrong = "foudn" and right = "found"
+  or
+  wrong = "fougth" and right = "fought"
+  or
+  wrong = "foundaries" and right = "foundries"
+  or
+  wrong = "foundary" and right = "foundry"
+  or
+  wrong = "foundland" and right = "newfoundland"
+  or
+  wrong = "fourties" and right = "forties"
+  or
+  wrong = "fourty" and right = "forty"
+  or
+  wrong = "fouth" and right = "fourth"
+  or
+  wrong = "foward" and right = "forward"
+  or
+  wrong = "framwork" and right = "framework"
+  or
+  wrong = "fransiscan" and right = "franciscan"
+  or
+  wrong = "fransiscans" and right = "franciscans"
+  or
+  wrong = "freind" and right = "friend"
+  or
+  wrong = "freindly" and right = "friendly"
+  or
+  wrong = "frequentily" and right = "frequently"
+  or
+  wrong = "frome" and right = "from"
+  or
+  wrong = "fromed" and right = "formed"
+  or
+  wrong = "froniter" and right = "frontier"
+  or
+  wrong = "fucntion" and right = "function"
+  or
+  wrong = "fucntioning" and right = "functioning"
+  or
+  wrong = "fufill" and right = "fulfill"
+  or
+  wrong = "fufilled" and right = "fulfilled"
+  or
+  wrong = "fulfiled" and right = "fulfilled"
+  or
+  wrong = "fullfill" and right = "fulfill"
+  or
+  wrong = "fullfilled" and right = "fulfilled"
+  or
+  wrong = "funcion" and right = "function"
+  or
+  wrong = "fundametal" and right = "fundamental"
+  or
+  wrong = "fundametals" and right = "fundamentals"
+  or
+  wrong = "funguses" and right = "fungi"
+  or
+  wrong = "funtion" and right = "function"
+  or
+  wrong = "funtions" and right = "functions"
+  or
+  wrong = "furuther" and right = "further"
+  or
+  wrong = "futher" and right = "further"
+  or
+  wrong = "futhermore" and right = "furthermore"
+  or
+  wrong = "futhroc" and right = "futhark"
+  or
+  wrong = "futhroc" and right = "futhorc"
+  or
+  wrong = "gae" and right = "gael"
+  or
+  wrong = "gae" and right = "gale"
+  or
+  wrong = "gae" and right = "game"
+  or
+  wrong = "galatic" and right = "galactic"
+  or
+  wrong = "galations" and right = "galatians"
+  or
+  wrong = "gallaxies" and right = "galaxies"
+  or
+  wrong = "galvinized" and right = "galvanized"
+  or
+  wrong = "ganerate" and right = "generate"
+  or
+  wrong = "ganes" and right = "games"
+  or
+  wrong = "ganster" and right = "gangster"
+  or
+  wrong = "garantee" and right = "guarantee"
+  or
+  wrong = "garanteed" and right = "guaranteed"
+  or
+  wrong = "garantees" and right = "guarantees"
+  or
+  wrong = "garnison" and right = "garrison"
+  or
+  wrong = "gaurantee" and right = "guarantee"
+  or
+  wrong = "gauranteed" and right = "guaranteed"
+  or
+  wrong = "gaurantees" and right = "guarantees"
+  or
+  wrong = "gaurd" and right = "gourd"
+  or
+  wrong = "gaurd" and right = "guard"
+  or
+  wrong = "gaurentee" and right = "guarantee"
+  or
+  wrong = "gaurenteed" and right = "guaranteed"
+  or
+  wrong = "gaurentees" and right = "guarantees"
+  or
+  wrong = "geneological" and right = "genealogical"
+  or
+  wrong = "geneologies" and right = "genealogies"
+  or
+  wrong = "geneology" and right = "genealogy"
+  or
+  wrong = "generaly" and right = "generally"
+  or
+  wrong = "generatting" and right = "generating"
+  or
+  wrong = "genialia" and right = "genitalia"
+  or
+  wrong = "geographicial" and right = "geographical"
+  or
+  wrong = "geometrician" and right = "geometer"
+  or
+  wrong = "geometricians" and right = "geometers"
+  or
+  wrong = "gerat" and right = "great"
+  or
+  wrong = "ghandi" and right = "gandhi"
+  or
+  wrong = "glamourous" and right = "glamorous"
+  or
+  wrong = "glight" and right = "flight"
+  or
+  wrong = "gnawwed" and right = "gnawed"
+  or
+  wrong = "godess" and right = "goddess"
+  or
+  wrong = "godesses" and right = "goddesses"
+  or
+  wrong = "godounov" and right = "godunov"
+  or
+  wrong = "gogin" and right = "gauguin"
+  or
+  wrong = "gogin" and right = "going"
+  or
+  wrong = "goign" and right = "going"
+  or
+  wrong = "gonig" and right = "going"
+  or
+  wrong = "gothenberg" and right = "gothenburg"
+  or
+  wrong = "gottleib" and right = "gottlieb"
+  or
+  wrong = "gouvener" and right = "governor"
+  or
+  wrong = "govement" and right = "government"
+  or
+  wrong = "govenment" and right = "government"
+  or
+  wrong = "govenrment" and right = "government"
+  or
+  wrong = "goverance" and right = "governance"
+  or
+  wrong = "goverment" and right = "government"
+  or
+  wrong = "govermental" and right = "governmental"
+  or
+  wrong = "governer" and right = "governor"
+  or
+  wrong = "governmnet" and right = "government"
+  or
+  wrong = "govorment" and right = "government"
+  or
+  wrong = "govormental" and right = "governmental"
+  or
+  wrong = "govornment" and right = "government"
+  or
+  wrong = "gracefull" and right = "graceful"
+  or
+  wrong = "graet" and right = "great"
+  or
+  wrong = "grafitti" and right = "graffiti"
+  or
+  wrong = "gramatically" and right = "grammatically"
+  or
+  wrong = "grammaticaly" and right = "grammatically"
+  or
+  wrong = "grammer" and right = "grammar"
+  or
+  wrong = "grat" and right = "great"
+  or
+  wrong = "gratuitious" and right = "gratuitous"
+  or
+  wrong = "greatful" and right = "grateful"
+  or
+  wrong = "greatfully" and right = "gratefully"
+  or
+  wrong = "greif" and right = "grief"
+  or
+  wrong = "gridles" and right = "griddles"
+  or
+  wrong = "gropu" and right = "group"
+  or
+  wrong = "grwo" and right = "grow"
+  or
+  wrong = "guaduloupe" and right = "guadalupe"
+  or
+  wrong = "guaduloupe" and right = "guadeloupe"
+  or
+  wrong = "guadulupe" and right = "guadalupe"
+  or
+  wrong = "guadulupe" and right = "guadeloupe"
+  or
+  wrong = "guage" and right = "gauge"
+  or
+  wrong = "guarentee" and right = "guarantee"
+  or
+  wrong = "guarenteed" and right = "guaranteed"
+  or
+  wrong = "guarentees" and right = "guarantees"
+  or
+  wrong = "guatamala" and right = "guatemala"
+  or
+  wrong = "guatamalan" and right = "guatemalan"
+  or
+  wrong = "guerrila" and right = "guerrilla"
+  or
+  wrong = "guerrilas" and right = "guerrillas"
+  or
+  wrong = "guidence" and right = "guidance"
+  or
+  wrong = "guilia" and right = "giulia"
+  or
+  wrong = "guilio" and right = "giulio"
+  or
+  wrong = "guiness" and right = "guinness"
+  or
+  wrong = "guiseppe" and right = "giuseppe"
+  or
+  wrong = "gunanine" and right = "guanine"
+  or
+  wrong = "gurantee" and right = "guarantee"
+  or
+  wrong = "guranteed" and right = "guaranteed"
+  or
+  wrong = "gurantees" and right = "guarantees"
+  or
+  wrong = "guttaral" and right = "guttural"
+  or
+  wrong = "gutteral" and right = "guttural"
+  or
+  wrong = "habaeus" and right = "habeas"
+  or
+  wrong = "habeus" and right = "habeas"
+  or
+  wrong = "habsbourg" and right = "habsburg"
+  or
+  wrong = "haemorrage" and right = "haemorrhage"
+  or
+  wrong = "haev" and right = "have"
+  or
+  wrong = "haev" and right = "heave"
+  or
+  wrong = "halarious" and right = "hilarious"
+  or
+  wrong = "hallowean" and right = "halloween"
+  or
+  wrong = "halp" and right = "help"
+  or
+  wrong = "hander" and right = "handler"
+  or
+  wrong = "hapen" and right = "happen"
+  or
+  wrong = "hapened" and right = "happened"
+  or
+  wrong = "hapening" and right = "happening"
+  or
+  wrong = "happend" and right = "happened"
+  or
+  wrong = "happended" and right = "happened"
+  or
+  wrong = "happenned" and right = "happened"
+  or
+  wrong = "harased" and right = "harassed"
+  or
+  wrong = "harases" and right = "harasses"
+  or
+  wrong = "harasment" and right = "harassment"
+  or
+  wrong = "harasments" and right = "harassments"
+  or
+  wrong = "harassement" and right = "harassment"
+  or
+  wrong = "harras" and right = "harass"
+  or
+  wrong = "harrased" and right = "harassed"
+  or
+  wrong = "harrases" and right = "harasses"
+  or
+  wrong = "harrasing" and right = "harassing"
+  or
+  wrong = "harrasment" and right = "harassment"
+  or
+  wrong = "harrasments" and right = "harassments"
+  or
+  wrong = "harrassed" and right = "harassed"
+  or
+  wrong = "harrasses" and right = "harassed"
+  or
+  wrong = "harrassing" and right = "harassing"
+  or
+  wrong = "harrassment" and right = "harassment"
+  or
+  wrong = "harrassments" and right = "harassments"
+  or
+  wrong = "hatian" and right = "haitian"
+  or
+  wrong = "haviest" and right = "heaviest"
+  or
+  wrong = "headquarer" and right = "headquarter"
+  or
+  wrong = "headquater" and right = "headquarter"
+  or
+  wrong = "headquatered" and right = "headquartered"
+  or
+  wrong = "headquaters" and right = "headquarters"
+  or
+  wrong = "healthercare" and right = "healthcare"
+  or
+  wrong = "heared" and right = "heard"
+  or
+  wrong = "heathy" and right = "healthy"
+  or
+  wrong = "heidelburg" and right = "heidelberg"
+  or
+  wrong = "heigher" and right = "higher"
+  or
+  wrong = "heirarchy" and right = "hierarchy"
+  or
+  wrong = "heiroglyphics" and right = "hieroglyphics"
+  or
+  wrong = "helment" and right = "helmet"
+  or
+  wrong = "helpfull" and right = "helpful"
+  or
+  wrong = "helpped" and right = "helped"
+  or
+  wrong = "hemmorhage" and right = "hemorrhage"
+  or
+  wrong = "herad" and right = "heard"
+  or
+  wrong = "herad" and right = "hera"
+  or
+  wrong = "heridity" and right = "heredity"
+  or
+  wrong = "heroe" and right = "hero"
+  or
+  wrong = "heros" and right = "heroes"
+  or
+  wrong = "hertiage" and right = "heritage"
+  or
+  wrong = "hertzs" and right = "hertz"
+  or
+  wrong = "hesistant" and right = "hesitant"
+  or
+  wrong = "heterogenous" and right = "heterogeneous"
+  or
+  wrong = "hieght" and right = "height"
+  or
+  wrong = "hierachical" and right = "hierarchical"
+  or
+  wrong = "hierachies" and right = "hierarchies"
+  or
+  wrong = "hierachy" and right = "hierarchy"
+  or
+  wrong = "hierarcical" and right = "hierarchical"
+  or
+  wrong = "hierarcy" and right = "hierarchy"
+  or
+  wrong = "hieroglph" and right = "hieroglyph"
+  or
+  wrong = "hieroglphs" and right = "hieroglyphs"
+  or
+  wrong = "higer" and right = "higher"
+  or
+  wrong = "higest" and right = "highest"
+  or
+  wrong = "higway" and right = "highway"
+  or
+  wrong = "hillarious" and right = "hilarious"
+  or
+  wrong = "himselv" and right = "himself"
+  or
+  wrong = "hinderance" and right = "hindrance"
+  or
+  wrong = "hinderence" and right = "hindrance"
+  or
+  wrong = "hindrence" and right = "hindrance"
+  or
+  wrong = "hipopotamus" and right = "hippopotamus"
+  or
+  wrong = "hismelf" and right = "himself"
+  or
+  wrong = "histocompatability" and right = "histocompatibility"
+  or
+  wrong = "historicians" and right = "historians"
+  or
+  wrong = "holf" and right = "hold"
+  or
+  wrong = "holliday" and right = "holiday"
+  or
+  wrong = "homogeneize" and right = "homogenize"
+  or
+  wrong = "homogeneized" and right = "homogenized"
+  or
+  wrong = "honory" and right = "honorary"
+  or
+  wrong = "horrifing" and right = "horrifying"
+  or
+  wrong = "hosited" and right = "hoisted"
+  or
+  wrong = "hospitible" and right = "hospitable"
+  or
+  wrong = "hounour" and right = "honour"
+  or
+  wrong = "housr" and right = "hours"
+  or
+  wrong = "housr" and right = "house"
+  or
+  wrong = "howver" and right = "however"
+  or
+  wrong = "hsitorians" and right = "historians"
+  or
+  wrong = "hstory" and right = "history"
+  or
+  wrong = "hten" and right = "hen"
+  or
+  wrong = "hten" and right = "the"
+  or
+  wrong = "hten" and right = "then"
+  or
+  wrong = "htere" and right = "here"
+  or
+  wrong = "htere" and right = "there"
+  or
+  wrong = "htey" and right = "they"
+  or
+  wrong = "htikn" and right = "think"
+  or
+  wrong = "hting" and right = "thing"
+  or
+  wrong = "htink" and right = "think"
+  or
+  wrong = "htis" and right = "this"
+  or
+  wrong = "humer" and right = "humor"
+  or
+  wrong = "humer" and right = "humour"
+  or
+  wrong = "humerous" and right = "humerus"
+  or
+  wrong = "humerous" and right = "humorous"
+  or
+  wrong = "huminoid" and right = "humanoid"
+  or
+  wrong = "humoural" and right = "humoral"
+  or
+  wrong = "humurous" and right = "humorous"
+  or
+  wrong = "husban" and right = "husband"
+  or
+  wrong = "hvae" and right = "have"
+  or
+  wrong = "hvaing" and right = "having"
+  or
+  wrong = "hvea" and right = "have"
+  or
+  wrong = "hvea" and right = "heave"
+  or
+  wrong = "hwihc" and right = "which"
+  or
+  wrong = "hwile" and right = "while"
+  or
+  wrong = "hwole" and right = "whole"
+  or
+  wrong = "hydogen" and right = "hydrogen"
+  or
+  wrong = "hydropile" and right = "hydrophile"
+  or
+  wrong = "hydropilic" and right = "hydrophilic"
+  or
+  wrong = "hydropobe" and right = "hydrophobe"
+  or
+  wrong = "hydropobic" and right = "hydrophobic"
+  or
+  wrong = "hygeine" and right = "hygiene"
+  or
+  wrong = "hyjack" and right = "hijack"
+  or
+  wrong = "hyjacking" and right = "hijacking"
+  or
+  wrong = "hypocracy" and right = "hypocrisy"
+  or
+  wrong = "hypocrasy" and right = "hypocrisy"
+  or
+  wrong = "hypocricy" and right = "hypocrisy"
+  or
+  wrong = "hypocrit" and right = "hypocrite"
+  or
+  wrong = "hypocrits" and right = "hypocrites"
+  or
+  wrong = "iconclastic" and right = "iconoclastic"
+  or
+  wrong = "idaeidae" and right = "idea"
+  or
+  wrong = "idaes" and right = "ideas"
+  or
+  wrong = "idealogies" and right = "ideologies"
+  or
+  wrong = "idealogy" and right = "ideology"
+  or
+  wrong = "identicial" and right = "identical"
+  or
+  wrong = "identifers" and right = "identifiers"
+  or
+  wrong = "ideosyncratic" and right = "idiosyncratic"
+  or
+  wrong = "idesa" and right = "ideas"
+  or
+  wrong = "idesa" and right = "ides"
+  or
+  wrong = "idiosyncracy" and right = "idiosyncrasy"
+  or
+  wrong = "ihaca" and right = "ithaca"
+  or
+  wrong = "illegimacy" and right = "illegitimacy"
+  or
+  wrong = "illegitmate" and right = "illegitimate"
+  or
+  wrong = "illess" and right = "illness"
+  or
+  wrong = "illiegal" and right = "illegal"
+  or
+  wrong = "illution" and right = "illusion"
+  or
+  wrong = "ilness" and right = "illness"
+  or
+  wrong = "ilogical" and right = "illogical"
+  or
+  wrong = "imagenary" and right = "imaginary"
+  or
+  wrong = "imagin" and right = "imagine"
+  or
+  wrong = "imaginery" and right = "imagery"
+  or
+  wrong = "imaginery" and right = "imaginary"
+  or
+  wrong = "imanent" and right = "eminent"
+  or
+  wrong = "imanent" and right = "imminent"
+  or
+  wrong = "imcomplete" and right = "incomplete"
+  or
+  wrong = "imediately" and right = "immediately"
+  or
+  wrong = "imense" and right = "immense"
+  or
+  wrong = "imigrant" and right = "emigrant"
+  or
+  wrong = "imigrant" and right = "immigrant"
+  or
+  wrong = "imigrated" and right = "emigrated"
+  or
+  wrong = "imigrated" and right = "immigrated"
+  or
+  wrong = "imigration" and right = "emigration"
+  or
+  wrong = "imigration" and right = "immigration"
+  or
+  wrong = "iminent" and right = "eminent"
+  or
+  wrong = "iminent" and right = "immanent"
+  or
+  wrong = "iminent" and right = "imminent"
+  or
+  wrong = "immediatley" and right = "immediately"
+  or
+  wrong = "immediatly" and right = "immediately"
+  or
+  wrong = "immidately" and right = "immediately"
+  or
+  wrong = "immidiately" and right = "immediately"
+  or
+  wrong = "immitate" and right = "imitate"
+  or
+  wrong = "immitated" and right = "imitated"
+  or
+  wrong = "immitating" and right = "imitating"
+  or
+  wrong = "immitator" and right = "imitator"
+  or
+  wrong = "immunosupressant" and right = "immunosuppressant"
+  or
+  wrong = "impecabbly" and right = "impeccably"
+  or
+  wrong = "impedence" and right = "impedance"
+  or
+  wrong = "implamenting" and right = "implementing"
+  or
+  wrong = "impliment" and right = "implement"
+  or
+  wrong = "implimented" and right = "implemented"
+  or
+  wrong = "imploys" and right = "employs"
+  or
+  wrong = "importamt" and right = "important"
+  or
+  wrong = "impressario" and right = "impresario"
+  or
+  wrong = "imprioned" and right = "imprisoned"
+  or
+  wrong = "imprisonned" and right = "imprisoned"
+  or
+  wrong = "improvision" and right = "improvisation"
+  or
+  wrong = "improvments" and right = "improvements"
+  or
+  wrong = "inablility" and right = "inability"
+  or
+  wrong = "inaccessable" and right = "inaccessible"
+  or
+  wrong = "inadiquate" and right = "inadequate"
+  or
+  wrong = "inadquate" and right = "inadequate"
+  or
+  wrong = "inadvertant" and right = "inadvertent"
+  or
+  wrong = "inadvertantly" and right = "inadvertently"
+  or
+  wrong = "inagurated" and right = "inaugurated"
+  or
+  wrong = "inaguration" and right = "inauguration"
+  or
+  wrong = "inappropiate" and right = "inappropriate"
+  or
+  wrong = "inaugures" and right = "inaugurates"
+  or
+  wrong = "inbalance" and right = "imbalance"
+  or
+  wrong = "inbalanced" and right = "imbalanced"
+  or
+  wrong = "inbetween" and right = "between"
+  or
+  wrong = "incarcirated" and right = "incarcerated"
+  or
+  wrong = "incidentially" and right = "incidentally"
+  or
+  wrong = "incidently" and right = "incidentally"
+  or
+  wrong = "inclreased" and right = "increased"
+  or
+  wrong = "includ" and right = "include"
+  or
+  wrong = "includng" and right = "including"
+  or
+  wrong = "incompatabilities" and right = "incompatibilities"
+  or
+  wrong = "incompatability" and right = "incompatibility"
+  or
+  wrong = "incompatable" and right = "incompatible"
+  or
+  wrong = "incompatablities" and right = "incompatibilities"
+  or
+  wrong = "incompatablity" and right = "incompatibility"
+  or
+  wrong = "incompatiblities" and right = "incompatibilities"
+  or
+  wrong = "incompatiblity" and right = "incompatibility"
+  or
+  wrong = "incompetance" and right = "incompetence"
+  or
+  wrong = "incompetant" and right = "incompetent"
+  or
+  wrong = "incomptable" and right = "incompatible"
+  or
+  wrong = "incomptetent" and right = "incompetent"
+  or
+  wrong = "inconsistant" and right = "inconsistent"
+  or
+  wrong = "incoroporated" and right = "incorporated"
+  or
+  wrong = "incorperation" and right = "incorporation"
+  or
+  wrong = "incorportaed" and right = "incorporated"
+  or
+  wrong = "incorprates" and right = "incorporates"
+  or
+  wrong = "incorruptable" and right = "incorruptible"
+  or
+  wrong = "incramentally" and right = "incrementally"
+  or
+  wrong = "increadible" and right = "incredible"
+  or
+  wrong = "incredable" and right = "incredible"
+  or
+  wrong = "inctroduce" and right = "introduce"
+  or
+  wrong = "inctroduced" and right = "introduced"
+  or
+  wrong = "incuding" and right = "including"
+  or
+  wrong = "incunabla" and right = "incunabula"
+  or
+  wrong = "indefinately" and right = "indefinitely"
+  or
+  wrong = "indefineable" and right = "undefinable"
+  or
+  wrong = "indefinitly" and right = "indefinitely"
+  or
+  wrong = "indentical" and right = "identical"
+  or
+  wrong = "indepedantly" and right = "independently"
+  or
+  wrong = "indepedence" and right = "independence"
+  or
+  wrong = "independance" and right = "independence"
+  or
+  wrong = "independant" and right = "independent"
+  or
+  wrong = "independantly" and right = "independently"
+  or
+  wrong = "independece" and right = "independence"
+  or
+  wrong = "independendet" and right = "independent"
+  or
+  wrong = "indespensable" and right = "indispensable"
+  or
+  wrong = "indespensible" and right = "indispensable"
+  or
+  wrong = "indictement" and right = "indictment"
+  or
+  wrong = "indigineous" and right = "indigenous"
+  or
+  wrong = "indipendence" and right = "independence"
+  or
+  wrong = "indipendent" and right = "independent"
+  or
+  wrong = "indipendently" and right = "independently"
+  or
+  wrong = "indispensible" and right = "indispensable"
+  or
+  wrong = "indisputible" and right = "indisputable"
+  or
+  wrong = "indisputibly" and right = "indisputably"
+  or
+  wrong = "indite" and right = "indict"
+  or
+  wrong = "individualy" and right = "individually"
+  or
+  wrong = "indpendent" and right = "independent"
+  or
+  wrong = "indpendently" and right = "independently"
+  or
+  wrong = "indulgue" and right = "indulge"
+  or
+  wrong = "indutrial" and right = "industrial"
+  or
+  wrong = "indviduals" and right = "individuals"
+  or
+  wrong = "inefficienty" and right = "inefficiently"
+  or
+  wrong = "inevatible" and right = "inevitable"
+  or
+  wrong = "inevitible" and right = "inevitable"
+  or
+  wrong = "inevititably" and right = "inevitably"
+  or
+  wrong = "infalability" and right = "infallibility"
+  or
+  wrong = "infallable" and right = "infallible"
+  or
+  wrong = "infectuous" and right = "infectious"
+  or
+  wrong = "infered" and right = "inferred"
+  or
+  wrong = "infilitrate" and right = "infiltrate"
+  or
+  wrong = "infilitrated" and right = "infiltrated"
+  or
+  wrong = "infilitration" and right = "infiltration"
+  or
+  wrong = "infinit" and right = "infinite"
+  or
+  wrong = "inflamation" and right = "inflammation"
+  or
+  wrong = "influencial" and right = "influential"
+  or
+  wrong = "influented" and right = "influenced"
+  or
+  wrong = "infomation" and right = "information"
+  or
+  wrong = "informtion" and right = "information"
+  or
+  wrong = "infrantryman" and right = "infantryman"
+  or
+  wrong = "infrigement" and right = "infringement"
+  or
+  wrong = "ingenius" and right = "ingenious"
+  or
+  wrong = "ingreediants" and right = "ingredients"
+  or
+  wrong = "inhabitans" and right = "inhabitants"
+  or
+  wrong = "inherantly" and right = "inherently"
+  or
+  wrong = "inheritage" and right = "heritage"
+  or
+  wrong = "inheritage" and right = "inheritance"
+  or
+  wrong = "inheritence" and right = "inheritance"
+  or
+  wrong = "inital" and right = "initial"
+  or
+  wrong = "initalize" and right = "initialize"
+  or
+  wrong = "initally" and right = "initially"
+  or
+  wrong = "initation" and right = "initiation"
+  or
+  wrong = "initiaitive" and right = "initiative"
+  or
+  wrong = "inlcuding" and right = "including"
+  or
+  wrong = "inmigrant" and right = "immigrant"
+  or
+  wrong = "inmigrants" and right = "immigrants"
+  or
+  wrong = "innoculated" and right = "inoculated"
+  or
+  wrong = "inocence" and right = "innocence"
+  or
+  wrong = "inofficial" and right = "unofficial"
+  or
+  wrong = "inot" and right = "into"
+  or
+  wrong = "inpeach" and right = "impeach"
+  or
+  wrong = "inpending" and right = "impending"
+  or
+  wrong = "inpenetrable" and right = "impenetrable"
+  or
+  wrong = "inpolite" and right = "impolite"
+  or
+  wrong = "inprisonment" and right = "imprisonment"
+  or
+  wrong = "inproving" and right = "improving"
+  or
+  wrong = "insectiverous" and right = "insectivorous"
+  or
+  wrong = "insensative" and right = "insensitive"
+  or
+  wrong = "inseperable" and right = "inseparable"
+  or
+  wrong = "insistance" and right = "insistence"
+  or
+  wrong = "insitution" and right = "institution"
+  or
+  wrong = "insitutions" and right = "institutions"
+  or
+  wrong = "inspite" and right = "inspire"
+  or
+  wrong = "instade" and right = "instead"
+  or
+  wrong = "instatance" and right = "instance"
+  or
+  wrong = "institue" and right = "institute"
+  or
+  wrong = "instuction" and right = "instruction"
+  or
+  wrong = "instuments" and right = "instruments"
+  or
+  wrong = "instutionalized" and right = "institutionalized"
+  or
+  wrong = "instutions" and right = "intuitions"
+  or
+  wrong = "insurence" and right = "insurance"
+  or
+  wrong = "intelectual" and right = "intellectual"
+  or
+  wrong = "inteligence" and right = "intelligence"
+  or
+  wrong = "inteligent" and right = "intelligent"
+  or
+  wrong = "intenational" and right = "international"
+  or
+  wrong = "intented" and right = "indented"
+  or
+  wrong = "intented" and right = "intended"
+  or
+  wrong = "intepretation" and right = "interpretation"
+  or
+  wrong = "intepretator" and right = "interpretor"
+  or
+  wrong = "interational" and right = "international"
+  or
+  wrong = "interbread" and right = "interbred"
+  or
+  wrong = "interbread" and right = "interbreed"
+  or
+  wrong = "interchangable" and right = "interchangeable"
+  or
+  wrong = "interchangably" and right = "interchangeably"
+  or
+  wrong = "intercontinential" and right = "intercontinental"
+  or
+  wrong = "intercontinetal" and right = "intercontinental"
+  or
+  wrong = "intered" and right = "interned"
+  or
+  wrong = "intered" and right = "interred"
+  or
+  wrong = "interelated" and right = "interrelated"
+  or
+  wrong = "interferance" and right = "interference"
+  or
+  wrong = "interfereing" and right = "interfering"
+  or
+  wrong = "intergrated" and right = "integrated"
+  or
+  wrong = "intergration" and right = "integration"
+  or
+  wrong = "interm" and right = "interim"
+  or
+  wrong = "internation" and right = "international"
+  or
+  wrong = "interpet" and right = "interpret"
+  or
+  wrong = "interrim" and right = "interim"
+  or
+  wrong = "interrugum" and right = "interregnum"
+  or
+  wrong = "intertaining" and right = "entertaining"
+  or
+  wrong = "interupt" and right = "interrupt"
+  or
+  wrong = "intervines" and right = "intervenes"
+  or
+  wrong = "intevene" and right = "intervene"
+  or
+  wrong = "intial" and right = "initial"
+  or
+  wrong = "intialize" and right = "initialize"
+  or
+  wrong = "intialized" and right = "initialized"
+  or
+  wrong = "intially" and right = "initially"
+  or
+  wrong = "intrduced" and right = "introduced"
+  or
+  wrong = "intrest" and right = "interest"
+  or
+  wrong = "introdued" and right = "introduced"
+  or
+  wrong = "intruduced" and right = "introduced"
+  or
+  wrong = "intrument" and right = "instrument"
+  or
+  wrong = "intrumental" and right = "instrumental"
+  or
+  wrong = "intruments" and right = "instruments"
+  or
+  wrong = "intrusted" and right = "entrusted"
+  or
+  wrong = "intutive" and right = "intuitive"
+  or
+  wrong = "intutively" and right = "intuitively"
+  or
+  wrong = "inudstry" and right = "industry"
+  or
+  wrong = "inumerable" and right = "enumerable"
+  or
+  wrong = "inumerable" and right = "innumerable"
+  or
+  wrong = "inventer" and right = "inventor"
+  or
+  wrong = "invertibrates" and right = "invertebrates"
+  or
+  wrong = "investingate" and right = "investigate"
+  or
+  wrong = "involvment" and right = "involvement"
+  or
+  wrong = "irelevent" and right = "irrelevant"
+  or
+  wrong = "iresistable" and right = "irresistible"
+  or
+  wrong = "iresistably" and right = "irresistibly"
+  or
+  wrong = "iresistible" and right = "irresistible"
+  or
+  wrong = "iresistibly" and right = "irresistibly"
+  or
+  wrong = "iritable" and right = "irritable"
+  or
+  wrong = "iritated" and right = "irritated"
+  or
+  wrong = "ironicly" and right = "ironically"
+  or
+  wrong = "irregardless" and right = "regardless"
+  or
+  wrong = "irrelevent" and right = "irrelevant"
+  or
+  wrong = "irreplacable" and right = "irreplaceable"
+  or
+  wrong = "irresistable" and right = "irresistible"
+  or
+  wrong = "irresistably" and right = "irresistibly"
+  or
+  wrong = "israelies" and right = "israelis"
+  or
+  wrong = "issueing" and right = "issuing"
+  or
+  wrong = "itnroduced" and right = "introduced"
+  or
+  wrong = "iunior" and right = "junior"
+  or
+  wrong = "iwll" and right = "will"
+  or
+  wrong = "iwth" and right = "with"
+  or
+  wrong = "janurary" and right = "january"
+  or
+  wrong = "januray" and right = "january"
+  or
+  wrong = "japanes" and right = "japanese"
+  or
+  wrong = "jaques" and right = "jacques"
+  or
+  wrong = "jeapardy" and right = "jeopardy"
+  or
+  wrong = "jewllery" and right = "jewellery"
+  or
+  wrong = "johanine" and right = "johannine"
+  or
+  wrong = "jorunal" and right = "journal"
+  or
+  wrong = "jospeh" and right = "joseph"
+  or
+  wrong = "jouney" and right = "journey"
+  or
+  wrong = "journied" and right = "journeyed"
+  or
+  wrong = "journies" and right = "journeys"
+  or
+  wrong = "jstu" and right = "just"
+  or
+  wrong = "jsut" and right = "just"
+  or
+  wrong = "juadaism" and right = "judaism"
+  or
+  wrong = "juadism" and right = "judaism"
+  or
+  wrong = "judical" and right = "judicial"
+  or
+  wrong = "judisuary" and right = "judiciary"
+  or
+  wrong = "juducial" and right = "judicial"
+  or
+  wrong = "juristiction" and right = "jurisdiction"
+  or
+  wrong = "juristictions" and right = "jurisdictions"
+  or
+  wrong = "kindergarden" and right = "kindergarten"
+  or
+  wrong = "klenex" and right = "kleenex"
+  or
+  wrong = "knifes" and right = "knives"
+  or
+  wrong = "knive" and right = "knife"
+  or
+  wrong = "knowlege" and right = "knowledge"
+  or
+  wrong = "knowlegeable" and right = "knowledgeable"
+  or
+  wrong = "knwo" and right = "know"
+  or
+  wrong = "knwos" and right = "knows"
+  or
+  wrong = "konw" and right = "know"
+  or
+  wrong = "konws" and right = "knows"
+  or
+  wrong = "kwno" and right = "know"
+  or
+  wrong = "labatory" and right = "laboratory"
+  or
+  wrong = "labatory" and right = "lavatory"
+  or
+  wrong = "labled" and right = "labeled"
+  or
+  wrong = "labled" and right = "labelled"
+  or
+  wrong = "labratory" and right = "laboratory"
+  or
+  wrong = "laguage" and right = "language"
+  or
+  wrong = "laguages" and right = "languages"
+  or
+  wrong = "langage" and right = "language"
+  or
+  wrong = "langauge" and right = "language"
+  or
+  wrong = "larg" and right = "large"
+  or
+  wrong = "largst" and right = "largest"
+  or
+  wrong = "larrry" and right = "larry"
+  or
+  wrong = "lastr" and right = "last"
+  or
+  wrong = "lattitude" and right = "latitude"
+  or
+  wrong = "launchs" and right = "launch"
+  or
+  wrong = "launchs" and right = "launches"
+  or
+  wrong = "launhed" and right = "launched"
+  or
+  wrong = "lavae" and right = "larvae"
+  or
+  wrong = "layed" and right = "laid"
+  or
+  wrong = "lazyness" and right = "laziness"
+  or
+  wrong = "leage" and right = "league"
+  or
+  wrong = "leanr" and right = "lean"
+  or
+  wrong = "leanr" and right = "leaner"
+  or
+  wrong = "leanr" and right = "learn"
+  or
+  wrong = "leathal" and right = "lethal"
+  or
+  wrong = "lefted" and right = "left"
+  or
+  wrong = "legitamate" and right = "legitimate"
+  or
+  wrong = "legitmate" and right = "legitimate"
+  or
+  wrong = "leibnitz" and right = "leibniz"
+  or
+  wrong = "lengh" and right = "length"
+  or
+  wrong = "lenght" and right = "length"
+  or
+  wrong = "lengt" and right = "length"
+  or
+  wrong = "lenth" and right = "length"
+  or
+  wrong = "leran" and right = "learn"
+  or
+  wrong = "lerans" and right = "learns"
+  or
+  wrong = "leutenant" and right = "lieutenant"
+  or
+  wrong = "levetate" and right = "levitate"
+  or
+  wrong = "levetated" and right = "levitated"
+  or
+  wrong = "levetates" and right = "levitates"
+  or
+  wrong = "levetating" and right = "levitating"
+  or
+  wrong = "levle" and right = "level"
+  or
+  wrong = "liasion" and right = "liaison"
+  or
+  wrong = "liason" and right = "liaison"
+  or
+  wrong = "liasons" and right = "liaisons"
+  or
+  wrong = "libaries" and right = "libraries"
+  or
+  wrong = "libary" and right = "library"
+  or
+  wrong = "libell" and right = "libel"
+  or
+  wrong = "libguistic" and right = "linguistic"
+  or
+  wrong = "libguistics" and right = "linguistics"
+  or
+  wrong = "libitarianisn" and right = "libertarianism"
+  or
+  wrong = "lible" and right = "liable"
+  or
+  wrong = "lible" and right = "libel"
+  or
+  wrong = "lieing" and right = "lying"
+  or
+  wrong = "liek" and right = "like"
+  or
+  wrong = "liekd" and right = "liked"
+  or
+  wrong = "liesure" and right = "leisure"
+  or
+  wrong = "lieuenant" and right = "lieutenant"
+  or
+  wrong = "lieved" and right = "lived"
+  or
+  wrong = "liftime" and right = "lifetime"
+  or
+  wrong = "likelyhood" and right = "likelihood"
+  or
+  wrong = "linnaena" and right = "linnaean"
+  or
+  wrong = "lippizaner" and right = "lipizzaner"
+  or
+  wrong = "liquify" and right = "liquefy"
+  or
+  wrong = "liscense" and right = "licence"
+  or
+  wrong = "liscense" and right = "license"
+  or
+  wrong = "lisence" and right = "licence"
+  or
+  wrong = "lisence" and right = "license"
+  or
+  wrong = "lisense" and right = "licence"
+  or
+  wrong = "lisense" and right = "license"
+  or
+  wrong = "listners" and right = "listeners"
+  or
+  wrong = "litature" and right = "literature"
+  or
+  wrong = "literaly" and right = "literally"
+  or
+  wrong = "literture" and right = "literature"
+  or
+  wrong = "littel" and right = "little"
+  or
+  wrong = "litterally" and right = "literally"
+  or
+  wrong = "liuke" and right = "like"
+  or
+  wrong = "livley" and right = "lively"
+  or
+  wrong = "lmits" and right = "limits"
+  or
+  wrong = "loev" and right = "love"
+  or
+  wrong = "lonelyness" and right = "loneliness"
+  or
+  wrong = "longitudonal" and right = "longitudinal"
+  or
+  wrong = "lonley" and right = "lonely"
+  or
+  wrong = "lonly" and right = "lonely"
+  or
+  wrong = "lonly" and right = "only"
+  or
+  wrong = "loosing" and right = "losing"
+  or
+  wrong = "lotharingen" and right = "lothringen"
+  or
+  wrong = "lsat" and right = "last"
+  or
+  wrong = "lukid" and right = "likud"
+  or
+  wrong = "lveo" and right = "love"
+  or
+  wrong = "lvoe" and right = "love"
+  or
+  wrong = "lybia" and right = "libya"
+  or
+  wrong = "maching" and right = "machine"
+  or
+  wrong = "maching" and right = "marching"
+  or
+  wrong = "maching" and right = "matching"
+  or
+  wrong = "mackeral" and right = "mackerel"
+  or
+  wrong = "magasine" and right = "magazine"
+  or
+  wrong = "magincian" and right = "magician"
+  or
+  wrong = "magisine" and right = "magazine"
+  or
+  wrong = "magizine" and right = "magazine"
+  or
+  wrong = "magnificient" and right = "magnificent"
+  or
+  wrong = "magolia" and right = "magnolia"
+  or
+  wrong = "mailny" and right = "mainly"
+  or
+  wrong = "maintainance" and right = "maintenance"
+  or
+  wrong = "maintainence" and right = "maintenance"
+  or
+  wrong = "maintance" and right = "maintenance"
+  or
+  wrong = "maintenence" and right = "maintenance"
+  or
+  wrong = "maintinaing" and right = "maintaining"
+  or
+  wrong = "maintioned" and right = "mentioned"
+  or
+  wrong = "majoroty" and right = "majority"
+  or
+  wrong = "maked" and right = "made"
+  or
+  wrong = "maked" and right = "marked"
+  or
+  wrong = "makse" and right = "makes"
+  or
+  wrong = "malcom" and right = "malcolm"
+  or
+  wrong = "maltesian" and right = "maltese"
+  or
+  wrong = "mamal" and right = "mammal"
+  or
+  wrong = "mamalian" and right = "mammalian"
+  or
+  wrong = "managable" and right = "manageable"
+  or
+  wrong = "managable" and right = "manageably"
+  or
+  wrong = "managment" and right = "management"
+  or
+  wrong = "maneouvre" and right = "manoeuvre"
+  or
+  wrong = "maneouvred" and right = "manoeuvred"
+  or
+  wrong = "maneouvres" and right = "manoeuvres"
+  or
+  wrong = "maneouvring" and right = "manoeuvring"
+  or
+  wrong = "manisfestations" and right = "manifestations"
+  or
+  wrong = "manoeuverability" and right = "maneuverability"
+  or
+  wrong = "manouver" and right = "maneuver"
+  or
+  wrong = "manouver" and right = "manoeuvre"
+  or
+  wrong = "manouverability" and right = "maneuverability"
+  or
+  wrong = "manouverability" and right = "manoeuverability"
+  or
+  wrong = "manouverability" and right = "manoeuvrability"
+  or
+  wrong = "manouverable" and right = "maneuverable"
+  or
+  wrong = "manouverable" and right = "manoeuvrable"
+  or
+  wrong = "manouvers" and right = "maneuvers"
+  or
+  wrong = "manouvers" and right = "manoeuvres"
+  or
+  wrong = "mantained" and right = "maintained"
+  or
+  wrong = "manuever" and right = "maneuver"
+  or
+  wrong = "manuever" and right = "manoeuvre"
+  or
+  wrong = "manuevers" and right = "maneuvers"
+  or
+  wrong = "manuevers" and right = "manoeuvres"
+  or
+  wrong = "manufacturedd" and right = "manufactured"
+  or
+  wrong = "manufature" and right = "manufacture"
+  or
+  wrong = "manufatured" and right = "manufactured"
+  or
+  wrong = "manufaturing" and right = "manufacturing"
+  or
+  wrong = "manuver" and right = "maneuver"
+  or
+  wrong = "mariage" and right = "marriage"
+  or
+  wrong = "marjority" and right = "majority"
+  or
+  wrong = "markes" and right = "marks"
+  or
+  wrong = "marketting" and right = "marketing"
+  or
+  wrong = "marmelade" and right = "marmalade"
+  or
+  wrong = "marrage" and right = "marriage"
+  or
+  wrong = "marraige" and right = "marriage"
+  or
+  wrong = "marrtyred" and right = "martyred"
+  or
+  wrong = "marryied" and right = "married"
+  or
+  wrong = "massachussets" and right = "massachusetts"
+  or
+  wrong = "massachussetts" and right = "massachusetts"
+  or
+  wrong = "masterbation" and right = "masturbation"
+  or
+  wrong = "mataphysical" and right = "metaphysical"
+  or
+  wrong = "materalists" and right = "materialist"
+  or
+  wrong = "mathamatics" and right = "mathematics"
+  or
+  wrong = "mathematican" and right = "mathematician"
+  or
+  wrong = "mathematicas" and right = "mathematics"
+  or
+  wrong = "matheticians" and right = "mathematicians"
+  or
+  wrong = "mathmatically" and right = "mathematically"
+  or
+  wrong = "mathmatician" and right = "mathematician"
+  or
+  wrong = "mathmaticians" and right = "mathematicians"
+  or
+  wrong = "mccarthyst" and right = "mccarthyist"
+  or
+  wrong = "mchanics" and right = "mechanics"
+  or
+  wrong = "meaninng" and right = "meaning"
+  or
+  wrong = "mear" and right = "mare"
+  or
+  wrong = "mear" and right = "mere"
+  or
+  wrong = "mear" and right = "wear"
+  or
+  wrong = "mechandise" and right = "merchandise"
+  or
+  wrong = "medacine" and right = "medicine"
+  or
+  wrong = "medeival" and right = "medieval"
+  or
+  wrong = "medevial" and right = "medieval"
+  or
+  wrong = "mediciney" and right = "mediciny"
+  or
+  wrong = "medievel" and right = "medieval"
+  or
+  wrong = "mediterainnean" and right = "mediterranean"
+  or
+  wrong = "mediteranean" and right = "mediterranean"
+  or
+  wrong = "meerkrat" and right = "meerkat"
+  or
+  wrong = "melieux" and right = "milieux"
+  or
+  wrong = "membranaphone" and right = "membranophone"
+  or
+  wrong = "memeber" and right = "member"
+  or
+  wrong = "menally" and right = "mentally"
+  or
+  wrong = "meranda" and right = "miranda"
+  or
+  wrong = "meranda" and right = "veranda"
+  or
+  wrong = "mercentile" and right = "mercantile"
+  or
+  wrong = "mesage" and right = "message"
+  or
+  wrong = "messanger" and right = "messenger"
+  or
+  wrong = "messenging" and right = "messaging"
+  or
+  wrong = "messsage" and right = "message"
+  or
+  wrong = "metalic" and right = "metallic"
+  or
+  wrong = "metalurgic" and right = "metallurgic"
+  or
+  wrong = "metalurgical" and right = "metallurgical"
+  or
+  wrong = "metalurgy" and right = "metallurgy"
+  or
+  wrong = "metamorphysis" and right = "metamorphosis"
+  or
+  wrong = "metaphoricial" and right = "metaphorical"
+  or
+  wrong = "meterologist" and right = "meteorologist"
+  or
+  wrong = "meterology" and right = "meteorology"
+  or
+  wrong = "methaphor" and right = "metaphor"
+  or
+  wrong = "methaphors" and right = "metaphors"
+  or
+  wrong = "michagan" and right = "michigan"
+  or
+  wrong = "micoscopy" and right = "microscopy"
+  or
+  wrong = "midwifes" and right = "midwives"
+  or
+  wrong = "mileau" and right = "milieu"
+  or
+  wrong = "milennia" and right = "millennia"
+  or
+  wrong = "milennium" and right = "millennium"
+  or
+  wrong = "mileu" and right = "milieu"
+  or
+  wrong = "miliary" and right = "military"
+  or
+  wrong = "miligram" and right = "milligram"
+  or
+  wrong = "milion" and right = "million"
+  or
+  wrong = "miliraty" and right = "military"
+  or
+  wrong = "millenia" and right = "millennia"
+  or
+  wrong = "millenial" and right = "millennial"
+  or
+  wrong = "millenialism" and right = "millennialism"
+  or
+  wrong = "millenium" and right = "millennium"
+  or
+  wrong = "millepede" and right = "millipede"
+  or
+  wrong = "millioniare" and right = "millionaire"
+  or
+  wrong = "millitant" and right = "militant"
+  or
+  wrong = "millitary" and right = "military"
+  or
+  wrong = "millon" and right = "million"
+  or
+  wrong = "miltary" and right = "military"
+  or
+  wrong = "minature" and right = "miniature"
+  or
+  wrong = "minerial" and right = "mineral"
+  or
+  wrong = "ministery" and right = "ministry"
+  or
+  wrong = "minsitry" and right = "ministry"
+  or
+  wrong = "minstries" and right = "ministries"
+  or
+  wrong = "minstry" and right = "ministry"
+  or
+  wrong = "minumum" and right = "minimum"
+  or
+  wrong = "mirrorred" and right = "mirrored"
+  or
+  wrong = "miscelaneous" and right = "miscellaneous"
+  or
+  wrong = "miscellanious" and right = "miscellaneous"
+  or
+  wrong = "miscellanous" and right = "miscellaneous"
+  or
+  wrong = "mischeivous" and right = "mischievous"
+  or
+  wrong = "mischevious" and right = "mischievous"
+  or
+  wrong = "mischievious" and right = "mischievous"
+  or
+  wrong = "misdameanor" and right = "misdemeanor"
+  or
+  wrong = "misdameanors" and right = "misdemeanors"
+  or
+  wrong = "misdemenor" and right = "misdemeanor"
+  or
+  wrong = "misdemenors" and right = "misdemeanors"
+  or
+  wrong = "misfourtunes" and right = "misfortunes"
+  or
+  wrong = "misile" and right = "missile"
+  or
+  wrong = "misouri" and right = "missouri"
+  or
+  wrong = "mispell" and right = "misspell"
+  or
+  wrong = "mispelled" and right = "misspelled"
+  or
+  wrong = "mispelling" and right = "misspelling"
+  or
+  wrong = "missen" and right = "mizzen"
+  or
+  wrong = "missisipi" and right = "mississippi"
+  or
+  wrong = "missisippi" and right = "mississippi"
+  or
+  wrong = "missle" and right = "missile"
+  or
+  wrong = "missonary" and right = "missionary"
+  or
+  wrong = "misterious" and right = "mysterious"
+  or
+  wrong = "mistery" and right = "mystery"
+  or
+  wrong = "misteryous" and right = "mysterious"
+  or
+  wrong = "mkae" and right = "make"
+  or
+  wrong = "mkaes" and right = "makes"
+  or
+  wrong = "mkaing" and right = "making"
+  or
+  wrong = "mkea" and right = "make"
+  or
+  wrong = "moderm" and right = "modem"
+  or
+  wrong = "modle" and right = "model"
+  or
+  wrong = "moent" and right = "moment"
+  or
+  wrong = "moeny" and right = "money"
+  or
+  wrong = "mohammedans" and right = "muslims"
+  or
+  wrong = "moil" and right = "mohel"
+  or
+  wrong = "moil" and right = "soil"
+  or
+  wrong = "moleclues" and right = "molecules"
+  or
+  wrong = "momento" and right = "memento"
+  or
+  wrong = "monestaries" and right = "monasteries"
+  or
+  wrong = "monestary" and right = "monastery"
+  or
+  wrong = "monestary" and right = "monetary"
+  or
+  wrong = "monickers" and right = "monikers"
+  or
+  wrong = "monolite" and right = "monolithic"
+  or
+  wrong = "monserrat" and right = "montserrat"
+  or
+  wrong = "montains" and right = "mountains"
+  or
+  wrong = "montanous" and right = "mountainous"
+  or
+  wrong = "montnana" and right = "montana"
+  or
+  wrong = "monts" and right = "months"
+  or
+  wrong = "montypic" and right = "monotypic"
+  or
+  wrong = "moreso" and right = "more"
+  or
+  wrong = "morgage" and right = "mortgage"
+  or
+  wrong = "morisette" and right = "morissette"
+  or
+  wrong = "morrisette" and right = "morissette"
+  or
+  wrong = "morroccan" and right = "moroccan"
+  or
+  wrong = "morrocco" and right = "morocco"
+  or
+  wrong = "morroco" and right = "morocco"
+  or
+  wrong = "mortage" and right = "mortgage"
+  or
+  wrong = "mosture" and right = "moisture"
+  or
+  wrong = "motiviated" and right = "motivated"
+  or
+  wrong = "mounth" and right = "month"
+  or
+  wrong = "movei" and right = "movie"
+  or
+  wrong = "movment" and right = "movement"
+  or
+  wrong = "mroe" and right = "more"
+  or
+  wrong = "mucuous" and right = "mucous"
+  or
+  wrong = "muder" and right = "murder"
+  or
+  wrong = "mudering" and right = "murdering"
+  or
+  wrong = "muhammadan" and right = "muslim"
+  or
+  wrong = "multicultralism" and right = "multiculturalism"
+  or
+  wrong = "multipled" and right = "multiplied"
+  or
+  wrong = "multiplers" and right = "multipliers"
+  or
+  wrong = "munbers" and right = "numbers"
+  or
+  wrong = "muncipalities" and right = "municipalities"
+  or
+  wrong = "muncipality" and right = "municipality"
+  or
+  wrong = "munnicipality" and right = "municipality"
+  or
+  wrong = "muscels" and right = "muscles"
+  or
+  wrong = "muscels" and right = "mussels"
+  or
+  wrong = "muscial" and right = "musical"
+  or
+  wrong = "muscician" and right = "musician"
+  or
+  wrong = "muscicians" and right = "musicians"
+  or
+  wrong = "mutiliated" and right = "mutilated"
+  or
+  wrong = "mutiple" and right = "multiple"
+  or
+  wrong = "myraid" and right = "myriad"
+  or
+  wrong = "mysef" and right = "myself"
+  or
+  wrong = "mysogynist" and right = "misogynist"
+  or
+  wrong = "mysogyny" and right = "misogyny"
+  or
+  wrong = "mysterous" and right = "mysterious"
+  or
+  wrong = "mythraic" and right = "mithraic"
+  or
+  wrong = "naieve" and right = "naive"
+  or
+  wrong = "naploeon" and right = "napoleon"
+  or
+  wrong = "napolean" and right = "napoleon"
+  or
+  wrong = "napoleonian" and right = "napoleonic"
+  or
+  wrong = "naturaly" and right = "naturally"
+  or
+  wrong = "naturely" and right = "naturally"
+  or
+  wrong = "naturual" and right = "natural"
+  or
+  wrong = "naturually" and right = "naturally"
+  or
+  wrong = "nazereth" and right = "nazareth"
+  or
+  wrong = "neccesarily" and right = "necessarily"
+  or
+  wrong = "neccesary" and right = "necessary"
+  or
+  wrong = "neccessarily" and right = "necessarily"
+  or
+  wrong = "neccessary" and right = "necessary"
+  or
+  wrong = "neccessities" and right = "necessities"
+  or
+  wrong = "necesarily" and right = "necessarily"
+  or
+  wrong = "necesary" and right = "necessary"
+  or
+  wrong = "necessiate" and right = "necessitate"
+  or
+  wrong = "neglible" and right = "negligible"
+  or
+  wrong = "negligable" and right = "negligible"
+  or
+  wrong = "negociate" and right = "negotiate"
+  or
+  wrong = "negociation" and right = "negotiation"
+  or
+  wrong = "negociations" and right = "negotiations"
+  or
+  wrong = "negotation" and right = "negotiation"
+  or
+  wrong = "neice" and right = "nice"
+  or
+  wrong = "neice" and right = "niece"
+  or
+  wrong = "neigborhood" and right = "neighborhood"
+  or
+  wrong = "neigbour" and right = "neighbor"
+  or
+  wrong = "neigbour" and right = "neighbour"
+  or
+  wrong = "neigbourhood" and right = "neighbourhood"
+  or
+  wrong = "neigbouring" and right = "neighboring"
+  or
+  wrong = "neigbouring" and right = "neighbouring"
+  or
+  wrong = "neigbours" and right = "neighbors"
+  or
+  wrong = "neigbours" and right = "neighbours"
+  or
+  wrong = "neolitic" and right = "neolithic"
+  or
+  wrong = "nessasarily" and right = "necessarily"
+  or
+  wrong = "nessecary" and right = "necessary"
+  or
+  wrong = "nestin" and right = "nesting"
+  or
+  wrong = "neverthless" and right = "nevertheless"
+  or
+  wrong = "newletters" and right = "newsletters"
+  or
+  wrong = "nickle" and right = "nickel"
+  or
+  wrong = "nightime" and right = "nighttime"
+  or
+  wrong = "nineth" and right = "ninth"
+  or
+  wrong = "ninteenth" and right = "nineteenth"
+  or
+  wrong = "ninty" and right = "ninety"
+  or
+  wrong = "nkow" and right = "know"
+  or
+  wrong = "nkwo" and right = "know"
+  or
+  wrong = "nmae" and right = "name"
+  or
+  wrong = "noncombatents" and right = "noncombatants"
+  or
+  wrong = "nonsence" and right = "nonsense"
+  or
+  wrong = "nontheless" and right = "nonetheless"
+  or
+  wrong = "norhern" and right = "northern"
+  or
+  wrong = "northen" and right = "northern"
+  or
+  wrong = "northereastern" and right = "northeastern"
+  or
+  wrong = "notabley" and right = "notably"
+  or
+  wrong = "noteable" and right = "notable"
+  or
+  wrong = "noteably" and right = "notably"
+  or
+  wrong = "noteriety" and right = "notoriety"
+  or
+  wrong = "noth" and right = "north"
+  or
+  wrong = "nothern" and right = "northern"
+  or
+  wrong = "noticable" and right = "noticeable"
+  or
+  wrong = "noticably" and right = "noticeably"
+  or
+  wrong = "notications" and right = "notifications"
+  or
+  wrong = "noticeing" and right = "noticing"
+  or
+  wrong = "noticible" and right = "noticeable"
+  or
+  wrong = "notwhithstanding" and right = "notwithstanding"
+  or
+  wrong = "noveau" and right = "nouveau"
+  or
+  wrong = "novermber" and right = "november"
+  or
+  wrong = "nowdays" and right = "nowadays"
+  or
+  wrong = "nowe" and right = "now"
+  or
+  wrong = "nto" and right = "not"
+  or
+  wrong = "nubmer" and right = "number"
+  or
+  wrong = "nucular" and right = "nuclear"
+  or
+  wrong = "nuculear" and right = "nuclear"
+  or
+  wrong = "nuisanse" and right = "nuisance"
+  or
+  wrong = "nullabour" and right = "nullarbor"
+  or
+  wrong = "numberous" and right = "numerous"
+  or
+  wrong = "nuremburg" and right = "nuremberg"
+  or
+  wrong = "nusance" and right = "nuisance"
+  or
+  wrong = "nutritent" and right = "nutrient"
+  or
+  wrong = "nutritents" and right = "nutrients"
+  or
+  wrong = "nuturing" and right = "nurturing"
+  or
+  wrong = "obect" and right = "object"
+  or
+  wrong = "obediance" and right = "obedience"
+  or
+  wrong = "obediant" and right = "obedient"
+  or
+  wrong = "obejct" and right = "object"
+  or
+  wrong = "obession" and right = "obsession"
+  or
+  wrong = "obssessed" and right = "obsessed"
+  or
+  wrong = "obstacal" and right = "obstacle"
+  or
+  wrong = "obstancles" and right = "obstacles"
+  or
+  wrong = "obstruced" and right = "obstructed"
+  or
+  wrong = "ocasion" and right = "occasion"
+  or
+  wrong = "ocasional" and right = "occasional"
+  or
+  wrong = "ocasionally" and right = "occasionally"
+  or
+  wrong = "ocasionaly" and right = "occasionally"
+  or
+  wrong = "ocasioned" and right = "occasioned"
+  or
+  wrong = "ocasions" and right = "occasions"
+  or
+  wrong = "ocassion" and right = "occasion"
+  or
+  wrong = "ocassional" and right = "occasional"
+  or
+  wrong = "ocassionally" and right = "occasionally"
+  or
+  wrong = "ocassionaly" and right = "occasionally"
+  or
+  wrong = "ocassioned" and right = "occasioned"
+  or
+  wrong = "ocassions" and right = "occasions"
+  or
+  wrong = "occaison" and right = "occasion"
+  or
+  wrong = "occassion" and right = "occasion"
+  or
+  wrong = "occassional" and right = "occasional"
+  or
+  wrong = "occassionally" and right = "occasionally"
+  or
+  wrong = "occassionaly" and right = "occasionally"
+  or
+  wrong = "occassioned" and right = "occasioned"
+  or
+  wrong = "occassions" and right = "occasions"
+  or
+  wrong = "occationally" and right = "occasionally"
+  or
+  wrong = "occour" and right = "occur"
+  or
+  wrong = "occurance" and right = "occurrence"
+  or
+  wrong = "occurances" and right = "occurrences"
+  or
+  wrong = "occured" and right = "occurred"
+  or
+  wrong = "occurence" and right = "occurrence"
+  or
+  wrong = "occurences" and right = "occurrences"
+  or
+  wrong = "occuring" and right = "occurring"
+  or
+  wrong = "occurr" and right = "occur"
+  or
+  wrong = "occurrance" and right = "occurrence"
+  or
+  wrong = "occurrances" and right = "occurrences"
+  or
+  wrong = "octohedra" and right = "octahedra"
+  or
+  wrong = "octohedral" and right = "octahedral"
+  or
+  wrong = "octohedron" and right = "octahedron"
+  or
+  wrong = "ocuntries" and right = "countries"
+  or
+  wrong = "ocuntry" and right = "country"
+  or
+  wrong = "ocurr" and right = "occur"
+  or
+  wrong = "ocurrance" and right = "occurrence"
+  or
+  wrong = "ocurred" and right = "occurred"
+  or
+  wrong = "ocurrence" and right = "occurrence"
+  or
+  wrong = "offcers" and right = "officers"
+  or
+  wrong = "offcially" and right = "officially"
+  or
+  wrong = "offereings" and right = "offerings"
+  or
+  wrong = "offical" and right = "official"
+  or
+  wrong = "offically" and right = "officially"
+  or
+  wrong = "officals" and right = "officials"
+  or
+  wrong = "officaly" and right = "officially"
+  or
+  wrong = "officialy" and right = "officially"
+  or
+  wrong = "offred" and right = "offered"
+  or
+  wrong = "oftenly" and right = "often"
+  or
+  wrong = "oging" and right = "going"
+  or
+  wrong = "oging" and right = "ogling"
+  or
+  wrong = "oject" and right = "object"
+  or
+  wrong = "omision" and right = "omission"
+  or
+  wrong = "omited" and right = "omitted"
+  or
+  wrong = "omiting" and right = "omitting"
+  or
+  wrong = "omlette" and right = "omelette"
+  or
+  wrong = "ommision" and right = "omission"
+  or
+  wrong = "ommited" and right = "omitted"
+  or
+  wrong = "ommiting" and right = "omitting"
+  or
+  wrong = "ommitted" and right = "omitted"
+  or
+  wrong = "ommitting" and right = "omitting"
+  or
+  wrong = "omniverous" and right = "omnivorous"
+  or
+  wrong = "omniverously" and right = "omnivorously"
+  or
+  wrong = "omre" and right = "more"
+  or
+  wrong = "onot" and right = "not"
+  or
+  wrong = "onot" and right = "note"
+  or
+  wrong = "onyl" and right = "only"
+  or
+  wrong = "openess" and right = "openness"
+  or
+  wrong = "oponent" and right = "opponent"
+  or
+  wrong = "oportunity" and right = "opportunity"
+  or
+  wrong = "opose" and right = "oppose"
+  or
+  wrong = "oposite" and right = "opposite"
+  or
+  wrong = "oposition" and right = "opposition"
+  or
+  wrong = "oppenly" and right = "openly"
+  or
+  wrong = "oppinion" and right = "opinion"
+  or
+  wrong = "opponant" and right = "opponent"
+  or
+  wrong = "oppononent" and right = "opponent"
+  or
+  wrong = "oppositition" and right = "opposition"
+  or
+  wrong = "oppossed" and right = "opposed"
+  or
+  wrong = "opprotunity" and right = "opportunity"
+  or
+  wrong = "opression" and right = "oppression"
+  or
+  wrong = "opressive" and right = "oppressive"
+  or
+  wrong = "opthalmic" and right = "ophthalmic"
+  or
+  wrong = "opthalmologist" and right = "ophthalmologist"
+  or
+  wrong = "opthalmology" and right = "ophthalmology"
+  or
+  wrong = "opthamologist" and right = "ophthalmologist"
+  or
+  wrong = "optmizations" and right = "optimizations"
+  or
+  wrong = "optomism" and right = "optimism"
+  or
+  wrong = "orded" and right = "ordered"
+  or
+  wrong = "organim" and right = "organism"
+  or
+  wrong = "organistion" and right = "organisation"
+  or
+  wrong = "organiztion" and right = "organization"
+  or
+  wrong = "orgin" and right = "organ"
+  or
+  wrong = "orgin" and right = "origin"
+  or
+  wrong = "orginal" and right = "original"
+  or
+  wrong = "orginally" and right = "originally"
+  or
+  wrong = "orginize" and right = "organise"
+  or
+  wrong = "oridinarily" and right = "ordinarily"
+  or
+  wrong = "origanaly" and right = "originally"
+  or
+  wrong = "originall" and right = "original"
+  or
+  wrong = "originall" and right = "originally"
+  or
+  wrong = "originaly" and right = "originally"
+  or
+  wrong = "originially" and right = "originally"
+  or
+  wrong = "originnally" and right = "originally"
+  or
+  wrong = "origional" and right = "original"
+  or
+  wrong = "orignally" and right = "originally"
+  or
+  wrong = "orignially" and right = "originally"
+  or
+  wrong = "otehr" and right = "other"
+  or
+  wrong = "oublisher" and right = "publisher"
+  or
+  wrong = "ouevre" and right = "oeuvre"
+  or
+  wrong = "ouput" and right = "output"
+  or
+  wrong = "oustanding" and right = "outstanding"
+  or
+  wrong = "overriden" and right = "overridden"
+  or
+  wrong = "overshaddowed" and right = "overshadowed"
+  or
+  wrong = "overwelming" and right = "overwhelming"
+  or
+  wrong = "overwheliming" and right = "overwhelming"
+  or
+  wrong = "owrk" and right = "work"
+  or
+  wrong = "owudl" and right = "would"
+  or
+  wrong = "oxigen" and right = "oxygen"
+  or
+  wrong = "oximoron" and right = "oxymoron"
+  or
+  wrong = "p0enis" and right = "penis"
+  or
+  wrong = "paide" and right = "paid"
+  or
+  wrong = "paitience" and right = "patience"
+  or
+  wrong = "palce" and right = "palace"
+  or
+  wrong = "palce" and right = "place"
+  or
+  wrong = "paleolitic" and right = "paleolithic"
+  or
+  wrong = "paliamentarian" and right = "parliamentarian"
+  or
+  wrong = "palistian" and right = "palestinian"
+  or
+  wrong = "palistinian" and right = "palestinian"
+  or
+  wrong = "palistinians" and right = "palestinians"
+  or
+  wrong = "pallete" and right = "palette"
+  or
+  wrong = "pamflet" and right = "pamphlet"
+  or
+  wrong = "pamplet" and right = "pamphlet"
+  or
+  wrong = "pantomine" and right = "pantomime"
+  or
+  wrong = "papanicalou" and right = "papanicolaou"
+  or
+  wrong = "paralel" and right = "parallel"
+  or
+  wrong = "paralell" and right = "parallel"
+  or
+  wrong = "paralelly" and right = "parallelly"
+  or
+  wrong = "paralely" and right = "parallelly"
+  or
+  wrong = "parallely" and right = "parallelly"
+  or
+  wrong = "paramater" and right = "parameter"
+  or
+  wrong = "paramters" and right = "parameters"
+  or
+  wrong = "parametarized" and right = "parameterized"
+  or
+  wrong = "paranthesis" and right = "parenthesis"
+  or
+  wrong = "paraphenalia" and right = "paraphernalia"
+  or
+  wrong = "parellels" and right = "parallels"
+  or
+  wrong = "parisitic" and right = "parasitic"
+  or
+  wrong = "parituclar" and right = "particular"
+  or
+  wrong = "parliment" and right = "parliament"
+  or
+  wrong = "parrakeets" and right = "parakeets"
+  or
+  wrong = "parralel" and right = "parallel"
+  or
+  wrong = "parrallel" and right = "parallel"
+  or
+  wrong = "parrallell" and right = "parallel"
+  or
+  wrong = "parrallelly" and right = "parallelly"
+  or
+  wrong = "parrallely" and right = "parallelly"
+  or
+  wrong = "partialy" and right = "partially"
+  or
+  wrong = "particually" and right = "particularly"
+  or
+  wrong = "particualr" and right = "particular"
+  or
+  wrong = "particuarly" and right = "particularly"
+  or
+  wrong = "particularily" and right = "particularly"
+  or
+  wrong = "particulary" and right = "particularly"
+  or
+  wrong = "pary" and right = "party"
+  or
+  wrong = "pased" and right = "passed"
+  or
+  wrong = "pasengers" and right = "passengers"
+  or
+  wrong = "passerbys" and right = "passersby"
+  or
+  wrong = "pasttime" and right = "pastime"
+  or
+  wrong = "pastural" and right = "pastoral"
+  or
+  wrong = "paticular" and right = "particular"
+  or
+  wrong = "pattented" and right = "patented"
+  or
+  wrong = "pavillion" and right = "pavilion"
+  or
+  wrong = "payed" and right = "paid"
+  or
+  wrong = "pblisher" and right = "publisher"
+  or
+  wrong = "pbulisher" and right = "publisher"
+  or
+  wrong = "peageant" and right = "pageant"
+  or
+  wrong = "peaple" and right = "people"
+  or
+  wrong = "peaples" and right = "peoples"
+  or
+  wrong = "peculure" and right = "peculiar"
+  or
+  wrong = "pedestrain" and right = "pedestrian"
+  or
+  wrong = "peformed" and right = "performed"
+  or
+  wrong = "peice" and right = "piece"
+  or
+  wrong = "peloponnes" and right = "peloponnesus"
+  or
+  wrong = "penatly" and right = "penalty"
+  or
+  wrong = "penerator" and right = "penetrator"
+  or
+  wrong = "penisula" and right = "peninsula"
+  or
+  wrong = "penisular" and right = "peninsular"
+  or
+  wrong = "penninsula" and right = "peninsula"
+  or
+  wrong = "penninsular" and right = "peninsular"
+  or
+  wrong = "pennisula" and right = "peninsula"
+  or
+  wrong = "pennyslvania" and right = "pennsylvania"
+  or
+  wrong = "pensinula" and right = "peninsula"
+  or
+  wrong = "pensle" and right = "pencil"
+  or
+  wrong = "peom" and right = "poem"
+  or
+  wrong = "peoms" and right = "poems"
+  or
+  wrong = "peopel" and right = "people"
+  or
+  wrong = "peopels" and right = "peoples"
+  or
+  wrong = "peotry" and right = "poetry"
+  or
+  wrong = "perade" and right = "parade"
+  or
+  wrong = "percepted" and right = "perceived"
+  or
+  wrong = "percieve" and right = "perceive"
+  or
+  wrong = "percieved" and right = "perceived"
+  or
+  wrong = "perenially" and right = "perennially"
+  or
+  wrong = "peretrator" and right = "perpetrator"
+  or
+  wrong = "perfomance" and right = "performance"
+  or
+  wrong = "perfomers" and right = "performers"
+  or
+  wrong = "performence" and right = "performance"
+  or
+  wrong = "performes" and right = "performed"
+  or
+  wrong = "performes" and right = "performs"
+  or
+  wrong = "perhasp" and right = "perhaps"
+  or
+  wrong = "perheaps" and right = "perhaps"
+  or
+  wrong = "perhpas" and right = "perhaps"
+  or
+  wrong = "peripathetic" and right = "peripatetic"
+  or
+  wrong = "peristent" and right = "persistent"
+  or
+  wrong = "perjery" and right = "perjury"
+  or
+  wrong = "perjorative" and right = "pejorative"
+  or
+  wrong = "permanant" and right = "permanent"
+  or
+  wrong = "permenant" and right = "permanent"
+  or
+  wrong = "permenantly" and right = "permanently"
+  or
+  wrong = "permissable" and right = "permissible"
+  or
+  wrong = "perogative" and right = "prerogative"
+  or
+  wrong = "peronal" and right = "personal"
+  or
+  wrong = "perosnality" and right = "personality"
+  or
+  wrong = "perpertrated" and right = "perpetrated"
+  or
+  wrong = "perphas" and right = "perhaps"
+  or
+  wrong = "perpindicular" and right = "perpendicular"
+  or
+  wrong = "persan" and right = "person"
+  or
+  wrong = "perseverence" and right = "perseverance"
+  or
+  wrong = "persistance" and right = "persistence"
+  or
+  wrong = "persistant" and right = "persistent"
+  or
+  wrong = "personel" and right = "personal"
+  or
+  wrong = "personel" and right = "personnel"
+  or
+  wrong = "personell" and right = "personnel"
+  or
+  wrong = "personnell" and right = "personnel"
+  or
+  wrong = "persuded" and right = "persuaded"
+  or
+  wrong = "persue" and right = "pursue"
+  or
+  wrong = "persued" and right = "pursued"
+  or
+  wrong = "persuing" and right = "pursuing"
+  or
+  wrong = "persuit" and right = "pursuit"
+  or
+  wrong = "persuits" and right = "pursuits"
+  or
+  wrong = "pertubation" and right = "perturbation"
+  or
+  wrong = "pertubations" and right = "perturbations"
+  or
+  wrong = "pessiary" and right = "pessary"
+  or
+  wrong = "petetion" and right = "petition"
+  or
+  wrong = "pharoah" and right = "pharaoh"
+  or
+  wrong = "phenomenom" and right = "phenomenon"
+  or
+  wrong = "phenomenonal" and right = "phenomenal"
+  or
+  wrong = "phenomenonly" and right = "phenomenally"
+  or
+  wrong = "phenomonenon" and right = "phenomenon"
+  or
+  wrong = "phenomonon" and right = "phenomenon"
+  or
+  wrong = "phenonmena" and right = "phenomena"
+  or
+  wrong = "philipines" and right = "philippines"
+  or
+  wrong = "philisopher" and right = "philosopher"
+  or
+  wrong = "philisophical" and right = "philosophical"
+  or
+  wrong = "philisophy" and right = "philosophy"
+  or
+  wrong = "phillipine" and right = "philippine"
+  or
+  wrong = "phillipines" and right = "philippines"
+  or
+  wrong = "phillippines" and right = "philippines"
+  or
+  wrong = "phillosophically" and right = "philosophically"
+  or
+  wrong = "philospher" and right = "philosopher"
+  or
+  wrong = "philosphies" and right = "philosophies"
+  or
+  wrong = "philosphy" and right = "philosophy"
+  or
+  wrong = "phonecian" and right = "phoenecian"
+  or
+  wrong = "phongraph" and right = "phonograph"
+  or
+  wrong = "phylosophical" and right = "philosophical"
+  or
+  wrong = "physicaly" and right = "physically"
+  or
+  wrong = "piblisher" and right = "publisher"
+  or
+  wrong = "pich" and right = "pitch"
+  or
+  wrong = "pilgrimmage" and right = "pilgrimage"
+  or
+  wrong = "pilgrimmages" and right = "pilgrimages"
+  or
+  wrong = "pinapple" and right = "pineapple"
+  or
+  wrong = "pinnaple" and right = "pineapple"
+  or
+  wrong = "pinoneered" and right = "pioneered"
+  or
+  wrong = "plagarism" and right = "plagiarism"
+  or
+  wrong = "planation" and right = "plantation"
+  or
+  wrong = "planed" and right = "planned"
+  or
+  wrong = "plantiff" and right = "plaintiff"
+  or
+  wrong = "plateu" and right = "plateau"
+  or
+  wrong = "plausable" and right = "plausible"
+  or
+  wrong = "playright" and right = "playwright"
+  or
+  wrong = "playwrite" and right = "playwright"
+  or
+  wrong = "playwrites" and right = "playwrights"
+  or
+  wrong = "pleasent" and right = "pleasant"
+  or
+  wrong = "plebicite" and right = "plebiscite"
+  or
+  wrong = "plesant" and right = "pleasant"
+  or
+  wrong = "poenis" and right = "penis"
+  or
+  wrong = "poeoples" and right = "peoples"
+  or
+  wrong = "poety" and right = "poetry"
+  or
+  wrong = "poisin" and right = "poison"
+  or
+  wrong = "polical" and right = "political"
+  or
+  wrong = "polinator" and right = "pollinator"
+  or
+  wrong = "polinators" and right = "pollinators"
+  or
+  wrong = "politican" and right = "politician"
+  or
+  wrong = "politicans" and right = "politicians"
+  or
+  wrong = "poltical" and right = "political"
+  or
+  wrong = "polute" and right = "pollute"
+  or
+  wrong = "poluted" and right = "polluted"
+  or
+  wrong = "polutes" and right = "pollutes"
+  or
+  wrong = "poluting" and right = "polluting"
+  or
+  wrong = "polution" and right = "pollution"
+  or
+  wrong = "polyphonyic" and right = "polyphonic"
+  or
+  wrong = "polysaccaride" and right = "polysaccharide"
+  or
+  wrong = "polysaccharid" and right = "polysaccharide"
+  or
+  wrong = "pomegranite" and right = "pomegranate"
+  or
+  wrong = "pomotion" and right = "promotion"
+  or
+  wrong = "poportional" and right = "proportional"
+  or
+  wrong = "popoulation" and right = "population"
+  or
+  wrong = "popularaty" and right = "popularity"
+  or
+  wrong = "populare" and right = "popular"
+  or
+  wrong = "populer" and right = "popular"
+  or
+  wrong = "porshan" and right = "portion"
+  or
+  wrong = "porshon" and right = "portion"
+  or
+  wrong = "portait" and right = "portrait"
+  or
+  wrong = "portayed" and right = "portrayed"
+  or
+  wrong = "portraing" and right = "portraying"
+  or
+  wrong = "portugese" and right = "portuguese"
+  or
+  wrong = "portuguease" and right = "portuguese"
+  or
+  wrong = "portugues" and right = "portuguese"
+  or
+  wrong = "posess" and right = "possess"
+  or
+  wrong = "posessed" and right = "possessed"
+  or
+  wrong = "posesses" and right = "possesses"
+  or
+  wrong = "posessing" and right = "possessing"
+  or
+  wrong = "posession" and right = "possession"
+  or
+  wrong = "posessions" and right = "possessions"
+  or
+  wrong = "posion" and right = "poison"
+  or
+  wrong = "positon" and right = "position"
+  or
+  wrong = "positon" and right = "positron"
+  or
+  wrong = "possable" and right = "possible"
+  or
+  wrong = "possably" and right = "possibly"
+  or
+  wrong = "posseses" and right = "possesses"
+  or
+  wrong = "possesing" and right = "possessing"
+  or
+  wrong = "possesion" and right = "possession"
+  or
+  wrong = "possessess" and right = "possesses"
+  or
+  wrong = "possibile" and right = "possible"
+  or
+  wrong = "possibilty" and right = "possibility"
+  or
+  wrong = "possiblility" and right = "possibility"
+  or
+  wrong = "possiblilty" and right = "possibility"
+  or
+  wrong = "possiblities" and right = "possibilities"
+  or
+  wrong = "possiblity" and right = "possibility"
+  or
+  wrong = "possition" and right = "position"
+  or
+  wrong = "postdam" and right = "potsdam"
+  or
+  wrong = "posthomous" and right = "posthumous"
+  or
+  wrong = "postion" and right = "position"
+  or
+  wrong = "postive" and right = "positive"
+  or
+  wrong = "potatos" and right = "potatoes"
+  or
+  wrong = "potrait" and right = "portrait"
+  or
+  wrong = "potrayed" and right = "portrayed"
+  or
+  wrong = "poulations" and right = "populations"
+  or
+  wrong = "poverful" and right = "powerful"
+  or
+  wrong = "poweful" and right = "powerful"
+  or
+  wrong = "powerfull" and right = "powerful"
+  or
+  wrong = "ppublisher" and right = "publisher"
+  or
+  wrong = "practial" and right = "practical"
+  or
+  wrong = "practially" and right = "practically"
+  or
+  wrong = "practicaly" and right = "practically"
+  or
+  wrong = "practicioner" and right = "practitioner"
+  or
+  wrong = "practicioners" and right = "practitioners"
+  or
+  wrong = "practicly" and right = "practically"
+  or
+  wrong = "practioner" and right = "practitioner"
+  or
+  wrong = "practioners" and right = "practitioners"
+  or
+  wrong = "prairy" and right = "prairie"
+  or
+  wrong = "prarie" and right = "prairie"
+  or
+  wrong = "praries" and right = "prairies"
+  or
+  wrong = "pratice" and right = "practice"
+  or
+  wrong = "preample" and right = "preamble"
+  or
+  wrong = "precedessor" and right = "predecessor"
+  or
+  wrong = "preceed" and right = "precede"
+  or
+  wrong = "preceeded" and right = "preceded"
+  or
+  wrong = "preceeding" and right = "preceding"
+  or
+  wrong = "preceeds" and right = "precedes"
+  or
+  wrong = "precendence" and right = "precedence"
+  or
+  wrong = "precentage" and right = "percentage"
+  or
+  wrong = "precice" and right = "precise"
+  or
+  wrong = "precisly" and right = "precisely"
+  or
+  wrong = "precurser" and right = "precursor"
+  or
+  wrong = "predecesors" and right = "predecessors"
+  or
+  wrong = "predicatble" and right = "predictable"
+  or
+  wrong = "predicitons" and right = "predictions"
+  or
+  wrong = "predomiantly" and right = "predominately"
+  or
+  wrong = "prefered" and right = "preferred"
+  or
+  wrong = "prefering" and right = "preferring"
+  or
+  wrong = "preferrably" and right = "preferably"
+  or
+  wrong = "pregancies" and right = "pregnancies"
+  or
+  wrong = "preiod" and right = "period"
+  or
+  wrong = "preliferation" and right = "proliferation"
+  or
+  wrong = "premeire" and right = "premiere"
+  or
+  wrong = "premeired" and right = "premiered"
+  or
+  wrong = "premillenial" and right = "premillennial"
+  or
+  wrong = "preminence" and right = "preeminence"
+  or
+  wrong = "premission" and right = "permission"
+  or
+  wrong = "premonasterians" and right = "premonstratensians"
+  or
+  wrong = "preocupation" and right = "preoccupation"
+  or
+  wrong = "prepair" and right = "prepare"
+  or
+  wrong = "prepartion" and right = "preparation"
+  or
+  wrong = "prepatory" and right = "preparatory"
+  or
+  wrong = "preperation" and right = "preparation"
+  or
+  wrong = "preperations" and right = "preparations"
+  or
+  wrong = "preriod" and right = "period"
+  or
+  wrong = "presedential" and right = "presidential"
+  or
+  wrong = "presense" and right = "presence"
+  or
+  wrong = "presidenital" and right = "presidential"
+  or
+  wrong = "presidental" and right = "presidential"
+  or
+  wrong = "presitgious" and right = "prestigious"
+  or
+  wrong = "prespective" and right = "perspective"
+  or
+  wrong = "prestigeous" and right = "prestigious"
+  or
+  wrong = "prestigous" and right = "prestigious"
+  or
+  wrong = "presumabely" and right = "presumably"
+  or
+  wrong = "presumibly" and right = "presumably"
+  or
+  wrong = "pretection" and right = "protection"
+  or
+  wrong = "prevelant" and right = "prevalent"
+  or
+  wrong = "preverse" and right = "perverse"
+  or
+  wrong = "previvous" and right = "previous"
+  or
+  wrong = "pricipal" and right = "principal"
+  or
+  wrong = "priciple" and right = "principle"
+  or
+  wrong = "priestood" and right = "priesthood"
+  or
+  wrong = "primarly" and right = "primarily"
+  or
+  wrong = "primative" and right = "primitive"
+  or
+  wrong = "primatively" and right = "primitively"
+  or
+  wrong = "primatives" and right = "primitives"
+  or
+  wrong = "primordal" and right = "primordial"
+  or
+  wrong = "principaly" and right = "principality"
+  or
+  wrong = "principial" and right = "principal"
+  or
+  wrong = "principlaity" and right = "principality"
+  or
+  wrong = "principly" and right = "principally"
+  or
+  wrong = "prinicipal" and right = "principal"
+  or
+  wrong = "privalege" and right = "privilege"
+  or
+  wrong = "privaleges" and right = "privileges"
+  or
+  wrong = "priveledges" and right = "privileges"
+  or
+  wrong = "privelege" and right = "privilege"
+  or
+  wrong = "priveleged" and right = "privileged"
+  or
+  wrong = "priveleges" and right = "privileges"
+  or
+  wrong = "privelige" and right = "privilege"
+  or
+  wrong = "priveliged" and right = "privileged"
+  or
+  wrong = "priveliges" and right = "privileges"
+  or
+  wrong = "privelleges" and right = "privileges"
+  or
+  wrong = "privilage" and right = "privilege"
+  or
+  wrong = "priviledge" and right = "privilege"
+  or
+  wrong = "priviledges" and right = "privileges"
+  or
+  wrong = "privledge" and right = "privilege"
+  or
+  wrong = "privte" and right = "private"
+  or
+  wrong = "probabilaty" and right = "probability"
+  or
+  wrong = "probablistic" and right = "probabilistic"
+  or
+  wrong = "probablly" and right = "probably"
+  or
+  wrong = "probalibity" and right = "probability"
+  or
+  wrong = "probaly" and right = "probably"
+  or
+  wrong = "probelm" and right = "problem"
+  or
+  wrong = "proccess" and right = "process"
+  or
+  wrong = "proccessing" and right = "processing"
+  or
+  wrong = "procede" and right = "precede"
+  or
+  wrong = "procede" and right = "proceed"
+  or
+  wrong = "proceded" and right = "preceded"
+  or
+  wrong = "proceded" and right = "proceeded"
+  or
+  wrong = "procedes" and right = "precedes"
+  or
+  wrong = "procedes" and right = "proceeds"
+  or
+  wrong = "procedger" and right = "procedure"
+  or
+  wrong = "proceding" and right = "preceding"
+  or
+  wrong = "proceding" and right = "proceeding"
+  or
+  wrong = "procedings" and right = "proceedings"
+  or
+  wrong = "proceedure" and right = "procedure"
+  or
+  wrong = "proces" and right = "process"
+  or
+  wrong = "procesed" and right = "processed"
+  or
+  wrong = "processer" and right = "processor"
+  or
+  wrong = "proclaimation" and right = "proclamation"
+  or
+  wrong = "proclamed" and right = "proclaimed"
+  or
+  wrong = "proclaming" and right = "proclaiming"
+  or
+  wrong = "proclomation" and right = "proclamation"
+  or
+  wrong = "profesion" and right = "profession"
+  or
+  wrong = "profesion" and right = "profusion"
+  or
+  wrong = "profesor" and right = "professor"
+  or
+  wrong = "professer" and right = "professor"
+  or
+  wrong = "proffesed" and right = "professed"
+  or
+  wrong = "proffesion" and right = "profession"
+  or
+  wrong = "proffesional" and right = "professional"
+  or
+  wrong = "proffesor" and right = "professor"
+  or
+  wrong = "profilic" and right = "prolific"
+  or
+  wrong = "progessed" and right = "progressed"
+  or
+  wrong = "progidy" and right = "prodigy"
+  or
+  wrong = "programable" and right = "programmable"
+  or
+  wrong = "progrom" and right = "pogrom"
+  or
+  wrong = "progrom" and right = "program"
+  or
+  wrong = "progroms" and right = "pogroms"
+  or
+  wrong = "progroms" and right = "programs"
+  or
+  wrong = "prohabition" and right = "prohibition"
+  or
+  wrong = "prologomena" and right = "prolegomena"
+  or
+  wrong = "prominance" and right = "prominence"
+  or
+  wrong = "prominant" and right = "prominent"
+  or
+  wrong = "prominantly" and right = "prominently"
+  or
+  wrong = "prominately" and right = "predominately"
+  or
+  wrong = "prominately" and right = "prominently"
+  or
+  wrong = "promiscous" and right = "promiscuous"
+  or
+  wrong = "promotted" and right = "promoted"
+  or
+  wrong = "pronomial" and right = "pronominal"
+  or
+  wrong = "pronouced" and right = "pronounced"
+  or
+  wrong = "pronounched" and right = "pronounced"
+  or
+  wrong = "pronounciation" and right = "pronunciation"
+  or
+  wrong = "proove" and right = "prove"
+  or
+  wrong = "prooved" and right = "proved"
+  or
+  wrong = "prophacy" and right = "prophecy"
+  or
+  wrong = "propietary" and right = "proprietary"
+  or
+  wrong = "propmted" and right = "prompted"
+  or
+  wrong = "propoganda" and right = "propaganda"
+  or
+  wrong = "propogate" and right = "propagate"
+  or
+  wrong = "propogates" and right = "propagates"
+  or
+  wrong = "propogation" and right = "propagation"
+  or
+  wrong = "propostion" and right = "proposition"
+  or
+  wrong = "propotions" and right = "proportions"
+  or
+  wrong = "propper" and right = "proper"
+  or
+  wrong = "propperly" and right = "properly"
+  or
+  wrong = "proprietory" and right = "proprietary"
+  or
+  wrong = "proseletyzing" and right = "proselytizing"
+  or
+  wrong = "protaganist" and right = "protagonist"
+  or
+  wrong = "protaganists" and right = "protagonists"
+  or
+  wrong = "protocal" and right = "protocol"
+  or
+  wrong = "protoganist" and right = "protagonist"
+  or
+  wrong = "prototpe" and right = "prototype"
+  or
+  wrong = "protoype" and right = "prototype"
+  or
+  wrong = "protrayed" and right = "portrayed"
+  or
+  wrong = "protruberance" and right = "protuberance"
+  or
+  wrong = "protruberances" and right = "protuberances"
+  or
+  wrong = "prouncements" and right = "pronouncements"
+  or
+  wrong = "provacative" and right = "provocative"
+  or
+  wrong = "provded" and right = "provided"
+  or
+  wrong = "provicial" and right = "provincial"
+  or
+  wrong = "provinicial" and right = "provincial"
+  or
+  wrong = "provisiosn" and right = "provision"
+  or
+  wrong = "provisonal" and right = "provisional"
+  or
+  wrong = "proximty" and right = "proximity"
+  or
+  wrong = "pseudononymous" and right = "pseudonymous"
+  or
+  wrong = "pseudonyn" and right = "pseudonym"
+  or
+  wrong = "psuedo" and right = "pseudo"
+  or
+  wrong = "psycology" and right = "psychology"
+  or
+  wrong = "psyhic" and right = "psychic"
+  or
+  wrong = "pubilsher" and right = "publisher"
+  or
+  wrong = "pubisher" and right = "publisher"
+  or
+  wrong = "publiaher" and right = "publisher"
+  or
+  wrong = "publically" and right = "publicly"
+  or
+  wrong = "publicaly" and right = "publicly"
+  or
+  wrong = "publicher" and right = "publisher"
+  or
+  wrong = "publihser" and right = "publisher"
+  or
+  wrong = "publisehr" and right = "publisher"
+  or
+  wrong = "publiser" and right = "publisher"
+  or
+  wrong = "publisger" and right = "publisher"
+  or
+  wrong = "publisheed" and right = "published"
+  or
+  wrong = "publisherr" and right = "publisher"
+  or
+  wrong = "publishher" and right = "publisher"
+  or
+  wrong = "publishor" and right = "publisher"
+  or
+  wrong = "publishre" and right = "publisher"
+  or
+  wrong = "publissher" and right = "publisher"
+  or
+  wrong = "publlisher" and right = "publisher"
+  or
+  wrong = "publsiher" and right = "publisher"
+  or
+  wrong = "publusher" and right = "publisher"
+  or
+  wrong = "puchasing" and right = "purchasing"
+  or
+  wrong = "pucini" and right = "puccini"
+  or
+  wrong = "pulisher" and right = "publisher"
+  or
+  wrong = "pumkin" and right = "pumpkin"
+  or
+  wrong = "puplisher" and right = "publisher"
+  or
+  wrong = "puritannical" and right = "puritanical"
+  or
+  wrong = "purposedly" and right = "purposely"
+  or
+  wrong = "purpotedly" and right = "purportedly"
+  or
+  wrong = "pursuade" and right = "persuade"
+  or
+  wrong = "pursuaded" and right = "persuaded"
+  or
+  wrong = "pursuades" and right = "persuades"
+  or
+  wrong = "pususading" and right = "persuading"
+  or
+  wrong = "puting" and right = "putting"
+  or
+  wrong = "pwoer" and right = "power"
+  or
+  wrong = "pyscic" and right = "psychic"
+  or
+  wrong = "qtuie" and right = "quiet"
+  or
+  wrong = "qtuie" and right = "quite"
+  or
+  wrong = "quantaty" and right = "quantity"
+  or
+  wrong = "quantitiy" and right = "quantity"
+  or
+  wrong = "quarantaine" and right = "quarantine"
+  or
+  wrong = "queenland" and right = "queensland"
+  or
+  wrong = "questonable" and right = "questionable"
+  or
+  wrong = "quicklyu" and right = "quickly"
+  or
+  wrong = "quinessential" and right = "quintessential"
+  or
+  wrong = "quitted" and right = "quit"
+  or
+  wrong = "quizes" and right = "quizzes"
+  or
+  wrong = "qutie" and right = "quiet"
+  or
+  wrong = "qutie" and right = "quite"
+  or
+  wrong = "rabinnical" and right = "rabbinical"
+  or
+  wrong = "racaus" and right = "raucous"
+  or
+  wrong = "radiactive" and right = "radioactive"
+  or
+  wrong = "radify" and right = "ratify"
+  or
+  wrong = "raelly" and right = "really"
+  or
+  wrong = "rarified" and right = "rarefied"
+  or
+  wrong = "reaccurring" and right = "recurring"
+  or
+  wrong = "reacing" and right = "reaching"
+  or
+  wrong = "reacll" and right = "recall"
+  or
+  wrong = "readmition" and right = "readmission"
+  or
+  wrong = "realitvely" and right = "relatively"
+  or
+  wrong = "realsitic" and right = "realistic"
+  or
+  wrong = "realtions" and right = "relations"
+  or
+  wrong = "realy" and right = "really"
+  or
+  wrong = "realyl" and right = "really"
+  or
+  wrong = "reasearch" and right = "research"
+  or
+  wrong = "rebiulding" and right = "rebuilding"
+  or
+  wrong = "rebllions" and right = "rebellions"
+  or
+  wrong = "rebounce" and right = "rebound"
+  or
+  wrong = "reccomend" and right = "recommend"
+  or
+  wrong = "reccomendations" and right = "recommendations"
+  or
+  wrong = "reccomended" and right = "recommended"
+  or
+  wrong = "reccomending" and right = "recommending"
+  or
+  wrong = "reccommend" and right = "recommend"
+  or
+  wrong = "reccommended" and right = "recommended"
+  or
+  wrong = "reccommending" and right = "recommending"
+  or
+  wrong = "reccuring" and right = "recurring"
+  or
+  wrong = "receeded" and right = "receded"
+  or
+  wrong = "receeding" and right = "receding"
+  or
+  wrong = "recepient" and right = "recipient"
+  or
+  wrong = "recepients" and right = "recipients"
+  or
+  wrong = "receving" and right = "receiving"
+  or
+  wrong = "rechargable" and right = "rechargeable"
+  or
+  wrong = "reched" and right = "reached"
+  or
+  wrong = "recide" and right = "reside"
+  or
+  wrong = "recided" and right = "resided"
+  or
+  wrong = "recident" and right = "resident"
+  or
+  wrong = "recidents" and right = "residents"
+  or
+  wrong = "reciding" and right = "residing"
+  or
+  wrong = "reciepents" and right = "recipients"
+  or
+  wrong = "reciept" and right = "receipt"
+  or
+  wrong = "recieve" and right = "receive"
+  or
+  wrong = "recieved" and right = "received"
+  or
+  wrong = "reciever" and right = "receiver"
+  or
+  wrong = "recievers" and right = "receivers"
+  or
+  wrong = "recieves" and right = "receives"
+  or
+  wrong = "recieving" and right = "receiving"
+  or
+  wrong = "recipiant" and right = "recipient"
+  or
+  wrong = "recipiants" and right = "recipients"
+  or
+  wrong = "recived" and right = "received"
+  or
+  wrong = "recivership" and right = "receivership"
+  or
+  wrong = "recogise" and right = "recognise"
+  or
+  wrong = "recogize" and right = "recognize"
+  or
+  wrong = "recomend" and right = "recommend"
+  or
+  wrong = "recomended" and right = "recommended"
+  or
+  wrong = "recomending" and right = "recommending"
+  or
+  wrong = "recomends" and right = "recommends"
+  or
+  wrong = "recommedations" and right = "recommendations"
+  or
+  wrong = "recompence" and right = "recompense"
+  or
+  wrong = "reconaissance" and right = "reconnaissance"
+  or
+  wrong = "reconcilation" and right = "reconciliation"
+  or
+  wrong = "reconized" and right = "recognized"
+  or
+  wrong = "reconnaisance" and right = "reconnaissance"
+  or
+  wrong = "reconnaissence" and right = "reconnaissance"
+  or
+  wrong = "recontructed" and right = "reconstructed"
+  or
+  wrong = "recquired" and right = "required"
+  or
+  wrong = "recrational" and right = "recreational"
+  or
+  wrong = "recrod" and right = "record"
+  or
+  wrong = "recuiting" and right = "recruiting"
+  or
+  wrong = "recuring" and right = "recurring"
+  or
+  wrong = "recurrance" and right = "recurrence"
+  or
+  wrong = "rediculous" and right = "ridiculous"
+  or
+  wrong = "reedeming" and right = "redeeming"
+  or
+  wrong = "reenforced" and right = "reinforced"
+  or
+  wrong = "refect" and right = "reflect"
+  or
+  wrong = "refedendum" and right = "referendum"
+  or
+  wrong = "referal" and right = "referral"
+  or
+  wrong = "referece" and right = "reference"
+  or
+  wrong = "refereces" and right = "references"
+  or
+  wrong = "refered" and right = "referred"
+  or
+  wrong = "referemce" and right = "reference"
+  or
+  wrong = "referemces" and right = "references"
+  or
+  wrong = "referencs" and right = "references"
+  or
+  wrong = "referenece" and right = "reference"
+  or
+  wrong = "refereneced" and right = "referenced"
+  or
+  wrong = "refereneces" and right = "references"
+  or
+  wrong = "referiang" and right = "referring"
+  or
+  wrong = "refering" and right = "referring"
+  or
+  wrong = "refernce" and right = "reference"
+  or
+  wrong = "refernce" and right = "references"
+  or
+  wrong = "refernces" and right = "references"
+  or
+  wrong = "referrence" and right = "reference"
+  or
+  wrong = "referrences" and right = "references"
+  or
+  wrong = "referrs" and right = "refers"
+  or
+  wrong = "reffered" and right = "referred"
+  or
+  wrong = "refference" and right = "reference"
+  or
+  wrong = "reffering" and right = "referring"
+  or
+  wrong = "refrence" and right = "reference"
+  or
+  wrong = "refrences" and right = "references"
+  or
+  wrong = "refrers" and right = "refers"
+  or
+  wrong = "refridgeration" and right = "refrigeration"
+  or
+  wrong = "refridgerator" and right = "refrigerator"
+  or
+  wrong = "refromist" and right = "reformist"
+  or
+  wrong = "refusla" and right = "refusal"
+  or
+  wrong = "regardes" and right = "regards"
+  or
+  wrong = "regluar" and right = "regular"
+  or
+  wrong = "reguarly" and right = "regularly"
+  or
+  wrong = "regulaion" and right = "regulation"
+  or
+  wrong = "regulaotrs" and right = "regulators"
+  or
+  wrong = "regularily" and right = "regularly"
+  or
+  wrong = "rehersal" and right = "rehearsal"
+  or
+  wrong = "reicarnation" and right = "reincarnation"
+  or
+  wrong = "reigining" and right = "reigning"
+  or
+  wrong = "reknown" and right = "renown"
+  or
+  wrong = "reknowned" and right = "renowned"
+  or
+  wrong = "rela" and right = "real"
+  or
+  wrong = "relaly" and right = "really"
+  or
+  wrong = "relatiopnship" and right = "relationship"
+  or
+  wrong = "relativly" and right = "relatively"
+  or
+  wrong = "relected" and right = "reelected"
+  or
+  wrong = "releive" and right = "relieve"
+  or
+  wrong = "releived" and right = "relieved"
+  or
+  wrong = "releiver" and right = "reliever"
+  or
+  wrong = "releses" and right = "releases"
+  or
+  wrong = "relevence" and right = "relevance"
+  or
+  wrong = "relevent" and right = "relevant"
+  or
+  wrong = "reliablity" and right = "reliability"
+  or
+  wrong = "relient" and right = "reliant"
+  or
+  wrong = "religeous" and right = "religious"
+  or
+  wrong = "religous" and right = "religious"
+  or
+  wrong = "religously" and right = "religiously"
+  or
+  wrong = "relinqushment" and right = "relinquishment"
+  or
+  wrong = "relitavely" and right = "relatively"
+  or
+  wrong = "relized" and right = "realised"
+  or
+  wrong = "relized" and right = "realized"
+  or
+  wrong = "relpacement" and right = "replacement"
+  or
+  wrong = "remaing" and right = "remaining"
+  or
+  wrong = "remeber" and right = "remember"
+  or
+  wrong = "rememberable" and right = "memorable"
+  or
+  wrong = "rememberance" and right = "remembrance"
+  or
+  wrong = "remembrence" and right = "remembrance"
+  or
+  wrong = "remenant" and right = "remnant"
+  or
+  wrong = "remenicent" and right = "reminiscent"
+  or
+  wrong = "reminent" and right = "remnant"
+  or
+  wrong = "reminescent" and right = "reminiscent"
+  or
+  wrong = "reminscent" and right = "reminiscent"
+  or
+  wrong = "reminsicent" and right = "reminiscent"
+  or
+  wrong = "rendevous" and right = "rendezvous"
+  or
+  wrong = "rendezous" and right = "rendezvous"
+  or
+  wrong = "renedered" and right = "rende"
+  or
+  wrong = "renewl" and right = "renewal"
+  or
+  wrong = "rennovate" and right = "renovate"
+  or
+  wrong = "rennovated" and right = "renovated"
+  or
+  wrong = "rennovating" and right = "renovating"
+  or
+  wrong = "rennovation" and right = "renovation"
+  or
+  wrong = "rentors" and right = "renters"
+  or
+  wrong = "reoccurrence" and right = "recurrence"
+  or
+  wrong = "reorganision" and right = "reorganisation"
+  or
+  wrong = "repatition" and right = "repartition"
+  or
+  wrong = "repatition" and right = "repetition"
+  or
+  wrong = "repblic" and right = "republic"
+  or
+  wrong = "repblican" and right = "republican"
+  or
+  wrong = "repblicans" and right = "republicans"
+  or
+  wrong = "repblics" and right = "republics"
+  or
+  wrong = "repectively" and right = "respectively"
+  or
+  wrong = "repeition" and right = "repetition"
+  or
+  wrong = "repentence" and right = "repentance"
+  or
+  wrong = "repentent" and right = "repentant"
+  or
+  wrong = "repeteadly" and right = "repeatedly"
+  or
+  wrong = "repetion" and right = "repetition"
+  or
+  wrong = "repid" and right = "rapid"
+  or
+  wrong = "reponse" and right = "response"
+  or
+  wrong = "reponsible" and right = "responsible"
+  or
+  wrong = "reportadly" and right = "reportedly"
+  or
+  wrong = "represantative" and right = "representative"
+  or
+  wrong = "representive" and right = "representative"
+  or
+  wrong = "representives" and right = "representatives"
+  or
+  wrong = "reproducable" and right = "reproducible"
+  or
+  wrong = "reprtoire" and right = "repertoire"
+  or
+  wrong = "repsectively" and right = "respectively"
+  or
+  wrong = "reptition" and right = "repetition"
+  or
+  wrong = "repubic" and right = "republic"
+  or
+  wrong = "repubican" and right = "republican"
+  or
+  wrong = "repubicans" and right = "republicans"
+  or
+  wrong = "repubics" and right = "republics"
+  or
+  wrong = "republi" and right = "republic"
+  or
+  wrong = "republian" and right = "republican"
+  or
+  wrong = "republians" and right = "republicans"
+  or
+  wrong = "republis" and right = "republics"
+  or
+  wrong = "repulic" and right = "republic"
+  or
+  wrong = "repulican" and right = "republican"
+  or
+  wrong = "repulicans" and right = "republicans"
+  or
+  wrong = "repulics" and right = "republics"
+  or
+  wrong = "requirment" and right = "requirement"
+  or
+  wrong = "requred" and right = "required"
+  or
+  wrong = "resaurant" and right = "restaurant"
+  or
+  wrong = "resembelance" and right = "resemblance"
+  or
+  wrong = "resembes" and right = "resembles"
+  or
+  wrong = "resemblence" and right = "resemblance"
+  or
+  wrong = "resevoir" and right = "reservoir"
+  or
+  wrong = "residental" and right = "residential"
+  or
+  wrong = "resignement" and right = "resignment"
+  or
+  wrong = "resistable" and right = "resistible"
+  or
+  wrong = "resistence" and right = "resistance"
+  or
+  wrong = "resistent" and right = "resistant"
+  or
+  wrong = "respectivly" and right = "respectively"
+  or
+  wrong = "responce" and right = "response"
+  or
+  wrong = "responibilities" and right = "responsibilities"
+  or
+  wrong = "responisble" and right = "responsible"
+  or
+  wrong = "responnsibilty" and right = "responsibility"
+  or
+  wrong = "responsability" and right = "responsibility"
+  or
+  wrong = "responsibile" and right = "responsible"
+  or
+  wrong = "responsibilites" and right = "responsibilities"
+  or
+  wrong = "responsiblities" and right = "responsibilities"
+  or
+  wrong = "responsiblity" and right = "responsibility"
+  or
+  wrong = "ressemblance" and right = "resemblance"
+  or
+  wrong = "ressemble" and right = "resemble"
+  or
+  wrong = "ressembled" and right = "resembled"
+  or
+  wrong = "ressemblence" and right = "resemblance"
+  or
+  wrong = "ressembling" and right = "resembling"
+  or
+  wrong = "resssurecting" and right = "resurrecting"
+  or
+  wrong = "ressurect" and right = "resurrect"
+  or
+  wrong = "ressurected" and right = "resurrected"
+  or
+  wrong = "ressurection" and right = "resurrection"
+  or
+  wrong = "ressurrection" and right = "resurrection"
+  or
+  wrong = "restarant" and right = "restaurant"
+  or
+  wrong = "restarants" and right = "restaurants"
+  or
+  wrong = "restaraunt" and right = "restaurant"
+  or
+  wrong = "restaraunteur" and right = "restaurateur"
+  or
+  wrong = "restaraunteurs" and right = "restaurateurs"
+  or
+  wrong = "restaraunts" and right = "restaurants"
+  or
+  wrong = "restauranteurs" and right = "restaurateurs"
+  or
+  wrong = "restauration" and right = "restoration"
+  or
+  wrong = "restauraunt" and right = "restaurant"
+  or
+  wrong = "resteraunt" and right = "restaurant"
+  or
+  wrong = "resteraunts" and right = "restaurants"
+  or
+  wrong = "resticted" and right = "restricted"
+  or
+  wrong = "restraunt" and right = "restaurant"
+  or
+  wrong = "restraunt" and right = "restraint"
+  or
+  wrong = "resturant" and right = "restaurant"
+  or
+  wrong = "resturants" and right = "restaurants"
+  or
+  wrong = "resturaunt" and right = "restaurant"
+  or
+  wrong = "resturaunts" and right = "restaurants"
+  or
+  wrong = "resurecting" and right = "resurrecting"
+  or
+  wrong = "retalitated" and right = "retaliated"
+  or
+  wrong = "retalitation" and right = "retaliation"
+  or
+  wrong = "retreive" and right = "retrieve"
+  or
+  wrong = "retrive" and right = "retrieve"
+  or
+  wrong = "returnd" and right = "returned"
+  or
+  wrong = "revaluated" and right = "reevaluated"
+  or
+  wrong = "reveiw" and right = "review"
+  or
+  wrong = "reveral" and right = "reversal"
+  or
+  wrong = "reversable" and right = "reversible"
+  or
+  wrong = "revolutionar" and right = "revolutionary"
+  or
+  wrong = "rewitten" and right = "rewritten"
+  or
+  wrong = "rewriet" and right = "rewrite"
+  or
+  wrong = "rference" and right = "reference"
+  or
+  wrong = "rferences" and right = "references"
+  or
+  wrong = "rhymme" and right = "rhyme"
+  or
+  wrong = "rhythem" and right = "rhythm"
+  or
+  wrong = "rhythim" and right = "rhythm"
+  or
+  wrong = "rhytmic" and right = "rhythmic"
+  or
+  wrong = "rigeur" and right = "rigor"
+  or
+  wrong = "rigeur" and right = "rigour"
+  or
+  wrong = "rigeur" and right = "rigueur"
+  or
+  wrong = "rigourous" and right = "rigorous"
+  or
+  wrong = "rininging" and right = "ringing"
+  or
+  wrong = "rised" and right = "raised"
+  or
+  wrong = "rised" and right = "rose"
+  or
+  wrong = "rockerfeller" and right = "rockefeller"
+  or
+  wrong = "rococco" and right = "rococo"
+  or
+  wrong = "rocord" and right = "record"
+  or
+  wrong = "roomate" and right = "roommate"
+  or
+  wrong = "rougly" and right = "roughly"
+  or
+  wrong = "rucuperate" and right = "recuperate"
+  or
+  wrong = "rudimentatry" and right = "rudimentary"
+  or
+  wrong = "rulle" and right = "rule"
+  or
+  wrong = "runing" and right = "running"
+  or
+  wrong = "runnung" and right = "running"
+  or
+  wrong = "russina" and right = "russian"
+  or
+  wrong = "russion" and right = "russian"
+  or
+  wrong = "rwite" and right = "write"
+  or
+  wrong = "rythem" and right = "rhythm"
+  or
+  wrong = "rythim" and right = "rhythm"
+  or
+  wrong = "rythm" and right = "rhythm"
+  or
+  wrong = "rythmic" and right = "rhythmic"
+  or
+  wrong = "rythyms" and right = "rhythms"
+  or
+  wrong = "sacrafice" and right = "sacrifice"
+  or
+  wrong = "sacreligious" and right = "sacrilegious"
+  or
+  wrong = "sacremento" and right = "sacramento"
+  or
+  wrong = "sacrifical" and right = "sacrificial"
+  or
+  wrong = "saftey" and right = "safety"
+  or
+  wrong = "safty" and right = "safety"
+  or
+  wrong = "salery" and right = "salary"
+  or
+  wrong = "sanctionning" and right = "sanctioning"
+  or
+  wrong = "sandwhich" and right = "sandwich"
+  or
+  wrong = "sanhedrim" and right = "sanhedrin"
+  or
+  wrong = "santioned" and right = "sanctioned"
+  or
+  wrong = "sargant" and right = "sergeant"
+  or
+  wrong = "sargeant" and right = "sergeant"
+  or
+  wrong = "sasy" and right = "sassy"
+  or
+  wrong = "sasy" and right = "says"
+  or
+  wrong = "satelite" and right = "satellite"
+  or
+  wrong = "satelites" and right = "satellites"
+  or
+  wrong = "saterday" and right = "saturday"
+  or
+  wrong = "saterdays" and right = "saturdays"
+  or
+  wrong = "satisfactority" and right = "satisfactorily"
+  or
+  wrong = "satric" and right = "satiric"
+  or
+  wrong = "satrical" and right = "satirical"
+  or
+  wrong = "satrically" and right = "satirically"
+  or
+  wrong = "sattelite" and right = "satellite"
+  or
+  wrong = "sattelites" and right = "satellites"
+  or
+  wrong = "saught" and right = "sought"
+  or
+  wrong = "saveing" and right = "saving"
+  or
+  wrong = "saxaphone" and right = "saxophone"
+  or
+  wrong = "scaleable" and right = "scalable"
+  or
+  wrong = "scandanavia" and right = "scandinavia"
+  or
+  wrong = "scaricity" and right = "scarcity"
+  or
+  wrong = "scavanged" and right = "scavenged"
+  or
+  wrong = "schedual" and right = "schedule"
+  or
+  wrong = "scholarhip" and right = "scholarship"
+  or
+  wrong = "scholarstic" and right = "scholarly"
+  or
+  wrong = "scholarstic" and right = "scholastic"
+  or
+  wrong = "scientfic" and right = "scientific"
+  or
+  wrong = "scientifc" and right = "scientific"
+  or
+  wrong = "scientis" and right = "scientist"
+  or
+  wrong = "scince" and right = "science"
+  or
+  wrong = "scinece" and right = "science"
+  or
+  wrong = "scirpt" and right = "script"
+  or
+  wrong = "scoll" and right = "scroll"
+  or
+  wrong = "screenwrighter" and right = "screenwriter"
+  or
+  wrong = "scrutinity" and right = "scrutiny"
+  or
+  wrong = "scuptures" and right = "sculptures"
+  or
+  wrong = "seach" and right = "search"
+  or
+  wrong = "seached" and right = "searched"
+  or
+  wrong = "seaches" and right = "searches"
+  or
+  wrong = "secceeded" and right = "seceded"
+  or
+  wrong = "secceeded" and right = "succeeded"
+  or
+  wrong = "seceed" and right = "secede"
+  or
+  wrong = "seceed" and right = "succeed"
+  or
+  wrong = "seceeded" and right = "seceded"
+  or
+  wrong = "seceeded" and right = "succeeded"
+  or
+  wrong = "secratary" and right = "secretary"
+  or
+  wrong = "secretery" and right = "secretary"
+  or
+  wrong = "sedereal" and right = "sidereal"
+  or
+  wrong = "seeked" and right = "sought"
+  or
+  wrong = "segementation" and right = "segmentation"
+  or
+  wrong = "seguoys" and right = "segues"
+  or
+  wrong = "seige" and right = "siege"
+  or
+  wrong = "seing" and right = "seeing"
+  or
+  wrong = "seinor" and right = "senior"
+  or
+  wrong = "seldomly" and right = "seldom"
+  or
+  wrong = "senarios" and right = "scenarios"
+  or
+  wrong = "sence" and right = "sense"
+  or
+  wrong = "sence" and right = "since"
+  or
+  wrong = "senstive" and right = "sensitive"
+  or
+  wrong = "sensure" and right = "censure"
+  or
+  wrong = "seperate" and right = "separate"
+  or
+  wrong = "seperated" and right = "separated"
+  or
+  wrong = "seperately" and right = "separately"
+  or
+  wrong = "seperates" and right = "separates"
+  or
+  wrong = "seperating" and right = "separating"
+  or
+  wrong = "seperation" and right = "separation"
+  or
+  wrong = "seperatism" and right = "separatism"
+  or
+  wrong = "seperatist" and right = "separatist"
+  or
+  wrong = "seperator" and right = "separator"
+  or
+  wrong = "sepina" and right = "subpoena"
+  or
+  wrong = "sepulchure" and right = "sepulcher"
+  or
+  wrong = "sepulchure" and right = "sepulchre"
+  or
+  wrong = "sepulcre" and right = "sepulcher"
+  or
+  wrong = "sepulcre" and right = "sepulchre"
+  or
+  wrong = "sergent" and right = "sergeant"
+  or
+  wrong = "settelement" and right = "settlement"
+  or
+  wrong = "settlment" and right = "settlement"
+  or
+  wrong = "settting" and right = "setting"
+  or
+  wrong = "severeal" and right = "several"
+  or
+  wrong = "severley" and right = "severely"
+  or
+  wrong = "severly" and right = "severely"
+  or
+  wrong = "sevice" and right = "service"
+  or
+  wrong = "shadasloo" and right = "shadaloo"
+  or
+  wrong = "shaddow" and right = "shadow"
+  or
+  wrong = "shadoloo" and right = "shadaloo"
+  or
+  wrong = "shamen" and right = "shaman"
+  or
+  wrong = "shamen" and right = "shamans"
+  or
+  wrong = "sheat" and right = "cheat"
+  or
+  wrong = "sheat" and right = "sheath"
+  or
+  wrong = "sheat" and right = "sheet"
+  or
+  wrong = "sheild" and right = "shield"
+  or
+  wrong = "sherif" and right = "sheriff"
+  or
+  wrong = "shineing" and right = "shining"
+  or
+  wrong = "shiped" and right = "shipped"
+  or
+  wrong = "shiping" and right = "shipping"
+  or
+  wrong = "shopkeeepers" and right = "shopkeepers"
+  or
+  wrong = "shorly" and right = "shortly"
+  or
+  wrong = "shoudl" and right = "should"
+  or
+  wrong = "shoudln" and right = "should"
+  or
+  wrong = "shreak" and right = "shriek"
+  or
+  wrong = "shrinked" and right = "shrunk"
+  or
+  wrong = "sicne" and right = "since"
+  or
+  wrong = "sideral" and right = "sidereal"
+  or
+  wrong = "sieze" and right = "seize"
+  or
+  wrong = "sieze" and right = "size"
+  or
+  wrong = "siezed" and right = "seized"
+  or
+  wrong = "siezed" and right = "sized"
+  or
+  wrong = "siezing" and right = "seizing"
+  or
+  wrong = "siezing" and right = "sizing"
+  or
+  wrong = "siezure" and right = "seizure"
+  or
+  wrong = "siezures" and right = "seizures"
+  or
+  wrong = "siginificant" and right = "significant"
+  or
+  wrong = "signficant" and right = "significant"
+  or
+  wrong = "signficiant" and right = "significant"
+  or
+  wrong = "signfies" and right = "signifies"
+  or
+  wrong = "signifantly" and right = "significantly"
+  or
+  wrong = "significently" and right = "significantly"
+  or
+  wrong = "signifigant" and right = "significant"
+  or
+  wrong = "signifigantly" and right = "significantly"
+  or
+  wrong = "signitories" and right = "signatories"
+  or
+  wrong = "signitory" and right = "signatory"
+  or
+  wrong = "similarily" and right = "similarly"
+  or
+  wrong = "similiar" and right = "similar"
+  or
+  wrong = "similiarity" and right = "similarity"
+  or
+  wrong = "similiarly" and right = "similarly"
+  or
+  wrong = "simmilar" and right = "similar"
+  or
+  wrong = "simpley" and right = "simply"
+  or
+  wrong = "simplier" and right = "simpler"
+  or
+  wrong = "simultanous" and right = "simultaneous"
+  or
+  wrong = "simultanously" and right = "simultaneously"
+  or
+  wrong = "sincerley" and right = "sincerely"
+  or
+  wrong = "singsog" and right = "singsong"
+  or
+  wrong = "sinse" and right = "since"
+  or
+  wrong = "sinse" and right = "sines"
+  or
+  wrong = "sionist" and right = "zionist"
+  or
+  wrong = "sionists" and right = "zionists"
+  or
+  wrong = "sixtin" and right = "sistine"
+  or
+  wrong = "skagerak" and right = "skagerrak"
+  or
+  wrong = "skateing" and right = "skating"
+  or
+  wrong = "slaugterhouses" and right = "slaughterhouses"
+  or
+  wrong = "slighly" and right = "slightly"
+  or
+  wrong = "slippy" and right = "slippery"
+  or
+  wrong = "slowy" and right = "slowly"
+  or
+  wrong = "smae" and right = "same"
+  or
+  wrong = "smealting" and right = "smelting"
+  or
+  wrong = "smoe" and right = "some"
+  or
+  wrong = "sneeks" and right = "sneaks"
+  or
+  wrong = "snese" and right = "sneeze"
+  or
+  wrong = "socalism" and right = "socialism"
+  or
+  wrong = "socities" and right = "societies"
+  or
+  wrong = "soem" and right = "some"
+  or
+  wrong = "sofware" and right = "software"
+  or
+  wrong = "sohw" and right = "show"
+  or
+  wrong = "soilders" and right = "soldiers"
+  or
+  wrong = "solatary" and right = "solitary"
+  or
+  wrong = "soley" and right = "solely"
+  or
+  wrong = "soliders" and right = "soldiers"
+  or
+  wrong = "soliliquy" and right = "soliloquy"
+  or
+  wrong = "soluable" and right = "soluble"
+  or
+  wrong = "somene" and right = "someone"
+  or
+  wrong = "somtimes" and right = "sometimes"
+  or
+  wrong = "somwhere" and right = "somewhere"
+  or
+  wrong = "sophicated" and right = "sophisticated"
+  or
+  wrong = "sophmore" and right = "sophomore"
+  or
+  wrong = "sorceror" and right = "sorcerer"
+  or
+  wrong = "sorrounding" and right = "surrounding"
+  or
+  wrong = "sotry" and right = "story"
+  or
+  wrong = "sotyr" and right = "satyr"
+  or
+  wrong = "sotyr" and right = "story"
+  or
+  wrong = "soudn" and right = "sound"
+  or
+  wrong = "soudns" and right = "sounds"
+  or
+  wrong = "sould" and right = "could"
+  or
+  wrong = "sould" and right = "should"
+  or
+  wrong = "sould" and right = "sold"
+  or
+  wrong = "sould" and right = "soul"
+  or
+  wrong = "sountrack" and right = "soundtrack"
+  or
+  wrong = "sourth" and right = "south"
+  or
+  wrong = "sourthern" and right = "southern"
+  or
+  wrong = "souvenier" and right = "souvenir"
+  or
+  wrong = "souveniers" and right = "souvenirs"
+  or
+  wrong = "soveits" and right = "soviets"
+  or
+  wrong = "sovereignity" and right = "sovereignty"
+  or
+  wrong = "soverign" and right = "sovereign"
+  or
+  wrong = "soverignity" and right = "sovereignty"
+  or
+  wrong = "soverignty" and right = "sovereignty"
+  or
+  wrong = "spainish" and right = "spanish"
+  or
+  wrong = "speach" and right = "speech"
+  or
+  wrong = "specfic" and right = "specific"
+  or
+  wrong = "speciallized" and right = "specialised"
+  or
+  wrong = "speciallized" and right = "specialized"
+  or
+  wrong = "specif" and right = "specific"
+  or
+  wrong = "specif" and right = "specify"
+  or
+  wrong = "specifiying" and right = "specifying"
+  or
+  wrong = "speciman" and right = "specimen"
+  or
+  wrong = "spectauclar" and right = "spectacular"
+  or
+  wrong = "spectaulars" and right = "spectaculars"
+  or
+  wrong = "spects" and right = "aspects"
+  or
+  wrong = "spects" and right = "expects"
+  or
+  wrong = "spectum" and right = "spectrum"
+  or
+  wrong = "speices" and right = "species"
+  or
+  wrong = "spendour" and right = "splendour"
+  or
+  wrong = "spermatozoan" and right = "spermatozoon"
+  or
+  wrong = "spoace" and right = "space"
+  or
+  wrong = "sponser" and right = "sponsor"
+  or
+  wrong = "sponsered" and right = "sponsored"
+  or
+  wrong = "spontanous" and right = "spontaneous"
+  or
+  wrong = "sponzored" and right = "sponsored"
+  or
+  wrong = "spoonfulls" and right = "spoonfuls"
+  or
+  wrong = "sppeches" and right = "speeches"
+  or
+  wrong = "spreaded" and right = "spread"
+  or
+  wrong = "sprech" and right = "speech"
+  or
+  wrong = "spred" and right = "spread"
+  or
+  wrong = "spriritual" and right = "spiritual"
+  or
+  wrong = "spritual" and right = "spiritual"
+  or
+  wrong = "sqaure" and right = "square"
+  or
+  wrong = "sring" and right = "string"
+  or
+  wrong = "stablility" and right = "stability"
+  or
+  wrong = "stainlees" and right = "stainless"
+  or
+  wrong = "staion" and right = "station"
+  or
+  wrong = "standars" and right = "standards"
+  or
+  wrong = "stange" and right = "strange"
+  or
+  wrong = "startegic" and right = "strategic"
+  or
+  wrong = "startegies" and right = "strategies"
+  or
+  wrong = "startegy" and right = "strategy"
+  or
+  wrong = "stateman" and right = "statesman"
+  or
+  wrong = "statememts" and right = "statements"
+  or
+  wrong = "statment" and right = "statement"
+  or
+  wrong = "steriods" and right = "steroids"
+  or
+  wrong = "sterotypes" and right = "stereotypes"
+  or
+  wrong = "stilus" and right = "stylus"
+  or
+  wrong = "stingent" and right = "stringent"
+  or
+  wrong = "stiring" and right = "stirring"
+  or
+  wrong = "stirrs" and right = "stirs"
+  or
+  wrong = "stlye" and right = "style"
+  or
+  wrong = "stomache" and right = "stomach"
+  or
+  wrong = "stong" and right = "strong"
+  or
+  wrong = "stopry" and right = "story"
+  or
+  wrong = "storeis" and right = "stories"
+  or
+  wrong = "storise" and right = "stories"
+  or
+  wrong = "stornegst" and right = "strongest"
+  or
+  wrong = "stoyr" and right = "story"
+  or
+  wrong = "stpo" and right = "stop"
+  or
+  wrong = "stradegies" and right = "strategies"
+  or
+  wrong = "stradegy" and right = "strategy"
+  or
+  wrong = "strat" and right = "start"
+  or
+  wrong = "strat" and right = "strata"
+  or
+  wrong = "stratagically" and right = "strategically"
+  or
+  wrong = "streemlining" and right = "streamlining"
+  or
+  wrong = "stregth" and right = "strength"
+  or
+  wrong = "strenghen" and right = "strengthen"
+  or
+  wrong = "strenghened" and right = "strengthened"
+  or
+  wrong = "strenghening" and right = "strengthening"
+  or
+  wrong = "strenght" and right = "strength"
+  or
+  wrong = "strenghten" and right = "strengthen"
+  or
+  wrong = "strenghtened" and right = "strengthened"
+  or
+  wrong = "strenghtening" and right = "strengthening"
+  or
+  wrong = "strengtened" and right = "strengthened"
+  or
+  wrong = "strenous" and right = "strenuous"
+  or
+  wrong = "strictist" and right = "strictest"
+  or
+  wrong = "strikely" and right = "strikingly"
+  or
+  wrong = "strnad" and right = "strand"
+  or
+  wrong = "stroy" and right = "destroy"
+  or
+  wrong = "stroy" and right = "story"
+  or
+  wrong = "structual" and right = "structural"
+  or
+  wrong = "stubborness" and right = "stubbornness"
+  or
+  wrong = "stucture" and right = "structure"
+  or
+  wrong = "stuctured" and right = "structured"
+  or
+  wrong = "studdy" and right = "study"
+  or
+  wrong = "studing" and right = "studying"
+  or
+  wrong = "stuggling" and right = "struggling"
+  or
+  wrong = "sturcture" and right = "structure"
+  or
+  wrong = "subcatagories" and right = "subcategories"
+  or
+  wrong = "subcatagory" and right = "subcategory"
+  or
+  wrong = "subconsiously" and right = "subconsciously"
+  or
+  wrong = "subjudgation" and right = "subjugation"
+  or
+  wrong = "submachne" and right = "submachine"
+  or
+  wrong = "subpecies" and right = "subspecies"
+  or
+  wrong = "subsidary" and right = "subsidiary"
+  or
+  wrong = "subsiduary" and right = "subsidiary"
+  or
+  wrong = "subsquent" and right = "subsequent"
+  or
+  wrong = "subsquently" and right = "subsequently"
+  or
+  wrong = "substace" and right = "substance"
+  or
+  wrong = "substancial" and right = "substantial"
+  or
+  wrong = "substatial" and right = "substantial"
+  or
+  wrong = "substituded" and right = "substituted"
+  or
+  wrong = "substract" and right = "subtract"
+  or
+  wrong = "substracted" and right = "subtracted"
+  or
+  wrong = "substracting" and right = "subtracting"
+  or
+  wrong = "substraction" and right = "subtraction"
+  or
+  wrong = "substracts" and right = "subtracts"
+  or
+  wrong = "subtances" and right = "substances"
+  or
+  wrong = "subterranian" and right = "subterranean"
+  or
+  wrong = "suburburban" and right = "suburban"
+  or
+  wrong = "succceeded" and right = "succeeded"
+  or
+  wrong = "succcesses" and right = "successes"
+  or
+  wrong = "succedded" and right = "succeeded"
+  or
+  wrong = "succeded" and right = "succeeded"
+  or
+  wrong = "succeds" and right = "succeeds"
+  or
+  wrong = "succesful" and right = "successful"
+  or
+  wrong = "succesfully" and right = "successfully"
+  or
+  wrong = "succesfuly" and right = "successfully"
+  or
+  wrong = "succesion" and right = "succession"
+  or
+  wrong = "succesive" and right = "successive"
+  or
+  wrong = "successfull" and right = "successful"
+  or
+  wrong = "successully" and right = "successfully"
+  or
+  wrong = "succsess" and right = "success"
+  or
+  wrong = "succsessfull" and right = "successful"
+  or
+  wrong = "suceed" and right = "succeed"
+  or
+  wrong = "suceeded" and right = "succeeded"
+  or
+  wrong = "suceeding" and right = "succeeding"
+  or
+  wrong = "suceeds" and right = "succeeds"
+  or
+  wrong = "sucesful" and right = "successful"
+  or
+  wrong = "sucesfully" and right = "successfully"
+  or
+  wrong = "sucesfuly" and right = "successfully"
+  or
+  wrong = "sucesion" and right = "succession"
+  or
+  wrong = "sucess" and right = "success"
+  or
+  wrong = "sucesses" and right = "successes"
+  or
+  wrong = "sucessful" and right = "successful"
+  or
+  wrong = "sucessfull" and right = "successful"
+  or
+  wrong = "sucessfully" and right = "successfully"
+  or
+  wrong = "sucessfuly" and right = "successfully"
+  or
+  wrong = "sucession" and right = "succession"
+  or
+  wrong = "sucessive" and right = "successive"
+  or
+  wrong = "sucessor" and right = "successor"
+  or
+  wrong = "sucessot" and right = "successor"
+  or
+  wrong = "sucide" and right = "suicide"
+  or
+  wrong = "sucidial" and right = "suicidal"
+  or
+  wrong = "sudent" and right = "student"
+  or
+  wrong = "sudents" and right = "students"
+  or
+  wrong = "sufferage" and right = "suffrage"
+  or
+  wrong = "sufferred" and right = "suffered"
+  or
+  wrong = "sufferring" and right = "suffering"
+  or
+  wrong = "sufficent" and right = "sufficient"
+  or
+  wrong = "sufficently" and right = "sufficiently"
+  or
+  wrong = "sumary" and right = "summary"
+  or
+  wrong = "sunglases" and right = "sunglasses"
+  or
+  wrong = "suop" and right = "soup"
+  or
+  wrong = "superceeded" and right = "superseded"
+  or
+  wrong = "superintendant" and right = "superintendent"
+  or
+  wrong = "suphisticated" and right = "sophisticated"
+  or
+  wrong = "suplimented" and right = "supplemented"
+  or
+  wrong = "suported" and right = "supported"
+  or
+  wrong = "supose" and right = "suppose"
+  or
+  wrong = "suposed" and right = "supposed"
+  or
+  wrong = "suposedly" and right = "supposedly"
+  or
+  wrong = "suposes" and right = "supposes"
+  or
+  wrong = "suposing" and right = "supposing"
+  or
+  wrong = "supplamented" and right = "supplemented"
+  or
+  wrong = "suppliementing" and right = "supplementing"
+  or
+  wrong = "suppoed" and right = "supposed"
+  or
+  wrong = "supposingly" and right = "supposedly"
+  or
+  wrong = "suppy" and right = "supply"
+  or
+  wrong = "suprassing" and right = "surpassing"
+  or
+  wrong = "supress" and right = "suppress"
+  or
+  wrong = "supressed" and right = "suppressed"
+  or
+  wrong = "supresses" and right = "suppresses"
+  or
+  wrong = "supressing" and right = "suppressing"
+  or
+  wrong = "suprise" and right = "surprise"
+  or
+  wrong = "suprised" and right = "surprised"
+  or
+  wrong = "suprising" and right = "surprising"
+  or
+  wrong = "suprisingly" and right = "surprisingly"
+  or
+  wrong = "suprize" and right = "surprise"
+  or
+  wrong = "suprized" and right = "surprised"
+  or
+  wrong = "suprizing" and right = "surprising"
+  or
+  wrong = "suprizingly" and right = "surprisingly"
+  or
+  wrong = "surfce" and right = "surface"
+  or
+  wrong = "surley" and right = "surely"
+  or
+  wrong = "surley" and right = "surly"
+  or
+  wrong = "suround" and right = "surround"
+  or
+  wrong = "surounded" and right = "surrounded"
+  or
+  wrong = "surounding" and right = "surrounding"
+  or
+  wrong = "suroundings" and right = "surroundings"
+  or
+  wrong = "surounds" and right = "surrounds"
+  or
+  wrong = "surplanted" and right = "supplanted"
+  or
+  wrong = "surpress" and right = "suppress"
+  or
+  wrong = "surpressed" and right = "suppressed"
+  or
+  wrong = "surprize" and right = "surprise"
+  or
+  wrong = "surprized" and right = "surprised"
+  or
+  wrong = "surprizing" and right = "surprising"
+  or
+  wrong = "surprizingly" and right = "surprisingly"
+  or
+  wrong = "surrended" and right = "surrendered"
+  or
+  wrong = "surrended" and right = "surrounded"
+  or
+  wrong = "surrepetitious" and right = "surreptitious"
+  or
+  wrong = "surrepetitiously" and right = "surreptitiously"
+  or
+  wrong = "surreptious" and right = "surreptitious"
+  or
+  wrong = "surreptiously" and right = "surreptitiously"
+  or
+  wrong = "surronded" and right = "surrounded"
+  or
+  wrong = "surrouded" and right = "surrounded"
+  or
+  wrong = "surrouding" and right = "surrounding"
+  or
+  wrong = "surrundering" and right = "surrendering"
+  or
+  wrong = "surveilence" and right = "surveillance"
+  or
+  wrong = "surveill" and right = "surveil"
+  or
+  wrong = "surveyer" and right = "surveyor"
+  or
+  wrong = "surviver" and right = "survivor"
+  or
+  wrong = "survivers" and right = "survivors"
+  or
+  wrong = "survivied" and right = "survived"
+  or
+  wrong = "suseptable" and right = "susceptible"
+  or
+  wrong = "suseptible" and right = "susceptible"
+  or
+  wrong = "suspention" and right = "suspension"
+  or
+  wrong = "swaer" and right = "swear"
+  or
+  wrong = "swaers" and right = "swears"
+  or
+  wrong = "swepth" and right = "swept"
+  or
+  wrong = "swiming" and right = "swimming"
+  or
+  wrong = "syas" and right = "says"
+  or
+  wrong = "symetrical" and right = "symmetrical"
+  or
+  wrong = "symetrically" and right = "symmetrically"
+  or
+  wrong = "symetry" and right = "symmetry"
+  or
+  wrong = "symettric" and right = "symmetric"
+  or
+  wrong = "symmetral" and right = "symmetric"
+  or
+  wrong = "symmetricaly" and right = "symmetrically"
+  or
+  wrong = "synagouge" and right = "synagogue"
+  or
+  wrong = "syncronization" and right = "synchronization"
+  or
+  wrong = "synonomous" and right = "synonymous"
+  or
+  wrong = "synonymns" and right = "synonyms"
+  or
+  wrong = "synphony" and right = "symphony"
+  or
+  wrong = "syphyllis" and right = "syphilis"
+  or
+  wrong = "sypmtoms" and right = "symptoms"
+  or
+  wrong = "syrap" and right = "syrup"
+  or
+  wrong = "sysmatically" and right = "systematically"
+  or
+  wrong = "sytem" and right = "system"
+  or
+  wrong = "sytle" and right = "style"
+  or
+  wrong = "tabacco" and right = "tobacco"
+  or
+  wrong = "tahn" and right = "than"
+  or
+  wrong = "taht" and right = "that"
+  or
+  wrong = "talekd" and right = "talked"
+  or
+  wrong = "targetted" and right = "targeted"
+  or
+  wrong = "targetting" and right = "targeting"
+  or
+  wrong = "tast" and right = "taste"
+  or
+  wrong = "tath" and right = "that"
+  or
+  wrong = "tatoo" and right = "tattoo"
+  or
+  wrong = "tattooes" and right = "tattoos"
+  or
+  wrong = "taxanomic" and right = "taxonomic"
+  or
+  wrong = "taxanomy" and right = "taxonomy"
+  or
+  wrong = "teached" and right = "taught"
+  or
+  wrong = "techician" and right = "technician"
+  or
+  wrong = "techicians" and right = "technicians"
+  or
+  wrong = "techiniques" and right = "techniques"
+  or
+  wrong = "technitian" and right = "technician"
+  or
+  wrong = "technnology" and right = "technology"
+  or
+  wrong = "technolgy" and right = "technology"
+  or
+  wrong = "teh" and right = "the"
+  or
+  wrong = "tehy" and right = "they"
+  or
+  wrong = "telelevision" and right = "television"
+  or
+  wrong = "televsion" and right = "television"
+  or
+  wrong = "telphony" and right = "telephony"
+  or
+  wrong = "temerature" and right = "temperature"
+  or
+  wrong = "tempalte" and right = "template"
+  or
+  wrong = "tempaltes" and right = "templates"
+  or
+  wrong = "temparate" and right = "temperate"
+  or
+  wrong = "temperarily" and right = "temporarily"
+  or
+  wrong = "temperment" and right = "temperament"
+  or
+  wrong = "tempertaure" and right = "temperature"
+  or
+  wrong = "temperture" and right = "temperature"
+  or
+  wrong = "temprary" and right = "temporary"
+  or
+  wrong = "tenacle" and right = "tentacle"
+  or
+  wrong = "tenacles" and right = "tentacles"
+  or
+  wrong = "tendacy" and right = "tendency"
+  or
+  wrong = "tendancies" and right = "tendencies"
+  or
+  wrong = "tendancy" and right = "tendency"
+  or
+  wrong = "tepmorarily" and right = "temporarily"
+  or
+  wrong = "terrestial" and right = "terrestrial"
+  or
+  wrong = "terriories" and right = "territories"
+  or
+  wrong = "terriory" and right = "territory"
+  or
+  wrong = "territorist" and right = "terrorist"
+  or
+  wrong = "territoy" and right = "territory"
+  or
+  wrong = "terroist" and right = "terrorist"
+  or
+  wrong = "testiclular" and right = "testicular"
+  or
+  wrong = "testomony" and right = "testimony"
+  or
+  wrong = "tghe" and right = "the"
+  or
+  wrong = "thast" and right = "that"
+  or
+  wrong = "theather" and right = "theater"
+  or
+  wrong = "theese" and right = "these"
+  or
+  wrong = "theif" and right = "thief"
+  or
+  wrong = "theives" and right = "thieves"
+  or
+  wrong = "themselfs" and right = "themselves"
+  or
+  wrong = "themslves" and right = "themselves"
+  or
+  wrong = "ther" and right = "the"
+  or
+  wrong = "ther" and right = "their"
+  or
+  wrong = "ther" and right = "there"
+  or
+  wrong = "therafter" and right = "thereafter"
+  or
+  wrong = "therby" and right = "thereby"
+  or
+  wrong = "theri" and right = "their"
+  or
+  wrong = "thgat" and right = "that"
+  or
+  wrong = "thge" and right = "the"
+  or
+  wrong = "thier" and right = "their"
+  or
+  wrong = "thign" and right = "thing"
+  or
+  wrong = "thigns" and right = "things"
+  or
+  wrong = "thigsn" and right = "things"
+  or
+  wrong = "thikn" and right = "think"
+  or
+  wrong = "thikning" and right = "thickening"
+  or
+  wrong = "thikning" and right = "thinking"
+  or
+  wrong = "thikns" and right = "thinks"
+  or
+  wrong = "thiunk" and right = "think"
+  or
+  wrong = "thn" and right = "then"
+  or
+  wrong = "thna" and right = "than"
+  or
+  wrong = "thne" and right = "then"
+  or
+  wrong = "thnig" and right = "thing"
+  or
+  wrong = "thnigs" and right = "things"
+  or
+  wrong = "thoughout" and right = "throughout"
+  or
+  wrong = "threatend" and right = "threatened"
+  or
+  wrong = "threatning" and right = "threatening"
+  or
+  wrong = "threee" and right = "three"
+  or
+  wrong = "threshhold" and right = "threshold"
+  or
+  wrong = "thrid" and right = "third"
+  or
+  wrong = "throrough" and right = "thorough"
+  or
+  wrong = "throughly" and right = "thoroughly"
+  or
+  wrong = "throught" and right = "thought"
+  or
+  wrong = "throught" and right = "through"
+  or
+  wrong = "throught" and right = "throughout"
+  or
+  wrong = "througout" and right = "throughout"
+  or
+  wrong = "thru" and right = "through"
+  or
+  wrong = "thsi" and right = "this"
+  or
+  wrong = "thsoe" and right = "those"
+  or
+  wrong = "thta" and right = "that"
+  or
+  wrong = "thyat" and right = "that"
+  or
+  wrong = "tiem" and right = "tim"
+  or
+  wrong = "tiem" and right = "time"
+  or
+  wrong = "tihkn" and right = "think"
+  or
+  wrong = "tihs" and right = "this"
+  or
+  wrong = "timne" and right = "time"
+  or
+  wrong = "tiome" and right = "time"
+  or
+  wrong = "tiome" and right = "tome"
+  or
+  wrong = "tje" and right = "the"
+  or
+  wrong = "tjhe" and right = "the"
+  or
+  wrong = "tjpanishad" and right = "upanishad"
+  or
+  wrong = "tkae" and right = "take"
+  or
+  wrong = "tkaes" and right = "takes"
+  or
+  wrong = "tkaing" and right = "taking"
+  or
+  wrong = "tlaking" and right = "talking"
+  or
+  wrong = "tobbaco" and right = "tobacco"
+  or
+  wrong = "todya" and right = "today"
+  or
+  wrong = "toghether" and right = "together"
+  or
+  wrong = "toke" and right = "took"
+  or
+  wrong = "tolerence" and right = "tolerance"
+  or
+  wrong = "tolkein" and right = "tolkien"
+  or
+  wrong = "tomatos" and right = "tomatoes"
+  or
+  wrong = "tommorow" and right = "tomorrow"
+  or
+  wrong = "tommorrow" and right = "tomorrow"
+  or
+  wrong = "tongiht" and right = "tonight"
+  or
+  wrong = "toriodal" and right = "toroidal"
+  or
+  wrong = "tormenters" and right = "tormentors"
+  or
+  wrong = "tornadoe" and right = "tornado"
+  or
+  wrong = "torpeados" and right = "torpedoes"
+  or
+  wrong = "torpedos" and right = "torpedoes"
+  or
+  wrong = "tortise" and right = "tortoise"
+  or
+  wrong = "toubles" and right = "troubles"
+  or
+  wrong = "tounge" and right = "tongue"
+  or
+  wrong = "tourch" and right = "torch"
+  or
+  wrong = "tourch" and right = "touch"
+  or
+  wrong = "towords" and right = "towards"
+  or
+  wrong = "towrad" and right = "toward"
+  or
+  wrong = "tradionally" and right = "traditionally"
+  or
+  wrong = "traditionaly" and right = "traditionally"
+  or
+  wrong = "traditionnal" and right = "traditional"
+  or
+  wrong = "traditition" and right = "tradition"
+  or
+  wrong = "tradtionally" and right = "traditionally"
+  or
+  wrong = "trafficed" and right = "trafficked"
+  or
+  wrong = "trafficing" and right = "trafficking"
+  or
+  wrong = "trafic" and right = "traffic"
+  or
+  wrong = "trancendent" and right = "transcendent"
+  or
+  wrong = "trancending" and right = "transcending"
+  or
+  wrong = "tranform" and right = "transform"
+  or
+  wrong = "tranformed" and right = "transformed"
+  or
+  wrong = "transcendance" and right = "transcendence"
+  or
+  wrong = "transcendant" and right = "transcendent"
+  or
+  wrong = "transcendentational" and right = "transcendental"
+  or
+  wrong = "transcripting" and right = "transcribing"
+  or
+  wrong = "transcripting" and right = "transcription"
+  or
+  wrong = "transending" and right = "transcending"
+  or
+  wrong = "transesxuals" and right = "transsexuals"
+  or
+  wrong = "transfered" and right = "transferred"
+  or
+  wrong = "transfering" and right = "transferring"
+  or
+  wrong = "transformaton" and right = "transformation"
+  or
+  wrong = "transistion" and right = "transition"
+  or
+  wrong = "translater" and right = "translator"
+  or
+  wrong = "translaters" and right = "translators"
+  or
+  wrong = "transmissable" and right = "transmissible"
+  or
+  wrong = "transporation" and right = "transportation"
+  or
+  wrong = "tremelo" and right = "tremolo"
+  or
+  wrong = "tremelos" and right = "tremolos"
+  or
+  wrong = "treshold" and right = "threshold"
+  or
+  wrong = "triguered" and right = "triggered"
+  or
+  wrong = "triology" and right = "trilogy"
+  or
+  wrong = "troling" and right = "trolling"
+  or
+  wrong = "troup" and right = "troupe"
+  or
+  wrong = "troups" and right = "troops"
+  or
+  wrong = "troups" and right = "troupes"
+  or
+  wrong = "truely" and right = "truly"
+  or
+  wrong = "trustworthyness" and right = "trustworthiness"
+  or
+  wrong = "turnk" and right = "trunk"
+  or
+  wrong = "turnk" and right = "turnkey"
+  or
+  wrong = "tuscon" and right = "tucson"
+  or
+  wrong = "tust" and right = "trust"
+  or
+  wrong = "twelth" and right = "twelfth"
+  or
+  wrong = "twon" and right = "town"
+  or
+  wrong = "twpo" and right = "two"
+  or
+  wrong = "tyhat" and right = "that"
+  or
+  wrong = "tyhe" and right = "they"
+  or
+  wrong = "typcial" and right = "typical"
+  or
+  wrong = "typicaly" and right = "typically"
+  or
+  wrong = "tyranies" and right = "tyrannies"
+  or
+  wrong = "tyrany" and right = "tyranny"
+  or
+  wrong = "tyrranies" and right = "tyrannies"
+  or
+  wrong = "tyrrany" and right = "tyranny"
+  or
+  wrong = "ubiquitious" and right = "ubiquitous"
+  or
+  wrong = "ublisher" and right = "publisher"
+  or
+  wrong = "udpate" and right = "update"
+  or
+  wrong = "uise" and right = "use"
+  or
+  wrong = "ukranian" and right = "ukrainian"
+  or
+  wrong = "ultimely" and right = "ultimately"
+  or
+  wrong = "unacompanied" and right = "unaccompanied"
+  or
+  wrong = "unahppy" and right = "unhappy"
+  or
+  wrong = "unanymous" and right = "unanimous"
+  or
+  wrong = "unathorised" and right = "unauthorised"
+  or
+  wrong = "unavailible" and right = "unavailable"
+  or
+  wrong = "unballance" and right = "unbalance"
+  or
+  wrong = "unbeknowst" and right = "unbeknownst"
+  or
+  wrong = "unbeleivable" and right = "unbelievable"
+  or
+  wrong = "uncertainity" and right = "uncertainty"
+  or
+  wrong = "unchallengable" and right = "unchallengeable"
+  or
+  wrong = "unchangable" and right = "unchangeable"
+  or
+  wrong = "uncompetive" and right = "uncompetitive"
+  or
+  wrong = "unconcious" and right = "unconscious"
+  or
+  wrong = "unconciousness" and right = "unconsciousness"
+  or
+  wrong = "unconfortability" and right = "discomfort"
+  or
+  wrong = "uncontitutional" and right = "unconstitutional"
+  or
+  wrong = "unconvential" and right = "unconventional"
+  or
+  wrong = "undecideable" and right = "undecidable"
+  or
+  wrong = "understoon" and right = "understood"
+  or
+  wrong = "undesireable" and right = "undesirable"
+  or
+  wrong = "undetecable" and right = "undetectable"
+  or
+  wrong = "undoubtely" and right = "undoubtedly"
+  or
+  wrong = "undreground" and right = "underground"
+  or
+  wrong = "uneccesary" and right = "unnecessary"
+  or
+  wrong = "unecessary" and right = "unnecessary"
+  or
+  wrong = "unequalities" and right = "inequalities"
+  or
+  wrong = "unforetunately" and right = "unfortunately"
+  or
+  wrong = "unforgetable" and right = "unforgettable"
+  or
+  wrong = "unforgiveable" and right = "unforgivable"
+  or
+  wrong = "unforseen" and right = "unforeseen"
+  or
+  wrong = "unfortunatley" and right = "unfortunately"
+  or
+  wrong = "unfortunatly" and right = "unfortunately"
+  or
+  wrong = "unfourtunately" and right = "unfortunately"
+  or
+  wrong = "unihabited" and right = "uninhabited"
+  or
+  wrong = "unilateraly" and right = "unilaterally"
+  or
+  wrong = "unilatreal" and right = "unilateral"
+  or
+  wrong = "unilatreally" and right = "unilaterally"
+  or
+  wrong = "uninterruped" and right = "uninterrupted"
+  or
+  wrong = "uninterupted" and right = "uninterrupted"
+  or
+  wrong = "unintialized" and right = "uninitialized"
+  or
+  wrong = "unitesstates" and right = "unitedstates"
+  or
+  wrong = "univeral" and right = "universal"
+  or
+  wrong = "univeristies" and right = "universities"
+  or
+  wrong = "univeristy" and right = "university"
+  or
+  wrong = "univerity" and right = "university"
+  or
+  wrong = "universtiy" and right = "university"
+  or
+  wrong = "univesities" and right = "universities"
+  or
+  wrong = "univesity" and right = "university"
+  or
+  wrong = "unkown" and right = "unknown"
+  or
+  wrong = "unlikey" and right = "unlikely"
+  or
+  wrong = "unmanouverable" and right = "unmaneuverable"
+  or
+  wrong = "unmanouverable" and right = "unmanoeuvrable"
+  or
+  wrong = "unmistakeably" and right = "unmistakably"
+  or
+  wrong = "unneccesarily" and right = "unnecessarily"
+  or
+  wrong = "unneccesary" and right = "unnecessary"
+  or
+  wrong = "unneccessarily" and right = "unnecessarily"
+  or
+  wrong = "unneccessary" and right = "unnecessary"
+  or
+  wrong = "unnecesarily" and right = "unnecessarily"
+  or
+  wrong = "unnecesary" and right = "unnecessary"
+  or
+  wrong = "unoffical" and right = "unofficial"
+  or
+  wrong = "unoperational" and right = "nonoperational"
+  or
+  wrong = "unoticeable" and right = "unnoticeable"
+  or
+  wrong = "unplease" and right = "displease"
+  or
+  wrong = "unplesant" and right = "unpleasant"
+  or
+  wrong = "unprecendented" and right = "unprecedented"
+  or
+  wrong = "unprecidented" and right = "unprecedented"
+  or
+  wrong = "unrepentent" and right = "unrepentant"
+  or
+  wrong = "unrepetant" and right = "unrepentant"
+  or
+  wrong = "unrepetent" and right = "unrepentant"
+  or
+  wrong = "unsed" and right = "unsaid"
+  or
+  wrong = "unsed" and right = "unused"
+  or
+  wrong = "unsed" and right = "used"
+  or
+  wrong = "unsubstanciated" and right = "unsubstantiated"
+  or
+  wrong = "unsuccesful" and right = "unsuccessful"
+  or
+  wrong = "unsuccesfully" and right = "unsuccessfully"
+  or
+  wrong = "unsuccessfull" and right = "unsuccessful"
+  or
+  wrong = "unsucesful" and right = "unsuccessful"
+  or
+  wrong = "unsucesfuly" and right = "unsuccessfully"
+  or
+  wrong = "unsucessful" and right = "unsuccessful"
+  or
+  wrong = "unsucessfull" and right = "unsuccessful"
+  or
+  wrong = "unsucessfully" and right = "unsuccessfully"
+  or
+  wrong = "unsuprised" and right = "unsurprised"
+  or
+  wrong = "unsuprising" and right = "unsurprising"
+  or
+  wrong = "unsuprisingly" and right = "unsurprisingly"
+  or
+  wrong = "unsuprized" and right = "unsurprised"
+  or
+  wrong = "unsuprizing" and right = "unsurprising"
+  or
+  wrong = "unsuprizingly" and right = "unsurprisingly"
+  or
+  wrong = "unsurprized" and right = "unsurprised"
+  or
+  wrong = "unsurprizing" and right = "unsurprising"
+  or
+  wrong = "unsurprizingly" and right = "unsurprisingly"
+  or
+  wrong = "untill" and right = "until"
+  or
+  wrong = "untranslateable" and right = "untranslatable"
+  or
+  wrong = "unuseable" and right = "unusable"
+  or
+  wrong = "unusuable" and right = "unusable"
+  or
+  wrong = "unviersity" and right = "university"
+  or
+  wrong = "unwarrented" and right = "unwarranted"
+  or
+  wrong = "unweildly" and right = "unwieldy"
+  or
+  wrong = "unwieldly" and right = "unwieldy"
+  or
+  wrong = "upcomming" and right = "upcoming"
+  or
+  wrong = "upgradded" and right = "upgraded"
+  or
+  wrong = "usally" and right = "usually"
+  or
+  wrong = "useage" and right = "usage"
+  or
+  wrong = "usefull" and right = "useful"
+  or
+  wrong = "usefuly" and right = "usefully"
+  or
+  wrong = "useing" and right = "using"
+  or
+  wrong = "usualy" and right = "usually"
+  or
+  wrong = "ususally" and right = "usually"
+  or
+  wrong = "vaccum" and right = "vacuum"
+  or
+  wrong = "vaccume" and right = "vacuum"
+  or
+  wrong = "vacinity" and right = "vicinity"
+  or
+  wrong = "vaguaries" and right = "vagaries"
+  or
+  wrong = "vaieties" and right = "varieties"
+  or
+  wrong = "vailidty" and right = "validity"
+  or
+  wrong = "valetta" and right = "valletta"
+  or
+  wrong = "valuble" and right = "valuable"
+  or
+  wrong = "valueable" and right = "valuable"
+  or
+  wrong = "varations" and right = "variations"
+  or
+  wrong = "varient" and right = "variant"
+  or
+  wrong = "variey" and right = "variety"
+  or
+  wrong = "varing" and right = "varying"
+  or
+  wrong = "varities" and right = "varieties"
+  or
+  wrong = "varity" and right = "variety"
+  or
+  wrong = "vasall" and right = "vassal"
+  or
+  wrong = "vasalls" and right = "vassals"
+  or
+  wrong = "vaule" and right = "value"
+  or
+  wrong = "vegatarian" and right = "vegetarian"
+  or
+  wrong = "vegitable" and right = "vegetable"
+  or
+  wrong = "vegitables" and right = "vegetables"
+  or
+  wrong = "vegtable" and right = "vegetable"
+  or
+  wrong = "vehicule" and right = "vehicle"
+  or
+  wrong = "vell" and right = "well"
+  or
+  wrong = "venemous" and right = "venomous"
+  or
+  wrong = "vengance" and right = "vengeance"
+  or
+  wrong = "vengence" and right = "vengeance"
+  or
+  wrong = "verfication" and right = "verification"
+  or
+  wrong = "verison" and right = "version"
+  or
+  wrong = "verisons" and right = "versions"
+  or
+  wrong = "vermillion" and right = "vermilion"
+  or
+  wrong = "versitilaty" and right = "versatility"
+  or
+  wrong = "versitlity" and right = "versatility"
+  or
+  wrong = "vetween" and right = "between"
+  or
+  wrong = "veyr" and right = "very"
+  or
+  wrong = "vigeur" and right = "vigor"
+  or
+  wrong = "vigeur" and right = "vigour"
+  or
+  wrong = "vigeur" and right = "vigueur"
+  or
+  wrong = "vigilence" and right = "vigilance"
+  or
+  wrong = "vigourous" and right = "vigorous"
+  or
+  wrong = "villian" and right = "villain"
+  or
+  wrong = "villification" and right = "vilification"
+  or
+  wrong = "villify" and right = "vilify"
+  or
+  wrong = "villin" and right = "villain"
+  or
+  wrong = "villin" and right = "villein"
+  or
+  wrong = "villin" and right = "villi"
+  or
+  wrong = "vincinity" and right = "vicinity"
+  or
+  wrong = "violentce" and right = "violence"
+  or
+  wrong = "virtualy" and right = "virtually"
+  or
+  wrong = "virutal" and right = "virtual"
+  or
+  wrong = "virutally" and right = "virtually"
+  or
+  wrong = "visable" and right = "visible"
+  or
+  wrong = "visably" and right = "visibly"
+  or
+  wrong = "visting" and right = "visiting"
+  or
+  wrong = "vistors" and right = "visitors"
+  or
+  wrong = "vitories" and right = "victories"
+  or
+  wrong = "volcanoe" and right = "volcano"
+  or
+  wrong = "voleyball" and right = "volleyball"
+  or
+  wrong = "volontary" and right = "voluntary"
+  or
+  wrong = "volonteer" and right = "volunteer"
+  or
+  wrong = "volonteered" and right = "volunteered"
+  or
+  wrong = "volonteering" and right = "volunteering"
+  or
+  wrong = "volonteers" and right = "volunteers"
+  or
+  wrong = "volounteer" and right = "volunteer"
+  or
+  wrong = "volounteered" and right = "volunteered"
+  or
+  wrong = "volounteering" and right = "volunteering"
+  or
+  wrong = "volounteers" and right = "volunteers"
+  or
+  wrong = "volumne" and right = "volume"
+  or
+  wrong = "vreity" and right = "variety"
+  or
+  wrong = "vrey" and right = "very"
+  or
+  wrong = "vriety" and right = "variety"
+  or
+  wrong = "vulnerablility" and right = "vulnerability"
+  or
+  wrong = "vyer" and right = "very"
+  or
+  wrong = "vyre" and right = "very"
+  or
+  wrong = "waht" and right = "what"
+  or
+  wrong = "warantee" and right = "warranty"
+  or
+  wrong = "wardobe" and right = "wardrobe"
+  or
+  wrong = "warrent" and right = "warrant"
+  or
+  wrong = "warrriors" and right = "warriors"
+  or
+  wrong = "wass" and right = "was"
+  or
+  wrong = "watn" and right = "want"
+  or
+  wrong = "wayword" and right = "wayward"
+  or
+  wrong = "weaponary" and right = "weaponry"
+  or
+  wrong = "weas" and right = "was"
+  or
+  wrong = "wehn" and right = "when"
+  or
+  wrong = "weild" and right = "wield"
+  or
+  wrong = "weild" and right = "wild"
+  or
+  wrong = "weilded" and right = "wielded"
+  or
+  wrong = "wendsay" and right = "wednesday"
+  or
+  wrong = "wensday" and right = "wednesday"
+  or
+  wrong = "wereabouts" and right = "whereabouts"
+  or
+  wrong = "whant" and right = "want"
+  or
+  wrong = "whants" and right = "wants"
+  or
+  wrong = "whcih" and right = "which"
+  or
+  wrong = "wheras" and right = "whereas"
+  or
+  wrong = "wherease" and right = "whereas"
+  or
+  wrong = "whereever" and right = "wherever"
+  or
+  wrong = "whic" and right = "which"
+  or
+  wrong = "whihc" and right = "which"
+  or
+  wrong = "whith" and right = "with"
+  or
+  wrong = "whlch" and right = "which"
+  or
+  wrong = "whn" and right = "when"
+  or
+  wrong = "wholey" and right = "wholly"
+  or
+  wrong = "wholy" and right = "holy"
+  or
+  wrong = "wholy" and right = "wholly"
+  or
+  wrong = "whta" and right = "what"
+  or
+  wrong = "whther" and right = "whether"
+  or
+  wrong = "wich" and right = "which"
+  or
+  wrong = "wich" and right = "witch"
+  or
+  wrong = "widesread" and right = "widespread"
+  or
+  wrong = "wief" and right = "wife"
+  or
+  wrong = "wierd" and right = "weird"
+  or
+  wrong = "wiew" and right = "view"
+  or
+  wrong = "wih" and right = "with"
+  or
+  wrong = "wiht" and right = "with"
+  or
+  wrong = "wille" and right = "will"
+  or
+  wrong = "willingless" and right = "willingness"
+  or
+  wrong = "willk" and right = "will"
+  or
+  wrong = "wirting" and right = "writing"
+  or
+  wrong = "withdrawl" and right = "withdraw"
+  or
+  wrong = "withdrawl" and right = "withdrawal"
+  or
+  wrong = "witheld" and right = "withheld"
+  or
+  wrong = "withh" and right = "with"
+  or
+  wrong = "withing" and right = "within"
+  or
+  wrong = "withold" and right = "withhold"
+  or
+  wrong = "witht" and right = "with"
+  or
+  wrong = "witn" and right = "with"
+  or
+  wrong = "wiull" and right = "will"
+  or
+  wrong = "wnat" and right = "want"
+  or
+  wrong = "wnated" and right = "wanted"
+  or
+  wrong = "wnats" and right = "wants"
+  or
+  wrong = "wohle" and right = "whole"
+  or
+  wrong = "wokr" and right = "work"
+  or
+  wrong = "wokring" and right = "working"
+  or
+  wrong = "wonderfull" and right = "wonderful"
+  or
+  wrong = "wordlwide" and right = "worldwide"
+  or
+  wrong = "workststion" and right = "workstation"
+  or
+  wrong = "worls" and right = "world"
+  or
+  wrong = "worstened" and right = "worsened"
+  or
+  wrong = "woudl" and right = "would"
+  or
+  wrong = "wresters" and right = "wrestlers"
+  or
+  wrong = "wriet" and right = "write"
+  or
+  wrong = "writen" and right = "written"
+  or
+  wrong = "wroet" and right = "wrote"
+  or
+  wrong = "wrok" and right = "work"
+  or
+  wrong = "wroking" and right = "working"
+  or
+  wrong = "wtih" and right = "with"
+  or
+  wrong = "wupport" and right = "support"
+  or
+  wrong = "xenophoby" and right = "xenophobia"
+  or
+  wrong = "yaching" and right = "yachting"
+  or
+  wrong = "yaer" and right = "year"
+  or
+  wrong = "yaerly" and right = "yearly"
+  or
+  wrong = "yaers" and right = "years"
+  or
+  wrong = "yatch" and right = "yacht"
+  or
+  wrong = "yearm" and right = "year"
+  or
+  wrong = "yeasr" and right = "years"
+  or
+  wrong = "yeild" and right = "yield"
+  or
+  wrong = "yeilding" and right = "yielding"
+  or
+  wrong = "yementite" and right = "yemeni"
+  or
+  wrong = "yementite" and right = "yemenite"
+  or
+  wrong = "yera" and right = "year"
+  or
+  wrong = "yeras" and right = "years"
+  or
+  wrong = "yersa" and right = "years"
+  or
+  wrong = "yotube" and right = "youtube"
+  or
+  wrong = "youseff" and right = "yousef"
+  or
+  wrong = "youself" and right = "yourself"
+  or
+  wrong = "yrea" and right = "year"
+  or
+  wrong = "ytou" and right = "you"
+  or
+  wrong = "yuo" and right = "you"
+  or
+  wrong = "zeebra" and right = "zebra"
+}
diff --git a/shared/typos/qlpack.yml b/shared/typos/qlpack.yml
new file mode 100644
index 00000000000..f915e6407f8
--- /dev/null
+++ b/shared/typos/qlpack.yml
@@ -0,0 +1,4 @@
+name: codeql/typos
+version: 0.0.1-dev
+groups: shared
+library: true

From e69a8269ad8eb8a207726d0f8810277fc35e8a6f Mon Sep 17 00:00:00 2001
From: Ed Minnix <egregius313@github.com>
Date: Thu, 8 Sep 2022 10:33:05 -0400
Subject: [PATCH 068/203] Move CleartextStorage test files into separate dir

Move the files for the CleartextStorage tests into their own directory
to avoid issues with extraction
---
 .../CWE-312/{ => android/CleartextStorage}/AndroidManifest.xml  | 0
 .../CleartextStorageAndroidDatabaseTest.expected                | 0
 .../CleartextStorage}/CleartextStorageAndroidDatabaseTest.java  | 0
 .../CleartextStorage}/CleartextStorageAndroidDatabaseTest.ql    | 0
 .../CleartextStorageAndroidFilesystemTest.expected              | 0
 .../CleartextStorageAndroidFilesystemTest.java                  | 0
 .../CleartextStorage}/CleartextStorageAndroidFilesystemTest.ql  | 0
 .../CleartextStorage}/CleartextStorageSharedPrefsTest.expected  | 0
 .../CleartextStorage}/CleartextStorageSharedPrefsTest.java      | 0
 .../CleartextStorage}/CleartextStorageSharedPrefsTest.ql        | 0
 .../CleartextStorage}/CleartextStorageSharedPrefsTestKt.kt      | 0
 .../security/CWE-312/android/CleartextStorage/options           | 2 ++
 java/ql/test/query-tests/security/CWE-312/options               | 2 --
 13 files changed, 2 insertions(+), 2 deletions(-)
 rename java/ql/test/query-tests/security/CWE-312/{ => android/CleartextStorage}/AndroidManifest.xml (100%)
 rename java/ql/test/query-tests/security/CWE-312/{ => android/CleartextStorage}/CleartextStorageAndroidDatabaseTest.expected (100%)
 rename java/ql/test/query-tests/security/CWE-312/{ => android/CleartextStorage}/CleartextStorageAndroidDatabaseTest.java (100%)
 rename java/ql/test/query-tests/security/CWE-312/{ => android/CleartextStorage}/CleartextStorageAndroidDatabaseTest.ql (100%)
 rename java/ql/test/query-tests/security/CWE-312/{ => android/CleartextStorage}/CleartextStorageAndroidFilesystemTest.expected (100%)
 rename java/ql/test/query-tests/security/CWE-312/{ => android/CleartextStorage}/CleartextStorageAndroidFilesystemTest.java (100%)
 rename java/ql/test/query-tests/security/CWE-312/{ => android/CleartextStorage}/CleartextStorageAndroidFilesystemTest.ql (100%)
 rename java/ql/test/query-tests/security/CWE-312/{ => android/CleartextStorage}/CleartextStorageSharedPrefsTest.expected (100%)
 rename java/ql/test/query-tests/security/CWE-312/{ => android/CleartextStorage}/CleartextStorageSharedPrefsTest.java (100%)
 rename java/ql/test/query-tests/security/CWE-312/{ => android/CleartextStorage}/CleartextStorageSharedPrefsTest.ql (100%)
 rename java/ql/test/query-tests/security/CWE-312/{ => android/CleartextStorage}/CleartextStorageSharedPrefsTestKt.kt (100%)
 create mode 100644 java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/options
 delete mode 100644 java/ql/test/query-tests/security/CWE-312/options

diff --git a/java/ql/test/query-tests/security/CWE-312/AndroidManifest.xml b/java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/AndroidManifest.xml
similarity index 100%
rename from java/ql/test/query-tests/security/CWE-312/AndroidManifest.xml
rename to java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/AndroidManifest.xml
diff --git a/java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidDatabaseTest.expected b/java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageAndroidDatabaseTest.expected
similarity index 100%
rename from java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidDatabaseTest.expected
rename to java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageAndroidDatabaseTest.expected
diff --git a/java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidDatabaseTest.java b/java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageAndroidDatabaseTest.java
similarity index 100%
rename from java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidDatabaseTest.java
rename to java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageAndroidDatabaseTest.java
diff --git a/java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidDatabaseTest.ql b/java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageAndroidDatabaseTest.ql
similarity index 100%
rename from java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidDatabaseTest.ql
rename to java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageAndroidDatabaseTest.ql
diff --git a/java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidFilesystemTest.expected b/java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageAndroidFilesystemTest.expected
similarity index 100%
rename from java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidFilesystemTest.expected
rename to java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageAndroidFilesystemTest.expected
diff --git a/java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidFilesystemTest.java b/java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageAndroidFilesystemTest.java
similarity index 100%
rename from java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidFilesystemTest.java
rename to java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageAndroidFilesystemTest.java
diff --git a/java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidFilesystemTest.ql b/java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageAndroidFilesystemTest.ql
similarity index 100%
rename from java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidFilesystemTest.ql
rename to java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageAndroidFilesystemTest.ql
diff --git a/java/ql/test/query-tests/security/CWE-312/CleartextStorageSharedPrefsTest.expected b/java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageSharedPrefsTest.expected
similarity index 100%
rename from java/ql/test/query-tests/security/CWE-312/CleartextStorageSharedPrefsTest.expected
rename to java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageSharedPrefsTest.expected
diff --git a/java/ql/test/query-tests/security/CWE-312/CleartextStorageSharedPrefsTest.java b/java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageSharedPrefsTest.java
similarity index 100%
rename from java/ql/test/query-tests/security/CWE-312/CleartextStorageSharedPrefsTest.java
rename to java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageSharedPrefsTest.java
diff --git a/java/ql/test/query-tests/security/CWE-312/CleartextStorageSharedPrefsTest.ql b/java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageSharedPrefsTest.ql
similarity index 100%
rename from java/ql/test/query-tests/security/CWE-312/CleartextStorageSharedPrefsTest.ql
rename to java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageSharedPrefsTest.ql
diff --git a/java/ql/test/query-tests/security/CWE-312/CleartextStorageSharedPrefsTestKt.kt b/java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageSharedPrefsTestKt.kt
similarity index 100%
rename from java/ql/test/query-tests/security/CWE-312/CleartextStorageSharedPrefsTestKt.kt
rename to java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageSharedPrefsTestKt.kt
diff --git a/java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/options b/java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/options
new file mode 100644
index 00000000000..250480dbe1a
--- /dev/null
+++ b/java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/options
@@ -0,0 +1,2 @@
+// semmle-extractor-options: --javac-args -cp ${testdir}/../../../../../stubs/google-android-9.0.0
+// codeql-extractor-kotlin-options: ${testdir}/../../../../../stubs/google-android-9.0.0
diff --git a/java/ql/test/query-tests/security/CWE-312/options b/java/ql/test/query-tests/security/CWE-312/options
deleted file mode 100644
index 93845c4b2a8..00000000000
--- a/java/ql/test/query-tests/security/CWE-312/options
+++ /dev/null
@@ -1,2 +0,0 @@
-// semmle-extractor-options: --javac-args -cp ${testdir}/../../../stubs/google-android-9.0.0
-// codeql-extractor-kotlin-options: ${testdir}/../../../stubs/google-android-9.0.0

From 59909751ae0385b34829e400f7970e0937ebc329 Mon Sep 17 00:00:00 2001
From: Ed Minnix <egregius313@github.com>
Date: Thu, 8 Sep 2022 10:34:17 -0400
Subject: [PATCH 069/203] Change allowBackup tests to use qlref test format

Due to some limitations of comments in XML, it is simpler to implement
the `android:allowBackup` tests using the qlref/expectations test format.
---
 .../backup/AllowBackupEnabledTest.expected     |  2 ++
 .../android/backup/AllowBackupEnabledTest.ql   | 18 ------------------
 .../backup/AllowBackupEnabledTest.qlref        |  1 +
 .../TestExplicitlyEnabled/AndroidManifest.xml  |  2 +-
 .../backup/TestMissing/AndroidManifest.xml     |  2 +-
 .../security/CWE-312/android/backup/options    |  2 ++
 6 files changed, 7 insertions(+), 20 deletions(-)
 delete mode 100644 java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.ql
 create mode 100644 java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.qlref
 create mode 100644 java/ql/test/query-tests/security/CWE-312/android/backup/options

diff --git a/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.expected b/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.expected
index e69de29bb2d..72deef0a120 100644
--- a/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.expected
+++ b/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.expected
@@ -0,0 +1,2 @@
+| TestExplicitlyEnabled/AndroidManifest.xml:6:5:27:19 | application | The 'android:allowBackup' attribute is enabled. |
+| TestMissing/AndroidManifest.xml:6:5:27:19 | application | The 'android:allowBackup' attribute is enabled. |
diff --git a/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.ql b/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.ql
deleted file mode 100644
index c79276402fe..00000000000
--- a/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.ql
+++ /dev/null
@@ -1,18 +0,0 @@
-import java
-import semmle.code.xml.AndroidManifest
-import TestUtilities.InlineExpectationsTest
-
-class AllowBackupEnabledTest extends InlineExpectationsTest {
-  AllowBackupEnabledTest() { this = "AllowBackupEnabledTest" }
-
-  override string getARelevantTag() { result = "hasAllowBackupEnabled" }
-
-  override predicate hasActualResult(Location location, string element, string tag, string value) {
-    tag = "hasAllowedBackupEnabled" and
-    exists(AndroidApplicationXmlElement androidAppElem | androidAppElem.allowsBackup() |
-      androidAppElem.getAttribute("allowBackup").getLocation() = location and
-      element = androidAppElem.getAttribute("debuggable").toString() and
-      value = ""
-    )
-  }
-}
diff --git a/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.qlref b/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.qlref
new file mode 100644
index 00000000000..2b7a5375dab
--- /dev/null
+++ b/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.qlref
@@ -0,0 +1 @@
+Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
\ No newline at end of file
diff --git a/java/ql/test/query-tests/security/CWE-312/android/backup/TestExplicitlyEnabled/AndroidManifest.xml b/java/ql/test/query-tests/security/CWE-312/android/backup/TestExplicitlyEnabled/AndroidManifest.xml
index 959c14c8507..4b69c52ccae 100644
--- a/java/ql/test/query-tests/security/CWE-312/android/backup/TestExplicitlyEnabled/AndroidManifest.xml
+++ b/java/ql/test/query-tests/security/CWE-312/android/backup/TestExplicitlyEnabled/AndroidManifest.xml
@@ -3,7 +3,7 @@
     xmlns:tools="http://schemas.android.com/tools"
     package="com.example.myapplication">
 
-    <!-- $ hasAllowBackupEnabled --> <application
+    <application
         android:allowBackup="true"
         android:dataExtractionRules="@xml/data_extraction_rules"
         android:fullBackupContent="@xml/backup_rules"
diff --git a/java/ql/test/query-tests/security/CWE-312/android/backup/TestMissing/AndroidManifest.xml b/java/ql/test/query-tests/security/CWE-312/android/backup/TestMissing/AndroidManifest.xml
index 43a966ac28e..9db4c7429fe 100644
--- a/java/ql/test/query-tests/security/CWE-312/android/backup/TestMissing/AndroidManifest.xml
+++ b/java/ql/test/query-tests/security/CWE-312/android/backup/TestMissing/AndroidManifest.xml
@@ -3,7 +3,7 @@
     xmlns:tools="http://schemas.android.com/tools"
     package="com.example.myapplication">
 
-    <!-- $ hasAllowBackupEnabled --> <application
+    <application
         android:dataExtractionRules="@xml/data_extraction_rules"
         android:fullBackupContent="@xml/backup_rules"
         android:icon="@mipmap/ic_launcher"
diff --git a/java/ql/test/query-tests/security/CWE-312/android/backup/options b/java/ql/test/query-tests/security/CWE-312/android/backup/options
new file mode 100644
index 00000000000..250480dbe1a
--- /dev/null
+++ b/java/ql/test/query-tests/security/CWE-312/android/backup/options
@@ -0,0 +1,2 @@
+// semmle-extractor-options: --javac-args -cp ${testdir}/../../../../../stubs/google-android-9.0.0
+// codeql-extractor-kotlin-options: ${testdir}/../../../../../stubs/google-android-9.0.0

From aee72357b85eefe141da0958e9fcefd27aefcd78 Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Thu, 8 Sep 2022 13:38:19 +0200
Subject: [PATCH 070/203] find a main module in more cases

---
 .../javascript/NodeModuleResolutionImpl.qll   | 22 +++++++++++++++----
 .../UnsafeHtmlConstruction.expected           | 18 +++++++++++++++
 .../UnsafeHtmlConstruction/lib/package.json   | 10 +++++++++
 .../UnsafeHtmlConstruction/lib/src/MyNode.ts  |  4 ++++
 .../UnsafeHtmlConstruction/lib2/index.ts      |  4 ++++
 .../UnsafeHtmlConstruction/lib2/package.json  | 10 +++++++++
 .../UnsafeHtmlConstruction/lib2/src/MyNode.ts |  4 ++++
 7 files changed, 68 insertions(+), 4 deletions(-)
 create mode 100644 javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib/package.json
 create mode 100644 javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib/src/MyNode.ts
 create mode 100644 javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib2/index.ts
 create mode 100644 javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib2/package.json
 create mode 100644 javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib2/src/MyNode.ts

diff --git a/javascript/ql/lib/semmle/javascript/NodeModuleResolutionImpl.qll b/javascript/ql/lib/semmle/javascript/NodeModuleResolutionImpl.qll
index 7660d374216..674f9e916bf 100644
--- a/javascript/ql/lib/semmle/javascript/NodeModuleResolutionImpl.qll
+++ b/javascript/ql/lib/semmle/javascript/NodeModuleResolutionImpl.qll
@@ -93,14 +93,28 @@ private string getStem(string name) { result = name.regexpCapture("(.+?)(?:\\.([
  * Gets the main module described by `pkg` with the given `priority`.
  */
 File resolveMainModule(PackageJson pkg, int priority) {
-  exists(PathExpr main | main = MainModulePath::of(pkg, ".") |
-    result = main.resolve() and priority = 0
+  exists(PathExpr main, int subPriority, string mainPath |
+    main = MainModulePath::of(pkg, mainPath) and
+    if mainPath = "." then subPriority = priority else priority = subPriority + 1000
+  |
+    result = main.resolve() and subPriority = 0
     or
-    result = tryExtensions(main.resolve(), "index", priority)
+    result = tryExtensions(main.resolve(), "index", subPriority)
     or
     not main.resolve() instanceof File and
     exists(int n | n = main.getNumComponent() |
-      result = tryExtensions(main.resolveUpTo(n - 1), getStem(main.getComponent(n - 1)), priority)
+      result =
+        tryExtensions(main.resolveUpTo(n - 1), getStem(main.getComponent(n - 1)), subPriority)
+    )
+    or
+    // assuming the files get moved from one dir to another during compilation:
+    not exists(main.resolve()) and // didn't resolve
+    count(int i, string comp | comp = main.getComponent(i) and not comp = "." | i) = 2 and // is down one folder
+    exists(Folder subFolder | subFolder = pkg.getFile().getParentContainer().getAFolder() |
+      // is in one folder below the package.json, and has the right basename
+      result =
+        tryExtensions(subFolder, getStem(main.getComponent(main.getNumComponent() - 1)),
+          subPriority - 999)
     )
   )
   or
diff --git a/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/UnsafeHtmlConstruction.expected b/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/UnsafeHtmlConstruction.expected
index 1781accbe82..dfab0bdcf2b 100644
--- a/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/UnsafeHtmlConstruction.expected
+++ b/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/UnsafeHtmlConstruction.expected
@@ -8,6 +8,14 @@ nodes
 | jquery-plugin.js:12:31:12:41 | options.foo |
 | jquery-plugin.js:14:31:14:35 | stuff |
 | jquery-plugin.js:14:31:14:35 | stuff |
+| lib2/index.ts:1:28:1:28 | s |
+| lib2/index.ts:1:28:1:28 | s |
+| lib2/index.ts:2:29:2:29 | s |
+| lib2/index.ts:2:29:2:29 | s |
+| lib/src/MyNode.ts:1:28:1:28 | s |
+| lib/src/MyNode.ts:1:28:1:28 | s |
+| lib/src/MyNode.ts:2:29:2:29 | s |
+| lib/src/MyNode.ts:2:29:2:29 | s |
 | main.js:1:55:1:55 | s |
 | main.js:1:55:1:55 | s |
 | main.js:2:29:2:29 | s |
@@ -96,6 +104,14 @@ edges
 | jquery-plugin.js:11:34:11:40 | options | jquery-plugin.js:12:31:12:37 | options |
 | jquery-plugin.js:12:31:12:37 | options | jquery-plugin.js:12:31:12:41 | options.foo |
 | jquery-plugin.js:12:31:12:37 | options | jquery-plugin.js:12:31:12:41 | options.foo |
+| lib2/index.ts:1:28:1:28 | s | lib2/index.ts:2:29:2:29 | s |
+| lib2/index.ts:1:28:1:28 | s | lib2/index.ts:2:29:2:29 | s |
+| lib2/index.ts:1:28:1:28 | s | lib2/index.ts:2:29:2:29 | s |
+| lib2/index.ts:1:28:1:28 | s | lib2/index.ts:2:29:2:29 | s |
+| lib/src/MyNode.ts:1:28:1:28 | s | lib/src/MyNode.ts:2:29:2:29 | s |
+| lib/src/MyNode.ts:1:28:1:28 | s | lib/src/MyNode.ts:2:29:2:29 | s |
+| lib/src/MyNode.ts:1:28:1:28 | s | lib/src/MyNode.ts:2:29:2:29 | s |
+| lib/src/MyNode.ts:1:28:1:28 | s | lib/src/MyNode.ts:2:29:2:29 | s |
 | main.js:1:55:1:55 | s | main.js:2:29:2:29 | s |
 | main.js:1:55:1:55 | s | main.js:2:29:2:29 | s |
 | main.js:1:55:1:55 | s | main.js:2:29:2:29 | s |
@@ -183,6 +199,8 @@ edges
 #select
 | jquery-plugin.js:12:31:12:41 | options.foo | jquery-plugin.js:11:34:11:40 | options | jquery-plugin.js:12:31:12:41 | options.foo | $@ based on $@ might later cause $@. | jquery-plugin.js:12:31:12:41 | options.foo | HTML construction | jquery-plugin.js:11:34:11:40 | options | library input | jquery-plugin.js:12:20:12:53 | "<span> ... /span>" | cross-site scripting |
 | jquery-plugin.js:14:31:14:35 | stuff | jquery-plugin.js:11:27:11:31 | stuff | jquery-plugin.js:14:31:14:35 | stuff | $@ based on $@ might later cause $@. | jquery-plugin.js:14:31:14:35 | stuff | HTML construction | jquery-plugin.js:11:27:11:31 | stuff | library input | jquery-plugin.js:14:20:14:47 | "<span> ... /span>" | cross-site scripting |
+| lib2/index.ts:2:29:2:29 | s | lib2/index.ts:1:28:1:28 | s | lib2/index.ts:2:29:2:29 | s | $@ based on $@ might later cause $@. | lib2/index.ts:2:29:2:29 | s | HTML construction | lib2/index.ts:1:28:1:28 | s | library input | lib2/index.ts:3:49:3:52 | html | cross-site scripting |
+| lib/src/MyNode.ts:2:29:2:29 | s | lib/src/MyNode.ts:1:28:1:28 | s | lib/src/MyNode.ts:2:29:2:29 | s | $@ based on $@ might later cause $@. | lib/src/MyNode.ts:2:29:2:29 | s | HTML construction | lib/src/MyNode.ts:1:28:1:28 | s | library input | lib/src/MyNode.ts:3:49:3:52 | html | cross-site scripting |
 | main.js:2:29:2:29 | s | main.js:1:55:1:55 | s | main.js:2:29:2:29 | s | $@ based on $@ might later cause $@. | main.js:2:29:2:29 | s | HTML construction | main.js:1:55:1:55 | s | library input | main.js:3:49:3:52 | html | cross-site scripting |
 | main.js:7:49:7:49 | s | main.js:6:49:6:49 | s | main.js:7:49:7:49 | s | $@ based on $@ might later cause $@. | main.js:7:49:7:49 | s | XML parsing | main.js:6:49:6:49 | s | library input | main.js:8:48:8:66 | doc.documentElement | cross-site scripting |
 | main.js:12:49:12:49 | s | main.js:11:60:11:60 | s | main.js:12:49:12:49 | s | $@ based on $@ might later cause $@. | main.js:12:49:12:49 | s | XML parsing | main.js:11:60:11:60 | s | library input | main.js:16:21:16:35 | xml.cloneNode() | cross-site scripting |
diff --git a/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib/package.json b/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib/package.json
new file mode 100644
index 00000000000..b849ee492e2
--- /dev/null
+++ b/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib/package.json
@@ -0,0 +1,10 @@
+{
+    "name": "my-unsafe-library",
+    "main": "./index.js",
+    "exports": {
+        "./MyNode": {
+            "require": "./lib/MyNode.cjs",
+            "import": "./lib/MyNode.mjs"
+        }
+    }
+}
\ No newline at end of file
diff --git a/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib/src/MyNode.ts b/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib/src/MyNode.ts
new file mode 100644
index 00000000000..91e81238605
--- /dev/null
+++ b/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib/src/MyNode.ts
@@ -0,0 +1,4 @@
+export function trivialXss(s: string) {
+    const html = "<span>" + s + "</span>"; // NOT OK
+    document.querySelector("#html").innerHTML = html;
+}
\ No newline at end of file
diff --git a/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib2/index.ts b/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib2/index.ts
new file mode 100644
index 00000000000..21bb420b71f
--- /dev/null
+++ b/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib2/index.ts
@@ -0,0 +1,4 @@
+export function trivialXss(s: string) {
+    const html = "<span>" + s + "</span>"; // NOT OK - this file is recognized as a main file.
+    document.querySelector("#html").innerHTML = html;
+}
\ No newline at end of file
diff --git a/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib2/package.json b/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib2/package.json
new file mode 100644
index 00000000000..8c1cbff3c1d
--- /dev/null
+++ b/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib2/package.json
@@ -0,0 +1,10 @@
+{
+    "name": "my-unsafe-library",
+    "main": "./foobar.js",
+    "exports": {
+        "./MyNode": {
+            "require": "./lib/MyNode.cjs",
+            "import": "./lib/MyNode.mjs"
+        }
+    }
+}
\ No newline at end of file
diff --git a/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib2/src/MyNode.ts b/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib2/src/MyNode.ts
new file mode 100644
index 00000000000..35908c88f16
--- /dev/null
+++ b/javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/lib2/src/MyNode.ts
@@ -0,0 +1,4 @@
+export function trivialXss(s: string) {
+    const html = "<span>" + s + "</span>"; // OK - this file is not recognized as a main file.
+    document.querySelector("#html").innerHTML = html;
+}
\ No newline at end of file

From 83c8e22225bf38297e6fc2e89abad8f3a4646891 Mon Sep 17 00:00:00 2001
From: Edward Minnix III <egregius313@github.com>
Date: Thu, 8 Sep 2022 15:55:00 -0400
Subject: [PATCH 071/203] Apply suggestions from documentation review

Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com>
---
 .../CWE-312/AllowBackupAttributeEnabled.qhelp | 20 +++++++------------
 .../CWE-312/AllowBackupAttributeEnabled.ql    |  2 +-
 2 files changed, 8 insertions(+), 14 deletions(-)

diff --git a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.qhelp b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.qhelp
index 8945f40172f..4f57a2659f0 100644
--- a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.qhelp
+++ b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.qhelp
@@ -3,35 +3,29 @@
   "qhelp.dtd">
 <qhelp>
 <overview>
-<p>The Android manifest file defines configuration settings for Android 
-applications. In this file, the <code>android:allowBackup</code> attribute of
-the <code>application</code> element can be used to define whether or not the
-application can have automatic backups.</p>
+<p>In the Android manifest file, you can use the <code>android:allowBackup</code> attribute of the <code>application</code> element to define whether the
+application will have automatic backups or not.</p>
 
-<p>Enabling backups may allow an attacker to extract sensitive data. Therefore,
-it is advised to set <code>android:allowBackup</code> to <code>false</code> if 
-your application uses any sensitive data.</p>
+<p>If your application uses any sensitive data, you should disable automatic backups to prevent attackers from extracting it.</p>
 </overview>
 
 <recommendation>
-<p>For Android applications which process sensitive data, set the 
-<code>android:allowBackup</code> setting to <code>false</code> in the manifest
+<p>For Android applications which process sensitive data, set <code>android:allowBackup</code> to <code>false</code> in the manifest
 file.</p>
 
-<p>Note: Since Android 6.0 (Marshmallow), applications default to participating
-in automatic backups. Therefore, it is necessary to explicitly disable backups.
+<p>Note: Since Android 6.0 (Marshmallow), automatic backups for applications are switched on by default. 
 </p>
 </recommendation>
 
 <example>
 
-<p>In the two examples below, the <code>android:allowBackup</code> setting is enabled:</p>
+<p>In the following two (bad) examples, the <code>android:allowBackup</code> setting is enabled:</p>
 
 <sample src="AllowBackupTrue.xml" />
 
 <sample src="AllowBackupEmpty.xml"/>
 
-<p>A corrected version explicity sets <code>android:allowBackup</code> to <code>false</code>:</p>
+<p>In the following (good) example, <code>android:allowBackup</code> is set to <code>false</code>:</p>
 
 <sample src="AllowBackupFalse.xml"/>
 
diff --git a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
index 89421289765..43827aeb081 100644
--- a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
+++ b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
@@ -1,6 +1,6 @@
 /**
  * @name Android allowBackup attribute enabled
- * @description Android manifests which do not disable the `android:allowBackup` attribute allow backups, which can store sensitive information.
+ * @description Enabling the `android:allowBackup` attribute may allow an attacker to extract sensitive data.
  * @kind problem
  * @problem.severity recommendation
  * @security-severity 7.5

From 1ec77136ec6717c584a86c83a55fdae59e17abfe Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Fri, 9 Sep 2022 08:37:38 +0200
Subject: [PATCH 072/203] depend on an explicit version of the typo database

---
 javascript/ql/src/qlpack.yml | 2 +-
 ql/ql/src/qlpack.yml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/javascript/ql/src/qlpack.yml b/javascript/ql/src/qlpack.yml
index a364849d264..cdc71881258 100644
--- a/javascript/ql/src/qlpack.yml
+++ b/javascript/ql/src/qlpack.yml
@@ -9,4 +9,4 @@ defaultSuiteFile: codeql-suites/javascript-code-scanning.qls
 dependencies:
   codeql/javascript-all: "*"
   codeql/suite-helpers: "*"
-  codeql/typos: "*"
+  codeql/typos: 0.0.1
diff --git a/ql/ql/src/qlpack.yml b/ql/ql/src/qlpack.yml
index 9ee790bdfe5..4101674828b 100644
--- a/ql/ql/src/qlpack.yml
+++ b/ql/ql/src/qlpack.yml
@@ -6,4 +6,4 @@ suites: codeql-suites
 defaultSuiteFile: codeql-suites/ql-code-scanning.qls
 extractor: ql
 dependencies:
-  codeql/typos: "*"
+  codeql/typos: 0.0.1

From 26d8553f6e778595470b83ea28c6e4620acd5ce8 Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Fri, 9 Sep 2022 10:28:57 +0200
Subject: [PATCH 073/203] ensure consistent casing of names

---
 .../aliased_ssa/internal/SSAConsistency.qll   |  4 +-
 .../aliased_ssa/internal/SSAConstruction.qll  |  5 +-
 .../implementation/internal/TInstruction.qll  | 18 +++----
 .../unaliased_ssa/internal/SSAConsistency.qll |  4 +-
 .../internal/SSAConstruction.qll              |  5 +-
 .../lib/semmle/code/cil/CallableReturns.qll   |  2 +-
 .../ql/lib/semmle/code/cil/Instructions.qll   | 10 +++-
 .../internal/AliasedSSAStub.qll               |  5 +-
 .../implementation/internal/TInstruction.qll  | 18 +++----
 .../unaliased_ssa/internal/SSAConsistency.qll |  4 +-
 .../internal/SSAConstruction.qll              |  5 +-
 go/ql/lib/semmle/go/concepts/HTTP.qll         |  9 ++--
 go/ql/lib/semmle/go/frameworks/Beego.qll      | 24 ++++-----
 go/ql/lib/semmle/go/frameworks/Echo.qll       | 14 ++---
 .../semmle/go/frameworks/ElazarlGoproxy.qll   | 18 +++----
 go/ql/lib/semmle/go/frameworks/Macaron.qll    |  6 +--
 go/ql/lib/semmle/go/frameworks/Revel.qll      | 12 ++---
 go/ql/lib/semmle/go/frameworks/Stdlib.qll     |  5 +-
 .../semmle/go/frameworks/stdlib/NetHttp.qll   | 38 ++++++-------
 .../OpenUrlRedirectCustomizations.qll         |  6 +--
 .../security/RequestForgeryCustomizations.qll |  2 +-
 .../go/security/SafeUrlFlowCustomizations.qll |  2 +-
 go/ql/lib/semmle/go/security/Xss.qll          |  8 +--
 .../CWE-020/IncompleteHostnameRegexp.ql       |  6 +--
 .../Security/CWE-209/StackTraceExposure.ql    |  2 +-
 go/ql/src/experimental/CWE-918/SSRF.qll       |  2 +-
 .../CWE-942/CorsMisconfiguration.ql           |  4 +-
 .../src/experimental/frameworks/CleverGo.qll  | 28 +++++-----
 go/ql/src/experimental/frameworks/Fiber.qll   | 16 +++---
 .../frameworks/CleverGo/HeaderWrite.ql        |  6 +--
 .../frameworks/CleverGo/HttpRedirect.ql       |  2 +-
 .../frameworks/CleverGo/HttpResponseBody.ql   |  2 +-
 .../frameworks/Fiber/HeaderWrite.ql           |  6 +--
 .../experimental/frameworks/Fiber/Redirect.ql |  2 +-
 .../frameworks/Fiber/ResponseBody.ql          |  2 +-
 .../semmle/go/concepts/HTTP/Handler.ql        |  2 +-
 .../semmle/go/concepts/HTTP/Header.ql         |  2 +-
 .../semmle/go/concepts/HTTP/RequestBody.ql    |  2 +-
 .../semmle/go/concepts/HTTP/ResponseBody.ql   |  2 +-
 .../go/frameworks/ElazarlGoproxy/test.ql      |  2 +-
 .../semmle/go/frameworks/Macaron/Redirect.ql  |  2 +-
 .../semmle/go/frameworks/Revel/test.ql        |  2 +-
 .../NosqlInjectionATM.qll                     |  4 +-
 .../ql/lib/semmle/javascript/ApiGraphs.qll    |  2 +-
 .../lib/semmle/javascript/RangeAnalysis.qll   |  4 +-
 .../ql/lib/semmle/javascript/Routing.qll      | 12 ++---
 javascript/ql/lib/semmle/javascript/SSA.qll   |  5 +-
 .../javascript/dataflow/Configuration.qll     |  4 +-
 .../semmle/javascript/dataflow/Sources.qll    |  2 +-
 .../javascript/frameworks/ClientRequests.qll  |  2 +-
 .../semmle/javascript/frameworks/Connect.qll  |  6 +--
 .../frameworks/ConnectExpressShared.qll       |  2 +-
 .../javascript/frameworks/CookieLibraries.qll |  2 +-
 .../semmle/javascript/frameworks/Express.qll  | 54 +++++++++----------
 .../javascript/frameworks/ExpressModules.qll  | 30 +++++------
 .../semmle/javascript/frameworks/Fastify.qll  | 30 +++++------
 .../semmle/javascript/frameworks/Firebase.qll |  4 +-
 .../lib/semmle/javascript/frameworks/HTTP.qll |  9 ++--
 .../lib/semmle/javascript/frameworks/Hapi.qll | 26 ++++-----
 .../lib/semmle/javascript/frameworks/Koa.qll  | 26 ++++-----
 .../javascript/frameworks/LiveServer.qll      |  4 +-
 .../semmle/javascript/frameworks/Logging.qll  |  2 +-
 .../semmle/javascript/frameworks/Micro.qll    | 24 ++++-----
 .../lib/semmle/javascript/frameworks/Nest.qll | 22 ++++----
 .../lib/semmle/javascript/frameworks/Next.qll | 14 ++---
 .../javascript/frameworks/NodeJSLib.qll       | 42 +++++++--------
 .../semmle/javascript/frameworks/Request.qll  |  2 +-
 .../semmle/javascript/frameworks/Restify.qll  | 16 +++---
 .../javascript/frameworks/Templating.qll      |  2 +-
 .../javascript/frameworks/WebSocket.qll       | 12 ++---
 .../heuristics/AdditionalRouteHandlers.qll    |  8 +--
 .../javascript/security/SensitiveActions.qll  |  2 +-
 .../javascript/security/TaintedObject.qll     |  2 +-
 .../javascript/security/UselessUseOfCat.qll   |  2 +-
 .../CleartextStorageCustomizations.qll        |  2 +-
 ...figurationForCredentialsCustomizations.qll |  8 +--
 ...entKindsComparisonBypassCustomizations.qll |  4 +-
 ...tHeaderPoisoningInEmailGenerationQuery.qll |  2 +-
 .../dataflow/HttpToFileAccessSpecific.qll     |  2 +-
 .../dataflow/ReflectedXssCustomizations.qll   | 20 +++----
 .../RemotePropertyInjectionCustomizations.qll |  2 +-
 .../ServerSideUrlRedirectCustomizations.qll   |  6 +--
 .../StackTraceExposureCustomizations.qll      |  2 +-
 ...hroughParameterTamperingCustomizations.qll |  2 +-
 .../regexp/PolynomialReDoSCustomizations.qll  |  4 +-
 .../Security/CWE-352/MissingCsrfMiddleware.ql |  6 +--
 .../Security/CWE-451/MissingXFrameOptions.ql  |  2 +-
 .../src/Security/CWE-598/SensitiveGetQuery.ql |  2 +-
 .../ql/src/Security/CWE-730/ServerCrash.ql    |  4 +-
 javascript/ql/src/experimental/poi/PoI.qll    | 10 ++--
 .../analysis-quality/CandidateTracking.qll    |  2 +-
 .../meta/analysis-quality/RouteHandlers.ql    |  2 +-
 .../UnpromotedRouteHandlerCandidate.ql        |  6 +--
 .../UnpromotedRouteSetupCandidate.ql          |  6 +--
 .../Express/CookieMiddlewareInstance.qll      |  2 +-
 .../frameworks/Express/HeaderAccess.qll       |  2 +-
 .../frameworks/Express/HeaderDefinition.qll   |  2 +-
 .../Express/HeaderDefinition_defines.qll      |  2 +-
 .../HeaderDefinition_getAHeaderName.qll       |  2 +-
 .../Express/HeaderDefinition_getNameExpr.qll  |  2 +-
 .../frameworks/Express/RedirectInvocation.qll |  2 +-
 .../frameworks/Express/RequestExpr.qll        |  2 +-
 .../frameworks/Express/RequestInputAccess.qll |  2 +-
 .../frameworks/Express/ResponseBody.qll       |  2 +-
 .../frameworks/Express/ResponseExpr.qll       |  2 +-
 .../Express/ResponseSendArgument.qll          |  2 +-
 .../Express/RouteHandlerContainer.qll         |  2 +-
 .../Express/RouteHandler_getARequestExpr.qll  |  2 +-
 .../Express/RouteHandler_getAResponseExpr.qll |  2 +-
 .../RouteHandler_getAResponseHeader.qll       |  2 +-
 .../Express/RouteSetup_getRequestMethod.qll   |  2 +-
 .../RouterDefinition_getARouteHandler.qll     |  2 +-
 .../frameworks/Express/SetCookie.qll          |  2 +-
 .../frameworks/Firebase/tests.ql              |  6 +--
 .../AdditionalRouteHandlers.ql                |  2 +-
 .../frameworks/HTTP-heuristics/tests.ql       |  8 +--
 .../frameworks/HTTP/RemoteRequestInput.ql     |  2 +-
 .../frameworks/HTTP/ResponseBody.ql           |  2 +-
 .../frameworks/Micro/TestMicro.ql             | 14 ++---
 .../library-tests/frameworks/Nest/test.ql     | 12 ++---
 .../frameworks/NodeJSLib/HeaderAccess.qll     |  2 +-
 .../frameworks/NodeJSLib/HeaderDefinition.qll |  2 +-
 .../NodeJSLib/HeaderDefinition_defines.qll    |  2 +-
 .../HeaderDefinition_getAHeaderName.qll       |  2 +-
 .../HeaderDefinition_getNameExpr.qll          |  2 +-
 .../frameworks/NodeJSLib/RequestExpr.qll      |  2 +-
 .../NodeJSLib/RequestInputAccess.qll          |  2 +-
 .../frameworks/NodeJSLib/ResponseExpr.qll     |  2 +-
 .../NodeJSLib/ResponseSendArgument.qll        |  2 +-
 .../RouteHandler_getARequestExpr.qll          |  2 +-
 .../RouteHandler_getAResponseExpr.qll         |  2 +-
 .../RouteHandler_getAResponseHeader.qll       |  2 +-
 .../ServerDefinition_getARouteHandler.qll     |  2 +-
 .../library-tests/frameworks/connect/tests.ql | 18 +++----
 .../frameworks/fastify/HeaderAccess.qll       |  2 +-
 .../frameworks/fastify/HeaderDefinition.qll   |  2 +-
 .../fastify/HeaderDefinition_defines.qll      |  2 +-
 .../HeaderDefinition_getAHeaderName.qll       |  2 +-
 .../frameworks/fastify/RedirectInvocation.qll |  2 +-
 .../frameworks/fastify/RequestInputAccess.qll |  2 +-
 .../fastify/ResponseSendArgument.qll          |  2 +-
 .../fastify/RouteHandler_getARequestExpr.qll  |  2 +-
 .../RouteHandler_getAResponseHeader.qll       |  2 +-
 .../frameworks/hapi/HeaderAccess.qll          |  2 +-
 .../frameworks/hapi/HeaderDefinition.qll      |  2 +-
 .../hapi/HeaderDefinition_defines.qll         |  2 +-
 .../hapi/HeaderDefinition_getAHeaderName.qll  |  2 +-
 .../frameworks/hapi/RequestExpr.qll           |  2 +-
 .../frameworks/hapi/RequestInputAccess.qll    |  2 +-
 .../frameworks/hapi/ResponseExpr.qll          |  2 +-
 .../hapi/RouteHandler_getARequestExpr.qll     |  2 +-
 .../hapi/RouteHandler_getAResponseHeader.qll  |  2 +-
 .../frameworks/koa/HeaderAccess.qll           |  2 +-
 .../frameworks/koa/HeaderDefinition.qll       |  2 +-
 .../koa/HeaderDefinition_defines.qll          |  2 +-
 .../koa/HeaderDefinition_getAHeaderName.qll   |  2 +-
 .../frameworks/koa/RedirectInvocation.qll     |  2 +-
 .../frameworks/koa/RequestExpr.qll            |  2 +-
 .../frameworks/koa/RequestInputAccess.qll     |  2 +-
 .../frameworks/koa/ResponseExpr.qll           |  2 +-
 .../frameworks/koa/ResponseSendArgument.qll   |  2 +-
 .../koa/RouteHandler_getARequestExpr.qll      |  2 +-
 .../koa/RouteHandler_getAResponseExpr.qll     |  2 +-
 .../koa/RouteHandler_getAResponseHeader.qll   |  2 +-
 .../frameworks/restify/HeaderDefinition.qll   |  2 +-
 .../restify/HeaderDefinition_defines.qll      |  2 +-
 .../HeaderDefinition_getAHeaderName.qll       |  2 +-
 .../frameworks/restify/RequestExpr.qll        |  2 +-
 .../frameworks/restify/RequestInputAccess.qll |  2 +-
 .../frameworks/restify/ResponseExpr.qll       |  2 +-
 .../restify/RouteHandler_getARequestExpr.qll  |  2 +-
 .../restify/RouteHandler_getAResponseExpr.qll |  2 +-
 .../RouteHandler_getAResponseHeader.qll       |  2 +-
 python/ql/lib/semmle/python/Concepts.qll      | 12 +++--
 .../lib/semmle/python/frameworks/Aiohttp.qll  | 26 ++++-----
 .../lib/semmle/python/frameworks/Django.qll   | 54 +++++++++----------
 .../lib/semmle/python/frameworks/FastApi.qll  | 16 +++---
 .../ql/lib/semmle/python/frameworks/Flask.qll | 16 +++---
 .../ql/lib/semmle/python/frameworks/Httpx.qll |  8 +--
 .../ql/lib/semmle/python/frameworks/Ldap.qll  |  4 +-
 .../ql/lib/semmle/python/frameworks/Ldap3.qll |  2 +-
 .../lib/semmle/python/frameworks/Libtaxii.qll |  2 +-
 .../semmle/python/frameworks/Multidict.qll    |  5 +-
 .../lib/semmle/python/frameworks/Pycurl.qll   |  2 +-
 .../lib/semmle/python/frameworks/Requests.qll |  4 +-
 .../python/frameworks/RestFramework.qll       |  8 +--
 .../semmle/python/frameworks/Starlette.qll    |  7 ++-
 .../lib/semmle/python/frameworks/Stdlib.qll   | 20 +++----
 .../python/frameworks/Stdlib/Urllib.qll       |  4 +-
 .../python/frameworks/Stdlib/Urllib2.qll      |  4 +-
 .../lib/semmle/python/frameworks/Tornado.qll  | 12 ++---
 .../lib/semmle/python/frameworks/Twisted.qll  | 12 ++---
 .../lib/semmle/python/frameworks/Urllib3.qll  |  2 +-
 .../ql/lib/semmle/python/frameworks/Yarl.qll  |  2 +-
 .../CleartextStorageCustomizations.qll        |  2 +-
 .../dataflow/LdapInjectionCustomizations.qll  |  4 +-
 .../dataflow/ReflectedXSSCustomizations.qll   |  2 +-
 ...ServerSideRequestForgeryCustomizations.qll |  6 +--
 .../ServerSideRequestForgeryQuery.qll         |  2 +-
 .../StackTraceExposureCustomizations.qll      |  2 +-
 .../dataflow/UrlRedirectCustomizations.qll    |  2 +-
 .../CWE-295/RequestWithoutValidation.ql       |  2 +-
 .../CWE-352/CSRFProtectionDisabled.ql         | 10 ++--
 .../CWE-918/FullServerSideRequestForgery.ql   |  2 +-
 .../PartialServerSideRequestForgery.ql        |  2 +-
 .../experimental/semmle/python/Concepts.qll   |  4 +-
 .../semmle/python/frameworks/Django.qll       |  6 +--
 python/ql/src/meta/alerts/RequestHandlers.ql  |  2 +-
 .../test/experimental/meta/ConceptsTest.qll   | 26 ++++-----
 ruby/ql/lib/codeql/ruby/Concepts.qll          |  7 ++-
 .../ruby/frameworks/ActionController.qll      |  8 +--
 .../lib/codeql/ruby/frameworks/ActionView.qll |  2 +-
 .../codeql/ruby/frameworks/ActiveResource.qll |  4 +-
 .../ql/lib/codeql/ruby/frameworks/GraphQL.qll |  6 +--
 .../ruby/frameworks/http_clients/Excon.qll    |  2 +-
 .../ruby/frameworks/http_clients/Faraday.qll  |  2 +-
 .../frameworks/http_clients/HttpClient.qll    |  2 +-
 .../ruby/frameworks/http_clients/Httparty.qll |  2 +-
 .../ruby/frameworks/http_clients/NetHttp.qll  |  2 +-
 .../ruby/frameworks/http_clients/OpenURI.qll  |  4 +-
 .../frameworks/http_clients/RestClient.qll    |  2 +-
 .../ruby/frameworks/http_clients/Typhoeus.qll |  2 +-
 .../security/HttpToFileAccessSpecific.qll     |  4 +-
 .../InsecureDownloadCustomizations.qll        |  6 +--
 ...ServerSideRequestForgeryCustomizations.qll |  2 +-
 .../security/UrlRedirectCustomizations.qll    |  2 +-
 .../cwe-295/RequestWithoutValidation.ql       |  2 +-
 .../library-tests/frameworks/ActionView.ql    |  2 +-
 .../frameworks/http_clients/HttpClients.ql    |  2 +-
 .../Security/CWE-311/CleartextTransmission.ql |  4 +-
 230 files changed, 702 insertions(+), 657 deletions(-)

diff --git a/cpp/ql/lib/semmle/code/cpp/ir/implementation/aliased_ssa/internal/SSAConsistency.qll b/cpp/ql/lib/semmle/code/cpp/ir/implementation/aliased_ssa/internal/SSAConsistency.qll
index 1c75529be00..873a3c635f8 100644
--- a/cpp/ql/lib/semmle/code/cpp/ir/implementation/aliased_ssa/internal/SSAConsistency.qll
+++ b/cpp/ql/lib/semmle/code/cpp/ir/implementation/aliased_ssa/internal/SSAConsistency.qll
@@ -1,2 +1,2 @@
-private import SSAConstruction as SSA
-import SSA::SsaConsistency
+private import SSAConstruction as Ssa
+import Ssa::SsaConsistency
diff --git a/cpp/ql/lib/semmle/code/cpp/ir/implementation/aliased_ssa/internal/SSAConstruction.qll b/cpp/ql/lib/semmle/code/cpp/ir/implementation/aliased_ssa/internal/SSAConstruction.qll
index 901735069c0..21c03e176a5 100644
--- a/cpp/ql/lib/semmle/code/cpp/ir/implementation/aliased_ssa/internal/SSAConstruction.qll
+++ b/cpp/ql/lib/semmle/code/cpp/ir/implementation/aliased_ssa/internal/SSAConstruction.qll
@@ -1135,7 +1135,7 @@ deprecated module SSAConsistency = SsaConsistency;
  * These predicates are all just aliases for predicates defined in the `Cached` module. This ensures
  * that all of SSA construction will be evaluated in the same stage.
  */
-module SSA {
+module Ssa {
   class MemoryLocation = Alias::MemoryLocation;
 
   predicate hasPhiInstruction = Cached::hasPhiInstructionCached/2;
@@ -1144,3 +1144,6 @@ module SSA {
 
   predicate hasUnreachedInstruction = Cached::hasUnreachedInstructionCached/1;
 }
+
+/** DEPRECATED: Alias for Ssa */
+deprecated module SSA = Ssa;
diff --git a/cpp/ql/lib/semmle/code/cpp/ir/implementation/internal/TInstruction.qll b/cpp/ql/lib/semmle/code/cpp/ir/implementation/internal/TInstruction.qll
index b30372a791b..5564a16f215 100644
--- a/cpp/ql/lib/semmle/code/cpp/ir/implementation/internal/TInstruction.qll
+++ b/cpp/ql/lib/semmle/code/cpp/ir/implementation/internal/TInstruction.qll
@@ -20,24 +20,24 @@ newtype TInstruction =
     IRConstruction::Raw::hasInstruction(tag1, tag2)
   } or
   TUnaliasedSsaPhiInstruction(
-    TRawInstruction blockStartInstr, UnaliasedSsa::SSA::MemoryLocation memoryLocation
+    TRawInstruction blockStartInstr, UnaliasedSsa::Ssa::MemoryLocation memoryLocation
   ) {
-    UnaliasedSsa::SSA::hasPhiInstruction(blockStartInstr, memoryLocation)
+    UnaliasedSsa::Ssa::hasPhiInstruction(blockStartInstr, memoryLocation)
   } or
   TUnaliasedSsaChiInstruction(TRawInstruction primaryInstruction) { none() } or
   TUnaliasedSsaUnreachedInstruction(IRFunctionBase irFunc) {
-    UnaliasedSsa::SSA::hasUnreachedInstruction(irFunc)
+    UnaliasedSsa::Ssa::hasUnreachedInstruction(irFunc)
   } or
   TAliasedSsaPhiInstruction(
-    TRawInstruction blockStartInstr, AliasedSsa::SSA::MemoryLocation memoryLocation
+    TRawInstruction blockStartInstr, AliasedSsa::Ssa::MemoryLocation memoryLocation
   ) {
-    AliasedSsa::SSA::hasPhiInstruction(blockStartInstr, memoryLocation)
+    AliasedSsa::Ssa::hasPhiInstruction(blockStartInstr, memoryLocation)
   } or
   TAliasedSsaChiInstruction(TRawInstruction primaryInstruction) {
-    AliasedSsa::SSA::hasChiInstruction(primaryInstruction)
+    AliasedSsa::Ssa::hasChiInstruction(primaryInstruction)
   } or
   TAliasedSsaUnreachedInstruction(IRFunctionBase irFunc) {
-    AliasedSsa::SSA::hasUnreachedInstruction(irFunc)
+    AliasedSsa::Ssa::hasUnreachedInstruction(irFunc)
   }
 
 /**
@@ -50,7 +50,7 @@ module UnaliasedSsaInstructions {
   class TPhiInstruction = TUnaliasedSsaPhiInstruction;
 
   TPhiInstruction phiInstruction(
-    TRawInstruction blockStartInstr, UnaliasedSsa::SSA::MemoryLocation memoryLocation
+    TRawInstruction blockStartInstr, UnaliasedSsa::Ssa::MemoryLocation memoryLocation
   ) {
     result = TUnaliasedSsaPhiInstruction(blockStartInstr, memoryLocation)
   }
@@ -83,7 +83,7 @@ module AliasedSsaInstructions {
   class TPhiInstruction = TAliasedSsaPhiInstruction or TUnaliasedSsaPhiInstruction;
 
   TPhiInstruction phiInstruction(
-    TRawInstruction blockStartInstr, AliasedSsa::SSA::MemoryLocation memoryLocation
+    TRawInstruction blockStartInstr, AliasedSsa::Ssa::MemoryLocation memoryLocation
   ) {
     result = TAliasedSsaPhiInstruction(blockStartInstr, memoryLocation)
   }
diff --git a/cpp/ql/lib/semmle/code/cpp/ir/implementation/unaliased_ssa/internal/SSAConsistency.qll b/cpp/ql/lib/semmle/code/cpp/ir/implementation/unaliased_ssa/internal/SSAConsistency.qll
index 1c75529be00..873a3c635f8 100644
--- a/cpp/ql/lib/semmle/code/cpp/ir/implementation/unaliased_ssa/internal/SSAConsistency.qll
+++ b/cpp/ql/lib/semmle/code/cpp/ir/implementation/unaliased_ssa/internal/SSAConsistency.qll
@@ -1,2 +1,2 @@
-private import SSAConstruction as SSA
-import SSA::SsaConsistency
+private import SSAConstruction as Ssa
+import Ssa::SsaConsistency
diff --git a/cpp/ql/lib/semmle/code/cpp/ir/implementation/unaliased_ssa/internal/SSAConstruction.qll b/cpp/ql/lib/semmle/code/cpp/ir/implementation/unaliased_ssa/internal/SSAConstruction.qll
index 901735069c0..21c03e176a5 100644
--- a/cpp/ql/lib/semmle/code/cpp/ir/implementation/unaliased_ssa/internal/SSAConstruction.qll
+++ b/cpp/ql/lib/semmle/code/cpp/ir/implementation/unaliased_ssa/internal/SSAConstruction.qll
@@ -1135,7 +1135,7 @@ deprecated module SSAConsistency = SsaConsistency;
  * These predicates are all just aliases for predicates defined in the `Cached` module. This ensures
  * that all of SSA construction will be evaluated in the same stage.
  */
-module SSA {
+module Ssa {
   class MemoryLocation = Alias::MemoryLocation;
 
   predicate hasPhiInstruction = Cached::hasPhiInstructionCached/2;
@@ -1144,3 +1144,6 @@ module SSA {
 
   predicate hasUnreachedInstruction = Cached::hasUnreachedInstructionCached/1;
 }
+
+/** DEPRECATED: Alias for Ssa */
+deprecated module SSA = Ssa;
diff --git a/csharp/ql/lib/semmle/code/cil/CallableReturns.qll b/csharp/ql/lib/semmle/code/cil/CallableReturns.qll
index 6a86ef72170..4cd46c10941 100644
--- a/csharp/ql/lib/semmle/code/cil/CallableReturns.qll
+++ b/csharp/ql/lib/semmle/code/cil/CallableReturns.qll
@@ -56,7 +56,7 @@ private predicate alwaysNotNullVariableUpdate(VariableUpdate vu) {
 
 /** Holds if expression `expr` always evaluates to non-null. */
 private predicate alwaysNotNullExpr(Expr expr) {
-  expr instanceof Opcodes::Newobj
+  expr instanceof Opcodes::NewObj
   or
   expr instanceof Literal and not expr instanceof NullLiteral
   or
diff --git a/csharp/ql/lib/semmle/code/cil/Instructions.qll b/csharp/ql/lib/semmle/code/cil/Instructions.qll
index 91bc1f37ea6..7d425594b8d 100644
--- a/csharp/ql/lib/semmle/code/cil/Instructions.qll
+++ b/csharp/ql/lib/semmle/code/cil/Instructions.qll
@@ -766,7 +766,7 @@ module Opcodes {
   }
 
   /** A `newobj` instruction. */
-  class Newobj extends Call, @cil_newobj {
+  class NewObj extends Call, @cil_newobj {
     override string getOpcodeName() { result = "newobj" }
 
     override int getPushCount() { result = 1 }
@@ -788,6 +788,9 @@ module Opcodes {
     }
   }
 
+  /** DEPRECATED: Alias for NewObj */
+  deprecated class Newobj = NewObj;
+
   /** An `initobj` instruction. */
   class Initobj extends Instruction, @cil_initobj {
     override string getOpcodeName() { result = "initobj" }
@@ -847,10 +850,13 @@ module Opcodes {
   }
 
   /** A `rethrow` instruction. */
-  class Rethrow extends Throw, @cil_rethrow {
+  class ReThrow extends Throw, @cil_rethrow {
     override string getOpcodeName() { result = "rethrow" }
   }
 
+  /** DEPRECATED: Alias for ReThrow */
+  deprecated class Rethrow = ReThrow;
+
   /** A `ldlen` instruction. */
   class Ldlen extends UnaryExpr, @cil_ldlen {
     override string getOpcodeName() { result = "ldlen" }
diff --git a/csharp/ql/src/experimental/ir/implementation/internal/AliasedSSAStub.qll b/csharp/ql/src/experimental/ir/implementation/internal/AliasedSSAStub.qll
index 0fedd38bfbd..6fca9e3b974 100644
--- a/csharp/ql/src/experimental/ir/implementation/internal/AliasedSSAStub.qll
+++ b/csharp/ql/src/experimental/ir/implementation/internal/AliasedSSAStub.qll
@@ -6,7 +6,7 @@
 private import IRFunctionBase
 private import TInstruction
 
-module SSA {
+module Ssa {
   class MemoryLocation = boolean;
 
   predicate hasPhiInstruction(TRawInstruction blockStartInstr, MemoryLocation memoryLocation) {
@@ -17,3 +17,6 @@ module SSA {
 
   predicate hasUnreachedInstruction(IRFunctionBase irFunc) { none() }
 }
+
+/** DEPRECATED: Alias for Ssa */
+deprecated module SSA = Ssa;
diff --git a/csharp/ql/src/experimental/ir/implementation/internal/TInstruction.qll b/csharp/ql/src/experimental/ir/implementation/internal/TInstruction.qll
index b30372a791b..5564a16f215 100644
--- a/csharp/ql/src/experimental/ir/implementation/internal/TInstruction.qll
+++ b/csharp/ql/src/experimental/ir/implementation/internal/TInstruction.qll
@@ -20,24 +20,24 @@ newtype TInstruction =
     IRConstruction::Raw::hasInstruction(tag1, tag2)
   } or
   TUnaliasedSsaPhiInstruction(
-    TRawInstruction blockStartInstr, UnaliasedSsa::SSA::MemoryLocation memoryLocation
+    TRawInstruction blockStartInstr, UnaliasedSsa::Ssa::MemoryLocation memoryLocation
   ) {
-    UnaliasedSsa::SSA::hasPhiInstruction(blockStartInstr, memoryLocation)
+    UnaliasedSsa::Ssa::hasPhiInstruction(blockStartInstr, memoryLocation)
   } or
   TUnaliasedSsaChiInstruction(TRawInstruction primaryInstruction) { none() } or
   TUnaliasedSsaUnreachedInstruction(IRFunctionBase irFunc) {
-    UnaliasedSsa::SSA::hasUnreachedInstruction(irFunc)
+    UnaliasedSsa::Ssa::hasUnreachedInstruction(irFunc)
   } or
   TAliasedSsaPhiInstruction(
-    TRawInstruction blockStartInstr, AliasedSsa::SSA::MemoryLocation memoryLocation
+    TRawInstruction blockStartInstr, AliasedSsa::Ssa::MemoryLocation memoryLocation
   ) {
-    AliasedSsa::SSA::hasPhiInstruction(blockStartInstr, memoryLocation)
+    AliasedSsa::Ssa::hasPhiInstruction(blockStartInstr, memoryLocation)
   } or
   TAliasedSsaChiInstruction(TRawInstruction primaryInstruction) {
-    AliasedSsa::SSA::hasChiInstruction(primaryInstruction)
+    AliasedSsa::Ssa::hasChiInstruction(primaryInstruction)
   } or
   TAliasedSsaUnreachedInstruction(IRFunctionBase irFunc) {
-    AliasedSsa::SSA::hasUnreachedInstruction(irFunc)
+    AliasedSsa::Ssa::hasUnreachedInstruction(irFunc)
   }
 
 /**
@@ -50,7 +50,7 @@ module UnaliasedSsaInstructions {
   class TPhiInstruction = TUnaliasedSsaPhiInstruction;
 
   TPhiInstruction phiInstruction(
-    TRawInstruction blockStartInstr, UnaliasedSsa::SSA::MemoryLocation memoryLocation
+    TRawInstruction blockStartInstr, UnaliasedSsa::Ssa::MemoryLocation memoryLocation
   ) {
     result = TUnaliasedSsaPhiInstruction(blockStartInstr, memoryLocation)
   }
@@ -83,7 +83,7 @@ module AliasedSsaInstructions {
   class TPhiInstruction = TAliasedSsaPhiInstruction or TUnaliasedSsaPhiInstruction;
 
   TPhiInstruction phiInstruction(
-    TRawInstruction blockStartInstr, AliasedSsa::SSA::MemoryLocation memoryLocation
+    TRawInstruction blockStartInstr, AliasedSsa::Ssa::MemoryLocation memoryLocation
   ) {
     result = TAliasedSsaPhiInstruction(blockStartInstr, memoryLocation)
   }
diff --git a/csharp/ql/src/experimental/ir/implementation/unaliased_ssa/internal/SSAConsistency.qll b/csharp/ql/src/experimental/ir/implementation/unaliased_ssa/internal/SSAConsistency.qll
index 1c75529be00..873a3c635f8 100644
--- a/csharp/ql/src/experimental/ir/implementation/unaliased_ssa/internal/SSAConsistency.qll
+++ b/csharp/ql/src/experimental/ir/implementation/unaliased_ssa/internal/SSAConsistency.qll
@@ -1,2 +1,2 @@
-private import SSAConstruction as SSA
-import SSA::SsaConsistency
+private import SSAConstruction as Ssa
+import Ssa::SsaConsistency
diff --git a/csharp/ql/src/experimental/ir/implementation/unaliased_ssa/internal/SSAConstruction.qll b/csharp/ql/src/experimental/ir/implementation/unaliased_ssa/internal/SSAConstruction.qll
index 901735069c0..21c03e176a5 100644
--- a/csharp/ql/src/experimental/ir/implementation/unaliased_ssa/internal/SSAConstruction.qll
+++ b/csharp/ql/src/experimental/ir/implementation/unaliased_ssa/internal/SSAConstruction.qll
@@ -1135,7 +1135,7 @@ deprecated module SSAConsistency = SsaConsistency;
  * These predicates are all just aliases for predicates defined in the `Cached` module. This ensures
  * that all of SSA construction will be evaluated in the same stage.
  */
-module SSA {
+module Ssa {
   class MemoryLocation = Alias::MemoryLocation;
 
   predicate hasPhiInstruction = Cached::hasPhiInstructionCached/2;
@@ -1144,3 +1144,6 @@ module SSA {
 
   predicate hasUnreachedInstruction = Cached::hasUnreachedInstructionCached/1;
 }
+
+/** DEPRECATED: Alias for Ssa */
+deprecated module SSA = Ssa;
diff --git a/go/ql/lib/semmle/go/concepts/HTTP.qll b/go/ql/lib/semmle/go/concepts/HTTP.qll
index 89a716d4f1a..740611710a8 100644
--- a/go/ql/lib/semmle/go/concepts/HTTP.qll
+++ b/go/ql/lib/semmle/go/concepts/HTTP.qll
@@ -5,7 +5,7 @@
 import go
 
 /** Provides classes for modeling HTTP-related APIs. */
-module HTTP {
+module Http {
   /** Provides a class for modeling new HTTP response-writer APIs. */
   module ResponseWriter {
     /**
@@ -191,7 +191,7 @@ module HTTP {
 
       /** Gets a content-type associated with this body. */
       string getAContentType() {
-        exists(HTTP::HeaderWrite hw | hw = this.getResponseWriter().getAHeaderWrite() |
+        exists(Http::HeaderWrite hw | hw = this.getResponseWriter().getAHeaderWrite() |
           hw.getHeaderName() = "content-type" and
           result = hw.getHeaderValue()
         )
@@ -201,7 +201,7 @@ module HTTP {
 
       /** Gets a dataflow node for a content-type associated with this body. */
       DataFlow::Node getAContentTypeNode() {
-        exists(HTTP::HeaderWrite hw | hw = this.getResponseWriter().getAHeaderWrite() |
+        exists(Http::HeaderWrite hw | hw = this.getResponseWriter().getAHeaderWrite() |
           hw.getHeaderName() = "content-type" and
           result = hw.getValue()
         )
@@ -378,3 +378,6 @@ module HTTP {
     predicate guardedBy(DataFlow::Node check) { self.guardedBy(check) }
   }
 }
+
+/** DEPRECATED: Alias for Http */
+deprecated module HTTP = Http;
diff --git a/go/ql/lib/semmle/go/frameworks/Beego.qll b/go/ql/lib/semmle/go/frameworks/Beego.qll
index edcf383c6be..6d927112584 100644
--- a/go/ql/lib/semmle/go/frameworks/Beego.qll
+++ b/go/ql/lib/semmle/go/frameworks/Beego.qll
@@ -114,7 +114,7 @@ module Beego {
     }
   }
 
-  private class BeegoOutputInstance extends HTTP::ResponseWriter::Range {
+  private class BeegoOutputInstance extends Http::ResponseWriter::Range {
     SsaWithFields v;
 
     BeegoOutputInstance() {
@@ -131,7 +131,7 @@ module Beego {
     }
   }
 
-  private class BeegoHeaderWrite extends HTTP::HeaderWrite::Range, DataFlow::MethodCallNode {
+  private class BeegoHeaderWrite extends Http::HeaderWrite::Range, DataFlow::MethodCallNode {
     string methodName;
 
     BeegoHeaderWrite() {
@@ -142,7 +142,7 @@ module Beego {
     override DataFlow::Node getName() { methodName = "Header" and result = this.getArgument(0) }
 
     override string getHeaderName() {
-      result = HTTP::HeaderWrite::Range.super.getHeaderName()
+      result = Http::HeaderWrite::Range.super.getHeaderName()
       or
       methodName = "ContentType" and result = "content-type"
     }
@@ -153,12 +153,12 @@ module Beego {
       else result = this.getArgument(1)
     }
 
-    override HTTP::ResponseWriter getResponseWriter() {
+    override Http::ResponseWriter getResponseWriter() {
       result.(BeegoOutputInstance).getAHeaderObject() = this
     }
   }
 
-  private class BeegoResponseBody extends HTTP::ResponseBody::Range {
+  private class BeegoResponseBody extends Http::ResponseBody::Range {
     DataFlow::MethodCallNode call;
     string methodName;
 
@@ -170,7 +170,7 @@ module Beego {
       methodName in ["Body", "JSON", "JSONP", "ServeFormatted", "XML", "YAML"]
     }
 
-    override HTTP::ResponseWriter getResponseWriter() { result.getANode() = call.getReceiver() }
+    override Http::ResponseWriter getResponseWriter() { result.getANode() = call.getReceiver() }
 
     override string getAContentType() {
       // Super-method provides content-types for `Body`, which requires us to search
@@ -192,7 +192,7 @@ module Beego {
     }
   }
 
-  private class ControllerResponseBody extends HTTP::ResponseBody::Range {
+  private class ControllerResponseBody extends Http::ResponseBody::Range {
     string name;
 
     ControllerResponseBody() {
@@ -203,7 +203,7 @@ module Beego {
       )
     }
 
-    override HTTP::ResponseWriter getResponseWriter() { none() }
+    override Http::ResponseWriter getResponseWriter() { none() }
 
     override string getAContentType() {
       // Actually SetData can serve JSON, XML or YAML depending on the incoming
@@ -213,7 +213,7 @@ module Beego {
     }
   }
 
-  private class ContextResponseBody extends HTTP::ResponseBody::Range {
+  private class ContextResponseBody extends Http::ResponseBody::Range {
     string name;
 
     ContextResponseBody() {
@@ -224,7 +224,7 @@ module Beego {
       )
     }
 
-    override HTTP::ResponseWriter getResponseWriter() { none() }
+    override Http::ResponseWriter getResponseWriter() { none() }
 
     // Neither method is likely to be used with well-typed data such as JSON output,
     // because there are better methods to do this. Assume the Content-Type could
@@ -314,7 +314,7 @@ module Beego {
     }
   }
 
-  private class RedirectMethods extends HTTP::Redirect::Range, DataFlow::CallNode {
+  private class RedirectMethods extends Http::Redirect::Range, DataFlow::CallNode {
     string package;
     string className;
 
@@ -333,7 +333,7 @@ module Beego {
       className = "Context" and result = this.getArgument(1)
     }
 
-    override HTTP::ResponseWriter getResponseWriter() { none() }
+    override Http::ResponseWriter getResponseWriter() { none() }
   }
 
   private class UtilsTaintPropagators extends TaintTracking::FunctionModel {
diff --git a/go/ql/lib/semmle/go/frameworks/Echo.qll b/go/ql/lib/semmle/go/frameworks/Echo.qll
index df58b492b87..c4d243b504c 100644
--- a/go/ql/lib/semmle/go/frameworks/Echo.qll
+++ b/go/ql/lib/semmle/go/frameworks/Echo.qll
@@ -29,7 +29,7 @@ private module Echo {
   /**
    * Data from a `Context` interface method that is not generally exploitable for open-redirect attacks.
    */
-  private class EchoContextRedirectUnexploitableSource extends HTTP::Redirect::UnexploitableSource {
+  private class EchoContextRedirectUnexploitableSource extends Http::Redirect::UnexploitableSource {
     EchoContextRedirectUnexploitableSource() {
       exists(DataFlow::MethodCallNode call, string methodName |
         methodName = ["FormValue", "FormParams", "FormFile", "MultipartForm", "Cookie", "Cookies"] and
@@ -77,14 +77,14 @@ private module Echo {
   /**
    * `echo.Context` methods which set the content-type to `text/html` and write a result in one operation.
    */
-  private class EchoHtmlOutputs extends HTTP::ResponseBody::Range {
+  private class EchoHtmlOutputs extends Http::ResponseBody::Range {
     EchoHtmlOutputs() {
       exists(Method m | m.hasQualifiedName(packagePath(), "Context", ["HTML", "HTMLBlob"]) |
         this = m.getACall().getArgument(1)
       )
     }
 
-    override HTTP::ResponseWriter getResponseWriter() { none() }
+    override Http::ResponseWriter getResponseWriter() { none() }
 
     override string getAContentType() { result = "text/html" }
   }
@@ -92,7 +92,7 @@ private module Echo {
   /**
    * `echo.Context` methods which take a content-type as a parameter.
    */
-  private class EchoParameterizedOutputs extends HTTP::ResponseBody::Range {
+  private class EchoParameterizedOutputs extends Http::ResponseBody::Range {
     DataFlow::CallNode callNode;
 
     EchoParameterizedOutputs() {
@@ -101,7 +101,7 @@ private module Echo {
       )
     }
 
-    override HTTP::ResponseWriter getResponseWriter() { none() }
+    override Http::ResponseWriter getResponseWriter() { none() }
 
     override DataFlow::Node getAContentTypeNode() { result = callNode.getArgument(1) }
   }
@@ -109,7 +109,7 @@ private module Echo {
   /**
    * The `echo.Context.Redirect` method.
    */
-  private class EchoRedirectMethod extends HTTP::Redirect::Range, DataFlow::CallNode {
+  private class EchoRedirectMethod extends Http::Redirect::Range, DataFlow::CallNode {
     EchoRedirectMethod() {
       exists(Method m | m.hasQualifiedName(packagePath(), "Context", "Redirect") |
         this = m.getACall()
@@ -118,6 +118,6 @@ private module Echo {
 
     override DataFlow::Node getUrl() { result = this.getArgument(1) }
 
-    override HTTP::ResponseWriter getResponseWriter() { none() }
+    override Http::ResponseWriter getResponseWriter() { none() }
   }
 }
diff --git a/go/ql/lib/semmle/go/frameworks/ElazarlGoproxy.qll b/go/ql/lib/semmle/go/frameworks/ElazarlGoproxy.qll
index 87c091fc3c5..42fb474a5f0 100644
--- a/go/ql/lib/semmle/go/frameworks/ElazarlGoproxy.qll
+++ b/go/ql/lib/semmle/go/frameworks/ElazarlGoproxy.qll
@@ -11,7 +11,7 @@ module ElazarlGoproxy {
   /** Gets the package name. */
   string packagePath() { result = package("github.com/elazarl/goproxy", "") }
 
-  private class NewResponse extends HTTP::HeaderWrite::Range, DataFlow::CallNode {
+  private class NewResponse extends Http::HeaderWrite::Range, DataFlow::CallNode {
     NewResponse() { this.getTarget().hasQualifiedName(packagePath(), "NewResponse") }
 
     override string getHeaderName() { this.definesHeader(result, _) }
@@ -28,21 +28,21 @@ module ElazarlGoproxy {
       header = "content-type" and value = this.getArgument(1).getStringValue()
     }
 
-    override HTTP::ResponseWriter getResponseWriter() { none() }
+    override Http::ResponseWriter getResponseWriter() { none() }
   }
 
   /** A body argument to a `NewResponse` call. */
-  private class NewResponseBody extends HTTP::ResponseBody::Range {
+  private class NewResponseBody extends Http::ResponseBody::Range {
     NewResponse call;
 
     NewResponseBody() { this = call.getArgument(3) }
 
     override DataFlow::Node getAContentTypeNode() { result = call.getArgument(1) }
 
-    override HTTP::ResponseWriter getResponseWriter() { none() }
+    override Http::ResponseWriter getResponseWriter() { none() }
   }
 
-  private class TextResponse extends HTTP::HeaderWrite::Range, DataFlow::CallNode {
+  private class TextResponse extends Http::HeaderWrite::Range, DataFlow::CallNode {
     TextResponse() { this.getTarget().hasQualifiedName(packagePath(), "TextResponse") }
 
     override string getHeaderName() { this.definesHeader(result, _) }
@@ -59,22 +59,22 @@ module ElazarlGoproxy {
       header = "content-type" and value = "text/plain"
     }
 
-    override HTTP::ResponseWriter getResponseWriter() { none() }
+    override Http::ResponseWriter getResponseWriter() { none() }
   }
 
   /** A body argument to a `TextResponse` call. */
-  private class TextResponseBody extends HTTP::ResponseBody::Range, TextResponse {
+  private class TextResponseBody extends Http::ResponseBody::Range, TextResponse {
     TextResponse call;
 
     TextResponseBody() { this = call.getArgument(2) }
 
     override DataFlow::Node getAContentTypeNode() { result = call.getArgument(1) }
 
-    override HTTP::ResponseWriter getResponseWriter() { none() }
+    override Http::ResponseWriter getResponseWriter() { none() }
   }
 
   /** A handler attached to a goproxy proxy type. */
-  private class ProxyHandler extends HTTP::RequestHandler::Range {
+  private class ProxyHandler extends Http::RequestHandler::Range {
     DataFlow::MethodCallNode handlerReg;
 
     ProxyHandler() {
diff --git a/go/ql/lib/semmle/go/frameworks/Macaron.qll b/go/ql/lib/semmle/go/frameworks/Macaron.qll
index a38b2b20da0..f107ec208ee 100644
--- a/go/ql/lib/semmle/go/frameworks/Macaron.qll
+++ b/go/ql/lib/semmle/go/frameworks/Macaron.qll
@@ -5,7 +5,7 @@
 import go
 
 private module Macaron {
-  private class Context extends HTTP::ResponseWriter::Range {
+  private class Context extends Http::ResponseWriter::Range {
     SsaWithFields v;
 
     Context() {
@@ -18,13 +18,13 @@ private module Macaron {
     override DataFlow::Node getANode() { result = v.similar().getAUse().getASuccessor*() }
   }
 
-  private class RedirectCall extends HTTP::Redirect::Range, DataFlow::MethodCallNode {
+  private class RedirectCall extends Http::Redirect::Range, DataFlow::MethodCallNode {
     RedirectCall() {
       this.getTarget().hasQualifiedName("gopkg.in/macaron.v1", "Context", "Redirect")
     }
 
     override DataFlow::Node getUrl() { result = this.getArgument(0) }
 
-    override HTTP::ResponseWriter getResponseWriter() { result.getANode() = this.getReceiver() }
+    override Http::ResponseWriter getResponseWriter() { result.getANode() = this.getReceiver() }
   }
 }
diff --git a/go/ql/lib/semmle/go/frameworks/Revel.qll b/go/ql/lib/semmle/go/frameworks/Revel.qll
index 1ccad431b84..d006f46b2ee 100644
--- a/go/ql/lib/semmle/go/frameworks/Revel.qll
+++ b/go/ql/lib/semmle/go/frameworks/Revel.qll
@@ -114,7 +114,7 @@ module Revel {
    * We look particularly for html file extensions, since these are the only ones we currently have special rules
    * for (in particular, detecting XSS vulnerabilities).
    */
-  private class ControllerRenderMethods extends HTTP::ResponseBody::Range {
+  private class ControllerRenderMethods extends Http::ResponseBody::Range {
     string contentType;
 
     ControllerRenderMethods() {
@@ -149,7 +149,7 @@ module Revel {
       )
     }
 
-    override HTTP::ResponseWriter getResponseWriter() { none() }
+    override Http::ResponseWriter getResponseWriter() { none() }
 
     override string getAContentType() { result = contentType }
   }
@@ -174,7 +174,7 @@ module Revel {
    * It is currently assumed that a tainted `value` in `Redirect(url, value)`, which calls `Sprintf(url, value)`
    * internally, cannot lead to an open redirect vulnerability.
    */
-  private class ControllerRedirectMethod extends HTTP::Redirect::Range, DataFlow::CallNode {
+  private class ControllerRedirectMethod extends Http::Redirect::Range, DataFlow::CallNode {
     ControllerRedirectMethod() {
       exists(Method m | m.hasQualifiedName(packagePath(), "Controller", "Redirect") |
         this = m.getACall()
@@ -183,7 +183,7 @@ module Revel {
 
     override DataFlow::Node getUrl() { result = this.getArgument(0) }
 
-    override HTTP::ResponseWriter getResponseWriter() { none() }
+    override Http::ResponseWriter getResponseWriter() { none() }
   }
 
   /**
@@ -226,7 +226,7 @@ module Revel {
   /**
    * A write to a template argument field that is read raw inside of a template.
    */
-  private class RawTemplateArgument extends HTTP::TemplateResponseBody::Range {
+  private class RawTemplateArgument extends Http::TemplateResponseBody::Range {
     RawTemplateRead read;
 
     RawTemplateArgument() {
@@ -261,7 +261,7 @@ module Revel {
 
     override string getAContentType() { result = "text/html" }
 
-    override HTTP::ResponseWriter getResponseWriter() { none() }
+    override Http::ResponseWriter getResponseWriter() { none() }
 
     override HtmlTemplate::TemplateRead getRead() { result = read }
   }
diff --git a/go/ql/lib/semmle/go/frameworks/Stdlib.qll b/go/ql/lib/semmle/go/frameworks/Stdlib.qll
index b8481175216..db46167d205 100644
--- a/go/ql/lib/semmle/go/frameworks/Stdlib.qll
+++ b/go/ql/lib/semmle/go/frameworks/Stdlib.qll
@@ -128,7 +128,7 @@ module IntegerParser {
 }
 
 /** Provides models of commonly used functions in the `net/url` package. */
-module URL {
+module Url {
   /** The `PathEscape` or `QueryEscape` function. */
   class Escaper extends TaintTracking::FunctionModel {
     Escaper() {
@@ -263,3 +263,6 @@ module URL {
     }
   }
 }
+
+/** DEPRECATED: Alias for Url */
+deprecated module URL = Url;
diff --git a/go/ql/lib/semmle/go/frameworks/stdlib/NetHttp.qll b/go/ql/lib/semmle/go/frameworks/stdlib/NetHttp.qll
index c5e48e7d295..e0518ecf465 100644
--- a/go/ql/lib/semmle/go/frameworks/stdlib/NetHttp.qll
+++ b/go/ql/lib/semmle/go/frameworks/stdlib/NetHttp.qll
@@ -35,7 +35,7 @@ module NetHttp {
   }
 
   /** The declaration of a variable which either is or has a field that implements the http.ResponseWriter type */
-  private class StdlibResponseWriter extends HTTP::ResponseWriter::Range {
+  private class StdlibResponseWriter extends Http::ResponseWriter::Range {
     SsaWithFields v;
 
     StdlibResponseWriter() {
@@ -52,7 +52,7 @@ module NetHttp {
     }
   }
 
-  private class HeaderWriteCall extends HTTP::HeaderWrite::Range, DataFlow::MethodCallNode {
+  private class HeaderWriteCall extends Http::HeaderWrite::Range, DataFlow::MethodCallNode {
     HeaderWriteCall() {
       this.getTarget().hasQualifiedName("net/http", "Header", "Add") or
       this.getTarget().hasQualifiedName("net/http", "Header", "Set")
@@ -62,7 +62,7 @@ module NetHttp {
 
     override DataFlow::Node getValue() { result = this.getArgument(1) }
 
-    override HTTP::ResponseWriter getResponseWriter() {
+    override Http::ResponseWriter getResponseWriter() {
       // find `v` in
       // ```
       // header := v.Header()
@@ -72,7 +72,7 @@ module NetHttp {
     }
   }
 
-  private class MapWrite extends HTTP::HeaderWrite::Range, DataFlow::Node {
+  private class MapWrite extends Http::HeaderWrite::Range, DataFlow::Node {
     Write write;
     DataFlow::Node index;
     DataFlow::Node rhs;
@@ -86,7 +86,7 @@ module NetHttp {
 
     override DataFlow::Node getValue() { result = rhs }
 
-    override HTTP::ResponseWriter getResponseWriter() {
+    override Http::ResponseWriter getResponseWriter() {
       // find `v` in
       // ```
       // header := v.Header()
@@ -96,7 +96,7 @@ module NetHttp {
     }
   }
 
-  private class ResponseWriteHeaderCall extends HTTP::HeaderWrite::Range, DataFlow::MethodCallNode {
+  private class ResponseWriteHeaderCall extends Http::HeaderWrite::Range, DataFlow::MethodCallNode {
     ResponseWriteHeaderCall() {
       this.getTarget().implements("net/http", "ResponseWriter", "WriteHeader")
     }
@@ -107,10 +107,10 @@ module NetHttp {
 
     override DataFlow::Node getValue() { result = this.getArgument(0) }
 
-    override HTTP::ResponseWriter getResponseWriter() { result.getANode() = this.getReceiver() }
+    override Http::ResponseWriter getResponseWriter() { result.getANode() = this.getReceiver() }
   }
 
-  private class ResponseErrorCall extends HTTP::HeaderWrite::Range, DataFlow::CallNode {
+  private class ResponseErrorCall extends Http::HeaderWrite::Range, DataFlow::CallNode {
     ResponseErrorCall() { this.getTarget().hasQualifiedName("net/http", "Error") }
 
     override string getHeaderName() { result = "status" }
@@ -119,10 +119,10 @@ module NetHttp {
 
     override DataFlow::Node getValue() { result = this.getArgument(2) }
 
-    override HTTP::ResponseWriter getResponseWriter() { result.getANode() = this.getArgument(0) }
+    override Http::ResponseWriter getResponseWriter() { result.getANode() = this.getArgument(0) }
   }
 
-  private class RequestBody extends HTTP::RequestBody::Range, DataFlow::ExprNode {
+  private class RequestBody extends Http::RequestBody::Range, DataFlow::ExprNode {
     RequestBody() {
       exists(Function newRequest |
         newRequest.hasQualifiedName("net/http", "NewRequest") and
@@ -137,7 +137,7 @@ module NetHttp {
     }
   }
 
-  private class ResponseBody extends HTTP::ResponseBody::Range, DataFlow::ArgumentNode {
+  private class ResponseBody extends Http::ResponseBody::Range, DataFlow::ArgumentNode {
     DataFlow::Node responseWriter;
 
     ResponseBody() {
@@ -156,19 +156,19 @@ module NetHttp {
       )
     }
 
-    override HTTP::ResponseWriter getResponseWriter() { result.getANode() = responseWriter }
+    override Http::ResponseWriter getResponseWriter() { result.getANode() = responseWriter }
   }
 
-  private class RedirectCall extends HTTP::Redirect::Range, DataFlow::CallNode {
+  private class RedirectCall extends Http::Redirect::Range, DataFlow::CallNode {
     RedirectCall() { this.getTarget().hasQualifiedName("net/http", "Redirect") }
 
     override DataFlow::Node getUrl() { result = this.getArgument(2) }
 
-    override HTTP::ResponseWriter getResponseWriter() { result.getANode() = this.getArgument(0) }
+    override Http::ResponseWriter getResponseWriter() { result.getANode() = this.getArgument(0) }
   }
 
   /** A call to a function in the `net/http` package that performs an HTTP request to a URL. */
-  private class RequestCall extends HTTP::ClientRequest::Range, DataFlow::CallNode {
+  private class RequestCall extends Http::ClientRequest::Range, DataFlow::CallNode {
     RequestCall() {
       exists(string functionName |
         (
@@ -185,7 +185,7 @@ module NetHttp {
   }
 
   /** A call to the Client.Do function in the `net/http` package. */
-  private class ClientDo extends HTTP::ClientRequest::Range, DataFlow::MethodCallNode {
+  private class ClientDo extends Http::ClientRequest::Range, DataFlow::MethodCallNode {
     ClientDo() { this.getTarget().hasQualifiedName("net/http", "Client", "Do") }
 
     override DataFlow::Node getUrl() {
@@ -212,7 +212,7 @@ module NetHttp {
   }
 
   /** A call to the `Transport.RoundTrip` function in the `net/http` package. */
-  private class TransportRoundTrip extends HTTP::ClientRequest::Range, DataFlow::MethodCallNode {
+  private class TransportRoundTrip extends Http::ClientRequest::Range, DataFlow::MethodCallNode {
     TransportRoundTrip() { this.getTarget().hasQualifiedName("net/http", "Transport", "RoundTrip") }
 
     override DataFlow::Node getUrl() {
@@ -239,7 +239,7 @@ module NetHttp {
   }
 
   /** Fields and methods of `net/http.Request` that are not generally exploitable in an open-redirect attack. */
-  private class RedirectUnexploitableRequestFields extends HTTP::Redirect::UnexploitableSource {
+  private class RedirectUnexploitableRequestFields extends Http::Redirect::UnexploitableSource {
     RedirectUnexploitableRequestFields() {
       exists(Field f, string fieldName |
         f.hasQualifiedName("net/http", "Request", fieldName) and
@@ -257,7 +257,7 @@ module NetHttp {
     }
   }
 
-  private class Handler extends HTTP::RequestHandler::Range {
+  private class Handler extends Http::RequestHandler::Range {
     DataFlow::CallNode handlerReg;
 
     Handler() {
diff --git a/go/ql/lib/semmle/go/security/OpenUrlRedirectCustomizations.qll b/go/ql/lib/semmle/go/security/OpenUrlRedirectCustomizations.qll
index d883c3c0101..80b9bb4a126 100644
--- a/go/ql/lib/semmle/go/security/OpenUrlRedirectCustomizations.qll
+++ b/go/ql/lib/semmle/go/security/OpenUrlRedirectCustomizations.qll
@@ -56,7 +56,7 @@ module OpenUrlRedirect {
     UntrustedFlowAsSource() {
       // exclude some fields and methods of URLs that are generally not attacker-controllable for
       // open redirect exploits
-      not this instanceof HTTP::Redirect::UnexploitableSource
+      not this instanceof Http::Redirect::UnexploitableSource
     }
   }
 
@@ -64,7 +64,7 @@ module OpenUrlRedirect {
    * An HTTP redirect, considered as a sink for `Configuration`.
    */
   class RedirectSink extends Sink, DataFlow::Node {
-    RedirectSink() { this = any(HTTP::Redirect redir).getUrl() }
+    RedirectSink() { this = any(Http::Redirect redir).getUrl() }
   }
 
   /**
@@ -73,7 +73,7 @@ module OpenUrlRedirect {
    */
   class LocationHeaderSink extends Sink, DataFlow::Node {
     LocationHeaderSink() {
-      exists(HTTP::HeaderWrite hw | hw.getHeaderName() = "location" | this = hw.getValue())
+      exists(Http::HeaderWrite hw | hw.getHeaderName() = "location" | this = hw.getValue())
     }
   }
 
diff --git a/go/ql/lib/semmle/go/security/RequestForgeryCustomizations.qll b/go/ql/lib/semmle/go/security/RequestForgeryCustomizations.qll
index b75b3503d55..b11157daa06 100644
--- a/go/ql/lib/semmle/go/security/RequestForgeryCustomizations.qll
+++ b/go/ql/lib/semmle/go/security/RequestForgeryCustomizations.qll
@@ -48,7 +48,7 @@ module RequestForgery {
    * The URL of an HTTP request, viewed as a sink for request forgery.
    */
   private class ClientRequestUrlAsSink extends Sink {
-    HTTP::ClientRequest request;
+    Http::ClientRequest request;
 
     ClientRequestUrlAsSink() { this = request.getUrl() }
 
diff --git a/go/ql/lib/semmle/go/security/SafeUrlFlowCustomizations.qll b/go/ql/lib/semmle/go/security/SafeUrlFlowCustomizations.qll
index de0f95f8f3a..dbdb96a10a7 100644
--- a/go/ql/lib/semmle/go/security/SafeUrlFlowCustomizations.qll
+++ b/go/ql/lib/semmle/go/security/SafeUrlFlowCustomizations.qll
@@ -27,7 +27,7 @@ module SafeUrlFlow {
   /**
    * A method on a `net/url.URL` that is considered unsafe to use.
    */
-  private class UnsafeUrlMethod extends URL::UrlGetter {
+  private class UnsafeUrlMethod extends Url::UrlGetter {
     UnsafeUrlMethod() { this.getName() = "Query" }
   }
 
diff --git a/go/ql/lib/semmle/go/security/Xss.qll b/go/ql/lib/semmle/go/security/Xss.qll
index 2ed5c5761a7..e9301646f77 100644
--- a/go/ql/lib/semmle/go/security/Xss.qll
+++ b/go/ql/lib/semmle/go/security/Xss.qll
@@ -46,14 +46,14 @@ module SharedXss {
    * a content type that does not (case-insensitively) contain the string "html". This
    * is to prevent us from flagging plain-text or JSON responses as vulnerable.
    */
-  class HttpResponseBodySink extends Sink, HTTP::ResponseBody {
+  class HttpResponseBodySink extends Sink, Http::ResponseBody {
     HttpResponseBodySink() { not nonHtmlContentType(this) }
   }
 
   /**
    * An expression that is rendered as part of a template.
    */
-  class RawTemplateInstantiationSink extends HttpResponseBodySink, HTTP::TemplateResponseBody {
+  class RawTemplateInstantiationSink extends HttpResponseBodySink, Http::TemplateResponseBody {
     override string getSinkKind() { result = "rawtemplate" }
 
     override Locatable getAssociatedLoc() { result = this.getRead().getEnclosingTextNode() }
@@ -62,7 +62,7 @@ module SharedXss {
   /**
    * Holds if `body` may send a response with a content type other than HTML.
    */
-  private predicate nonHtmlContentType(HTTP::ResponseBody body) {
+  private predicate nonHtmlContentType(Http::ResponseBody body) {
     not htmlTypeSpecified(body) and
     (
       exists(body.getAContentType())
@@ -90,7 +90,7 @@ module SharedXss {
   /**
    * Holds if `body` specifies the response's content type to be HTML.
    */
-  private predicate htmlTypeSpecified(HTTP::ResponseBody body) {
+  private predicate htmlTypeSpecified(Http::ResponseBody body) {
     body.getAContentType().regexpMatch("(?i).*html.*")
   }
 
diff --git a/go/ql/src/Security/CWE-020/IncompleteHostnameRegexp.ql b/go/ql/src/Security/CWE-020/IncompleteHostnameRegexp.ql
index a6ce8c8c8b6..4272d1cc27e 100644
--- a/go/ql/src/Security/CWE-020/IncompleteHostnameRegexp.ql
+++ b/go/ql/src/Security/CWE-020/IncompleteHostnameRegexp.ql
@@ -33,7 +33,7 @@ predicate isIncompleteHostNameRegexpPattern(string pattern, string hostPart) {
 
 /** Holds if `b` sets the HTTP status code (represented by a pseudo-header named  `status`) */
 predicate writesHttpError(ReachableBasicBlock b) {
-  forex(HTTP::HeaderWrite hw |
+  forex(Http::HeaderWrite hw |
     hw.getHeaderName() = "status" and hw.asInstruction().getBasicBlock() = b
   |
     exists(string code | code.matches("4__") or code.matches("5__") |
@@ -65,7 +65,7 @@ DataFlow::Node getASafeHandler() {
 }
 
 /** Holds if `regexp` is used in a check before `handler` is called. */
-predicate regexpGuardsHandler(RegexpPattern regexp, HTTP::RequestHandler handler) {
+predicate regexpGuardsHandler(RegexpPattern regexp, Http::RequestHandler handler) {
   handler.guardedBy(DataFlow::exprNode(regexp.getAUse().asExpr().getParent*()))
 }
 
@@ -99,7 +99,7 @@ class Config extends DataFlow::Configuration {
 
   override predicate isSink(DataFlow::Node sink) {
     sink instanceof RegexpPattern and
-    forall(HTTP::RequestHandler handler | regexpGuardsHandler(sink, handler) |
+    forall(Http::RequestHandler handler | regexpGuardsHandler(sink, handler) |
       not handler = getASafeHandler()
     ) and
     not regexpGuardsError(sink)
diff --git a/go/ql/src/Security/CWE-209/StackTraceExposure.ql b/go/ql/src/Security/CWE-209/StackTraceExposure.ql
index a2005663784..369c8109d47 100644
--- a/go/ql/src/Security/CWE-209/StackTraceExposure.ql
+++ b/go/ql/src/Security/CWE-209/StackTraceExposure.ql
@@ -60,7 +60,7 @@ class StackTraceExposureConfig extends TaintTracking::Configuration {
     node = any(DebugStackFunction f).getACall().getResult()
   }
 
-  override predicate isSink(DataFlow::Node node) { node instanceof HTTP::ResponseBody }
+  override predicate isSink(DataFlow::Node node) { node instanceof Http::ResponseBody }
 
   override predicate isSanitizer(DataFlow::Node node) {
     // Sanitise everything controlled by an is-debug-mode check.
diff --git a/go/ql/src/experimental/CWE-918/SSRF.qll b/go/ql/src/experimental/CWE-918/SSRF.qll
index b7a408902d0..cf264c8c0b6 100644
--- a/go/ql/src/experimental/CWE-918/SSRF.qll
+++ b/go/ql/src/experimental/CWE-918/SSRF.qll
@@ -74,7 +74,7 @@ module ServerSideRequestForgery {
    * The URL of an HTTP request, viewed as a sink for request forgery.
    */
   private class ClientRequestUrlAsSink extends Sink {
-    HTTP::ClientRequest request;
+    Http::ClientRequest request;
 
     ClientRequestUrlAsSink() { this = request.getUrl() }
 
diff --git a/go/ql/src/experimental/CWE-942/CorsMisconfiguration.ql b/go/ql/src/experimental/CWE-942/CorsMisconfiguration.ql
index 4e4b452fb8e..372b1c21642 100644
--- a/go/ql/src/experimental/CWE-942/CorsMisconfiguration.ql
+++ b/go/ql/src/experimental/CWE-942/CorsMisconfiguration.ql
@@ -41,14 +41,14 @@ string headerAllowCredentials() { result = "Access-Control-Allow-Credentials".to
 /**
  * An `Access-Control-Allow-Origin` header write.
  */
-class AllowOriginHeaderWrite extends HTTP::HeaderWrite {
+class AllowOriginHeaderWrite extends Http::HeaderWrite {
   AllowOriginHeaderWrite() { this.getHeaderName() = headerAllowOrigin() }
 }
 
 /**
  * An `Access-Control-Allow-Credentials` header write.
  */
-class AllowCredentialsHeaderWrite extends HTTP::HeaderWrite {
+class AllowCredentialsHeaderWrite extends Http::HeaderWrite {
   AllowCredentialsHeaderWrite() { this.getHeaderName() = headerAllowCredentials() }
 }
 
diff --git a/go/ql/src/experimental/frameworks/CleverGo.qll b/go/ql/src/experimental/frameworks/CleverGo.qll
index c061c416b88..99d57a46189 100644
--- a/go/ql/src/experimental/frameworks/CleverGo.qll
+++ b/go/ql/src/experimental/frameworks/CleverGo.qll
@@ -174,7 +174,7 @@ private module CleverGo {
   /**
    * Models HTTP redirects.
    */
-  private class HttpRedirect extends HTTP::Redirect::Range, DataFlow::CallNode {
+  private class HttpRedirect extends Http::Redirect::Range, DataFlow::CallNode {
     string package;
     DataFlow::Node urlNode;
 
@@ -191,13 +191,13 @@ private module CleverGo {
 
     override DataFlow::Node getUrl() { result = urlNode }
 
-    override HTTP::ResponseWriter getResponseWriter() { result.getANode() = this.getReceiver() }
+    override Http::ResponseWriter getResponseWriter() { result.getANode() = this.getReceiver() }
   }
 
   /**
    * Models HTTP ResponseBody where the content-type is static and non-modifiable.
    */
-  private class HttpResponseBodyStaticContentType extends HTTP::ResponseBody::Range {
+  private class HttpResponseBodyStaticContentType extends Http::ResponseBody::Range {
     string contentTypeString;
     DataFlow::Node receiverNode;
 
@@ -209,7 +209,7 @@ private module CleverGo {
 
     override string getAContentType() { result = contentTypeString }
 
-    override HTTP::ResponseWriter getResponseWriter() { result.getANode() = receiverNode }
+    override Http::ResponseWriter getResponseWriter() { result.getANode() = receiverNode }
   }
 
   // Holds for a call that sets the body; the content-type is implicitly set.
@@ -304,7 +304,7 @@ private module CleverGo {
   /**
    * Models HTTP ResponseBody where the content-type can be dynamically set by the caller.
    */
-  private class HttpResponseBodyDynamicContentType extends HTTP::ResponseBody::Range {
+  private class HttpResponseBodyDynamicContentType extends Http::ResponseBody::Range {
     DataFlow::Node contentTypeNode;
     DataFlow::Node receiverNode;
 
@@ -316,7 +316,7 @@ private module CleverGo {
 
     override DataFlow::Node getAContentTypeNode() { result = contentTypeNode }
 
-    override HTTP::ResponseWriter getResponseWriter() { result.getANode() = receiverNode }
+    override Http::ResponseWriter getResponseWriter() { result.getANode() = receiverNode }
   }
 
   // Holds for a call that sets the body; the content-type is a parameter.
@@ -352,7 +352,7 @@ private module CleverGo {
   /**
    * Models HTTP ResponseBody where only the body is set.
    */
-  private class HttpResponseBodyNoContentType extends HTTP::ResponseBody::Range {
+  private class HttpResponseBodyNoContentType extends Http::ResponseBody::Range {
     DataFlow::Node receiverNode;
 
     HttpResponseBodyNoContentType() {
@@ -361,7 +361,7 @@ private module CleverGo {
       )
     }
 
-    override HTTP::ResponseWriter getResponseWriter() { result.getANode() = receiverNode }
+    override Http::ResponseWriter getResponseWriter() { result.getANode() = receiverNode }
   }
 
   // Holds for a call that sets the body. The content-type is not defined.
@@ -394,7 +394,7 @@ private module CleverGo {
    * Models HTTP header writers.
    * The write is done with a call where you can set both the key and the value of the header.
    */
-  private class HeaderWrite extends HTTP::HeaderWrite::Range, DataFlow::CallNode {
+  private class HeaderWrite extends Http::HeaderWrite::Range, DataFlow::CallNode {
     DataFlow::Node receiverNode;
     DataFlow::Node headerNameNode;
     DataFlow::Node headerValueNode;
@@ -407,7 +407,7 @@ private module CleverGo {
 
     override DataFlow::Node getValue() { result = headerValueNode }
 
-    override HTTP::ResponseWriter getResponseWriter() { result.getANode() = receiverNode }
+    override Http::ResponseWriter getResponseWriter() { result.getANode() = receiverNode }
   }
 
   // Holds for a call that sets a header with a key-value combination.
@@ -437,7 +437,7 @@ private module CleverGo {
   /**
    * Models an HTTP static content-type header setter.
    */
-  private class StaticContentTypeHeaderSetter extends HTTP::HeaderWrite::Range, DataFlow::CallNode {
+  private class StaticContentTypeHeaderSetter extends Http::HeaderWrite::Range, DataFlow::CallNode {
     DataFlow::Node receiverNode;
     string valueString;
 
@@ -453,7 +453,7 @@ private module CleverGo {
 
     override DataFlow::Node getValue() { none() }
 
-    override HTTP::ResponseWriter getResponseWriter() { result.getANode() = receiverNode }
+    override Http::ResponseWriter getResponseWriter() { result.getANode() = receiverNode }
   }
 
   // Holds for a call that sets the content-type header (implicit).
@@ -494,7 +494,7 @@ private module CleverGo {
   /**
    * Models an HTTP dynamic content-type header setter.
    */
-  private class DynamicContentTypeHeaderSetter extends HTTP::HeaderWrite::Range, DataFlow::CallNode {
+  private class DynamicContentTypeHeaderSetter extends Http::HeaderWrite::Range, DataFlow::CallNode {
     DataFlow::Node receiverNode;
     DataFlow::Node valueNode;
 
@@ -508,7 +508,7 @@ private module CleverGo {
 
     override DataFlow::Node getValue() { result = valueNode }
 
-    override HTTP::ResponseWriter getResponseWriter() { result.getANode() = receiverNode }
+    override Http::ResponseWriter getResponseWriter() { result.getANode() = receiverNode }
   }
 
   // Holds for a call that sets the content-type header via a parameter.
diff --git a/go/ql/src/experimental/frameworks/Fiber.qll b/go/ql/src/experimental/frameworks/Fiber.qll
index a3240a0b85a..3a7e71e204e 100644
--- a/go/ql/src/experimental/frameworks/Fiber.qll
+++ b/go/ql/src/experimental/frameworks/Fiber.qll
@@ -129,7 +129,7 @@ private module Fiber {
   /**
    * Models HTTP redirects.
    */
-  private class Redirect extends HTTP::Redirect::Range, DataFlow::CallNode {
+  private class Redirect extends Http::Redirect::Range, DataFlow::CallNode {
     string package;
     DataFlow::Node urlNode;
 
@@ -146,14 +146,14 @@ private module Fiber {
 
     override DataFlow::Node getUrl() { result = urlNode }
 
-    override HTTP::ResponseWriter getResponseWriter() { result.getANode() = this.getReceiver() }
+    override Http::ResponseWriter getResponseWriter() { result.getANode() = this.getReceiver() }
   }
 
   /**
    * Models HTTP header writers.
    * The write is done with a call where you can set both the key and the value of the header.
    */
-  private class HeaderWrite extends HTTP::HeaderWrite::Range, DataFlow::CallNode {
+  private class HeaderWrite extends Http::HeaderWrite::Range, DataFlow::CallNode {
     DataFlow::Node receiverNode;
     DataFlow::Node headerNameNode;
     DataFlow::Node headerValueNode;
@@ -166,7 +166,7 @@ private module Fiber {
 
     override DataFlow::Node getValue() { result = headerValueNode }
 
-    override HTTP::ResponseWriter getResponseWriter() { result.getANode() = receiverNode }
+    override Http::ResponseWriter getResponseWriter() { result.getANode() = receiverNode }
   }
 
   // Holds for a call that sets a header with a key-value combination.
@@ -201,7 +201,7 @@ private module Fiber {
   /**
    * Models HTTP ResponseBody where the content-type is static and non-modifiable.
    */
-  private class ResponseBodyStaticContentType extends HTTP::ResponseBody::Range {
+  private class ResponseBodyStaticContentType extends Http::ResponseBody::Range {
     string contentTypeString;
     DataFlow::Node receiverNode;
 
@@ -213,7 +213,7 @@ private module Fiber {
 
     override string getAContentType() { result = contentTypeString }
 
-    override HTTP::ResponseWriter getResponseWriter() { result.getANode() = receiverNode }
+    override Http::ResponseWriter getResponseWriter() { result.getANode() = receiverNode }
   }
 
   // Holds for a call that sets the body; the content-type is implicitly set.
@@ -248,7 +248,7 @@ private module Fiber {
   /**
    * Models HTTP ResponseBody where only the body is set.
    */
-  private class ResponseBodyNoContentType extends HTTP::ResponseBody::Range {
+  private class ResponseBodyNoContentType extends Http::ResponseBody::Range {
     DataFlow::Node receiverNode;
 
     ResponseBodyNoContentType() {
@@ -257,7 +257,7 @@ private module Fiber {
       )
     }
 
-    override HTTP::ResponseWriter getResponseWriter() { result.getANode() = receiverNode }
+    override Http::ResponseWriter getResponseWriter() { result.getANode() = receiverNode }
   }
 
   // Holds for a call that sets the body. The content-type is not defined.
diff --git a/go/ql/test/experimental/frameworks/CleverGo/HeaderWrite.ql b/go/ql/test/experimental/frameworks/CleverGo/HeaderWrite.ql
index 3f33ae98248..20dc73705a8 100644
--- a/go/ql/test/experimental/frameworks/CleverGo/HeaderWrite.ql
+++ b/go/ql/test/experimental/frameworks/CleverGo/HeaderWrite.ql
@@ -11,7 +11,7 @@ class HttpHeaderWriteTest extends InlineExpectationsTest {
 
   override predicate hasActualResult(Location location, string element, string tag, string value) {
     // Dynamic key-value header:
-    exists(HTTP::HeaderWrite hw |
+    exists(Http::HeaderWrite hw |
       hw.hasLocationInfo(location.getFile().getAbsolutePath(), location.getStartLine(),
         location.getStartColumn(), location.getEndLine(), location.getEndColumn()) and
       (
@@ -26,7 +26,7 @@ class HttpHeaderWriteTest extends InlineExpectationsTest {
     )
     or
     // Static key, dynamic value header:
-    exists(HTTP::HeaderWrite hw |
+    exists(Http::HeaderWrite hw |
       hw.hasLocationInfo(location.getFile().getAbsolutePath(), location.getStartLine(),
         location.getStartColumn(), location.getEndLine(), location.getEndColumn()) and
       (
@@ -41,7 +41,7 @@ class HttpHeaderWriteTest extends InlineExpectationsTest {
     )
     or
     // Static key, static value header:
-    exists(HTTP::HeaderWrite hw |
+    exists(Http::HeaderWrite hw |
       hw.hasLocationInfo(location.getFile().getAbsolutePath(), location.getStartLine(),
         location.getStartColumn(), location.getEndLine(), location.getEndColumn()) and
       (
diff --git a/go/ql/test/experimental/frameworks/CleverGo/HttpRedirect.ql b/go/ql/test/experimental/frameworks/CleverGo/HttpRedirect.ql
index 5ceb813cec9..4b7bcb7823c 100644
--- a/go/ql/test/experimental/frameworks/CleverGo/HttpRedirect.ql
+++ b/go/ql/test/experimental/frameworks/CleverGo/HttpRedirect.ql
@@ -9,7 +9,7 @@ class HttpRedirectTest extends InlineExpectationsTest {
 
   override predicate hasActualResult(Location location, string element, string tag, string value) {
     tag = "redirectUrl" and
-    exists(HTTP::Redirect rd |
+    exists(Http::Redirect rd |
       rd.hasLocationInfo(location.getFile().getAbsolutePath(), location.getStartLine(),
         location.getStartColumn(), location.getEndLine(), location.getEndColumn()) and
       element = rd.getUrl().toString() and
diff --git a/go/ql/test/experimental/frameworks/CleverGo/HttpResponseBody.ql b/go/ql/test/experimental/frameworks/CleverGo/HttpResponseBody.ql
index 33c3f94ec07..a2b3dc62167 100644
--- a/go/ql/test/experimental/frameworks/CleverGo/HttpResponseBody.ql
+++ b/go/ql/test/experimental/frameworks/CleverGo/HttpResponseBody.ql
@@ -8,7 +8,7 @@ class HttpResponseBodyTest extends InlineExpectationsTest {
   override string getARelevantTag() { result = ["contentType", "responseBody"] }
 
   override predicate hasActualResult(Location location, string element, string tag, string value) {
-    exists(HTTP::ResponseBody rd |
+    exists(Http::ResponseBody rd |
       rd.hasLocationInfo(location.getFile().getAbsolutePath(), location.getStartLine(),
         location.getStartColumn(), location.getEndLine(), location.getEndColumn()) and
       (
diff --git a/go/ql/test/experimental/frameworks/Fiber/HeaderWrite.ql b/go/ql/test/experimental/frameworks/Fiber/HeaderWrite.ql
index d83883f45a7..0130172e7d0 100644
--- a/go/ql/test/experimental/frameworks/Fiber/HeaderWrite.ql
+++ b/go/ql/test/experimental/frameworks/Fiber/HeaderWrite.ql
@@ -11,7 +11,7 @@ class HttpHeaderWriteTest extends InlineExpectationsTest {
 
   override predicate hasActualResult(Location location, string element, string tag, string value) {
     // Dynamic key-value header:
-    exists(HTTP::HeaderWrite hw |
+    exists(Http::HeaderWrite hw |
       hw.hasLocationInfo(location.getFile().getAbsolutePath(), location.getStartLine(),
         location.getStartColumn(), location.getEndLine(), location.getEndColumn()) and
       (
@@ -26,7 +26,7 @@ class HttpHeaderWriteTest extends InlineExpectationsTest {
     )
     or
     // Static key, dynamic value header:
-    exists(HTTP::HeaderWrite hw |
+    exists(Http::HeaderWrite hw |
       hw.hasLocationInfo(location.getFile().getAbsolutePath(), location.getStartLine(),
         location.getStartColumn(), location.getEndLine(), location.getEndColumn()) and
       (
@@ -41,7 +41,7 @@ class HttpHeaderWriteTest extends InlineExpectationsTest {
     )
     or
     // Static key, static value header:
-    exists(HTTP::HeaderWrite hw |
+    exists(Http::HeaderWrite hw |
       hw.hasLocationInfo(location.getFile().getAbsolutePath(), location.getStartLine(),
         location.getStartColumn(), location.getEndLine(), location.getEndColumn()) and
       (
diff --git a/go/ql/test/experimental/frameworks/Fiber/Redirect.ql b/go/ql/test/experimental/frameworks/Fiber/Redirect.ql
index 68d5bee465c..37bb0f97bfb 100644
--- a/go/ql/test/experimental/frameworks/Fiber/Redirect.ql
+++ b/go/ql/test/experimental/frameworks/Fiber/Redirect.ql
@@ -9,7 +9,7 @@ class HttpRedirectTest extends InlineExpectationsTest {
 
   override predicate hasActualResult(Location location, string element, string tag, string value) {
     tag = "redirectUrl" and
-    exists(HTTP::Redirect rd |
+    exists(Http::Redirect rd |
       rd.hasLocationInfo(location.getFile().getAbsolutePath(), location.getStartLine(),
         location.getStartColumn(), location.getEndLine(), location.getEndColumn()) and
       element = rd.getUrl().toString() and
diff --git a/go/ql/test/experimental/frameworks/Fiber/ResponseBody.ql b/go/ql/test/experimental/frameworks/Fiber/ResponseBody.ql
index 4361b2fda6a..74a9008749d 100644
--- a/go/ql/test/experimental/frameworks/Fiber/ResponseBody.ql
+++ b/go/ql/test/experimental/frameworks/Fiber/ResponseBody.ql
@@ -8,7 +8,7 @@ class HttpResponseBodyTest extends InlineExpectationsTest {
   override string getARelevantTag() { result = ["contentType", "responseBody"] }
 
   override predicate hasActualResult(Location location, string element, string tag, string value) {
-    exists(HTTP::ResponseBody rd |
+    exists(Http::ResponseBody rd |
       rd.hasLocationInfo(location.getFile().getAbsolutePath(), location.getStartLine(),
         location.getStartColumn(), location.getEndLine(), location.getEndColumn()) and
       (
diff --git a/go/ql/test/library-tests/semmle/go/concepts/HTTP/Handler.ql b/go/ql/test/library-tests/semmle/go/concepts/HTTP/Handler.ql
index e0b0acd426b..c6972eba275 100644
--- a/go/ql/test/library-tests/semmle/go/concepts/HTTP/Handler.ql
+++ b/go/ql/test/library-tests/semmle/go/concepts/HTTP/Handler.ql
@@ -8,7 +8,7 @@ class HttpHandler extends InlineExpectationsTest {
 
   override predicate hasActualResult(Location location, string element, string tag, string value) {
     tag = "handler" and
-    exists(HTTP::RequestHandler h, DataFlow::Node check |
+    exists(Http::RequestHandler h, DataFlow::Node check |
       element = h.toString() and value = check.toString()
     |
       h.hasLocationInfo(location.getFile().getAbsolutePath(), location.getStartLine(),
diff --git a/go/ql/test/library-tests/semmle/go/concepts/HTTP/Header.ql b/go/ql/test/library-tests/semmle/go/concepts/HTTP/Header.ql
index e5449bf3e53..0ec82e5ad89 100644
--- a/go/ql/test/library-tests/semmle/go/concepts/HTTP/Header.ql
+++ b/go/ql/test/library-tests/semmle/go/concepts/HTTP/Header.ql
@@ -1,6 +1,6 @@
 import go
 
-from HTTP::HeaderWrite headerWrite, string name, string value, string definedName, string definedVal
+from Http::HeaderWrite headerWrite, string name, string value, string definedName, string definedVal
 where
   (
     name = headerWrite.getName().toString()
diff --git a/go/ql/test/library-tests/semmle/go/concepts/HTTP/RequestBody.ql b/go/ql/test/library-tests/semmle/go/concepts/HTTP/RequestBody.ql
index d49b7e95bb4..90d58b2db8d 100644
--- a/go/ql/test/library-tests/semmle/go/concepts/HTTP/RequestBody.ql
+++ b/go/ql/test/library-tests/semmle/go/concepts/HTTP/RequestBody.ql
@@ -1,4 +1,4 @@
 import go
 
-from HTTP::RequestBody rb
+from Http::RequestBody rb
 select rb
diff --git a/go/ql/test/library-tests/semmle/go/concepts/HTTP/ResponseBody.ql b/go/ql/test/library-tests/semmle/go/concepts/HTTP/ResponseBody.ql
index d8d89b7f5bb..80394628bfc 100644
--- a/go/ql/test/library-tests/semmle/go/concepts/HTTP/ResponseBody.ql
+++ b/go/ql/test/library-tests/semmle/go/concepts/HTTP/ResponseBody.ql
@@ -1,4 +1,4 @@
 import go
 
-from HTTP::ResponseBody rb
+from Http::ResponseBody rb
 select rb
diff --git a/go/ql/test/library-tests/semmle/go/frameworks/ElazarlGoproxy/test.ql b/go/ql/test/library-tests/semmle/go/frameworks/ElazarlGoproxy/test.ql
index 106d28b48f5..0b07a0a20f0 100644
--- a/go/ql/test/library-tests/semmle/go/frameworks/ElazarlGoproxy/test.ql
+++ b/go/ql/test/library-tests/semmle/go/frameworks/ElazarlGoproxy/test.ql
@@ -23,7 +23,7 @@ class HeaderWriteTest extends InlineExpectationsTest {
 
   override predicate hasActualResult(Location location, string element, string tag, string value) {
     tag = "headerwrite" and
-    exists(HTTP::HeaderWrite hw, string name, string val | element = hw.toString() |
+    exists(Http::HeaderWrite hw, string name, string val | element = hw.toString() |
       hw.definesHeader(name, val) and
       value = name + ":" + val and
       hw.hasLocationInfo(location.getFile().getAbsolutePath(), location.getStartLine(),
diff --git a/go/ql/test/library-tests/semmle/go/frameworks/Macaron/Redirect.ql b/go/ql/test/library-tests/semmle/go/frameworks/Macaron/Redirect.ql
index 813ad53f2e0..c73e0dac04c 100644
--- a/go/ql/test/library-tests/semmle/go/frameworks/Macaron/Redirect.ql
+++ b/go/ql/test/library-tests/semmle/go/frameworks/Macaron/Redirect.ql
@@ -1,4 +1,4 @@
 import go
 
-from HTTP::Redirect redir
+from Http::Redirect redir
 select redir, redir.getResponseWriter()
diff --git a/go/ql/test/library-tests/semmle/go/frameworks/Revel/test.ql b/go/ql/test/library-tests/semmle/go/frameworks/Revel/test.ql
index e3d2cd16be4..9d2b876d803 100644
--- a/go/ql/test/library-tests/semmle/go/frameworks/Revel/test.ql
+++ b/go/ql/test/library-tests/semmle/go/frameworks/Revel/test.ql
@@ -39,7 +39,7 @@ class HttpResponseBodyTest extends InlineExpectationsTest {
 
   override predicate hasActualResult(Location location, string element, string tag, string value) {
     tag = "responsebody" and
-    exists(HTTP::ResponseBody rb |
+    exists(Http::ResponseBody rb |
       rb.hasLocationInfo(location.getFile().getAbsolutePath(), location.getStartLine(),
         location.getStartColumn(), location.getEndLine(), location.getEndColumn()) and
       element = rb.toString() and
diff --git a/javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/NosqlInjectionATM.qll b/javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/NosqlInjectionATM.qll
index 3acb5c315f7..ed1da2dc38b 100644
--- a/javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/NosqlInjectionATM.qll
+++ b/javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/NosqlInjectionATM.qll
@@ -42,10 +42,10 @@ module SinkEndpointFilter {
       result = "modeled database access"
       or
       // Remove calls to APIs that aren't relevant to NoSQL injection
-      call.getReceiver() instanceof HTTP::RequestNode and
+      call.getReceiver() instanceof Http::RequestNode and
       result = "receiver is a HTTP request expression"
       or
-      call.getReceiver() instanceof HTTP::ResponseNode and
+      call.getReceiver() instanceof Http::ResponseNode and
       result = "receiver is a HTTP response expression"
     )
     or
diff --git a/javascript/ql/lib/semmle/javascript/ApiGraphs.qll b/javascript/ql/lib/semmle/javascript/ApiGraphs.qll
index 909d5d22f98..72d5a50cebe 100644
--- a/javascript/ql/lib/semmle/javascript/ApiGraphs.qll
+++ b/javascript/ql/lib/semmle/javascript/ApiGraphs.qll
@@ -652,7 +652,7 @@ module API {
           exports(m, _, _)
           or
           exists(NodeModule nm | nm = mod |
-            exists(SSA::implicitInit([nm.getModuleVariable(), nm.getExportsVariable()]))
+            exists(Ssa::implicitInit([nm.getModuleVariable(), nm.getExportsVariable()]))
           )
         )
       } or
diff --git a/javascript/ql/lib/semmle/javascript/RangeAnalysis.qll b/javascript/ql/lib/semmle/javascript/RangeAnalysis.qll
index 9d8b3967b1c..a385df662ce 100644
--- a/javascript/ql/lib/semmle/javascript/RangeAnalysis.qll
+++ b/javascript/ql/lib/semmle/javascript/RangeAnalysis.qll
@@ -103,7 +103,7 @@ module RangeAnalysis {
    * the given increment/decrement expression.
    */
   private DataFlow::Node updateExprResult(UpdateExpr expr) {
-    result = DataFlow::ssaDefinitionNode(SSA::definition(expr))
+    result = DataFlow::ssaDefinitionNode(Ssa::definition(expr))
     or
     expr.isPrefix() and
     result = expr.flow()
@@ -113,7 +113,7 @@ module RangeAnalysis {
    * Gets a data flow node holding the result of the given componund assignment.
    */
   private DataFlow::Node compoundAssignResult(CompoundAssignExpr expr) {
-    result = DataFlow::ssaDefinitionNode(SSA::definition(expr))
+    result = DataFlow::ssaDefinitionNode(Ssa::definition(expr))
     or
     result = expr.flow()
   }
diff --git a/javascript/ql/lib/semmle/javascript/Routing.qll b/javascript/ql/lib/semmle/javascript/Routing.qll
index 96d3e0a7f51..a7e37c10743 100644
--- a/javascript/ql/lib/semmle/javascript/Routing.qll
+++ b/javascript/ql/lib/semmle/javascript/Routing.qll
@@ -282,7 +282,7 @@ module Routing {
      * Gets an HTTP method name which this node will accept, or nothing if the node accepts all HTTP methods, not
      * taking into account the context from ancestors or children nodes.
      */
-    HTTP::RequestMethodName getOwnHttpMethod() { none() } // Overridden in subclass
+    Http::RequestMethodName getOwnHttpMethod() { none() } // Overridden in subclass
 
     private Node getAUseSiteInRouteSetup() {
       if this.getParent() instanceof RouteSetup
@@ -383,7 +383,7 @@ module Routing {
        * Gets an HTTP request method name (in upper case) matched by this node, or nothing
        * if all HTTP request method names are accepted.
        */
-      HTTP::RequestMethodName getHttpMethod() { none() }
+      Http::RequestMethodName getHttpMethod() { none() }
     }
 
     private class ValueNodeImpl extends Node, MkValueNode {
@@ -407,7 +407,7 @@ module Routing {
 
       override string getRelativePath() { result = range.getRelativePath() }
 
-      override HTTP::RequestMethodName getOwnHttpMethod() { result = range.getHttpMethod() }
+      override Http::RequestMethodName getOwnHttpMethod() { result = range.getHttpMethod() }
     }
 
     private StepSummary routeStepSummary() {
@@ -434,7 +434,7 @@ module Routing {
         or
         StepSummary::smallstep(result, this, routeStepSummary())
         or
-        HTTP::routeHandlerStep(result, this)
+        Http::routeHandlerStep(result, this)
         or
         RouteHandlerTrackingStep::step(result, this)
         or
@@ -599,7 +599,7 @@ module Routing {
        * Gets an HTTP request method name (in upper case) matched by this node, or nothing
        * if all HTTP request method names are accepted.
        */
-      HTTP::RequestMethodName getHttpMethod() { none() }
+      Http::RequestMethodName getHttpMethod() { none() }
 
       /**
        * Holds if this route setup targets `router` and occurs at the given `cfgNode`.
@@ -635,7 +635,7 @@ module Routing {
 
       override string getRelativePath() { result = range.getRelativePath() }
 
-      override HTTP::RequestMethodName getOwnHttpMethod() { result = range.getHttpMethod() }
+      override Http::RequestMethodName getOwnHttpMethod() { result = range.getHttpMethod() }
     }
 
     /**
diff --git a/javascript/ql/lib/semmle/javascript/SSA.qll b/javascript/ql/lib/semmle/javascript/SSA.qll
index 8e60fb0c3e4..3ba64d0200d 100644
--- a/javascript/ql/lib/semmle/javascript/SSA.qll
+++ b/javascript/ql/lib/semmle/javascript/SSA.qll
@@ -737,7 +737,7 @@ class SsaRefinementNode extends SsaPseudoDefinition, TRefinement {
   }
 }
 
-module SSA {
+module Ssa {
   /** Gets the SSA definition corresponding to the implicit initialization of `v`. */
   SsaImplicitInit implicitInit(SsaSourceVariable v) { result.getSourceVariable() = v }
 
@@ -747,3 +747,6 @@ module SSA {
   /** Gets the SSA variable corresponding to `d`. */
   SsaVariable variable(VarDef d) { result.getDefinition() = definition(d) }
 }
+
+/** DEPRECATED: Alias for Ssa */
+deprecated module SSA = Ssa;
diff --git a/javascript/ql/lib/semmle/javascript/dataflow/Configuration.qll b/javascript/ql/lib/semmle/javascript/dataflow/Configuration.qll
index 9dcf6bb1913..2449f8a8eb8 100644
--- a/javascript/ql/lib/semmle/javascript/dataflow/Configuration.qll
+++ b/javascript/ql/lib/semmle/javascript/dataflow/Configuration.qll
@@ -770,7 +770,7 @@ private class FlowStepThroughImport extends SharedFlowStep {
   override predicate step(DataFlow::Node pred, DataFlow::Node succ) {
     exists(ImportSpecifier specifier |
       pred = DataFlow::valueNode(specifier) and
-      succ = DataFlow::ssaDefinitionNode(SSA::definition(specifier))
+      succ = DataFlow::ssaDefinitionNode(Ssa::definition(specifier))
     )
   }
 }
@@ -1777,7 +1777,7 @@ class MidPathNode extends PathNode, MkMidNode {
       SsaImplicitDefinition
     or
     // Skip SSA definition of parameter as its location coincides with the parameter node
-    nd = DataFlow::ssaDefinitionNode(SSA::definition(any(SimpleParameter p)))
+    nd = DataFlow::ssaDefinitionNode(Ssa::definition(any(SimpleParameter p)))
     or
     // Skip to the top of big left-leaning string concatenation trees.
     nd = any(AddExpr add).flow() and
diff --git a/javascript/ql/lib/semmle/javascript/dataflow/Sources.qll b/javascript/ql/lib/semmle/javascript/dataflow/Sources.qll
index c3cf7ab15a4..6e7f8bc3461 100644
--- a/javascript/ql/lib/semmle/javascript/dataflow/Sources.qll
+++ b/javascript/ql/lib/semmle/javascript/dataflow/Sources.qll
@@ -348,7 +348,7 @@ private class NodeModuleSourcesNodes extends SourceNode::Range {
 
   NodeModuleSourcesNodes() {
     exists(NodeModule m |
-      this = DataFlow::ssaDefinitionNode(SSA::implicitInit(v)) and
+      this = DataFlow::ssaDefinitionNode(Ssa::implicitInit(v)) and
       v = [m.getModuleVariable(), m.getExportsVariable()]
     )
   }
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/ClientRequests.qll b/javascript/ql/lib/semmle/javascript/frameworks/ClientRequests.qll
index e721508ff06..f570c9d3a38 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/ClientRequests.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/ClientRequests.qll
@@ -112,7 +112,7 @@ module ClientRequest {
   /**
    * Gets the name of an HTTP request method, in all-lowercase.
    */
-  private string httpMethodName() { result = any(HTTP::RequestMethodName m).toLowerCase() }
+  private string httpMethodName() { result = any(Http::RequestMethodName m).toLowerCase() }
 
   /**
    * Gets a model of an instance of the `request` library, or one of
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/Connect.qll b/javascript/ql/lib/semmle/javascript/frameworks/Connect.qll
index fe130648cd5..59518a2f4f3 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/Connect.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/Connect.qll
@@ -10,7 +10,7 @@ module Connect {
   /**
    * An expression that creates a new Connect server.
    */
-  class ServerDefinition extends HTTP::Servers::StandardServerDefinition, DataFlow::CallNode {
+  class ServerDefinition extends Http::Servers::StandardServerDefinition, DataFlow::CallNode {
     ServerDefinition() {
       // `app = connect()`
       this = DataFlow::moduleImport("connect").getAnInvocation()
@@ -61,7 +61,7 @@ module Connect {
   /**
    * A call to a Connect method that sets up a route.
    */
-  class RouteSetup extends DataFlow::MethodCallNode, HTTP::Servers::StandardRouteSetup {
+  class RouteSetup extends DataFlow::MethodCallNode, Http::Servers::StandardRouteSetup {
     ServerDefinition server;
 
     RouteSetup() {
@@ -125,7 +125,7 @@ module Connect {
   /**
    * An access to a user-controlled Connect request input.
    */
-  private class RequestInputAccess extends HTTP::RequestInputAccess instanceof DataFlow::MethodCallNode {
+  private class RequestInputAccess extends Http::RequestInputAccess instanceof DataFlow::MethodCallNode {
     RequestNode request;
     string kind;
 
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/ConnectExpressShared.qll b/javascript/ql/lib/semmle/javascript/frameworks/ConnectExpressShared.qll
index f0ea2f03f68..87956ef38c8 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/ConnectExpressShared.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/ConnectExpressShared.qll
@@ -115,7 +115,7 @@ module ConnectExpressShared {
    *
    * For example, this could be the function `function(req, res, next){...}`.
    */
-  class RouteHandlerCandidate extends HTTP::RouteHandlerCandidate {
+  class RouteHandlerCandidate extends Http::RouteHandlerCandidate {
     RouteHandlerCandidate() {
       matchesSignature(this, _) and
       not (
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/CookieLibraries.qll b/javascript/ql/lib/semmle/javascript/frameworks/CookieLibraries.qll
index 1efc7da5dc4..b78fd0834db 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/CookieLibraries.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/CookieLibraries.qll
@@ -368,7 +368,7 @@ private class HttpCookieWrite extends CookieWrites::CookieWrite {
   string header;
 
   HttpCookieWrite() {
-    exists(HTTP::CookieDefinition setCookie |
+    exists(Http::CookieDefinition setCookie |
       this = setCookie.getHeaderArgument() and
       not this instanceof DataFlow::ArrayCreationNode
       or
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/Express.qll b/javascript/ql/lib/semmle/javascript/frameworks/Express.qll
index 86abe01f5d6..a48b7d1719a 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/Express.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/Express.qll
@@ -70,7 +70,7 @@ module Express {
     result = "param" or
     result = "all" or
     result = "use" or
-    result = any(HTTP::RequestMethodName m).toLowerCase() or
+    result = any(Http::RequestMethodName m).toLowerCase() or
     // deprecated methods
     result = "error" or
     result = "del"
@@ -92,7 +92,7 @@ module Express {
       result = this.getArgument(0).getStringValue()
     }
 
-    override HTTP::RequestMethodName getHttpMethod() { result.toLowerCase() = this.getMethodName() }
+    override Http::RequestMethodName getHttpMethod() { result.toLowerCase() = this.getMethodName() }
   }
 
   /**
@@ -136,7 +136,7 @@ module Express {
   /**
    * A call to an Express router method that sets up a route.
    */
-  class RouteSetup extends HTTP::Servers::StandardRouteSetup, DataFlow::MethodCallNode {
+  class RouteSetup extends Http::Servers::StandardRouteSetup, DataFlow::MethodCallNode {
     RouteSetup() {
       isRouter(this.getReceiver()) and
       this.getMethodName() = routeSetupMethodName()
@@ -219,7 +219,7 @@ module Express {
       |
         result = succ.backtrack(t2, t)
         or
-        HTTP::routeHandlerStep(result, succ) and
+        Http::routeHandlerStep(result, succ) and
         t = t2
       )
     }
@@ -233,7 +233,7 @@ module Express {
      *
      * Has no result for `use`, `all`, or `param` calls.
      */
-    HTTP::RequestMethodName getRequestMethod() { result.toLowerCase() = this.getMethodName() }
+    Http::RequestMethodName getRequestMethod() { result.toLowerCase() = this.getMethodName() }
 
     /**
      * Holds if this registers a route for all request methods.
@@ -260,7 +260,7 @@ module Express {
   /**
    * A call that sets up a Passport router that includes the request object.
    */
-  private class PassportRouteSetup extends HTTP::Servers::StandardRouteSetup, DataFlow::CallNode {
+  private class PassportRouteSetup extends Http::Servers::StandardRouteSetup, DataFlow::CallNode {
     DataFlow::ModuleImportNode importNode;
     DataFlow::FunctionNode callback;
 
@@ -285,7 +285,7 @@ module Express {
   /**
    * The callback given to passport in PassportRouteSetup.
    */
-  private class PassportRouteHandler extends RouteHandler, HTTP::Servers::StandardRouteHandler,
+  private class PassportRouteHandler extends RouteHandler, Http::Servers::StandardRouteHandler,
     DataFlow::FunctionNode {
     PassportRouteHandler() { this = any(PassportRouteSetup setup).getARouteHandler() }
 
@@ -470,7 +470,7 @@ module Express {
    * but support for other kinds of route handlers can be added by implementing
    * additional subclasses of this class.
    */
-  abstract class RouteHandler extends HTTP::RouteHandler {
+  abstract class RouteHandler extends Http::RouteHandler {
     /**
      * Gets the parameter of kind `kind` of this route handler.
      *
@@ -501,7 +501,7 @@ module Express {
   /**
    * An Express route handler installed by a route setup.
    */
-  class StandardRouteHandler extends RouteHandler, HTTP::Servers::StandardRouteHandler,
+  class StandardRouteHandler extends RouteHandler, Http::Servers::StandardRouteHandler,
     DataFlow::FunctionNode {
     RouteSetup routeSetup;
 
@@ -530,7 +530,7 @@ module Express {
   }
 
   /** An Express response source. */
-  abstract class ResponseSource extends HTTP::Servers::ResponseSource { }
+  abstract class ResponseSource extends Http::Servers::ResponseSource { }
 
   /**
    * An Express response source, that is, the response parameter of a
@@ -561,7 +561,7 @@ module Express {
   }
 
   /** An Express request source. */
-  abstract class RequestSource extends HTTP::Servers::RequestSource { }
+  abstract class RequestSource extends Http::Servers::RequestSource { }
 
   /**
    * An Express request source, that is, the request parameter of a
@@ -632,7 +632,7 @@ module Express {
   }
 
   /** The input parameter to an `app.param()` route handler. */
-  private class ParamHandlerInputAccess extends HTTP::RequestInputAccess {
+  private class ParamHandlerInputAccess extends Http::RequestInputAccess {
     RouteHandler rh;
 
     ParamHandlerInputAccess() {
@@ -641,7 +641,7 @@ module Express {
       )
     }
 
-    override HTTP::RouteHandler getRouteHandler() { result = rh }
+    override Http::RouteHandler getRouteHandler() { result = rh }
 
     override string getKind() { result = "parameter" }
   }
@@ -675,7 +675,7 @@ module Express {
   /**
    * An access to a user-controlled Express request input.
    */
-  class RequestInputAccess extends HTTP::RequestInputAccess {
+  class RequestInputAccess extends Http::RequestInputAccess {
     RequestSource request;
     string kind;
 
@@ -733,7 +733,7 @@ module Express {
   /**
    * An access to a header on an Express request.
    */
-  private class RequestHeaderAccess extends HTTP::RequestHeaderAccess {
+  private class RequestHeaderAccess extends Http::RequestHeaderAccess {
     RequestSource request;
 
     RequestHeaderAccess() {
@@ -762,7 +762,7 @@ module Express {
   /**
    * HTTP headers created by Express calls
    */
-  abstract private class ExplicitHeader extends HTTP::ExplicitHeaderDefinition { }
+  abstract private class ExplicitHeader extends Http::ExplicitHeaderDefinition { }
 
   /**
    * Holds if `e` is an HTTP request object.
@@ -781,7 +781,7 @@ module Express {
     RequestBodyAccess() { any(RouteHandler h).getARequestBodyAccess() = this }
   }
 
-  abstract private class HeaderDefinition extends HTTP::Servers::StandardHeaderDefinition {
+  abstract private class HeaderDefinition extends Http::Servers::StandardHeaderDefinition {
     HeaderDefinition() { isResponse(this.getReceiver()) }
 
     override RouteHandler getRouteHandler() { this.getReceiver() = result.getAResponseNode() }
@@ -790,7 +790,7 @@ module Express {
   /**
    * An invocation of the `redirect` method of an HTTP response object.
    */
-  private class RedirectInvocation extends HTTP::RedirectInvocation, DataFlow::MethodCallNode {
+  private class RedirectInvocation extends Http::RedirectInvocation, DataFlow::MethodCallNode {
     ResponseSource response;
 
     RedirectInvocation() { this = response.ref().getAMethodCall("redirect") }
@@ -854,7 +854,7 @@ module Express {
   /**
    * An argument passed to the `send` or `end` method of an HTTP response object.
    */
-  private class ResponseSendArgument extends HTTP::ResponseSendArgument {
+  private class ResponseSendArgument extends Http::ResponseSendArgument {
     ResponseSource response;
 
     ResponseSendArgument() { this = response.ref().getAMethodCall("send").getArgument(0) }
@@ -865,7 +865,7 @@ module Express {
   /**
    * An invocation of the `cookie` method on an HTTP response object.
    */
-  class SetCookie extends HTTP::CookieDefinition, DataFlow::MethodCallNode {
+  class SetCookie extends Http::CookieDefinition, DataFlow::MethodCallNode {
     ResponseSource response;
 
     SetCookie() { this = response.ref().getAMethodCall("cookie") }
@@ -881,7 +881,7 @@ module Express {
    * An expression passed to the `render` method of an HTTP response object
    * as the value of a template variable.
    */
-  private class TemplateInput extends HTTP::ResponseBody {
+  private class TemplateInput extends Http::ResponseBody {
     TemplateObjectInput obj;
 
     TemplateInput() {
@@ -913,13 +913,13 @@ module Express {
   /**
    * An Express server application.
    */
-  private class Application extends HTTP::ServerDefinition {
+  private class Application extends Http::ServerDefinition {
     Application() { this = appCreation() }
 
     /**
      * Gets a route handler of the application, regardless of nesting.
      */
-    override HTTP::RouteHandler getARouteHandler() {
+    override Http::RouteHandler getARouteHandler() {
       result = this.(RouterDefinition).getASubRouter*().getARouteHandler()
     }
   }
@@ -960,7 +960,7 @@ module Express {
      *
      * Example: `fun` for `router1.use(fun)` or `router.use("/route", fun)`
      */
-    HTTP::RouteHandler getARouteHandler() {
+    Http::RouteHandler getARouteHandler() {
       result.(DataFlow::SourceNode).flowsTo(this.getARouteSetup().getAnArgument())
     }
 
@@ -1044,7 +1044,7 @@ module Express {
    * A function that flows to a route setup.
    */
   private class TrackedRouteHandlerCandidateWithSetup extends RouteHandler,
-    HTTP::Servers::StandardRouteHandler, DataFlow::FunctionNode {
+    Http::Servers::StandardRouteHandler, DataFlow::FunctionNode {
     RouteSetup routeSetup;
 
     TrackedRouteHandlerCandidateWithSetup() { this = routeSetup.getARouteHandler() }
@@ -1063,14 +1063,14 @@ module Express {
    * `router.post(handler)` where it is unknown if `router` is an
    * Express router.
    */
-  class RouteSetupCandidate extends HTTP::RouteSetupCandidate, DataFlow::MethodCallNode {
+  class RouteSetupCandidate extends Http::RouteSetupCandidate, DataFlow::MethodCallNode {
     DataFlow::ValueNode routeHandlerArg;
 
     RouteSetupCandidate() {
       exists(string methodName |
         methodName = "all" or
         methodName = "use" or
-        methodName = any(HTTP::RequestMethodName m).toLowerCase()
+        methodName = any(Http::RequestMethodName m).toLowerCase()
       |
         this.getMethodName() = methodName and
         exists(DataFlow::ValueNode arg | arg = this.getAnArgument() |
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/ExpressModules.qll b/javascript/ql/lib/semmle/javascript/frameworks/ExpressModules.qll
index 64b4122fb46..6052d97cef8 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/ExpressModules.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/ExpressModules.qll
@@ -18,25 +18,25 @@ module ExpressLibraries {
   /**
    * A header produced by a route handler of the "x-frame-options" module.
    */
-  class XFrameOptionsRouteHandlerHeader extends HTTP::ImplicitHeaderDefinition {
+  class XFrameOptionsRouteHandlerHeader extends Http::ImplicitHeaderDefinition {
     XFrameOptionsRouteHandlerHeader() { this instanceof XFrameOptionsRouteHandler }
 
     override predicate defines(string headerName, string headerValue) {
       xFrameOptionsDefaultImplicitHeaderDefinition(headerName, headerValue)
     }
 
-    override HTTP::RouteHandler getRouteHandler() { result = this }
+    override Http::RouteHandler getRouteHandler() { result = this }
   }
 
   /**
    * A route handler from the "x-frame-options" module.
    */
-  class XFrameOptionsRouteHandler extends HTTP::RouteHandler {
+  class XFrameOptionsRouteHandler extends Http::RouteHandler {
     XFrameOptionsRouteHandler() {
       this = DataFlow::moduleImport("x-frame-options").getAnInvocation()
     }
 
-    override HTTP::HeaderDefinition getAResponseHeader(string name) {
+    override Http::HeaderDefinition getAResponseHeader(string name) {
       name = this.(XFrameOptionsRouteHandlerHeader).getAHeaderName() and
       result = this
     }
@@ -45,23 +45,23 @@ module ExpressLibraries {
   /**
    * A header produced by a route handler of the "frameguard" module.
    */
-  class FrameGuardRouteHandlerHeader extends HTTP::ImplicitHeaderDefinition {
+  class FrameGuardRouteHandlerHeader extends Http::ImplicitHeaderDefinition {
     FrameGuardRouteHandlerHeader() { this instanceof FrameGuardRouteHandler }
 
     override predicate defines(string headerName, string headerValue) {
       xFrameOptionsDefaultImplicitHeaderDefinition(headerName, headerValue)
     }
 
-    override HTTP::RouteHandler getRouteHandler() { result = this }
+    override Http::RouteHandler getRouteHandler() { result = this }
   }
 
   /**
    * A route handler from the "frameguard" module.
    */
-  class FrameGuardRouteHandler extends HTTP::RouteHandler {
+  class FrameGuardRouteHandler extends Http::RouteHandler {
     FrameGuardRouteHandler() { this = DataFlow::moduleImport("frameguard").getAnInvocation() }
 
-    override HTTP::HeaderDefinition getAResponseHeader(string name) {
+    override Http::HeaderDefinition getAResponseHeader(string name) {
       name = this.(FrameGuardRouteHandlerHeader).getAHeaderName() and
       result = this
     }
@@ -70,20 +70,20 @@ module ExpressLibraries {
   /**
    * A header produced by a route handler of the "helmet" module.
    */
-  class HelmetRouteHandlerHeader extends HTTP::ImplicitHeaderDefinition {
+  class HelmetRouteHandlerHeader extends Http::ImplicitHeaderDefinition {
     HelmetRouteHandlerHeader() { this instanceof HelmetRouteHandler }
 
     override predicate defines(string headerName, string headerValue) {
       xFrameOptionsDefaultImplicitHeaderDefinition(headerName, headerValue)
     }
 
-    override HTTP::RouteHandler getRouteHandler() { result = this }
+    override Http::RouteHandler getRouteHandler() { result = this }
   }
 
   /**
    * A route handler from the "helmet" module.
    */
-  class HelmetRouteHandler extends HTTP::RouteHandler {
+  class HelmetRouteHandler extends Http::RouteHandler {
     HelmetRouteHandler() {
       exists(DataFlow::ModuleImportNode m | "helmet" = m.getPath() |
         this = m.getAnInvocation() or
@@ -91,7 +91,7 @@ module ExpressLibraries {
       )
     }
 
-    override HTTP::HeaderDefinition getAResponseHeader(string name) {
+    override Http::HeaderDefinition getAResponseHeader(string name) {
       name = this.(HelmetRouteHandlerHeader).getAHeaderName() and
       result = this
     }
@@ -108,7 +108,7 @@ module ExpressLibraries {
     /**
      * A call that creates an `express-session` middleware instance.
      */
-    class MiddlewareInstance extends DataFlow::InvokeNode, HTTP::CookieMiddlewareInstance {
+    class MiddlewareInstance extends DataFlow::InvokeNode, Http::CookieMiddlewareInstance {
       MiddlewareInstance() { this = expressSession().getACall() }
 
       /**
@@ -135,7 +135,7 @@ module ExpressLibraries {
     /**
      * A call that creates a `cookie-parser` middleware instance.
      */
-    class MiddlewareInstance extends DataFlow::InvokeNode, HTTP::CookieMiddlewareInstance {
+    class MiddlewareInstance extends DataFlow::InvokeNode, Http::CookieMiddlewareInstance {
       MiddlewareInstance() { this = cookieParser().getACall() }
 
       /**
@@ -164,7 +164,7 @@ module ExpressLibraries {
     /**
      * A call that creates a `cookie-session` middleware instance.
      */
-    class MiddlewareInstance extends DataFlow::InvokeNode, HTTP::CookieMiddlewareInstance {
+    class MiddlewareInstance extends DataFlow::InvokeNode, Http::CookieMiddlewareInstance {
       MiddlewareInstance() { this = cookieSession().getACall() }
 
       /**
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/Fastify.qll b/javascript/ql/lib/semmle/javascript/frameworks/Fastify.qll
index 76d1c9825b3..d12c4278601 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/Fastify.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/Fastify.qll
@@ -12,7 +12,7 @@ module Fastify {
   /**
    * An expression that creates a new Fastify server.
    */
-  abstract class ServerDefinition extends HTTP::Servers::StandardServerDefinition { }
+  abstract class ServerDefinition extends Http::Servers::StandardServerDefinition { }
 
   /**
    * A standard way to create a Fastify server.
@@ -76,7 +76,7 @@ module Fastify {
    * but support for other kinds of route handlers can be added by implementing
    * additional subclasses of this class.
    */
-  abstract class RouteHandler extends HTTP::Servers::StandardRouteHandler, DataFlow::ValueNode {
+  abstract class RouteHandler extends Http::Servers::StandardRouteHandler, DataFlow::ValueNode {
     /**
      * Gets the parameter of the route handler that contains the request object.
      */
@@ -103,7 +103,7 @@ module Fastify {
    * A Fastify reply source, that is, the `reply` parameter of a
    * route handler.
    */
-  private class ReplySource extends HTTP::Servers::ResponseSource {
+  private class ReplySource extends Http::Servers::ResponseSource {
     RouteHandler rh;
 
     ReplySource() { this = rh.getReplyParameter() }
@@ -118,7 +118,7 @@ module Fastify {
    * A Fastify request source, that is, the request parameter of a
    * route handler.
    */
-  private class RequestSource extends HTTP::Servers::RequestSource {
+  private class RequestSource extends Http::Servers::RequestSource {
     RouteHandler rh;
 
     RequestSource() { this = rh.getRequestParameter() }
@@ -132,7 +132,7 @@ module Fastify {
   /**
    * A call to a Fastify method that sets up a route.
    */
-  class RouteSetup extends DataFlow::MethodCallNode, HTTP::Servers::StandardRouteSetup {
+  class RouteSetup extends DataFlow::MethodCallNode, Http::Servers::StandardRouteSetup {
     ServerDefinition server;
     string methodName;
 
@@ -176,7 +176,7 @@ module Fastify {
 
     override string getRelativePath() { result = this.getArgument(0).getStringValue() }
 
-    override HTTP::RequestMethodName getHttpMethod() { result = this.getMethodName().toUpperCase() }
+    override Http::RequestMethodName getHttpMethod() { result = this.getMethodName().toUpperCase() }
   }
 
   /** Gets the name of the `n`th handler function that can be installed a route setup, in order of execution. */
@@ -194,7 +194,7 @@ module Fastify {
 
     override string getRelativePath() { result = this.getOptionArgument(0, "url").getStringValue() }
 
-    override HTTP::RequestMethodName getHttpMethod() {
+    override Http::RequestMethodName getHttpMethod() {
       result = this.getOptionArgument(0, "method").getStringValue().toUpperCase()
     }
 
@@ -226,7 +226,7 @@ module Fastify {
       result = this.pluginBody(DataFlow::TypeBackTracker::end())
     }
 
-    override HTTP::RequestMethodName getHttpMethod() {
+    override Http::RequestMethodName getHttpMethod() {
       result = this.getOptionArgument(1, "method").getStringValue().toUpperCase()
     }
 
@@ -252,7 +252,7 @@ module Fastify {
   /**
    * An access to a user-controlled Fastify request input.
    */
-  private class RequestInputAccess extends HTTP::RequestInputAccess {
+  private class RequestInputAccess extends Http::RequestInputAccess {
     RouteHandler rh;
     string kind;
 
@@ -308,7 +308,7 @@ module Fastify {
   /**
    * An access to a header on a Fastify request.
    */
-  private class RequestHeaderAccess extends HTTP::RequestHeaderAccess {
+  private class RequestHeaderAccess extends Http::RequestHeaderAccess {
     RouteHandler rh;
 
     RequestHeaderAccess() {
@@ -327,7 +327,7 @@ module Fastify {
   /**
    * An argument passed to the `send` or `end` method of an HTTP response object.
    */
-  private class ResponseSendArgument extends HTTP::ResponseSendArgument {
+  private class ResponseSendArgument extends Http::ResponseSendArgument {
     RouteHandler rh;
 
     ResponseSendArgument() {
@@ -342,7 +342,7 @@ module Fastify {
   /**
    * An invocation of the `redirect` method of an HTTP response object.
    */
-  private class RedirectInvocation extends HTTP::RedirectInvocation, DataFlow::MethodCallNode {
+  private class RedirectInvocation extends Http::RedirectInvocation, DataFlow::MethodCallNode {
     RouteHandler rh;
 
     RedirectInvocation() { this = rh.getAResponseSource().ref().getAMethodCall("redirect") }
@@ -355,7 +355,7 @@ module Fastify {
   /**
    * An invocation that sets a single header of the HTTP response.
    */
-  private class SetOneHeader extends HTTP::Servers::StandardHeaderDefinition,
+  private class SetOneHeader extends Http::Servers::StandardHeaderDefinition,
     DataFlow::MethodCallNode {
     RouteHandler rh;
 
@@ -370,7 +370,7 @@ module Fastify {
   /**
    * An invocation that sets any number of headers of the HTTP response.
    */
-  class SetMultipleHeaders extends HTTP::ExplicitHeaderDefinition, DataFlow::MethodCallNode {
+  class SetMultipleHeaders extends Http::ExplicitHeaderDefinition, DataFlow::MethodCallNode {
     RouteHandler rh;
 
     SetMultipleHeaders() {
@@ -414,7 +414,7 @@ module Fastify {
     override DataFlow::Node getTemplateParamsNode() { result = this.getArgument(1) }
   }
 
-  private class FastifyCookieMiddleware extends HTTP::CookieMiddlewareInstance {
+  private class FastifyCookieMiddleware extends Http::CookieMiddlewareInstance {
     FastifyCookieMiddleware() {
       this = DataFlow::moduleImport(["fastify-cookie", "fastify-session", "fastify-secure-session"])
     }
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/Firebase.qll b/javascript/ql/lib/semmle/javascript/frameworks/Firebase.qll
index d22bb782630..35a8d329643 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/Firebase.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/Firebase.qll
@@ -195,7 +195,7 @@ module Firebase {
     /**
      * A call to a Firebase method that sets up a route.
      */
-    private class RouteSetup extends HTTP::Servers::StandardRouteSetup, DataFlow::CallNode {
+    private class RouteSetup extends Http::Servers::StandardRouteSetup, DataFlow::CallNode {
       RouteSetup() { this = namespace().getAPropertyRead("https").getAMemberCall("onRequest") }
 
       override DataFlow::SourceNode getARouteHandler() {
@@ -215,7 +215,7 @@ module Firebase {
     /**
      * A function used as a route handler.
      */
-    private class RouteHandler extends Express::RouteHandler, HTTP::Servers::StandardRouteHandler,
+    private class RouteHandler extends Express::RouteHandler, Http::Servers::StandardRouteHandler,
       DataFlow::FunctionNode {
       RouteHandler() { this = any(RouteSetup setup).getARouteHandler() }
 
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/HTTP.qll b/javascript/ql/lib/semmle/javascript/frameworks/HTTP.qll
index 626b29423c8..62788b2a3d7 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/HTTP.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/HTTP.qll
@@ -8,7 +8,7 @@ private import semmle.javascript.dataflow.internal.StepSummary
 private import semmle.javascript.dataflow.internal.CallGraphs
 private import DataFlow::PseudoProperties as PseudoProperties
 
-module HTTP {
+module Http {
   /**
    * A function invocation that causes a redirect response to be sent.
    */
@@ -242,7 +242,7 @@ module HTTP {
     DataFlow::functionOneWayForwardingStep(pred.getALocalUse(), succ)
     or
     // a container containing route-handlers.
-    exists(HTTP::RouteHandlerCandidateContainer container | pred = container.getRouteHandler(succ))
+    exists(Http::RouteHandlerCandidateContainer container | pred = container.getRouteHandler(succ))
     or
     // (function (req, res) {}).bind(this);
     exists(DataFlow::PartialInvokeNode call |
@@ -677,7 +677,7 @@ module HTTP {
     /**
      * A collection that contains one or more route potential handlers.
      */
-    private class ContainerCollection extends HTTP::RouteHandlerCandidateContainer::Range,
+    private class ContainerCollection extends Http::RouteHandlerCandidateContainer::Range,
       DataFlow::NewNode {
       ContainerCollection() {
         this = DataFlow::globalVarRef("Map").getAnInstantiation() and // restrict to Map for now
@@ -699,3 +699,6 @@ module HTTP {
     }
   }
 }
+
+/** DEPRECATED: Alias for Http */
+deprecated module HTTP = Http;
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/Hapi.qll b/javascript/ql/lib/semmle/javascript/frameworks/Hapi.qll
index c5700f25728..e4bc922951c 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/Hapi.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/Hapi.qll
@@ -9,7 +9,7 @@ module Hapi {
   /**
    * An expression that creates a new Hapi server.
    */
-  class ServerDefinition extends HTTP::Servers::StandardServerDefinition, DataFlow::NewNode {
+  class ServerDefinition extends Http::Servers::StandardServerDefinition, DataFlow::NewNode {
     ServerDefinition() {
       // `server = new Hapi.Server()`
       this = DataFlow::moduleMember("hapi", "Server").getAnInstantiation()
@@ -19,7 +19,7 @@ module Hapi {
   /**
    * A Hapi route handler.
    */
-  class RouteHandler extends HTTP::Servers::StandardRouteHandler, DataFlow::FunctionNode {
+  class RouteHandler extends Http::Servers::StandardRouteHandler, DataFlow::FunctionNode {
     RouteHandler() { exists(RouteSetup setup | this = setup.getARouteHandler()) }
 
     /**
@@ -43,7 +43,7 @@ module Hapi {
    * A Hapi response source, that is, an access to the `response` property
    * of a request object.
    */
-  private class ResponseSource extends HTTP::Servers::ResponseSource {
+  private class ResponseSource extends Http::Servers::ResponseSource {
     RequestNode req;
 
     ResponseSource() { this.(DataFlow::PropRead).accesses(req, "response") }
@@ -58,7 +58,7 @@ module Hapi {
    * A Hapi request source, that is, the request parameter of a
    * route handler.
    */
-  private class RequestSource extends HTTP::Servers::RequestSource {
+  private class RequestSource extends Http::Servers::RequestSource {
     RouteHandler rh;
 
     RequestSource() { this = rh.getRequestParameter() }
@@ -80,7 +80,7 @@ module Hapi {
   /**
    * A Hapi response node.
    */
-  class ResponseNode extends HTTP::Servers::StandardResponseNode {
+  class ResponseNode extends Http::Servers::StandardResponseNode {
     override ResponseSource src;
   }
 
@@ -95,14 +95,14 @@ module Hapi {
   /**
    * A Hapi request node.
    */
-  class RequestNode extends HTTP::Servers::StandardRequestNode {
+  class RequestNode extends Http::Servers::StandardRequestNode {
     override RequestSource src;
   }
 
   /**
    * An access to a user-controlled Hapi request input.
    */
-  private class RequestInputAccess extends HTTP::RequestInputAccess {
+  private class RequestInputAccess extends Http::RequestInputAccess {
     RouteHandler rh;
     string kind;
 
@@ -156,7 +156,7 @@ module Hapi {
   /**
    * An access to an HTTP header on a Hapi request.
    */
-  private class RequestHeaderAccess extends HTTP::RequestHeaderAccess {
+  private class RequestHeaderAccess extends Http::RequestHeaderAccess {
     RouteHandler rh;
 
     RequestHeaderAccess() {
@@ -181,7 +181,7 @@ module Hapi {
   /**
    * An HTTP header defined in a Hapi server.
    */
-  private class HeaderDefinition extends HTTP::Servers::StandardHeaderDefinition {
+  private class HeaderDefinition extends Http::Servers::StandardHeaderDefinition {
     ResponseNode res;
 
     HeaderDefinition() {
@@ -195,7 +195,7 @@ module Hapi {
   /**
    * A call to a Hapi method that sets up a route.
    */
-  class RouteSetup extends DataFlow::MethodCallNode, HTTP::Servers::StandardRouteSetup {
+  class RouteSetup extends DataFlow::MethodCallNode, Http::Servers::StandardRouteSetup {
     ServerDefinition server;
     DataFlow::Node handler;
 
@@ -236,7 +236,7 @@ module Hapi {
    *
    * For example, this could be the function `function(request, h){...}`.
    */
-  class RouteHandlerCandidate extends HTTP::RouteHandlerCandidate {
+  class RouteHandlerCandidate extends Http::RouteHandlerCandidate {
     RouteHandlerCandidate() {
       exists(string request, string responseToolkit |
         (request = "request" or request = "req") and
@@ -256,7 +256,7 @@ module Hapi {
    * A function that looks like a Hapi route handler and flows to a route setup.
    */
   private class TrackedRouteHandlerCandidateWithSetup extends RouteHandler,
-    HTTP::Servers::StandardRouteHandler, DataFlow::FunctionNode {
+    Http::Servers::StandardRouteHandler, DataFlow::FunctionNode {
     TrackedRouteHandlerCandidateWithSetup() { this = any(RouteSetup s).getARouteHandler() }
   }
 
@@ -276,7 +276,7 @@ module Hapi {
   /**
    * A return from a route handler.
    */
-  private class HandlerReturn extends HTTP::ResponseSendArgument {
+  private class HandlerReturn extends Http::ResponseSendArgument {
     RouteHandler handler;
 
     HandlerReturn() { this = handler.(DataFlow::FunctionNode).getAReturn() }
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/Koa.qll b/javascript/ql/lib/semmle/javascript/frameworks/Koa.qll
index 49104de9263..e8ca5ef2ac1 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/Koa.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/Koa.qll
@@ -9,7 +9,7 @@ module Koa {
   /**
    * An expression that creates a new Koa application.
    */
-  class AppDefinition extends HTTP::Servers::StandardServerDefinition, DataFlow::InvokeNode {
+  class AppDefinition extends Http::Servers::StandardServerDefinition, DataFlow::InvokeNode {
     AppDefinition() {
       // `app = new Koa()` / `app = Koa()`
       this = DataFlow::moduleImport("koa").getAnInvocation()
@@ -19,7 +19,7 @@ module Koa {
   /**
    * An HTTP header defined in a Koa application.
    */
-  private class HeaderDefinition extends HTTP::Servers::StandardHeaderDefinition {
+  private class HeaderDefinition extends Http::Servers::StandardHeaderDefinition {
     RouteHandler rh;
 
     HeaderDefinition() {
@@ -36,7 +36,7 @@ module Koa {
   /**
    * A Koa route handler.
    */
-  abstract class RouteHandler extends HTTP::Servers::StandardRouteHandler, DataFlow::SourceNode {
+  abstract class RouteHandler extends Http::Servers::StandardRouteHandler, DataFlow::SourceNode {
     /**
      * Gets the parameter of the route handler that contains the context object.
      */
@@ -227,7 +227,7 @@ module Koa {
    * A Koa request source, that is, an access to the `request` property
    * of a context object.
    */
-  private class RequestSource extends HTTP::Servers::RequestSource instanceof DataFlow::PropRead {
+  private class RequestSource extends Http::Servers::RequestSource instanceof DataFlow::PropRead {
     ContextNode ctx;
 
     RequestSource() { super.accesses(ctx, "request") }
@@ -242,7 +242,7 @@ module Koa {
    * A Koa request source, accessed through the a request property of a
    * generator route handler (deprecated in Koa 3).
    */
-  private class GeneratorRequestSource extends HTTP::Servers::RequestSource {
+  private class GeneratorRequestSource extends Http::Servers::RequestSource {
     RouteHandler rh;
 
     GeneratorRequestSource() {
@@ -262,7 +262,7 @@ module Koa {
    * A Koa response source, that is, an access to the `response` property
    * of a context object.
    */
-  private class ResponseSource extends HTTP::Servers::ResponseSource instanceof DataFlow::PropRead {
+  private class ResponseSource extends Http::Servers::ResponseSource instanceof DataFlow::PropRead {
     ContextNode ctx;
 
     ResponseSource() { super.accesses(ctx, "response") }
@@ -311,7 +311,7 @@ module Koa {
   /**
    * An expression that may hold a Koa request object.
    */
-  class RequestNode extends HTTP::Servers::StandardRequestNode {
+  class RequestNode extends Http::Servers::StandardRequestNode {
     override RequestSource src;
   }
 
@@ -326,14 +326,14 @@ module Koa {
   /**
    * An expression that may hold a Koa response object.
    */
-  class ResponseNode extends HTTP::Servers::StandardResponseNode {
+  class ResponseNode extends Http::Servers::StandardResponseNode {
     override ResponseSource src;
   }
 
   /**
    * An access to a user-controlled Koa request input.
    */
-  private class RequestInputAccess extends HTTP::RequestInputAccess {
+  private class RequestInputAccess extends Http::RequestInputAccess {
     RouteHandler rh;
     string kind;
 
@@ -399,7 +399,7 @@ module Koa {
   /**
    * An access to an HTTP header on a Koa request.
    */
-  private class RequestHeaderAccess extends HTTP::RequestHeaderAccess {
+  private class RequestHeaderAccess extends Http::RequestHeaderAccess {
     RouteHandler rh;
 
     RequestHeaderAccess() {
@@ -435,7 +435,7 @@ module Koa {
   /**
    * A call to a Koa method that sets up a route.
    */
-  class RouteSetup extends HTTP::Servers::StandardRouteSetup, DataFlow::MethodCallNode {
+  class RouteSetup extends Http::Servers::StandardRouteSetup, DataFlow::MethodCallNode {
     AppDefinition server;
 
     RouteSetup() {
@@ -457,7 +457,7 @@ module Koa {
   /**
    * A value assigned to the body of an HTTP response object.
    */
-  private class ResponseSendArgument extends HTTP::ResponseSendArgument {
+  private class ResponseSendArgument extends Http::ResponseSendArgument {
     RouteHandler rh;
 
     ResponseSendArgument() {
@@ -470,7 +470,7 @@ module Koa {
   /**
    * An invocation of the `redirect` method of an HTTP response object.
    */
-  private class RedirectInvocation extends HTTP::RedirectInvocation instanceof DataFlow::MethodCallNode {
+  private class RedirectInvocation extends Http::RedirectInvocation instanceof DataFlow::MethodCallNode {
     RouteHandler rh;
 
     RedirectInvocation() { super.calls(rh.getAResponseOrContextNode(), "redirect") }
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/LiveServer.qll b/javascript/ql/lib/semmle/javascript/frameworks/LiveServer.qll
index cc90dc8d720..5a8075ed366 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/LiveServer.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/LiveServer.qll
@@ -9,7 +9,7 @@ private module LiveServer {
   /**
    * An expression that imports the live-server package, seen as a server-definition.
    */
-  class ServerDefinition extends HTTP::Servers::StandardServerDefinition {
+  class ServerDefinition extends Http::Servers::StandardServerDefinition {
     ServerDefinition() { this = DataFlow::moduleImport("live-server") }
 
     API::Node getImportNode() { result.asSource() = this }
@@ -30,7 +30,7 @@ private module LiveServer {
   /**
    * The call to `require("live-server").start()`, seen as a route setup.
    */
-  class RouteSetup extends HTTP::Servers::StandardRouteSetup instanceof API::CallNode {
+  class RouteSetup extends Http::Servers::StandardRouteSetup instanceof API::CallNode {
     ServerDefinition server;
 
     RouteSetup() { this = server.getImportNode().getMember("start").getACall() }
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/Logging.qll b/javascript/ql/lib/semmle/javascript/frameworks/Logging.qll
index ba99fc014d1..a5599e4ee79 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/Logging.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/Logging.qll
@@ -349,7 +349,7 @@ private module Pino {
     or
     // `pino` is installed as the "log" property on the request object in `Express` and similar libraries.
     // in `Hapi` the property is "logger".
-    exists(HTTP::RequestNode req, API::Node reqNode |
+    exists(Http::RequestNode req, API::Node reqNode |
       reqNode.asSource() = req.getALocalSource() and
       result = reqNode.getMember(["log", "logger"])
     )
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/Micro.qll b/javascript/ql/lib/semmle/javascript/frameworks/Micro.qll
index 7ac9b1349d8..abdc97fe0b7 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/Micro.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/Micro.qll
@@ -42,24 +42,24 @@ private module Micro {
   /**
    * A function passed to `micro` or `micro.run`.
    */
-  class MicroRouteHandler extends HTTP::Servers::StandardRouteHandler, DataFlow::FunctionNode {
+  class MicroRouteHandler extends Http::Servers::StandardRouteHandler, DataFlow::FunctionNode {
     MicroRouteHandler() { this = microRouteHandler().getAFunctionValue() }
   }
 
-  class MicroRequestSource extends HTTP::Servers::RequestSource {
+  class MicroRequestSource extends Http::Servers::RequestSource {
     MicroRouteHandler h;
 
     MicroRequestSource() { this = h.getParameter(0) }
 
-    override HTTP::RouteHandler getRouteHandler() { result = h }
+    override Http::RouteHandler getRouteHandler() { result = h }
   }
 
-  class MicroResponseSource extends HTTP::Servers::ResponseSource {
+  class MicroResponseSource extends Http::Servers::ResponseSource {
     MicroRouteHandler h;
 
     MicroResponseSource() { this = h.getParameter(1) }
 
-    override HTTP::RouteHandler getRouteHandler() { result = h }
+    override Http::RouteHandler getRouteHandler() { result = h }
   }
 
   deprecated class MicroRequestExpr extends NodeJSLib::RequestExpr {
@@ -78,19 +78,19 @@ private module Micro {
     override MicroResponseSource src;
   }
 
-  private HTTP::RouteHandler getRouteHandlerFromReqRes(DataFlow::Node node) {
-    exists(HTTP::Servers::RequestSource src |
+  private Http::RouteHandler getRouteHandlerFromReqRes(DataFlow::Node node) {
+    exists(Http::Servers::RequestSource src |
       src.ref().flowsTo(node) and
       result = src.getRouteHandler()
     )
     or
-    exists(HTTP::Servers::ResponseSource src |
+    exists(Http::Servers::ResponseSource src |
       src.ref().flowsTo(node) and
       result = src.getRouteHandler()
     )
   }
 
-  class MicroBodyParserCall extends HTTP::RequestInputAccess, DataFlow::CallNode {
+  class MicroBodyParserCall extends Http::RequestInputAccess, DataFlow::CallNode {
     string name;
 
     MicroBodyParserCall() {
@@ -100,14 +100,14 @@ private module Micro {
 
     override string getKind() { result = "body" }
 
-    override HTTP::RouteHandler getRouteHandler() {
+    override Http::RouteHandler getRouteHandler() {
       result = getRouteHandlerFromReqRes(getArgument(0))
     }
 
     override predicate isUserControlledObject() { name = "json" }
   }
 
-  class MicroSendArgument extends HTTP::ResponseSendArgument {
+  class MicroSendArgument extends Http::ResponseSendArgument {
     CallNode send;
 
     MicroSendArgument() {
@@ -115,7 +115,7 @@ private module Micro {
       this = send.getLastArgument()
     }
 
-    override HTTP::RouteHandler getRouteHandler() {
+    override Http::RouteHandler getRouteHandler() {
       result = getRouteHandlerFromReqRes(send.getArgument([0, 1]))
     }
   }
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/Nest.qll b/javascript/ql/lib/semmle/javascript/frameworks/Nest.qll
index 80cba72fd3c..16a57eb1b98 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/Nest.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/Nest.qll
@@ -34,7 +34,7 @@ module NestJS {
    * }
    * ```
    */
-  private class NestJSRouteHandler extends HTTP::RouteHandler, DataFlow::FunctionNode {
+  private class NestJSRouteHandler extends Http::RouteHandler, DataFlow::FunctionNode {
     NestJSRouteHandler() {
       getAFunctionDecorator(this) =
         nestjs()
@@ -42,7 +42,7 @@ module NestJS {
             .getACall()
     }
 
-    override HTTP::HeaderDefinition getAResponseHeader(string name) { none() }
+    override Http::HeaderDefinition getAResponseHeader(string name) { none() }
 
     /**
      * Holds if this has the `@Redirect()` decorator.
@@ -257,7 +257,7 @@ module NestJS {
    * The type of remote flow depends on which decorator is applied at the parameter, so
    * we just classify it as a `RemoteFlowSource`.
    */
-  private class NestJSCustomPipeInput extends HTTP::RequestInputAccess {
+  private class NestJSCustomPipeInput extends Http::RequestInputAccess {
     CustomPipeClass pipe;
 
     NestJSCustomPipeInput() {
@@ -273,7 +273,7 @@ module NestJS {
       result = pipe.getAnAffectedParameter().getInputKind()
     }
 
-    override HTTP::RouteHandler getRouteHandler() {
+    override Http::RouteHandler getRouteHandler() {
       result = pipe.getAnAffectedParameter().getNestRouteHandler()
     }
   }
@@ -295,13 +295,13 @@ module NestJS {
    * as a source of untrusted data.
    */
   private class NestJSRequestInputAsRequestInputAccess extends NestJSRequestInput,
-    HTTP::RequestInputAccess {
+    Http::RequestInputAccess {
     NestJSRequestInputAsRequestInputAccess() {
       not this.isSanitizedByPipe() and
       not this = any(CustomPipeClass cls).getAnAffectedParameter()
     }
 
-    override HTTP::RouteHandler getRouteHandler() { result = this.getNestRouteHandler() }
+    override Http::RouteHandler getRouteHandler() { result = this.getNestRouteHandler() }
 
     override string getKind() { result = this.getInputKind() }
 
@@ -316,7 +316,7 @@ module NestJS {
   }
 
   private class NestJSHeaderAccess extends NestJSRequestInputAsRequestInputAccess,
-    HTTP::RequestHeaderAccess {
+    Http::RequestHeaderAccess {
     NestJSHeaderAccess() { decoratorName = "Headers" and decorator.getNumArgument() > 0 }
 
     override string getAHeaderName() {
@@ -344,7 +344,7 @@ module NestJS {
    * ```
    * writes `<b>Hello</b>` to the response.
    */
-  private class ReturnValueAsResponseSend extends HTTP::ResponseSendArgument {
+  private class ReturnValueAsResponseSend extends Http::ResponseSendArgument {
     NestJSRouteHandler handler;
 
     ReturnValueAsResponseSend() {
@@ -357,7 +357,7 @@ module NestJS {
       )
     }
 
-    override HTTP::RouteHandler getRouteHandler() { result = handler }
+    override Http::RouteHandler getRouteHandler() { result = handler }
   }
 
   /**
@@ -439,7 +439,7 @@ module NestJS {
     /**
      * Gets the route handler that handles this request.
      */
-    override HTTP::RouteHandler getRouteHandler() {
+    override Http::RouteHandler getRouteHandler() {
       result.(DataFlow::FunctionNode).getAParameter() = this
     }
   }
@@ -456,7 +456,7 @@ module NestJS {
     /**
      * Gets the route handler that handles this request.
      */
-    override HTTP::RouteHandler getRouteHandler() {
+    override Http::RouteHandler getRouteHandler() {
       result.(DataFlow::FunctionNode).getAParameter() = this
     }
   }
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/Next.qll b/javascript/ql/lib/semmle/javascript/frameworks/Next.qll
index 495543eb1b3..50671e37796 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/Next.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/Next.qll
@@ -153,14 +153,14 @@ module NextJS {
   /**
    * A Next.js function that is exected on the server for every request, seen as a routehandler.
    */
-  class NextHttpRouteHandler extends HTTP::Servers::StandardRouteHandler, DataFlow::FunctionNode {
+  class NextHttpRouteHandler extends Http::Servers::StandardRouteHandler, DataFlow::FunctionNode {
     NextHttpRouteHandler() { this = getServerSidePropsFunction(_) or this = getInitialProps(_) }
   }
 
   /**
    * A function that handles both a request and response from Next.js, seen as a routehandler.
    */
-  class NextReqResHandler extends HTTP::Servers::StandardRouteHandler, DataFlow::FunctionNode {
+  class NextReqResHandler extends Http::Servers::StandardRouteHandler, DataFlow::FunctionNode {
     DataFlow::ParameterNode req;
     DataFlow::ParameterNode res;
 
@@ -182,28 +182,28 @@ module NextJS {
    * A NodeJS HTTP request object in a Next.js page.
    */
   class NextHttpRequestSource extends NodeJSLib::RequestSource {
-    HTTP::RouteHandler rh;
+    Http::RouteHandler rh;
 
     NextHttpRequestSource() {
       this = rh.(NextHttpRouteHandler).getParameter(0).getAPropertyRead("req") or
       this = rh.(NextReqResHandler).getRequest()
     }
 
-    override HTTP::RouteHandler getRouteHandler() { result = rh }
+    override Http::RouteHandler getRouteHandler() { result = rh }
   }
 
   /**
    * A NodeJS HTTP response object in a Next.js page.
    */
   class NextHttpResponseSource extends NodeJSLib::ResponseSource {
-    HTTP::RouteHandler rh;
+    Http::RouteHandler rh;
 
     NextHttpResponseSource() {
       this = rh.(NextHttpRouteHandler).getParameter(0).getAPropertyRead("res") or
       this = rh.(NextReqResHandler).getResponse()
     }
 
-    override HTTP::RouteHandler getRouteHandler() { result = rh }
+    override Http::RouteHandler getRouteHandler() { result = rh }
   }
 
   /**
@@ -222,7 +222,7 @@ module NextJS {
    * and we therefore model the routehandler as an Express.js routehandler.
    */
   class NextApiRouteHandler extends DataFlow::FunctionNode, Express::RouteHandler,
-    HTTP::Servers::StandardRouteHandler {
+    Http::Servers::StandardRouteHandler {
     NextApiRouteHandler() {
       exists(Module mod | mod.getFile().getParentContainer() = apiFolder() |
         this = mod.getAnExportedValue("default").getAFunctionValue()
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/NodeJSLib.qll b/javascript/ql/lib/semmle/javascript/frameworks/NodeJSLib.qll
index 0c5fdbd6a15..36c3cb78cb9 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/NodeJSLib.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/NodeJSLib.qll
@@ -81,7 +81,7 @@ module NodeJSLib {
    * A server library that provides an (enhanced) NodesJS HTTP response
    * object should implement a library specific subclass of this class.
    */
-  abstract class ResponseNode extends HTTP::Servers::StandardResponseNode { }
+  abstract class ResponseNode extends Http::Servers::StandardResponseNode { }
 
   /**
    * DEPRECATED: Use `RequestNode` instead.
@@ -100,7 +100,7 @@ module NodeJSLib {
    * A server library that provides an (enhanced) NodesJS HTTP request
    * object should implement a library specific subclass of this class.
    */
-  abstract class RequestNode extends HTTP::Servers::StandardRequestNode { }
+  abstract class RequestNode extends Http::Servers::StandardRequestNode { }
 
   /**
    * A function used as an Node.js server route handler.
@@ -109,7 +109,7 @@ module NodeJSLib {
    * but support for other kinds of route handlers can be added by implementing
    * additional subclasses of this class.
    */
-  abstract class RouteHandler extends HTTP::Servers::StandardRouteHandler, DataFlow::FunctionNode {
+  abstract class RouteHandler extends Http::Servers::StandardRouteHandler, DataFlow::FunctionNode {
     /**
      * Gets the parameter of the route handler that contains the request object.
      */
@@ -131,7 +131,7 @@ module NodeJSLib {
   /**
    * A Node.js response source.
    */
-  abstract class ResponseSource extends HTTP::Servers::ResponseSource { }
+  abstract class ResponseSource extends Http::Servers::ResponseSource { }
 
   /**
    * A standard Node.js response source, that is, the response parameter of a
@@ -151,7 +151,7 @@ module NodeJSLib {
   /**
    * A Node.js request source.
    */
-  abstract class RequestSource extends HTTP::Servers::RequestSource { }
+  abstract class RequestSource extends Http::Servers::RequestSource { }
 
   /**
    * A standard Node.js request source, that is, the request parameter of a
@@ -201,7 +201,7 @@ module NodeJSLib {
   /**
    * An access to a user-controlled Node.js request input.
    */
-  private class RequestInputAccess extends HTTP::RequestInputAccess {
+  private class RequestInputAccess extends Http::RequestInputAccess {
     RequestNode request;
     string kind;
 
@@ -223,7 +223,7 @@ module NodeJSLib {
       )
     }
 
-    override HTTP::RouteHandler getRouteHandler() { result = request.getRouteHandler() }
+    override Http::RouteHandler getRouteHandler() { result = request.getRouteHandler() }
 
     override string getKind() { result = kind }
   }
@@ -231,7 +231,7 @@ module NodeJSLib {
   /**
    * An access to an HTTP header (other than "Cookie") on an incoming Node.js request object.
    */
-  private class RequestHeaderAccess extends HTTP::RequestHeaderAccess {
+  private class RequestHeaderAccess extends Http::RequestHeaderAccess {
     RequestNode request;
 
     RequestHeaderAccess() {
@@ -247,14 +247,14 @@ module NodeJSLib {
       result = this.(DataFlow::PropRead).getPropertyName().toLowerCase()
     }
 
-    override HTTP::RouteHandler getRouteHandler() { result = request.getRouteHandler() }
+    override Http::RouteHandler getRouteHandler() { result = request.getRouteHandler() }
 
     override string getKind() { result = "header" }
 
     RequestNode getRequest() { result = request }
   }
 
-  class RouteSetup extends DataFlow::CallNode, HTTP::Servers::StandardRouteSetup {
+  class RouteSetup extends DataFlow::CallNode, Http::Servers::StandardRouteSetup {
     ServerDefinition server;
     DataFlow::Node handler;
 
@@ -282,7 +282,7 @@ module NodeJSLib {
         result = succ.backtrack(t2, t)
         or
         t = t2 and
-        HTTP::routeHandlerStep(result, succ)
+        Http::routeHandlerStep(result, succ)
       )
     }
 
@@ -300,12 +300,12 @@ module NodeJSLib {
     DataFlow::Node getRouteHandlerNode() { result = handler }
   }
 
-  abstract private class HeaderDefinition extends HTTP::Servers::StandardHeaderDefinition {
+  abstract private class HeaderDefinition extends Http::Servers::StandardHeaderDefinition {
     ResponseNode r;
 
     HeaderDefinition() { this.getReceiver() = r }
 
-    override HTTP::RouteHandler getRouteHandler() { result = r.getRouteHandler() }
+    override Http::RouteHandler getRouteHandler() { result = r.getRouteHandler() }
   }
 
   /**
@@ -403,8 +403,8 @@ module NodeJSLib {
    * An expression passed as the first argument to the `write` or `end` method
    * of an HTTP response.
    */
-  private class ResponseSendArgument extends HTTP::ResponseSendArgument {
-    HTTP::RouteHandler rh;
+  private class ResponseSendArgument extends Http::ResponseSendArgument {
+    Http::RouteHandler rh;
 
     ResponseSendArgument() {
       exists(DataFlow::MethodCallNode mcn, string m | m = "write" or m = "end" |
@@ -415,13 +415,13 @@ module NodeJSLib {
       )
     }
 
-    override HTTP::RouteHandler getRouteHandler() { result = rh }
+    override Http::RouteHandler getRouteHandler() { result = rh }
   }
 
   /**
    * An expression that creates a new Node.js server.
    */
-  class ServerDefinition extends HTTP::Servers::StandardServerDefinition {
+  class ServerDefinition extends Http::Servers::StandardServerDefinition {
     ServerDefinition() { isCreateServer(this) }
   }
 
@@ -820,7 +820,7 @@ module NodeJSLib {
    *
    * For example, this could be the function `function(req, res){...}`.
    */
-  class RouteHandlerCandidate extends HTTP::RouteHandlerCandidate {
+  class RouteHandlerCandidate extends Http::RouteHandlerCandidate {
     RouteHandlerCandidate() {
       exists(string request, string response |
         (request = "request" or request = "req") and
@@ -840,7 +840,7 @@ module NodeJSLib {
    * A function that flows to a route setup.
    */
   private class TrackedRouteHandlerCandidateWithSetup extends RouteHandler,
-    HTTP::Servers::StandardRouteHandler, DataFlow::FunctionNode {
+    Http::Servers::StandardRouteHandler, DataFlow::FunctionNode {
     TrackedRouteHandlerCandidateWithSetup() { this = any(RouteSetup s).getARouteHandler() }
   }
 
@@ -871,7 +871,7 @@ module NodeJSLib {
    * For example, this could be the call `server.on("request", handler)`
    * where it is unknown if `server` is a Node.js server.
    */
-  class RouteSetupCandidate extends HTTP::RouteSetupCandidate, DataFlow::MethodCallNode {
+  class RouteSetupCandidate extends Http::RouteSetupCandidate, DataFlow::MethodCallNode {
     DataFlow::ValueNode arg;
 
     RouteSetupCandidate() {
@@ -912,7 +912,7 @@ module NodeJSLib {
       exists(string moduleName, DataFlow::SourceNode callee | this = callee.getACall() |
         (moduleName = "http" or moduleName = "https") and
         (
-          callee = DataFlow::moduleMember(moduleName, any(HTTP::RequestMethodName m).toLowerCase())
+          callee = DataFlow::moduleMember(moduleName, any(Http::RequestMethodName m).toLowerCase())
           or
           callee = DataFlow::moduleMember(moduleName, "request")
         ) and
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/Request.qll b/javascript/ql/lib/semmle/javascript/frameworks/Request.qll
index 392a84c51a4..3551da6f0c1 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/Request.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/Request.qll
@@ -17,7 +17,7 @@ module Request {
           action = mod.getAnInvocation()
           or
           // specialized form: `request.get(...)`
-          action = mod.getAMemberCall(any(HTTP::RequestMethodName n).toLowerCase())
+          action = mod.getAMemberCall(any(Http::RequestMethodName n).toLowerCase())
         )
       |
         exists(DataFlow::MethodCallNode auth, int argIndex |
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/Restify.qll b/javascript/ql/lib/semmle/javascript/frameworks/Restify.qll
index 492416171da..889369c6ea4 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/Restify.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/Restify.qll
@@ -9,7 +9,7 @@ module Restify {
   /**
    * An expression that creates a new Restify server.
    */
-  class ServerDefinition extends HTTP::Servers::StandardServerDefinition, DataFlow::CallNode {
+  class ServerDefinition extends Http::Servers::StandardServerDefinition, DataFlow::CallNode {
     ServerDefinition() {
       // `server = restify.createServer()`
       this = DataFlow::moduleMember("restify", "createServer").getACall()
@@ -19,7 +19,7 @@ module Restify {
   /**
    * A Restify route handler.
    */
-  class RouteHandler extends HTTP::Servers::StandardRouteHandler, DataFlow::ValueNode {
+  class RouteHandler extends Http::Servers::StandardRouteHandler, DataFlow::ValueNode {
     Function function;
 
     RouteHandler() {
@@ -42,7 +42,7 @@ module Restify {
    * A Restify response source, that is, the response parameter of a
    * route handler.
    */
-  private class ResponseSource extends HTTP::Servers::ResponseSource {
+  private class ResponseSource extends Http::Servers::ResponseSource {
     RouteHandler rh;
 
     ResponseSource() { this = DataFlow::parameterNode(rh.getResponseParameter()) }
@@ -57,7 +57,7 @@ module Restify {
    * A Restify request source, that is, the request parameter of a
    * route handler.
    */
-  private class RequestSource extends HTTP::Servers::RequestSource {
+  private class RequestSource extends Http::Servers::RequestSource {
     RouteHandler rh;
 
     RequestSource() { this = DataFlow::parameterNode(rh.getRequestParameter()) }
@@ -101,7 +101,7 @@ module Restify {
   /**
    * An access to a user-controlled Restify request input.
    */
-  private class RequestInputAccess extends HTTP::RequestInputAccess {
+  private class RequestInputAccess extends Http::RequestInputAccess {
     RequestNode request;
     string kind;
 
@@ -140,7 +140,7 @@ module Restify {
   /**
    * An HTTP header defined in a Restify server.
    */
-  private class HeaderDefinition extends HTTP::Servers::StandardHeaderDefinition {
+  private class HeaderDefinition extends Http::Servers::StandardHeaderDefinition {
     HeaderDefinition() {
       // response.header('Cache-Control', 'no-cache')
       this.getReceiver() instanceof ResponseNode and
@@ -153,13 +153,13 @@ module Restify {
   /**
    * A call to a Restify method that sets up a route.
    */
-  class RouteSetup extends DataFlow::MethodCallNode, HTTP::Servers::StandardRouteSetup {
+  class RouteSetup extends DataFlow::MethodCallNode, Http::Servers::StandardRouteSetup {
     ServerDefinition server;
 
     RouteSetup() {
       // server.get('/', fun)
       // server.head('/', fun)
-      server.ref().getAMethodCall(any(HTTP::RequestMethodName m).toLowerCase()) = this
+      server.ref().getAMethodCall(any(Http::RequestMethodName m).toLowerCase()) = this
     }
 
     override DataFlow::SourceNode getARouteHandler() { result.flowsTo(this.getArgument(1)) }
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/Templating.qll b/javascript/ql/lib/semmle/javascript/frameworks/Templating.qll
index 90adf7d7de6..d66ca3baab2 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/Templating.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/Templating.qll
@@ -151,7 +151,7 @@ module Templating {
 
     /** Gets the data flow node representing the initialization of the given variable in this scope. */
     DataFlow::Node getVariableInit(string name) {
-      result = DataFlow::ssaDefinitionNode(SSA::implicitInit(this.getScope().getVariable(name)))
+      result = DataFlow::ssaDefinitionNode(Ssa::implicitInit(this.getScope().getVariable(name)))
     }
 
     /** Gets a data flow node corresponding to a use of the given template variable within this top-level. */
diff --git a/javascript/ql/lib/semmle/javascript/frameworks/WebSocket.qll b/javascript/ql/lib/semmle/javascript/frameworks/WebSocket.qll
index 16e5187081e..a02da6c9f86 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/WebSocket.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/WebSocket.qll
@@ -226,21 +226,21 @@ module ServerWebSocket {
    * A `socket.on("connection", (msg, req) => {})` call seen as a HTTP route handler.
    * `req` is a `HTTP::IncomingMessage` instance.
    */
-  class ConnectionCallAsRouteHandler extends HTTP::RouteHandler, DataFlow::CallNode {
+  class ConnectionCallAsRouteHandler extends Http::RouteHandler, DataFlow::CallNode {
     ConnectionCallAsRouteHandler() { this = getAConnectionCall(_) }
 
-    override HTTP::HeaderDefinition getAResponseHeader(string name) { none() }
+    override Http::HeaderDefinition getAResponseHeader(string name) { none() }
   }
 
   /**
    * The `req` parameter of a `socket.on("connection", (msg, req) => {})` call.
    */
-  class ServerHttpRequest extends HTTP::Servers::RequestSource {
+  class ServerHttpRequest extends Http::Servers::RequestSource {
     ConnectionCallAsRouteHandler handler;
 
     ServerHttpRequest() { this = handler.getCallback(1).getParameter(1) }
 
-    override HTTP::RouteHandler getRouteHandler() { result = handler }
+    override Http::RouteHandler getRouteHandler() { result = handler }
   }
 
   /** DEPRECATED: Alias for ServerHttpRequest */
@@ -249,7 +249,7 @@ module ServerWebSocket {
   /**
    * An access user-controlled HTTP request input in a request to a WebSocket server.
    */
-  class WebSocketRequestInput extends HTTP::RequestInputAccess {
+  class WebSocketRequestInput extends Http::RequestInputAccess {
     ServerHttpRequest request;
     string kind;
 
@@ -267,7 +267,7 @@ module ServerWebSocket {
 
     override string getKind() { result = kind }
 
-    override HTTP::RouteHandler getRouteHandler() { result = request.getRouteHandler() }
+    override Http::RouteHandler getRouteHandler() { result = request.getRouteHandler() }
   }
 
   /**
diff --git a/javascript/ql/lib/semmle/javascript/heuristics/AdditionalRouteHandlers.qll b/javascript/ql/lib/semmle/javascript/heuristics/AdditionalRouteHandlers.qll
index 1d873a3f2a9..76a8aff557b 100644
--- a/javascript/ql/lib/semmle/javascript/heuristics/AdditionalRouteHandlers.qll
+++ b/javascript/ql/lib/semmle/javascript/heuristics/AdditionalRouteHandlers.qll
@@ -11,14 +11,14 @@ private import semmle.javascript.frameworks.ConnectExpressShared
  * Add `NodeJSLib::RouteHandlerCandidate` to the extent of `NodeJSLib::RouteHandler`.
  */
 private class PromotedNodeJSLibCandidate extends NodeJSLib::RouteHandler,
-  HTTP::Servers::StandardRouteHandler {
+  Http::Servers::StandardRouteHandler {
   PromotedNodeJSLibCandidate() { this instanceof NodeJSLib::RouteHandlerCandidate }
 }
 
 /**
  * Add `Hapi::RouteHandlerCandidate` to the extent of `Hapi::RouteHandler`.
  */
-private class PromotedHapiCandidate extends Hapi::RouteHandler, HTTP::Servers::StandardRouteHandler {
+private class PromotedHapiCandidate extends Hapi::RouteHandler, Http::Servers::StandardRouteHandler {
   PromotedHapiCandidate() { this instanceof Hapi::RouteHandlerCandidate }
 }
 
@@ -26,7 +26,7 @@ private class PromotedHapiCandidate extends Hapi::RouteHandler, HTTP::Servers::S
  * Add `ConnectExpressShared::RouteHandlerCandidate` to the extent of `Express::RouteHandler`.
  */
 private class PromotedExpressCandidate extends Express::RouteHandler,
-  HTTP::Servers::StandardRouteHandler {
+  Http::Servers::StandardRouteHandler {
   PromotedExpressCandidate() { this instanceof ConnectExpressShared::RouteHandlerCandidate }
 
   override DataFlow::ParameterNode getRouteHandlerParameter(string kind) {
@@ -38,7 +38,7 @@ private class PromotedExpressCandidate extends Express::RouteHandler,
  * Add `ConnectExpressShared::RouteHandlerCandidate` to the extent of `Connect::RouteHandler`.
  */
 private class PromotedConnectCandidate extends Connect::RouteHandler,
-  HTTP::Servers::StandardRouteHandler {
+  Http::Servers::StandardRouteHandler {
   PromotedConnectCandidate() { this instanceof ConnectExpressShared::RouteHandlerCandidate }
 
   override DataFlow::ParameterNode getRouteHandlerParameter(string kind) {
diff --git a/javascript/ql/lib/semmle/javascript/security/SensitiveActions.qll b/javascript/ql/lib/semmle/javascript/security/SensitiveActions.qll
index 504ebad9e35..aad1e3fddd6 100644
--- a/javascript/ql/lib/semmle/javascript/security/SensitiveActions.qll
+++ b/javascript/ql/lib/semmle/javascript/security/SensitiveActions.qll
@@ -96,7 +96,7 @@ private predicate writesProperty(DataFlow::Node node, string name) {
   exists(VarDef v | v.getAVariable().getName() = name |
     if exists(v.getSource())
     then v.getSource() = node.asExpr()
-    else node = DataFlow::ssaDefinitionNode(SSA::definition(v))
+    else node = DataFlow::ssaDefinitionNode(Ssa::definition(v))
   )
 }
 
diff --git a/javascript/ql/lib/semmle/javascript/security/TaintedObject.qll b/javascript/ql/lib/semmle/javascript/security/TaintedObject.qll
index 6c5c0f21057..eac7dd4e762 100644
--- a/javascript/ql/lib/semmle/javascript/security/TaintedObject.qll
+++ b/javascript/ql/lib/semmle/javascript/security/TaintedObject.qll
@@ -75,7 +75,7 @@ module TaintedObject {
 
   /** Request input accesses as a JSON source. */
   private class RequestInputAsSource extends Source {
-    RequestInputAsSource() { this.(HTTP::RequestInputAccess).isUserControlledObject() }
+    RequestInputAsSource() { this.(Http::RequestInputAccess).isUserControlledObject() }
   }
 
   /**
diff --git a/javascript/ql/lib/semmle/javascript/security/UselessUseOfCat.qll b/javascript/ql/lib/semmle/javascript/security/UselessUseOfCat.qll
index c2244de9d7e..5428e14abee 100644
--- a/javascript/ql/lib/semmle/javascript/security/UselessUseOfCat.qll
+++ b/javascript/ql/lib/semmle/javascript/security/UselessUseOfCat.qll
@@ -127,7 +127,7 @@ class UselessCat extends CommandCall {
         or
         // `exec` can use 3 parameters, `readFile` can only use two, so it is OK to have a third parameter if it is unused,
         func.getNumParameter() = 3 and
-        not exists(SSA::definition(func.getParameter(2).getParameter()))
+        not exists(Ssa::definition(func.getParameter(2).getParameter()))
       )
     ) and
     // The process returned by an async call is unused.
diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/CleartextStorageCustomizations.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/CleartextStorageCustomizations.qll
index ef2090b3dea..d158e4b0cac 100644
--- a/javascript/ql/lib/semmle/javascript/security/dataflow/CleartextStorageCustomizations.qll
+++ b/javascript/ql/lib/semmle/javascript/security/dataflow/CleartextStorageCustomizations.qll
@@ -49,7 +49,7 @@ module CleartextStorage {
    */
   class CookieStorageSink extends Sink {
     CookieStorageSink() {
-      exists(HTTP::CookieDefinition cookieDef |
+      exists(Http::CookieDefinition cookieDef |
         this = cookieDef.getValueArgument() or
         this = cookieDef.getHeaderArgument()
       )
diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/CorsMisconfigurationForCredentialsCustomizations.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/CorsMisconfigurationForCredentialsCustomizations.qll
index 24c9a707bd0..79868ea9989 100644
--- a/javascript/ql/lib/semmle/javascript/security/dataflow/CorsMisconfigurationForCredentialsCustomizations.qll
+++ b/javascript/ql/lib/semmle/javascript/security/dataflow/CorsMisconfigurationForCredentialsCustomizations.qll
@@ -19,7 +19,7 @@ module CorsMisconfigurationForCredentials {
     /**
      * Gets the "Access-Control-Allow-Credentials" header definition.
      */
-    abstract HTTP::HeaderDefinition getCredentialsHeader();
+    abstract Http::HeaderDefinition getCredentialsHeader();
   }
 
   /**
@@ -41,11 +41,11 @@ module CorsMisconfigurationForCredentials {
    * HTTP header with a truthy value.
    */
   class CorsOriginHeaderWithAssociatedCredentialHeader extends Sink, DataFlow::ValueNode {
-    HTTP::ExplicitHeaderDefinition credentials;
+    Http::ExplicitHeaderDefinition credentials;
 
     CorsOriginHeaderWithAssociatedCredentialHeader() {
       exists(
-        HTTP::RouteHandler routeHandler, HTTP::ExplicitHeaderDefinition origin,
+        Http::RouteHandler routeHandler, Http::ExplicitHeaderDefinition origin,
         DataFlow::Node credentialsValue
       |
         routeHandler.getAResponseHeader(_) = origin and
@@ -58,7 +58,7 @@ module CorsMisconfigurationForCredentials {
       )
     }
 
-    override HTTP::HeaderDefinition getCredentialsHeader() { result = credentials }
+    override Http::HeaderDefinition getCredentialsHeader() { result = credentials }
   }
 
   /**
diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/DifferentKindsComparisonBypassCustomizations.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/DifferentKindsComparisonBypassCustomizations.qll
index bfb30cc2c99..956fe352854 100644
--- a/javascript/ql/lib/semmle/javascript/security/dataflow/DifferentKindsComparisonBypassCustomizations.qll
+++ b/javascript/ql/lib/semmle/javascript/security/dataflow/DifferentKindsComparisonBypassCustomizations.qll
@@ -31,7 +31,7 @@ module DifferentKindsComparisonBypass {
    * A HTTP request input that is suspicious to compare with another HTTP request input of a different kind.
    */
   class RequestInputComparisonSource extends Source {
-    HTTP::RequestInputAccess input;
+    Http::RequestInputAccess input;
 
     RequestInputComparisonSource() { input = this }
 
@@ -42,7 +42,7 @@ module DifferentKindsComparisonBypass {
     /**
      * Gets the HTTP request input of this source.
      */
-    private HTTP::RequestInputAccess getInput() { result = input }
+    private Http::RequestInputAccess getInput() { result = input }
   }
 
   /**
diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/HostHeaderPoisoningInEmailGenerationQuery.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/HostHeaderPoisoningInEmailGenerationQuery.qll
index 2a41b76dc80..f87938dfb71 100644
--- a/javascript/ql/lib/semmle/javascript/security/dataflow/HostHeaderPoisoningInEmailGenerationQuery.qll
+++ b/javascript/ql/lib/semmle/javascript/security/dataflow/HostHeaderPoisoningInEmailGenerationQuery.qll
@@ -12,7 +12,7 @@ class Configuration extends TaintTracking::Configuration {
   Configuration() { this = "TaintedHostHeader" }
 
   override predicate isSource(DataFlow::Node node) {
-    exists(HTTP::RequestHeaderAccess input | node = input |
+    exists(Http::RequestHeaderAccess input | node = input |
       input.getKind() = "header" and
       input.getAHeaderName() = "host"
     )
diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/HttpToFileAccessSpecific.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/HttpToFileAccessSpecific.qll
index a7b6cca1360..7ed38fdf3f2 100644
--- a/javascript/ql/lib/semmle/javascript/security/dataflow/HttpToFileAccessSpecific.qll
+++ b/javascript/ql/lib/semmle/javascript/security/dataflow/HttpToFileAccessSpecific.qll
@@ -9,7 +9,7 @@ private import HttpToFileAccessCustomizations::HttpToFileAccess
  * An access to a user-controlled HTTP request input, considered as a flow source for writing user-controlled data to files
  */
 private class RequestInputAccessAsSource extends Source {
-  RequestInputAccessAsSource() { this instanceof HTTP::RequestInputAccess }
+  RequestInputAccessAsSource() { this instanceof Http::RequestInputAccess }
 }
 
 /** A response from a server, considered as a flow source for writing user-controlled data to files. */
diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/ReflectedXssCustomizations.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/ReflectedXssCustomizations.qll
index 2969d118c60..2b8f9112dd2 100644
--- a/javascript/ql/lib/semmle/javascript/security/dataflow/ReflectedXssCustomizations.qll
+++ b/javascript/ql/lib/semmle/javascript/security/dataflow/ReflectedXssCustomizations.qll
@@ -24,15 +24,15 @@ module ReflectedXss {
    * a content type that does not (case-insensitively) contain the string "html". This
    * is to prevent us from flagging plain-text or JSON responses as vulnerable.
    */
-  class HttpResponseSink extends Sink instanceof HTTP::ResponseSendArgument {
+  class HttpResponseSink extends Sink instanceof Http::ResponseSendArgument {
     HttpResponseSink() { not exists(getANonHtmlHeaderDefinition(this)) }
   }
 
   /**
    * Gets a HeaderDefinition that defines a non-html content-type for `send`.
    */
-  HTTP::HeaderDefinition getANonHtmlHeaderDefinition(HTTP::ResponseSendArgument send) {
-    exists(HTTP::RouteHandler h |
+  Http::HeaderDefinition getANonHtmlHeaderDefinition(Http::ResponseSendArgument send) {
+    exists(Http::RouteHandler h |
       send.getRouteHandler() = h and
       result = nonHtmlContentTypeHeader(h)
     |
@@ -44,7 +44,7 @@ module ReflectedXss {
   /**
    * Holds if `h` may send a response with a content type other than HTML.
    */
-  HTTP::HeaderDefinition nonHtmlContentTypeHeader(HTTP::RouteHandler h) {
+  Http::HeaderDefinition nonHtmlContentTypeHeader(Http::RouteHandler h) {
     result = h.getAResponseHeader("content-type") and
     not exists(string tp | result.defines("content-type", tp) | tp.regexpMatch("(?i).*html.*"))
   }
@@ -52,7 +52,7 @@ module ReflectedXss {
   /**
    * Holds if a header set in `header` is likely to affect a response sent at `sender`.
    */
-  predicate headerAffects(HTTP::HeaderDefinition header, HTTP::ResponseSendArgument sender) {
+  predicate headerAffects(Http::HeaderDefinition header, Http::ResponseSendArgument sender) {
     sender.getRouteHandler() = header.getRouteHandler() and
     (
       // `sender` is affected by a dominating `header`.
@@ -60,7 +60,7 @@ module ReflectedXss {
       or
       // There is no dominating header, and `header` is non-local.
       not isLocalHeaderDefinition(header) and
-      not exists(HTTP::HeaderDefinition dominatingHeader |
+      not exists(Http::HeaderDefinition dominatingHeader |
         dominatingHeader.getBasicBlock().(ReachableBasicBlock).dominates(sender.getBasicBlock())
       )
     )
@@ -77,10 +77,10 @@ module ReflectedXss {
    * return;
    * ```
    */
-  predicate isLocalHeaderDefinition(HTTP::HeaderDefinition header) {
+  predicate isLocalHeaderDefinition(Http::HeaderDefinition header) {
     exists(ReachableBasicBlock headerBlock | headerBlock = header.getBasicBlock() |
       1 =
-        strictcount(HTTP::ResponseSendArgument sender |
+        strictcount(Http::ResponseSendArgument sender |
           sender.getRouteHandler() = header.getRouteHandler() and
           header.getBasicBlock().(ReachableBasicBlock).dominates(sender.getBasicBlock())
         ) and
@@ -108,9 +108,9 @@ module ReflectedXss {
   /** A third-party controllable request input, considered as a flow source for reflected XSS. */
   class ThirdPartyRequestInputAccessAsSource extends Source {
     ThirdPartyRequestInputAccessAsSource() {
-      this.(HTTP::RequestInputAccess).isThirdPartyControllable()
+      this.(Http::RequestInputAccess).isThirdPartyControllable()
       or
-      this.(HTTP::RequestHeaderAccess).getAHeaderName() = "referer"
+      this.(Http::RequestHeaderAccess).getAHeaderName() = "referer"
     }
   }
 }
diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/RemotePropertyInjectionCustomizations.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/RemotePropertyInjectionCustomizations.qll
index d060f91b371..c4605f655d8 100644
--- a/javascript/ql/lib/semmle/javascript/security/dataflow/RemotePropertyInjectionCustomizations.qll
+++ b/javascript/ql/lib/semmle/javascript/security/dataflow/RemotePropertyInjectionCustomizations.qll
@@ -59,7 +59,7 @@ module RemotePropertyInjection {
    */
   class HeaderNameSink extends Sink {
     HeaderNameSink() {
-      exists(HTTP::ExplicitHeaderDefinition hd |
+      exists(Http::ExplicitHeaderDefinition hd |
         not hd instanceof Express::SetMultipleHeaders and
         this = hd.getNameNode()
       )
diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/ServerSideUrlRedirectCustomizations.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/ServerSideUrlRedirectCustomizations.qll
index db62f29c8dd..c15dbc2ecf8 100644
--- a/javascript/ql/lib/semmle/javascript/security/dataflow/ServerSideUrlRedirectCustomizations.qll
+++ b/javascript/ql/lib/semmle/javascript/security/dataflow/ServerSideUrlRedirectCustomizations.qll
@@ -26,7 +26,7 @@ module ServerSideUrlRedirect {
   /** A source of third-party user input, considered as a flow source for URL redirects. */
   class ThirdPartyRequestInputAccessAsSource extends Source {
     ThirdPartyRequestInputAccessAsSource() {
-      this.(HTTP::RequestInputAccess).isThirdPartyControllable()
+      this.(Http::RequestInputAccess).isThirdPartyControllable()
     }
   }
 
@@ -34,7 +34,7 @@ module ServerSideUrlRedirect {
    * An HTTP redirect, considered as a sink for `Configuration`.
    */
   class RedirectSink extends Sink {
-    RedirectSink() { this = any(HTTP::RedirectInvocation redir).getUrlArgument() }
+    RedirectSink() { this = any(Http::RedirectInvocation redir).getUrlArgument() }
   }
 
   /**
@@ -43,7 +43,7 @@ module ServerSideUrlRedirect {
    */
   class LocationHeaderSink extends Sink {
     LocationHeaderSink() {
-      any(HTTP::ExplicitHeaderDefinition def).definesHeaderValue("location", this)
+      any(Http::ExplicitHeaderDefinition def).definesHeaderValue("location", this)
     }
   }
 
diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/StackTraceExposureCustomizations.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/StackTraceExposureCustomizations.qll
index 1ee969205fd..205c00f8f79 100644
--- a/javascript/ql/lib/semmle/javascript/security/dataflow/StackTraceExposureCustomizations.qll
+++ b/javascript/ql/lib/semmle/javascript/security/dataflow/StackTraceExposureCustomizations.qll
@@ -32,5 +32,5 @@ module StackTraceExposure {
    * An expression that can become part of an HTTP response body, viewed
    * as a data flow sink for stack trace exposure vulnerabilities.
    */
-  class DefaultSink extends Sink instanceof HTTP::ResponseBody { }
+  class DefaultSink extends Sink instanceof Http::ResponseBody { }
 }
diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/TypeConfusionThroughParameterTamperingCustomizations.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/TypeConfusionThroughParameterTamperingCustomizations.qll
index 3cdc81c66ee..ad608017115 100644
--- a/javascript/ql/lib/semmle/javascript/security/dataflow/TypeConfusionThroughParameterTamperingCustomizations.qll
+++ b/javascript/ql/lib/semmle/javascript/security/dataflow/TypeConfusionThroughParameterTamperingCustomizations.qll
@@ -29,7 +29,7 @@ module TypeConfusionThroughParameterTampering {
    * Node.js-based HTTP servers turn request parameters into arrays if their names are repeated.
    */
   private class TypeTamperableRequestParameter extends Source {
-    TypeTamperableRequestParameter() { this.(HTTP::RequestInputAccess).isUserControlledObject() }
+    TypeTamperableRequestParameter() { this.(Http::RequestInputAccess).isUserControlledObject() }
   }
 
   /**
diff --git a/javascript/ql/lib/semmle/javascript/security/regexp/PolynomialReDoSCustomizations.qll b/javascript/ql/lib/semmle/javascript/security/regexp/PolynomialReDoSCustomizations.qll
index ad464f8f24c..87f9437196f 100644
--- a/javascript/ql/lib/semmle/javascript/security/regexp/PolynomialReDoSCustomizations.qll
+++ b/javascript/ql/lib/semmle/javascript/security/regexp/PolynomialReDoSCustomizations.qll
@@ -48,8 +48,8 @@ module PolynomialReDoS {
    * A remote input to a server, seen as a source for polynomial
    * regular expression denial-of-service vulnerabilities.
    */
-  class RequestInputAccessAsSource extends Source instanceof HTTP::RequestInputAccess {
-    override string getKind() { result = HTTP::RequestInputAccess.super.getKind() }
+  class RequestInputAccessAsSource extends Source instanceof Http::RequestInputAccess {
+    override string getKind() { result = Http::RequestInputAccess.super.getKind() }
   }
 
   /**
diff --git a/javascript/ql/src/Security/CWE-352/MissingCsrfMiddleware.ql b/javascript/ql/src/Security/CWE-352/MissingCsrfMiddleware.ql
index 6240615a6e7..508bdad18b2 100644
--- a/javascript/ql/src/Security/CWE-352/MissingCsrfMiddleware.ql
+++ b/javascript/ql/src/Security/CWE-352/MissingCsrfMiddleware.ql
@@ -35,7 +35,7 @@ predicate isRouteHandlerUsingCookies(Routing::RouteHandler handler) {
  * A router handler following after cookie parsing is assumed to depend on
  * cookies, and thus require CSRF protection.
  */
-predicate hasCookieMiddleware(Routing::Node route, HTTP::CookieMiddlewareInstance cookie) {
+predicate hasCookieMiddleware(Routing::Node route, Http::CookieMiddlewareInstance cookie) {
   route.isGuardedBy(cookie)
 }
 
@@ -112,7 +112,7 @@ private DataFlow::SourceNode nodeLeadingToCsrfWriteOrCheck(DataFlow::TypeBackTra
  * Gets a route handler that sets an CSRF related cookie.
  */
 private Routing::RouteHandler getAHandlerSettingCsrfCookie() {
-  exists(HTTP::CookieDefinition setCookie |
+  exists(Http::CookieDefinition setCookie |
     setCookie.getNameArgument().getStringValue().regexpMatch("(?i).*(csrf|xsrf).*") and
     result = Routing::getRouteHandler(setCookie.getRouteHandler())
   )
@@ -180,7 +180,7 @@ predicate hasCsrfMiddleware(Routing::RouteHandler handler) {
 
 from
   Routing::RouteSetup setup, Routing::Node setupArg, Routing::RouteHandler handler,
-  HTTP::CookieMiddlewareInstance cookie
+  Http::CookieMiddlewareInstance cookie
 where
   // Require that the handler uses cookies and has cookie middleware.
   //
diff --git a/javascript/ql/src/Security/CWE-451/MissingXFrameOptions.ql b/javascript/ql/src/Security/CWE-451/MissingXFrameOptions.ql
index 316af8d4a36..6228d1539ea 100644
--- a/javascript/ql/src/Security/CWE-451/MissingXFrameOptions.ql
+++ b/javascript/ql/src/Security/CWE-451/MissingXFrameOptions.ql
@@ -15,6 +15,6 @@
 import javascript
 import semmle.javascript.frameworks.HTTP
 
-from HTTP::ServerDefinition server
+from Http::ServerDefinition server
 where not exists(server.getARouteHandler().getAResponseHeader("x-frame-options"))
 select server, "This server never sets the 'X-Frame-Options' HTTP header."
diff --git a/javascript/ql/src/Security/CWE-598/SensitiveGetQuery.ql b/javascript/ql/src/Security/CWE-598/SensitiveGetQuery.ql
index 89aeb49b6f4..1dade2a88ca 100644
--- a/javascript/ql/src/Security/CWE-598/SensitiveGetQuery.ql
+++ b/javascript/ql/src/Security/CWE-598/SensitiveGetQuery.ql
@@ -14,7 +14,7 @@
 import javascript
 
 from
-  Routing::RouteSetup setup, Routing::RouteHandler handler, HTTP::RequestInputAccess input,
+  Routing::RouteSetup setup, Routing::RouteHandler handler, Http::RequestInputAccess input,
   SensitiveNode sensitive
 where
   setup.getOwnHttpMethod() = "GET" and
diff --git a/javascript/ql/src/Security/CWE-730/ServerCrash.ql b/javascript/ql/src/Security/CWE-730/ServerCrash.ql
index f5de58d4516..c3cd7dcc842 100644
--- a/javascript/ql/src/Security/CWE-730/ServerCrash.ql
+++ b/javascript/ql/src/Security/CWE-730/ServerCrash.ql
@@ -88,7 +88,7 @@ Function reachableFromAsyncCallback() {
  * The main predicate of this query: used for both result display and path computation.
  */
 predicate main(
-  HTTP::RouteHandler rh, AsyncSentinelCall async, AsyncCallback cb, LikelyExceptionThrower thrower
+  Http::RouteHandler rh, AsyncSentinelCall async, AsyncCallback cb, LikelyExceptionThrower thrower
 ) {
   async.getAsyncCallee() = cb and
   rh.getAstNode() = invokesCallbackThatThrowsUncaughtException(async, thrower)
@@ -180,7 +180,7 @@ query predicate nodes(AstNode node) {
 }
 
 from
-  HTTP::RouteHandler rh, AsyncSentinelCall async, DataFlow::Node callbackArg, AsyncCallback cb,
+  Http::RouteHandler rh, AsyncSentinelCall async, DataFlow::Node callbackArg, AsyncCallback cb,
   ExprOrStmt crasher
 where
   main(rh, async, cb, crasher) and
diff --git a/javascript/ql/src/experimental/poi/PoI.qll b/javascript/ql/src/experimental/poi/PoI.qll
index 68143be6bdd..84134600406 100644
--- a/javascript/ql/src/experimental/poi/PoI.qll
+++ b/javascript/ql/src/experimental/poi/PoI.qll
@@ -77,7 +77,7 @@ private module StandardPoIs {
     UnpromotedRouteSetupPoI() { this = "UnpromotedRouteSetupPoI" }
 
     override predicate is(Node l0) {
-      l0 instanceof HTTP::RouteSetupCandidate and not l0 instanceof HTTP::RouteSetup
+      l0 instanceof Http::RouteSetupCandidate and not l0 instanceof Http::RouteSetup
     }
   }
 
@@ -88,7 +88,7 @@ private module StandardPoIs {
     UnpromotedRouteHandlerPoI() { this = "UnpromotedRouteHandlerPoI" }
 
     override predicate is(Node l0) {
-      l0 instanceof HTTP::RouteHandlerCandidate and not l0 instanceof HTTP::RouteHandler
+      l0 instanceof Http::RouteHandlerCandidate and not l0 instanceof Http::RouteHandler
     }
   }
 
@@ -98,7 +98,7 @@ private module StandardPoIs {
   class UnpromotedRouteHandlerWithFlowPoI extends PoI {
     UnpromotedRouteHandlerWithFlowPoI() { this = "UnpromotedRouteHandlerWithFlowPoI" }
 
-    private DataFlow::SourceNode track(HTTP::RouteHandlerCandidate cand, DataFlow::TypeTracker t) {
+    private DataFlow::SourceNode track(Http::RouteHandlerCandidate cand, DataFlow::TypeTracker t) {
       t.start() and
       result = cand
       or
@@ -106,8 +106,8 @@ private module StandardPoIs {
     }
 
     override predicate is(Node l0, Node l1, string t1) {
-      l0 instanceof HTTP::RouteHandlerCandidate and
-      not l0 instanceof HTTP::RouteHandler and
+      l0 instanceof Http::RouteHandlerCandidate and
+      not l0 instanceof Http::RouteHandler and
       l1 = track(l0, TypeTracker::end()) and
       (if l1 = l0 then t1 = "ends here" else t1 = "starts/ends here")
     }
diff --git a/javascript/ql/src/meta/analysis-quality/CandidateTracking.qll b/javascript/ql/src/meta/analysis-quality/CandidateTracking.qll
index 509d5f2a482..72046169219 100644
--- a/javascript/ql/src/meta/analysis-quality/CandidateTracking.qll
+++ b/javascript/ql/src/meta/analysis-quality/CandidateTracking.qll
@@ -8,7 +8,7 @@ import javascript
  * Gets a source node to which `cand` may flow inter-procedurally, with `t` tracking
  * the state of flow.
  */
-DataFlow::SourceNode track(HTTP::RouteHandlerCandidate cand, DataFlow::TypeTracker t) {
+DataFlow::SourceNode track(Http::RouteHandlerCandidate cand, DataFlow::TypeTracker t) {
   t.start() and
   result = cand
   or
diff --git a/javascript/ql/src/meta/analysis-quality/RouteHandlers.ql b/javascript/ql/src/meta/analysis-quality/RouteHandlers.ql
index 5da34036b18..fe09e0ea866 100644
--- a/javascript/ql/src/meta/analysis-quality/RouteHandlers.ql
+++ b/javascript/ql/src/meta/analysis-quality/RouteHandlers.ql
@@ -11,6 +11,6 @@
 import javascript
 import CallGraphQuality
 
-HTTP::RouteHandler relevantRouteHandler() { not result.getFile() instanceof IgnoredFile }
+Http::RouteHandler relevantRouteHandler() { not result.getFile() instanceof IgnoredFile }
 
 select projectRoot(), count(relevantRouteHandler())
diff --git a/javascript/ql/src/meta/analysis-quality/UnpromotedRouteHandlerCandidate.ql b/javascript/ql/src/meta/analysis-quality/UnpromotedRouteHandlerCandidate.ql
index 89b26d734c5..c59d05932af 100644
--- a/javascript/ql/src/meta/analysis-quality/UnpromotedRouteHandlerCandidate.ql
+++ b/javascript/ql/src/meta/analysis-quality/UnpromotedRouteHandlerCandidate.ql
@@ -11,10 +11,10 @@
 import javascript
 import CandidateTracking
 
-from HTTP::RouteHandlerCandidate rh
+from Http::RouteHandlerCandidate rh
 where
-  not rh instanceof HTTP::RouteHandler and
-  not exists(HTTP::RouteSetupCandidate setup |
+  not rh instanceof Http::RouteHandler and
+  not exists(Http::RouteSetupCandidate setup |
     track(rh, DataFlow::TypeTracker::end()).flowsTo(setup.getARouteHandlerArg())
   )
 select rh,
diff --git a/javascript/ql/src/meta/analysis-quality/UnpromotedRouteSetupCandidate.ql b/javascript/ql/src/meta/analysis-quality/UnpromotedRouteSetupCandidate.ql
index 428f6b4e4b0..1fee417c396 100644
--- a/javascript/ql/src/meta/analysis-quality/UnpromotedRouteSetupCandidate.ql
+++ b/javascript/ql/src/meta/analysis-quality/UnpromotedRouteSetupCandidate.ql
@@ -11,10 +11,10 @@
 import javascript
 import CandidateTracking
 
-from HTTP::RouteSetupCandidate setup
+from Http::RouteSetupCandidate setup
 where
-  not setup instanceof HTTP::RouteSetup and
-  exists(HTTP::RouteHandlerCandidate rh |
+  not setup instanceof Http::RouteSetup and
+  exists(Http::RouteHandlerCandidate rh |
     track(rh, DataFlow::TypeTracker::end()).flowsTo(setup.getARouteHandlerArg())
   )
 select setup,
diff --git a/javascript/ql/test/library-tests/frameworks/Express/CookieMiddlewareInstance.qll b/javascript/ql/test/library-tests/frameworks/Express/CookieMiddlewareInstance.qll
index 2f69ec905ae..025aaf04d00 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/CookieMiddlewareInstance.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/CookieMiddlewareInstance.qll
@@ -1,7 +1,7 @@
 import javascript
 
 query predicate test_CookieMiddlewareInstance(
-  HTTP::CookieMiddlewareInstance instance, DataFlow::Node res
+  Http::CookieMiddlewareInstance instance, DataFlow::Node res
 ) {
   res = instance.getASecretKey()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/Express/HeaderAccess.qll b/javascript/ql/test/library-tests/frameworks/Express/HeaderAccess.qll
index 22d1d6aee53..69d34318ae1 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/HeaderAccess.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/HeaderAccess.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderAccess(HTTP::RequestHeaderAccess access, string res) {
+query predicate test_HeaderAccess(Http::RequestHeaderAccess access, string res) {
   res = access.getAHeaderName()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/Express/HeaderDefinition.qll b/javascript/ql/test/library-tests/frameworks/Express/HeaderDefinition.qll
index 45ec0af926a..115aefb0e80 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/HeaderDefinition.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/HeaderDefinition.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderDefinition(HTTP::HeaderDefinition hd, Express::RouteHandler rh) {
+query predicate test_HeaderDefinition(Http::HeaderDefinition hd, Express::RouteHandler rh) {
   rh = hd.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/Express/HeaderDefinition_defines.qll b/javascript/ql/test/library-tests/frameworks/Express/HeaderDefinition_defines.qll
index 2a82f238c29..eb8e7800cdd 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/HeaderDefinition_defines.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/HeaderDefinition_defines.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderDefinition_defines(HTTP::HeaderDefinition hd, string name, string value) {
+query predicate test_HeaderDefinition_defines(Http::HeaderDefinition hd, string name, string value) {
   hd.defines(name, value) and hd.getRouteHandler() instanceof Express::RouteHandler
 }
diff --git a/javascript/ql/test/library-tests/frameworks/Express/HeaderDefinition_getAHeaderName.qll b/javascript/ql/test/library-tests/frameworks/Express/HeaderDefinition_getAHeaderName.qll
index f618f71ca34..dc534c8cfce 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/HeaderDefinition_getAHeaderName.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/HeaderDefinition_getAHeaderName.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderDefinition_getAHeaderName(HTTP::HeaderDefinition hd, string res) {
+query predicate test_HeaderDefinition_getAHeaderName(Http::HeaderDefinition hd, string res) {
   hd.getRouteHandler() instanceof Express::RouteHandler and res = hd.getAHeaderName()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/Express/HeaderDefinition_getNameExpr.qll b/javascript/ql/test/library-tests/frameworks/Express/HeaderDefinition_getNameExpr.qll
index 2a7da38aee2..717d96cbba3 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/HeaderDefinition_getNameExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/HeaderDefinition_getNameExpr.qll
@@ -1,7 +1,7 @@
 import javascript
 
 query predicate test_HeaderDefinition_getNameExpr(
-  HTTP::ExplicitHeaderDefinition hd, DataFlow::Node res
+  Http::ExplicitHeaderDefinition hd, DataFlow::Node res
 ) {
   hd.getRouteHandler() instanceof Express::RouteHandler and res = hd.getNameNode()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/Express/RedirectInvocation.qll b/javascript/ql/test/library-tests/frameworks/Express/RedirectInvocation.qll
index 909c3779416..3f1b8710454 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/RedirectInvocation.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/RedirectInvocation.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_RedirectInvocation(HTTP::RedirectInvocation red, Express::RouteHandler rh) {
+query predicate test_RedirectInvocation(Http::RedirectInvocation red, Express::RouteHandler rh) {
   rh = red.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/Express/RequestExpr.qll b/javascript/ql/test/library-tests/frameworks/Express/RequestExpr.qll
index 87c0bf32b0f..07ff4f22e0a 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/RequestExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/RequestExpr.qll
@@ -1,6 +1,6 @@
 import javascript
 
-query predicate test_RequestExpr(Express::RequestNode e, HTTP::RouteHandler res) {
+query predicate test_RequestExpr(Express::RequestNode e, Http::RouteHandler res) {
   res = e.getRouteHandler()
 }
 
diff --git a/javascript/ql/test/library-tests/frameworks/Express/RequestInputAccess.qll b/javascript/ql/test/library-tests/frameworks/Express/RequestInputAccess.qll
index c27020e2aa1..8a7f2f046e2 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/RequestInputAccess.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/RequestInputAccess.qll
@@ -1,7 +1,7 @@
 import javascript
 
 query predicate test_RequestInputAccess(
-  HTTP::RequestInputAccess ria, string res0, Express::RouteHandler rh
+  Http::RequestInputAccess ria, string res0, Express::RouteHandler rh
 ) {
   ria.getRouteHandler() = rh and res0 = ria.getKind()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/Express/ResponseBody.qll b/javascript/ql/test/library-tests/frameworks/Express/ResponseBody.qll
index db571874490..8091681dfd7 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/ResponseBody.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/ResponseBody.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_ResponseBody(HTTP::ResponseBody rb, Express::RouteHandler rh) {
+query predicate test_ResponseBody(Http::ResponseBody rb, Express::RouteHandler rh) {
   rb.getRouteHandler() = rh
 }
diff --git a/javascript/ql/test/library-tests/frameworks/Express/ResponseExpr.qll b/javascript/ql/test/library-tests/frameworks/Express/ResponseExpr.qll
index ad96e943511..5e911c96993 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/ResponseExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/ResponseExpr.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_ResponseExpr(Express::ResponseNode e, HTTP::RouteHandler res) {
+query predicate test_ResponseExpr(Express::ResponseNode e, Http::RouteHandler res) {
   res = e.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/Express/ResponseSendArgument.qll b/javascript/ql/test/library-tests/frameworks/Express/ResponseSendArgument.qll
index fec7829f284..5fe3699e89c 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/ResponseSendArgument.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/ResponseSendArgument.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_ResponseSendArgument(HTTP::ResponseSendArgument send, Express::RouteHandler rh) {
+query predicate test_ResponseSendArgument(Http::ResponseSendArgument send, Express::RouteHandler rh) {
   rh = send.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/Express/RouteHandlerContainer.qll b/javascript/ql/test/library-tests/frameworks/Express/RouteHandlerContainer.qll
index af341dc3028..994e8a318e2 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/RouteHandlerContainer.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/RouteHandlerContainer.qll
@@ -1,7 +1,7 @@
 import javascript
 
 query predicate getRouteHandlerContainerStep(
-  HTTP::RouteHandlerCandidateContainer container, DataFlow::SourceNode handler,
+  Http::RouteHandlerCandidateContainer container, DataFlow::SourceNode handler,
   DataFlow::SourceNode access
 ) {
   handler = container.getRouteHandler(access)
diff --git a/javascript/ql/test/library-tests/frameworks/Express/RouteHandler_getARequestExpr.qll b/javascript/ql/test/library-tests/frameworks/Express/RouteHandler_getARequestExpr.qll
index 652b0a1bbde..04b657d87c3 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/RouteHandler_getARequestExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/RouteHandler_getARequestExpr.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_RouteHandler_getARequestExpr(Express::RouteHandler rh, HTTP::RequestNode res) {
+query predicate test_RouteHandler_getARequestExpr(Express::RouteHandler rh, Http::RequestNode res) {
   res = rh.getARequestNode()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/Express/RouteHandler_getAResponseExpr.qll b/javascript/ql/test/library-tests/frameworks/Express/RouteHandler_getAResponseExpr.qll
index 6f9fece338d..70fead62bd5 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/RouteHandler_getAResponseExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/RouteHandler_getAResponseExpr.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_RouteHandler_getAResponseExpr(Express::RouteHandler rh, HTTP::ResponseNode res) {
+query predicate test_RouteHandler_getAResponseExpr(Express::RouteHandler rh, Http::ResponseNode res) {
   res = rh.getAResponseNode()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/Express/RouteHandler_getAResponseHeader.qll b/javascript/ql/test/library-tests/frameworks/Express/RouteHandler_getAResponseHeader.qll
index 24f59d9b604..490205a9881 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/RouteHandler_getAResponseHeader.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/RouteHandler_getAResponseHeader.qll
@@ -1,7 +1,7 @@
 import javascript
 
 query predicate test_RouteHandler_getAResponseHeader(
-  Express::RouteHandler rh, string name, HTTP::HeaderDefinition res
+  Express::RouteHandler rh, string name, Http::HeaderDefinition res
 ) {
   res = rh.getAResponseHeader(name)
 }
diff --git a/javascript/ql/test/library-tests/frameworks/Express/RouteSetup_getRequestMethod.qll b/javascript/ql/test/library-tests/frameworks/Express/RouteSetup_getRequestMethod.qll
index 48b0477a710..22d02c637ea 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/RouteSetup_getRequestMethod.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/RouteSetup_getRequestMethod.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_RouteSetup_getRequestMethod(Express::RouteSetup rs, HTTP::RequestMethodName res) {
+query predicate test_RouteSetup_getRequestMethod(Express::RouteSetup rs, Http::RequestMethodName res) {
   res = rs.getRequestMethod()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/Express/RouterDefinition_getARouteHandler.qll b/javascript/ql/test/library-tests/frameworks/Express/RouterDefinition_getARouteHandler.qll
index d9a5314002b..0117cbc3e1e 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/RouterDefinition_getARouteHandler.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/RouterDefinition_getARouteHandler.qll
@@ -1,7 +1,7 @@
 import javascript
 
 query predicate test_RouterDefinition_getARouteHandler(
-  Express::RouterDefinition r, HTTP::RouteHandler res
+  Express::RouterDefinition r, Http::RouteHandler res
 ) {
   res = r.getARouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/Express/SetCookie.qll b/javascript/ql/test/library-tests/frameworks/Express/SetCookie.qll
index adaa6cd3959..5e6c10d9ce4 100644
--- a/javascript/ql/test/library-tests/frameworks/Express/SetCookie.qll
+++ b/javascript/ql/test/library-tests/frameworks/Express/SetCookie.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_SetCookie(HTTP::CookieDefinition cookiedef, Express::RouteHandler rh) {
+query predicate test_SetCookie(Http::CookieDefinition cookiedef, Express::RouteHandler rh) {
   rh = cookiedef.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/Firebase/tests.ql b/javascript/ql/test/library-tests/frameworks/Firebase/tests.ql
index 5cc891ec78c..13f4a097102 100644
--- a/javascript/ql/test/library-tests/frameworks/Firebase/tests.ql
+++ b/javascript/ql/test/library-tests/frameworks/Firebase/tests.ql
@@ -6,8 +6,8 @@ query predicate firebaseSnapshot(DataFlow::SourceNode snap) { snap = Firebase::s
 
 query predicate firebaseVal(Firebase::FirebaseVal val) { any() }
 
-query predicate requestInputAccess(HTTP::RequestInputAccess acc) { any() }
+query predicate requestInputAccess(Http::RequestInputAccess acc) { any() }
 
-query predicate responseSendArgument(HTTP::ResponseSendArgument send) { any() }
+query predicate responseSendArgument(Http::ResponseSendArgument send) { any() }
 
-query predicate routeHandler(HTTP::RouteHandler handler) { any() }
+query predicate routeHandler(Http::RouteHandler handler) { any() }
diff --git a/javascript/ql/test/library-tests/frameworks/HTTP-heuristics/AdditionalRouteHandlers.ql b/javascript/ql/test/library-tests/frameworks/HTTP-heuristics/AdditionalRouteHandlers.ql
index 6f35b3854d3..d91d43b7cde 100644
--- a/javascript/ql/test/library-tests/frameworks/HTTP-heuristics/AdditionalRouteHandlers.ql
+++ b/javascript/ql/test/library-tests/frameworks/HTTP-heuristics/AdditionalRouteHandlers.ql
@@ -1,5 +1,5 @@
 import javascript
 private import semmle.javascript.heuristics.AdditionalRouteHandlers
 
-from HTTP::RouteHandler rh
+from Http::RouteHandler rh
 select rh
diff --git a/javascript/ql/test/library-tests/frameworks/HTTP-heuristics/tests.ql b/javascript/ql/test/library-tests/frameworks/HTTP-heuristics/tests.ql
index ce0066ac8df..c85948e7552 100644
--- a/javascript/ql/test/library-tests/frameworks/HTTP-heuristics/tests.ql
+++ b/javascript/ql/test/library-tests/frameworks/HTTP-heuristics/tests.ql
@@ -1,9 +1,9 @@
 import javascript
 
-query predicate routeHandler(HTTP::RouteHandler rh) { any() }
+query predicate routeHandler(Http::RouteHandler rh) { any() }
 
-query predicate routeHandlerCandidate(HTTP::RouteHandlerCandidate rh) { any() }
+query predicate routeHandlerCandidate(Http::RouteHandlerCandidate rh) { any() }
 
-query predicate routeSetup(HTTP::RouteSetup rh) { any() }
+query predicate routeSetup(Http::RouteSetup rh) { any() }
 
-query predicate routeSetupCandidate(HTTP::RouteSetupCandidate rh) { any() }
+query predicate routeSetupCandidate(Http::RouteSetupCandidate rh) { any() }
diff --git a/javascript/ql/test/library-tests/frameworks/HTTP/RemoteRequestInput.ql b/javascript/ql/test/library-tests/frameworks/HTTP/RemoteRequestInput.ql
index 8d8e4ab0362..03699197e14 100644
--- a/javascript/ql/test/library-tests/frameworks/HTTP/RemoteRequestInput.ql
+++ b/javascript/ql/test/library-tests/frameworks/HTTP/RemoteRequestInput.ql
@@ -1,4 +1,4 @@
 import javascript
 
-from HTTP::RequestInputAccess input
+from Http::RequestInputAccess input
 select input, input.getKind()
diff --git a/javascript/ql/test/library-tests/frameworks/HTTP/ResponseBody.ql b/javascript/ql/test/library-tests/frameworks/HTTP/ResponseBody.ql
index 7723b4e284b..ab7aa08ea08 100644
--- a/javascript/ql/test/library-tests/frameworks/HTTP/ResponseBody.ql
+++ b/javascript/ql/test/library-tests/frameworks/HTTP/ResponseBody.ql
@@ -1,4 +1,4 @@
 import javascript
 
-from HTTP::ResponseBody rb
+from Http::ResponseBody rb
 select rb
diff --git a/javascript/ql/test/library-tests/frameworks/Micro/TestMicro.ql b/javascript/ql/test/library-tests/frameworks/Micro/TestMicro.ql
index 97f4d7caf1e..56bf865f138 100644
--- a/javascript/ql/test/library-tests/frameworks/Micro/TestMicro.ql
+++ b/javascript/ql/test/library-tests/frameworks/Micro/TestMicro.ql
@@ -1,17 +1,17 @@
 import javascript
 
-query HTTP::RouteHandler routeHandler() { any() }
+query Http::RouteHandler routeHandler() { any() }
 
-query HTTP::Servers::RequestSource requestSource() { any() }
+query Http::Servers::RequestSource requestSource() { any() }
 
-query HTTP::Servers::ResponseSource responseSource() { any() }
+query Http::Servers::ResponseSource responseSource() { any() }
 
-query HTTP::RequestInputAccess requestInputAccess(string kind) { kind = result.getKind() }
+query Http::RequestInputAccess requestInputAccess(string kind) { kind = result.getKind() }
 
-query HTTP::RequestInputAccess userControlledObject() { result.isUserControlledObject() }
+query Http::RequestInputAccess userControlledObject() { result.isUserControlledObject() }
 
-query HTTP::ResponseSendArgument responseSendArgument() { any() }
+query Http::ResponseSendArgument responseSendArgument() { any() }
 
-query HTTP::ResponseSendArgument responseSendArgumentHandler(HTTP::RouteHandler h) {
+query Http::ResponseSendArgument responseSendArgumentHandler(Http::RouteHandler h) {
   h = result.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/Nest/test.ql b/javascript/ql/test/library-tests/frameworks/Nest/test.ql
index 120727d2548..898d244bed2 100644
--- a/javascript/ql/test/library-tests/frameworks/Nest/test.ql
+++ b/javascript/ql/test/library-tests/frameworks/Nest/test.ql
@@ -1,19 +1,19 @@
 import javascript
 private import semmle.javascript.security.dataflow.ServerSideUrlRedirectCustomizations
 
-query HTTP::RouteHandler routeHandler() { any() }
+query Http::RouteHandler routeHandler() { any() }
 
-query HTTP::Servers::RequestSource requestSource() { any() }
+query Http::Servers::RequestSource requestSource() { any() }
 
-query HTTP::Servers::ResponseSource responseSource() { any() }
+query Http::Servers::ResponseSource responseSource() { any() }
 
 query RemoteFlowSource requestInputAccess(string kind) {
-  kind = result.(HTTP::RequestInputAccess).getKind()
+  kind = result.(Http::RequestInputAccess).getKind()
   or
-  not result instanceof HTTP::RequestInputAccess and
+  not result instanceof Http::RequestInputAccess and
   kind = "RemoteFlowSource"
 }
 
-query HTTP::ResponseSendArgument responseSendArgument() { any() }
+query Http::ResponseSendArgument responseSendArgument() { any() }
 
 query ServerSideUrlRedirect::Sink redirectSink() { any() }
diff --git a/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderAccess.qll b/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderAccess.qll
index 22d1d6aee53..69d34318ae1 100644
--- a/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderAccess.qll
+++ b/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderAccess.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderAccess(HTTP::RequestHeaderAccess access, string res) {
+query predicate test_HeaderAccess(Http::RequestHeaderAccess access, string res) {
   res = access.getAHeaderName()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderDefinition.qll b/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderDefinition.qll
index c1255a117c0..ec753397e68 100644
--- a/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderDefinition.qll
+++ b/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderDefinition.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderDefinition(HTTP::HeaderDefinition hd, NodeJSLib::RouteHandler rh) {
+query predicate test_HeaderDefinition(Http::HeaderDefinition hd, NodeJSLib::RouteHandler rh) {
   rh = hd.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderDefinition_defines.qll b/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderDefinition_defines.qll
index a07c98b46be..1bc5d691f70 100644
--- a/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderDefinition_defines.qll
+++ b/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderDefinition_defines.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderDefinition_defines(HTTP::HeaderDefinition hd, string name, string value) {
+query predicate test_HeaderDefinition_defines(Http::HeaderDefinition hd, string name, string value) {
   hd.defines(name, value) and hd.getRouteHandler() instanceof NodeJSLib::RouteHandler
 }
diff --git a/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderDefinition_getAHeaderName.qll b/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderDefinition_getAHeaderName.qll
index 7fcda812700..69b5623bd08 100644
--- a/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderDefinition_getAHeaderName.qll
+++ b/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderDefinition_getAHeaderName.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderDefinition_getAHeaderName(HTTP::HeaderDefinition hd, string res) {
+query predicate test_HeaderDefinition_getAHeaderName(Http::HeaderDefinition hd, string res) {
   hd.getRouteHandler() instanceof NodeJSLib::RouteHandler and res = hd.getAHeaderName()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderDefinition_getNameExpr.qll b/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderDefinition_getNameExpr.qll
index b62e44bf947..4e1c2c5364d 100644
--- a/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderDefinition_getNameExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/NodeJSLib/HeaderDefinition_getNameExpr.qll
@@ -1,7 +1,7 @@
 import javascript
 
 query predicate test_HeaderDefinition_getNameExpr(
-  HTTP::ExplicitHeaderDefinition hd, DataFlow::Node res
+  Http::ExplicitHeaderDefinition hd, DataFlow::Node res
 ) {
   hd.getRouteHandler() instanceof NodeJSLib::RouteHandler and res = hd.getNameNode()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/NodeJSLib/RequestExpr.qll b/javascript/ql/test/library-tests/frameworks/NodeJSLib/RequestExpr.qll
index 282c04ce314..b9f4176406d 100644
--- a/javascript/ql/test/library-tests/frameworks/NodeJSLib/RequestExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/NodeJSLib/RequestExpr.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_RequestExpr(NodeJSLib::RequestNode e, HTTP::RouteHandler res) {
+query predicate test_RequestExpr(NodeJSLib::RequestNode e, Http::RouteHandler res) {
   res = e.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/NodeJSLib/RequestInputAccess.qll b/javascript/ql/test/library-tests/frameworks/NodeJSLib/RequestInputAccess.qll
index 7134c96d028..2234da53435 100644
--- a/javascript/ql/test/library-tests/frameworks/NodeJSLib/RequestInputAccess.qll
+++ b/javascript/ql/test/library-tests/frameworks/NodeJSLib/RequestInputAccess.qll
@@ -1,7 +1,7 @@
 import javascript
 
 query predicate test_RequestInputAccess(
-  HTTP::RequestInputAccess ria, string res, NodeJSLib::RouteHandler rh
+  Http::RequestInputAccess ria, string res, NodeJSLib::RouteHandler rh
 ) {
   ria.getRouteHandler() = rh and res = ria.getKind()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/NodeJSLib/ResponseExpr.qll b/javascript/ql/test/library-tests/frameworks/NodeJSLib/ResponseExpr.qll
index b509b70c884..b8884efa167 100644
--- a/javascript/ql/test/library-tests/frameworks/NodeJSLib/ResponseExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/NodeJSLib/ResponseExpr.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_ResponseExpr(NodeJSLib::ResponseNode e, HTTP::RouteHandler res) {
+query predicate test_ResponseExpr(NodeJSLib::ResponseNode e, Http::RouteHandler res) {
   res = e.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/NodeJSLib/ResponseSendArgument.qll b/javascript/ql/test/library-tests/frameworks/NodeJSLib/ResponseSendArgument.qll
index 7d859f4d569..890cc9f92fe 100644
--- a/javascript/ql/test/library-tests/frameworks/NodeJSLib/ResponseSendArgument.qll
+++ b/javascript/ql/test/library-tests/frameworks/NodeJSLib/ResponseSendArgument.qll
@@ -1,7 +1,7 @@
 import javascript
 
 query predicate test_ResponseSendArgument(
-  HTTP::ResponseSendArgument send, NodeJSLib::RouteHandler rh
+  Http::ResponseSendArgument send, NodeJSLib::RouteHandler rh
 ) {
   rh = send.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/NodeJSLib/RouteHandler_getARequestExpr.qll b/javascript/ql/test/library-tests/frameworks/NodeJSLib/RouteHandler_getARequestExpr.qll
index 147e788d642..b1080b85811 100644
--- a/javascript/ql/test/library-tests/frameworks/NodeJSLib/RouteHandler_getARequestExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/NodeJSLib/RouteHandler_getARequestExpr.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_RouteHandler_getARequestExpr(NodeJSLib::RouteHandler rh, HTTP::RequestNode res) {
+query predicate test_RouteHandler_getARequestExpr(NodeJSLib::RouteHandler rh, Http::RequestNode res) {
   res = rh.getARequestNode()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/NodeJSLib/RouteHandler_getAResponseExpr.qll b/javascript/ql/test/library-tests/frameworks/NodeJSLib/RouteHandler_getAResponseExpr.qll
index f2871754551..05d27f18222 100644
--- a/javascript/ql/test/library-tests/frameworks/NodeJSLib/RouteHandler_getAResponseExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/NodeJSLib/RouteHandler_getAResponseExpr.qll
@@ -1,7 +1,7 @@
 import javascript
 
 query predicate test_RouteHandler_getAResponseExpr(
-  NodeJSLib::RouteHandler rh, HTTP::ResponseNode res
+  NodeJSLib::RouteHandler rh, Http::ResponseNode res
 ) {
   res = rh.getAResponseNode()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/NodeJSLib/RouteHandler_getAResponseHeader.qll b/javascript/ql/test/library-tests/frameworks/NodeJSLib/RouteHandler_getAResponseHeader.qll
index 6733b1bd917..1c14fc6ac11 100644
--- a/javascript/ql/test/library-tests/frameworks/NodeJSLib/RouteHandler_getAResponseHeader.qll
+++ b/javascript/ql/test/library-tests/frameworks/NodeJSLib/RouteHandler_getAResponseHeader.qll
@@ -1,7 +1,7 @@
 import semmle.javascript.frameworks.Express
 
 query predicate test_RouteHandler_getAResponseHeader(
-  NodeJSLib::RouteHandler rh, string name, HTTP::HeaderDefinition res
+  NodeJSLib::RouteHandler rh, string name, Http::HeaderDefinition res
 ) {
   res = rh.getAResponseHeader(name)
 }
diff --git a/javascript/ql/test/library-tests/frameworks/NodeJSLib/ServerDefinition_getARouteHandler.qll b/javascript/ql/test/library-tests/frameworks/NodeJSLib/ServerDefinition_getARouteHandler.qll
index 1902689a53e..900b632faed 100644
--- a/javascript/ql/test/library-tests/frameworks/NodeJSLib/ServerDefinition_getARouteHandler.qll
+++ b/javascript/ql/test/library-tests/frameworks/NodeJSLib/ServerDefinition_getARouteHandler.qll
@@ -1,7 +1,7 @@
 import javascript
 
 query predicate test_ServerDefinition_getARouteHandler(
-  NodeJSLib::ServerDefinition s, HTTP::RouteHandler res
+  NodeJSLib::ServerDefinition s, Http::RouteHandler res
 ) {
   res = s.getARouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/connect/tests.ql b/javascript/ql/test/library-tests/frameworks/connect/tests.ql
index 17211377fbf..6c11c8ffd6b 100644
--- a/javascript/ql/test/library-tests/frameworks/connect/tests.ql
+++ b/javascript/ql/test/library-tests/frameworks/connect/tests.ql
@@ -3,26 +3,26 @@ import javascript
 query predicate test_RouteSetup(Connect::RouteSetup rs) { any() }
 
 query predicate test_RequestInputAccess(
-  HTTP::RequestInputAccess ria, string res, Connect::RouteHandler rh
+  Http::RequestInputAccess ria, string res, Connect::RouteHandler rh
 ) {
   ria.getRouteHandler() = rh and res = ria.getKind()
 }
 
 query predicate test_RouteHandler_getAResponseHeader(
-  Connect::RouteHandler rh, string name, HTTP::HeaderDefinition res
+  Connect::RouteHandler rh, string name, Http::HeaderDefinition res
 ) {
   res = rh.getAResponseHeader(name)
 }
 
-query predicate test_HeaderDefinition_defines(HTTP::HeaderDefinition hd, string name, string value) {
+query predicate test_HeaderDefinition_defines(Http::HeaderDefinition hd, string name, string value) {
   hd.defines(name, value) and hd.getRouteHandler() instanceof Connect::RouteHandler
 }
 
-query predicate test_ResponseExpr(HTTP::ResponseNode e, HTTP::RouteHandler res) {
+query predicate test_ResponseExpr(Http::ResponseNode e, Http::RouteHandler res) {
   res = e.getRouteHandler()
 }
 
-query predicate test_HeaderDefinition(HTTP::HeaderDefinition hd, Connect::RouteHandler rh) {
+query predicate test_HeaderDefinition(Http::HeaderDefinition hd, Connect::RouteHandler rh) {
   rh = hd.getRouteHandler()
 }
 
@@ -30,13 +30,13 @@ query predicate test_RouteSetup_getServer(Connect::RouteSetup rs, DataFlow::Node
   res = rs.getServer()
 }
 
-query predicate test_HeaderDefinition_getAHeaderName(HTTP::HeaderDefinition hd, string res) {
+query predicate test_HeaderDefinition_getAHeaderName(Http::HeaderDefinition hd, string res) {
   hd.getRouteHandler() instanceof Connect::RouteHandler and res = hd.getAHeaderName()
 }
 
 query predicate test_ServerDefinition(Connect::ServerDefinition s) { any() }
 
-query predicate test_RouteHandler_getAResponseExpr(Connect::RouteHandler rh, HTTP::ResponseNode res) {
+query predicate test_RouteHandler_getAResponseExpr(Connect::RouteHandler rh, Http::ResponseNode res) {
   res = rh.getAResponseNode()
 }
 
@@ -48,7 +48,7 @@ query predicate test_RouteHandler(Connect::RouteHandler rh, DataFlow::Node res)
   res = rh.getServer()
 }
 
-query predicate test_RequestExpr(HTTP::RequestNode e, HTTP::RouteHandler res) {
+query predicate test_RequestExpr(Http::RequestNode e, Http::RouteHandler res) {
   res = e.getRouteHandler()
 }
 
@@ -56,6 +56,6 @@ query predicate test_Credentials(Connect::Credentials cr, string res) {
   res = cr.getCredentialsKind()
 }
 
-query predicate test_RouteHandler_getARequestExpr(Connect::RouteHandler rh, HTTP::RequestNode res) {
+query predicate test_RouteHandler_getARequestExpr(Connect::RouteHandler rh, Http::RequestNode res) {
   res = rh.getARequestNode()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/fastify/HeaderAccess.qll b/javascript/ql/test/library-tests/frameworks/fastify/HeaderAccess.qll
index 22d1d6aee53..69d34318ae1 100644
--- a/javascript/ql/test/library-tests/frameworks/fastify/HeaderAccess.qll
+++ b/javascript/ql/test/library-tests/frameworks/fastify/HeaderAccess.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderAccess(HTTP::RequestHeaderAccess access, string res) {
+query predicate test_HeaderAccess(Http::RequestHeaderAccess access, string res) {
   res = access.getAHeaderName()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/fastify/HeaderDefinition.qll b/javascript/ql/test/library-tests/frameworks/fastify/HeaderDefinition.qll
index bf3ef7fb7fc..f3cef14be34 100644
--- a/javascript/ql/test/library-tests/frameworks/fastify/HeaderDefinition.qll
+++ b/javascript/ql/test/library-tests/frameworks/fastify/HeaderDefinition.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderDefinition(HTTP::HeaderDefinition hd, Fastify::RouteHandler rh) {
+query predicate test_HeaderDefinition(Http::HeaderDefinition hd, Fastify::RouteHandler rh) {
   rh = hd.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/fastify/HeaderDefinition_defines.qll b/javascript/ql/test/library-tests/frameworks/fastify/HeaderDefinition_defines.qll
index 43413a4dc4b..3bfab852a0c 100644
--- a/javascript/ql/test/library-tests/frameworks/fastify/HeaderDefinition_defines.qll
+++ b/javascript/ql/test/library-tests/frameworks/fastify/HeaderDefinition_defines.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderDefinition_defines(HTTP::HeaderDefinition hd, string name, string value) {
+query predicate test_HeaderDefinition_defines(Http::HeaderDefinition hd, string name, string value) {
   hd.defines(name, value) and hd.getRouteHandler() instanceof Fastify::RouteHandler
 }
diff --git a/javascript/ql/test/library-tests/frameworks/fastify/HeaderDefinition_getAHeaderName.qll b/javascript/ql/test/library-tests/frameworks/fastify/HeaderDefinition_getAHeaderName.qll
index 62e1d62c06f..41ae7de8a97 100644
--- a/javascript/ql/test/library-tests/frameworks/fastify/HeaderDefinition_getAHeaderName.qll
+++ b/javascript/ql/test/library-tests/frameworks/fastify/HeaderDefinition_getAHeaderName.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderDefinition_getAHeaderName(HTTP::HeaderDefinition hd, string res) {
+query predicate test_HeaderDefinition_getAHeaderName(Http::HeaderDefinition hd, string res) {
   hd.getRouteHandler() instanceof Fastify::RouteHandler and res = hd.getAHeaderName()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/fastify/RedirectInvocation.qll b/javascript/ql/test/library-tests/frameworks/fastify/RedirectInvocation.qll
index fffbf35a79e..e0044bcbee1 100644
--- a/javascript/ql/test/library-tests/frameworks/fastify/RedirectInvocation.qll
+++ b/javascript/ql/test/library-tests/frameworks/fastify/RedirectInvocation.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_RedirectInvocation(HTTP::RedirectInvocation invk, Fastify::RouteHandler rh) {
+query predicate test_RedirectInvocation(Http::RedirectInvocation invk, Fastify::RouteHandler rh) {
   invk.getRouteHandler() = rh
 }
diff --git a/javascript/ql/test/library-tests/frameworks/fastify/RequestInputAccess.qll b/javascript/ql/test/library-tests/frameworks/fastify/RequestInputAccess.qll
index d8cdc2a4ccb..bb649d75b4c 100644
--- a/javascript/ql/test/library-tests/frameworks/fastify/RequestInputAccess.qll
+++ b/javascript/ql/test/library-tests/frameworks/fastify/RequestInputAccess.qll
@@ -1,7 +1,7 @@
 import javascript
 
 query predicate test_RequestInputAccess(
-  HTTP::RequestInputAccess ria, string res, Fastify::RouteHandler rh, boolean isUserControlledObject
+  Http::RequestInputAccess ria, string res, Fastify::RouteHandler rh, boolean isUserControlledObject
 ) {
   ria.getRouteHandler() = rh and
   res = ria.getKind() and
diff --git a/javascript/ql/test/library-tests/frameworks/fastify/ResponseSendArgument.qll b/javascript/ql/test/library-tests/frameworks/fastify/ResponseSendArgument.qll
index 8f221b18bd7..de79ce0cd5b 100644
--- a/javascript/ql/test/library-tests/frameworks/fastify/ResponseSendArgument.qll
+++ b/javascript/ql/test/library-tests/frameworks/fastify/ResponseSendArgument.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_ResponseSendArgument(HTTP::ResponseSendArgument arg, Fastify::RouteHandler rh) {
+query predicate test_ResponseSendArgument(Http::ResponseSendArgument arg, Fastify::RouteHandler rh) {
   arg.getRouteHandler() = rh
 }
diff --git a/javascript/ql/test/library-tests/frameworks/fastify/RouteHandler_getARequestExpr.qll b/javascript/ql/test/library-tests/frameworks/fastify/RouteHandler_getARequestExpr.qll
index c709d84e745..b3e0fc1b098 100644
--- a/javascript/ql/test/library-tests/frameworks/fastify/RouteHandler_getARequestExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/fastify/RouteHandler_getARequestExpr.qll
@@ -1,5 +1,5 @@
 import semmle.javascript.frameworks.Express
 
-query predicate test_RouteHandler_getARequestExpr(Fastify::RouteHandler rh, HTTP::RequestNode res) {
+query predicate test_RouteHandler_getARequestExpr(Fastify::RouteHandler rh, Http::RequestNode res) {
   res = rh.getARequestNode()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/fastify/RouteHandler_getAResponseHeader.qll b/javascript/ql/test/library-tests/frameworks/fastify/RouteHandler_getAResponseHeader.qll
index a5394519940..fd2f356be13 100644
--- a/javascript/ql/test/library-tests/frameworks/fastify/RouteHandler_getAResponseHeader.qll
+++ b/javascript/ql/test/library-tests/frameworks/fastify/RouteHandler_getAResponseHeader.qll
@@ -1,7 +1,7 @@
 import semmle.javascript.frameworks.Express
 
 query predicate test_RouteHandler_getAResponseHeader(
-  Fastify::RouteHandler rh, string name, HTTP::HeaderDefinition res
+  Fastify::RouteHandler rh, string name, Http::HeaderDefinition res
 ) {
   res = rh.getAResponseHeader(name)
 }
diff --git a/javascript/ql/test/library-tests/frameworks/hapi/HeaderAccess.qll b/javascript/ql/test/library-tests/frameworks/hapi/HeaderAccess.qll
index 22d1d6aee53..69d34318ae1 100644
--- a/javascript/ql/test/library-tests/frameworks/hapi/HeaderAccess.qll
+++ b/javascript/ql/test/library-tests/frameworks/hapi/HeaderAccess.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderAccess(HTTP::RequestHeaderAccess access, string res) {
+query predicate test_HeaderAccess(Http::RequestHeaderAccess access, string res) {
   res = access.getAHeaderName()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/hapi/HeaderDefinition.qll b/javascript/ql/test/library-tests/frameworks/hapi/HeaderDefinition.qll
index 5ed82a5f591..612a1fa082b 100644
--- a/javascript/ql/test/library-tests/frameworks/hapi/HeaderDefinition.qll
+++ b/javascript/ql/test/library-tests/frameworks/hapi/HeaderDefinition.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderDefinition(HTTP::HeaderDefinition hd, Hapi::RouteHandler rh) {
+query predicate test_HeaderDefinition(Http::HeaderDefinition hd, Hapi::RouteHandler rh) {
   rh = hd.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/hapi/HeaderDefinition_defines.qll b/javascript/ql/test/library-tests/frameworks/hapi/HeaderDefinition_defines.qll
index 56ccb45dcfb..836b4e686f6 100644
--- a/javascript/ql/test/library-tests/frameworks/hapi/HeaderDefinition_defines.qll
+++ b/javascript/ql/test/library-tests/frameworks/hapi/HeaderDefinition_defines.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderDefinition_defines(HTTP::HeaderDefinition hd, string name, string value) {
+query predicate test_HeaderDefinition_defines(Http::HeaderDefinition hd, string name, string value) {
   hd.defines(name, value) and hd.getRouteHandler() instanceof Hapi::RouteHandler
 }
diff --git a/javascript/ql/test/library-tests/frameworks/hapi/HeaderDefinition_getAHeaderName.qll b/javascript/ql/test/library-tests/frameworks/hapi/HeaderDefinition_getAHeaderName.qll
index 7bc108da973..06f3fe3f220 100644
--- a/javascript/ql/test/library-tests/frameworks/hapi/HeaderDefinition_getAHeaderName.qll
+++ b/javascript/ql/test/library-tests/frameworks/hapi/HeaderDefinition_getAHeaderName.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderDefinition_getAHeaderName(HTTP::HeaderDefinition hd, string res) {
+query predicate test_HeaderDefinition_getAHeaderName(Http::HeaderDefinition hd, string res) {
   hd.getRouteHandler() instanceof Hapi::RouteHandler and res = hd.getAHeaderName()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/hapi/RequestExpr.qll b/javascript/ql/test/library-tests/frameworks/hapi/RequestExpr.qll
index 6e3118f1345..166b20ce8ed 100644
--- a/javascript/ql/test/library-tests/frameworks/hapi/RequestExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/hapi/RequestExpr.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_RequestExpr(Hapi::RequestNode e, HTTP::RouteHandler res) {
+query predicate test_RequestExpr(Hapi::RequestNode e, Http::RouteHandler res) {
   res = e.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/hapi/RequestInputAccess.qll b/javascript/ql/test/library-tests/frameworks/hapi/RequestInputAccess.qll
index 4146cb91cb6..5ce1fe4b5f6 100644
--- a/javascript/ql/test/library-tests/frameworks/hapi/RequestInputAccess.qll
+++ b/javascript/ql/test/library-tests/frameworks/hapi/RequestInputAccess.qll
@@ -1,7 +1,7 @@
 import javascript
 
 query predicate test_RequestInputAccess(
-  HTTP::RequestInputAccess ria, string res, Hapi::RouteHandler rh
+  Http::RequestInputAccess ria, string res, Hapi::RouteHandler rh
 ) {
   ria.getRouteHandler() = rh and res = ria.getKind()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/hapi/ResponseExpr.qll b/javascript/ql/test/library-tests/frameworks/hapi/ResponseExpr.qll
index 93a356284fe..3e2c2bca5c6 100644
--- a/javascript/ql/test/library-tests/frameworks/hapi/ResponseExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/hapi/ResponseExpr.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_ResponseExpr(Hapi::ResponseNode e, HTTP::RouteHandler res) {
+query predicate test_ResponseExpr(Hapi::ResponseNode e, Http::RouteHandler res) {
   res = e.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/hapi/RouteHandler_getARequestExpr.qll b/javascript/ql/test/library-tests/frameworks/hapi/RouteHandler_getARequestExpr.qll
index 668ded20aea..06bbbe11fde 100644
--- a/javascript/ql/test/library-tests/frameworks/hapi/RouteHandler_getARequestExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/hapi/RouteHandler_getARequestExpr.qll
@@ -1,5 +1,5 @@
 import semmle.javascript.frameworks.Express
 
-query predicate test_RouteHandler_getARequestExpr(Hapi::RouteHandler rh, HTTP::RequestNode res) {
+query predicate test_RouteHandler_getARequestExpr(Hapi::RouteHandler rh, Http::RequestNode res) {
   res = rh.getARequestNode()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/hapi/RouteHandler_getAResponseHeader.qll b/javascript/ql/test/library-tests/frameworks/hapi/RouteHandler_getAResponseHeader.qll
index 84aa08d92e1..4eb30875385 100644
--- a/javascript/ql/test/library-tests/frameworks/hapi/RouteHandler_getAResponseHeader.qll
+++ b/javascript/ql/test/library-tests/frameworks/hapi/RouteHandler_getAResponseHeader.qll
@@ -1,7 +1,7 @@
 import semmle.javascript.frameworks.Express
 
 query predicate test_RouteHandler_getAResponseHeader(
-  Hapi::RouteHandler rh, string name, HTTP::HeaderDefinition res
+  Hapi::RouteHandler rh, string name, Http::HeaderDefinition res
 ) {
   res = rh.getAResponseHeader(name)
 }
diff --git a/javascript/ql/test/library-tests/frameworks/koa/HeaderAccess.qll b/javascript/ql/test/library-tests/frameworks/koa/HeaderAccess.qll
index 22d1d6aee53..69d34318ae1 100644
--- a/javascript/ql/test/library-tests/frameworks/koa/HeaderAccess.qll
+++ b/javascript/ql/test/library-tests/frameworks/koa/HeaderAccess.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderAccess(HTTP::RequestHeaderAccess access, string res) {
+query predicate test_HeaderAccess(Http::RequestHeaderAccess access, string res) {
   res = access.getAHeaderName()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/koa/HeaderDefinition.qll b/javascript/ql/test/library-tests/frameworks/koa/HeaderDefinition.qll
index 972b3999b41..338717d1d28 100644
--- a/javascript/ql/test/library-tests/frameworks/koa/HeaderDefinition.qll
+++ b/javascript/ql/test/library-tests/frameworks/koa/HeaderDefinition.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderDefinition(HTTP::HeaderDefinition hd, Koa::RouteHandler rh) {
+query predicate test_HeaderDefinition(Http::HeaderDefinition hd, Koa::RouteHandler rh) {
   rh = hd.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/koa/HeaderDefinition_defines.qll b/javascript/ql/test/library-tests/frameworks/koa/HeaderDefinition_defines.qll
index 1fd1f5550b8..d33943b9b57 100644
--- a/javascript/ql/test/library-tests/frameworks/koa/HeaderDefinition_defines.qll
+++ b/javascript/ql/test/library-tests/frameworks/koa/HeaderDefinition_defines.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderDefinition_defines(HTTP::HeaderDefinition hd, string name, string value) {
+query predicate test_HeaderDefinition_defines(Http::HeaderDefinition hd, string name, string value) {
   hd.defines(name, value) and hd.getRouteHandler() instanceof Koa::RouteHandler
 }
diff --git a/javascript/ql/test/library-tests/frameworks/koa/HeaderDefinition_getAHeaderName.qll b/javascript/ql/test/library-tests/frameworks/koa/HeaderDefinition_getAHeaderName.qll
index faec0fac04d..20d6e34bb42 100644
--- a/javascript/ql/test/library-tests/frameworks/koa/HeaderDefinition_getAHeaderName.qll
+++ b/javascript/ql/test/library-tests/frameworks/koa/HeaderDefinition_getAHeaderName.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderDefinition_getAHeaderName(HTTP::HeaderDefinition hd, string res) {
+query predicate test_HeaderDefinition_getAHeaderName(Http::HeaderDefinition hd, string res) {
   hd.getRouteHandler() instanceof Koa::RouteHandler and res = hd.getAHeaderName()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/koa/RedirectInvocation.qll b/javascript/ql/test/library-tests/frameworks/koa/RedirectInvocation.qll
index c6d46ef8a02..802fc6a5c18 100644
--- a/javascript/ql/test/library-tests/frameworks/koa/RedirectInvocation.qll
+++ b/javascript/ql/test/library-tests/frameworks/koa/RedirectInvocation.qll
@@ -1,7 +1,7 @@
 import javascript
 
 query predicate test_RedirectInvocation(
-  HTTP::RedirectInvocation redirect, DataFlow::Node url, HTTP::RouteHandler rh
+  Http::RedirectInvocation redirect, DataFlow::Node url, Http::RouteHandler rh
 ) {
   redirect.getUrlArgument() = url and
   redirect.getRouteHandler() = rh
diff --git a/javascript/ql/test/library-tests/frameworks/koa/RequestExpr.qll b/javascript/ql/test/library-tests/frameworks/koa/RequestExpr.qll
index bcb3177b053..94e18fa6477 100644
--- a/javascript/ql/test/library-tests/frameworks/koa/RequestExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/koa/RequestExpr.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_RequestExpr(Koa::RequestNode e, HTTP::RouteHandler res) {
+query predicate test_RequestExpr(Koa::RequestNode e, Http::RouteHandler res) {
   res = e.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/koa/RequestInputAccess.qll b/javascript/ql/test/library-tests/frameworks/koa/RequestInputAccess.qll
index 2e4e226fd3e..2c1601520f1 100644
--- a/javascript/ql/test/library-tests/frameworks/koa/RequestInputAccess.qll
+++ b/javascript/ql/test/library-tests/frameworks/koa/RequestInputAccess.qll
@@ -1,7 +1,7 @@
 import javascript
 
 query predicate test_RequestInputAccess(
-  HTTP::RequestInputAccess ria, string res, Koa::RouteHandler rh
+  Http::RequestInputAccess ria, string res, Koa::RouteHandler rh
 ) {
   ria.getRouteHandler() = rh and res = ria.getKind()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/koa/ResponseExpr.qll b/javascript/ql/test/library-tests/frameworks/koa/ResponseExpr.qll
index 908dcdc745f..a6d1108ebec 100644
--- a/javascript/ql/test/library-tests/frameworks/koa/ResponseExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/koa/ResponseExpr.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_ResponseExpr(Koa::ResponseNode e, HTTP::RouteHandler res) {
+query predicate test_ResponseExpr(Koa::ResponseNode e, Http::RouteHandler res) {
   res = e.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/koa/ResponseSendArgument.qll b/javascript/ql/test/library-tests/frameworks/koa/ResponseSendArgument.qll
index f0c3e9d2ea2..ccec2620e4f 100644
--- a/javascript/ql/test/library-tests/frameworks/koa/ResponseSendArgument.qll
+++ b/javascript/ql/test/library-tests/frameworks/koa/ResponseSendArgument.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_ResponseSendArgument(HTTP::ResponseSendArgument send, Koa::RouteHandler rh) {
+query predicate test_ResponseSendArgument(Http::ResponseSendArgument send, Koa::RouteHandler rh) {
   rh = send.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/koa/RouteHandler_getARequestExpr.qll b/javascript/ql/test/library-tests/frameworks/koa/RouteHandler_getARequestExpr.qll
index 3c844c953e4..7e251ad1ea8 100644
--- a/javascript/ql/test/library-tests/frameworks/koa/RouteHandler_getARequestExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/koa/RouteHandler_getARequestExpr.qll
@@ -1,5 +1,5 @@
 import semmle.javascript.frameworks.Express
 
-query predicate test_RouteHandler_getARequestExpr(Koa::RouteHandler rh, HTTP::RequestNode res) {
+query predicate test_RouteHandler_getARequestExpr(Koa::RouteHandler rh, Http::RequestNode res) {
   res = rh.getARequestNode()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/koa/RouteHandler_getAResponseExpr.qll b/javascript/ql/test/library-tests/frameworks/koa/RouteHandler_getAResponseExpr.qll
index 492386d4053..045a8b5fae4 100644
--- a/javascript/ql/test/library-tests/frameworks/koa/RouteHandler_getAResponseExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/koa/RouteHandler_getAResponseExpr.qll
@@ -1,5 +1,5 @@
 import semmle.javascript.frameworks.Express
 
-query predicate test_RouteHandler_getAResponseExpr(Koa::RouteHandler rh, HTTP::ResponseNode res) {
+query predicate test_RouteHandler_getAResponseExpr(Koa::RouteHandler rh, Http::ResponseNode res) {
   res = rh.getAResponseNode()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/koa/RouteHandler_getAResponseHeader.qll b/javascript/ql/test/library-tests/frameworks/koa/RouteHandler_getAResponseHeader.qll
index 98c613dc5c8..f1b8b481d36 100644
--- a/javascript/ql/test/library-tests/frameworks/koa/RouteHandler_getAResponseHeader.qll
+++ b/javascript/ql/test/library-tests/frameworks/koa/RouteHandler_getAResponseHeader.qll
@@ -1,7 +1,7 @@
 import semmle.javascript.frameworks.Express
 
 query predicate test_RouteHandler_getAResponseHeader(
-  Koa::RouteHandler rh, string name, HTTP::HeaderDefinition res
+  Koa::RouteHandler rh, string name, Http::HeaderDefinition res
 ) {
   res = rh.getAResponseHeader(name)
 }
diff --git a/javascript/ql/test/library-tests/frameworks/restify/HeaderDefinition.qll b/javascript/ql/test/library-tests/frameworks/restify/HeaderDefinition.qll
index 9e101f7ea37..d5661ccaa94 100644
--- a/javascript/ql/test/library-tests/frameworks/restify/HeaderDefinition.qll
+++ b/javascript/ql/test/library-tests/frameworks/restify/HeaderDefinition.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderDefinition(HTTP::HeaderDefinition hd, Restify::RouteHandler rh) {
+query predicate test_HeaderDefinition(Http::HeaderDefinition hd, Restify::RouteHandler rh) {
   rh = hd.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/restify/HeaderDefinition_defines.qll b/javascript/ql/test/library-tests/frameworks/restify/HeaderDefinition_defines.qll
index 3f6694173ca..8851bc55c77 100644
--- a/javascript/ql/test/library-tests/frameworks/restify/HeaderDefinition_defines.qll
+++ b/javascript/ql/test/library-tests/frameworks/restify/HeaderDefinition_defines.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderDefinition_defines(HTTP::HeaderDefinition hd, string name, string value) {
+query predicate test_HeaderDefinition_defines(Http::HeaderDefinition hd, string name, string value) {
   hd.defines(name, value) and hd.getRouteHandler() instanceof Restify::RouteHandler
 }
diff --git a/javascript/ql/test/library-tests/frameworks/restify/HeaderDefinition_getAHeaderName.qll b/javascript/ql/test/library-tests/frameworks/restify/HeaderDefinition_getAHeaderName.qll
index f546a156991..9881464b56b 100644
--- a/javascript/ql/test/library-tests/frameworks/restify/HeaderDefinition_getAHeaderName.qll
+++ b/javascript/ql/test/library-tests/frameworks/restify/HeaderDefinition_getAHeaderName.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_HeaderDefinition_getAHeaderName(HTTP::HeaderDefinition hd, string res) {
+query predicate test_HeaderDefinition_getAHeaderName(Http::HeaderDefinition hd, string res) {
   hd.getRouteHandler() instanceof Restify::RouteHandler and res = hd.getAHeaderName()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/restify/RequestExpr.qll b/javascript/ql/test/library-tests/frameworks/restify/RequestExpr.qll
index c4759c6892f..2c4f75d365a 100644
--- a/javascript/ql/test/library-tests/frameworks/restify/RequestExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/restify/RequestExpr.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_RequestExpr(Restify::RequestNode e, HTTP::RouteHandler res) {
+query predicate test_RequestExpr(Restify::RequestNode e, Http::RouteHandler res) {
   res = e.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/restify/RequestInputAccess.qll b/javascript/ql/test/library-tests/frameworks/restify/RequestInputAccess.qll
index 0c9f028f443..64cb1d74293 100644
--- a/javascript/ql/test/library-tests/frameworks/restify/RequestInputAccess.qll
+++ b/javascript/ql/test/library-tests/frameworks/restify/RequestInputAccess.qll
@@ -1,7 +1,7 @@
 import javascript
 
 query predicate test_RequestInputAccess(
-  HTTP::RequestInputAccess ria, string res, Restify::RouteHandler rh
+  Http::RequestInputAccess ria, string res, Restify::RouteHandler rh
 ) {
   ria.getRouteHandler() = rh and res = ria.getKind()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/restify/ResponseExpr.qll b/javascript/ql/test/library-tests/frameworks/restify/ResponseExpr.qll
index 1384ad6c850..b4fd9368a1d 100644
--- a/javascript/ql/test/library-tests/frameworks/restify/ResponseExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/restify/ResponseExpr.qll
@@ -1,5 +1,5 @@
 import javascript
 
-query predicate test_ResponseExpr(Restify::ResponseNode e, HTTP::RouteHandler res) {
+query predicate test_ResponseExpr(Restify::ResponseNode e, Http::RouteHandler res) {
   res = e.getRouteHandler()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/restify/RouteHandler_getARequestExpr.qll b/javascript/ql/test/library-tests/frameworks/restify/RouteHandler_getARequestExpr.qll
index d02c6f82ad3..4f76b514b2f 100644
--- a/javascript/ql/test/library-tests/frameworks/restify/RouteHandler_getARequestExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/restify/RouteHandler_getARequestExpr.qll
@@ -1,5 +1,5 @@
 import semmle.javascript.frameworks.Express
 
-query predicate test_RouteHandler_getARequestExpr(Restify::RouteHandler rh, HTTP::RequestNode res) {
+query predicate test_RouteHandler_getARequestExpr(Restify::RouteHandler rh, Http::RequestNode res) {
   res = rh.getARequestNode()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/restify/RouteHandler_getAResponseExpr.qll b/javascript/ql/test/library-tests/frameworks/restify/RouteHandler_getAResponseExpr.qll
index e09d139d651..22d5d612a41 100644
--- a/javascript/ql/test/library-tests/frameworks/restify/RouteHandler_getAResponseExpr.qll
+++ b/javascript/ql/test/library-tests/frameworks/restify/RouteHandler_getAResponseExpr.qll
@@ -1,5 +1,5 @@
 import semmle.javascript.frameworks.Express
 
-query predicate test_RouteHandler_getAResponseExpr(Restify::RouteHandler rh, HTTP::ResponseNode res) {
+query predicate test_RouteHandler_getAResponseExpr(Restify::RouteHandler rh, Http::ResponseNode res) {
   res = rh.getAResponseNode()
 }
diff --git a/javascript/ql/test/library-tests/frameworks/restify/RouteHandler_getAResponseHeader.qll b/javascript/ql/test/library-tests/frameworks/restify/RouteHandler_getAResponseHeader.qll
index d807f4879ab..f072f0146e6 100644
--- a/javascript/ql/test/library-tests/frameworks/restify/RouteHandler_getAResponseHeader.qll
+++ b/javascript/ql/test/library-tests/frameworks/restify/RouteHandler_getAResponseHeader.qll
@@ -1,7 +1,7 @@
 import semmle.javascript.frameworks.Express
 
 query predicate test_RouteHandler_getAResponseHeader(
-  Restify::RouteHandler rh, string name, HTTP::HeaderDefinition res
+  Restify::RouteHandler rh, string name, Http::HeaderDefinition res
 ) {
   res = rh.getAResponseHeader(name)
 }
diff --git a/python/ql/lib/semmle/python/Concepts.qll b/python/ql/lib/semmle/python/Concepts.qll
index b3d1cb6fe84..b4f1c73e633 100644
--- a/python/ql/lib/semmle/python/Concepts.qll
+++ b/python/ql/lib/semmle/python/Concepts.qll
@@ -565,7 +565,7 @@ module XML {
 }
 
 /** Provides classes for modeling LDAP-related APIs. */
-module LDAP {
+module Ldap {
   /**
    * A data-flow node that executes an LDAP query.
    *
@@ -598,6 +598,9 @@ module LDAP {
   }
 }
 
+/** DEPRECATED: Alias for Ldap */
+deprecated module LDAP = Ldap;
+
 /**
  * A data-flow node that escapes meta-characters, which could be used to prevent
  * injection attacks.
@@ -706,7 +709,7 @@ class LdapFilterEscaping extends Escaping {
 }
 
 /** Provides classes for modeling HTTP-related APIs. */
-module HTTP {
+module Http {
   /** Gets an HTTP verb, in upper case */
   string httpVerb() { result in ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS", "HEAD"] }
 
@@ -917,7 +920,7 @@ module HTTP {
        * Extend this class to model new APIs. If you want to refine existing API models,
        * extend `HttpResponse` instead.
        */
-      abstract class Range extends HTTP::Server::HttpResponse::Range {
+      abstract class Range extends Http::Server::HttpResponse::Range {
         /** Gets the data-flow node that specifies the location of this HTTP redirect response. */
         abstract DataFlow::Node getRedirectLocation();
       }
@@ -1051,6 +1054,9 @@ module HTTP {
   // remote-flow-sources in general.
 }
 
+/** DEPRECATED: Alias for Http */
+deprecated module HTTP = Http;
+
 /**
  * Provides models for cryptographic things.
  *
diff --git a/python/ql/lib/semmle/python/frameworks/Aiohttp.qll b/python/ql/lib/semmle/python/frameworks/Aiohttp.qll
index 5f687a01b49..f067ecf6eee 100644
--- a/python/ql/lib/semmle/python/frameworks/Aiohttp.qll
+++ b/python/ql/lib/semmle/python/frameworks/Aiohttp.qll
@@ -59,7 +59,7 @@ module AiohttpWebModel {
    * Extend this class to refine existing API models. If you want to model new APIs,
    * extend `AiohttpRouteSetup::Range` instead.
    */
-  class AiohttpRouteSetup extends HTTP::Server::RouteSetup::Range {
+  class AiohttpRouteSetup extends Http::Server::RouteSetup::Range {
     AiohttpRouteSetup::Range range;
 
     AiohttpRouteSetup() { this = range }
@@ -161,7 +161,7 @@ module AiohttpWebModel {
 
     AiohttpAddRouteCall() {
       exists(string funcName |
-        funcName = HTTP::httpVerbLower() and
+        funcName = Http::httpVerbLower() and
         routeArgsStart = 0
         or
         funcName = "view" and
@@ -192,7 +192,7 @@ module AiohttpWebModel {
 
     AiohttpDecoratorRouteSetup() {
       exists(string decoratorName |
-        decoratorName = HTTP::httpVerbLower() and
+        decoratorName = Http::httpVerbLower() and
         routeArgsStart = 0
         or
         decoratorName = "view" and
@@ -237,7 +237,7 @@ module AiohttpWebModel {
       // TODO: This doesn't handle attribute assignment. Should be OK, but analysis is not as complete as with
       // points-to and `.lookup`, which would handle `post = my_post_handler` inside class def
       result = this.getAMethod() and
-      result.getName() = HTTP::httpVerbLower()
+      result.getName() = Http::httpVerbLower()
     }
   }
 
@@ -252,7 +252,7 @@ module AiohttpWebModel {
   }
 
   /** A request handler defined in an `aiohttp.web` view class, that has no known route. */
-  private class AiohttpViewClassRequestHandlerWithoutKnownRoute extends HTTP::Server::RequestHandler::Range {
+  private class AiohttpViewClassRequestHandlerWithoutKnownRoute extends Http::Server::RequestHandler::Range {
     AiohttpViewClassRequestHandlerWithoutKnownRoute() {
       exists(AiohttpViewClass vc | vc.getARequestHandler() = this) and
       not exists(AiohttpRouteSetup setup | setup.getARequestHandler() = this)
@@ -319,7 +319,7 @@ module AiohttpWebModel {
     }
 
     /** An attribute read on an `aiohttp.web.Request` that is a `MultiDictProxy` instance. */
-    class AiohttpRequestMultiDictProxyInstances extends Multidict::MultiDictProxy::InstanceSource {
+    class AiohttpRequestMultiDictProxyInstances extends MultiDict::MultiDictProxy::InstanceSource {
       AiohttpRequestMultiDictProxyInstances() {
         this.(DataFlow::AttrRead).getObject() = Request::instance() and
         this.(DataFlow::AttrRead).getAttributeName() in ["query", "headers"]
@@ -493,7 +493,7 @@ module AiohttpWebModel {
    * - https://docs.aiohttp.org/en/stable/web_reference.html#aiohttp.web.Response
    * - https://docs.aiohttp.org/en/stable/web_quickstart.html#aiohttp-web-exceptions
    */
-  class AiohttpWebResponseInstantiation extends HTTP::Server::HttpResponse::Range,
+  class AiohttpWebResponseInstantiation extends Http::Server::HttpResponse::Range,
     Response::InstanceSource, DataFlow::CallCfgNode {
     API::Node apiNode;
 
@@ -562,7 +562,7 @@ module AiohttpWebModel {
    * See the part about redirects at https://docs.aiohttp.org/en/stable/web_quickstart.html#aiohttp-web-exceptions
    */
   class AiohttpRedirectExceptionInstantiation extends AiohttpWebResponseInstantiation,
-    HTTP::Server::HttpRedirectResponse::Range {
+    Http::Server::HttpRedirectResponse::Range {
     AiohttpRedirectExceptionInstantiation() {
       exists(string httpRedirectExceptionClassName |
         httpRedirectExceptionClassName in [
@@ -585,7 +585,7 @@ module AiohttpWebModel {
   /**
    * A call to `set_cookie` on a HTTP Response.
    */
-  class AiohttpResponseSetCookieCall extends HTTP::Server::CookieWrite::Range, DataFlow::CallCfgNode {
+  class AiohttpResponseSetCookieCall extends Http::Server::CookieWrite::Range, DataFlow::CallCfgNode {
     AiohttpResponseSetCookieCall() {
       this = aiohttpResponseInstance().getMember("set_cookie").getACall()
     }
@@ -600,7 +600,7 @@ module AiohttpWebModel {
   /**
    * A call to `del_cookie` on a HTTP Response.
    */
-  class AiohttpResponseDelCookieCall extends HTTP::Server::CookieWrite::Range, DataFlow::CallCfgNode {
+  class AiohttpResponseDelCookieCall extends Http::Server::CookieWrite::Range, DataFlow::CallCfgNode {
     AiohttpResponseDelCookieCall() {
       this = aiohttpResponseInstance().getMember("del_cookie").getACall()
     }
@@ -616,7 +616,7 @@ module AiohttpWebModel {
    * A dict-like write to an item of the `cookies` attribute on a HTTP response, such as
    * `response.cookies[name] = value`.
    */
-  class AiohttpResponseCookieSubscriptWrite extends HTTP::Server::CookieWrite::Range {
+  class AiohttpResponseCookieSubscriptWrite extends Http::Server::CookieWrite::Range {
     DataFlow::Node index;
     DataFlow::Node value;
 
@@ -661,11 +661,11 @@ private module AiohttpClientModel {
     private API::Node instance() { result = classRef().getReturn() }
 
     /** A method call on a ClientSession that sends off a request */
-    private class OutgoingRequestCall extends HTTP::Client::Request::Range, API::CallNode {
+    private class OutgoingRequestCall extends Http::Client::Request::Range, API::CallNode {
       string methodName;
 
       OutgoingRequestCall() {
-        methodName in [HTTP::httpVerbLower(), "request"] and
+        methodName in [Http::httpVerbLower(), "request"] and
         this = instance().getMember(methodName).getACall()
       }
 
diff --git a/python/ql/lib/semmle/python/frameworks/Django.qll b/python/ql/lib/semmle/python/frameworks/Django.qll
index a430513cb62..03d34e8548e 100644
--- a/python/ql/lib/semmle/python/frameworks/Django.qll
+++ b/python/ql/lib/semmle/python/frameworks/Django.qll
@@ -1155,11 +1155,11 @@ module PrivateDjango {
     /** Gets a reference to the `django.http` module. */
     API::Node http() { result = django().getMember("http") }
 
-    /** DEPRECATED: Alias for `Http` */
-    deprecated module http = Http;
+    /** DEPRECATED: Alias for `DjangoHttp` */
+    deprecated module http = DjangoHttp;
 
     /** Provides models for the `django.http` module */
-    module Http {
+    module DjangoHttp {
       // ---------------------------------------------------------------------------
       // django.http.request
       // ---------------------------------------------------------------------------
@@ -1251,7 +1251,7 @@ module PrivateDjango {
               // special handling of the `build_absolute_uri` method, see
               // https://docs.djangoproject.com/en/3.0/ref/request-response/#django.http.HttpRequest.build_absolute_uri
               exists(DataFlow::AttrRead attr, DataFlow::CallCfgNode call, DataFlow::Node instance |
-                instance = DjangoImpl::Http::Request::HttpRequest::instance() and
+                instance = DjangoImpl::DjangoHttp::Request::HttpRequest::instance() and
                 attr.getObject() = instance
               |
                 attr.getAttributeName() = "build_absolute_uri" and
@@ -1359,7 +1359,7 @@ module PrivateDjango {
            *
            * Use the predicate `HttpResponse::instance()` to get references to instances of `django.http.response.HttpResponse`.
            */
-          abstract class InstanceSource extends HTTP::Server::HttpResponse::Range, DataFlow::Node {
+          abstract class InstanceSource extends Http::Server::HttpResponse::Range, DataFlow::Node {
           }
 
           /** A direct instantiation of `django.http.response.HttpResponse`. */
@@ -1421,7 +1421,7 @@ module PrivateDjango {
            * Use the predicate `HttpResponseRedirect::instance()` to get references to instances of `django.http.response.HttpResponseRedirect`.
            */
           abstract class InstanceSource extends HttpResponse::InstanceSource,
-            HTTP::Server::HttpRedirectResponse::Range, DataFlow::Node { }
+            Http::Server::HttpRedirectResponse::Range, DataFlow::Node { }
 
           /** A direct instantiation of `django.http.response.HttpResponseRedirect`. */
           private class ClassInstantiation extends InstanceSource, DataFlow::CallCfgNode {
@@ -1483,7 +1483,7 @@ module PrivateDjango {
            * Use the predicate `HttpResponsePermanentRedirect::instance()` to get references to instances of `django.http.response.HttpResponsePermanentRedirect`.
            */
           abstract class InstanceSource extends HttpResponse::InstanceSource,
-            HTTP::Server::HttpRedirectResponse::Range, DataFlow::Node { }
+            Http::Server::HttpRedirectResponse::Range, DataFlow::Node { }
 
           /** A direct instantiation of `django.http.response.HttpResponsePermanentRedirect`. */
           private class ClassInstantiation extends InstanceSource, DataFlow::CallCfgNode {
@@ -2066,17 +2066,17 @@ module PrivateDjango {
 
         /** Gets a reference to the `django.http.response.HttpResponse.write` function. */
         private DataFlow::TypeTrackingNode write(
-          DjangoImpl::Http::Response::HttpResponse::InstanceSource instance, DataFlow::TypeTracker t
+          DjangoImpl::DjangoHttp::Response::HttpResponse::InstanceSource instance, DataFlow::TypeTracker t
         ) {
           t.startInAttr("write") and
-          instance = DjangoImpl::Http::Response::HttpResponse::instance() and
+          instance = DjangoImpl::DjangoHttp::Response::HttpResponse::instance() and
           result = instance
           or
           exists(DataFlow::TypeTracker t2 | result = write(instance, t2).track(t2, t))
         }
 
         /** Gets a reference to the `django.http.response.HttpResponse.write` function. */
-        DataFlow::Node write(DjangoImpl::Http::Response::HttpResponse::InstanceSource instance) {
+        DataFlow::Node write(DjangoImpl::DjangoHttp::Response::HttpResponse::InstanceSource instance) {
           write(instance, DataFlow::TypeTracker::end()).flowsTo(result)
         }
 
@@ -2085,8 +2085,8 @@ module PrivateDjango {
          *
          * See https://docs.djangoproject.com/en/3.1/ref/request-response/#django.http.HttpResponse.write
          */
-        class HttpResponseWriteCall extends HTTP::Server::HttpResponse::Range, DataFlow::CallCfgNode {
-          DjangoImpl::Http::Response::HttpResponse::InstanceSource instance;
+        class HttpResponseWriteCall extends Http::Server::HttpResponse::Range, DataFlow::CallCfgNode {
+          DjangoImpl::DjangoHttp::Response::HttpResponse::InstanceSource instance;
 
           HttpResponseWriteCall() { this.getFunction() = write(instance) }
 
@@ -2104,10 +2104,10 @@ module PrivateDjango {
         /**
          * A call to `set_cookie` on a HTTP Response.
          */
-        class DjangoResponseSetCookieCall extends HTTP::Server::CookieWrite::Range,
+        class DjangoResponseSetCookieCall extends Http::Server::CookieWrite::Range,
           DataFlow::MethodCallNode {
           DjangoResponseSetCookieCall() {
-            this.calls(DjangoImpl::Http::Response::HttpResponse::instance(), "set_cookie")
+            this.calls(DjangoImpl::DjangoHttp::Response::HttpResponse::instance(), "set_cookie")
           }
 
           override DataFlow::Node getHeaderArg() { none() }
@@ -2124,10 +2124,10 @@ module PrivateDjango {
         /**
          * A call to `delete_cookie` on a HTTP Response.
          */
-        class DjangoResponseDeleteCookieCall extends HTTP::Server::CookieWrite::Range,
+        class DjangoResponseDeleteCookieCall extends Http::Server::CookieWrite::Range,
           DataFlow::MethodCallNode {
           DjangoResponseDeleteCookieCall() {
-            this.calls(DjangoImpl::Http::Response::HttpResponse::instance(), "delete_cookie")
+            this.calls(DjangoImpl::DjangoHttp::Response::HttpResponse::instance(), "delete_cookie")
           }
 
           override DataFlow::Node getHeaderArg() { none() }
@@ -2143,7 +2143,7 @@ module PrivateDjango {
          * A dict-like write to an item of the `cookies` attribute on a HTTP response, such as
          * `response.cookies[name] = value`.
          */
-        class DjangoResponseCookieSubscriptWrite extends HTTP::Server::CookieWrite::Range {
+        class DjangoResponseCookieSubscriptWrite extends Http::Server::CookieWrite::Range {
           DataFlow::Node index;
           DataFlow::Node value;
 
@@ -2154,7 +2154,7 @@ module PrivateDjango {
               this.asCfgNode() = subscript
             |
               cookieLookup.getAttributeName() = "cookies" and
-              cookieLookup.getObject() = DjangoImpl::Http::Response::HttpResponse::instance() and
+              cookieLookup.getObject() = DjangoImpl::DjangoHttp::Response::HttpResponse::instance() and
               exists(DataFlow::Node subscriptObj |
                 subscriptObj.asCfgNode() = subscript.getObject()
               |
@@ -2315,7 +2315,7 @@ module PrivateDjango {
       // points-to and `.lookup`, which would handle `post = my_post_handler` inside class def
       result = this.getAMethod() and
       (
-        result.getName() = HTTP::httpVerbLower()
+        result.getName() = Http::httpVerbLower()
         or
         result.getName() = "get_redirect_url"
       )
@@ -2410,7 +2410,7 @@ module PrivateDjango {
   }
 
   /** A data-flow node that sets up a route on a server, using the django framework. */
-  abstract class DjangoRouteSetup extends HTTP::Server::RouteSetup::Range, DataFlow::CfgNode {
+  abstract class DjangoRouteSetup extends Http::Server::RouteSetup::Range, DataFlow::CfgNode {
     /** Gets the data-flow node that is used as the argument for the view handler. */
     abstract DataFlow::Node getViewArg();
 
@@ -2427,7 +2427,7 @@ module PrivateDjango {
   }
 
   /** A request handler defined in a django view class, that has no known route. */
-  private class DjangoViewClassHandlerWithoutKnownRoute extends HTTP::Server::RequestHandler::Range,
+  private class DjangoViewClassHandlerWithoutKnownRoute extends Http::Server::RequestHandler::Range,
     DjangoRouteHandler {
     DjangoViewClassHandlerWithoutKnownRoute() {
       exists(DjangoViewClass vc | vc.getARequestHandler() = this) and
@@ -2586,7 +2586,7 @@ module PrivateDjango {
   // HttpRequest taint modeling
   // ---------------------------------------------------------------------------
   /** A parameter that will receive the django `HttpRequest` instance when a request handler is invoked. */
-  private class DjangoRequestHandlerRequestParam extends DjangoImpl::Http::Request::HttpRequest::InstanceSource,
+  private class DjangoRequestHandlerRequestParam extends DjangoImpl::DjangoHttp::Request::HttpRequest::InstanceSource,
     RemoteFlowSource::Range, DataFlow::ParameterNode {
     DjangoRequestHandlerRequestParam() {
       this.getParameter() = any(DjangoRouteSetup setup).getARequestHandler().getRequestParam()
@@ -2603,7 +2603,7 @@ module PrivateDjango {
    *
    * See https://docs.djangoproject.com/en/3.1/topics/class-based-views/generic-display/#dynamic-filtering
    */
-  private class DjangoViewClassRequestAttributeRead extends DjangoImpl::Http::Request::HttpRequest::InstanceSource,
+  private class DjangoViewClassRequestAttributeRead extends DjangoImpl::DjangoHttp::Request::HttpRequest::InstanceSource,
     RemoteFlowSource::Range, DataFlow::Node {
     DjangoViewClassRequestAttributeRead() {
       exists(DataFlow::AttrRead read | this = read |
@@ -2678,7 +2678,7 @@ module PrivateDjango {
    *
    * See https://docs.djangoproject.com/en/3.1/topics/http/shortcuts/#redirect
    */
-  private class DjangoShortcutsRedirectCall extends HTTP::Server::HttpRedirectResponse::Range,
+  private class DjangoShortcutsRedirectCall extends Http::Server::HttpRedirectResponse::Range,
     DataFlow::CallCfgNode {
     DjangoShortcutsRedirectCall() { this = DjangoImpl::Shortcuts::redirect().getACall() }
 
@@ -2712,7 +2712,7 @@ module PrivateDjango {
    *
    * See https://docs.djangoproject.com/en/3.1/ref/class-based-views/base/#redirectview
    */
-  private class DjangoRedirectViewGetRedirectUrlReturn extends HTTP::Server::HttpRedirectResponse::Range,
+  private class DjangoRedirectViewGetRedirectUrlReturn extends Http::Server::HttpRedirectResponse::Range,
     DataFlow::CfgNode {
     DjangoRedirectViewGetRedirectUrlReturn() {
       node = any(GetRedirectUrlFunction f).getAReturnValueFlowNode()
@@ -2751,7 +2751,7 @@ module PrivateDjango {
   /**
    * A custom middleware stack
    */
-  private class DjangoSettingsMiddlewareStack extends HTTP::Server::CsrfProtectionSetting::Range {
+  private class DjangoSettingsMiddlewareStack extends Http::Server::CsrfProtectionSetting::Range {
     List list;
 
     DjangoSettingsMiddlewareStack() {
@@ -2787,7 +2787,7 @@ module PrivateDjango {
     }
   }
 
-  private class DjangoCsrfDecorator extends HTTP::Server::CsrfLocalProtectionSetting::Range {
+  private class DjangoCsrfDecorator extends Http::Server::CsrfLocalProtectionSetting::Range {
     string decoratorName;
     Function function;
 
diff --git a/python/ql/lib/semmle/python/frameworks/FastApi.qll b/python/ql/lib/semmle/python/frameworks/FastApi.qll
index f042dafea59..b45ef81f88a 100644
--- a/python/ql/lib/semmle/python/frameworks/FastApi.qll
+++ b/python/ql/lib/semmle/python/frameworks/FastApi.qll
@@ -48,10 +48,10 @@ private module FastApi {
    *
    * See https://fastapi.tiangolo.com/tutorial/first-steps/#define-a-path-operation-decorator
    */
-  private class FastApiRouteSetup extends HTTP::Server::RouteSetup::Range, DataFlow::CallCfgNode {
+  private class FastApiRouteSetup extends Http::Server::RouteSetup::Range, DataFlow::CallCfgNode {
     FastApiRouteSetup() {
       exists(string routeAddingMethod |
-        routeAddingMethod = HTTP::httpVerbLower()
+        routeAddingMethod = Http::httpVerbLower()
         or
         routeAddingMethod in ["api_route", "websocket"]
       |
@@ -195,7 +195,7 @@ private module FastApi {
     abstract class InstanceSource extends DataFlow::LocalSourceNode { }
 
     /** A direct instantiation of a response class. */
-    private class ResponseInstantiation extends InstanceSource, HTTP::Server::HttpResponse::Range,
+    private class ResponseInstantiation extends InstanceSource, Http::Server::HttpResponse::Range,
       DataFlow::CallCfgNode {
       API::Node baseApiNode;
       API::Node responseClass;
@@ -223,7 +223,7 @@ private module FastApi {
      * A direct instantiation of a redirect response.
      */
     private class RedirectResponseInstantiation extends ResponseInstantiation,
-      HTTP::Server::HttpRedirectResponse::Range {
+      Http::Server::HttpRedirectResponse::Range {
       RedirectResponseInstantiation() { baseApiNode = getModeledResponseClass("RedirectResponse") }
 
       override DataFlow::Node getRedirectLocation() {
@@ -245,7 +245,7 @@ private module FastApi {
     /**
      * An implicit response from a return of FastAPI request handler.
      */
-    private class FastApiRequestHandlerReturn extends HTTP::Server::HttpResponse::Range,
+    private class FastApiRequestHandlerReturn extends Http::Server::HttpResponse::Range,
       DataFlow::CfgNode {
       FastApiRouteSetup routeSetup;
 
@@ -291,7 +291,7 @@ private module FastApi {
      * `response_class` set to a `RedirectResponse`.
      */
     private class FastApiRequestHandlerRedirectReturn extends FastApiRequestHandlerReturn,
-      HTTP::Server::HttpRedirectResponse::Range {
+      Http::Server::HttpRedirectResponse::Range {
       FastApiRequestHandlerRedirectReturn() {
         exists(API::Node responseClass |
           responseClass.getAValueReachableFromSource() = routeSetup.getResponseClassArg() and
@@ -332,7 +332,7 @@ private module FastApi {
     /**
      * A call to `set_cookie` on a FastAPI Response.
      */
-    private class SetCookieCall extends HTTP::Server::CookieWrite::Range, DataFlow::MethodCallNode {
+    private class SetCookieCall extends Http::Server::CookieWrite::Range, DataFlow::MethodCallNode {
       SetCookieCall() { this.calls(instance(), "set_cookie") }
 
       override DataFlow::Node getHeaderArg() { none() }
@@ -348,7 +348,7 @@ private module FastApi {
      * A call to `append` on a `headers` of a FastAPI Response, with the `Set-Cookie`
      * header-key.
      */
-    private class HeadersAppendCookie extends HTTP::Server::CookieWrite::Range,
+    private class HeadersAppendCookie extends Http::Server::CookieWrite::Range,
       DataFlow::MethodCallNode {
       HeadersAppendCookie() {
         exists(DataFlow::AttrRead headers, DataFlow::Node keyArg |
diff --git a/python/ql/lib/semmle/python/frameworks/Flask.qll b/python/ql/lib/semmle/python/frameworks/Flask.qll
index 8ee93fcec52..890e45a2ab5 100644
--- a/python/ql/lib/semmle/python/frameworks/Flask.qll
+++ b/python/ql/lib/semmle/python/frameworks/Flask.qll
@@ -116,7 +116,7 @@ module Flask {
      *
      * Use the predicate `Response::instance()` to get references to instances of `flask.Response`.
      */
-    abstract class InstanceSource extends HTTP::Server::HttpResponse::Range, DataFlow::Node { }
+    abstract class InstanceSource extends Http::Server::HttpResponse::Range, DataFlow::Node { }
 
     /** A direct instantiation of `flask.Response`. */
     private class ClassInstantiation extends InstanceSource, DataFlow::CallCfgNode {
@@ -229,7 +229,7 @@ module Flask {
       // TODO: This doesn't handle attribute assignment. Should be OK, but analysis is not as complete as with
       // points-to and `.lookup`, which would handle `post = my_post_handler` inside class def
       result = this.getAMethod() and
-      result.getName() = HTTP::httpVerbLower()
+      result.getName() = Http::httpVerbLower()
     }
   }
 
@@ -241,7 +241,7 @@ module Flask {
   }
 
   /** A route setup made by flask (sharing handling of URL patterns). */
-  abstract class FlaskRouteSetup extends HTTP::Server::RouteSetup::Range {
+  abstract class FlaskRouteSetup extends Http::Server::RouteSetup::Range {
     override Parameter getARoutedParameter() {
       // If we don't know the URL pattern, we simply mark all parameters as a routed
       // parameter. This should give us more RemoteFlowSources but could also lead to
@@ -312,7 +312,7 @@ module Flask {
   }
 
   /** A request handler defined in a django view class, that has no known route. */
-  private class FlaskViewClassHandlerWithoutKnownRoute extends HTTP::Server::RequestHandler::Range {
+  private class FlaskViewClassHandlerWithoutKnownRoute extends Http::Server::RequestHandler::Range {
     FlaskViewClassHandlerWithoutKnownRoute() {
       exists(FlaskViewClass vc | vc.getARequestHandler() = this) and
       not exists(FlaskRouteSetup setup | setup.getARequestHandler() = this)
@@ -439,7 +439,7 @@ module Flask {
   // ---------------------------------------------------------------------------
   // Implicit response from returns of flask request handlers
   // ---------------------------------------------------------------------------
-  private class FlaskRouteHandlerReturn extends HTTP::Server::HttpResponse::Range, DataFlow::CfgNode {
+  private class FlaskRouteHandlerReturn extends Http::Server::HttpResponse::Range, DataFlow::CfgNode {
     FlaskRouteHandlerReturn() {
       exists(Function routeHandler |
         routeHandler = any(FlaskRouteSetup rs).getARequestHandler() and
@@ -462,7 +462,7 @@ module Flask {
    *
    * See https://flask.palletsprojects.com/en/1.1.x/api/#flask.redirect
    */
-  private class FlaskRedirectCall extends HTTP::Server::HttpRedirectResponse::Range,
+  private class FlaskRedirectCall extends Http::Server::HttpRedirectResponse::Range,
     DataFlow::CallCfgNode {
     FlaskRedirectCall() { this = API::moduleImport("flask").getMember("redirect").getACall() }
 
@@ -490,7 +490,7 @@ module Flask {
    *
    * See https://flask.palletsprojects.com/en/2.0.x/api/#flask.Response.set_cookie
    */
-  class FlaskResponseSetCookieCall extends HTTP::Server::CookieWrite::Range,
+  class FlaskResponseSetCookieCall extends Http::Server::CookieWrite::Range,
     DataFlow::MethodCallNode {
     FlaskResponseSetCookieCall() { this.calls(Flask::Response::instance(), "set_cookie") }
 
@@ -506,7 +506,7 @@ module Flask {
    *
    * See https://flask.palletsprojects.com/en/2.0.x/api/#flask.Response.delete_cookie
    */
-  class FlaskResponseDeleteCookieCall extends HTTP::Server::CookieWrite::Range,
+  class FlaskResponseDeleteCookieCall extends Http::Server::CookieWrite::Range,
     DataFlow::MethodCallNode {
     FlaskResponseDeleteCookieCall() { this.calls(Flask::Response::instance(), "delete_cookie") }
 
diff --git a/python/ql/lib/semmle/python/frameworks/Httpx.qll b/python/ql/lib/semmle/python/frameworks/Httpx.qll
index b746de6ee5e..ec6a446db2e 100644
--- a/python/ql/lib/semmle/python/frameworks/Httpx.qll
+++ b/python/ql/lib/semmle/python/frameworks/Httpx.qll
@@ -23,11 +23,11 @@ private module HttpxModel {
    *
    * See https://www.python-httpx.org/api/
    */
-  private class RequestCall extends HTTP::Client::Request::Range, API::CallNode {
+  private class RequestCall extends Http::Client::Request::Range, API::CallNode {
     string methodName;
 
     RequestCall() {
-      methodName in [HTTP::httpVerbLower(), "request", "stream"] and
+      methodName in [Http::httpVerbLower(), "request", "stream"] and
       this = API::moduleImport("httpx").getMember(methodName).getACall()
     }
 
@@ -64,11 +64,11 @@ private module HttpxModel {
     }
 
     /** A method call on a Client that sends off a request */
-    private class OutgoingRequestCall extends HTTP::Client::Request::Range, DataFlow::CallCfgNode {
+    private class OutgoingRequestCall extends Http::Client::Request::Range, DataFlow::CallCfgNode {
       string methodName;
 
       OutgoingRequestCall() {
-        methodName in [HTTP::httpVerbLower(), "request", "stream"] and
+        methodName in [Http::httpVerbLower(), "request", "stream"] and
         this = classRef().getReturn().getMember(methodName).getACall()
       }
 
diff --git a/python/ql/lib/semmle/python/frameworks/Ldap.qll b/python/ql/lib/semmle/python/frameworks/Ldap.qll
index 2f78c20cbe5..fddebba24f9 100644
--- a/python/ql/lib/semmle/python/frameworks/Ldap.qll
+++ b/python/ql/lib/semmle/python/frameworks/Ldap.qll
@@ -13,13 +13,13 @@ private import semmle.python.ApiGraphs
  *
  * See https://www.python-ldap.org/en/python-ldap-3.3.0/index.html
  */
-private module Ldap {
+private module PythonLdap {
   /**
    * The execution of an `ldap` query.
    *
    * See https://www.python-ldap.org/en/python-ldap-3.3.0/reference/ldap.html#functions
    */
-  private class LdapQueryExecution extends DataFlow::CallCfgNode, LDAP::LdapExecution::Range {
+  private class LdapQueryExecution extends DataFlow::CallCfgNode, Ldap::LdapExecution::Range {
     LdapQueryExecution() {
       this =
         API::moduleImport("ldap")
diff --git a/python/ql/lib/semmle/python/frameworks/Ldap3.qll b/python/ql/lib/semmle/python/frameworks/Ldap3.qll
index 6bf3d58cf99..860df4a3b84 100644
--- a/python/ql/lib/semmle/python/frameworks/Ldap3.qll
+++ b/python/ql/lib/semmle/python/frameworks/Ldap3.qll
@@ -15,7 +15,7 @@ private import semmle.python.ApiGraphs
  */
 private module Ldap3 {
   /** The execution of an `ldap` query. */
-  private class LdapQueryExecution extends DataFlow::CallCfgNode, LDAP::LdapExecution::Range {
+  private class LdapQueryExecution extends DataFlow::CallCfgNode, Ldap::LdapExecution::Range {
     LdapQueryExecution() {
       this =
         API::moduleImport("ldap3")
diff --git a/python/ql/lib/semmle/python/frameworks/Libtaxii.qll b/python/ql/lib/semmle/python/frameworks/Libtaxii.qll
index 44298b7c08f..5df0e7127ec 100644
--- a/python/ql/lib/semmle/python/frameworks/Libtaxii.qll
+++ b/python/ql/lib/semmle/python/frameworks/Libtaxii.qll
@@ -22,7 +22,7 @@ private module Libtaxii {
    * A call to `libtaxii.common.parse`.
    * When the `allow_url` parameter value is set to `True`, there is an SSRF vulnerability..
    */
-  private class ParseCall extends HTTP::Client::Request::Range, DataFlow::CallCfgNode {
+  private class ParseCall extends Http::Client::Request::Range, DataFlow::CallCfgNode {
     ParseCall() {
       this = API::moduleImport("libtaxii").getMember("common").getMember("parse").getACall() and
       this.getArgByName("allow_url").getALocalSource().asExpr() = any(True t)
diff --git a/python/ql/lib/semmle/python/frameworks/Multidict.qll b/python/ql/lib/semmle/python/frameworks/Multidict.qll
index 06700e28347..71c1a9cd995 100644
--- a/python/ql/lib/semmle/python/frameworks/Multidict.qll
+++ b/python/ql/lib/semmle/python/frameworks/Multidict.qll
@@ -16,7 +16,7 @@ private import semmle.python.frameworks.internal.InstanceTaintStepsHelper
  * Provides models for the `multidict` PyPI package.
  * See https://multidict.readthedocs.io/en/stable/.
  */
-module Multidict {
+module MultiDict {
   /**
    * Provides models for a `MultiDictProxy` class:
    * - `multidict.MultiDictProxy`
@@ -88,3 +88,6 @@ module Multidict {
     }
   }
 }
+
+/** DEPRECATED: Alias for MultiDict */
+deprecated module Multidict = MultiDict;
diff --git a/python/ql/lib/semmle/python/frameworks/Pycurl.qll b/python/ql/lib/semmle/python/frameworks/Pycurl.qll
index 6a5fbcbcfeb..4317cfb7eca 100644
--- a/python/ql/lib/semmle/python/frameworks/Pycurl.qll
+++ b/python/ql/lib/semmle/python/frameworks/Pycurl.qll
@@ -36,7 +36,7 @@ private module Pycurl {
      *
      * See http://pycurl.io/docs/latest/curlobject.html#pycurl.Curl.setopt.
      */
-    private class OutgoingRequestCall extends HTTP::Client::Request::Range, DataFlow::CallCfgNode {
+    private class OutgoingRequestCall extends Http::Client::Request::Range, DataFlow::CallCfgNode {
       OutgoingRequestCall() {
         this = instance().getMember("setopt").getACall() and
         this.getArg(0).asCfgNode().(AttrNode).getName() = "URL"
diff --git a/python/ql/lib/semmle/python/frameworks/Requests.qll b/python/ql/lib/semmle/python/frameworks/Requests.qll
index 0c944d889d2..d32860b177e 100644
--- a/python/ql/lib/semmle/python/frameworks/Requests.qll
+++ b/python/ql/lib/semmle/python/frameworks/Requests.qll
@@ -28,11 +28,11 @@ private module Requests {
    *
    * See https://requests.readthedocs.io/en/latest/api/#requests.request
    */
-  private class OutgoingRequestCall extends HTTP::Client::Request::Range, API::CallNode {
+  private class OutgoingRequestCall extends Http::Client::Request::Range, API::CallNode {
     string methodName;
 
     OutgoingRequestCall() {
-      methodName in [HTTP::httpVerbLower(), "request"] and
+      methodName in [Http::httpVerbLower(), "request"] and
       (
         this = API::moduleImport("requests").getMember(methodName).getACall()
         or
diff --git a/python/ql/lib/semmle/python/frameworks/RestFramework.qll b/python/ql/lib/semmle/python/frameworks/RestFramework.qll
index c8f73f909c2..8406ee51e27 100644
--- a/python/ql/lib/semmle/python/frameworks/RestFramework.qll
+++ b/python/ql/lib/semmle/python/frameworks/RestFramework.qll
@@ -158,7 +158,7 @@ private module RestFramework {
    * `HTTP::Server::RequestHandler`. We only need this for the ones that doesn't have a
    * known route setup.
    */
-  class RestFrameworkFunctionBasedViewWithoutKnownRoute extends HTTP::Server::RequestHandler::Range,
+  class RestFrameworkFunctionBasedViewWithoutKnownRoute extends Http::Server::RequestHandler::Range,
     PrivateDjango::DjangoRouteHandler instanceof RestFrameworkFunctionBasedView {
     RestFrameworkFunctionBasedViewWithoutKnownRoute() {
       not exists(PrivateDjango::DjangoRouteSetup setup | setup.getARequestHandler() = this)
@@ -220,7 +220,7 @@ private module RestFramework {
      *
      * Use the predicate `Request::instance()` to get references to instances of `rest_framework.request.Request`.
      */
-    abstract class InstanceSource extends PrivateDjango::DjangoImpl::Http::Request::HttpRequest::InstanceSource {
+    abstract class InstanceSource extends PrivateDjango::DjangoImpl::DjangoHttp::Request::HttpRequest::InstanceSource {
     }
 
     /** A direct instantiation of `rest_framework.request.Request`. */
@@ -296,7 +296,7 @@ private module RestFramework {
     }
 
     /** A direct instantiation of `rest_framework.response.Response`. */
-    private class ClassInstantiation extends PrivateDjango::DjangoImpl::Http::Response::HttpResponse::InstanceSource,
+    private class ClassInstantiation extends PrivateDjango::DjangoImpl::DjangoHttp::Response::HttpResponse::InstanceSource,
       DataFlow::CallCfgNode {
       ClassInstantiation() { this = classRef().getACall() }
 
@@ -320,7 +320,7 @@ private module RestFramework {
    */
   module ApiException {
     /** A direct instantiation of `rest_framework.exceptions.ApiException` or subclass. */
-    private class ClassInstantiation extends HTTP::Server::HttpResponse::Range,
+    private class ClassInstantiation extends Http::Server::HttpResponse::Range,
       DataFlow::CallCfgNode {
       string className;
 
diff --git a/python/ql/lib/semmle/python/frameworks/Starlette.qll b/python/ql/lib/semmle/python/frameworks/Starlette.qll
index e22259d560c..a105d62c5b7 100644
--- a/python/ql/lib/semmle/python/frameworks/Starlette.qll
+++ b/python/ql/lib/semmle/python/frameworks/Starlette.qll
@@ -85,7 +85,7 @@ module Starlette {
     }
 
     /** An attribute read on a `starlette.websockets.WebSocket` instance that is a `starlette.requests.URL` instance. */
-    private class UrlInstances extends URL::InstanceSource {
+    private class UrlInstances extends Url::InstanceSource {
       UrlInstances() {
         this.(DataFlow::AttrRead).getObject() = instance() and
         this.(DataFlow::AttrRead).getAttributeName() = "url"
@@ -98,7 +98,7 @@ module Starlette {
    *
    * See the URL part of https://www.starlette.io/websockets/.
    */
-  module URL {
+  module Url {
     /** Gets a reference to the `starlette.requests.URL` class. */
     private API::Node classRef() {
       result = API::moduleImport("starlette").getMember("requests").getMember("URL")
@@ -159,4 +159,7 @@ module Starlette {
       }
     }
   }
+
+  /** DEPRECATED: Alias for Url */
+  deprecated module URL = Url;
 }
diff --git a/python/ql/lib/semmle/python/frameworks/Stdlib.qll b/python/ql/lib/semmle/python/frameworks/Stdlib.qll
index 9b5ff4c291e..a6f476abecd 100644
--- a/python/ql/lib/semmle/python/frameworks/Stdlib.qll
+++ b/python/ql/lib/semmle/python/frameworks/Stdlib.qll
@@ -1877,7 +1877,7 @@ private module StdlibPrivate {
   API::Node http() { result = API::moduleImport("http") }
 
   /** Provides models for the `http` module. */
-  module Http {
+  module StdHttp {
     // -------------------------------------------------------------------------
     // http.server
     // -------------------------------------------------------------------------
@@ -1944,9 +1944,9 @@ private module StdlibPrivate {
           SimpleHttpServer::SimpleHttpRequestHandler::classRef(),
           CgiHttpServer::CgiHttpRequestHandler::classRef(),
           // Python 3
-          Http::Server::BaseHttpRequestHandler::classRef(),
-          Http::Server::SimpleHttpRequestHandler::classRef(),
-          Http::Server::CgiHttpRequestHandler::classRef()
+          StdHttp::Server::BaseHttpRequestHandler::classRef(),
+          StdHttp::Server::SimpleHttpRequestHandler::classRef(),
+          StdHttp::Server::CgiHttpRequestHandler::classRef()
         ].getASubclass*()
     }
 
@@ -2026,10 +2026,10 @@ private module StdlibPrivate {
      *
      * Not essential for any functionality, but provides a consistent modeling.
      */
-    private class RequestHandlerFunc extends HTTP::Server::RequestHandler::Range {
+    private class RequestHandlerFunc extends Http::Server::RequestHandler::Range {
       RequestHandlerFunc() {
         this = any(HttpRequestHandlerClassDef cls).getAMethod() and
-        this.getName() = "do_" + HTTP::httpVerb()
+        this.getName() = "do_" + Http::httpVerb()
       }
 
       override Parameter getARoutedParameter() { none() }
@@ -2064,7 +2064,7 @@ private module StdlibPrivate {
      * See https://github.com/python/cpython/blob/b567b9d74bd9e476a3027335873bb0508d6e450f/Lib/wsgiref/handlers.py#L137
      * for how a request is processed and given to an application.
      */
-    class WsgirefSimpleServerApplication extends HTTP::Server::RequestHandler::Range {
+    class WsgirefSimpleServerApplication extends Http::Server::RequestHandler::Range {
       WsgirefSimpleServerApplication() {
         exists(DataFlow::Node appArg, DataFlow::CallCfgNode setAppCall |
           (
@@ -2166,7 +2166,7 @@ private module StdlibPrivate {
      *
      * See https://github.com/python/cpython/blob/b567b9d74bd9e476a3027335873bb0508d6e450f/Lib/wsgiref/handlers.py#L276
      */
-    class WsgirefSimpleServerApplicationWriteCall extends HTTP::Server::HttpResponse::Range,
+    class WsgirefSimpleServerApplicationWriteCall extends Http::Server::HttpResponse::Range,
       DataFlow::CallCfgNode {
       WsgirefSimpleServerApplicationWriteCall() { this.getFunction() = writeFunction() }
 
@@ -2180,7 +2180,7 @@ private module StdlibPrivate {
     /**
      * A return from a `WsgirefSimpleServerApplication`, which is included in the response body.
      */
-    class WsgirefSimpleServerApplicationReturn extends HTTP::Server::HttpResponse::Range,
+    class WsgirefSimpleServerApplicationReturn extends Http::Server::HttpResponse::Range,
       DataFlow::CfgNode {
       WsgirefSimpleServerApplicationReturn() {
         exists(WsgirefSimpleServerApplication requestHandler |
@@ -2267,7 +2267,7 @@ private module StdlibPrivate {
     }
 
     /** A method call on a HttpConnection that sends off a request */
-    private class RequestCall extends HTTP::Client::Request::Range, DataFlow::MethodCallNode {
+    private class RequestCall extends Http::Client::Request::Range, DataFlow::MethodCallNode {
       RequestCall() { this.calls(instance(_), ["request", "_send_request", "putrequest"]) }
 
       DataFlow::Node getUrlArg() { result in [this.getArg(1), this.getArgByName("url")] }
diff --git a/python/ql/lib/semmle/python/frameworks/Stdlib/Urllib.qll b/python/ql/lib/semmle/python/frameworks/Stdlib/Urllib.qll
index fa932af2673..3e0177f8a14 100644
--- a/python/ql/lib/semmle/python/frameworks/Stdlib/Urllib.qll
+++ b/python/ql/lib/semmle/python/frameworks/Stdlib/Urllib.qll
@@ -30,7 +30,7 @@ private module Urllib {
      * See
      * - https://docs.python.org/3.9/library/urllib.request.html#urllib.request.Request
      */
-    private class RequestCall extends HTTP::Client::Request::Range, DataFlow::CallCfgNode {
+    private class RequestCall extends Http::Client::Request::Range, DataFlow::CallCfgNode {
       RequestCall() {
         this = API::moduleImport("urllib").getMember("request").getMember("Request").getACall()
       }
@@ -52,7 +52,7 @@ private module Urllib {
      * See
      * - https://docs.python.org/3.9/library/urllib.request.html#urllib.request.urlopen
      */
-    private class UrlOpenCall extends HTTP::Client::Request::Range, DataFlow::CallCfgNode {
+    private class UrlOpenCall extends Http::Client::Request::Range, DataFlow::CallCfgNode {
       UrlOpenCall() {
         this = API::moduleImport("urllib").getMember("request").getMember("urlopen").getACall()
       }
diff --git a/python/ql/lib/semmle/python/frameworks/Stdlib/Urllib2.qll b/python/ql/lib/semmle/python/frameworks/Stdlib/Urllib2.qll
index e7e119d98c1..7fc9e5ea468 100644
--- a/python/ql/lib/semmle/python/frameworks/Stdlib/Urllib2.qll
+++ b/python/ql/lib/semmle/python/frameworks/Stdlib/Urllib2.qll
@@ -20,7 +20,7 @@ private module Urllib2 {
    * See
    * - https://docs.python.org/2/library/urllib2.html#urllib2.Request
    */
-  private class RequestCall extends HTTP::Client::Request::Range, DataFlow::CallCfgNode {
+  private class RequestCall extends Http::Client::Request::Range, DataFlow::CallCfgNode {
     RequestCall() { this = API::moduleImport("urllib2").getMember("Request").getACall() }
 
     override DataFlow::Node getAUrlPart() { result in [this.getArg(0), this.getArgByName("url")] }
@@ -40,7 +40,7 @@ private module Urllib2 {
    * See
    * - https://docs.python.org/2/library/urllib2.html#urllib2.urlopen
    */
-  private class UrlOpenCall extends HTTP::Client::Request::Range, DataFlow::CallCfgNode {
+  private class UrlOpenCall extends Http::Client::Request::Range, DataFlow::CallCfgNode {
     UrlOpenCall() { this = API::moduleImport("urllib2").getMember("urlopen").getACall() }
 
     override DataFlow::Node getAUrlPart() { result in [this.getArg(0), this.getArgByName("url")] }
diff --git a/python/ql/lib/semmle/python/frameworks/Tornado.qll b/python/ql/lib/semmle/python/frameworks/Tornado.qll
index d66da17aa5d..77c60097cb5 100644
--- a/python/ql/lib/semmle/python/frameworks/Tornado.qll
+++ b/python/ql/lib/semmle/python/frameworks/Tornado.qll
@@ -99,7 +99,7 @@ private module Tornado {
             // TODO: This doesn't handle attribute assignment. Should be OK, but analysis is not as complete as with
             // points-to and `.lookup`, which would handle `post = my_post_handler` inside class def
             result = this.getAMethod() and
-            result.getName() = HTTP::httpVerbLower()
+            result.getName() = Http::httpVerbLower()
           }
 
           /** Gets a reference to this class. */
@@ -375,7 +375,7 @@ private module Tornado {
   }
 
   /** A tornado route setup. */
-  abstract class TornadoRouteSetup extends HTTP::Server::RouteSetup::Range {
+  abstract class TornadoRouteSetup extends Http::Server::RouteSetup::Range {
     override string getFramework() { result = "Tornado" }
   }
 
@@ -437,7 +437,7 @@ private module Tornado {
   }
 
   /** A request handler defined in a tornado RequestHandler class, that has no known route. */
-  private class TornadoRequestHandlerWithoutKnownRoute extends HTTP::Server::RequestHandler::Range {
+  private class TornadoRequestHandlerWithoutKnownRoute extends Http::Server::RequestHandler::Range {
     TornadoRequestHandlerWithoutKnownRoute() {
       exists(TornadoModule::Web::RequestHandler::RequestHandlerClass cls |
         cls.getARequestHandler() = this
@@ -464,7 +464,7 @@ private module Tornado {
    *
    * See https://www.tornadoweb.org/en/stable/web.html#tornado.web.RequestHandler.redirect
    */
-  private class TornadoRequestHandlerRedirectCall extends HTTP::Server::HttpRedirectResponse::Range,
+  private class TornadoRequestHandlerRedirectCall extends Http::Server::HttpRedirectResponse::Range,
     DataFlow::CallCfgNode {
     TornadoRequestHandlerRedirectCall() {
       this.getFunction() = TornadoModule::Web::RequestHandler::redirectMethod()
@@ -486,7 +486,7 @@ private module Tornado {
    *
    * See https://www.tornadoweb.org/en/stable/web.html#tornado.web.RequestHandler.write
    */
-  private class TornadoRequestHandlerWriteCall extends HTTP::Server::HttpResponse::Range,
+  private class TornadoRequestHandlerWriteCall extends Http::Server::HttpResponse::Range,
     DataFlow::CallCfgNode {
     TornadoRequestHandlerWriteCall() {
       this.getFunction() = TornadoModule::Web::RequestHandler::writeMethod()
@@ -504,7 +504,7 @@ private module Tornado {
    *
    * See https://www.tornadoweb.org/en/stable/web.html#tornado.web.RequestHandler.set_cookie
    */
-  class TornadoRequestHandlerSetCookieCall extends HTTP::Server::CookieWrite::Range,
+  class TornadoRequestHandlerSetCookieCall extends Http::Server::CookieWrite::Range,
     DataFlow::MethodCallNode {
     TornadoRequestHandlerSetCookieCall() {
       this.calls(TornadoModule::Web::RequestHandler::instance(), "set_cookie")
diff --git a/python/ql/lib/semmle/python/frameworks/Twisted.qll b/python/ql/lib/semmle/python/frameworks/Twisted.qll
index c316321555e..34218c7543f 100644
--- a/python/ql/lib/semmle/python/frameworks/Twisted.qll
+++ b/python/ql/lib/semmle/python/frameworks/Twisted.qll
@@ -60,7 +60,7 @@ private module Twisted {
   }
 
   /** A method that handles incoming requests, on a `twisted.web.resource.Resource` subclass. */
-  class TwistedResourceRequestHandler extends HTTP::Server::RequestHandler::Range {
+  class TwistedResourceRequestHandler extends Http::Server::RequestHandler::Range {
     TwistedResourceRequestHandler() { this = any(TwistedResourceSubclass cls).getARequestHandler() }
 
     Parameter getRequestParameter() { result = this.getArg(getRequestParamIndex(this.getName())) }
@@ -176,7 +176,7 @@ private module Twisted {
   /**
    * Implicit response from returns of render methods.
    */
-  private class TwistedResourceRenderMethodReturn extends HTTP::Server::HttpResponse::Range,
+  private class TwistedResourceRenderMethodReturn extends Http::Server::HttpResponse::Range,
     DataFlow::CfgNode {
     TwistedResourceRenderMethodReturn() {
       this.asCfgNode() = any(TwistedResourceRenderMethod meth).getAReturnValueFlowNode()
@@ -194,7 +194,7 @@ private module Twisted {
    *
    * See https://twistedmatrix.com/documents/21.2.0/api/twisted.web.server.Request.html#write
    */
-  class TwistedRequestWriteCall extends HTTP::Server::HttpResponse::Range, DataFlow::MethodCallNode {
+  class TwistedRequestWriteCall extends Http::Server::HttpResponse::Range, DataFlow::MethodCallNode {
     TwistedRequestWriteCall() { this.calls(Request::instance(), "write") }
 
     override DataFlow::Node getBody() {
@@ -211,7 +211,7 @@ private module Twisted {
    *
    * See https://twistedmatrix.com/documents/21.2.0/api/twisted.web.http.Request.html#redirect
    */
-  class TwistedRequestRedirectCall extends HTTP::Server::HttpRedirectResponse::Range,
+  class TwistedRequestRedirectCall extends Http::Server::HttpRedirectResponse::Range,
     DataFlow::MethodCallNode {
     TwistedRequestRedirectCall() { this.calls(Request::instance(), "redirect") }
 
@@ -231,7 +231,7 @@ private module Twisted {
    *
    * See https://twistedmatrix.com/documents/21.2.0/api/twisted.web.http.Request.html#addCookie
    */
-  class TwistedRequestAddCookieCall extends HTTP::Server::CookieWrite::Range,
+  class TwistedRequestAddCookieCall extends Http::Server::CookieWrite::Range,
     DataFlow::MethodCallNode {
     TwistedRequestAddCookieCall() { this.calls(Twisted::Request::instance(), "addCookie") }
 
@@ -247,7 +247,7 @@ private module Twisted {
    *
    * See https://twistedmatrix.com/documents/21.2.0/api/twisted.web.http.Request.html#cookies
    */
-  class TwistedRequestCookiesAppendCall extends HTTP::Server::CookieWrite::Range,
+  class TwistedRequestCookiesAppendCall extends Http::Server::CookieWrite::Range,
     DataFlow::MethodCallNode {
     TwistedRequestCookiesAppendCall() {
       exists(DataFlow::AttrRead cookiesLookup |
diff --git a/python/ql/lib/semmle/python/frameworks/Urllib3.qll b/python/ql/lib/semmle/python/frameworks/Urllib3.qll
index 418a135fbfc..0214dadfc10 100644
--- a/python/ql/lib/semmle/python/frameworks/Urllib3.qll
+++ b/python/ql/lib/semmle/python/frameworks/Urllib3.qll
@@ -49,7 +49,7 @@ private module Urllib3 {
      * - https://urllib3.readthedocs.io/en/stable/reference/urllib3.request.html#urllib3.request.RequestMethods
      * - https://urllib3.readthedocs.io/en/stable/reference/urllib3.connectionpool.html#urllib3.HTTPConnectionPool.urlopen
      */
-    private class RequestCall extends HTTP::Client::Request::Range, API::CallNode {
+    private class RequestCall extends Http::Client::Request::Range, API::CallNode {
       RequestCall() {
         this =
           classRef()
diff --git a/python/ql/lib/semmle/python/frameworks/Yarl.qll b/python/ql/lib/semmle/python/frameworks/Yarl.qll
index 5ea78c1ac8e..4a352431001 100644
--- a/python/ql/lib/semmle/python/frameworks/Yarl.qll
+++ b/python/ql/lib/semmle/python/frameworks/Yarl.qll
@@ -102,7 +102,7 @@ module Yarl {
     }
 
     /** An attribute read on a `yarl.URL` that is a `MultiDictProxy` instance. */
-    class YarlUrlMultiDictProxyInstance extends Multidict::MultiDictProxy::InstanceSource {
+    class YarlUrlMultiDictProxyInstance extends MultiDict::MultiDictProxy::InstanceSource {
       YarlUrlMultiDictProxyInstance() {
         this.(DataFlow::AttrRead).getObject() = Yarl::Url::instance() and
         this.(DataFlow::AttrRead).getAttributeName() = "query"
diff --git a/python/ql/lib/semmle/python/security/dataflow/CleartextStorageCustomizations.qll b/python/ql/lib/semmle/python/security/dataflow/CleartextStorageCustomizations.qll
index 3c7bc43ffa2..0ff32823d68 100644
--- a/python/ql/lib/semmle/python/security/dataflow/CleartextStorageCustomizations.qll
+++ b/python/ql/lib/semmle/python/security/dataflow/CleartextStorageCustomizations.qll
@@ -56,7 +56,7 @@ module CleartextStorage {
   /** The data written to a cookie on a HTTP response, considered as a flow sink. */
   class CookieWriteAsSink extends Sink {
     CookieWriteAsSink() {
-      exists(HTTP::Server::CookieWrite write |
+      exists(Http::Server::CookieWrite write |
         this = write.getValueArg()
         or
         this = write.getHeaderArg()
diff --git a/python/ql/lib/semmle/python/security/dataflow/LdapInjectionCustomizations.qll b/python/ql/lib/semmle/python/security/dataflow/LdapInjectionCustomizations.qll
index dc038ad25b0..fbab127511b 100644
--- a/python/ql/lib/semmle/python/security/dataflow/LdapInjectionCustomizations.qll
+++ b/python/ql/lib/semmle/python/security/dataflow/LdapInjectionCustomizations.qll
@@ -64,14 +64,14 @@ module LdapInjection {
    * A logging operation, considered as a flow sink.
    */
   class LdapExecutionAsDnSink extends DnSink {
-    LdapExecutionAsDnSink() { this = any(LDAP::LdapExecution ldap).getBaseDn() }
+    LdapExecutionAsDnSink() { this = any(Ldap::LdapExecution ldap).getBaseDn() }
   }
 
   /**
    * A logging operation, considered as a flow sink.
    */
   class LdapExecutionAsFilterSink extends FilterSink {
-    LdapExecutionAsFilterSink() { this = any(LDAP::LdapExecution ldap).getFilter() }
+    LdapExecutionAsFilterSink() { this = any(Ldap::LdapExecution ldap).getFilter() }
   }
 
   /**
diff --git a/python/ql/lib/semmle/python/security/dataflow/ReflectedXSSCustomizations.qll b/python/ql/lib/semmle/python/security/dataflow/ReflectedXSSCustomizations.qll
index e2a9fab37a3..ea826c3b0c5 100644
--- a/python/ql/lib/semmle/python/security/dataflow/ReflectedXSSCustomizations.qll
+++ b/python/ql/lib/semmle/python/security/dataflow/ReflectedXSSCustomizations.qll
@@ -48,7 +48,7 @@ module ReflectedXss {
    */
   class ServerHttpResponseBodyAsSink extends Sink {
     ServerHttpResponseBodyAsSink() {
-      exists(HTTP::Server::HttpResponse response |
+      exists(Http::Server::HttpResponse response |
         response.getMimetype().toLowerCase() = "text/html" and
         this = response.getBody()
       )
diff --git a/python/ql/lib/semmle/python/security/dataflow/ServerSideRequestForgeryCustomizations.qll b/python/ql/lib/semmle/python/security/dataflow/ServerSideRequestForgeryCustomizations.qll
index b6df75addf0..e5a0be727cf 100644
--- a/python/ql/lib/semmle/python/security/dataflow/ServerSideRequestForgeryCustomizations.qll
+++ b/python/ql/lib/semmle/python/security/dataflow/ServerSideRequestForgeryCustomizations.qll
@@ -28,7 +28,7 @@ module ServerSideRequestForgery {
     /**
      * Gets the request this sink belongs to.
      */
-    abstract HTTP::Client::Request getRequest();
+    abstract Http::Client::Request getRequest();
   }
 
   /**
@@ -57,7 +57,7 @@ module ServerSideRequestForgery {
 
   /** The URL of an HTTP request, considered as a sink. */
   class HttpRequestUrlAsSink extends Sink {
-    HTTP::Client::Request req;
+    Http::Client::Request req;
 
     HttpRequestUrlAsSink() {
       req.getAUrlPart() = this and
@@ -74,7 +74,7 @@ module ServerSideRequestForgery {
       not req.getScope().getEnclosingModule().getName() in ["http.client", "httplib"]
     }
 
-    override HTTP::Client::Request getRequest() { result = req }
+    override Http::Client::Request getRequest() { result = req }
   }
 
   /**
diff --git a/python/ql/lib/semmle/python/security/dataflow/ServerSideRequestForgeryQuery.qll b/python/ql/lib/semmle/python/security/dataflow/ServerSideRequestForgeryQuery.qll
index 2872ca5192f..36ec416cca2 100644
--- a/python/ql/lib/semmle/python/security/dataflow/ServerSideRequestForgeryQuery.qll
+++ b/python/ql/lib/semmle/python/security/dataflow/ServerSideRequestForgeryQuery.qll
@@ -42,7 +42,7 @@ class FullServerSideRequestForgeryConfiguration extends TaintTracking::Configura
 /**
  * Holds if all URL parts of `request` is fully user controlled.
  */
-predicate fullyControlledRequest(HTTP::Client::Request request) {
+predicate fullyControlledRequest(Http::Client::Request request) {
   exists(FullServerSideRequestForgeryConfiguration fullConfig |
     forall(DataFlow::Node urlPart | urlPart = request.getAUrlPart() |
       fullConfig.hasFlow(_, urlPart)
diff --git a/python/ql/lib/semmle/python/security/dataflow/StackTraceExposureCustomizations.qll b/python/ql/lib/semmle/python/security/dataflow/StackTraceExposureCustomizations.qll
index 3596fa80f72..09f84327a63 100644
--- a/python/ql/lib/semmle/python/security/dataflow/StackTraceExposureCustomizations.qll
+++ b/python/ql/lib/semmle/python/security/dataflow/StackTraceExposureCustomizations.qll
@@ -49,6 +49,6 @@ module StackTraceExposure {
    * The body of a HTTP response that will be returned from a server, considered as a flow sink.
    */
   class ServerHttpResponseBodyAsSink extends Sink {
-    ServerHttpResponseBodyAsSink() { this = any(HTTP::Server::HttpResponse response).getBody() }
+    ServerHttpResponseBodyAsSink() { this = any(Http::Server::HttpResponse response).getBody() }
   }
 }
diff --git a/python/ql/lib/semmle/python/security/dataflow/UrlRedirectCustomizations.qll b/python/ql/lib/semmle/python/security/dataflow/UrlRedirectCustomizations.qll
index 0da2f779c8a..b4843f1a8eb 100644
--- a/python/ql/lib/semmle/python/security/dataflow/UrlRedirectCustomizations.qll
+++ b/python/ql/lib/semmle/python/security/dataflow/UrlRedirectCustomizations.qll
@@ -48,7 +48,7 @@ module UrlRedirect {
    */
   class RedirectLocationAsSink extends Sink {
     RedirectLocationAsSink() {
-      this = any(HTTP::Server::HttpRedirectResponse e).getRedirectLocation()
+      this = any(Http::Server::HttpRedirectResponse e).getRedirectLocation()
     }
   }
 
diff --git a/python/ql/src/Security/CWE-295/RequestWithoutValidation.ql b/python/ql/src/Security/CWE-295/RequestWithoutValidation.ql
index 8cf3bd78037..125957e59b6 100644
--- a/python/ql/src/Security/CWE-295/RequestWithoutValidation.ql
+++ b/python/ql/src/Security/CWE-295/RequestWithoutValidation.ql
@@ -15,7 +15,7 @@ private import semmle.python.dataflow.new.DataFlow
 private import semmle.python.Concepts
 
 from
-  HTTP::Client::Request request, DataFlow::Node disablingNode, DataFlow::Node origin, string ending
+  Http::Client::Request request, DataFlow::Node disablingNode, DataFlow::Node origin, string ending
 where
   request.disablesCertificateValidation(disablingNode, origin) and
   // Showing the origin is only useful when it's a different node than the one disabling
diff --git a/python/ql/src/Security/CWE-352/CSRFProtectionDisabled.ql b/python/ql/src/Security/CWE-352/CSRFProtectionDisabled.ql
index 36a4e315ffc..75b161b9e5b 100644
--- a/python/ql/src/Security/CWE-352/CSRFProtectionDisabled.ql
+++ b/python/ql/src/Security/CWE-352/CSRFProtectionDisabled.ql
@@ -14,24 +14,24 @@
 import python
 import semmle.python.Concepts
 
-predicate relevantSetting(HTTP::Server::CsrfProtectionSetting s) {
+predicate relevantSetting(Http::Server::CsrfProtectionSetting s) {
   // rule out test code as this is a common place to turn off CSRF protection.
   // We don't use normal `TestScope` to find test files, since we also want to match
   // a settings file such as `.../integration-tests/settings.py`
   not s.getLocation().getFile().getAbsolutePath().matches("%test%")
 }
 
-predicate vulnerableSetting(HTTP::Server::CsrfProtectionSetting s) {
+predicate vulnerableSetting(Http::Server::CsrfProtectionSetting s) {
   s.getVerificationSetting() = false and
-  not exists(HTTP::Server::CsrfLocalProtectionSetting p | p.csrfEnabled()) and
+  not exists(Http::Server::CsrfLocalProtectionSetting p | p.csrfEnabled()) and
   relevantSetting(s)
 }
 
-from HTTP::Server::CsrfProtectionSetting setting
+from Http::Server::CsrfProtectionSetting setting
 where
   vulnerableSetting(setting) and
   // We have seen examples of dummy projects with vulnerable settings alongside a main
   // project with a protecting settings file. We want to rule out this scenario, so we
   // require all non-test settings to be vulnerable.
-  forall(HTTP::Server::CsrfProtectionSetting s | relevantSetting(s) | vulnerableSetting(s))
+  forall(Http::Server::CsrfProtectionSetting s | relevantSetting(s) | vulnerableSetting(s))
 select setting, "Potential CSRF vulnerability due to forgery protection being disabled or weakened."
diff --git a/python/ql/src/Security/CWE-918/FullServerSideRequestForgery.ql b/python/ql/src/Security/CWE-918/FullServerSideRequestForgery.ql
index d7ad6465f77..37334fea87c 100644
--- a/python/ql/src/Security/CWE-918/FullServerSideRequestForgery.ql
+++ b/python/ql/src/Security/CWE-918/FullServerSideRequestForgery.ql
@@ -16,7 +16,7 @@ import DataFlow::PathGraph
 
 from
   FullServerSideRequestForgeryConfiguration fullConfig, DataFlow::PathNode source,
-  DataFlow::PathNode sink, HTTP::Client::Request request
+  DataFlow::PathNode sink, Http::Client::Request request
 where
   request = sink.getNode().(Sink).getRequest() and
   fullConfig.hasFlowPath(source, sink) and
diff --git a/python/ql/src/Security/CWE-918/PartialServerSideRequestForgery.ql b/python/ql/src/Security/CWE-918/PartialServerSideRequestForgery.ql
index 6c28f921020..8f8d72c7d65 100644
--- a/python/ql/src/Security/CWE-918/PartialServerSideRequestForgery.ql
+++ b/python/ql/src/Security/CWE-918/PartialServerSideRequestForgery.ql
@@ -16,7 +16,7 @@ import DataFlow::PathGraph
 
 from
   PartialServerSideRequestForgeryConfiguration partialConfig, DataFlow::PathNode source,
-  DataFlow::PathNode sink, HTTP::Client::Request request
+  DataFlow::PathNode sink, Http::Client::Request request
 where
   request = sink.getNode().(Sink).getRequest() and
   partialConfig.hasFlowPath(source, sink) and
diff --git a/python/ql/src/experimental/semmle/python/Concepts.qll b/python/ql/src/experimental/semmle/python/Concepts.qll
index 6729bed0097..16aa54ccea5 100644
--- a/python/ql/src/experimental/semmle/python/Concepts.qll
+++ b/python/ql/src/experimental/semmle/python/Concepts.qll
@@ -416,7 +416,7 @@ class CsvWriter extends DataFlow::Node {
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `Cookie::Range` instead.
  */
-class Cookie extends HTTP::Server::CookieWrite instanceof Cookie::Range {
+class Cookie extends Http::Server::CookieWrite instanceof Cookie::Range {
   /**
    * Holds if this cookie is secure.
    */
@@ -441,7 +441,7 @@ module Cookie {
    * Extend this class to model new APIs. If you want to refine existing API models,
    * extend `Cookie` instead.
    */
-  abstract class Range extends HTTP::Server::CookieWrite::Range {
+  abstract class Range extends Http::Server::CookieWrite::Range {
     /**
      * Holds if this cookie is secure.
      */
diff --git a/python/ql/src/experimental/semmle/python/frameworks/Django.qll b/python/ql/src/experimental/semmle/python/frameworks/Django.qll
index 58d1c6a4abe..d9822014466 100644
--- a/python/ql/src/experimental/semmle/python/frameworks/Django.qll
+++ b/python/ql/src/experimental/semmle/python/frameworks/Django.qll
@@ -15,7 +15,7 @@ private module ExperimentalPrivateDjango {
   private module DjangoMod {
     API::Node http() { result = API::moduleImport("django").getMember("http") }
 
-    module Http {
+    module DjangoHttp {
       API::Node response() { result = http().getMember("response") }
 
       API::Node request() { result = http().getMember("request") }
@@ -54,7 +54,7 @@ private module ExperimentalPrivateDjango {
            *
            * Use the predicate `HttpResponse::instance()` to get references to instances of `django.http.response.HttpResponse`.
            */
-          abstract class InstanceSource extends HTTP::Server::HttpResponse::Range, DataFlow::Node {
+          abstract class InstanceSource extends Http::Server::HttpResponse::Range, DataFlow::Node {
           }
 
           /** A direct instantiation of `django.http.response.HttpResponse`. */
@@ -156,7 +156,7 @@ private module ExperimentalPrivateDjango {
            */
           class DjangoResponseSetCookieCall extends DataFlow::MethodCallNode, Cookie::Range {
             DjangoResponseSetCookieCall() {
-              this.calls(PrivateDjango::DjangoImpl::Http::Response::HttpResponse::instance(),
+              this.calls(PrivateDjango::DjangoImpl::DjangoHttp::Response::HttpResponse::instance(),
                 "set_cookie")
             }
 
diff --git a/python/ql/src/meta/alerts/RequestHandlers.ql b/python/ql/src/meta/alerts/RequestHandlers.ql
index 2f79a3f1b35..3f2eae0d06b 100644
--- a/python/ql/src/meta/alerts/RequestHandlers.ql
+++ b/python/ql/src/meta/alerts/RequestHandlers.ql
@@ -13,7 +13,7 @@ private import semmle.python.dataflow.new.DataFlow
 private import semmle.python.Concepts
 private import meta.MetaMetrics
 
-from HTTP::Server::RequestHandler requestHandler, string title
+from Http::Server::RequestHandler requestHandler, string title
 where
   not requestHandler.getLocation().getFile() instanceof IgnoredFile and
   if requestHandler.isMethod()
diff --git a/python/ql/test/experimental/meta/ConceptsTest.qll b/python/ql/test/experimental/meta/ConceptsTest.qll
index c792a7005b4..9690b7b1497 100644
--- a/python/ql/test/experimental/meta/ConceptsTest.qll
+++ b/python/ql/test/experimental/meta/ConceptsTest.qll
@@ -239,7 +239,7 @@ class HttpServerRouteSetupTest extends InlineExpectationsTest {
 
   override predicate hasActualResult(Location location, string element, string tag, string value) {
     exists(location.getFile().getRelativePath()) and
-    exists(HTTP::Server::RouteSetup setup |
+    exists(Http::Server::RouteSetup setup |
       location = setup.getLocation() and
       element = setup.toString() and
       (
@@ -261,14 +261,14 @@ class HttpServerRequestHandlerTest extends InlineExpectationsTest {
   override predicate hasActualResult(Location location, string element, string tag, string value) {
     exists(location.getFile().getRelativePath()) and
     (
-      exists(HTTP::Server::RequestHandler handler |
+      exists(Http::Server::RequestHandler handler |
         location = handler.getLocation() and
         element = handler.toString() and
         value = "" and
         tag = "requestHandler"
       )
       or
-      exists(HTTP::Server::RequestHandler handler, Parameter param |
+      exists(Http::Server::RequestHandler handler, Parameter param |
         param = handler.getARoutedParameter() and
         location = param.getLocation() and
         element = param.toString() and
@@ -299,21 +299,21 @@ class HttpServerHttpResponseTest extends InlineExpectationsTest {
     // we need to do this step since we expect subclasses could override getARelevantTag
     tag = getARelevantTag() and
     (
-      exists(HTTP::Server::HttpResponse response |
+      exists(Http::Server::HttpResponse response |
         location = response.getLocation() and
         element = response.toString() and
         value = "" and
         tag = "HttpResponse"
       )
       or
-      exists(HTTP::Server::HttpResponse response |
+      exists(Http::Server::HttpResponse response |
         location = response.getLocation() and
         element = response.toString() and
         value = prettyNodeForInlineTest(response.getBody()) and
         tag = "responseBody"
       )
       or
-      exists(HTTP::Server::HttpResponse response |
+      exists(Http::Server::HttpResponse response |
         location = response.getLocation() and
         element = response.toString() and
         // Ensure that an expectation value such as "mimetype=text/html; charset=utf-8" is parsed as a
@@ -338,14 +338,14 @@ class HttpServerHttpRedirectResponseTest extends InlineExpectationsTest {
   override predicate hasActualResult(Location location, string element, string tag, string value) {
     exists(location.getFile().getRelativePath()) and
     (
-      exists(HTTP::Server::HttpRedirectResponse redirect |
+      exists(Http::Server::HttpRedirectResponse redirect |
         location = redirect.getLocation() and
         element = redirect.toString() and
         value = "" and
         tag = "HttpRedirectResponse"
       )
       or
-      exists(HTTP::Server::HttpRedirectResponse redirect |
+      exists(Http::Server::HttpRedirectResponse redirect |
         location = redirect.getLocation() and
         element = redirect.toString() and
         value = prettyNodeForInlineTest(redirect.getRedirectLocation()) and
@@ -364,7 +364,7 @@ class HttpServerCookieWriteTest extends InlineExpectationsTest {
 
   override predicate hasActualResult(Location location, string element, string tag, string value) {
     exists(location.getFile().getRelativePath()) and
-    exists(HTTP::Server::CookieWrite cookieWrite |
+    exists(Http::Server::CookieWrite cookieWrite |
       location = cookieWrite.getLocation() and
       (
         element = cookieWrite.toString() and
@@ -519,7 +519,7 @@ class HttpClientRequestTest extends InlineExpectationsTest {
 
   override predicate hasActualResult(Location location, string element, string tag, string value) {
     exists(location.getFile().getRelativePath()) and
-    exists(HTTP::Client::Request req, DataFlow::Node url |
+    exists(Http::Client::Request req, DataFlow::Node url |
       url = req.getAUrlPart() and
       location = url.getLocation() and
       element = url.toString() and
@@ -528,7 +528,7 @@ class HttpClientRequestTest extends InlineExpectationsTest {
     )
     or
     exists(location.getFile().getRelativePath()) and
-    exists(HTTP::Client::Request req |
+    exists(Http::Client::Request req |
       req.disablesCertificateValidation(_, _) and
       location = req.getLocation() and
       element = req.toString() and
@@ -545,7 +545,7 @@ class CsrfProtectionSettingTest extends InlineExpectationsTest {
 
   override predicate hasActualResult(Location location, string element, string tag, string value) {
     exists(location.getFile().getRelativePath()) and
-    exists(HTTP::Server::CsrfProtectionSetting setting |
+    exists(Http::Server::CsrfProtectionSetting setting |
       location = setting.getLocation() and
       element = setting.toString() and
       value = setting.getVerificationSetting().toString() and
@@ -561,7 +561,7 @@ class CsrfLocalProtectionSettingTest extends InlineExpectationsTest {
 
   override predicate hasActualResult(Location location, string element, string tag, string value) {
     exists(location.getFile().getRelativePath()) and
-    exists(HTTP::Server::CsrfLocalProtectionSetting p |
+    exists(Http::Server::CsrfLocalProtectionSetting p |
       location = p.getLocation() and
       element = p.toString() and
       value = p.getRequestHandler().getName().toString() and
diff --git a/ruby/ql/lib/codeql/ruby/Concepts.qll b/ruby/ql/lib/codeql/ruby/Concepts.qll
index 214f6734473..2098191952e 100644
--- a/ruby/ql/lib/codeql/ruby/Concepts.qll
+++ b/ruby/ql/lib/codeql/ruby/Concepts.qll
@@ -222,7 +222,7 @@ class HtmlEscaping extends Escaping {
 }
 
 /** Provides classes for modeling HTTP-related APIs. */
-module HTTP {
+module Http {
   /** Provides classes for modeling HTTP servers. */
   module Server {
     /**
@@ -465,7 +465,7 @@ module HTTP {
        * Extend this class to model new APIs. If you want to refine existing API models,
        * extend `HttpResponse` instead.
        */
-      abstract class Range extends HTTP::Server::HttpResponse::Range {
+      abstract class Range extends Http::Server::HttpResponse::Range {
         /** Gets the data-flow node that specifies the location of this HTTP redirect response. */
         abstract DataFlow::Node getRedirectLocation();
       }
@@ -550,6 +550,9 @@ module HTTP {
   }
 }
 
+/** DEPRECATED: Alias for Http */
+deprecated module HTTP = Http;
+
 /**
  * A data flow node that executes an operating system command,
  * for instance by spawning a new process.
diff --git a/ruby/ql/lib/codeql/ruby/frameworks/ActionController.qll b/ruby/ql/lib/codeql/ruby/frameworks/ActionController.qll
index d607612364f..bda04932cb1 100644
--- a/ruby/ql/lib/codeql/ruby/frameworks/ActionController.qll
+++ b/ruby/ql/lib/codeql/ruby/frameworks/ActionController.qll
@@ -46,7 +46,7 @@ class ActionControllerControllerClass extends ClassDeclaration {
  * A public instance method defined within an `ActionController` controller class.
  * This may be the target of a route handler, if such a route is defined.
  */
-class ActionControllerActionMethod extends Method, HTTP::Server::RequestHandler::Range {
+class ActionControllerActionMethod extends Method, Http::Server::RequestHandler::Range {
   private ActionControllerControllerClass controllerClass;
 
   ActionControllerActionMethod() { this = controllerClass.getAMethod() and not this.isPrivate() }
@@ -126,7 +126,7 @@ abstract class ParamsCall extends MethodCall {
  * A `RemoteFlowSource::Range` to represent accessing the
  * ActionController parameters available via the `params` method.
  */
-class ParamsSource extends HTTP::Server::RequestInputAccess::Range {
+class ParamsSource extends Http::Server::RequestInputAccess::Range {
   ParamsSource() { this.asExpr().getExpr() instanceof ParamsCall }
 
   override string getSourceType() { result = "ActionController::Metal#params" }
@@ -143,7 +143,7 @@ abstract class CookiesCall extends MethodCall {
  * A `RemoteFlowSource::Range` to represent accessing the
  * ActionController parameters available via the `cookies` method.
  */
-class CookiesSource extends HTTP::Server::RequestInputAccess::Range {
+class CookiesSource extends Http::Server::RequestInputAccess::Range {
   CookiesSource() { this.asExpr().getExpr() instanceof CookiesCall }
 
   override string getSourceType() { result = "ActionController::Metal#cookies" }
@@ -211,7 +211,7 @@ class RedirectToCall extends ActionControllerContextCall {
 /**
  * A call to the `redirect_to` method, as an `HttpRedirectResponse`.
  */
-class ActionControllerRedirectResponse extends HTTP::Server::HttpRedirectResponse::Range {
+class ActionControllerRedirectResponse extends Http::Server::HttpRedirectResponse::Range {
   RedirectToCall redirectToCall;
 
   ActionControllerRedirectResponse() { this.asExpr().getExpr() = redirectToCall }
diff --git a/ruby/ql/lib/codeql/ruby/frameworks/ActionView.qll b/ruby/ql/lib/codeql/ruby/frameworks/ActionView.qll
index fade252ce84..b1e3e07d2d0 100644
--- a/ruby/ql/lib/codeql/ruby/frameworks/ActionView.qll
+++ b/ruby/ql/lib/codeql/ruby/frameworks/ActionView.qll
@@ -127,7 +127,7 @@ abstract class RenderCall extends MethodCall {
  * A call to `render`, `render_to_body` or `render_to_string`, seen as an
  * `HttpResponse`.
  */
-private class RenderCallAsHttpResponse extends DataFlow::CallNode, HTTP::Server::HttpResponse::Range {
+private class RenderCallAsHttpResponse extends DataFlow::CallNode, Http::Server::HttpResponse::Range {
   RenderCallAsHttpResponse() {
     this.asExpr().getExpr() instanceof RenderCall or
     this.asExpr().getExpr() instanceof RenderToCall
diff --git a/ruby/ql/lib/codeql/ruby/frameworks/ActiveResource.qll b/ruby/ql/lib/codeql/ruby/frameworks/ActiveResource.qll
index 901552d637f..b212f420fc6 100644
--- a/ruby/ql/lib/codeql/ruby/frameworks/ActiveResource.qll
+++ b/ruby/ql/lib/codeql/ruby/frameworks/ActiveResource.qll
@@ -215,7 +215,7 @@ module ActiveResource {
     Collection getCollection() { result = this.getReceiver() }
   }
 
-  private class ModelClassMethodCallAsHttpRequest extends HTTP::Client::Request::Range,
+  private class ModelClassMethodCallAsHttpRequest extends Http::Client::Request::Range,
     ModelClassMethodCall {
     ModelClass cls;
 
@@ -239,7 +239,7 @@ module ActiveResource {
     override DataFlow::Node getResponseBody() { result = this }
   }
 
-  private class ModelInstanceMethodCallAsHttpRequest extends HTTP::Client::Request::Range,
+  private class ModelInstanceMethodCallAsHttpRequest extends Http::Client::Request::Range,
     ModelInstanceMethodCall {
     ModelClass cls;
 
diff --git a/ruby/ql/lib/codeql/ruby/frameworks/GraphQL.qll b/ruby/ql/lib/codeql/ruby/frameworks/GraphQL.qll
index ede99069213..8815242a723 100644
--- a/ruby/ql/lib/codeql/ruby/frameworks/GraphQL.qll
+++ b/ruby/ql/lib/codeql/ruby/frameworks/GraphQL.qll
@@ -164,7 +164,7 @@ private class GraphqlResolvableClass extends ClassDeclaration {
  * end
  * ```
  */
-class GraphqlResolveMethod extends Method, HTTP::Server::RequestHandler::Range {
+class GraphqlResolveMethod extends Method, Http::Server::RequestHandler::Range {
   private GraphqlResolvableClass resolvableClass;
 
   GraphqlResolveMethod() { this = resolvableClass.getMethod("resolve") }
@@ -208,7 +208,7 @@ class GraphqlResolveMethod extends Method, HTTP::Server::RequestHandler::Range {
  * end
  * ```
  */
-class GraphqlLoadMethod extends Method, HTTP::Server::RequestHandler::Range {
+class GraphqlLoadMethod extends Method, Http::Server::RequestHandler::Range {
   private GraphqlResolvableClass resolvableClass;
 
   GraphqlLoadMethod() {
@@ -340,7 +340,7 @@ private class GraphqlFieldArgumentDefinitionMethodCall extends GraphqlSchemaObje
  * end
  * ```
  */
-class GraphqlFieldResolutionMethod extends Method, HTTP::Server::RequestHandler::Range {
+class GraphqlFieldResolutionMethod extends Method, Http::Server::RequestHandler::Range {
   private GraphqlSchemaObjectClass schemaObjectClass;
 
   GraphqlFieldResolutionMethod() {
diff --git a/ruby/ql/lib/codeql/ruby/frameworks/http_clients/Excon.qll b/ruby/ql/lib/codeql/ruby/frameworks/http_clients/Excon.qll
index c74958be716..0cca7e268dc 100644
--- a/ruby/ql/lib/codeql/ruby/frameworks/http_clients/Excon.qll
+++ b/ruby/ql/lib/codeql/ruby/frameworks/http_clients/Excon.qll
@@ -24,7 +24,7 @@ private import codeql.ruby.dataflow.internal.DataFlowImplForHttpClientLibraries
  * TODO: pipelining, streaming responses
  * https://github.com/excon/excon/blob/master/README.md
  */
-class ExconHttpRequest extends HTTP::Client::Request::Range, DataFlow::CallNode {
+class ExconHttpRequest extends Http::Client::Request::Range, DataFlow::CallNode {
   API::Node requestNode;
   API::Node connectionNode;
   DataFlow::Node connectionUse;
diff --git a/ruby/ql/lib/codeql/ruby/frameworks/http_clients/Faraday.qll b/ruby/ql/lib/codeql/ruby/frameworks/http_clients/Faraday.qll
index 548e85e7696..049998ce8f3 100644
--- a/ruby/ql/lib/codeql/ruby/frameworks/http_clients/Faraday.qll
+++ b/ruby/ql/lib/codeql/ruby/frameworks/http_clients/Faraday.qll
@@ -23,7 +23,7 @@ private import codeql.ruby.dataflow.internal.DataFlowImplForHttpClientLibraries
  * connection.get("/").body
  * ```
  */
-class FaradayHttpRequest extends HTTP::Client::Request::Range, DataFlow::CallNode {
+class FaradayHttpRequest extends Http::Client::Request::Range, DataFlow::CallNode {
   API::Node requestNode;
   API::Node connectionNode;
   DataFlow::Node connectionUse;
diff --git a/ruby/ql/lib/codeql/ruby/frameworks/http_clients/HttpClient.qll b/ruby/ql/lib/codeql/ruby/frameworks/http_clients/HttpClient.qll
index 0196d4c4d3c..255ff0277bc 100644
--- a/ruby/ql/lib/codeql/ruby/frameworks/http_clients/HttpClient.qll
+++ b/ruby/ql/lib/codeql/ruby/frameworks/http_clients/HttpClient.qll
@@ -15,7 +15,7 @@ private import codeql.ruby.dataflow.internal.DataFlowImplForHttpClientLibraries
  * HTTPClient.get_content("http://example.com")
  * ```
  */
-class HttpClientRequest extends HTTP::Client::Request::Range, DataFlow::CallNode {
+class HttpClientRequest extends Http::Client::Request::Range, DataFlow::CallNode {
   API::Node requestNode;
   API::Node connectionNode;
   string method;
diff --git a/ruby/ql/lib/codeql/ruby/frameworks/http_clients/Httparty.qll b/ruby/ql/lib/codeql/ruby/frameworks/http_clients/Httparty.qll
index 696a008e86c..99fd9e00f18 100644
--- a/ruby/ql/lib/codeql/ruby/frameworks/http_clients/Httparty.qll
+++ b/ruby/ql/lib/codeql/ruby/frameworks/http_clients/Httparty.qll
@@ -24,7 +24,7 @@ private import codeql.ruby.dataflow.internal.DataFlowImplForHttpClientLibraries
  * MyClass.new("http://example.com")
  * ```
  */
-class HttpartyRequest extends HTTP::Client::Request::Range, DataFlow::CallNode {
+class HttpartyRequest extends Http::Client::Request::Range, DataFlow::CallNode {
   API::Node requestNode;
 
   HttpartyRequest() {
diff --git a/ruby/ql/lib/codeql/ruby/frameworks/http_clients/NetHttp.qll b/ruby/ql/lib/codeql/ruby/frameworks/http_clients/NetHttp.qll
index 6848f247b3f..f12f6fa8e30 100644
--- a/ruby/ql/lib/codeql/ruby/frameworks/http_clients/NetHttp.qll
+++ b/ruby/ql/lib/codeql/ruby/frameworks/http_clients/NetHttp.qll
@@ -19,7 +19,7 @@ private import codeql.ruby.dataflow.internal.DataFlowImplForHttpClientLibraries
  * response = req.get("/")
  * ```
  */
-class NetHttpRequest extends HTTP::Client::Request::Range, DataFlow::CallNode {
+class NetHttpRequest extends Http::Client::Request::Range, DataFlow::CallNode {
   private DataFlow::CallNode request;
   private DataFlow::Node responseBody;
   private API::Node requestNode;
diff --git a/ruby/ql/lib/codeql/ruby/frameworks/http_clients/OpenURI.qll b/ruby/ql/lib/codeql/ruby/frameworks/http_clients/OpenURI.qll
index 8a519d56bf4..557c75f77ec 100644
--- a/ruby/ql/lib/codeql/ruby/frameworks/http_clients/OpenURI.qll
+++ b/ruby/ql/lib/codeql/ruby/frameworks/http_clients/OpenURI.qll
@@ -19,7 +19,7 @@ private import codeql.ruby.dataflow.internal.DataFlowImplForHttpClientLibraries
  * URI.parse("http://example.com").open.read
  * ```
  */
-class OpenUriRequest extends HTTP::Client::Request::Range, DataFlow::CallNode {
+class OpenUriRequest extends Http::Client::Request::Range, DataFlow::CallNode {
   API::Node requestNode;
 
   OpenUriRequest() {
@@ -61,7 +61,7 @@ class OpenUriRequest extends HTTP::Client::Request::Range, DataFlow::CallNode {
  * Kernel.open("http://example.com").read
  * ```
  */
-class OpenUriKernelOpenRequest extends HTTP::Client::Request::Range, DataFlow::CallNode {
+class OpenUriKernelOpenRequest extends Http::Client::Request::Range, DataFlow::CallNode {
   OpenUriKernelOpenRequest() {
     this instanceof KernelMethodCall and
     this.getMethodName() = "open"
diff --git a/ruby/ql/lib/codeql/ruby/frameworks/http_clients/RestClient.qll b/ruby/ql/lib/codeql/ruby/frameworks/http_clients/RestClient.qll
index 15ed7b49f48..6693f94585a 100644
--- a/ruby/ql/lib/codeql/ruby/frameworks/http_clients/RestClient.qll
+++ b/ruby/ql/lib/codeql/ruby/frameworks/http_clients/RestClient.qll
@@ -17,7 +17,7 @@ private import codeql.ruby.dataflow.internal.DataFlowImplForHttpClientLibraries
  * RestClient::Request.execute(url: "http://example.com").body
  * ```
  */
-class RestClientHttpRequest extends HTTP::Client::Request::Range, DataFlow::CallNode {
+class RestClientHttpRequest extends Http::Client::Request::Range, DataFlow::CallNode {
   API::Node requestNode;
   API::Node connectionNode;
 
diff --git a/ruby/ql/lib/codeql/ruby/frameworks/http_clients/Typhoeus.qll b/ruby/ql/lib/codeql/ruby/frameworks/http_clients/Typhoeus.qll
index 01d10d67293..f9dcc29a266 100644
--- a/ruby/ql/lib/codeql/ruby/frameworks/http_clients/Typhoeus.qll
+++ b/ruby/ql/lib/codeql/ruby/frameworks/http_clients/Typhoeus.qll
@@ -15,7 +15,7 @@ private import codeql.ruby.dataflow.internal.DataFlowImplForHttpClientLibraries
  * Typhoeus.get("http://example.com").body
  * ```
  */
-class TyphoeusHttpRequest extends HTTP::Client::Request::Range, DataFlow::CallNode {
+class TyphoeusHttpRequest extends Http::Client::Request::Range, DataFlow::CallNode {
   API::Node requestNode;
 
   TyphoeusHttpRequest() {
diff --git a/ruby/ql/lib/codeql/ruby/security/HttpToFileAccessSpecific.qll b/ruby/ql/lib/codeql/ruby/security/HttpToFileAccessSpecific.qll
index 1c1ce3437b9..3cbf144d398 100644
--- a/ruby/ql/lib/codeql/ruby/security/HttpToFileAccessSpecific.qll
+++ b/ruby/ql/lib/codeql/ruby/security/HttpToFileAccessSpecific.qll
@@ -12,10 +12,10 @@ private import HttpToFileAccessCustomizations::HttpToFileAccess
 /**
  * An access to a user-controlled HTTP request input, considered as a flow source for writing user-controlled data to files
  */
-private class RequestInputAccessAsSource extends Source instanceof HTTP::Server::RequestInputAccess {
+private class RequestInputAccessAsSource extends Source instanceof Http::Server::RequestInputAccess {
 }
 
 /** A response from an outgoing HTTP request, considered as a flow source for writing user-controlled data to files. */
 private class HttpResponseAsSource extends Source {
-  HttpResponseAsSource() { this = any(HTTP::Client::Request r).getResponseBody() }
+  HttpResponseAsSource() { this = any(Http::Client::Request r).getResponseBody() }
 }
diff --git a/ruby/ql/lib/codeql/ruby/security/InsecureDownloadCustomizations.qll b/ruby/ql/lib/codeql/ruby/security/InsecureDownloadCustomizations.qll
index e9850445ef5..3c718655722 100644
--- a/ruby/ql/lib/codeql/ruby/security/InsecureDownloadCustomizations.qll
+++ b/ruby/ql/lib/codeql/ruby/security/InsecureDownloadCustomizations.qll
@@ -135,7 +135,7 @@ module InsecureDownload {
    * In other words, if the URL is HTTP and the extension is in `unsafeExtension()`.
    */
   private class HttpResponseAsSink extends Sink {
-    private HTTP::Client::Request req;
+    private Http::Client::Request req;
 
     HttpResponseAsSink() {
       this = req.getAUrlPart() and
@@ -155,7 +155,7 @@ module InsecureDownload {
   /**
    * Gets a node for the response from `request`, type-tracked using `t`.
    */
-  DataFlow::LocalSourceNode clientRequestResponse(TypeTracker t, HTTP::Client::Request request) {
+  DataFlow::LocalSourceNode clientRequestResponse(TypeTracker t, Http::Client::Request request) {
     t.start() and
     result = request.getResponseBody()
     or
@@ -166,7 +166,7 @@ module InsecureDownload {
    * A url that is downloaded through an insecure connection, where the result ends up being saved to a sensitive location.
    */
   class FileWriteSink extends Sink {
-    HTTP::Client::Request request;
+    Http::Client::Request request;
 
     FileWriteSink() {
       // For example, in:
diff --git a/ruby/ql/lib/codeql/ruby/security/ServerSideRequestForgeryCustomizations.qll b/ruby/ql/lib/codeql/ruby/security/ServerSideRequestForgeryCustomizations.qll
index 840ced98fc5..30ccee6d986 100644
--- a/ruby/ql/lib/codeql/ruby/security/ServerSideRequestForgeryCustomizations.qll
+++ b/ruby/ql/lib/codeql/ruby/security/ServerSideRequestForgeryCustomizations.qll
@@ -45,7 +45,7 @@ module ServerSideRequestForgery {
 
   /** The URL of an HTTP request, considered as a sink. */
   class HttpRequestAsSink extends Sink {
-    HttpRequestAsSink() { exists(HTTP::Client::Request req | req.getAUrlPart() = this) }
+    HttpRequestAsSink() { exists(Http::Client::Request req | req.getAUrlPart() = this) }
   }
 
   /** A string interpolation with a fixed prefix, considered as a flow sanitizer. */
diff --git a/ruby/ql/lib/codeql/ruby/security/UrlRedirectCustomizations.qll b/ruby/ql/lib/codeql/ruby/security/UrlRedirectCustomizations.qll
index 8fb8ada584e..998bb0ff110 100644
--- a/ruby/ql/lib/codeql/ruby/security/UrlRedirectCustomizations.qll
+++ b/ruby/ql/lib/codeql/ruby/security/UrlRedirectCustomizations.qll
@@ -57,7 +57,7 @@ module UrlRedirect {
    */
   class RedirectLocationAsSink extends Sink {
     RedirectLocationAsSink() {
-      exists(HTTP::Server::HttpRedirectResponse e, MethodBase method |
+      exists(Http::Server::HttpRedirectResponse e, MethodBase method |
         this = e.getRedirectLocation() and
         // We only want handlers for GET requests.
         // Handlers for other HTTP methods are not as vulnerable to URL
diff --git a/ruby/ql/src/queries/security/cwe-295/RequestWithoutValidation.ql b/ruby/ql/src/queries/security/cwe-295/RequestWithoutValidation.ql
index cf470213584..137bfc94163 100644
--- a/ruby/ql/src/queries/security/cwe-295/RequestWithoutValidation.ql
+++ b/ruby/ql/src/queries/security/cwe-295/RequestWithoutValidation.ql
@@ -16,7 +16,7 @@ import codeql.ruby.Concepts
 import codeql.ruby.DataFlow
 
 from
-  HTTP::Client::Request request, DataFlow::Node disablingNode, DataFlow::Node origin, string ending
+  Http::Client::Request request, DataFlow::Node disablingNode, DataFlow::Node origin, string ending
 where
   request.disablesCertificateValidation(disablingNode, origin) and
   // Showing the origin is only useful when it's a different node than the one disabling
diff --git a/ruby/ql/test/library-tests/frameworks/ActionView.ql b/ruby/ql/test/library-tests/frameworks/ActionView.ql
index da9381087fd..da5f03467a1 100644
--- a/ruby/ql/test/library-tests/frameworks/ActionView.ql
+++ b/ruby/ql/test/library-tests/frameworks/ActionView.ql
@@ -13,6 +13,6 @@ query predicate renderToCalls(RenderToCall c) { any() }
 
 query predicate linkToCalls(LinkToCall c) { any() }
 
-query predicate httpResponses(HTTP::Server::HttpResponse r, DataFlow::Node body, string mimeType) {
+query predicate httpResponses(Http::Server::HttpResponse r, DataFlow::Node body, string mimeType) {
   r.getBody() = body and r.getMimetype() = mimeType
 }
diff --git a/ruby/ql/test/library-tests/frameworks/http_clients/HttpClients.ql b/ruby/ql/test/library-tests/frameworks/http_clients/HttpClients.ql
index 17f328ad2ed..0bcc883c364 100644
--- a/ruby/ql/test/library-tests/frameworks/http_clients/HttpClients.ql
+++ b/ruby/ql/test/library-tests/frameworks/http_clients/HttpClients.ql
@@ -2,7 +2,7 @@ import codeql.ruby.Concepts
 import codeql.ruby.DataFlow
 
 query predicate httpRequests(
-  HTTP::Client::Request r, string framework, DataFlow::Node urlPart, DataFlow::Node responseBody
+  Http::Client::Request r, string framework, DataFlow::Node urlPart, DataFlow::Node responseBody
 ) {
   r.getFramework() = framework and
   r.getAUrlPart() = urlPart and
diff --git a/swift/ql/src/queries/Security/CWE-311/CleartextTransmission.ql b/swift/ql/src/queries/Security/CWE-311/CleartextTransmission.ql
index d3ce257b753..2cc66dd02b6 100644
--- a/swift/ql/src/queries/Security/CWE-311/CleartextTransmission.ql
+++ b/swift/ql/src/queries/Security/CWE-311/CleartextTransmission.ql
@@ -42,8 +42,8 @@ class NWConnectionSend extends Transmitted {
  * An `Expr` that is used to form a `URL`. Such expressions are very likely to
  * be transmitted over a network, because that's what URLs are for.
  */
-class URL extends Transmitted {
-  URL() {
+class Url extends Transmitted {
+  Url() {
     // `string` arg in `URL.init` is a sink
     // (we assume here that the URL goes on to be used in a network operation)
     exists(ClassDecl c, AbstractFunctionDecl f, CallExpr call |

From c739bbb0515f4346074f9323fd76e57cd364d630 Mon Sep 17 00:00:00 2001
From: Paolo Tranquilli <redsun82@github.com>
Date: Fri, 9 Sep 2022 11:00:02 +0200
Subject: [PATCH 074/203] Swift: bake in `isProbablySafe` in `SensitiveExpr`

Also restructured the code a bit in the weak hashing query.
---
 .../codeql/swift/security/SensitiveExprs.qll  | 39 +++++++++----------
 .../CWE-311/CleartextStorageDatabase.ql       |  7 +---
 .../Security/CWE-311/CleartextTransmission.ql |  7 +---
 .../CWE-328/WeakSensitiveDataHashing.ql       | 30 ++++++++------
 .../Security/CWE-311/SensitiveExprs.expected  | 11 ------
 .../Security/CWE-311/SensitiveExprs.ql        |  2 -
 .../CWE-328/WeakSensitiveDataHashing.expected | 24 ++++++------
 7 files changed, 50 insertions(+), 70 deletions(-)

diff --git a/swift/ql/lib/codeql/swift/security/SensitiveExprs.qll b/swift/ql/lib/codeql/swift/security/SensitiveExprs.qll
index 1dbcada4127..3019c919219 100644
--- a/swift/ql/lib/codeql/swift/security/SensitiveExprs.qll
+++ b/swift/ql/lib/codeql/swift/security/SensitiveExprs.qll
@@ -121,20 +121,24 @@ class SensitiveExpr extends Expr {
   SensitiveDataType sensitiveType;
 
   SensitiveExpr() {
-    // variable reference
-    this.(DeclRefExpr).getDecl().(SensitiveVarDecl).hasInfo(label, sensitiveType)
-    or
-    // member variable reference
-    this.(MemberRefExpr).getMember().(SensitiveVarDecl).hasInfo(label, sensitiveType)
-    or
-    // function call
-    this.(ApplyExpr).getStaticTarget().(SensitiveFunctionDecl).hasInfo(label, sensitiveType)
-    or
-    // sensitive argument
-    exists(SensitiveArgument a |
-      a.hasInfo(label, sensitiveType) and
-      a.getExpr() = this
-    )
+    (
+      // variable reference
+      this.(DeclRefExpr).getDecl().(SensitiveVarDecl).hasInfo(label, sensitiveType)
+      or
+      // member variable reference
+      this.(MemberRefExpr).getMember().(SensitiveVarDecl).hasInfo(label, sensitiveType)
+      or
+      // function call
+      this.(ApplyExpr).getStaticTarget().(SensitiveFunctionDecl).hasInfo(label, sensitiveType)
+      or
+      // sensitive argument
+      exists(SensitiveArgument a |
+        a.hasInfo(label, sensitiveType) and
+        a.getExpr() = this
+      )
+    ) and
+    // do not mark as sensitive it if it is probably safe
+    not label.toLowerCase().regexpMatch(regexpProbablySafe())
   }
 
   /**
@@ -146,11 +150,4 @@ class SensitiveExpr extends Expr {
    * Gets the type of sensitive expression this is.
    */
   SensitiveDataType getSensitiveType() { result = sensitiveType }
-
-  /**
-   * Holds if this sensitive expression might be safe because it contains
-   * hashed or encrypted data, or is only a reference to data that is stored
-   * elsewhere.
-   */
-  predicate isProbablySafe() { label.toLowerCase().regexpMatch(regexpProbablySafe()) }
 }
diff --git a/swift/ql/src/queries/Security/CWE-311/CleartextStorageDatabase.ql b/swift/ql/src/queries/Security/CWE-311/CleartextStorageDatabase.ql
index 6ee90e87a84..2ef86b1609b 100644
--- a/swift/ql/src/queries/Security/CWE-311/CleartextStorageDatabase.ql
+++ b/swift/ql/src/queries/Security/CWE-311/CleartextStorageDatabase.ql
@@ -70,12 +70,7 @@ class RealmStore extends Stored {
 class CleartextStorageConfig extends TaintTracking::Configuration {
   CleartextStorageConfig() { this = "CleartextStorageConfig" }
 
-  override predicate isSource(DataFlow::Node node) {
-    exists(SensitiveExpr e |
-      node.asExpr() = e and
-      not e.isProbablySafe()
-    )
-  }
+  override predicate isSource(DataFlow::Node node) { node.asExpr() instanceof SensitiveExpr }
 
   override predicate isSink(DataFlow::Node node) { node.asExpr() instanceof Stored }
 
diff --git a/swift/ql/src/queries/Security/CWE-311/CleartextTransmission.ql b/swift/ql/src/queries/Security/CWE-311/CleartextTransmission.ql
index bbb71bb2587..21a14454504 100644
--- a/swift/ql/src/queries/Security/CWE-311/CleartextTransmission.ql
+++ b/swift/ql/src/queries/Security/CWE-311/CleartextTransmission.ql
@@ -63,12 +63,7 @@ class URL extends Transmitted {
 class CleartextTransmissionConfig extends TaintTracking::Configuration {
   CleartextTransmissionConfig() { this = "CleartextTransmissionConfig" }
 
-  override predicate isSource(DataFlow::Node node) {
-    exists(SensitiveExpr e |
-      node.asExpr() = e and
-      not e.isProbablySafe()
-    )
-  }
+  override predicate isSource(DataFlow::Node node) { node.asExpr() instanceof SensitiveExpr }
 
   override predicate isSink(DataFlow::Node node) { node.asExpr() instanceof Transmitted }
 
diff --git a/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.ql b/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.ql
index 5eb711434fa..b697a9a01dd 100755
--- a/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.ql
+++ b/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.ql
@@ -20,21 +20,24 @@ import DataFlow::PathGraph
 class WeakHashingConfig extends TaintTracking::Configuration {
   WeakHashingConfig() { this = "WeakHashingConfig" }
 
-  override predicate isSource(DataFlow::Node node) {
-    exists(SensitiveExpr e |
-      node.asExpr() = e and
-      not e.isProbablySafe()
-    )
-  }
+  override predicate isSource(DataFlow::Node node) { node instanceof WeakHashingConfig::Source }
 
   override predicate isSink(DataFlow::Node node) { node instanceof WeakHashingConfig::Sink }
 }
 
 module WeakHashingConfig {
-  class Sink extends DataFlow::Node {
+  class Source extends DataFlow::Node {
+    Source() { this.asExpr() instanceof SensitiveExpr }
+  }
+
+  abstract class Sink extends DataFlow::Node {
+    abstract string getAlgorithm();
+  }
+
+  class CryptoHash extends Sink {
     string algorithm;
 
-    Sink() {
+    CryptoHash() {
       exists(ApplyExpr call, FuncDecl func |
         call.getAnArgument().getExpr() = this.asExpr() and
         call.getStaticTarget() = func and
@@ -44,14 +47,17 @@ module WeakHashingConfig {
       )
     }
 
-    string getAlgorithm() { result = algorithm }
+    override string getAlgorithm() { result = algorithm }
   }
 }
 
-from WeakHashingConfig config, DataFlow::PathNode source, DataFlow::PathNode sink, string algorithm
+from
+  WeakHashingConfig config, DataFlow::PathNode source, DataFlow::PathNode sink, string algorithm,
+  SensitiveExpr expr
 where
   config.hasFlowPath(source, sink) and
-  algorithm = sink.getNode().(WeakHashingConfig::Sink).getAlgorithm()
+  algorithm = sink.getNode().(WeakHashingConfig::Sink).getAlgorithm() and
+  expr = source.getNode().asExpr()
 select sink.getNode(), source, sink,
   "Insecure hashing algorithm (" + algorithm + ") depends on $@.", source.getNode(),
-  "sensitive data"
+  "sensitive data (" + expr.getSensitiveType() + " " + expr.getLabel() + ")"
diff --git a/swift/ql/test/query-tests/Security/CWE-311/SensitiveExprs.expected b/swift/ql/test/query-tests/Security/CWE-311/SensitiveExprs.expected
index a46d45c0821..3b5f0b58f26 100644
--- a/swift/ql/test/query-tests/Security/CWE-311/SensitiveExprs.expected
+++ b/swift/ql/test/query-tests/Security/CWE-311/SensitiveExprs.expected
@@ -1,13 +1,8 @@
 | testCoreData.swift:48:15:48:15 | password | label:password, type:credential |
-| testCoreData.swift:49:15:49:15 | password_hash | isProbablySafe, label:password_hash, type:credential |
 | testCoreData.swift:51:24:51:24 | password | label:password, type:credential |
-| testCoreData.swift:52:24:52:24 | password_hash | isProbablySafe, label:password_hash, type:credential |
 | testCoreData.swift:58:15:58:15 | password | label:password, type:credential |
-| testCoreData.swift:59:15:59:15 | password_file | isProbablySafe, label:password_file, type:credential |
 | testCoreData.swift:61:25:61:25 | password | label:password, type:credential |
-| testCoreData.swift:62:25:62:25 | password_file | isProbablySafe, label:password_file, type:credential |
 | testCoreData.swift:64:16:64:16 | password | label:password, type:credential |
-| testCoreData.swift:65:16:65:16 | password_file | isProbablySafe, label:password_file, type:credential |
 | testCoreData.swift:77:2:77:25 | call to doSomething(password:) | label:doSomething(password:), type:credential |
 | testCoreData.swift:77:24:77:24 | x | label:password, type:credential |
 | testCoreData.swift:80:10:80:22 | call to getPassword() | label:getPassword(), type:credential |
@@ -16,16 +11,10 @@
 | testCoreData.swift:92:10:92:10 | passwd | label:passwd, type:credential |
 | testCoreData.swift:93:10:93:10 | passwd | label:passwd, type:credential |
 | testRealm.swift:34:11:34:11 | myPassword | label:myPassword, type:credential |
-| testRealm.swift:38:11:38:11 | myHashedPassword | isProbablySafe, label:myHashedPassword, type:credential |
 | testRealm.swift:42:11:42:11 | myPassword | label:myPassword, type:credential |
-| testRealm.swift:46:11:46:11 | myHashedPassword | isProbablySafe, label:myHashedPassword, type:credential |
 | testRealm.swift:52:12:52:12 | myPassword | label:myPassword, type:credential |
-| testRealm.swift:55:12:55:12 | myHashedPassword | isProbablySafe, label:myHashedPassword, type:credential |
 | testSend.swift:29:19:29:19 | passwordPlain | label:passwordPlain, type:credential |
-| testSend.swift:30:19:30:19 | passwordHash | isProbablySafe, label:passwordHash, type:credential |
 | testSend.swift:33:19:33:19 | passwordPlain | label:passwordPlain, type:credential |
-| testSend.swift:34:19:34:19 | passwordHash | isProbablySafe, label:passwordHash, type:credential |
 | testURL.swift:13:54:13:54 | passwd | label:passwd, type:credential |
-| testURL.swift:14:54:14:54 | encrypted_passwd | isProbablySafe, label:encrypted_passwd, type:credential |
 | testURL.swift:16:55:16:55 | credit_card_no | label:credit_card_no, type:private information |
 | testURL.swift:20:22:20:22 | passwd | label:passwd, type:credential |
diff --git a/swift/ql/test/query-tests/Security/CWE-311/SensitiveExprs.ql b/swift/ql/test/query-tests/Security/CWE-311/SensitiveExprs.ql
index 5caa85c948f..3694468b130 100644
--- a/swift/ql/test/query-tests/Security/CWE-311/SensitiveExprs.ql
+++ b/swift/ql/test/query-tests/Security/CWE-311/SensitiveExprs.ql
@@ -5,8 +5,6 @@ string describe(SensitiveExpr e) {
   result = "label:" + e.getLabel()
   or
   result = "type:" + e.getSensitiveType().toString()
-  or
-  e.isProbablySafe() and result = "isProbablySafe"
 }
 
 from SensitiveExpr e
diff --git a/swift/ql/test/query-tests/Security/CWE-328/WeakSensitiveDataHashing.expected b/swift/ql/test/query-tests/Security/CWE-328/WeakSensitiveDataHashing.expected
index 0422d561ca8..81d4f184569 100644
--- a/swift/ql/test/query-tests/Security/CWE-328/WeakSensitiveDataHashing.expected
+++ b/swift/ql/test/query-tests/Security/CWE-328/WeakSensitiveDataHashing.expected
@@ -14,15 +14,15 @@ nodes
 | testCrypto.swift:67:32:67:32 | credit_card_no | semmle.label | credit_card_no |
 subpaths
 #select
-| testCrypto.swift:25:47:25:47 | passwd | testCrypto.swift:25:47:25:47 | passwd | testCrypto.swift:25:47:25:47 | passwd | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:25:47:25:47 | passwd | sensitive data |
-| testCrypto.swift:28:43:28:43 | credit_card_no | testCrypto.swift:28:43:28:43 | credit_card_no | testCrypto.swift:28:43:28:43 | credit_card_no | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:28:43:28:43 | credit_card_no | sensitive data |
-| testCrypto.swift:32:48:32:48 | passwd | testCrypto.swift:32:48:32:48 | passwd | testCrypto.swift:32:48:32:48 | passwd | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:32:48:32:48 | passwd | sensitive data |
-| testCrypto.swift:35:44:35:44 | credit_card_no | testCrypto.swift:35:44:35:44 | credit_card_no | testCrypto.swift:35:44:35:44 | credit_card_no | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:35:44:35:44 | credit_card_no | sensitive data |
-| testCrypto.swift:40:23:40:23 | passwd | testCrypto.swift:40:23:40:23 | passwd | testCrypto.swift:40:23:40:23 | passwd | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:40:23:40:23 | passwd | sensitive data |
-| testCrypto.swift:43:23:43:23 | credit_card_no | testCrypto.swift:43:23:43:23 | credit_card_no | testCrypto.swift:43:23:43:23 | credit_card_no | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:43:23:43:23 | credit_card_no | sensitive data |
-| testCrypto.swift:48:23:48:23 | passwd | testCrypto.swift:48:23:48:23 | passwd | testCrypto.swift:48:23:48:23 | passwd | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:48:23:48:23 | passwd | sensitive data |
-| testCrypto.swift:51:23:51:23 | credit_card_no | testCrypto.swift:51:23:51:23 | credit_card_no | testCrypto.swift:51:23:51:23 | credit_card_no | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:51:23:51:23 | credit_card_no | sensitive data |
-| testCrypto.swift:56:32:56:32 | passwd | testCrypto.swift:56:32:56:32 | passwd | testCrypto.swift:56:32:56:32 | passwd | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:56:32:56:32 | passwd | sensitive data |
-| testCrypto.swift:59:32:59:32 | credit_card_no | testCrypto.swift:59:32:59:32 | credit_card_no | testCrypto.swift:59:32:59:32 | credit_card_no | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:59:32:59:32 | credit_card_no | sensitive data |
-| testCrypto.swift:64:32:64:32 | passwd | testCrypto.swift:64:32:64:32 | passwd | testCrypto.swift:64:32:64:32 | passwd | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:64:32:64:32 | passwd | sensitive data |
-| testCrypto.swift:67:32:67:32 | credit_card_no | testCrypto.swift:67:32:67:32 | credit_card_no | testCrypto.swift:67:32:67:32 | credit_card_no | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:67:32:67:32 | credit_card_no | sensitive data |
+| testCrypto.swift:25:47:25:47 | passwd | testCrypto.swift:25:47:25:47 | passwd | testCrypto.swift:25:47:25:47 | passwd | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:25:47:25:47 | passwd | sensitive data (credential passwd) |
+| testCrypto.swift:28:43:28:43 | credit_card_no | testCrypto.swift:28:43:28:43 | credit_card_no | testCrypto.swift:28:43:28:43 | credit_card_no | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:28:43:28:43 | credit_card_no | sensitive data (private information credit_card_no) |
+| testCrypto.swift:32:48:32:48 | passwd | testCrypto.swift:32:48:32:48 | passwd | testCrypto.swift:32:48:32:48 | passwd | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:32:48:32:48 | passwd | sensitive data (credential passwd) |
+| testCrypto.swift:35:44:35:44 | credit_card_no | testCrypto.swift:35:44:35:44 | credit_card_no | testCrypto.swift:35:44:35:44 | credit_card_no | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:35:44:35:44 | credit_card_no | sensitive data (private information credit_card_no) |
+| testCrypto.swift:40:23:40:23 | passwd | testCrypto.swift:40:23:40:23 | passwd | testCrypto.swift:40:23:40:23 | passwd | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:40:23:40:23 | passwd | sensitive data (credential passwd) |
+| testCrypto.swift:43:23:43:23 | credit_card_no | testCrypto.swift:43:23:43:23 | credit_card_no | testCrypto.swift:43:23:43:23 | credit_card_no | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:43:23:43:23 | credit_card_no | sensitive data (private information credit_card_no) |
+| testCrypto.swift:48:23:48:23 | passwd | testCrypto.swift:48:23:48:23 | passwd | testCrypto.swift:48:23:48:23 | passwd | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:48:23:48:23 | passwd | sensitive data (credential passwd) |
+| testCrypto.swift:51:23:51:23 | credit_card_no | testCrypto.swift:51:23:51:23 | credit_card_no | testCrypto.swift:51:23:51:23 | credit_card_no | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:51:23:51:23 | credit_card_no | sensitive data (private information credit_card_no) |
+| testCrypto.swift:56:32:56:32 | passwd | testCrypto.swift:56:32:56:32 | passwd | testCrypto.swift:56:32:56:32 | passwd | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:56:32:56:32 | passwd | sensitive data (credential passwd) |
+| testCrypto.swift:59:32:59:32 | credit_card_no | testCrypto.swift:59:32:59:32 | credit_card_no | testCrypto.swift:59:32:59:32 | credit_card_no | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:59:32:59:32 | credit_card_no | sensitive data (private information credit_card_no) |
+| testCrypto.swift:64:32:64:32 | passwd | testCrypto.swift:64:32:64:32 | passwd | testCrypto.swift:64:32:64:32 | passwd | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:64:32:64:32 | passwd | sensitive data (credential passwd) |
+| testCrypto.swift:67:32:67:32 | credit_card_no | testCrypto.swift:67:32:67:32 | credit_card_no | testCrypto.swift:67:32:67:32 | credit_card_no | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:67:32:67:32 | credit_card_no | sensitive data (private information credit_card_no) |

From fccf07c5bc44e2a67561c051e0bd6d51451be155 Mon Sep 17 00:00:00 2001
From: Paolo Tranquilli <redsun82@github.com>
Date: Fri, 9 Sep 2022 11:01:24 +0200
Subject: [PATCH 075/203] Swift: tweak qhelp file for WeakSensitiveDataHashing

---
 .../queries/Security/CWE-328/WeakSensitiveDataHashing.qhelp    | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.qhelp b/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.qhelp
index 0fc07271f8e..a3a161298de 100755
--- a/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.qhelp
+++ b/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.qhelp
@@ -49,7 +49,8 @@
 
         <ul>
             <li>
-                such as Argon2, scrypt, bcrypt, or PBKDF2 for passwords and other data with limited input space.
+                such as Argon2, scrypt, bcrypt, or PBKDF2 for passwords and other data with limited input space where
+                a dictionary-like attack is feasible.
             </li>
             <li>
                 such as SHA-2, or SHA-3 in other cases.

From 6223103bbd6ec709d6571ee8885ff6bc330f2666 Mon Sep 17 00:00:00 2001
From: Paolo Tranquilli <redsun82@github.com>
Date: Fri, 9 Sep 2022 11:02:08 +0200
Subject: [PATCH 076/203] Swift: add more testing to WeakSensitiveDataHashing

---
 .../CWE-328/WeakSensitiveDataHashing.expected |  62 +++++----
 .../Security/CWE-328/testCrypto.swift         | 118 ++++++++++++++++--
 2 files changed, 148 insertions(+), 32 deletions(-)

diff --git a/swift/ql/test/query-tests/Security/CWE-328/WeakSensitiveDataHashing.expected b/swift/ql/test/query-tests/Security/CWE-328/WeakSensitiveDataHashing.expected
index 81d4f184569..06ee4968d01 100644
--- a/swift/ql/test/query-tests/Security/CWE-328/WeakSensitiveDataHashing.expected
+++ b/swift/ql/test/query-tests/Security/CWE-328/WeakSensitiveDataHashing.expected
@@ -1,28 +1,42 @@
 edges
+| testCrypto.swift:56:47:56:47 | passwd :  | testCrypto.swift:63:44:63:44 | passwd |
+| testCrypto.swift:60:43:60:43 | credit_card_no :  | testCrypto.swift:61:43:61:43 | credit_card_no |
+| testCrypto.swift:60:43:60:43 | credit_card_no :  | testCrypto.swift:61:43:61:43 | credit_card_no :  |
+| testCrypto.swift:60:43:60:43 | credit_card_no :  | testCrypto.swift:67:44:67:44 | credit_card_no |
+| testCrypto.swift:61:43:61:43 | credit_card_no :  | testCrypto.swift:67:44:67:44 | credit_card_no |
 nodes
-| testCrypto.swift:25:47:25:47 | passwd | semmle.label | passwd |
-| testCrypto.swift:28:43:28:43 | credit_card_no | semmle.label | credit_card_no |
-| testCrypto.swift:32:48:32:48 | passwd | semmle.label | passwd |
-| testCrypto.swift:35:44:35:44 | credit_card_no | semmle.label | credit_card_no |
-| testCrypto.swift:40:23:40:23 | passwd | semmle.label | passwd |
-| testCrypto.swift:43:23:43:23 | credit_card_no | semmle.label | credit_card_no |
-| testCrypto.swift:48:23:48:23 | passwd | semmle.label | passwd |
-| testCrypto.swift:51:23:51:23 | credit_card_no | semmle.label | credit_card_no |
-| testCrypto.swift:56:32:56:32 | passwd | semmle.label | passwd |
-| testCrypto.swift:59:32:59:32 | credit_card_no | semmle.label | credit_card_no |
-| testCrypto.swift:64:32:64:32 | passwd | semmle.label | passwd |
-| testCrypto.swift:67:32:67:32 | credit_card_no | semmle.label | credit_card_no |
+| testCrypto.swift:56:47:56:47 | passwd | semmle.label | passwd |
+| testCrypto.swift:56:47:56:47 | passwd :  | semmle.label | passwd :  |
+| testCrypto.swift:60:43:60:43 | credit_card_no | semmle.label | credit_card_no |
+| testCrypto.swift:60:43:60:43 | credit_card_no :  | semmle.label | credit_card_no :  |
+| testCrypto.swift:61:43:61:43 | credit_card_no | semmle.label | credit_card_no |
+| testCrypto.swift:61:43:61:43 | credit_card_no :  | semmle.label | credit_card_no :  |
+| testCrypto.swift:63:44:63:44 | passwd | semmle.label | passwd |
+| testCrypto.swift:67:44:67:44 | credit_card_no | semmle.label | credit_card_no |
+| testCrypto.swift:90:23:90:23 | passwd | semmle.label | passwd |
+| testCrypto.swift:94:23:94:23 | credit_card_no | semmle.label | credit_card_no |
+| testCrypto.swift:99:23:99:23 | passwd | semmle.label | passwd |
+| testCrypto.swift:103:23:103:23 | credit_card_no | semmle.label | credit_card_no |
+| testCrypto.swift:132:32:132:32 | passwd | semmle.label | passwd |
+| testCrypto.swift:136:32:136:32 | credit_card_no | semmle.label | credit_card_no |
+| testCrypto.swift:141:32:141:32 | passwd | semmle.label | passwd |
+| testCrypto.swift:145:32:145:32 | credit_card_no | semmle.label | credit_card_no |
 subpaths
 #select
-| testCrypto.swift:25:47:25:47 | passwd | testCrypto.swift:25:47:25:47 | passwd | testCrypto.swift:25:47:25:47 | passwd | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:25:47:25:47 | passwd | sensitive data (credential passwd) |
-| testCrypto.swift:28:43:28:43 | credit_card_no | testCrypto.swift:28:43:28:43 | credit_card_no | testCrypto.swift:28:43:28:43 | credit_card_no | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:28:43:28:43 | credit_card_no | sensitive data (private information credit_card_no) |
-| testCrypto.swift:32:48:32:48 | passwd | testCrypto.swift:32:48:32:48 | passwd | testCrypto.swift:32:48:32:48 | passwd | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:32:48:32:48 | passwd | sensitive data (credential passwd) |
-| testCrypto.swift:35:44:35:44 | credit_card_no | testCrypto.swift:35:44:35:44 | credit_card_no | testCrypto.swift:35:44:35:44 | credit_card_no | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:35:44:35:44 | credit_card_no | sensitive data (private information credit_card_no) |
-| testCrypto.swift:40:23:40:23 | passwd | testCrypto.swift:40:23:40:23 | passwd | testCrypto.swift:40:23:40:23 | passwd | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:40:23:40:23 | passwd | sensitive data (credential passwd) |
-| testCrypto.swift:43:23:43:23 | credit_card_no | testCrypto.swift:43:23:43:23 | credit_card_no | testCrypto.swift:43:23:43:23 | credit_card_no | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:43:23:43:23 | credit_card_no | sensitive data (private information credit_card_no) |
-| testCrypto.swift:48:23:48:23 | passwd | testCrypto.swift:48:23:48:23 | passwd | testCrypto.swift:48:23:48:23 | passwd | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:48:23:48:23 | passwd | sensitive data (credential passwd) |
-| testCrypto.swift:51:23:51:23 | credit_card_no | testCrypto.swift:51:23:51:23 | credit_card_no | testCrypto.swift:51:23:51:23 | credit_card_no | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:51:23:51:23 | credit_card_no | sensitive data (private information credit_card_no) |
-| testCrypto.swift:56:32:56:32 | passwd | testCrypto.swift:56:32:56:32 | passwd | testCrypto.swift:56:32:56:32 | passwd | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:56:32:56:32 | passwd | sensitive data (credential passwd) |
-| testCrypto.swift:59:32:59:32 | credit_card_no | testCrypto.swift:59:32:59:32 | credit_card_no | testCrypto.swift:59:32:59:32 | credit_card_no | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:59:32:59:32 | credit_card_no | sensitive data (private information credit_card_no) |
-| testCrypto.swift:64:32:64:32 | passwd | testCrypto.swift:64:32:64:32 | passwd | testCrypto.swift:64:32:64:32 | passwd | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:64:32:64:32 | passwd | sensitive data (credential passwd) |
-| testCrypto.swift:67:32:67:32 | credit_card_no | testCrypto.swift:67:32:67:32 | credit_card_no | testCrypto.swift:67:32:67:32 | credit_card_no | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:67:32:67:32 | credit_card_no | sensitive data (private information credit_card_no) |
+| testCrypto.swift:56:47:56:47 | passwd | testCrypto.swift:56:47:56:47 | passwd | testCrypto.swift:56:47:56:47 | passwd | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:56:47:56:47 | passwd | sensitive data (credential passwd) |
+| testCrypto.swift:60:43:60:43 | credit_card_no | testCrypto.swift:60:43:60:43 | credit_card_no | testCrypto.swift:60:43:60:43 | credit_card_no | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:60:43:60:43 | credit_card_no | sensitive data (private information credit_card_no) |
+| testCrypto.swift:61:43:61:43 | credit_card_no | testCrypto.swift:60:43:60:43 | credit_card_no :  | testCrypto.swift:61:43:61:43 | credit_card_no | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:60:43:60:43 | credit_card_no | sensitive data (private information credit_card_no) |
+| testCrypto.swift:61:43:61:43 | credit_card_no | testCrypto.swift:61:43:61:43 | credit_card_no | testCrypto.swift:61:43:61:43 | credit_card_no | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:61:43:61:43 | credit_card_no | sensitive data (private information credit_card_no) |
+| testCrypto.swift:63:44:63:44 | passwd | testCrypto.swift:56:47:56:47 | passwd :  | testCrypto.swift:63:44:63:44 | passwd | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:56:47:56:47 | passwd | sensitive data (credential passwd) |
+| testCrypto.swift:63:44:63:44 | passwd | testCrypto.swift:63:44:63:44 | passwd | testCrypto.swift:63:44:63:44 | passwd | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:63:44:63:44 | passwd | sensitive data (credential passwd) |
+| testCrypto.swift:67:44:67:44 | credit_card_no | testCrypto.swift:60:43:60:43 | credit_card_no :  | testCrypto.swift:67:44:67:44 | credit_card_no | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:60:43:60:43 | credit_card_no | sensitive data (private information credit_card_no) |
+| testCrypto.swift:67:44:67:44 | credit_card_no | testCrypto.swift:61:43:61:43 | credit_card_no :  | testCrypto.swift:67:44:67:44 | credit_card_no | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:61:43:61:43 | credit_card_no | sensitive data (private information credit_card_no) |
+| testCrypto.swift:67:44:67:44 | credit_card_no | testCrypto.swift:67:44:67:44 | credit_card_no | testCrypto.swift:67:44:67:44 | credit_card_no | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:67:44:67:44 | credit_card_no | sensitive data (private information credit_card_no) |
+| testCrypto.swift:90:23:90:23 | passwd | testCrypto.swift:90:23:90:23 | passwd | testCrypto.swift:90:23:90:23 | passwd | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:90:23:90:23 | passwd | sensitive data (credential passwd) |
+| testCrypto.swift:94:23:94:23 | credit_card_no | testCrypto.swift:94:23:94:23 | credit_card_no | testCrypto.swift:94:23:94:23 | credit_card_no | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:94:23:94:23 | credit_card_no | sensitive data (private information credit_card_no) |
+| testCrypto.swift:99:23:99:23 | passwd | testCrypto.swift:99:23:99:23 | passwd | testCrypto.swift:99:23:99:23 | passwd | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:99:23:99:23 | passwd | sensitive data (credential passwd) |
+| testCrypto.swift:103:23:103:23 | credit_card_no | testCrypto.swift:103:23:103:23 | credit_card_no | testCrypto.swift:103:23:103:23 | credit_card_no | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:103:23:103:23 | credit_card_no | sensitive data (private information credit_card_no) |
+| testCrypto.swift:132:32:132:32 | passwd | testCrypto.swift:132:32:132:32 | passwd | testCrypto.swift:132:32:132:32 | passwd | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:132:32:132:32 | passwd | sensitive data (credential passwd) |
+| testCrypto.swift:136:32:136:32 | credit_card_no | testCrypto.swift:136:32:136:32 | credit_card_no | testCrypto.swift:136:32:136:32 | credit_card_no | Insecure hashing algorithm (MD5) depends on $@. | testCrypto.swift:136:32:136:32 | credit_card_no | sensitive data (private information credit_card_no) |
+| testCrypto.swift:141:32:141:32 | passwd | testCrypto.swift:141:32:141:32 | passwd | testCrypto.swift:141:32:141:32 | passwd | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:141:32:141:32 | passwd | sensitive data (credential passwd) |
+| testCrypto.swift:145:32:145:32 | credit_card_no | testCrypto.swift:145:32:145:32 | credit_card_no | testCrypto.swift:145:32:145:32 | credit_card_no | Insecure hashing algorithm (SHA1) depends on $@. | testCrypto.swift:145:32:145:32 | credit_card_no | sensitive data (private information credit_card_no) |
diff --git a/swift/ql/test/query-tests/Security/CWE-328/testCrypto.swift b/swift/ql/test/query-tests/Security/CWE-328/testCrypto.swift
index 9994aeb5008..73434ce977b 100644
--- a/swift/ql/test/query-tests/Security/CWE-328/testCrypto.swift
+++ b/swift/ql/test/query-tests/Security/CWE-328/testCrypto.swift
@@ -1,5 +1,36 @@
 //codeql-extractor-options: -module-name Crypto
 
+struct SHA256 {
+    static func hash<D>(data: D) -> [UInt8] {
+        return []
+    }
+
+    func update<D>(data: D) {}
+    func update(bufferPointer: UnsafeRawBufferPointer) {}
+    func finalize() -> [UInt8] { return [] }
+}
+
+struct SHA384 {
+    static func hash<D>(data: D) -> [UInt8] {
+        return []
+    }
+
+    func update<D>(data: D) {}
+    func update(bufferPointer: UnsafeRawBufferPointer) {}
+    func finalize() -> [UInt8] { return [] }
+}
+
+struct SHA512 {
+    static func hash<D>(data: D) -> [UInt8] {
+        return []
+    }
+
+    func update<D>(data: D) {}
+    func update(bufferPointer: UnsafeRawBufferPointer) {}
+    func finalize() -> [UInt8] { return [] }
+}
+
+
 enum Insecure {
     struct MD5 {
         static func hash<D>(data: D) -> [UInt8] {
@@ -21,48 +52,119 @@ enum Insecure {
     }
 }
 
-func test1(passwd : UnsafeRawBufferPointer, encrypted_passwd : String, account_no : String, credit_card_no : String) {
+func testHashMethods(passwd : UnsafeRawBufferPointer, cert: String, encrypted_passwd : String, account_no : String, credit_card_no : String) {
     var hash = Crypto.Insecure.MD5.hash(data: passwd)  // BAD
+    hash = Crypto.Insecure.MD5.hash(data: cert)   // BAD [NOT DETECTED]
     hash = Crypto.Insecure.MD5.hash(data: encrypted_passwd)  // GOOD  (not sensitive)
     hash = Crypto.Insecure.MD5.hash(data: account_no)   // BAD [NOT DETECTED]
     hash = Crypto.Insecure.MD5.hash(data: credit_card_no)   // BAD
-}
+    hash = Crypto.Insecure.MD5.hash(data: credit_card_no)   // BAD
 
-func test2(passwd : String, encrypted_passwd : String, account_no : String, credit_card_no : String) {
-    var hash = Crypto.Insecure.SHA1.hash(data: passwd)  // BAD
+    hash = Crypto.Insecure.SHA1.hash(data: passwd)  // BAD
+    hash = Crypto.Insecure.SHA1.hash(data: cert)   // BAD [NOT DETECTED]
     hash = Crypto.Insecure.SHA1.hash(data: encrypted_passwd)  // GOOD  (not sensitive)
     hash = Crypto.Insecure.SHA1.hash(data: account_no)   // BAD [NOT DETECTED]
     hash = Crypto.Insecure.SHA1.hash(data: credit_card_no)   // BAD
+
+    hash = Crypto.SHA256.hash(data: passwd)   // BAD [NOT DETECTED] not a computationally hard hash
+    hash = Crypto.SHA256.hash(data: cert)   // GOOD
+    hash = Crypto.SHA256.hash(data: account_no)   // GOOD
+    hash = Crypto.SHA256.hash(data: credit_card_no)   // GOOD
+    hash = Crypto.SHA256.hash(data: credit_card_no)   // GOOD
+
+    hash = Crypto.SHA256.hash(data: passwd)   // BAD [NOT DETECTED] not a computationally hard hash
+    hash = Crypto.SHA384.hash(data: cert)   // GOOD
+    hash = Crypto.SHA384.hash(data: account_no)   // GOOD
+    hash = Crypto.SHA384.hash(data: credit_card_no)   // GOOD
+    hash = Crypto.SHA384.hash(data: credit_card_no)   // GOOD
+
+    hash = Crypto.SHA256.hash(data: passwd)   // BAD [NOT DETECTED] not a computationally hard hash
+    hash = Crypto.SHA512.hash(data: cert)   // GOOD
+    hash = Crypto.SHA512.hash(data: account_no)   // GOOD
+    hash = Crypto.SHA512.hash(data: credit_card_no)   // GOOD
+    hash = Crypto.SHA512.hash(data: credit_card_no)   // GOOD
 }
 
-func test3(passwd : String, encrypted_passwd : String, account_no : String, credit_card_no : String) {
+func testMD5UpdateWithData(passwd : String, cert: String, encrypted_passwd : String, account_no : String, credit_card_no : String) {
     var hash = Crypto.Insecure.MD5()
     hash.update(data: passwd)  // BAD
+    hash.update(data: cert)  // BAD [NOT DETECTED]
     hash.update(data: encrypted_passwd)  // GOOD  (not sensitive)
     hash.update(data: account_no)   // BAD [NOT DETECTED]
     hash.update(data: credit_card_no)   // BAD
 }
 
-func test4(passwd : String, encrypted_passwd : String, account_no : String, credit_card_no : String) {
+func testSHA1UpdateWithData(passwd : String, cert: String, encrypted_passwd : String, account_no : String, credit_card_no : String) {
     var hash = Crypto.Insecure.SHA1()
     hash.update(data: passwd)  // BAD
+    hash.update(data: cert)  // BAD [NOT DETECTED]
     hash.update(data: encrypted_passwd)  // GOOD  (not sensitive)
     hash.update(data: account_no)   // BAD [NOT DETECTED]
     hash.update(data: credit_card_no)   // BAD
 }
 
-func test5(passwd : UnsafeRawBufferPointer, encrypted_passwd : UnsafeRawBufferPointer, account_no : UnsafeRawBufferPointer, credit_card_no : UnsafeRawBufferPointer) {
+func testSHA256UpdateWithData(passwd : String, cert: String, encrypted_passwd : String, account_no : String, credit_card_no : String) {
+    var hash = Crypto.SHA256()
+    hash.update(data: passwd)  // BAD [NOT DETECTED] not a computationally hard hash
+    hash.update(data: cert)  // GOOD
+    hash.update(data: account_no)   // GOOD
+    hash.update(data: credit_card_no)   // GOOD
+}
+
+func testSHA384UpdateWithData(passwd : String, cert: String, encrypted_passwd : String, account_no : String, credit_card_no : String) {
+    var hash = Crypto.SHA384()
+    hash.update(data: passwd)  // BAD [NOT DETECTED] not a computationally hard hash
+    hash.update(data: cert)  // GOOD
+    hash.update(data: account_no)   // GOOD
+    hash.update(data: credit_card_no)   // GOOD
+}
+
+func testSHA512UpdateWithData(passwd : String, cert: String, encrypted_passwd : String, account_no : String, credit_card_no : String) {
+    var hash = Crypto.SHA512()
+    hash.update(data: passwd)  // BAD [NOT DETECTED] not a computationally hard hash
+    hash.update(data: cert)  // GOOD
+    hash.update(data: account_no)   // GOOD
+    hash.update(data: credit_card_no)   // GOOD
+}
+
+func testMD5UpdateWithUnsafeRawBufferPointer(passwd : UnsafeRawBufferPointer, cert: UnsafeRawBufferPointer, encrypted_passwd : UnsafeRawBufferPointer, account_no : UnsafeRawBufferPointer, credit_card_no : UnsafeRawBufferPointer) {
     var hash = Crypto.Insecure.MD5()
     hash.update(bufferPointer: passwd)  // BAD
+    hash.update(bufferPointer: cert)  // BAD [NOT DETECTED]
     hash.update(bufferPointer: encrypted_passwd)  // GOOD  (not sensitive)
     hash.update(bufferPointer: account_no)   // BAD [NOT DETECTED]
     hash.update(bufferPointer: credit_card_no)   // BAD
 }
 
-func test6(passwd : UnsafeRawBufferPointer, encrypted_passwd : UnsafeRawBufferPointer, account_no : UnsafeRawBufferPointer, credit_card_no : UnsafeRawBufferPointer) {
+func testSHA1UpdateWithUnsafeRawBufferPointer(passwd : UnsafeRawBufferPointer, cert: UnsafeRawBufferPointer, encrypted_passwd : UnsafeRawBufferPointer, account_no : UnsafeRawBufferPointer, credit_card_no : UnsafeRawBufferPointer) {
     var hash = Crypto.Insecure.SHA1()
     hash.update(bufferPointer: passwd)  // BAD
+    hash.update(bufferPointer: cert)  // BAD [NOT DETECTED]
     hash.update(bufferPointer: encrypted_passwd)  // GOOD  (not sensitive)
     hash.update(bufferPointer: account_no)   // BAD [NOT DETECTED]
     hash.update(bufferPointer: credit_card_no)   // BAD
 }
+
+func testSHA256UpdateWithUnsafeRawBufferPointer(passwd : UnsafeRawBufferPointer, cert: UnsafeRawBufferPointer, encrypted_passwd : UnsafeRawBufferPointer, account_no : UnsafeRawBufferPointer, credit_card_no : UnsafeRawBufferPointer) {
+    var hash = Crypto.SHA256()
+    hash.update(bufferPointer: passwd)  // BAD [NOT DETECTED] not a computationally hard hash
+    hash.update(bufferPointer: cert)  // GOOD
+    hash.update(bufferPointer: account_no)   // GOOD
+    hash.update(bufferPointer: credit_card_no)   // GOOD
+}
+
+func testSHA384UpdateWithUnsafeRawBufferPointer(passwd : UnsafeRawBufferPointer, cert: UnsafeRawBufferPointer, encrypted_passwd : UnsafeRawBufferPointer, account_no : UnsafeRawBufferPointer, credit_card_no : UnsafeRawBufferPointer) {
+    var hash = Crypto.SHA384()
+    hash.update(bufferPointer: passwd)  // BAD [NOT DETECTED] not a computationally hard hash
+    hash.update(bufferPointer: cert)  // GOOD
+    hash.update(bufferPointer: account_no)   // GOOD
+    hash.update(bufferPointer: credit_card_no)   // GOOD
+}
+
+func testSHA512UpdateWithUnsafeRawBufferPointer(passwd : UnsafeRawBufferPointer, cert: UnsafeRawBufferPointer, encrypted_passwd : UnsafeRawBufferPointer, account_no : UnsafeRawBufferPointer, credit_card_no : UnsafeRawBufferPointer) {
+    var hash = Crypto.SHA512()
+    hash.update(bufferPointer: passwd)  // BAD [NOT DETECTED] not a computationally hard hash
+    hash.update(bufferPointer: cert)  // GOOD
+    hash.update(bufferPointer: account_no)   // GOOD
+    hash.update(bufferPointer: credit_card_no)   // GOOD
+}

From bc7fcaa06f60d7f33568432bcbc8b783d0b8d6eb Mon Sep 17 00:00:00 2001
From: Cornelius Riemenschneider <cornelius@github.com>
Date: Fri, 9 Sep 2022 11:07:25 +0200
Subject: [PATCH 077/203] Go: Remove the legacy tracer configuration files.

---
 go/Makefile                                   | 2 +-
 go/codeql-tools/linux64/compiler-tracing.spec | 7 -------
 go/codeql-tools/osx64/compiler-tracing.spec   | 7 -------
 go/codeql-tools/win64/compiler-tracing.spec   | 7 -------
 4 files changed, 1 insertion(+), 22 deletions(-)
 delete mode 100644 go/codeql-tools/linux64/compiler-tracing.spec
 delete mode 100644 go/codeql-tools/osx64/compiler-tracing.spec
 delete mode 100644 go/codeql-tools/win64/compiler-tracing.spec

diff --git a/go/Makefile b/go/Makefile
index b7da089c48a..419b1991775 100644
--- a/go/Makefile
+++ b/go/Makefile
@@ -14,7 +14,7 @@ CODEQL_PLATFORM = osx64
 endif
 endif
 
-CODEQL_TOOLS = $(addprefix codeql-tools/,autobuild.cmd autobuild.sh pre-finalize.cmd pre-finalize.sh index.cmd index.sh linux64 osx64 win64 tracing-config.lua)
+CODEQL_TOOLS = $(addprefix codeql-tools/,autobuild.cmd autobuild.sh pre-finalize.cmd pre-finalize.sh index.cmd index.sh tracing-config.lua)
 
 EXTRACTOR_PACK_OUT = build/codeql-extractor-go
 
diff --git a/go/codeql-tools/linux64/compiler-tracing.spec b/go/codeql-tools/linux64/compiler-tracing.spec
deleted file mode 100644
index 2055555c21a..00000000000
--- a/go/codeql-tools/linux64/compiler-tracing.spec
+++ /dev/null
@@ -1,7 +0,0 @@
-**/go-autobuilder:
-  order compiler
-  trace no
-**/go:
-  invoke ${config_dir}/go-extractor
-  prepend --mimic
-  prepend "${compiler}"
diff --git a/go/codeql-tools/osx64/compiler-tracing.spec b/go/codeql-tools/osx64/compiler-tracing.spec
deleted file mode 100644
index 2055555c21a..00000000000
--- a/go/codeql-tools/osx64/compiler-tracing.spec
+++ /dev/null
@@ -1,7 +0,0 @@
-**/go-autobuilder:
-  order compiler
-  trace no
-**/go:
-  invoke ${config_dir}/go-extractor
-  prepend --mimic
-  prepend "${compiler}"
diff --git a/go/codeql-tools/win64/compiler-tracing.spec b/go/codeql-tools/win64/compiler-tracing.spec
deleted file mode 100644
index 76a6b011405..00000000000
--- a/go/codeql-tools/win64/compiler-tracing.spec
+++ /dev/null
@@ -1,7 +0,0 @@
-**/go-autobuilder.exe:
-  order compiler
-  trace no
-**/go.exe:
-  invoke ${config_dir}/go-extractor.exe
-  prepend --mimic
-  prepend "${compiler}"

From 6a2fa2e37d1e8ccf7dc3662ebb3b35b416a34e43 Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Fri, 9 Sep 2022 12:33:43 +0200
Subject: [PATCH 078/203] add -dev to the codeql/typos version

---
 javascript/ql/src/qlpack.yml | 2 +-
 ql/ql/src/qlpack.yml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/javascript/ql/src/qlpack.yml b/javascript/ql/src/qlpack.yml
index cdc71881258..6b057dd9c5e 100644
--- a/javascript/ql/src/qlpack.yml
+++ b/javascript/ql/src/qlpack.yml
@@ -9,4 +9,4 @@ defaultSuiteFile: codeql-suites/javascript-code-scanning.qls
 dependencies:
   codeql/javascript-all: "*"
   codeql/suite-helpers: "*"
-  codeql/typos: 0.0.1
+  codeql/typos: 0.0.1-dev
diff --git a/ql/ql/src/qlpack.yml b/ql/ql/src/qlpack.yml
index 4101674828b..26450f8d718 100644
--- a/ql/ql/src/qlpack.yml
+++ b/ql/ql/src/qlpack.yml
@@ -6,4 +6,4 @@ suites: codeql-suites
 defaultSuiteFile: codeql-suites/ql-code-scanning.qls
 extractor: ql
 dependencies:
-  codeql/typos: 0.0.1
+  codeql/typos: 0.0.1-dev

From 5010f896835be9cc54150508e70261715688151c Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Fri, 9 Sep 2022 14:26:07 +0200
Subject: [PATCH 079/203] move resolveMainPath into a separate helper predicate

---
 .../javascript/NodeModuleResolutionImpl.qll   | 29 ++++++++++++-------
 1 file changed, 18 insertions(+), 11 deletions(-)

diff --git a/javascript/ql/lib/semmle/javascript/NodeModuleResolutionImpl.qll b/javascript/ql/lib/semmle/javascript/NodeModuleResolutionImpl.qll
index 674f9e916bf..32c1e453444 100644
--- a/javascript/ql/lib/semmle/javascript/NodeModuleResolutionImpl.qll
+++ b/javascript/ql/lib/semmle/javascript/NodeModuleResolutionImpl.qll
@@ -90,21 +90,18 @@ bindingset[name]
 private string getStem(string name) { result = name.regexpCapture("(.+?)(?:\\.([^.]+))?", 1) }
 
 /**
- * Gets the main module described by `pkg` with the given `priority`.
+ * Gets a file that a main module from `pkg` exported as `mainPath` with the given `priority`.
+ * `mainPath` is "." if it's the main module of the package.
  */
-File resolveMainModule(PackageJson pkg, int priority) {
-  exists(PathExpr main, int subPriority, string mainPath |
-    main = MainModulePath::of(pkg, mainPath) and
-    if mainPath = "." then subPriority = priority else priority = subPriority + 1000
-  |
-    result = main.resolve() and subPriority = 0
+private File resolveMainPath(PackageJson pkg, string mainPath, int priority) {
+  exists(PathExpr main | main = MainModulePath::of(pkg, mainPath) |
+    result = main.resolve() and priority = 0
     or
-    result = tryExtensions(main.resolve(), "index", subPriority)
+    result = tryExtensions(main.resolve(), "index", priority)
     or
     not main.resolve() instanceof File and
     exists(int n | n = main.getNumComponent() |
-      result =
-        tryExtensions(main.resolveUpTo(n - 1), getStem(main.getComponent(n - 1)), subPriority)
+      result = tryExtensions(main.resolveUpTo(n - 1), getStem(main.getComponent(n - 1)), priority)
     )
     or
     // assuming the files get moved from one dir to another during compilation:
@@ -114,9 +111,19 @@ File resolveMainModule(PackageJson pkg, int priority) {
       // is in one folder below the package.json, and has the right basename
       result =
         tryExtensions(subFolder, getStem(main.getComponent(main.getNumComponent() - 1)),
-          subPriority - 999)
+          priority - 999) // very high priority, to make sure everything else is tried first
     )
   )
+}
+
+/**
+ * Gets the main module described by `pkg` with the given `priority`.
+ */
+File resolveMainModule(PackageJson pkg, int priority) {
+  exists(int subPriority, string mainPath |
+    result = resolveMainPath(pkg, mainPath, subPriority) and
+    if mainPath = "." then subPriority = priority else priority = subPriority + 1000
+  )
   or
   exists(Folder folder, Folder child |
     child = folder or

From 6d313ace2d4b04f38aba75c91125a2d5b8d5b0df Mon Sep 17 00:00:00 2001
From: Mathias Vorreiter Pedersen <mathiasvp@github.com>
Date: Fri, 9 Sep 2022 11:09:52 +0100
Subject: [PATCH 080/203] C++: Copy the new use-use flow code to experimental.

---
 .../semmle/code/cpp/ir/dataflow/DataFlow.qll  |   26 +
 .../semmle/code/cpp/ir/dataflow/DataFlow2.qll |   16 +
 .../semmle/code/cpp/ir/dataflow/DataFlow3.qll |   16 +
 .../semmle/code/cpp/ir/dataflow/DataFlow4.qll |   16 +
 .../code/cpp/ir/dataflow/ResolveCall.qll      |   23 +
 .../code/cpp/ir/dataflow/TaintTracking.qll    |   23 +
 .../code/cpp/ir/dataflow/TaintTracking2.qll   |   15 +
 .../code/cpp/ir/dataflow/TaintTracking3.qll   |   15 +
 .../ir/dataflow/internal/DataFlowDispatch.qll |  273 +
 .../cpp/ir/dataflow/internal/DataFlowImpl.qll | 4450 +++++++++++++++++
 .../ir/dataflow/internal/DataFlowImpl2.qll    | 4450 +++++++++++++++++
 .../ir/dataflow/internal/DataFlowImpl3.qll    | 4450 +++++++++++++++++
 .../ir/dataflow/internal/DataFlowImpl4.qll    | 4450 +++++++++++++++++
 .../dataflow/internal/DataFlowImplCommon.qll  | 1374 +++++
 .../internal/DataFlowImplConsistency.qll      |  212 +
 .../internal/DataFlowImplSpecific.qll         |   11 +
 .../ir/dataflow/internal/DataFlowPrivate.qll  |  560 +++
 .../cpp/ir/dataflow/internal/DataFlowUtil.qll | 1346 +++++
 .../cpp/ir/dataflow/internal/ModelUtil.qll    |   93 +
 .../ir/dataflow/internal/PrintIRLocalFlow.qll |  136 +
 .../dataflow/internal/PrintIRStoreSteps.qll   |   33 +
 .../ir/dataflow/internal/PrintIRUtilities.qll |   39 +
 .../cpp/ir/dataflow/internal/SsaInternals.qll |  547 ++
 .../dataflow/internal/SsaInternalsCommon.qll  |  268 +
 .../dataflow/internal/TaintTrackingUtil.qll   |  208 +
 .../dataflow/internal/ssa0/SsaInternals.qll   |  314 ++
 .../tainttracking1/TaintTrackingImpl.qll      |  186 +
 .../tainttracking1/TaintTrackingParameter.qll |    5 +
 .../tainttracking2/TaintTrackingImpl.qll      |  186 +
 .../tainttracking2/TaintTrackingParameter.qll |    5 +
 .../tainttracking3/TaintTrackingImpl.qll      |  186 +
 .../tainttracking3/TaintTrackingParameter.qll |    5 +
 32 files changed, 23937 insertions(+)
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/DataFlow.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/DataFlow2.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/DataFlow3.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/DataFlow4.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/ResolveCall.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking2.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking3.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowDispatch.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImpl.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImpl2.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImpl3.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImpl4.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImplCommon.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImplConsistency.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImplSpecific.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowPrivate.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/ModelUtil.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/PrintIRLocalFlow.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/PrintIRStoreSteps.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/PrintIRUtilities.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/SsaInternals.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/SsaInternalsCommon.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/TaintTrackingUtil.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/ssa0/SsaInternals.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking1/TaintTrackingImpl.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking1/TaintTrackingParameter.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking2/TaintTrackingImpl.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking2/TaintTrackingParameter.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking3/TaintTrackingImpl.qll
 create mode 100644 cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking3/TaintTrackingParameter.qll

diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/DataFlow.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/DataFlow.qll
new file mode 100644
index 00000000000..acb2fbc6808
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/DataFlow.qll
@@ -0,0 +1,26 @@
+/**
+ * Provides a library for local (intra-procedural) and global (inter-procedural)
+ * data flow analysis: deciding whether data can flow from a _source_ to a
+ * _sink_. This library differs from the one in `semmle.code.cpp.dataflow` in that
+ * this library uses the IR (Intermediate Representation) library, which provides
+ * a more precise semantic representation of the program, whereas the other dataflow
+ * library uses the more syntax-oriented ASTs. This library should provide more accurate
+ * results than the AST-based library in most scenarios.
+ *
+ * Unless configured otherwise, _flow_ means that the exact value of
+ * the source may reach the sink. We do not track flow across pointer
+ * dereferences or array indexing.
+ *
+ * To use global (interprocedural) data flow, extend the class
+ * `DataFlow::Configuration` as documented on that class. To use local
+ * (intraprocedural) data flow between expressions, call
+ * `DataFlow::localExprFlow`. For more general cases of local data flow, call
+ * `DataFlow::localFlow` or `DataFlow::localFlowStep` with arguments of type
+ * `DataFlow::Node`.
+ */
+
+import cpp
+
+module DataFlow {
+  import experimental.semmle.code.cpp.ir.dataflow.internal.DataFlowImpl
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/DataFlow2.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/DataFlow2.qll
new file mode 100644
index 00000000000..0513bd4ebcb
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/DataFlow2.qll
@@ -0,0 +1,16 @@
+/**
+ * Provides a `DataFlow2` module, which is a copy of the `DataFlow` module. Use
+ * this class when data-flow configurations must depend on each other. Two
+ * classes extending `DataFlow::Configuration` should never depend on each
+ * other, but one of them should instead depend on a
+ * `DataFlow2::Configuration`, a `DataFlow3::Configuration`, or a
+ * `DataFlow4::Configuration`.
+ *
+ * See `semmle.code.cpp.ir.dataflow.DataFlow` for the full documentation.
+ */
+
+import cpp
+
+module DataFlow2 {
+  import experimental.semmle.code.cpp.ir.dataflow.internal.DataFlowImpl2
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/DataFlow3.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/DataFlow3.qll
new file mode 100644
index 00000000000..571b75b37c4
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/DataFlow3.qll
@@ -0,0 +1,16 @@
+/**
+ * Provides a `DataFlow3` module, which is a copy of the `DataFlow` module. Use
+ * this class when data-flow configurations must depend on each other. Two
+ * classes extending `DataFlow::Configuration` should never depend on each
+ * other, but one of them should instead depend on a
+ * `DataFlow2::Configuration`, a `DataFlow3::Configuration`, or a
+ * `DataFlow4::Configuration`.
+ *
+ * See `semmle.code.cpp.ir.dataflow.DataFlow` for the full documentation.
+ */
+
+import cpp
+
+module DataFlow3 {
+  import experimental.semmle.code.cpp.ir.dataflow.internal.DataFlowImpl3
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/DataFlow4.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/DataFlow4.qll
new file mode 100644
index 00000000000..18c21e554f6
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/DataFlow4.qll
@@ -0,0 +1,16 @@
+/**
+ * Provides a `DataFlow4` module, which is a copy of the `DataFlow` module. Use
+ * this class when data-flow configurations must depend on each other. Two
+ * classes extending `DataFlow::Configuration` should never depend on each
+ * other, but one of them should instead depend on a
+ * `DataFlow2::Configuration`, a `DataFlow3::Configuration`, or a
+ * `DataFlow4::Configuration`.
+ *
+ * See `semmle.code.cpp.ir.dataflow.DataFlow` for the full documentation.
+ */
+
+import cpp
+
+module DataFlow4 {
+  import experimental.semmle.code.cpp.ir.dataflow.internal.DataFlowImpl4
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/ResolveCall.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/ResolveCall.qll
new file mode 100644
index 00000000000..bcf2fa8c7db
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/ResolveCall.qll
@@ -0,0 +1,23 @@
+/**
+ * Provides a predicate for non-contextual virtual dispatch and function
+ * pointer resolution.
+ */
+
+import cpp
+private import semmle.code.cpp.ir.ValueNumbering
+private import internal.DataFlowDispatch
+private import semmle.code.cpp.ir.IR
+
+/**
+ * Resolve potential target function(s) for `call`.
+ *
+ * If `call` is a call through a function pointer (`ExprCall`) or its target is
+ * a virtual member function, simple data flow analysis is performed in order
+ * to identify the possible target(s).
+ */
+Function resolveCall(Call call) {
+  exists(CallInstruction callInstruction |
+    callInstruction.getAst() = call and
+    result = viableCallable(callInstruction)
+  )
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking.qll
new file mode 100644
index 00000000000..7eada0bb244
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking.qll
@@ -0,0 +1,23 @@
+/**
+ * Provides classes for performing local (intra-procedural) and
+ * global (inter-procedural) taint-tracking analyses.
+ *
+ * We define _taint propagation_ informally to mean that a substantial part of
+ * the information from the source is preserved at the sink. For example, taint
+ * propagates from `x` to `x + 100`, but it does not propagate from `x` to `x >
+ * 100` since we consider a single bit of information to be too little.
+ *
+ * To use global (interprocedural) taint tracking, extend the class
+ * `TaintTracking::Configuration` as documented on that class. To use local
+ * (intraprocedural) taint tracking between expressions, call
+ * `TaintTracking::localExprTaint`. For more general cases of local taint
+ * tracking, call `TaintTracking::localTaint` or
+ * `TaintTracking::localTaintStep` with arguments of type `DataFlow::Node`.
+ */
+
+import semmle.code.cpp.ir.dataflow.DataFlow
+import semmle.code.cpp.ir.dataflow.DataFlow2
+
+module TaintTracking {
+  import semmle.code.cpp.ir.dataflow.internal.tainttracking1.TaintTrackingImpl
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking2.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking2.qll
new file mode 100644
index 00000000000..3ef03a3bd2c
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking2.qll
@@ -0,0 +1,15 @@
+/**
+ * Provides a `TaintTracking2` module, which is a copy of the `TaintTracking`
+ * module. Use this class when data-flow configurations or taint-tracking
+ * configurations must depend on each other. Two classes extending
+ * `DataFlow::Configuration` should never depend on each other, but one of them
+ * should instead depend on a `DataFlow2::Configuration`, a
+ * `DataFlow3::Configuration`, or a `DataFlow4::Configuration`. The
+ * `TaintTracking::Configuration` class extends `DataFlow::Configuration`, and
+ * `TaintTracking2::Configuration` extends `DataFlow2::Configuration`.
+ *
+ * See `semmle.code.cpp.ir.dataflow.TaintTracking` for the full documentation.
+ */
+module TaintTracking2 {
+  import semmle.code.cpp.ir.dataflow.internal.tainttracking2.TaintTrackingImpl
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking3.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking3.qll
new file mode 100644
index 00000000000..98e1caebf38
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking3.qll
@@ -0,0 +1,15 @@
+/**
+ * Provides a `TaintTracking3` module, which is a copy of the `TaintTracking`
+ * module. Use this class when data-flow configurations or taint-tracking
+ * configurations must depend on each other. Two classes extending
+ * `DataFlow::Configuration` should never depend on each other, but one of them
+ * should instead depend on a `DataFlow2::Configuration`, a
+ * `DataFlow3::Configuration`, or a `DataFlow4::Configuration`. The
+ * `TaintTracking::Configuration` class extends `DataFlow::Configuration`, and
+ * `TaintTracking2::Configuration` extends `DataFlow2::Configuration`.
+ *
+ * See `semmle.code.cpp.ir.dataflow.TaintTracking` for the full documentation.
+ */
+module TaintTracking3 {
+  import semmle.code.cpp.ir.dataflow.internal.tainttracking3.TaintTrackingImpl
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowDispatch.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowDispatch.qll
new file mode 100644
index 00000000000..f92612e77af
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowDispatch.qll
@@ -0,0 +1,273 @@
+private import cpp
+private import semmle.code.cpp.ir.IR
+private import experimental.semmle.code.cpp.ir.dataflow.DataFlow
+private import experimental.semmle.code.cpp.ir.dataflow.internal.DataFlowPrivate
+private import experimental.semmle.code.cpp.ir.dataflow.internal.DataFlowUtil
+private import DataFlowImplCommon as DataFlowImplCommon
+
+/**
+ * Gets a function that might be called by `call`.
+ */
+cached
+Function viableCallable(CallInstruction call) {
+  DataFlowImplCommon::forceCachingInSameStage() and
+  result = call.getStaticCallTarget()
+  or
+  // If the target of the call does not have a body in the snapshot, it might
+  // be because the target is just a header declaration, and the real target
+  // will be determined at run time when the caller and callee are linked
+  // together by the operating system's dynamic linker. In case a _unique_
+  // function with the right signature is present in the database, we return
+  // that as a potential callee.
+  exists(string qualifiedName, int nparams |
+    callSignatureWithoutBody(qualifiedName, nparams, call) and
+    functionSignatureWithBody(qualifiedName, nparams, result) and
+    strictcount(Function other | functionSignatureWithBody(qualifiedName, nparams, other)) = 1
+  )
+  or
+  // Virtual dispatch
+  result = call.(VirtualDispatch::DataSensitiveCall).resolve()
+}
+
+/**
+ * Provides virtual dispatch support compatible with the original
+ * implementation of `semmle.code.cpp.security.TaintTracking`.
+ */
+private module VirtualDispatch {
+  /** A call that may dispatch differently depending on the qualifier value. */
+  abstract class DataSensitiveCall extends DataFlowCall {
+    /**
+     * Gets the node whose value determines the target of this call. This node
+     * could be the qualifier of a virtual dispatch or the function-pointer
+     * expression in a call to a function pointer. What they have in common is
+     * that we need to find out which data flows there, and then it's up to the
+     * `resolve` predicate to stitch that information together and resolve the
+     * call.
+     */
+    abstract DataFlow::Node getDispatchValue();
+
+    /** Gets a candidate target for this call. */
+    abstract Function resolve();
+
+    /**
+     * Whether `src` can flow to this call.
+     *
+     * Searches backwards from `getDispatchValue()` to `src`. The `allowFromArg`
+     * parameter is true when the search is allowed to continue backwards into
+     * a parameter; non-recursive callers should pass `_` for `allowFromArg`.
+     */
+    predicate flowsFrom(DataFlow::Node src, boolean allowFromArg) {
+      src = this.getDispatchValue() and allowFromArg = true
+      or
+      exists(DataFlow::Node other, boolean allowOtherFromArg |
+        this.flowsFrom(other, allowOtherFromArg)
+      |
+        // Call argument
+        exists(DataFlowCall call, Position i |
+          other
+              .(DataFlow::ParameterNode)
+              .isParameterOf(pragma[only_bind_into](call).getStaticCallTarget(), i) and
+          src.(ArgumentNode).argumentOf(call, pragma[only_bind_into](pragma[only_bind_out](i)))
+        ) and
+        allowOtherFromArg = true and
+        allowFromArg = true
+        or
+        // Call return
+        exists(DataFlowCall call, ReturnKind returnKind |
+          other = getAnOutNode(call, returnKind) and
+          returnNodeWithKindAndEnclosingCallable(src, returnKind, call.getStaticCallTarget())
+        ) and
+        allowFromArg = false
+        or
+        // Local flow
+        DataFlow::localFlowStep(src, other) and
+        allowFromArg = allowOtherFromArg
+        or
+        // Flow from global variable to load.
+        exists(LoadInstruction load, GlobalOrNamespaceVariable var |
+          var = src.asVariable() and
+          other.asInstruction() = load and
+          addressOfGlobal(load.getSourceAddress(), var) and
+          // The `allowFromArg` concept doesn't play a role when `src` is a
+          // global variable, so we just set it to a single arbitrary value for
+          // performance.
+          allowFromArg = true
+        )
+        or
+        // Flow from store to global variable.
+        exists(StoreInstruction store, GlobalOrNamespaceVariable var |
+          var = other.asVariable() and
+          store = src.asInstruction() and
+          storeIntoGlobal(store, var) and
+          // Setting `allowFromArg` to `true` like in the base case means we
+          // treat a store to a global variable like the dispatch itself: flow
+          // may come from anywhere.
+          allowFromArg = true
+        )
+      )
+    }
+  }
+
+  pragma[noinline]
+  private predicate storeIntoGlobal(StoreInstruction store, GlobalOrNamespaceVariable var) {
+    addressOfGlobal(store.getDestinationAddress(), var)
+  }
+
+  /** Holds if `addressInstr` is an instruction that produces the address of `var`. */
+  private predicate addressOfGlobal(Instruction addressInstr, GlobalOrNamespaceVariable var) {
+    // Access directly to the global variable
+    addressInstr.(VariableAddressInstruction).getAstVariable() = var
+    or
+    // Access to a field on a global union
+    exists(FieldAddressInstruction fa |
+      fa = addressInstr and
+      fa.getObjectAddress().(VariableAddressInstruction).getAstVariable() = var and
+      fa.getField().getDeclaringType() instanceof Union
+    )
+  }
+
+  /**
+   * A ReturnNode with its ReturnKind and its enclosing callable.
+   *
+   * Used to fix a join ordering issue in flowsFrom.
+   */
+  pragma[noinline]
+  private predicate returnNodeWithKindAndEnclosingCallable(
+    ReturnNode node, ReturnKind kind, DataFlowCallable callable
+  ) {
+    node.getKind() = kind and
+    node.getEnclosingCallable() = callable
+  }
+
+  /** Call through a function pointer. */
+  private class DataSensitiveExprCall extends DataSensitiveCall {
+    DataSensitiveExprCall() { not exists(this.getStaticCallTarget()) }
+
+    override DataFlow::Node getDispatchValue() { result.asInstruction() = this.getCallTarget() }
+
+    override Function resolve() {
+      exists(FunctionInstruction fi |
+        this.flowsFrom(DataFlow::instructionNode(fi), _) and
+        result = fi.getFunctionSymbol()
+      ) and
+      (
+        this.getNumberOfArguments() <= result.getEffectiveNumberOfParameters() and
+        this.getNumberOfArguments() >= result.getEffectiveNumberOfParameters()
+        or
+        result.isVarargs()
+      )
+    }
+  }
+
+  /** Call to a virtual function. */
+  private class DataSensitiveOverriddenFunctionCall extends DataSensitiveCall {
+    DataSensitiveOverriddenFunctionCall() {
+      exists(this.getStaticCallTarget().(VirtualFunction).getAnOverridingFunction())
+    }
+
+    override DataFlow::Node getDispatchValue() { result.asInstruction() = this.getThisArgument() }
+
+    override MemberFunction resolve() {
+      exists(Class overridingClass |
+        this.overrideMayAffectCall(overridingClass, result) and
+        this.hasFlowFromCastFrom(overridingClass)
+      )
+    }
+
+    /**
+     * Holds if `this` is a virtual function call whose static target is
+     * overridden by `overridingFunction` in `overridingClass`.
+     */
+    pragma[noinline]
+    private predicate overrideMayAffectCall(Class overridingClass, MemberFunction overridingFunction) {
+      overridingFunction.getAnOverriddenFunction+() = this.getStaticCallTarget().(VirtualFunction) and
+      overridingFunction.getDeclaringType() = overridingClass
+    }
+
+    /**
+     * Holds if the qualifier of `this` has flow from an upcast from
+     * `derivedClass`.
+     */
+    pragma[noinline]
+    private predicate hasFlowFromCastFrom(Class derivedClass) {
+      exists(ConvertToBaseInstruction toBase |
+        this.flowsFrom(DataFlow::instructionNode(toBase), _) and
+        derivedClass = toBase.getDerivedClass()
+      )
+    }
+  }
+}
+
+/**
+ * Holds if `f` is a function with a body that has name `qualifiedName` and
+ * `nparams` parameter count. See `functionSignature`.
+ */
+private predicate functionSignatureWithBody(string qualifiedName, int nparams, Function f) {
+  functionSignature(f, qualifiedName, nparams) and
+  exists(f.getBlock())
+}
+
+/**
+ * Holds if the target of `call` is a function _with no definition_ that has
+ * name `qualifiedName` and `nparams` parameter count. See `functionSignature`.
+ */
+pragma[noinline]
+private predicate callSignatureWithoutBody(string qualifiedName, int nparams, CallInstruction call) {
+  exists(Function target |
+    target = call.getStaticCallTarget() and
+    not exists(target.getBlock()) and
+    functionSignature(target, qualifiedName, nparams)
+  )
+}
+
+/**
+ * Holds if `f` has name `qualifiedName` and `nparams` parameter count. This is
+ * an approximation of its signature for the purpose of matching functions that
+ * might be the same across link targets.
+ */
+private predicate functionSignature(Function f, string qualifiedName, int nparams) {
+  qualifiedName = f.getQualifiedName() and
+  nparams = f.getNumberOfParameters() and
+  not f.isStatic()
+}
+
+/**
+ * Holds if the set of viable implementations that can be called by `call`
+ * might be improved by knowing the call context.
+ */
+predicate mayBenefitFromCallContext(CallInstruction call, Function f) {
+  mayBenefitFromCallContext(call, f, _)
+}
+
+/**
+ * Holds if `call` is a call through a function pointer, and the pointer
+ * value is given as the `arg`'th argument to `f`.
+ */
+private predicate mayBenefitFromCallContext(
+  VirtualDispatch::DataSensitiveCall call, Function f, int arg
+) {
+  f = pragma[only_bind_out](call).getEnclosingCallable() and
+  exists(InitializeParameterInstruction init |
+    not exists(call.getStaticCallTarget()) and
+    init.getEnclosingFunction() = f and
+    call.flowsFrom(DataFlow::instructionNode(init), _) and
+    init.getParameter().getIndex() = arg
+  )
+}
+
+/**
+ * Gets a viable dispatch target of `call` in the context `ctx`. This is
+ * restricted to those `call`s for which a context might make a difference.
+ */
+Function viableImplInCallContext(CallInstruction call, CallInstruction ctx) {
+  result = viableCallable(call) and
+  exists(int i, Function f |
+    mayBenefitFromCallContext(pragma[only_bind_into](call), f, i) and
+    f = ctx.getStaticCallTarget() and
+    result = ctx.getArgument(i).getUnconvertedResultExpression().(FunctionAccess).getTarget()
+  )
+}
+
+/** Holds if arguments at position `apos` match parameters at position `ppos`. */
+pragma[inline]
+predicate parameterMatch(ParameterPosition ppos, ArgumentPosition apos) { ppos = apos }
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImpl.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImpl.qll
new file mode 100644
index 00000000000..468f8640a78
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImpl.qll
@@ -0,0 +1,4450 @@
+/**
+ * Provides an implementation of global (interprocedural) data flow. This file
+ * re-exports the local (intraprocedural) data flow analysis from
+ * `DataFlowImplSpecific::Public` and adds a global analysis, mainly exposed
+ * through the `Configuration` class. This file exists in several identical
+ * copies, allowing queries to use multiple `Configuration` classes that depend
+ * on each other without introducing mutual recursion among those configurations.
+ */
+
+private import DataFlowImplCommon
+private import DataFlowImplSpecific::Private
+import DataFlowImplSpecific::Public
+import DataFlowImplCommonPublic
+
+/**
+ * A configuration of interprocedural data flow analysis. This defines
+ * sources, sinks, and any other configurable aspect of the analysis. Each
+ * use of the global data flow library must define its own unique extension
+ * of this abstract class. To create a configuration, extend this class with
+ * a subclass whose characteristic predicate is a unique singleton string.
+ * For example, write
+ *
+ * ```ql
+ * class MyAnalysisConfiguration extends DataFlow::Configuration {
+ *   MyAnalysisConfiguration() { this = "MyAnalysisConfiguration" }
+ *   // Override `isSource` and `isSink`.
+ *   // Optionally override `isBarrier`.
+ *   // Optionally override `isAdditionalFlowStep`.
+ * }
+ * ```
+ * Conceptually, this defines a graph where the nodes are `DataFlow::Node`s and
+ * the edges are those data-flow steps that preserve the value of the node
+ * along with any additional edges defined by `isAdditionalFlowStep`.
+ * Specifying nodes in `isBarrier` will remove those nodes from the graph, and
+ * specifying nodes in `isBarrierIn` and/or `isBarrierOut` will remove in-going
+ * and/or out-going edges from those nodes, respectively.
+ *
+ * Then, to query whether there is flow between some `source` and `sink`,
+ * write
+ *
+ * ```ql
+ * exists(MyAnalysisConfiguration cfg | cfg.hasFlow(source, sink))
+ * ```
+ *
+ * Multiple configurations can coexist, but two classes extending
+ * `DataFlow::Configuration` should never depend on each other. One of them
+ * should instead depend on a `DataFlow2::Configuration`, a
+ * `DataFlow3::Configuration`, or a `DataFlow4::Configuration`.
+ */
+abstract class Configuration extends string {
+  bindingset[this]
+  Configuration() { any() }
+
+  /**
+   * Holds if `source` is a relevant data flow source.
+   */
+  predicate isSource(Node source) { none() }
+
+  /**
+   * Holds if `source` is a relevant data flow source with the given initial
+   * `state`.
+   */
+  predicate isSource(Node source, FlowState state) { none() }
+
+  /**
+   * Holds if `sink` is a relevant data flow sink.
+   */
+  predicate isSink(Node sink) { none() }
+
+  /**
+   * Holds if `sink` is a relevant data flow sink accepting `state`.
+   */
+  predicate isSink(Node source, FlowState state) { none() }
+
+  /**
+   * Holds if data flow through `node` is prohibited. This completely removes
+   * `node` from the data flow graph.
+   */
+  predicate isBarrier(Node node) { none() }
+
+  /**
+   * Holds if data flow through `node` is prohibited when the flow state is
+   * `state`.
+   */
+  predicate isBarrier(Node node, FlowState state) { none() }
+
+  /** Holds if data flow into `node` is prohibited. */
+  predicate isBarrierIn(Node node) { none() }
+
+  /** Holds if data flow out of `node` is prohibited. */
+  predicate isBarrierOut(Node node) { none() }
+
+  /**
+   * DEPRECATED: Use `isBarrier` and `BarrierGuard` module instead.
+   *
+   * Holds if data flow through nodes guarded by `guard` is prohibited.
+   */
+  deprecated predicate isBarrierGuard(BarrierGuard guard) { none() }
+
+  /**
+   * DEPRECATED: Use `isBarrier` and `BarrierGuard` module instead.
+   *
+   * Holds if data flow through nodes guarded by `guard` is prohibited when
+   * the flow state is `state`
+   */
+  deprecated predicate isBarrierGuard(BarrierGuard guard, FlowState state) { none() }
+
+  /**
+   * Holds if data may flow from `node1` to `node2` in addition to the normal data-flow steps.
+   */
+  predicate isAdditionalFlowStep(Node node1, Node node2) { none() }
+
+  /**
+   * Holds if data may flow from `node1` to `node2` in addition to the normal data-flow steps.
+   * This step is only applicable in `state1` and updates the flow state to `state2`.
+   */
+  predicate isAdditionalFlowStep(Node node1, FlowState state1, Node node2, FlowState state2) {
+    none()
+  }
+
+  /**
+   * Holds if an arbitrary number of implicit read steps of content `c` may be
+   * taken at `node`.
+   */
+  predicate allowImplicitRead(Node node, ContentSet c) { none() }
+
+  /**
+   * Gets the virtual dispatch branching limit when calculating field flow.
+   * This can be overridden to a smaller value to improve performance (a
+   * value of 0 disables field flow), or a larger value to get more results.
+   */
+  int fieldFlowBranchLimit() { result = 2 }
+
+  /**
+   * Gets a data flow configuration feature to add restrictions to the set of
+   * valid flow paths.
+   *
+   * - `FeatureHasSourceCallContext`:
+   *    Assume that sources have some existing call context to disallow
+   *    conflicting return-flow directly following the source.
+   * - `FeatureHasSinkCallContext`:
+   *    Assume that sinks have some existing call context to disallow
+   *    conflicting argument-to-parameter flow directly preceding the sink.
+   * - `FeatureEqualSourceSinkCallContext`:
+   *    Implies both of the above and additionally ensures that the entire flow
+   *    path preserves the call context.
+   */
+  FlowFeature getAFeature() { none() }
+
+  /**
+   * Holds if data may flow from `source` to `sink` for this configuration.
+   */
+  predicate hasFlow(Node source, Node sink) { flowsTo(source, sink, this) }
+
+  /**
+   * Holds if data may flow from `source` to `sink` for this configuration.
+   *
+   * The corresponding paths are generated from the end-points and the graph
+   * included in the module `PathGraph`.
+   */
+  predicate hasFlowPath(PathNode source, PathNode sink) { flowsTo(source, sink, _, _, this) }
+
+  /**
+   * Holds if data may flow from some source to `sink` for this configuration.
+   */
+  predicate hasFlowTo(Node sink) { this.hasFlow(_, sink) }
+
+  /**
+   * Holds if data may flow from some source to `sink` for this configuration.
+   */
+  predicate hasFlowToExpr(DataFlowExpr sink) { this.hasFlowTo(exprNode(sink)) }
+
+  /**
+   * Gets the exploration limit for `hasPartialFlow` and `hasPartialFlowRev`
+   * measured in approximate number of interprocedural steps.
+   */
+  int explorationLimit() { none() }
+
+  /**
+   * Holds if hidden nodes should be included in the data flow graph.
+   *
+   * This feature should only be used for debugging or when the data flow graph
+   * is not visualized (for example in a `path-problem` query).
+   */
+  predicate includeHiddenNodes() { none() }
+
+  /**
+   * Holds if there is a partial data flow path from `source` to `node`. The
+   * approximate distance between `node` and the closest source is `dist` and
+   * is restricted to be less than or equal to `explorationLimit()`. This
+   * predicate completely disregards sink definitions.
+   *
+   * This predicate is intended for data-flow exploration and debugging and may
+   * perform poorly if the number of sources is too big and/or the exploration
+   * limit is set too high without using barriers.
+   *
+   * This predicate is disabled (has no results) by default. Override
+   * `explorationLimit()` with a suitable number to enable this predicate.
+   *
+   * To use this in a `path-problem` query, import the module `PartialPathGraph`.
+   */
+  final predicate hasPartialFlow(PartialPathNode source, PartialPathNode node, int dist) {
+    partialFlow(source, node, this) and
+    dist = node.getSourceDistance()
+  }
+
+  /**
+   * Holds if there is a partial data flow path from `node` to `sink`. The
+   * approximate distance between `node` and the closest sink is `dist` and
+   * is restricted to be less than or equal to `explorationLimit()`. This
+   * predicate completely disregards source definitions.
+   *
+   * This predicate is intended for data-flow exploration and debugging and may
+   * perform poorly if the number of sinks is too big and/or the exploration
+   * limit is set too high without using barriers.
+   *
+   * This predicate is disabled (has no results) by default. Override
+   * `explorationLimit()` with a suitable number to enable this predicate.
+   *
+   * To use this in a `path-problem` query, import the module `PartialPathGraph`.
+   *
+   * Note that reverse flow has slightly lower precision than the corresponding
+   * forward flow, as reverse flow disregards type pruning among other features.
+   */
+  final predicate hasPartialFlowRev(PartialPathNode node, PartialPathNode sink, int dist) {
+    revPartialFlow(node, sink, this) and
+    dist = node.getSinkDistance()
+  }
+}
+
+/**
+ * This class exists to prevent mutual recursion between the user-overridden
+ * member predicates of `Configuration` and the rest of the data-flow library.
+ * Good performance cannot be guaranteed in the presence of such recursion, so
+ * it should be replaced by using more than one copy of the data flow library.
+ */
+abstract private class ConfigurationRecursionPrevention extends Configuration {
+  bindingset[this]
+  ConfigurationRecursionPrevention() { any() }
+
+  override predicate hasFlow(Node source, Node sink) {
+    strictcount(Node n | this.isSource(n)) < 0
+    or
+    strictcount(Node n | this.isSource(n, _)) < 0
+    or
+    strictcount(Node n | this.isSink(n)) < 0
+    or
+    strictcount(Node n | this.isSink(n, _)) < 0
+    or
+    strictcount(Node n1, Node n2 | this.isAdditionalFlowStep(n1, n2)) < 0
+    or
+    strictcount(Node n1, Node n2 | this.isAdditionalFlowStep(n1, _, n2, _)) < 0
+    or
+    super.hasFlow(source, sink)
+  }
+}
+
+private newtype TNodeEx =
+  TNodeNormal(Node n) or
+  TNodeImplicitRead(Node n, boolean hasRead) {
+    any(Configuration c).allowImplicitRead(n, _) and hasRead = [false, true]
+  }
+
+private class NodeEx extends TNodeEx {
+  string toString() {
+    result = this.asNode().toString()
+    or
+    exists(Node n | this.isImplicitReadNode(n, _) | result = n.toString() + " [Ext]")
+  }
+
+  Node asNode() { this = TNodeNormal(result) }
+
+  predicate isImplicitReadNode(Node n, boolean hasRead) { this = TNodeImplicitRead(n, hasRead) }
+
+  Node projectToNode() { this = TNodeNormal(result) or this = TNodeImplicitRead(result, _) }
+
+  pragma[nomagic]
+  private DataFlowCallable getEnclosingCallable0() {
+    nodeEnclosingCallable(this.projectToNode(), result)
+  }
+
+  pragma[inline]
+  DataFlowCallable getEnclosingCallable() {
+    pragma[only_bind_out](this).getEnclosingCallable0() = pragma[only_bind_into](result)
+  }
+
+  pragma[nomagic]
+  private DataFlowType getDataFlowType0() { nodeDataFlowType(this.asNode(), result) }
+
+  pragma[inline]
+  DataFlowType getDataFlowType() {
+    pragma[only_bind_out](this).getDataFlowType0() = pragma[only_bind_into](result)
+  }
+
+  predicate hasLocationInfo(
+    string filepath, int startline, int startcolumn, int endline, int endcolumn
+  ) {
+    this.projectToNode().hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+  }
+}
+
+private class ArgNodeEx extends NodeEx {
+  ArgNodeEx() { this.asNode() instanceof ArgNode }
+}
+
+private class ParamNodeEx extends NodeEx {
+  ParamNodeEx() { this.asNode() instanceof ParamNode }
+
+  predicate isParameterOf(DataFlowCallable c, ParameterPosition pos) {
+    this.asNode().(ParamNode).isParameterOf(c, pos)
+  }
+
+  ParameterPosition getPosition() { this.isParameterOf(_, result) }
+
+  predicate allowParameterReturnInSelf() { allowParameterReturnInSelfCached(this.asNode()) }
+}
+
+private class RetNodeEx extends NodeEx {
+  RetNodeEx() { this.asNode() instanceof ReturnNodeExt }
+
+  ReturnPosition getReturnPosition() { result = getReturnPosition(this.asNode()) }
+
+  ReturnKindExt getKind() { result = this.asNode().(ReturnNodeExt).getKind() }
+}
+
+private predicate inBarrier(NodeEx node, Configuration config) {
+  exists(Node n |
+    node.asNode() = n and
+    config.isBarrierIn(n)
+  |
+    config.isSource(n) or config.isSource(n, _)
+  )
+}
+
+private predicate outBarrier(NodeEx node, Configuration config) {
+  exists(Node n |
+    node.asNode() = n and
+    config.isBarrierOut(n)
+  |
+    config.isSink(n) or config.isSink(n, _)
+  )
+}
+
+/** A bridge class to access the deprecated `isBarrierGuard`. */
+private class BarrierGuardGuardedNodeBridge extends Unit {
+  abstract predicate guardedNode(Node n, Configuration config);
+
+  abstract predicate guardedNode(Node n, FlowState state, Configuration config);
+}
+
+private class BarrierGuardGuardedNode extends BarrierGuardGuardedNodeBridge {
+  deprecated override predicate guardedNode(Node n, Configuration config) {
+    exists(BarrierGuard g |
+      config.isBarrierGuard(g) and
+      n = g.getAGuardedNode()
+    )
+  }
+
+  deprecated override predicate guardedNode(Node n, FlowState state, Configuration config) {
+    exists(BarrierGuard g |
+      config.isBarrierGuard(g, state) and
+      n = g.getAGuardedNode()
+    )
+  }
+}
+
+pragma[nomagic]
+private predicate fullBarrier(NodeEx node, Configuration config) {
+  exists(Node n | node.asNode() = n |
+    config.isBarrier(n)
+    or
+    config.isBarrierIn(n) and
+    not config.isSource(n) and
+    not config.isSource(n, _)
+    or
+    config.isBarrierOut(n) and
+    not config.isSink(n) and
+    not config.isSink(n, _)
+    or
+    any(BarrierGuardGuardedNodeBridge b).guardedNode(n, config)
+  )
+}
+
+pragma[nomagic]
+private predicate stateBarrier(NodeEx node, FlowState state, Configuration config) {
+  exists(Node n | node.asNode() = n |
+    config.isBarrier(n, state)
+    or
+    any(BarrierGuardGuardedNodeBridge b).guardedNode(n, state, config)
+  )
+}
+
+pragma[nomagic]
+private predicate sourceNode(NodeEx node, FlowState state, Configuration config) {
+  (
+    config.isSource(node.asNode()) and state instanceof FlowStateEmpty
+    or
+    config.isSource(node.asNode(), state)
+  ) and
+  not fullBarrier(node, config) and
+  not stateBarrier(node, state, config)
+}
+
+pragma[nomagic]
+private predicate sinkNode(NodeEx node, FlowState state, Configuration config) {
+  (
+    config.isSink(node.asNode()) and state instanceof FlowStateEmpty
+    or
+    config.isSink(node.asNode(), state)
+  ) and
+  not fullBarrier(node, config) and
+  not stateBarrier(node, state, config)
+}
+
+/** Provides the relevant barriers for a step from `node1` to `node2`. */
+pragma[inline]
+private predicate stepFilter(NodeEx node1, NodeEx node2, Configuration config) {
+  not outBarrier(node1, config) and
+  not inBarrier(node2, config) and
+  not fullBarrier(node1, config) and
+  not fullBarrier(node2, config)
+}
+
+/**
+ * Holds if data can flow in one local step from `node1` to `node2`.
+ */
+private predicate localFlowStep(NodeEx node1, NodeEx node2, Configuration config) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    simpleLocalFlowStepExt(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and
+    stepFilter(node1, node2, config)
+  )
+  or
+  exists(Node n |
+    config.allowImplicitRead(n, _) and
+    node1.asNode() = n and
+    node2.isImplicitReadNode(n, false) and
+    not fullBarrier(node1, config)
+  )
+}
+
+/**
+ * Holds if the additional step from `node1` to `node2` does not jump between callables.
+ */
+private predicate additionalLocalFlowStep(NodeEx node1, NodeEx node2, Configuration config) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    config.isAdditionalFlowStep(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and
+    getNodeEnclosingCallable(n1) = getNodeEnclosingCallable(n2) and
+    stepFilter(node1, node2, config)
+  )
+  or
+  exists(Node n |
+    config.allowImplicitRead(n, _) and
+    node1.isImplicitReadNode(n, true) and
+    node2.asNode() = n and
+    not fullBarrier(node2, config)
+  )
+}
+
+private predicate additionalLocalStateStep(
+  NodeEx node1, FlowState s1, NodeEx node2, FlowState s2, Configuration config
+) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    config.isAdditionalFlowStep(pragma[only_bind_into](n1), s1, pragma[only_bind_into](n2), s2) and
+    getNodeEnclosingCallable(n1) = getNodeEnclosingCallable(n2) and
+    stepFilter(node1, node2, config) and
+    not stateBarrier(node1, s1, config) and
+    not stateBarrier(node2, s2, config)
+  )
+}
+
+/**
+ * Holds if data can flow from `node1` to `node2` in a way that discards call contexts.
+ */
+private predicate jumpStep(NodeEx node1, NodeEx node2, Configuration config) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    jumpStepCached(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and
+    stepFilter(node1, node2, config) and
+    not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+/**
+ * Holds if the additional step from `node1` to `node2` jumps between callables.
+ */
+private predicate additionalJumpStep(NodeEx node1, NodeEx node2, Configuration config) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    config.isAdditionalFlowStep(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and
+    getNodeEnclosingCallable(n1) != getNodeEnclosingCallable(n2) and
+    stepFilter(node1, node2, config) and
+    not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+private predicate additionalJumpStateStep(
+  NodeEx node1, FlowState s1, NodeEx node2, FlowState s2, Configuration config
+) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    config.isAdditionalFlowStep(pragma[only_bind_into](n1), s1, pragma[only_bind_into](n2), s2) and
+    getNodeEnclosingCallable(n1) != getNodeEnclosingCallable(n2) and
+    stepFilter(node1, node2, config) and
+    not stateBarrier(node1, s1, config) and
+    not stateBarrier(node2, s2, config) and
+    not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+pragma[nomagic]
+private predicate readSet(NodeEx node1, ContentSet c, NodeEx node2, Configuration config) {
+  readSet(pragma[only_bind_into](node1.asNode()), c, pragma[only_bind_into](node2.asNode())) and
+  stepFilter(node1, node2, config)
+  or
+  exists(Node n |
+    node2.isImplicitReadNode(n, true) and
+    node1.isImplicitReadNode(n, _) and
+    config.allowImplicitRead(n, c)
+  )
+}
+
+// inline to reduce fan-out via `getAReadContent`
+bindingset[c]
+private predicate read(NodeEx node1, Content c, NodeEx node2, Configuration config) {
+  exists(ContentSet cs |
+    readSet(node1, cs, node2, config) and
+    pragma[only_bind_out](c) = pragma[only_bind_into](cs).getAReadContent()
+  )
+}
+
+// inline to reduce fan-out via `getAReadContent`
+bindingset[c]
+private predicate clearsContentEx(NodeEx n, Content c) {
+  exists(ContentSet cs |
+    clearsContentCached(n.asNode(), cs) and
+    pragma[only_bind_out](c) = pragma[only_bind_into](cs).getAReadContent()
+  )
+}
+
+// inline to reduce fan-out via `getAReadContent`
+bindingset[c]
+private predicate expectsContentEx(NodeEx n, Content c) {
+  exists(ContentSet cs |
+    expectsContentCached(n.asNode(), cs) and
+    pragma[only_bind_out](c) = pragma[only_bind_into](cs).getAReadContent()
+  )
+}
+
+pragma[nomagic]
+private predicate notExpectsContent(NodeEx n) { not expectsContentCached(n.asNode(), _) }
+
+pragma[nomagic]
+private predicate store(
+  NodeEx node1, TypedContent tc, NodeEx node2, DataFlowType contentType, Configuration config
+) {
+  store(pragma[only_bind_into](node1.asNode()), tc, pragma[only_bind_into](node2.asNode()),
+    contentType) and
+  read(_, tc.getContent(), _, config) and
+  stepFilter(node1, node2, config)
+}
+
+pragma[nomagic]
+private predicate viableReturnPosOutEx(DataFlowCall call, ReturnPosition pos, NodeEx out) {
+  viableReturnPosOut(call, pos, out.asNode())
+}
+
+pragma[nomagic]
+private predicate viableParamArgEx(DataFlowCall call, ParamNodeEx p, ArgNodeEx arg) {
+  viableParamArg(call, p.asNode(), arg.asNode())
+}
+
+/**
+ * Holds if field flow should be used for the given configuration.
+ */
+private predicate useFieldFlow(Configuration config) { config.fieldFlowBranchLimit() >= 1 }
+
+private predicate hasSourceCallCtx(Configuration config) {
+  exists(FlowFeature feature | feature = config.getAFeature() |
+    feature instanceof FeatureHasSourceCallContext or
+    feature instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+private predicate hasSinkCallCtx(Configuration config) {
+  exists(FlowFeature feature | feature = config.getAFeature() |
+    feature instanceof FeatureHasSinkCallContext or
+    feature instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+private module Stage1 implements StageSig {
+  class ApApprox = Unit;
+
+  class Ap = Unit;
+
+  class ApOption = Unit;
+
+  class Cc = boolean;
+
+  /* Begin: Stage 1 logic. */
+  /**
+   * Holds if `node` is reachable from a source in the configuration `config`.
+   *
+   * The Boolean `cc` records whether the node is reached through an
+   * argument in a call.
+   */
+  predicate fwdFlow(NodeEx node, Cc cc, Configuration config) {
+    sourceNode(node, _, config) and
+    if hasSourceCallCtx(config) then cc = true else cc = false
+    or
+    exists(NodeEx mid | fwdFlow(mid, cc, config) |
+      localFlowStep(mid, node, config) or
+      additionalLocalFlowStep(mid, node, config) or
+      additionalLocalStateStep(mid, _, node, _, config)
+    )
+    or
+    exists(NodeEx mid | fwdFlow(mid, _, config) and cc = false |
+      jumpStep(mid, node, config) or
+      additionalJumpStep(mid, node, config) or
+      additionalJumpStateStep(mid, _, node, _, config)
+    )
+    or
+    // store
+    exists(NodeEx mid |
+      useFieldFlow(config) and
+      fwdFlow(mid, cc, config) and
+      store(mid, _, node, _, config)
+    )
+    or
+    // read
+    exists(ContentSet c |
+      fwdFlowReadSet(c, node, cc, config) and
+      fwdFlowConsCandSet(c, _, config)
+    )
+    or
+    // flow into a callable
+    exists(NodeEx arg |
+      fwdFlow(arg, _, config) and
+      viableParamArgEx(_, node, arg) and
+      cc = true and
+      not fullBarrier(node, config)
+    )
+    or
+    // flow out of a callable
+    exists(DataFlowCall call |
+      fwdFlowOut(call, node, false, config) and
+      cc = false
+      or
+      fwdFlowOutFromArg(call, node, config) and
+      fwdFlowIsEntered(call, cc, config)
+    )
+  }
+
+  private predicate fwdFlow(NodeEx node, Configuration config) { fwdFlow(node, _, config) }
+
+  pragma[nomagic]
+  private predicate fwdFlowReadSet(ContentSet c, NodeEx node, Cc cc, Configuration config) {
+    exists(NodeEx mid |
+      fwdFlow(mid, cc, config) and
+      readSet(mid, c, node, config)
+    )
+  }
+
+  /**
+   * Holds if `c` is the target of a store in the flow covered by `fwdFlow`.
+   */
+  pragma[nomagic]
+  private predicate fwdFlowConsCand(Content c, Configuration config) {
+    exists(NodeEx mid, NodeEx node, TypedContent tc |
+      not fullBarrier(node, config) and
+      useFieldFlow(config) and
+      fwdFlow(mid, _, config) and
+      store(mid, tc, node, _, config) and
+      c = tc.getContent()
+    )
+  }
+
+  /**
+   * Holds if `cs` may be interpreted in a read as the target of some store
+   * into `c`, in the flow covered by `fwdFlow`.
+   */
+  pragma[nomagic]
+  private predicate fwdFlowConsCandSet(ContentSet cs, Content c, Configuration config) {
+    fwdFlowConsCand(c, config) and
+    c = cs.getAReadContent()
+  }
+
+  pragma[nomagic]
+  private predicate fwdFlowReturnPosition(ReturnPosition pos, Cc cc, Configuration config) {
+    exists(RetNodeEx ret |
+      fwdFlow(ret, cc, config) and
+      ret.getReturnPosition() = pos
+    )
+  }
+
+  pragma[nomagic]
+  private predicate fwdFlowOut(DataFlowCall call, NodeEx out, Cc cc, Configuration config) {
+    exists(ReturnPosition pos |
+      fwdFlowReturnPosition(pos, cc, config) and
+      viableReturnPosOutEx(call, pos, out) and
+      not fullBarrier(out, config)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate fwdFlowOutFromArg(DataFlowCall call, NodeEx out, Configuration config) {
+    fwdFlowOut(call, out, true, config)
+  }
+
+  /**
+   * Holds if an argument to `call` is reached in the flow covered by `fwdFlow`.
+   */
+  pragma[nomagic]
+  private predicate fwdFlowIsEntered(DataFlowCall call, Cc cc, Configuration config) {
+    exists(ArgNodeEx arg |
+      fwdFlow(arg, cc, config) and
+      viableParamArgEx(call, _, arg)
+    )
+  }
+
+  private predicate stateStepFwd(FlowState state1, FlowState state2, Configuration config) {
+    exists(NodeEx node1 |
+      additionalLocalStateStep(node1, state1, _, state2, config) or
+      additionalJumpStateStep(node1, state1, _, state2, config)
+    |
+      fwdFlow(node1, config)
+    )
+  }
+
+  private predicate fwdFlowState(FlowState state, Configuration config) {
+    sourceNode(_, state, config)
+    or
+    exists(FlowState state0 |
+      fwdFlowState(state0, config) and
+      stateStepFwd(state0, state, config)
+    )
+  }
+
+  /**
+   * Holds if `node` is part of a path from a source to a sink in the
+   * configuration `config`.
+   *
+   * The Boolean `toReturn` records whether the node must be returned from
+   * the enclosing callable in order to reach a sink.
+   */
+  pragma[nomagic]
+  predicate revFlow(NodeEx node, boolean toReturn, Configuration config) {
+    revFlow0(node, toReturn, config) and
+    fwdFlow(node, config)
+  }
+
+  pragma[nomagic]
+  private predicate revFlow0(NodeEx node, boolean toReturn, Configuration config) {
+    exists(FlowState state |
+      fwdFlow(node, pragma[only_bind_into](config)) and
+      sinkNode(node, state, config) and
+      fwdFlowState(state, pragma[only_bind_into](config)) and
+      if hasSinkCallCtx(config) then toReturn = true else toReturn = false
+    )
+    or
+    exists(NodeEx mid | revFlow(mid, toReturn, config) |
+      localFlowStep(node, mid, config) or
+      additionalLocalFlowStep(node, mid, config) or
+      additionalLocalStateStep(node, _, mid, _, config)
+    )
+    or
+    exists(NodeEx mid | revFlow(mid, _, config) and toReturn = false |
+      jumpStep(node, mid, config) or
+      additionalJumpStep(node, mid, config) or
+      additionalJumpStateStep(node, _, mid, _, config)
+    )
+    or
+    // store
+    exists(Content c |
+      revFlowStore(c, node, toReturn, config) and
+      revFlowConsCand(c, config)
+    )
+    or
+    // read
+    exists(NodeEx mid, ContentSet c |
+      readSet(node, c, mid, config) and
+      fwdFlowConsCandSet(c, _, pragma[only_bind_into](config)) and
+      revFlow(mid, toReturn, pragma[only_bind_into](config))
+    )
+    or
+    // flow into a callable
+    exists(DataFlowCall call |
+      revFlowIn(call, node, false, config) and
+      toReturn = false
+      or
+      revFlowInToReturn(call, node, config) and
+      revFlowIsReturned(call, toReturn, config)
+    )
+    or
+    // flow out of a callable
+    exists(ReturnPosition pos |
+      revFlowOut(pos, config) and
+      node.(RetNodeEx).getReturnPosition() = pos and
+      toReturn = true
+    )
+  }
+
+  /**
+   * Holds if `c` is the target of a read in the flow covered by `revFlow`.
+   */
+  pragma[nomagic]
+  private predicate revFlowConsCand(Content c, Configuration config) {
+    exists(NodeEx mid, NodeEx node, ContentSet cs |
+      fwdFlow(node, pragma[only_bind_into](config)) and
+      readSet(node, cs, mid, config) and
+      fwdFlowConsCandSet(cs, c, pragma[only_bind_into](config)) and
+      revFlow(pragma[only_bind_into](mid), _, pragma[only_bind_into](config))
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revFlowStore(Content c, NodeEx node, boolean toReturn, Configuration config) {
+    exists(NodeEx mid, TypedContent tc |
+      revFlow(mid, toReturn, pragma[only_bind_into](config)) and
+      fwdFlowConsCand(c, pragma[only_bind_into](config)) and
+      store(node, tc, mid, _, config) and
+      c = tc.getContent()
+    )
+  }
+
+  /**
+   * Holds if `c` is the target of both a read and a store in the flow covered
+   * by `revFlow`.
+   */
+  pragma[nomagic]
+  predicate revFlowIsReadAndStored(Content c, Configuration conf) {
+    revFlowConsCand(c, conf) and
+    revFlowStore(c, _, _, conf)
+  }
+
+  pragma[nomagic]
+  predicate viableReturnPosOutNodeCandFwd1(
+    DataFlowCall call, ReturnPosition pos, NodeEx out, Configuration config
+  ) {
+    fwdFlowReturnPosition(pos, _, config) and
+    viableReturnPosOutEx(call, pos, out)
+  }
+
+  pragma[nomagic]
+  private predicate revFlowOut(ReturnPosition pos, Configuration config) {
+    exists(DataFlowCall call, NodeEx out |
+      revFlow(out, _, config) and
+      viableReturnPosOutNodeCandFwd1(call, pos, out, config)
+    )
+  }
+
+  pragma[nomagic]
+  predicate viableParamArgNodeCandFwd1(
+    DataFlowCall call, ParamNodeEx p, ArgNodeEx arg, Configuration config
+  ) {
+    viableParamArgEx(call, p, arg) and
+    fwdFlow(arg, config)
+  }
+
+  pragma[nomagic]
+  private predicate revFlowIn(
+    DataFlowCall call, ArgNodeEx arg, boolean toReturn, Configuration config
+  ) {
+    exists(ParamNodeEx p |
+      revFlow(p, toReturn, config) and
+      viableParamArgNodeCandFwd1(call, p, arg, config)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revFlowInToReturn(DataFlowCall call, ArgNodeEx arg, Configuration config) {
+    revFlowIn(call, arg, true, config)
+  }
+
+  /**
+   * Holds if an output from `call` is reached in the flow covered by `revFlow`
+   * and data might flow through the target callable resulting in reverse flow
+   * reaching an argument of `call`.
+   */
+  pragma[nomagic]
+  private predicate revFlowIsReturned(DataFlowCall call, boolean toReturn, Configuration config) {
+    exists(NodeEx out |
+      revFlow(out, toReturn, config) and
+      fwdFlowOutFromArg(call, out, config)
+    )
+  }
+
+  private predicate stateStepRev(FlowState state1, FlowState state2, Configuration config) {
+    exists(NodeEx node1, NodeEx node2 |
+      additionalLocalStateStep(node1, state1, node2, state2, config) or
+      additionalJumpStateStep(node1, state1, node2, state2, config)
+    |
+      revFlow(node1, _, pragma[only_bind_into](config)) and
+      revFlow(node2, _, pragma[only_bind_into](config)) and
+      fwdFlowState(state1, pragma[only_bind_into](config)) and
+      fwdFlowState(state2, pragma[only_bind_into](config))
+    )
+  }
+
+  predicate revFlowState(FlowState state, Configuration config) {
+    exists(NodeEx node |
+      sinkNode(node, state, config) and
+      revFlow(node, _, pragma[only_bind_into](config)) and
+      fwdFlowState(state, pragma[only_bind_into](config))
+    )
+    or
+    exists(FlowState state0 |
+      revFlowState(state0, config) and
+      stateStepRev(state, state0, config)
+    )
+  }
+
+  pragma[nomagic]
+  predicate storeStepCand(
+    NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, DataFlowType contentType,
+    Configuration config
+  ) {
+    exists(Content c |
+      revFlowIsReadAndStored(c, pragma[only_bind_into](config)) and
+      revFlow(node2, pragma[only_bind_into](config)) and
+      store(node1, tc, node2, contentType, config) and
+      c = tc.getContent() and
+      exists(ap1)
+    )
+  }
+
+  pragma[nomagic]
+  predicate readStepCand(NodeEx n1, Content c, NodeEx n2, Configuration config) {
+    revFlowIsReadAndStored(c, pragma[only_bind_into](config)) and
+    read(n1, c, n2, pragma[only_bind_into](config)) and
+    revFlow(n2, pragma[only_bind_into](config))
+  }
+
+  pragma[nomagic]
+  predicate revFlow(NodeEx node, Configuration config) { revFlow(node, _, config) }
+
+  bindingset[node, state, config]
+  predicate revFlow(NodeEx node, FlowState state, Ap ap, Configuration config) {
+    revFlow(node, _, pragma[only_bind_into](config)) and
+    exists(state) and
+    exists(ap)
+  }
+
+  private predicate throughFlowNodeCand(NodeEx node, Configuration config) {
+    revFlow(node, true, config) and
+    fwdFlow(node, true, config) and
+    not inBarrier(node, config) and
+    not outBarrier(node, config)
+  }
+
+  /** Holds if flow may return from `callable`. */
+  pragma[nomagic]
+  private predicate returnFlowCallableNodeCand(
+    DataFlowCallable callable, ReturnKindExt kind, Configuration config
+  ) {
+    exists(RetNodeEx ret |
+      throughFlowNodeCand(ret, config) and
+      callable = ret.getEnclosingCallable() and
+      kind = ret.getKind()
+    )
+  }
+
+  /**
+   * Holds if flow may enter through `p` and reach a return node making `p` a
+   * candidate for the origin of a summary.
+   */
+  pragma[nomagic]
+  predicate parameterMayFlowThrough(ParamNodeEx p, DataFlowCallable c, Ap ap, Configuration config) {
+    exists(ReturnKindExt kind |
+      throughFlowNodeCand(p, config) and
+      returnFlowCallableNodeCand(c, kind, config) and
+      p.getEnclosingCallable() = c and
+      exists(ap) and
+      // we don't expect a parameter to return stored in itself, unless explicitly allowed
+      (
+        not kind.(ParamUpdateReturnKind).getPosition() = p.getPosition()
+        or
+        p.allowParameterReturnInSelf()
+      )
+    )
+  }
+
+  pragma[nomagic]
+  predicate callMayFlowThroughRev(DataFlowCall call, Configuration config) {
+    exists(ArgNodeEx arg, boolean toReturn |
+      revFlow(arg, toReturn, config) and
+      revFlowInToReturn(call, arg, config) and
+      revFlowIsReturned(call, toReturn, config)
+    )
+  }
+
+  predicate stats(
+    boolean fwd, int nodes, int fields, int conscand, int states, int tuples, Configuration config
+  ) {
+    fwd = true and
+    nodes = count(NodeEx node | fwdFlow(node, config)) and
+    fields = count(Content f0 | fwdFlowConsCand(f0, config)) and
+    conscand = -1 and
+    states = count(FlowState state | fwdFlowState(state, config)) and
+    tuples = count(NodeEx n, boolean b | fwdFlow(n, b, config))
+    or
+    fwd = false and
+    nodes = count(NodeEx node | revFlow(node, _, config)) and
+    fields = count(Content f0 | revFlowConsCand(f0, config)) and
+    conscand = -1 and
+    states = count(FlowState state | revFlowState(state, config)) and
+    tuples = count(NodeEx n, boolean b | revFlow(n, b, config))
+  }
+  /* End: Stage 1 logic. */
+}
+
+pragma[noinline]
+private predicate localFlowStepNodeCand1(NodeEx node1, NodeEx node2, Configuration config) {
+  Stage1::revFlow(node2, config) and
+  localFlowStep(node1, node2, config)
+}
+
+pragma[noinline]
+private predicate additionalLocalFlowStepNodeCand1(NodeEx node1, NodeEx node2, Configuration config) {
+  Stage1::revFlow(node2, config) and
+  additionalLocalFlowStep(node1, node2, config)
+}
+
+pragma[nomagic]
+private predicate viableReturnPosOutNodeCand1(
+  DataFlowCall call, ReturnPosition pos, NodeEx out, Configuration config
+) {
+  Stage1::revFlow(out, config) and
+  Stage1::viableReturnPosOutNodeCandFwd1(call, pos, out, config)
+}
+
+/**
+ * Holds if data can flow out of `call` from `ret` to `out`, either
+ * through a `ReturnNode` or through an argument that has been mutated, and
+ * that this step is part of a path from a source to a sink.
+ */
+pragma[nomagic]
+private predicate flowOutOfCallNodeCand1(
+  DataFlowCall call, RetNodeEx ret, NodeEx out, Configuration config
+) {
+  viableReturnPosOutNodeCand1(call, ret.getReturnPosition(), out, config) and
+  Stage1::revFlow(ret, config) and
+  not outBarrier(ret, config) and
+  not inBarrier(out, config)
+}
+
+pragma[nomagic]
+private predicate viableParamArgNodeCand1(
+  DataFlowCall call, ParamNodeEx p, ArgNodeEx arg, Configuration config
+) {
+  Stage1::viableParamArgNodeCandFwd1(call, p, arg, config) and
+  Stage1::revFlow(arg, config)
+}
+
+/**
+ * Holds if data can flow into `call` and that this step is part of a
+ * path from a source to a sink.
+ */
+pragma[nomagic]
+private predicate flowIntoCallNodeCand1(
+  DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, Configuration config
+) {
+  viableParamArgNodeCand1(call, p, arg, config) and
+  Stage1::revFlow(p, config) and
+  not outBarrier(arg, config) and
+  not inBarrier(p, config)
+}
+
+/**
+ * Gets the amount of forward branching on the origin of a cross-call path
+ * edge in the graph of paths between sources and sinks that ignores call
+ * contexts.
+ */
+private int branch(NodeEx n1, Configuration conf) {
+  result =
+    strictcount(NodeEx n |
+      flowOutOfCallNodeCand1(_, n1, n, conf) or flowIntoCallNodeCand1(_, n1, n, conf)
+    )
+}
+
+/**
+ * Gets the amount of backward branching on the target of a cross-call path
+ * edge in the graph of paths between sources and sinks that ignores call
+ * contexts.
+ */
+private int join(NodeEx n2, Configuration conf) {
+  result =
+    strictcount(NodeEx n |
+      flowOutOfCallNodeCand1(_, n, n2, conf) or flowIntoCallNodeCand1(_, n, n2, conf)
+    )
+}
+
+/**
+ * Holds if data can flow out of `call` from `ret` to `out`, either
+ * through a `ReturnNode` or through an argument that has been mutated, and
+ * that this step is part of a path from a source to a sink. The
+ * `allowsFieldFlow` flag indicates whether the branching is within the limit
+ * specified by the configuration.
+ */
+pragma[nomagic]
+private predicate flowOutOfCallNodeCand1(
+  DataFlowCall call, RetNodeEx ret, NodeEx out, boolean allowsFieldFlow, Configuration config
+) {
+  flowOutOfCallNodeCand1(call, ret, out, config) and
+  exists(int b, int j |
+    b = branch(ret, config) and
+    j = join(out, config) and
+    if b.minimum(j) <= config.fieldFlowBranchLimit()
+    then allowsFieldFlow = true
+    else allowsFieldFlow = false
+  )
+}
+
+/**
+ * Holds if data can flow into `call` and that this step is part of a
+ * path from a source to a sink. The `allowsFieldFlow` flag indicates whether
+ * the branching is within the limit specified by the configuration.
+ */
+pragma[nomagic]
+private predicate flowIntoCallNodeCand1(
+  DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, boolean allowsFieldFlow, Configuration config
+) {
+  flowIntoCallNodeCand1(call, arg, p, config) and
+  exists(int b, int j |
+    b = branch(arg, config) and
+    j = join(p, config) and
+    if b.minimum(j) <= config.fieldFlowBranchLimit()
+    then allowsFieldFlow = true
+    else allowsFieldFlow = false
+  )
+}
+
+private signature module StageSig {
+  class Ap;
+
+  predicate revFlow(NodeEx node, Configuration config);
+
+  bindingset[node, state, config]
+  predicate revFlow(NodeEx node, FlowState state, Ap ap, Configuration config);
+
+  predicate callMayFlowThroughRev(DataFlowCall call, Configuration config);
+
+  predicate parameterMayFlowThrough(ParamNodeEx p, DataFlowCallable c, Ap ap, Configuration config);
+
+  predicate storeStepCand(
+    NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, DataFlowType contentType,
+    Configuration config
+  );
+
+  predicate readStepCand(NodeEx n1, Content c, NodeEx n2, Configuration config);
+}
+
+private module MkStage<StageSig PrevStage> {
+  class ApApprox = PrevStage::Ap;
+
+  signature module StageParam {
+    class Ap;
+
+    class ApNil extends Ap;
+
+    bindingset[result, ap]
+    ApApprox getApprox(Ap ap);
+
+    ApNil getApNil(NodeEx node);
+
+    bindingset[tc, tail]
+    Ap apCons(TypedContent tc, Ap tail);
+
+    Content getHeadContent(Ap ap);
+
+    class ApOption;
+
+    ApOption apNone();
+
+    ApOption apSome(Ap ap);
+
+    class Cc;
+
+    class CcCall extends Cc;
+
+    // TODO: member predicate on CcCall
+    predicate matchesCall(CcCall cc, DataFlowCall call);
+
+    class CcNoCall extends Cc;
+
+    Cc ccNone();
+
+    CcCall ccSomeCall();
+
+    class LocalCc;
+
+    bindingset[call, c, outercc]
+    CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc);
+
+    bindingset[call, c, innercc]
+    CcNoCall getCallContextReturn(DataFlowCallable c, DataFlowCall call, Cc innercc);
+
+    bindingset[node, cc]
+    LocalCc getLocalCc(NodeEx node, Cc cc);
+
+    bindingset[node1, state1, config]
+    bindingset[node2, state2, config]
+    predicate localStep(
+      NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+      ApNil ap, Configuration config, LocalCc lcc
+    );
+
+    predicate flowOutOfCall(
+      DataFlowCall call, RetNodeEx ret, NodeEx out, boolean allowsFieldFlow, Configuration config
+    );
+
+    predicate flowIntoCall(
+      DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, boolean allowsFieldFlow, Configuration config
+    );
+
+    bindingset[node, state, ap, config]
+    predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config);
+
+    bindingset[ap, contentType]
+    predicate typecheckStore(Ap ap, DataFlowType contentType);
+  }
+
+  module Stage<StageParam Param> implements StageSig {
+    import Param
+
+    /* Begin: Stage logic. */
+    bindingset[result, apa]
+    private ApApprox unbindApa(ApApprox apa) {
+      pragma[only_bind_out](apa) = pragma[only_bind_out](result)
+    }
+
+    pragma[nomagic]
+    private predicate flowThroughOutOfCall(
+      DataFlowCall call, CcCall ccc, RetNodeEx ret, NodeEx out, boolean allowsFieldFlow,
+      Configuration config
+    ) {
+      flowOutOfCall(call, ret, out, allowsFieldFlow, pragma[only_bind_into](config)) and
+      PrevStage::callMayFlowThroughRev(call, pragma[only_bind_into](config)) and
+      PrevStage::parameterMayFlowThrough(_, ret.getEnclosingCallable(), _,
+        pragma[only_bind_into](config)) and
+      matchesCall(ccc, call)
+    }
+
+    /**
+     * Holds if `node` is reachable with access path `ap` from a source in the
+     * configuration `config`.
+     *
+     * The call context `cc` records whether the node is reached through an
+     * argument in a call, and if so, `argAp` records the access path of that
+     * argument.
+     */
+    pragma[nomagic]
+    predicate fwdFlow(
+      NodeEx node, FlowState state, Cc cc, ApOption argAp, Ap ap, Configuration config
+    ) {
+      fwdFlow0(node, state, cc, argAp, ap, config) and
+      PrevStage::revFlow(node, state, unbindApa(getApprox(ap)), config) and
+      filter(node, state, ap, config)
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlow0(
+      NodeEx node, FlowState state, Cc cc, ApOption argAp, Ap ap, Configuration config
+    ) {
+      sourceNode(node, state, config) and
+      (if hasSourceCallCtx(config) then cc = ccSomeCall() else cc = ccNone()) and
+      argAp = apNone() and
+      ap = getApNil(node)
+      or
+      exists(NodeEx mid, FlowState state0, Ap ap0, LocalCc localCc |
+        fwdFlow(mid, state0, cc, argAp, ap0, config) and
+        localCc = getLocalCc(mid, cc)
+      |
+        localStep(mid, state0, node, state, true, _, config, localCc) and
+        ap = ap0
+        or
+        localStep(mid, state0, node, state, false, ap, config, localCc) and
+        ap0 instanceof ApNil
+      )
+      or
+      exists(NodeEx mid |
+        fwdFlow(mid, pragma[only_bind_into](state), _, _, ap, pragma[only_bind_into](config)) and
+        jumpStep(mid, node, config) and
+        cc = ccNone() and
+        argAp = apNone()
+      )
+      or
+      exists(NodeEx mid, ApNil nil |
+        fwdFlow(mid, state, _, _, nil, pragma[only_bind_into](config)) and
+        additionalJumpStep(mid, node, config) and
+        cc = ccNone() and
+        argAp = apNone() and
+        ap = getApNil(node)
+      )
+      or
+      exists(NodeEx mid, FlowState state0, ApNil nil |
+        fwdFlow(mid, state0, _, _, nil, pragma[only_bind_into](config)) and
+        additionalJumpStateStep(mid, state0, node, state, config) and
+        cc = ccNone() and
+        argAp = apNone() and
+        ap = getApNil(node)
+      )
+      or
+      // store
+      exists(TypedContent tc, Ap ap0 |
+        fwdFlowStore(_, ap0, tc, node, state, cc, argAp, config) and
+        ap = apCons(tc, ap0)
+      )
+      or
+      // read
+      exists(Ap ap0, Content c |
+        fwdFlowRead(ap0, c, _, node, state, cc, argAp, config) and
+        fwdFlowConsCand(ap0, c, ap, config)
+      )
+      or
+      // flow into a callable
+      exists(ApApprox apa |
+        fwdFlowIn(_, node, state, _, cc, _, ap, config) and
+        apa = getApprox(ap) and
+        if PrevStage::parameterMayFlowThrough(node, _, apa, config)
+        then argAp = apSome(ap)
+        else argAp = apNone()
+      )
+      or
+      // flow out of a callable
+      fwdFlowOutNotFromArg(node, state, cc, argAp, ap, config)
+      or
+      exists(DataFlowCall call, Ap argAp0 |
+        fwdFlowOutFromArg(call, node, state, argAp0, ap, config) and
+        fwdFlowIsEntered(call, cc, argAp, argAp0, config)
+      )
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowStore(
+      NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, FlowState state, Cc cc, ApOption argAp,
+      Configuration config
+    ) {
+      exists(DataFlowType contentType |
+        fwdFlow(node1, state, cc, argAp, ap1, config) and
+        PrevStage::storeStepCand(node1, unbindApa(getApprox(ap1)), tc, node2, contentType, config) and
+        typecheckStore(ap1, contentType)
+      )
+    }
+
+    /**
+     * Holds if forward flow with access path `tail` reaches a store of `c`
+     * resulting in access path `cons`.
+     */
+    pragma[nomagic]
+    private predicate fwdFlowConsCand(Ap cons, Content c, Ap tail, Configuration config) {
+      exists(TypedContent tc |
+        fwdFlowStore(_, tail, tc, _, _, _, _, config) and
+        tc.getContent() = c and
+        cons = apCons(tc, tail)
+      )
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowRead(
+      Ap ap, Content c, NodeEx node1, NodeEx node2, FlowState state, Cc cc, ApOption argAp,
+      Configuration config
+    ) {
+      fwdFlow(node1, state, cc, argAp, ap, config) and
+      PrevStage::readStepCand(node1, c, node2, config) and
+      getHeadContent(ap) = c
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowIn(
+      DataFlowCall call, ParamNodeEx p, FlowState state, Cc outercc, Cc innercc, ApOption argAp,
+      Ap ap, Configuration config
+    ) {
+      exists(ArgNodeEx arg, boolean allowsFieldFlow |
+        fwdFlow(arg, state, outercc, argAp, ap, config) and
+        flowIntoCall(call, arg, p, allowsFieldFlow, config) and
+        innercc = getCallContextCall(call, p.getEnclosingCallable(), outercc) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowOutNotFromArg(
+      NodeEx out, FlowState state, Cc ccOut, ApOption argAp, Ap ap, Configuration config
+    ) {
+      exists(
+        DataFlowCall call, RetNodeEx ret, boolean allowsFieldFlow, CcNoCall innercc,
+        DataFlowCallable inner
+      |
+        fwdFlow(ret, state, innercc, argAp, ap, config) and
+        flowOutOfCall(call, ret, out, allowsFieldFlow, config) and
+        inner = ret.getEnclosingCallable() and
+        ccOut = getCallContextReturn(inner, call, innercc) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowOutFromArg(
+      DataFlowCall call, NodeEx out, FlowState state, Ap argAp, Ap ap, Configuration config
+    ) {
+      exists(RetNodeEx ret, boolean allowsFieldFlow, CcCall ccc |
+        fwdFlow(ret, state, ccc, apSome(argAp), ap, config) and
+        flowThroughOutOfCall(call, ccc, ret, out, allowsFieldFlow, config) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    /**
+     * Holds if an argument to `call` is reached in the flow covered by `fwdFlow`
+     * and data might flow through the target callable and back out at `call`.
+     */
+    pragma[nomagic]
+    private predicate fwdFlowIsEntered(
+      DataFlowCall call, Cc cc, ApOption argAp, Ap ap, Configuration config
+    ) {
+      exists(ParamNodeEx p |
+        fwdFlowIn(call, p, _, cc, _, argAp, ap, config) and
+        PrevStage::parameterMayFlowThrough(p, _, unbindApa(getApprox(ap)), config)
+      )
+    }
+
+    pragma[nomagic]
+    private predicate storeStepFwd(
+      NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, Ap ap2, Configuration config
+    ) {
+      fwdFlowStore(node1, ap1, tc, node2, _, _, _, config) and
+      ap2 = apCons(tc, ap1) and
+      fwdFlowRead(ap2, tc.getContent(), _, _, _, _, _, config)
+    }
+
+    private predicate readStepFwd(
+      NodeEx n1, Ap ap1, Content c, NodeEx n2, Ap ap2, Configuration config
+    ) {
+      fwdFlowRead(ap1, c, n1, n2, _, _, _, config) and
+      fwdFlowConsCand(ap1, c, ap2, config)
+    }
+
+    pragma[nomagic]
+    private predicate callMayFlowThroughFwd(DataFlowCall call, Configuration config) {
+      exists(Ap argAp0, NodeEx out, FlowState state, Cc cc, ApOption argAp, Ap ap |
+        fwdFlow(out, state, pragma[only_bind_into](cc), pragma[only_bind_into](argAp), ap,
+          pragma[only_bind_into](config)) and
+        fwdFlowOutFromArg(call, out, state, argAp0, ap, config) and
+        fwdFlowIsEntered(pragma[only_bind_into](call), pragma[only_bind_into](cc),
+          pragma[only_bind_into](argAp), pragma[only_bind_into](argAp0),
+          pragma[only_bind_into](config))
+      )
+    }
+
+    pragma[nomagic]
+    private predicate flowThroughIntoCall(
+      DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, boolean allowsFieldFlow, Configuration config
+    ) {
+      flowIntoCall(call, arg, p, allowsFieldFlow, config) and
+      fwdFlow(arg, _, _, _, _, pragma[only_bind_into](config)) and
+      PrevStage::parameterMayFlowThrough(p, _, _, pragma[only_bind_into](config)) and
+      callMayFlowThroughFwd(call, pragma[only_bind_into](config))
+    }
+
+    pragma[nomagic]
+    private predicate returnNodeMayFlowThrough(
+      RetNodeEx ret, FlowState state, Ap ap, Configuration config
+    ) {
+      fwdFlow(ret, state, any(CcCall ccc), apSome(_), ap, config)
+    }
+
+    /**
+     * Holds if `node` with access path `ap` is part of a path from a source to a
+     * sink in the configuration `config`.
+     *
+     * The Boolean `toReturn` records whether the node must be returned from the
+     * enclosing callable in order to reach a sink, and if so, `returnAp` records
+     * the access path of the returned value.
+     */
+    pragma[nomagic]
+    predicate revFlow(
+      NodeEx node, FlowState state, boolean toReturn, ApOption returnAp, Ap ap, Configuration config
+    ) {
+      revFlow0(node, state, toReturn, returnAp, ap, config) and
+      fwdFlow(node, state, _, _, ap, config)
+    }
+
+    pragma[nomagic]
+    private predicate revFlow0(
+      NodeEx node, FlowState state, boolean toReturn, ApOption returnAp, Ap ap, Configuration config
+    ) {
+      fwdFlow(node, state, _, _, ap, config) and
+      sinkNode(node, state, config) and
+      (if hasSinkCallCtx(config) then toReturn = true else toReturn = false) and
+      returnAp = apNone() and
+      ap instanceof ApNil
+      or
+      exists(NodeEx mid, FlowState state0 |
+        localStep(node, state, mid, state0, true, _, config, _) and
+        revFlow(mid, state0, toReturn, returnAp, ap, config)
+      )
+      or
+      exists(NodeEx mid, FlowState state0, ApNil nil |
+        fwdFlow(node, pragma[only_bind_into](state), _, _, ap, pragma[only_bind_into](config)) and
+        localStep(node, pragma[only_bind_into](state), mid, state0, false, _, config, _) and
+        revFlow(mid, state0, toReturn, returnAp, nil, pragma[only_bind_into](config)) and
+        ap instanceof ApNil
+      )
+      or
+      exists(NodeEx mid |
+        jumpStep(node, mid, config) and
+        revFlow(mid, state, _, _, ap, config) and
+        toReturn = false and
+        returnAp = apNone()
+      )
+      or
+      exists(NodeEx mid, ApNil nil |
+        fwdFlow(node, _, _, _, ap, pragma[only_bind_into](config)) and
+        additionalJumpStep(node, mid, config) and
+        revFlow(pragma[only_bind_into](mid), state, _, _, nil, pragma[only_bind_into](config)) and
+        toReturn = false and
+        returnAp = apNone() and
+        ap instanceof ApNil
+      )
+      or
+      exists(NodeEx mid, FlowState state0, ApNil nil |
+        fwdFlow(node, _, _, _, ap, pragma[only_bind_into](config)) and
+        additionalJumpStateStep(node, state, mid, state0, config) and
+        revFlow(pragma[only_bind_into](mid), pragma[only_bind_into](state0), _, _, nil,
+          pragma[only_bind_into](config)) and
+        toReturn = false and
+        returnAp = apNone() and
+        ap instanceof ApNil
+      )
+      or
+      // store
+      exists(Ap ap0, Content c |
+        revFlowStore(ap0, c, ap, node, state, _, _, toReturn, returnAp, config) and
+        revFlowConsCand(ap0, c, ap, config)
+      )
+      or
+      // read
+      exists(NodeEx mid, Ap ap0 |
+        revFlow(mid, state, toReturn, returnAp, ap0, config) and
+        readStepFwd(node, ap, _, mid, ap0, config)
+      )
+      or
+      // flow into a callable
+      revFlowInNotToReturn(node, state, returnAp, ap, config) and
+      toReturn = false
+      or
+      exists(DataFlowCall call, Ap returnAp0 |
+        revFlowInToReturn(call, node, state, returnAp0, ap, config) and
+        revFlowIsReturned(call, toReturn, returnAp, returnAp0, config)
+      )
+      or
+      // flow out of a callable
+      revFlowOut(_, node, state, _, _, ap, config) and
+      toReturn = true and
+      if returnNodeMayFlowThrough(node, state, ap, config)
+      then returnAp = apSome(ap)
+      else returnAp = apNone()
+    }
+
+    pragma[nomagic]
+    private predicate revFlowStore(
+      Ap ap0, Content c, Ap ap, NodeEx node, FlowState state, TypedContent tc, NodeEx mid,
+      boolean toReturn, ApOption returnAp, Configuration config
+    ) {
+      revFlow(mid, state, toReturn, returnAp, ap0, config) and
+      storeStepFwd(node, ap, tc, mid, ap0, config) and
+      tc.getContent() = c
+    }
+
+    /**
+     * Holds if reverse flow with access path `tail` reaches a read of `c`
+     * resulting in access path `cons`.
+     */
+    pragma[nomagic]
+    private predicate revFlowConsCand(Ap cons, Content c, Ap tail, Configuration config) {
+      exists(NodeEx mid, Ap tail0 |
+        revFlow(mid, _, _, _, tail, config) and
+        tail = pragma[only_bind_into](tail0) and
+        readStepFwd(_, cons, c, mid, tail0, config)
+      )
+    }
+
+    pragma[nomagic]
+    private predicate revFlowOut(
+      DataFlowCall call, RetNodeEx ret, FlowState state, boolean toReturn, ApOption returnAp, Ap ap,
+      Configuration config
+    ) {
+      exists(NodeEx out, boolean allowsFieldFlow |
+        revFlow(out, state, toReturn, returnAp, ap, config) and
+        flowOutOfCall(call, ret, out, allowsFieldFlow, config) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    pragma[nomagic]
+    private predicate revFlowInNotToReturn(
+      ArgNodeEx arg, FlowState state, ApOption returnAp, Ap ap, Configuration config
+    ) {
+      exists(ParamNodeEx p, boolean allowsFieldFlow |
+        revFlow(p, state, false, returnAp, ap, config) and
+        flowIntoCall(_, arg, p, allowsFieldFlow, config) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    pragma[nomagic]
+    private predicate revFlowInToReturn(
+      DataFlowCall call, ArgNodeEx arg, FlowState state, Ap returnAp, Ap ap, Configuration config
+    ) {
+      exists(ParamNodeEx p, boolean allowsFieldFlow |
+        revFlow(p, state, true, apSome(returnAp), ap, config) and
+        flowThroughIntoCall(call, arg, p, allowsFieldFlow, config) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    /**
+     * Holds if an output from `call` is reached in the flow covered by `revFlow`
+     * and data might flow through the target callable resulting in reverse flow
+     * reaching an argument of `call`.
+     */
+    pragma[nomagic]
+    private predicate revFlowIsReturned(
+      DataFlowCall call, boolean toReturn, ApOption returnAp, Ap ap, Configuration config
+    ) {
+      exists(RetNodeEx ret, FlowState state, CcCall ccc |
+        revFlowOut(call, ret, state, toReturn, returnAp, ap, config) and
+        fwdFlow(ret, state, ccc, apSome(_), ap, config) and
+        matchesCall(ccc, call)
+      )
+    }
+
+    pragma[nomagic]
+    predicate storeStepCand(
+      NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, DataFlowType contentType,
+      Configuration config
+    ) {
+      exists(Ap ap2, Content c |
+        PrevStage::storeStepCand(node1, _, tc, node2, contentType, config) and
+        revFlowStore(ap2, c, ap1, node1, _, tc, node2, _, _, config) and
+        revFlowConsCand(ap2, c, ap1, config)
+      )
+    }
+
+    predicate readStepCand(NodeEx node1, Content c, NodeEx node2, Configuration config) {
+      exists(Ap ap1, Ap ap2 |
+        revFlow(node2, _, _, _, pragma[only_bind_into](ap2), pragma[only_bind_into](config)) and
+        readStepFwd(node1, ap1, c, node2, ap2, config) and
+        revFlowStore(ap1, c, pragma[only_bind_into](ap2), _, _, _, _, _, _,
+          pragma[only_bind_into](config))
+      )
+    }
+
+    predicate revFlow(NodeEx node, FlowState state, Configuration config) {
+      revFlow(node, state, _, _, _, config)
+    }
+
+    predicate revFlow(NodeEx node, FlowState state, Ap ap, Configuration config) {
+      revFlow(node, state, _, _, ap, config)
+    }
+
+    pragma[nomagic]
+    predicate revFlow(NodeEx node, Configuration config) { revFlow(node, _, _, _, _, config) }
+
+    // use an alias as a workaround for bad functionality-induced joins
+    pragma[nomagic]
+    predicate revFlowAlias(NodeEx node, Configuration config) { revFlow(node, _, _, _, _, config) }
+
+    // use an alias as a workaround for bad functionality-induced joins
+    pragma[nomagic]
+    predicate revFlowAlias(NodeEx node, FlowState state, Ap ap, Configuration config) {
+      revFlow(node, state, ap, config)
+    }
+
+    private predicate fwdConsCand(TypedContent tc, Ap ap, Configuration config) {
+      storeStepFwd(_, ap, tc, _, _, config)
+    }
+
+    private predicate revConsCand(TypedContent tc, Ap ap, Configuration config) {
+      storeStepCand(_, ap, tc, _, _, config)
+    }
+
+    private predicate validAp(Ap ap, Configuration config) {
+      revFlow(_, _, _, _, ap, config) and ap instanceof ApNil
+      or
+      exists(TypedContent head, Ap tail |
+        consCand(head, tail, config) and
+        ap = apCons(head, tail)
+      )
+    }
+
+    predicate consCand(TypedContent tc, Ap ap, Configuration config) {
+      revConsCand(tc, ap, config) and
+      validAp(ap, config)
+    }
+
+    pragma[noinline]
+    private predicate parameterFlow(
+      ParamNodeEx p, Ap ap, Ap ap0, DataFlowCallable c, Configuration config
+    ) {
+      revFlow(p, _, true, apSome(ap0), ap, config) and
+      c = p.getEnclosingCallable()
+    }
+
+    predicate parameterMayFlowThrough(ParamNodeEx p, DataFlowCallable c, Ap ap, Configuration config) {
+      exists(RetNodeEx ret, FlowState state, Ap ap0, ReturnKindExt kind, ParameterPosition pos |
+        parameterFlow(p, ap, ap0, c, config) and
+        c = ret.getEnclosingCallable() and
+        revFlow(pragma[only_bind_into](ret), pragma[only_bind_into](state), true, apSome(_),
+          pragma[only_bind_into](ap0), pragma[only_bind_into](config)) and
+        fwdFlow(ret, state, any(CcCall ccc), apSome(ap), ap0, config) and
+        kind = ret.getKind() and
+        p.getPosition() = pos and
+        // we don't expect a parameter to return stored in itself, unless explicitly allowed
+        (
+          not kind.(ParamUpdateReturnKind).getPosition() = pos
+          or
+          p.allowParameterReturnInSelf()
+        )
+      )
+    }
+
+    pragma[nomagic]
+    predicate callMayFlowThroughRev(DataFlowCall call, Configuration config) {
+      exists(
+        Ap returnAp0, ArgNodeEx arg, FlowState state, boolean toReturn, ApOption returnAp, Ap ap
+      |
+        revFlow(arg, state, toReturn, returnAp, ap, config) and
+        revFlowInToReturn(call, arg, state, returnAp0, ap, config) and
+        revFlowIsReturned(call, toReturn, returnAp, returnAp0, config)
+      )
+    }
+
+    predicate stats(
+      boolean fwd, int nodes, int fields, int conscand, int states, int tuples, Configuration config
+    ) {
+      fwd = true and
+      nodes = count(NodeEx node | fwdFlow(node, _, _, _, _, config)) and
+      fields = count(TypedContent f0 | fwdConsCand(f0, _, config)) and
+      conscand = count(TypedContent f0, Ap ap | fwdConsCand(f0, ap, config)) and
+      states = count(FlowState state | fwdFlow(_, state, _, _, _, config)) and
+      tuples =
+        count(NodeEx n, FlowState state, Cc cc, ApOption argAp, Ap ap |
+          fwdFlow(n, state, cc, argAp, ap, config)
+        )
+      or
+      fwd = false and
+      nodes = count(NodeEx node | revFlow(node, _, _, _, _, config)) and
+      fields = count(TypedContent f0 | consCand(f0, _, config)) and
+      conscand = count(TypedContent f0, Ap ap | consCand(f0, ap, config)) and
+      states = count(FlowState state | revFlow(_, state, _, _, _, config)) and
+      tuples =
+        count(NodeEx n, FlowState state, boolean b, ApOption retAp, Ap ap |
+          revFlow(n, state, b, retAp, ap, config)
+        )
+    }
+    /* End: Stage logic. */
+  }
+}
+
+private module BooleanCallContext {
+  class Cc extends boolean {
+    Cc() { this in [true, false] }
+  }
+
+  class CcCall extends Cc {
+    CcCall() { this = true }
+  }
+
+  /** Holds if the call context may be `call`. */
+  predicate matchesCall(CcCall cc, DataFlowCall call) { any() }
+
+  class CcNoCall extends Cc {
+    CcNoCall() { this = false }
+  }
+
+  Cc ccNone() { result = false }
+
+  CcCall ccSomeCall() { result = true }
+
+  class LocalCc = Unit;
+
+  bindingset[node, cc]
+  LocalCc getLocalCc(NodeEx node, Cc cc) { any() }
+
+  bindingset[call, c, outercc]
+  CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc) { any() }
+
+  bindingset[call, c, innercc]
+  CcNoCall getCallContextReturn(DataFlowCallable c, DataFlowCall call, Cc innercc) { any() }
+}
+
+private module Level1CallContext {
+  class Cc = CallContext;
+
+  class CcCall = CallContextCall;
+
+  pragma[inline]
+  predicate matchesCall(CcCall cc, DataFlowCall call) { cc.matchesCall(call) }
+
+  class CcNoCall = CallContextNoCall;
+
+  Cc ccNone() { result instanceof CallContextAny }
+
+  CcCall ccSomeCall() { result instanceof CallContextSomeCall }
+
+  module NoLocalCallContext {
+    class LocalCc = Unit;
+
+    bindingset[node, cc]
+    LocalCc getLocalCc(NodeEx node, Cc cc) { any() }
+
+    bindingset[call, c, outercc]
+    CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc) {
+      checkCallContextCall(outercc, call, c) and
+      if recordDataFlowCallSiteDispatch(call, c)
+      then result = TSpecificCall(call)
+      else result = TSomeCall()
+    }
+  }
+
+  module LocalCallContext {
+    class LocalCc = LocalCallContext;
+
+    bindingset[node, cc]
+    LocalCc getLocalCc(NodeEx node, Cc cc) {
+      result =
+        getLocalCallContext(pragma[only_bind_into](pragma[only_bind_out](cc)),
+          node.getEnclosingCallable())
+    }
+
+    bindingset[call, c, outercc]
+    CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc) {
+      checkCallContextCall(outercc, call, c) and
+      if recordDataFlowCallSite(call, c) then result = TSpecificCall(call) else result = TSomeCall()
+    }
+  }
+
+  bindingset[call, c, innercc]
+  CcNoCall getCallContextReturn(DataFlowCallable c, DataFlowCall call, Cc innercc) {
+    checkCallContextReturn(innercc, c, call) and
+    if reducedViableImplInReturn(c, call) then result = TReturn(c, call) else result = ccNone()
+  }
+}
+
+private module Stage2Param implements MkStage<Stage1>::StageParam {
+  private module PrevStage = Stage1;
+
+  class Ap extends boolean {
+    Ap() { this in [true, false] }
+  }
+
+  class ApNil extends Ap {
+    ApNil() { this = false }
+  }
+
+  bindingset[result, ap]
+  PrevStage::Ap getApprox(Ap ap) { any() }
+
+  ApNil getApNil(NodeEx node) { Stage1::revFlow(node, _) and exists(result) }
+
+  bindingset[tc, tail]
+  Ap apCons(TypedContent tc, Ap tail) { result = true and exists(tc) and exists(tail) }
+
+  pragma[inline]
+  Content getHeadContent(Ap ap) { exists(result) and ap = true }
+
+  class ApOption = BooleanOption;
+
+  ApOption apNone() { result = TBooleanNone() }
+
+  ApOption apSome(Ap ap) { result = TBooleanSome(ap) }
+
+  import Level1CallContext
+  import NoLocalCallContext
+
+  bindingset[node1, state1, config]
+  bindingset[node2, state2, config]
+  predicate localStep(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+    ApNil ap, Configuration config, LocalCc lcc
+  ) {
+    (
+      preservesValue = true and
+      localFlowStepNodeCand1(node1, node2, config) and
+      state1 = state2
+      or
+      preservesValue = false and
+      additionalLocalFlowStepNodeCand1(node1, node2, config) and
+      state1 = state2
+      or
+      preservesValue = false and
+      additionalLocalStateStep(node1, state1, node2, state2, config)
+    ) and
+    exists(ap) and
+    exists(lcc)
+  }
+
+  predicate flowOutOfCall = flowOutOfCallNodeCand1/5;
+
+  predicate flowIntoCall = flowIntoCallNodeCand1/5;
+
+  pragma[nomagic]
+  private predicate expectsContentCand(NodeEx node, Configuration config) {
+    exists(Content c |
+      PrevStage::revFlow(node, pragma[only_bind_into](config)) and
+      PrevStage::revFlowIsReadAndStored(c, pragma[only_bind_into](config)) and
+      expectsContentEx(node, c)
+    )
+  }
+
+  bindingset[node, state, ap, config]
+  predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config) {
+    PrevStage::revFlowState(state, pragma[only_bind_into](config)) and
+    exists(ap) and
+    not stateBarrier(node, state, config) and
+    (
+      notExpectsContent(node)
+      or
+      ap = true and
+      expectsContentCand(node, config)
+    )
+  }
+
+  bindingset[ap, contentType]
+  predicate typecheckStore(Ap ap, DataFlowType contentType) { any() }
+}
+
+private module Stage2 implements StageSig {
+  import MkStage<Stage1>::Stage<Stage2Param>
+}
+
+pragma[nomagic]
+private predicate flowOutOfCallNodeCand2(
+  DataFlowCall call, RetNodeEx node1, NodeEx node2, boolean allowsFieldFlow, Configuration config
+) {
+  flowOutOfCallNodeCand1(call, node1, node2, allowsFieldFlow, config) and
+  Stage2::revFlow(node2, pragma[only_bind_into](config)) and
+  Stage2::revFlowAlias(node1, pragma[only_bind_into](config))
+}
+
+pragma[nomagic]
+private predicate flowIntoCallNodeCand2(
+  DataFlowCall call, ArgNodeEx node1, ParamNodeEx node2, boolean allowsFieldFlow,
+  Configuration config
+) {
+  flowIntoCallNodeCand1(call, node1, node2, allowsFieldFlow, config) and
+  Stage2::revFlow(node2, pragma[only_bind_into](config)) and
+  Stage2::revFlowAlias(node1, pragma[only_bind_into](config))
+}
+
+private module LocalFlowBigStep {
+  /**
+   * A node where some checking is required, and hence the big-step relation
+   * is not allowed to step over.
+   */
+  private class FlowCheckNode extends NodeEx {
+    FlowCheckNode() {
+      castNode(this.asNode()) or
+      clearsContentCached(this.asNode(), _) or
+      expectsContentCached(this.asNode(), _)
+    }
+  }
+
+  /**
+   * Holds if `node` can be the first node in a maximal subsequence of local
+   * flow steps in a dataflow path.
+   */
+  private predicate localFlowEntry(NodeEx node, FlowState state, Configuration config) {
+    Stage2::revFlow(node, state, config) and
+    (
+      sourceNode(node, state, config)
+      or
+      jumpStep(_, node, config)
+      or
+      additionalJumpStep(_, node, config)
+      or
+      additionalJumpStateStep(_, _, node, state, config)
+      or
+      node instanceof ParamNodeEx
+      or
+      node.asNode() instanceof OutNodeExt
+      or
+      Stage2::storeStepCand(_, _, _, node, _, config)
+      or
+      Stage2::readStepCand(_, _, node, config)
+      or
+      node instanceof FlowCheckNode
+      or
+      exists(FlowState s |
+        additionalLocalStateStep(_, s, node, state, config) and
+        s != state
+      )
+    )
+  }
+
+  /**
+   * Holds if `node` can be the last node in a maximal subsequence of local
+   * flow steps in a dataflow path.
+   */
+  private predicate localFlowExit(NodeEx node, FlowState state, Configuration config) {
+    exists(NodeEx next | Stage2::revFlow(next, state, config) |
+      jumpStep(node, next, config) or
+      additionalJumpStep(node, next, config) or
+      flowIntoCallNodeCand1(_, node, next, config) or
+      flowOutOfCallNodeCand1(_, node, next, config) or
+      Stage2::storeStepCand(node, _, _, next, _, config) or
+      Stage2::readStepCand(node, _, next, config)
+    )
+    or
+    exists(NodeEx next, FlowState s | Stage2::revFlow(next, s, config) |
+      additionalJumpStateStep(node, state, next, s, config)
+      or
+      additionalLocalStateStep(node, state, next, s, config) and
+      s != state
+    )
+    or
+    Stage2::revFlow(node, state, config) and
+    node instanceof FlowCheckNode
+    or
+    sinkNode(node, state, config)
+  }
+
+  pragma[noinline]
+  private predicate additionalLocalFlowStepNodeCand2(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, Configuration config
+  ) {
+    additionalLocalFlowStepNodeCand1(node1, node2, config) and
+    state1 = state2 and
+    Stage2::revFlow(node1, pragma[only_bind_into](state1), false, pragma[only_bind_into](config)) and
+    Stage2::revFlowAlias(node2, pragma[only_bind_into](state2), false,
+      pragma[only_bind_into](config))
+    or
+    additionalLocalStateStep(node1, state1, node2, state2, config) and
+    Stage2::revFlow(node1, state1, false, pragma[only_bind_into](config)) and
+    Stage2::revFlowAlias(node2, state2, false, pragma[only_bind_into](config))
+  }
+
+  /**
+   * Holds if the local path from `node1` to `node2` is a prefix of a maximal
+   * subsequence of local flow steps in a dataflow path.
+   *
+   * This is the transitive closure of `[additional]localFlowStep` beginning
+   * at `localFlowEntry`.
+   */
+  pragma[nomagic]
+  private predicate localFlowStepPlus(
+    NodeEx node1, FlowState state, NodeEx node2, boolean preservesValue, DataFlowType t,
+    Configuration config, LocalCallContext cc
+  ) {
+    not isUnreachableInCallCached(node2.asNode(), cc.(LocalCallContextSpecificCall).getCall()) and
+    (
+      localFlowEntry(node1, pragma[only_bind_into](state), pragma[only_bind_into](config)) and
+      (
+        localFlowStepNodeCand1(node1, node2, config) and
+        preservesValue = true and
+        t = node1.getDataFlowType() and // irrelevant dummy value
+        Stage2::revFlow(node2, pragma[only_bind_into](state), pragma[only_bind_into](config))
+        or
+        additionalLocalFlowStepNodeCand2(node1, state, node2, state, config) and
+        preservesValue = false and
+        t = node2.getDataFlowType()
+      ) and
+      node1 != node2 and
+      cc.relevantFor(node1.getEnclosingCallable()) and
+      not isUnreachableInCallCached(node1.asNode(), cc.(LocalCallContextSpecificCall).getCall())
+      or
+      exists(NodeEx mid |
+        localFlowStepPlus(node1, pragma[only_bind_into](state), mid, preservesValue, t,
+          pragma[only_bind_into](config), cc) and
+        localFlowStepNodeCand1(mid, node2, config) and
+        not mid instanceof FlowCheckNode and
+        Stage2::revFlow(node2, pragma[only_bind_into](state), pragma[only_bind_into](config))
+      )
+      or
+      exists(NodeEx mid |
+        localFlowStepPlus(node1, state, mid, _, _, pragma[only_bind_into](config), cc) and
+        additionalLocalFlowStepNodeCand2(mid, state, node2, state, config) and
+        not mid instanceof FlowCheckNode and
+        preservesValue = false and
+        t = node2.getDataFlowType()
+      )
+    )
+  }
+
+  /**
+   * Holds if `node1` can step to `node2` in one or more local steps and this
+   * path can occur as a maximal subsequence of local steps in a dataflow path.
+   */
+  pragma[nomagic]
+  predicate localFlowBigStep(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+    AccessPathFrontNil apf, Configuration config, LocalCallContext callContext
+  ) {
+    localFlowStepPlus(node1, state1, node2, preservesValue, apf.getType(), config, callContext) and
+    localFlowExit(node2, state1, config) and
+    state1 = state2
+    or
+    additionalLocalFlowStepNodeCand2(node1, state1, node2, state2, config) and
+    state1 != state2 and
+    preservesValue = false and
+    apf = TFrontNil(node2.getDataFlowType()) and
+    callContext.relevantFor(node1.getEnclosingCallable()) and
+    not exists(DataFlowCall call | call = callContext.(LocalCallContextSpecificCall).getCall() |
+      isUnreachableInCallCached(node1.asNode(), call) or
+      isUnreachableInCallCached(node2.asNode(), call)
+    )
+  }
+}
+
+private import LocalFlowBigStep
+
+private module Stage3Param implements MkStage<Stage2>::StageParam {
+  private module PrevStage = Stage2;
+
+  class Ap = AccessPathFront;
+
+  class ApNil = AccessPathFrontNil;
+
+  PrevStage::Ap getApprox(Ap ap) { result = ap.toBoolNonEmpty() }
+
+  ApNil getApNil(NodeEx node) {
+    PrevStage::revFlow(node, _) and result = TFrontNil(node.getDataFlowType())
+  }
+
+  bindingset[tc, tail]
+  Ap apCons(TypedContent tc, Ap tail) { result.getHead() = tc and exists(tail) }
+
+  pragma[noinline]
+  Content getHeadContent(Ap ap) { result = ap.getHead().getContent() }
+
+  class ApOption = AccessPathFrontOption;
+
+  ApOption apNone() { result = TAccessPathFrontNone() }
+
+  ApOption apSome(Ap ap) { result = TAccessPathFrontSome(ap) }
+
+  import BooleanCallContext
+
+  predicate localStep(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+    ApNil ap, Configuration config, LocalCc lcc
+  ) {
+    localFlowBigStep(node1, state1, node2, state2, preservesValue, ap, config, _) and exists(lcc)
+  }
+
+  predicate flowOutOfCall = flowOutOfCallNodeCand2/5;
+
+  predicate flowIntoCall = flowIntoCallNodeCand2/5;
+
+  pragma[nomagic]
+  private predicate clearSet(NodeEx node, ContentSet c, Configuration config) {
+    PrevStage::revFlow(node, config) and
+    clearsContentCached(node.asNode(), c)
+  }
+
+  pragma[nomagic]
+  private predicate clearContent(NodeEx node, Content c, Configuration config) {
+    exists(ContentSet cs |
+      PrevStage::readStepCand(_, pragma[only_bind_into](c), _, pragma[only_bind_into](config)) and
+      c = cs.getAReadContent() and
+      clearSet(node, cs, pragma[only_bind_into](config))
+    )
+  }
+
+  pragma[nomagic]
+  private predicate clear(NodeEx node, Ap ap, Configuration config) {
+    clearContent(node, ap.getHead().getContent(), config)
+  }
+
+  pragma[nomagic]
+  private predicate expectsContentCand(NodeEx node, Ap ap, Configuration config) {
+    exists(Content c |
+      PrevStage::revFlow(node, pragma[only_bind_into](config)) and
+      PrevStage::readStepCand(_, c, _, pragma[only_bind_into](config)) and
+      expectsContentEx(node, c) and
+      c = ap.getHead().getContent()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate castingNodeEx(NodeEx node) { node.asNode() instanceof CastingNode }
+
+  bindingset[node, state, ap, config]
+  predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config) {
+    exists(state) and
+    exists(config) and
+    not clear(node, ap, config) and
+    (if castingNodeEx(node) then compatibleTypes(node.getDataFlowType(), ap.getType()) else any()) and
+    (
+      notExpectsContent(node)
+      or
+      expectsContentCand(node, ap, config)
+    )
+  }
+
+  bindingset[ap, contentType]
+  predicate typecheckStore(Ap ap, DataFlowType contentType) {
+    // We need to typecheck stores here, since reverse flow through a getter
+    // might have a different type here compared to inside the getter.
+    compatibleTypes(ap.getType(), contentType)
+  }
+}
+
+private module Stage3 implements StageSig {
+  import MkStage<Stage2>::Stage<Stage3Param>
+}
+
+/**
+ * Holds if `argApf` is recorded as the summary context for flow reaching `node`
+ * and remains relevant for the following pruning stage.
+ */
+private predicate flowCandSummaryCtx(
+  NodeEx node, FlowState state, AccessPathFront argApf, Configuration config
+) {
+  exists(AccessPathFront apf |
+    Stage3::revFlow(node, state, true, _, apf, config) and
+    Stage3::fwdFlow(node, state, any(Stage3::CcCall ccc), TAccessPathFrontSome(argApf), apf, config)
+  )
+}
+
+/**
+ * Holds if a length 2 access path approximation with the head `tc` is expected
+ * to be expensive.
+ */
+private predicate expensiveLen2unfolding(TypedContent tc, Configuration config) {
+  exists(int tails, int nodes, int apLimit, int tupleLimit |
+    tails = strictcount(AccessPathFront apf | Stage3::consCand(tc, apf, config)) and
+    nodes =
+      strictcount(NodeEx n, FlowState state |
+        Stage3::revFlow(n, state, any(AccessPathFrontHead apf | apf.getHead() = tc), config)
+        or
+        flowCandSummaryCtx(n, state, any(AccessPathFrontHead apf | apf.getHead() = tc), config)
+      ) and
+    accessPathApproxCostLimits(apLimit, tupleLimit) and
+    apLimit < tails and
+    tupleLimit < (tails - 1) * nodes and
+    not tc.forceHighPrecision()
+  )
+}
+
+private newtype TAccessPathApprox =
+  TNil(DataFlowType t) or
+  TConsNil(TypedContent tc, DataFlowType t) {
+    Stage3::consCand(tc, TFrontNil(t), _) and
+    not expensiveLen2unfolding(tc, _)
+  } or
+  TConsCons(TypedContent tc1, TypedContent tc2, int len) {
+    Stage3::consCand(tc1, TFrontHead(tc2), _) and
+    len in [2 .. accessPathLimit()] and
+    not expensiveLen2unfolding(tc1, _)
+  } or
+  TCons1(TypedContent tc, int len) {
+    len in [1 .. accessPathLimit()] and
+    expensiveLen2unfolding(tc, _)
+  }
+
+/**
+ * Conceptually a list of `TypedContent`s followed by a `DataFlowType`, but only
+ * the first two elements of the list and its length are tracked. If data flows
+ * from a source to a given node with a given `AccessPathApprox`, this indicates
+ * the sequence of dereference operations needed to get from the value in the node
+ * to the tracked object. The final type indicates the type of the tracked object.
+ */
+abstract private class AccessPathApprox extends TAccessPathApprox {
+  abstract string toString();
+
+  abstract TypedContent getHead();
+
+  abstract int len();
+
+  abstract DataFlowType getType();
+
+  abstract AccessPathFront getFront();
+
+  /** Gets the access path obtained by popping `head` from this path, if any. */
+  abstract AccessPathApprox pop(TypedContent head);
+}
+
+private class AccessPathApproxNil extends AccessPathApprox, TNil {
+  private DataFlowType t;
+
+  AccessPathApproxNil() { this = TNil(t) }
+
+  override string toString() { result = concat(": " + ppReprType(t)) }
+
+  override TypedContent getHead() { none() }
+
+  override int len() { result = 0 }
+
+  override DataFlowType getType() { result = t }
+
+  override AccessPathFront getFront() { result = TFrontNil(t) }
+
+  override AccessPathApprox pop(TypedContent head) { none() }
+}
+
+abstract private class AccessPathApproxCons extends AccessPathApprox { }
+
+private class AccessPathApproxConsNil extends AccessPathApproxCons, TConsNil {
+  private TypedContent tc;
+  private DataFlowType t;
+
+  AccessPathApproxConsNil() { this = TConsNil(tc, t) }
+
+  override string toString() {
+    // The `concat` becomes "" if `ppReprType` has no result.
+    result = "[" + tc.toString() + "]" + concat(" : " + ppReprType(t))
+  }
+
+  override TypedContent getHead() { result = tc }
+
+  override int len() { result = 1 }
+
+  override DataFlowType getType() { result = tc.getContainerType() }
+
+  override AccessPathFront getFront() { result = TFrontHead(tc) }
+
+  override AccessPathApprox pop(TypedContent head) { head = tc and result = TNil(t) }
+}
+
+private class AccessPathApproxConsCons extends AccessPathApproxCons, TConsCons {
+  private TypedContent tc1;
+  private TypedContent tc2;
+  private int len;
+
+  AccessPathApproxConsCons() { this = TConsCons(tc1, tc2, len) }
+
+  override string toString() {
+    if len = 2
+    then result = "[" + tc1.toString() + ", " + tc2.toString() + "]"
+    else result = "[" + tc1.toString() + ", " + tc2.toString() + ", ... (" + len.toString() + ")]"
+  }
+
+  override TypedContent getHead() { result = tc1 }
+
+  override int len() { result = len }
+
+  override DataFlowType getType() { result = tc1.getContainerType() }
+
+  override AccessPathFront getFront() { result = TFrontHead(tc1) }
+
+  override AccessPathApprox pop(TypedContent head) {
+    head = tc1 and
+    (
+      result = TConsCons(tc2, _, len - 1)
+      or
+      len = 2 and
+      result = TConsNil(tc2, _)
+      or
+      result = TCons1(tc2, len - 1)
+    )
+  }
+}
+
+private class AccessPathApproxCons1 extends AccessPathApproxCons, TCons1 {
+  private TypedContent tc;
+  private int len;
+
+  AccessPathApproxCons1() { this = TCons1(tc, len) }
+
+  override string toString() {
+    if len = 1
+    then result = "[" + tc.toString() + "]"
+    else result = "[" + tc.toString() + ", ... (" + len.toString() + ")]"
+  }
+
+  override TypedContent getHead() { result = tc }
+
+  override int len() { result = len }
+
+  override DataFlowType getType() { result = tc.getContainerType() }
+
+  override AccessPathFront getFront() { result = TFrontHead(tc) }
+
+  override AccessPathApprox pop(TypedContent head) {
+    head = tc and
+    (
+      exists(TypedContent tc2 | Stage3::consCand(tc, TFrontHead(tc2), _) |
+        result = TConsCons(tc2, _, len - 1)
+        or
+        len = 2 and
+        result = TConsNil(tc2, _)
+        or
+        result = TCons1(tc2, len - 1)
+      )
+      or
+      exists(DataFlowType t |
+        len = 1 and
+        Stage3::consCand(tc, TFrontNil(t), _) and
+        result = TNil(t)
+      )
+    )
+  }
+}
+
+/** Gets the access path obtained by popping `tc` from `ap`, if any. */
+private AccessPathApprox pop(TypedContent tc, AccessPathApprox apa) { result = apa.pop(tc) }
+
+/** Gets the access path obtained by pushing `tc` onto `ap`. */
+private AccessPathApprox push(TypedContent tc, AccessPathApprox apa) { apa = pop(tc, result) }
+
+private newtype TAccessPathApproxOption =
+  TAccessPathApproxNone() or
+  TAccessPathApproxSome(AccessPathApprox apa)
+
+private class AccessPathApproxOption extends TAccessPathApproxOption {
+  string toString() {
+    this = TAccessPathApproxNone() and result = "<none>"
+    or
+    this = TAccessPathApproxSome(any(AccessPathApprox apa | result = apa.toString()))
+  }
+}
+
+private module Stage4Param implements MkStage<Stage3>::StageParam {
+  private module PrevStage = Stage3;
+
+  class Ap = AccessPathApprox;
+
+  class ApNil = AccessPathApproxNil;
+
+  PrevStage::Ap getApprox(Ap ap) { result = ap.getFront() }
+
+  ApNil getApNil(NodeEx node) {
+    PrevStage::revFlow(node, _) and result = TNil(node.getDataFlowType())
+  }
+
+  bindingset[tc, tail]
+  Ap apCons(TypedContent tc, Ap tail) { result = push(tc, tail) }
+
+  pragma[noinline]
+  Content getHeadContent(Ap ap) { result = ap.getHead().getContent() }
+
+  class ApOption = AccessPathApproxOption;
+
+  ApOption apNone() { result = TAccessPathApproxNone() }
+
+  ApOption apSome(Ap ap) { result = TAccessPathApproxSome(ap) }
+
+  import Level1CallContext
+  import LocalCallContext
+
+  predicate localStep(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+    ApNil ap, Configuration config, LocalCc lcc
+  ) {
+    localFlowBigStep(node1, state1, node2, state2, preservesValue, ap.getFront(), config, lcc)
+  }
+
+  pragma[nomagic]
+  predicate flowOutOfCall(
+    DataFlowCall call, RetNodeEx node1, NodeEx node2, boolean allowsFieldFlow, Configuration config
+  ) {
+    exists(FlowState state |
+      flowOutOfCallNodeCand2(call, node1, node2, allowsFieldFlow, config) and
+      PrevStage::revFlow(node2, pragma[only_bind_into](state), _, pragma[only_bind_into](config)) and
+      PrevStage::revFlowAlias(node1, pragma[only_bind_into](state), _,
+        pragma[only_bind_into](config))
+    )
+  }
+
+  pragma[nomagic]
+  predicate flowIntoCall(
+    DataFlowCall call, ArgNodeEx node1, ParamNodeEx node2, boolean allowsFieldFlow,
+    Configuration config
+  ) {
+    exists(FlowState state |
+      flowIntoCallNodeCand2(call, node1, node2, allowsFieldFlow, config) and
+      PrevStage::revFlow(node2, pragma[only_bind_into](state), _, pragma[only_bind_into](config)) and
+      PrevStage::revFlowAlias(node1, pragma[only_bind_into](state), _,
+        pragma[only_bind_into](config))
+    )
+  }
+
+  bindingset[node, state, ap, config]
+  predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config) { any() }
+
+  // Type checking is not necessary here as it has already been done in stage 3.
+  bindingset[ap, contentType]
+  predicate typecheckStore(Ap ap, DataFlowType contentType) { any() }
+}
+
+private module Stage4 = MkStage<Stage3>::Stage<Stage4Param>;
+
+bindingset[conf, result]
+private Configuration unbindConf(Configuration conf) {
+  exists(Configuration c | result = pragma[only_bind_into](c) and conf = pragma[only_bind_into](c))
+}
+
+pragma[nomagic]
+private predicate nodeMayUseSummary0(
+  NodeEx n, DataFlowCallable c, FlowState state, AccessPathApprox apa, Configuration config
+) {
+  exists(AccessPathApprox apa0 |
+    Stage4::parameterMayFlowThrough(_, c, _, _) and
+    Stage4::revFlow(n, state, true, _, apa0, config) and
+    Stage4::fwdFlow(n, state, any(CallContextCall ccc), TAccessPathApproxSome(apa), apa0, config) and
+    n.getEnclosingCallable() = c
+  )
+}
+
+pragma[nomagic]
+private predicate nodeMayUseSummary(
+  NodeEx n, FlowState state, AccessPathApprox apa, Configuration config
+) {
+  exists(DataFlowCallable c |
+    Stage4::parameterMayFlowThrough(_, c, apa, config) and
+    nodeMayUseSummary0(n, c, state, apa, config)
+  )
+}
+
+private newtype TSummaryCtx =
+  TSummaryCtxNone() or
+  TSummaryCtxSome(ParamNodeEx p, FlowState state, AccessPath ap) {
+    exists(Configuration config |
+      Stage4::parameterMayFlowThrough(p, _, ap.getApprox(), config) and
+      Stage4::revFlow(p, state, _, config)
+    )
+  }
+
+/**
+ * A context for generating flow summaries. This represents flow entry through
+ * a specific parameter with an access path of a specific shape.
+ *
+ * Summaries are only created for parameters that may flow through.
+ */
+abstract private class SummaryCtx extends TSummaryCtx {
+  abstract string toString();
+}
+
+/** A summary context from which no flow summary can be generated. */
+private class SummaryCtxNone extends SummaryCtx, TSummaryCtxNone {
+  override string toString() { result = "<none>" }
+}
+
+/** A summary context from which a flow summary can be generated. */
+private class SummaryCtxSome extends SummaryCtx, TSummaryCtxSome {
+  private ParamNodeEx p;
+  private FlowState s;
+  private AccessPath ap;
+
+  SummaryCtxSome() { this = TSummaryCtxSome(p, s, ap) }
+
+  ParameterPosition getParameterPos() { p.isParameterOf(_, result) }
+
+  ParamNodeEx getParamNode() { result = p }
+
+  override string toString() { result = p + ": " + ap }
+
+  predicate hasLocationInfo(
+    string filepath, int startline, int startcolumn, int endline, int endcolumn
+  ) {
+    p.hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+  }
+}
+
+/**
+ * Gets the number of length 2 access path approximations that correspond to `apa`.
+ */
+private int count1to2unfold(AccessPathApproxCons1 apa, Configuration config) {
+  exists(TypedContent tc, int len |
+    tc = apa.getHead() and
+    len = apa.len() and
+    result =
+      strictcount(AccessPathFront apf |
+        Stage4::consCand(tc, any(AccessPathApprox ap | ap.getFront() = apf and ap.len() = len - 1),
+          config)
+      )
+  )
+}
+
+private int countNodesUsingAccessPath(AccessPathApprox apa, Configuration config) {
+  result =
+    strictcount(NodeEx n, FlowState state |
+      Stage4::revFlow(n, state, apa, config) or nodeMayUseSummary(n, state, apa, config)
+    )
+}
+
+/**
+ * Holds if a length 2 access path approximation matching `apa` is expected
+ * to be expensive.
+ */
+private predicate expensiveLen1to2unfolding(AccessPathApproxCons1 apa, Configuration config) {
+  exists(int aps, int nodes, int apLimit, int tupleLimit |
+    aps = count1to2unfold(apa, config) and
+    nodes = countNodesUsingAccessPath(apa, config) and
+    accessPathCostLimits(apLimit, tupleLimit) and
+    apLimit < aps and
+    tupleLimit < (aps - 1) * nodes
+  )
+}
+
+private AccessPathApprox getATail(AccessPathApprox apa, Configuration config) {
+  exists(TypedContent head |
+    apa.pop(head) = result and
+    Stage4::consCand(head, result, config)
+  )
+}
+
+/**
+ * Holds with `unfold = false` if a precise head-tail representation of `apa` is
+ * expected to be expensive. Holds with `unfold = true` otherwise.
+ */
+private predicate evalUnfold(AccessPathApprox apa, boolean unfold, Configuration config) {
+  if apa.getHead().forceHighPrecision()
+  then unfold = true
+  else
+    exists(int aps, int nodes, int apLimit, int tupleLimit |
+      aps = countPotentialAps(apa, config) and
+      nodes = countNodesUsingAccessPath(apa, config) and
+      accessPathCostLimits(apLimit, tupleLimit) and
+      if apLimit < aps and tupleLimit < (aps - 1) * nodes then unfold = false else unfold = true
+    )
+}
+
+/**
+ * Gets the number of `AccessPath`s that correspond to `apa`.
+ */
+private int countAps(AccessPathApprox apa, Configuration config) {
+  evalUnfold(apa, false, config) and
+  result = 1 and
+  (not apa instanceof AccessPathApproxCons1 or expensiveLen1to2unfolding(apa, config))
+  or
+  evalUnfold(apa, false, config) and
+  result = count1to2unfold(apa, config) and
+  not expensiveLen1to2unfolding(apa, config)
+  or
+  evalUnfold(apa, true, config) and
+  result = countPotentialAps(apa, config)
+}
+
+/**
+ * Gets the number of `AccessPath`s that would correspond to `apa` assuming
+ * that it is expanded to a precise head-tail representation.
+ */
+language[monotonicAggregates]
+private int countPotentialAps(AccessPathApprox apa, Configuration config) {
+  apa instanceof AccessPathApproxNil and result = 1
+  or
+  result = strictsum(AccessPathApprox tail | tail = getATail(apa, config) | countAps(tail, config))
+}
+
+private newtype TAccessPath =
+  TAccessPathNil(DataFlowType t) or
+  TAccessPathCons(TypedContent head, AccessPath tail) {
+    exists(AccessPathApproxCons apa |
+      not evalUnfold(apa, false, _) and
+      head = apa.getHead() and
+      tail.getApprox() = getATail(apa, _)
+    )
+  } or
+  TAccessPathCons2(TypedContent head1, TypedContent head2, int len) {
+    exists(AccessPathApproxCons apa |
+      evalUnfold(apa, false, _) and
+      not expensiveLen1to2unfolding(apa, _) and
+      apa.len() = len and
+      head1 = apa.getHead() and
+      head2 = getATail(apa, _).getHead()
+    )
+  } or
+  TAccessPathCons1(TypedContent head, int len) {
+    exists(AccessPathApproxCons apa |
+      evalUnfold(apa, false, _) and
+      expensiveLen1to2unfolding(apa, _) and
+      apa.len() = len and
+      head = apa.getHead()
+    )
+  }
+
+private newtype TPathNode =
+  TPathNodeMid(
+    NodeEx node, FlowState state, CallContext cc, SummaryCtx sc, AccessPath ap, Configuration config
+  ) {
+    // A PathNode is introduced by a source ...
+    Stage4::revFlow(node, state, config) and
+    sourceNode(node, state, config) and
+    (
+      if hasSourceCallCtx(config)
+      then cc instanceof CallContextSomeCall
+      else cc instanceof CallContextAny
+    ) and
+    sc instanceof SummaryCtxNone and
+    ap = TAccessPathNil(node.getDataFlowType())
+    or
+    // ... or a step from an existing PathNode to another node.
+    exists(PathNodeMid mid |
+      pathStep(mid, node, state, cc, sc, ap) and
+      pragma[only_bind_into](config) = mid.getConfiguration() and
+      Stage4::revFlow(node, state, ap.getApprox(), pragma[only_bind_into](config))
+    )
+  } or
+  TPathNodeSink(NodeEx node, FlowState state, Configuration config) {
+    exists(PathNodeMid sink |
+      sink.isAtSink() and
+      node = sink.getNodeEx() and
+      state = sink.getState() and
+      config = sink.getConfiguration()
+    )
+  }
+
+/**
+ * A list of `TypedContent`s followed by a `DataFlowType`. If data flows from a
+ * source to a given node with a given `AccessPath`, this indicates the sequence
+ * of dereference operations needed to get from the value in the node to the
+ * tracked object. The final type indicates the type of the tracked object.
+ */
+private class AccessPath extends TAccessPath {
+  /** Gets the head of this access path, if any. */
+  abstract TypedContent getHead();
+
+  /** Gets the tail of this access path, if any. */
+  abstract AccessPath getTail();
+
+  /** Gets the front of this access path. */
+  abstract AccessPathFront getFront();
+
+  /** Gets the approximation of this access path. */
+  abstract AccessPathApprox getApprox();
+
+  /** Gets the length of this access path. */
+  abstract int length();
+
+  /** Gets a textual representation of this access path. */
+  abstract string toString();
+
+  /** Gets the access path obtained by popping `tc` from this access path, if any. */
+  final AccessPath pop(TypedContent tc) {
+    result = this.getTail() and
+    tc = this.getHead()
+  }
+
+  /** Gets the access path obtained by pushing `tc` onto this access path. */
+  final AccessPath push(TypedContent tc) { this = result.pop(tc) }
+}
+
+private class AccessPathNil extends AccessPath, TAccessPathNil {
+  private DataFlowType t;
+
+  AccessPathNil() { this = TAccessPathNil(t) }
+
+  DataFlowType getType() { result = t }
+
+  override TypedContent getHead() { none() }
+
+  override AccessPath getTail() { none() }
+
+  override AccessPathFrontNil getFront() { result = TFrontNil(t) }
+
+  override AccessPathApproxNil getApprox() { result = TNil(t) }
+
+  override int length() { result = 0 }
+
+  override string toString() { result = concat(": " + ppReprType(t)) }
+}
+
+private class AccessPathCons extends AccessPath, TAccessPathCons {
+  private TypedContent head;
+  private AccessPath tail;
+
+  AccessPathCons() { this = TAccessPathCons(head, tail) }
+
+  override TypedContent getHead() { result = head }
+
+  override AccessPath getTail() { result = tail }
+
+  override AccessPathFrontHead getFront() { result = TFrontHead(head) }
+
+  override AccessPathApproxCons getApprox() {
+    result = TConsNil(head, tail.(AccessPathNil).getType())
+    or
+    result = TConsCons(head, tail.getHead(), this.length())
+    or
+    result = TCons1(head, this.length())
+  }
+
+  override int length() { result = 1 + tail.length() }
+
+  private string toStringImpl(boolean needsSuffix) {
+    exists(DataFlowType t |
+      tail = TAccessPathNil(t) and
+      needsSuffix = false and
+      result = head.toString() + "]" + concat(" : " + ppReprType(t))
+    )
+    or
+    result = head + ", " + tail.(AccessPathCons).toStringImpl(needsSuffix)
+    or
+    exists(TypedContent tc2, TypedContent tc3, int len | tail = TAccessPathCons2(tc2, tc3, len) |
+      result = head + ", " + tc2 + ", " + tc3 + ", ... (" and len > 2 and needsSuffix = true
+      or
+      result = head + ", " + tc2 + ", " + tc3 + "]" and len = 2 and needsSuffix = false
+    )
+    or
+    exists(TypedContent tc2, int len | tail = TAccessPathCons1(tc2, len) |
+      result = head + ", " + tc2 + ", ... (" and len > 1 and needsSuffix = true
+      or
+      result = head + ", " + tc2 + "]" and len = 1 and needsSuffix = false
+    )
+  }
+
+  override string toString() {
+    result = "[" + this.toStringImpl(true) + this.length().toString() + ")]"
+    or
+    result = "[" + this.toStringImpl(false)
+  }
+}
+
+private class AccessPathCons2 extends AccessPath, TAccessPathCons2 {
+  private TypedContent head1;
+  private TypedContent head2;
+  private int len;
+
+  AccessPathCons2() { this = TAccessPathCons2(head1, head2, len) }
+
+  override TypedContent getHead() { result = head1 }
+
+  override AccessPath getTail() {
+    Stage4::consCand(head1, result.getApprox(), _) and
+    result.getHead() = head2 and
+    result.length() = len - 1
+  }
+
+  override AccessPathFrontHead getFront() { result = TFrontHead(head1) }
+
+  override AccessPathApproxCons getApprox() {
+    result = TConsCons(head1, head2, len) or
+    result = TCons1(head1, len)
+  }
+
+  override int length() { result = len }
+
+  override string toString() {
+    if len = 2
+    then result = "[" + head1.toString() + ", " + head2.toString() + "]"
+    else
+      result = "[" + head1.toString() + ", " + head2.toString() + ", ... (" + len.toString() + ")]"
+  }
+}
+
+private class AccessPathCons1 extends AccessPath, TAccessPathCons1 {
+  private TypedContent head;
+  private int len;
+
+  AccessPathCons1() { this = TAccessPathCons1(head, len) }
+
+  override TypedContent getHead() { result = head }
+
+  override AccessPath getTail() {
+    Stage4::consCand(head, result.getApprox(), _) and result.length() = len - 1
+  }
+
+  override AccessPathFrontHead getFront() { result = TFrontHead(head) }
+
+  override AccessPathApproxCons getApprox() { result = TCons1(head, len) }
+
+  override int length() { result = len }
+
+  override string toString() {
+    if len = 1
+    then result = "[" + head.toString() + "]"
+    else result = "[" + head.toString() + ", ... (" + len.toString() + ")]"
+  }
+}
+
+/**
+ * A `Node` augmented with a call context (except for sinks), an access path, and a configuration.
+ * Only those `PathNode`s that are reachable from a source are generated.
+ */
+class PathNode extends TPathNode {
+  /** Gets a textual representation of this element. */
+  string toString() { none() }
+
+  /**
+   * Gets a textual representation of this element, including a textual
+   * representation of the call context.
+   */
+  string toStringWithContext() { none() }
+
+  /**
+   * Holds if this element is at the specified location.
+   * The location spans column `startcolumn` of line `startline` to
+   * column `endcolumn` of line `endline` in file `filepath`.
+   * For more information, see
+   * [Locations](https://codeql.github.com/docs/writing-codeql-queries/providing-locations-in-codeql-queries/).
+   */
+  predicate hasLocationInfo(
+    string filepath, int startline, int startcolumn, int endline, int endcolumn
+  ) {
+    none()
+  }
+
+  /** Gets the underlying `Node`. */
+  final Node getNode() { this.(PathNodeImpl).getNodeEx().projectToNode() = result }
+
+  /** Gets the `FlowState` of this node. */
+  FlowState getState() { none() }
+
+  /** Gets the associated configuration. */
+  Configuration getConfiguration() { none() }
+
+  /** Gets a successor of this node, if any. */
+  final PathNode getASuccessor() {
+    result = this.(PathNodeImpl).getANonHiddenSuccessor() and
+    reach(this) and
+    reach(result)
+  }
+
+  /** Holds if this node is a source. */
+  predicate isSource() { none() }
+}
+
+abstract private class PathNodeImpl extends PathNode {
+  abstract PathNodeImpl getASuccessorImpl();
+
+  private PathNodeImpl getASuccessorIfHidden() {
+    this.isHidden() and
+    result = this.getASuccessorImpl()
+  }
+
+  final PathNodeImpl getANonHiddenSuccessor() {
+    result = this.getASuccessorImpl().getASuccessorIfHidden*() and
+    not this.isHidden() and
+    not result.isHidden()
+  }
+
+  abstract NodeEx getNodeEx();
+
+  predicate isHidden() {
+    not this.getConfiguration().includeHiddenNodes() and
+    (
+      hiddenNode(this.getNodeEx().asNode()) and
+      not this.isSource() and
+      not this instanceof PathNodeSink
+      or
+      this.getNodeEx() instanceof TNodeImplicitRead
+    )
+  }
+
+  private string ppAp() {
+    this instanceof PathNodeSink and result = ""
+    or
+    exists(string s | s = this.(PathNodeMid).getAp().toString() |
+      if s = "" then result = "" else result = " " + s
+    )
+  }
+
+  private string ppCtx() {
+    this instanceof PathNodeSink and result = ""
+    or
+    result = " <" + this.(PathNodeMid).getCallContext().toString() + ">"
+  }
+
+  override string toString() { result = this.getNodeEx().toString() + this.ppAp() }
+
+  override string toStringWithContext() {
+    result = this.getNodeEx().toString() + this.ppAp() + this.ppCtx()
+  }
+
+  override predicate hasLocationInfo(
+    string filepath, int startline, int startcolumn, int endline, int endcolumn
+  ) {
+    this.getNodeEx().hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+  }
+}
+
+/** Holds if `n` can reach a sink. */
+private predicate directReach(PathNodeImpl n) {
+  n instanceof PathNodeSink or directReach(n.getANonHiddenSuccessor())
+}
+
+/** Holds if `n` can reach a sink or is used in a subpath that can reach a sink. */
+private predicate reach(PathNode n) { directReach(n) or Subpaths::retReach(n) }
+
+/** Holds if `n1.getASuccessor() = n2` and `n2` can reach a sink. */
+private predicate pathSucc(PathNodeImpl n1, PathNode n2) {
+  n1.getANonHiddenSuccessor() = n2 and directReach(n2)
+}
+
+private predicate pathSuccPlus(PathNode n1, PathNode n2) = fastTC(pathSucc/2)(n1, n2)
+
+/**
+ * Provides the query predicates needed to include a graph in a path-problem query.
+ */
+module PathGraph {
+  /** Holds if `(a,b)` is an edge in the graph of data flow path explanations. */
+  query predicate edges(PathNode a, PathNode b) { a.getASuccessor() = b }
+
+  /** Holds if `n` is a node in the graph of data flow path explanations. */
+  query predicate nodes(PathNode n, string key, string val) {
+    reach(n) and key = "semmle.label" and val = n.toString()
+  }
+
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple, that is, flow through
+   * a subpath between `par` and `ret` with the connecting edges `arg -> par` and
+   * `ret -> out` is summarized as the edge `arg -> out`.
+   */
+  query predicate subpaths(PathNode arg, PathNode par, PathNode ret, PathNode out) {
+    Subpaths::subpaths(arg, par, ret, out) and
+    reach(arg) and
+    reach(par) and
+    reach(ret) and
+    reach(out)
+  }
+}
+
+/**
+ * An intermediate flow graph node. This is a triple consisting of a `Node`,
+ * a `CallContext`, and a `Configuration`.
+ */
+private class PathNodeMid extends PathNodeImpl, TPathNodeMid {
+  NodeEx node;
+  FlowState state;
+  CallContext cc;
+  SummaryCtx sc;
+  AccessPath ap;
+  Configuration config;
+
+  PathNodeMid() { this = TPathNodeMid(node, state, cc, sc, ap, config) }
+
+  override NodeEx getNodeEx() { result = node }
+
+  override FlowState getState() { result = state }
+
+  CallContext getCallContext() { result = cc }
+
+  SummaryCtx getSummaryCtx() { result = sc }
+
+  AccessPath getAp() { result = ap }
+
+  override Configuration getConfiguration() { result = config }
+
+  private PathNodeMid getSuccMid() {
+    pathStep(this, result.getNodeEx(), result.getState(), result.getCallContext(),
+      result.getSummaryCtx(), result.getAp()) and
+    result.getConfiguration() = unbindConf(this.getConfiguration())
+  }
+
+  override PathNodeImpl getASuccessorImpl() {
+    // an intermediate step to another intermediate node
+    result = this.getSuccMid()
+    or
+    // a final step to a sink
+    result = this.getSuccMid().projectToSink()
+  }
+
+  override predicate isSource() {
+    sourceNode(node, state, config) and
+    (
+      if hasSourceCallCtx(config)
+      then cc instanceof CallContextSomeCall
+      else cc instanceof CallContextAny
+    ) and
+    sc instanceof SummaryCtxNone and
+    ap = TAccessPathNil(node.getDataFlowType())
+  }
+
+  predicate isAtSink() {
+    sinkNode(node, state, config) and
+    ap instanceof AccessPathNil and
+    if hasSinkCallCtx(config)
+    then
+      // For `FeatureHasSinkCallContext` the condition `cc instanceof CallContextNoCall`
+      // is exactly what we need to check. This also implies
+      // `sc instanceof SummaryCtxNone`.
+      // For `FeatureEqualSourceSinkCallContext` the initial call context was
+      // set to `CallContextSomeCall` and jumps are disallowed, so
+      // `cc instanceof CallContextNoCall` never holds. On the other hand,
+      // in this case there's never any need to enter a call except to identify
+      // a summary, so the condition in `pathIntoCallable` enforces this, which
+      // means that `sc instanceof SummaryCtxNone` holds if and only if we are
+      // in the call context of the source.
+      sc instanceof SummaryCtxNone or
+      cc instanceof CallContextNoCall
+    else any()
+  }
+
+  PathNodeSink projectToSink() {
+    this.isAtSink() and
+    result.getNodeEx() = node and
+    result.getState() = state and
+    result.getConfiguration() = unbindConf(config)
+  }
+}
+
+/**
+ * A flow graph node corresponding to a sink. This is disjoint from the
+ * intermediate nodes in order to uniquely correspond to a given sink by
+ * excluding the `CallContext`.
+ */
+private class PathNodeSink extends PathNodeImpl, TPathNodeSink {
+  NodeEx node;
+  FlowState state;
+  Configuration config;
+
+  PathNodeSink() { this = TPathNodeSink(node, state, config) }
+
+  override NodeEx getNodeEx() { result = node }
+
+  override FlowState getState() { result = state }
+
+  override Configuration getConfiguration() { result = config }
+
+  override PathNodeImpl getASuccessorImpl() { none() }
+
+  override predicate isSource() { sourceNode(node, state, config) }
+}
+
+private predicate pathNode(
+  PathNodeMid mid, NodeEx midnode, FlowState state, CallContext cc, SummaryCtx sc, AccessPath ap,
+  Configuration conf, LocalCallContext localCC
+) {
+  midnode = mid.getNodeEx() and
+  state = mid.getState() and
+  conf = mid.getConfiguration() and
+  cc = mid.getCallContext() and
+  sc = mid.getSummaryCtx() and
+  localCC =
+    getLocalCallContext(pragma[only_bind_into](pragma[only_bind_out](cc)),
+      midnode.getEnclosingCallable()) and
+  ap = mid.getAp()
+}
+
+/**
+ * Holds if data may flow from `mid` to `node`. The last step in or out of
+ * a callable is recorded by `cc`.
+ */
+pragma[nomagic]
+private predicate pathStep(
+  PathNodeMid mid, NodeEx node, FlowState state, CallContext cc, SummaryCtx sc, AccessPath ap
+) {
+  exists(NodeEx midnode, FlowState state0, Configuration conf, LocalCallContext localCC |
+    pathNode(mid, midnode, state0, cc, sc, ap, conf, localCC) and
+    localFlowBigStep(midnode, state0, node, state, true, _, conf, localCC)
+  )
+  or
+  exists(
+    AccessPath ap0, NodeEx midnode, FlowState state0, Configuration conf, LocalCallContext localCC
+  |
+    pathNode(mid, midnode, state0, cc, sc, ap0, conf, localCC) and
+    localFlowBigStep(midnode, state0, node, state, false, ap.getFront(), conf, localCC) and
+    ap0 instanceof AccessPathNil
+  )
+  or
+  jumpStep(mid.getNodeEx(), node, mid.getConfiguration()) and
+  state = mid.getState() and
+  cc instanceof CallContextAny and
+  sc instanceof SummaryCtxNone and
+  ap = mid.getAp()
+  or
+  additionalJumpStep(mid.getNodeEx(), node, mid.getConfiguration()) and
+  state = mid.getState() and
+  cc instanceof CallContextAny and
+  sc instanceof SummaryCtxNone and
+  mid.getAp() instanceof AccessPathNil and
+  ap = TAccessPathNil(node.getDataFlowType())
+  or
+  additionalJumpStateStep(mid.getNodeEx(), mid.getState(), node, state, mid.getConfiguration()) and
+  cc instanceof CallContextAny and
+  sc instanceof SummaryCtxNone and
+  mid.getAp() instanceof AccessPathNil and
+  ap = TAccessPathNil(node.getDataFlowType())
+  or
+  exists(TypedContent tc | pathStoreStep(mid, node, state, ap.pop(tc), tc, cc)) and
+  sc = mid.getSummaryCtx()
+  or
+  exists(TypedContent tc | pathReadStep(mid, node, state, ap.push(tc), tc, cc)) and
+  sc = mid.getSummaryCtx()
+  or
+  pathIntoCallable(mid, node, state, _, cc, sc, _, _) and ap = mid.getAp()
+  or
+  pathOutOfCallable(mid, node, state, cc) and ap = mid.getAp() and sc instanceof SummaryCtxNone
+  or
+  pathThroughCallable(mid, node, state, cc, ap) and sc = mid.getSummaryCtx()
+}
+
+pragma[nomagic]
+private predicate pathReadStep(
+  PathNodeMid mid, NodeEx node, FlowState state, AccessPath ap0, TypedContent tc, CallContext cc
+) {
+  ap0 = mid.getAp() and
+  tc = ap0.getHead() and
+  Stage4::readStepCand(mid.getNodeEx(), tc.getContent(), node, mid.getConfiguration()) and
+  state = mid.getState() and
+  cc = mid.getCallContext()
+}
+
+pragma[nomagic]
+private predicate pathStoreStep(
+  PathNodeMid mid, NodeEx node, FlowState state, AccessPath ap0, TypedContent tc, CallContext cc
+) {
+  ap0 = mid.getAp() and
+  Stage4::storeStepCand(mid.getNodeEx(), _, tc, node, _, mid.getConfiguration()) and
+  state = mid.getState() and
+  cc = mid.getCallContext()
+}
+
+private predicate pathOutOfCallable0(
+  PathNodeMid mid, ReturnPosition pos, FlowState state, CallContext innercc, AccessPathApprox apa,
+  Configuration config
+) {
+  pos = mid.getNodeEx().(RetNodeEx).getReturnPosition() and
+  state = mid.getState() and
+  innercc = mid.getCallContext() and
+  innercc instanceof CallContextNoCall and
+  apa = mid.getAp().getApprox() and
+  config = mid.getConfiguration()
+}
+
+pragma[nomagic]
+private predicate pathOutOfCallable1(
+  PathNodeMid mid, DataFlowCall call, ReturnKindExt kind, FlowState state, CallContext cc,
+  AccessPathApprox apa, Configuration config
+) {
+  exists(ReturnPosition pos, DataFlowCallable c, CallContext innercc |
+    pathOutOfCallable0(mid, pos, state, innercc, apa, config) and
+    c = pos.getCallable() and
+    kind = pos.getKind() and
+    resolveReturn(innercc, c, call)
+  |
+    if reducedViableImplInReturn(c, call) then cc = TReturn(c, call) else cc = TAnyCallContext()
+  )
+}
+
+pragma[noinline]
+private NodeEx getAnOutNodeFlow(
+  ReturnKindExt kind, DataFlowCall call, AccessPathApprox apa, Configuration config
+) {
+  result.asNode() = kind.getAnOutNode(call) and
+  Stage4::revFlow(result, _, apa, config)
+}
+
+/**
+ * Holds if data may flow from `mid` to `out`. The last step of this path
+ * is a return from a callable and is recorded by `cc`, if needed.
+ */
+pragma[noinline]
+private predicate pathOutOfCallable(PathNodeMid mid, NodeEx out, FlowState state, CallContext cc) {
+  exists(ReturnKindExt kind, DataFlowCall call, AccessPathApprox apa, Configuration config |
+    pathOutOfCallable1(mid, call, kind, state, cc, apa, config) and
+    out = getAnOutNodeFlow(kind, call, apa, config)
+  )
+}
+
+/**
+ * Holds if data may flow from `mid` to the `i`th argument of `call` in `cc`.
+ */
+pragma[noinline]
+private predicate pathIntoArg(
+  PathNodeMid mid, ParameterPosition ppos, FlowState state, CallContext cc, DataFlowCall call,
+  AccessPath ap, AccessPathApprox apa, Configuration config
+) {
+  exists(ArgNodeEx arg, ArgumentPosition apos |
+    pathNode(mid, arg, state, cc, _, ap, config, _) and
+    arg.asNode().(ArgNode).argumentOf(call, apos) and
+    apa = ap.getApprox() and
+    parameterMatch(ppos, apos)
+  )
+}
+
+pragma[nomagic]
+private predicate parameterCand(
+  DataFlowCallable callable, ParameterPosition pos, AccessPathApprox apa, Configuration config
+) {
+  exists(ParamNodeEx p |
+    Stage4::revFlow(p, _, apa, config) and
+    p.isParameterOf(callable, pos)
+  )
+}
+
+pragma[nomagic]
+private predicate pathIntoCallable0(
+  PathNodeMid mid, DataFlowCallable callable, ParameterPosition pos, FlowState state,
+  CallContext outercc, DataFlowCall call, AccessPath ap, Configuration config
+) {
+  exists(AccessPathApprox apa |
+    pathIntoArg(mid, pragma[only_bind_into](pos), state, outercc, call, ap,
+      pragma[only_bind_into](apa), pragma[only_bind_into](config)) and
+    callable = resolveCall(call, outercc) and
+    parameterCand(callable, pragma[only_bind_into](pos), pragma[only_bind_into](apa),
+      pragma[only_bind_into](config))
+  )
+}
+
+/**
+ * Holds if data may flow from `mid` to `p` through `call`. The contexts
+ * before and after entering the callable are `outercc` and `innercc`,
+ * respectively.
+ */
+pragma[nomagic]
+private predicate pathIntoCallable(
+  PathNodeMid mid, ParamNodeEx p, FlowState state, CallContext outercc, CallContextCall innercc,
+  SummaryCtx sc, DataFlowCall call, Configuration config
+) {
+  exists(ParameterPosition pos, DataFlowCallable callable, AccessPath ap |
+    pathIntoCallable0(mid, callable, pos, state, outercc, call, ap, config) and
+    p.isParameterOf(callable, pos) and
+    (
+      sc = TSummaryCtxSome(p, state, ap)
+      or
+      not exists(TSummaryCtxSome(p, state, ap)) and
+      sc = TSummaryCtxNone() and
+      // When the call contexts of source and sink needs to match then there's
+      // never any reason to enter a callable except to find a summary. See also
+      // the comment in `PathNodeMid::isAtSink`.
+      not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext
+    )
+  |
+    if recordDataFlowCallSite(call, callable)
+    then innercc = TSpecificCall(call)
+    else innercc = TSomeCall()
+  )
+}
+
+/** Holds if data may flow from a parameter given by `sc` to a return of kind `kind`. */
+pragma[nomagic]
+private predicate paramFlowsThrough(
+  ReturnKindExt kind, FlowState state, CallContextCall cc, SummaryCtxSome sc, AccessPath ap,
+  AccessPathApprox apa, Configuration config
+) {
+  exists(PathNodeMid mid, RetNodeEx ret, ParameterPosition pos |
+    pathNode(mid, ret, state, cc, sc, ap, config, _) and
+    kind = ret.getKind() and
+    apa = ap.getApprox() and
+    pos = sc.getParameterPos() and
+    // we don't expect a parameter to return stored in itself, unless explicitly allowed
+    (
+      not kind.(ParamUpdateReturnKind).getPosition() = pos
+      or
+      sc.getParamNode().allowParameterReturnInSelf()
+    )
+  )
+}
+
+pragma[nomagic]
+private predicate pathThroughCallable0(
+  DataFlowCall call, PathNodeMid mid, ReturnKindExt kind, FlowState state, CallContext cc,
+  AccessPath ap, AccessPathApprox apa, Configuration config
+) {
+  exists(CallContext innercc, SummaryCtx sc |
+    pathIntoCallable(mid, _, _, cc, innercc, sc, call, config) and
+    paramFlowsThrough(kind, state, innercc, sc, ap, apa, config)
+  )
+}
+
+/**
+ * Holds if data may flow from `mid` through a callable to the node `out`.
+ * The context `cc` is restored to its value prior to entering the callable.
+ */
+pragma[noinline]
+private predicate pathThroughCallable(
+  PathNodeMid mid, NodeEx out, FlowState state, CallContext cc, AccessPath ap
+) {
+  exists(DataFlowCall call, ReturnKindExt kind, AccessPathApprox apa, Configuration config |
+    pathThroughCallable0(call, mid, kind, state, cc, ap, apa, config) and
+    out = getAnOutNodeFlow(kind, call, apa, config)
+  )
+}
+
+private module Subpaths {
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple and `ret` is determined by
+   * `kind`, `sc`, `apout`, and `innercc`.
+   */
+  pragma[nomagic]
+  private predicate subpaths01(
+    PathNodeImpl arg, ParamNodeEx par, SummaryCtxSome sc, CallContext innercc, ReturnKindExt kind,
+    NodeEx out, FlowState sout, AccessPath apout
+  ) {
+    exists(Configuration config |
+      pathThroughCallable(arg, out, pragma[only_bind_into](sout), _, pragma[only_bind_into](apout)) and
+      pathIntoCallable(arg, par, _, _, innercc, sc, _, config) and
+      paramFlowsThrough(kind, pragma[only_bind_into](sout), innercc, sc,
+        pragma[only_bind_into](apout), _, unbindConf(config)) and
+      not arg.isHidden()
+    )
+  }
+
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple and `ret` is determined by
+   * `kind`, `sc`, `sout`, `apout`, and `innercc`.
+   */
+  pragma[nomagic]
+  private predicate subpaths02(
+    PathNode arg, ParamNodeEx par, SummaryCtxSome sc, CallContext innercc, ReturnKindExt kind,
+    NodeEx out, FlowState sout, AccessPath apout
+  ) {
+    subpaths01(arg, par, sc, innercc, kind, out, sout, apout) and
+    out.asNode() = kind.getAnOutNode(_)
+  }
+
+  pragma[nomagic]
+  private Configuration getPathNodeConf(PathNode n) { result = n.getConfiguration() }
+
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple.
+   */
+  pragma[nomagic]
+  private predicate subpaths03(
+    PathNode arg, ParamNodeEx par, PathNodeMid ret, NodeEx out, FlowState sout, AccessPath apout
+  ) {
+    exists(SummaryCtxSome sc, CallContext innercc, ReturnKindExt kind, RetNodeEx retnode |
+      subpaths02(arg, par, sc, innercc, kind, out, sout, apout) and
+      pathNode(ret, retnode, sout, innercc, sc, apout, unbindConf(getPathNodeConf(arg)), _) and
+      kind = retnode.getKind()
+    )
+  }
+
+  private PathNodeImpl localStepToHidden(PathNodeImpl n) {
+    n.getASuccessorImpl() = result and
+    result.isHidden() and
+    exists(NodeEx n1, NodeEx n2 | n1 = n.getNodeEx() and n2 = result.getNodeEx() |
+      localFlowBigStep(n1, _, n2, _, _, _, _, _) or
+      store(n1, _, n2, _, _) or
+      readSet(n1, _, n2, _)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate hasSuccessor(PathNodeImpl pred, PathNodeMid succ, NodeEx succNode) {
+    succ = pred.getANonHiddenSuccessor() and
+    succNode = succ.getNodeEx()
+  }
+
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple, that is, flow through
+   * a subpath between `par` and `ret` with the connecting edges `arg -> par` and
+   * `ret -> out` is summarized as the edge `arg -> out`.
+   */
+  predicate subpaths(PathNodeImpl arg, PathNodeImpl par, PathNodeImpl ret, PathNode out) {
+    exists(ParamNodeEx p, NodeEx o, FlowState sout, AccessPath apout, PathNodeMid out0 |
+      pragma[only_bind_into](arg).getANonHiddenSuccessor() = pragma[only_bind_into](out0) and
+      subpaths03(pragma[only_bind_into](arg), p, localStepToHidden*(ret), o, sout, apout) and
+      hasSuccessor(pragma[only_bind_into](arg), par, p) and
+      not ret.isHidden() and
+      pathNode(out0, o, sout, _, _, apout, _, _)
+    |
+      out = out0 or out = out0.projectToSink()
+    )
+  }
+
+  /**
+   * Holds if `n` can reach a return node in a summarized subpath that can reach a sink.
+   */
+  predicate retReach(PathNodeImpl n) {
+    exists(PathNode out | subpaths(_, _, n, out) | directReach(out) or retReach(out))
+    or
+    exists(PathNodeImpl mid |
+      retReach(mid) and
+      n.getANonHiddenSuccessor() = mid and
+      not subpaths(_, mid, _, _)
+    )
+  }
+}
+
+/**
+ * Holds if data can flow (inter-procedurally) from `source` to `sink`.
+ *
+ * Will only have results if `configuration` has non-empty sources and
+ * sinks.
+ */
+private predicate flowsTo(
+  PathNode flowsource, PathNodeSink flowsink, Node source, Node sink, Configuration configuration
+) {
+  flowsource.isSource() and
+  flowsource.getConfiguration() = configuration and
+  flowsource.(PathNodeImpl).getNodeEx().asNode() = source and
+  (flowsource = flowsink or pathSuccPlus(flowsource, flowsink)) and
+  flowsink.getNodeEx().asNode() = sink
+}
+
+/**
+ * Holds if data can flow (inter-procedurally) from `source` to `sink`.
+ *
+ * Will only have results if `configuration` has non-empty sources and
+ * sinks.
+ */
+predicate flowsTo(Node source, Node sink, Configuration configuration) {
+  flowsTo(_, _, source, sink, configuration)
+}
+
+private predicate finalStats(
+  boolean fwd, int nodes, int fields, int conscand, int states, int tuples
+) {
+  fwd = true and
+  nodes = count(NodeEx n0 | exists(PathNodeImpl pn | pn.getNodeEx() = n0)) and
+  fields = count(TypedContent f0 | exists(PathNodeMid pn | pn.getAp().getHead() = f0)) and
+  conscand = count(AccessPath ap | exists(PathNodeMid pn | pn.getAp() = ap)) and
+  states = count(FlowState state | exists(PathNodeMid pn | pn.getState() = state)) and
+  tuples = count(PathNode pn)
+  or
+  fwd = false and
+  nodes = count(NodeEx n0 | exists(PathNodeImpl pn | pn.getNodeEx() = n0 and reach(pn))) and
+  fields = count(TypedContent f0 | exists(PathNodeMid pn | pn.getAp().getHead() = f0 and reach(pn))) and
+  conscand = count(AccessPath ap | exists(PathNodeMid pn | pn.getAp() = ap and reach(pn))) and
+  states = count(FlowState state | exists(PathNodeMid pn | pn.getState() = state and reach(pn))) and
+  tuples = count(PathNode pn | reach(pn))
+}
+
+/**
+ * INTERNAL: Only for debugging.
+ *
+ * Calculates per-stage metrics for data flow.
+ */
+predicate stageStats(
+  int n, string stage, int nodes, int fields, int conscand, int states, int tuples,
+  Configuration config
+) {
+  stage = "1 Fwd" and
+  n = 10 and
+  Stage1::stats(true, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "1 Rev" and
+  n = 15 and
+  Stage1::stats(false, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "2 Fwd" and
+  n = 20 and
+  Stage2::stats(true, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "2 Rev" and
+  n = 25 and
+  Stage2::stats(false, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "3 Fwd" and
+  n = 30 and
+  Stage3::stats(true, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "3 Rev" and
+  n = 35 and
+  Stage3::stats(false, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "4 Fwd" and
+  n = 40 and
+  Stage4::stats(true, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "4 Rev" and
+  n = 45 and
+  Stage4::stats(false, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "5 Fwd" and n = 50 and finalStats(true, nodes, fields, conscand, states, tuples)
+  or
+  stage = "5 Rev" and n = 55 and finalStats(false, nodes, fields, conscand, states, tuples)
+}
+
+private module FlowExploration {
+  private predicate callableStep(DataFlowCallable c1, DataFlowCallable c2, Configuration config) {
+    exists(NodeEx node1, NodeEx node2 |
+      jumpStep(node1, node2, config)
+      or
+      additionalJumpStep(node1, node2, config)
+      or
+      additionalJumpStateStep(node1, _, node2, _, config)
+      or
+      // flow into callable
+      viableParamArgEx(_, node2, node1)
+      or
+      // flow out of a callable
+      viableReturnPosOutEx(_, node1.(RetNodeEx).getReturnPosition(), node2)
+    |
+      c1 = node1.getEnclosingCallable() and
+      c2 = node2.getEnclosingCallable() and
+      c1 != c2
+    )
+  }
+
+  private predicate interestingCallableSrc(DataFlowCallable c, Configuration config) {
+    exists(Node n | config.isSource(n) or config.isSource(n, _) | c = getNodeEnclosingCallable(n))
+    or
+    exists(DataFlowCallable mid |
+      interestingCallableSrc(mid, config) and callableStep(mid, c, config)
+    )
+  }
+
+  private predicate interestingCallableSink(DataFlowCallable c, Configuration config) {
+    exists(Node n | config.isSink(n) or config.isSink(n, _) | c = getNodeEnclosingCallable(n))
+    or
+    exists(DataFlowCallable mid |
+      interestingCallableSink(mid, config) and callableStep(c, mid, config)
+    )
+  }
+
+  private newtype TCallableExt =
+    TCallable(DataFlowCallable c, Configuration config) {
+      interestingCallableSrc(c, config) or
+      interestingCallableSink(c, config)
+    } or
+    TCallableSrc() or
+    TCallableSink()
+
+  private predicate callableExtSrc(TCallableSrc src) { any() }
+
+  private predicate callableExtSink(TCallableSink sink) { any() }
+
+  private predicate callableExtStepFwd(TCallableExt ce1, TCallableExt ce2) {
+    exists(DataFlowCallable c1, DataFlowCallable c2, Configuration config |
+      callableStep(c1, c2, config) and
+      ce1 = TCallable(c1, pragma[only_bind_into](config)) and
+      ce2 = TCallable(c2, pragma[only_bind_into](config))
+    )
+    or
+    exists(Node n, Configuration config |
+      ce1 = TCallableSrc() and
+      (config.isSource(n) or config.isSource(n, _)) and
+      ce2 = TCallable(getNodeEnclosingCallable(n), config)
+    )
+    or
+    exists(Node n, Configuration config |
+      ce2 = TCallableSink() and
+      (config.isSink(n) or config.isSink(n, _)) and
+      ce1 = TCallable(getNodeEnclosingCallable(n), config)
+    )
+  }
+
+  private predicate callableExtStepRev(TCallableExt ce1, TCallableExt ce2) {
+    callableExtStepFwd(ce2, ce1)
+  }
+
+  private int distSrcExt(TCallableExt c) =
+    shortestDistances(callableExtSrc/1, callableExtStepFwd/2)(_, c, result)
+
+  private int distSinkExt(TCallableExt c) =
+    shortestDistances(callableExtSink/1, callableExtStepRev/2)(_, c, result)
+
+  private int distSrc(DataFlowCallable c, Configuration config) {
+    result = distSrcExt(TCallable(c, config)) - 1
+  }
+
+  private int distSink(DataFlowCallable c, Configuration config) {
+    result = distSinkExt(TCallable(c, config)) - 1
+  }
+
+  private newtype TPartialAccessPath =
+    TPartialNil(DataFlowType t) or
+    TPartialCons(TypedContent tc, int len) { len in [1 .. accessPathLimit()] }
+
+  /**
+   * Conceptually a list of `TypedContent`s followed by a `Type`, but only the first
+   * element of the list and its length are tracked. If data flows from a source to
+   * a given node with a given `AccessPath`, this indicates the sequence of
+   * dereference operations needed to get from the value in the node to the
+   * tracked object. The final type indicates the type of the tracked object.
+   */
+  private class PartialAccessPath extends TPartialAccessPath {
+    abstract string toString();
+
+    TypedContent getHead() { this = TPartialCons(result, _) }
+
+    int len() {
+      this = TPartialNil(_) and result = 0
+      or
+      this = TPartialCons(_, result)
+    }
+
+    DataFlowType getType() {
+      this = TPartialNil(result)
+      or
+      exists(TypedContent head | this = TPartialCons(head, _) | result = head.getContainerType())
+    }
+  }
+
+  private class PartialAccessPathNil extends PartialAccessPath, TPartialNil {
+    override string toString() {
+      exists(DataFlowType t | this = TPartialNil(t) | result = concat(": " + ppReprType(t)))
+    }
+  }
+
+  private class PartialAccessPathCons extends PartialAccessPath, TPartialCons {
+    override string toString() {
+      exists(TypedContent tc, int len | this = TPartialCons(tc, len) |
+        if len = 1
+        then result = "[" + tc.toString() + "]"
+        else result = "[" + tc.toString() + ", ... (" + len.toString() + ")]"
+      )
+    }
+  }
+
+  private newtype TRevPartialAccessPath =
+    TRevPartialNil() or
+    TRevPartialCons(Content c, int len) { len in [1 .. accessPathLimit()] }
+
+  /**
+   * Conceptually a list of `Content`s, but only the first
+   * element of the list and its length are tracked.
+   */
+  private class RevPartialAccessPath extends TRevPartialAccessPath {
+    abstract string toString();
+
+    Content getHead() { this = TRevPartialCons(result, _) }
+
+    int len() {
+      this = TRevPartialNil() and result = 0
+      or
+      this = TRevPartialCons(_, result)
+    }
+  }
+
+  private class RevPartialAccessPathNil extends RevPartialAccessPath, TRevPartialNil {
+    override string toString() { result = "" }
+  }
+
+  private class RevPartialAccessPathCons extends RevPartialAccessPath, TRevPartialCons {
+    override string toString() {
+      exists(Content c, int len | this = TRevPartialCons(c, len) |
+        if len = 1
+        then result = "[" + c.toString() + "]"
+        else result = "[" + c.toString() + ", ... (" + len.toString() + ")]"
+      )
+    }
+  }
+
+  private predicate relevantState(FlowState state) {
+    sourceNode(_, state, _) or
+    sinkNode(_, state, _) or
+    additionalLocalStateStep(_, state, _, _, _) or
+    additionalLocalStateStep(_, _, _, state, _) or
+    additionalJumpStateStep(_, state, _, _, _) or
+    additionalJumpStateStep(_, _, _, state, _)
+  }
+
+  private newtype TSummaryCtx1 =
+    TSummaryCtx1None() or
+    TSummaryCtx1Param(ParamNodeEx p)
+
+  private newtype TSummaryCtx2 =
+    TSummaryCtx2None() or
+    TSummaryCtx2Some(FlowState s) { relevantState(s) }
+
+  private newtype TSummaryCtx3 =
+    TSummaryCtx3None() or
+    TSummaryCtx3Some(PartialAccessPath ap)
+
+  private newtype TRevSummaryCtx1 =
+    TRevSummaryCtx1None() or
+    TRevSummaryCtx1Some(ReturnPosition pos)
+
+  private newtype TRevSummaryCtx2 =
+    TRevSummaryCtx2None() or
+    TRevSummaryCtx2Some(FlowState s) { relevantState(s) }
+
+  private newtype TRevSummaryCtx3 =
+    TRevSummaryCtx3None() or
+    TRevSummaryCtx3Some(RevPartialAccessPath ap)
+
+  private newtype TPartialPathNode =
+    TPartialPathNodeFwd(
+      NodeEx node, FlowState state, CallContext cc, TSummaryCtx1 sc1, TSummaryCtx2 sc2,
+      TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config
+    ) {
+      sourceNode(node, state, config) and
+      cc instanceof CallContextAny and
+      sc1 = TSummaryCtx1None() and
+      sc2 = TSummaryCtx2None() and
+      sc3 = TSummaryCtx3None() and
+      ap = TPartialNil(node.getDataFlowType()) and
+      exists(config.explorationLimit())
+      or
+      partialPathNodeMk0(node, state, cc, sc1, sc2, sc3, ap, config) and
+      distSrc(node.getEnclosingCallable(), config) <= config.explorationLimit()
+    } or
+    TPartialPathNodeRev(
+      NodeEx node, FlowState state, TRevSummaryCtx1 sc1, TRevSummaryCtx2 sc2, TRevSummaryCtx3 sc3,
+      RevPartialAccessPath ap, Configuration config
+    ) {
+      sinkNode(node, state, config) and
+      sc1 = TRevSummaryCtx1None() and
+      sc2 = TRevSummaryCtx2None() and
+      sc3 = TRevSummaryCtx3None() and
+      ap = TRevPartialNil() and
+      exists(config.explorationLimit())
+      or
+      exists(PartialPathNodeRev mid |
+        revPartialPathStep(mid, node, state, sc1, sc2, sc3, ap, config) and
+        not clearsContentEx(node, ap.getHead()) and
+        (
+          notExpectsContent(node) or
+          expectsContentEx(node, ap.getHead())
+        ) and
+        not fullBarrier(node, config) and
+        not stateBarrier(node, state, config) and
+        distSink(node.getEnclosingCallable(), config) <= config.explorationLimit()
+      )
+    }
+
+  pragma[nomagic]
+  private predicate partialPathNodeMk0(
+    NodeEx node, FlowState state, CallContext cc, TSummaryCtx1 sc1, TSummaryCtx2 sc2,
+    TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config
+  ) {
+    exists(PartialPathNodeFwd mid |
+      partialPathStep(mid, node, state, cc, sc1, sc2, sc3, ap, config) and
+      not fullBarrier(node, config) and
+      not stateBarrier(node, state, config) and
+      not clearsContentEx(node, ap.getHead().getContent()) and
+      (
+        notExpectsContent(node) or
+        expectsContentEx(node, ap.getHead().getContent())
+      ) and
+      if node.asNode() instanceof CastingNode
+      then compatibleTypes(node.getDataFlowType(), ap.getType())
+      else any()
+    )
+  }
+
+  /**
+   * A `Node` augmented with a call context, an access path, and a configuration.
+   */
+  class PartialPathNode extends TPartialPathNode {
+    /** Gets a textual representation of this element. */
+    string toString() { result = this.getNodeEx().toString() + this.ppAp() }
+
+    /**
+     * Gets a textual representation of this element, including a textual
+     * representation of the call context.
+     */
+    string toStringWithContext() {
+      result = this.getNodeEx().toString() + this.ppAp() + this.ppCtx()
+    }
+
+    /**
+     * Holds if this element is at the specified location.
+     * The location spans column `startcolumn` of line `startline` to
+     * column `endcolumn` of line `endline` in file `filepath`.
+     * For more information, see
+     * [Locations](https://codeql.github.com/docs/writing-codeql-queries/providing-locations-in-codeql-queries/).
+     */
+    predicate hasLocationInfo(
+      string filepath, int startline, int startcolumn, int endline, int endcolumn
+    ) {
+      this.getNodeEx().hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+    }
+
+    /** Gets the underlying `Node`. */
+    final Node getNode() { this.getNodeEx().projectToNode() = result }
+
+    FlowState getState() { none() }
+
+    private NodeEx getNodeEx() {
+      result = this.(PartialPathNodeFwd).getNodeEx() or
+      result = this.(PartialPathNodeRev).getNodeEx()
+    }
+
+    /** Gets the associated configuration. */
+    Configuration getConfiguration() { none() }
+
+    /** Gets a successor of this node, if any. */
+    PartialPathNode getASuccessor() { none() }
+
+    /**
+     * Gets the approximate distance to the nearest source measured in number
+     * of interprocedural steps.
+     */
+    int getSourceDistance() {
+      result = distSrc(this.getNodeEx().getEnclosingCallable(), this.getConfiguration())
+    }
+
+    /**
+     * Gets the approximate distance to the nearest sink measured in number
+     * of interprocedural steps.
+     */
+    int getSinkDistance() {
+      result = distSink(this.getNodeEx().getEnclosingCallable(), this.getConfiguration())
+    }
+
+    private string ppAp() {
+      exists(string s |
+        s = this.(PartialPathNodeFwd).getAp().toString() or
+        s = this.(PartialPathNodeRev).getAp().toString()
+      |
+        if s = "" then result = "" else result = " " + s
+      )
+    }
+
+    private string ppCtx() {
+      result = " <" + this.(PartialPathNodeFwd).getCallContext().toString() + ">"
+    }
+
+    /** Holds if this is a source in a forward-flow path. */
+    predicate isFwdSource() { this.(PartialPathNodeFwd).isSource() }
+
+    /** Holds if this is a sink in a reverse-flow path. */
+    predicate isRevSink() { this.(PartialPathNodeRev).isSink() }
+  }
+
+  /**
+   * Provides the query predicates needed to include a graph in a path-problem query.
+   */
+  module PartialPathGraph {
+    /** Holds if `(a,b)` is an edge in the graph of data flow path explanations. */
+    query predicate edges(PartialPathNode a, PartialPathNode b) { a.getASuccessor() = b }
+  }
+
+  private class PartialPathNodeFwd extends PartialPathNode, TPartialPathNodeFwd {
+    NodeEx node;
+    FlowState state;
+    CallContext cc;
+    TSummaryCtx1 sc1;
+    TSummaryCtx2 sc2;
+    TSummaryCtx3 sc3;
+    PartialAccessPath ap;
+    Configuration config;
+
+    PartialPathNodeFwd() { this = TPartialPathNodeFwd(node, state, cc, sc1, sc2, sc3, ap, config) }
+
+    NodeEx getNodeEx() { result = node }
+
+    override FlowState getState() { result = state }
+
+    CallContext getCallContext() { result = cc }
+
+    TSummaryCtx1 getSummaryCtx1() { result = sc1 }
+
+    TSummaryCtx2 getSummaryCtx2() { result = sc2 }
+
+    TSummaryCtx3 getSummaryCtx3() { result = sc3 }
+
+    PartialAccessPath getAp() { result = ap }
+
+    override Configuration getConfiguration() { result = config }
+
+    override PartialPathNodeFwd getASuccessor() {
+      partialPathStep(this, result.getNodeEx(), result.getState(), result.getCallContext(),
+        result.getSummaryCtx1(), result.getSummaryCtx2(), result.getSummaryCtx3(), result.getAp(),
+        result.getConfiguration())
+    }
+
+    predicate isSource() {
+      sourceNode(node, state, config) and
+      cc instanceof CallContextAny and
+      sc1 = TSummaryCtx1None() and
+      sc2 = TSummaryCtx2None() and
+      sc3 = TSummaryCtx3None() and
+      ap instanceof TPartialNil
+    }
+  }
+
+  private class PartialPathNodeRev extends PartialPathNode, TPartialPathNodeRev {
+    NodeEx node;
+    FlowState state;
+    TRevSummaryCtx1 sc1;
+    TRevSummaryCtx2 sc2;
+    TRevSummaryCtx3 sc3;
+    RevPartialAccessPath ap;
+    Configuration config;
+
+    PartialPathNodeRev() { this = TPartialPathNodeRev(node, state, sc1, sc2, sc3, ap, config) }
+
+    NodeEx getNodeEx() { result = node }
+
+    override FlowState getState() { result = state }
+
+    TRevSummaryCtx1 getSummaryCtx1() { result = sc1 }
+
+    TRevSummaryCtx2 getSummaryCtx2() { result = sc2 }
+
+    TRevSummaryCtx3 getSummaryCtx3() { result = sc3 }
+
+    RevPartialAccessPath getAp() { result = ap }
+
+    override Configuration getConfiguration() { result = config }
+
+    override PartialPathNodeRev getASuccessor() {
+      revPartialPathStep(result, this.getNodeEx(), this.getState(), this.getSummaryCtx1(),
+        this.getSummaryCtx2(), this.getSummaryCtx3(), this.getAp(), this.getConfiguration())
+    }
+
+    predicate isSink() {
+      sinkNode(node, state, config) and
+      sc1 = TRevSummaryCtx1None() and
+      sc2 = TRevSummaryCtx2None() and
+      sc3 = TRevSummaryCtx3None() and
+      ap = TRevPartialNil()
+    }
+  }
+
+  private predicate partialPathStep(
+    PartialPathNodeFwd mid, NodeEx node, FlowState state, CallContext cc, TSummaryCtx1 sc1,
+    TSummaryCtx2 sc2, TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config
+  ) {
+    not isUnreachableInCallCached(node.asNode(), cc.(CallContextSpecificCall).getCall()) and
+    (
+      localFlowStep(mid.getNodeEx(), node, config) and
+      state = mid.getState() and
+      cc = mid.getCallContext() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      ap = mid.getAp() and
+      config = mid.getConfiguration()
+      or
+      additionalLocalFlowStep(mid.getNodeEx(), node, config) and
+      state = mid.getState() and
+      cc = mid.getCallContext() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      mid.getAp() instanceof PartialAccessPathNil and
+      ap = TPartialNil(node.getDataFlowType()) and
+      config = mid.getConfiguration()
+      or
+      additionalLocalStateStep(mid.getNodeEx(), mid.getState(), node, state, config) and
+      cc = mid.getCallContext() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      mid.getAp() instanceof PartialAccessPathNil and
+      ap = TPartialNil(node.getDataFlowType()) and
+      config = mid.getConfiguration()
+    )
+    or
+    jumpStep(mid.getNodeEx(), node, config) and
+    state = mid.getState() and
+    cc instanceof CallContextAny and
+    sc1 = TSummaryCtx1None() and
+    sc2 = TSummaryCtx2None() and
+    sc3 = TSummaryCtx3None() and
+    ap = mid.getAp() and
+    config = mid.getConfiguration()
+    or
+    additionalJumpStep(mid.getNodeEx(), node, config) and
+    state = mid.getState() and
+    cc instanceof CallContextAny and
+    sc1 = TSummaryCtx1None() and
+    sc2 = TSummaryCtx2None() and
+    sc3 = TSummaryCtx3None() and
+    mid.getAp() instanceof PartialAccessPathNil and
+    ap = TPartialNil(node.getDataFlowType()) and
+    config = mid.getConfiguration()
+    or
+    additionalJumpStateStep(mid.getNodeEx(), mid.getState(), node, state, config) and
+    cc instanceof CallContextAny and
+    sc1 = TSummaryCtx1None() and
+    sc2 = TSummaryCtx2None() and
+    sc3 = TSummaryCtx3None() and
+    mid.getAp() instanceof PartialAccessPathNil and
+    ap = TPartialNil(node.getDataFlowType()) and
+    config = mid.getConfiguration()
+    or
+    partialPathStoreStep(mid, _, _, node, ap) and
+    state = mid.getState() and
+    cc = mid.getCallContext() and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    config = mid.getConfiguration()
+    or
+    exists(PartialAccessPath ap0, TypedContent tc |
+      partialPathReadStep(mid, ap0, tc, node, cc, config) and
+      state = mid.getState() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      apConsFwd(ap, tc, ap0, config)
+    )
+    or
+    partialPathIntoCallable(mid, node, state, _, cc, sc1, sc2, sc3, _, ap, config)
+    or
+    partialPathOutOfCallable(mid, node, state, cc, ap, config) and
+    sc1 = TSummaryCtx1None() and
+    sc2 = TSummaryCtx2None() and
+    sc3 = TSummaryCtx3None()
+    or
+    partialPathThroughCallable(mid, node, state, cc, ap, config) and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3()
+  }
+
+  bindingset[result, i]
+  private int unbindInt(int i) { pragma[only_bind_out](i) = pragma[only_bind_out](result) }
+
+  pragma[inline]
+  private predicate partialPathStoreStep(
+    PartialPathNodeFwd mid, PartialAccessPath ap1, TypedContent tc, NodeEx node,
+    PartialAccessPath ap2
+  ) {
+    exists(NodeEx midNode, DataFlowType contentType |
+      midNode = mid.getNodeEx() and
+      ap1 = mid.getAp() and
+      store(midNode, tc, node, contentType, mid.getConfiguration()) and
+      ap2.getHead() = tc and
+      ap2.len() = unbindInt(ap1.len() + 1) and
+      compatibleTypes(ap1.getType(), contentType)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate apConsFwd(
+    PartialAccessPath ap1, TypedContent tc, PartialAccessPath ap2, Configuration config
+  ) {
+    exists(PartialPathNodeFwd mid |
+      partialPathStoreStep(mid, ap1, tc, _, ap2) and
+      config = mid.getConfiguration()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate partialPathReadStep(
+    PartialPathNodeFwd mid, PartialAccessPath ap, TypedContent tc, NodeEx node, CallContext cc,
+    Configuration config
+  ) {
+    exists(NodeEx midNode |
+      midNode = mid.getNodeEx() and
+      ap = mid.getAp() and
+      read(midNode, tc.getContent(), node, pragma[only_bind_into](config)) and
+      ap.getHead() = tc and
+      pragma[only_bind_into](config) = mid.getConfiguration() and
+      cc = mid.getCallContext()
+    )
+  }
+
+  private predicate partialPathOutOfCallable0(
+    PartialPathNodeFwd mid, ReturnPosition pos, FlowState state, CallContext innercc,
+    PartialAccessPath ap, Configuration config
+  ) {
+    pos = mid.getNodeEx().(RetNodeEx).getReturnPosition() and
+    state = mid.getState() and
+    innercc = mid.getCallContext() and
+    innercc instanceof CallContextNoCall and
+    ap = mid.getAp() and
+    config = mid.getConfiguration()
+  }
+
+  pragma[nomagic]
+  private predicate partialPathOutOfCallable1(
+    PartialPathNodeFwd mid, DataFlowCall call, ReturnKindExt kind, FlowState state, CallContext cc,
+    PartialAccessPath ap, Configuration config
+  ) {
+    exists(ReturnPosition pos, DataFlowCallable c, CallContext innercc |
+      partialPathOutOfCallable0(mid, pos, state, innercc, ap, config) and
+      c = pos.getCallable() and
+      kind = pos.getKind() and
+      resolveReturn(innercc, c, call)
+    |
+      if reducedViableImplInReturn(c, call) then cc = TReturn(c, call) else cc = TAnyCallContext()
+    )
+  }
+
+  private predicate partialPathOutOfCallable(
+    PartialPathNodeFwd mid, NodeEx out, FlowState state, CallContext cc, PartialAccessPath ap,
+    Configuration config
+  ) {
+    exists(ReturnKindExt kind, DataFlowCall call |
+      partialPathOutOfCallable1(mid, call, kind, state, cc, ap, config)
+    |
+      out.asNode() = kind.getAnOutNode(call)
+    )
+  }
+
+  pragma[noinline]
+  private predicate partialPathIntoArg(
+    PartialPathNodeFwd mid, ParameterPosition ppos, FlowState state, CallContext cc,
+    DataFlowCall call, PartialAccessPath ap, Configuration config
+  ) {
+    exists(ArgNode arg, ArgumentPosition apos |
+      arg = mid.getNodeEx().asNode() and
+      state = mid.getState() and
+      cc = mid.getCallContext() and
+      arg.argumentOf(call, apos) and
+      ap = mid.getAp() and
+      config = mid.getConfiguration() and
+      parameterMatch(ppos, apos)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate partialPathIntoCallable0(
+    PartialPathNodeFwd mid, DataFlowCallable callable, ParameterPosition pos, FlowState state,
+    CallContext outercc, DataFlowCall call, PartialAccessPath ap, Configuration config
+  ) {
+    partialPathIntoArg(mid, pos, state, outercc, call, ap, config) and
+    callable = resolveCall(call, outercc)
+  }
+
+  private predicate partialPathIntoCallable(
+    PartialPathNodeFwd mid, ParamNodeEx p, FlowState state, CallContext outercc,
+    CallContextCall innercc, TSummaryCtx1 sc1, TSummaryCtx2 sc2, TSummaryCtx3 sc3,
+    DataFlowCall call, PartialAccessPath ap, Configuration config
+  ) {
+    exists(ParameterPosition pos, DataFlowCallable callable |
+      partialPathIntoCallable0(mid, callable, pos, state, outercc, call, ap, config) and
+      p.isParameterOf(callable, pos) and
+      sc1 = TSummaryCtx1Param(p) and
+      sc2 = TSummaryCtx2Some(state) and
+      sc3 = TSummaryCtx3Some(ap)
+    |
+      if recordDataFlowCallSite(call, callable)
+      then innercc = TSpecificCall(call)
+      else innercc = TSomeCall()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate paramFlowsThroughInPartialPath(
+    ReturnKindExt kind, FlowState state, CallContextCall cc, TSummaryCtx1 sc1, TSummaryCtx2 sc2,
+    TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config
+  ) {
+    exists(PartialPathNodeFwd mid, RetNodeEx ret |
+      mid.getNodeEx() = ret and
+      kind = ret.getKind() and
+      state = mid.getState() and
+      cc = mid.getCallContext() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      config = mid.getConfiguration() and
+      ap = mid.getAp()
+    )
+  }
+
+  pragma[noinline]
+  private predicate partialPathThroughCallable0(
+    DataFlowCall call, PartialPathNodeFwd mid, ReturnKindExt kind, FlowState state, CallContext cc,
+    PartialAccessPath ap, Configuration config
+  ) {
+    exists(CallContext innercc, TSummaryCtx1 sc1, TSummaryCtx2 sc2, TSummaryCtx3 sc3 |
+      partialPathIntoCallable(mid, _, _, cc, innercc, sc1, sc2, sc3, call, _, config) and
+      paramFlowsThroughInPartialPath(kind, state, innercc, sc1, sc2, sc3, ap, config)
+    )
+  }
+
+  private predicate partialPathThroughCallable(
+    PartialPathNodeFwd mid, NodeEx out, FlowState state, CallContext cc, PartialAccessPath ap,
+    Configuration config
+  ) {
+    exists(DataFlowCall call, ReturnKindExt kind |
+      partialPathThroughCallable0(call, mid, kind, state, cc, ap, config) and
+      out.asNode() = kind.getAnOutNode(call)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathStep(
+    PartialPathNodeRev mid, NodeEx node, FlowState state, TRevSummaryCtx1 sc1, TRevSummaryCtx2 sc2,
+    TRevSummaryCtx3 sc3, RevPartialAccessPath ap, Configuration config
+  ) {
+    localFlowStep(node, mid.getNodeEx(), config) and
+    state = mid.getState() and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    ap = mid.getAp() and
+    config = mid.getConfiguration()
+    or
+    additionalLocalFlowStep(node, mid.getNodeEx(), config) and
+    state = mid.getState() and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    mid.getAp() instanceof RevPartialAccessPathNil and
+    ap = TRevPartialNil() and
+    config = mid.getConfiguration()
+    or
+    additionalLocalStateStep(node, state, mid.getNodeEx(), mid.getState(), config) and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    mid.getAp() instanceof RevPartialAccessPathNil and
+    ap = TRevPartialNil() and
+    config = mid.getConfiguration()
+    or
+    jumpStep(node, mid.getNodeEx(), config) and
+    state = mid.getState() and
+    sc1 = TRevSummaryCtx1None() and
+    sc2 = TRevSummaryCtx2None() and
+    sc3 = TRevSummaryCtx3None() and
+    ap = mid.getAp() and
+    config = mid.getConfiguration()
+    or
+    additionalJumpStep(node, mid.getNodeEx(), config) and
+    state = mid.getState() and
+    sc1 = TRevSummaryCtx1None() and
+    sc2 = TRevSummaryCtx2None() and
+    sc3 = TRevSummaryCtx3None() and
+    mid.getAp() instanceof RevPartialAccessPathNil and
+    ap = TRevPartialNil() and
+    config = mid.getConfiguration()
+    or
+    additionalJumpStateStep(node, state, mid.getNodeEx(), mid.getState(), config) and
+    sc1 = TRevSummaryCtx1None() and
+    sc2 = TRevSummaryCtx2None() and
+    sc3 = TRevSummaryCtx3None() and
+    mid.getAp() instanceof RevPartialAccessPathNil and
+    ap = TRevPartialNil() and
+    config = mid.getConfiguration()
+    or
+    revPartialPathReadStep(mid, _, _, node, ap) and
+    state = mid.getState() and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    config = mid.getConfiguration()
+    or
+    exists(RevPartialAccessPath ap0, Content c |
+      revPartialPathStoreStep(mid, ap0, c, node, config) and
+      state = mid.getState() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      apConsRev(ap, c, ap0, config)
+    )
+    or
+    exists(ParamNodeEx p |
+      mid.getNodeEx() = p and
+      viableParamArgEx(_, p, node) and
+      state = mid.getState() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      sc1 = TRevSummaryCtx1None() and
+      sc2 = TRevSummaryCtx2None() and
+      sc3 = TRevSummaryCtx3None() and
+      ap = mid.getAp() and
+      config = mid.getConfiguration()
+    )
+    or
+    exists(ReturnPosition pos |
+      revPartialPathIntoReturn(mid, pos, state, sc1, sc2, sc3, _, ap, config) and
+      pos = getReturnPosition(node.asNode())
+    )
+    or
+    revPartialPathThroughCallable(mid, node, state, ap, config) and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3()
+  }
+
+  pragma[inline]
+  private predicate revPartialPathReadStep(
+    PartialPathNodeRev mid, RevPartialAccessPath ap1, Content c, NodeEx node,
+    RevPartialAccessPath ap2
+  ) {
+    exists(NodeEx midNode |
+      midNode = mid.getNodeEx() and
+      ap1 = mid.getAp() and
+      read(node, c, midNode, mid.getConfiguration()) and
+      ap2.getHead() = c and
+      ap2.len() = unbindInt(ap1.len() + 1)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate apConsRev(
+    RevPartialAccessPath ap1, Content c, RevPartialAccessPath ap2, Configuration config
+  ) {
+    exists(PartialPathNodeRev mid |
+      revPartialPathReadStep(mid, ap1, c, _, ap2) and
+      config = mid.getConfiguration()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathStoreStep(
+    PartialPathNodeRev mid, RevPartialAccessPath ap, Content c, NodeEx node, Configuration config
+  ) {
+    exists(NodeEx midNode, TypedContent tc |
+      midNode = mid.getNodeEx() and
+      ap = mid.getAp() and
+      store(node, tc, midNode, _, config) and
+      ap.getHead() = c and
+      config = mid.getConfiguration() and
+      tc.getContent() = c
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathIntoReturn(
+    PartialPathNodeRev mid, ReturnPosition pos, FlowState state, TRevSummaryCtx1Some sc1,
+    TRevSummaryCtx2Some sc2, TRevSummaryCtx3Some sc3, DataFlowCall call, RevPartialAccessPath ap,
+    Configuration config
+  ) {
+    exists(NodeEx out |
+      mid.getNodeEx() = out and
+      mid.getState() = state and
+      viableReturnPosOutEx(call, pos, out) and
+      sc1 = TRevSummaryCtx1Some(pos) and
+      sc2 = TRevSummaryCtx2Some(state) and
+      sc3 = TRevSummaryCtx3Some(ap) and
+      ap = mid.getAp() and
+      config = mid.getConfiguration()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathFlowsThrough(
+    ArgumentPosition apos, FlowState state, TRevSummaryCtx1Some sc1, TRevSummaryCtx2Some sc2,
+    TRevSummaryCtx3Some sc3, RevPartialAccessPath ap, Configuration config
+  ) {
+    exists(PartialPathNodeRev mid, ParamNodeEx p, ParameterPosition ppos |
+      mid.getNodeEx() = p and
+      mid.getState() = state and
+      p.getPosition() = ppos and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      ap = mid.getAp() and
+      config = mid.getConfiguration() and
+      parameterMatch(ppos, apos)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathThroughCallable0(
+    DataFlowCall call, PartialPathNodeRev mid, ArgumentPosition pos, FlowState state,
+    RevPartialAccessPath ap, Configuration config
+  ) {
+    exists(TRevSummaryCtx1Some sc1, TRevSummaryCtx2Some sc2, TRevSummaryCtx3Some sc3 |
+      revPartialPathIntoReturn(mid, _, _, sc1, sc2, sc3, call, _, config) and
+      revPartialPathFlowsThrough(pos, state, sc1, sc2, sc3, ap, config)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathThroughCallable(
+    PartialPathNodeRev mid, ArgNodeEx node, FlowState state, RevPartialAccessPath ap,
+    Configuration config
+  ) {
+    exists(DataFlowCall call, ArgumentPosition pos |
+      revPartialPathThroughCallable0(call, mid, pos, state, ap, config) and
+      node.asNode().(ArgNode).argumentOf(call, pos)
+    )
+  }
+}
+
+import FlowExploration
+
+private predicate partialFlow(
+  PartialPathNode source, PartialPathNode node, Configuration configuration
+) {
+  source.getConfiguration() = configuration and
+  source.isFwdSource() and
+  node = source.getASuccessor+()
+}
+
+private predicate revPartialFlow(
+  PartialPathNode node, PartialPathNode sink, Configuration configuration
+) {
+  sink.getConfiguration() = configuration and
+  sink.isRevSink() and
+  node.getASuccessor+() = sink
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImpl2.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImpl2.qll
new file mode 100644
index 00000000000..468f8640a78
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImpl2.qll
@@ -0,0 +1,4450 @@
+/**
+ * Provides an implementation of global (interprocedural) data flow. This file
+ * re-exports the local (intraprocedural) data flow analysis from
+ * `DataFlowImplSpecific::Public` and adds a global analysis, mainly exposed
+ * through the `Configuration` class. This file exists in several identical
+ * copies, allowing queries to use multiple `Configuration` classes that depend
+ * on each other without introducing mutual recursion among those configurations.
+ */
+
+private import DataFlowImplCommon
+private import DataFlowImplSpecific::Private
+import DataFlowImplSpecific::Public
+import DataFlowImplCommonPublic
+
+/**
+ * A configuration of interprocedural data flow analysis. This defines
+ * sources, sinks, and any other configurable aspect of the analysis. Each
+ * use of the global data flow library must define its own unique extension
+ * of this abstract class. To create a configuration, extend this class with
+ * a subclass whose characteristic predicate is a unique singleton string.
+ * For example, write
+ *
+ * ```ql
+ * class MyAnalysisConfiguration extends DataFlow::Configuration {
+ *   MyAnalysisConfiguration() { this = "MyAnalysisConfiguration" }
+ *   // Override `isSource` and `isSink`.
+ *   // Optionally override `isBarrier`.
+ *   // Optionally override `isAdditionalFlowStep`.
+ * }
+ * ```
+ * Conceptually, this defines a graph where the nodes are `DataFlow::Node`s and
+ * the edges are those data-flow steps that preserve the value of the node
+ * along with any additional edges defined by `isAdditionalFlowStep`.
+ * Specifying nodes in `isBarrier` will remove those nodes from the graph, and
+ * specifying nodes in `isBarrierIn` and/or `isBarrierOut` will remove in-going
+ * and/or out-going edges from those nodes, respectively.
+ *
+ * Then, to query whether there is flow between some `source` and `sink`,
+ * write
+ *
+ * ```ql
+ * exists(MyAnalysisConfiguration cfg | cfg.hasFlow(source, sink))
+ * ```
+ *
+ * Multiple configurations can coexist, but two classes extending
+ * `DataFlow::Configuration` should never depend on each other. One of them
+ * should instead depend on a `DataFlow2::Configuration`, a
+ * `DataFlow3::Configuration`, or a `DataFlow4::Configuration`.
+ */
+abstract class Configuration extends string {
+  bindingset[this]
+  Configuration() { any() }
+
+  /**
+   * Holds if `source` is a relevant data flow source.
+   */
+  predicate isSource(Node source) { none() }
+
+  /**
+   * Holds if `source` is a relevant data flow source with the given initial
+   * `state`.
+   */
+  predicate isSource(Node source, FlowState state) { none() }
+
+  /**
+   * Holds if `sink` is a relevant data flow sink.
+   */
+  predicate isSink(Node sink) { none() }
+
+  /**
+   * Holds if `sink` is a relevant data flow sink accepting `state`.
+   */
+  predicate isSink(Node source, FlowState state) { none() }
+
+  /**
+   * Holds if data flow through `node` is prohibited. This completely removes
+   * `node` from the data flow graph.
+   */
+  predicate isBarrier(Node node) { none() }
+
+  /**
+   * Holds if data flow through `node` is prohibited when the flow state is
+   * `state`.
+   */
+  predicate isBarrier(Node node, FlowState state) { none() }
+
+  /** Holds if data flow into `node` is prohibited. */
+  predicate isBarrierIn(Node node) { none() }
+
+  /** Holds if data flow out of `node` is prohibited. */
+  predicate isBarrierOut(Node node) { none() }
+
+  /**
+   * DEPRECATED: Use `isBarrier` and `BarrierGuard` module instead.
+   *
+   * Holds if data flow through nodes guarded by `guard` is prohibited.
+   */
+  deprecated predicate isBarrierGuard(BarrierGuard guard) { none() }
+
+  /**
+   * DEPRECATED: Use `isBarrier` and `BarrierGuard` module instead.
+   *
+   * Holds if data flow through nodes guarded by `guard` is prohibited when
+   * the flow state is `state`
+   */
+  deprecated predicate isBarrierGuard(BarrierGuard guard, FlowState state) { none() }
+
+  /**
+   * Holds if data may flow from `node1` to `node2` in addition to the normal data-flow steps.
+   */
+  predicate isAdditionalFlowStep(Node node1, Node node2) { none() }
+
+  /**
+   * Holds if data may flow from `node1` to `node2` in addition to the normal data-flow steps.
+   * This step is only applicable in `state1` and updates the flow state to `state2`.
+   */
+  predicate isAdditionalFlowStep(Node node1, FlowState state1, Node node2, FlowState state2) {
+    none()
+  }
+
+  /**
+   * Holds if an arbitrary number of implicit read steps of content `c` may be
+   * taken at `node`.
+   */
+  predicate allowImplicitRead(Node node, ContentSet c) { none() }
+
+  /**
+   * Gets the virtual dispatch branching limit when calculating field flow.
+   * This can be overridden to a smaller value to improve performance (a
+   * value of 0 disables field flow), or a larger value to get more results.
+   */
+  int fieldFlowBranchLimit() { result = 2 }
+
+  /**
+   * Gets a data flow configuration feature to add restrictions to the set of
+   * valid flow paths.
+   *
+   * - `FeatureHasSourceCallContext`:
+   *    Assume that sources have some existing call context to disallow
+   *    conflicting return-flow directly following the source.
+   * - `FeatureHasSinkCallContext`:
+   *    Assume that sinks have some existing call context to disallow
+   *    conflicting argument-to-parameter flow directly preceding the sink.
+   * - `FeatureEqualSourceSinkCallContext`:
+   *    Implies both of the above and additionally ensures that the entire flow
+   *    path preserves the call context.
+   */
+  FlowFeature getAFeature() { none() }
+
+  /**
+   * Holds if data may flow from `source` to `sink` for this configuration.
+   */
+  predicate hasFlow(Node source, Node sink) { flowsTo(source, sink, this) }
+
+  /**
+   * Holds if data may flow from `source` to `sink` for this configuration.
+   *
+   * The corresponding paths are generated from the end-points and the graph
+   * included in the module `PathGraph`.
+   */
+  predicate hasFlowPath(PathNode source, PathNode sink) { flowsTo(source, sink, _, _, this) }
+
+  /**
+   * Holds if data may flow from some source to `sink` for this configuration.
+   */
+  predicate hasFlowTo(Node sink) { this.hasFlow(_, sink) }
+
+  /**
+   * Holds if data may flow from some source to `sink` for this configuration.
+   */
+  predicate hasFlowToExpr(DataFlowExpr sink) { this.hasFlowTo(exprNode(sink)) }
+
+  /**
+   * Gets the exploration limit for `hasPartialFlow` and `hasPartialFlowRev`
+   * measured in approximate number of interprocedural steps.
+   */
+  int explorationLimit() { none() }
+
+  /**
+   * Holds if hidden nodes should be included in the data flow graph.
+   *
+   * This feature should only be used for debugging or when the data flow graph
+   * is not visualized (for example in a `path-problem` query).
+   */
+  predicate includeHiddenNodes() { none() }
+
+  /**
+   * Holds if there is a partial data flow path from `source` to `node`. The
+   * approximate distance between `node` and the closest source is `dist` and
+   * is restricted to be less than or equal to `explorationLimit()`. This
+   * predicate completely disregards sink definitions.
+   *
+   * This predicate is intended for data-flow exploration and debugging and may
+   * perform poorly if the number of sources is too big and/or the exploration
+   * limit is set too high without using barriers.
+   *
+   * This predicate is disabled (has no results) by default. Override
+   * `explorationLimit()` with a suitable number to enable this predicate.
+   *
+   * To use this in a `path-problem` query, import the module `PartialPathGraph`.
+   */
+  final predicate hasPartialFlow(PartialPathNode source, PartialPathNode node, int dist) {
+    partialFlow(source, node, this) and
+    dist = node.getSourceDistance()
+  }
+
+  /**
+   * Holds if there is a partial data flow path from `node` to `sink`. The
+   * approximate distance between `node` and the closest sink is `dist` and
+   * is restricted to be less than or equal to `explorationLimit()`. This
+   * predicate completely disregards source definitions.
+   *
+   * This predicate is intended for data-flow exploration and debugging and may
+   * perform poorly if the number of sinks is too big and/or the exploration
+   * limit is set too high without using barriers.
+   *
+   * This predicate is disabled (has no results) by default. Override
+   * `explorationLimit()` with a suitable number to enable this predicate.
+   *
+   * To use this in a `path-problem` query, import the module `PartialPathGraph`.
+   *
+   * Note that reverse flow has slightly lower precision than the corresponding
+   * forward flow, as reverse flow disregards type pruning among other features.
+   */
+  final predicate hasPartialFlowRev(PartialPathNode node, PartialPathNode sink, int dist) {
+    revPartialFlow(node, sink, this) and
+    dist = node.getSinkDistance()
+  }
+}
+
+/**
+ * This class exists to prevent mutual recursion between the user-overridden
+ * member predicates of `Configuration` and the rest of the data-flow library.
+ * Good performance cannot be guaranteed in the presence of such recursion, so
+ * it should be replaced by using more than one copy of the data flow library.
+ */
+abstract private class ConfigurationRecursionPrevention extends Configuration {
+  bindingset[this]
+  ConfigurationRecursionPrevention() { any() }
+
+  override predicate hasFlow(Node source, Node sink) {
+    strictcount(Node n | this.isSource(n)) < 0
+    or
+    strictcount(Node n | this.isSource(n, _)) < 0
+    or
+    strictcount(Node n | this.isSink(n)) < 0
+    or
+    strictcount(Node n | this.isSink(n, _)) < 0
+    or
+    strictcount(Node n1, Node n2 | this.isAdditionalFlowStep(n1, n2)) < 0
+    or
+    strictcount(Node n1, Node n2 | this.isAdditionalFlowStep(n1, _, n2, _)) < 0
+    or
+    super.hasFlow(source, sink)
+  }
+}
+
+private newtype TNodeEx =
+  TNodeNormal(Node n) or
+  TNodeImplicitRead(Node n, boolean hasRead) {
+    any(Configuration c).allowImplicitRead(n, _) and hasRead = [false, true]
+  }
+
+private class NodeEx extends TNodeEx {
+  string toString() {
+    result = this.asNode().toString()
+    or
+    exists(Node n | this.isImplicitReadNode(n, _) | result = n.toString() + " [Ext]")
+  }
+
+  Node asNode() { this = TNodeNormal(result) }
+
+  predicate isImplicitReadNode(Node n, boolean hasRead) { this = TNodeImplicitRead(n, hasRead) }
+
+  Node projectToNode() { this = TNodeNormal(result) or this = TNodeImplicitRead(result, _) }
+
+  pragma[nomagic]
+  private DataFlowCallable getEnclosingCallable0() {
+    nodeEnclosingCallable(this.projectToNode(), result)
+  }
+
+  pragma[inline]
+  DataFlowCallable getEnclosingCallable() {
+    pragma[only_bind_out](this).getEnclosingCallable0() = pragma[only_bind_into](result)
+  }
+
+  pragma[nomagic]
+  private DataFlowType getDataFlowType0() { nodeDataFlowType(this.asNode(), result) }
+
+  pragma[inline]
+  DataFlowType getDataFlowType() {
+    pragma[only_bind_out](this).getDataFlowType0() = pragma[only_bind_into](result)
+  }
+
+  predicate hasLocationInfo(
+    string filepath, int startline, int startcolumn, int endline, int endcolumn
+  ) {
+    this.projectToNode().hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+  }
+}
+
+private class ArgNodeEx extends NodeEx {
+  ArgNodeEx() { this.asNode() instanceof ArgNode }
+}
+
+private class ParamNodeEx extends NodeEx {
+  ParamNodeEx() { this.asNode() instanceof ParamNode }
+
+  predicate isParameterOf(DataFlowCallable c, ParameterPosition pos) {
+    this.asNode().(ParamNode).isParameterOf(c, pos)
+  }
+
+  ParameterPosition getPosition() { this.isParameterOf(_, result) }
+
+  predicate allowParameterReturnInSelf() { allowParameterReturnInSelfCached(this.asNode()) }
+}
+
+private class RetNodeEx extends NodeEx {
+  RetNodeEx() { this.asNode() instanceof ReturnNodeExt }
+
+  ReturnPosition getReturnPosition() { result = getReturnPosition(this.asNode()) }
+
+  ReturnKindExt getKind() { result = this.asNode().(ReturnNodeExt).getKind() }
+}
+
+private predicate inBarrier(NodeEx node, Configuration config) {
+  exists(Node n |
+    node.asNode() = n and
+    config.isBarrierIn(n)
+  |
+    config.isSource(n) or config.isSource(n, _)
+  )
+}
+
+private predicate outBarrier(NodeEx node, Configuration config) {
+  exists(Node n |
+    node.asNode() = n and
+    config.isBarrierOut(n)
+  |
+    config.isSink(n) or config.isSink(n, _)
+  )
+}
+
+/** A bridge class to access the deprecated `isBarrierGuard`. */
+private class BarrierGuardGuardedNodeBridge extends Unit {
+  abstract predicate guardedNode(Node n, Configuration config);
+
+  abstract predicate guardedNode(Node n, FlowState state, Configuration config);
+}
+
+private class BarrierGuardGuardedNode extends BarrierGuardGuardedNodeBridge {
+  deprecated override predicate guardedNode(Node n, Configuration config) {
+    exists(BarrierGuard g |
+      config.isBarrierGuard(g) and
+      n = g.getAGuardedNode()
+    )
+  }
+
+  deprecated override predicate guardedNode(Node n, FlowState state, Configuration config) {
+    exists(BarrierGuard g |
+      config.isBarrierGuard(g, state) and
+      n = g.getAGuardedNode()
+    )
+  }
+}
+
+pragma[nomagic]
+private predicate fullBarrier(NodeEx node, Configuration config) {
+  exists(Node n | node.asNode() = n |
+    config.isBarrier(n)
+    or
+    config.isBarrierIn(n) and
+    not config.isSource(n) and
+    not config.isSource(n, _)
+    or
+    config.isBarrierOut(n) and
+    not config.isSink(n) and
+    not config.isSink(n, _)
+    or
+    any(BarrierGuardGuardedNodeBridge b).guardedNode(n, config)
+  )
+}
+
+pragma[nomagic]
+private predicate stateBarrier(NodeEx node, FlowState state, Configuration config) {
+  exists(Node n | node.asNode() = n |
+    config.isBarrier(n, state)
+    or
+    any(BarrierGuardGuardedNodeBridge b).guardedNode(n, state, config)
+  )
+}
+
+pragma[nomagic]
+private predicate sourceNode(NodeEx node, FlowState state, Configuration config) {
+  (
+    config.isSource(node.asNode()) and state instanceof FlowStateEmpty
+    or
+    config.isSource(node.asNode(), state)
+  ) and
+  not fullBarrier(node, config) and
+  not stateBarrier(node, state, config)
+}
+
+pragma[nomagic]
+private predicate sinkNode(NodeEx node, FlowState state, Configuration config) {
+  (
+    config.isSink(node.asNode()) and state instanceof FlowStateEmpty
+    or
+    config.isSink(node.asNode(), state)
+  ) and
+  not fullBarrier(node, config) and
+  not stateBarrier(node, state, config)
+}
+
+/** Provides the relevant barriers for a step from `node1` to `node2`. */
+pragma[inline]
+private predicate stepFilter(NodeEx node1, NodeEx node2, Configuration config) {
+  not outBarrier(node1, config) and
+  not inBarrier(node2, config) and
+  not fullBarrier(node1, config) and
+  not fullBarrier(node2, config)
+}
+
+/**
+ * Holds if data can flow in one local step from `node1` to `node2`.
+ */
+private predicate localFlowStep(NodeEx node1, NodeEx node2, Configuration config) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    simpleLocalFlowStepExt(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and
+    stepFilter(node1, node2, config)
+  )
+  or
+  exists(Node n |
+    config.allowImplicitRead(n, _) and
+    node1.asNode() = n and
+    node2.isImplicitReadNode(n, false) and
+    not fullBarrier(node1, config)
+  )
+}
+
+/**
+ * Holds if the additional step from `node1` to `node2` does not jump between callables.
+ */
+private predicate additionalLocalFlowStep(NodeEx node1, NodeEx node2, Configuration config) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    config.isAdditionalFlowStep(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and
+    getNodeEnclosingCallable(n1) = getNodeEnclosingCallable(n2) and
+    stepFilter(node1, node2, config)
+  )
+  or
+  exists(Node n |
+    config.allowImplicitRead(n, _) and
+    node1.isImplicitReadNode(n, true) and
+    node2.asNode() = n and
+    not fullBarrier(node2, config)
+  )
+}
+
+private predicate additionalLocalStateStep(
+  NodeEx node1, FlowState s1, NodeEx node2, FlowState s2, Configuration config
+) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    config.isAdditionalFlowStep(pragma[only_bind_into](n1), s1, pragma[only_bind_into](n2), s2) and
+    getNodeEnclosingCallable(n1) = getNodeEnclosingCallable(n2) and
+    stepFilter(node1, node2, config) and
+    not stateBarrier(node1, s1, config) and
+    not stateBarrier(node2, s2, config)
+  )
+}
+
+/**
+ * Holds if data can flow from `node1` to `node2` in a way that discards call contexts.
+ */
+private predicate jumpStep(NodeEx node1, NodeEx node2, Configuration config) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    jumpStepCached(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and
+    stepFilter(node1, node2, config) and
+    not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+/**
+ * Holds if the additional step from `node1` to `node2` jumps between callables.
+ */
+private predicate additionalJumpStep(NodeEx node1, NodeEx node2, Configuration config) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    config.isAdditionalFlowStep(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and
+    getNodeEnclosingCallable(n1) != getNodeEnclosingCallable(n2) and
+    stepFilter(node1, node2, config) and
+    not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+private predicate additionalJumpStateStep(
+  NodeEx node1, FlowState s1, NodeEx node2, FlowState s2, Configuration config
+) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    config.isAdditionalFlowStep(pragma[only_bind_into](n1), s1, pragma[only_bind_into](n2), s2) and
+    getNodeEnclosingCallable(n1) != getNodeEnclosingCallable(n2) and
+    stepFilter(node1, node2, config) and
+    not stateBarrier(node1, s1, config) and
+    not stateBarrier(node2, s2, config) and
+    not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+pragma[nomagic]
+private predicate readSet(NodeEx node1, ContentSet c, NodeEx node2, Configuration config) {
+  readSet(pragma[only_bind_into](node1.asNode()), c, pragma[only_bind_into](node2.asNode())) and
+  stepFilter(node1, node2, config)
+  or
+  exists(Node n |
+    node2.isImplicitReadNode(n, true) and
+    node1.isImplicitReadNode(n, _) and
+    config.allowImplicitRead(n, c)
+  )
+}
+
+// inline to reduce fan-out via `getAReadContent`
+bindingset[c]
+private predicate read(NodeEx node1, Content c, NodeEx node2, Configuration config) {
+  exists(ContentSet cs |
+    readSet(node1, cs, node2, config) and
+    pragma[only_bind_out](c) = pragma[only_bind_into](cs).getAReadContent()
+  )
+}
+
+// inline to reduce fan-out via `getAReadContent`
+bindingset[c]
+private predicate clearsContentEx(NodeEx n, Content c) {
+  exists(ContentSet cs |
+    clearsContentCached(n.asNode(), cs) and
+    pragma[only_bind_out](c) = pragma[only_bind_into](cs).getAReadContent()
+  )
+}
+
+// inline to reduce fan-out via `getAReadContent`
+bindingset[c]
+private predicate expectsContentEx(NodeEx n, Content c) {
+  exists(ContentSet cs |
+    expectsContentCached(n.asNode(), cs) and
+    pragma[only_bind_out](c) = pragma[only_bind_into](cs).getAReadContent()
+  )
+}
+
+pragma[nomagic]
+private predicate notExpectsContent(NodeEx n) { not expectsContentCached(n.asNode(), _) }
+
+pragma[nomagic]
+private predicate store(
+  NodeEx node1, TypedContent tc, NodeEx node2, DataFlowType contentType, Configuration config
+) {
+  store(pragma[only_bind_into](node1.asNode()), tc, pragma[only_bind_into](node2.asNode()),
+    contentType) and
+  read(_, tc.getContent(), _, config) and
+  stepFilter(node1, node2, config)
+}
+
+pragma[nomagic]
+private predicate viableReturnPosOutEx(DataFlowCall call, ReturnPosition pos, NodeEx out) {
+  viableReturnPosOut(call, pos, out.asNode())
+}
+
+pragma[nomagic]
+private predicate viableParamArgEx(DataFlowCall call, ParamNodeEx p, ArgNodeEx arg) {
+  viableParamArg(call, p.asNode(), arg.asNode())
+}
+
+/**
+ * Holds if field flow should be used for the given configuration.
+ */
+private predicate useFieldFlow(Configuration config) { config.fieldFlowBranchLimit() >= 1 }
+
+private predicate hasSourceCallCtx(Configuration config) {
+  exists(FlowFeature feature | feature = config.getAFeature() |
+    feature instanceof FeatureHasSourceCallContext or
+    feature instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+private predicate hasSinkCallCtx(Configuration config) {
+  exists(FlowFeature feature | feature = config.getAFeature() |
+    feature instanceof FeatureHasSinkCallContext or
+    feature instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+private module Stage1 implements StageSig {
+  class ApApprox = Unit;
+
+  class Ap = Unit;
+
+  class ApOption = Unit;
+
+  class Cc = boolean;
+
+  /* Begin: Stage 1 logic. */
+  /**
+   * Holds if `node` is reachable from a source in the configuration `config`.
+   *
+   * The Boolean `cc` records whether the node is reached through an
+   * argument in a call.
+   */
+  predicate fwdFlow(NodeEx node, Cc cc, Configuration config) {
+    sourceNode(node, _, config) and
+    if hasSourceCallCtx(config) then cc = true else cc = false
+    or
+    exists(NodeEx mid | fwdFlow(mid, cc, config) |
+      localFlowStep(mid, node, config) or
+      additionalLocalFlowStep(mid, node, config) or
+      additionalLocalStateStep(mid, _, node, _, config)
+    )
+    or
+    exists(NodeEx mid | fwdFlow(mid, _, config) and cc = false |
+      jumpStep(mid, node, config) or
+      additionalJumpStep(mid, node, config) or
+      additionalJumpStateStep(mid, _, node, _, config)
+    )
+    or
+    // store
+    exists(NodeEx mid |
+      useFieldFlow(config) and
+      fwdFlow(mid, cc, config) and
+      store(mid, _, node, _, config)
+    )
+    or
+    // read
+    exists(ContentSet c |
+      fwdFlowReadSet(c, node, cc, config) and
+      fwdFlowConsCandSet(c, _, config)
+    )
+    or
+    // flow into a callable
+    exists(NodeEx arg |
+      fwdFlow(arg, _, config) and
+      viableParamArgEx(_, node, arg) and
+      cc = true and
+      not fullBarrier(node, config)
+    )
+    or
+    // flow out of a callable
+    exists(DataFlowCall call |
+      fwdFlowOut(call, node, false, config) and
+      cc = false
+      or
+      fwdFlowOutFromArg(call, node, config) and
+      fwdFlowIsEntered(call, cc, config)
+    )
+  }
+
+  private predicate fwdFlow(NodeEx node, Configuration config) { fwdFlow(node, _, config) }
+
+  pragma[nomagic]
+  private predicate fwdFlowReadSet(ContentSet c, NodeEx node, Cc cc, Configuration config) {
+    exists(NodeEx mid |
+      fwdFlow(mid, cc, config) and
+      readSet(mid, c, node, config)
+    )
+  }
+
+  /**
+   * Holds if `c` is the target of a store in the flow covered by `fwdFlow`.
+   */
+  pragma[nomagic]
+  private predicate fwdFlowConsCand(Content c, Configuration config) {
+    exists(NodeEx mid, NodeEx node, TypedContent tc |
+      not fullBarrier(node, config) and
+      useFieldFlow(config) and
+      fwdFlow(mid, _, config) and
+      store(mid, tc, node, _, config) and
+      c = tc.getContent()
+    )
+  }
+
+  /**
+   * Holds if `cs` may be interpreted in a read as the target of some store
+   * into `c`, in the flow covered by `fwdFlow`.
+   */
+  pragma[nomagic]
+  private predicate fwdFlowConsCandSet(ContentSet cs, Content c, Configuration config) {
+    fwdFlowConsCand(c, config) and
+    c = cs.getAReadContent()
+  }
+
+  pragma[nomagic]
+  private predicate fwdFlowReturnPosition(ReturnPosition pos, Cc cc, Configuration config) {
+    exists(RetNodeEx ret |
+      fwdFlow(ret, cc, config) and
+      ret.getReturnPosition() = pos
+    )
+  }
+
+  pragma[nomagic]
+  private predicate fwdFlowOut(DataFlowCall call, NodeEx out, Cc cc, Configuration config) {
+    exists(ReturnPosition pos |
+      fwdFlowReturnPosition(pos, cc, config) and
+      viableReturnPosOutEx(call, pos, out) and
+      not fullBarrier(out, config)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate fwdFlowOutFromArg(DataFlowCall call, NodeEx out, Configuration config) {
+    fwdFlowOut(call, out, true, config)
+  }
+
+  /**
+   * Holds if an argument to `call` is reached in the flow covered by `fwdFlow`.
+   */
+  pragma[nomagic]
+  private predicate fwdFlowIsEntered(DataFlowCall call, Cc cc, Configuration config) {
+    exists(ArgNodeEx arg |
+      fwdFlow(arg, cc, config) and
+      viableParamArgEx(call, _, arg)
+    )
+  }
+
+  private predicate stateStepFwd(FlowState state1, FlowState state2, Configuration config) {
+    exists(NodeEx node1 |
+      additionalLocalStateStep(node1, state1, _, state2, config) or
+      additionalJumpStateStep(node1, state1, _, state2, config)
+    |
+      fwdFlow(node1, config)
+    )
+  }
+
+  private predicate fwdFlowState(FlowState state, Configuration config) {
+    sourceNode(_, state, config)
+    or
+    exists(FlowState state0 |
+      fwdFlowState(state0, config) and
+      stateStepFwd(state0, state, config)
+    )
+  }
+
+  /**
+   * Holds if `node` is part of a path from a source to a sink in the
+   * configuration `config`.
+   *
+   * The Boolean `toReturn` records whether the node must be returned from
+   * the enclosing callable in order to reach a sink.
+   */
+  pragma[nomagic]
+  predicate revFlow(NodeEx node, boolean toReturn, Configuration config) {
+    revFlow0(node, toReturn, config) and
+    fwdFlow(node, config)
+  }
+
+  pragma[nomagic]
+  private predicate revFlow0(NodeEx node, boolean toReturn, Configuration config) {
+    exists(FlowState state |
+      fwdFlow(node, pragma[only_bind_into](config)) and
+      sinkNode(node, state, config) and
+      fwdFlowState(state, pragma[only_bind_into](config)) and
+      if hasSinkCallCtx(config) then toReturn = true else toReturn = false
+    )
+    or
+    exists(NodeEx mid | revFlow(mid, toReturn, config) |
+      localFlowStep(node, mid, config) or
+      additionalLocalFlowStep(node, mid, config) or
+      additionalLocalStateStep(node, _, mid, _, config)
+    )
+    or
+    exists(NodeEx mid | revFlow(mid, _, config) and toReturn = false |
+      jumpStep(node, mid, config) or
+      additionalJumpStep(node, mid, config) or
+      additionalJumpStateStep(node, _, mid, _, config)
+    )
+    or
+    // store
+    exists(Content c |
+      revFlowStore(c, node, toReturn, config) and
+      revFlowConsCand(c, config)
+    )
+    or
+    // read
+    exists(NodeEx mid, ContentSet c |
+      readSet(node, c, mid, config) and
+      fwdFlowConsCandSet(c, _, pragma[only_bind_into](config)) and
+      revFlow(mid, toReturn, pragma[only_bind_into](config))
+    )
+    or
+    // flow into a callable
+    exists(DataFlowCall call |
+      revFlowIn(call, node, false, config) and
+      toReturn = false
+      or
+      revFlowInToReturn(call, node, config) and
+      revFlowIsReturned(call, toReturn, config)
+    )
+    or
+    // flow out of a callable
+    exists(ReturnPosition pos |
+      revFlowOut(pos, config) and
+      node.(RetNodeEx).getReturnPosition() = pos and
+      toReturn = true
+    )
+  }
+
+  /**
+   * Holds if `c` is the target of a read in the flow covered by `revFlow`.
+   */
+  pragma[nomagic]
+  private predicate revFlowConsCand(Content c, Configuration config) {
+    exists(NodeEx mid, NodeEx node, ContentSet cs |
+      fwdFlow(node, pragma[only_bind_into](config)) and
+      readSet(node, cs, mid, config) and
+      fwdFlowConsCandSet(cs, c, pragma[only_bind_into](config)) and
+      revFlow(pragma[only_bind_into](mid), _, pragma[only_bind_into](config))
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revFlowStore(Content c, NodeEx node, boolean toReturn, Configuration config) {
+    exists(NodeEx mid, TypedContent tc |
+      revFlow(mid, toReturn, pragma[only_bind_into](config)) and
+      fwdFlowConsCand(c, pragma[only_bind_into](config)) and
+      store(node, tc, mid, _, config) and
+      c = tc.getContent()
+    )
+  }
+
+  /**
+   * Holds if `c` is the target of both a read and a store in the flow covered
+   * by `revFlow`.
+   */
+  pragma[nomagic]
+  predicate revFlowIsReadAndStored(Content c, Configuration conf) {
+    revFlowConsCand(c, conf) and
+    revFlowStore(c, _, _, conf)
+  }
+
+  pragma[nomagic]
+  predicate viableReturnPosOutNodeCandFwd1(
+    DataFlowCall call, ReturnPosition pos, NodeEx out, Configuration config
+  ) {
+    fwdFlowReturnPosition(pos, _, config) and
+    viableReturnPosOutEx(call, pos, out)
+  }
+
+  pragma[nomagic]
+  private predicate revFlowOut(ReturnPosition pos, Configuration config) {
+    exists(DataFlowCall call, NodeEx out |
+      revFlow(out, _, config) and
+      viableReturnPosOutNodeCandFwd1(call, pos, out, config)
+    )
+  }
+
+  pragma[nomagic]
+  predicate viableParamArgNodeCandFwd1(
+    DataFlowCall call, ParamNodeEx p, ArgNodeEx arg, Configuration config
+  ) {
+    viableParamArgEx(call, p, arg) and
+    fwdFlow(arg, config)
+  }
+
+  pragma[nomagic]
+  private predicate revFlowIn(
+    DataFlowCall call, ArgNodeEx arg, boolean toReturn, Configuration config
+  ) {
+    exists(ParamNodeEx p |
+      revFlow(p, toReturn, config) and
+      viableParamArgNodeCandFwd1(call, p, arg, config)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revFlowInToReturn(DataFlowCall call, ArgNodeEx arg, Configuration config) {
+    revFlowIn(call, arg, true, config)
+  }
+
+  /**
+   * Holds if an output from `call` is reached in the flow covered by `revFlow`
+   * and data might flow through the target callable resulting in reverse flow
+   * reaching an argument of `call`.
+   */
+  pragma[nomagic]
+  private predicate revFlowIsReturned(DataFlowCall call, boolean toReturn, Configuration config) {
+    exists(NodeEx out |
+      revFlow(out, toReturn, config) and
+      fwdFlowOutFromArg(call, out, config)
+    )
+  }
+
+  private predicate stateStepRev(FlowState state1, FlowState state2, Configuration config) {
+    exists(NodeEx node1, NodeEx node2 |
+      additionalLocalStateStep(node1, state1, node2, state2, config) or
+      additionalJumpStateStep(node1, state1, node2, state2, config)
+    |
+      revFlow(node1, _, pragma[only_bind_into](config)) and
+      revFlow(node2, _, pragma[only_bind_into](config)) and
+      fwdFlowState(state1, pragma[only_bind_into](config)) and
+      fwdFlowState(state2, pragma[only_bind_into](config))
+    )
+  }
+
+  predicate revFlowState(FlowState state, Configuration config) {
+    exists(NodeEx node |
+      sinkNode(node, state, config) and
+      revFlow(node, _, pragma[only_bind_into](config)) and
+      fwdFlowState(state, pragma[only_bind_into](config))
+    )
+    or
+    exists(FlowState state0 |
+      revFlowState(state0, config) and
+      stateStepRev(state, state0, config)
+    )
+  }
+
+  pragma[nomagic]
+  predicate storeStepCand(
+    NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, DataFlowType contentType,
+    Configuration config
+  ) {
+    exists(Content c |
+      revFlowIsReadAndStored(c, pragma[only_bind_into](config)) and
+      revFlow(node2, pragma[only_bind_into](config)) and
+      store(node1, tc, node2, contentType, config) and
+      c = tc.getContent() and
+      exists(ap1)
+    )
+  }
+
+  pragma[nomagic]
+  predicate readStepCand(NodeEx n1, Content c, NodeEx n2, Configuration config) {
+    revFlowIsReadAndStored(c, pragma[only_bind_into](config)) and
+    read(n1, c, n2, pragma[only_bind_into](config)) and
+    revFlow(n2, pragma[only_bind_into](config))
+  }
+
+  pragma[nomagic]
+  predicate revFlow(NodeEx node, Configuration config) { revFlow(node, _, config) }
+
+  bindingset[node, state, config]
+  predicate revFlow(NodeEx node, FlowState state, Ap ap, Configuration config) {
+    revFlow(node, _, pragma[only_bind_into](config)) and
+    exists(state) and
+    exists(ap)
+  }
+
+  private predicate throughFlowNodeCand(NodeEx node, Configuration config) {
+    revFlow(node, true, config) and
+    fwdFlow(node, true, config) and
+    not inBarrier(node, config) and
+    not outBarrier(node, config)
+  }
+
+  /** Holds if flow may return from `callable`. */
+  pragma[nomagic]
+  private predicate returnFlowCallableNodeCand(
+    DataFlowCallable callable, ReturnKindExt kind, Configuration config
+  ) {
+    exists(RetNodeEx ret |
+      throughFlowNodeCand(ret, config) and
+      callable = ret.getEnclosingCallable() and
+      kind = ret.getKind()
+    )
+  }
+
+  /**
+   * Holds if flow may enter through `p` and reach a return node making `p` a
+   * candidate for the origin of a summary.
+   */
+  pragma[nomagic]
+  predicate parameterMayFlowThrough(ParamNodeEx p, DataFlowCallable c, Ap ap, Configuration config) {
+    exists(ReturnKindExt kind |
+      throughFlowNodeCand(p, config) and
+      returnFlowCallableNodeCand(c, kind, config) and
+      p.getEnclosingCallable() = c and
+      exists(ap) and
+      // we don't expect a parameter to return stored in itself, unless explicitly allowed
+      (
+        not kind.(ParamUpdateReturnKind).getPosition() = p.getPosition()
+        or
+        p.allowParameterReturnInSelf()
+      )
+    )
+  }
+
+  pragma[nomagic]
+  predicate callMayFlowThroughRev(DataFlowCall call, Configuration config) {
+    exists(ArgNodeEx arg, boolean toReturn |
+      revFlow(arg, toReturn, config) and
+      revFlowInToReturn(call, arg, config) and
+      revFlowIsReturned(call, toReturn, config)
+    )
+  }
+
+  predicate stats(
+    boolean fwd, int nodes, int fields, int conscand, int states, int tuples, Configuration config
+  ) {
+    fwd = true and
+    nodes = count(NodeEx node | fwdFlow(node, config)) and
+    fields = count(Content f0 | fwdFlowConsCand(f0, config)) and
+    conscand = -1 and
+    states = count(FlowState state | fwdFlowState(state, config)) and
+    tuples = count(NodeEx n, boolean b | fwdFlow(n, b, config))
+    or
+    fwd = false and
+    nodes = count(NodeEx node | revFlow(node, _, config)) and
+    fields = count(Content f0 | revFlowConsCand(f0, config)) and
+    conscand = -1 and
+    states = count(FlowState state | revFlowState(state, config)) and
+    tuples = count(NodeEx n, boolean b | revFlow(n, b, config))
+  }
+  /* End: Stage 1 logic. */
+}
+
+pragma[noinline]
+private predicate localFlowStepNodeCand1(NodeEx node1, NodeEx node2, Configuration config) {
+  Stage1::revFlow(node2, config) and
+  localFlowStep(node1, node2, config)
+}
+
+pragma[noinline]
+private predicate additionalLocalFlowStepNodeCand1(NodeEx node1, NodeEx node2, Configuration config) {
+  Stage1::revFlow(node2, config) and
+  additionalLocalFlowStep(node1, node2, config)
+}
+
+pragma[nomagic]
+private predicate viableReturnPosOutNodeCand1(
+  DataFlowCall call, ReturnPosition pos, NodeEx out, Configuration config
+) {
+  Stage1::revFlow(out, config) and
+  Stage1::viableReturnPosOutNodeCandFwd1(call, pos, out, config)
+}
+
+/**
+ * Holds if data can flow out of `call` from `ret` to `out`, either
+ * through a `ReturnNode` or through an argument that has been mutated, and
+ * that this step is part of a path from a source to a sink.
+ */
+pragma[nomagic]
+private predicate flowOutOfCallNodeCand1(
+  DataFlowCall call, RetNodeEx ret, NodeEx out, Configuration config
+) {
+  viableReturnPosOutNodeCand1(call, ret.getReturnPosition(), out, config) and
+  Stage1::revFlow(ret, config) and
+  not outBarrier(ret, config) and
+  not inBarrier(out, config)
+}
+
+pragma[nomagic]
+private predicate viableParamArgNodeCand1(
+  DataFlowCall call, ParamNodeEx p, ArgNodeEx arg, Configuration config
+) {
+  Stage1::viableParamArgNodeCandFwd1(call, p, arg, config) and
+  Stage1::revFlow(arg, config)
+}
+
+/**
+ * Holds if data can flow into `call` and that this step is part of a
+ * path from a source to a sink.
+ */
+pragma[nomagic]
+private predicate flowIntoCallNodeCand1(
+  DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, Configuration config
+) {
+  viableParamArgNodeCand1(call, p, arg, config) and
+  Stage1::revFlow(p, config) and
+  not outBarrier(arg, config) and
+  not inBarrier(p, config)
+}
+
+/**
+ * Gets the amount of forward branching on the origin of a cross-call path
+ * edge in the graph of paths between sources and sinks that ignores call
+ * contexts.
+ */
+private int branch(NodeEx n1, Configuration conf) {
+  result =
+    strictcount(NodeEx n |
+      flowOutOfCallNodeCand1(_, n1, n, conf) or flowIntoCallNodeCand1(_, n1, n, conf)
+    )
+}
+
+/**
+ * Gets the amount of backward branching on the target of a cross-call path
+ * edge in the graph of paths between sources and sinks that ignores call
+ * contexts.
+ */
+private int join(NodeEx n2, Configuration conf) {
+  result =
+    strictcount(NodeEx n |
+      flowOutOfCallNodeCand1(_, n, n2, conf) or flowIntoCallNodeCand1(_, n, n2, conf)
+    )
+}
+
+/**
+ * Holds if data can flow out of `call` from `ret` to `out`, either
+ * through a `ReturnNode` or through an argument that has been mutated, and
+ * that this step is part of a path from a source to a sink. The
+ * `allowsFieldFlow` flag indicates whether the branching is within the limit
+ * specified by the configuration.
+ */
+pragma[nomagic]
+private predicate flowOutOfCallNodeCand1(
+  DataFlowCall call, RetNodeEx ret, NodeEx out, boolean allowsFieldFlow, Configuration config
+) {
+  flowOutOfCallNodeCand1(call, ret, out, config) and
+  exists(int b, int j |
+    b = branch(ret, config) and
+    j = join(out, config) and
+    if b.minimum(j) <= config.fieldFlowBranchLimit()
+    then allowsFieldFlow = true
+    else allowsFieldFlow = false
+  )
+}
+
+/**
+ * Holds if data can flow into `call` and that this step is part of a
+ * path from a source to a sink. The `allowsFieldFlow` flag indicates whether
+ * the branching is within the limit specified by the configuration.
+ */
+pragma[nomagic]
+private predicate flowIntoCallNodeCand1(
+  DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, boolean allowsFieldFlow, Configuration config
+) {
+  flowIntoCallNodeCand1(call, arg, p, config) and
+  exists(int b, int j |
+    b = branch(arg, config) and
+    j = join(p, config) and
+    if b.minimum(j) <= config.fieldFlowBranchLimit()
+    then allowsFieldFlow = true
+    else allowsFieldFlow = false
+  )
+}
+
+private signature module StageSig {
+  class Ap;
+
+  predicate revFlow(NodeEx node, Configuration config);
+
+  bindingset[node, state, config]
+  predicate revFlow(NodeEx node, FlowState state, Ap ap, Configuration config);
+
+  predicate callMayFlowThroughRev(DataFlowCall call, Configuration config);
+
+  predicate parameterMayFlowThrough(ParamNodeEx p, DataFlowCallable c, Ap ap, Configuration config);
+
+  predicate storeStepCand(
+    NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, DataFlowType contentType,
+    Configuration config
+  );
+
+  predicate readStepCand(NodeEx n1, Content c, NodeEx n2, Configuration config);
+}
+
+private module MkStage<StageSig PrevStage> {
+  class ApApprox = PrevStage::Ap;
+
+  signature module StageParam {
+    class Ap;
+
+    class ApNil extends Ap;
+
+    bindingset[result, ap]
+    ApApprox getApprox(Ap ap);
+
+    ApNil getApNil(NodeEx node);
+
+    bindingset[tc, tail]
+    Ap apCons(TypedContent tc, Ap tail);
+
+    Content getHeadContent(Ap ap);
+
+    class ApOption;
+
+    ApOption apNone();
+
+    ApOption apSome(Ap ap);
+
+    class Cc;
+
+    class CcCall extends Cc;
+
+    // TODO: member predicate on CcCall
+    predicate matchesCall(CcCall cc, DataFlowCall call);
+
+    class CcNoCall extends Cc;
+
+    Cc ccNone();
+
+    CcCall ccSomeCall();
+
+    class LocalCc;
+
+    bindingset[call, c, outercc]
+    CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc);
+
+    bindingset[call, c, innercc]
+    CcNoCall getCallContextReturn(DataFlowCallable c, DataFlowCall call, Cc innercc);
+
+    bindingset[node, cc]
+    LocalCc getLocalCc(NodeEx node, Cc cc);
+
+    bindingset[node1, state1, config]
+    bindingset[node2, state2, config]
+    predicate localStep(
+      NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+      ApNil ap, Configuration config, LocalCc lcc
+    );
+
+    predicate flowOutOfCall(
+      DataFlowCall call, RetNodeEx ret, NodeEx out, boolean allowsFieldFlow, Configuration config
+    );
+
+    predicate flowIntoCall(
+      DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, boolean allowsFieldFlow, Configuration config
+    );
+
+    bindingset[node, state, ap, config]
+    predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config);
+
+    bindingset[ap, contentType]
+    predicate typecheckStore(Ap ap, DataFlowType contentType);
+  }
+
+  module Stage<StageParam Param> implements StageSig {
+    import Param
+
+    /* Begin: Stage logic. */
+    bindingset[result, apa]
+    private ApApprox unbindApa(ApApprox apa) {
+      pragma[only_bind_out](apa) = pragma[only_bind_out](result)
+    }
+
+    pragma[nomagic]
+    private predicate flowThroughOutOfCall(
+      DataFlowCall call, CcCall ccc, RetNodeEx ret, NodeEx out, boolean allowsFieldFlow,
+      Configuration config
+    ) {
+      flowOutOfCall(call, ret, out, allowsFieldFlow, pragma[only_bind_into](config)) and
+      PrevStage::callMayFlowThroughRev(call, pragma[only_bind_into](config)) and
+      PrevStage::parameterMayFlowThrough(_, ret.getEnclosingCallable(), _,
+        pragma[only_bind_into](config)) and
+      matchesCall(ccc, call)
+    }
+
+    /**
+     * Holds if `node` is reachable with access path `ap` from a source in the
+     * configuration `config`.
+     *
+     * The call context `cc` records whether the node is reached through an
+     * argument in a call, and if so, `argAp` records the access path of that
+     * argument.
+     */
+    pragma[nomagic]
+    predicate fwdFlow(
+      NodeEx node, FlowState state, Cc cc, ApOption argAp, Ap ap, Configuration config
+    ) {
+      fwdFlow0(node, state, cc, argAp, ap, config) and
+      PrevStage::revFlow(node, state, unbindApa(getApprox(ap)), config) and
+      filter(node, state, ap, config)
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlow0(
+      NodeEx node, FlowState state, Cc cc, ApOption argAp, Ap ap, Configuration config
+    ) {
+      sourceNode(node, state, config) and
+      (if hasSourceCallCtx(config) then cc = ccSomeCall() else cc = ccNone()) and
+      argAp = apNone() and
+      ap = getApNil(node)
+      or
+      exists(NodeEx mid, FlowState state0, Ap ap0, LocalCc localCc |
+        fwdFlow(mid, state0, cc, argAp, ap0, config) and
+        localCc = getLocalCc(mid, cc)
+      |
+        localStep(mid, state0, node, state, true, _, config, localCc) and
+        ap = ap0
+        or
+        localStep(mid, state0, node, state, false, ap, config, localCc) and
+        ap0 instanceof ApNil
+      )
+      or
+      exists(NodeEx mid |
+        fwdFlow(mid, pragma[only_bind_into](state), _, _, ap, pragma[only_bind_into](config)) and
+        jumpStep(mid, node, config) and
+        cc = ccNone() and
+        argAp = apNone()
+      )
+      or
+      exists(NodeEx mid, ApNil nil |
+        fwdFlow(mid, state, _, _, nil, pragma[only_bind_into](config)) and
+        additionalJumpStep(mid, node, config) and
+        cc = ccNone() and
+        argAp = apNone() and
+        ap = getApNil(node)
+      )
+      or
+      exists(NodeEx mid, FlowState state0, ApNil nil |
+        fwdFlow(mid, state0, _, _, nil, pragma[only_bind_into](config)) and
+        additionalJumpStateStep(mid, state0, node, state, config) and
+        cc = ccNone() and
+        argAp = apNone() and
+        ap = getApNil(node)
+      )
+      or
+      // store
+      exists(TypedContent tc, Ap ap0 |
+        fwdFlowStore(_, ap0, tc, node, state, cc, argAp, config) and
+        ap = apCons(tc, ap0)
+      )
+      or
+      // read
+      exists(Ap ap0, Content c |
+        fwdFlowRead(ap0, c, _, node, state, cc, argAp, config) and
+        fwdFlowConsCand(ap0, c, ap, config)
+      )
+      or
+      // flow into a callable
+      exists(ApApprox apa |
+        fwdFlowIn(_, node, state, _, cc, _, ap, config) and
+        apa = getApprox(ap) and
+        if PrevStage::parameterMayFlowThrough(node, _, apa, config)
+        then argAp = apSome(ap)
+        else argAp = apNone()
+      )
+      or
+      // flow out of a callable
+      fwdFlowOutNotFromArg(node, state, cc, argAp, ap, config)
+      or
+      exists(DataFlowCall call, Ap argAp0 |
+        fwdFlowOutFromArg(call, node, state, argAp0, ap, config) and
+        fwdFlowIsEntered(call, cc, argAp, argAp0, config)
+      )
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowStore(
+      NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, FlowState state, Cc cc, ApOption argAp,
+      Configuration config
+    ) {
+      exists(DataFlowType contentType |
+        fwdFlow(node1, state, cc, argAp, ap1, config) and
+        PrevStage::storeStepCand(node1, unbindApa(getApprox(ap1)), tc, node2, contentType, config) and
+        typecheckStore(ap1, contentType)
+      )
+    }
+
+    /**
+     * Holds if forward flow with access path `tail` reaches a store of `c`
+     * resulting in access path `cons`.
+     */
+    pragma[nomagic]
+    private predicate fwdFlowConsCand(Ap cons, Content c, Ap tail, Configuration config) {
+      exists(TypedContent tc |
+        fwdFlowStore(_, tail, tc, _, _, _, _, config) and
+        tc.getContent() = c and
+        cons = apCons(tc, tail)
+      )
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowRead(
+      Ap ap, Content c, NodeEx node1, NodeEx node2, FlowState state, Cc cc, ApOption argAp,
+      Configuration config
+    ) {
+      fwdFlow(node1, state, cc, argAp, ap, config) and
+      PrevStage::readStepCand(node1, c, node2, config) and
+      getHeadContent(ap) = c
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowIn(
+      DataFlowCall call, ParamNodeEx p, FlowState state, Cc outercc, Cc innercc, ApOption argAp,
+      Ap ap, Configuration config
+    ) {
+      exists(ArgNodeEx arg, boolean allowsFieldFlow |
+        fwdFlow(arg, state, outercc, argAp, ap, config) and
+        flowIntoCall(call, arg, p, allowsFieldFlow, config) and
+        innercc = getCallContextCall(call, p.getEnclosingCallable(), outercc) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowOutNotFromArg(
+      NodeEx out, FlowState state, Cc ccOut, ApOption argAp, Ap ap, Configuration config
+    ) {
+      exists(
+        DataFlowCall call, RetNodeEx ret, boolean allowsFieldFlow, CcNoCall innercc,
+        DataFlowCallable inner
+      |
+        fwdFlow(ret, state, innercc, argAp, ap, config) and
+        flowOutOfCall(call, ret, out, allowsFieldFlow, config) and
+        inner = ret.getEnclosingCallable() and
+        ccOut = getCallContextReturn(inner, call, innercc) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowOutFromArg(
+      DataFlowCall call, NodeEx out, FlowState state, Ap argAp, Ap ap, Configuration config
+    ) {
+      exists(RetNodeEx ret, boolean allowsFieldFlow, CcCall ccc |
+        fwdFlow(ret, state, ccc, apSome(argAp), ap, config) and
+        flowThroughOutOfCall(call, ccc, ret, out, allowsFieldFlow, config) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    /**
+     * Holds if an argument to `call` is reached in the flow covered by `fwdFlow`
+     * and data might flow through the target callable and back out at `call`.
+     */
+    pragma[nomagic]
+    private predicate fwdFlowIsEntered(
+      DataFlowCall call, Cc cc, ApOption argAp, Ap ap, Configuration config
+    ) {
+      exists(ParamNodeEx p |
+        fwdFlowIn(call, p, _, cc, _, argAp, ap, config) and
+        PrevStage::parameterMayFlowThrough(p, _, unbindApa(getApprox(ap)), config)
+      )
+    }
+
+    pragma[nomagic]
+    private predicate storeStepFwd(
+      NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, Ap ap2, Configuration config
+    ) {
+      fwdFlowStore(node1, ap1, tc, node2, _, _, _, config) and
+      ap2 = apCons(tc, ap1) and
+      fwdFlowRead(ap2, tc.getContent(), _, _, _, _, _, config)
+    }
+
+    private predicate readStepFwd(
+      NodeEx n1, Ap ap1, Content c, NodeEx n2, Ap ap2, Configuration config
+    ) {
+      fwdFlowRead(ap1, c, n1, n2, _, _, _, config) and
+      fwdFlowConsCand(ap1, c, ap2, config)
+    }
+
+    pragma[nomagic]
+    private predicate callMayFlowThroughFwd(DataFlowCall call, Configuration config) {
+      exists(Ap argAp0, NodeEx out, FlowState state, Cc cc, ApOption argAp, Ap ap |
+        fwdFlow(out, state, pragma[only_bind_into](cc), pragma[only_bind_into](argAp), ap,
+          pragma[only_bind_into](config)) and
+        fwdFlowOutFromArg(call, out, state, argAp0, ap, config) and
+        fwdFlowIsEntered(pragma[only_bind_into](call), pragma[only_bind_into](cc),
+          pragma[only_bind_into](argAp), pragma[only_bind_into](argAp0),
+          pragma[only_bind_into](config))
+      )
+    }
+
+    pragma[nomagic]
+    private predicate flowThroughIntoCall(
+      DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, boolean allowsFieldFlow, Configuration config
+    ) {
+      flowIntoCall(call, arg, p, allowsFieldFlow, config) and
+      fwdFlow(arg, _, _, _, _, pragma[only_bind_into](config)) and
+      PrevStage::parameterMayFlowThrough(p, _, _, pragma[only_bind_into](config)) and
+      callMayFlowThroughFwd(call, pragma[only_bind_into](config))
+    }
+
+    pragma[nomagic]
+    private predicate returnNodeMayFlowThrough(
+      RetNodeEx ret, FlowState state, Ap ap, Configuration config
+    ) {
+      fwdFlow(ret, state, any(CcCall ccc), apSome(_), ap, config)
+    }
+
+    /**
+     * Holds if `node` with access path `ap` is part of a path from a source to a
+     * sink in the configuration `config`.
+     *
+     * The Boolean `toReturn` records whether the node must be returned from the
+     * enclosing callable in order to reach a sink, and if so, `returnAp` records
+     * the access path of the returned value.
+     */
+    pragma[nomagic]
+    predicate revFlow(
+      NodeEx node, FlowState state, boolean toReturn, ApOption returnAp, Ap ap, Configuration config
+    ) {
+      revFlow0(node, state, toReturn, returnAp, ap, config) and
+      fwdFlow(node, state, _, _, ap, config)
+    }
+
+    pragma[nomagic]
+    private predicate revFlow0(
+      NodeEx node, FlowState state, boolean toReturn, ApOption returnAp, Ap ap, Configuration config
+    ) {
+      fwdFlow(node, state, _, _, ap, config) and
+      sinkNode(node, state, config) and
+      (if hasSinkCallCtx(config) then toReturn = true else toReturn = false) and
+      returnAp = apNone() and
+      ap instanceof ApNil
+      or
+      exists(NodeEx mid, FlowState state0 |
+        localStep(node, state, mid, state0, true, _, config, _) and
+        revFlow(mid, state0, toReturn, returnAp, ap, config)
+      )
+      or
+      exists(NodeEx mid, FlowState state0, ApNil nil |
+        fwdFlow(node, pragma[only_bind_into](state), _, _, ap, pragma[only_bind_into](config)) and
+        localStep(node, pragma[only_bind_into](state), mid, state0, false, _, config, _) and
+        revFlow(mid, state0, toReturn, returnAp, nil, pragma[only_bind_into](config)) and
+        ap instanceof ApNil
+      )
+      or
+      exists(NodeEx mid |
+        jumpStep(node, mid, config) and
+        revFlow(mid, state, _, _, ap, config) and
+        toReturn = false and
+        returnAp = apNone()
+      )
+      or
+      exists(NodeEx mid, ApNil nil |
+        fwdFlow(node, _, _, _, ap, pragma[only_bind_into](config)) and
+        additionalJumpStep(node, mid, config) and
+        revFlow(pragma[only_bind_into](mid), state, _, _, nil, pragma[only_bind_into](config)) and
+        toReturn = false and
+        returnAp = apNone() and
+        ap instanceof ApNil
+      )
+      or
+      exists(NodeEx mid, FlowState state0, ApNil nil |
+        fwdFlow(node, _, _, _, ap, pragma[only_bind_into](config)) and
+        additionalJumpStateStep(node, state, mid, state0, config) and
+        revFlow(pragma[only_bind_into](mid), pragma[only_bind_into](state0), _, _, nil,
+          pragma[only_bind_into](config)) and
+        toReturn = false and
+        returnAp = apNone() and
+        ap instanceof ApNil
+      )
+      or
+      // store
+      exists(Ap ap0, Content c |
+        revFlowStore(ap0, c, ap, node, state, _, _, toReturn, returnAp, config) and
+        revFlowConsCand(ap0, c, ap, config)
+      )
+      or
+      // read
+      exists(NodeEx mid, Ap ap0 |
+        revFlow(mid, state, toReturn, returnAp, ap0, config) and
+        readStepFwd(node, ap, _, mid, ap0, config)
+      )
+      or
+      // flow into a callable
+      revFlowInNotToReturn(node, state, returnAp, ap, config) and
+      toReturn = false
+      or
+      exists(DataFlowCall call, Ap returnAp0 |
+        revFlowInToReturn(call, node, state, returnAp0, ap, config) and
+        revFlowIsReturned(call, toReturn, returnAp, returnAp0, config)
+      )
+      or
+      // flow out of a callable
+      revFlowOut(_, node, state, _, _, ap, config) and
+      toReturn = true and
+      if returnNodeMayFlowThrough(node, state, ap, config)
+      then returnAp = apSome(ap)
+      else returnAp = apNone()
+    }
+
+    pragma[nomagic]
+    private predicate revFlowStore(
+      Ap ap0, Content c, Ap ap, NodeEx node, FlowState state, TypedContent tc, NodeEx mid,
+      boolean toReturn, ApOption returnAp, Configuration config
+    ) {
+      revFlow(mid, state, toReturn, returnAp, ap0, config) and
+      storeStepFwd(node, ap, tc, mid, ap0, config) and
+      tc.getContent() = c
+    }
+
+    /**
+     * Holds if reverse flow with access path `tail` reaches a read of `c`
+     * resulting in access path `cons`.
+     */
+    pragma[nomagic]
+    private predicate revFlowConsCand(Ap cons, Content c, Ap tail, Configuration config) {
+      exists(NodeEx mid, Ap tail0 |
+        revFlow(mid, _, _, _, tail, config) and
+        tail = pragma[only_bind_into](tail0) and
+        readStepFwd(_, cons, c, mid, tail0, config)
+      )
+    }
+
+    pragma[nomagic]
+    private predicate revFlowOut(
+      DataFlowCall call, RetNodeEx ret, FlowState state, boolean toReturn, ApOption returnAp, Ap ap,
+      Configuration config
+    ) {
+      exists(NodeEx out, boolean allowsFieldFlow |
+        revFlow(out, state, toReturn, returnAp, ap, config) and
+        flowOutOfCall(call, ret, out, allowsFieldFlow, config) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    pragma[nomagic]
+    private predicate revFlowInNotToReturn(
+      ArgNodeEx arg, FlowState state, ApOption returnAp, Ap ap, Configuration config
+    ) {
+      exists(ParamNodeEx p, boolean allowsFieldFlow |
+        revFlow(p, state, false, returnAp, ap, config) and
+        flowIntoCall(_, arg, p, allowsFieldFlow, config) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    pragma[nomagic]
+    private predicate revFlowInToReturn(
+      DataFlowCall call, ArgNodeEx arg, FlowState state, Ap returnAp, Ap ap, Configuration config
+    ) {
+      exists(ParamNodeEx p, boolean allowsFieldFlow |
+        revFlow(p, state, true, apSome(returnAp), ap, config) and
+        flowThroughIntoCall(call, arg, p, allowsFieldFlow, config) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    /**
+     * Holds if an output from `call` is reached in the flow covered by `revFlow`
+     * and data might flow through the target callable resulting in reverse flow
+     * reaching an argument of `call`.
+     */
+    pragma[nomagic]
+    private predicate revFlowIsReturned(
+      DataFlowCall call, boolean toReturn, ApOption returnAp, Ap ap, Configuration config
+    ) {
+      exists(RetNodeEx ret, FlowState state, CcCall ccc |
+        revFlowOut(call, ret, state, toReturn, returnAp, ap, config) and
+        fwdFlow(ret, state, ccc, apSome(_), ap, config) and
+        matchesCall(ccc, call)
+      )
+    }
+
+    pragma[nomagic]
+    predicate storeStepCand(
+      NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, DataFlowType contentType,
+      Configuration config
+    ) {
+      exists(Ap ap2, Content c |
+        PrevStage::storeStepCand(node1, _, tc, node2, contentType, config) and
+        revFlowStore(ap2, c, ap1, node1, _, tc, node2, _, _, config) and
+        revFlowConsCand(ap2, c, ap1, config)
+      )
+    }
+
+    predicate readStepCand(NodeEx node1, Content c, NodeEx node2, Configuration config) {
+      exists(Ap ap1, Ap ap2 |
+        revFlow(node2, _, _, _, pragma[only_bind_into](ap2), pragma[only_bind_into](config)) and
+        readStepFwd(node1, ap1, c, node2, ap2, config) and
+        revFlowStore(ap1, c, pragma[only_bind_into](ap2), _, _, _, _, _, _,
+          pragma[only_bind_into](config))
+      )
+    }
+
+    predicate revFlow(NodeEx node, FlowState state, Configuration config) {
+      revFlow(node, state, _, _, _, config)
+    }
+
+    predicate revFlow(NodeEx node, FlowState state, Ap ap, Configuration config) {
+      revFlow(node, state, _, _, ap, config)
+    }
+
+    pragma[nomagic]
+    predicate revFlow(NodeEx node, Configuration config) { revFlow(node, _, _, _, _, config) }
+
+    // use an alias as a workaround for bad functionality-induced joins
+    pragma[nomagic]
+    predicate revFlowAlias(NodeEx node, Configuration config) { revFlow(node, _, _, _, _, config) }
+
+    // use an alias as a workaround for bad functionality-induced joins
+    pragma[nomagic]
+    predicate revFlowAlias(NodeEx node, FlowState state, Ap ap, Configuration config) {
+      revFlow(node, state, ap, config)
+    }
+
+    private predicate fwdConsCand(TypedContent tc, Ap ap, Configuration config) {
+      storeStepFwd(_, ap, tc, _, _, config)
+    }
+
+    private predicate revConsCand(TypedContent tc, Ap ap, Configuration config) {
+      storeStepCand(_, ap, tc, _, _, config)
+    }
+
+    private predicate validAp(Ap ap, Configuration config) {
+      revFlow(_, _, _, _, ap, config) and ap instanceof ApNil
+      or
+      exists(TypedContent head, Ap tail |
+        consCand(head, tail, config) and
+        ap = apCons(head, tail)
+      )
+    }
+
+    predicate consCand(TypedContent tc, Ap ap, Configuration config) {
+      revConsCand(tc, ap, config) and
+      validAp(ap, config)
+    }
+
+    pragma[noinline]
+    private predicate parameterFlow(
+      ParamNodeEx p, Ap ap, Ap ap0, DataFlowCallable c, Configuration config
+    ) {
+      revFlow(p, _, true, apSome(ap0), ap, config) and
+      c = p.getEnclosingCallable()
+    }
+
+    predicate parameterMayFlowThrough(ParamNodeEx p, DataFlowCallable c, Ap ap, Configuration config) {
+      exists(RetNodeEx ret, FlowState state, Ap ap0, ReturnKindExt kind, ParameterPosition pos |
+        parameterFlow(p, ap, ap0, c, config) and
+        c = ret.getEnclosingCallable() and
+        revFlow(pragma[only_bind_into](ret), pragma[only_bind_into](state), true, apSome(_),
+          pragma[only_bind_into](ap0), pragma[only_bind_into](config)) and
+        fwdFlow(ret, state, any(CcCall ccc), apSome(ap), ap0, config) and
+        kind = ret.getKind() and
+        p.getPosition() = pos and
+        // we don't expect a parameter to return stored in itself, unless explicitly allowed
+        (
+          not kind.(ParamUpdateReturnKind).getPosition() = pos
+          or
+          p.allowParameterReturnInSelf()
+        )
+      )
+    }
+
+    pragma[nomagic]
+    predicate callMayFlowThroughRev(DataFlowCall call, Configuration config) {
+      exists(
+        Ap returnAp0, ArgNodeEx arg, FlowState state, boolean toReturn, ApOption returnAp, Ap ap
+      |
+        revFlow(arg, state, toReturn, returnAp, ap, config) and
+        revFlowInToReturn(call, arg, state, returnAp0, ap, config) and
+        revFlowIsReturned(call, toReturn, returnAp, returnAp0, config)
+      )
+    }
+
+    predicate stats(
+      boolean fwd, int nodes, int fields, int conscand, int states, int tuples, Configuration config
+    ) {
+      fwd = true and
+      nodes = count(NodeEx node | fwdFlow(node, _, _, _, _, config)) and
+      fields = count(TypedContent f0 | fwdConsCand(f0, _, config)) and
+      conscand = count(TypedContent f0, Ap ap | fwdConsCand(f0, ap, config)) and
+      states = count(FlowState state | fwdFlow(_, state, _, _, _, config)) and
+      tuples =
+        count(NodeEx n, FlowState state, Cc cc, ApOption argAp, Ap ap |
+          fwdFlow(n, state, cc, argAp, ap, config)
+        )
+      or
+      fwd = false and
+      nodes = count(NodeEx node | revFlow(node, _, _, _, _, config)) and
+      fields = count(TypedContent f0 | consCand(f0, _, config)) and
+      conscand = count(TypedContent f0, Ap ap | consCand(f0, ap, config)) and
+      states = count(FlowState state | revFlow(_, state, _, _, _, config)) and
+      tuples =
+        count(NodeEx n, FlowState state, boolean b, ApOption retAp, Ap ap |
+          revFlow(n, state, b, retAp, ap, config)
+        )
+    }
+    /* End: Stage logic. */
+  }
+}
+
+private module BooleanCallContext {
+  class Cc extends boolean {
+    Cc() { this in [true, false] }
+  }
+
+  class CcCall extends Cc {
+    CcCall() { this = true }
+  }
+
+  /** Holds if the call context may be `call`. */
+  predicate matchesCall(CcCall cc, DataFlowCall call) { any() }
+
+  class CcNoCall extends Cc {
+    CcNoCall() { this = false }
+  }
+
+  Cc ccNone() { result = false }
+
+  CcCall ccSomeCall() { result = true }
+
+  class LocalCc = Unit;
+
+  bindingset[node, cc]
+  LocalCc getLocalCc(NodeEx node, Cc cc) { any() }
+
+  bindingset[call, c, outercc]
+  CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc) { any() }
+
+  bindingset[call, c, innercc]
+  CcNoCall getCallContextReturn(DataFlowCallable c, DataFlowCall call, Cc innercc) { any() }
+}
+
+private module Level1CallContext {
+  class Cc = CallContext;
+
+  class CcCall = CallContextCall;
+
+  pragma[inline]
+  predicate matchesCall(CcCall cc, DataFlowCall call) { cc.matchesCall(call) }
+
+  class CcNoCall = CallContextNoCall;
+
+  Cc ccNone() { result instanceof CallContextAny }
+
+  CcCall ccSomeCall() { result instanceof CallContextSomeCall }
+
+  module NoLocalCallContext {
+    class LocalCc = Unit;
+
+    bindingset[node, cc]
+    LocalCc getLocalCc(NodeEx node, Cc cc) { any() }
+
+    bindingset[call, c, outercc]
+    CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc) {
+      checkCallContextCall(outercc, call, c) and
+      if recordDataFlowCallSiteDispatch(call, c)
+      then result = TSpecificCall(call)
+      else result = TSomeCall()
+    }
+  }
+
+  module LocalCallContext {
+    class LocalCc = LocalCallContext;
+
+    bindingset[node, cc]
+    LocalCc getLocalCc(NodeEx node, Cc cc) {
+      result =
+        getLocalCallContext(pragma[only_bind_into](pragma[only_bind_out](cc)),
+          node.getEnclosingCallable())
+    }
+
+    bindingset[call, c, outercc]
+    CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc) {
+      checkCallContextCall(outercc, call, c) and
+      if recordDataFlowCallSite(call, c) then result = TSpecificCall(call) else result = TSomeCall()
+    }
+  }
+
+  bindingset[call, c, innercc]
+  CcNoCall getCallContextReturn(DataFlowCallable c, DataFlowCall call, Cc innercc) {
+    checkCallContextReturn(innercc, c, call) and
+    if reducedViableImplInReturn(c, call) then result = TReturn(c, call) else result = ccNone()
+  }
+}
+
+private module Stage2Param implements MkStage<Stage1>::StageParam {
+  private module PrevStage = Stage1;
+
+  class Ap extends boolean {
+    Ap() { this in [true, false] }
+  }
+
+  class ApNil extends Ap {
+    ApNil() { this = false }
+  }
+
+  bindingset[result, ap]
+  PrevStage::Ap getApprox(Ap ap) { any() }
+
+  ApNil getApNil(NodeEx node) { Stage1::revFlow(node, _) and exists(result) }
+
+  bindingset[tc, tail]
+  Ap apCons(TypedContent tc, Ap tail) { result = true and exists(tc) and exists(tail) }
+
+  pragma[inline]
+  Content getHeadContent(Ap ap) { exists(result) and ap = true }
+
+  class ApOption = BooleanOption;
+
+  ApOption apNone() { result = TBooleanNone() }
+
+  ApOption apSome(Ap ap) { result = TBooleanSome(ap) }
+
+  import Level1CallContext
+  import NoLocalCallContext
+
+  bindingset[node1, state1, config]
+  bindingset[node2, state2, config]
+  predicate localStep(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+    ApNil ap, Configuration config, LocalCc lcc
+  ) {
+    (
+      preservesValue = true and
+      localFlowStepNodeCand1(node1, node2, config) and
+      state1 = state2
+      or
+      preservesValue = false and
+      additionalLocalFlowStepNodeCand1(node1, node2, config) and
+      state1 = state2
+      or
+      preservesValue = false and
+      additionalLocalStateStep(node1, state1, node2, state2, config)
+    ) and
+    exists(ap) and
+    exists(lcc)
+  }
+
+  predicate flowOutOfCall = flowOutOfCallNodeCand1/5;
+
+  predicate flowIntoCall = flowIntoCallNodeCand1/5;
+
+  pragma[nomagic]
+  private predicate expectsContentCand(NodeEx node, Configuration config) {
+    exists(Content c |
+      PrevStage::revFlow(node, pragma[only_bind_into](config)) and
+      PrevStage::revFlowIsReadAndStored(c, pragma[only_bind_into](config)) and
+      expectsContentEx(node, c)
+    )
+  }
+
+  bindingset[node, state, ap, config]
+  predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config) {
+    PrevStage::revFlowState(state, pragma[only_bind_into](config)) and
+    exists(ap) and
+    not stateBarrier(node, state, config) and
+    (
+      notExpectsContent(node)
+      or
+      ap = true and
+      expectsContentCand(node, config)
+    )
+  }
+
+  bindingset[ap, contentType]
+  predicate typecheckStore(Ap ap, DataFlowType contentType) { any() }
+}
+
+private module Stage2 implements StageSig {
+  import MkStage<Stage1>::Stage<Stage2Param>
+}
+
+pragma[nomagic]
+private predicate flowOutOfCallNodeCand2(
+  DataFlowCall call, RetNodeEx node1, NodeEx node2, boolean allowsFieldFlow, Configuration config
+) {
+  flowOutOfCallNodeCand1(call, node1, node2, allowsFieldFlow, config) and
+  Stage2::revFlow(node2, pragma[only_bind_into](config)) and
+  Stage2::revFlowAlias(node1, pragma[only_bind_into](config))
+}
+
+pragma[nomagic]
+private predicate flowIntoCallNodeCand2(
+  DataFlowCall call, ArgNodeEx node1, ParamNodeEx node2, boolean allowsFieldFlow,
+  Configuration config
+) {
+  flowIntoCallNodeCand1(call, node1, node2, allowsFieldFlow, config) and
+  Stage2::revFlow(node2, pragma[only_bind_into](config)) and
+  Stage2::revFlowAlias(node1, pragma[only_bind_into](config))
+}
+
+private module LocalFlowBigStep {
+  /**
+   * A node where some checking is required, and hence the big-step relation
+   * is not allowed to step over.
+   */
+  private class FlowCheckNode extends NodeEx {
+    FlowCheckNode() {
+      castNode(this.asNode()) or
+      clearsContentCached(this.asNode(), _) or
+      expectsContentCached(this.asNode(), _)
+    }
+  }
+
+  /**
+   * Holds if `node` can be the first node in a maximal subsequence of local
+   * flow steps in a dataflow path.
+   */
+  private predicate localFlowEntry(NodeEx node, FlowState state, Configuration config) {
+    Stage2::revFlow(node, state, config) and
+    (
+      sourceNode(node, state, config)
+      or
+      jumpStep(_, node, config)
+      or
+      additionalJumpStep(_, node, config)
+      or
+      additionalJumpStateStep(_, _, node, state, config)
+      or
+      node instanceof ParamNodeEx
+      or
+      node.asNode() instanceof OutNodeExt
+      or
+      Stage2::storeStepCand(_, _, _, node, _, config)
+      or
+      Stage2::readStepCand(_, _, node, config)
+      or
+      node instanceof FlowCheckNode
+      or
+      exists(FlowState s |
+        additionalLocalStateStep(_, s, node, state, config) and
+        s != state
+      )
+    )
+  }
+
+  /**
+   * Holds if `node` can be the last node in a maximal subsequence of local
+   * flow steps in a dataflow path.
+   */
+  private predicate localFlowExit(NodeEx node, FlowState state, Configuration config) {
+    exists(NodeEx next | Stage2::revFlow(next, state, config) |
+      jumpStep(node, next, config) or
+      additionalJumpStep(node, next, config) or
+      flowIntoCallNodeCand1(_, node, next, config) or
+      flowOutOfCallNodeCand1(_, node, next, config) or
+      Stage2::storeStepCand(node, _, _, next, _, config) or
+      Stage2::readStepCand(node, _, next, config)
+    )
+    or
+    exists(NodeEx next, FlowState s | Stage2::revFlow(next, s, config) |
+      additionalJumpStateStep(node, state, next, s, config)
+      or
+      additionalLocalStateStep(node, state, next, s, config) and
+      s != state
+    )
+    or
+    Stage2::revFlow(node, state, config) and
+    node instanceof FlowCheckNode
+    or
+    sinkNode(node, state, config)
+  }
+
+  pragma[noinline]
+  private predicate additionalLocalFlowStepNodeCand2(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, Configuration config
+  ) {
+    additionalLocalFlowStepNodeCand1(node1, node2, config) and
+    state1 = state2 and
+    Stage2::revFlow(node1, pragma[only_bind_into](state1), false, pragma[only_bind_into](config)) and
+    Stage2::revFlowAlias(node2, pragma[only_bind_into](state2), false,
+      pragma[only_bind_into](config))
+    or
+    additionalLocalStateStep(node1, state1, node2, state2, config) and
+    Stage2::revFlow(node1, state1, false, pragma[only_bind_into](config)) and
+    Stage2::revFlowAlias(node2, state2, false, pragma[only_bind_into](config))
+  }
+
+  /**
+   * Holds if the local path from `node1` to `node2` is a prefix of a maximal
+   * subsequence of local flow steps in a dataflow path.
+   *
+   * This is the transitive closure of `[additional]localFlowStep` beginning
+   * at `localFlowEntry`.
+   */
+  pragma[nomagic]
+  private predicate localFlowStepPlus(
+    NodeEx node1, FlowState state, NodeEx node2, boolean preservesValue, DataFlowType t,
+    Configuration config, LocalCallContext cc
+  ) {
+    not isUnreachableInCallCached(node2.asNode(), cc.(LocalCallContextSpecificCall).getCall()) and
+    (
+      localFlowEntry(node1, pragma[only_bind_into](state), pragma[only_bind_into](config)) and
+      (
+        localFlowStepNodeCand1(node1, node2, config) and
+        preservesValue = true and
+        t = node1.getDataFlowType() and // irrelevant dummy value
+        Stage2::revFlow(node2, pragma[only_bind_into](state), pragma[only_bind_into](config))
+        or
+        additionalLocalFlowStepNodeCand2(node1, state, node2, state, config) and
+        preservesValue = false and
+        t = node2.getDataFlowType()
+      ) and
+      node1 != node2 and
+      cc.relevantFor(node1.getEnclosingCallable()) and
+      not isUnreachableInCallCached(node1.asNode(), cc.(LocalCallContextSpecificCall).getCall())
+      or
+      exists(NodeEx mid |
+        localFlowStepPlus(node1, pragma[only_bind_into](state), mid, preservesValue, t,
+          pragma[only_bind_into](config), cc) and
+        localFlowStepNodeCand1(mid, node2, config) and
+        not mid instanceof FlowCheckNode and
+        Stage2::revFlow(node2, pragma[only_bind_into](state), pragma[only_bind_into](config))
+      )
+      or
+      exists(NodeEx mid |
+        localFlowStepPlus(node1, state, mid, _, _, pragma[only_bind_into](config), cc) and
+        additionalLocalFlowStepNodeCand2(mid, state, node2, state, config) and
+        not mid instanceof FlowCheckNode and
+        preservesValue = false and
+        t = node2.getDataFlowType()
+      )
+    )
+  }
+
+  /**
+   * Holds if `node1` can step to `node2` in one or more local steps and this
+   * path can occur as a maximal subsequence of local steps in a dataflow path.
+   */
+  pragma[nomagic]
+  predicate localFlowBigStep(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+    AccessPathFrontNil apf, Configuration config, LocalCallContext callContext
+  ) {
+    localFlowStepPlus(node1, state1, node2, preservesValue, apf.getType(), config, callContext) and
+    localFlowExit(node2, state1, config) and
+    state1 = state2
+    or
+    additionalLocalFlowStepNodeCand2(node1, state1, node2, state2, config) and
+    state1 != state2 and
+    preservesValue = false and
+    apf = TFrontNil(node2.getDataFlowType()) and
+    callContext.relevantFor(node1.getEnclosingCallable()) and
+    not exists(DataFlowCall call | call = callContext.(LocalCallContextSpecificCall).getCall() |
+      isUnreachableInCallCached(node1.asNode(), call) or
+      isUnreachableInCallCached(node2.asNode(), call)
+    )
+  }
+}
+
+private import LocalFlowBigStep
+
+private module Stage3Param implements MkStage<Stage2>::StageParam {
+  private module PrevStage = Stage2;
+
+  class Ap = AccessPathFront;
+
+  class ApNil = AccessPathFrontNil;
+
+  PrevStage::Ap getApprox(Ap ap) { result = ap.toBoolNonEmpty() }
+
+  ApNil getApNil(NodeEx node) {
+    PrevStage::revFlow(node, _) and result = TFrontNil(node.getDataFlowType())
+  }
+
+  bindingset[tc, tail]
+  Ap apCons(TypedContent tc, Ap tail) { result.getHead() = tc and exists(tail) }
+
+  pragma[noinline]
+  Content getHeadContent(Ap ap) { result = ap.getHead().getContent() }
+
+  class ApOption = AccessPathFrontOption;
+
+  ApOption apNone() { result = TAccessPathFrontNone() }
+
+  ApOption apSome(Ap ap) { result = TAccessPathFrontSome(ap) }
+
+  import BooleanCallContext
+
+  predicate localStep(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+    ApNil ap, Configuration config, LocalCc lcc
+  ) {
+    localFlowBigStep(node1, state1, node2, state2, preservesValue, ap, config, _) and exists(lcc)
+  }
+
+  predicate flowOutOfCall = flowOutOfCallNodeCand2/5;
+
+  predicate flowIntoCall = flowIntoCallNodeCand2/5;
+
+  pragma[nomagic]
+  private predicate clearSet(NodeEx node, ContentSet c, Configuration config) {
+    PrevStage::revFlow(node, config) and
+    clearsContentCached(node.asNode(), c)
+  }
+
+  pragma[nomagic]
+  private predicate clearContent(NodeEx node, Content c, Configuration config) {
+    exists(ContentSet cs |
+      PrevStage::readStepCand(_, pragma[only_bind_into](c), _, pragma[only_bind_into](config)) and
+      c = cs.getAReadContent() and
+      clearSet(node, cs, pragma[only_bind_into](config))
+    )
+  }
+
+  pragma[nomagic]
+  private predicate clear(NodeEx node, Ap ap, Configuration config) {
+    clearContent(node, ap.getHead().getContent(), config)
+  }
+
+  pragma[nomagic]
+  private predicate expectsContentCand(NodeEx node, Ap ap, Configuration config) {
+    exists(Content c |
+      PrevStage::revFlow(node, pragma[only_bind_into](config)) and
+      PrevStage::readStepCand(_, c, _, pragma[only_bind_into](config)) and
+      expectsContentEx(node, c) and
+      c = ap.getHead().getContent()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate castingNodeEx(NodeEx node) { node.asNode() instanceof CastingNode }
+
+  bindingset[node, state, ap, config]
+  predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config) {
+    exists(state) and
+    exists(config) and
+    not clear(node, ap, config) and
+    (if castingNodeEx(node) then compatibleTypes(node.getDataFlowType(), ap.getType()) else any()) and
+    (
+      notExpectsContent(node)
+      or
+      expectsContentCand(node, ap, config)
+    )
+  }
+
+  bindingset[ap, contentType]
+  predicate typecheckStore(Ap ap, DataFlowType contentType) {
+    // We need to typecheck stores here, since reverse flow through a getter
+    // might have a different type here compared to inside the getter.
+    compatibleTypes(ap.getType(), contentType)
+  }
+}
+
+private module Stage3 implements StageSig {
+  import MkStage<Stage2>::Stage<Stage3Param>
+}
+
+/**
+ * Holds if `argApf` is recorded as the summary context for flow reaching `node`
+ * and remains relevant for the following pruning stage.
+ */
+private predicate flowCandSummaryCtx(
+  NodeEx node, FlowState state, AccessPathFront argApf, Configuration config
+) {
+  exists(AccessPathFront apf |
+    Stage3::revFlow(node, state, true, _, apf, config) and
+    Stage3::fwdFlow(node, state, any(Stage3::CcCall ccc), TAccessPathFrontSome(argApf), apf, config)
+  )
+}
+
+/**
+ * Holds if a length 2 access path approximation with the head `tc` is expected
+ * to be expensive.
+ */
+private predicate expensiveLen2unfolding(TypedContent tc, Configuration config) {
+  exists(int tails, int nodes, int apLimit, int tupleLimit |
+    tails = strictcount(AccessPathFront apf | Stage3::consCand(tc, apf, config)) and
+    nodes =
+      strictcount(NodeEx n, FlowState state |
+        Stage3::revFlow(n, state, any(AccessPathFrontHead apf | apf.getHead() = tc), config)
+        or
+        flowCandSummaryCtx(n, state, any(AccessPathFrontHead apf | apf.getHead() = tc), config)
+      ) and
+    accessPathApproxCostLimits(apLimit, tupleLimit) and
+    apLimit < tails and
+    tupleLimit < (tails - 1) * nodes and
+    not tc.forceHighPrecision()
+  )
+}
+
+private newtype TAccessPathApprox =
+  TNil(DataFlowType t) or
+  TConsNil(TypedContent tc, DataFlowType t) {
+    Stage3::consCand(tc, TFrontNil(t), _) and
+    not expensiveLen2unfolding(tc, _)
+  } or
+  TConsCons(TypedContent tc1, TypedContent tc2, int len) {
+    Stage3::consCand(tc1, TFrontHead(tc2), _) and
+    len in [2 .. accessPathLimit()] and
+    not expensiveLen2unfolding(tc1, _)
+  } or
+  TCons1(TypedContent tc, int len) {
+    len in [1 .. accessPathLimit()] and
+    expensiveLen2unfolding(tc, _)
+  }
+
+/**
+ * Conceptually a list of `TypedContent`s followed by a `DataFlowType`, but only
+ * the first two elements of the list and its length are tracked. If data flows
+ * from a source to a given node with a given `AccessPathApprox`, this indicates
+ * the sequence of dereference operations needed to get from the value in the node
+ * to the tracked object. The final type indicates the type of the tracked object.
+ */
+abstract private class AccessPathApprox extends TAccessPathApprox {
+  abstract string toString();
+
+  abstract TypedContent getHead();
+
+  abstract int len();
+
+  abstract DataFlowType getType();
+
+  abstract AccessPathFront getFront();
+
+  /** Gets the access path obtained by popping `head` from this path, if any. */
+  abstract AccessPathApprox pop(TypedContent head);
+}
+
+private class AccessPathApproxNil extends AccessPathApprox, TNil {
+  private DataFlowType t;
+
+  AccessPathApproxNil() { this = TNil(t) }
+
+  override string toString() { result = concat(": " + ppReprType(t)) }
+
+  override TypedContent getHead() { none() }
+
+  override int len() { result = 0 }
+
+  override DataFlowType getType() { result = t }
+
+  override AccessPathFront getFront() { result = TFrontNil(t) }
+
+  override AccessPathApprox pop(TypedContent head) { none() }
+}
+
+abstract private class AccessPathApproxCons extends AccessPathApprox { }
+
+private class AccessPathApproxConsNil extends AccessPathApproxCons, TConsNil {
+  private TypedContent tc;
+  private DataFlowType t;
+
+  AccessPathApproxConsNil() { this = TConsNil(tc, t) }
+
+  override string toString() {
+    // The `concat` becomes "" if `ppReprType` has no result.
+    result = "[" + tc.toString() + "]" + concat(" : " + ppReprType(t))
+  }
+
+  override TypedContent getHead() { result = tc }
+
+  override int len() { result = 1 }
+
+  override DataFlowType getType() { result = tc.getContainerType() }
+
+  override AccessPathFront getFront() { result = TFrontHead(tc) }
+
+  override AccessPathApprox pop(TypedContent head) { head = tc and result = TNil(t) }
+}
+
+private class AccessPathApproxConsCons extends AccessPathApproxCons, TConsCons {
+  private TypedContent tc1;
+  private TypedContent tc2;
+  private int len;
+
+  AccessPathApproxConsCons() { this = TConsCons(tc1, tc2, len) }
+
+  override string toString() {
+    if len = 2
+    then result = "[" + tc1.toString() + ", " + tc2.toString() + "]"
+    else result = "[" + tc1.toString() + ", " + tc2.toString() + ", ... (" + len.toString() + ")]"
+  }
+
+  override TypedContent getHead() { result = tc1 }
+
+  override int len() { result = len }
+
+  override DataFlowType getType() { result = tc1.getContainerType() }
+
+  override AccessPathFront getFront() { result = TFrontHead(tc1) }
+
+  override AccessPathApprox pop(TypedContent head) {
+    head = tc1 and
+    (
+      result = TConsCons(tc2, _, len - 1)
+      or
+      len = 2 and
+      result = TConsNil(tc2, _)
+      or
+      result = TCons1(tc2, len - 1)
+    )
+  }
+}
+
+private class AccessPathApproxCons1 extends AccessPathApproxCons, TCons1 {
+  private TypedContent tc;
+  private int len;
+
+  AccessPathApproxCons1() { this = TCons1(tc, len) }
+
+  override string toString() {
+    if len = 1
+    then result = "[" + tc.toString() + "]"
+    else result = "[" + tc.toString() + ", ... (" + len.toString() + ")]"
+  }
+
+  override TypedContent getHead() { result = tc }
+
+  override int len() { result = len }
+
+  override DataFlowType getType() { result = tc.getContainerType() }
+
+  override AccessPathFront getFront() { result = TFrontHead(tc) }
+
+  override AccessPathApprox pop(TypedContent head) {
+    head = tc and
+    (
+      exists(TypedContent tc2 | Stage3::consCand(tc, TFrontHead(tc2), _) |
+        result = TConsCons(tc2, _, len - 1)
+        or
+        len = 2 and
+        result = TConsNil(tc2, _)
+        or
+        result = TCons1(tc2, len - 1)
+      )
+      or
+      exists(DataFlowType t |
+        len = 1 and
+        Stage3::consCand(tc, TFrontNil(t), _) and
+        result = TNil(t)
+      )
+    )
+  }
+}
+
+/** Gets the access path obtained by popping `tc` from `ap`, if any. */
+private AccessPathApprox pop(TypedContent tc, AccessPathApprox apa) { result = apa.pop(tc) }
+
+/** Gets the access path obtained by pushing `tc` onto `ap`. */
+private AccessPathApprox push(TypedContent tc, AccessPathApprox apa) { apa = pop(tc, result) }
+
+private newtype TAccessPathApproxOption =
+  TAccessPathApproxNone() or
+  TAccessPathApproxSome(AccessPathApprox apa)
+
+private class AccessPathApproxOption extends TAccessPathApproxOption {
+  string toString() {
+    this = TAccessPathApproxNone() and result = "<none>"
+    or
+    this = TAccessPathApproxSome(any(AccessPathApprox apa | result = apa.toString()))
+  }
+}
+
+private module Stage4Param implements MkStage<Stage3>::StageParam {
+  private module PrevStage = Stage3;
+
+  class Ap = AccessPathApprox;
+
+  class ApNil = AccessPathApproxNil;
+
+  PrevStage::Ap getApprox(Ap ap) { result = ap.getFront() }
+
+  ApNil getApNil(NodeEx node) {
+    PrevStage::revFlow(node, _) and result = TNil(node.getDataFlowType())
+  }
+
+  bindingset[tc, tail]
+  Ap apCons(TypedContent tc, Ap tail) { result = push(tc, tail) }
+
+  pragma[noinline]
+  Content getHeadContent(Ap ap) { result = ap.getHead().getContent() }
+
+  class ApOption = AccessPathApproxOption;
+
+  ApOption apNone() { result = TAccessPathApproxNone() }
+
+  ApOption apSome(Ap ap) { result = TAccessPathApproxSome(ap) }
+
+  import Level1CallContext
+  import LocalCallContext
+
+  predicate localStep(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+    ApNil ap, Configuration config, LocalCc lcc
+  ) {
+    localFlowBigStep(node1, state1, node2, state2, preservesValue, ap.getFront(), config, lcc)
+  }
+
+  pragma[nomagic]
+  predicate flowOutOfCall(
+    DataFlowCall call, RetNodeEx node1, NodeEx node2, boolean allowsFieldFlow, Configuration config
+  ) {
+    exists(FlowState state |
+      flowOutOfCallNodeCand2(call, node1, node2, allowsFieldFlow, config) and
+      PrevStage::revFlow(node2, pragma[only_bind_into](state), _, pragma[only_bind_into](config)) and
+      PrevStage::revFlowAlias(node1, pragma[only_bind_into](state), _,
+        pragma[only_bind_into](config))
+    )
+  }
+
+  pragma[nomagic]
+  predicate flowIntoCall(
+    DataFlowCall call, ArgNodeEx node1, ParamNodeEx node2, boolean allowsFieldFlow,
+    Configuration config
+  ) {
+    exists(FlowState state |
+      flowIntoCallNodeCand2(call, node1, node2, allowsFieldFlow, config) and
+      PrevStage::revFlow(node2, pragma[only_bind_into](state), _, pragma[only_bind_into](config)) and
+      PrevStage::revFlowAlias(node1, pragma[only_bind_into](state), _,
+        pragma[only_bind_into](config))
+    )
+  }
+
+  bindingset[node, state, ap, config]
+  predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config) { any() }
+
+  // Type checking is not necessary here as it has already been done in stage 3.
+  bindingset[ap, contentType]
+  predicate typecheckStore(Ap ap, DataFlowType contentType) { any() }
+}
+
+private module Stage4 = MkStage<Stage3>::Stage<Stage4Param>;
+
+bindingset[conf, result]
+private Configuration unbindConf(Configuration conf) {
+  exists(Configuration c | result = pragma[only_bind_into](c) and conf = pragma[only_bind_into](c))
+}
+
+pragma[nomagic]
+private predicate nodeMayUseSummary0(
+  NodeEx n, DataFlowCallable c, FlowState state, AccessPathApprox apa, Configuration config
+) {
+  exists(AccessPathApprox apa0 |
+    Stage4::parameterMayFlowThrough(_, c, _, _) and
+    Stage4::revFlow(n, state, true, _, apa0, config) and
+    Stage4::fwdFlow(n, state, any(CallContextCall ccc), TAccessPathApproxSome(apa), apa0, config) and
+    n.getEnclosingCallable() = c
+  )
+}
+
+pragma[nomagic]
+private predicate nodeMayUseSummary(
+  NodeEx n, FlowState state, AccessPathApprox apa, Configuration config
+) {
+  exists(DataFlowCallable c |
+    Stage4::parameterMayFlowThrough(_, c, apa, config) and
+    nodeMayUseSummary0(n, c, state, apa, config)
+  )
+}
+
+private newtype TSummaryCtx =
+  TSummaryCtxNone() or
+  TSummaryCtxSome(ParamNodeEx p, FlowState state, AccessPath ap) {
+    exists(Configuration config |
+      Stage4::parameterMayFlowThrough(p, _, ap.getApprox(), config) and
+      Stage4::revFlow(p, state, _, config)
+    )
+  }
+
+/**
+ * A context for generating flow summaries. This represents flow entry through
+ * a specific parameter with an access path of a specific shape.
+ *
+ * Summaries are only created for parameters that may flow through.
+ */
+abstract private class SummaryCtx extends TSummaryCtx {
+  abstract string toString();
+}
+
+/** A summary context from which no flow summary can be generated. */
+private class SummaryCtxNone extends SummaryCtx, TSummaryCtxNone {
+  override string toString() { result = "<none>" }
+}
+
+/** A summary context from which a flow summary can be generated. */
+private class SummaryCtxSome extends SummaryCtx, TSummaryCtxSome {
+  private ParamNodeEx p;
+  private FlowState s;
+  private AccessPath ap;
+
+  SummaryCtxSome() { this = TSummaryCtxSome(p, s, ap) }
+
+  ParameterPosition getParameterPos() { p.isParameterOf(_, result) }
+
+  ParamNodeEx getParamNode() { result = p }
+
+  override string toString() { result = p + ": " + ap }
+
+  predicate hasLocationInfo(
+    string filepath, int startline, int startcolumn, int endline, int endcolumn
+  ) {
+    p.hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+  }
+}
+
+/**
+ * Gets the number of length 2 access path approximations that correspond to `apa`.
+ */
+private int count1to2unfold(AccessPathApproxCons1 apa, Configuration config) {
+  exists(TypedContent tc, int len |
+    tc = apa.getHead() and
+    len = apa.len() and
+    result =
+      strictcount(AccessPathFront apf |
+        Stage4::consCand(tc, any(AccessPathApprox ap | ap.getFront() = apf and ap.len() = len - 1),
+          config)
+      )
+  )
+}
+
+private int countNodesUsingAccessPath(AccessPathApprox apa, Configuration config) {
+  result =
+    strictcount(NodeEx n, FlowState state |
+      Stage4::revFlow(n, state, apa, config) or nodeMayUseSummary(n, state, apa, config)
+    )
+}
+
+/**
+ * Holds if a length 2 access path approximation matching `apa` is expected
+ * to be expensive.
+ */
+private predicate expensiveLen1to2unfolding(AccessPathApproxCons1 apa, Configuration config) {
+  exists(int aps, int nodes, int apLimit, int tupleLimit |
+    aps = count1to2unfold(apa, config) and
+    nodes = countNodesUsingAccessPath(apa, config) and
+    accessPathCostLimits(apLimit, tupleLimit) and
+    apLimit < aps and
+    tupleLimit < (aps - 1) * nodes
+  )
+}
+
+private AccessPathApprox getATail(AccessPathApprox apa, Configuration config) {
+  exists(TypedContent head |
+    apa.pop(head) = result and
+    Stage4::consCand(head, result, config)
+  )
+}
+
+/**
+ * Holds with `unfold = false` if a precise head-tail representation of `apa` is
+ * expected to be expensive. Holds with `unfold = true` otherwise.
+ */
+private predicate evalUnfold(AccessPathApprox apa, boolean unfold, Configuration config) {
+  if apa.getHead().forceHighPrecision()
+  then unfold = true
+  else
+    exists(int aps, int nodes, int apLimit, int tupleLimit |
+      aps = countPotentialAps(apa, config) and
+      nodes = countNodesUsingAccessPath(apa, config) and
+      accessPathCostLimits(apLimit, tupleLimit) and
+      if apLimit < aps and tupleLimit < (aps - 1) * nodes then unfold = false else unfold = true
+    )
+}
+
+/**
+ * Gets the number of `AccessPath`s that correspond to `apa`.
+ */
+private int countAps(AccessPathApprox apa, Configuration config) {
+  evalUnfold(apa, false, config) and
+  result = 1 and
+  (not apa instanceof AccessPathApproxCons1 or expensiveLen1to2unfolding(apa, config))
+  or
+  evalUnfold(apa, false, config) and
+  result = count1to2unfold(apa, config) and
+  not expensiveLen1to2unfolding(apa, config)
+  or
+  evalUnfold(apa, true, config) and
+  result = countPotentialAps(apa, config)
+}
+
+/**
+ * Gets the number of `AccessPath`s that would correspond to `apa` assuming
+ * that it is expanded to a precise head-tail representation.
+ */
+language[monotonicAggregates]
+private int countPotentialAps(AccessPathApprox apa, Configuration config) {
+  apa instanceof AccessPathApproxNil and result = 1
+  or
+  result = strictsum(AccessPathApprox tail | tail = getATail(apa, config) | countAps(tail, config))
+}
+
+private newtype TAccessPath =
+  TAccessPathNil(DataFlowType t) or
+  TAccessPathCons(TypedContent head, AccessPath tail) {
+    exists(AccessPathApproxCons apa |
+      not evalUnfold(apa, false, _) and
+      head = apa.getHead() and
+      tail.getApprox() = getATail(apa, _)
+    )
+  } or
+  TAccessPathCons2(TypedContent head1, TypedContent head2, int len) {
+    exists(AccessPathApproxCons apa |
+      evalUnfold(apa, false, _) and
+      not expensiveLen1to2unfolding(apa, _) and
+      apa.len() = len and
+      head1 = apa.getHead() and
+      head2 = getATail(apa, _).getHead()
+    )
+  } or
+  TAccessPathCons1(TypedContent head, int len) {
+    exists(AccessPathApproxCons apa |
+      evalUnfold(apa, false, _) and
+      expensiveLen1to2unfolding(apa, _) and
+      apa.len() = len and
+      head = apa.getHead()
+    )
+  }
+
+private newtype TPathNode =
+  TPathNodeMid(
+    NodeEx node, FlowState state, CallContext cc, SummaryCtx sc, AccessPath ap, Configuration config
+  ) {
+    // A PathNode is introduced by a source ...
+    Stage4::revFlow(node, state, config) and
+    sourceNode(node, state, config) and
+    (
+      if hasSourceCallCtx(config)
+      then cc instanceof CallContextSomeCall
+      else cc instanceof CallContextAny
+    ) and
+    sc instanceof SummaryCtxNone and
+    ap = TAccessPathNil(node.getDataFlowType())
+    or
+    // ... or a step from an existing PathNode to another node.
+    exists(PathNodeMid mid |
+      pathStep(mid, node, state, cc, sc, ap) and
+      pragma[only_bind_into](config) = mid.getConfiguration() and
+      Stage4::revFlow(node, state, ap.getApprox(), pragma[only_bind_into](config))
+    )
+  } or
+  TPathNodeSink(NodeEx node, FlowState state, Configuration config) {
+    exists(PathNodeMid sink |
+      sink.isAtSink() and
+      node = sink.getNodeEx() and
+      state = sink.getState() and
+      config = sink.getConfiguration()
+    )
+  }
+
+/**
+ * A list of `TypedContent`s followed by a `DataFlowType`. If data flows from a
+ * source to a given node with a given `AccessPath`, this indicates the sequence
+ * of dereference operations needed to get from the value in the node to the
+ * tracked object. The final type indicates the type of the tracked object.
+ */
+private class AccessPath extends TAccessPath {
+  /** Gets the head of this access path, if any. */
+  abstract TypedContent getHead();
+
+  /** Gets the tail of this access path, if any. */
+  abstract AccessPath getTail();
+
+  /** Gets the front of this access path. */
+  abstract AccessPathFront getFront();
+
+  /** Gets the approximation of this access path. */
+  abstract AccessPathApprox getApprox();
+
+  /** Gets the length of this access path. */
+  abstract int length();
+
+  /** Gets a textual representation of this access path. */
+  abstract string toString();
+
+  /** Gets the access path obtained by popping `tc` from this access path, if any. */
+  final AccessPath pop(TypedContent tc) {
+    result = this.getTail() and
+    tc = this.getHead()
+  }
+
+  /** Gets the access path obtained by pushing `tc` onto this access path. */
+  final AccessPath push(TypedContent tc) { this = result.pop(tc) }
+}
+
+private class AccessPathNil extends AccessPath, TAccessPathNil {
+  private DataFlowType t;
+
+  AccessPathNil() { this = TAccessPathNil(t) }
+
+  DataFlowType getType() { result = t }
+
+  override TypedContent getHead() { none() }
+
+  override AccessPath getTail() { none() }
+
+  override AccessPathFrontNil getFront() { result = TFrontNil(t) }
+
+  override AccessPathApproxNil getApprox() { result = TNil(t) }
+
+  override int length() { result = 0 }
+
+  override string toString() { result = concat(": " + ppReprType(t)) }
+}
+
+private class AccessPathCons extends AccessPath, TAccessPathCons {
+  private TypedContent head;
+  private AccessPath tail;
+
+  AccessPathCons() { this = TAccessPathCons(head, tail) }
+
+  override TypedContent getHead() { result = head }
+
+  override AccessPath getTail() { result = tail }
+
+  override AccessPathFrontHead getFront() { result = TFrontHead(head) }
+
+  override AccessPathApproxCons getApprox() {
+    result = TConsNil(head, tail.(AccessPathNil).getType())
+    or
+    result = TConsCons(head, tail.getHead(), this.length())
+    or
+    result = TCons1(head, this.length())
+  }
+
+  override int length() { result = 1 + tail.length() }
+
+  private string toStringImpl(boolean needsSuffix) {
+    exists(DataFlowType t |
+      tail = TAccessPathNil(t) and
+      needsSuffix = false and
+      result = head.toString() + "]" + concat(" : " + ppReprType(t))
+    )
+    or
+    result = head + ", " + tail.(AccessPathCons).toStringImpl(needsSuffix)
+    or
+    exists(TypedContent tc2, TypedContent tc3, int len | tail = TAccessPathCons2(tc2, tc3, len) |
+      result = head + ", " + tc2 + ", " + tc3 + ", ... (" and len > 2 and needsSuffix = true
+      or
+      result = head + ", " + tc2 + ", " + tc3 + "]" and len = 2 and needsSuffix = false
+    )
+    or
+    exists(TypedContent tc2, int len | tail = TAccessPathCons1(tc2, len) |
+      result = head + ", " + tc2 + ", ... (" and len > 1 and needsSuffix = true
+      or
+      result = head + ", " + tc2 + "]" and len = 1 and needsSuffix = false
+    )
+  }
+
+  override string toString() {
+    result = "[" + this.toStringImpl(true) + this.length().toString() + ")]"
+    or
+    result = "[" + this.toStringImpl(false)
+  }
+}
+
+private class AccessPathCons2 extends AccessPath, TAccessPathCons2 {
+  private TypedContent head1;
+  private TypedContent head2;
+  private int len;
+
+  AccessPathCons2() { this = TAccessPathCons2(head1, head2, len) }
+
+  override TypedContent getHead() { result = head1 }
+
+  override AccessPath getTail() {
+    Stage4::consCand(head1, result.getApprox(), _) and
+    result.getHead() = head2 and
+    result.length() = len - 1
+  }
+
+  override AccessPathFrontHead getFront() { result = TFrontHead(head1) }
+
+  override AccessPathApproxCons getApprox() {
+    result = TConsCons(head1, head2, len) or
+    result = TCons1(head1, len)
+  }
+
+  override int length() { result = len }
+
+  override string toString() {
+    if len = 2
+    then result = "[" + head1.toString() + ", " + head2.toString() + "]"
+    else
+      result = "[" + head1.toString() + ", " + head2.toString() + ", ... (" + len.toString() + ")]"
+  }
+}
+
+private class AccessPathCons1 extends AccessPath, TAccessPathCons1 {
+  private TypedContent head;
+  private int len;
+
+  AccessPathCons1() { this = TAccessPathCons1(head, len) }
+
+  override TypedContent getHead() { result = head }
+
+  override AccessPath getTail() {
+    Stage4::consCand(head, result.getApprox(), _) and result.length() = len - 1
+  }
+
+  override AccessPathFrontHead getFront() { result = TFrontHead(head) }
+
+  override AccessPathApproxCons getApprox() { result = TCons1(head, len) }
+
+  override int length() { result = len }
+
+  override string toString() {
+    if len = 1
+    then result = "[" + head.toString() + "]"
+    else result = "[" + head.toString() + ", ... (" + len.toString() + ")]"
+  }
+}
+
+/**
+ * A `Node` augmented with a call context (except for sinks), an access path, and a configuration.
+ * Only those `PathNode`s that are reachable from a source are generated.
+ */
+class PathNode extends TPathNode {
+  /** Gets a textual representation of this element. */
+  string toString() { none() }
+
+  /**
+   * Gets a textual representation of this element, including a textual
+   * representation of the call context.
+   */
+  string toStringWithContext() { none() }
+
+  /**
+   * Holds if this element is at the specified location.
+   * The location spans column `startcolumn` of line `startline` to
+   * column `endcolumn` of line `endline` in file `filepath`.
+   * For more information, see
+   * [Locations](https://codeql.github.com/docs/writing-codeql-queries/providing-locations-in-codeql-queries/).
+   */
+  predicate hasLocationInfo(
+    string filepath, int startline, int startcolumn, int endline, int endcolumn
+  ) {
+    none()
+  }
+
+  /** Gets the underlying `Node`. */
+  final Node getNode() { this.(PathNodeImpl).getNodeEx().projectToNode() = result }
+
+  /** Gets the `FlowState` of this node. */
+  FlowState getState() { none() }
+
+  /** Gets the associated configuration. */
+  Configuration getConfiguration() { none() }
+
+  /** Gets a successor of this node, if any. */
+  final PathNode getASuccessor() {
+    result = this.(PathNodeImpl).getANonHiddenSuccessor() and
+    reach(this) and
+    reach(result)
+  }
+
+  /** Holds if this node is a source. */
+  predicate isSource() { none() }
+}
+
+abstract private class PathNodeImpl extends PathNode {
+  abstract PathNodeImpl getASuccessorImpl();
+
+  private PathNodeImpl getASuccessorIfHidden() {
+    this.isHidden() and
+    result = this.getASuccessorImpl()
+  }
+
+  final PathNodeImpl getANonHiddenSuccessor() {
+    result = this.getASuccessorImpl().getASuccessorIfHidden*() and
+    not this.isHidden() and
+    not result.isHidden()
+  }
+
+  abstract NodeEx getNodeEx();
+
+  predicate isHidden() {
+    not this.getConfiguration().includeHiddenNodes() and
+    (
+      hiddenNode(this.getNodeEx().asNode()) and
+      not this.isSource() and
+      not this instanceof PathNodeSink
+      or
+      this.getNodeEx() instanceof TNodeImplicitRead
+    )
+  }
+
+  private string ppAp() {
+    this instanceof PathNodeSink and result = ""
+    or
+    exists(string s | s = this.(PathNodeMid).getAp().toString() |
+      if s = "" then result = "" else result = " " + s
+    )
+  }
+
+  private string ppCtx() {
+    this instanceof PathNodeSink and result = ""
+    or
+    result = " <" + this.(PathNodeMid).getCallContext().toString() + ">"
+  }
+
+  override string toString() { result = this.getNodeEx().toString() + this.ppAp() }
+
+  override string toStringWithContext() {
+    result = this.getNodeEx().toString() + this.ppAp() + this.ppCtx()
+  }
+
+  override predicate hasLocationInfo(
+    string filepath, int startline, int startcolumn, int endline, int endcolumn
+  ) {
+    this.getNodeEx().hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+  }
+}
+
+/** Holds if `n` can reach a sink. */
+private predicate directReach(PathNodeImpl n) {
+  n instanceof PathNodeSink or directReach(n.getANonHiddenSuccessor())
+}
+
+/** Holds if `n` can reach a sink or is used in a subpath that can reach a sink. */
+private predicate reach(PathNode n) { directReach(n) or Subpaths::retReach(n) }
+
+/** Holds if `n1.getASuccessor() = n2` and `n2` can reach a sink. */
+private predicate pathSucc(PathNodeImpl n1, PathNode n2) {
+  n1.getANonHiddenSuccessor() = n2 and directReach(n2)
+}
+
+private predicate pathSuccPlus(PathNode n1, PathNode n2) = fastTC(pathSucc/2)(n1, n2)
+
+/**
+ * Provides the query predicates needed to include a graph in a path-problem query.
+ */
+module PathGraph {
+  /** Holds if `(a,b)` is an edge in the graph of data flow path explanations. */
+  query predicate edges(PathNode a, PathNode b) { a.getASuccessor() = b }
+
+  /** Holds if `n` is a node in the graph of data flow path explanations. */
+  query predicate nodes(PathNode n, string key, string val) {
+    reach(n) and key = "semmle.label" and val = n.toString()
+  }
+
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple, that is, flow through
+   * a subpath between `par` and `ret` with the connecting edges `arg -> par` and
+   * `ret -> out` is summarized as the edge `arg -> out`.
+   */
+  query predicate subpaths(PathNode arg, PathNode par, PathNode ret, PathNode out) {
+    Subpaths::subpaths(arg, par, ret, out) and
+    reach(arg) and
+    reach(par) and
+    reach(ret) and
+    reach(out)
+  }
+}
+
+/**
+ * An intermediate flow graph node. This is a triple consisting of a `Node`,
+ * a `CallContext`, and a `Configuration`.
+ */
+private class PathNodeMid extends PathNodeImpl, TPathNodeMid {
+  NodeEx node;
+  FlowState state;
+  CallContext cc;
+  SummaryCtx sc;
+  AccessPath ap;
+  Configuration config;
+
+  PathNodeMid() { this = TPathNodeMid(node, state, cc, sc, ap, config) }
+
+  override NodeEx getNodeEx() { result = node }
+
+  override FlowState getState() { result = state }
+
+  CallContext getCallContext() { result = cc }
+
+  SummaryCtx getSummaryCtx() { result = sc }
+
+  AccessPath getAp() { result = ap }
+
+  override Configuration getConfiguration() { result = config }
+
+  private PathNodeMid getSuccMid() {
+    pathStep(this, result.getNodeEx(), result.getState(), result.getCallContext(),
+      result.getSummaryCtx(), result.getAp()) and
+    result.getConfiguration() = unbindConf(this.getConfiguration())
+  }
+
+  override PathNodeImpl getASuccessorImpl() {
+    // an intermediate step to another intermediate node
+    result = this.getSuccMid()
+    or
+    // a final step to a sink
+    result = this.getSuccMid().projectToSink()
+  }
+
+  override predicate isSource() {
+    sourceNode(node, state, config) and
+    (
+      if hasSourceCallCtx(config)
+      then cc instanceof CallContextSomeCall
+      else cc instanceof CallContextAny
+    ) and
+    sc instanceof SummaryCtxNone and
+    ap = TAccessPathNil(node.getDataFlowType())
+  }
+
+  predicate isAtSink() {
+    sinkNode(node, state, config) and
+    ap instanceof AccessPathNil and
+    if hasSinkCallCtx(config)
+    then
+      // For `FeatureHasSinkCallContext` the condition `cc instanceof CallContextNoCall`
+      // is exactly what we need to check. This also implies
+      // `sc instanceof SummaryCtxNone`.
+      // For `FeatureEqualSourceSinkCallContext` the initial call context was
+      // set to `CallContextSomeCall` and jumps are disallowed, so
+      // `cc instanceof CallContextNoCall` never holds. On the other hand,
+      // in this case there's never any need to enter a call except to identify
+      // a summary, so the condition in `pathIntoCallable` enforces this, which
+      // means that `sc instanceof SummaryCtxNone` holds if and only if we are
+      // in the call context of the source.
+      sc instanceof SummaryCtxNone or
+      cc instanceof CallContextNoCall
+    else any()
+  }
+
+  PathNodeSink projectToSink() {
+    this.isAtSink() and
+    result.getNodeEx() = node and
+    result.getState() = state and
+    result.getConfiguration() = unbindConf(config)
+  }
+}
+
+/**
+ * A flow graph node corresponding to a sink. This is disjoint from the
+ * intermediate nodes in order to uniquely correspond to a given sink by
+ * excluding the `CallContext`.
+ */
+private class PathNodeSink extends PathNodeImpl, TPathNodeSink {
+  NodeEx node;
+  FlowState state;
+  Configuration config;
+
+  PathNodeSink() { this = TPathNodeSink(node, state, config) }
+
+  override NodeEx getNodeEx() { result = node }
+
+  override FlowState getState() { result = state }
+
+  override Configuration getConfiguration() { result = config }
+
+  override PathNodeImpl getASuccessorImpl() { none() }
+
+  override predicate isSource() { sourceNode(node, state, config) }
+}
+
+private predicate pathNode(
+  PathNodeMid mid, NodeEx midnode, FlowState state, CallContext cc, SummaryCtx sc, AccessPath ap,
+  Configuration conf, LocalCallContext localCC
+) {
+  midnode = mid.getNodeEx() and
+  state = mid.getState() and
+  conf = mid.getConfiguration() and
+  cc = mid.getCallContext() and
+  sc = mid.getSummaryCtx() and
+  localCC =
+    getLocalCallContext(pragma[only_bind_into](pragma[only_bind_out](cc)),
+      midnode.getEnclosingCallable()) and
+  ap = mid.getAp()
+}
+
+/**
+ * Holds if data may flow from `mid` to `node`. The last step in or out of
+ * a callable is recorded by `cc`.
+ */
+pragma[nomagic]
+private predicate pathStep(
+  PathNodeMid mid, NodeEx node, FlowState state, CallContext cc, SummaryCtx sc, AccessPath ap
+) {
+  exists(NodeEx midnode, FlowState state0, Configuration conf, LocalCallContext localCC |
+    pathNode(mid, midnode, state0, cc, sc, ap, conf, localCC) and
+    localFlowBigStep(midnode, state0, node, state, true, _, conf, localCC)
+  )
+  or
+  exists(
+    AccessPath ap0, NodeEx midnode, FlowState state0, Configuration conf, LocalCallContext localCC
+  |
+    pathNode(mid, midnode, state0, cc, sc, ap0, conf, localCC) and
+    localFlowBigStep(midnode, state0, node, state, false, ap.getFront(), conf, localCC) and
+    ap0 instanceof AccessPathNil
+  )
+  or
+  jumpStep(mid.getNodeEx(), node, mid.getConfiguration()) and
+  state = mid.getState() and
+  cc instanceof CallContextAny and
+  sc instanceof SummaryCtxNone and
+  ap = mid.getAp()
+  or
+  additionalJumpStep(mid.getNodeEx(), node, mid.getConfiguration()) and
+  state = mid.getState() and
+  cc instanceof CallContextAny and
+  sc instanceof SummaryCtxNone and
+  mid.getAp() instanceof AccessPathNil and
+  ap = TAccessPathNil(node.getDataFlowType())
+  or
+  additionalJumpStateStep(mid.getNodeEx(), mid.getState(), node, state, mid.getConfiguration()) and
+  cc instanceof CallContextAny and
+  sc instanceof SummaryCtxNone and
+  mid.getAp() instanceof AccessPathNil and
+  ap = TAccessPathNil(node.getDataFlowType())
+  or
+  exists(TypedContent tc | pathStoreStep(mid, node, state, ap.pop(tc), tc, cc)) and
+  sc = mid.getSummaryCtx()
+  or
+  exists(TypedContent tc | pathReadStep(mid, node, state, ap.push(tc), tc, cc)) and
+  sc = mid.getSummaryCtx()
+  or
+  pathIntoCallable(mid, node, state, _, cc, sc, _, _) and ap = mid.getAp()
+  or
+  pathOutOfCallable(mid, node, state, cc) and ap = mid.getAp() and sc instanceof SummaryCtxNone
+  or
+  pathThroughCallable(mid, node, state, cc, ap) and sc = mid.getSummaryCtx()
+}
+
+pragma[nomagic]
+private predicate pathReadStep(
+  PathNodeMid mid, NodeEx node, FlowState state, AccessPath ap0, TypedContent tc, CallContext cc
+) {
+  ap0 = mid.getAp() and
+  tc = ap0.getHead() and
+  Stage4::readStepCand(mid.getNodeEx(), tc.getContent(), node, mid.getConfiguration()) and
+  state = mid.getState() and
+  cc = mid.getCallContext()
+}
+
+pragma[nomagic]
+private predicate pathStoreStep(
+  PathNodeMid mid, NodeEx node, FlowState state, AccessPath ap0, TypedContent tc, CallContext cc
+) {
+  ap0 = mid.getAp() and
+  Stage4::storeStepCand(mid.getNodeEx(), _, tc, node, _, mid.getConfiguration()) and
+  state = mid.getState() and
+  cc = mid.getCallContext()
+}
+
+private predicate pathOutOfCallable0(
+  PathNodeMid mid, ReturnPosition pos, FlowState state, CallContext innercc, AccessPathApprox apa,
+  Configuration config
+) {
+  pos = mid.getNodeEx().(RetNodeEx).getReturnPosition() and
+  state = mid.getState() and
+  innercc = mid.getCallContext() and
+  innercc instanceof CallContextNoCall and
+  apa = mid.getAp().getApprox() and
+  config = mid.getConfiguration()
+}
+
+pragma[nomagic]
+private predicate pathOutOfCallable1(
+  PathNodeMid mid, DataFlowCall call, ReturnKindExt kind, FlowState state, CallContext cc,
+  AccessPathApprox apa, Configuration config
+) {
+  exists(ReturnPosition pos, DataFlowCallable c, CallContext innercc |
+    pathOutOfCallable0(mid, pos, state, innercc, apa, config) and
+    c = pos.getCallable() and
+    kind = pos.getKind() and
+    resolveReturn(innercc, c, call)
+  |
+    if reducedViableImplInReturn(c, call) then cc = TReturn(c, call) else cc = TAnyCallContext()
+  )
+}
+
+pragma[noinline]
+private NodeEx getAnOutNodeFlow(
+  ReturnKindExt kind, DataFlowCall call, AccessPathApprox apa, Configuration config
+) {
+  result.asNode() = kind.getAnOutNode(call) and
+  Stage4::revFlow(result, _, apa, config)
+}
+
+/**
+ * Holds if data may flow from `mid` to `out`. The last step of this path
+ * is a return from a callable and is recorded by `cc`, if needed.
+ */
+pragma[noinline]
+private predicate pathOutOfCallable(PathNodeMid mid, NodeEx out, FlowState state, CallContext cc) {
+  exists(ReturnKindExt kind, DataFlowCall call, AccessPathApprox apa, Configuration config |
+    pathOutOfCallable1(mid, call, kind, state, cc, apa, config) and
+    out = getAnOutNodeFlow(kind, call, apa, config)
+  )
+}
+
+/**
+ * Holds if data may flow from `mid` to the `i`th argument of `call` in `cc`.
+ */
+pragma[noinline]
+private predicate pathIntoArg(
+  PathNodeMid mid, ParameterPosition ppos, FlowState state, CallContext cc, DataFlowCall call,
+  AccessPath ap, AccessPathApprox apa, Configuration config
+) {
+  exists(ArgNodeEx arg, ArgumentPosition apos |
+    pathNode(mid, arg, state, cc, _, ap, config, _) and
+    arg.asNode().(ArgNode).argumentOf(call, apos) and
+    apa = ap.getApprox() and
+    parameterMatch(ppos, apos)
+  )
+}
+
+pragma[nomagic]
+private predicate parameterCand(
+  DataFlowCallable callable, ParameterPosition pos, AccessPathApprox apa, Configuration config
+) {
+  exists(ParamNodeEx p |
+    Stage4::revFlow(p, _, apa, config) and
+    p.isParameterOf(callable, pos)
+  )
+}
+
+pragma[nomagic]
+private predicate pathIntoCallable0(
+  PathNodeMid mid, DataFlowCallable callable, ParameterPosition pos, FlowState state,
+  CallContext outercc, DataFlowCall call, AccessPath ap, Configuration config
+) {
+  exists(AccessPathApprox apa |
+    pathIntoArg(mid, pragma[only_bind_into](pos), state, outercc, call, ap,
+      pragma[only_bind_into](apa), pragma[only_bind_into](config)) and
+    callable = resolveCall(call, outercc) and
+    parameterCand(callable, pragma[only_bind_into](pos), pragma[only_bind_into](apa),
+      pragma[only_bind_into](config))
+  )
+}
+
+/**
+ * Holds if data may flow from `mid` to `p` through `call`. The contexts
+ * before and after entering the callable are `outercc` and `innercc`,
+ * respectively.
+ */
+pragma[nomagic]
+private predicate pathIntoCallable(
+  PathNodeMid mid, ParamNodeEx p, FlowState state, CallContext outercc, CallContextCall innercc,
+  SummaryCtx sc, DataFlowCall call, Configuration config
+) {
+  exists(ParameterPosition pos, DataFlowCallable callable, AccessPath ap |
+    pathIntoCallable0(mid, callable, pos, state, outercc, call, ap, config) and
+    p.isParameterOf(callable, pos) and
+    (
+      sc = TSummaryCtxSome(p, state, ap)
+      or
+      not exists(TSummaryCtxSome(p, state, ap)) and
+      sc = TSummaryCtxNone() and
+      // When the call contexts of source and sink needs to match then there's
+      // never any reason to enter a callable except to find a summary. See also
+      // the comment in `PathNodeMid::isAtSink`.
+      not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext
+    )
+  |
+    if recordDataFlowCallSite(call, callable)
+    then innercc = TSpecificCall(call)
+    else innercc = TSomeCall()
+  )
+}
+
+/** Holds if data may flow from a parameter given by `sc` to a return of kind `kind`. */
+pragma[nomagic]
+private predicate paramFlowsThrough(
+  ReturnKindExt kind, FlowState state, CallContextCall cc, SummaryCtxSome sc, AccessPath ap,
+  AccessPathApprox apa, Configuration config
+) {
+  exists(PathNodeMid mid, RetNodeEx ret, ParameterPosition pos |
+    pathNode(mid, ret, state, cc, sc, ap, config, _) and
+    kind = ret.getKind() and
+    apa = ap.getApprox() and
+    pos = sc.getParameterPos() and
+    // we don't expect a parameter to return stored in itself, unless explicitly allowed
+    (
+      not kind.(ParamUpdateReturnKind).getPosition() = pos
+      or
+      sc.getParamNode().allowParameterReturnInSelf()
+    )
+  )
+}
+
+pragma[nomagic]
+private predicate pathThroughCallable0(
+  DataFlowCall call, PathNodeMid mid, ReturnKindExt kind, FlowState state, CallContext cc,
+  AccessPath ap, AccessPathApprox apa, Configuration config
+) {
+  exists(CallContext innercc, SummaryCtx sc |
+    pathIntoCallable(mid, _, _, cc, innercc, sc, call, config) and
+    paramFlowsThrough(kind, state, innercc, sc, ap, apa, config)
+  )
+}
+
+/**
+ * Holds if data may flow from `mid` through a callable to the node `out`.
+ * The context `cc` is restored to its value prior to entering the callable.
+ */
+pragma[noinline]
+private predicate pathThroughCallable(
+  PathNodeMid mid, NodeEx out, FlowState state, CallContext cc, AccessPath ap
+) {
+  exists(DataFlowCall call, ReturnKindExt kind, AccessPathApprox apa, Configuration config |
+    pathThroughCallable0(call, mid, kind, state, cc, ap, apa, config) and
+    out = getAnOutNodeFlow(kind, call, apa, config)
+  )
+}
+
+private module Subpaths {
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple and `ret` is determined by
+   * `kind`, `sc`, `apout`, and `innercc`.
+   */
+  pragma[nomagic]
+  private predicate subpaths01(
+    PathNodeImpl arg, ParamNodeEx par, SummaryCtxSome sc, CallContext innercc, ReturnKindExt kind,
+    NodeEx out, FlowState sout, AccessPath apout
+  ) {
+    exists(Configuration config |
+      pathThroughCallable(arg, out, pragma[only_bind_into](sout), _, pragma[only_bind_into](apout)) and
+      pathIntoCallable(arg, par, _, _, innercc, sc, _, config) and
+      paramFlowsThrough(kind, pragma[only_bind_into](sout), innercc, sc,
+        pragma[only_bind_into](apout), _, unbindConf(config)) and
+      not arg.isHidden()
+    )
+  }
+
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple and `ret` is determined by
+   * `kind`, `sc`, `sout`, `apout`, and `innercc`.
+   */
+  pragma[nomagic]
+  private predicate subpaths02(
+    PathNode arg, ParamNodeEx par, SummaryCtxSome sc, CallContext innercc, ReturnKindExt kind,
+    NodeEx out, FlowState sout, AccessPath apout
+  ) {
+    subpaths01(arg, par, sc, innercc, kind, out, sout, apout) and
+    out.asNode() = kind.getAnOutNode(_)
+  }
+
+  pragma[nomagic]
+  private Configuration getPathNodeConf(PathNode n) { result = n.getConfiguration() }
+
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple.
+   */
+  pragma[nomagic]
+  private predicate subpaths03(
+    PathNode arg, ParamNodeEx par, PathNodeMid ret, NodeEx out, FlowState sout, AccessPath apout
+  ) {
+    exists(SummaryCtxSome sc, CallContext innercc, ReturnKindExt kind, RetNodeEx retnode |
+      subpaths02(arg, par, sc, innercc, kind, out, sout, apout) and
+      pathNode(ret, retnode, sout, innercc, sc, apout, unbindConf(getPathNodeConf(arg)), _) and
+      kind = retnode.getKind()
+    )
+  }
+
+  private PathNodeImpl localStepToHidden(PathNodeImpl n) {
+    n.getASuccessorImpl() = result and
+    result.isHidden() and
+    exists(NodeEx n1, NodeEx n2 | n1 = n.getNodeEx() and n2 = result.getNodeEx() |
+      localFlowBigStep(n1, _, n2, _, _, _, _, _) or
+      store(n1, _, n2, _, _) or
+      readSet(n1, _, n2, _)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate hasSuccessor(PathNodeImpl pred, PathNodeMid succ, NodeEx succNode) {
+    succ = pred.getANonHiddenSuccessor() and
+    succNode = succ.getNodeEx()
+  }
+
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple, that is, flow through
+   * a subpath between `par` and `ret` with the connecting edges `arg -> par` and
+   * `ret -> out` is summarized as the edge `arg -> out`.
+   */
+  predicate subpaths(PathNodeImpl arg, PathNodeImpl par, PathNodeImpl ret, PathNode out) {
+    exists(ParamNodeEx p, NodeEx o, FlowState sout, AccessPath apout, PathNodeMid out0 |
+      pragma[only_bind_into](arg).getANonHiddenSuccessor() = pragma[only_bind_into](out0) and
+      subpaths03(pragma[only_bind_into](arg), p, localStepToHidden*(ret), o, sout, apout) and
+      hasSuccessor(pragma[only_bind_into](arg), par, p) and
+      not ret.isHidden() and
+      pathNode(out0, o, sout, _, _, apout, _, _)
+    |
+      out = out0 or out = out0.projectToSink()
+    )
+  }
+
+  /**
+   * Holds if `n` can reach a return node in a summarized subpath that can reach a sink.
+   */
+  predicate retReach(PathNodeImpl n) {
+    exists(PathNode out | subpaths(_, _, n, out) | directReach(out) or retReach(out))
+    or
+    exists(PathNodeImpl mid |
+      retReach(mid) and
+      n.getANonHiddenSuccessor() = mid and
+      not subpaths(_, mid, _, _)
+    )
+  }
+}
+
+/**
+ * Holds if data can flow (inter-procedurally) from `source` to `sink`.
+ *
+ * Will only have results if `configuration` has non-empty sources and
+ * sinks.
+ */
+private predicate flowsTo(
+  PathNode flowsource, PathNodeSink flowsink, Node source, Node sink, Configuration configuration
+) {
+  flowsource.isSource() and
+  flowsource.getConfiguration() = configuration and
+  flowsource.(PathNodeImpl).getNodeEx().asNode() = source and
+  (flowsource = flowsink or pathSuccPlus(flowsource, flowsink)) and
+  flowsink.getNodeEx().asNode() = sink
+}
+
+/**
+ * Holds if data can flow (inter-procedurally) from `source` to `sink`.
+ *
+ * Will only have results if `configuration` has non-empty sources and
+ * sinks.
+ */
+predicate flowsTo(Node source, Node sink, Configuration configuration) {
+  flowsTo(_, _, source, sink, configuration)
+}
+
+private predicate finalStats(
+  boolean fwd, int nodes, int fields, int conscand, int states, int tuples
+) {
+  fwd = true and
+  nodes = count(NodeEx n0 | exists(PathNodeImpl pn | pn.getNodeEx() = n0)) and
+  fields = count(TypedContent f0 | exists(PathNodeMid pn | pn.getAp().getHead() = f0)) and
+  conscand = count(AccessPath ap | exists(PathNodeMid pn | pn.getAp() = ap)) and
+  states = count(FlowState state | exists(PathNodeMid pn | pn.getState() = state)) and
+  tuples = count(PathNode pn)
+  or
+  fwd = false and
+  nodes = count(NodeEx n0 | exists(PathNodeImpl pn | pn.getNodeEx() = n0 and reach(pn))) and
+  fields = count(TypedContent f0 | exists(PathNodeMid pn | pn.getAp().getHead() = f0 and reach(pn))) and
+  conscand = count(AccessPath ap | exists(PathNodeMid pn | pn.getAp() = ap and reach(pn))) and
+  states = count(FlowState state | exists(PathNodeMid pn | pn.getState() = state and reach(pn))) and
+  tuples = count(PathNode pn | reach(pn))
+}
+
+/**
+ * INTERNAL: Only for debugging.
+ *
+ * Calculates per-stage metrics for data flow.
+ */
+predicate stageStats(
+  int n, string stage, int nodes, int fields, int conscand, int states, int tuples,
+  Configuration config
+) {
+  stage = "1 Fwd" and
+  n = 10 and
+  Stage1::stats(true, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "1 Rev" and
+  n = 15 and
+  Stage1::stats(false, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "2 Fwd" and
+  n = 20 and
+  Stage2::stats(true, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "2 Rev" and
+  n = 25 and
+  Stage2::stats(false, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "3 Fwd" and
+  n = 30 and
+  Stage3::stats(true, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "3 Rev" and
+  n = 35 and
+  Stage3::stats(false, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "4 Fwd" and
+  n = 40 and
+  Stage4::stats(true, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "4 Rev" and
+  n = 45 and
+  Stage4::stats(false, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "5 Fwd" and n = 50 and finalStats(true, nodes, fields, conscand, states, tuples)
+  or
+  stage = "5 Rev" and n = 55 and finalStats(false, nodes, fields, conscand, states, tuples)
+}
+
+private module FlowExploration {
+  private predicate callableStep(DataFlowCallable c1, DataFlowCallable c2, Configuration config) {
+    exists(NodeEx node1, NodeEx node2 |
+      jumpStep(node1, node2, config)
+      or
+      additionalJumpStep(node1, node2, config)
+      or
+      additionalJumpStateStep(node1, _, node2, _, config)
+      or
+      // flow into callable
+      viableParamArgEx(_, node2, node1)
+      or
+      // flow out of a callable
+      viableReturnPosOutEx(_, node1.(RetNodeEx).getReturnPosition(), node2)
+    |
+      c1 = node1.getEnclosingCallable() and
+      c2 = node2.getEnclosingCallable() and
+      c1 != c2
+    )
+  }
+
+  private predicate interestingCallableSrc(DataFlowCallable c, Configuration config) {
+    exists(Node n | config.isSource(n) or config.isSource(n, _) | c = getNodeEnclosingCallable(n))
+    or
+    exists(DataFlowCallable mid |
+      interestingCallableSrc(mid, config) and callableStep(mid, c, config)
+    )
+  }
+
+  private predicate interestingCallableSink(DataFlowCallable c, Configuration config) {
+    exists(Node n | config.isSink(n) or config.isSink(n, _) | c = getNodeEnclosingCallable(n))
+    or
+    exists(DataFlowCallable mid |
+      interestingCallableSink(mid, config) and callableStep(c, mid, config)
+    )
+  }
+
+  private newtype TCallableExt =
+    TCallable(DataFlowCallable c, Configuration config) {
+      interestingCallableSrc(c, config) or
+      interestingCallableSink(c, config)
+    } or
+    TCallableSrc() or
+    TCallableSink()
+
+  private predicate callableExtSrc(TCallableSrc src) { any() }
+
+  private predicate callableExtSink(TCallableSink sink) { any() }
+
+  private predicate callableExtStepFwd(TCallableExt ce1, TCallableExt ce2) {
+    exists(DataFlowCallable c1, DataFlowCallable c2, Configuration config |
+      callableStep(c1, c2, config) and
+      ce1 = TCallable(c1, pragma[only_bind_into](config)) and
+      ce2 = TCallable(c2, pragma[only_bind_into](config))
+    )
+    or
+    exists(Node n, Configuration config |
+      ce1 = TCallableSrc() and
+      (config.isSource(n) or config.isSource(n, _)) and
+      ce2 = TCallable(getNodeEnclosingCallable(n), config)
+    )
+    or
+    exists(Node n, Configuration config |
+      ce2 = TCallableSink() and
+      (config.isSink(n) or config.isSink(n, _)) and
+      ce1 = TCallable(getNodeEnclosingCallable(n), config)
+    )
+  }
+
+  private predicate callableExtStepRev(TCallableExt ce1, TCallableExt ce2) {
+    callableExtStepFwd(ce2, ce1)
+  }
+
+  private int distSrcExt(TCallableExt c) =
+    shortestDistances(callableExtSrc/1, callableExtStepFwd/2)(_, c, result)
+
+  private int distSinkExt(TCallableExt c) =
+    shortestDistances(callableExtSink/1, callableExtStepRev/2)(_, c, result)
+
+  private int distSrc(DataFlowCallable c, Configuration config) {
+    result = distSrcExt(TCallable(c, config)) - 1
+  }
+
+  private int distSink(DataFlowCallable c, Configuration config) {
+    result = distSinkExt(TCallable(c, config)) - 1
+  }
+
+  private newtype TPartialAccessPath =
+    TPartialNil(DataFlowType t) or
+    TPartialCons(TypedContent tc, int len) { len in [1 .. accessPathLimit()] }
+
+  /**
+   * Conceptually a list of `TypedContent`s followed by a `Type`, but only the first
+   * element of the list and its length are tracked. If data flows from a source to
+   * a given node with a given `AccessPath`, this indicates the sequence of
+   * dereference operations needed to get from the value in the node to the
+   * tracked object. The final type indicates the type of the tracked object.
+   */
+  private class PartialAccessPath extends TPartialAccessPath {
+    abstract string toString();
+
+    TypedContent getHead() { this = TPartialCons(result, _) }
+
+    int len() {
+      this = TPartialNil(_) and result = 0
+      or
+      this = TPartialCons(_, result)
+    }
+
+    DataFlowType getType() {
+      this = TPartialNil(result)
+      or
+      exists(TypedContent head | this = TPartialCons(head, _) | result = head.getContainerType())
+    }
+  }
+
+  private class PartialAccessPathNil extends PartialAccessPath, TPartialNil {
+    override string toString() {
+      exists(DataFlowType t | this = TPartialNil(t) | result = concat(": " + ppReprType(t)))
+    }
+  }
+
+  private class PartialAccessPathCons extends PartialAccessPath, TPartialCons {
+    override string toString() {
+      exists(TypedContent tc, int len | this = TPartialCons(tc, len) |
+        if len = 1
+        then result = "[" + tc.toString() + "]"
+        else result = "[" + tc.toString() + ", ... (" + len.toString() + ")]"
+      )
+    }
+  }
+
+  private newtype TRevPartialAccessPath =
+    TRevPartialNil() or
+    TRevPartialCons(Content c, int len) { len in [1 .. accessPathLimit()] }
+
+  /**
+   * Conceptually a list of `Content`s, but only the first
+   * element of the list and its length are tracked.
+   */
+  private class RevPartialAccessPath extends TRevPartialAccessPath {
+    abstract string toString();
+
+    Content getHead() { this = TRevPartialCons(result, _) }
+
+    int len() {
+      this = TRevPartialNil() and result = 0
+      or
+      this = TRevPartialCons(_, result)
+    }
+  }
+
+  private class RevPartialAccessPathNil extends RevPartialAccessPath, TRevPartialNil {
+    override string toString() { result = "" }
+  }
+
+  private class RevPartialAccessPathCons extends RevPartialAccessPath, TRevPartialCons {
+    override string toString() {
+      exists(Content c, int len | this = TRevPartialCons(c, len) |
+        if len = 1
+        then result = "[" + c.toString() + "]"
+        else result = "[" + c.toString() + ", ... (" + len.toString() + ")]"
+      )
+    }
+  }
+
+  private predicate relevantState(FlowState state) {
+    sourceNode(_, state, _) or
+    sinkNode(_, state, _) or
+    additionalLocalStateStep(_, state, _, _, _) or
+    additionalLocalStateStep(_, _, _, state, _) or
+    additionalJumpStateStep(_, state, _, _, _) or
+    additionalJumpStateStep(_, _, _, state, _)
+  }
+
+  private newtype TSummaryCtx1 =
+    TSummaryCtx1None() or
+    TSummaryCtx1Param(ParamNodeEx p)
+
+  private newtype TSummaryCtx2 =
+    TSummaryCtx2None() or
+    TSummaryCtx2Some(FlowState s) { relevantState(s) }
+
+  private newtype TSummaryCtx3 =
+    TSummaryCtx3None() or
+    TSummaryCtx3Some(PartialAccessPath ap)
+
+  private newtype TRevSummaryCtx1 =
+    TRevSummaryCtx1None() or
+    TRevSummaryCtx1Some(ReturnPosition pos)
+
+  private newtype TRevSummaryCtx2 =
+    TRevSummaryCtx2None() or
+    TRevSummaryCtx2Some(FlowState s) { relevantState(s) }
+
+  private newtype TRevSummaryCtx3 =
+    TRevSummaryCtx3None() or
+    TRevSummaryCtx3Some(RevPartialAccessPath ap)
+
+  private newtype TPartialPathNode =
+    TPartialPathNodeFwd(
+      NodeEx node, FlowState state, CallContext cc, TSummaryCtx1 sc1, TSummaryCtx2 sc2,
+      TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config
+    ) {
+      sourceNode(node, state, config) and
+      cc instanceof CallContextAny and
+      sc1 = TSummaryCtx1None() and
+      sc2 = TSummaryCtx2None() and
+      sc3 = TSummaryCtx3None() and
+      ap = TPartialNil(node.getDataFlowType()) and
+      exists(config.explorationLimit())
+      or
+      partialPathNodeMk0(node, state, cc, sc1, sc2, sc3, ap, config) and
+      distSrc(node.getEnclosingCallable(), config) <= config.explorationLimit()
+    } or
+    TPartialPathNodeRev(
+      NodeEx node, FlowState state, TRevSummaryCtx1 sc1, TRevSummaryCtx2 sc2, TRevSummaryCtx3 sc3,
+      RevPartialAccessPath ap, Configuration config
+    ) {
+      sinkNode(node, state, config) and
+      sc1 = TRevSummaryCtx1None() and
+      sc2 = TRevSummaryCtx2None() and
+      sc3 = TRevSummaryCtx3None() and
+      ap = TRevPartialNil() and
+      exists(config.explorationLimit())
+      or
+      exists(PartialPathNodeRev mid |
+        revPartialPathStep(mid, node, state, sc1, sc2, sc3, ap, config) and
+        not clearsContentEx(node, ap.getHead()) and
+        (
+          notExpectsContent(node) or
+          expectsContentEx(node, ap.getHead())
+        ) and
+        not fullBarrier(node, config) and
+        not stateBarrier(node, state, config) and
+        distSink(node.getEnclosingCallable(), config) <= config.explorationLimit()
+      )
+    }
+
+  pragma[nomagic]
+  private predicate partialPathNodeMk0(
+    NodeEx node, FlowState state, CallContext cc, TSummaryCtx1 sc1, TSummaryCtx2 sc2,
+    TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config
+  ) {
+    exists(PartialPathNodeFwd mid |
+      partialPathStep(mid, node, state, cc, sc1, sc2, sc3, ap, config) and
+      not fullBarrier(node, config) and
+      not stateBarrier(node, state, config) and
+      not clearsContentEx(node, ap.getHead().getContent()) and
+      (
+        notExpectsContent(node) or
+        expectsContentEx(node, ap.getHead().getContent())
+      ) and
+      if node.asNode() instanceof CastingNode
+      then compatibleTypes(node.getDataFlowType(), ap.getType())
+      else any()
+    )
+  }
+
+  /**
+   * A `Node` augmented with a call context, an access path, and a configuration.
+   */
+  class PartialPathNode extends TPartialPathNode {
+    /** Gets a textual representation of this element. */
+    string toString() { result = this.getNodeEx().toString() + this.ppAp() }
+
+    /**
+     * Gets a textual representation of this element, including a textual
+     * representation of the call context.
+     */
+    string toStringWithContext() {
+      result = this.getNodeEx().toString() + this.ppAp() + this.ppCtx()
+    }
+
+    /**
+     * Holds if this element is at the specified location.
+     * The location spans column `startcolumn` of line `startline` to
+     * column `endcolumn` of line `endline` in file `filepath`.
+     * For more information, see
+     * [Locations](https://codeql.github.com/docs/writing-codeql-queries/providing-locations-in-codeql-queries/).
+     */
+    predicate hasLocationInfo(
+      string filepath, int startline, int startcolumn, int endline, int endcolumn
+    ) {
+      this.getNodeEx().hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+    }
+
+    /** Gets the underlying `Node`. */
+    final Node getNode() { this.getNodeEx().projectToNode() = result }
+
+    FlowState getState() { none() }
+
+    private NodeEx getNodeEx() {
+      result = this.(PartialPathNodeFwd).getNodeEx() or
+      result = this.(PartialPathNodeRev).getNodeEx()
+    }
+
+    /** Gets the associated configuration. */
+    Configuration getConfiguration() { none() }
+
+    /** Gets a successor of this node, if any. */
+    PartialPathNode getASuccessor() { none() }
+
+    /**
+     * Gets the approximate distance to the nearest source measured in number
+     * of interprocedural steps.
+     */
+    int getSourceDistance() {
+      result = distSrc(this.getNodeEx().getEnclosingCallable(), this.getConfiguration())
+    }
+
+    /**
+     * Gets the approximate distance to the nearest sink measured in number
+     * of interprocedural steps.
+     */
+    int getSinkDistance() {
+      result = distSink(this.getNodeEx().getEnclosingCallable(), this.getConfiguration())
+    }
+
+    private string ppAp() {
+      exists(string s |
+        s = this.(PartialPathNodeFwd).getAp().toString() or
+        s = this.(PartialPathNodeRev).getAp().toString()
+      |
+        if s = "" then result = "" else result = " " + s
+      )
+    }
+
+    private string ppCtx() {
+      result = " <" + this.(PartialPathNodeFwd).getCallContext().toString() + ">"
+    }
+
+    /** Holds if this is a source in a forward-flow path. */
+    predicate isFwdSource() { this.(PartialPathNodeFwd).isSource() }
+
+    /** Holds if this is a sink in a reverse-flow path. */
+    predicate isRevSink() { this.(PartialPathNodeRev).isSink() }
+  }
+
+  /**
+   * Provides the query predicates needed to include a graph in a path-problem query.
+   */
+  module PartialPathGraph {
+    /** Holds if `(a,b)` is an edge in the graph of data flow path explanations. */
+    query predicate edges(PartialPathNode a, PartialPathNode b) { a.getASuccessor() = b }
+  }
+
+  private class PartialPathNodeFwd extends PartialPathNode, TPartialPathNodeFwd {
+    NodeEx node;
+    FlowState state;
+    CallContext cc;
+    TSummaryCtx1 sc1;
+    TSummaryCtx2 sc2;
+    TSummaryCtx3 sc3;
+    PartialAccessPath ap;
+    Configuration config;
+
+    PartialPathNodeFwd() { this = TPartialPathNodeFwd(node, state, cc, sc1, sc2, sc3, ap, config) }
+
+    NodeEx getNodeEx() { result = node }
+
+    override FlowState getState() { result = state }
+
+    CallContext getCallContext() { result = cc }
+
+    TSummaryCtx1 getSummaryCtx1() { result = sc1 }
+
+    TSummaryCtx2 getSummaryCtx2() { result = sc2 }
+
+    TSummaryCtx3 getSummaryCtx3() { result = sc3 }
+
+    PartialAccessPath getAp() { result = ap }
+
+    override Configuration getConfiguration() { result = config }
+
+    override PartialPathNodeFwd getASuccessor() {
+      partialPathStep(this, result.getNodeEx(), result.getState(), result.getCallContext(),
+        result.getSummaryCtx1(), result.getSummaryCtx2(), result.getSummaryCtx3(), result.getAp(),
+        result.getConfiguration())
+    }
+
+    predicate isSource() {
+      sourceNode(node, state, config) and
+      cc instanceof CallContextAny and
+      sc1 = TSummaryCtx1None() and
+      sc2 = TSummaryCtx2None() and
+      sc3 = TSummaryCtx3None() and
+      ap instanceof TPartialNil
+    }
+  }
+
+  private class PartialPathNodeRev extends PartialPathNode, TPartialPathNodeRev {
+    NodeEx node;
+    FlowState state;
+    TRevSummaryCtx1 sc1;
+    TRevSummaryCtx2 sc2;
+    TRevSummaryCtx3 sc3;
+    RevPartialAccessPath ap;
+    Configuration config;
+
+    PartialPathNodeRev() { this = TPartialPathNodeRev(node, state, sc1, sc2, sc3, ap, config) }
+
+    NodeEx getNodeEx() { result = node }
+
+    override FlowState getState() { result = state }
+
+    TRevSummaryCtx1 getSummaryCtx1() { result = sc1 }
+
+    TRevSummaryCtx2 getSummaryCtx2() { result = sc2 }
+
+    TRevSummaryCtx3 getSummaryCtx3() { result = sc3 }
+
+    RevPartialAccessPath getAp() { result = ap }
+
+    override Configuration getConfiguration() { result = config }
+
+    override PartialPathNodeRev getASuccessor() {
+      revPartialPathStep(result, this.getNodeEx(), this.getState(), this.getSummaryCtx1(),
+        this.getSummaryCtx2(), this.getSummaryCtx3(), this.getAp(), this.getConfiguration())
+    }
+
+    predicate isSink() {
+      sinkNode(node, state, config) and
+      sc1 = TRevSummaryCtx1None() and
+      sc2 = TRevSummaryCtx2None() and
+      sc3 = TRevSummaryCtx3None() and
+      ap = TRevPartialNil()
+    }
+  }
+
+  private predicate partialPathStep(
+    PartialPathNodeFwd mid, NodeEx node, FlowState state, CallContext cc, TSummaryCtx1 sc1,
+    TSummaryCtx2 sc2, TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config
+  ) {
+    not isUnreachableInCallCached(node.asNode(), cc.(CallContextSpecificCall).getCall()) and
+    (
+      localFlowStep(mid.getNodeEx(), node, config) and
+      state = mid.getState() and
+      cc = mid.getCallContext() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      ap = mid.getAp() and
+      config = mid.getConfiguration()
+      or
+      additionalLocalFlowStep(mid.getNodeEx(), node, config) and
+      state = mid.getState() and
+      cc = mid.getCallContext() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      mid.getAp() instanceof PartialAccessPathNil and
+      ap = TPartialNil(node.getDataFlowType()) and
+      config = mid.getConfiguration()
+      or
+      additionalLocalStateStep(mid.getNodeEx(), mid.getState(), node, state, config) and
+      cc = mid.getCallContext() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      mid.getAp() instanceof PartialAccessPathNil and
+      ap = TPartialNil(node.getDataFlowType()) and
+      config = mid.getConfiguration()
+    )
+    or
+    jumpStep(mid.getNodeEx(), node, config) and
+    state = mid.getState() and
+    cc instanceof CallContextAny and
+    sc1 = TSummaryCtx1None() and
+    sc2 = TSummaryCtx2None() and
+    sc3 = TSummaryCtx3None() and
+    ap = mid.getAp() and
+    config = mid.getConfiguration()
+    or
+    additionalJumpStep(mid.getNodeEx(), node, config) and
+    state = mid.getState() and
+    cc instanceof CallContextAny and
+    sc1 = TSummaryCtx1None() and
+    sc2 = TSummaryCtx2None() and
+    sc3 = TSummaryCtx3None() and
+    mid.getAp() instanceof PartialAccessPathNil and
+    ap = TPartialNil(node.getDataFlowType()) and
+    config = mid.getConfiguration()
+    or
+    additionalJumpStateStep(mid.getNodeEx(), mid.getState(), node, state, config) and
+    cc instanceof CallContextAny and
+    sc1 = TSummaryCtx1None() and
+    sc2 = TSummaryCtx2None() and
+    sc3 = TSummaryCtx3None() and
+    mid.getAp() instanceof PartialAccessPathNil and
+    ap = TPartialNil(node.getDataFlowType()) and
+    config = mid.getConfiguration()
+    or
+    partialPathStoreStep(mid, _, _, node, ap) and
+    state = mid.getState() and
+    cc = mid.getCallContext() and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    config = mid.getConfiguration()
+    or
+    exists(PartialAccessPath ap0, TypedContent tc |
+      partialPathReadStep(mid, ap0, tc, node, cc, config) and
+      state = mid.getState() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      apConsFwd(ap, tc, ap0, config)
+    )
+    or
+    partialPathIntoCallable(mid, node, state, _, cc, sc1, sc2, sc3, _, ap, config)
+    or
+    partialPathOutOfCallable(mid, node, state, cc, ap, config) and
+    sc1 = TSummaryCtx1None() and
+    sc2 = TSummaryCtx2None() and
+    sc3 = TSummaryCtx3None()
+    or
+    partialPathThroughCallable(mid, node, state, cc, ap, config) and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3()
+  }
+
+  bindingset[result, i]
+  private int unbindInt(int i) { pragma[only_bind_out](i) = pragma[only_bind_out](result) }
+
+  pragma[inline]
+  private predicate partialPathStoreStep(
+    PartialPathNodeFwd mid, PartialAccessPath ap1, TypedContent tc, NodeEx node,
+    PartialAccessPath ap2
+  ) {
+    exists(NodeEx midNode, DataFlowType contentType |
+      midNode = mid.getNodeEx() and
+      ap1 = mid.getAp() and
+      store(midNode, tc, node, contentType, mid.getConfiguration()) and
+      ap2.getHead() = tc and
+      ap2.len() = unbindInt(ap1.len() + 1) and
+      compatibleTypes(ap1.getType(), contentType)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate apConsFwd(
+    PartialAccessPath ap1, TypedContent tc, PartialAccessPath ap2, Configuration config
+  ) {
+    exists(PartialPathNodeFwd mid |
+      partialPathStoreStep(mid, ap1, tc, _, ap2) and
+      config = mid.getConfiguration()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate partialPathReadStep(
+    PartialPathNodeFwd mid, PartialAccessPath ap, TypedContent tc, NodeEx node, CallContext cc,
+    Configuration config
+  ) {
+    exists(NodeEx midNode |
+      midNode = mid.getNodeEx() and
+      ap = mid.getAp() and
+      read(midNode, tc.getContent(), node, pragma[only_bind_into](config)) and
+      ap.getHead() = tc and
+      pragma[only_bind_into](config) = mid.getConfiguration() and
+      cc = mid.getCallContext()
+    )
+  }
+
+  private predicate partialPathOutOfCallable0(
+    PartialPathNodeFwd mid, ReturnPosition pos, FlowState state, CallContext innercc,
+    PartialAccessPath ap, Configuration config
+  ) {
+    pos = mid.getNodeEx().(RetNodeEx).getReturnPosition() and
+    state = mid.getState() and
+    innercc = mid.getCallContext() and
+    innercc instanceof CallContextNoCall and
+    ap = mid.getAp() and
+    config = mid.getConfiguration()
+  }
+
+  pragma[nomagic]
+  private predicate partialPathOutOfCallable1(
+    PartialPathNodeFwd mid, DataFlowCall call, ReturnKindExt kind, FlowState state, CallContext cc,
+    PartialAccessPath ap, Configuration config
+  ) {
+    exists(ReturnPosition pos, DataFlowCallable c, CallContext innercc |
+      partialPathOutOfCallable0(mid, pos, state, innercc, ap, config) and
+      c = pos.getCallable() and
+      kind = pos.getKind() and
+      resolveReturn(innercc, c, call)
+    |
+      if reducedViableImplInReturn(c, call) then cc = TReturn(c, call) else cc = TAnyCallContext()
+    )
+  }
+
+  private predicate partialPathOutOfCallable(
+    PartialPathNodeFwd mid, NodeEx out, FlowState state, CallContext cc, PartialAccessPath ap,
+    Configuration config
+  ) {
+    exists(ReturnKindExt kind, DataFlowCall call |
+      partialPathOutOfCallable1(mid, call, kind, state, cc, ap, config)
+    |
+      out.asNode() = kind.getAnOutNode(call)
+    )
+  }
+
+  pragma[noinline]
+  private predicate partialPathIntoArg(
+    PartialPathNodeFwd mid, ParameterPosition ppos, FlowState state, CallContext cc,
+    DataFlowCall call, PartialAccessPath ap, Configuration config
+  ) {
+    exists(ArgNode arg, ArgumentPosition apos |
+      arg = mid.getNodeEx().asNode() and
+      state = mid.getState() and
+      cc = mid.getCallContext() and
+      arg.argumentOf(call, apos) and
+      ap = mid.getAp() and
+      config = mid.getConfiguration() and
+      parameterMatch(ppos, apos)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate partialPathIntoCallable0(
+    PartialPathNodeFwd mid, DataFlowCallable callable, ParameterPosition pos, FlowState state,
+    CallContext outercc, DataFlowCall call, PartialAccessPath ap, Configuration config
+  ) {
+    partialPathIntoArg(mid, pos, state, outercc, call, ap, config) and
+    callable = resolveCall(call, outercc)
+  }
+
+  private predicate partialPathIntoCallable(
+    PartialPathNodeFwd mid, ParamNodeEx p, FlowState state, CallContext outercc,
+    CallContextCall innercc, TSummaryCtx1 sc1, TSummaryCtx2 sc2, TSummaryCtx3 sc3,
+    DataFlowCall call, PartialAccessPath ap, Configuration config
+  ) {
+    exists(ParameterPosition pos, DataFlowCallable callable |
+      partialPathIntoCallable0(mid, callable, pos, state, outercc, call, ap, config) and
+      p.isParameterOf(callable, pos) and
+      sc1 = TSummaryCtx1Param(p) and
+      sc2 = TSummaryCtx2Some(state) and
+      sc3 = TSummaryCtx3Some(ap)
+    |
+      if recordDataFlowCallSite(call, callable)
+      then innercc = TSpecificCall(call)
+      else innercc = TSomeCall()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate paramFlowsThroughInPartialPath(
+    ReturnKindExt kind, FlowState state, CallContextCall cc, TSummaryCtx1 sc1, TSummaryCtx2 sc2,
+    TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config
+  ) {
+    exists(PartialPathNodeFwd mid, RetNodeEx ret |
+      mid.getNodeEx() = ret and
+      kind = ret.getKind() and
+      state = mid.getState() and
+      cc = mid.getCallContext() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      config = mid.getConfiguration() and
+      ap = mid.getAp()
+    )
+  }
+
+  pragma[noinline]
+  private predicate partialPathThroughCallable0(
+    DataFlowCall call, PartialPathNodeFwd mid, ReturnKindExt kind, FlowState state, CallContext cc,
+    PartialAccessPath ap, Configuration config
+  ) {
+    exists(CallContext innercc, TSummaryCtx1 sc1, TSummaryCtx2 sc2, TSummaryCtx3 sc3 |
+      partialPathIntoCallable(mid, _, _, cc, innercc, sc1, sc2, sc3, call, _, config) and
+      paramFlowsThroughInPartialPath(kind, state, innercc, sc1, sc2, sc3, ap, config)
+    )
+  }
+
+  private predicate partialPathThroughCallable(
+    PartialPathNodeFwd mid, NodeEx out, FlowState state, CallContext cc, PartialAccessPath ap,
+    Configuration config
+  ) {
+    exists(DataFlowCall call, ReturnKindExt kind |
+      partialPathThroughCallable0(call, mid, kind, state, cc, ap, config) and
+      out.asNode() = kind.getAnOutNode(call)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathStep(
+    PartialPathNodeRev mid, NodeEx node, FlowState state, TRevSummaryCtx1 sc1, TRevSummaryCtx2 sc2,
+    TRevSummaryCtx3 sc3, RevPartialAccessPath ap, Configuration config
+  ) {
+    localFlowStep(node, mid.getNodeEx(), config) and
+    state = mid.getState() and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    ap = mid.getAp() and
+    config = mid.getConfiguration()
+    or
+    additionalLocalFlowStep(node, mid.getNodeEx(), config) and
+    state = mid.getState() and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    mid.getAp() instanceof RevPartialAccessPathNil and
+    ap = TRevPartialNil() and
+    config = mid.getConfiguration()
+    or
+    additionalLocalStateStep(node, state, mid.getNodeEx(), mid.getState(), config) and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    mid.getAp() instanceof RevPartialAccessPathNil and
+    ap = TRevPartialNil() and
+    config = mid.getConfiguration()
+    or
+    jumpStep(node, mid.getNodeEx(), config) and
+    state = mid.getState() and
+    sc1 = TRevSummaryCtx1None() and
+    sc2 = TRevSummaryCtx2None() and
+    sc3 = TRevSummaryCtx3None() and
+    ap = mid.getAp() and
+    config = mid.getConfiguration()
+    or
+    additionalJumpStep(node, mid.getNodeEx(), config) and
+    state = mid.getState() and
+    sc1 = TRevSummaryCtx1None() and
+    sc2 = TRevSummaryCtx2None() and
+    sc3 = TRevSummaryCtx3None() and
+    mid.getAp() instanceof RevPartialAccessPathNil and
+    ap = TRevPartialNil() and
+    config = mid.getConfiguration()
+    or
+    additionalJumpStateStep(node, state, mid.getNodeEx(), mid.getState(), config) and
+    sc1 = TRevSummaryCtx1None() and
+    sc2 = TRevSummaryCtx2None() and
+    sc3 = TRevSummaryCtx3None() and
+    mid.getAp() instanceof RevPartialAccessPathNil and
+    ap = TRevPartialNil() and
+    config = mid.getConfiguration()
+    or
+    revPartialPathReadStep(mid, _, _, node, ap) and
+    state = mid.getState() and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    config = mid.getConfiguration()
+    or
+    exists(RevPartialAccessPath ap0, Content c |
+      revPartialPathStoreStep(mid, ap0, c, node, config) and
+      state = mid.getState() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      apConsRev(ap, c, ap0, config)
+    )
+    or
+    exists(ParamNodeEx p |
+      mid.getNodeEx() = p and
+      viableParamArgEx(_, p, node) and
+      state = mid.getState() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      sc1 = TRevSummaryCtx1None() and
+      sc2 = TRevSummaryCtx2None() and
+      sc3 = TRevSummaryCtx3None() and
+      ap = mid.getAp() and
+      config = mid.getConfiguration()
+    )
+    or
+    exists(ReturnPosition pos |
+      revPartialPathIntoReturn(mid, pos, state, sc1, sc2, sc3, _, ap, config) and
+      pos = getReturnPosition(node.asNode())
+    )
+    or
+    revPartialPathThroughCallable(mid, node, state, ap, config) and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3()
+  }
+
+  pragma[inline]
+  private predicate revPartialPathReadStep(
+    PartialPathNodeRev mid, RevPartialAccessPath ap1, Content c, NodeEx node,
+    RevPartialAccessPath ap2
+  ) {
+    exists(NodeEx midNode |
+      midNode = mid.getNodeEx() and
+      ap1 = mid.getAp() and
+      read(node, c, midNode, mid.getConfiguration()) and
+      ap2.getHead() = c and
+      ap2.len() = unbindInt(ap1.len() + 1)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate apConsRev(
+    RevPartialAccessPath ap1, Content c, RevPartialAccessPath ap2, Configuration config
+  ) {
+    exists(PartialPathNodeRev mid |
+      revPartialPathReadStep(mid, ap1, c, _, ap2) and
+      config = mid.getConfiguration()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathStoreStep(
+    PartialPathNodeRev mid, RevPartialAccessPath ap, Content c, NodeEx node, Configuration config
+  ) {
+    exists(NodeEx midNode, TypedContent tc |
+      midNode = mid.getNodeEx() and
+      ap = mid.getAp() and
+      store(node, tc, midNode, _, config) and
+      ap.getHead() = c and
+      config = mid.getConfiguration() and
+      tc.getContent() = c
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathIntoReturn(
+    PartialPathNodeRev mid, ReturnPosition pos, FlowState state, TRevSummaryCtx1Some sc1,
+    TRevSummaryCtx2Some sc2, TRevSummaryCtx3Some sc3, DataFlowCall call, RevPartialAccessPath ap,
+    Configuration config
+  ) {
+    exists(NodeEx out |
+      mid.getNodeEx() = out and
+      mid.getState() = state and
+      viableReturnPosOutEx(call, pos, out) and
+      sc1 = TRevSummaryCtx1Some(pos) and
+      sc2 = TRevSummaryCtx2Some(state) and
+      sc3 = TRevSummaryCtx3Some(ap) and
+      ap = mid.getAp() and
+      config = mid.getConfiguration()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathFlowsThrough(
+    ArgumentPosition apos, FlowState state, TRevSummaryCtx1Some sc1, TRevSummaryCtx2Some sc2,
+    TRevSummaryCtx3Some sc3, RevPartialAccessPath ap, Configuration config
+  ) {
+    exists(PartialPathNodeRev mid, ParamNodeEx p, ParameterPosition ppos |
+      mid.getNodeEx() = p and
+      mid.getState() = state and
+      p.getPosition() = ppos and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      ap = mid.getAp() and
+      config = mid.getConfiguration() and
+      parameterMatch(ppos, apos)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathThroughCallable0(
+    DataFlowCall call, PartialPathNodeRev mid, ArgumentPosition pos, FlowState state,
+    RevPartialAccessPath ap, Configuration config
+  ) {
+    exists(TRevSummaryCtx1Some sc1, TRevSummaryCtx2Some sc2, TRevSummaryCtx3Some sc3 |
+      revPartialPathIntoReturn(mid, _, _, sc1, sc2, sc3, call, _, config) and
+      revPartialPathFlowsThrough(pos, state, sc1, sc2, sc3, ap, config)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathThroughCallable(
+    PartialPathNodeRev mid, ArgNodeEx node, FlowState state, RevPartialAccessPath ap,
+    Configuration config
+  ) {
+    exists(DataFlowCall call, ArgumentPosition pos |
+      revPartialPathThroughCallable0(call, mid, pos, state, ap, config) and
+      node.asNode().(ArgNode).argumentOf(call, pos)
+    )
+  }
+}
+
+import FlowExploration
+
+private predicate partialFlow(
+  PartialPathNode source, PartialPathNode node, Configuration configuration
+) {
+  source.getConfiguration() = configuration and
+  source.isFwdSource() and
+  node = source.getASuccessor+()
+}
+
+private predicate revPartialFlow(
+  PartialPathNode node, PartialPathNode sink, Configuration configuration
+) {
+  sink.getConfiguration() = configuration and
+  sink.isRevSink() and
+  node.getASuccessor+() = sink
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImpl3.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImpl3.qll
new file mode 100644
index 00000000000..468f8640a78
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImpl3.qll
@@ -0,0 +1,4450 @@
+/**
+ * Provides an implementation of global (interprocedural) data flow. This file
+ * re-exports the local (intraprocedural) data flow analysis from
+ * `DataFlowImplSpecific::Public` and adds a global analysis, mainly exposed
+ * through the `Configuration` class. This file exists in several identical
+ * copies, allowing queries to use multiple `Configuration` classes that depend
+ * on each other without introducing mutual recursion among those configurations.
+ */
+
+private import DataFlowImplCommon
+private import DataFlowImplSpecific::Private
+import DataFlowImplSpecific::Public
+import DataFlowImplCommonPublic
+
+/**
+ * A configuration of interprocedural data flow analysis. This defines
+ * sources, sinks, and any other configurable aspect of the analysis. Each
+ * use of the global data flow library must define its own unique extension
+ * of this abstract class. To create a configuration, extend this class with
+ * a subclass whose characteristic predicate is a unique singleton string.
+ * For example, write
+ *
+ * ```ql
+ * class MyAnalysisConfiguration extends DataFlow::Configuration {
+ *   MyAnalysisConfiguration() { this = "MyAnalysisConfiguration" }
+ *   // Override `isSource` and `isSink`.
+ *   // Optionally override `isBarrier`.
+ *   // Optionally override `isAdditionalFlowStep`.
+ * }
+ * ```
+ * Conceptually, this defines a graph where the nodes are `DataFlow::Node`s and
+ * the edges are those data-flow steps that preserve the value of the node
+ * along with any additional edges defined by `isAdditionalFlowStep`.
+ * Specifying nodes in `isBarrier` will remove those nodes from the graph, and
+ * specifying nodes in `isBarrierIn` and/or `isBarrierOut` will remove in-going
+ * and/or out-going edges from those nodes, respectively.
+ *
+ * Then, to query whether there is flow between some `source` and `sink`,
+ * write
+ *
+ * ```ql
+ * exists(MyAnalysisConfiguration cfg | cfg.hasFlow(source, sink))
+ * ```
+ *
+ * Multiple configurations can coexist, but two classes extending
+ * `DataFlow::Configuration` should never depend on each other. One of them
+ * should instead depend on a `DataFlow2::Configuration`, a
+ * `DataFlow3::Configuration`, or a `DataFlow4::Configuration`.
+ */
+abstract class Configuration extends string {
+  bindingset[this]
+  Configuration() { any() }
+
+  /**
+   * Holds if `source` is a relevant data flow source.
+   */
+  predicate isSource(Node source) { none() }
+
+  /**
+   * Holds if `source` is a relevant data flow source with the given initial
+   * `state`.
+   */
+  predicate isSource(Node source, FlowState state) { none() }
+
+  /**
+   * Holds if `sink` is a relevant data flow sink.
+   */
+  predicate isSink(Node sink) { none() }
+
+  /**
+   * Holds if `sink` is a relevant data flow sink accepting `state`.
+   */
+  predicate isSink(Node source, FlowState state) { none() }
+
+  /**
+   * Holds if data flow through `node` is prohibited. This completely removes
+   * `node` from the data flow graph.
+   */
+  predicate isBarrier(Node node) { none() }
+
+  /**
+   * Holds if data flow through `node` is prohibited when the flow state is
+   * `state`.
+   */
+  predicate isBarrier(Node node, FlowState state) { none() }
+
+  /** Holds if data flow into `node` is prohibited. */
+  predicate isBarrierIn(Node node) { none() }
+
+  /** Holds if data flow out of `node` is prohibited. */
+  predicate isBarrierOut(Node node) { none() }
+
+  /**
+   * DEPRECATED: Use `isBarrier` and `BarrierGuard` module instead.
+   *
+   * Holds if data flow through nodes guarded by `guard` is prohibited.
+   */
+  deprecated predicate isBarrierGuard(BarrierGuard guard) { none() }
+
+  /**
+   * DEPRECATED: Use `isBarrier` and `BarrierGuard` module instead.
+   *
+   * Holds if data flow through nodes guarded by `guard` is prohibited when
+   * the flow state is `state`
+   */
+  deprecated predicate isBarrierGuard(BarrierGuard guard, FlowState state) { none() }
+
+  /**
+   * Holds if data may flow from `node1` to `node2` in addition to the normal data-flow steps.
+   */
+  predicate isAdditionalFlowStep(Node node1, Node node2) { none() }
+
+  /**
+   * Holds if data may flow from `node1` to `node2` in addition to the normal data-flow steps.
+   * This step is only applicable in `state1` and updates the flow state to `state2`.
+   */
+  predicate isAdditionalFlowStep(Node node1, FlowState state1, Node node2, FlowState state2) {
+    none()
+  }
+
+  /**
+   * Holds if an arbitrary number of implicit read steps of content `c` may be
+   * taken at `node`.
+   */
+  predicate allowImplicitRead(Node node, ContentSet c) { none() }
+
+  /**
+   * Gets the virtual dispatch branching limit when calculating field flow.
+   * This can be overridden to a smaller value to improve performance (a
+   * value of 0 disables field flow), or a larger value to get more results.
+   */
+  int fieldFlowBranchLimit() { result = 2 }
+
+  /**
+   * Gets a data flow configuration feature to add restrictions to the set of
+   * valid flow paths.
+   *
+   * - `FeatureHasSourceCallContext`:
+   *    Assume that sources have some existing call context to disallow
+   *    conflicting return-flow directly following the source.
+   * - `FeatureHasSinkCallContext`:
+   *    Assume that sinks have some existing call context to disallow
+   *    conflicting argument-to-parameter flow directly preceding the sink.
+   * - `FeatureEqualSourceSinkCallContext`:
+   *    Implies both of the above and additionally ensures that the entire flow
+   *    path preserves the call context.
+   */
+  FlowFeature getAFeature() { none() }
+
+  /**
+   * Holds if data may flow from `source` to `sink` for this configuration.
+   */
+  predicate hasFlow(Node source, Node sink) { flowsTo(source, sink, this) }
+
+  /**
+   * Holds if data may flow from `source` to `sink` for this configuration.
+   *
+   * The corresponding paths are generated from the end-points and the graph
+   * included in the module `PathGraph`.
+   */
+  predicate hasFlowPath(PathNode source, PathNode sink) { flowsTo(source, sink, _, _, this) }
+
+  /**
+   * Holds if data may flow from some source to `sink` for this configuration.
+   */
+  predicate hasFlowTo(Node sink) { this.hasFlow(_, sink) }
+
+  /**
+   * Holds if data may flow from some source to `sink` for this configuration.
+   */
+  predicate hasFlowToExpr(DataFlowExpr sink) { this.hasFlowTo(exprNode(sink)) }
+
+  /**
+   * Gets the exploration limit for `hasPartialFlow` and `hasPartialFlowRev`
+   * measured in approximate number of interprocedural steps.
+   */
+  int explorationLimit() { none() }
+
+  /**
+   * Holds if hidden nodes should be included in the data flow graph.
+   *
+   * This feature should only be used for debugging or when the data flow graph
+   * is not visualized (for example in a `path-problem` query).
+   */
+  predicate includeHiddenNodes() { none() }
+
+  /**
+   * Holds if there is a partial data flow path from `source` to `node`. The
+   * approximate distance between `node` and the closest source is `dist` and
+   * is restricted to be less than or equal to `explorationLimit()`. This
+   * predicate completely disregards sink definitions.
+   *
+   * This predicate is intended for data-flow exploration and debugging and may
+   * perform poorly if the number of sources is too big and/or the exploration
+   * limit is set too high without using barriers.
+   *
+   * This predicate is disabled (has no results) by default. Override
+   * `explorationLimit()` with a suitable number to enable this predicate.
+   *
+   * To use this in a `path-problem` query, import the module `PartialPathGraph`.
+   */
+  final predicate hasPartialFlow(PartialPathNode source, PartialPathNode node, int dist) {
+    partialFlow(source, node, this) and
+    dist = node.getSourceDistance()
+  }
+
+  /**
+   * Holds if there is a partial data flow path from `node` to `sink`. The
+   * approximate distance between `node` and the closest sink is `dist` and
+   * is restricted to be less than or equal to `explorationLimit()`. This
+   * predicate completely disregards source definitions.
+   *
+   * This predicate is intended for data-flow exploration and debugging and may
+   * perform poorly if the number of sinks is too big and/or the exploration
+   * limit is set too high without using barriers.
+   *
+   * This predicate is disabled (has no results) by default. Override
+   * `explorationLimit()` with a suitable number to enable this predicate.
+   *
+   * To use this in a `path-problem` query, import the module `PartialPathGraph`.
+   *
+   * Note that reverse flow has slightly lower precision than the corresponding
+   * forward flow, as reverse flow disregards type pruning among other features.
+   */
+  final predicate hasPartialFlowRev(PartialPathNode node, PartialPathNode sink, int dist) {
+    revPartialFlow(node, sink, this) and
+    dist = node.getSinkDistance()
+  }
+}
+
+/**
+ * This class exists to prevent mutual recursion between the user-overridden
+ * member predicates of `Configuration` and the rest of the data-flow library.
+ * Good performance cannot be guaranteed in the presence of such recursion, so
+ * it should be replaced by using more than one copy of the data flow library.
+ */
+abstract private class ConfigurationRecursionPrevention extends Configuration {
+  bindingset[this]
+  ConfigurationRecursionPrevention() { any() }
+
+  override predicate hasFlow(Node source, Node sink) {
+    strictcount(Node n | this.isSource(n)) < 0
+    or
+    strictcount(Node n | this.isSource(n, _)) < 0
+    or
+    strictcount(Node n | this.isSink(n)) < 0
+    or
+    strictcount(Node n | this.isSink(n, _)) < 0
+    or
+    strictcount(Node n1, Node n2 | this.isAdditionalFlowStep(n1, n2)) < 0
+    or
+    strictcount(Node n1, Node n2 | this.isAdditionalFlowStep(n1, _, n2, _)) < 0
+    or
+    super.hasFlow(source, sink)
+  }
+}
+
+private newtype TNodeEx =
+  TNodeNormal(Node n) or
+  TNodeImplicitRead(Node n, boolean hasRead) {
+    any(Configuration c).allowImplicitRead(n, _) and hasRead = [false, true]
+  }
+
+private class NodeEx extends TNodeEx {
+  string toString() {
+    result = this.asNode().toString()
+    or
+    exists(Node n | this.isImplicitReadNode(n, _) | result = n.toString() + " [Ext]")
+  }
+
+  Node asNode() { this = TNodeNormal(result) }
+
+  predicate isImplicitReadNode(Node n, boolean hasRead) { this = TNodeImplicitRead(n, hasRead) }
+
+  Node projectToNode() { this = TNodeNormal(result) or this = TNodeImplicitRead(result, _) }
+
+  pragma[nomagic]
+  private DataFlowCallable getEnclosingCallable0() {
+    nodeEnclosingCallable(this.projectToNode(), result)
+  }
+
+  pragma[inline]
+  DataFlowCallable getEnclosingCallable() {
+    pragma[only_bind_out](this).getEnclosingCallable0() = pragma[only_bind_into](result)
+  }
+
+  pragma[nomagic]
+  private DataFlowType getDataFlowType0() { nodeDataFlowType(this.asNode(), result) }
+
+  pragma[inline]
+  DataFlowType getDataFlowType() {
+    pragma[only_bind_out](this).getDataFlowType0() = pragma[only_bind_into](result)
+  }
+
+  predicate hasLocationInfo(
+    string filepath, int startline, int startcolumn, int endline, int endcolumn
+  ) {
+    this.projectToNode().hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+  }
+}
+
+private class ArgNodeEx extends NodeEx {
+  ArgNodeEx() { this.asNode() instanceof ArgNode }
+}
+
+private class ParamNodeEx extends NodeEx {
+  ParamNodeEx() { this.asNode() instanceof ParamNode }
+
+  predicate isParameterOf(DataFlowCallable c, ParameterPosition pos) {
+    this.asNode().(ParamNode).isParameterOf(c, pos)
+  }
+
+  ParameterPosition getPosition() { this.isParameterOf(_, result) }
+
+  predicate allowParameterReturnInSelf() { allowParameterReturnInSelfCached(this.asNode()) }
+}
+
+private class RetNodeEx extends NodeEx {
+  RetNodeEx() { this.asNode() instanceof ReturnNodeExt }
+
+  ReturnPosition getReturnPosition() { result = getReturnPosition(this.asNode()) }
+
+  ReturnKindExt getKind() { result = this.asNode().(ReturnNodeExt).getKind() }
+}
+
+private predicate inBarrier(NodeEx node, Configuration config) {
+  exists(Node n |
+    node.asNode() = n and
+    config.isBarrierIn(n)
+  |
+    config.isSource(n) or config.isSource(n, _)
+  )
+}
+
+private predicate outBarrier(NodeEx node, Configuration config) {
+  exists(Node n |
+    node.asNode() = n and
+    config.isBarrierOut(n)
+  |
+    config.isSink(n) or config.isSink(n, _)
+  )
+}
+
+/** A bridge class to access the deprecated `isBarrierGuard`. */
+private class BarrierGuardGuardedNodeBridge extends Unit {
+  abstract predicate guardedNode(Node n, Configuration config);
+
+  abstract predicate guardedNode(Node n, FlowState state, Configuration config);
+}
+
+private class BarrierGuardGuardedNode extends BarrierGuardGuardedNodeBridge {
+  deprecated override predicate guardedNode(Node n, Configuration config) {
+    exists(BarrierGuard g |
+      config.isBarrierGuard(g) and
+      n = g.getAGuardedNode()
+    )
+  }
+
+  deprecated override predicate guardedNode(Node n, FlowState state, Configuration config) {
+    exists(BarrierGuard g |
+      config.isBarrierGuard(g, state) and
+      n = g.getAGuardedNode()
+    )
+  }
+}
+
+pragma[nomagic]
+private predicate fullBarrier(NodeEx node, Configuration config) {
+  exists(Node n | node.asNode() = n |
+    config.isBarrier(n)
+    or
+    config.isBarrierIn(n) and
+    not config.isSource(n) and
+    not config.isSource(n, _)
+    or
+    config.isBarrierOut(n) and
+    not config.isSink(n) and
+    not config.isSink(n, _)
+    or
+    any(BarrierGuardGuardedNodeBridge b).guardedNode(n, config)
+  )
+}
+
+pragma[nomagic]
+private predicate stateBarrier(NodeEx node, FlowState state, Configuration config) {
+  exists(Node n | node.asNode() = n |
+    config.isBarrier(n, state)
+    or
+    any(BarrierGuardGuardedNodeBridge b).guardedNode(n, state, config)
+  )
+}
+
+pragma[nomagic]
+private predicate sourceNode(NodeEx node, FlowState state, Configuration config) {
+  (
+    config.isSource(node.asNode()) and state instanceof FlowStateEmpty
+    or
+    config.isSource(node.asNode(), state)
+  ) and
+  not fullBarrier(node, config) and
+  not stateBarrier(node, state, config)
+}
+
+pragma[nomagic]
+private predicate sinkNode(NodeEx node, FlowState state, Configuration config) {
+  (
+    config.isSink(node.asNode()) and state instanceof FlowStateEmpty
+    or
+    config.isSink(node.asNode(), state)
+  ) and
+  not fullBarrier(node, config) and
+  not stateBarrier(node, state, config)
+}
+
+/** Provides the relevant barriers for a step from `node1` to `node2`. */
+pragma[inline]
+private predicate stepFilter(NodeEx node1, NodeEx node2, Configuration config) {
+  not outBarrier(node1, config) and
+  not inBarrier(node2, config) and
+  not fullBarrier(node1, config) and
+  not fullBarrier(node2, config)
+}
+
+/**
+ * Holds if data can flow in one local step from `node1` to `node2`.
+ */
+private predicate localFlowStep(NodeEx node1, NodeEx node2, Configuration config) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    simpleLocalFlowStepExt(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and
+    stepFilter(node1, node2, config)
+  )
+  or
+  exists(Node n |
+    config.allowImplicitRead(n, _) and
+    node1.asNode() = n and
+    node2.isImplicitReadNode(n, false) and
+    not fullBarrier(node1, config)
+  )
+}
+
+/**
+ * Holds if the additional step from `node1` to `node2` does not jump between callables.
+ */
+private predicate additionalLocalFlowStep(NodeEx node1, NodeEx node2, Configuration config) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    config.isAdditionalFlowStep(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and
+    getNodeEnclosingCallable(n1) = getNodeEnclosingCallable(n2) and
+    stepFilter(node1, node2, config)
+  )
+  or
+  exists(Node n |
+    config.allowImplicitRead(n, _) and
+    node1.isImplicitReadNode(n, true) and
+    node2.asNode() = n and
+    not fullBarrier(node2, config)
+  )
+}
+
+private predicate additionalLocalStateStep(
+  NodeEx node1, FlowState s1, NodeEx node2, FlowState s2, Configuration config
+) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    config.isAdditionalFlowStep(pragma[only_bind_into](n1), s1, pragma[only_bind_into](n2), s2) and
+    getNodeEnclosingCallable(n1) = getNodeEnclosingCallable(n2) and
+    stepFilter(node1, node2, config) and
+    not stateBarrier(node1, s1, config) and
+    not stateBarrier(node2, s2, config)
+  )
+}
+
+/**
+ * Holds if data can flow from `node1` to `node2` in a way that discards call contexts.
+ */
+private predicate jumpStep(NodeEx node1, NodeEx node2, Configuration config) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    jumpStepCached(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and
+    stepFilter(node1, node2, config) and
+    not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+/**
+ * Holds if the additional step from `node1` to `node2` jumps between callables.
+ */
+private predicate additionalJumpStep(NodeEx node1, NodeEx node2, Configuration config) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    config.isAdditionalFlowStep(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and
+    getNodeEnclosingCallable(n1) != getNodeEnclosingCallable(n2) and
+    stepFilter(node1, node2, config) and
+    not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+private predicate additionalJumpStateStep(
+  NodeEx node1, FlowState s1, NodeEx node2, FlowState s2, Configuration config
+) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    config.isAdditionalFlowStep(pragma[only_bind_into](n1), s1, pragma[only_bind_into](n2), s2) and
+    getNodeEnclosingCallable(n1) != getNodeEnclosingCallable(n2) and
+    stepFilter(node1, node2, config) and
+    not stateBarrier(node1, s1, config) and
+    not stateBarrier(node2, s2, config) and
+    not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+pragma[nomagic]
+private predicate readSet(NodeEx node1, ContentSet c, NodeEx node2, Configuration config) {
+  readSet(pragma[only_bind_into](node1.asNode()), c, pragma[only_bind_into](node2.asNode())) and
+  stepFilter(node1, node2, config)
+  or
+  exists(Node n |
+    node2.isImplicitReadNode(n, true) and
+    node1.isImplicitReadNode(n, _) and
+    config.allowImplicitRead(n, c)
+  )
+}
+
+// inline to reduce fan-out via `getAReadContent`
+bindingset[c]
+private predicate read(NodeEx node1, Content c, NodeEx node2, Configuration config) {
+  exists(ContentSet cs |
+    readSet(node1, cs, node2, config) and
+    pragma[only_bind_out](c) = pragma[only_bind_into](cs).getAReadContent()
+  )
+}
+
+// inline to reduce fan-out via `getAReadContent`
+bindingset[c]
+private predicate clearsContentEx(NodeEx n, Content c) {
+  exists(ContentSet cs |
+    clearsContentCached(n.asNode(), cs) and
+    pragma[only_bind_out](c) = pragma[only_bind_into](cs).getAReadContent()
+  )
+}
+
+// inline to reduce fan-out via `getAReadContent`
+bindingset[c]
+private predicate expectsContentEx(NodeEx n, Content c) {
+  exists(ContentSet cs |
+    expectsContentCached(n.asNode(), cs) and
+    pragma[only_bind_out](c) = pragma[only_bind_into](cs).getAReadContent()
+  )
+}
+
+pragma[nomagic]
+private predicate notExpectsContent(NodeEx n) { not expectsContentCached(n.asNode(), _) }
+
+pragma[nomagic]
+private predicate store(
+  NodeEx node1, TypedContent tc, NodeEx node2, DataFlowType contentType, Configuration config
+) {
+  store(pragma[only_bind_into](node1.asNode()), tc, pragma[only_bind_into](node2.asNode()),
+    contentType) and
+  read(_, tc.getContent(), _, config) and
+  stepFilter(node1, node2, config)
+}
+
+pragma[nomagic]
+private predicate viableReturnPosOutEx(DataFlowCall call, ReturnPosition pos, NodeEx out) {
+  viableReturnPosOut(call, pos, out.asNode())
+}
+
+pragma[nomagic]
+private predicate viableParamArgEx(DataFlowCall call, ParamNodeEx p, ArgNodeEx arg) {
+  viableParamArg(call, p.asNode(), arg.asNode())
+}
+
+/**
+ * Holds if field flow should be used for the given configuration.
+ */
+private predicate useFieldFlow(Configuration config) { config.fieldFlowBranchLimit() >= 1 }
+
+private predicate hasSourceCallCtx(Configuration config) {
+  exists(FlowFeature feature | feature = config.getAFeature() |
+    feature instanceof FeatureHasSourceCallContext or
+    feature instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+private predicate hasSinkCallCtx(Configuration config) {
+  exists(FlowFeature feature | feature = config.getAFeature() |
+    feature instanceof FeatureHasSinkCallContext or
+    feature instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+private module Stage1 implements StageSig {
+  class ApApprox = Unit;
+
+  class Ap = Unit;
+
+  class ApOption = Unit;
+
+  class Cc = boolean;
+
+  /* Begin: Stage 1 logic. */
+  /**
+   * Holds if `node` is reachable from a source in the configuration `config`.
+   *
+   * The Boolean `cc` records whether the node is reached through an
+   * argument in a call.
+   */
+  predicate fwdFlow(NodeEx node, Cc cc, Configuration config) {
+    sourceNode(node, _, config) and
+    if hasSourceCallCtx(config) then cc = true else cc = false
+    or
+    exists(NodeEx mid | fwdFlow(mid, cc, config) |
+      localFlowStep(mid, node, config) or
+      additionalLocalFlowStep(mid, node, config) or
+      additionalLocalStateStep(mid, _, node, _, config)
+    )
+    or
+    exists(NodeEx mid | fwdFlow(mid, _, config) and cc = false |
+      jumpStep(mid, node, config) or
+      additionalJumpStep(mid, node, config) or
+      additionalJumpStateStep(mid, _, node, _, config)
+    )
+    or
+    // store
+    exists(NodeEx mid |
+      useFieldFlow(config) and
+      fwdFlow(mid, cc, config) and
+      store(mid, _, node, _, config)
+    )
+    or
+    // read
+    exists(ContentSet c |
+      fwdFlowReadSet(c, node, cc, config) and
+      fwdFlowConsCandSet(c, _, config)
+    )
+    or
+    // flow into a callable
+    exists(NodeEx arg |
+      fwdFlow(arg, _, config) and
+      viableParamArgEx(_, node, arg) and
+      cc = true and
+      not fullBarrier(node, config)
+    )
+    or
+    // flow out of a callable
+    exists(DataFlowCall call |
+      fwdFlowOut(call, node, false, config) and
+      cc = false
+      or
+      fwdFlowOutFromArg(call, node, config) and
+      fwdFlowIsEntered(call, cc, config)
+    )
+  }
+
+  private predicate fwdFlow(NodeEx node, Configuration config) { fwdFlow(node, _, config) }
+
+  pragma[nomagic]
+  private predicate fwdFlowReadSet(ContentSet c, NodeEx node, Cc cc, Configuration config) {
+    exists(NodeEx mid |
+      fwdFlow(mid, cc, config) and
+      readSet(mid, c, node, config)
+    )
+  }
+
+  /**
+   * Holds if `c` is the target of a store in the flow covered by `fwdFlow`.
+   */
+  pragma[nomagic]
+  private predicate fwdFlowConsCand(Content c, Configuration config) {
+    exists(NodeEx mid, NodeEx node, TypedContent tc |
+      not fullBarrier(node, config) and
+      useFieldFlow(config) and
+      fwdFlow(mid, _, config) and
+      store(mid, tc, node, _, config) and
+      c = tc.getContent()
+    )
+  }
+
+  /**
+   * Holds if `cs` may be interpreted in a read as the target of some store
+   * into `c`, in the flow covered by `fwdFlow`.
+   */
+  pragma[nomagic]
+  private predicate fwdFlowConsCandSet(ContentSet cs, Content c, Configuration config) {
+    fwdFlowConsCand(c, config) and
+    c = cs.getAReadContent()
+  }
+
+  pragma[nomagic]
+  private predicate fwdFlowReturnPosition(ReturnPosition pos, Cc cc, Configuration config) {
+    exists(RetNodeEx ret |
+      fwdFlow(ret, cc, config) and
+      ret.getReturnPosition() = pos
+    )
+  }
+
+  pragma[nomagic]
+  private predicate fwdFlowOut(DataFlowCall call, NodeEx out, Cc cc, Configuration config) {
+    exists(ReturnPosition pos |
+      fwdFlowReturnPosition(pos, cc, config) and
+      viableReturnPosOutEx(call, pos, out) and
+      not fullBarrier(out, config)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate fwdFlowOutFromArg(DataFlowCall call, NodeEx out, Configuration config) {
+    fwdFlowOut(call, out, true, config)
+  }
+
+  /**
+   * Holds if an argument to `call` is reached in the flow covered by `fwdFlow`.
+   */
+  pragma[nomagic]
+  private predicate fwdFlowIsEntered(DataFlowCall call, Cc cc, Configuration config) {
+    exists(ArgNodeEx arg |
+      fwdFlow(arg, cc, config) and
+      viableParamArgEx(call, _, arg)
+    )
+  }
+
+  private predicate stateStepFwd(FlowState state1, FlowState state2, Configuration config) {
+    exists(NodeEx node1 |
+      additionalLocalStateStep(node1, state1, _, state2, config) or
+      additionalJumpStateStep(node1, state1, _, state2, config)
+    |
+      fwdFlow(node1, config)
+    )
+  }
+
+  private predicate fwdFlowState(FlowState state, Configuration config) {
+    sourceNode(_, state, config)
+    or
+    exists(FlowState state0 |
+      fwdFlowState(state0, config) and
+      stateStepFwd(state0, state, config)
+    )
+  }
+
+  /**
+   * Holds if `node` is part of a path from a source to a sink in the
+   * configuration `config`.
+   *
+   * The Boolean `toReturn` records whether the node must be returned from
+   * the enclosing callable in order to reach a sink.
+   */
+  pragma[nomagic]
+  predicate revFlow(NodeEx node, boolean toReturn, Configuration config) {
+    revFlow0(node, toReturn, config) and
+    fwdFlow(node, config)
+  }
+
+  pragma[nomagic]
+  private predicate revFlow0(NodeEx node, boolean toReturn, Configuration config) {
+    exists(FlowState state |
+      fwdFlow(node, pragma[only_bind_into](config)) and
+      sinkNode(node, state, config) and
+      fwdFlowState(state, pragma[only_bind_into](config)) and
+      if hasSinkCallCtx(config) then toReturn = true else toReturn = false
+    )
+    or
+    exists(NodeEx mid | revFlow(mid, toReturn, config) |
+      localFlowStep(node, mid, config) or
+      additionalLocalFlowStep(node, mid, config) or
+      additionalLocalStateStep(node, _, mid, _, config)
+    )
+    or
+    exists(NodeEx mid | revFlow(mid, _, config) and toReturn = false |
+      jumpStep(node, mid, config) or
+      additionalJumpStep(node, mid, config) or
+      additionalJumpStateStep(node, _, mid, _, config)
+    )
+    or
+    // store
+    exists(Content c |
+      revFlowStore(c, node, toReturn, config) and
+      revFlowConsCand(c, config)
+    )
+    or
+    // read
+    exists(NodeEx mid, ContentSet c |
+      readSet(node, c, mid, config) and
+      fwdFlowConsCandSet(c, _, pragma[only_bind_into](config)) and
+      revFlow(mid, toReturn, pragma[only_bind_into](config))
+    )
+    or
+    // flow into a callable
+    exists(DataFlowCall call |
+      revFlowIn(call, node, false, config) and
+      toReturn = false
+      or
+      revFlowInToReturn(call, node, config) and
+      revFlowIsReturned(call, toReturn, config)
+    )
+    or
+    // flow out of a callable
+    exists(ReturnPosition pos |
+      revFlowOut(pos, config) and
+      node.(RetNodeEx).getReturnPosition() = pos and
+      toReturn = true
+    )
+  }
+
+  /**
+   * Holds if `c` is the target of a read in the flow covered by `revFlow`.
+   */
+  pragma[nomagic]
+  private predicate revFlowConsCand(Content c, Configuration config) {
+    exists(NodeEx mid, NodeEx node, ContentSet cs |
+      fwdFlow(node, pragma[only_bind_into](config)) and
+      readSet(node, cs, mid, config) and
+      fwdFlowConsCandSet(cs, c, pragma[only_bind_into](config)) and
+      revFlow(pragma[only_bind_into](mid), _, pragma[only_bind_into](config))
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revFlowStore(Content c, NodeEx node, boolean toReturn, Configuration config) {
+    exists(NodeEx mid, TypedContent tc |
+      revFlow(mid, toReturn, pragma[only_bind_into](config)) and
+      fwdFlowConsCand(c, pragma[only_bind_into](config)) and
+      store(node, tc, mid, _, config) and
+      c = tc.getContent()
+    )
+  }
+
+  /**
+   * Holds if `c` is the target of both a read and a store in the flow covered
+   * by `revFlow`.
+   */
+  pragma[nomagic]
+  predicate revFlowIsReadAndStored(Content c, Configuration conf) {
+    revFlowConsCand(c, conf) and
+    revFlowStore(c, _, _, conf)
+  }
+
+  pragma[nomagic]
+  predicate viableReturnPosOutNodeCandFwd1(
+    DataFlowCall call, ReturnPosition pos, NodeEx out, Configuration config
+  ) {
+    fwdFlowReturnPosition(pos, _, config) and
+    viableReturnPosOutEx(call, pos, out)
+  }
+
+  pragma[nomagic]
+  private predicate revFlowOut(ReturnPosition pos, Configuration config) {
+    exists(DataFlowCall call, NodeEx out |
+      revFlow(out, _, config) and
+      viableReturnPosOutNodeCandFwd1(call, pos, out, config)
+    )
+  }
+
+  pragma[nomagic]
+  predicate viableParamArgNodeCandFwd1(
+    DataFlowCall call, ParamNodeEx p, ArgNodeEx arg, Configuration config
+  ) {
+    viableParamArgEx(call, p, arg) and
+    fwdFlow(arg, config)
+  }
+
+  pragma[nomagic]
+  private predicate revFlowIn(
+    DataFlowCall call, ArgNodeEx arg, boolean toReturn, Configuration config
+  ) {
+    exists(ParamNodeEx p |
+      revFlow(p, toReturn, config) and
+      viableParamArgNodeCandFwd1(call, p, arg, config)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revFlowInToReturn(DataFlowCall call, ArgNodeEx arg, Configuration config) {
+    revFlowIn(call, arg, true, config)
+  }
+
+  /**
+   * Holds if an output from `call` is reached in the flow covered by `revFlow`
+   * and data might flow through the target callable resulting in reverse flow
+   * reaching an argument of `call`.
+   */
+  pragma[nomagic]
+  private predicate revFlowIsReturned(DataFlowCall call, boolean toReturn, Configuration config) {
+    exists(NodeEx out |
+      revFlow(out, toReturn, config) and
+      fwdFlowOutFromArg(call, out, config)
+    )
+  }
+
+  private predicate stateStepRev(FlowState state1, FlowState state2, Configuration config) {
+    exists(NodeEx node1, NodeEx node2 |
+      additionalLocalStateStep(node1, state1, node2, state2, config) or
+      additionalJumpStateStep(node1, state1, node2, state2, config)
+    |
+      revFlow(node1, _, pragma[only_bind_into](config)) and
+      revFlow(node2, _, pragma[only_bind_into](config)) and
+      fwdFlowState(state1, pragma[only_bind_into](config)) and
+      fwdFlowState(state2, pragma[only_bind_into](config))
+    )
+  }
+
+  predicate revFlowState(FlowState state, Configuration config) {
+    exists(NodeEx node |
+      sinkNode(node, state, config) and
+      revFlow(node, _, pragma[only_bind_into](config)) and
+      fwdFlowState(state, pragma[only_bind_into](config))
+    )
+    or
+    exists(FlowState state0 |
+      revFlowState(state0, config) and
+      stateStepRev(state, state0, config)
+    )
+  }
+
+  pragma[nomagic]
+  predicate storeStepCand(
+    NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, DataFlowType contentType,
+    Configuration config
+  ) {
+    exists(Content c |
+      revFlowIsReadAndStored(c, pragma[only_bind_into](config)) and
+      revFlow(node2, pragma[only_bind_into](config)) and
+      store(node1, tc, node2, contentType, config) and
+      c = tc.getContent() and
+      exists(ap1)
+    )
+  }
+
+  pragma[nomagic]
+  predicate readStepCand(NodeEx n1, Content c, NodeEx n2, Configuration config) {
+    revFlowIsReadAndStored(c, pragma[only_bind_into](config)) and
+    read(n1, c, n2, pragma[only_bind_into](config)) and
+    revFlow(n2, pragma[only_bind_into](config))
+  }
+
+  pragma[nomagic]
+  predicate revFlow(NodeEx node, Configuration config) { revFlow(node, _, config) }
+
+  bindingset[node, state, config]
+  predicate revFlow(NodeEx node, FlowState state, Ap ap, Configuration config) {
+    revFlow(node, _, pragma[only_bind_into](config)) and
+    exists(state) and
+    exists(ap)
+  }
+
+  private predicate throughFlowNodeCand(NodeEx node, Configuration config) {
+    revFlow(node, true, config) and
+    fwdFlow(node, true, config) and
+    not inBarrier(node, config) and
+    not outBarrier(node, config)
+  }
+
+  /** Holds if flow may return from `callable`. */
+  pragma[nomagic]
+  private predicate returnFlowCallableNodeCand(
+    DataFlowCallable callable, ReturnKindExt kind, Configuration config
+  ) {
+    exists(RetNodeEx ret |
+      throughFlowNodeCand(ret, config) and
+      callable = ret.getEnclosingCallable() and
+      kind = ret.getKind()
+    )
+  }
+
+  /**
+   * Holds if flow may enter through `p` and reach a return node making `p` a
+   * candidate for the origin of a summary.
+   */
+  pragma[nomagic]
+  predicate parameterMayFlowThrough(ParamNodeEx p, DataFlowCallable c, Ap ap, Configuration config) {
+    exists(ReturnKindExt kind |
+      throughFlowNodeCand(p, config) and
+      returnFlowCallableNodeCand(c, kind, config) and
+      p.getEnclosingCallable() = c and
+      exists(ap) and
+      // we don't expect a parameter to return stored in itself, unless explicitly allowed
+      (
+        not kind.(ParamUpdateReturnKind).getPosition() = p.getPosition()
+        or
+        p.allowParameterReturnInSelf()
+      )
+    )
+  }
+
+  pragma[nomagic]
+  predicate callMayFlowThroughRev(DataFlowCall call, Configuration config) {
+    exists(ArgNodeEx arg, boolean toReturn |
+      revFlow(arg, toReturn, config) and
+      revFlowInToReturn(call, arg, config) and
+      revFlowIsReturned(call, toReturn, config)
+    )
+  }
+
+  predicate stats(
+    boolean fwd, int nodes, int fields, int conscand, int states, int tuples, Configuration config
+  ) {
+    fwd = true and
+    nodes = count(NodeEx node | fwdFlow(node, config)) and
+    fields = count(Content f0 | fwdFlowConsCand(f0, config)) and
+    conscand = -1 and
+    states = count(FlowState state | fwdFlowState(state, config)) and
+    tuples = count(NodeEx n, boolean b | fwdFlow(n, b, config))
+    or
+    fwd = false and
+    nodes = count(NodeEx node | revFlow(node, _, config)) and
+    fields = count(Content f0 | revFlowConsCand(f0, config)) and
+    conscand = -1 and
+    states = count(FlowState state | revFlowState(state, config)) and
+    tuples = count(NodeEx n, boolean b | revFlow(n, b, config))
+  }
+  /* End: Stage 1 logic. */
+}
+
+pragma[noinline]
+private predicate localFlowStepNodeCand1(NodeEx node1, NodeEx node2, Configuration config) {
+  Stage1::revFlow(node2, config) and
+  localFlowStep(node1, node2, config)
+}
+
+pragma[noinline]
+private predicate additionalLocalFlowStepNodeCand1(NodeEx node1, NodeEx node2, Configuration config) {
+  Stage1::revFlow(node2, config) and
+  additionalLocalFlowStep(node1, node2, config)
+}
+
+pragma[nomagic]
+private predicate viableReturnPosOutNodeCand1(
+  DataFlowCall call, ReturnPosition pos, NodeEx out, Configuration config
+) {
+  Stage1::revFlow(out, config) and
+  Stage1::viableReturnPosOutNodeCandFwd1(call, pos, out, config)
+}
+
+/**
+ * Holds if data can flow out of `call` from `ret` to `out`, either
+ * through a `ReturnNode` or through an argument that has been mutated, and
+ * that this step is part of a path from a source to a sink.
+ */
+pragma[nomagic]
+private predicate flowOutOfCallNodeCand1(
+  DataFlowCall call, RetNodeEx ret, NodeEx out, Configuration config
+) {
+  viableReturnPosOutNodeCand1(call, ret.getReturnPosition(), out, config) and
+  Stage1::revFlow(ret, config) and
+  not outBarrier(ret, config) and
+  not inBarrier(out, config)
+}
+
+pragma[nomagic]
+private predicate viableParamArgNodeCand1(
+  DataFlowCall call, ParamNodeEx p, ArgNodeEx arg, Configuration config
+) {
+  Stage1::viableParamArgNodeCandFwd1(call, p, arg, config) and
+  Stage1::revFlow(arg, config)
+}
+
+/**
+ * Holds if data can flow into `call` and that this step is part of a
+ * path from a source to a sink.
+ */
+pragma[nomagic]
+private predicate flowIntoCallNodeCand1(
+  DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, Configuration config
+) {
+  viableParamArgNodeCand1(call, p, arg, config) and
+  Stage1::revFlow(p, config) and
+  not outBarrier(arg, config) and
+  not inBarrier(p, config)
+}
+
+/**
+ * Gets the amount of forward branching on the origin of a cross-call path
+ * edge in the graph of paths between sources and sinks that ignores call
+ * contexts.
+ */
+private int branch(NodeEx n1, Configuration conf) {
+  result =
+    strictcount(NodeEx n |
+      flowOutOfCallNodeCand1(_, n1, n, conf) or flowIntoCallNodeCand1(_, n1, n, conf)
+    )
+}
+
+/**
+ * Gets the amount of backward branching on the target of a cross-call path
+ * edge in the graph of paths between sources and sinks that ignores call
+ * contexts.
+ */
+private int join(NodeEx n2, Configuration conf) {
+  result =
+    strictcount(NodeEx n |
+      flowOutOfCallNodeCand1(_, n, n2, conf) or flowIntoCallNodeCand1(_, n, n2, conf)
+    )
+}
+
+/**
+ * Holds if data can flow out of `call` from `ret` to `out`, either
+ * through a `ReturnNode` or through an argument that has been mutated, and
+ * that this step is part of a path from a source to a sink. The
+ * `allowsFieldFlow` flag indicates whether the branching is within the limit
+ * specified by the configuration.
+ */
+pragma[nomagic]
+private predicate flowOutOfCallNodeCand1(
+  DataFlowCall call, RetNodeEx ret, NodeEx out, boolean allowsFieldFlow, Configuration config
+) {
+  flowOutOfCallNodeCand1(call, ret, out, config) and
+  exists(int b, int j |
+    b = branch(ret, config) and
+    j = join(out, config) and
+    if b.minimum(j) <= config.fieldFlowBranchLimit()
+    then allowsFieldFlow = true
+    else allowsFieldFlow = false
+  )
+}
+
+/**
+ * Holds if data can flow into `call` and that this step is part of a
+ * path from a source to a sink. The `allowsFieldFlow` flag indicates whether
+ * the branching is within the limit specified by the configuration.
+ */
+pragma[nomagic]
+private predicate flowIntoCallNodeCand1(
+  DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, boolean allowsFieldFlow, Configuration config
+) {
+  flowIntoCallNodeCand1(call, arg, p, config) and
+  exists(int b, int j |
+    b = branch(arg, config) and
+    j = join(p, config) and
+    if b.minimum(j) <= config.fieldFlowBranchLimit()
+    then allowsFieldFlow = true
+    else allowsFieldFlow = false
+  )
+}
+
+private signature module StageSig {
+  class Ap;
+
+  predicate revFlow(NodeEx node, Configuration config);
+
+  bindingset[node, state, config]
+  predicate revFlow(NodeEx node, FlowState state, Ap ap, Configuration config);
+
+  predicate callMayFlowThroughRev(DataFlowCall call, Configuration config);
+
+  predicate parameterMayFlowThrough(ParamNodeEx p, DataFlowCallable c, Ap ap, Configuration config);
+
+  predicate storeStepCand(
+    NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, DataFlowType contentType,
+    Configuration config
+  );
+
+  predicate readStepCand(NodeEx n1, Content c, NodeEx n2, Configuration config);
+}
+
+private module MkStage<StageSig PrevStage> {
+  class ApApprox = PrevStage::Ap;
+
+  signature module StageParam {
+    class Ap;
+
+    class ApNil extends Ap;
+
+    bindingset[result, ap]
+    ApApprox getApprox(Ap ap);
+
+    ApNil getApNil(NodeEx node);
+
+    bindingset[tc, tail]
+    Ap apCons(TypedContent tc, Ap tail);
+
+    Content getHeadContent(Ap ap);
+
+    class ApOption;
+
+    ApOption apNone();
+
+    ApOption apSome(Ap ap);
+
+    class Cc;
+
+    class CcCall extends Cc;
+
+    // TODO: member predicate on CcCall
+    predicate matchesCall(CcCall cc, DataFlowCall call);
+
+    class CcNoCall extends Cc;
+
+    Cc ccNone();
+
+    CcCall ccSomeCall();
+
+    class LocalCc;
+
+    bindingset[call, c, outercc]
+    CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc);
+
+    bindingset[call, c, innercc]
+    CcNoCall getCallContextReturn(DataFlowCallable c, DataFlowCall call, Cc innercc);
+
+    bindingset[node, cc]
+    LocalCc getLocalCc(NodeEx node, Cc cc);
+
+    bindingset[node1, state1, config]
+    bindingset[node2, state2, config]
+    predicate localStep(
+      NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+      ApNil ap, Configuration config, LocalCc lcc
+    );
+
+    predicate flowOutOfCall(
+      DataFlowCall call, RetNodeEx ret, NodeEx out, boolean allowsFieldFlow, Configuration config
+    );
+
+    predicate flowIntoCall(
+      DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, boolean allowsFieldFlow, Configuration config
+    );
+
+    bindingset[node, state, ap, config]
+    predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config);
+
+    bindingset[ap, contentType]
+    predicate typecheckStore(Ap ap, DataFlowType contentType);
+  }
+
+  module Stage<StageParam Param> implements StageSig {
+    import Param
+
+    /* Begin: Stage logic. */
+    bindingset[result, apa]
+    private ApApprox unbindApa(ApApprox apa) {
+      pragma[only_bind_out](apa) = pragma[only_bind_out](result)
+    }
+
+    pragma[nomagic]
+    private predicate flowThroughOutOfCall(
+      DataFlowCall call, CcCall ccc, RetNodeEx ret, NodeEx out, boolean allowsFieldFlow,
+      Configuration config
+    ) {
+      flowOutOfCall(call, ret, out, allowsFieldFlow, pragma[only_bind_into](config)) and
+      PrevStage::callMayFlowThroughRev(call, pragma[only_bind_into](config)) and
+      PrevStage::parameterMayFlowThrough(_, ret.getEnclosingCallable(), _,
+        pragma[only_bind_into](config)) and
+      matchesCall(ccc, call)
+    }
+
+    /**
+     * Holds if `node` is reachable with access path `ap` from a source in the
+     * configuration `config`.
+     *
+     * The call context `cc` records whether the node is reached through an
+     * argument in a call, and if so, `argAp` records the access path of that
+     * argument.
+     */
+    pragma[nomagic]
+    predicate fwdFlow(
+      NodeEx node, FlowState state, Cc cc, ApOption argAp, Ap ap, Configuration config
+    ) {
+      fwdFlow0(node, state, cc, argAp, ap, config) and
+      PrevStage::revFlow(node, state, unbindApa(getApprox(ap)), config) and
+      filter(node, state, ap, config)
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlow0(
+      NodeEx node, FlowState state, Cc cc, ApOption argAp, Ap ap, Configuration config
+    ) {
+      sourceNode(node, state, config) and
+      (if hasSourceCallCtx(config) then cc = ccSomeCall() else cc = ccNone()) and
+      argAp = apNone() and
+      ap = getApNil(node)
+      or
+      exists(NodeEx mid, FlowState state0, Ap ap0, LocalCc localCc |
+        fwdFlow(mid, state0, cc, argAp, ap0, config) and
+        localCc = getLocalCc(mid, cc)
+      |
+        localStep(mid, state0, node, state, true, _, config, localCc) and
+        ap = ap0
+        or
+        localStep(mid, state0, node, state, false, ap, config, localCc) and
+        ap0 instanceof ApNil
+      )
+      or
+      exists(NodeEx mid |
+        fwdFlow(mid, pragma[only_bind_into](state), _, _, ap, pragma[only_bind_into](config)) and
+        jumpStep(mid, node, config) and
+        cc = ccNone() and
+        argAp = apNone()
+      )
+      or
+      exists(NodeEx mid, ApNil nil |
+        fwdFlow(mid, state, _, _, nil, pragma[only_bind_into](config)) and
+        additionalJumpStep(mid, node, config) and
+        cc = ccNone() and
+        argAp = apNone() and
+        ap = getApNil(node)
+      )
+      or
+      exists(NodeEx mid, FlowState state0, ApNil nil |
+        fwdFlow(mid, state0, _, _, nil, pragma[only_bind_into](config)) and
+        additionalJumpStateStep(mid, state0, node, state, config) and
+        cc = ccNone() and
+        argAp = apNone() and
+        ap = getApNil(node)
+      )
+      or
+      // store
+      exists(TypedContent tc, Ap ap0 |
+        fwdFlowStore(_, ap0, tc, node, state, cc, argAp, config) and
+        ap = apCons(tc, ap0)
+      )
+      or
+      // read
+      exists(Ap ap0, Content c |
+        fwdFlowRead(ap0, c, _, node, state, cc, argAp, config) and
+        fwdFlowConsCand(ap0, c, ap, config)
+      )
+      or
+      // flow into a callable
+      exists(ApApprox apa |
+        fwdFlowIn(_, node, state, _, cc, _, ap, config) and
+        apa = getApprox(ap) and
+        if PrevStage::parameterMayFlowThrough(node, _, apa, config)
+        then argAp = apSome(ap)
+        else argAp = apNone()
+      )
+      or
+      // flow out of a callable
+      fwdFlowOutNotFromArg(node, state, cc, argAp, ap, config)
+      or
+      exists(DataFlowCall call, Ap argAp0 |
+        fwdFlowOutFromArg(call, node, state, argAp0, ap, config) and
+        fwdFlowIsEntered(call, cc, argAp, argAp0, config)
+      )
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowStore(
+      NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, FlowState state, Cc cc, ApOption argAp,
+      Configuration config
+    ) {
+      exists(DataFlowType contentType |
+        fwdFlow(node1, state, cc, argAp, ap1, config) and
+        PrevStage::storeStepCand(node1, unbindApa(getApprox(ap1)), tc, node2, contentType, config) and
+        typecheckStore(ap1, contentType)
+      )
+    }
+
+    /**
+     * Holds if forward flow with access path `tail` reaches a store of `c`
+     * resulting in access path `cons`.
+     */
+    pragma[nomagic]
+    private predicate fwdFlowConsCand(Ap cons, Content c, Ap tail, Configuration config) {
+      exists(TypedContent tc |
+        fwdFlowStore(_, tail, tc, _, _, _, _, config) and
+        tc.getContent() = c and
+        cons = apCons(tc, tail)
+      )
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowRead(
+      Ap ap, Content c, NodeEx node1, NodeEx node2, FlowState state, Cc cc, ApOption argAp,
+      Configuration config
+    ) {
+      fwdFlow(node1, state, cc, argAp, ap, config) and
+      PrevStage::readStepCand(node1, c, node2, config) and
+      getHeadContent(ap) = c
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowIn(
+      DataFlowCall call, ParamNodeEx p, FlowState state, Cc outercc, Cc innercc, ApOption argAp,
+      Ap ap, Configuration config
+    ) {
+      exists(ArgNodeEx arg, boolean allowsFieldFlow |
+        fwdFlow(arg, state, outercc, argAp, ap, config) and
+        flowIntoCall(call, arg, p, allowsFieldFlow, config) and
+        innercc = getCallContextCall(call, p.getEnclosingCallable(), outercc) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowOutNotFromArg(
+      NodeEx out, FlowState state, Cc ccOut, ApOption argAp, Ap ap, Configuration config
+    ) {
+      exists(
+        DataFlowCall call, RetNodeEx ret, boolean allowsFieldFlow, CcNoCall innercc,
+        DataFlowCallable inner
+      |
+        fwdFlow(ret, state, innercc, argAp, ap, config) and
+        flowOutOfCall(call, ret, out, allowsFieldFlow, config) and
+        inner = ret.getEnclosingCallable() and
+        ccOut = getCallContextReturn(inner, call, innercc) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowOutFromArg(
+      DataFlowCall call, NodeEx out, FlowState state, Ap argAp, Ap ap, Configuration config
+    ) {
+      exists(RetNodeEx ret, boolean allowsFieldFlow, CcCall ccc |
+        fwdFlow(ret, state, ccc, apSome(argAp), ap, config) and
+        flowThroughOutOfCall(call, ccc, ret, out, allowsFieldFlow, config) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    /**
+     * Holds if an argument to `call` is reached in the flow covered by `fwdFlow`
+     * and data might flow through the target callable and back out at `call`.
+     */
+    pragma[nomagic]
+    private predicate fwdFlowIsEntered(
+      DataFlowCall call, Cc cc, ApOption argAp, Ap ap, Configuration config
+    ) {
+      exists(ParamNodeEx p |
+        fwdFlowIn(call, p, _, cc, _, argAp, ap, config) and
+        PrevStage::parameterMayFlowThrough(p, _, unbindApa(getApprox(ap)), config)
+      )
+    }
+
+    pragma[nomagic]
+    private predicate storeStepFwd(
+      NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, Ap ap2, Configuration config
+    ) {
+      fwdFlowStore(node1, ap1, tc, node2, _, _, _, config) and
+      ap2 = apCons(tc, ap1) and
+      fwdFlowRead(ap2, tc.getContent(), _, _, _, _, _, config)
+    }
+
+    private predicate readStepFwd(
+      NodeEx n1, Ap ap1, Content c, NodeEx n2, Ap ap2, Configuration config
+    ) {
+      fwdFlowRead(ap1, c, n1, n2, _, _, _, config) and
+      fwdFlowConsCand(ap1, c, ap2, config)
+    }
+
+    pragma[nomagic]
+    private predicate callMayFlowThroughFwd(DataFlowCall call, Configuration config) {
+      exists(Ap argAp0, NodeEx out, FlowState state, Cc cc, ApOption argAp, Ap ap |
+        fwdFlow(out, state, pragma[only_bind_into](cc), pragma[only_bind_into](argAp), ap,
+          pragma[only_bind_into](config)) and
+        fwdFlowOutFromArg(call, out, state, argAp0, ap, config) and
+        fwdFlowIsEntered(pragma[only_bind_into](call), pragma[only_bind_into](cc),
+          pragma[only_bind_into](argAp), pragma[only_bind_into](argAp0),
+          pragma[only_bind_into](config))
+      )
+    }
+
+    pragma[nomagic]
+    private predicate flowThroughIntoCall(
+      DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, boolean allowsFieldFlow, Configuration config
+    ) {
+      flowIntoCall(call, arg, p, allowsFieldFlow, config) and
+      fwdFlow(arg, _, _, _, _, pragma[only_bind_into](config)) and
+      PrevStage::parameterMayFlowThrough(p, _, _, pragma[only_bind_into](config)) and
+      callMayFlowThroughFwd(call, pragma[only_bind_into](config))
+    }
+
+    pragma[nomagic]
+    private predicate returnNodeMayFlowThrough(
+      RetNodeEx ret, FlowState state, Ap ap, Configuration config
+    ) {
+      fwdFlow(ret, state, any(CcCall ccc), apSome(_), ap, config)
+    }
+
+    /**
+     * Holds if `node` with access path `ap` is part of a path from a source to a
+     * sink in the configuration `config`.
+     *
+     * The Boolean `toReturn` records whether the node must be returned from the
+     * enclosing callable in order to reach a sink, and if so, `returnAp` records
+     * the access path of the returned value.
+     */
+    pragma[nomagic]
+    predicate revFlow(
+      NodeEx node, FlowState state, boolean toReturn, ApOption returnAp, Ap ap, Configuration config
+    ) {
+      revFlow0(node, state, toReturn, returnAp, ap, config) and
+      fwdFlow(node, state, _, _, ap, config)
+    }
+
+    pragma[nomagic]
+    private predicate revFlow0(
+      NodeEx node, FlowState state, boolean toReturn, ApOption returnAp, Ap ap, Configuration config
+    ) {
+      fwdFlow(node, state, _, _, ap, config) and
+      sinkNode(node, state, config) and
+      (if hasSinkCallCtx(config) then toReturn = true else toReturn = false) and
+      returnAp = apNone() and
+      ap instanceof ApNil
+      or
+      exists(NodeEx mid, FlowState state0 |
+        localStep(node, state, mid, state0, true, _, config, _) and
+        revFlow(mid, state0, toReturn, returnAp, ap, config)
+      )
+      or
+      exists(NodeEx mid, FlowState state0, ApNil nil |
+        fwdFlow(node, pragma[only_bind_into](state), _, _, ap, pragma[only_bind_into](config)) and
+        localStep(node, pragma[only_bind_into](state), mid, state0, false, _, config, _) and
+        revFlow(mid, state0, toReturn, returnAp, nil, pragma[only_bind_into](config)) and
+        ap instanceof ApNil
+      )
+      or
+      exists(NodeEx mid |
+        jumpStep(node, mid, config) and
+        revFlow(mid, state, _, _, ap, config) and
+        toReturn = false and
+        returnAp = apNone()
+      )
+      or
+      exists(NodeEx mid, ApNil nil |
+        fwdFlow(node, _, _, _, ap, pragma[only_bind_into](config)) and
+        additionalJumpStep(node, mid, config) and
+        revFlow(pragma[only_bind_into](mid), state, _, _, nil, pragma[only_bind_into](config)) and
+        toReturn = false and
+        returnAp = apNone() and
+        ap instanceof ApNil
+      )
+      or
+      exists(NodeEx mid, FlowState state0, ApNil nil |
+        fwdFlow(node, _, _, _, ap, pragma[only_bind_into](config)) and
+        additionalJumpStateStep(node, state, mid, state0, config) and
+        revFlow(pragma[only_bind_into](mid), pragma[only_bind_into](state0), _, _, nil,
+          pragma[only_bind_into](config)) and
+        toReturn = false and
+        returnAp = apNone() and
+        ap instanceof ApNil
+      )
+      or
+      // store
+      exists(Ap ap0, Content c |
+        revFlowStore(ap0, c, ap, node, state, _, _, toReturn, returnAp, config) and
+        revFlowConsCand(ap0, c, ap, config)
+      )
+      or
+      // read
+      exists(NodeEx mid, Ap ap0 |
+        revFlow(mid, state, toReturn, returnAp, ap0, config) and
+        readStepFwd(node, ap, _, mid, ap0, config)
+      )
+      or
+      // flow into a callable
+      revFlowInNotToReturn(node, state, returnAp, ap, config) and
+      toReturn = false
+      or
+      exists(DataFlowCall call, Ap returnAp0 |
+        revFlowInToReturn(call, node, state, returnAp0, ap, config) and
+        revFlowIsReturned(call, toReturn, returnAp, returnAp0, config)
+      )
+      or
+      // flow out of a callable
+      revFlowOut(_, node, state, _, _, ap, config) and
+      toReturn = true and
+      if returnNodeMayFlowThrough(node, state, ap, config)
+      then returnAp = apSome(ap)
+      else returnAp = apNone()
+    }
+
+    pragma[nomagic]
+    private predicate revFlowStore(
+      Ap ap0, Content c, Ap ap, NodeEx node, FlowState state, TypedContent tc, NodeEx mid,
+      boolean toReturn, ApOption returnAp, Configuration config
+    ) {
+      revFlow(mid, state, toReturn, returnAp, ap0, config) and
+      storeStepFwd(node, ap, tc, mid, ap0, config) and
+      tc.getContent() = c
+    }
+
+    /**
+     * Holds if reverse flow with access path `tail` reaches a read of `c`
+     * resulting in access path `cons`.
+     */
+    pragma[nomagic]
+    private predicate revFlowConsCand(Ap cons, Content c, Ap tail, Configuration config) {
+      exists(NodeEx mid, Ap tail0 |
+        revFlow(mid, _, _, _, tail, config) and
+        tail = pragma[only_bind_into](tail0) and
+        readStepFwd(_, cons, c, mid, tail0, config)
+      )
+    }
+
+    pragma[nomagic]
+    private predicate revFlowOut(
+      DataFlowCall call, RetNodeEx ret, FlowState state, boolean toReturn, ApOption returnAp, Ap ap,
+      Configuration config
+    ) {
+      exists(NodeEx out, boolean allowsFieldFlow |
+        revFlow(out, state, toReturn, returnAp, ap, config) and
+        flowOutOfCall(call, ret, out, allowsFieldFlow, config) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    pragma[nomagic]
+    private predicate revFlowInNotToReturn(
+      ArgNodeEx arg, FlowState state, ApOption returnAp, Ap ap, Configuration config
+    ) {
+      exists(ParamNodeEx p, boolean allowsFieldFlow |
+        revFlow(p, state, false, returnAp, ap, config) and
+        flowIntoCall(_, arg, p, allowsFieldFlow, config) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    pragma[nomagic]
+    private predicate revFlowInToReturn(
+      DataFlowCall call, ArgNodeEx arg, FlowState state, Ap returnAp, Ap ap, Configuration config
+    ) {
+      exists(ParamNodeEx p, boolean allowsFieldFlow |
+        revFlow(p, state, true, apSome(returnAp), ap, config) and
+        flowThroughIntoCall(call, arg, p, allowsFieldFlow, config) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    /**
+     * Holds if an output from `call` is reached in the flow covered by `revFlow`
+     * and data might flow through the target callable resulting in reverse flow
+     * reaching an argument of `call`.
+     */
+    pragma[nomagic]
+    private predicate revFlowIsReturned(
+      DataFlowCall call, boolean toReturn, ApOption returnAp, Ap ap, Configuration config
+    ) {
+      exists(RetNodeEx ret, FlowState state, CcCall ccc |
+        revFlowOut(call, ret, state, toReturn, returnAp, ap, config) and
+        fwdFlow(ret, state, ccc, apSome(_), ap, config) and
+        matchesCall(ccc, call)
+      )
+    }
+
+    pragma[nomagic]
+    predicate storeStepCand(
+      NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, DataFlowType contentType,
+      Configuration config
+    ) {
+      exists(Ap ap2, Content c |
+        PrevStage::storeStepCand(node1, _, tc, node2, contentType, config) and
+        revFlowStore(ap2, c, ap1, node1, _, tc, node2, _, _, config) and
+        revFlowConsCand(ap2, c, ap1, config)
+      )
+    }
+
+    predicate readStepCand(NodeEx node1, Content c, NodeEx node2, Configuration config) {
+      exists(Ap ap1, Ap ap2 |
+        revFlow(node2, _, _, _, pragma[only_bind_into](ap2), pragma[only_bind_into](config)) and
+        readStepFwd(node1, ap1, c, node2, ap2, config) and
+        revFlowStore(ap1, c, pragma[only_bind_into](ap2), _, _, _, _, _, _,
+          pragma[only_bind_into](config))
+      )
+    }
+
+    predicate revFlow(NodeEx node, FlowState state, Configuration config) {
+      revFlow(node, state, _, _, _, config)
+    }
+
+    predicate revFlow(NodeEx node, FlowState state, Ap ap, Configuration config) {
+      revFlow(node, state, _, _, ap, config)
+    }
+
+    pragma[nomagic]
+    predicate revFlow(NodeEx node, Configuration config) { revFlow(node, _, _, _, _, config) }
+
+    // use an alias as a workaround for bad functionality-induced joins
+    pragma[nomagic]
+    predicate revFlowAlias(NodeEx node, Configuration config) { revFlow(node, _, _, _, _, config) }
+
+    // use an alias as a workaround for bad functionality-induced joins
+    pragma[nomagic]
+    predicate revFlowAlias(NodeEx node, FlowState state, Ap ap, Configuration config) {
+      revFlow(node, state, ap, config)
+    }
+
+    private predicate fwdConsCand(TypedContent tc, Ap ap, Configuration config) {
+      storeStepFwd(_, ap, tc, _, _, config)
+    }
+
+    private predicate revConsCand(TypedContent tc, Ap ap, Configuration config) {
+      storeStepCand(_, ap, tc, _, _, config)
+    }
+
+    private predicate validAp(Ap ap, Configuration config) {
+      revFlow(_, _, _, _, ap, config) and ap instanceof ApNil
+      or
+      exists(TypedContent head, Ap tail |
+        consCand(head, tail, config) and
+        ap = apCons(head, tail)
+      )
+    }
+
+    predicate consCand(TypedContent tc, Ap ap, Configuration config) {
+      revConsCand(tc, ap, config) and
+      validAp(ap, config)
+    }
+
+    pragma[noinline]
+    private predicate parameterFlow(
+      ParamNodeEx p, Ap ap, Ap ap0, DataFlowCallable c, Configuration config
+    ) {
+      revFlow(p, _, true, apSome(ap0), ap, config) and
+      c = p.getEnclosingCallable()
+    }
+
+    predicate parameterMayFlowThrough(ParamNodeEx p, DataFlowCallable c, Ap ap, Configuration config) {
+      exists(RetNodeEx ret, FlowState state, Ap ap0, ReturnKindExt kind, ParameterPosition pos |
+        parameterFlow(p, ap, ap0, c, config) and
+        c = ret.getEnclosingCallable() and
+        revFlow(pragma[only_bind_into](ret), pragma[only_bind_into](state), true, apSome(_),
+          pragma[only_bind_into](ap0), pragma[only_bind_into](config)) and
+        fwdFlow(ret, state, any(CcCall ccc), apSome(ap), ap0, config) and
+        kind = ret.getKind() and
+        p.getPosition() = pos and
+        // we don't expect a parameter to return stored in itself, unless explicitly allowed
+        (
+          not kind.(ParamUpdateReturnKind).getPosition() = pos
+          or
+          p.allowParameterReturnInSelf()
+        )
+      )
+    }
+
+    pragma[nomagic]
+    predicate callMayFlowThroughRev(DataFlowCall call, Configuration config) {
+      exists(
+        Ap returnAp0, ArgNodeEx arg, FlowState state, boolean toReturn, ApOption returnAp, Ap ap
+      |
+        revFlow(arg, state, toReturn, returnAp, ap, config) and
+        revFlowInToReturn(call, arg, state, returnAp0, ap, config) and
+        revFlowIsReturned(call, toReturn, returnAp, returnAp0, config)
+      )
+    }
+
+    predicate stats(
+      boolean fwd, int nodes, int fields, int conscand, int states, int tuples, Configuration config
+    ) {
+      fwd = true and
+      nodes = count(NodeEx node | fwdFlow(node, _, _, _, _, config)) and
+      fields = count(TypedContent f0 | fwdConsCand(f0, _, config)) and
+      conscand = count(TypedContent f0, Ap ap | fwdConsCand(f0, ap, config)) and
+      states = count(FlowState state | fwdFlow(_, state, _, _, _, config)) and
+      tuples =
+        count(NodeEx n, FlowState state, Cc cc, ApOption argAp, Ap ap |
+          fwdFlow(n, state, cc, argAp, ap, config)
+        )
+      or
+      fwd = false and
+      nodes = count(NodeEx node | revFlow(node, _, _, _, _, config)) and
+      fields = count(TypedContent f0 | consCand(f0, _, config)) and
+      conscand = count(TypedContent f0, Ap ap | consCand(f0, ap, config)) and
+      states = count(FlowState state | revFlow(_, state, _, _, _, config)) and
+      tuples =
+        count(NodeEx n, FlowState state, boolean b, ApOption retAp, Ap ap |
+          revFlow(n, state, b, retAp, ap, config)
+        )
+    }
+    /* End: Stage logic. */
+  }
+}
+
+private module BooleanCallContext {
+  class Cc extends boolean {
+    Cc() { this in [true, false] }
+  }
+
+  class CcCall extends Cc {
+    CcCall() { this = true }
+  }
+
+  /** Holds if the call context may be `call`. */
+  predicate matchesCall(CcCall cc, DataFlowCall call) { any() }
+
+  class CcNoCall extends Cc {
+    CcNoCall() { this = false }
+  }
+
+  Cc ccNone() { result = false }
+
+  CcCall ccSomeCall() { result = true }
+
+  class LocalCc = Unit;
+
+  bindingset[node, cc]
+  LocalCc getLocalCc(NodeEx node, Cc cc) { any() }
+
+  bindingset[call, c, outercc]
+  CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc) { any() }
+
+  bindingset[call, c, innercc]
+  CcNoCall getCallContextReturn(DataFlowCallable c, DataFlowCall call, Cc innercc) { any() }
+}
+
+private module Level1CallContext {
+  class Cc = CallContext;
+
+  class CcCall = CallContextCall;
+
+  pragma[inline]
+  predicate matchesCall(CcCall cc, DataFlowCall call) { cc.matchesCall(call) }
+
+  class CcNoCall = CallContextNoCall;
+
+  Cc ccNone() { result instanceof CallContextAny }
+
+  CcCall ccSomeCall() { result instanceof CallContextSomeCall }
+
+  module NoLocalCallContext {
+    class LocalCc = Unit;
+
+    bindingset[node, cc]
+    LocalCc getLocalCc(NodeEx node, Cc cc) { any() }
+
+    bindingset[call, c, outercc]
+    CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc) {
+      checkCallContextCall(outercc, call, c) and
+      if recordDataFlowCallSiteDispatch(call, c)
+      then result = TSpecificCall(call)
+      else result = TSomeCall()
+    }
+  }
+
+  module LocalCallContext {
+    class LocalCc = LocalCallContext;
+
+    bindingset[node, cc]
+    LocalCc getLocalCc(NodeEx node, Cc cc) {
+      result =
+        getLocalCallContext(pragma[only_bind_into](pragma[only_bind_out](cc)),
+          node.getEnclosingCallable())
+    }
+
+    bindingset[call, c, outercc]
+    CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc) {
+      checkCallContextCall(outercc, call, c) and
+      if recordDataFlowCallSite(call, c) then result = TSpecificCall(call) else result = TSomeCall()
+    }
+  }
+
+  bindingset[call, c, innercc]
+  CcNoCall getCallContextReturn(DataFlowCallable c, DataFlowCall call, Cc innercc) {
+    checkCallContextReturn(innercc, c, call) and
+    if reducedViableImplInReturn(c, call) then result = TReturn(c, call) else result = ccNone()
+  }
+}
+
+private module Stage2Param implements MkStage<Stage1>::StageParam {
+  private module PrevStage = Stage1;
+
+  class Ap extends boolean {
+    Ap() { this in [true, false] }
+  }
+
+  class ApNil extends Ap {
+    ApNil() { this = false }
+  }
+
+  bindingset[result, ap]
+  PrevStage::Ap getApprox(Ap ap) { any() }
+
+  ApNil getApNil(NodeEx node) { Stage1::revFlow(node, _) and exists(result) }
+
+  bindingset[tc, tail]
+  Ap apCons(TypedContent tc, Ap tail) { result = true and exists(tc) and exists(tail) }
+
+  pragma[inline]
+  Content getHeadContent(Ap ap) { exists(result) and ap = true }
+
+  class ApOption = BooleanOption;
+
+  ApOption apNone() { result = TBooleanNone() }
+
+  ApOption apSome(Ap ap) { result = TBooleanSome(ap) }
+
+  import Level1CallContext
+  import NoLocalCallContext
+
+  bindingset[node1, state1, config]
+  bindingset[node2, state2, config]
+  predicate localStep(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+    ApNil ap, Configuration config, LocalCc lcc
+  ) {
+    (
+      preservesValue = true and
+      localFlowStepNodeCand1(node1, node2, config) and
+      state1 = state2
+      or
+      preservesValue = false and
+      additionalLocalFlowStepNodeCand1(node1, node2, config) and
+      state1 = state2
+      or
+      preservesValue = false and
+      additionalLocalStateStep(node1, state1, node2, state2, config)
+    ) and
+    exists(ap) and
+    exists(lcc)
+  }
+
+  predicate flowOutOfCall = flowOutOfCallNodeCand1/5;
+
+  predicate flowIntoCall = flowIntoCallNodeCand1/5;
+
+  pragma[nomagic]
+  private predicate expectsContentCand(NodeEx node, Configuration config) {
+    exists(Content c |
+      PrevStage::revFlow(node, pragma[only_bind_into](config)) and
+      PrevStage::revFlowIsReadAndStored(c, pragma[only_bind_into](config)) and
+      expectsContentEx(node, c)
+    )
+  }
+
+  bindingset[node, state, ap, config]
+  predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config) {
+    PrevStage::revFlowState(state, pragma[only_bind_into](config)) and
+    exists(ap) and
+    not stateBarrier(node, state, config) and
+    (
+      notExpectsContent(node)
+      or
+      ap = true and
+      expectsContentCand(node, config)
+    )
+  }
+
+  bindingset[ap, contentType]
+  predicate typecheckStore(Ap ap, DataFlowType contentType) { any() }
+}
+
+private module Stage2 implements StageSig {
+  import MkStage<Stage1>::Stage<Stage2Param>
+}
+
+pragma[nomagic]
+private predicate flowOutOfCallNodeCand2(
+  DataFlowCall call, RetNodeEx node1, NodeEx node2, boolean allowsFieldFlow, Configuration config
+) {
+  flowOutOfCallNodeCand1(call, node1, node2, allowsFieldFlow, config) and
+  Stage2::revFlow(node2, pragma[only_bind_into](config)) and
+  Stage2::revFlowAlias(node1, pragma[only_bind_into](config))
+}
+
+pragma[nomagic]
+private predicate flowIntoCallNodeCand2(
+  DataFlowCall call, ArgNodeEx node1, ParamNodeEx node2, boolean allowsFieldFlow,
+  Configuration config
+) {
+  flowIntoCallNodeCand1(call, node1, node2, allowsFieldFlow, config) and
+  Stage2::revFlow(node2, pragma[only_bind_into](config)) and
+  Stage2::revFlowAlias(node1, pragma[only_bind_into](config))
+}
+
+private module LocalFlowBigStep {
+  /**
+   * A node where some checking is required, and hence the big-step relation
+   * is not allowed to step over.
+   */
+  private class FlowCheckNode extends NodeEx {
+    FlowCheckNode() {
+      castNode(this.asNode()) or
+      clearsContentCached(this.asNode(), _) or
+      expectsContentCached(this.asNode(), _)
+    }
+  }
+
+  /**
+   * Holds if `node` can be the first node in a maximal subsequence of local
+   * flow steps in a dataflow path.
+   */
+  private predicate localFlowEntry(NodeEx node, FlowState state, Configuration config) {
+    Stage2::revFlow(node, state, config) and
+    (
+      sourceNode(node, state, config)
+      or
+      jumpStep(_, node, config)
+      or
+      additionalJumpStep(_, node, config)
+      or
+      additionalJumpStateStep(_, _, node, state, config)
+      or
+      node instanceof ParamNodeEx
+      or
+      node.asNode() instanceof OutNodeExt
+      or
+      Stage2::storeStepCand(_, _, _, node, _, config)
+      or
+      Stage2::readStepCand(_, _, node, config)
+      or
+      node instanceof FlowCheckNode
+      or
+      exists(FlowState s |
+        additionalLocalStateStep(_, s, node, state, config) and
+        s != state
+      )
+    )
+  }
+
+  /**
+   * Holds if `node` can be the last node in a maximal subsequence of local
+   * flow steps in a dataflow path.
+   */
+  private predicate localFlowExit(NodeEx node, FlowState state, Configuration config) {
+    exists(NodeEx next | Stage2::revFlow(next, state, config) |
+      jumpStep(node, next, config) or
+      additionalJumpStep(node, next, config) or
+      flowIntoCallNodeCand1(_, node, next, config) or
+      flowOutOfCallNodeCand1(_, node, next, config) or
+      Stage2::storeStepCand(node, _, _, next, _, config) or
+      Stage2::readStepCand(node, _, next, config)
+    )
+    or
+    exists(NodeEx next, FlowState s | Stage2::revFlow(next, s, config) |
+      additionalJumpStateStep(node, state, next, s, config)
+      or
+      additionalLocalStateStep(node, state, next, s, config) and
+      s != state
+    )
+    or
+    Stage2::revFlow(node, state, config) and
+    node instanceof FlowCheckNode
+    or
+    sinkNode(node, state, config)
+  }
+
+  pragma[noinline]
+  private predicate additionalLocalFlowStepNodeCand2(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, Configuration config
+  ) {
+    additionalLocalFlowStepNodeCand1(node1, node2, config) and
+    state1 = state2 and
+    Stage2::revFlow(node1, pragma[only_bind_into](state1), false, pragma[only_bind_into](config)) and
+    Stage2::revFlowAlias(node2, pragma[only_bind_into](state2), false,
+      pragma[only_bind_into](config))
+    or
+    additionalLocalStateStep(node1, state1, node2, state2, config) and
+    Stage2::revFlow(node1, state1, false, pragma[only_bind_into](config)) and
+    Stage2::revFlowAlias(node2, state2, false, pragma[only_bind_into](config))
+  }
+
+  /**
+   * Holds if the local path from `node1` to `node2` is a prefix of a maximal
+   * subsequence of local flow steps in a dataflow path.
+   *
+   * This is the transitive closure of `[additional]localFlowStep` beginning
+   * at `localFlowEntry`.
+   */
+  pragma[nomagic]
+  private predicate localFlowStepPlus(
+    NodeEx node1, FlowState state, NodeEx node2, boolean preservesValue, DataFlowType t,
+    Configuration config, LocalCallContext cc
+  ) {
+    not isUnreachableInCallCached(node2.asNode(), cc.(LocalCallContextSpecificCall).getCall()) and
+    (
+      localFlowEntry(node1, pragma[only_bind_into](state), pragma[only_bind_into](config)) and
+      (
+        localFlowStepNodeCand1(node1, node2, config) and
+        preservesValue = true and
+        t = node1.getDataFlowType() and // irrelevant dummy value
+        Stage2::revFlow(node2, pragma[only_bind_into](state), pragma[only_bind_into](config))
+        or
+        additionalLocalFlowStepNodeCand2(node1, state, node2, state, config) and
+        preservesValue = false and
+        t = node2.getDataFlowType()
+      ) and
+      node1 != node2 and
+      cc.relevantFor(node1.getEnclosingCallable()) and
+      not isUnreachableInCallCached(node1.asNode(), cc.(LocalCallContextSpecificCall).getCall())
+      or
+      exists(NodeEx mid |
+        localFlowStepPlus(node1, pragma[only_bind_into](state), mid, preservesValue, t,
+          pragma[only_bind_into](config), cc) and
+        localFlowStepNodeCand1(mid, node2, config) and
+        not mid instanceof FlowCheckNode and
+        Stage2::revFlow(node2, pragma[only_bind_into](state), pragma[only_bind_into](config))
+      )
+      or
+      exists(NodeEx mid |
+        localFlowStepPlus(node1, state, mid, _, _, pragma[only_bind_into](config), cc) and
+        additionalLocalFlowStepNodeCand2(mid, state, node2, state, config) and
+        not mid instanceof FlowCheckNode and
+        preservesValue = false and
+        t = node2.getDataFlowType()
+      )
+    )
+  }
+
+  /**
+   * Holds if `node1` can step to `node2` in one or more local steps and this
+   * path can occur as a maximal subsequence of local steps in a dataflow path.
+   */
+  pragma[nomagic]
+  predicate localFlowBigStep(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+    AccessPathFrontNil apf, Configuration config, LocalCallContext callContext
+  ) {
+    localFlowStepPlus(node1, state1, node2, preservesValue, apf.getType(), config, callContext) and
+    localFlowExit(node2, state1, config) and
+    state1 = state2
+    or
+    additionalLocalFlowStepNodeCand2(node1, state1, node2, state2, config) and
+    state1 != state2 and
+    preservesValue = false and
+    apf = TFrontNil(node2.getDataFlowType()) and
+    callContext.relevantFor(node1.getEnclosingCallable()) and
+    not exists(DataFlowCall call | call = callContext.(LocalCallContextSpecificCall).getCall() |
+      isUnreachableInCallCached(node1.asNode(), call) or
+      isUnreachableInCallCached(node2.asNode(), call)
+    )
+  }
+}
+
+private import LocalFlowBigStep
+
+private module Stage3Param implements MkStage<Stage2>::StageParam {
+  private module PrevStage = Stage2;
+
+  class Ap = AccessPathFront;
+
+  class ApNil = AccessPathFrontNil;
+
+  PrevStage::Ap getApprox(Ap ap) { result = ap.toBoolNonEmpty() }
+
+  ApNil getApNil(NodeEx node) {
+    PrevStage::revFlow(node, _) and result = TFrontNil(node.getDataFlowType())
+  }
+
+  bindingset[tc, tail]
+  Ap apCons(TypedContent tc, Ap tail) { result.getHead() = tc and exists(tail) }
+
+  pragma[noinline]
+  Content getHeadContent(Ap ap) { result = ap.getHead().getContent() }
+
+  class ApOption = AccessPathFrontOption;
+
+  ApOption apNone() { result = TAccessPathFrontNone() }
+
+  ApOption apSome(Ap ap) { result = TAccessPathFrontSome(ap) }
+
+  import BooleanCallContext
+
+  predicate localStep(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+    ApNil ap, Configuration config, LocalCc lcc
+  ) {
+    localFlowBigStep(node1, state1, node2, state2, preservesValue, ap, config, _) and exists(lcc)
+  }
+
+  predicate flowOutOfCall = flowOutOfCallNodeCand2/5;
+
+  predicate flowIntoCall = flowIntoCallNodeCand2/5;
+
+  pragma[nomagic]
+  private predicate clearSet(NodeEx node, ContentSet c, Configuration config) {
+    PrevStage::revFlow(node, config) and
+    clearsContentCached(node.asNode(), c)
+  }
+
+  pragma[nomagic]
+  private predicate clearContent(NodeEx node, Content c, Configuration config) {
+    exists(ContentSet cs |
+      PrevStage::readStepCand(_, pragma[only_bind_into](c), _, pragma[only_bind_into](config)) and
+      c = cs.getAReadContent() and
+      clearSet(node, cs, pragma[only_bind_into](config))
+    )
+  }
+
+  pragma[nomagic]
+  private predicate clear(NodeEx node, Ap ap, Configuration config) {
+    clearContent(node, ap.getHead().getContent(), config)
+  }
+
+  pragma[nomagic]
+  private predicate expectsContentCand(NodeEx node, Ap ap, Configuration config) {
+    exists(Content c |
+      PrevStage::revFlow(node, pragma[only_bind_into](config)) and
+      PrevStage::readStepCand(_, c, _, pragma[only_bind_into](config)) and
+      expectsContentEx(node, c) and
+      c = ap.getHead().getContent()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate castingNodeEx(NodeEx node) { node.asNode() instanceof CastingNode }
+
+  bindingset[node, state, ap, config]
+  predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config) {
+    exists(state) and
+    exists(config) and
+    not clear(node, ap, config) and
+    (if castingNodeEx(node) then compatibleTypes(node.getDataFlowType(), ap.getType()) else any()) and
+    (
+      notExpectsContent(node)
+      or
+      expectsContentCand(node, ap, config)
+    )
+  }
+
+  bindingset[ap, contentType]
+  predicate typecheckStore(Ap ap, DataFlowType contentType) {
+    // We need to typecheck stores here, since reverse flow through a getter
+    // might have a different type here compared to inside the getter.
+    compatibleTypes(ap.getType(), contentType)
+  }
+}
+
+private module Stage3 implements StageSig {
+  import MkStage<Stage2>::Stage<Stage3Param>
+}
+
+/**
+ * Holds if `argApf` is recorded as the summary context for flow reaching `node`
+ * and remains relevant for the following pruning stage.
+ */
+private predicate flowCandSummaryCtx(
+  NodeEx node, FlowState state, AccessPathFront argApf, Configuration config
+) {
+  exists(AccessPathFront apf |
+    Stage3::revFlow(node, state, true, _, apf, config) and
+    Stage3::fwdFlow(node, state, any(Stage3::CcCall ccc), TAccessPathFrontSome(argApf), apf, config)
+  )
+}
+
+/**
+ * Holds if a length 2 access path approximation with the head `tc` is expected
+ * to be expensive.
+ */
+private predicate expensiveLen2unfolding(TypedContent tc, Configuration config) {
+  exists(int tails, int nodes, int apLimit, int tupleLimit |
+    tails = strictcount(AccessPathFront apf | Stage3::consCand(tc, apf, config)) and
+    nodes =
+      strictcount(NodeEx n, FlowState state |
+        Stage3::revFlow(n, state, any(AccessPathFrontHead apf | apf.getHead() = tc), config)
+        or
+        flowCandSummaryCtx(n, state, any(AccessPathFrontHead apf | apf.getHead() = tc), config)
+      ) and
+    accessPathApproxCostLimits(apLimit, tupleLimit) and
+    apLimit < tails and
+    tupleLimit < (tails - 1) * nodes and
+    not tc.forceHighPrecision()
+  )
+}
+
+private newtype TAccessPathApprox =
+  TNil(DataFlowType t) or
+  TConsNil(TypedContent tc, DataFlowType t) {
+    Stage3::consCand(tc, TFrontNil(t), _) and
+    not expensiveLen2unfolding(tc, _)
+  } or
+  TConsCons(TypedContent tc1, TypedContent tc2, int len) {
+    Stage3::consCand(tc1, TFrontHead(tc2), _) and
+    len in [2 .. accessPathLimit()] and
+    not expensiveLen2unfolding(tc1, _)
+  } or
+  TCons1(TypedContent tc, int len) {
+    len in [1 .. accessPathLimit()] and
+    expensiveLen2unfolding(tc, _)
+  }
+
+/**
+ * Conceptually a list of `TypedContent`s followed by a `DataFlowType`, but only
+ * the first two elements of the list and its length are tracked. If data flows
+ * from a source to a given node with a given `AccessPathApprox`, this indicates
+ * the sequence of dereference operations needed to get from the value in the node
+ * to the tracked object. The final type indicates the type of the tracked object.
+ */
+abstract private class AccessPathApprox extends TAccessPathApprox {
+  abstract string toString();
+
+  abstract TypedContent getHead();
+
+  abstract int len();
+
+  abstract DataFlowType getType();
+
+  abstract AccessPathFront getFront();
+
+  /** Gets the access path obtained by popping `head` from this path, if any. */
+  abstract AccessPathApprox pop(TypedContent head);
+}
+
+private class AccessPathApproxNil extends AccessPathApprox, TNil {
+  private DataFlowType t;
+
+  AccessPathApproxNil() { this = TNil(t) }
+
+  override string toString() { result = concat(": " + ppReprType(t)) }
+
+  override TypedContent getHead() { none() }
+
+  override int len() { result = 0 }
+
+  override DataFlowType getType() { result = t }
+
+  override AccessPathFront getFront() { result = TFrontNil(t) }
+
+  override AccessPathApprox pop(TypedContent head) { none() }
+}
+
+abstract private class AccessPathApproxCons extends AccessPathApprox { }
+
+private class AccessPathApproxConsNil extends AccessPathApproxCons, TConsNil {
+  private TypedContent tc;
+  private DataFlowType t;
+
+  AccessPathApproxConsNil() { this = TConsNil(tc, t) }
+
+  override string toString() {
+    // The `concat` becomes "" if `ppReprType` has no result.
+    result = "[" + tc.toString() + "]" + concat(" : " + ppReprType(t))
+  }
+
+  override TypedContent getHead() { result = tc }
+
+  override int len() { result = 1 }
+
+  override DataFlowType getType() { result = tc.getContainerType() }
+
+  override AccessPathFront getFront() { result = TFrontHead(tc) }
+
+  override AccessPathApprox pop(TypedContent head) { head = tc and result = TNil(t) }
+}
+
+private class AccessPathApproxConsCons extends AccessPathApproxCons, TConsCons {
+  private TypedContent tc1;
+  private TypedContent tc2;
+  private int len;
+
+  AccessPathApproxConsCons() { this = TConsCons(tc1, tc2, len) }
+
+  override string toString() {
+    if len = 2
+    then result = "[" + tc1.toString() + ", " + tc2.toString() + "]"
+    else result = "[" + tc1.toString() + ", " + tc2.toString() + ", ... (" + len.toString() + ")]"
+  }
+
+  override TypedContent getHead() { result = tc1 }
+
+  override int len() { result = len }
+
+  override DataFlowType getType() { result = tc1.getContainerType() }
+
+  override AccessPathFront getFront() { result = TFrontHead(tc1) }
+
+  override AccessPathApprox pop(TypedContent head) {
+    head = tc1 and
+    (
+      result = TConsCons(tc2, _, len - 1)
+      or
+      len = 2 and
+      result = TConsNil(tc2, _)
+      or
+      result = TCons1(tc2, len - 1)
+    )
+  }
+}
+
+private class AccessPathApproxCons1 extends AccessPathApproxCons, TCons1 {
+  private TypedContent tc;
+  private int len;
+
+  AccessPathApproxCons1() { this = TCons1(tc, len) }
+
+  override string toString() {
+    if len = 1
+    then result = "[" + tc.toString() + "]"
+    else result = "[" + tc.toString() + ", ... (" + len.toString() + ")]"
+  }
+
+  override TypedContent getHead() { result = tc }
+
+  override int len() { result = len }
+
+  override DataFlowType getType() { result = tc.getContainerType() }
+
+  override AccessPathFront getFront() { result = TFrontHead(tc) }
+
+  override AccessPathApprox pop(TypedContent head) {
+    head = tc and
+    (
+      exists(TypedContent tc2 | Stage3::consCand(tc, TFrontHead(tc2), _) |
+        result = TConsCons(tc2, _, len - 1)
+        or
+        len = 2 and
+        result = TConsNil(tc2, _)
+        or
+        result = TCons1(tc2, len - 1)
+      )
+      or
+      exists(DataFlowType t |
+        len = 1 and
+        Stage3::consCand(tc, TFrontNil(t), _) and
+        result = TNil(t)
+      )
+    )
+  }
+}
+
+/** Gets the access path obtained by popping `tc` from `ap`, if any. */
+private AccessPathApprox pop(TypedContent tc, AccessPathApprox apa) { result = apa.pop(tc) }
+
+/** Gets the access path obtained by pushing `tc` onto `ap`. */
+private AccessPathApprox push(TypedContent tc, AccessPathApprox apa) { apa = pop(tc, result) }
+
+private newtype TAccessPathApproxOption =
+  TAccessPathApproxNone() or
+  TAccessPathApproxSome(AccessPathApprox apa)
+
+private class AccessPathApproxOption extends TAccessPathApproxOption {
+  string toString() {
+    this = TAccessPathApproxNone() and result = "<none>"
+    or
+    this = TAccessPathApproxSome(any(AccessPathApprox apa | result = apa.toString()))
+  }
+}
+
+private module Stage4Param implements MkStage<Stage3>::StageParam {
+  private module PrevStage = Stage3;
+
+  class Ap = AccessPathApprox;
+
+  class ApNil = AccessPathApproxNil;
+
+  PrevStage::Ap getApprox(Ap ap) { result = ap.getFront() }
+
+  ApNil getApNil(NodeEx node) {
+    PrevStage::revFlow(node, _) and result = TNil(node.getDataFlowType())
+  }
+
+  bindingset[tc, tail]
+  Ap apCons(TypedContent tc, Ap tail) { result = push(tc, tail) }
+
+  pragma[noinline]
+  Content getHeadContent(Ap ap) { result = ap.getHead().getContent() }
+
+  class ApOption = AccessPathApproxOption;
+
+  ApOption apNone() { result = TAccessPathApproxNone() }
+
+  ApOption apSome(Ap ap) { result = TAccessPathApproxSome(ap) }
+
+  import Level1CallContext
+  import LocalCallContext
+
+  predicate localStep(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+    ApNil ap, Configuration config, LocalCc lcc
+  ) {
+    localFlowBigStep(node1, state1, node2, state2, preservesValue, ap.getFront(), config, lcc)
+  }
+
+  pragma[nomagic]
+  predicate flowOutOfCall(
+    DataFlowCall call, RetNodeEx node1, NodeEx node2, boolean allowsFieldFlow, Configuration config
+  ) {
+    exists(FlowState state |
+      flowOutOfCallNodeCand2(call, node1, node2, allowsFieldFlow, config) and
+      PrevStage::revFlow(node2, pragma[only_bind_into](state), _, pragma[only_bind_into](config)) and
+      PrevStage::revFlowAlias(node1, pragma[only_bind_into](state), _,
+        pragma[only_bind_into](config))
+    )
+  }
+
+  pragma[nomagic]
+  predicate flowIntoCall(
+    DataFlowCall call, ArgNodeEx node1, ParamNodeEx node2, boolean allowsFieldFlow,
+    Configuration config
+  ) {
+    exists(FlowState state |
+      flowIntoCallNodeCand2(call, node1, node2, allowsFieldFlow, config) and
+      PrevStage::revFlow(node2, pragma[only_bind_into](state), _, pragma[only_bind_into](config)) and
+      PrevStage::revFlowAlias(node1, pragma[only_bind_into](state), _,
+        pragma[only_bind_into](config))
+    )
+  }
+
+  bindingset[node, state, ap, config]
+  predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config) { any() }
+
+  // Type checking is not necessary here as it has already been done in stage 3.
+  bindingset[ap, contentType]
+  predicate typecheckStore(Ap ap, DataFlowType contentType) { any() }
+}
+
+private module Stage4 = MkStage<Stage3>::Stage<Stage4Param>;
+
+bindingset[conf, result]
+private Configuration unbindConf(Configuration conf) {
+  exists(Configuration c | result = pragma[only_bind_into](c) and conf = pragma[only_bind_into](c))
+}
+
+pragma[nomagic]
+private predicate nodeMayUseSummary0(
+  NodeEx n, DataFlowCallable c, FlowState state, AccessPathApprox apa, Configuration config
+) {
+  exists(AccessPathApprox apa0 |
+    Stage4::parameterMayFlowThrough(_, c, _, _) and
+    Stage4::revFlow(n, state, true, _, apa0, config) and
+    Stage4::fwdFlow(n, state, any(CallContextCall ccc), TAccessPathApproxSome(apa), apa0, config) and
+    n.getEnclosingCallable() = c
+  )
+}
+
+pragma[nomagic]
+private predicate nodeMayUseSummary(
+  NodeEx n, FlowState state, AccessPathApprox apa, Configuration config
+) {
+  exists(DataFlowCallable c |
+    Stage4::parameterMayFlowThrough(_, c, apa, config) and
+    nodeMayUseSummary0(n, c, state, apa, config)
+  )
+}
+
+private newtype TSummaryCtx =
+  TSummaryCtxNone() or
+  TSummaryCtxSome(ParamNodeEx p, FlowState state, AccessPath ap) {
+    exists(Configuration config |
+      Stage4::parameterMayFlowThrough(p, _, ap.getApprox(), config) and
+      Stage4::revFlow(p, state, _, config)
+    )
+  }
+
+/**
+ * A context for generating flow summaries. This represents flow entry through
+ * a specific parameter with an access path of a specific shape.
+ *
+ * Summaries are only created for parameters that may flow through.
+ */
+abstract private class SummaryCtx extends TSummaryCtx {
+  abstract string toString();
+}
+
+/** A summary context from which no flow summary can be generated. */
+private class SummaryCtxNone extends SummaryCtx, TSummaryCtxNone {
+  override string toString() { result = "<none>" }
+}
+
+/** A summary context from which a flow summary can be generated. */
+private class SummaryCtxSome extends SummaryCtx, TSummaryCtxSome {
+  private ParamNodeEx p;
+  private FlowState s;
+  private AccessPath ap;
+
+  SummaryCtxSome() { this = TSummaryCtxSome(p, s, ap) }
+
+  ParameterPosition getParameterPos() { p.isParameterOf(_, result) }
+
+  ParamNodeEx getParamNode() { result = p }
+
+  override string toString() { result = p + ": " + ap }
+
+  predicate hasLocationInfo(
+    string filepath, int startline, int startcolumn, int endline, int endcolumn
+  ) {
+    p.hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+  }
+}
+
+/**
+ * Gets the number of length 2 access path approximations that correspond to `apa`.
+ */
+private int count1to2unfold(AccessPathApproxCons1 apa, Configuration config) {
+  exists(TypedContent tc, int len |
+    tc = apa.getHead() and
+    len = apa.len() and
+    result =
+      strictcount(AccessPathFront apf |
+        Stage4::consCand(tc, any(AccessPathApprox ap | ap.getFront() = apf and ap.len() = len - 1),
+          config)
+      )
+  )
+}
+
+private int countNodesUsingAccessPath(AccessPathApprox apa, Configuration config) {
+  result =
+    strictcount(NodeEx n, FlowState state |
+      Stage4::revFlow(n, state, apa, config) or nodeMayUseSummary(n, state, apa, config)
+    )
+}
+
+/**
+ * Holds if a length 2 access path approximation matching `apa` is expected
+ * to be expensive.
+ */
+private predicate expensiveLen1to2unfolding(AccessPathApproxCons1 apa, Configuration config) {
+  exists(int aps, int nodes, int apLimit, int tupleLimit |
+    aps = count1to2unfold(apa, config) and
+    nodes = countNodesUsingAccessPath(apa, config) and
+    accessPathCostLimits(apLimit, tupleLimit) and
+    apLimit < aps and
+    tupleLimit < (aps - 1) * nodes
+  )
+}
+
+private AccessPathApprox getATail(AccessPathApprox apa, Configuration config) {
+  exists(TypedContent head |
+    apa.pop(head) = result and
+    Stage4::consCand(head, result, config)
+  )
+}
+
+/**
+ * Holds with `unfold = false` if a precise head-tail representation of `apa` is
+ * expected to be expensive. Holds with `unfold = true` otherwise.
+ */
+private predicate evalUnfold(AccessPathApprox apa, boolean unfold, Configuration config) {
+  if apa.getHead().forceHighPrecision()
+  then unfold = true
+  else
+    exists(int aps, int nodes, int apLimit, int tupleLimit |
+      aps = countPotentialAps(apa, config) and
+      nodes = countNodesUsingAccessPath(apa, config) and
+      accessPathCostLimits(apLimit, tupleLimit) and
+      if apLimit < aps and tupleLimit < (aps - 1) * nodes then unfold = false else unfold = true
+    )
+}
+
+/**
+ * Gets the number of `AccessPath`s that correspond to `apa`.
+ */
+private int countAps(AccessPathApprox apa, Configuration config) {
+  evalUnfold(apa, false, config) and
+  result = 1 and
+  (not apa instanceof AccessPathApproxCons1 or expensiveLen1to2unfolding(apa, config))
+  or
+  evalUnfold(apa, false, config) and
+  result = count1to2unfold(apa, config) and
+  not expensiveLen1to2unfolding(apa, config)
+  or
+  evalUnfold(apa, true, config) and
+  result = countPotentialAps(apa, config)
+}
+
+/**
+ * Gets the number of `AccessPath`s that would correspond to `apa` assuming
+ * that it is expanded to a precise head-tail representation.
+ */
+language[monotonicAggregates]
+private int countPotentialAps(AccessPathApprox apa, Configuration config) {
+  apa instanceof AccessPathApproxNil and result = 1
+  or
+  result = strictsum(AccessPathApprox tail | tail = getATail(apa, config) | countAps(tail, config))
+}
+
+private newtype TAccessPath =
+  TAccessPathNil(DataFlowType t) or
+  TAccessPathCons(TypedContent head, AccessPath tail) {
+    exists(AccessPathApproxCons apa |
+      not evalUnfold(apa, false, _) and
+      head = apa.getHead() and
+      tail.getApprox() = getATail(apa, _)
+    )
+  } or
+  TAccessPathCons2(TypedContent head1, TypedContent head2, int len) {
+    exists(AccessPathApproxCons apa |
+      evalUnfold(apa, false, _) and
+      not expensiveLen1to2unfolding(apa, _) and
+      apa.len() = len and
+      head1 = apa.getHead() and
+      head2 = getATail(apa, _).getHead()
+    )
+  } or
+  TAccessPathCons1(TypedContent head, int len) {
+    exists(AccessPathApproxCons apa |
+      evalUnfold(apa, false, _) and
+      expensiveLen1to2unfolding(apa, _) and
+      apa.len() = len and
+      head = apa.getHead()
+    )
+  }
+
+private newtype TPathNode =
+  TPathNodeMid(
+    NodeEx node, FlowState state, CallContext cc, SummaryCtx sc, AccessPath ap, Configuration config
+  ) {
+    // A PathNode is introduced by a source ...
+    Stage4::revFlow(node, state, config) and
+    sourceNode(node, state, config) and
+    (
+      if hasSourceCallCtx(config)
+      then cc instanceof CallContextSomeCall
+      else cc instanceof CallContextAny
+    ) and
+    sc instanceof SummaryCtxNone and
+    ap = TAccessPathNil(node.getDataFlowType())
+    or
+    // ... or a step from an existing PathNode to another node.
+    exists(PathNodeMid mid |
+      pathStep(mid, node, state, cc, sc, ap) and
+      pragma[only_bind_into](config) = mid.getConfiguration() and
+      Stage4::revFlow(node, state, ap.getApprox(), pragma[only_bind_into](config))
+    )
+  } or
+  TPathNodeSink(NodeEx node, FlowState state, Configuration config) {
+    exists(PathNodeMid sink |
+      sink.isAtSink() and
+      node = sink.getNodeEx() and
+      state = sink.getState() and
+      config = sink.getConfiguration()
+    )
+  }
+
+/**
+ * A list of `TypedContent`s followed by a `DataFlowType`. If data flows from a
+ * source to a given node with a given `AccessPath`, this indicates the sequence
+ * of dereference operations needed to get from the value in the node to the
+ * tracked object. The final type indicates the type of the tracked object.
+ */
+private class AccessPath extends TAccessPath {
+  /** Gets the head of this access path, if any. */
+  abstract TypedContent getHead();
+
+  /** Gets the tail of this access path, if any. */
+  abstract AccessPath getTail();
+
+  /** Gets the front of this access path. */
+  abstract AccessPathFront getFront();
+
+  /** Gets the approximation of this access path. */
+  abstract AccessPathApprox getApprox();
+
+  /** Gets the length of this access path. */
+  abstract int length();
+
+  /** Gets a textual representation of this access path. */
+  abstract string toString();
+
+  /** Gets the access path obtained by popping `tc` from this access path, if any. */
+  final AccessPath pop(TypedContent tc) {
+    result = this.getTail() and
+    tc = this.getHead()
+  }
+
+  /** Gets the access path obtained by pushing `tc` onto this access path. */
+  final AccessPath push(TypedContent tc) { this = result.pop(tc) }
+}
+
+private class AccessPathNil extends AccessPath, TAccessPathNil {
+  private DataFlowType t;
+
+  AccessPathNil() { this = TAccessPathNil(t) }
+
+  DataFlowType getType() { result = t }
+
+  override TypedContent getHead() { none() }
+
+  override AccessPath getTail() { none() }
+
+  override AccessPathFrontNil getFront() { result = TFrontNil(t) }
+
+  override AccessPathApproxNil getApprox() { result = TNil(t) }
+
+  override int length() { result = 0 }
+
+  override string toString() { result = concat(": " + ppReprType(t)) }
+}
+
+private class AccessPathCons extends AccessPath, TAccessPathCons {
+  private TypedContent head;
+  private AccessPath tail;
+
+  AccessPathCons() { this = TAccessPathCons(head, tail) }
+
+  override TypedContent getHead() { result = head }
+
+  override AccessPath getTail() { result = tail }
+
+  override AccessPathFrontHead getFront() { result = TFrontHead(head) }
+
+  override AccessPathApproxCons getApprox() {
+    result = TConsNil(head, tail.(AccessPathNil).getType())
+    or
+    result = TConsCons(head, tail.getHead(), this.length())
+    or
+    result = TCons1(head, this.length())
+  }
+
+  override int length() { result = 1 + tail.length() }
+
+  private string toStringImpl(boolean needsSuffix) {
+    exists(DataFlowType t |
+      tail = TAccessPathNil(t) and
+      needsSuffix = false and
+      result = head.toString() + "]" + concat(" : " + ppReprType(t))
+    )
+    or
+    result = head + ", " + tail.(AccessPathCons).toStringImpl(needsSuffix)
+    or
+    exists(TypedContent tc2, TypedContent tc3, int len | tail = TAccessPathCons2(tc2, tc3, len) |
+      result = head + ", " + tc2 + ", " + tc3 + ", ... (" and len > 2 and needsSuffix = true
+      or
+      result = head + ", " + tc2 + ", " + tc3 + "]" and len = 2 and needsSuffix = false
+    )
+    or
+    exists(TypedContent tc2, int len | tail = TAccessPathCons1(tc2, len) |
+      result = head + ", " + tc2 + ", ... (" and len > 1 and needsSuffix = true
+      or
+      result = head + ", " + tc2 + "]" and len = 1 and needsSuffix = false
+    )
+  }
+
+  override string toString() {
+    result = "[" + this.toStringImpl(true) + this.length().toString() + ")]"
+    or
+    result = "[" + this.toStringImpl(false)
+  }
+}
+
+private class AccessPathCons2 extends AccessPath, TAccessPathCons2 {
+  private TypedContent head1;
+  private TypedContent head2;
+  private int len;
+
+  AccessPathCons2() { this = TAccessPathCons2(head1, head2, len) }
+
+  override TypedContent getHead() { result = head1 }
+
+  override AccessPath getTail() {
+    Stage4::consCand(head1, result.getApprox(), _) and
+    result.getHead() = head2 and
+    result.length() = len - 1
+  }
+
+  override AccessPathFrontHead getFront() { result = TFrontHead(head1) }
+
+  override AccessPathApproxCons getApprox() {
+    result = TConsCons(head1, head2, len) or
+    result = TCons1(head1, len)
+  }
+
+  override int length() { result = len }
+
+  override string toString() {
+    if len = 2
+    then result = "[" + head1.toString() + ", " + head2.toString() + "]"
+    else
+      result = "[" + head1.toString() + ", " + head2.toString() + ", ... (" + len.toString() + ")]"
+  }
+}
+
+private class AccessPathCons1 extends AccessPath, TAccessPathCons1 {
+  private TypedContent head;
+  private int len;
+
+  AccessPathCons1() { this = TAccessPathCons1(head, len) }
+
+  override TypedContent getHead() { result = head }
+
+  override AccessPath getTail() {
+    Stage4::consCand(head, result.getApprox(), _) and result.length() = len - 1
+  }
+
+  override AccessPathFrontHead getFront() { result = TFrontHead(head) }
+
+  override AccessPathApproxCons getApprox() { result = TCons1(head, len) }
+
+  override int length() { result = len }
+
+  override string toString() {
+    if len = 1
+    then result = "[" + head.toString() + "]"
+    else result = "[" + head.toString() + ", ... (" + len.toString() + ")]"
+  }
+}
+
+/**
+ * A `Node` augmented with a call context (except for sinks), an access path, and a configuration.
+ * Only those `PathNode`s that are reachable from a source are generated.
+ */
+class PathNode extends TPathNode {
+  /** Gets a textual representation of this element. */
+  string toString() { none() }
+
+  /**
+   * Gets a textual representation of this element, including a textual
+   * representation of the call context.
+   */
+  string toStringWithContext() { none() }
+
+  /**
+   * Holds if this element is at the specified location.
+   * The location spans column `startcolumn` of line `startline` to
+   * column `endcolumn` of line `endline` in file `filepath`.
+   * For more information, see
+   * [Locations](https://codeql.github.com/docs/writing-codeql-queries/providing-locations-in-codeql-queries/).
+   */
+  predicate hasLocationInfo(
+    string filepath, int startline, int startcolumn, int endline, int endcolumn
+  ) {
+    none()
+  }
+
+  /** Gets the underlying `Node`. */
+  final Node getNode() { this.(PathNodeImpl).getNodeEx().projectToNode() = result }
+
+  /** Gets the `FlowState` of this node. */
+  FlowState getState() { none() }
+
+  /** Gets the associated configuration. */
+  Configuration getConfiguration() { none() }
+
+  /** Gets a successor of this node, if any. */
+  final PathNode getASuccessor() {
+    result = this.(PathNodeImpl).getANonHiddenSuccessor() and
+    reach(this) and
+    reach(result)
+  }
+
+  /** Holds if this node is a source. */
+  predicate isSource() { none() }
+}
+
+abstract private class PathNodeImpl extends PathNode {
+  abstract PathNodeImpl getASuccessorImpl();
+
+  private PathNodeImpl getASuccessorIfHidden() {
+    this.isHidden() and
+    result = this.getASuccessorImpl()
+  }
+
+  final PathNodeImpl getANonHiddenSuccessor() {
+    result = this.getASuccessorImpl().getASuccessorIfHidden*() and
+    not this.isHidden() and
+    not result.isHidden()
+  }
+
+  abstract NodeEx getNodeEx();
+
+  predicate isHidden() {
+    not this.getConfiguration().includeHiddenNodes() and
+    (
+      hiddenNode(this.getNodeEx().asNode()) and
+      not this.isSource() and
+      not this instanceof PathNodeSink
+      or
+      this.getNodeEx() instanceof TNodeImplicitRead
+    )
+  }
+
+  private string ppAp() {
+    this instanceof PathNodeSink and result = ""
+    or
+    exists(string s | s = this.(PathNodeMid).getAp().toString() |
+      if s = "" then result = "" else result = " " + s
+    )
+  }
+
+  private string ppCtx() {
+    this instanceof PathNodeSink and result = ""
+    or
+    result = " <" + this.(PathNodeMid).getCallContext().toString() + ">"
+  }
+
+  override string toString() { result = this.getNodeEx().toString() + this.ppAp() }
+
+  override string toStringWithContext() {
+    result = this.getNodeEx().toString() + this.ppAp() + this.ppCtx()
+  }
+
+  override predicate hasLocationInfo(
+    string filepath, int startline, int startcolumn, int endline, int endcolumn
+  ) {
+    this.getNodeEx().hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+  }
+}
+
+/** Holds if `n` can reach a sink. */
+private predicate directReach(PathNodeImpl n) {
+  n instanceof PathNodeSink or directReach(n.getANonHiddenSuccessor())
+}
+
+/** Holds if `n` can reach a sink or is used in a subpath that can reach a sink. */
+private predicate reach(PathNode n) { directReach(n) or Subpaths::retReach(n) }
+
+/** Holds if `n1.getASuccessor() = n2` and `n2` can reach a sink. */
+private predicate pathSucc(PathNodeImpl n1, PathNode n2) {
+  n1.getANonHiddenSuccessor() = n2 and directReach(n2)
+}
+
+private predicate pathSuccPlus(PathNode n1, PathNode n2) = fastTC(pathSucc/2)(n1, n2)
+
+/**
+ * Provides the query predicates needed to include a graph in a path-problem query.
+ */
+module PathGraph {
+  /** Holds if `(a,b)` is an edge in the graph of data flow path explanations. */
+  query predicate edges(PathNode a, PathNode b) { a.getASuccessor() = b }
+
+  /** Holds if `n` is a node in the graph of data flow path explanations. */
+  query predicate nodes(PathNode n, string key, string val) {
+    reach(n) and key = "semmle.label" and val = n.toString()
+  }
+
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple, that is, flow through
+   * a subpath between `par` and `ret` with the connecting edges `arg -> par` and
+   * `ret -> out` is summarized as the edge `arg -> out`.
+   */
+  query predicate subpaths(PathNode arg, PathNode par, PathNode ret, PathNode out) {
+    Subpaths::subpaths(arg, par, ret, out) and
+    reach(arg) and
+    reach(par) and
+    reach(ret) and
+    reach(out)
+  }
+}
+
+/**
+ * An intermediate flow graph node. This is a triple consisting of a `Node`,
+ * a `CallContext`, and a `Configuration`.
+ */
+private class PathNodeMid extends PathNodeImpl, TPathNodeMid {
+  NodeEx node;
+  FlowState state;
+  CallContext cc;
+  SummaryCtx sc;
+  AccessPath ap;
+  Configuration config;
+
+  PathNodeMid() { this = TPathNodeMid(node, state, cc, sc, ap, config) }
+
+  override NodeEx getNodeEx() { result = node }
+
+  override FlowState getState() { result = state }
+
+  CallContext getCallContext() { result = cc }
+
+  SummaryCtx getSummaryCtx() { result = sc }
+
+  AccessPath getAp() { result = ap }
+
+  override Configuration getConfiguration() { result = config }
+
+  private PathNodeMid getSuccMid() {
+    pathStep(this, result.getNodeEx(), result.getState(), result.getCallContext(),
+      result.getSummaryCtx(), result.getAp()) and
+    result.getConfiguration() = unbindConf(this.getConfiguration())
+  }
+
+  override PathNodeImpl getASuccessorImpl() {
+    // an intermediate step to another intermediate node
+    result = this.getSuccMid()
+    or
+    // a final step to a sink
+    result = this.getSuccMid().projectToSink()
+  }
+
+  override predicate isSource() {
+    sourceNode(node, state, config) and
+    (
+      if hasSourceCallCtx(config)
+      then cc instanceof CallContextSomeCall
+      else cc instanceof CallContextAny
+    ) and
+    sc instanceof SummaryCtxNone and
+    ap = TAccessPathNil(node.getDataFlowType())
+  }
+
+  predicate isAtSink() {
+    sinkNode(node, state, config) and
+    ap instanceof AccessPathNil and
+    if hasSinkCallCtx(config)
+    then
+      // For `FeatureHasSinkCallContext` the condition `cc instanceof CallContextNoCall`
+      // is exactly what we need to check. This also implies
+      // `sc instanceof SummaryCtxNone`.
+      // For `FeatureEqualSourceSinkCallContext` the initial call context was
+      // set to `CallContextSomeCall` and jumps are disallowed, so
+      // `cc instanceof CallContextNoCall` never holds. On the other hand,
+      // in this case there's never any need to enter a call except to identify
+      // a summary, so the condition in `pathIntoCallable` enforces this, which
+      // means that `sc instanceof SummaryCtxNone` holds if and only if we are
+      // in the call context of the source.
+      sc instanceof SummaryCtxNone or
+      cc instanceof CallContextNoCall
+    else any()
+  }
+
+  PathNodeSink projectToSink() {
+    this.isAtSink() and
+    result.getNodeEx() = node and
+    result.getState() = state and
+    result.getConfiguration() = unbindConf(config)
+  }
+}
+
+/**
+ * A flow graph node corresponding to a sink. This is disjoint from the
+ * intermediate nodes in order to uniquely correspond to a given sink by
+ * excluding the `CallContext`.
+ */
+private class PathNodeSink extends PathNodeImpl, TPathNodeSink {
+  NodeEx node;
+  FlowState state;
+  Configuration config;
+
+  PathNodeSink() { this = TPathNodeSink(node, state, config) }
+
+  override NodeEx getNodeEx() { result = node }
+
+  override FlowState getState() { result = state }
+
+  override Configuration getConfiguration() { result = config }
+
+  override PathNodeImpl getASuccessorImpl() { none() }
+
+  override predicate isSource() { sourceNode(node, state, config) }
+}
+
+private predicate pathNode(
+  PathNodeMid mid, NodeEx midnode, FlowState state, CallContext cc, SummaryCtx sc, AccessPath ap,
+  Configuration conf, LocalCallContext localCC
+) {
+  midnode = mid.getNodeEx() and
+  state = mid.getState() and
+  conf = mid.getConfiguration() and
+  cc = mid.getCallContext() and
+  sc = mid.getSummaryCtx() and
+  localCC =
+    getLocalCallContext(pragma[only_bind_into](pragma[only_bind_out](cc)),
+      midnode.getEnclosingCallable()) and
+  ap = mid.getAp()
+}
+
+/**
+ * Holds if data may flow from `mid` to `node`. The last step in or out of
+ * a callable is recorded by `cc`.
+ */
+pragma[nomagic]
+private predicate pathStep(
+  PathNodeMid mid, NodeEx node, FlowState state, CallContext cc, SummaryCtx sc, AccessPath ap
+) {
+  exists(NodeEx midnode, FlowState state0, Configuration conf, LocalCallContext localCC |
+    pathNode(mid, midnode, state0, cc, sc, ap, conf, localCC) and
+    localFlowBigStep(midnode, state0, node, state, true, _, conf, localCC)
+  )
+  or
+  exists(
+    AccessPath ap0, NodeEx midnode, FlowState state0, Configuration conf, LocalCallContext localCC
+  |
+    pathNode(mid, midnode, state0, cc, sc, ap0, conf, localCC) and
+    localFlowBigStep(midnode, state0, node, state, false, ap.getFront(), conf, localCC) and
+    ap0 instanceof AccessPathNil
+  )
+  or
+  jumpStep(mid.getNodeEx(), node, mid.getConfiguration()) and
+  state = mid.getState() and
+  cc instanceof CallContextAny and
+  sc instanceof SummaryCtxNone and
+  ap = mid.getAp()
+  or
+  additionalJumpStep(mid.getNodeEx(), node, mid.getConfiguration()) and
+  state = mid.getState() and
+  cc instanceof CallContextAny and
+  sc instanceof SummaryCtxNone and
+  mid.getAp() instanceof AccessPathNil and
+  ap = TAccessPathNil(node.getDataFlowType())
+  or
+  additionalJumpStateStep(mid.getNodeEx(), mid.getState(), node, state, mid.getConfiguration()) and
+  cc instanceof CallContextAny and
+  sc instanceof SummaryCtxNone and
+  mid.getAp() instanceof AccessPathNil and
+  ap = TAccessPathNil(node.getDataFlowType())
+  or
+  exists(TypedContent tc | pathStoreStep(mid, node, state, ap.pop(tc), tc, cc)) and
+  sc = mid.getSummaryCtx()
+  or
+  exists(TypedContent tc | pathReadStep(mid, node, state, ap.push(tc), tc, cc)) and
+  sc = mid.getSummaryCtx()
+  or
+  pathIntoCallable(mid, node, state, _, cc, sc, _, _) and ap = mid.getAp()
+  or
+  pathOutOfCallable(mid, node, state, cc) and ap = mid.getAp() and sc instanceof SummaryCtxNone
+  or
+  pathThroughCallable(mid, node, state, cc, ap) and sc = mid.getSummaryCtx()
+}
+
+pragma[nomagic]
+private predicate pathReadStep(
+  PathNodeMid mid, NodeEx node, FlowState state, AccessPath ap0, TypedContent tc, CallContext cc
+) {
+  ap0 = mid.getAp() and
+  tc = ap0.getHead() and
+  Stage4::readStepCand(mid.getNodeEx(), tc.getContent(), node, mid.getConfiguration()) and
+  state = mid.getState() and
+  cc = mid.getCallContext()
+}
+
+pragma[nomagic]
+private predicate pathStoreStep(
+  PathNodeMid mid, NodeEx node, FlowState state, AccessPath ap0, TypedContent tc, CallContext cc
+) {
+  ap0 = mid.getAp() and
+  Stage4::storeStepCand(mid.getNodeEx(), _, tc, node, _, mid.getConfiguration()) and
+  state = mid.getState() and
+  cc = mid.getCallContext()
+}
+
+private predicate pathOutOfCallable0(
+  PathNodeMid mid, ReturnPosition pos, FlowState state, CallContext innercc, AccessPathApprox apa,
+  Configuration config
+) {
+  pos = mid.getNodeEx().(RetNodeEx).getReturnPosition() and
+  state = mid.getState() and
+  innercc = mid.getCallContext() and
+  innercc instanceof CallContextNoCall and
+  apa = mid.getAp().getApprox() and
+  config = mid.getConfiguration()
+}
+
+pragma[nomagic]
+private predicate pathOutOfCallable1(
+  PathNodeMid mid, DataFlowCall call, ReturnKindExt kind, FlowState state, CallContext cc,
+  AccessPathApprox apa, Configuration config
+) {
+  exists(ReturnPosition pos, DataFlowCallable c, CallContext innercc |
+    pathOutOfCallable0(mid, pos, state, innercc, apa, config) and
+    c = pos.getCallable() and
+    kind = pos.getKind() and
+    resolveReturn(innercc, c, call)
+  |
+    if reducedViableImplInReturn(c, call) then cc = TReturn(c, call) else cc = TAnyCallContext()
+  )
+}
+
+pragma[noinline]
+private NodeEx getAnOutNodeFlow(
+  ReturnKindExt kind, DataFlowCall call, AccessPathApprox apa, Configuration config
+) {
+  result.asNode() = kind.getAnOutNode(call) and
+  Stage4::revFlow(result, _, apa, config)
+}
+
+/**
+ * Holds if data may flow from `mid` to `out`. The last step of this path
+ * is a return from a callable and is recorded by `cc`, if needed.
+ */
+pragma[noinline]
+private predicate pathOutOfCallable(PathNodeMid mid, NodeEx out, FlowState state, CallContext cc) {
+  exists(ReturnKindExt kind, DataFlowCall call, AccessPathApprox apa, Configuration config |
+    pathOutOfCallable1(mid, call, kind, state, cc, apa, config) and
+    out = getAnOutNodeFlow(kind, call, apa, config)
+  )
+}
+
+/**
+ * Holds if data may flow from `mid` to the `i`th argument of `call` in `cc`.
+ */
+pragma[noinline]
+private predicate pathIntoArg(
+  PathNodeMid mid, ParameterPosition ppos, FlowState state, CallContext cc, DataFlowCall call,
+  AccessPath ap, AccessPathApprox apa, Configuration config
+) {
+  exists(ArgNodeEx arg, ArgumentPosition apos |
+    pathNode(mid, arg, state, cc, _, ap, config, _) and
+    arg.asNode().(ArgNode).argumentOf(call, apos) and
+    apa = ap.getApprox() and
+    parameterMatch(ppos, apos)
+  )
+}
+
+pragma[nomagic]
+private predicate parameterCand(
+  DataFlowCallable callable, ParameterPosition pos, AccessPathApprox apa, Configuration config
+) {
+  exists(ParamNodeEx p |
+    Stage4::revFlow(p, _, apa, config) and
+    p.isParameterOf(callable, pos)
+  )
+}
+
+pragma[nomagic]
+private predicate pathIntoCallable0(
+  PathNodeMid mid, DataFlowCallable callable, ParameterPosition pos, FlowState state,
+  CallContext outercc, DataFlowCall call, AccessPath ap, Configuration config
+) {
+  exists(AccessPathApprox apa |
+    pathIntoArg(mid, pragma[only_bind_into](pos), state, outercc, call, ap,
+      pragma[only_bind_into](apa), pragma[only_bind_into](config)) and
+    callable = resolveCall(call, outercc) and
+    parameterCand(callable, pragma[only_bind_into](pos), pragma[only_bind_into](apa),
+      pragma[only_bind_into](config))
+  )
+}
+
+/**
+ * Holds if data may flow from `mid` to `p` through `call`. The contexts
+ * before and after entering the callable are `outercc` and `innercc`,
+ * respectively.
+ */
+pragma[nomagic]
+private predicate pathIntoCallable(
+  PathNodeMid mid, ParamNodeEx p, FlowState state, CallContext outercc, CallContextCall innercc,
+  SummaryCtx sc, DataFlowCall call, Configuration config
+) {
+  exists(ParameterPosition pos, DataFlowCallable callable, AccessPath ap |
+    pathIntoCallable0(mid, callable, pos, state, outercc, call, ap, config) and
+    p.isParameterOf(callable, pos) and
+    (
+      sc = TSummaryCtxSome(p, state, ap)
+      or
+      not exists(TSummaryCtxSome(p, state, ap)) and
+      sc = TSummaryCtxNone() and
+      // When the call contexts of source and sink needs to match then there's
+      // never any reason to enter a callable except to find a summary. See also
+      // the comment in `PathNodeMid::isAtSink`.
+      not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext
+    )
+  |
+    if recordDataFlowCallSite(call, callable)
+    then innercc = TSpecificCall(call)
+    else innercc = TSomeCall()
+  )
+}
+
+/** Holds if data may flow from a parameter given by `sc` to a return of kind `kind`. */
+pragma[nomagic]
+private predicate paramFlowsThrough(
+  ReturnKindExt kind, FlowState state, CallContextCall cc, SummaryCtxSome sc, AccessPath ap,
+  AccessPathApprox apa, Configuration config
+) {
+  exists(PathNodeMid mid, RetNodeEx ret, ParameterPosition pos |
+    pathNode(mid, ret, state, cc, sc, ap, config, _) and
+    kind = ret.getKind() and
+    apa = ap.getApprox() and
+    pos = sc.getParameterPos() and
+    // we don't expect a parameter to return stored in itself, unless explicitly allowed
+    (
+      not kind.(ParamUpdateReturnKind).getPosition() = pos
+      or
+      sc.getParamNode().allowParameterReturnInSelf()
+    )
+  )
+}
+
+pragma[nomagic]
+private predicate pathThroughCallable0(
+  DataFlowCall call, PathNodeMid mid, ReturnKindExt kind, FlowState state, CallContext cc,
+  AccessPath ap, AccessPathApprox apa, Configuration config
+) {
+  exists(CallContext innercc, SummaryCtx sc |
+    pathIntoCallable(mid, _, _, cc, innercc, sc, call, config) and
+    paramFlowsThrough(kind, state, innercc, sc, ap, apa, config)
+  )
+}
+
+/**
+ * Holds if data may flow from `mid` through a callable to the node `out`.
+ * The context `cc` is restored to its value prior to entering the callable.
+ */
+pragma[noinline]
+private predicate pathThroughCallable(
+  PathNodeMid mid, NodeEx out, FlowState state, CallContext cc, AccessPath ap
+) {
+  exists(DataFlowCall call, ReturnKindExt kind, AccessPathApprox apa, Configuration config |
+    pathThroughCallable0(call, mid, kind, state, cc, ap, apa, config) and
+    out = getAnOutNodeFlow(kind, call, apa, config)
+  )
+}
+
+private module Subpaths {
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple and `ret` is determined by
+   * `kind`, `sc`, `apout`, and `innercc`.
+   */
+  pragma[nomagic]
+  private predicate subpaths01(
+    PathNodeImpl arg, ParamNodeEx par, SummaryCtxSome sc, CallContext innercc, ReturnKindExt kind,
+    NodeEx out, FlowState sout, AccessPath apout
+  ) {
+    exists(Configuration config |
+      pathThroughCallable(arg, out, pragma[only_bind_into](sout), _, pragma[only_bind_into](apout)) and
+      pathIntoCallable(arg, par, _, _, innercc, sc, _, config) and
+      paramFlowsThrough(kind, pragma[only_bind_into](sout), innercc, sc,
+        pragma[only_bind_into](apout), _, unbindConf(config)) and
+      not arg.isHidden()
+    )
+  }
+
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple and `ret` is determined by
+   * `kind`, `sc`, `sout`, `apout`, and `innercc`.
+   */
+  pragma[nomagic]
+  private predicate subpaths02(
+    PathNode arg, ParamNodeEx par, SummaryCtxSome sc, CallContext innercc, ReturnKindExt kind,
+    NodeEx out, FlowState sout, AccessPath apout
+  ) {
+    subpaths01(arg, par, sc, innercc, kind, out, sout, apout) and
+    out.asNode() = kind.getAnOutNode(_)
+  }
+
+  pragma[nomagic]
+  private Configuration getPathNodeConf(PathNode n) { result = n.getConfiguration() }
+
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple.
+   */
+  pragma[nomagic]
+  private predicate subpaths03(
+    PathNode arg, ParamNodeEx par, PathNodeMid ret, NodeEx out, FlowState sout, AccessPath apout
+  ) {
+    exists(SummaryCtxSome sc, CallContext innercc, ReturnKindExt kind, RetNodeEx retnode |
+      subpaths02(arg, par, sc, innercc, kind, out, sout, apout) and
+      pathNode(ret, retnode, sout, innercc, sc, apout, unbindConf(getPathNodeConf(arg)), _) and
+      kind = retnode.getKind()
+    )
+  }
+
+  private PathNodeImpl localStepToHidden(PathNodeImpl n) {
+    n.getASuccessorImpl() = result and
+    result.isHidden() and
+    exists(NodeEx n1, NodeEx n2 | n1 = n.getNodeEx() and n2 = result.getNodeEx() |
+      localFlowBigStep(n1, _, n2, _, _, _, _, _) or
+      store(n1, _, n2, _, _) or
+      readSet(n1, _, n2, _)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate hasSuccessor(PathNodeImpl pred, PathNodeMid succ, NodeEx succNode) {
+    succ = pred.getANonHiddenSuccessor() and
+    succNode = succ.getNodeEx()
+  }
+
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple, that is, flow through
+   * a subpath between `par` and `ret` with the connecting edges `arg -> par` and
+   * `ret -> out` is summarized as the edge `arg -> out`.
+   */
+  predicate subpaths(PathNodeImpl arg, PathNodeImpl par, PathNodeImpl ret, PathNode out) {
+    exists(ParamNodeEx p, NodeEx o, FlowState sout, AccessPath apout, PathNodeMid out0 |
+      pragma[only_bind_into](arg).getANonHiddenSuccessor() = pragma[only_bind_into](out0) and
+      subpaths03(pragma[only_bind_into](arg), p, localStepToHidden*(ret), o, sout, apout) and
+      hasSuccessor(pragma[only_bind_into](arg), par, p) and
+      not ret.isHidden() and
+      pathNode(out0, o, sout, _, _, apout, _, _)
+    |
+      out = out0 or out = out0.projectToSink()
+    )
+  }
+
+  /**
+   * Holds if `n` can reach a return node in a summarized subpath that can reach a sink.
+   */
+  predicate retReach(PathNodeImpl n) {
+    exists(PathNode out | subpaths(_, _, n, out) | directReach(out) or retReach(out))
+    or
+    exists(PathNodeImpl mid |
+      retReach(mid) and
+      n.getANonHiddenSuccessor() = mid and
+      not subpaths(_, mid, _, _)
+    )
+  }
+}
+
+/**
+ * Holds if data can flow (inter-procedurally) from `source` to `sink`.
+ *
+ * Will only have results if `configuration` has non-empty sources and
+ * sinks.
+ */
+private predicate flowsTo(
+  PathNode flowsource, PathNodeSink flowsink, Node source, Node sink, Configuration configuration
+) {
+  flowsource.isSource() and
+  flowsource.getConfiguration() = configuration and
+  flowsource.(PathNodeImpl).getNodeEx().asNode() = source and
+  (flowsource = flowsink or pathSuccPlus(flowsource, flowsink)) and
+  flowsink.getNodeEx().asNode() = sink
+}
+
+/**
+ * Holds if data can flow (inter-procedurally) from `source` to `sink`.
+ *
+ * Will only have results if `configuration` has non-empty sources and
+ * sinks.
+ */
+predicate flowsTo(Node source, Node sink, Configuration configuration) {
+  flowsTo(_, _, source, sink, configuration)
+}
+
+private predicate finalStats(
+  boolean fwd, int nodes, int fields, int conscand, int states, int tuples
+) {
+  fwd = true and
+  nodes = count(NodeEx n0 | exists(PathNodeImpl pn | pn.getNodeEx() = n0)) and
+  fields = count(TypedContent f0 | exists(PathNodeMid pn | pn.getAp().getHead() = f0)) and
+  conscand = count(AccessPath ap | exists(PathNodeMid pn | pn.getAp() = ap)) and
+  states = count(FlowState state | exists(PathNodeMid pn | pn.getState() = state)) and
+  tuples = count(PathNode pn)
+  or
+  fwd = false and
+  nodes = count(NodeEx n0 | exists(PathNodeImpl pn | pn.getNodeEx() = n0 and reach(pn))) and
+  fields = count(TypedContent f0 | exists(PathNodeMid pn | pn.getAp().getHead() = f0 and reach(pn))) and
+  conscand = count(AccessPath ap | exists(PathNodeMid pn | pn.getAp() = ap and reach(pn))) and
+  states = count(FlowState state | exists(PathNodeMid pn | pn.getState() = state and reach(pn))) and
+  tuples = count(PathNode pn | reach(pn))
+}
+
+/**
+ * INTERNAL: Only for debugging.
+ *
+ * Calculates per-stage metrics for data flow.
+ */
+predicate stageStats(
+  int n, string stage, int nodes, int fields, int conscand, int states, int tuples,
+  Configuration config
+) {
+  stage = "1 Fwd" and
+  n = 10 and
+  Stage1::stats(true, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "1 Rev" and
+  n = 15 and
+  Stage1::stats(false, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "2 Fwd" and
+  n = 20 and
+  Stage2::stats(true, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "2 Rev" and
+  n = 25 and
+  Stage2::stats(false, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "3 Fwd" and
+  n = 30 and
+  Stage3::stats(true, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "3 Rev" and
+  n = 35 and
+  Stage3::stats(false, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "4 Fwd" and
+  n = 40 and
+  Stage4::stats(true, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "4 Rev" and
+  n = 45 and
+  Stage4::stats(false, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "5 Fwd" and n = 50 and finalStats(true, nodes, fields, conscand, states, tuples)
+  or
+  stage = "5 Rev" and n = 55 and finalStats(false, nodes, fields, conscand, states, tuples)
+}
+
+private module FlowExploration {
+  private predicate callableStep(DataFlowCallable c1, DataFlowCallable c2, Configuration config) {
+    exists(NodeEx node1, NodeEx node2 |
+      jumpStep(node1, node2, config)
+      or
+      additionalJumpStep(node1, node2, config)
+      or
+      additionalJumpStateStep(node1, _, node2, _, config)
+      or
+      // flow into callable
+      viableParamArgEx(_, node2, node1)
+      or
+      // flow out of a callable
+      viableReturnPosOutEx(_, node1.(RetNodeEx).getReturnPosition(), node2)
+    |
+      c1 = node1.getEnclosingCallable() and
+      c2 = node2.getEnclosingCallable() and
+      c1 != c2
+    )
+  }
+
+  private predicate interestingCallableSrc(DataFlowCallable c, Configuration config) {
+    exists(Node n | config.isSource(n) or config.isSource(n, _) | c = getNodeEnclosingCallable(n))
+    or
+    exists(DataFlowCallable mid |
+      interestingCallableSrc(mid, config) and callableStep(mid, c, config)
+    )
+  }
+
+  private predicate interestingCallableSink(DataFlowCallable c, Configuration config) {
+    exists(Node n | config.isSink(n) or config.isSink(n, _) | c = getNodeEnclosingCallable(n))
+    or
+    exists(DataFlowCallable mid |
+      interestingCallableSink(mid, config) and callableStep(c, mid, config)
+    )
+  }
+
+  private newtype TCallableExt =
+    TCallable(DataFlowCallable c, Configuration config) {
+      interestingCallableSrc(c, config) or
+      interestingCallableSink(c, config)
+    } or
+    TCallableSrc() or
+    TCallableSink()
+
+  private predicate callableExtSrc(TCallableSrc src) { any() }
+
+  private predicate callableExtSink(TCallableSink sink) { any() }
+
+  private predicate callableExtStepFwd(TCallableExt ce1, TCallableExt ce2) {
+    exists(DataFlowCallable c1, DataFlowCallable c2, Configuration config |
+      callableStep(c1, c2, config) and
+      ce1 = TCallable(c1, pragma[only_bind_into](config)) and
+      ce2 = TCallable(c2, pragma[only_bind_into](config))
+    )
+    or
+    exists(Node n, Configuration config |
+      ce1 = TCallableSrc() and
+      (config.isSource(n) or config.isSource(n, _)) and
+      ce2 = TCallable(getNodeEnclosingCallable(n), config)
+    )
+    or
+    exists(Node n, Configuration config |
+      ce2 = TCallableSink() and
+      (config.isSink(n) or config.isSink(n, _)) and
+      ce1 = TCallable(getNodeEnclosingCallable(n), config)
+    )
+  }
+
+  private predicate callableExtStepRev(TCallableExt ce1, TCallableExt ce2) {
+    callableExtStepFwd(ce2, ce1)
+  }
+
+  private int distSrcExt(TCallableExt c) =
+    shortestDistances(callableExtSrc/1, callableExtStepFwd/2)(_, c, result)
+
+  private int distSinkExt(TCallableExt c) =
+    shortestDistances(callableExtSink/1, callableExtStepRev/2)(_, c, result)
+
+  private int distSrc(DataFlowCallable c, Configuration config) {
+    result = distSrcExt(TCallable(c, config)) - 1
+  }
+
+  private int distSink(DataFlowCallable c, Configuration config) {
+    result = distSinkExt(TCallable(c, config)) - 1
+  }
+
+  private newtype TPartialAccessPath =
+    TPartialNil(DataFlowType t) or
+    TPartialCons(TypedContent tc, int len) { len in [1 .. accessPathLimit()] }
+
+  /**
+   * Conceptually a list of `TypedContent`s followed by a `Type`, but only the first
+   * element of the list and its length are tracked. If data flows from a source to
+   * a given node with a given `AccessPath`, this indicates the sequence of
+   * dereference operations needed to get from the value in the node to the
+   * tracked object. The final type indicates the type of the tracked object.
+   */
+  private class PartialAccessPath extends TPartialAccessPath {
+    abstract string toString();
+
+    TypedContent getHead() { this = TPartialCons(result, _) }
+
+    int len() {
+      this = TPartialNil(_) and result = 0
+      or
+      this = TPartialCons(_, result)
+    }
+
+    DataFlowType getType() {
+      this = TPartialNil(result)
+      or
+      exists(TypedContent head | this = TPartialCons(head, _) | result = head.getContainerType())
+    }
+  }
+
+  private class PartialAccessPathNil extends PartialAccessPath, TPartialNil {
+    override string toString() {
+      exists(DataFlowType t | this = TPartialNil(t) | result = concat(": " + ppReprType(t)))
+    }
+  }
+
+  private class PartialAccessPathCons extends PartialAccessPath, TPartialCons {
+    override string toString() {
+      exists(TypedContent tc, int len | this = TPartialCons(tc, len) |
+        if len = 1
+        then result = "[" + tc.toString() + "]"
+        else result = "[" + tc.toString() + ", ... (" + len.toString() + ")]"
+      )
+    }
+  }
+
+  private newtype TRevPartialAccessPath =
+    TRevPartialNil() or
+    TRevPartialCons(Content c, int len) { len in [1 .. accessPathLimit()] }
+
+  /**
+   * Conceptually a list of `Content`s, but only the first
+   * element of the list and its length are tracked.
+   */
+  private class RevPartialAccessPath extends TRevPartialAccessPath {
+    abstract string toString();
+
+    Content getHead() { this = TRevPartialCons(result, _) }
+
+    int len() {
+      this = TRevPartialNil() and result = 0
+      or
+      this = TRevPartialCons(_, result)
+    }
+  }
+
+  private class RevPartialAccessPathNil extends RevPartialAccessPath, TRevPartialNil {
+    override string toString() { result = "" }
+  }
+
+  private class RevPartialAccessPathCons extends RevPartialAccessPath, TRevPartialCons {
+    override string toString() {
+      exists(Content c, int len | this = TRevPartialCons(c, len) |
+        if len = 1
+        then result = "[" + c.toString() + "]"
+        else result = "[" + c.toString() + ", ... (" + len.toString() + ")]"
+      )
+    }
+  }
+
+  private predicate relevantState(FlowState state) {
+    sourceNode(_, state, _) or
+    sinkNode(_, state, _) or
+    additionalLocalStateStep(_, state, _, _, _) or
+    additionalLocalStateStep(_, _, _, state, _) or
+    additionalJumpStateStep(_, state, _, _, _) or
+    additionalJumpStateStep(_, _, _, state, _)
+  }
+
+  private newtype TSummaryCtx1 =
+    TSummaryCtx1None() or
+    TSummaryCtx1Param(ParamNodeEx p)
+
+  private newtype TSummaryCtx2 =
+    TSummaryCtx2None() or
+    TSummaryCtx2Some(FlowState s) { relevantState(s) }
+
+  private newtype TSummaryCtx3 =
+    TSummaryCtx3None() or
+    TSummaryCtx3Some(PartialAccessPath ap)
+
+  private newtype TRevSummaryCtx1 =
+    TRevSummaryCtx1None() or
+    TRevSummaryCtx1Some(ReturnPosition pos)
+
+  private newtype TRevSummaryCtx2 =
+    TRevSummaryCtx2None() or
+    TRevSummaryCtx2Some(FlowState s) { relevantState(s) }
+
+  private newtype TRevSummaryCtx3 =
+    TRevSummaryCtx3None() or
+    TRevSummaryCtx3Some(RevPartialAccessPath ap)
+
+  private newtype TPartialPathNode =
+    TPartialPathNodeFwd(
+      NodeEx node, FlowState state, CallContext cc, TSummaryCtx1 sc1, TSummaryCtx2 sc2,
+      TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config
+    ) {
+      sourceNode(node, state, config) and
+      cc instanceof CallContextAny and
+      sc1 = TSummaryCtx1None() and
+      sc2 = TSummaryCtx2None() and
+      sc3 = TSummaryCtx3None() and
+      ap = TPartialNil(node.getDataFlowType()) and
+      exists(config.explorationLimit())
+      or
+      partialPathNodeMk0(node, state, cc, sc1, sc2, sc3, ap, config) and
+      distSrc(node.getEnclosingCallable(), config) <= config.explorationLimit()
+    } or
+    TPartialPathNodeRev(
+      NodeEx node, FlowState state, TRevSummaryCtx1 sc1, TRevSummaryCtx2 sc2, TRevSummaryCtx3 sc3,
+      RevPartialAccessPath ap, Configuration config
+    ) {
+      sinkNode(node, state, config) and
+      sc1 = TRevSummaryCtx1None() and
+      sc2 = TRevSummaryCtx2None() and
+      sc3 = TRevSummaryCtx3None() and
+      ap = TRevPartialNil() and
+      exists(config.explorationLimit())
+      or
+      exists(PartialPathNodeRev mid |
+        revPartialPathStep(mid, node, state, sc1, sc2, sc3, ap, config) and
+        not clearsContentEx(node, ap.getHead()) and
+        (
+          notExpectsContent(node) or
+          expectsContentEx(node, ap.getHead())
+        ) and
+        not fullBarrier(node, config) and
+        not stateBarrier(node, state, config) and
+        distSink(node.getEnclosingCallable(), config) <= config.explorationLimit()
+      )
+    }
+
+  pragma[nomagic]
+  private predicate partialPathNodeMk0(
+    NodeEx node, FlowState state, CallContext cc, TSummaryCtx1 sc1, TSummaryCtx2 sc2,
+    TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config
+  ) {
+    exists(PartialPathNodeFwd mid |
+      partialPathStep(mid, node, state, cc, sc1, sc2, sc3, ap, config) and
+      not fullBarrier(node, config) and
+      not stateBarrier(node, state, config) and
+      not clearsContentEx(node, ap.getHead().getContent()) and
+      (
+        notExpectsContent(node) or
+        expectsContentEx(node, ap.getHead().getContent())
+      ) and
+      if node.asNode() instanceof CastingNode
+      then compatibleTypes(node.getDataFlowType(), ap.getType())
+      else any()
+    )
+  }
+
+  /**
+   * A `Node` augmented with a call context, an access path, and a configuration.
+   */
+  class PartialPathNode extends TPartialPathNode {
+    /** Gets a textual representation of this element. */
+    string toString() { result = this.getNodeEx().toString() + this.ppAp() }
+
+    /**
+     * Gets a textual representation of this element, including a textual
+     * representation of the call context.
+     */
+    string toStringWithContext() {
+      result = this.getNodeEx().toString() + this.ppAp() + this.ppCtx()
+    }
+
+    /**
+     * Holds if this element is at the specified location.
+     * The location spans column `startcolumn` of line `startline` to
+     * column `endcolumn` of line `endline` in file `filepath`.
+     * For more information, see
+     * [Locations](https://codeql.github.com/docs/writing-codeql-queries/providing-locations-in-codeql-queries/).
+     */
+    predicate hasLocationInfo(
+      string filepath, int startline, int startcolumn, int endline, int endcolumn
+    ) {
+      this.getNodeEx().hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+    }
+
+    /** Gets the underlying `Node`. */
+    final Node getNode() { this.getNodeEx().projectToNode() = result }
+
+    FlowState getState() { none() }
+
+    private NodeEx getNodeEx() {
+      result = this.(PartialPathNodeFwd).getNodeEx() or
+      result = this.(PartialPathNodeRev).getNodeEx()
+    }
+
+    /** Gets the associated configuration. */
+    Configuration getConfiguration() { none() }
+
+    /** Gets a successor of this node, if any. */
+    PartialPathNode getASuccessor() { none() }
+
+    /**
+     * Gets the approximate distance to the nearest source measured in number
+     * of interprocedural steps.
+     */
+    int getSourceDistance() {
+      result = distSrc(this.getNodeEx().getEnclosingCallable(), this.getConfiguration())
+    }
+
+    /**
+     * Gets the approximate distance to the nearest sink measured in number
+     * of interprocedural steps.
+     */
+    int getSinkDistance() {
+      result = distSink(this.getNodeEx().getEnclosingCallable(), this.getConfiguration())
+    }
+
+    private string ppAp() {
+      exists(string s |
+        s = this.(PartialPathNodeFwd).getAp().toString() or
+        s = this.(PartialPathNodeRev).getAp().toString()
+      |
+        if s = "" then result = "" else result = " " + s
+      )
+    }
+
+    private string ppCtx() {
+      result = " <" + this.(PartialPathNodeFwd).getCallContext().toString() + ">"
+    }
+
+    /** Holds if this is a source in a forward-flow path. */
+    predicate isFwdSource() { this.(PartialPathNodeFwd).isSource() }
+
+    /** Holds if this is a sink in a reverse-flow path. */
+    predicate isRevSink() { this.(PartialPathNodeRev).isSink() }
+  }
+
+  /**
+   * Provides the query predicates needed to include a graph in a path-problem query.
+   */
+  module PartialPathGraph {
+    /** Holds if `(a,b)` is an edge in the graph of data flow path explanations. */
+    query predicate edges(PartialPathNode a, PartialPathNode b) { a.getASuccessor() = b }
+  }
+
+  private class PartialPathNodeFwd extends PartialPathNode, TPartialPathNodeFwd {
+    NodeEx node;
+    FlowState state;
+    CallContext cc;
+    TSummaryCtx1 sc1;
+    TSummaryCtx2 sc2;
+    TSummaryCtx3 sc3;
+    PartialAccessPath ap;
+    Configuration config;
+
+    PartialPathNodeFwd() { this = TPartialPathNodeFwd(node, state, cc, sc1, sc2, sc3, ap, config) }
+
+    NodeEx getNodeEx() { result = node }
+
+    override FlowState getState() { result = state }
+
+    CallContext getCallContext() { result = cc }
+
+    TSummaryCtx1 getSummaryCtx1() { result = sc1 }
+
+    TSummaryCtx2 getSummaryCtx2() { result = sc2 }
+
+    TSummaryCtx3 getSummaryCtx3() { result = sc3 }
+
+    PartialAccessPath getAp() { result = ap }
+
+    override Configuration getConfiguration() { result = config }
+
+    override PartialPathNodeFwd getASuccessor() {
+      partialPathStep(this, result.getNodeEx(), result.getState(), result.getCallContext(),
+        result.getSummaryCtx1(), result.getSummaryCtx2(), result.getSummaryCtx3(), result.getAp(),
+        result.getConfiguration())
+    }
+
+    predicate isSource() {
+      sourceNode(node, state, config) and
+      cc instanceof CallContextAny and
+      sc1 = TSummaryCtx1None() and
+      sc2 = TSummaryCtx2None() and
+      sc3 = TSummaryCtx3None() and
+      ap instanceof TPartialNil
+    }
+  }
+
+  private class PartialPathNodeRev extends PartialPathNode, TPartialPathNodeRev {
+    NodeEx node;
+    FlowState state;
+    TRevSummaryCtx1 sc1;
+    TRevSummaryCtx2 sc2;
+    TRevSummaryCtx3 sc3;
+    RevPartialAccessPath ap;
+    Configuration config;
+
+    PartialPathNodeRev() { this = TPartialPathNodeRev(node, state, sc1, sc2, sc3, ap, config) }
+
+    NodeEx getNodeEx() { result = node }
+
+    override FlowState getState() { result = state }
+
+    TRevSummaryCtx1 getSummaryCtx1() { result = sc1 }
+
+    TRevSummaryCtx2 getSummaryCtx2() { result = sc2 }
+
+    TRevSummaryCtx3 getSummaryCtx3() { result = sc3 }
+
+    RevPartialAccessPath getAp() { result = ap }
+
+    override Configuration getConfiguration() { result = config }
+
+    override PartialPathNodeRev getASuccessor() {
+      revPartialPathStep(result, this.getNodeEx(), this.getState(), this.getSummaryCtx1(),
+        this.getSummaryCtx2(), this.getSummaryCtx3(), this.getAp(), this.getConfiguration())
+    }
+
+    predicate isSink() {
+      sinkNode(node, state, config) and
+      sc1 = TRevSummaryCtx1None() and
+      sc2 = TRevSummaryCtx2None() and
+      sc3 = TRevSummaryCtx3None() and
+      ap = TRevPartialNil()
+    }
+  }
+
+  private predicate partialPathStep(
+    PartialPathNodeFwd mid, NodeEx node, FlowState state, CallContext cc, TSummaryCtx1 sc1,
+    TSummaryCtx2 sc2, TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config
+  ) {
+    not isUnreachableInCallCached(node.asNode(), cc.(CallContextSpecificCall).getCall()) and
+    (
+      localFlowStep(mid.getNodeEx(), node, config) and
+      state = mid.getState() and
+      cc = mid.getCallContext() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      ap = mid.getAp() and
+      config = mid.getConfiguration()
+      or
+      additionalLocalFlowStep(mid.getNodeEx(), node, config) and
+      state = mid.getState() and
+      cc = mid.getCallContext() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      mid.getAp() instanceof PartialAccessPathNil and
+      ap = TPartialNil(node.getDataFlowType()) and
+      config = mid.getConfiguration()
+      or
+      additionalLocalStateStep(mid.getNodeEx(), mid.getState(), node, state, config) and
+      cc = mid.getCallContext() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      mid.getAp() instanceof PartialAccessPathNil and
+      ap = TPartialNil(node.getDataFlowType()) and
+      config = mid.getConfiguration()
+    )
+    or
+    jumpStep(mid.getNodeEx(), node, config) and
+    state = mid.getState() and
+    cc instanceof CallContextAny and
+    sc1 = TSummaryCtx1None() and
+    sc2 = TSummaryCtx2None() and
+    sc3 = TSummaryCtx3None() and
+    ap = mid.getAp() and
+    config = mid.getConfiguration()
+    or
+    additionalJumpStep(mid.getNodeEx(), node, config) and
+    state = mid.getState() and
+    cc instanceof CallContextAny and
+    sc1 = TSummaryCtx1None() and
+    sc2 = TSummaryCtx2None() and
+    sc3 = TSummaryCtx3None() and
+    mid.getAp() instanceof PartialAccessPathNil and
+    ap = TPartialNil(node.getDataFlowType()) and
+    config = mid.getConfiguration()
+    or
+    additionalJumpStateStep(mid.getNodeEx(), mid.getState(), node, state, config) and
+    cc instanceof CallContextAny and
+    sc1 = TSummaryCtx1None() and
+    sc2 = TSummaryCtx2None() and
+    sc3 = TSummaryCtx3None() and
+    mid.getAp() instanceof PartialAccessPathNil and
+    ap = TPartialNil(node.getDataFlowType()) and
+    config = mid.getConfiguration()
+    or
+    partialPathStoreStep(mid, _, _, node, ap) and
+    state = mid.getState() and
+    cc = mid.getCallContext() and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    config = mid.getConfiguration()
+    or
+    exists(PartialAccessPath ap0, TypedContent tc |
+      partialPathReadStep(mid, ap0, tc, node, cc, config) and
+      state = mid.getState() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      apConsFwd(ap, tc, ap0, config)
+    )
+    or
+    partialPathIntoCallable(mid, node, state, _, cc, sc1, sc2, sc3, _, ap, config)
+    or
+    partialPathOutOfCallable(mid, node, state, cc, ap, config) and
+    sc1 = TSummaryCtx1None() and
+    sc2 = TSummaryCtx2None() and
+    sc3 = TSummaryCtx3None()
+    or
+    partialPathThroughCallable(mid, node, state, cc, ap, config) and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3()
+  }
+
+  bindingset[result, i]
+  private int unbindInt(int i) { pragma[only_bind_out](i) = pragma[only_bind_out](result) }
+
+  pragma[inline]
+  private predicate partialPathStoreStep(
+    PartialPathNodeFwd mid, PartialAccessPath ap1, TypedContent tc, NodeEx node,
+    PartialAccessPath ap2
+  ) {
+    exists(NodeEx midNode, DataFlowType contentType |
+      midNode = mid.getNodeEx() and
+      ap1 = mid.getAp() and
+      store(midNode, tc, node, contentType, mid.getConfiguration()) and
+      ap2.getHead() = tc and
+      ap2.len() = unbindInt(ap1.len() + 1) and
+      compatibleTypes(ap1.getType(), contentType)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate apConsFwd(
+    PartialAccessPath ap1, TypedContent tc, PartialAccessPath ap2, Configuration config
+  ) {
+    exists(PartialPathNodeFwd mid |
+      partialPathStoreStep(mid, ap1, tc, _, ap2) and
+      config = mid.getConfiguration()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate partialPathReadStep(
+    PartialPathNodeFwd mid, PartialAccessPath ap, TypedContent tc, NodeEx node, CallContext cc,
+    Configuration config
+  ) {
+    exists(NodeEx midNode |
+      midNode = mid.getNodeEx() and
+      ap = mid.getAp() and
+      read(midNode, tc.getContent(), node, pragma[only_bind_into](config)) and
+      ap.getHead() = tc and
+      pragma[only_bind_into](config) = mid.getConfiguration() and
+      cc = mid.getCallContext()
+    )
+  }
+
+  private predicate partialPathOutOfCallable0(
+    PartialPathNodeFwd mid, ReturnPosition pos, FlowState state, CallContext innercc,
+    PartialAccessPath ap, Configuration config
+  ) {
+    pos = mid.getNodeEx().(RetNodeEx).getReturnPosition() and
+    state = mid.getState() and
+    innercc = mid.getCallContext() and
+    innercc instanceof CallContextNoCall and
+    ap = mid.getAp() and
+    config = mid.getConfiguration()
+  }
+
+  pragma[nomagic]
+  private predicate partialPathOutOfCallable1(
+    PartialPathNodeFwd mid, DataFlowCall call, ReturnKindExt kind, FlowState state, CallContext cc,
+    PartialAccessPath ap, Configuration config
+  ) {
+    exists(ReturnPosition pos, DataFlowCallable c, CallContext innercc |
+      partialPathOutOfCallable0(mid, pos, state, innercc, ap, config) and
+      c = pos.getCallable() and
+      kind = pos.getKind() and
+      resolveReturn(innercc, c, call)
+    |
+      if reducedViableImplInReturn(c, call) then cc = TReturn(c, call) else cc = TAnyCallContext()
+    )
+  }
+
+  private predicate partialPathOutOfCallable(
+    PartialPathNodeFwd mid, NodeEx out, FlowState state, CallContext cc, PartialAccessPath ap,
+    Configuration config
+  ) {
+    exists(ReturnKindExt kind, DataFlowCall call |
+      partialPathOutOfCallable1(mid, call, kind, state, cc, ap, config)
+    |
+      out.asNode() = kind.getAnOutNode(call)
+    )
+  }
+
+  pragma[noinline]
+  private predicate partialPathIntoArg(
+    PartialPathNodeFwd mid, ParameterPosition ppos, FlowState state, CallContext cc,
+    DataFlowCall call, PartialAccessPath ap, Configuration config
+  ) {
+    exists(ArgNode arg, ArgumentPosition apos |
+      arg = mid.getNodeEx().asNode() and
+      state = mid.getState() and
+      cc = mid.getCallContext() and
+      arg.argumentOf(call, apos) and
+      ap = mid.getAp() and
+      config = mid.getConfiguration() and
+      parameterMatch(ppos, apos)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate partialPathIntoCallable0(
+    PartialPathNodeFwd mid, DataFlowCallable callable, ParameterPosition pos, FlowState state,
+    CallContext outercc, DataFlowCall call, PartialAccessPath ap, Configuration config
+  ) {
+    partialPathIntoArg(mid, pos, state, outercc, call, ap, config) and
+    callable = resolveCall(call, outercc)
+  }
+
+  private predicate partialPathIntoCallable(
+    PartialPathNodeFwd mid, ParamNodeEx p, FlowState state, CallContext outercc,
+    CallContextCall innercc, TSummaryCtx1 sc1, TSummaryCtx2 sc2, TSummaryCtx3 sc3,
+    DataFlowCall call, PartialAccessPath ap, Configuration config
+  ) {
+    exists(ParameterPosition pos, DataFlowCallable callable |
+      partialPathIntoCallable0(mid, callable, pos, state, outercc, call, ap, config) and
+      p.isParameterOf(callable, pos) and
+      sc1 = TSummaryCtx1Param(p) and
+      sc2 = TSummaryCtx2Some(state) and
+      sc3 = TSummaryCtx3Some(ap)
+    |
+      if recordDataFlowCallSite(call, callable)
+      then innercc = TSpecificCall(call)
+      else innercc = TSomeCall()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate paramFlowsThroughInPartialPath(
+    ReturnKindExt kind, FlowState state, CallContextCall cc, TSummaryCtx1 sc1, TSummaryCtx2 sc2,
+    TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config
+  ) {
+    exists(PartialPathNodeFwd mid, RetNodeEx ret |
+      mid.getNodeEx() = ret and
+      kind = ret.getKind() and
+      state = mid.getState() and
+      cc = mid.getCallContext() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      config = mid.getConfiguration() and
+      ap = mid.getAp()
+    )
+  }
+
+  pragma[noinline]
+  private predicate partialPathThroughCallable0(
+    DataFlowCall call, PartialPathNodeFwd mid, ReturnKindExt kind, FlowState state, CallContext cc,
+    PartialAccessPath ap, Configuration config
+  ) {
+    exists(CallContext innercc, TSummaryCtx1 sc1, TSummaryCtx2 sc2, TSummaryCtx3 sc3 |
+      partialPathIntoCallable(mid, _, _, cc, innercc, sc1, sc2, sc3, call, _, config) and
+      paramFlowsThroughInPartialPath(kind, state, innercc, sc1, sc2, sc3, ap, config)
+    )
+  }
+
+  private predicate partialPathThroughCallable(
+    PartialPathNodeFwd mid, NodeEx out, FlowState state, CallContext cc, PartialAccessPath ap,
+    Configuration config
+  ) {
+    exists(DataFlowCall call, ReturnKindExt kind |
+      partialPathThroughCallable0(call, mid, kind, state, cc, ap, config) and
+      out.asNode() = kind.getAnOutNode(call)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathStep(
+    PartialPathNodeRev mid, NodeEx node, FlowState state, TRevSummaryCtx1 sc1, TRevSummaryCtx2 sc2,
+    TRevSummaryCtx3 sc3, RevPartialAccessPath ap, Configuration config
+  ) {
+    localFlowStep(node, mid.getNodeEx(), config) and
+    state = mid.getState() and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    ap = mid.getAp() and
+    config = mid.getConfiguration()
+    or
+    additionalLocalFlowStep(node, mid.getNodeEx(), config) and
+    state = mid.getState() and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    mid.getAp() instanceof RevPartialAccessPathNil and
+    ap = TRevPartialNil() and
+    config = mid.getConfiguration()
+    or
+    additionalLocalStateStep(node, state, mid.getNodeEx(), mid.getState(), config) and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    mid.getAp() instanceof RevPartialAccessPathNil and
+    ap = TRevPartialNil() and
+    config = mid.getConfiguration()
+    or
+    jumpStep(node, mid.getNodeEx(), config) and
+    state = mid.getState() and
+    sc1 = TRevSummaryCtx1None() and
+    sc2 = TRevSummaryCtx2None() and
+    sc3 = TRevSummaryCtx3None() and
+    ap = mid.getAp() and
+    config = mid.getConfiguration()
+    or
+    additionalJumpStep(node, mid.getNodeEx(), config) and
+    state = mid.getState() and
+    sc1 = TRevSummaryCtx1None() and
+    sc2 = TRevSummaryCtx2None() and
+    sc3 = TRevSummaryCtx3None() and
+    mid.getAp() instanceof RevPartialAccessPathNil and
+    ap = TRevPartialNil() and
+    config = mid.getConfiguration()
+    or
+    additionalJumpStateStep(node, state, mid.getNodeEx(), mid.getState(), config) and
+    sc1 = TRevSummaryCtx1None() and
+    sc2 = TRevSummaryCtx2None() and
+    sc3 = TRevSummaryCtx3None() and
+    mid.getAp() instanceof RevPartialAccessPathNil and
+    ap = TRevPartialNil() and
+    config = mid.getConfiguration()
+    or
+    revPartialPathReadStep(mid, _, _, node, ap) and
+    state = mid.getState() and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    config = mid.getConfiguration()
+    or
+    exists(RevPartialAccessPath ap0, Content c |
+      revPartialPathStoreStep(mid, ap0, c, node, config) and
+      state = mid.getState() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      apConsRev(ap, c, ap0, config)
+    )
+    or
+    exists(ParamNodeEx p |
+      mid.getNodeEx() = p and
+      viableParamArgEx(_, p, node) and
+      state = mid.getState() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      sc1 = TRevSummaryCtx1None() and
+      sc2 = TRevSummaryCtx2None() and
+      sc3 = TRevSummaryCtx3None() and
+      ap = mid.getAp() and
+      config = mid.getConfiguration()
+    )
+    or
+    exists(ReturnPosition pos |
+      revPartialPathIntoReturn(mid, pos, state, sc1, sc2, sc3, _, ap, config) and
+      pos = getReturnPosition(node.asNode())
+    )
+    or
+    revPartialPathThroughCallable(mid, node, state, ap, config) and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3()
+  }
+
+  pragma[inline]
+  private predicate revPartialPathReadStep(
+    PartialPathNodeRev mid, RevPartialAccessPath ap1, Content c, NodeEx node,
+    RevPartialAccessPath ap2
+  ) {
+    exists(NodeEx midNode |
+      midNode = mid.getNodeEx() and
+      ap1 = mid.getAp() and
+      read(node, c, midNode, mid.getConfiguration()) and
+      ap2.getHead() = c and
+      ap2.len() = unbindInt(ap1.len() + 1)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate apConsRev(
+    RevPartialAccessPath ap1, Content c, RevPartialAccessPath ap2, Configuration config
+  ) {
+    exists(PartialPathNodeRev mid |
+      revPartialPathReadStep(mid, ap1, c, _, ap2) and
+      config = mid.getConfiguration()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathStoreStep(
+    PartialPathNodeRev mid, RevPartialAccessPath ap, Content c, NodeEx node, Configuration config
+  ) {
+    exists(NodeEx midNode, TypedContent tc |
+      midNode = mid.getNodeEx() and
+      ap = mid.getAp() and
+      store(node, tc, midNode, _, config) and
+      ap.getHead() = c and
+      config = mid.getConfiguration() and
+      tc.getContent() = c
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathIntoReturn(
+    PartialPathNodeRev mid, ReturnPosition pos, FlowState state, TRevSummaryCtx1Some sc1,
+    TRevSummaryCtx2Some sc2, TRevSummaryCtx3Some sc3, DataFlowCall call, RevPartialAccessPath ap,
+    Configuration config
+  ) {
+    exists(NodeEx out |
+      mid.getNodeEx() = out and
+      mid.getState() = state and
+      viableReturnPosOutEx(call, pos, out) and
+      sc1 = TRevSummaryCtx1Some(pos) and
+      sc2 = TRevSummaryCtx2Some(state) and
+      sc3 = TRevSummaryCtx3Some(ap) and
+      ap = mid.getAp() and
+      config = mid.getConfiguration()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathFlowsThrough(
+    ArgumentPosition apos, FlowState state, TRevSummaryCtx1Some sc1, TRevSummaryCtx2Some sc2,
+    TRevSummaryCtx3Some sc3, RevPartialAccessPath ap, Configuration config
+  ) {
+    exists(PartialPathNodeRev mid, ParamNodeEx p, ParameterPosition ppos |
+      mid.getNodeEx() = p and
+      mid.getState() = state and
+      p.getPosition() = ppos and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      ap = mid.getAp() and
+      config = mid.getConfiguration() and
+      parameterMatch(ppos, apos)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathThroughCallable0(
+    DataFlowCall call, PartialPathNodeRev mid, ArgumentPosition pos, FlowState state,
+    RevPartialAccessPath ap, Configuration config
+  ) {
+    exists(TRevSummaryCtx1Some sc1, TRevSummaryCtx2Some sc2, TRevSummaryCtx3Some sc3 |
+      revPartialPathIntoReturn(mid, _, _, sc1, sc2, sc3, call, _, config) and
+      revPartialPathFlowsThrough(pos, state, sc1, sc2, sc3, ap, config)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathThroughCallable(
+    PartialPathNodeRev mid, ArgNodeEx node, FlowState state, RevPartialAccessPath ap,
+    Configuration config
+  ) {
+    exists(DataFlowCall call, ArgumentPosition pos |
+      revPartialPathThroughCallable0(call, mid, pos, state, ap, config) and
+      node.asNode().(ArgNode).argumentOf(call, pos)
+    )
+  }
+}
+
+import FlowExploration
+
+private predicate partialFlow(
+  PartialPathNode source, PartialPathNode node, Configuration configuration
+) {
+  source.getConfiguration() = configuration and
+  source.isFwdSource() and
+  node = source.getASuccessor+()
+}
+
+private predicate revPartialFlow(
+  PartialPathNode node, PartialPathNode sink, Configuration configuration
+) {
+  sink.getConfiguration() = configuration and
+  sink.isRevSink() and
+  node.getASuccessor+() = sink
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImpl4.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImpl4.qll
new file mode 100644
index 00000000000..468f8640a78
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImpl4.qll
@@ -0,0 +1,4450 @@
+/**
+ * Provides an implementation of global (interprocedural) data flow. This file
+ * re-exports the local (intraprocedural) data flow analysis from
+ * `DataFlowImplSpecific::Public` and adds a global analysis, mainly exposed
+ * through the `Configuration` class. This file exists in several identical
+ * copies, allowing queries to use multiple `Configuration` classes that depend
+ * on each other without introducing mutual recursion among those configurations.
+ */
+
+private import DataFlowImplCommon
+private import DataFlowImplSpecific::Private
+import DataFlowImplSpecific::Public
+import DataFlowImplCommonPublic
+
+/**
+ * A configuration of interprocedural data flow analysis. This defines
+ * sources, sinks, and any other configurable aspect of the analysis. Each
+ * use of the global data flow library must define its own unique extension
+ * of this abstract class. To create a configuration, extend this class with
+ * a subclass whose characteristic predicate is a unique singleton string.
+ * For example, write
+ *
+ * ```ql
+ * class MyAnalysisConfiguration extends DataFlow::Configuration {
+ *   MyAnalysisConfiguration() { this = "MyAnalysisConfiguration" }
+ *   // Override `isSource` and `isSink`.
+ *   // Optionally override `isBarrier`.
+ *   // Optionally override `isAdditionalFlowStep`.
+ * }
+ * ```
+ * Conceptually, this defines a graph where the nodes are `DataFlow::Node`s and
+ * the edges are those data-flow steps that preserve the value of the node
+ * along with any additional edges defined by `isAdditionalFlowStep`.
+ * Specifying nodes in `isBarrier` will remove those nodes from the graph, and
+ * specifying nodes in `isBarrierIn` and/or `isBarrierOut` will remove in-going
+ * and/or out-going edges from those nodes, respectively.
+ *
+ * Then, to query whether there is flow between some `source` and `sink`,
+ * write
+ *
+ * ```ql
+ * exists(MyAnalysisConfiguration cfg | cfg.hasFlow(source, sink))
+ * ```
+ *
+ * Multiple configurations can coexist, but two classes extending
+ * `DataFlow::Configuration` should never depend on each other. One of them
+ * should instead depend on a `DataFlow2::Configuration`, a
+ * `DataFlow3::Configuration`, or a `DataFlow4::Configuration`.
+ */
+abstract class Configuration extends string {
+  bindingset[this]
+  Configuration() { any() }
+
+  /**
+   * Holds if `source` is a relevant data flow source.
+   */
+  predicate isSource(Node source) { none() }
+
+  /**
+   * Holds if `source` is a relevant data flow source with the given initial
+   * `state`.
+   */
+  predicate isSource(Node source, FlowState state) { none() }
+
+  /**
+   * Holds if `sink` is a relevant data flow sink.
+   */
+  predicate isSink(Node sink) { none() }
+
+  /**
+   * Holds if `sink` is a relevant data flow sink accepting `state`.
+   */
+  predicate isSink(Node source, FlowState state) { none() }
+
+  /**
+   * Holds if data flow through `node` is prohibited. This completely removes
+   * `node` from the data flow graph.
+   */
+  predicate isBarrier(Node node) { none() }
+
+  /**
+   * Holds if data flow through `node` is prohibited when the flow state is
+   * `state`.
+   */
+  predicate isBarrier(Node node, FlowState state) { none() }
+
+  /** Holds if data flow into `node` is prohibited. */
+  predicate isBarrierIn(Node node) { none() }
+
+  /** Holds if data flow out of `node` is prohibited. */
+  predicate isBarrierOut(Node node) { none() }
+
+  /**
+   * DEPRECATED: Use `isBarrier` and `BarrierGuard` module instead.
+   *
+   * Holds if data flow through nodes guarded by `guard` is prohibited.
+   */
+  deprecated predicate isBarrierGuard(BarrierGuard guard) { none() }
+
+  /**
+   * DEPRECATED: Use `isBarrier` and `BarrierGuard` module instead.
+   *
+   * Holds if data flow through nodes guarded by `guard` is prohibited when
+   * the flow state is `state`
+   */
+  deprecated predicate isBarrierGuard(BarrierGuard guard, FlowState state) { none() }
+
+  /**
+   * Holds if data may flow from `node1` to `node2` in addition to the normal data-flow steps.
+   */
+  predicate isAdditionalFlowStep(Node node1, Node node2) { none() }
+
+  /**
+   * Holds if data may flow from `node1` to `node2` in addition to the normal data-flow steps.
+   * This step is only applicable in `state1` and updates the flow state to `state2`.
+   */
+  predicate isAdditionalFlowStep(Node node1, FlowState state1, Node node2, FlowState state2) {
+    none()
+  }
+
+  /**
+   * Holds if an arbitrary number of implicit read steps of content `c` may be
+   * taken at `node`.
+   */
+  predicate allowImplicitRead(Node node, ContentSet c) { none() }
+
+  /**
+   * Gets the virtual dispatch branching limit when calculating field flow.
+   * This can be overridden to a smaller value to improve performance (a
+   * value of 0 disables field flow), or a larger value to get more results.
+   */
+  int fieldFlowBranchLimit() { result = 2 }
+
+  /**
+   * Gets a data flow configuration feature to add restrictions to the set of
+   * valid flow paths.
+   *
+   * - `FeatureHasSourceCallContext`:
+   *    Assume that sources have some existing call context to disallow
+   *    conflicting return-flow directly following the source.
+   * - `FeatureHasSinkCallContext`:
+   *    Assume that sinks have some existing call context to disallow
+   *    conflicting argument-to-parameter flow directly preceding the sink.
+   * - `FeatureEqualSourceSinkCallContext`:
+   *    Implies both of the above and additionally ensures that the entire flow
+   *    path preserves the call context.
+   */
+  FlowFeature getAFeature() { none() }
+
+  /**
+   * Holds if data may flow from `source` to `sink` for this configuration.
+   */
+  predicate hasFlow(Node source, Node sink) { flowsTo(source, sink, this) }
+
+  /**
+   * Holds if data may flow from `source` to `sink` for this configuration.
+   *
+   * The corresponding paths are generated from the end-points and the graph
+   * included in the module `PathGraph`.
+   */
+  predicate hasFlowPath(PathNode source, PathNode sink) { flowsTo(source, sink, _, _, this) }
+
+  /**
+   * Holds if data may flow from some source to `sink` for this configuration.
+   */
+  predicate hasFlowTo(Node sink) { this.hasFlow(_, sink) }
+
+  /**
+   * Holds if data may flow from some source to `sink` for this configuration.
+   */
+  predicate hasFlowToExpr(DataFlowExpr sink) { this.hasFlowTo(exprNode(sink)) }
+
+  /**
+   * Gets the exploration limit for `hasPartialFlow` and `hasPartialFlowRev`
+   * measured in approximate number of interprocedural steps.
+   */
+  int explorationLimit() { none() }
+
+  /**
+   * Holds if hidden nodes should be included in the data flow graph.
+   *
+   * This feature should only be used for debugging or when the data flow graph
+   * is not visualized (for example in a `path-problem` query).
+   */
+  predicate includeHiddenNodes() { none() }
+
+  /**
+   * Holds if there is a partial data flow path from `source` to `node`. The
+   * approximate distance between `node` and the closest source is `dist` and
+   * is restricted to be less than or equal to `explorationLimit()`. This
+   * predicate completely disregards sink definitions.
+   *
+   * This predicate is intended for data-flow exploration and debugging and may
+   * perform poorly if the number of sources is too big and/or the exploration
+   * limit is set too high without using barriers.
+   *
+   * This predicate is disabled (has no results) by default. Override
+   * `explorationLimit()` with a suitable number to enable this predicate.
+   *
+   * To use this in a `path-problem` query, import the module `PartialPathGraph`.
+   */
+  final predicate hasPartialFlow(PartialPathNode source, PartialPathNode node, int dist) {
+    partialFlow(source, node, this) and
+    dist = node.getSourceDistance()
+  }
+
+  /**
+   * Holds if there is a partial data flow path from `node` to `sink`. The
+   * approximate distance between `node` and the closest sink is `dist` and
+   * is restricted to be less than or equal to `explorationLimit()`. This
+   * predicate completely disregards source definitions.
+   *
+   * This predicate is intended for data-flow exploration and debugging and may
+   * perform poorly if the number of sinks is too big and/or the exploration
+   * limit is set too high without using barriers.
+   *
+   * This predicate is disabled (has no results) by default. Override
+   * `explorationLimit()` with a suitable number to enable this predicate.
+   *
+   * To use this in a `path-problem` query, import the module `PartialPathGraph`.
+   *
+   * Note that reverse flow has slightly lower precision than the corresponding
+   * forward flow, as reverse flow disregards type pruning among other features.
+   */
+  final predicate hasPartialFlowRev(PartialPathNode node, PartialPathNode sink, int dist) {
+    revPartialFlow(node, sink, this) and
+    dist = node.getSinkDistance()
+  }
+}
+
+/**
+ * This class exists to prevent mutual recursion between the user-overridden
+ * member predicates of `Configuration` and the rest of the data-flow library.
+ * Good performance cannot be guaranteed in the presence of such recursion, so
+ * it should be replaced by using more than one copy of the data flow library.
+ */
+abstract private class ConfigurationRecursionPrevention extends Configuration {
+  bindingset[this]
+  ConfigurationRecursionPrevention() { any() }
+
+  override predicate hasFlow(Node source, Node sink) {
+    strictcount(Node n | this.isSource(n)) < 0
+    or
+    strictcount(Node n | this.isSource(n, _)) < 0
+    or
+    strictcount(Node n | this.isSink(n)) < 0
+    or
+    strictcount(Node n | this.isSink(n, _)) < 0
+    or
+    strictcount(Node n1, Node n2 | this.isAdditionalFlowStep(n1, n2)) < 0
+    or
+    strictcount(Node n1, Node n2 | this.isAdditionalFlowStep(n1, _, n2, _)) < 0
+    or
+    super.hasFlow(source, sink)
+  }
+}
+
+private newtype TNodeEx =
+  TNodeNormal(Node n) or
+  TNodeImplicitRead(Node n, boolean hasRead) {
+    any(Configuration c).allowImplicitRead(n, _) and hasRead = [false, true]
+  }
+
+private class NodeEx extends TNodeEx {
+  string toString() {
+    result = this.asNode().toString()
+    or
+    exists(Node n | this.isImplicitReadNode(n, _) | result = n.toString() + " [Ext]")
+  }
+
+  Node asNode() { this = TNodeNormal(result) }
+
+  predicate isImplicitReadNode(Node n, boolean hasRead) { this = TNodeImplicitRead(n, hasRead) }
+
+  Node projectToNode() { this = TNodeNormal(result) or this = TNodeImplicitRead(result, _) }
+
+  pragma[nomagic]
+  private DataFlowCallable getEnclosingCallable0() {
+    nodeEnclosingCallable(this.projectToNode(), result)
+  }
+
+  pragma[inline]
+  DataFlowCallable getEnclosingCallable() {
+    pragma[only_bind_out](this).getEnclosingCallable0() = pragma[only_bind_into](result)
+  }
+
+  pragma[nomagic]
+  private DataFlowType getDataFlowType0() { nodeDataFlowType(this.asNode(), result) }
+
+  pragma[inline]
+  DataFlowType getDataFlowType() {
+    pragma[only_bind_out](this).getDataFlowType0() = pragma[only_bind_into](result)
+  }
+
+  predicate hasLocationInfo(
+    string filepath, int startline, int startcolumn, int endline, int endcolumn
+  ) {
+    this.projectToNode().hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+  }
+}
+
+private class ArgNodeEx extends NodeEx {
+  ArgNodeEx() { this.asNode() instanceof ArgNode }
+}
+
+private class ParamNodeEx extends NodeEx {
+  ParamNodeEx() { this.asNode() instanceof ParamNode }
+
+  predicate isParameterOf(DataFlowCallable c, ParameterPosition pos) {
+    this.asNode().(ParamNode).isParameterOf(c, pos)
+  }
+
+  ParameterPosition getPosition() { this.isParameterOf(_, result) }
+
+  predicate allowParameterReturnInSelf() { allowParameterReturnInSelfCached(this.asNode()) }
+}
+
+private class RetNodeEx extends NodeEx {
+  RetNodeEx() { this.asNode() instanceof ReturnNodeExt }
+
+  ReturnPosition getReturnPosition() { result = getReturnPosition(this.asNode()) }
+
+  ReturnKindExt getKind() { result = this.asNode().(ReturnNodeExt).getKind() }
+}
+
+private predicate inBarrier(NodeEx node, Configuration config) {
+  exists(Node n |
+    node.asNode() = n and
+    config.isBarrierIn(n)
+  |
+    config.isSource(n) or config.isSource(n, _)
+  )
+}
+
+private predicate outBarrier(NodeEx node, Configuration config) {
+  exists(Node n |
+    node.asNode() = n and
+    config.isBarrierOut(n)
+  |
+    config.isSink(n) or config.isSink(n, _)
+  )
+}
+
+/** A bridge class to access the deprecated `isBarrierGuard`. */
+private class BarrierGuardGuardedNodeBridge extends Unit {
+  abstract predicate guardedNode(Node n, Configuration config);
+
+  abstract predicate guardedNode(Node n, FlowState state, Configuration config);
+}
+
+private class BarrierGuardGuardedNode extends BarrierGuardGuardedNodeBridge {
+  deprecated override predicate guardedNode(Node n, Configuration config) {
+    exists(BarrierGuard g |
+      config.isBarrierGuard(g) and
+      n = g.getAGuardedNode()
+    )
+  }
+
+  deprecated override predicate guardedNode(Node n, FlowState state, Configuration config) {
+    exists(BarrierGuard g |
+      config.isBarrierGuard(g, state) and
+      n = g.getAGuardedNode()
+    )
+  }
+}
+
+pragma[nomagic]
+private predicate fullBarrier(NodeEx node, Configuration config) {
+  exists(Node n | node.asNode() = n |
+    config.isBarrier(n)
+    or
+    config.isBarrierIn(n) and
+    not config.isSource(n) and
+    not config.isSource(n, _)
+    or
+    config.isBarrierOut(n) and
+    not config.isSink(n) and
+    not config.isSink(n, _)
+    or
+    any(BarrierGuardGuardedNodeBridge b).guardedNode(n, config)
+  )
+}
+
+pragma[nomagic]
+private predicate stateBarrier(NodeEx node, FlowState state, Configuration config) {
+  exists(Node n | node.asNode() = n |
+    config.isBarrier(n, state)
+    or
+    any(BarrierGuardGuardedNodeBridge b).guardedNode(n, state, config)
+  )
+}
+
+pragma[nomagic]
+private predicate sourceNode(NodeEx node, FlowState state, Configuration config) {
+  (
+    config.isSource(node.asNode()) and state instanceof FlowStateEmpty
+    or
+    config.isSource(node.asNode(), state)
+  ) and
+  not fullBarrier(node, config) and
+  not stateBarrier(node, state, config)
+}
+
+pragma[nomagic]
+private predicate sinkNode(NodeEx node, FlowState state, Configuration config) {
+  (
+    config.isSink(node.asNode()) and state instanceof FlowStateEmpty
+    or
+    config.isSink(node.asNode(), state)
+  ) and
+  not fullBarrier(node, config) and
+  not stateBarrier(node, state, config)
+}
+
+/** Provides the relevant barriers for a step from `node1` to `node2`. */
+pragma[inline]
+private predicate stepFilter(NodeEx node1, NodeEx node2, Configuration config) {
+  not outBarrier(node1, config) and
+  not inBarrier(node2, config) and
+  not fullBarrier(node1, config) and
+  not fullBarrier(node2, config)
+}
+
+/**
+ * Holds if data can flow in one local step from `node1` to `node2`.
+ */
+private predicate localFlowStep(NodeEx node1, NodeEx node2, Configuration config) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    simpleLocalFlowStepExt(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and
+    stepFilter(node1, node2, config)
+  )
+  or
+  exists(Node n |
+    config.allowImplicitRead(n, _) and
+    node1.asNode() = n and
+    node2.isImplicitReadNode(n, false) and
+    not fullBarrier(node1, config)
+  )
+}
+
+/**
+ * Holds if the additional step from `node1` to `node2` does not jump between callables.
+ */
+private predicate additionalLocalFlowStep(NodeEx node1, NodeEx node2, Configuration config) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    config.isAdditionalFlowStep(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and
+    getNodeEnclosingCallable(n1) = getNodeEnclosingCallable(n2) and
+    stepFilter(node1, node2, config)
+  )
+  or
+  exists(Node n |
+    config.allowImplicitRead(n, _) and
+    node1.isImplicitReadNode(n, true) and
+    node2.asNode() = n and
+    not fullBarrier(node2, config)
+  )
+}
+
+private predicate additionalLocalStateStep(
+  NodeEx node1, FlowState s1, NodeEx node2, FlowState s2, Configuration config
+) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    config.isAdditionalFlowStep(pragma[only_bind_into](n1), s1, pragma[only_bind_into](n2), s2) and
+    getNodeEnclosingCallable(n1) = getNodeEnclosingCallable(n2) and
+    stepFilter(node1, node2, config) and
+    not stateBarrier(node1, s1, config) and
+    not stateBarrier(node2, s2, config)
+  )
+}
+
+/**
+ * Holds if data can flow from `node1` to `node2` in a way that discards call contexts.
+ */
+private predicate jumpStep(NodeEx node1, NodeEx node2, Configuration config) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    jumpStepCached(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and
+    stepFilter(node1, node2, config) and
+    not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+/**
+ * Holds if the additional step from `node1` to `node2` jumps between callables.
+ */
+private predicate additionalJumpStep(NodeEx node1, NodeEx node2, Configuration config) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    config.isAdditionalFlowStep(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and
+    getNodeEnclosingCallable(n1) != getNodeEnclosingCallable(n2) and
+    stepFilter(node1, node2, config) and
+    not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+private predicate additionalJumpStateStep(
+  NodeEx node1, FlowState s1, NodeEx node2, FlowState s2, Configuration config
+) {
+  exists(Node n1, Node n2 |
+    node1.asNode() = n1 and
+    node2.asNode() = n2 and
+    config.isAdditionalFlowStep(pragma[only_bind_into](n1), s1, pragma[only_bind_into](n2), s2) and
+    getNodeEnclosingCallable(n1) != getNodeEnclosingCallable(n2) and
+    stepFilter(node1, node2, config) and
+    not stateBarrier(node1, s1, config) and
+    not stateBarrier(node2, s2, config) and
+    not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+pragma[nomagic]
+private predicate readSet(NodeEx node1, ContentSet c, NodeEx node2, Configuration config) {
+  readSet(pragma[only_bind_into](node1.asNode()), c, pragma[only_bind_into](node2.asNode())) and
+  stepFilter(node1, node2, config)
+  or
+  exists(Node n |
+    node2.isImplicitReadNode(n, true) and
+    node1.isImplicitReadNode(n, _) and
+    config.allowImplicitRead(n, c)
+  )
+}
+
+// inline to reduce fan-out via `getAReadContent`
+bindingset[c]
+private predicate read(NodeEx node1, Content c, NodeEx node2, Configuration config) {
+  exists(ContentSet cs |
+    readSet(node1, cs, node2, config) and
+    pragma[only_bind_out](c) = pragma[only_bind_into](cs).getAReadContent()
+  )
+}
+
+// inline to reduce fan-out via `getAReadContent`
+bindingset[c]
+private predicate clearsContentEx(NodeEx n, Content c) {
+  exists(ContentSet cs |
+    clearsContentCached(n.asNode(), cs) and
+    pragma[only_bind_out](c) = pragma[only_bind_into](cs).getAReadContent()
+  )
+}
+
+// inline to reduce fan-out via `getAReadContent`
+bindingset[c]
+private predicate expectsContentEx(NodeEx n, Content c) {
+  exists(ContentSet cs |
+    expectsContentCached(n.asNode(), cs) and
+    pragma[only_bind_out](c) = pragma[only_bind_into](cs).getAReadContent()
+  )
+}
+
+pragma[nomagic]
+private predicate notExpectsContent(NodeEx n) { not expectsContentCached(n.asNode(), _) }
+
+pragma[nomagic]
+private predicate store(
+  NodeEx node1, TypedContent tc, NodeEx node2, DataFlowType contentType, Configuration config
+) {
+  store(pragma[only_bind_into](node1.asNode()), tc, pragma[only_bind_into](node2.asNode()),
+    contentType) and
+  read(_, tc.getContent(), _, config) and
+  stepFilter(node1, node2, config)
+}
+
+pragma[nomagic]
+private predicate viableReturnPosOutEx(DataFlowCall call, ReturnPosition pos, NodeEx out) {
+  viableReturnPosOut(call, pos, out.asNode())
+}
+
+pragma[nomagic]
+private predicate viableParamArgEx(DataFlowCall call, ParamNodeEx p, ArgNodeEx arg) {
+  viableParamArg(call, p.asNode(), arg.asNode())
+}
+
+/**
+ * Holds if field flow should be used for the given configuration.
+ */
+private predicate useFieldFlow(Configuration config) { config.fieldFlowBranchLimit() >= 1 }
+
+private predicate hasSourceCallCtx(Configuration config) {
+  exists(FlowFeature feature | feature = config.getAFeature() |
+    feature instanceof FeatureHasSourceCallContext or
+    feature instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+private predicate hasSinkCallCtx(Configuration config) {
+  exists(FlowFeature feature | feature = config.getAFeature() |
+    feature instanceof FeatureHasSinkCallContext or
+    feature instanceof FeatureEqualSourceSinkCallContext
+  )
+}
+
+private module Stage1 implements StageSig {
+  class ApApprox = Unit;
+
+  class Ap = Unit;
+
+  class ApOption = Unit;
+
+  class Cc = boolean;
+
+  /* Begin: Stage 1 logic. */
+  /**
+   * Holds if `node` is reachable from a source in the configuration `config`.
+   *
+   * The Boolean `cc` records whether the node is reached through an
+   * argument in a call.
+   */
+  predicate fwdFlow(NodeEx node, Cc cc, Configuration config) {
+    sourceNode(node, _, config) and
+    if hasSourceCallCtx(config) then cc = true else cc = false
+    or
+    exists(NodeEx mid | fwdFlow(mid, cc, config) |
+      localFlowStep(mid, node, config) or
+      additionalLocalFlowStep(mid, node, config) or
+      additionalLocalStateStep(mid, _, node, _, config)
+    )
+    or
+    exists(NodeEx mid | fwdFlow(mid, _, config) and cc = false |
+      jumpStep(mid, node, config) or
+      additionalJumpStep(mid, node, config) or
+      additionalJumpStateStep(mid, _, node, _, config)
+    )
+    or
+    // store
+    exists(NodeEx mid |
+      useFieldFlow(config) and
+      fwdFlow(mid, cc, config) and
+      store(mid, _, node, _, config)
+    )
+    or
+    // read
+    exists(ContentSet c |
+      fwdFlowReadSet(c, node, cc, config) and
+      fwdFlowConsCandSet(c, _, config)
+    )
+    or
+    // flow into a callable
+    exists(NodeEx arg |
+      fwdFlow(arg, _, config) and
+      viableParamArgEx(_, node, arg) and
+      cc = true and
+      not fullBarrier(node, config)
+    )
+    or
+    // flow out of a callable
+    exists(DataFlowCall call |
+      fwdFlowOut(call, node, false, config) and
+      cc = false
+      or
+      fwdFlowOutFromArg(call, node, config) and
+      fwdFlowIsEntered(call, cc, config)
+    )
+  }
+
+  private predicate fwdFlow(NodeEx node, Configuration config) { fwdFlow(node, _, config) }
+
+  pragma[nomagic]
+  private predicate fwdFlowReadSet(ContentSet c, NodeEx node, Cc cc, Configuration config) {
+    exists(NodeEx mid |
+      fwdFlow(mid, cc, config) and
+      readSet(mid, c, node, config)
+    )
+  }
+
+  /**
+   * Holds if `c` is the target of a store in the flow covered by `fwdFlow`.
+   */
+  pragma[nomagic]
+  private predicate fwdFlowConsCand(Content c, Configuration config) {
+    exists(NodeEx mid, NodeEx node, TypedContent tc |
+      not fullBarrier(node, config) and
+      useFieldFlow(config) and
+      fwdFlow(mid, _, config) and
+      store(mid, tc, node, _, config) and
+      c = tc.getContent()
+    )
+  }
+
+  /**
+   * Holds if `cs` may be interpreted in a read as the target of some store
+   * into `c`, in the flow covered by `fwdFlow`.
+   */
+  pragma[nomagic]
+  private predicate fwdFlowConsCandSet(ContentSet cs, Content c, Configuration config) {
+    fwdFlowConsCand(c, config) and
+    c = cs.getAReadContent()
+  }
+
+  pragma[nomagic]
+  private predicate fwdFlowReturnPosition(ReturnPosition pos, Cc cc, Configuration config) {
+    exists(RetNodeEx ret |
+      fwdFlow(ret, cc, config) and
+      ret.getReturnPosition() = pos
+    )
+  }
+
+  pragma[nomagic]
+  private predicate fwdFlowOut(DataFlowCall call, NodeEx out, Cc cc, Configuration config) {
+    exists(ReturnPosition pos |
+      fwdFlowReturnPosition(pos, cc, config) and
+      viableReturnPosOutEx(call, pos, out) and
+      not fullBarrier(out, config)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate fwdFlowOutFromArg(DataFlowCall call, NodeEx out, Configuration config) {
+    fwdFlowOut(call, out, true, config)
+  }
+
+  /**
+   * Holds if an argument to `call` is reached in the flow covered by `fwdFlow`.
+   */
+  pragma[nomagic]
+  private predicate fwdFlowIsEntered(DataFlowCall call, Cc cc, Configuration config) {
+    exists(ArgNodeEx arg |
+      fwdFlow(arg, cc, config) and
+      viableParamArgEx(call, _, arg)
+    )
+  }
+
+  private predicate stateStepFwd(FlowState state1, FlowState state2, Configuration config) {
+    exists(NodeEx node1 |
+      additionalLocalStateStep(node1, state1, _, state2, config) or
+      additionalJumpStateStep(node1, state1, _, state2, config)
+    |
+      fwdFlow(node1, config)
+    )
+  }
+
+  private predicate fwdFlowState(FlowState state, Configuration config) {
+    sourceNode(_, state, config)
+    or
+    exists(FlowState state0 |
+      fwdFlowState(state0, config) and
+      stateStepFwd(state0, state, config)
+    )
+  }
+
+  /**
+   * Holds if `node` is part of a path from a source to a sink in the
+   * configuration `config`.
+   *
+   * The Boolean `toReturn` records whether the node must be returned from
+   * the enclosing callable in order to reach a sink.
+   */
+  pragma[nomagic]
+  predicate revFlow(NodeEx node, boolean toReturn, Configuration config) {
+    revFlow0(node, toReturn, config) and
+    fwdFlow(node, config)
+  }
+
+  pragma[nomagic]
+  private predicate revFlow0(NodeEx node, boolean toReturn, Configuration config) {
+    exists(FlowState state |
+      fwdFlow(node, pragma[only_bind_into](config)) and
+      sinkNode(node, state, config) and
+      fwdFlowState(state, pragma[only_bind_into](config)) and
+      if hasSinkCallCtx(config) then toReturn = true else toReturn = false
+    )
+    or
+    exists(NodeEx mid | revFlow(mid, toReturn, config) |
+      localFlowStep(node, mid, config) or
+      additionalLocalFlowStep(node, mid, config) or
+      additionalLocalStateStep(node, _, mid, _, config)
+    )
+    or
+    exists(NodeEx mid | revFlow(mid, _, config) and toReturn = false |
+      jumpStep(node, mid, config) or
+      additionalJumpStep(node, mid, config) or
+      additionalJumpStateStep(node, _, mid, _, config)
+    )
+    or
+    // store
+    exists(Content c |
+      revFlowStore(c, node, toReturn, config) and
+      revFlowConsCand(c, config)
+    )
+    or
+    // read
+    exists(NodeEx mid, ContentSet c |
+      readSet(node, c, mid, config) and
+      fwdFlowConsCandSet(c, _, pragma[only_bind_into](config)) and
+      revFlow(mid, toReturn, pragma[only_bind_into](config))
+    )
+    or
+    // flow into a callable
+    exists(DataFlowCall call |
+      revFlowIn(call, node, false, config) and
+      toReturn = false
+      or
+      revFlowInToReturn(call, node, config) and
+      revFlowIsReturned(call, toReturn, config)
+    )
+    or
+    // flow out of a callable
+    exists(ReturnPosition pos |
+      revFlowOut(pos, config) and
+      node.(RetNodeEx).getReturnPosition() = pos and
+      toReturn = true
+    )
+  }
+
+  /**
+   * Holds if `c` is the target of a read in the flow covered by `revFlow`.
+   */
+  pragma[nomagic]
+  private predicate revFlowConsCand(Content c, Configuration config) {
+    exists(NodeEx mid, NodeEx node, ContentSet cs |
+      fwdFlow(node, pragma[only_bind_into](config)) and
+      readSet(node, cs, mid, config) and
+      fwdFlowConsCandSet(cs, c, pragma[only_bind_into](config)) and
+      revFlow(pragma[only_bind_into](mid), _, pragma[only_bind_into](config))
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revFlowStore(Content c, NodeEx node, boolean toReturn, Configuration config) {
+    exists(NodeEx mid, TypedContent tc |
+      revFlow(mid, toReturn, pragma[only_bind_into](config)) and
+      fwdFlowConsCand(c, pragma[only_bind_into](config)) and
+      store(node, tc, mid, _, config) and
+      c = tc.getContent()
+    )
+  }
+
+  /**
+   * Holds if `c` is the target of both a read and a store in the flow covered
+   * by `revFlow`.
+   */
+  pragma[nomagic]
+  predicate revFlowIsReadAndStored(Content c, Configuration conf) {
+    revFlowConsCand(c, conf) and
+    revFlowStore(c, _, _, conf)
+  }
+
+  pragma[nomagic]
+  predicate viableReturnPosOutNodeCandFwd1(
+    DataFlowCall call, ReturnPosition pos, NodeEx out, Configuration config
+  ) {
+    fwdFlowReturnPosition(pos, _, config) and
+    viableReturnPosOutEx(call, pos, out)
+  }
+
+  pragma[nomagic]
+  private predicate revFlowOut(ReturnPosition pos, Configuration config) {
+    exists(DataFlowCall call, NodeEx out |
+      revFlow(out, _, config) and
+      viableReturnPosOutNodeCandFwd1(call, pos, out, config)
+    )
+  }
+
+  pragma[nomagic]
+  predicate viableParamArgNodeCandFwd1(
+    DataFlowCall call, ParamNodeEx p, ArgNodeEx arg, Configuration config
+  ) {
+    viableParamArgEx(call, p, arg) and
+    fwdFlow(arg, config)
+  }
+
+  pragma[nomagic]
+  private predicate revFlowIn(
+    DataFlowCall call, ArgNodeEx arg, boolean toReturn, Configuration config
+  ) {
+    exists(ParamNodeEx p |
+      revFlow(p, toReturn, config) and
+      viableParamArgNodeCandFwd1(call, p, arg, config)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revFlowInToReturn(DataFlowCall call, ArgNodeEx arg, Configuration config) {
+    revFlowIn(call, arg, true, config)
+  }
+
+  /**
+   * Holds if an output from `call` is reached in the flow covered by `revFlow`
+   * and data might flow through the target callable resulting in reverse flow
+   * reaching an argument of `call`.
+   */
+  pragma[nomagic]
+  private predicate revFlowIsReturned(DataFlowCall call, boolean toReturn, Configuration config) {
+    exists(NodeEx out |
+      revFlow(out, toReturn, config) and
+      fwdFlowOutFromArg(call, out, config)
+    )
+  }
+
+  private predicate stateStepRev(FlowState state1, FlowState state2, Configuration config) {
+    exists(NodeEx node1, NodeEx node2 |
+      additionalLocalStateStep(node1, state1, node2, state2, config) or
+      additionalJumpStateStep(node1, state1, node2, state2, config)
+    |
+      revFlow(node1, _, pragma[only_bind_into](config)) and
+      revFlow(node2, _, pragma[only_bind_into](config)) and
+      fwdFlowState(state1, pragma[only_bind_into](config)) and
+      fwdFlowState(state2, pragma[only_bind_into](config))
+    )
+  }
+
+  predicate revFlowState(FlowState state, Configuration config) {
+    exists(NodeEx node |
+      sinkNode(node, state, config) and
+      revFlow(node, _, pragma[only_bind_into](config)) and
+      fwdFlowState(state, pragma[only_bind_into](config))
+    )
+    or
+    exists(FlowState state0 |
+      revFlowState(state0, config) and
+      stateStepRev(state, state0, config)
+    )
+  }
+
+  pragma[nomagic]
+  predicate storeStepCand(
+    NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, DataFlowType contentType,
+    Configuration config
+  ) {
+    exists(Content c |
+      revFlowIsReadAndStored(c, pragma[only_bind_into](config)) and
+      revFlow(node2, pragma[only_bind_into](config)) and
+      store(node1, tc, node2, contentType, config) and
+      c = tc.getContent() and
+      exists(ap1)
+    )
+  }
+
+  pragma[nomagic]
+  predicate readStepCand(NodeEx n1, Content c, NodeEx n2, Configuration config) {
+    revFlowIsReadAndStored(c, pragma[only_bind_into](config)) and
+    read(n1, c, n2, pragma[only_bind_into](config)) and
+    revFlow(n2, pragma[only_bind_into](config))
+  }
+
+  pragma[nomagic]
+  predicate revFlow(NodeEx node, Configuration config) { revFlow(node, _, config) }
+
+  bindingset[node, state, config]
+  predicate revFlow(NodeEx node, FlowState state, Ap ap, Configuration config) {
+    revFlow(node, _, pragma[only_bind_into](config)) and
+    exists(state) and
+    exists(ap)
+  }
+
+  private predicate throughFlowNodeCand(NodeEx node, Configuration config) {
+    revFlow(node, true, config) and
+    fwdFlow(node, true, config) and
+    not inBarrier(node, config) and
+    not outBarrier(node, config)
+  }
+
+  /** Holds if flow may return from `callable`. */
+  pragma[nomagic]
+  private predicate returnFlowCallableNodeCand(
+    DataFlowCallable callable, ReturnKindExt kind, Configuration config
+  ) {
+    exists(RetNodeEx ret |
+      throughFlowNodeCand(ret, config) and
+      callable = ret.getEnclosingCallable() and
+      kind = ret.getKind()
+    )
+  }
+
+  /**
+   * Holds if flow may enter through `p` and reach a return node making `p` a
+   * candidate for the origin of a summary.
+   */
+  pragma[nomagic]
+  predicate parameterMayFlowThrough(ParamNodeEx p, DataFlowCallable c, Ap ap, Configuration config) {
+    exists(ReturnKindExt kind |
+      throughFlowNodeCand(p, config) and
+      returnFlowCallableNodeCand(c, kind, config) and
+      p.getEnclosingCallable() = c and
+      exists(ap) and
+      // we don't expect a parameter to return stored in itself, unless explicitly allowed
+      (
+        not kind.(ParamUpdateReturnKind).getPosition() = p.getPosition()
+        or
+        p.allowParameterReturnInSelf()
+      )
+    )
+  }
+
+  pragma[nomagic]
+  predicate callMayFlowThroughRev(DataFlowCall call, Configuration config) {
+    exists(ArgNodeEx arg, boolean toReturn |
+      revFlow(arg, toReturn, config) and
+      revFlowInToReturn(call, arg, config) and
+      revFlowIsReturned(call, toReturn, config)
+    )
+  }
+
+  predicate stats(
+    boolean fwd, int nodes, int fields, int conscand, int states, int tuples, Configuration config
+  ) {
+    fwd = true and
+    nodes = count(NodeEx node | fwdFlow(node, config)) and
+    fields = count(Content f0 | fwdFlowConsCand(f0, config)) and
+    conscand = -1 and
+    states = count(FlowState state | fwdFlowState(state, config)) and
+    tuples = count(NodeEx n, boolean b | fwdFlow(n, b, config))
+    or
+    fwd = false and
+    nodes = count(NodeEx node | revFlow(node, _, config)) and
+    fields = count(Content f0 | revFlowConsCand(f0, config)) and
+    conscand = -1 and
+    states = count(FlowState state | revFlowState(state, config)) and
+    tuples = count(NodeEx n, boolean b | revFlow(n, b, config))
+  }
+  /* End: Stage 1 logic. */
+}
+
+pragma[noinline]
+private predicate localFlowStepNodeCand1(NodeEx node1, NodeEx node2, Configuration config) {
+  Stage1::revFlow(node2, config) and
+  localFlowStep(node1, node2, config)
+}
+
+pragma[noinline]
+private predicate additionalLocalFlowStepNodeCand1(NodeEx node1, NodeEx node2, Configuration config) {
+  Stage1::revFlow(node2, config) and
+  additionalLocalFlowStep(node1, node2, config)
+}
+
+pragma[nomagic]
+private predicate viableReturnPosOutNodeCand1(
+  DataFlowCall call, ReturnPosition pos, NodeEx out, Configuration config
+) {
+  Stage1::revFlow(out, config) and
+  Stage1::viableReturnPosOutNodeCandFwd1(call, pos, out, config)
+}
+
+/**
+ * Holds if data can flow out of `call` from `ret` to `out`, either
+ * through a `ReturnNode` or through an argument that has been mutated, and
+ * that this step is part of a path from a source to a sink.
+ */
+pragma[nomagic]
+private predicate flowOutOfCallNodeCand1(
+  DataFlowCall call, RetNodeEx ret, NodeEx out, Configuration config
+) {
+  viableReturnPosOutNodeCand1(call, ret.getReturnPosition(), out, config) and
+  Stage1::revFlow(ret, config) and
+  not outBarrier(ret, config) and
+  not inBarrier(out, config)
+}
+
+pragma[nomagic]
+private predicate viableParamArgNodeCand1(
+  DataFlowCall call, ParamNodeEx p, ArgNodeEx arg, Configuration config
+) {
+  Stage1::viableParamArgNodeCandFwd1(call, p, arg, config) and
+  Stage1::revFlow(arg, config)
+}
+
+/**
+ * Holds if data can flow into `call` and that this step is part of a
+ * path from a source to a sink.
+ */
+pragma[nomagic]
+private predicate flowIntoCallNodeCand1(
+  DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, Configuration config
+) {
+  viableParamArgNodeCand1(call, p, arg, config) and
+  Stage1::revFlow(p, config) and
+  not outBarrier(arg, config) and
+  not inBarrier(p, config)
+}
+
+/**
+ * Gets the amount of forward branching on the origin of a cross-call path
+ * edge in the graph of paths between sources and sinks that ignores call
+ * contexts.
+ */
+private int branch(NodeEx n1, Configuration conf) {
+  result =
+    strictcount(NodeEx n |
+      flowOutOfCallNodeCand1(_, n1, n, conf) or flowIntoCallNodeCand1(_, n1, n, conf)
+    )
+}
+
+/**
+ * Gets the amount of backward branching on the target of a cross-call path
+ * edge in the graph of paths between sources and sinks that ignores call
+ * contexts.
+ */
+private int join(NodeEx n2, Configuration conf) {
+  result =
+    strictcount(NodeEx n |
+      flowOutOfCallNodeCand1(_, n, n2, conf) or flowIntoCallNodeCand1(_, n, n2, conf)
+    )
+}
+
+/**
+ * Holds if data can flow out of `call` from `ret` to `out`, either
+ * through a `ReturnNode` or through an argument that has been mutated, and
+ * that this step is part of a path from a source to a sink. The
+ * `allowsFieldFlow` flag indicates whether the branching is within the limit
+ * specified by the configuration.
+ */
+pragma[nomagic]
+private predicate flowOutOfCallNodeCand1(
+  DataFlowCall call, RetNodeEx ret, NodeEx out, boolean allowsFieldFlow, Configuration config
+) {
+  flowOutOfCallNodeCand1(call, ret, out, config) and
+  exists(int b, int j |
+    b = branch(ret, config) and
+    j = join(out, config) and
+    if b.minimum(j) <= config.fieldFlowBranchLimit()
+    then allowsFieldFlow = true
+    else allowsFieldFlow = false
+  )
+}
+
+/**
+ * Holds if data can flow into `call` and that this step is part of a
+ * path from a source to a sink. The `allowsFieldFlow` flag indicates whether
+ * the branching is within the limit specified by the configuration.
+ */
+pragma[nomagic]
+private predicate flowIntoCallNodeCand1(
+  DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, boolean allowsFieldFlow, Configuration config
+) {
+  flowIntoCallNodeCand1(call, arg, p, config) and
+  exists(int b, int j |
+    b = branch(arg, config) and
+    j = join(p, config) and
+    if b.minimum(j) <= config.fieldFlowBranchLimit()
+    then allowsFieldFlow = true
+    else allowsFieldFlow = false
+  )
+}
+
+private signature module StageSig {
+  class Ap;
+
+  predicate revFlow(NodeEx node, Configuration config);
+
+  bindingset[node, state, config]
+  predicate revFlow(NodeEx node, FlowState state, Ap ap, Configuration config);
+
+  predicate callMayFlowThroughRev(DataFlowCall call, Configuration config);
+
+  predicate parameterMayFlowThrough(ParamNodeEx p, DataFlowCallable c, Ap ap, Configuration config);
+
+  predicate storeStepCand(
+    NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, DataFlowType contentType,
+    Configuration config
+  );
+
+  predicate readStepCand(NodeEx n1, Content c, NodeEx n2, Configuration config);
+}
+
+private module MkStage<StageSig PrevStage> {
+  class ApApprox = PrevStage::Ap;
+
+  signature module StageParam {
+    class Ap;
+
+    class ApNil extends Ap;
+
+    bindingset[result, ap]
+    ApApprox getApprox(Ap ap);
+
+    ApNil getApNil(NodeEx node);
+
+    bindingset[tc, tail]
+    Ap apCons(TypedContent tc, Ap tail);
+
+    Content getHeadContent(Ap ap);
+
+    class ApOption;
+
+    ApOption apNone();
+
+    ApOption apSome(Ap ap);
+
+    class Cc;
+
+    class CcCall extends Cc;
+
+    // TODO: member predicate on CcCall
+    predicate matchesCall(CcCall cc, DataFlowCall call);
+
+    class CcNoCall extends Cc;
+
+    Cc ccNone();
+
+    CcCall ccSomeCall();
+
+    class LocalCc;
+
+    bindingset[call, c, outercc]
+    CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc);
+
+    bindingset[call, c, innercc]
+    CcNoCall getCallContextReturn(DataFlowCallable c, DataFlowCall call, Cc innercc);
+
+    bindingset[node, cc]
+    LocalCc getLocalCc(NodeEx node, Cc cc);
+
+    bindingset[node1, state1, config]
+    bindingset[node2, state2, config]
+    predicate localStep(
+      NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+      ApNil ap, Configuration config, LocalCc lcc
+    );
+
+    predicate flowOutOfCall(
+      DataFlowCall call, RetNodeEx ret, NodeEx out, boolean allowsFieldFlow, Configuration config
+    );
+
+    predicate flowIntoCall(
+      DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, boolean allowsFieldFlow, Configuration config
+    );
+
+    bindingset[node, state, ap, config]
+    predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config);
+
+    bindingset[ap, contentType]
+    predicate typecheckStore(Ap ap, DataFlowType contentType);
+  }
+
+  module Stage<StageParam Param> implements StageSig {
+    import Param
+
+    /* Begin: Stage logic. */
+    bindingset[result, apa]
+    private ApApprox unbindApa(ApApprox apa) {
+      pragma[only_bind_out](apa) = pragma[only_bind_out](result)
+    }
+
+    pragma[nomagic]
+    private predicate flowThroughOutOfCall(
+      DataFlowCall call, CcCall ccc, RetNodeEx ret, NodeEx out, boolean allowsFieldFlow,
+      Configuration config
+    ) {
+      flowOutOfCall(call, ret, out, allowsFieldFlow, pragma[only_bind_into](config)) and
+      PrevStage::callMayFlowThroughRev(call, pragma[only_bind_into](config)) and
+      PrevStage::parameterMayFlowThrough(_, ret.getEnclosingCallable(), _,
+        pragma[only_bind_into](config)) and
+      matchesCall(ccc, call)
+    }
+
+    /**
+     * Holds if `node` is reachable with access path `ap` from a source in the
+     * configuration `config`.
+     *
+     * The call context `cc` records whether the node is reached through an
+     * argument in a call, and if so, `argAp` records the access path of that
+     * argument.
+     */
+    pragma[nomagic]
+    predicate fwdFlow(
+      NodeEx node, FlowState state, Cc cc, ApOption argAp, Ap ap, Configuration config
+    ) {
+      fwdFlow0(node, state, cc, argAp, ap, config) and
+      PrevStage::revFlow(node, state, unbindApa(getApprox(ap)), config) and
+      filter(node, state, ap, config)
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlow0(
+      NodeEx node, FlowState state, Cc cc, ApOption argAp, Ap ap, Configuration config
+    ) {
+      sourceNode(node, state, config) and
+      (if hasSourceCallCtx(config) then cc = ccSomeCall() else cc = ccNone()) and
+      argAp = apNone() and
+      ap = getApNil(node)
+      or
+      exists(NodeEx mid, FlowState state0, Ap ap0, LocalCc localCc |
+        fwdFlow(mid, state0, cc, argAp, ap0, config) and
+        localCc = getLocalCc(mid, cc)
+      |
+        localStep(mid, state0, node, state, true, _, config, localCc) and
+        ap = ap0
+        or
+        localStep(mid, state0, node, state, false, ap, config, localCc) and
+        ap0 instanceof ApNil
+      )
+      or
+      exists(NodeEx mid |
+        fwdFlow(mid, pragma[only_bind_into](state), _, _, ap, pragma[only_bind_into](config)) and
+        jumpStep(mid, node, config) and
+        cc = ccNone() and
+        argAp = apNone()
+      )
+      or
+      exists(NodeEx mid, ApNil nil |
+        fwdFlow(mid, state, _, _, nil, pragma[only_bind_into](config)) and
+        additionalJumpStep(mid, node, config) and
+        cc = ccNone() and
+        argAp = apNone() and
+        ap = getApNil(node)
+      )
+      or
+      exists(NodeEx mid, FlowState state0, ApNil nil |
+        fwdFlow(mid, state0, _, _, nil, pragma[only_bind_into](config)) and
+        additionalJumpStateStep(mid, state0, node, state, config) and
+        cc = ccNone() and
+        argAp = apNone() and
+        ap = getApNil(node)
+      )
+      or
+      // store
+      exists(TypedContent tc, Ap ap0 |
+        fwdFlowStore(_, ap0, tc, node, state, cc, argAp, config) and
+        ap = apCons(tc, ap0)
+      )
+      or
+      // read
+      exists(Ap ap0, Content c |
+        fwdFlowRead(ap0, c, _, node, state, cc, argAp, config) and
+        fwdFlowConsCand(ap0, c, ap, config)
+      )
+      or
+      // flow into a callable
+      exists(ApApprox apa |
+        fwdFlowIn(_, node, state, _, cc, _, ap, config) and
+        apa = getApprox(ap) and
+        if PrevStage::parameterMayFlowThrough(node, _, apa, config)
+        then argAp = apSome(ap)
+        else argAp = apNone()
+      )
+      or
+      // flow out of a callable
+      fwdFlowOutNotFromArg(node, state, cc, argAp, ap, config)
+      or
+      exists(DataFlowCall call, Ap argAp0 |
+        fwdFlowOutFromArg(call, node, state, argAp0, ap, config) and
+        fwdFlowIsEntered(call, cc, argAp, argAp0, config)
+      )
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowStore(
+      NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, FlowState state, Cc cc, ApOption argAp,
+      Configuration config
+    ) {
+      exists(DataFlowType contentType |
+        fwdFlow(node1, state, cc, argAp, ap1, config) and
+        PrevStage::storeStepCand(node1, unbindApa(getApprox(ap1)), tc, node2, contentType, config) and
+        typecheckStore(ap1, contentType)
+      )
+    }
+
+    /**
+     * Holds if forward flow with access path `tail` reaches a store of `c`
+     * resulting in access path `cons`.
+     */
+    pragma[nomagic]
+    private predicate fwdFlowConsCand(Ap cons, Content c, Ap tail, Configuration config) {
+      exists(TypedContent tc |
+        fwdFlowStore(_, tail, tc, _, _, _, _, config) and
+        tc.getContent() = c and
+        cons = apCons(tc, tail)
+      )
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowRead(
+      Ap ap, Content c, NodeEx node1, NodeEx node2, FlowState state, Cc cc, ApOption argAp,
+      Configuration config
+    ) {
+      fwdFlow(node1, state, cc, argAp, ap, config) and
+      PrevStage::readStepCand(node1, c, node2, config) and
+      getHeadContent(ap) = c
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowIn(
+      DataFlowCall call, ParamNodeEx p, FlowState state, Cc outercc, Cc innercc, ApOption argAp,
+      Ap ap, Configuration config
+    ) {
+      exists(ArgNodeEx arg, boolean allowsFieldFlow |
+        fwdFlow(arg, state, outercc, argAp, ap, config) and
+        flowIntoCall(call, arg, p, allowsFieldFlow, config) and
+        innercc = getCallContextCall(call, p.getEnclosingCallable(), outercc) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowOutNotFromArg(
+      NodeEx out, FlowState state, Cc ccOut, ApOption argAp, Ap ap, Configuration config
+    ) {
+      exists(
+        DataFlowCall call, RetNodeEx ret, boolean allowsFieldFlow, CcNoCall innercc,
+        DataFlowCallable inner
+      |
+        fwdFlow(ret, state, innercc, argAp, ap, config) and
+        flowOutOfCall(call, ret, out, allowsFieldFlow, config) and
+        inner = ret.getEnclosingCallable() and
+        ccOut = getCallContextReturn(inner, call, innercc) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    pragma[nomagic]
+    private predicate fwdFlowOutFromArg(
+      DataFlowCall call, NodeEx out, FlowState state, Ap argAp, Ap ap, Configuration config
+    ) {
+      exists(RetNodeEx ret, boolean allowsFieldFlow, CcCall ccc |
+        fwdFlow(ret, state, ccc, apSome(argAp), ap, config) and
+        flowThroughOutOfCall(call, ccc, ret, out, allowsFieldFlow, config) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    /**
+     * Holds if an argument to `call` is reached in the flow covered by `fwdFlow`
+     * and data might flow through the target callable and back out at `call`.
+     */
+    pragma[nomagic]
+    private predicate fwdFlowIsEntered(
+      DataFlowCall call, Cc cc, ApOption argAp, Ap ap, Configuration config
+    ) {
+      exists(ParamNodeEx p |
+        fwdFlowIn(call, p, _, cc, _, argAp, ap, config) and
+        PrevStage::parameterMayFlowThrough(p, _, unbindApa(getApprox(ap)), config)
+      )
+    }
+
+    pragma[nomagic]
+    private predicate storeStepFwd(
+      NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, Ap ap2, Configuration config
+    ) {
+      fwdFlowStore(node1, ap1, tc, node2, _, _, _, config) and
+      ap2 = apCons(tc, ap1) and
+      fwdFlowRead(ap2, tc.getContent(), _, _, _, _, _, config)
+    }
+
+    private predicate readStepFwd(
+      NodeEx n1, Ap ap1, Content c, NodeEx n2, Ap ap2, Configuration config
+    ) {
+      fwdFlowRead(ap1, c, n1, n2, _, _, _, config) and
+      fwdFlowConsCand(ap1, c, ap2, config)
+    }
+
+    pragma[nomagic]
+    private predicate callMayFlowThroughFwd(DataFlowCall call, Configuration config) {
+      exists(Ap argAp0, NodeEx out, FlowState state, Cc cc, ApOption argAp, Ap ap |
+        fwdFlow(out, state, pragma[only_bind_into](cc), pragma[only_bind_into](argAp), ap,
+          pragma[only_bind_into](config)) and
+        fwdFlowOutFromArg(call, out, state, argAp0, ap, config) and
+        fwdFlowIsEntered(pragma[only_bind_into](call), pragma[only_bind_into](cc),
+          pragma[only_bind_into](argAp), pragma[only_bind_into](argAp0),
+          pragma[only_bind_into](config))
+      )
+    }
+
+    pragma[nomagic]
+    private predicate flowThroughIntoCall(
+      DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, boolean allowsFieldFlow, Configuration config
+    ) {
+      flowIntoCall(call, arg, p, allowsFieldFlow, config) and
+      fwdFlow(arg, _, _, _, _, pragma[only_bind_into](config)) and
+      PrevStage::parameterMayFlowThrough(p, _, _, pragma[only_bind_into](config)) and
+      callMayFlowThroughFwd(call, pragma[only_bind_into](config))
+    }
+
+    pragma[nomagic]
+    private predicate returnNodeMayFlowThrough(
+      RetNodeEx ret, FlowState state, Ap ap, Configuration config
+    ) {
+      fwdFlow(ret, state, any(CcCall ccc), apSome(_), ap, config)
+    }
+
+    /**
+     * Holds if `node` with access path `ap` is part of a path from a source to a
+     * sink in the configuration `config`.
+     *
+     * The Boolean `toReturn` records whether the node must be returned from the
+     * enclosing callable in order to reach a sink, and if so, `returnAp` records
+     * the access path of the returned value.
+     */
+    pragma[nomagic]
+    predicate revFlow(
+      NodeEx node, FlowState state, boolean toReturn, ApOption returnAp, Ap ap, Configuration config
+    ) {
+      revFlow0(node, state, toReturn, returnAp, ap, config) and
+      fwdFlow(node, state, _, _, ap, config)
+    }
+
+    pragma[nomagic]
+    private predicate revFlow0(
+      NodeEx node, FlowState state, boolean toReturn, ApOption returnAp, Ap ap, Configuration config
+    ) {
+      fwdFlow(node, state, _, _, ap, config) and
+      sinkNode(node, state, config) and
+      (if hasSinkCallCtx(config) then toReturn = true else toReturn = false) and
+      returnAp = apNone() and
+      ap instanceof ApNil
+      or
+      exists(NodeEx mid, FlowState state0 |
+        localStep(node, state, mid, state0, true, _, config, _) and
+        revFlow(mid, state0, toReturn, returnAp, ap, config)
+      )
+      or
+      exists(NodeEx mid, FlowState state0, ApNil nil |
+        fwdFlow(node, pragma[only_bind_into](state), _, _, ap, pragma[only_bind_into](config)) and
+        localStep(node, pragma[only_bind_into](state), mid, state0, false, _, config, _) and
+        revFlow(mid, state0, toReturn, returnAp, nil, pragma[only_bind_into](config)) and
+        ap instanceof ApNil
+      )
+      or
+      exists(NodeEx mid |
+        jumpStep(node, mid, config) and
+        revFlow(mid, state, _, _, ap, config) and
+        toReturn = false and
+        returnAp = apNone()
+      )
+      or
+      exists(NodeEx mid, ApNil nil |
+        fwdFlow(node, _, _, _, ap, pragma[only_bind_into](config)) and
+        additionalJumpStep(node, mid, config) and
+        revFlow(pragma[only_bind_into](mid), state, _, _, nil, pragma[only_bind_into](config)) and
+        toReturn = false and
+        returnAp = apNone() and
+        ap instanceof ApNil
+      )
+      or
+      exists(NodeEx mid, FlowState state0, ApNil nil |
+        fwdFlow(node, _, _, _, ap, pragma[only_bind_into](config)) and
+        additionalJumpStateStep(node, state, mid, state0, config) and
+        revFlow(pragma[only_bind_into](mid), pragma[only_bind_into](state0), _, _, nil,
+          pragma[only_bind_into](config)) and
+        toReturn = false and
+        returnAp = apNone() and
+        ap instanceof ApNil
+      )
+      or
+      // store
+      exists(Ap ap0, Content c |
+        revFlowStore(ap0, c, ap, node, state, _, _, toReturn, returnAp, config) and
+        revFlowConsCand(ap0, c, ap, config)
+      )
+      or
+      // read
+      exists(NodeEx mid, Ap ap0 |
+        revFlow(mid, state, toReturn, returnAp, ap0, config) and
+        readStepFwd(node, ap, _, mid, ap0, config)
+      )
+      or
+      // flow into a callable
+      revFlowInNotToReturn(node, state, returnAp, ap, config) and
+      toReturn = false
+      or
+      exists(DataFlowCall call, Ap returnAp0 |
+        revFlowInToReturn(call, node, state, returnAp0, ap, config) and
+        revFlowIsReturned(call, toReturn, returnAp, returnAp0, config)
+      )
+      or
+      // flow out of a callable
+      revFlowOut(_, node, state, _, _, ap, config) and
+      toReturn = true and
+      if returnNodeMayFlowThrough(node, state, ap, config)
+      then returnAp = apSome(ap)
+      else returnAp = apNone()
+    }
+
+    pragma[nomagic]
+    private predicate revFlowStore(
+      Ap ap0, Content c, Ap ap, NodeEx node, FlowState state, TypedContent tc, NodeEx mid,
+      boolean toReturn, ApOption returnAp, Configuration config
+    ) {
+      revFlow(mid, state, toReturn, returnAp, ap0, config) and
+      storeStepFwd(node, ap, tc, mid, ap0, config) and
+      tc.getContent() = c
+    }
+
+    /**
+     * Holds if reverse flow with access path `tail` reaches a read of `c`
+     * resulting in access path `cons`.
+     */
+    pragma[nomagic]
+    private predicate revFlowConsCand(Ap cons, Content c, Ap tail, Configuration config) {
+      exists(NodeEx mid, Ap tail0 |
+        revFlow(mid, _, _, _, tail, config) and
+        tail = pragma[only_bind_into](tail0) and
+        readStepFwd(_, cons, c, mid, tail0, config)
+      )
+    }
+
+    pragma[nomagic]
+    private predicate revFlowOut(
+      DataFlowCall call, RetNodeEx ret, FlowState state, boolean toReturn, ApOption returnAp, Ap ap,
+      Configuration config
+    ) {
+      exists(NodeEx out, boolean allowsFieldFlow |
+        revFlow(out, state, toReturn, returnAp, ap, config) and
+        flowOutOfCall(call, ret, out, allowsFieldFlow, config) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    pragma[nomagic]
+    private predicate revFlowInNotToReturn(
+      ArgNodeEx arg, FlowState state, ApOption returnAp, Ap ap, Configuration config
+    ) {
+      exists(ParamNodeEx p, boolean allowsFieldFlow |
+        revFlow(p, state, false, returnAp, ap, config) and
+        flowIntoCall(_, arg, p, allowsFieldFlow, config) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    pragma[nomagic]
+    private predicate revFlowInToReturn(
+      DataFlowCall call, ArgNodeEx arg, FlowState state, Ap returnAp, Ap ap, Configuration config
+    ) {
+      exists(ParamNodeEx p, boolean allowsFieldFlow |
+        revFlow(p, state, true, apSome(returnAp), ap, config) and
+        flowThroughIntoCall(call, arg, p, allowsFieldFlow, config) and
+        if allowsFieldFlow = false then ap instanceof ApNil else any()
+      )
+    }
+
+    /**
+     * Holds if an output from `call` is reached in the flow covered by `revFlow`
+     * and data might flow through the target callable resulting in reverse flow
+     * reaching an argument of `call`.
+     */
+    pragma[nomagic]
+    private predicate revFlowIsReturned(
+      DataFlowCall call, boolean toReturn, ApOption returnAp, Ap ap, Configuration config
+    ) {
+      exists(RetNodeEx ret, FlowState state, CcCall ccc |
+        revFlowOut(call, ret, state, toReturn, returnAp, ap, config) and
+        fwdFlow(ret, state, ccc, apSome(_), ap, config) and
+        matchesCall(ccc, call)
+      )
+    }
+
+    pragma[nomagic]
+    predicate storeStepCand(
+      NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, DataFlowType contentType,
+      Configuration config
+    ) {
+      exists(Ap ap2, Content c |
+        PrevStage::storeStepCand(node1, _, tc, node2, contentType, config) and
+        revFlowStore(ap2, c, ap1, node1, _, tc, node2, _, _, config) and
+        revFlowConsCand(ap2, c, ap1, config)
+      )
+    }
+
+    predicate readStepCand(NodeEx node1, Content c, NodeEx node2, Configuration config) {
+      exists(Ap ap1, Ap ap2 |
+        revFlow(node2, _, _, _, pragma[only_bind_into](ap2), pragma[only_bind_into](config)) and
+        readStepFwd(node1, ap1, c, node2, ap2, config) and
+        revFlowStore(ap1, c, pragma[only_bind_into](ap2), _, _, _, _, _, _,
+          pragma[only_bind_into](config))
+      )
+    }
+
+    predicate revFlow(NodeEx node, FlowState state, Configuration config) {
+      revFlow(node, state, _, _, _, config)
+    }
+
+    predicate revFlow(NodeEx node, FlowState state, Ap ap, Configuration config) {
+      revFlow(node, state, _, _, ap, config)
+    }
+
+    pragma[nomagic]
+    predicate revFlow(NodeEx node, Configuration config) { revFlow(node, _, _, _, _, config) }
+
+    // use an alias as a workaround for bad functionality-induced joins
+    pragma[nomagic]
+    predicate revFlowAlias(NodeEx node, Configuration config) { revFlow(node, _, _, _, _, config) }
+
+    // use an alias as a workaround for bad functionality-induced joins
+    pragma[nomagic]
+    predicate revFlowAlias(NodeEx node, FlowState state, Ap ap, Configuration config) {
+      revFlow(node, state, ap, config)
+    }
+
+    private predicate fwdConsCand(TypedContent tc, Ap ap, Configuration config) {
+      storeStepFwd(_, ap, tc, _, _, config)
+    }
+
+    private predicate revConsCand(TypedContent tc, Ap ap, Configuration config) {
+      storeStepCand(_, ap, tc, _, _, config)
+    }
+
+    private predicate validAp(Ap ap, Configuration config) {
+      revFlow(_, _, _, _, ap, config) and ap instanceof ApNil
+      or
+      exists(TypedContent head, Ap tail |
+        consCand(head, tail, config) and
+        ap = apCons(head, tail)
+      )
+    }
+
+    predicate consCand(TypedContent tc, Ap ap, Configuration config) {
+      revConsCand(tc, ap, config) and
+      validAp(ap, config)
+    }
+
+    pragma[noinline]
+    private predicate parameterFlow(
+      ParamNodeEx p, Ap ap, Ap ap0, DataFlowCallable c, Configuration config
+    ) {
+      revFlow(p, _, true, apSome(ap0), ap, config) and
+      c = p.getEnclosingCallable()
+    }
+
+    predicate parameterMayFlowThrough(ParamNodeEx p, DataFlowCallable c, Ap ap, Configuration config) {
+      exists(RetNodeEx ret, FlowState state, Ap ap0, ReturnKindExt kind, ParameterPosition pos |
+        parameterFlow(p, ap, ap0, c, config) and
+        c = ret.getEnclosingCallable() and
+        revFlow(pragma[only_bind_into](ret), pragma[only_bind_into](state), true, apSome(_),
+          pragma[only_bind_into](ap0), pragma[only_bind_into](config)) and
+        fwdFlow(ret, state, any(CcCall ccc), apSome(ap), ap0, config) and
+        kind = ret.getKind() and
+        p.getPosition() = pos and
+        // we don't expect a parameter to return stored in itself, unless explicitly allowed
+        (
+          not kind.(ParamUpdateReturnKind).getPosition() = pos
+          or
+          p.allowParameterReturnInSelf()
+        )
+      )
+    }
+
+    pragma[nomagic]
+    predicate callMayFlowThroughRev(DataFlowCall call, Configuration config) {
+      exists(
+        Ap returnAp0, ArgNodeEx arg, FlowState state, boolean toReturn, ApOption returnAp, Ap ap
+      |
+        revFlow(arg, state, toReturn, returnAp, ap, config) and
+        revFlowInToReturn(call, arg, state, returnAp0, ap, config) and
+        revFlowIsReturned(call, toReturn, returnAp, returnAp0, config)
+      )
+    }
+
+    predicate stats(
+      boolean fwd, int nodes, int fields, int conscand, int states, int tuples, Configuration config
+    ) {
+      fwd = true and
+      nodes = count(NodeEx node | fwdFlow(node, _, _, _, _, config)) and
+      fields = count(TypedContent f0 | fwdConsCand(f0, _, config)) and
+      conscand = count(TypedContent f0, Ap ap | fwdConsCand(f0, ap, config)) and
+      states = count(FlowState state | fwdFlow(_, state, _, _, _, config)) and
+      tuples =
+        count(NodeEx n, FlowState state, Cc cc, ApOption argAp, Ap ap |
+          fwdFlow(n, state, cc, argAp, ap, config)
+        )
+      or
+      fwd = false and
+      nodes = count(NodeEx node | revFlow(node, _, _, _, _, config)) and
+      fields = count(TypedContent f0 | consCand(f0, _, config)) and
+      conscand = count(TypedContent f0, Ap ap | consCand(f0, ap, config)) and
+      states = count(FlowState state | revFlow(_, state, _, _, _, config)) and
+      tuples =
+        count(NodeEx n, FlowState state, boolean b, ApOption retAp, Ap ap |
+          revFlow(n, state, b, retAp, ap, config)
+        )
+    }
+    /* End: Stage logic. */
+  }
+}
+
+private module BooleanCallContext {
+  class Cc extends boolean {
+    Cc() { this in [true, false] }
+  }
+
+  class CcCall extends Cc {
+    CcCall() { this = true }
+  }
+
+  /** Holds if the call context may be `call`. */
+  predicate matchesCall(CcCall cc, DataFlowCall call) { any() }
+
+  class CcNoCall extends Cc {
+    CcNoCall() { this = false }
+  }
+
+  Cc ccNone() { result = false }
+
+  CcCall ccSomeCall() { result = true }
+
+  class LocalCc = Unit;
+
+  bindingset[node, cc]
+  LocalCc getLocalCc(NodeEx node, Cc cc) { any() }
+
+  bindingset[call, c, outercc]
+  CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc) { any() }
+
+  bindingset[call, c, innercc]
+  CcNoCall getCallContextReturn(DataFlowCallable c, DataFlowCall call, Cc innercc) { any() }
+}
+
+private module Level1CallContext {
+  class Cc = CallContext;
+
+  class CcCall = CallContextCall;
+
+  pragma[inline]
+  predicate matchesCall(CcCall cc, DataFlowCall call) { cc.matchesCall(call) }
+
+  class CcNoCall = CallContextNoCall;
+
+  Cc ccNone() { result instanceof CallContextAny }
+
+  CcCall ccSomeCall() { result instanceof CallContextSomeCall }
+
+  module NoLocalCallContext {
+    class LocalCc = Unit;
+
+    bindingset[node, cc]
+    LocalCc getLocalCc(NodeEx node, Cc cc) { any() }
+
+    bindingset[call, c, outercc]
+    CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc) {
+      checkCallContextCall(outercc, call, c) and
+      if recordDataFlowCallSiteDispatch(call, c)
+      then result = TSpecificCall(call)
+      else result = TSomeCall()
+    }
+  }
+
+  module LocalCallContext {
+    class LocalCc = LocalCallContext;
+
+    bindingset[node, cc]
+    LocalCc getLocalCc(NodeEx node, Cc cc) {
+      result =
+        getLocalCallContext(pragma[only_bind_into](pragma[only_bind_out](cc)),
+          node.getEnclosingCallable())
+    }
+
+    bindingset[call, c, outercc]
+    CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc) {
+      checkCallContextCall(outercc, call, c) and
+      if recordDataFlowCallSite(call, c) then result = TSpecificCall(call) else result = TSomeCall()
+    }
+  }
+
+  bindingset[call, c, innercc]
+  CcNoCall getCallContextReturn(DataFlowCallable c, DataFlowCall call, Cc innercc) {
+    checkCallContextReturn(innercc, c, call) and
+    if reducedViableImplInReturn(c, call) then result = TReturn(c, call) else result = ccNone()
+  }
+}
+
+private module Stage2Param implements MkStage<Stage1>::StageParam {
+  private module PrevStage = Stage1;
+
+  class Ap extends boolean {
+    Ap() { this in [true, false] }
+  }
+
+  class ApNil extends Ap {
+    ApNil() { this = false }
+  }
+
+  bindingset[result, ap]
+  PrevStage::Ap getApprox(Ap ap) { any() }
+
+  ApNil getApNil(NodeEx node) { Stage1::revFlow(node, _) and exists(result) }
+
+  bindingset[tc, tail]
+  Ap apCons(TypedContent tc, Ap tail) { result = true and exists(tc) and exists(tail) }
+
+  pragma[inline]
+  Content getHeadContent(Ap ap) { exists(result) and ap = true }
+
+  class ApOption = BooleanOption;
+
+  ApOption apNone() { result = TBooleanNone() }
+
+  ApOption apSome(Ap ap) { result = TBooleanSome(ap) }
+
+  import Level1CallContext
+  import NoLocalCallContext
+
+  bindingset[node1, state1, config]
+  bindingset[node2, state2, config]
+  predicate localStep(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+    ApNil ap, Configuration config, LocalCc lcc
+  ) {
+    (
+      preservesValue = true and
+      localFlowStepNodeCand1(node1, node2, config) and
+      state1 = state2
+      or
+      preservesValue = false and
+      additionalLocalFlowStepNodeCand1(node1, node2, config) and
+      state1 = state2
+      or
+      preservesValue = false and
+      additionalLocalStateStep(node1, state1, node2, state2, config)
+    ) and
+    exists(ap) and
+    exists(lcc)
+  }
+
+  predicate flowOutOfCall = flowOutOfCallNodeCand1/5;
+
+  predicate flowIntoCall = flowIntoCallNodeCand1/5;
+
+  pragma[nomagic]
+  private predicate expectsContentCand(NodeEx node, Configuration config) {
+    exists(Content c |
+      PrevStage::revFlow(node, pragma[only_bind_into](config)) and
+      PrevStage::revFlowIsReadAndStored(c, pragma[only_bind_into](config)) and
+      expectsContentEx(node, c)
+    )
+  }
+
+  bindingset[node, state, ap, config]
+  predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config) {
+    PrevStage::revFlowState(state, pragma[only_bind_into](config)) and
+    exists(ap) and
+    not stateBarrier(node, state, config) and
+    (
+      notExpectsContent(node)
+      or
+      ap = true and
+      expectsContentCand(node, config)
+    )
+  }
+
+  bindingset[ap, contentType]
+  predicate typecheckStore(Ap ap, DataFlowType contentType) { any() }
+}
+
+private module Stage2 implements StageSig {
+  import MkStage<Stage1>::Stage<Stage2Param>
+}
+
+pragma[nomagic]
+private predicate flowOutOfCallNodeCand2(
+  DataFlowCall call, RetNodeEx node1, NodeEx node2, boolean allowsFieldFlow, Configuration config
+) {
+  flowOutOfCallNodeCand1(call, node1, node2, allowsFieldFlow, config) and
+  Stage2::revFlow(node2, pragma[only_bind_into](config)) and
+  Stage2::revFlowAlias(node1, pragma[only_bind_into](config))
+}
+
+pragma[nomagic]
+private predicate flowIntoCallNodeCand2(
+  DataFlowCall call, ArgNodeEx node1, ParamNodeEx node2, boolean allowsFieldFlow,
+  Configuration config
+) {
+  flowIntoCallNodeCand1(call, node1, node2, allowsFieldFlow, config) and
+  Stage2::revFlow(node2, pragma[only_bind_into](config)) and
+  Stage2::revFlowAlias(node1, pragma[only_bind_into](config))
+}
+
+private module LocalFlowBigStep {
+  /**
+   * A node where some checking is required, and hence the big-step relation
+   * is not allowed to step over.
+   */
+  private class FlowCheckNode extends NodeEx {
+    FlowCheckNode() {
+      castNode(this.asNode()) or
+      clearsContentCached(this.asNode(), _) or
+      expectsContentCached(this.asNode(), _)
+    }
+  }
+
+  /**
+   * Holds if `node` can be the first node in a maximal subsequence of local
+   * flow steps in a dataflow path.
+   */
+  private predicate localFlowEntry(NodeEx node, FlowState state, Configuration config) {
+    Stage2::revFlow(node, state, config) and
+    (
+      sourceNode(node, state, config)
+      or
+      jumpStep(_, node, config)
+      or
+      additionalJumpStep(_, node, config)
+      or
+      additionalJumpStateStep(_, _, node, state, config)
+      or
+      node instanceof ParamNodeEx
+      or
+      node.asNode() instanceof OutNodeExt
+      or
+      Stage2::storeStepCand(_, _, _, node, _, config)
+      or
+      Stage2::readStepCand(_, _, node, config)
+      or
+      node instanceof FlowCheckNode
+      or
+      exists(FlowState s |
+        additionalLocalStateStep(_, s, node, state, config) and
+        s != state
+      )
+    )
+  }
+
+  /**
+   * Holds if `node` can be the last node in a maximal subsequence of local
+   * flow steps in a dataflow path.
+   */
+  private predicate localFlowExit(NodeEx node, FlowState state, Configuration config) {
+    exists(NodeEx next | Stage2::revFlow(next, state, config) |
+      jumpStep(node, next, config) or
+      additionalJumpStep(node, next, config) or
+      flowIntoCallNodeCand1(_, node, next, config) or
+      flowOutOfCallNodeCand1(_, node, next, config) or
+      Stage2::storeStepCand(node, _, _, next, _, config) or
+      Stage2::readStepCand(node, _, next, config)
+    )
+    or
+    exists(NodeEx next, FlowState s | Stage2::revFlow(next, s, config) |
+      additionalJumpStateStep(node, state, next, s, config)
+      or
+      additionalLocalStateStep(node, state, next, s, config) and
+      s != state
+    )
+    or
+    Stage2::revFlow(node, state, config) and
+    node instanceof FlowCheckNode
+    or
+    sinkNode(node, state, config)
+  }
+
+  pragma[noinline]
+  private predicate additionalLocalFlowStepNodeCand2(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, Configuration config
+  ) {
+    additionalLocalFlowStepNodeCand1(node1, node2, config) and
+    state1 = state2 and
+    Stage2::revFlow(node1, pragma[only_bind_into](state1), false, pragma[only_bind_into](config)) and
+    Stage2::revFlowAlias(node2, pragma[only_bind_into](state2), false,
+      pragma[only_bind_into](config))
+    or
+    additionalLocalStateStep(node1, state1, node2, state2, config) and
+    Stage2::revFlow(node1, state1, false, pragma[only_bind_into](config)) and
+    Stage2::revFlowAlias(node2, state2, false, pragma[only_bind_into](config))
+  }
+
+  /**
+   * Holds if the local path from `node1` to `node2` is a prefix of a maximal
+   * subsequence of local flow steps in a dataflow path.
+   *
+   * This is the transitive closure of `[additional]localFlowStep` beginning
+   * at `localFlowEntry`.
+   */
+  pragma[nomagic]
+  private predicate localFlowStepPlus(
+    NodeEx node1, FlowState state, NodeEx node2, boolean preservesValue, DataFlowType t,
+    Configuration config, LocalCallContext cc
+  ) {
+    not isUnreachableInCallCached(node2.asNode(), cc.(LocalCallContextSpecificCall).getCall()) and
+    (
+      localFlowEntry(node1, pragma[only_bind_into](state), pragma[only_bind_into](config)) and
+      (
+        localFlowStepNodeCand1(node1, node2, config) and
+        preservesValue = true and
+        t = node1.getDataFlowType() and // irrelevant dummy value
+        Stage2::revFlow(node2, pragma[only_bind_into](state), pragma[only_bind_into](config))
+        or
+        additionalLocalFlowStepNodeCand2(node1, state, node2, state, config) and
+        preservesValue = false and
+        t = node2.getDataFlowType()
+      ) and
+      node1 != node2 and
+      cc.relevantFor(node1.getEnclosingCallable()) and
+      not isUnreachableInCallCached(node1.asNode(), cc.(LocalCallContextSpecificCall).getCall())
+      or
+      exists(NodeEx mid |
+        localFlowStepPlus(node1, pragma[only_bind_into](state), mid, preservesValue, t,
+          pragma[only_bind_into](config), cc) and
+        localFlowStepNodeCand1(mid, node2, config) and
+        not mid instanceof FlowCheckNode and
+        Stage2::revFlow(node2, pragma[only_bind_into](state), pragma[only_bind_into](config))
+      )
+      or
+      exists(NodeEx mid |
+        localFlowStepPlus(node1, state, mid, _, _, pragma[only_bind_into](config), cc) and
+        additionalLocalFlowStepNodeCand2(mid, state, node2, state, config) and
+        not mid instanceof FlowCheckNode and
+        preservesValue = false and
+        t = node2.getDataFlowType()
+      )
+    )
+  }
+
+  /**
+   * Holds if `node1` can step to `node2` in one or more local steps and this
+   * path can occur as a maximal subsequence of local steps in a dataflow path.
+   */
+  pragma[nomagic]
+  predicate localFlowBigStep(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+    AccessPathFrontNil apf, Configuration config, LocalCallContext callContext
+  ) {
+    localFlowStepPlus(node1, state1, node2, preservesValue, apf.getType(), config, callContext) and
+    localFlowExit(node2, state1, config) and
+    state1 = state2
+    or
+    additionalLocalFlowStepNodeCand2(node1, state1, node2, state2, config) and
+    state1 != state2 and
+    preservesValue = false and
+    apf = TFrontNil(node2.getDataFlowType()) and
+    callContext.relevantFor(node1.getEnclosingCallable()) and
+    not exists(DataFlowCall call | call = callContext.(LocalCallContextSpecificCall).getCall() |
+      isUnreachableInCallCached(node1.asNode(), call) or
+      isUnreachableInCallCached(node2.asNode(), call)
+    )
+  }
+}
+
+private import LocalFlowBigStep
+
+private module Stage3Param implements MkStage<Stage2>::StageParam {
+  private module PrevStage = Stage2;
+
+  class Ap = AccessPathFront;
+
+  class ApNil = AccessPathFrontNil;
+
+  PrevStage::Ap getApprox(Ap ap) { result = ap.toBoolNonEmpty() }
+
+  ApNil getApNil(NodeEx node) {
+    PrevStage::revFlow(node, _) and result = TFrontNil(node.getDataFlowType())
+  }
+
+  bindingset[tc, tail]
+  Ap apCons(TypedContent tc, Ap tail) { result.getHead() = tc and exists(tail) }
+
+  pragma[noinline]
+  Content getHeadContent(Ap ap) { result = ap.getHead().getContent() }
+
+  class ApOption = AccessPathFrontOption;
+
+  ApOption apNone() { result = TAccessPathFrontNone() }
+
+  ApOption apSome(Ap ap) { result = TAccessPathFrontSome(ap) }
+
+  import BooleanCallContext
+
+  predicate localStep(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+    ApNil ap, Configuration config, LocalCc lcc
+  ) {
+    localFlowBigStep(node1, state1, node2, state2, preservesValue, ap, config, _) and exists(lcc)
+  }
+
+  predicate flowOutOfCall = flowOutOfCallNodeCand2/5;
+
+  predicate flowIntoCall = flowIntoCallNodeCand2/5;
+
+  pragma[nomagic]
+  private predicate clearSet(NodeEx node, ContentSet c, Configuration config) {
+    PrevStage::revFlow(node, config) and
+    clearsContentCached(node.asNode(), c)
+  }
+
+  pragma[nomagic]
+  private predicate clearContent(NodeEx node, Content c, Configuration config) {
+    exists(ContentSet cs |
+      PrevStage::readStepCand(_, pragma[only_bind_into](c), _, pragma[only_bind_into](config)) and
+      c = cs.getAReadContent() and
+      clearSet(node, cs, pragma[only_bind_into](config))
+    )
+  }
+
+  pragma[nomagic]
+  private predicate clear(NodeEx node, Ap ap, Configuration config) {
+    clearContent(node, ap.getHead().getContent(), config)
+  }
+
+  pragma[nomagic]
+  private predicate expectsContentCand(NodeEx node, Ap ap, Configuration config) {
+    exists(Content c |
+      PrevStage::revFlow(node, pragma[only_bind_into](config)) and
+      PrevStage::readStepCand(_, c, _, pragma[only_bind_into](config)) and
+      expectsContentEx(node, c) and
+      c = ap.getHead().getContent()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate castingNodeEx(NodeEx node) { node.asNode() instanceof CastingNode }
+
+  bindingset[node, state, ap, config]
+  predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config) {
+    exists(state) and
+    exists(config) and
+    not clear(node, ap, config) and
+    (if castingNodeEx(node) then compatibleTypes(node.getDataFlowType(), ap.getType()) else any()) and
+    (
+      notExpectsContent(node)
+      or
+      expectsContentCand(node, ap, config)
+    )
+  }
+
+  bindingset[ap, contentType]
+  predicate typecheckStore(Ap ap, DataFlowType contentType) {
+    // We need to typecheck stores here, since reverse flow through a getter
+    // might have a different type here compared to inside the getter.
+    compatibleTypes(ap.getType(), contentType)
+  }
+}
+
+private module Stage3 implements StageSig {
+  import MkStage<Stage2>::Stage<Stage3Param>
+}
+
+/**
+ * Holds if `argApf` is recorded as the summary context for flow reaching `node`
+ * and remains relevant for the following pruning stage.
+ */
+private predicate flowCandSummaryCtx(
+  NodeEx node, FlowState state, AccessPathFront argApf, Configuration config
+) {
+  exists(AccessPathFront apf |
+    Stage3::revFlow(node, state, true, _, apf, config) and
+    Stage3::fwdFlow(node, state, any(Stage3::CcCall ccc), TAccessPathFrontSome(argApf), apf, config)
+  )
+}
+
+/**
+ * Holds if a length 2 access path approximation with the head `tc` is expected
+ * to be expensive.
+ */
+private predicate expensiveLen2unfolding(TypedContent tc, Configuration config) {
+  exists(int tails, int nodes, int apLimit, int tupleLimit |
+    tails = strictcount(AccessPathFront apf | Stage3::consCand(tc, apf, config)) and
+    nodes =
+      strictcount(NodeEx n, FlowState state |
+        Stage3::revFlow(n, state, any(AccessPathFrontHead apf | apf.getHead() = tc), config)
+        or
+        flowCandSummaryCtx(n, state, any(AccessPathFrontHead apf | apf.getHead() = tc), config)
+      ) and
+    accessPathApproxCostLimits(apLimit, tupleLimit) and
+    apLimit < tails and
+    tupleLimit < (tails - 1) * nodes and
+    not tc.forceHighPrecision()
+  )
+}
+
+private newtype TAccessPathApprox =
+  TNil(DataFlowType t) or
+  TConsNil(TypedContent tc, DataFlowType t) {
+    Stage3::consCand(tc, TFrontNil(t), _) and
+    not expensiveLen2unfolding(tc, _)
+  } or
+  TConsCons(TypedContent tc1, TypedContent tc2, int len) {
+    Stage3::consCand(tc1, TFrontHead(tc2), _) and
+    len in [2 .. accessPathLimit()] and
+    not expensiveLen2unfolding(tc1, _)
+  } or
+  TCons1(TypedContent tc, int len) {
+    len in [1 .. accessPathLimit()] and
+    expensiveLen2unfolding(tc, _)
+  }
+
+/**
+ * Conceptually a list of `TypedContent`s followed by a `DataFlowType`, but only
+ * the first two elements of the list and its length are tracked. If data flows
+ * from a source to a given node with a given `AccessPathApprox`, this indicates
+ * the sequence of dereference operations needed to get from the value in the node
+ * to the tracked object. The final type indicates the type of the tracked object.
+ */
+abstract private class AccessPathApprox extends TAccessPathApprox {
+  abstract string toString();
+
+  abstract TypedContent getHead();
+
+  abstract int len();
+
+  abstract DataFlowType getType();
+
+  abstract AccessPathFront getFront();
+
+  /** Gets the access path obtained by popping `head` from this path, if any. */
+  abstract AccessPathApprox pop(TypedContent head);
+}
+
+private class AccessPathApproxNil extends AccessPathApprox, TNil {
+  private DataFlowType t;
+
+  AccessPathApproxNil() { this = TNil(t) }
+
+  override string toString() { result = concat(": " + ppReprType(t)) }
+
+  override TypedContent getHead() { none() }
+
+  override int len() { result = 0 }
+
+  override DataFlowType getType() { result = t }
+
+  override AccessPathFront getFront() { result = TFrontNil(t) }
+
+  override AccessPathApprox pop(TypedContent head) { none() }
+}
+
+abstract private class AccessPathApproxCons extends AccessPathApprox { }
+
+private class AccessPathApproxConsNil extends AccessPathApproxCons, TConsNil {
+  private TypedContent tc;
+  private DataFlowType t;
+
+  AccessPathApproxConsNil() { this = TConsNil(tc, t) }
+
+  override string toString() {
+    // The `concat` becomes "" if `ppReprType` has no result.
+    result = "[" + tc.toString() + "]" + concat(" : " + ppReprType(t))
+  }
+
+  override TypedContent getHead() { result = tc }
+
+  override int len() { result = 1 }
+
+  override DataFlowType getType() { result = tc.getContainerType() }
+
+  override AccessPathFront getFront() { result = TFrontHead(tc) }
+
+  override AccessPathApprox pop(TypedContent head) { head = tc and result = TNil(t) }
+}
+
+private class AccessPathApproxConsCons extends AccessPathApproxCons, TConsCons {
+  private TypedContent tc1;
+  private TypedContent tc2;
+  private int len;
+
+  AccessPathApproxConsCons() { this = TConsCons(tc1, tc2, len) }
+
+  override string toString() {
+    if len = 2
+    then result = "[" + tc1.toString() + ", " + tc2.toString() + "]"
+    else result = "[" + tc1.toString() + ", " + tc2.toString() + ", ... (" + len.toString() + ")]"
+  }
+
+  override TypedContent getHead() { result = tc1 }
+
+  override int len() { result = len }
+
+  override DataFlowType getType() { result = tc1.getContainerType() }
+
+  override AccessPathFront getFront() { result = TFrontHead(tc1) }
+
+  override AccessPathApprox pop(TypedContent head) {
+    head = tc1 and
+    (
+      result = TConsCons(tc2, _, len - 1)
+      or
+      len = 2 and
+      result = TConsNil(tc2, _)
+      or
+      result = TCons1(tc2, len - 1)
+    )
+  }
+}
+
+private class AccessPathApproxCons1 extends AccessPathApproxCons, TCons1 {
+  private TypedContent tc;
+  private int len;
+
+  AccessPathApproxCons1() { this = TCons1(tc, len) }
+
+  override string toString() {
+    if len = 1
+    then result = "[" + tc.toString() + "]"
+    else result = "[" + tc.toString() + ", ... (" + len.toString() + ")]"
+  }
+
+  override TypedContent getHead() { result = tc }
+
+  override int len() { result = len }
+
+  override DataFlowType getType() { result = tc.getContainerType() }
+
+  override AccessPathFront getFront() { result = TFrontHead(tc) }
+
+  override AccessPathApprox pop(TypedContent head) {
+    head = tc and
+    (
+      exists(TypedContent tc2 | Stage3::consCand(tc, TFrontHead(tc2), _) |
+        result = TConsCons(tc2, _, len - 1)
+        or
+        len = 2 and
+        result = TConsNil(tc2, _)
+        or
+        result = TCons1(tc2, len - 1)
+      )
+      or
+      exists(DataFlowType t |
+        len = 1 and
+        Stage3::consCand(tc, TFrontNil(t), _) and
+        result = TNil(t)
+      )
+    )
+  }
+}
+
+/** Gets the access path obtained by popping `tc` from `ap`, if any. */
+private AccessPathApprox pop(TypedContent tc, AccessPathApprox apa) { result = apa.pop(tc) }
+
+/** Gets the access path obtained by pushing `tc` onto `ap`. */
+private AccessPathApprox push(TypedContent tc, AccessPathApprox apa) { apa = pop(tc, result) }
+
+private newtype TAccessPathApproxOption =
+  TAccessPathApproxNone() or
+  TAccessPathApproxSome(AccessPathApprox apa)
+
+private class AccessPathApproxOption extends TAccessPathApproxOption {
+  string toString() {
+    this = TAccessPathApproxNone() and result = "<none>"
+    or
+    this = TAccessPathApproxSome(any(AccessPathApprox apa | result = apa.toString()))
+  }
+}
+
+private module Stage4Param implements MkStage<Stage3>::StageParam {
+  private module PrevStage = Stage3;
+
+  class Ap = AccessPathApprox;
+
+  class ApNil = AccessPathApproxNil;
+
+  PrevStage::Ap getApprox(Ap ap) { result = ap.getFront() }
+
+  ApNil getApNil(NodeEx node) {
+    PrevStage::revFlow(node, _) and result = TNil(node.getDataFlowType())
+  }
+
+  bindingset[tc, tail]
+  Ap apCons(TypedContent tc, Ap tail) { result = push(tc, tail) }
+
+  pragma[noinline]
+  Content getHeadContent(Ap ap) { result = ap.getHead().getContent() }
+
+  class ApOption = AccessPathApproxOption;
+
+  ApOption apNone() { result = TAccessPathApproxNone() }
+
+  ApOption apSome(Ap ap) { result = TAccessPathApproxSome(ap) }
+
+  import Level1CallContext
+  import LocalCallContext
+
+  predicate localStep(
+    NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue,
+    ApNil ap, Configuration config, LocalCc lcc
+  ) {
+    localFlowBigStep(node1, state1, node2, state2, preservesValue, ap.getFront(), config, lcc)
+  }
+
+  pragma[nomagic]
+  predicate flowOutOfCall(
+    DataFlowCall call, RetNodeEx node1, NodeEx node2, boolean allowsFieldFlow, Configuration config
+  ) {
+    exists(FlowState state |
+      flowOutOfCallNodeCand2(call, node1, node2, allowsFieldFlow, config) and
+      PrevStage::revFlow(node2, pragma[only_bind_into](state), _, pragma[only_bind_into](config)) and
+      PrevStage::revFlowAlias(node1, pragma[only_bind_into](state), _,
+        pragma[only_bind_into](config))
+    )
+  }
+
+  pragma[nomagic]
+  predicate flowIntoCall(
+    DataFlowCall call, ArgNodeEx node1, ParamNodeEx node2, boolean allowsFieldFlow,
+    Configuration config
+  ) {
+    exists(FlowState state |
+      flowIntoCallNodeCand2(call, node1, node2, allowsFieldFlow, config) and
+      PrevStage::revFlow(node2, pragma[only_bind_into](state), _, pragma[only_bind_into](config)) and
+      PrevStage::revFlowAlias(node1, pragma[only_bind_into](state), _,
+        pragma[only_bind_into](config))
+    )
+  }
+
+  bindingset[node, state, ap, config]
+  predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config) { any() }
+
+  // Type checking is not necessary here as it has already been done in stage 3.
+  bindingset[ap, contentType]
+  predicate typecheckStore(Ap ap, DataFlowType contentType) { any() }
+}
+
+private module Stage4 = MkStage<Stage3>::Stage<Stage4Param>;
+
+bindingset[conf, result]
+private Configuration unbindConf(Configuration conf) {
+  exists(Configuration c | result = pragma[only_bind_into](c) and conf = pragma[only_bind_into](c))
+}
+
+pragma[nomagic]
+private predicate nodeMayUseSummary0(
+  NodeEx n, DataFlowCallable c, FlowState state, AccessPathApprox apa, Configuration config
+) {
+  exists(AccessPathApprox apa0 |
+    Stage4::parameterMayFlowThrough(_, c, _, _) and
+    Stage4::revFlow(n, state, true, _, apa0, config) and
+    Stage4::fwdFlow(n, state, any(CallContextCall ccc), TAccessPathApproxSome(apa), apa0, config) and
+    n.getEnclosingCallable() = c
+  )
+}
+
+pragma[nomagic]
+private predicate nodeMayUseSummary(
+  NodeEx n, FlowState state, AccessPathApprox apa, Configuration config
+) {
+  exists(DataFlowCallable c |
+    Stage4::parameterMayFlowThrough(_, c, apa, config) and
+    nodeMayUseSummary0(n, c, state, apa, config)
+  )
+}
+
+private newtype TSummaryCtx =
+  TSummaryCtxNone() or
+  TSummaryCtxSome(ParamNodeEx p, FlowState state, AccessPath ap) {
+    exists(Configuration config |
+      Stage4::parameterMayFlowThrough(p, _, ap.getApprox(), config) and
+      Stage4::revFlow(p, state, _, config)
+    )
+  }
+
+/**
+ * A context for generating flow summaries. This represents flow entry through
+ * a specific parameter with an access path of a specific shape.
+ *
+ * Summaries are only created for parameters that may flow through.
+ */
+abstract private class SummaryCtx extends TSummaryCtx {
+  abstract string toString();
+}
+
+/** A summary context from which no flow summary can be generated. */
+private class SummaryCtxNone extends SummaryCtx, TSummaryCtxNone {
+  override string toString() { result = "<none>" }
+}
+
+/** A summary context from which a flow summary can be generated. */
+private class SummaryCtxSome extends SummaryCtx, TSummaryCtxSome {
+  private ParamNodeEx p;
+  private FlowState s;
+  private AccessPath ap;
+
+  SummaryCtxSome() { this = TSummaryCtxSome(p, s, ap) }
+
+  ParameterPosition getParameterPos() { p.isParameterOf(_, result) }
+
+  ParamNodeEx getParamNode() { result = p }
+
+  override string toString() { result = p + ": " + ap }
+
+  predicate hasLocationInfo(
+    string filepath, int startline, int startcolumn, int endline, int endcolumn
+  ) {
+    p.hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+  }
+}
+
+/**
+ * Gets the number of length 2 access path approximations that correspond to `apa`.
+ */
+private int count1to2unfold(AccessPathApproxCons1 apa, Configuration config) {
+  exists(TypedContent tc, int len |
+    tc = apa.getHead() and
+    len = apa.len() and
+    result =
+      strictcount(AccessPathFront apf |
+        Stage4::consCand(tc, any(AccessPathApprox ap | ap.getFront() = apf and ap.len() = len - 1),
+          config)
+      )
+  )
+}
+
+private int countNodesUsingAccessPath(AccessPathApprox apa, Configuration config) {
+  result =
+    strictcount(NodeEx n, FlowState state |
+      Stage4::revFlow(n, state, apa, config) or nodeMayUseSummary(n, state, apa, config)
+    )
+}
+
+/**
+ * Holds if a length 2 access path approximation matching `apa` is expected
+ * to be expensive.
+ */
+private predicate expensiveLen1to2unfolding(AccessPathApproxCons1 apa, Configuration config) {
+  exists(int aps, int nodes, int apLimit, int tupleLimit |
+    aps = count1to2unfold(apa, config) and
+    nodes = countNodesUsingAccessPath(apa, config) and
+    accessPathCostLimits(apLimit, tupleLimit) and
+    apLimit < aps and
+    tupleLimit < (aps - 1) * nodes
+  )
+}
+
+private AccessPathApprox getATail(AccessPathApprox apa, Configuration config) {
+  exists(TypedContent head |
+    apa.pop(head) = result and
+    Stage4::consCand(head, result, config)
+  )
+}
+
+/**
+ * Holds with `unfold = false` if a precise head-tail representation of `apa` is
+ * expected to be expensive. Holds with `unfold = true` otherwise.
+ */
+private predicate evalUnfold(AccessPathApprox apa, boolean unfold, Configuration config) {
+  if apa.getHead().forceHighPrecision()
+  then unfold = true
+  else
+    exists(int aps, int nodes, int apLimit, int tupleLimit |
+      aps = countPotentialAps(apa, config) and
+      nodes = countNodesUsingAccessPath(apa, config) and
+      accessPathCostLimits(apLimit, tupleLimit) and
+      if apLimit < aps and tupleLimit < (aps - 1) * nodes then unfold = false else unfold = true
+    )
+}
+
+/**
+ * Gets the number of `AccessPath`s that correspond to `apa`.
+ */
+private int countAps(AccessPathApprox apa, Configuration config) {
+  evalUnfold(apa, false, config) and
+  result = 1 and
+  (not apa instanceof AccessPathApproxCons1 or expensiveLen1to2unfolding(apa, config))
+  or
+  evalUnfold(apa, false, config) and
+  result = count1to2unfold(apa, config) and
+  not expensiveLen1to2unfolding(apa, config)
+  or
+  evalUnfold(apa, true, config) and
+  result = countPotentialAps(apa, config)
+}
+
+/**
+ * Gets the number of `AccessPath`s that would correspond to `apa` assuming
+ * that it is expanded to a precise head-tail representation.
+ */
+language[monotonicAggregates]
+private int countPotentialAps(AccessPathApprox apa, Configuration config) {
+  apa instanceof AccessPathApproxNil and result = 1
+  or
+  result = strictsum(AccessPathApprox tail | tail = getATail(apa, config) | countAps(tail, config))
+}
+
+private newtype TAccessPath =
+  TAccessPathNil(DataFlowType t) or
+  TAccessPathCons(TypedContent head, AccessPath tail) {
+    exists(AccessPathApproxCons apa |
+      not evalUnfold(apa, false, _) and
+      head = apa.getHead() and
+      tail.getApprox() = getATail(apa, _)
+    )
+  } or
+  TAccessPathCons2(TypedContent head1, TypedContent head2, int len) {
+    exists(AccessPathApproxCons apa |
+      evalUnfold(apa, false, _) and
+      not expensiveLen1to2unfolding(apa, _) and
+      apa.len() = len and
+      head1 = apa.getHead() and
+      head2 = getATail(apa, _).getHead()
+    )
+  } or
+  TAccessPathCons1(TypedContent head, int len) {
+    exists(AccessPathApproxCons apa |
+      evalUnfold(apa, false, _) and
+      expensiveLen1to2unfolding(apa, _) and
+      apa.len() = len and
+      head = apa.getHead()
+    )
+  }
+
+private newtype TPathNode =
+  TPathNodeMid(
+    NodeEx node, FlowState state, CallContext cc, SummaryCtx sc, AccessPath ap, Configuration config
+  ) {
+    // A PathNode is introduced by a source ...
+    Stage4::revFlow(node, state, config) and
+    sourceNode(node, state, config) and
+    (
+      if hasSourceCallCtx(config)
+      then cc instanceof CallContextSomeCall
+      else cc instanceof CallContextAny
+    ) and
+    sc instanceof SummaryCtxNone and
+    ap = TAccessPathNil(node.getDataFlowType())
+    or
+    // ... or a step from an existing PathNode to another node.
+    exists(PathNodeMid mid |
+      pathStep(mid, node, state, cc, sc, ap) and
+      pragma[only_bind_into](config) = mid.getConfiguration() and
+      Stage4::revFlow(node, state, ap.getApprox(), pragma[only_bind_into](config))
+    )
+  } or
+  TPathNodeSink(NodeEx node, FlowState state, Configuration config) {
+    exists(PathNodeMid sink |
+      sink.isAtSink() and
+      node = sink.getNodeEx() and
+      state = sink.getState() and
+      config = sink.getConfiguration()
+    )
+  }
+
+/**
+ * A list of `TypedContent`s followed by a `DataFlowType`. If data flows from a
+ * source to a given node with a given `AccessPath`, this indicates the sequence
+ * of dereference operations needed to get from the value in the node to the
+ * tracked object. The final type indicates the type of the tracked object.
+ */
+private class AccessPath extends TAccessPath {
+  /** Gets the head of this access path, if any. */
+  abstract TypedContent getHead();
+
+  /** Gets the tail of this access path, if any. */
+  abstract AccessPath getTail();
+
+  /** Gets the front of this access path. */
+  abstract AccessPathFront getFront();
+
+  /** Gets the approximation of this access path. */
+  abstract AccessPathApprox getApprox();
+
+  /** Gets the length of this access path. */
+  abstract int length();
+
+  /** Gets a textual representation of this access path. */
+  abstract string toString();
+
+  /** Gets the access path obtained by popping `tc` from this access path, if any. */
+  final AccessPath pop(TypedContent tc) {
+    result = this.getTail() and
+    tc = this.getHead()
+  }
+
+  /** Gets the access path obtained by pushing `tc` onto this access path. */
+  final AccessPath push(TypedContent tc) { this = result.pop(tc) }
+}
+
+private class AccessPathNil extends AccessPath, TAccessPathNil {
+  private DataFlowType t;
+
+  AccessPathNil() { this = TAccessPathNil(t) }
+
+  DataFlowType getType() { result = t }
+
+  override TypedContent getHead() { none() }
+
+  override AccessPath getTail() { none() }
+
+  override AccessPathFrontNil getFront() { result = TFrontNil(t) }
+
+  override AccessPathApproxNil getApprox() { result = TNil(t) }
+
+  override int length() { result = 0 }
+
+  override string toString() { result = concat(": " + ppReprType(t)) }
+}
+
+private class AccessPathCons extends AccessPath, TAccessPathCons {
+  private TypedContent head;
+  private AccessPath tail;
+
+  AccessPathCons() { this = TAccessPathCons(head, tail) }
+
+  override TypedContent getHead() { result = head }
+
+  override AccessPath getTail() { result = tail }
+
+  override AccessPathFrontHead getFront() { result = TFrontHead(head) }
+
+  override AccessPathApproxCons getApprox() {
+    result = TConsNil(head, tail.(AccessPathNil).getType())
+    or
+    result = TConsCons(head, tail.getHead(), this.length())
+    or
+    result = TCons1(head, this.length())
+  }
+
+  override int length() { result = 1 + tail.length() }
+
+  private string toStringImpl(boolean needsSuffix) {
+    exists(DataFlowType t |
+      tail = TAccessPathNil(t) and
+      needsSuffix = false and
+      result = head.toString() + "]" + concat(" : " + ppReprType(t))
+    )
+    or
+    result = head + ", " + tail.(AccessPathCons).toStringImpl(needsSuffix)
+    or
+    exists(TypedContent tc2, TypedContent tc3, int len | tail = TAccessPathCons2(tc2, tc3, len) |
+      result = head + ", " + tc2 + ", " + tc3 + ", ... (" and len > 2 and needsSuffix = true
+      or
+      result = head + ", " + tc2 + ", " + tc3 + "]" and len = 2 and needsSuffix = false
+    )
+    or
+    exists(TypedContent tc2, int len | tail = TAccessPathCons1(tc2, len) |
+      result = head + ", " + tc2 + ", ... (" and len > 1 and needsSuffix = true
+      or
+      result = head + ", " + tc2 + "]" and len = 1 and needsSuffix = false
+    )
+  }
+
+  override string toString() {
+    result = "[" + this.toStringImpl(true) + this.length().toString() + ")]"
+    or
+    result = "[" + this.toStringImpl(false)
+  }
+}
+
+private class AccessPathCons2 extends AccessPath, TAccessPathCons2 {
+  private TypedContent head1;
+  private TypedContent head2;
+  private int len;
+
+  AccessPathCons2() { this = TAccessPathCons2(head1, head2, len) }
+
+  override TypedContent getHead() { result = head1 }
+
+  override AccessPath getTail() {
+    Stage4::consCand(head1, result.getApprox(), _) and
+    result.getHead() = head2 and
+    result.length() = len - 1
+  }
+
+  override AccessPathFrontHead getFront() { result = TFrontHead(head1) }
+
+  override AccessPathApproxCons getApprox() {
+    result = TConsCons(head1, head2, len) or
+    result = TCons1(head1, len)
+  }
+
+  override int length() { result = len }
+
+  override string toString() {
+    if len = 2
+    then result = "[" + head1.toString() + ", " + head2.toString() + "]"
+    else
+      result = "[" + head1.toString() + ", " + head2.toString() + ", ... (" + len.toString() + ")]"
+  }
+}
+
+private class AccessPathCons1 extends AccessPath, TAccessPathCons1 {
+  private TypedContent head;
+  private int len;
+
+  AccessPathCons1() { this = TAccessPathCons1(head, len) }
+
+  override TypedContent getHead() { result = head }
+
+  override AccessPath getTail() {
+    Stage4::consCand(head, result.getApprox(), _) and result.length() = len - 1
+  }
+
+  override AccessPathFrontHead getFront() { result = TFrontHead(head) }
+
+  override AccessPathApproxCons getApprox() { result = TCons1(head, len) }
+
+  override int length() { result = len }
+
+  override string toString() {
+    if len = 1
+    then result = "[" + head.toString() + "]"
+    else result = "[" + head.toString() + ", ... (" + len.toString() + ")]"
+  }
+}
+
+/**
+ * A `Node` augmented with a call context (except for sinks), an access path, and a configuration.
+ * Only those `PathNode`s that are reachable from a source are generated.
+ */
+class PathNode extends TPathNode {
+  /** Gets a textual representation of this element. */
+  string toString() { none() }
+
+  /**
+   * Gets a textual representation of this element, including a textual
+   * representation of the call context.
+   */
+  string toStringWithContext() { none() }
+
+  /**
+   * Holds if this element is at the specified location.
+   * The location spans column `startcolumn` of line `startline` to
+   * column `endcolumn` of line `endline` in file `filepath`.
+   * For more information, see
+   * [Locations](https://codeql.github.com/docs/writing-codeql-queries/providing-locations-in-codeql-queries/).
+   */
+  predicate hasLocationInfo(
+    string filepath, int startline, int startcolumn, int endline, int endcolumn
+  ) {
+    none()
+  }
+
+  /** Gets the underlying `Node`. */
+  final Node getNode() { this.(PathNodeImpl).getNodeEx().projectToNode() = result }
+
+  /** Gets the `FlowState` of this node. */
+  FlowState getState() { none() }
+
+  /** Gets the associated configuration. */
+  Configuration getConfiguration() { none() }
+
+  /** Gets a successor of this node, if any. */
+  final PathNode getASuccessor() {
+    result = this.(PathNodeImpl).getANonHiddenSuccessor() and
+    reach(this) and
+    reach(result)
+  }
+
+  /** Holds if this node is a source. */
+  predicate isSource() { none() }
+}
+
+abstract private class PathNodeImpl extends PathNode {
+  abstract PathNodeImpl getASuccessorImpl();
+
+  private PathNodeImpl getASuccessorIfHidden() {
+    this.isHidden() and
+    result = this.getASuccessorImpl()
+  }
+
+  final PathNodeImpl getANonHiddenSuccessor() {
+    result = this.getASuccessorImpl().getASuccessorIfHidden*() and
+    not this.isHidden() and
+    not result.isHidden()
+  }
+
+  abstract NodeEx getNodeEx();
+
+  predicate isHidden() {
+    not this.getConfiguration().includeHiddenNodes() and
+    (
+      hiddenNode(this.getNodeEx().asNode()) and
+      not this.isSource() and
+      not this instanceof PathNodeSink
+      or
+      this.getNodeEx() instanceof TNodeImplicitRead
+    )
+  }
+
+  private string ppAp() {
+    this instanceof PathNodeSink and result = ""
+    or
+    exists(string s | s = this.(PathNodeMid).getAp().toString() |
+      if s = "" then result = "" else result = " " + s
+    )
+  }
+
+  private string ppCtx() {
+    this instanceof PathNodeSink and result = ""
+    or
+    result = " <" + this.(PathNodeMid).getCallContext().toString() + ">"
+  }
+
+  override string toString() { result = this.getNodeEx().toString() + this.ppAp() }
+
+  override string toStringWithContext() {
+    result = this.getNodeEx().toString() + this.ppAp() + this.ppCtx()
+  }
+
+  override predicate hasLocationInfo(
+    string filepath, int startline, int startcolumn, int endline, int endcolumn
+  ) {
+    this.getNodeEx().hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+  }
+}
+
+/** Holds if `n` can reach a sink. */
+private predicate directReach(PathNodeImpl n) {
+  n instanceof PathNodeSink or directReach(n.getANonHiddenSuccessor())
+}
+
+/** Holds if `n` can reach a sink or is used in a subpath that can reach a sink. */
+private predicate reach(PathNode n) { directReach(n) or Subpaths::retReach(n) }
+
+/** Holds if `n1.getASuccessor() = n2` and `n2` can reach a sink. */
+private predicate pathSucc(PathNodeImpl n1, PathNode n2) {
+  n1.getANonHiddenSuccessor() = n2 and directReach(n2)
+}
+
+private predicate pathSuccPlus(PathNode n1, PathNode n2) = fastTC(pathSucc/2)(n1, n2)
+
+/**
+ * Provides the query predicates needed to include a graph in a path-problem query.
+ */
+module PathGraph {
+  /** Holds if `(a,b)` is an edge in the graph of data flow path explanations. */
+  query predicate edges(PathNode a, PathNode b) { a.getASuccessor() = b }
+
+  /** Holds if `n` is a node in the graph of data flow path explanations. */
+  query predicate nodes(PathNode n, string key, string val) {
+    reach(n) and key = "semmle.label" and val = n.toString()
+  }
+
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple, that is, flow through
+   * a subpath between `par` and `ret` with the connecting edges `arg -> par` and
+   * `ret -> out` is summarized as the edge `arg -> out`.
+   */
+  query predicate subpaths(PathNode arg, PathNode par, PathNode ret, PathNode out) {
+    Subpaths::subpaths(arg, par, ret, out) and
+    reach(arg) and
+    reach(par) and
+    reach(ret) and
+    reach(out)
+  }
+}
+
+/**
+ * An intermediate flow graph node. This is a triple consisting of a `Node`,
+ * a `CallContext`, and a `Configuration`.
+ */
+private class PathNodeMid extends PathNodeImpl, TPathNodeMid {
+  NodeEx node;
+  FlowState state;
+  CallContext cc;
+  SummaryCtx sc;
+  AccessPath ap;
+  Configuration config;
+
+  PathNodeMid() { this = TPathNodeMid(node, state, cc, sc, ap, config) }
+
+  override NodeEx getNodeEx() { result = node }
+
+  override FlowState getState() { result = state }
+
+  CallContext getCallContext() { result = cc }
+
+  SummaryCtx getSummaryCtx() { result = sc }
+
+  AccessPath getAp() { result = ap }
+
+  override Configuration getConfiguration() { result = config }
+
+  private PathNodeMid getSuccMid() {
+    pathStep(this, result.getNodeEx(), result.getState(), result.getCallContext(),
+      result.getSummaryCtx(), result.getAp()) and
+    result.getConfiguration() = unbindConf(this.getConfiguration())
+  }
+
+  override PathNodeImpl getASuccessorImpl() {
+    // an intermediate step to another intermediate node
+    result = this.getSuccMid()
+    or
+    // a final step to a sink
+    result = this.getSuccMid().projectToSink()
+  }
+
+  override predicate isSource() {
+    sourceNode(node, state, config) and
+    (
+      if hasSourceCallCtx(config)
+      then cc instanceof CallContextSomeCall
+      else cc instanceof CallContextAny
+    ) and
+    sc instanceof SummaryCtxNone and
+    ap = TAccessPathNil(node.getDataFlowType())
+  }
+
+  predicate isAtSink() {
+    sinkNode(node, state, config) and
+    ap instanceof AccessPathNil and
+    if hasSinkCallCtx(config)
+    then
+      // For `FeatureHasSinkCallContext` the condition `cc instanceof CallContextNoCall`
+      // is exactly what we need to check. This also implies
+      // `sc instanceof SummaryCtxNone`.
+      // For `FeatureEqualSourceSinkCallContext` the initial call context was
+      // set to `CallContextSomeCall` and jumps are disallowed, so
+      // `cc instanceof CallContextNoCall` never holds. On the other hand,
+      // in this case there's never any need to enter a call except to identify
+      // a summary, so the condition in `pathIntoCallable` enforces this, which
+      // means that `sc instanceof SummaryCtxNone` holds if and only if we are
+      // in the call context of the source.
+      sc instanceof SummaryCtxNone or
+      cc instanceof CallContextNoCall
+    else any()
+  }
+
+  PathNodeSink projectToSink() {
+    this.isAtSink() and
+    result.getNodeEx() = node and
+    result.getState() = state and
+    result.getConfiguration() = unbindConf(config)
+  }
+}
+
+/**
+ * A flow graph node corresponding to a sink. This is disjoint from the
+ * intermediate nodes in order to uniquely correspond to a given sink by
+ * excluding the `CallContext`.
+ */
+private class PathNodeSink extends PathNodeImpl, TPathNodeSink {
+  NodeEx node;
+  FlowState state;
+  Configuration config;
+
+  PathNodeSink() { this = TPathNodeSink(node, state, config) }
+
+  override NodeEx getNodeEx() { result = node }
+
+  override FlowState getState() { result = state }
+
+  override Configuration getConfiguration() { result = config }
+
+  override PathNodeImpl getASuccessorImpl() { none() }
+
+  override predicate isSource() { sourceNode(node, state, config) }
+}
+
+private predicate pathNode(
+  PathNodeMid mid, NodeEx midnode, FlowState state, CallContext cc, SummaryCtx sc, AccessPath ap,
+  Configuration conf, LocalCallContext localCC
+) {
+  midnode = mid.getNodeEx() and
+  state = mid.getState() and
+  conf = mid.getConfiguration() and
+  cc = mid.getCallContext() and
+  sc = mid.getSummaryCtx() and
+  localCC =
+    getLocalCallContext(pragma[only_bind_into](pragma[only_bind_out](cc)),
+      midnode.getEnclosingCallable()) and
+  ap = mid.getAp()
+}
+
+/**
+ * Holds if data may flow from `mid` to `node`. The last step in or out of
+ * a callable is recorded by `cc`.
+ */
+pragma[nomagic]
+private predicate pathStep(
+  PathNodeMid mid, NodeEx node, FlowState state, CallContext cc, SummaryCtx sc, AccessPath ap
+) {
+  exists(NodeEx midnode, FlowState state0, Configuration conf, LocalCallContext localCC |
+    pathNode(mid, midnode, state0, cc, sc, ap, conf, localCC) and
+    localFlowBigStep(midnode, state0, node, state, true, _, conf, localCC)
+  )
+  or
+  exists(
+    AccessPath ap0, NodeEx midnode, FlowState state0, Configuration conf, LocalCallContext localCC
+  |
+    pathNode(mid, midnode, state0, cc, sc, ap0, conf, localCC) and
+    localFlowBigStep(midnode, state0, node, state, false, ap.getFront(), conf, localCC) and
+    ap0 instanceof AccessPathNil
+  )
+  or
+  jumpStep(mid.getNodeEx(), node, mid.getConfiguration()) and
+  state = mid.getState() and
+  cc instanceof CallContextAny and
+  sc instanceof SummaryCtxNone and
+  ap = mid.getAp()
+  or
+  additionalJumpStep(mid.getNodeEx(), node, mid.getConfiguration()) and
+  state = mid.getState() and
+  cc instanceof CallContextAny and
+  sc instanceof SummaryCtxNone and
+  mid.getAp() instanceof AccessPathNil and
+  ap = TAccessPathNil(node.getDataFlowType())
+  or
+  additionalJumpStateStep(mid.getNodeEx(), mid.getState(), node, state, mid.getConfiguration()) and
+  cc instanceof CallContextAny and
+  sc instanceof SummaryCtxNone and
+  mid.getAp() instanceof AccessPathNil and
+  ap = TAccessPathNil(node.getDataFlowType())
+  or
+  exists(TypedContent tc | pathStoreStep(mid, node, state, ap.pop(tc), tc, cc)) and
+  sc = mid.getSummaryCtx()
+  or
+  exists(TypedContent tc | pathReadStep(mid, node, state, ap.push(tc), tc, cc)) and
+  sc = mid.getSummaryCtx()
+  or
+  pathIntoCallable(mid, node, state, _, cc, sc, _, _) and ap = mid.getAp()
+  or
+  pathOutOfCallable(mid, node, state, cc) and ap = mid.getAp() and sc instanceof SummaryCtxNone
+  or
+  pathThroughCallable(mid, node, state, cc, ap) and sc = mid.getSummaryCtx()
+}
+
+pragma[nomagic]
+private predicate pathReadStep(
+  PathNodeMid mid, NodeEx node, FlowState state, AccessPath ap0, TypedContent tc, CallContext cc
+) {
+  ap0 = mid.getAp() and
+  tc = ap0.getHead() and
+  Stage4::readStepCand(mid.getNodeEx(), tc.getContent(), node, mid.getConfiguration()) and
+  state = mid.getState() and
+  cc = mid.getCallContext()
+}
+
+pragma[nomagic]
+private predicate pathStoreStep(
+  PathNodeMid mid, NodeEx node, FlowState state, AccessPath ap0, TypedContent tc, CallContext cc
+) {
+  ap0 = mid.getAp() and
+  Stage4::storeStepCand(mid.getNodeEx(), _, tc, node, _, mid.getConfiguration()) and
+  state = mid.getState() and
+  cc = mid.getCallContext()
+}
+
+private predicate pathOutOfCallable0(
+  PathNodeMid mid, ReturnPosition pos, FlowState state, CallContext innercc, AccessPathApprox apa,
+  Configuration config
+) {
+  pos = mid.getNodeEx().(RetNodeEx).getReturnPosition() and
+  state = mid.getState() and
+  innercc = mid.getCallContext() and
+  innercc instanceof CallContextNoCall and
+  apa = mid.getAp().getApprox() and
+  config = mid.getConfiguration()
+}
+
+pragma[nomagic]
+private predicate pathOutOfCallable1(
+  PathNodeMid mid, DataFlowCall call, ReturnKindExt kind, FlowState state, CallContext cc,
+  AccessPathApprox apa, Configuration config
+) {
+  exists(ReturnPosition pos, DataFlowCallable c, CallContext innercc |
+    pathOutOfCallable0(mid, pos, state, innercc, apa, config) and
+    c = pos.getCallable() and
+    kind = pos.getKind() and
+    resolveReturn(innercc, c, call)
+  |
+    if reducedViableImplInReturn(c, call) then cc = TReturn(c, call) else cc = TAnyCallContext()
+  )
+}
+
+pragma[noinline]
+private NodeEx getAnOutNodeFlow(
+  ReturnKindExt kind, DataFlowCall call, AccessPathApprox apa, Configuration config
+) {
+  result.asNode() = kind.getAnOutNode(call) and
+  Stage4::revFlow(result, _, apa, config)
+}
+
+/**
+ * Holds if data may flow from `mid` to `out`. The last step of this path
+ * is a return from a callable and is recorded by `cc`, if needed.
+ */
+pragma[noinline]
+private predicate pathOutOfCallable(PathNodeMid mid, NodeEx out, FlowState state, CallContext cc) {
+  exists(ReturnKindExt kind, DataFlowCall call, AccessPathApprox apa, Configuration config |
+    pathOutOfCallable1(mid, call, kind, state, cc, apa, config) and
+    out = getAnOutNodeFlow(kind, call, apa, config)
+  )
+}
+
+/**
+ * Holds if data may flow from `mid` to the `i`th argument of `call` in `cc`.
+ */
+pragma[noinline]
+private predicate pathIntoArg(
+  PathNodeMid mid, ParameterPosition ppos, FlowState state, CallContext cc, DataFlowCall call,
+  AccessPath ap, AccessPathApprox apa, Configuration config
+) {
+  exists(ArgNodeEx arg, ArgumentPosition apos |
+    pathNode(mid, arg, state, cc, _, ap, config, _) and
+    arg.asNode().(ArgNode).argumentOf(call, apos) and
+    apa = ap.getApprox() and
+    parameterMatch(ppos, apos)
+  )
+}
+
+pragma[nomagic]
+private predicate parameterCand(
+  DataFlowCallable callable, ParameterPosition pos, AccessPathApprox apa, Configuration config
+) {
+  exists(ParamNodeEx p |
+    Stage4::revFlow(p, _, apa, config) and
+    p.isParameterOf(callable, pos)
+  )
+}
+
+pragma[nomagic]
+private predicate pathIntoCallable0(
+  PathNodeMid mid, DataFlowCallable callable, ParameterPosition pos, FlowState state,
+  CallContext outercc, DataFlowCall call, AccessPath ap, Configuration config
+) {
+  exists(AccessPathApprox apa |
+    pathIntoArg(mid, pragma[only_bind_into](pos), state, outercc, call, ap,
+      pragma[only_bind_into](apa), pragma[only_bind_into](config)) and
+    callable = resolveCall(call, outercc) and
+    parameterCand(callable, pragma[only_bind_into](pos), pragma[only_bind_into](apa),
+      pragma[only_bind_into](config))
+  )
+}
+
+/**
+ * Holds if data may flow from `mid` to `p` through `call`. The contexts
+ * before and after entering the callable are `outercc` and `innercc`,
+ * respectively.
+ */
+pragma[nomagic]
+private predicate pathIntoCallable(
+  PathNodeMid mid, ParamNodeEx p, FlowState state, CallContext outercc, CallContextCall innercc,
+  SummaryCtx sc, DataFlowCall call, Configuration config
+) {
+  exists(ParameterPosition pos, DataFlowCallable callable, AccessPath ap |
+    pathIntoCallable0(mid, callable, pos, state, outercc, call, ap, config) and
+    p.isParameterOf(callable, pos) and
+    (
+      sc = TSummaryCtxSome(p, state, ap)
+      or
+      not exists(TSummaryCtxSome(p, state, ap)) and
+      sc = TSummaryCtxNone() and
+      // When the call contexts of source and sink needs to match then there's
+      // never any reason to enter a callable except to find a summary. See also
+      // the comment in `PathNodeMid::isAtSink`.
+      not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext
+    )
+  |
+    if recordDataFlowCallSite(call, callable)
+    then innercc = TSpecificCall(call)
+    else innercc = TSomeCall()
+  )
+}
+
+/** Holds if data may flow from a parameter given by `sc` to a return of kind `kind`. */
+pragma[nomagic]
+private predicate paramFlowsThrough(
+  ReturnKindExt kind, FlowState state, CallContextCall cc, SummaryCtxSome sc, AccessPath ap,
+  AccessPathApprox apa, Configuration config
+) {
+  exists(PathNodeMid mid, RetNodeEx ret, ParameterPosition pos |
+    pathNode(mid, ret, state, cc, sc, ap, config, _) and
+    kind = ret.getKind() and
+    apa = ap.getApprox() and
+    pos = sc.getParameterPos() and
+    // we don't expect a parameter to return stored in itself, unless explicitly allowed
+    (
+      not kind.(ParamUpdateReturnKind).getPosition() = pos
+      or
+      sc.getParamNode().allowParameterReturnInSelf()
+    )
+  )
+}
+
+pragma[nomagic]
+private predicate pathThroughCallable0(
+  DataFlowCall call, PathNodeMid mid, ReturnKindExt kind, FlowState state, CallContext cc,
+  AccessPath ap, AccessPathApprox apa, Configuration config
+) {
+  exists(CallContext innercc, SummaryCtx sc |
+    pathIntoCallable(mid, _, _, cc, innercc, sc, call, config) and
+    paramFlowsThrough(kind, state, innercc, sc, ap, apa, config)
+  )
+}
+
+/**
+ * Holds if data may flow from `mid` through a callable to the node `out`.
+ * The context `cc` is restored to its value prior to entering the callable.
+ */
+pragma[noinline]
+private predicate pathThroughCallable(
+  PathNodeMid mid, NodeEx out, FlowState state, CallContext cc, AccessPath ap
+) {
+  exists(DataFlowCall call, ReturnKindExt kind, AccessPathApprox apa, Configuration config |
+    pathThroughCallable0(call, mid, kind, state, cc, ap, apa, config) and
+    out = getAnOutNodeFlow(kind, call, apa, config)
+  )
+}
+
+private module Subpaths {
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple and `ret` is determined by
+   * `kind`, `sc`, `apout`, and `innercc`.
+   */
+  pragma[nomagic]
+  private predicate subpaths01(
+    PathNodeImpl arg, ParamNodeEx par, SummaryCtxSome sc, CallContext innercc, ReturnKindExt kind,
+    NodeEx out, FlowState sout, AccessPath apout
+  ) {
+    exists(Configuration config |
+      pathThroughCallable(arg, out, pragma[only_bind_into](sout), _, pragma[only_bind_into](apout)) and
+      pathIntoCallable(arg, par, _, _, innercc, sc, _, config) and
+      paramFlowsThrough(kind, pragma[only_bind_into](sout), innercc, sc,
+        pragma[only_bind_into](apout), _, unbindConf(config)) and
+      not arg.isHidden()
+    )
+  }
+
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple and `ret` is determined by
+   * `kind`, `sc`, `sout`, `apout`, and `innercc`.
+   */
+  pragma[nomagic]
+  private predicate subpaths02(
+    PathNode arg, ParamNodeEx par, SummaryCtxSome sc, CallContext innercc, ReturnKindExt kind,
+    NodeEx out, FlowState sout, AccessPath apout
+  ) {
+    subpaths01(arg, par, sc, innercc, kind, out, sout, apout) and
+    out.asNode() = kind.getAnOutNode(_)
+  }
+
+  pragma[nomagic]
+  private Configuration getPathNodeConf(PathNode n) { result = n.getConfiguration() }
+
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple.
+   */
+  pragma[nomagic]
+  private predicate subpaths03(
+    PathNode arg, ParamNodeEx par, PathNodeMid ret, NodeEx out, FlowState sout, AccessPath apout
+  ) {
+    exists(SummaryCtxSome sc, CallContext innercc, ReturnKindExt kind, RetNodeEx retnode |
+      subpaths02(arg, par, sc, innercc, kind, out, sout, apout) and
+      pathNode(ret, retnode, sout, innercc, sc, apout, unbindConf(getPathNodeConf(arg)), _) and
+      kind = retnode.getKind()
+    )
+  }
+
+  private PathNodeImpl localStepToHidden(PathNodeImpl n) {
+    n.getASuccessorImpl() = result and
+    result.isHidden() and
+    exists(NodeEx n1, NodeEx n2 | n1 = n.getNodeEx() and n2 = result.getNodeEx() |
+      localFlowBigStep(n1, _, n2, _, _, _, _, _) or
+      store(n1, _, n2, _, _) or
+      readSet(n1, _, n2, _)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate hasSuccessor(PathNodeImpl pred, PathNodeMid succ, NodeEx succNode) {
+    succ = pred.getANonHiddenSuccessor() and
+    succNode = succ.getNodeEx()
+  }
+
+  /**
+   * Holds if `(arg, par, ret, out)` forms a subpath-tuple, that is, flow through
+   * a subpath between `par` and `ret` with the connecting edges `arg -> par` and
+   * `ret -> out` is summarized as the edge `arg -> out`.
+   */
+  predicate subpaths(PathNodeImpl arg, PathNodeImpl par, PathNodeImpl ret, PathNode out) {
+    exists(ParamNodeEx p, NodeEx o, FlowState sout, AccessPath apout, PathNodeMid out0 |
+      pragma[only_bind_into](arg).getANonHiddenSuccessor() = pragma[only_bind_into](out0) and
+      subpaths03(pragma[only_bind_into](arg), p, localStepToHidden*(ret), o, sout, apout) and
+      hasSuccessor(pragma[only_bind_into](arg), par, p) and
+      not ret.isHidden() and
+      pathNode(out0, o, sout, _, _, apout, _, _)
+    |
+      out = out0 or out = out0.projectToSink()
+    )
+  }
+
+  /**
+   * Holds if `n` can reach a return node in a summarized subpath that can reach a sink.
+   */
+  predicate retReach(PathNodeImpl n) {
+    exists(PathNode out | subpaths(_, _, n, out) | directReach(out) or retReach(out))
+    or
+    exists(PathNodeImpl mid |
+      retReach(mid) and
+      n.getANonHiddenSuccessor() = mid and
+      not subpaths(_, mid, _, _)
+    )
+  }
+}
+
+/**
+ * Holds if data can flow (inter-procedurally) from `source` to `sink`.
+ *
+ * Will only have results if `configuration` has non-empty sources and
+ * sinks.
+ */
+private predicate flowsTo(
+  PathNode flowsource, PathNodeSink flowsink, Node source, Node sink, Configuration configuration
+) {
+  flowsource.isSource() and
+  flowsource.getConfiguration() = configuration and
+  flowsource.(PathNodeImpl).getNodeEx().asNode() = source and
+  (flowsource = flowsink or pathSuccPlus(flowsource, flowsink)) and
+  flowsink.getNodeEx().asNode() = sink
+}
+
+/**
+ * Holds if data can flow (inter-procedurally) from `source` to `sink`.
+ *
+ * Will only have results if `configuration` has non-empty sources and
+ * sinks.
+ */
+predicate flowsTo(Node source, Node sink, Configuration configuration) {
+  flowsTo(_, _, source, sink, configuration)
+}
+
+private predicate finalStats(
+  boolean fwd, int nodes, int fields, int conscand, int states, int tuples
+) {
+  fwd = true and
+  nodes = count(NodeEx n0 | exists(PathNodeImpl pn | pn.getNodeEx() = n0)) and
+  fields = count(TypedContent f0 | exists(PathNodeMid pn | pn.getAp().getHead() = f0)) and
+  conscand = count(AccessPath ap | exists(PathNodeMid pn | pn.getAp() = ap)) and
+  states = count(FlowState state | exists(PathNodeMid pn | pn.getState() = state)) and
+  tuples = count(PathNode pn)
+  or
+  fwd = false and
+  nodes = count(NodeEx n0 | exists(PathNodeImpl pn | pn.getNodeEx() = n0 and reach(pn))) and
+  fields = count(TypedContent f0 | exists(PathNodeMid pn | pn.getAp().getHead() = f0 and reach(pn))) and
+  conscand = count(AccessPath ap | exists(PathNodeMid pn | pn.getAp() = ap and reach(pn))) and
+  states = count(FlowState state | exists(PathNodeMid pn | pn.getState() = state and reach(pn))) and
+  tuples = count(PathNode pn | reach(pn))
+}
+
+/**
+ * INTERNAL: Only for debugging.
+ *
+ * Calculates per-stage metrics for data flow.
+ */
+predicate stageStats(
+  int n, string stage, int nodes, int fields, int conscand, int states, int tuples,
+  Configuration config
+) {
+  stage = "1 Fwd" and
+  n = 10 and
+  Stage1::stats(true, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "1 Rev" and
+  n = 15 and
+  Stage1::stats(false, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "2 Fwd" and
+  n = 20 and
+  Stage2::stats(true, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "2 Rev" and
+  n = 25 and
+  Stage2::stats(false, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "3 Fwd" and
+  n = 30 and
+  Stage3::stats(true, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "3 Rev" and
+  n = 35 and
+  Stage3::stats(false, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "4 Fwd" and
+  n = 40 and
+  Stage4::stats(true, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "4 Rev" and
+  n = 45 and
+  Stage4::stats(false, nodes, fields, conscand, states, tuples, config)
+  or
+  stage = "5 Fwd" and n = 50 and finalStats(true, nodes, fields, conscand, states, tuples)
+  or
+  stage = "5 Rev" and n = 55 and finalStats(false, nodes, fields, conscand, states, tuples)
+}
+
+private module FlowExploration {
+  private predicate callableStep(DataFlowCallable c1, DataFlowCallable c2, Configuration config) {
+    exists(NodeEx node1, NodeEx node2 |
+      jumpStep(node1, node2, config)
+      or
+      additionalJumpStep(node1, node2, config)
+      or
+      additionalJumpStateStep(node1, _, node2, _, config)
+      or
+      // flow into callable
+      viableParamArgEx(_, node2, node1)
+      or
+      // flow out of a callable
+      viableReturnPosOutEx(_, node1.(RetNodeEx).getReturnPosition(), node2)
+    |
+      c1 = node1.getEnclosingCallable() and
+      c2 = node2.getEnclosingCallable() and
+      c1 != c2
+    )
+  }
+
+  private predicate interestingCallableSrc(DataFlowCallable c, Configuration config) {
+    exists(Node n | config.isSource(n) or config.isSource(n, _) | c = getNodeEnclosingCallable(n))
+    or
+    exists(DataFlowCallable mid |
+      interestingCallableSrc(mid, config) and callableStep(mid, c, config)
+    )
+  }
+
+  private predicate interestingCallableSink(DataFlowCallable c, Configuration config) {
+    exists(Node n | config.isSink(n) or config.isSink(n, _) | c = getNodeEnclosingCallable(n))
+    or
+    exists(DataFlowCallable mid |
+      interestingCallableSink(mid, config) and callableStep(c, mid, config)
+    )
+  }
+
+  private newtype TCallableExt =
+    TCallable(DataFlowCallable c, Configuration config) {
+      interestingCallableSrc(c, config) or
+      interestingCallableSink(c, config)
+    } or
+    TCallableSrc() or
+    TCallableSink()
+
+  private predicate callableExtSrc(TCallableSrc src) { any() }
+
+  private predicate callableExtSink(TCallableSink sink) { any() }
+
+  private predicate callableExtStepFwd(TCallableExt ce1, TCallableExt ce2) {
+    exists(DataFlowCallable c1, DataFlowCallable c2, Configuration config |
+      callableStep(c1, c2, config) and
+      ce1 = TCallable(c1, pragma[only_bind_into](config)) and
+      ce2 = TCallable(c2, pragma[only_bind_into](config))
+    )
+    or
+    exists(Node n, Configuration config |
+      ce1 = TCallableSrc() and
+      (config.isSource(n) or config.isSource(n, _)) and
+      ce2 = TCallable(getNodeEnclosingCallable(n), config)
+    )
+    or
+    exists(Node n, Configuration config |
+      ce2 = TCallableSink() and
+      (config.isSink(n) or config.isSink(n, _)) and
+      ce1 = TCallable(getNodeEnclosingCallable(n), config)
+    )
+  }
+
+  private predicate callableExtStepRev(TCallableExt ce1, TCallableExt ce2) {
+    callableExtStepFwd(ce2, ce1)
+  }
+
+  private int distSrcExt(TCallableExt c) =
+    shortestDistances(callableExtSrc/1, callableExtStepFwd/2)(_, c, result)
+
+  private int distSinkExt(TCallableExt c) =
+    shortestDistances(callableExtSink/1, callableExtStepRev/2)(_, c, result)
+
+  private int distSrc(DataFlowCallable c, Configuration config) {
+    result = distSrcExt(TCallable(c, config)) - 1
+  }
+
+  private int distSink(DataFlowCallable c, Configuration config) {
+    result = distSinkExt(TCallable(c, config)) - 1
+  }
+
+  private newtype TPartialAccessPath =
+    TPartialNil(DataFlowType t) or
+    TPartialCons(TypedContent tc, int len) { len in [1 .. accessPathLimit()] }
+
+  /**
+   * Conceptually a list of `TypedContent`s followed by a `Type`, but only the first
+   * element of the list and its length are tracked. If data flows from a source to
+   * a given node with a given `AccessPath`, this indicates the sequence of
+   * dereference operations needed to get from the value in the node to the
+   * tracked object. The final type indicates the type of the tracked object.
+   */
+  private class PartialAccessPath extends TPartialAccessPath {
+    abstract string toString();
+
+    TypedContent getHead() { this = TPartialCons(result, _) }
+
+    int len() {
+      this = TPartialNil(_) and result = 0
+      or
+      this = TPartialCons(_, result)
+    }
+
+    DataFlowType getType() {
+      this = TPartialNil(result)
+      or
+      exists(TypedContent head | this = TPartialCons(head, _) | result = head.getContainerType())
+    }
+  }
+
+  private class PartialAccessPathNil extends PartialAccessPath, TPartialNil {
+    override string toString() {
+      exists(DataFlowType t | this = TPartialNil(t) | result = concat(": " + ppReprType(t)))
+    }
+  }
+
+  private class PartialAccessPathCons extends PartialAccessPath, TPartialCons {
+    override string toString() {
+      exists(TypedContent tc, int len | this = TPartialCons(tc, len) |
+        if len = 1
+        then result = "[" + tc.toString() + "]"
+        else result = "[" + tc.toString() + ", ... (" + len.toString() + ")]"
+      )
+    }
+  }
+
+  private newtype TRevPartialAccessPath =
+    TRevPartialNil() or
+    TRevPartialCons(Content c, int len) { len in [1 .. accessPathLimit()] }
+
+  /**
+   * Conceptually a list of `Content`s, but only the first
+   * element of the list and its length are tracked.
+   */
+  private class RevPartialAccessPath extends TRevPartialAccessPath {
+    abstract string toString();
+
+    Content getHead() { this = TRevPartialCons(result, _) }
+
+    int len() {
+      this = TRevPartialNil() and result = 0
+      or
+      this = TRevPartialCons(_, result)
+    }
+  }
+
+  private class RevPartialAccessPathNil extends RevPartialAccessPath, TRevPartialNil {
+    override string toString() { result = "" }
+  }
+
+  private class RevPartialAccessPathCons extends RevPartialAccessPath, TRevPartialCons {
+    override string toString() {
+      exists(Content c, int len | this = TRevPartialCons(c, len) |
+        if len = 1
+        then result = "[" + c.toString() + "]"
+        else result = "[" + c.toString() + ", ... (" + len.toString() + ")]"
+      )
+    }
+  }
+
+  private predicate relevantState(FlowState state) {
+    sourceNode(_, state, _) or
+    sinkNode(_, state, _) or
+    additionalLocalStateStep(_, state, _, _, _) or
+    additionalLocalStateStep(_, _, _, state, _) or
+    additionalJumpStateStep(_, state, _, _, _) or
+    additionalJumpStateStep(_, _, _, state, _)
+  }
+
+  private newtype TSummaryCtx1 =
+    TSummaryCtx1None() or
+    TSummaryCtx1Param(ParamNodeEx p)
+
+  private newtype TSummaryCtx2 =
+    TSummaryCtx2None() or
+    TSummaryCtx2Some(FlowState s) { relevantState(s) }
+
+  private newtype TSummaryCtx3 =
+    TSummaryCtx3None() or
+    TSummaryCtx3Some(PartialAccessPath ap)
+
+  private newtype TRevSummaryCtx1 =
+    TRevSummaryCtx1None() or
+    TRevSummaryCtx1Some(ReturnPosition pos)
+
+  private newtype TRevSummaryCtx2 =
+    TRevSummaryCtx2None() or
+    TRevSummaryCtx2Some(FlowState s) { relevantState(s) }
+
+  private newtype TRevSummaryCtx3 =
+    TRevSummaryCtx3None() or
+    TRevSummaryCtx3Some(RevPartialAccessPath ap)
+
+  private newtype TPartialPathNode =
+    TPartialPathNodeFwd(
+      NodeEx node, FlowState state, CallContext cc, TSummaryCtx1 sc1, TSummaryCtx2 sc2,
+      TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config
+    ) {
+      sourceNode(node, state, config) and
+      cc instanceof CallContextAny and
+      sc1 = TSummaryCtx1None() and
+      sc2 = TSummaryCtx2None() and
+      sc3 = TSummaryCtx3None() and
+      ap = TPartialNil(node.getDataFlowType()) and
+      exists(config.explorationLimit())
+      or
+      partialPathNodeMk0(node, state, cc, sc1, sc2, sc3, ap, config) and
+      distSrc(node.getEnclosingCallable(), config) <= config.explorationLimit()
+    } or
+    TPartialPathNodeRev(
+      NodeEx node, FlowState state, TRevSummaryCtx1 sc1, TRevSummaryCtx2 sc2, TRevSummaryCtx3 sc3,
+      RevPartialAccessPath ap, Configuration config
+    ) {
+      sinkNode(node, state, config) and
+      sc1 = TRevSummaryCtx1None() and
+      sc2 = TRevSummaryCtx2None() and
+      sc3 = TRevSummaryCtx3None() and
+      ap = TRevPartialNil() and
+      exists(config.explorationLimit())
+      or
+      exists(PartialPathNodeRev mid |
+        revPartialPathStep(mid, node, state, sc1, sc2, sc3, ap, config) and
+        not clearsContentEx(node, ap.getHead()) and
+        (
+          notExpectsContent(node) or
+          expectsContentEx(node, ap.getHead())
+        ) and
+        not fullBarrier(node, config) and
+        not stateBarrier(node, state, config) and
+        distSink(node.getEnclosingCallable(), config) <= config.explorationLimit()
+      )
+    }
+
+  pragma[nomagic]
+  private predicate partialPathNodeMk0(
+    NodeEx node, FlowState state, CallContext cc, TSummaryCtx1 sc1, TSummaryCtx2 sc2,
+    TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config
+  ) {
+    exists(PartialPathNodeFwd mid |
+      partialPathStep(mid, node, state, cc, sc1, sc2, sc3, ap, config) and
+      not fullBarrier(node, config) and
+      not stateBarrier(node, state, config) and
+      not clearsContentEx(node, ap.getHead().getContent()) and
+      (
+        notExpectsContent(node) or
+        expectsContentEx(node, ap.getHead().getContent())
+      ) and
+      if node.asNode() instanceof CastingNode
+      then compatibleTypes(node.getDataFlowType(), ap.getType())
+      else any()
+    )
+  }
+
+  /**
+   * A `Node` augmented with a call context, an access path, and a configuration.
+   */
+  class PartialPathNode extends TPartialPathNode {
+    /** Gets a textual representation of this element. */
+    string toString() { result = this.getNodeEx().toString() + this.ppAp() }
+
+    /**
+     * Gets a textual representation of this element, including a textual
+     * representation of the call context.
+     */
+    string toStringWithContext() {
+      result = this.getNodeEx().toString() + this.ppAp() + this.ppCtx()
+    }
+
+    /**
+     * Holds if this element is at the specified location.
+     * The location spans column `startcolumn` of line `startline` to
+     * column `endcolumn` of line `endline` in file `filepath`.
+     * For more information, see
+     * [Locations](https://codeql.github.com/docs/writing-codeql-queries/providing-locations-in-codeql-queries/).
+     */
+    predicate hasLocationInfo(
+      string filepath, int startline, int startcolumn, int endline, int endcolumn
+    ) {
+      this.getNodeEx().hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+    }
+
+    /** Gets the underlying `Node`. */
+    final Node getNode() { this.getNodeEx().projectToNode() = result }
+
+    FlowState getState() { none() }
+
+    private NodeEx getNodeEx() {
+      result = this.(PartialPathNodeFwd).getNodeEx() or
+      result = this.(PartialPathNodeRev).getNodeEx()
+    }
+
+    /** Gets the associated configuration. */
+    Configuration getConfiguration() { none() }
+
+    /** Gets a successor of this node, if any. */
+    PartialPathNode getASuccessor() { none() }
+
+    /**
+     * Gets the approximate distance to the nearest source measured in number
+     * of interprocedural steps.
+     */
+    int getSourceDistance() {
+      result = distSrc(this.getNodeEx().getEnclosingCallable(), this.getConfiguration())
+    }
+
+    /**
+     * Gets the approximate distance to the nearest sink measured in number
+     * of interprocedural steps.
+     */
+    int getSinkDistance() {
+      result = distSink(this.getNodeEx().getEnclosingCallable(), this.getConfiguration())
+    }
+
+    private string ppAp() {
+      exists(string s |
+        s = this.(PartialPathNodeFwd).getAp().toString() or
+        s = this.(PartialPathNodeRev).getAp().toString()
+      |
+        if s = "" then result = "" else result = " " + s
+      )
+    }
+
+    private string ppCtx() {
+      result = " <" + this.(PartialPathNodeFwd).getCallContext().toString() + ">"
+    }
+
+    /** Holds if this is a source in a forward-flow path. */
+    predicate isFwdSource() { this.(PartialPathNodeFwd).isSource() }
+
+    /** Holds if this is a sink in a reverse-flow path. */
+    predicate isRevSink() { this.(PartialPathNodeRev).isSink() }
+  }
+
+  /**
+   * Provides the query predicates needed to include a graph in a path-problem query.
+   */
+  module PartialPathGraph {
+    /** Holds if `(a,b)` is an edge in the graph of data flow path explanations. */
+    query predicate edges(PartialPathNode a, PartialPathNode b) { a.getASuccessor() = b }
+  }
+
+  private class PartialPathNodeFwd extends PartialPathNode, TPartialPathNodeFwd {
+    NodeEx node;
+    FlowState state;
+    CallContext cc;
+    TSummaryCtx1 sc1;
+    TSummaryCtx2 sc2;
+    TSummaryCtx3 sc3;
+    PartialAccessPath ap;
+    Configuration config;
+
+    PartialPathNodeFwd() { this = TPartialPathNodeFwd(node, state, cc, sc1, sc2, sc3, ap, config) }
+
+    NodeEx getNodeEx() { result = node }
+
+    override FlowState getState() { result = state }
+
+    CallContext getCallContext() { result = cc }
+
+    TSummaryCtx1 getSummaryCtx1() { result = sc1 }
+
+    TSummaryCtx2 getSummaryCtx2() { result = sc2 }
+
+    TSummaryCtx3 getSummaryCtx3() { result = sc3 }
+
+    PartialAccessPath getAp() { result = ap }
+
+    override Configuration getConfiguration() { result = config }
+
+    override PartialPathNodeFwd getASuccessor() {
+      partialPathStep(this, result.getNodeEx(), result.getState(), result.getCallContext(),
+        result.getSummaryCtx1(), result.getSummaryCtx2(), result.getSummaryCtx3(), result.getAp(),
+        result.getConfiguration())
+    }
+
+    predicate isSource() {
+      sourceNode(node, state, config) and
+      cc instanceof CallContextAny and
+      sc1 = TSummaryCtx1None() and
+      sc2 = TSummaryCtx2None() and
+      sc3 = TSummaryCtx3None() and
+      ap instanceof TPartialNil
+    }
+  }
+
+  private class PartialPathNodeRev extends PartialPathNode, TPartialPathNodeRev {
+    NodeEx node;
+    FlowState state;
+    TRevSummaryCtx1 sc1;
+    TRevSummaryCtx2 sc2;
+    TRevSummaryCtx3 sc3;
+    RevPartialAccessPath ap;
+    Configuration config;
+
+    PartialPathNodeRev() { this = TPartialPathNodeRev(node, state, sc1, sc2, sc3, ap, config) }
+
+    NodeEx getNodeEx() { result = node }
+
+    override FlowState getState() { result = state }
+
+    TRevSummaryCtx1 getSummaryCtx1() { result = sc1 }
+
+    TRevSummaryCtx2 getSummaryCtx2() { result = sc2 }
+
+    TRevSummaryCtx3 getSummaryCtx3() { result = sc3 }
+
+    RevPartialAccessPath getAp() { result = ap }
+
+    override Configuration getConfiguration() { result = config }
+
+    override PartialPathNodeRev getASuccessor() {
+      revPartialPathStep(result, this.getNodeEx(), this.getState(), this.getSummaryCtx1(),
+        this.getSummaryCtx2(), this.getSummaryCtx3(), this.getAp(), this.getConfiguration())
+    }
+
+    predicate isSink() {
+      sinkNode(node, state, config) and
+      sc1 = TRevSummaryCtx1None() and
+      sc2 = TRevSummaryCtx2None() and
+      sc3 = TRevSummaryCtx3None() and
+      ap = TRevPartialNil()
+    }
+  }
+
+  private predicate partialPathStep(
+    PartialPathNodeFwd mid, NodeEx node, FlowState state, CallContext cc, TSummaryCtx1 sc1,
+    TSummaryCtx2 sc2, TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config
+  ) {
+    not isUnreachableInCallCached(node.asNode(), cc.(CallContextSpecificCall).getCall()) and
+    (
+      localFlowStep(mid.getNodeEx(), node, config) and
+      state = mid.getState() and
+      cc = mid.getCallContext() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      ap = mid.getAp() and
+      config = mid.getConfiguration()
+      or
+      additionalLocalFlowStep(mid.getNodeEx(), node, config) and
+      state = mid.getState() and
+      cc = mid.getCallContext() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      mid.getAp() instanceof PartialAccessPathNil and
+      ap = TPartialNil(node.getDataFlowType()) and
+      config = mid.getConfiguration()
+      or
+      additionalLocalStateStep(mid.getNodeEx(), mid.getState(), node, state, config) and
+      cc = mid.getCallContext() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      mid.getAp() instanceof PartialAccessPathNil and
+      ap = TPartialNil(node.getDataFlowType()) and
+      config = mid.getConfiguration()
+    )
+    or
+    jumpStep(mid.getNodeEx(), node, config) and
+    state = mid.getState() and
+    cc instanceof CallContextAny and
+    sc1 = TSummaryCtx1None() and
+    sc2 = TSummaryCtx2None() and
+    sc3 = TSummaryCtx3None() and
+    ap = mid.getAp() and
+    config = mid.getConfiguration()
+    or
+    additionalJumpStep(mid.getNodeEx(), node, config) and
+    state = mid.getState() and
+    cc instanceof CallContextAny and
+    sc1 = TSummaryCtx1None() and
+    sc2 = TSummaryCtx2None() and
+    sc3 = TSummaryCtx3None() and
+    mid.getAp() instanceof PartialAccessPathNil and
+    ap = TPartialNil(node.getDataFlowType()) and
+    config = mid.getConfiguration()
+    or
+    additionalJumpStateStep(mid.getNodeEx(), mid.getState(), node, state, config) and
+    cc instanceof CallContextAny and
+    sc1 = TSummaryCtx1None() and
+    sc2 = TSummaryCtx2None() and
+    sc3 = TSummaryCtx3None() and
+    mid.getAp() instanceof PartialAccessPathNil and
+    ap = TPartialNil(node.getDataFlowType()) and
+    config = mid.getConfiguration()
+    or
+    partialPathStoreStep(mid, _, _, node, ap) and
+    state = mid.getState() and
+    cc = mid.getCallContext() and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    config = mid.getConfiguration()
+    or
+    exists(PartialAccessPath ap0, TypedContent tc |
+      partialPathReadStep(mid, ap0, tc, node, cc, config) and
+      state = mid.getState() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      apConsFwd(ap, tc, ap0, config)
+    )
+    or
+    partialPathIntoCallable(mid, node, state, _, cc, sc1, sc2, sc3, _, ap, config)
+    or
+    partialPathOutOfCallable(mid, node, state, cc, ap, config) and
+    sc1 = TSummaryCtx1None() and
+    sc2 = TSummaryCtx2None() and
+    sc3 = TSummaryCtx3None()
+    or
+    partialPathThroughCallable(mid, node, state, cc, ap, config) and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3()
+  }
+
+  bindingset[result, i]
+  private int unbindInt(int i) { pragma[only_bind_out](i) = pragma[only_bind_out](result) }
+
+  pragma[inline]
+  private predicate partialPathStoreStep(
+    PartialPathNodeFwd mid, PartialAccessPath ap1, TypedContent tc, NodeEx node,
+    PartialAccessPath ap2
+  ) {
+    exists(NodeEx midNode, DataFlowType contentType |
+      midNode = mid.getNodeEx() and
+      ap1 = mid.getAp() and
+      store(midNode, tc, node, contentType, mid.getConfiguration()) and
+      ap2.getHead() = tc and
+      ap2.len() = unbindInt(ap1.len() + 1) and
+      compatibleTypes(ap1.getType(), contentType)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate apConsFwd(
+    PartialAccessPath ap1, TypedContent tc, PartialAccessPath ap2, Configuration config
+  ) {
+    exists(PartialPathNodeFwd mid |
+      partialPathStoreStep(mid, ap1, tc, _, ap2) and
+      config = mid.getConfiguration()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate partialPathReadStep(
+    PartialPathNodeFwd mid, PartialAccessPath ap, TypedContent tc, NodeEx node, CallContext cc,
+    Configuration config
+  ) {
+    exists(NodeEx midNode |
+      midNode = mid.getNodeEx() and
+      ap = mid.getAp() and
+      read(midNode, tc.getContent(), node, pragma[only_bind_into](config)) and
+      ap.getHead() = tc and
+      pragma[only_bind_into](config) = mid.getConfiguration() and
+      cc = mid.getCallContext()
+    )
+  }
+
+  private predicate partialPathOutOfCallable0(
+    PartialPathNodeFwd mid, ReturnPosition pos, FlowState state, CallContext innercc,
+    PartialAccessPath ap, Configuration config
+  ) {
+    pos = mid.getNodeEx().(RetNodeEx).getReturnPosition() and
+    state = mid.getState() and
+    innercc = mid.getCallContext() and
+    innercc instanceof CallContextNoCall and
+    ap = mid.getAp() and
+    config = mid.getConfiguration()
+  }
+
+  pragma[nomagic]
+  private predicate partialPathOutOfCallable1(
+    PartialPathNodeFwd mid, DataFlowCall call, ReturnKindExt kind, FlowState state, CallContext cc,
+    PartialAccessPath ap, Configuration config
+  ) {
+    exists(ReturnPosition pos, DataFlowCallable c, CallContext innercc |
+      partialPathOutOfCallable0(mid, pos, state, innercc, ap, config) and
+      c = pos.getCallable() and
+      kind = pos.getKind() and
+      resolveReturn(innercc, c, call)
+    |
+      if reducedViableImplInReturn(c, call) then cc = TReturn(c, call) else cc = TAnyCallContext()
+    )
+  }
+
+  private predicate partialPathOutOfCallable(
+    PartialPathNodeFwd mid, NodeEx out, FlowState state, CallContext cc, PartialAccessPath ap,
+    Configuration config
+  ) {
+    exists(ReturnKindExt kind, DataFlowCall call |
+      partialPathOutOfCallable1(mid, call, kind, state, cc, ap, config)
+    |
+      out.asNode() = kind.getAnOutNode(call)
+    )
+  }
+
+  pragma[noinline]
+  private predicate partialPathIntoArg(
+    PartialPathNodeFwd mid, ParameterPosition ppos, FlowState state, CallContext cc,
+    DataFlowCall call, PartialAccessPath ap, Configuration config
+  ) {
+    exists(ArgNode arg, ArgumentPosition apos |
+      arg = mid.getNodeEx().asNode() and
+      state = mid.getState() and
+      cc = mid.getCallContext() and
+      arg.argumentOf(call, apos) and
+      ap = mid.getAp() and
+      config = mid.getConfiguration() and
+      parameterMatch(ppos, apos)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate partialPathIntoCallable0(
+    PartialPathNodeFwd mid, DataFlowCallable callable, ParameterPosition pos, FlowState state,
+    CallContext outercc, DataFlowCall call, PartialAccessPath ap, Configuration config
+  ) {
+    partialPathIntoArg(mid, pos, state, outercc, call, ap, config) and
+    callable = resolveCall(call, outercc)
+  }
+
+  private predicate partialPathIntoCallable(
+    PartialPathNodeFwd mid, ParamNodeEx p, FlowState state, CallContext outercc,
+    CallContextCall innercc, TSummaryCtx1 sc1, TSummaryCtx2 sc2, TSummaryCtx3 sc3,
+    DataFlowCall call, PartialAccessPath ap, Configuration config
+  ) {
+    exists(ParameterPosition pos, DataFlowCallable callable |
+      partialPathIntoCallable0(mid, callable, pos, state, outercc, call, ap, config) and
+      p.isParameterOf(callable, pos) and
+      sc1 = TSummaryCtx1Param(p) and
+      sc2 = TSummaryCtx2Some(state) and
+      sc3 = TSummaryCtx3Some(ap)
+    |
+      if recordDataFlowCallSite(call, callable)
+      then innercc = TSpecificCall(call)
+      else innercc = TSomeCall()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate paramFlowsThroughInPartialPath(
+    ReturnKindExt kind, FlowState state, CallContextCall cc, TSummaryCtx1 sc1, TSummaryCtx2 sc2,
+    TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config
+  ) {
+    exists(PartialPathNodeFwd mid, RetNodeEx ret |
+      mid.getNodeEx() = ret and
+      kind = ret.getKind() and
+      state = mid.getState() and
+      cc = mid.getCallContext() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      config = mid.getConfiguration() and
+      ap = mid.getAp()
+    )
+  }
+
+  pragma[noinline]
+  private predicate partialPathThroughCallable0(
+    DataFlowCall call, PartialPathNodeFwd mid, ReturnKindExt kind, FlowState state, CallContext cc,
+    PartialAccessPath ap, Configuration config
+  ) {
+    exists(CallContext innercc, TSummaryCtx1 sc1, TSummaryCtx2 sc2, TSummaryCtx3 sc3 |
+      partialPathIntoCallable(mid, _, _, cc, innercc, sc1, sc2, sc3, call, _, config) and
+      paramFlowsThroughInPartialPath(kind, state, innercc, sc1, sc2, sc3, ap, config)
+    )
+  }
+
+  private predicate partialPathThroughCallable(
+    PartialPathNodeFwd mid, NodeEx out, FlowState state, CallContext cc, PartialAccessPath ap,
+    Configuration config
+  ) {
+    exists(DataFlowCall call, ReturnKindExt kind |
+      partialPathThroughCallable0(call, mid, kind, state, cc, ap, config) and
+      out.asNode() = kind.getAnOutNode(call)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathStep(
+    PartialPathNodeRev mid, NodeEx node, FlowState state, TRevSummaryCtx1 sc1, TRevSummaryCtx2 sc2,
+    TRevSummaryCtx3 sc3, RevPartialAccessPath ap, Configuration config
+  ) {
+    localFlowStep(node, mid.getNodeEx(), config) and
+    state = mid.getState() and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    ap = mid.getAp() and
+    config = mid.getConfiguration()
+    or
+    additionalLocalFlowStep(node, mid.getNodeEx(), config) and
+    state = mid.getState() and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    mid.getAp() instanceof RevPartialAccessPathNil and
+    ap = TRevPartialNil() and
+    config = mid.getConfiguration()
+    or
+    additionalLocalStateStep(node, state, mid.getNodeEx(), mid.getState(), config) and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    mid.getAp() instanceof RevPartialAccessPathNil and
+    ap = TRevPartialNil() and
+    config = mid.getConfiguration()
+    or
+    jumpStep(node, mid.getNodeEx(), config) and
+    state = mid.getState() and
+    sc1 = TRevSummaryCtx1None() and
+    sc2 = TRevSummaryCtx2None() and
+    sc3 = TRevSummaryCtx3None() and
+    ap = mid.getAp() and
+    config = mid.getConfiguration()
+    or
+    additionalJumpStep(node, mid.getNodeEx(), config) and
+    state = mid.getState() and
+    sc1 = TRevSummaryCtx1None() and
+    sc2 = TRevSummaryCtx2None() and
+    sc3 = TRevSummaryCtx3None() and
+    mid.getAp() instanceof RevPartialAccessPathNil and
+    ap = TRevPartialNil() and
+    config = mid.getConfiguration()
+    or
+    additionalJumpStateStep(node, state, mid.getNodeEx(), mid.getState(), config) and
+    sc1 = TRevSummaryCtx1None() and
+    sc2 = TRevSummaryCtx2None() and
+    sc3 = TRevSummaryCtx3None() and
+    mid.getAp() instanceof RevPartialAccessPathNil and
+    ap = TRevPartialNil() and
+    config = mid.getConfiguration()
+    or
+    revPartialPathReadStep(mid, _, _, node, ap) and
+    state = mid.getState() and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3() and
+    config = mid.getConfiguration()
+    or
+    exists(RevPartialAccessPath ap0, Content c |
+      revPartialPathStoreStep(mid, ap0, c, node, config) and
+      state = mid.getState() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      apConsRev(ap, c, ap0, config)
+    )
+    or
+    exists(ParamNodeEx p |
+      mid.getNodeEx() = p and
+      viableParamArgEx(_, p, node) and
+      state = mid.getState() and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      sc1 = TRevSummaryCtx1None() and
+      sc2 = TRevSummaryCtx2None() and
+      sc3 = TRevSummaryCtx3None() and
+      ap = mid.getAp() and
+      config = mid.getConfiguration()
+    )
+    or
+    exists(ReturnPosition pos |
+      revPartialPathIntoReturn(mid, pos, state, sc1, sc2, sc3, _, ap, config) and
+      pos = getReturnPosition(node.asNode())
+    )
+    or
+    revPartialPathThroughCallable(mid, node, state, ap, config) and
+    sc1 = mid.getSummaryCtx1() and
+    sc2 = mid.getSummaryCtx2() and
+    sc3 = mid.getSummaryCtx3()
+  }
+
+  pragma[inline]
+  private predicate revPartialPathReadStep(
+    PartialPathNodeRev mid, RevPartialAccessPath ap1, Content c, NodeEx node,
+    RevPartialAccessPath ap2
+  ) {
+    exists(NodeEx midNode |
+      midNode = mid.getNodeEx() and
+      ap1 = mid.getAp() and
+      read(node, c, midNode, mid.getConfiguration()) and
+      ap2.getHead() = c and
+      ap2.len() = unbindInt(ap1.len() + 1)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate apConsRev(
+    RevPartialAccessPath ap1, Content c, RevPartialAccessPath ap2, Configuration config
+  ) {
+    exists(PartialPathNodeRev mid |
+      revPartialPathReadStep(mid, ap1, c, _, ap2) and
+      config = mid.getConfiguration()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathStoreStep(
+    PartialPathNodeRev mid, RevPartialAccessPath ap, Content c, NodeEx node, Configuration config
+  ) {
+    exists(NodeEx midNode, TypedContent tc |
+      midNode = mid.getNodeEx() and
+      ap = mid.getAp() and
+      store(node, tc, midNode, _, config) and
+      ap.getHead() = c and
+      config = mid.getConfiguration() and
+      tc.getContent() = c
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathIntoReturn(
+    PartialPathNodeRev mid, ReturnPosition pos, FlowState state, TRevSummaryCtx1Some sc1,
+    TRevSummaryCtx2Some sc2, TRevSummaryCtx3Some sc3, DataFlowCall call, RevPartialAccessPath ap,
+    Configuration config
+  ) {
+    exists(NodeEx out |
+      mid.getNodeEx() = out and
+      mid.getState() = state and
+      viableReturnPosOutEx(call, pos, out) and
+      sc1 = TRevSummaryCtx1Some(pos) and
+      sc2 = TRevSummaryCtx2Some(state) and
+      sc3 = TRevSummaryCtx3Some(ap) and
+      ap = mid.getAp() and
+      config = mid.getConfiguration()
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathFlowsThrough(
+    ArgumentPosition apos, FlowState state, TRevSummaryCtx1Some sc1, TRevSummaryCtx2Some sc2,
+    TRevSummaryCtx3Some sc3, RevPartialAccessPath ap, Configuration config
+  ) {
+    exists(PartialPathNodeRev mid, ParamNodeEx p, ParameterPosition ppos |
+      mid.getNodeEx() = p and
+      mid.getState() = state and
+      p.getPosition() = ppos and
+      sc1 = mid.getSummaryCtx1() and
+      sc2 = mid.getSummaryCtx2() and
+      sc3 = mid.getSummaryCtx3() and
+      ap = mid.getAp() and
+      config = mid.getConfiguration() and
+      parameterMatch(ppos, apos)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathThroughCallable0(
+    DataFlowCall call, PartialPathNodeRev mid, ArgumentPosition pos, FlowState state,
+    RevPartialAccessPath ap, Configuration config
+  ) {
+    exists(TRevSummaryCtx1Some sc1, TRevSummaryCtx2Some sc2, TRevSummaryCtx3Some sc3 |
+      revPartialPathIntoReturn(mid, _, _, sc1, sc2, sc3, call, _, config) and
+      revPartialPathFlowsThrough(pos, state, sc1, sc2, sc3, ap, config)
+    )
+  }
+
+  pragma[nomagic]
+  private predicate revPartialPathThroughCallable(
+    PartialPathNodeRev mid, ArgNodeEx node, FlowState state, RevPartialAccessPath ap,
+    Configuration config
+  ) {
+    exists(DataFlowCall call, ArgumentPosition pos |
+      revPartialPathThroughCallable0(call, mid, pos, state, ap, config) and
+      node.asNode().(ArgNode).argumentOf(call, pos)
+    )
+  }
+}
+
+import FlowExploration
+
+private predicate partialFlow(
+  PartialPathNode source, PartialPathNode node, Configuration configuration
+) {
+  source.getConfiguration() = configuration and
+  source.isFwdSource() and
+  node = source.getASuccessor+()
+}
+
+private predicate revPartialFlow(
+  PartialPathNode node, PartialPathNode sink, Configuration configuration
+) {
+  sink.getConfiguration() = configuration and
+  sink.isRevSink() and
+  node.getASuccessor+() = sink
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImplCommon.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImplCommon.qll
new file mode 100644
index 00000000000..95b34f15dad
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImplCommon.qll
@@ -0,0 +1,1374 @@
+private import DataFlowImplSpecific::Private
+private import DataFlowImplSpecific::Public
+import Cached
+
+module DataFlowImplCommonPublic {
+  /** A state value to track during data flow. */
+  class FlowState = string;
+
+  /**
+   * The default state, which is used when the state is unspecified for a source
+   * or a sink.
+   */
+  class FlowStateEmpty extends FlowState {
+    FlowStateEmpty() { this = "" }
+  }
+
+  private newtype TFlowFeature =
+    TFeatureHasSourceCallContext() or
+    TFeatureHasSinkCallContext() or
+    TFeatureEqualSourceSinkCallContext()
+
+  /** A flow configuration feature for use in `Configuration::getAFeature()`. */
+  class FlowFeature extends TFlowFeature {
+    string toString() { none() }
+  }
+
+  /**
+   * A flow configuration feature that implies that sources have some existing
+   * call context.
+   */
+  class FeatureHasSourceCallContext extends FlowFeature, TFeatureHasSourceCallContext {
+    override string toString() { result = "FeatureHasSourceCallContext" }
+  }
+
+  /**
+   * A flow configuration feature that implies that sinks have some existing
+   * call context.
+   */
+  class FeatureHasSinkCallContext extends FlowFeature, TFeatureHasSinkCallContext {
+    override string toString() { result = "FeatureHasSinkCallContext" }
+  }
+
+  /**
+   * A flow configuration feature that implies that source-sink pairs have some
+   * shared existing call context.
+   */
+  class FeatureEqualSourceSinkCallContext extends FlowFeature, TFeatureEqualSourceSinkCallContext {
+    override string toString() { result = "FeatureEqualSourceSinkCallContext" }
+  }
+}
+
+/**
+ * The cost limits for the `AccessPathFront` to `AccessPathApprox` expansion.
+ *
+ * `apLimit` bounds the acceptable fan-out, and `tupleLimit` bounds the
+ * estimated per-`AccessPathFront` tuple cost. Access paths exceeding both of
+ * these limits are represented with lower precision during pruning.
+ */
+predicate accessPathApproxCostLimits(int apLimit, int tupleLimit) {
+  apLimit = 10 and
+  tupleLimit = 10000
+}
+
+/**
+ * The cost limits for the `AccessPathApprox` to `AccessPath` expansion.
+ *
+ * `apLimit` bounds the acceptable fan-out, and `tupleLimit` bounds the
+ * estimated per-`AccessPathApprox` tuple cost. Access paths exceeding both of
+ * these limits are represented with lower precision.
+ */
+predicate accessPathCostLimits(int apLimit, int tupleLimit) {
+  apLimit = 5 and
+  tupleLimit = 1000
+}
+
+/**
+ * Holds if `arg` is an argument of `call` with an argument position that matches
+ * parameter position `ppos`.
+ */
+pragma[noinline]
+predicate argumentPositionMatch(DataFlowCall call, ArgNode arg, ParameterPosition ppos) {
+  exists(ArgumentPosition apos |
+    arg.argumentOf(call, apos) and
+    parameterMatch(ppos, apos)
+  )
+}
+
+/**
+ * Provides a simple data-flow analysis for resolving lambda calls. The analysis
+ * currently excludes read-steps, store-steps, and flow-through.
+ *
+ * The analysis uses non-linear recursion: When computing a flow path in or out
+ * of a call, we use the results of the analysis recursively to resolve lambda
+ * calls. For this reason, we cannot reuse the code from `DataFlowImpl.qll` directly.
+ */
+private module LambdaFlow {
+  pragma[noinline]
+  private predicate viableParamNonLambda(DataFlowCall call, ParameterPosition ppos, ParamNode p) {
+    p.isParameterOf(viableCallable(call), ppos)
+  }
+
+  pragma[noinline]
+  private predicate viableParamLambda(DataFlowCall call, ParameterPosition ppos, ParamNode p) {
+    p.isParameterOf(viableCallableLambda(call, _), ppos)
+  }
+
+  private predicate viableParamArgNonLambda(DataFlowCall call, ParamNode p, ArgNode arg) {
+    exists(ParameterPosition ppos |
+      viableParamNonLambda(call, ppos, p) and
+      argumentPositionMatch(call, arg, ppos)
+    )
+  }
+
+  private predicate viableParamArgLambda(DataFlowCall call, ParamNode p, ArgNode arg) {
+    exists(ParameterPosition ppos |
+      viableParamLambda(call, ppos, p) and
+      argumentPositionMatch(call, arg, ppos)
+    )
+  }
+
+  private newtype TReturnPositionSimple =
+    TReturnPositionSimple0(DataFlowCallable c, ReturnKind kind) {
+      exists(ReturnNode ret |
+        c = getNodeEnclosingCallable(ret) and
+        kind = ret.getKind()
+      )
+    }
+
+  pragma[noinline]
+  private TReturnPositionSimple getReturnPositionSimple(ReturnNode ret, ReturnKind kind) {
+    result = TReturnPositionSimple0(getNodeEnclosingCallable(ret), kind)
+  }
+
+  pragma[nomagic]
+  private TReturnPositionSimple viableReturnPosNonLambda(DataFlowCall call, ReturnKind kind) {
+    result = TReturnPositionSimple0(viableCallable(call), kind)
+  }
+
+  pragma[nomagic]
+  private TReturnPositionSimple viableReturnPosLambda(
+    DataFlowCall call, DataFlowCallOption lastCall, ReturnKind kind
+  ) {
+    result = TReturnPositionSimple0(viableCallableLambda(call, lastCall), kind)
+  }
+
+  private predicate viableReturnPosOutNonLambda(
+    DataFlowCall call, TReturnPositionSimple pos, OutNode out
+  ) {
+    exists(ReturnKind kind |
+      pos = viableReturnPosNonLambda(call, kind) and
+      out = getAnOutNode(call, kind)
+    )
+  }
+
+  private predicate viableReturnPosOutLambda(
+    DataFlowCall call, DataFlowCallOption lastCall, TReturnPositionSimple pos, OutNode out
+  ) {
+    exists(ReturnKind kind |
+      pos = viableReturnPosLambda(call, lastCall, kind) and
+      out = getAnOutNode(call, kind)
+    )
+  }
+
+  /**
+   * Holds if data can flow (inter-procedurally) from `node` (of type `t`) to
+   * the lambda call `lambdaCall`.
+   *
+   * The parameter `toReturn` indicates whether the path from `node` to
+   * `lambdaCall` goes through a return, and `toJump` whether the path goes
+   * through a jump step.
+   *
+   * The call context `lastCall` records the last call on the path from `node`
+   * to `lambdaCall`, if any. That is, `lastCall` is able to target the enclosing
+   * callable of `lambdaCall`.
+   */
+  pragma[nomagic]
+  predicate revLambdaFlow(
+    DataFlowCall lambdaCall, LambdaCallKind kind, Node node, DataFlowType t, boolean toReturn,
+    boolean toJump, DataFlowCallOption lastCall
+  ) {
+    revLambdaFlow0(lambdaCall, kind, node, t, toReturn, toJump, lastCall) and
+    if castNode(node) or node instanceof ArgNode or node instanceof ReturnNode
+    then compatibleTypes(t, getNodeDataFlowType(node))
+    else any()
+  }
+
+  pragma[nomagic]
+  predicate revLambdaFlow0(
+    DataFlowCall lambdaCall, LambdaCallKind kind, Node node, DataFlowType t, boolean toReturn,
+    boolean toJump, DataFlowCallOption lastCall
+  ) {
+    lambdaCall(lambdaCall, kind, node) and
+    t = getNodeDataFlowType(node) and
+    toReturn = false and
+    toJump = false and
+    lastCall = TDataFlowCallNone()
+    or
+    // local flow
+    exists(Node mid, DataFlowType t0 |
+      revLambdaFlow(lambdaCall, kind, mid, t0, toReturn, toJump, lastCall)
+    |
+      simpleLocalFlowStep(node, mid) and
+      t = t0
+      or
+      exists(boolean preservesValue |
+        additionalLambdaFlowStep(node, mid, preservesValue) and
+        getNodeEnclosingCallable(node) = getNodeEnclosingCallable(mid)
+      |
+        preservesValue = false and
+        t = getNodeDataFlowType(node)
+        or
+        preservesValue = true and
+        t = t0
+      )
+    )
+    or
+    // jump step
+    exists(Node mid, DataFlowType t0 |
+      revLambdaFlow(lambdaCall, kind, mid, t0, _, _, lastCall) and
+      toReturn = false and
+      toJump = true
+    |
+      jumpStepCached(node, mid) and
+      t = t0
+      or
+      exists(boolean preservesValue |
+        additionalLambdaFlowStep(node, mid, preservesValue) and
+        getNodeEnclosingCallable(node) != getNodeEnclosingCallable(mid)
+      |
+        preservesValue = false and
+        t = getNodeDataFlowType(node)
+        or
+        preservesValue = true and
+        t = t0
+      )
+    )
+    or
+    // flow into a callable
+    exists(ParamNode p, DataFlowCallOption lastCall0, DataFlowCall call |
+      revLambdaFlowIn(lambdaCall, kind, p, t, toJump, lastCall0) and
+      (
+        if lastCall0 = TDataFlowCallNone() and toJump = false
+        then lastCall = TDataFlowCallSome(call)
+        else lastCall = lastCall0
+      ) and
+      toReturn = false
+    |
+      viableParamArgNonLambda(call, p, node)
+      or
+      viableParamArgLambda(call, p, node) // non-linear recursion
+    )
+    or
+    // flow out of a callable
+    exists(TReturnPositionSimple pos |
+      revLambdaFlowOut(lambdaCall, kind, pos, t, toJump, lastCall) and
+      getReturnPositionSimple(node, node.(ReturnNode).getKind()) = pos and
+      toReturn = true
+    )
+  }
+
+  pragma[nomagic]
+  predicate revLambdaFlowOutLambdaCall(
+    DataFlowCall lambdaCall, LambdaCallKind kind, OutNode out, DataFlowType t, boolean toJump,
+    DataFlowCall call, DataFlowCallOption lastCall
+  ) {
+    revLambdaFlow(lambdaCall, kind, out, t, _, toJump, lastCall) and
+    exists(ReturnKindExt rk |
+      out = rk.getAnOutNode(call) and
+      lambdaCall(call, _, _)
+    )
+  }
+
+  pragma[nomagic]
+  predicate revLambdaFlowOut(
+    DataFlowCall lambdaCall, LambdaCallKind kind, TReturnPositionSimple pos, DataFlowType t,
+    boolean toJump, DataFlowCallOption lastCall
+  ) {
+    exists(DataFlowCall call, OutNode out |
+      revLambdaFlow(lambdaCall, kind, out, t, _, toJump, lastCall) and
+      viableReturnPosOutNonLambda(call, pos, out)
+      or
+      // non-linear recursion
+      revLambdaFlowOutLambdaCall(lambdaCall, kind, out, t, toJump, call, lastCall) and
+      viableReturnPosOutLambda(call, _, pos, out)
+    )
+  }
+
+  pragma[nomagic]
+  predicate revLambdaFlowIn(
+    DataFlowCall lambdaCall, LambdaCallKind kind, ParamNode p, DataFlowType t, boolean toJump,
+    DataFlowCallOption lastCall
+  ) {
+    revLambdaFlow(lambdaCall, kind, p, t, false, toJump, lastCall)
+  }
+}
+
+private DataFlowCallable viableCallableExt(DataFlowCall call) {
+  result = viableCallable(call)
+  or
+  result = viableCallableLambda(call, _)
+}
+
+cached
+private module Cached {
+  /**
+   * If needed, call this predicate from `DataFlowImplSpecific.qll` in order to
+   * force a stage-dependency on the `DataFlowImplCommon.qll` stage and thereby
+   * collapsing the two stages.
+   */
+  cached
+  predicate forceCachingInSameStage() { any() }
+
+  cached
+  predicate nodeEnclosingCallable(Node n, DataFlowCallable c) { c = nodeGetEnclosingCallable(n) }
+
+  cached
+  predicate callEnclosingCallable(DataFlowCall call, DataFlowCallable c) {
+    c = call.getEnclosingCallable()
+  }
+
+  cached
+  predicate nodeDataFlowType(Node n, DataFlowType t) { t = getNodeType(n) }
+
+  cached
+  predicate jumpStepCached(Node node1, Node node2) { jumpStep(node1, node2) }
+
+  cached
+  predicate clearsContentCached(Node n, ContentSet c) { clearsContent(n, c) }
+
+  cached
+  predicate expectsContentCached(Node n, ContentSet c) { expectsContent(n, c) }
+
+  cached
+  predicate isUnreachableInCallCached(Node n, DataFlowCall call) { isUnreachableInCall(n, call) }
+
+  cached
+  predicate outNodeExt(Node n) {
+    n instanceof OutNode
+    or
+    n.(PostUpdateNode).getPreUpdateNode() instanceof ArgNode
+  }
+
+  cached
+  predicate hiddenNode(Node n) { nodeIsHidden(n) }
+
+  cached
+  OutNodeExt getAnOutNodeExt(DataFlowCall call, ReturnKindExt k) {
+    result = getAnOutNode(call, k.(ValueReturnKind).getKind())
+    or
+    exists(ArgNode arg |
+      result.(PostUpdateNode).getPreUpdateNode() = arg and
+      arg.argumentOf(call, k.(ParamUpdateReturnKind).getAMatchingArgumentPosition())
+    )
+  }
+
+  cached
+  predicate returnNodeExt(Node n, ReturnKindExt k) {
+    k = TValueReturn(n.(ReturnNode).getKind())
+    or
+    exists(ParamNode p, ParameterPosition pos |
+      parameterValueFlowsToPreUpdate(p, n) and
+      p.isParameterOf(_, pos) and
+      k = TParamUpdate(pos)
+    )
+  }
+
+  cached
+  predicate castNode(Node n) { n instanceof CastNode }
+
+  cached
+  predicate castingNode(Node n) {
+    castNode(n) or
+    n instanceof ParamNode or
+    n instanceof OutNodeExt or
+    // For reads, `x.f`, we want to check that the tracked type after the read (which
+    // is obtained by popping the head of the access path stack) is compatible with
+    // the type of `x.f`.
+    readSet(_, _, n)
+  }
+
+  cached
+  predicate parameterNode(Node p, DataFlowCallable c, ParameterPosition pos) {
+    isParameterNode(p, c, pos)
+  }
+
+  cached
+  predicate argumentNode(Node n, DataFlowCall call, ArgumentPosition pos) {
+    isArgumentNode(n, call, pos)
+  }
+
+  /**
+   * Gets a viable target for the lambda call `call`.
+   *
+   * `lastCall` records the call required to reach `call` in order for the result
+   * to be a viable target, if any.
+   */
+  cached
+  DataFlowCallable viableCallableLambda(DataFlowCall call, DataFlowCallOption lastCall) {
+    exists(Node creation, LambdaCallKind kind |
+      LambdaFlow::revLambdaFlow(call, kind, creation, _, _, _, lastCall) and
+      lambdaCreation(creation, kind, result)
+    )
+  }
+
+  /**
+   * Holds if `p` is the parameter of a viable dispatch target of `call`,
+   * and `p` has position `ppos`.
+   */
+  pragma[nomagic]
+  private predicate viableParam(DataFlowCall call, ParameterPosition ppos, ParamNode p) {
+    p.isParameterOf(viableCallableExt(call), ppos)
+  }
+
+  /**
+   * Holds if `arg` is a possible argument to `p` in `call`, taking virtual
+   * dispatch into account.
+   */
+  cached
+  predicate viableParamArg(DataFlowCall call, ParamNode p, ArgNode arg) {
+    exists(ParameterPosition ppos |
+      viableParam(call, ppos, p) and
+      argumentPositionMatch(call, arg, ppos) and
+      compatibleTypes(getNodeDataFlowType(arg), getNodeDataFlowType(p))
+    )
+  }
+
+  pragma[nomagic]
+  private ReturnPosition viableReturnPos(DataFlowCall call, ReturnKindExt kind) {
+    viableCallableExt(call) = result.getCallable() and
+    kind = result.getKind()
+  }
+
+  /**
+   * Holds if a value at return position `pos` can be returned to `out` via `call`,
+   * taking virtual dispatch into account.
+   */
+  cached
+  predicate viableReturnPosOut(DataFlowCall call, ReturnPosition pos, Node out) {
+    exists(ReturnKindExt kind |
+      pos = viableReturnPos(call, kind) and
+      out = kind.getAnOutNode(call)
+    )
+  }
+
+  /** Provides predicates for calculating flow-through summaries. */
+  private module FlowThrough {
+    /**
+     * The first flow-through approximation:
+     *
+     * - Input access paths are abstracted with a Boolean parameter
+     *   that indicates (non-)emptiness.
+     */
+    private module Cand {
+      /**
+       * Holds if `p` can flow to `node` in the same callable using only
+       * value-preserving steps.
+       *
+       * `read` indicates whether it is contents of `p` that can flow to `node`.
+       */
+      pragma[nomagic]
+      private predicate parameterValueFlowCand(ParamNode p, Node node, boolean read) {
+        p = node and
+        read = false
+        or
+        // local flow
+        exists(Node mid |
+          parameterValueFlowCand(p, mid, read) and
+          simpleLocalFlowStep(mid, node)
+        )
+        or
+        // read
+        exists(Node mid |
+          parameterValueFlowCand(p, mid, false) and
+          readSet(mid, _, node) and
+          read = true
+        )
+        or
+        // flow through: no prior read
+        exists(ArgNode arg |
+          parameterValueFlowArgCand(p, arg, false) and
+          argumentValueFlowsThroughCand(arg, node, read)
+        )
+        or
+        // flow through: no read inside method
+        exists(ArgNode arg |
+          parameterValueFlowArgCand(p, arg, read) and
+          argumentValueFlowsThroughCand(arg, node, false)
+        )
+      }
+
+      pragma[nomagic]
+      private predicate parameterValueFlowArgCand(ParamNode p, ArgNode arg, boolean read) {
+        parameterValueFlowCand(p, arg, read)
+      }
+
+      pragma[nomagic]
+      predicate parameterValueFlowsToPreUpdateCand(ParamNode p, PostUpdateNode n) {
+        parameterValueFlowCand(p, n.getPreUpdateNode(), false)
+      }
+
+      /**
+       * Holds if `p` can flow to a return node of kind `kind` in the same
+       * callable using only value-preserving steps, not taking call contexts
+       * into account.
+       *
+       * `read` indicates whether it is contents of `p` that can flow to the return
+       * node.
+       */
+      predicate parameterValueFlowReturnCand(ParamNode p, ReturnKind kind, boolean read) {
+        exists(ReturnNode ret |
+          parameterValueFlowCand(p, ret, read) and
+          kind = ret.getKind()
+        )
+      }
+
+      pragma[nomagic]
+      private predicate argumentValueFlowsThroughCand0(
+        DataFlowCall call, ArgNode arg, ReturnKind kind, boolean read
+      ) {
+        exists(ParamNode param | viableParamArg(call, param, arg) |
+          parameterValueFlowReturnCand(param, kind, read)
+        )
+      }
+
+      /**
+       * Holds if `arg` flows to `out` through a call using only value-preserving steps,
+       * not taking call contexts into account.
+       *
+       * `read` indicates whether it is contents of `arg` that can flow to `out`.
+       */
+      predicate argumentValueFlowsThroughCand(ArgNode arg, Node out, boolean read) {
+        exists(DataFlowCall call, ReturnKind kind |
+          argumentValueFlowsThroughCand0(call, arg, kind, read) and
+          out = getAnOutNode(call, kind)
+        )
+      }
+
+      predicate cand(ParamNode p, Node n) {
+        parameterValueFlowCand(p, n, _) and
+        (
+          parameterValueFlowReturnCand(p, _, _)
+          or
+          parameterValueFlowsToPreUpdateCand(p, _)
+        )
+      }
+    }
+
+    /**
+     * The final flow-through calculation:
+     *
+     * - Calculated flow is either value-preserving (`read = TReadStepTypesNone()`)
+     *   or summarized as a single read step with before and after types recorded
+     *   in the `ReadStepTypesOption` parameter.
+     * - Types are checked using the `compatibleTypes()` relation.
+     */
+    private module Final {
+      /**
+       * Holds if `p` can flow to `node` in the same callable using only
+       * value-preserving steps and possibly a single read step, not taking
+       * call contexts into account.
+       *
+       * If a read step was taken, then `read` captures the `Content`, the
+       * container type, and the content type.
+       */
+      predicate parameterValueFlow(ParamNode p, Node node, ReadStepTypesOption read) {
+        parameterValueFlow0(p, node, read) and
+        if node instanceof CastingNode
+        then
+          // normal flow through
+          read = TReadStepTypesNone() and
+          compatibleTypes(getNodeDataFlowType(p), getNodeDataFlowType(node))
+          or
+          // getter
+          compatibleTypes(read.getContentType(), getNodeDataFlowType(node))
+        else any()
+      }
+
+      pragma[nomagic]
+      private predicate parameterValueFlow0(ParamNode p, Node node, ReadStepTypesOption read) {
+        p = node and
+        Cand::cand(p, _) and
+        read = TReadStepTypesNone()
+        or
+        // local flow
+        exists(Node mid |
+          parameterValueFlow(p, mid, read) and
+          simpleLocalFlowStep(mid, node)
+        )
+        or
+        // read
+        exists(Node mid |
+          parameterValueFlow(p, mid, TReadStepTypesNone()) and
+          readStepWithTypes(mid, read.getContainerType(), read.getContent(), node,
+            read.getContentType()) and
+          Cand::parameterValueFlowReturnCand(p, _, true) and
+          compatibleTypes(getNodeDataFlowType(p), read.getContainerType())
+        )
+        or
+        parameterValueFlow0_0(TReadStepTypesNone(), p, node, read)
+      }
+
+      pragma[nomagic]
+      private predicate parameterValueFlow0_0(
+        ReadStepTypesOption mustBeNone, ParamNode p, Node node, ReadStepTypesOption read
+      ) {
+        // flow through: no prior read
+        exists(ArgNode arg |
+          parameterValueFlowArg(p, arg, mustBeNone) and
+          argumentValueFlowsThrough(arg, read, node)
+        )
+        or
+        // flow through: no read inside method
+        exists(ArgNode arg |
+          parameterValueFlowArg(p, arg, read) and
+          argumentValueFlowsThrough(arg, mustBeNone, node)
+        )
+      }
+
+      pragma[nomagic]
+      private predicate parameterValueFlowArg(ParamNode p, ArgNode arg, ReadStepTypesOption read) {
+        parameterValueFlow(p, arg, read) and
+        Cand::argumentValueFlowsThroughCand(arg, _, _)
+      }
+
+      pragma[nomagic]
+      private predicate argumentValueFlowsThrough0(
+        DataFlowCall call, ArgNode arg, ReturnKind kind, ReadStepTypesOption read
+      ) {
+        exists(ParamNode param | viableParamArg(call, param, arg) |
+          parameterValueFlowReturn(param, kind, read)
+        )
+      }
+
+      /**
+       * Holds if `arg` flows to `out` through a call using only
+       * value-preserving steps and possibly a single read step, not taking
+       * call contexts into account.
+       *
+       * If a read step was taken, then `read` captures the `Content`, the
+       * container type, and the content type.
+       */
+      pragma[nomagic]
+      predicate argumentValueFlowsThrough(ArgNode arg, ReadStepTypesOption read, Node out) {
+        exists(DataFlowCall call, ReturnKind kind |
+          argumentValueFlowsThrough0(call, arg, kind, read) and
+          out = getAnOutNode(call, kind)
+        |
+          // normal flow through
+          read = TReadStepTypesNone() and
+          compatibleTypes(getNodeDataFlowType(arg), getNodeDataFlowType(out))
+          or
+          // getter
+          compatibleTypes(getNodeDataFlowType(arg), read.getContainerType()) and
+          compatibleTypes(read.getContentType(), getNodeDataFlowType(out))
+        )
+      }
+
+      /**
+       * Holds if `arg` flows to `out` through a call using only
+       * value-preserving steps and a single read step, not taking call
+       * contexts into account, thus representing a getter-step.
+       *
+       * This predicate is exposed for testing only.
+       */
+      predicate getterStep(ArgNode arg, ContentSet c, Node out) {
+        argumentValueFlowsThrough(arg, TReadStepTypesSome(_, c, _), out)
+      }
+
+      /**
+       * Holds if `p` can flow to a return node of kind `kind` in the same
+       * callable using only value-preserving steps and possibly a single read
+       * step.
+       *
+       * If a read step was taken, then `read` captures the `Content`, the
+       * container type, and the content type.
+       */
+      private predicate parameterValueFlowReturn(
+        ParamNode p, ReturnKind kind, ReadStepTypesOption read
+      ) {
+        exists(ReturnNode ret |
+          parameterValueFlow(p, ret, read) and
+          kind = ret.getKind()
+        )
+      }
+    }
+
+    import Final
+  }
+
+  import FlowThrough
+
+  cached
+  private module DispatchWithCallContext {
+    /**
+     * Holds if the set of viable implementations that can be called by `call`
+     * might be improved by knowing the call context.
+     */
+    pragma[nomagic]
+    private predicate mayBenefitFromCallContextExt(DataFlowCall call, DataFlowCallable callable) {
+      mayBenefitFromCallContext(call, callable)
+      or
+      callEnclosingCallable(call, callable) and
+      exists(viableCallableLambda(call, TDataFlowCallSome(_)))
+    }
+
+    /**
+     * Gets a viable dispatch target of `call` in the context `ctx`. This is
+     * restricted to those `call`s for which a context might make a difference.
+     */
+    pragma[nomagic]
+    private DataFlowCallable viableImplInCallContextExt(DataFlowCall call, DataFlowCall ctx) {
+      result = viableImplInCallContext(call, ctx)
+      or
+      result = viableCallableLambda(call, TDataFlowCallSome(ctx))
+      or
+      exists(DataFlowCallable enclosing |
+        mayBenefitFromCallContextExt(call, enclosing) and
+        enclosing = viableCallableExt(ctx) and
+        result = viableCallableLambda(call, TDataFlowCallNone())
+      )
+    }
+
+    /**
+     * Holds if the call context `ctx` reduces the set of viable run-time
+     * dispatch targets of call `call` in `c`.
+     */
+    cached
+    predicate reducedViableImplInCallContext(DataFlowCall call, DataFlowCallable c, DataFlowCall ctx) {
+      exists(int tgts, int ctxtgts |
+        mayBenefitFromCallContextExt(call, c) and
+        c = viableCallableExt(ctx) and
+        ctxtgts = count(viableImplInCallContextExt(call, ctx)) and
+        tgts = strictcount(viableCallableExt(call)) and
+        ctxtgts < tgts
+      )
+    }
+
+    /**
+     * Gets a viable run-time dispatch target for the call `call` in the
+     * context `ctx`. This is restricted to those calls for which a context
+     * makes a difference.
+     */
+    cached
+    DataFlowCallable prunedViableImplInCallContext(DataFlowCall call, DataFlowCall ctx) {
+      result = viableImplInCallContextExt(call, ctx) and
+      reducedViableImplInCallContext(call, _, ctx)
+    }
+
+    /**
+     * Holds if flow returning from callable `c` to call `call` might return
+     * further and if this path restricts the set of call sites that can be
+     * returned to.
+     */
+    cached
+    predicate reducedViableImplInReturn(DataFlowCallable c, DataFlowCall call) {
+      exists(int tgts, int ctxtgts |
+        mayBenefitFromCallContextExt(call, _) and
+        c = viableCallableExt(call) and
+        ctxtgts = count(DataFlowCall ctx | c = viableImplInCallContextExt(call, ctx)) and
+        tgts = strictcount(DataFlowCall ctx | callEnclosingCallable(call, viableCallableExt(ctx))) and
+        ctxtgts < tgts
+      )
+    }
+
+    /**
+     * Gets a viable run-time dispatch target for the call `call` in the
+     * context `ctx`. This is restricted to those calls and results for which
+     * the return flow from the result to `call` restricts the possible context
+     * `ctx`.
+     */
+    cached
+    DataFlowCallable prunedViableImplInCallContextReverse(DataFlowCall call, DataFlowCall ctx) {
+      result = viableImplInCallContextExt(call, ctx) and
+      reducedViableImplInReturn(result, call)
+    }
+  }
+
+  import DispatchWithCallContext
+
+  /**
+   * Holds if `p` can flow to the pre-update node associated with post-update
+   * node `n`, in the same callable, using only value-preserving steps.
+   */
+  private predicate parameterValueFlowsToPreUpdate(ParamNode p, PostUpdateNode n) {
+    parameterValueFlow(p, n.getPreUpdateNode(), TReadStepTypesNone())
+  }
+
+  cached
+  predicate readSet(Node node1, ContentSet c, Node node2) { readStep(node1, c, node2) }
+
+  cached
+  predicate storeSet(
+    Node node1, ContentSet c, Node node2, DataFlowType contentType, DataFlowType containerType
+  ) {
+    storeStep(node1, c, node2) and
+    contentType = getNodeDataFlowType(node1) and
+    containerType = getNodeDataFlowType(node2)
+    or
+    exists(Node n1, Node n2 |
+      n1 = node1.(PostUpdateNode).getPreUpdateNode() and
+      n2 = node2.(PostUpdateNode).getPreUpdateNode()
+    |
+      argumentValueFlowsThrough(n2, TReadStepTypesSome(containerType, c, contentType), n1)
+      or
+      readSet(n2, c, n1) and
+      contentType = getNodeDataFlowType(n1) and
+      containerType = getNodeDataFlowType(n2)
+    )
+  }
+
+  private predicate store(
+    Node node1, Content c, Node node2, DataFlowType contentType, DataFlowType containerType
+  ) {
+    exists(ContentSet cs |
+      c = cs.getAStoreContent() and storeSet(node1, cs, node2, contentType, containerType)
+    )
+  }
+
+  /**
+   * Holds if data can flow from `node1` to `node2` via a direct assignment to
+   * `f`.
+   *
+   * This includes reverse steps through reads when the result of the read has
+   * been stored into, in order to handle cases like `x.f1.f2 = y`.
+   */
+  cached
+  predicate store(Node node1, TypedContent tc, Node node2, DataFlowType contentType) {
+    store(node1, tc.getContent(), node2, contentType, tc.getContainerType())
+  }
+
+  /**
+   * Holds if data can flow from `fromNode` to `toNode` because they are the post-update
+   * nodes of some function output and input respectively, where the output and input
+   * are aliases. A typical example is a function returning `this`, implementing a fluent
+   * interface.
+   */
+  private predicate reverseStepThroughInputOutputAlias(
+    PostUpdateNode fromNode, PostUpdateNode toNode
+  ) {
+    exists(Node fromPre, Node toPre |
+      fromPre = fromNode.getPreUpdateNode() and
+      toPre = toNode.getPreUpdateNode()
+    |
+      exists(DataFlowCall c |
+        // Does the language-specific simpleLocalFlowStep already model flow
+        // from function input to output?
+        fromPre = getAnOutNode(c, _) and
+        toPre.(ArgNode).argumentOf(c, _) and
+        simpleLocalFlowStep(toPre.(ArgNode), fromPre)
+      )
+      or
+      argumentValueFlowsThrough(toPre, TReadStepTypesNone(), fromPre)
+    )
+  }
+
+  cached
+  predicate simpleLocalFlowStepExt(Node node1, Node node2) {
+    simpleLocalFlowStep(node1, node2) or
+    reverseStepThroughInputOutputAlias(node1, node2)
+  }
+
+  /**
+   * Holds if the call context `call` improves virtual dispatch in `callable`.
+   */
+  cached
+  predicate recordDataFlowCallSiteDispatch(DataFlowCall call, DataFlowCallable callable) {
+    reducedViableImplInCallContext(_, callable, call)
+  }
+
+  /**
+   * Holds if the call context `call` allows us to prune unreachable nodes in `callable`.
+   */
+  cached
+  predicate recordDataFlowCallSiteUnreachable(DataFlowCall call, DataFlowCallable callable) {
+    exists(Node n | getNodeEnclosingCallable(n) = callable | isUnreachableInCallCached(n, call))
+  }
+
+  cached
+  predicate allowParameterReturnInSelfCached(ParamNode p) { allowParameterReturnInSelf(p) }
+
+  cached
+  newtype TCallContext =
+    TAnyCallContext() or
+    TSpecificCall(DataFlowCall call) { recordDataFlowCallSite(call, _) } or
+    TSomeCall() or
+    TReturn(DataFlowCallable c, DataFlowCall call) { reducedViableImplInReturn(c, call) }
+
+  cached
+  newtype TReturnPosition =
+    TReturnPosition0(DataFlowCallable c, ReturnKindExt kind) {
+      exists(ReturnNodeExt ret |
+        c = returnNodeGetEnclosingCallable(ret) and
+        kind = ret.getKind()
+      )
+    }
+
+  cached
+  newtype TLocalFlowCallContext =
+    TAnyLocalCall() or
+    TSpecificLocalCall(DataFlowCall call) { isUnreachableInCallCached(_, call) }
+
+  cached
+  newtype TReturnKindExt =
+    TValueReturn(ReturnKind kind) or
+    TParamUpdate(ParameterPosition pos) { exists(ParamNode p | p.isParameterOf(_, pos)) }
+
+  cached
+  newtype TBooleanOption =
+    TBooleanNone() or
+    TBooleanSome(boolean b) { b = true or b = false }
+
+  cached
+  newtype TDataFlowCallOption =
+    TDataFlowCallNone() or
+    TDataFlowCallSome(DataFlowCall call)
+
+  cached
+  newtype TTypedContent = MkTypedContent(Content c, DataFlowType t) { store(_, c, _, _, t) }
+
+  cached
+  newtype TAccessPathFront =
+    TFrontNil(DataFlowType t) or
+    TFrontHead(TypedContent tc)
+
+  cached
+  newtype TAccessPathFrontOption =
+    TAccessPathFrontNone() or
+    TAccessPathFrontSome(AccessPathFront apf)
+}
+
+/**
+ * Holds if the call context `call` either improves virtual dispatch in
+ * `callable` or if it allows us to prune unreachable nodes in `callable`.
+ */
+predicate recordDataFlowCallSite(DataFlowCall call, DataFlowCallable callable) {
+  recordDataFlowCallSiteDispatch(call, callable) or
+  recordDataFlowCallSiteUnreachable(call, callable)
+}
+
+/**
+ * A `Node` at which a cast can occur such that the type should be checked.
+ */
+class CastingNode extends Node {
+  CastingNode() { castingNode(this) }
+}
+
+private predicate readStepWithTypes(
+  Node n1, DataFlowType container, ContentSet c, Node n2, DataFlowType content
+) {
+  readSet(n1, c, n2) and
+  container = getNodeDataFlowType(n1) and
+  content = getNodeDataFlowType(n2)
+}
+
+private newtype TReadStepTypesOption =
+  TReadStepTypesNone() or
+  TReadStepTypesSome(DataFlowType container, ContentSet c, DataFlowType content) {
+    readStepWithTypes(_, container, c, _, content)
+  }
+
+private class ReadStepTypesOption extends TReadStepTypesOption {
+  predicate isSome() { this instanceof TReadStepTypesSome }
+
+  DataFlowType getContainerType() { this = TReadStepTypesSome(result, _, _) }
+
+  ContentSet getContent() { this = TReadStepTypesSome(_, result, _) }
+
+  DataFlowType getContentType() { this = TReadStepTypesSome(_, _, result) }
+
+  string toString() { if this.isSome() then result = "Some(..)" else result = "None()" }
+}
+
+/**
+ * A call context to restrict the targets of virtual dispatch, prune local flow,
+ * and match the call sites of flow into a method with flow out of a method.
+ *
+ * There are four cases:
+ * - `TAnyCallContext()` : No restrictions on method flow.
+ * - `TSpecificCall(DataFlowCall call)` : Flow entered through the
+ *    given `call`. This call improves the set of viable
+ *    dispatch targets for at least one method call in the current callable
+ *    or helps prune unreachable nodes in the current callable.
+ * - `TSomeCall()` : Flow entered through a parameter. The
+ *    originating call does not improve the set of dispatch targets for any
+ *    method call in the current callable and was therefore not recorded.
+ * - `TReturn(Callable c, DataFlowCall call)` : Flow reached `call` from `c` and
+ *    this dispatch target of `call` implies a reduced set of dispatch origins
+ *    to which data may flow if it should reach a `return` statement.
+ */
+abstract class CallContext extends TCallContext {
+  abstract string toString();
+
+  /** Holds if this call context is relevant for `callable`. */
+  abstract predicate relevantFor(DataFlowCallable callable);
+}
+
+abstract class CallContextNoCall extends CallContext { }
+
+class CallContextAny extends CallContextNoCall, TAnyCallContext {
+  override string toString() { result = "CcAny" }
+
+  override predicate relevantFor(DataFlowCallable callable) { any() }
+}
+
+abstract class CallContextCall extends CallContext {
+  /** Holds if this call context may be `call`. */
+  bindingset[call]
+  abstract predicate matchesCall(DataFlowCall call);
+}
+
+class CallContextSpecificCall extends CallContextCall, TSpecificCall {
+  override string toString() {
+    exists(DataFlowCall call | this = TSpecificCall(call) | result = "CcCall(" + call + ")")
+  }
+
+  override predicate relevantFor(DataFlowCallable callable) {
+    recordDataFlowCallSite(this.getCall(), callable)
+  }
+
+  override predicate matchesCall(DataFlowCall call) { call = this.getCall() }
+
+  DataFlowCall getCall() { this = TSpecificCall(result) }
+}
+
+class CallContextSomeCall extends CallContextCall, TSomeCall {
+  override string toString() { result = "CcSomeCall" }
+
+  override predicate relevantFor(DataFlowCallable callable) {
+    exists(ParamNode p | getNodeEnclosingCallable(p) = callable)
+  }
+
+  override predicate matchesCall(DataFlowCall call) { any() }
+}
+
+class CallContextReturn extends CallContextNoCall, TReturn {
+  override string toString() {
+    exists(DataFlowCall call | this = TReturn(_, call) | result = "CcReturn(" + call + ")")
+  }
+
+  override predicate relevantFor(DataFlowCallable callable) {
+    exists(DataFlowCall call | this = TReturn(_, call) and callEnclosingCallable(call, callable))
+  }
+}
+
+/**
+ * A call context that is relevant for pruning local flow.
+ */
+abstract class LocalCallContext extends TLocalFlowCallContext {
+  abstract string toString();
+
+  /** Holds if this call context is relevant for `callable`. */
+  abstract predicate relevantFor(DataFlowCallable callable);
+}
+
+class LocalCallContextAny extends LocalCallContext, TAnyLocalCall {
+  override string toString() { result = "LocalCcAny" }
+
+  override predicate relevantFor(DataFlowCallable callable) { any() }
+}
+
+class LocalCallContextSpecificCall extends LocalCallContext, TSpecificLocalCall {
+  LocalCallContextSpecificCall() { this = TSpecificLocalCall(call) }
+
+  DataFlowCall call;
+
+  DataFlowCall getCall() { result = call }
+
+  override string toString() { result = "LocalCcCall(" + call + ")" }
+
+  override predicate relevantFor(DataFlowCallable callable) { relevantLocalCCtx(call, callable) }
+}
+
+private predicate relevantLocalCCtx(DataFlowCall call, DataFlowCallable callable) {
+  exists(Node n | getNodeEnclosingCallable(n) = callable and isUnreachableInCallCached(n, call))
+}
+
+/**
+ * Gets the local call context given the call context and the callable that
+ * the contexts apply to.
+ */
+LocalCallContext getLocalCallContext(CallContext ctx, DataFlowCallable callable) {
+  ctx.relevantFor(callable) and
+  if relevantLocalCCtx(ctx.(CallContextSpecificCall).getCall(), callable)
+  then result.(LocalCallContextSpecificCall).getCall() = ctx.(CallContextSpecificCall).getCall()
+  else result instanceof LocalCallContextAny
+}
+
+/**
+ * The value of a parameter at function entry, viewed as a node in a data
+ * flow graph.
+ */
+class ParamNode extends Node {
+  ParamNode() { parameterNode(this, _, _) }
+
+  /**
+   * Holds if this node is the parameter of callable `c` at the specified
+   * position.
+   */
+  predicate isParameterOf(DataFlowCallable c, ParameterPosition pos) { parameterNode(this, c, pos) }
+}
+
+/** A data-flow node that represents a call argument. */
+class ArgNode extends Node {
+  ArgNode() { argumentNode(this, _, _) }
+
+  /** Holds if this argument occurs at the given position in the given call. */
+  final predicate argumentOf(DataFlowCall call, ArgumentPosition pos) {
+    argumentNode(this, call, pos)
+  }
+}
+
+/**
+ * A node from which flow can return to the caller. This is either a regular
+ * `ReturnNode` or a `PostUpdateNode` corresponding to the value of a parameter.
+ */
+class ReturnNodeExt extends Node {
+  ReturnNodeExt() { returnNodeExt(this, _) }
+
+  /** Gets the kind of this returned value. */
+  ReturnKindExt getKind() { returnNodeExt(this, result) }
+}
+
+/**
+ * A node to which data can flow from a call. Either an ordinary out node
+ * or a post-update node associated with a call argument.
+ */
+class OutNodeExt extends Node {
+  OutNodeExt() { outNodeExt(this) }
+}
+
+/**
+ * An extended return kind. A return kind describes how data can be returned
+ * from a callable. This can either be through a returned value or an updated
+ * parameter.
+ */
+abstract class ReturnKindExt extends TReturnKindExt {
+  /** Gets a textual representation of this return kind. */
+  abstract string toString();
+
+  /** Gets a node corresponding to data flow out of `call`. */
+  final OutNodeExt getAnOutNode(DataFlowCall call) { result = getAnOutNodeExt(call, this) }
+}
+
+class ValueReturnKind extends ReturnKindExt, TValueReturn {
+  private ReturnKind kind;
+
+  ValueReturnKind() { this = TValueReturn(kind) }
+
+  ReturnKind getKind() { result = kind }
+
+  override string toString() { result = kind.toString() }
+}
+
+class ParamUpdateReturnKind extends ReturnKindExt, TParamUpdate {
+  private ParameterPosition pos;
+
+  ParamUpdateReturnKind() { this = TParamUpdate(pos) }
+
+  ParameterPosition getPosition() { result = pos }
+
+  pragma[nomagic]
+  ArgumentPosition getAMatchingArgumentPosition() { parameterMatch(pos, result) }
+
+  override string toString() { result = "param update " + pos }
+}
+
+/** A callable tagged with a relevant return kind. */
+class ReturnPosition extends TReturnPosition0 {
+  private DataFlowCallable c;
+  private ReturnKindExt kind;
+
+  ReturnPosition() { this = TReturnPosition0(c, kind) }
+
+  /** Gets the callable. */
+  DataFlowCallable getCallable() { result = c }
+
+  /** Gets the return kind. */
+  ReturnKindExt getKind() { result = kind }
+
+  /** Gets a textual representation of this return position. */
+  string toString() { result = "[" + kind + "] " + c }
+}
+
+/**
+ * Gets the enclosing callable of `n`. Unlike `n.getEnclosingCallable()`, this
+ * predicate ensures that joins go from `n` to the result instead of the other
+ * way around.
+ */
+pragma[inline]
+DataFlowCallable getNodeEnclosingCallable(Node n) {
+  nodeEnclosingCallable(pragma[only_bind_out](n), pragma[only_bind_into](result))
+}
+
+/** Gets the type of `n` used for type pruning. */
+pragma[inline]
+DataFlowType getNodeDataFlowType(Node n) {
+  nodeDataFlowType(pragma[only_bind_out](n), pragma[only_bind_into](result))
+}
+
+pragma[noinline]
+private DataFlowCallable returnNodeGetEnclosingCallable(ReturnNodeExt ret) {
+  result = getNodeEnclosingCallable(ret)
+}
+
+pragma[noinline]
+private ReturnPosition getReturnPosition0(ReturnNodeExt ret, ReturnKindExt kind) {
+  result.getCallable() = returnNodeGetEnclosingCallable(ret) and
+  kind = result.getKind()
+}
+
+pragma[noinline]
+ReturnPosition getReturnPosition(ReturnNodeExt ret) {
+  result = getReturnPosition0(ret, ret.getKind())
+}
+
+/**
+ * Checks whether `inner` can return to `call` in the call context `innercc`.
+ * Assumes a context of `inner = viableCallableExt(call)`.
+ */
+bindingset[innercc, inner, call]
+predicate checkCallContextReturn(CallContext innercc, DataFlowCallable inner, DataFlowCall call) {
+  innercc instanceof CallContextAny
+  or
+  exists(DataFlowCallable c0, DataFlowCall call0 |
+    callEnclosingCallable(call0, inner) and
+    innercc = TReturn(c0, call0) and
+    c0 = prunedViableImplInCallContextReverse(call0, call)
+  )
+}
+
+/**
+ * Checks whether `call` can resolve to `calltarget` in the call context `cc`.
+ * Assumes a context of `calltarget = viableCallableExt(call)`.
+ */
+bindingset[cc, call, calltarget]
+predicate checkCallContextCall(CallContext cc, DataFlowCall call, DataFlowCallable calltarget) {
+  exists(DataFlowCall ctx | cc = TSpecificCall(ctx) |
+    if reducedViableImplInCallContext(call, _, ctx)
+    then calltarget = prunedViableImplInCallContext(call, ctx)
+    else any()
+  )
+  or
+  cc instanceof CallContextSomeCall
+  or
+  cc instanceof CallContextAny
+  or
+  cc instanceof CallContextReturn
+}
+
+/**
+ * Resolves a return from `callable` in `cc` to `call`. This is equivalent to
+ * `callable = viableCallableExt(call) and checkCallContextReturn(cc, callable, call)`.
+ */
+bindingset[cc, callable]
+predicate resolveReturn(CallContext cc, DataFlowCallable callable, DataFlowCall call) {
+  cc instanceof CallContextAny and callable = viableCallableExt(call)
+  or
+  exists(DataFlowCallable c0, DataFlowCall call0 |
+    callEnclosingCallable(call0, callable) and
+    cc = TReturn(c0, call0) and
+    c0 = prunedViableImplInCallContextReverse(call0, call)
+  )
+}
+
+/**
+ * Resolves a call from `call` in `cc` to `result`. This is equivalent to
+ * `result = viableCallableExt(call) and checkCallContextCall(cc, call, result)`.
+ */
+bindingset[call, cc]
+DataFlowCallable resolveCall(DataFlowCall call, CallContext cc) {
+  exists(DataFlowCall ctx | cc = TSpecificCall(ctx) |
+    if reducedViableImplInCallContext(call, _, ctx)
+    then result = prunedViableImplInCallContext(call, ctx)
+    else result = viableCallableExt(call)
+  )
+  or
+  result = viableCallableExt(call) and cc instanceof CallContextSomeCall
+  or
+  result = viableCallableExt(call) and cc instanceof CallContextAny
+  or
+  result = viableCallableExt(call) and cc instanceof CallContextReturn
+}
+
+/** An optional Boolean value. */
+class BooleanOption extends TBooleanOption {
+  string toString() {
+    this = TBooleanNone() and result = "<none>"
+    or
+    this = TBooleanSome(any(boolean b | result = b.toString()))
+  }
+}
+
+/** An optional `DataFlowCall`. */
+class DataFlowCallOption extends TDataFlowCallOption {
+  string toString() {
+    this = TDataFlowCallNone() and
+    result = "(none)"
+    or
+    exists(DataFlowCall call |
+      this = TDataFlowCallSome(call) and
+      result = call.toString()
+    )
+  }
+}
+
+/** A `Content` tagged with the type of a containing object. */
+class TypedContent extends MkTypedContent {
+  private Content c;
+  private DataFlowType t;
+
+  TypedContent() { this = MkTypedContent(c, t) }
+
+  /** Gets the content. */
+  Content getContent() { result = c }
+
+  /** Gets the container type. */
+  DataFlowType getContainerType() { result = t }
+
+  /** Gets a textual representation of this content. */
+  string toString() { result = c.toString() }
+
+  /**
+   * Holds if access paths with this `TypedContent` at their head always should
+   * be tracked at high precision. This disables adaptive access path precision
+   * for such access paths.
+   */
+  predicate forceHighPrecision() { forceHighPrecision(c) }
+}
+
+/**
+ * The front of an access path. This is either a head or a nil.
+ */
+abstract class AccessPathFront extends TAccessPathFront {
+  abstract string toString();
+
+  abstract DataFlowType getType();
+
+  abstract boolean toBoolNonEmpty();
+
+  TypedContent getHead() { this = TFrontHead(result) }
+}
+
+class AccessPathFrontNil extends AccessPathFront, TFrontNil {
+  private DataFlowType t;
+
+  AccessPathFrontNil() { this = TFrontNil(t) }
+
+  override string toString() { result = ppReprType(t) }
+
+  override DataFlowType getType() { result = t }
+
+  override boolean toBoolNonEmpty() { result = false }
+}
+
+class AccessPathFrontHead extends AccessPathFront, TFrontHead {
+  private TypedContent tc;
+
+  AccessPathFrontHead() { this = TFrontHead(tc) }
+
+  override string toString() { result = tc.toString() }
+
+  override DataFlowType getType() { result = tc.getContainerType() }
+
+  override boolean toBoolNonEmpty() { result = true }
+}
+
+/** An optional access path front. */
+class AccessPathFrontOption extends TAccessPathFrontOption {
+  string toString() {
+    this = TAccessPathFrontNone() and result = "<none>"
+    or
+    this = TAccessPathFrontSome(any(AccessPathFront apf | result = apf.toString()))
+  }
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImplConsistency.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImplConsistency.qll
new file mode 100644
index 00000000000..d6c1bad2744
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImplConsistency.qll
@@ -0,0 +1,212 @@
+/**
+ * Provides consistency queries for checking invariants in the language-specific
+ * data-flow classes and predicates.
+ */
+
+private import DataFlowImplSpecific::Private
+private import DataFlowImplSpecific::Public
+private import tainttracking1.TaintTrackingParameter::Private
+private import tainttracking1.TaintTrackingParameter::Public
+
+module Consistency {
+  private newtype TConsistencyConfiguration = MkConsistencyConfiguration()
+
+  /** A class for configuring the consistency queries. */
+  class ConsistencyConfiguration extends TConsistencyConfiguration {
+    string toString() { none() }
+
+    /** Holds if `n` should be excluded from the consistency test `uniqueEnclosingCallable`. */
+    predicate uniqueEnclosingCallableExclude(Node n) { none() }
+
+    /** Holds if `n` should be excluded from the consistency test `uniqueNodeLocation`. */
+    predicate uniqueNodeLocationExclude(Node n) { none() }
+
+    /** Holds if `n` should be excluded from the consistency test `missingLocation`. */
+    predicate missingLocationExclude(Node n) { none() }
+
+    /** Holds if `n` should be excluded from the consistency test `postWithInFlow`. */
+    predicate postWithInFlowExclude(Node n) { none() }
+
+    /** Holds if `n` should be excluded from the consistency test `argHasPostUpdate`. */
+    predicate argHasPostUpdateExclude(ArgumentNode n) { none() }
+
+    /** Holds if `n` should be excluded from the consistency test `reverseRead`. */
+    predicate reverseReadExclude(Node n) { none() }
+  }
+
+  private class RelevantNode extends Node {
+    RelevantNode() {
+      this instanceof ArgumentNode or
+      this instanceof ParameterNode or
+      this instanceof ReturnNode or
+      this = getAnOutNode(_, _) or
+      simpleLocalFlowStep(this, _) or
+      simpleLocalFlowStep(_, this) or
+      jumpStep(this, _) or
+      jumpStep(_, this) or
+      storeStep(this, _, _) or
+      storeStep(_, _, this) or
+      readStep(this, _, _) or
+      readStep(_, _, this) or
+      defaultAdditionalTaintStep(this, _) or
+      defaultAdditionalTaintStep(_, this)
+    }
+  }
+
+  query predicate uniqueEnclosingCallable(Node n, string msg) {
+    exists(int c |
+      n instanceof RelevantNode and
+      c = count(nodeGetEnclosingCallable(n)) and
+      c != 1 and
+      not any(ConsistencyConfiguration conf).uniqueEnclosingCallableExclude(n) and
+      msg = "Node should have one enclosing callable but has " + c + "."
+    )
+  }
+
+  query predicate uniqueType(Node n, string msg) {
+    exists(int c |
+      n instanceof RelevantNode and
+      c = count(getNodeType(n)) and
+      c != 1 and
+      msg = "Node should have one type but has " + c + "."
+    )
+  }
+
+  query predicate uniqueNodeLocation(Node n, string msg) {
+    exists(int c |
+      c =
+        count(string filepath, int startline, int startcolumn, int endline, int endcolumn |
+          n.hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+        ) and
+      c != 1 and
+      not any(ConsistencyConfiguration conf).uniqueNodeLocationExclude(n) and
+      msg = "Node should have one location but has " + c + "."
+    )
+  }
+
+  query predicate missingLocation(string msg) {
+    exists(int c |
+      c =
+        strictcount(Node n |
+          not exists(string filepath, int startline, int startcolumn, int endline, int endcolumn |
+            n.hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+          ) and
+          not any(ConsistencyConfiguration conf).missingLocationExclude(n)
+        ) and
+      msg = "Nodes without location: " + c
+    )
+  }
+
+  query predicate uniqueNodeToString(Node n, string msg) {
+    exists(int c |
+      c = count(n.toString()) and
+      c != 1 and
+      msg = "Node should have one toString but has " + c + "."
+    )
+  }
+
+  query predicate missingToString(string msg) {
+    exists(int c |
+      c = strictcount(Node n | not exists(n.toString())) and
+      msg = "Nodes without toString: " + c
+    )
+  }
+
+  query predicate parameterCallable(ParameterNode p, string msg) {
+    exists(DataFlowCallable c | isParameterNode(p, c, _) and c != nodeGetEnclosingCallable(p)) and
+    msg = "Callable mismatch for parameter."
+  }
+
+  query predicate localFlowIsLocal(Node n1, Node n2, string msg) {
+    simpleLocalFlowStep(n1, n2) and
+    nodeGetEnclosingCallable(n1) != nodeGetEnclosingCallable(n2) and
+    msg = "Local flow step does not preserve enclosing callable."
+  }
+
+  private DataFlowType typeRepr() { result = getNodeType(_) }
+
+  query predicate compatibleTypesReflexive(DataFlowType t, string msg) {
+    t = typeRepr() and
+    not compatibleTypes(t, t) and
+    msg = "Type compatibility predicate is not reflexive."
+  }
+
+  query predicate unreachableNodeCCtx(Node n, DataFlowCall call, string msg) {
+    isUnreachableInCall(n, call) and
+    exists(DataFlowCallable c |
+      c = nodeGetEnclosingCallable(n) and
+      not viableCallable(call) = c
+    ) and
+    msg = "Call context for isUnreachableInCall is inconsistent with call graph."
+  }
+
+  query predicate localCallNodes(DataFlowCall call, Node n, string msg) {
+    (
+      n = getAnOutNode(call, _) and
+      msg = "OutNode and call does not share enclosing callable."
+      or
+      n.(ArgumentNode).argumentOf(call, _) and
+      msg = "ArgumentNode and call does not share enclosing callable."
+    ) and
+    nodeGetEnclosingCallable(n) != call.getEnclosingCallable()
+  }
+
+  // This predicate helps the compiler forget that in some languages
+  // it is impossible for a result of `getPreUpdateNode` to be an
+  // instance of `PostUpdateNode`.
+  private Node getPre(PostUpdateNode n) {
+    result = n.getPreUpdateNode()
+    or
+    none()
+  }
+
+  query predicate postIsNotPre(PostUpdateNode n, string msg) {
+    getPre(n) = n and
+    msg = "PostUpdateNode should not equal its pre-update node."
+  }
+
+  query predicate postHasUniquePre(PostUpdateNode n, string msg) {
+    exists(int c |
+      c = count(n.getPreUpdateNode()) and
+      c != 1 and
+      msg = "PostUpdateNode should have one pre-update node but has " + c + "."
+    )
+  }
+
+  query predicate uniquePostUpdate(Node n, string msg) {
+    1 < strictcount(PostUpdateNode post | post.getPreUpdateNode() = n) and
+    msg = "Node has multiple PostUpdateNodes."
+  }
+
+  query predicate postIsInSameCallable(PostUpdateNode n, string msg) {
+    nodeGetEnclosingCallable(n) != nodeGetEnclosingCallable(n.getPreUpdateNode()) and
+    msg = "PostUpdateNode does not share callable with its pre-update node."
+  }
+
+  private predicate hasPost(Node n) { exists(PostUpdateNode post | post.getPreUpdateNode() = n) }
+
+  query predicate reverseRead(Node n, string msg) {
+    exists(Node n2 | readStep(n, _, n2) and hasPost(n2) and not hasPost(n)) and
+    not any(ConsistencyConfiguration conf).reverseReadExclude(n) and
+    msg = "Origin of readStep is missing a PostUpdateNode."
+  }
+
+  query predicate argHasPostUpdate(ArgumentNode n, string msg) {
+    not hasPost(n) and
+    not any(ConsistencyConfiguration c).argHasPostUpdateExclude(n) and
+    msg = "ArgumentNode is missing PostUpdateNode."
+  }
+
+  // This predicate helps the compiler forget that in some languages
+  // it is impossible for a `PostUpdateNode` to be the target of
+  // `simpleLocalFlowStep`.
+  private predicate isPostUpdateNode(Node n) { n instanceof PostUpdateNode or none() }
+
+  query predicate postWithInFlow(Node n, string msg) {
+    isPostUpdateNode(n) and
+    not clearsContent(n, _) and
+    simpleLocalFlowStep(_, n) and
+    not any(ConsistencyConfiguration c).postWithInFlowExclude(n) and
+    msg = "PostUpdateNode should not be the target of local flow."
+  }
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImplSpecific.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImplSpecific.qll
new file mode 100644
index 00000000000..4ea383b20a1
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImplSpecific.qll
@@ -0,0 +1,11 @@
+/**
+ * Provides IR-specific definitions for use in the data flow library.
+ */
+module Private {
+  import DataFlowPrivate
+  import DataFlowDispatch
+}
+
+module Public {
+  import DataFlowUtil
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowPrivate.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowPrivate.qll
new file mode 100644
index 00000000000..d6b2d455dd2
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowPrivate.qll
@@ -0,0 +1,560 @@
+private import cpp as Cpp
+private import DataFlowUtil
+private import semmle.code.cpp.ir.IR
+private import DataFlowDispatch
+private import DataFlowImplConsistency
+private import semmle.code.cpp.ir.internal.IRCppLanguage
+private import SsaInternals as Ssa
+
+/** Gets the callable in which this node occurs. */
+DataFlowCallable nodeGetEnclosingCallable(Node n) { result = n.getEnclosingCallable() }
+
+/** Holds if `p` is a `ParameterNode` of `c` with position `pos`. */
+predicate isParameterNode(ParameterNode p, DataFlowCallable c, ParameterPosition pos) {
+  p.isParameterOf(c, pos)
+}
+
+/** Holds if `arg` is an `ArgumentNode` of `c` with position `pos`. */
+predicate isArgumentNode(ArgumentNode arg, DataFlowCall c, ArgumentPosition pos) {
+  arg.argumentOf(c, pos)
+}
+
+/**
+ * A data flow node that occurs as the argument of a call and is passed as-is
+ * to the callable. Instance arguments (`this` pointer) and read side effects
+ * on parameters are also included.
+ */
+abstract class ArgumentNode extends Node {
+  /**
+   * Holds if this argument occurs at the given position in the given call.
+   * The instance argument is considered to have index `-1`.
+   */
+  abstract predicate argumentOf(DataFlowCall call, ArgumentPosition pos);
+
+  /** Gets the call in which this node is an argument. */
+  DataFlowCall getCall() { this.argumentOf(result, _) }
+}
+
+/**
+ * A data flow node that occurs as the argument to a call, or an
+ * implicit `this` pointer argument.
+ */
+private class PrimaryArgumentNode extends ArgumentNode, OperandNode {
+  override ArgumentOperand op;
+
+  PrimaryArgumentNode() { exists(CallInstruction call | op = call.getAnArgumentOperand()) }
+
+  override predicate argumentOf(DataFlowCall call, ArgumentPosition pos) {
+    op = call.getArgumentOperand(pos.(DirectPosition).getIndex())
+  }
+
+  override string toStringImpl() { result = argumentOperandToString(op) }
+}
+
+private string argumentOperandToString(ArgumentOperand op) {
+  exists(Expr unconverted |
+    unconverted = op.getDef().getUnconvertedResultExpression() and
+    result = unconverted.toString()
+  )
+  or
+  // Certain instructions don't map to an unconverted result expression. For these cases
+  // we fall back to a simpler naming scheme. This can happen in IR-generated constructors.
+  not exists(op.getDef().getUnconvertedResultExpression()) and
+  (
+    result = "Argument " + op.(PositionalArgumentOperand).getIndex()
+    or
+    op instanceof ThisArgumentOperand and result = "Argument this"
+  )
+}
+
+private class SideEffectArgumentNode extends ArgumentNode, SideEffectOperandNode {
+  override predicate argumentOf(DataFlowCall dfCall, ArgumentPosition pos) {
+    this.getCallInstruction() = dfCall and
+    pos.(IndirectionPosition).getArgumentIndex() = this.getArgumentIndex() and
+    pos.(IndirectionPosition).getIndirectionIndex() = super.getIndirectionIndex()
+  }
+
+  override string toStringImpl() {
+    result = argumentOperandToString(this.getAddressOperand()) + " indirection"
+  }
+}
+
+/** A parameter position represented by an integer. */
+class ParameterPosition = Position;
+
+/** An argument position represented by an integer. */
+class ArgumentPosition = Position;
+
+class Position extends TPosition {
+  abstract string toString();
+}
+
+class DirectPosition extends Position, TDirectPosition {
+  int index;
+
+  DirectPosition() { this = TDirectPosition(index) }
+
+  override string toString() { if index = -1 then result = "this" else result = index.toString() }
+
+  int getIndex() { result = index }
+}
+
+class IndirectionPosition extends Position, TIndirectionPosition {
+  int argumentIndex;
+  int indirectionIndex;
+
+  IndirectionPosition() { this = TIndirectionPosition(argumentIndex, indirectionIndex) }
+
+  override string toString() {
+    if argumentIndex = -1
+    then if indirectionIndex > 0 then result = "this indirection" else result = "this"
+    else
+      if indirectionIndex > 0
+      then result = argumentIndex.toString() + " indirection"
+      else result = argumentIndex.toString()
+  }
+
+  int getArgumentIndex() { result = argumentIndex }
+
+  int getIndirectionIndex() { result = indirectionIndex }
+}
+
+newtype TPosition =
+  TDirectPosition(int index) { exists(any(CallInstruction c).getArgument(index)) } or
+  TIndirectionPosition(int argumentIndex, int indirectionIndex) {
+    hasOperandAndIndex(_, any(CallInstruction call).getArgumentOperand(argumentIndex),
+      indirectionIndex)
+  }
+
+private newtype TReturnKind =
+  TNormalReturnKind(int index) {
+    exists(IndirectReturnNode return |
+      return.getAddressOperand() = any(ReturnValueInstruction r).getReturnAddressOperand() and
+      index = return.getIndirectionIndex() - 1 // We subtract one because the return loads the value.
+    )
+  } or
+  TIndirectReturnKind(int argumentIndex, int indirectionIndex) {
+    exists(IndirectReturnNode return, ReturnIndirectionInstruction returnInd |
+      returnInd.hasIndex(argumentIndex) and
+      return.getAddressOperand() = returnInd.getSourceAddressOperand() and
+      indirectionIndex = return.getIndirectionIndex() - 1 // We subtract one because the return loads the value.
+    )
+  }
+
+/**
+ * A return kind. A return kind describes how a value can be returned
+ * from a callable. For C++, this is simply a function return.
+ */
+class ReturnKind extends TReturnKind {
+  /** Gets a textual representation of this return kind. */
+  abstract string toString();
+}
+
+private class NormalReturnKind extends ReturnKind, TNormalReturnKind {
+  int index;
+
+  NormalReturnKind() { this = TNormalReturnKind(index) }
+
+  override string toString() { result = "indirect return" }
+}
+
+private class IndirectReturnKind extends ReturnKind, TIndirectReturnKind {
+  int argumentIndex;
+  int indirectionIndex;
+
+  IndirectReturnKind() { this = TIndirectReturnKind(argumentIndex, indirectionIndex) }
+
+  override string toString() { result = "indirect outparam[" + argumentIndex.toString() + "]" }
+}
+
+/** A data flow node that occurs as the result of a `ReturnStmt`. */
+class ReturnNode extends Node instanceof IndirectReturnNode {
+  /** Gets the kind of this returned value. */
+  abstract ReturnKind getKind();
+}
+
+/**
+ * This predicate represents an annoying hack that we have to do. We use the
+ * `ReturnIndirectionInstruction` to determine which variables need flow back
+ * out of a function. However, the IR will unconditionally create those for a
+ * variable passed to a function even though the variable was never updated by
+ * the function. And if a function has too many `ReturnNode`s the dataflow
+ * library lowers its precision for that function by disabling field flow.
+ *
+ * So we those eliminate `ReturnNode`s that would have otherwise been created
+ * by this unconditional `ReturnIndirectionInstruction` by requiring that there
+ * must exist an SSA definition of the IR variable in the function.
+ */
+private predicate hasNonInitializeParameterDef(IRVariable v) {
+  exists(Ssa::Def def |
+    not def.getDefiningInstruction() instanceof InitializeParameterInstruction and
+    v = def.getSourceVariable().getBaseVariable().(Ssa::BaseIRVariable).getIRVariable()
+  )
+}
+
+class ReturnIndirectionNode extends IndirectReturnNode, ReturnNode {
+  override ReturnKind getKind() {
+    exists(int argumentIndex, ReturnIndirectionInstruction returnInd |
+      returnInd.hasIndex(argumentIndex) and
+      this.getAddressOperand() = returnInd.getSourceAddressOperand() and
+      result = TIndirectReturnKind(argumentIndex, this.getIndirectionIndex() - 1) and
+      hasNonInitializeParameterDef(returnInd.getIRVariable())
+    )
+    or
+    this.getAddressOperand() = any(ReturnValueInstruction r).getReturnAddressOperand() and
+    result = TNormalReturnKind(this.getIndirectionIndex() - 1)
+  }
+}
+
+private Operand fullyConvertedCallStep(Operand op) {
+  not exists(getANonConversionUse(op)) and
+  exists(Instruction instr |
+    conversionFlow(op, instr, _) and
+    result = getAUse(instr)
+  )
+}
+
+/**
+ * Gets the instruction that uses this operand, if the instruction is not
+ * ignored for dataflow purposes.
+ */
+private Instruction getUse(Operand op) {
+  result = op.getUse() and
+  not Ssa::ignoreOperand(op)
+}
+
+/** Gets a use of the instruction `instr` that is not ignored for dataflow purposes. */
+Operand getAUse(Instruction instr) {
+  result = instr.getAUse() and
+  not Ssa::ignoreOperand(result)
+}
+
+/**
+ * Gets a use of `operand` that is:
+ * - not ignored for dataflow purposes, and
+ * - not a conversion-like instruction.
+ */
+private Instruction getANonConversionUse(Operand operand) {
+  result = getUse(operand) and
+  not conversionFlow(_, result, _)
+}
+
+/**
+ * Gets the operand that represents the first use of the value of `call` following
+ * a sequnce of conversion-like instructions.
+ */
+predicate operandForfullyConvertedCall(Operand operand, CallInstruction call) {
+  exists(getANonConversionUse(operand)) and
+  (
+    operand = getAUse(call)
+    or
+    operand = fullyConvertedCallStep*(getAUse(call))
+  )
+}
+
+/**
+ * Gets the instruction that represents the first use of the value of `call` following
+ * a sequnce of conversion-like instructions.
+ *
+ * This predicate only holds if there is no suitable operand (i.e., no operand of a non-
+ * conversion instruction) to use to represent the value of `call` after conversions.
+ */
+predicate instructionForfullyConvertedCall(Instruction instr, CallInstruction call) {
+  not operandForfullyConvertedCall(_, call) and
+  (
+    // If there is no use of the call then we pick the call instruction
+    not exists(getAUse(call)) and
+    instr = call
+    or
+    // Otherwise, flow to the first non-conversion use.
+    exists(Operand operand | operand = fullyConvertedCallStep*(getAUse(call)) |
+      instr = getANonConversionUse(operand)
+    )
+  )
+}
+
+/** Holds if `node` represents the output node for `call`. */
+private predicate simpleOutNode(Node node, CallInstruction call) {
+  operandForfullyConvertedCall(node.asOperand(), call)
+  or
+  instructionForfullyConvertedCall(node.asInstruction(), call)
+}
+
+/** A data flow node that represents the output of a call. */
+class OutNode extends Node {
+  OutNode() {
+    // Return values not hidden behind indirections
+    simpleOutNode(this, _)
+    or
+    // Return values hidden behind indirections
+    this instanceof IndirectReturnOutNode
+    or
+    // Modified arguments hidden behind indirections
+    this instanceof IndirectArgumentOutNode
+  }
+
+  /** Gets the underlying call. */
+  abstract DataFlowCall getCall();
+
+  abstract ReturnKind getReturnKind();
+}
+
+private class DirectCallOutNode extends OutNode {
+  CallInstruction call;
+
+  DirectCallOutNode() { simpleOutNode(this, call) }
+
+  override DataFlowCall getCall() { result = call }
+
+  override ReturnKind getReturnKind() { result = TNormalReturnKind(0) }
+}
+
+private class IndirectCallOutNode extends OutNode, IndirectReturnOutNode {
+  override DataFlowCall getCall() { result = this.getCallInstruction() }
+
+  override ReturnKind getReturnKind() { result = TNormalReturnKind(this.getIndirectionIndex()) }
+}
+
+private class SideEffectOutNode extends OutNode, IndirectArgumentOutNode {
+  override DataFlowCall getCall() { result = this.getCallInstruction() }
+
+  override ReturnKind getReturnKind() {
+    result = TIndirectReturnKind(this.getArgumentIndex(), this.getIndirectionIndex())
+  }
+}
+
+/**
+ * Gets a node that can read the value returned from `call` with return kind
+ * `kind`.
+ */
+OutNode getAnOutNode(DataFlowCall call, ReturnKind kind) {
+  result.getCall() = call and
+  result.getReturnKind() = kind
+}
+
+/**
+ * Holds if data can flow from `node1` to `node2` in a way that loses the
+ * calling context. For example, this would happen with flow through a
+ * global or static variable.
+ */
+predicate jumpStep(Node n1, Node n2) {
+  exists(Cpp::GlobalOrNamespaceVariable v |
+    v =
+      n1.asInstruction()
+          .(StoreInstruction)
+          .getResultAddress()
+          .(VariableAddressInstruction)
+          .getAstVariable() and
+    v = n2.asVariable()
+    or
+    v =
+      n2.asInstruction()
+          .(LoadInstruction)
+          .getSourceAddress()
+          .(VariableAddressInstruction)
+          .getAstVariable() and
+    v = n1.asVariable()
+  )
+}
+
+/**
+ * Holds if data can flow from `node1` to `node2` via an assignment to `f`.
+ * Thus, `node2` references an object with a field `f` that contains the
+ * value of `node1`.
+ */
+predicate storeStep(Node node1, Content c, PostFieldUpdateNode node2) {
+  exists(int indirectionIndex1, int numberOfLoads, StoreInstruction store |
+    nodeHasInstruction(node1, store, pragma[only_bind_into](indirectionIndex1)) and
+    node2.getIndirectionIndex() = 0 and
+    numberOfLoadsFromOperand(node2.getFieldAddress(), store.getDestinationAddressOperand(),
+      numberOfLoads)
+  |
+    exists(FieldContent fc | fc = c |
+      fc.getField() = node2.getUpdatedField() and
+      fc.getIndirectionIndex() = 1 + indirectionIndex1 + numberOfLoads
+    )
+    or
+    exists(UnionContent uc | uc = c |
+      uc.getAField() = node2.getUpdatedField() and
+      uc.getIndirectionIndex() = 1 + indirectionIndex1 + numberOfLoads
+    )
+  )
+}
+
+/**
+ * Holds if `operandFrom` flows to `operandTo` using a sequence of conversion-like
+ * operations and exactly `n` `LoadInstruction` operations.
+ */
+private predicate numberOfLoadsFromOperandRec(Operand operandFrom, Operand operandTo, int ind) {
+  exists(LoadInstruction load | load.getSourceAddressOperand() = operandFrom |
+    operandTo = operandFrom and ind = 0
+    or
+    numberOfLoadsFromOperand(load.getAUse(), operandTo, ind - 1)
+  )
+  or
+  exists(Operand op, Instruction instr |
+    instr = op.getDef() and
+    conversionFlow(operandFrom, instr, _) and
+    numberOfLoadsFromOperand(op, operandTo, ind)
+  )
+}
+
+/**
+ * Holds if `operandFrom` flows to `operandTo` using a sequence of conversion-like
+ * operations and exactly `n` `LoadInstruction` operations.
+ */
+private predicate numberOfLoadsFromOperand(Operand operandFrom, Operand operandTo, int n) {
+  numberOfLoadsFromOperandRec(operandFrom, operandTo, n)
+  or
+  not any(LoadInstruction load).getSourceAddressOperand() = operandFrom and
+  not conversionFlow(operandFrom, _, _) and
+  operandFrom = operandTo and
+  n = 0
+}
+
+// Needed to join on both an operand and an index at the same time.
+pragma[noinline]
+predicate nodeHasOperand(Node node, Operand operand, int indirectionIndex) {
+  node.asOperand() = operand and indirectionIndex = 0
+  or
+  hasOperandAndIndex(node, operand, indirectionIndex)
+}
+
+// Needed to join on both an instruction and an index at the same time.
+pragma[noinline]
+predicate nodeHasInstruction(Node node, Instruction instr, int indirectionIndex) {
+  node.asInstruction() = instr and indirectionIndex = 0
+  or
+  hasInstructionAndIndex(node, instr, indirectionIndex)
+}
+
+/**
+ * Holds if data can flow from `node1` to `node2` via a read of `f`.
+ * Thus, `node1` references an object with a field `f` whose value ends up in
+ * `node2`.
+ */
+predicate readStep(Node node1, Content c, Node node2) {
+  exists(FieldAddress fa1, Operand operand, int numberOfLoads, int indirectionIndex2 |
+    nodeHasOperand(node2, operand, indirectionIndex2) and
+    nodeHasOperand(node1, fa1.getObjectAddressOperand(), _) and
+    numberOfLoadsFromOperand(fa1, operand, numberOfLoads)
+  |
+    exists(FieldContent fc | fc = c |
+      fc.getField() = fa1.getField() and
+      fc.getIndirectionIndex() = indirectionIndex2 + numberOfLoads
+    )
+    or
+    exists(UnionContent uc | uc = c |
+      uc.getAField() = fa1.getField() and
+      uc.getIndirectionIndex() = indirectionIndex2 + numberOfLoads
+    )
+  )
+}
+
+/**
+ * Holds if values stored inside content `c` are cleared at node `n`.
+ */
+predicate clearsContent(Node n, Content c) {
+  none() // stub implementation
+}
+
+/**
+ * Holds if the value that is being tracked is expected to be stored inside content `c`
+ * at node `n`.
+ */
+predicate expectsContent(Node n, ContentSet c) { none() }
+
+/** Gets the type of `n` used for type pruning. */
+IRType getNodeType(Node n) {
+  suppressUnusedNode(n) and
+  result instanceof IRVoidType // stub implementation
+}
+
+/** Gets a string representation of a type returned by `getNodeType`. */
+string ppReprType(IRType t) { none() } // stub implementation
+
+/**
+ * Holds if `t1` and `t2` are compatible, that is, whether data can flow from
+ * a node of type `t1` to a node of type `t2`.
+ */
+pragma[inline]
+predicate compatibleTypes(IRType t1, IRType t2) {
+  any() // stub implementation
+}
+
+private predicate suppressUnusedNode(Node n) { any() }
+
+//////////////////////////////////////////////////////////////////////////////
+// Java QL library compatibility wrappers
+//////////////////////////////////////////////////////////////////////////////
+/** A node that performs a type cast. */
+class CastNode extends Node {
+  CastNode() { none() } // stub implementation
+}
+
+/**
+ * A function that may contain code or a variable that may contain itself. When
+ * flow crosses from one _enclosing callable_ to another, the interprocedural
+ * data-flow library discards call contexts and inserts a node in the big-step
+ * relation used for human-readable path explanations.
+ */
+class DataFlowCallable = Cpp::Declaration;
+
+class DataFlowExpr = Expr;
+
+class DataFlowType = IRType;
+
+/** A function call relevant for data flow. */
+class DataFlowCall extends CallInstruction {
+  Function getEnclosingCallable() { result = this.getEnclosingFunction() }
+}
+
+predicate isUnreachableInCall(Node n, DataFlowCall call) { none() } // stub implementation
+
+int accessPathLimit() { result = 5 }
+
+/**
+ * Holds if access paths with `c` at their head always should be tracked at high
+ * precision. This disables adaptive access path precision for such access paths.
+ */
+predicate forceHighPrecision(Content c) { none() }
+
+/** The unit type. */
+private newtype TUnit = TMkUnit()
+
+/** The trivial type with a single element. */
+class Unit extends TUnit {
+  /** Gets a textual representation of this element. */
+  string toString() { result = "unit" }
+}
+
+/** Holds if `n` should be hidden from path explanations. */
+predicate nodeIsHidden(Node n) { n instanceof OperandNode and not n instanceof ArgumentNode }
+
+class LambdaCallKind = Unit;
+
+/** Holds if `creation` is an expression that creates a lambda of kind `kind` for `c`. */
+predicate lambdaCreation(Node creation, LambdaCallKind kind, DataFlowCallable c) { none() }
+
+/** Holds if `call` is a lambda call of kind `kind` where `receiver` is the lambda expression. */
+predicate lambdaCall(DataFlowCall call, LambdaCallKind kind, Node receiver) { none() }
+
+/** Extra data-flow steps needed for lambda flow analysis. */
+predicate additionalLambdaFlowStep(Node nodeFrom, Node nodeTo, boolean preservesValue) { none() }
+
+/**
+ * Holds if flow is allowed to pass from parameter `p` and back to itself as a
+ * side-effect, resulting in a summary from `p` to itself.
+ *
+ * One example would be to allow flow like `p.foo = p.bar;`, which is disallowed
+ * by default as a heuristic.
+ */
+predicate allowParameterReturnInSelf(ParameterNode p) { none() }
+
+private class MyConsistencyConfiguration extends Consistency::ConsistencyConfiguration {
+  override predicate argHasPostUpdateExclude(ArgumentNode n) {
+    // The rules for whether an IR argument gets a post-update node are too
+    // complex to model here.
+    any()
+  }
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
new file mode 100644
index 00000000000..b3b055bc9a1
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
@@ -0,0 +1,1346 @@
+/**
+ * Provides C++-specific definitions for use in the data flow library.
+ */
+
+private import cpp
+// The `ValueNumbering` library has to be imported right after `cpp` to ensure
+// that the cached IR gets the same checksum here as it does in queries that use
+// `ValueNumbering` without `DataFlow`.
+private import semmle.code.cpp.ir.ValueNumbering
+private import semmle.code.cpp.ir.IR
+private import semmle.code.cpp.controlflow.IRGuards
+private import semmle.code.cpp.models.interfaces.DataFlow
+private import DataFlowPrivate
+private import ModelUtil
+private import SsaInternals as Ssa
+
+cached
+private module Cached {
+  /**
+   * The IR dataflow graph consists of the following nodes:
+   * - `InstructionNode`, which injects most instructions directly into the dataflow graph.
+   * - `OperandNode`, which similarly injects most operands directly into the dataflow graph.
+   * - `VariableNode`, which is used to model flow through global variables.
+   * - `PostFieldUpdateNode`, which is used to model the state of a field after a value has been stored
+   * into an address after a number of loads.
+   * - `SsaPhiNode`, which represents phi nodes as computed by the shared SSA library.
+   * - `IndirectArgumentOutNode`, which represents the value of an argument (and its indirections) after
+   * it leaves a function call.
+   * - `IndirectOperand`, which represents the value of `operand` after loading the address a number
+   * of times.
+   * - `IndirectInstruction`, which represents the value of `instr` after loading the address a number
+   * of times.
+   */
+  cached
+  newtype TIRDataFlowNode =
+    TInstructionNode(Instruction i) { not Ssa::ignoreInstruction(i) } or
+    TOperandNode(Operand op) { not Ssa::ignoreOperand(op) } or
+    TVariableNode(Variable var) or
+    TPostFieldUpdateNode(FieldAddress operand, int indirectionIndex) {
+      indirectionIndex =
+        [0 .. Ssa::countIndirectionsForCppType(operand.getObjectAddress().getResultLanguageType()) -
+            1]
+    } or
+    TSsaPhiNode(Ssa::PhiNode phi) or
+    TIndirectArgumentOutNode(ArgumentOperand operand, int indirectionIndex) {
+      Ssa::isModifiableByCall(operand) and
+      indirectionIndex = [0 .. Ssa::countIndirectionsForCppType(operand.getLanguageType()) - 1]
+    } or
+    TIndirectOperand(Operand op, int indirectionIndex) {
+      Ssa::hasIndirectOperand(op, indirectionIndex)
+    } or
+    TIndirectInstruction(Instruction instr, int indirectionIndex) {
+      Ssa::hasIndirectInstruction(instr, indirectionIndex)
+    }
+}
+
+/**
+ * An operand that is defined by a `FieldAddressInstruction`.
+ */
+class FieldAddress extends Operand {
+  FieldAddressInstruction fai;
+
+  FieldAddress() { fai = this.getDef() }
+
+  /** Gets the field associated with this instruction. */
+  Field getField() { result = fai.getField() }
+
+  /** Gets the instruction whose result provides the address of the object containing the field. */
+  Instruction getObjectAddress() { result = fai.getObjectAddress() }
+
+  /** Gets the operand that provides the address of the object containing the field. */
+  Operand getObjectAddressOperand() { result = fai.getObjectAddressOperand() }
+}
+
+/**
+ * Holds if `opFrom` is an operand whose value flows to the result of `instrTo`.
+ *
+ * `isPointerArith` is `true` if `instrTo` is a `PointerArithmeticInstruction` and `opFrom`
+ * is the left operand.
+ */
+predicate conversionFlow(Operand opFrom, Instruction instrTo, boolean isPointerArith) {
+  isPointerArith = false and
+  (
+    instrTo.(CopyValueInstruction).getSourceValueOperand() = opFrom
+    or
+    instrTo.(ConvertInstruction).getUnaryOperand() = opFrom
+    or
+    instrTo.(CheckedConvertOrNullInstruction).getUnaryOperand() = opFrom
+    or
+    instrTo.(InheritanceConversionInstruction).getUnaryOperand() = opFrom
+  )
+  or
+  isPointerArith = true and
+  instrTo.(PointerArithmeticInstruction).getLeftOperand() = opFrom
+}
+
+private import Cached
+
+/**
+ * A node in a data flow graph.
+ *
+ * A node can be either an expression, a parameter, or an uninitialized local
+ * variable. Such nodes are created with `DataFlow::exprNode`,
+ * `DataFlow::parameterNode`, and `DataFlow::uninitializedNode` respectively.
+ */
+class Node extends TIRDataFlowNode {
+  /**
+   * INTERNAL: Do not use.
+   */
+  Declaration getEnclosingCallable() { none() } // overridden in subclasses
+
+  /** Gets the function to which this node belongs, if any. */
+  Declaration getFunction() { none() } // overridden in subclasses
+
+  /** Gets the type of this node. */
+  IRType getType() { none() } // overridden in subclasses
+
+  /** Gets the instruction corresponding to this node, if any. */
+  Instruction asInstruction() { result = this.(InstructionNode).getInstruction() }
+
+  /** Gets the operands corresponding to this node, if any. */
+  Operand asOperand() { result = this.(OperandNode).getOperand() }
+
+  /**
+   * Gets the non-conversion expression corresponding to this node, if any.
+   * This predicate only has a result on nodes that represent the value of
+   * evaluating the expression. For data flowing _out of_ an expression, like
+   * when an argument is passed by reference, use `asDefiningArgument` instead
+   * of `asExpr`.
+   *
+   * If this node strictly (in the sense of `asConvertedExpr`) corresponds to
+   * a `Conversion`, then the result is the underlying non-`Conversion` base
+   * expression.
+   */
+  Expr asExpr() { result = this.(ExprNode).getExpr() }
+
+  /**
+   * Gets the non-conversion expression that's indirectly tracked by this node
+   * under `index` number of indirections.
+   */
+  Expr asIndirectExpr(int index) {
+    exists(Operand operand | hasOperandAndIndex(this, operand, index) |
+      result = operand.getDef().getUnconvertedResultExpression()
+    )
+  }
+
+  /**
+   * Gets the non-conversion expression that's indirectly tracked by this node
+   * behind a number of indirections.
+   */
+  Expr asIndirectExpr() { result = this.asIndirectExpr(_) }
+
+  /**
+   * Gets the expression corresponding to this node, if any. The returned
+   * expression may be a `Conversion`.
+   */
+  Expr asConvertedExpr() { result = this.(ExprNode).getConvertedExpr() }
+
+  /**
+   * Gets the expression that's indirectly tracked by this node
+   * behind `index` number of indirections.
+   */
+  Expr asIndirectConvertedExpr(int index) {
+    exists(Operand operand | hasOperandAndIndex(this, operand, index) |
+      result = operand.getDef().getConvertedResultExpression()
+    )
+  }
+
+  /**
+   * Gets the expression that's indirectly tracked by this node behind a
+   * number of indirections.
+   */
+  Expr asIndirectConvertedExpr() { result = this.asIndirectConvertedExpr(_) }
+
+  /**
+   * Gets the argument that defines this `DefinitionByReferenceNode`, if any.
+   * This predicate should be used instead of `asExpr` when referring to the
+   * value of a reference argument _after_ the call has returned. For example,
+   * in `f(&x)`, this predicate will have `&x` as its result for the `Node`
+   * that represents the new value of `x`.
+   */
+  Expr asDefiningArgument() { result = this.asDefiningArgument(_) }
+
+  /**
+   * Gets the argument that defines this `DefinitionByReferenceNode`, if any.
+   *
+   * Unlike `Node::asDefiningArgument/0`, this predicate gets the node representing
+   * the value of the `index`'th indirection after leaving a function. For example,
+   * in:
+   * ```cpp
+   * void f(int**);
+   * ...
+   * int** x = ...;
+   * f(x);
+   * ```
+   * The node `n` such that `n.asDefiningArgument(1)` is the argument `x` will
+   * contain the value of `*x` after `f` has returned, and the node `n` such that
+   * `n.asDefiningArgument(2)` is the argument `x` will contain the value of `**x`
+   * after the `f` has returned.
+   */
+  Expr asDefiningArgument(int index) {
+    // Subtract one because `DefinitionByReferenceNode` is defined to be in
+    // the range `[0 ... n - 1]` for some `n` instead of `[1 ... n]`.
+    this.(DefinitionByReferenceNode).getIndirectionIndex() = index - 1 and
+    result = this.(DefinitionByReferenceNode).getArgument()
+  }
+
+  /**
+   * Gets the the argument going into a function for a node that represents
+   * the indirect value of the argument after `index` loads. For example, in:
+   * ```cpp
+   * void f(int**);
+   * ...
+   * int** x = ...;
+   * f(x);
+   * ```
+   * The node `n` such that `n.asIndirectArgument(1)` represents the value of
+   * `*x` going into `f`, and the node `n` such that `n.asIndirectArgument(2)`
+   * represents the value of `**x` going into `f`.
+   */
+  Expr asIndirectArgument(int index) {
+    this.(SideEffectOperandNode).getIndirectionIndex() = index and
+    result = this.(SideEffectOperandNode).getArgument()
+  }
+
+  /**
+   * Gets the the argument going into a function for a node that represents
+   * the indirect value of the argument after any non-zero number of loads.
+   */
+  Expr asIndirectArgument() { result = this.asIndirectArgument(_) }
+
+  /** Gets the positional parameter corresponding to this node, if any. */
+  Parameter asParameter() { result = asParameter(0) }
+
+  /**
+   * Gets the positional parameter corresponding to the node that represents
+   * the value of the parameter after `index` number of loads, if any. For
+   * example, in:
+   * ```cpp
+   * void f(int** x) { ... }
+   * ```
+   * - The node `n` such that `n.asParameter(0)` is the parameter `x` represents
+   * the value of `x`.
+   * - The node `n` such that `n.asParameter(1)` is the parameter `x` represents
+   * the value of `*x`.
+   * The node `n` such that `n.asParameter(2)` is the parameter `x` represents
+   * the value of `**x`.
+   */
+  Parameter asParameter(int index) {
+    index = 0 and
+    result = this.(ExplicitParameterNode).getParameter()
+    or
+    this.(IndirectParameterNode).getIndirectionIndex() = index and
+    result = this.(IndirectParameterNode).getParameter()
+  }
+
+  /**
+   * Gets the variable corresponding to this node, if any. This can be used for
+   * modeling flow in and out of global variables.
+   */
+  Variable asVariable() { result = this.(VariableNode).getVariable() }
+
+  /**
+   * Gets the expression that is partially defined by this node, if any.
+   *
+   * Partial definitions are created for field stores (`x.y = taint();` is a partial
+   * definition of `x`), and for calls that may change the value of an object (so
+   * `x.set(taint())` is a partial definition of `x`, and `transfer(&x, taint())` is
+   * a partial definition of `&x`).
+   */
+  Expr asPartialDefinition() { result = this.(PartialDefinitionNode).getDefinedExpr() }
+
+  /**
+   * Gets an upper bound on the type of this node.
+   */
+  IRType getTypeBound() { result = this.getType() }
+
+  /** Gets the location of this element. */
+  cached
+  final Location getLocation() { result = this.getLocationImpl() }
+
+  /** INTERNAL: Do not use. */
+  Location getLocationImpl() {
+    none() // overridden by subclasses
+  }
+
+  /**
+   * Holds if this element is at the specified location.
+   * The location spans column `startcolumn` of line `startline` to
+   * column `endcolumn` of line `endline` in file `filepath`.
+   * For more information, see
+   * [Locations](https://codeql.github.com/docs/writing-codeql-queries/providing-locations-in-codeql-queries/).
+   */
+  predicate hasLocationInfo(
+    string filepath, int startline, int startcolumn, int endline, int endcolumn
+  ) {
+    this.getLocation().hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn)
+  }
+
+  /** Gets a textual representation of this element. */
+  cached
+  final string toString() { result = this.toStringImpl() }
+
+  /** INTERNAL: Do not use. */
+  string toStringImpl() {
+    none() // overridden by subclasses
+  }
+}
+
+/**
+ * An instruction, viewed as a node in a data flow graph.
+ */
+class InstructionNode extends Node, TInstructionNode {
+  Instruction instr;
+
+  InstructionNode() { this = TInstructionNode(instr) }
+
+  /** Gets the instruction corresponding to this node. */
+  Instruction getInstruction() { result = instr }
+
+  override Declaration getEnclosingCallable() { result = this.getFunction() }
+
+  override Declaration getFunction() { result = instr.getEnclosingFunction() }
+
+  override IRType getType() { result = instr.getResultIRType() }
+
+  final override Location getLocationImpl() { result = instr.getLocation() }
+
+  override string toStringImpl() {
+    // This predicate is overridden in subclasses. This default implementation
+    // does not use `Instruction.toString` because that's expensive to compute.
+    result = this.getInstruction().getOpcode().toString()
+  }
+}
+
+/**
+ * An operand, viewed as a node in a data flow graph.
+ */
+class OperandNode extends Node, TOperandNode {
+  Operand op;
+
+  OperandNode() { this = TOperandNode(op) }
+
+  /** Gets the operand corresponding to this node. */
+  Operand getOperand() { result = op }
+
+  override Declaration getEnclosingCallable() { result = this.getFunction() }
+
+  override Declaration getFunction() { result = op.getUse().getEnclosingFunction() }
+
+  override IRType getType() { result = op.getIRType() }
+
+  final override Location getLocationImpl() { result = op.getLocation() }
+
+  override string toStringImpl() { result = this.getOperand().toString() }
+}
+
+/**
+ * INTERNAL: do not use.
+ *
+ * The node representing the value of a field after it has been updated.
+ */
+class PostFieldUpdateNode extends TPostFieldUpdateNode, PartialDefinitionNode {
+  int indirectionIndex;
+  FieldAddress fieldAddress;
+
+  PostFieldUpdateNode() { this = TPostFieldUpdateNode(fieldAddress, indirectionIndex) }
+
+  override Function getFunction() { result = fieldAddress.getUse().getEnclosingFunction() }
+
+  override Declaration getEnclosingCallable() { result = this.getFunction() }
+
+  override IRType getType() { result = fieldAddress.getIRType() }
+
+  FieldAddress getFieldAddress() { result = fieldAddress }
+
+  Field getUpdatedField() { result = fieldAddress.getField() }
+
+  int getIndirectionIndex() { result = indirectionIndex }
+
+  override Node getPreUpdateNode() {
+    // + 1 because we're storing into an lvalue, and the original node should be the rvalue of
+    // the same address.
+    hasOperandAndIndex(result, pragma[only_bind_into](fieldAddress).getObjectAddressOperand(),
+      indirectionIndex + 1)
+  }
+
+  override Expr getDefinedExpr() {
+    result = fieldAddress.getObjectAddress().getUnconvertedResultExpression()
+  }
+
+  override Location getLocationImpl() { result = fieldAddress.getLocation() }
+
+  override string toStringImpl() { result = this.getPreUpdateNode() + " [post update]" }
+}
+
+/**
+ * INTERNAL: do not use.
+ *
+ * A phi node produced by the shared SSA library, viewed as a node in a data flow graph.
+ */
+class SsaPhiNode extends Node, TSsaPhiNode {
+  Ssa::PhiNode phi;
+
+  SsaPhiNode() { this = TSsaPhiNode(phi) }
+
+  /** Gets the phi node associated with this node. */
+  Ssa::PhiNode getPhiNode() { result = phi }
+
+  override Declaration getEnclosingCallable() { result = this.getFunction() }
+
+  override Declaration getFunction() { result = phi.getBasicBlock().getEnclosingFunction() }
+
+  override IRType getType() { result instanceof IRVoidType }
+
+  final override Location getLocationImpl() { result = phi.getBasicBlock().getLocation() }
+
+  override string toStringImpl() { result = "Phi" }
+}
+
+/**
+ * INTERNAL: do not use.
+ *
+ * A node representing a value after leaving a function.
+ */
+class SideEffectOperandNode extends Node, IndirectOperand {
+  CallInstruction call;
+  int argumentIndex;
+
+  SideEffectOperandNode() { operand = call.getArgumentOperand(argumentIndex) }
+
+  CallInstruction getCallInstruction() { result = call }
+
+  Operand getAddressOperand() { result = operand }
+
+  int getArgumentIndex() { result = argumentIndex }
+
+  override Declaration getEnclosingCallable() { result = this.getFunction() }
+
+  override Function getFunction() { result = call.getEnclosingFunction() }
+
+  override IRType getType() { result instanceof IRVoidType }
+
+  Expr getArgument() { result = call.getArgument(argumentIndex).getUnconvertedResultExpression() }
+}
+
+/**
+ * INTERNAL: do not use.
+ *
+ * A node representing an indirection of a parameter.
+ */
+class IndirectParameterNode extends Node, IndirectInstruction {
+  InitializeParameterInstruction init;
+
+  IndirectParameterNode() { this.getInstruction() = init }
+
+  int getArgumentIndex() { init.hasIndex(result) }
+
+  /** Gets the parameter whose indirection is initialized. */
+  Parameter getParameter() { result = init.getParameter() }
+
+  override Declaration getEnclosingCallable() { result = this.getFunction() }
+
+  override Function getFunction() { result = this.getInstruction().getEnclosingFunction() }
+
+  override IRType getType() { result instanceof IRVoidType }
+
+  override string toStringImpl() {
+    result = this.getParameter().toString() + " indirection"
+    or
+    not exists(this.getParameter()) and
+    result = "this indirection"
+  }
+}
+
+/**
+ * INTERNAL: do not use.
+ *
+ * A node representing the indirection of a value that is
+ * about to be returned from a function.
+ */
+class IndirectReturnNode extends IndirectOperand {
+  IndirectReturnNode() {
+    this.getOperand() = any(ReturnIndirectionInstruction ret).getSourceAddressOperand()
+    or
+    this.getOperand() = any(ReturnValueInstruction ret).getReturnAddressOperand()
+  }
+
+  Operand getAddressOperand() { result = operand }
+
+  override Declaration getEnclosingCallable() { result = this.getFunction() }
+
+  override IRType getType() { result instanceof IRVoidType }
+}
+
+/**
+ * INTERNAL: do not use.
+ *
+ * A node representing the indirection of a value after it
+ * has been returned from a function.
+ */
+class IndirectArgumentOutNode extends Node, TIndirectArgumentOutNode, PostUpdateNode {
+  ArgumentOperand operand;
+  int indirectionIndex;
+
+  IndirectArgumentOutNode() { this = TIndirectArgumentOutNode(operand, indirectionIndex) }
+
+  int getIndirectionIndex() { result = indirectionIndex }
+
+  int getArgumentIndex() {
+    exists(CallInstruction call | call.getArgumentOperand(result) = operand)
+  }
+
+  Operand getAddressOperand() { result = operand }
+
+  CallInstruction getCallInstruction() { result.getAnArgumentOperand() = operand }
+
+  Function getStaticCallTarget() { result = this.getCallInstruction().getStaticCallTarget() }
+
+  override Declaration getEnclosingCallable() { result = this.getFunction() }
+
+  override Function getFunction() { result = this.getCallInstruction().getEnclosingFunction() }
+
+  override IRType getType() { result instanceof IRVoidType }
+
+  override Node getPreUpdateNode() { hasOperandAndIndex(result, operand, indirectionIndex + 1) }
+
+  override string toStringImpl() {
+    // This string should be unique enough to be helpful but common enough to
+    // avoid storing too many different strings.
+    result = this.getStaticCallTarget().getName() + " output argument"
+    or
+    not exists(this.getStaticCallTarget()) and
+    result = "output argument"
+  }
+
+  override Location getLocationImpl() { result = operand.getLocation() }
+}
+
+pragma[nomagic]
+predicate indirectReturnOutNodeOperand0(CallInstruction call, Operand operand, int indirectionIndex) {
+  Ssa::hasIndirectInstruction(call, indirectionIndex) and
+  operandForfullyConvertedCall(operand, call)
+}
+
+pragma[nomagic]
+predicate indirectReturnOutNodeInstruction0(
+  CallInstruction call, Instruction instr, int indirectionIndex
+) {
+  Ssa::hasIndirectInstruction(call, indirectionIndex) and
+  instructionForfullyConvertedCall(instr, call)
+}
+
+/**
+ * INTERNAL: do not use.
+ *
+ * A node representing the value of a function call.
+ */
+class IndirectReturnOutNode extends Node {
+  CallInstruction call;
+  int indirectionIndex;
+
+  IndirectReturnOutNode() {
+    // Annoyingly, we need to pick the fully converted value as the output of the function to
+    // make flow through in the shared dataflow library work correctly.
+    exists(Operand operand |
+      indirectReturnOutNodeOperand0(call, operand, indirectionIndex) and
+      hasOperandAndIndex(this, operand, indirectionIndex)
+    )
+    or
+    exists(Instruction instr |
+      indirectReturnOutNodeInstruction0(call, instr, indirectionIndex) and
+      hasInstructionAndIndex(this, instr, indirectionIndex)
+    )
+  }
+
+  CallInstruction getCallInstruction() { result = call }
+
+  int getIndirectionIndex() { result = indirectionIndex }
+}
+
+/**
+ * INTERNAL: Do not use.
+ *
+ * A node that represents the indirect value of an operand in the IR
+ * after `index` number of loads.
+ */
+class IndirectOperand extends Node, TIndirectOperand {
+  Operand operand;
+  int indirectionIndex;
+
+  IndirectOperand() { this = TIndirectOperand(operand, indirectionIndex) }
+
+  /** Gets the underlying instruction. */
+  Operand getOperand() { result = operand }
+
+  int getIndirectionIndex() { result = indirectionIndex }
+
+  override Function getFunction() { result = this.getOperand().getDef().getEnclosingFunction() }
+
+  override Declaration getEnclosingCallable() { result = this.getFunction() }
+
+  override IRType getType() { result = this.getOperand().getIRType() }
+
+  final override Location getLocationImpl() { result = this.getOperand().getLocation() }
+
+  override string toStringImpl() {
+    result = instructionNode(this.getOperand().getDef()).toStringImpl() + " indirection"
+  }
+}
+
+/**
+ * INTERNAL: Do not use.
+ *
+ * A node that represents the indirect value of an instruction in the IR
+ * after `index` number of loads.
+ */
+class IndirectInstruction extends Node, TIndirectInstruction {
+  Instruction instr;
+  int indirectionIndex;
+
+  IndirectInstruction() { this = TIndirectInstruction(instr, indirectionIndex) }
+
+  /** Gets the underlying instruction. */
+  Instruction getInstruction() { result = instr }
+
+  int getIndirectionIndex() { result = indirectionIndex }
+
+  override Function getFunction() { result = this.getInstruction().getEnclosingFunction() }
+
+  override Declaration getEnclosingCallable() { result = this.getFunction() }
+
+  override IRType getType() { result = this.getInstruction().getResultIRType() }
+
+  final override Location getLocationImpl() { result = this.getInstruction().getLocation() }
+
+  override string toStringImpl() {
+    result = instructionNode(this.getInstruction()).toStringImpl() + " indirection"
+  }
+}
+
+private predicate isFullyConvertedArgument(Expr e) {
+  e = any(Call call).getAnArgument().getFullyConverted()
+}
+
+private predicate isFullyConvertedCall(Expr e) { e = any(Call call).getFullyConverted() }
+
+/** Holds if `Node::asExpr` should map an some operand node to `e`. */
+private predicate convertedExprMustBeOperand(Expr e) {
+  isFullyConvertedArgument(e)
+  or
+  isFullyConvertedCall(e)
+}
+
+/** Holds if `node` is an `OperandNode` that should map `node.asExpr()` to `e`. */
+predicate exprNodeShouldBeOperand(Node node, Expr e) {
+  e = node.asOperand().getDef().getConvertedResultExpression() and
+  convertedExprMustBeOperand(e)
+}
+
+/**
+ * Holds if `load` is a `LoadInstruction` that is the result of evaluating `e`
+ * and `node` is an `IndirctOperandNode` that should map `node.asExpr()` to `e`.
+ *
+ * We map `e` to `node.asExpr()` when `node` semantically represents the
+ * same value as `load`. A subsequent flow step will flow `node` to
+ * the `LoadInstruction`.
+ */
+private predicate exprNodeShouldBeIndirectOperand(IndirectOperand node, Expr e, LoadInstruction load) {
+  node.getIndirectionIndex() = 1 and
+  e = load.getConvertedResultExpression() and
+  load.getSourceAddressOperand() = node.getOperand() and
+  not convertedExprMustBeOperand(e)
+}
+
+/** Holds if `node` should be an instruction node that maps `node.asExpr()` to `e`. */
+predicate exprNodeShouldBeInstruction(Node node, Expr e) {
+  e = node.asInstruction().getConvertedResultExpression() and
+  not exprNodeShouldBeOperand(_, e) and
+  not exprNodeShouldBeIndirectOperand(_, e, _)
+}
+
+private class ExprNodeBase extends Node {
+  Expr getConvertedExpr() { none() } // overridden by subclasses
+
+  Expr getExpr() { none() } // overridden by subclasses
+}
+
+private class InstructionExprNode extends ExprNodeBase, InstructionNode {
+  InstructionExprNode() { exprNodeShouldBeInstruction(this, _) }
+
+  final override Expr getConvertedExpr() { exprNodeShouldBeInstruction(this, result) }
+
+  final override Expr getExpr() { result = this.getInstruction().getUnconvertedResultExpression() }
+
+  final override string toStringImpl() { result = this.getConvertedExpr().toString() }
+}
+
+private class OperandExprNode extends ExprNodeBase, OperandNode {
+  OperandExprNode() { exprNodeShouldBeOperand(this, _) }
+
+  final override Expr getConvertedExpr() { exprNodeShouldBeOperand(this, result) }
+
+  final override Expr getExpr() {
+    result = this.getOperand().getDef().getUnconvertedResultExpression()
+  }
+
+  final override string toStringImpl() {
+    // Avoid generating multiple `toString` results for `ArgumentNode`s
+    // since they have a better `toString`.
+    result = this.(ArgumentNode).toStringImpl()
+    or
+    not this instanceof ArgumentNode and
+    result = this.getConvertedExpr().toString()
+  }
+}
+
+private class IndirectOperandExprNode extends ExprNodeBase, IndirectOperand {
+  LoadInstruction load;
+
+  IndirectOperandExprNode() { exprNodeShouldBeIndirectOperand(this, _, load) }
+
+  final override Expr getConvertedExpr() { exprNodeShouldBeIndirectOperand(this, result, load) }
+
+  final override Expr getExpr() { result = load.getUnconvertedResultExpression() }
+
+  final override string toStringImpl() { result = this.getConvertedExpr().toString() }
+}
+
+/**
+ * An expression, viewed as a node in a data flow graph.
+ */
+class ExprNode extends Node instanceof ExprNodeBase {
+  /**
+   * Gets the non-conversion expression corresponding to this node, if any. If
+   * this node strictly (in the sense of `getConvertedExpr`) corresponds to a
+   * `Conversion`, then the result is that `Conversion`'s non-`Conversion` base
+   * expression.
+   */
+  Expr getExpr() { result = super.getExpr() }
+
+  /**
+   * Gets the expression corresponding to this node, if any. The returned
+   * expression may be a `Conversion`.
+   */
+  Expr getConvertedExpr() { result = super.getConvertedExpr() }
+}
+
+/**
+ * The value of a parameter at function entry, viewed as a node in a data
+ * flow graph. This includes both explicit parameters such as `x` in `f(x)`
+ * and implicit parameters such as `this` in `x.f()`.
+ *
+ * To match a specific kind of parameter, consider using one of the subclasses
+ * `ExplicitParameterNode`, `ThisParameterNode`, or
+ * `ParameterIndirectionNode`.
+ */
+class ParameterNode extends Node {
+  ParameterNode() {
+    // To avoid making this class abstract, we enumerate its values here
+    this.asInstruction() instanceof InitializeParameterInstruction
+    or
+    this instanceof IndirectParameterNode
+  }
+
+  /**
+   * Holds if this node is the parameter of `f` at the specified position. The
+   * implicit `this` parameter is considered to have position `-1`, and
+   * pointer-indirection parameters are at further negative positions.
+   */
+  predicate isParameterOf(Function f, ParameterPosition pos) { none() } // overridden by subclasses
+}
+
+/** An explicit positional parameter, not including `this` or `...`. */
+private class ExplicitParameterNode extends ParameterNode, InstructionNode {
+  override InitializeParameterInstruction instr;
+
+  ExplicitParameterNode() { exists(instr.getParameter()) }
+
+  override predicate isParameterOf(Function f, ParameterPosition pos) {
+    f.getParameter(pos.(DirectPosition).getIndex()) = instr.getParameter()
+  }
+
+  /** Gets the `Parameter` associated with this node. */
+  Parameter getParameter() { result = instr.getParameter() }
+
+  override string toStringImpl() { result = instr.getParameter().toString() }
+}
+
+/** An implicit `this` parameter. */
+class ThisParameterNode extends ParameterNode, InstructionNode {
+  override InitializeParameterInstruction instr;
+
+  ThisParameterNode() { instr.getIRVariable() instanceof IRThisVariable }
+
+  override predicate isParameterOf(Function f, ParameterPosition pos) {
+    pos.(DirectPosition).getIndex() = -1 and instr.getEnclosingFunction() = f
+  }
+
+  override string toStringImpl() { result = "this" }
+}
+
+pragma[noinline]
+private predicate indirectPostionHasArgumentIndexAndIndex(
+  IndirectionPosition pos, int argumentIndex, int indirectionIndex
+) {
+  pos.getArgumentIndex() = argumentIndex and
+  pos.getIndirectionIndex() = indirectionIndex
+}
+
+pragma[noinline]
+private predicate indirectParameterNodeHasArgumentIndexAndIndex(
+  IndirectParameterNode node, int argumentIndex, int indirectionIndex
+) {
+  node.getArgumentIndex() = argumentIndex and
+  node.getIndirectionIndex() = indirectionIndex
+}
+
+/** A synthetic parameter to model the pointed-to object of a pointer parameter. */
+class ParameterIndirectionNode extends ParameterNode instanceof IndirectParameterNode {
+  override predicate isParameterOf(Function f, ParameterPosition pos) {
+    IndirectParameterNode.super.getEnclosingCallable() = f and
+    exists(int argumentIndex, int indirectionIndex |
+      indirectPostionHasArgumentIndexAndIndex(pos, argumentIndex, indirectionIndex) and
+      indirectParameterNodeHasArgumentIndexAndIndex(this, argumentIndex, indirectionIndex)
+    )
+  }
+}
+
+/**
+ * A node associated with an object after an operation that might have
+ * changed its state.
+ *
+ * This can be either the argument to a callable after the callable returns
+ * (which might have mutated the argument), or the qualifier of a field after
+ * an update to the field.
+ *
+ * Nodes corresponding to AST elements, for example `ExprNode`, usually refer
+ * to the value before the update with the exception of `ClassInstanceExpr`,
+ * which represents the value after the constructor has run.
+ */
+abstract class PostUpdateNode extends Node {
+  /**
+   * Gets the node before the state update.
+   */
+  abstract Node getPreUpdateNode();
+}
+
+/**
+ * The base class for nodes that perform "partial definitions".
+ *
+ * In contrast to a normal "definition", which provides a new value for
+ * something, a partial definition is an expression that may affect a
+ * value, but does not necessarily replace it entirely. For example:
+ * ```
+ * x.y = 1; // a partial definition of the object `x`.
+ * x.y.z = 1; // a partial definition of the object `x.y` and `x`.
+ * x.setY(1); // a partial definition of the object `x`.
+ * setY(&x); // a partial definition of the object `x`.
+ * ```
+ */
+abstract private class PartialDefinitionNode extends PostUpdateNode {
+  abstract Expr getDefinedExpr();
+}
+
+/**
+ * A node that represents the value of a variable after a function call that
+ * may have changed the variable because it's passed by reference.
+ *
+ * A typical example would be a call `f(&x)`. Firstly, there will be flow into
+ * `x` from previous definitions of `x`. Secondly, there will be a
+ * `DefinitionByReferenceNode` to represent the value of `x` after the call has
+ * returned. This node will have its `getArgument()` equal to `&x` and its
+ * `getVariableAccess()` equal to `x`.
+ */
+class DefinitionByReferenceNode extends IndirectArgumentOutNode {
+  /** Gets the unconverted argument corresponding to this node. */
+  Expr getArgument() { result = this.getAddressOperand().getDef().getUnconvertedResultExpression() }
+
+  /** Gets the parameter through which this value is assigned. */
+  Parameter getParameter() {
+    result = this.getCallInstruction().getStaticCallTarget().getParameter(this.getArgumentIndex())
+  }
+}
+
+/**
+ * A `Node` corresponding to a variable in the program, as opposed to the
+ * value of that variable at some particular point. This can be used for
+ * modeling flow in and out of global variables.
+ */
+class VariableNode extends Node, TVariableNode {
+  Variable v;
+
+  VariableNode() { this = TVariableNode(v) }
+
+  /** Gets the variable corresponding to this node. */
+  Variable getVariable() { result = v }
+
+  override Declaration getFunction() { none() }
+
+  override Declaration getEnclosingCallable() {
+    // When flow crosses from one _enclosing callable_ to another, the
+    // interprocedural data-flow library discards call contexts and inserts a
+    // node in the big-step relation used for human-readable path explanations.
+    // Therefore we want a distinct enclosing callable for each `VariableNode`,
+    // and that can be the `Variable` itself.
+    result = v
+  }
+
+  override IRType getType() { result.getCanonicalLanguageType().hasUnspecifiedType(v.getType(), _) }
+
+  final override Location getLocationImpl() { result = v.getLocation() }
+
+  override string toStringImpl() { result = v.toString() }
+}
+
+/**
+ * Gets the node corresponding to `instr`.
+ */
+InstructionNode instructionNode(Instruction instr) { result.getInstruction() = instr }
+
+/**
+ * Gets the node corresponding to `operand`.
+ */
+OperandNode operandNode(Operand operand) { result.getOperand() = operand }
+
+/**
+ * Gets the `Node` corresponding to the value of evaluating `e` or any of its
+ * conversions. There is no result if `e` is a `Conversion`. For data flowing
+ * _out of_ an expression, like when an argument is passed by reference, use
+ * `definitionByReferenceNodeFromArgument` instead.
+ */
+ExprNode exprNode(Expr e) { result.getExpr() = e }
+
+/**
+ * Gets the `Node` corresponding to the value of evaluating `e`. Here, `e` may
+ * be a `Conversion`. For data flowing _out of_ an expression, like when an
+ * argument is passed by reference, use
+ * `definitionByReferenceNodeFromArgument` instead.
+ */
+ExprNode convertedExprNode(Expr e) { result.getConvertedExpr() = e }
+
+/**
+ * Gets the `Node` corresponding to the value of `p` at function entry.
+ */
+ExplicitParameterNode parameterNode(Parameter p) { result.getParameter() = p }
+
+/**
+ * Gets the `Node` corresponding to a definition by reference of the variable
+ * that is passed as unconverted `argument` of a call.
+ */
+DefinitionByReferenceNode definitionByReferenceNodeFromArgument(Expr argument) {
+  result.getArgument() = argument
+}
+
+/** Gets the `VariableNode` corresponding to the variable `v`. */
+VariableNode variableNode(Variable v) { result.getVariable() = v }
+
+/**
+ * DEPRECATED: See UninitializedNode.
+ *
+ * Gets the `Node` corresponding to the value of an uninitialized local
+ * variable `v`.
+ */
+Node uninitializedNode(LocalVariable v) { none() }
+
+/**
+ * Holds if data flows from `nodeFrom` to `nodeTo` in exactly one local
+ * (intra-procedural) step.
+ */
+predicate localFlowStep = simpleLocalFlowStep/2;
+
+private predicate indirectionOperandFlow(IndirectOperand nodeFrom, Node nodeTo) {
+  // Reduce the indirection count by 1 if we're passing through a `LoadInstruction`.
+  exists(int ind, LoadInstruction load |
+    hasOperandAndIndex(nodeFrom, load.getSourceAddressOperand(), ind) and
+    nodeHasInstruction(nodeTo, load, ind - 1)
+  )
+  or
+  // If an operand flows to an instruction, then the indirection of
+  // the operand also flows to the indirction of the instruction.
+  exists(Operand operand, Instruction instr, int indirectionIndex |
+    simpleInstructionLocalFlowStep(operand, instr) and
+    hasOperandAndIndex(nodeFrom, operand, indirectionIndex) and
+    hasInstructionAndIndex(nodeTo, instr, indirectionIndex)
+  )
+  or
+  // If there's indirect flow to an operand, then there's also indirect
+  // flow to the operand after applying some pointer arithmetic.
+  exists(PointerArithmeticInstruction pointerArith, int indirectionIndex |
+    hasOperandAndIndex(nodeFrom, pointerArith.getAnOperand(), indirectionIndex) and
+    hasInstructionAndIndex(nodeTo, pointerArith, indirectionIndex)
+  )
+}
+
+pragma[noinline]
+predicate hasOperandAndIndex(IndirectOperand indirectOperand, Operand operand, int indirectionIndex) {
+  indirectOperand.getOperand() = operand and
+  indirectOperand.getIndirectionIndex() = indirectionIndex
+}
+
+pragma[noinline]
+predicate hasInstructionAndIndex(
+  IndirectInstruction indirectInstr, Instruction instr, int indirectionIndex
+) {
+  indirectInstr.getInstruction() = instr and
+  indirectInstr.getIndirectionIndex() = indirectionIndex
+}
+
+private predicate indirectionInstructionFlow(IndirectInstruction nodeFrom, IndirectOperand nodeTo) {
+  // If there's flow from an instruction to an operand, then there's also flow from the
+  // indirect instruction to the indirect operand.
+  exists(Operand operand, Instruction instr, int indirectionIndex |
+    simpleOperandLocalFlowStep(pragma[only_bind_into](instr), pragma[only_bind_into](operand))
+  |
+    hasOperandAndIndex(nodeTo, operand, indirectionIndex) and
+    hasInstructionAndIndex(nodeFrom, instr, indirectionIndex)
+  )
+}
+
+/**
+ * INTERNAL: do not use.
+ *
+ * This is the local flow predicate that's used as a building block in global
+ * data flow. It may have less flow than the `localFlowStep` predicate.
+ */
+predicate simpleLocalFlowStep(Node nodeFrom, Node nodeTo) {
+  // Post update node -> Node flow
+  Ssa::ssaFlow(nodeFrom.(PostUpdateNode).getPreUpdateNode(), nodeTo)
+  or
+  // Def-use/Use-use flow
+  Ssa::ssaFlow(nodeFrom, nodeTo)
+  or
+  // Operand -> Instruction flow
+  simpleInstructionLocalFlowStep(nodeFrom.asOperand(), nodeTo.asInstruction())
+  or
+  // Instruction -> Operand flow
+  simpleOperandLocalFlowStep(nodeFrom.asInstruction(), nodeTo.asOperand())
+  or
+  // Phi node -> Node flow
+  Ssa::fromPhiNode(nodeFrom, nodeTo)
+  or
+  // Indirect operand -> (indirect) instruction flow
+  indirectionOperandFlow(nodeFrom, nodeTo)
+  or
+  // Indirect instruction -> indirect operand flow
+  indirectionInstructionFlow(nodeFrom, nodeTo)
+  or
+  // Flow through modeled functions
+  modelFlow(nodeFrom, nodeTo)
+  or
+  // Reverse flow: data that flows from the definition node back into the indirection returned
+  // by a function. This allows data to flow 'in' through references returned by a modeled
+  // function such as `operator[]`.
+  exists(Operand address, int indirectionIndex |
+    nodeHasOperand(nodeTo.(IndirectReturnOutNode), address, indirectionIndex)
+  |
+    exists(StoreInstruction store |
+      nodeHasInstruction(nodeFrom, store, indirectionIndex - 1) and
+      store.getDestinationAddressOperand() = address
+    )
+    or
+    Ssa::outNodeHasAddressAndIndex(nodeFrom, address, indirectionIndex - 1)
+  )
+}
+
+pragma[noinline]
+private predicate getAddressType(LoadInstruction load, Type t) {
+  exists(Instruction address |
+    address = load.getSourceAddress() and
+    t = address.getResultType()
+  )
+}
+
+/**
+ * Like the AST dataflow library, we want to conflate the address and value of a reference. This class
+ * represents the `LoadInstruction` that is generated from a reference dereference.
+ */
+private class ReferenceDereferenceInstruction extends LoadInstruction {
+  ReferenceDereferenceInstruction() {
+    exists(ReferenceType ref |
+      getAddressType(this, ref) and
+      this.getResultType() = ref.getBaseType()
+    )
+  }
+}
+
+private predicate simpleInstructionLocalFlowStep(Operand opFrom, Instruction iTo) {
+  // Treat all conversions as flow, even conversions between different numeric types.
+  conversionFlow(opFrom, iTo, false)
+  or
+  iTo.(CopyInstruction).getSourceValueOperand() = opFrom
+  or
+  // Conflate references and values like in AST dataflow.
+  iTo.(ReferenceDereferenceInstruction).getSourceAddressOperand() = opFrom
+}
+
+private predicate simpleOperandLocalFlowStep(Instruction iFrom, Operand opTo) {
+  not opTo instanceof MemoryOperand and
+  opTo.getDef() = iFrom
+}
+
+private predicate modelFlow(Node nodeFrom, Node nodeTo) {
+  exists(
+    CallInstruction call, DataFlowFunction func, FunctionInput modelIn, FunctionOutput modelOut
+  |
+    call.getStaticCallTarget() = func and
+    func.hasDataFlow(modelIn, modelOut)
+  |
+    nodeFrom = callInput(call, modelIn) and
+    nodeTo = callOutput(call, modelOut)
+    or
+    exists(int d |
+      nodeFrom = callInput(call, modelIn, d) and
+      nodeTo = callOutput(call, modelOut, d)
+    )
+  )
+}
+
+/**
+ * Holds if data flows from `source` to `sink` in zero or more local
+ * (intra-procedural) steps.
+ */
+pragma[inline]
+predicate localFlow(Node source, Node sink) { localFlowStep*(source, sink) }
+
+/**
+ * Holds if data can flow from `i1` to `i2` in zero or more
+ * local (intra-procedural) steps.
+ */
+pragma[inline]
+predicate localInstructionFlow(Instruction e1, Instruction e2) {
+  localFlow(instructionNode(e1), instructionNode(e2))
+}
+
+/**
+ * Holds if data can flow from `e1` to `e2` in zero or more
+ * local (intra-procedural) steps.
+ */
+pragma[inline]
+predicate localExprFlow(Expr e1, Expr e2) { localFlow(exprNode(e1), exprNode(e2)) }
+
+cached
+private newtype TContent =
+  TFieldContent(Field f, int indirectionIndex) {
+    indirectionIndex = [1 .. Ssa::getMaxIndirectionsForType(f.getUnspecifiedType())] and
+    // Reads and writes of union fields are tracked using `UnionContent`.
+    not f.getDeclaringType() instanceof Union
+  } or
+  TUnionContent(Union u, int indirectionIndex) {
+    // We key `UnionContent` by the union instead of its fields since a write to one
+    // field can be read by any read of the union's fields.
+    indirectionIndex =
+      [1 .. max(Ssa::getMaxIndirectionsForType(u.getAField().getUnspecifiedType()))]
+  } or
+  TCollectionContent() or // Not used in C/C++
+  TArrayContent() // Not used in C/C++.
+
+/**
+ * A description of the way data may be stored inside an object. Examples
+ * include instance fields, the contents of a collection object, or the contents
+ * of an array.
+ */
+class Content extends TContent {
+  /** Gets a textual representation of this element. */
+  abstract string toString();
+
+  predicate hasLocationInfo(string path, int sl, int sc, int el, int ec) {
+    path = "" and sl = 0 and sc = 0 and el = 0 and ec = 0
+  }
+}
+
+/** A reference through a non-union instance field. */
+class FieldContent extends Content, TFieldContent {
+  Field f;
+  int indirectionIndex;
+
+  FieldContent() { this = TFieldContent(f, indirectionIndex) }
+
+  override string toString() {
+    indirectionIndex = 1 and result = f.toString()
+    or
+    indirectionIndex > 1 and result = f.toString() + " indirection"
+  }
+
+  Field getField() { result = f }
+
+  pragma[inline]
+  int getIndirectionIndex() {
+    pragma[only_bind_into](result) = pragma[only_bind_out](indirectionIndex)
+  }
+}
+
+/** A reference through an instance field of a union. */
+class UnionContent extends Content, TUnionContent {
+  Union u;
+  int indirectionIndex;
+
+  UnionContent() { this = TUnionContent(u, indirectionIndex) }
+
+  override string toString() {
+    indirectionIndex = 1 and result = u.toString()
+    or
+    indirectionIndex > 1 and result = u.toString() + " indirection"
+  }
+
+  Field getAField() { result = u.getAField() }
+
+  pragma[inline]
+  int getIndirectionIndex() {
+    pragma[only_bind_into](result) = pragma[only_bind_out](indirectionIndex)
+  }
+}
+
+/** A reference through an array. */
+class ArrayContent extends Content, TArrayContent {
+  override string toString() { result = "[]" }
+}
+
+/** A reference through the contents of some collection-like container. */
+private class CollectionContent extends Content, TCollectionContent {
+  override string toString() { result = "<element>" }
+}
+
+/**
+ * An entity that represents a set of `Content`s.
+ *
+ * The set may be interpreted differently depending on whether it is
+ * stored into (`getAStoreContent`) or read from (`getAReadContent`).
+ */
+class ContentSet instanceof Content {
+  /** Gets a content that may be stored into when storing into this set. */
+  Content getAStoreContent() { result = this }
+
+  /** Gets a content that may be read from when reading from this set. */
+  Content getAReadContent() { result = this }
+
+  /** Gets a textual representation of this content set. */
+  string toString() { result = super.toString() }
+
+  /**
+   * Holds if this element is at the specified location.
+   * The location spans column `startcolumn` of line `startline` to
+   * column `endcolumn` of line `endline` in file `filepath`.
+   * For more information, see
+   * [Locations](https://codeql.github.com/docs/writing-codeql-queries/providing-locations-in-codeql-queries/).
+   */
+  predicate hasLocationInfo(string path, int sl, int sc, int el, int ec) {
+    super.hasLocationInfo(path, sl, sc, el, ec)
+  }
+}
+
+private IRBlock getBasicBlock(Node node) {
+  node.asInstruction().getBlock() = result
+  or
+  node.asOperand().getUse().getBlock() = result
+  or
+  node.(SsaPhiNode).getPhiNode().getBasicBlock() = result
+  or
+  node.(IndirectOperand).getOperand().getUse().getBlock() = result
+  or
+  node.(IndirectInstruction).getInstruction().getBlock() = result
+  or
+  result = getBasicBlock(node.(PostUpdateNode).getPreUpdateNode())
+}
+
+/**
+ * Holds if the guard `g` validates the expression `e` upon evaluating to `branch`.
+ *
+ * The expression `e` is expected to be a syntactic part of the guard `g`.
+ * For example, the guard `g` might be a call `isSafe(x)` and the expression `e`
+ * the argument `x`.
+ */
+signature predicate guardChecksSig(IRGuardCondition g, Expr e, boolean branch);
+
+/**
+ * Provides a set of barrier nodes for a guard that validates an expression.
+ *
+ * This is expected to be used in `isBarrier`/`isSanitizer` definitions
+ * in data flow and taint tracking.
+ */
+module BarrierGuard<guardChecksSig/3 guardChecks> {
+  /** Gets a node that is safely guarded by the given guard check. */
+  ExprNode getABarrierNode() {
+    exists(IRGuardCondition g, Expr e, ValueNumber value, boolean edge |
+      e = value.getAnInstruction().getConvertedResultExpression() and
+      result.getConvertedExpr() = e and
+      guardChecks(g, value.getAnInstruction().getConvertedResultExpression(), edge) and
+      g.controls(getBasicBlock(result), edge)
+    )
+  }
+}
+
+/**
+ * Holds if the guard `g` validates the instruction `instr` upon evaluating to `branch`.
+ */
+signature predicate instructionGuardChecksSig(IRGuardCondition g, Instruction instr, boolean branch);
+
+/**
+ * Provides a set of barrier nodes for a guard that validates an instruction.
+ *
+ * This is expected to be used in `isBarrier`/`isSanitizer` definitions
+ * in data flow and taint tracking.
+ */
+module InstructionBarrierGuard<instructionGuardChecksSig/3 instructionGuardChecks> {
+  /** Gets a node that is safely guarded by the given guard check. */
+  ExprNode getABarrierNode() {
+    exists(IRGuardCondition g, ValueNumber value, boolean edge |
+      instructionGuardChecks(g, value.getAnInstruction(), edge) and
+      result.asInstruction() = value.getAnInstruction() and
+      g.controls(result.asInstruction().getBlock(), edge)
+    )
+  }
+}
+
+/**
+ * DEPRECATED: Use `BarrierGuard` module instead.
+ *
+ * A guard that validates some instruction.
+ *
+ * To use this in a configuration, extend the class and provide a
+ * characteristic predicate precisely specifying the guard, and override
+ * `checks` to specify what is being validated and in which branch.
+ *
+ * It is important that all extending classes in scope are disjoint.
+ */
+deprecated class BarrierGuard extends IRGuardCondition {
+  /** Override this predicate to hold if this guard validates `instr` upon evaluating to `b`. */
+  predicate checksInstr(Instruction instr, boolean b) { none() }
+
+  /** Override this predicate to hold if this guard validates `expr` upon evaluating to `b`. */
+  predicate checks(Expr e, boolean b) { none() }
+
+  /** Gets a node guarded by this guard. */
+  final Node getAGuardedNode() {
+    exists(ValueNumber value, boolean edge |
+      (
+        this.checksInstr(value.getAnInstruction(), edge)
+        or
+        this.checks(value.getAnInstruction().getConvertedResultExpression(), edge)
+      ) and
+      result.asInstruction() = value.getAnInstruction() and
+      this.controls(result.asInstruction().getBlock(), edge)
+    )
+  }
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/ModelUtil.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/ModelUtil.qll
new file mode 100644
index 00000000000..c302c6ef878
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/ModelUtil.qll
@@ -0,0 +1,93 @@
+/**
+ * Provides predicates for mapping the `FunctionInput` and `FunctionOutput`
+ * classes used in function models to the corresponding instructions.
+ */
+
+private import semmle.code.cpp.ir.IR
+private import experimental.semmle.code.cpp.ir.dataflow.DataFlow
+private import experimental.semmle.code.cpp.ir.dataflow.internal.DataFlowUtil
+private import SsaInternals as Ssa
+
+/**
+ * Gets the instruction that goes into `input` for `call`.
+ */
+DataFlow::Node callInput(CallInstruction call, FunctionInput input) {
+  // An argument or qualifier
+  exists(int index |
+    result.asOperand() = call.getArgumentOperand(index) and
+    input.isParameterOrQualifierAddress(index)
+  )
+  or
+  // A value pointed to by an argument or qualifier
+  exists(int index, int indirectionIndex |
+    hasOperandAndIndex(result, call.getArgumentOperand(index), indirectionIndex) and
+    input.isParameterDerefOrQualifierObject(index, indirectionIndex)
+  )
+  or
+  exists(int ind |
+    result = getIndirectReturnOutNode(call, ind) and
+    input.isReturnValueDeref(ind)
+  )
+}
+
+/**
+ * Gets the instruction that holds the `output` for `call`.
+ */
+Node callOutput(CallInstruction call, FunctionOutput output) {
+  // The return value
+  result.asInstruction() = call and
+  output.isReturnValue()
+  or
+  // The side effect of a call on the value pointed to by an argument or qualifier
+  exists(int index, int indirectionIndex |
+    result.(IndirectArgumentOutNode).getArgumentIndex() = index and
+    result.(IndirectArgumentOutNode).getIndirectionIndex() + 1 = indirectionIndex and
+    result.(IndirectArgumentOutNode).getCallInstruction() = call and
+    output.isParameterDerefOrQualifierObject(index, indirectionIndex)
+  )
+  or
+  exists(int ind |
+    result = getIndirectReturnOutNode(call, ind) and
+    output.isReturnValueDeref(ind)
+  )
+}
+
+DataFlow::Node callInput(CallInstruction call, FunctionInput input, int d) {
+  exists(DataFlow::Node n | n = callInput(call, input) and d > 0 |
+    // An argument or qualifier
+    hasOperandAndIndex(result, n.asOperand(), d)
+    or
+    exists(Operand operand, int indirectionIndex |
+      // A value pointed to by an argument or qualifier
+      hasOperandAndIndex(n, operand, indirectionIndex) and
+      hasOperandAndIndex(result, operand, indirectionIndex + d)
+    )
+  )
+}
+
+private IndirectReturnOutNode getIndirectReturnOutNode(CallInstruction call, int d) {
+  result.getCallInstruction() = call and
+  result.getIndirectionIndex() = d
+}
+
+/**
+ * Gets the instruction that holds the `output` for `call`.
+ */
+bindingset[d]
+Node callOutput(CallInstruction call, FunctionOutput output, int d) {
+  exists(DataFlow::Node n | n = callOutput(call, output) and d > 0 |
+    // The return value
+    result = getIndirectReturnOutNode(n.asInstruction(), d)
+    or
+    // If there isn't an indirect out node for the call with indirection `d` then
+    // we conflate this with the underlying `CallInstruction`.
+    not exists(getIndirectReturnOutNode(call, d)) and
+    n.asInstruction() = result.asInstruction()
+    or
+    // The side effect of a call on the value pointed to by an argument or qualifier
+    exists(Operand operand, int indirectionIndex |
+      Ssa::outNodeHasAddressAndIndex(n, operand, indirectionIndex) and
+      Ssa::outNodeHasAddressAndIndex(result, operand, indirectionIndex + d)
+    )
+  )
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/PrintIRLocalFlow.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/PrintIRLocalFlow.qll
new file mode 100644
index 00000000000..7359656e5a4
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/PrintIRLocalFlow.qll
@@ -0,0 +1,136 @@
+private import cpp
+// The `ValueNumbering` library has to be imported right after `cpp` to ensure
+// that the cached IR gets the same checksum here as it does in queries that use
+// `ValueNumbering` without `DataFlow`.
+private import semmle.code.cpp.ir.ValueNumbering
+private import semmle.code.cpp.ir.IR
+private import semmle.code.cpp.ir.dataflow.DataFlow
+private import semmle.code.cpp.ir.dataflow.internal.DataFlowUtil
+private import PrintIRUtilities
+
+/**
+ * Gets the local dataflow from other nodes in the same function to this node.
+ */
+private string getFromFlow(DataFlow::Node useNode, int order1, int order2) {
+  exists(DataFlow::Node defNode, string prefix |
+    (
+      simpleLocalFlowStep(defNode, useNode) and prefix = ""
+      or
+      any(DataFlow::Configuration cfg).isAdditionalFlowStep(defNode, useNode) and
+      defNode.getEnclosingCallable() = useNode.getEnclosingCallable() and
+      prefix = "+"
+    ) and
+    if defNode.asInstruction() = useNode.asOperand().getAnyDef()
+    then
+      // Shorthand for flow from the def of this operand.
+      result = prefix + "def" and
+      order1 = -1 and
+      order2 = 0
+    else
+      if defNode.asOperand().getUse() = useNode.asInstruction()
+      then
+        // Shorthand for flow from an operand of this instruction
+        result = prefix + defNode.asOperand().getDumpId() and
+        order1 = -1 and
+        order2 = defNode.asOperand().getDumpSortOrder()
+      else result = prefix + nodeId(defNode, order1, order2)
+  )
+}
+
+/**
+ * Gets the local dataflow from this node to other nodes in the same function.
+ */
+private string getToFlow(DataFlow::Node defNode, int order1, int order2) {
+  exists(DataFlow::Node useNode, string prefix |
+    (
+      simpleLocalFlowStep(defNode, useNode) and prefix = ""
+      or
+      any(DataFlow::Configuration cfg).isAdditionalFlowStep(defNode, useNode) and
+      defNode.getEnclosingCallable() = useNode.getEnclosingCallable() and
+      prefix = "+"
+    ) and
+    if useNode.asInstruction() = defNode.asOperand().getUse()
+    then
+      // Shorthand for flow to this operand's instruction.
+      result = prefix + "result" and
+      order1 = -1 and
+      order2 = 0
+    else result = prefix + nodeId(useNode, order1, order2)
+  )
+}
+
+/**
+ * Gets the properties of the dataflow node `node`.
+ */
+private string getNodeProperty(DataFlow::Node node, string key) {
+  // List dataflow into and out of this node. Flow into this node is printed as `src->@`, and flow
+  // out of this node is printed as `@->dest`.
+  key = "flow" and
+  result =
+    strictconcat(string flow, boolean to, int order1, int order2 |
+      flow = getFromFlow(node, order1, order2) + "->@" and to = false
+      or
+      flow = "@->" + getToFlow(node, order1, order2) and to = true
+    |
+      flow, ", " order by to, order1, order2, flow
+    )
+  or
+  // Is this node a dataflow sink?
+  key = "sink" and
+  any(DataFlow::Configuration cfg).isSink(node) and
+  result = "true"
+  or
+  // Is this node a dataflow source?
+  key = "source" and
+  any(DataFlow::Configuration cfg).isSource(node) and
+  result = "true"
+  or
+  // Is this node a dataflow barrier, and if so, what kind?
+  key = "barrier" and
+  result =
+    strictconcat(string kind |
+      any(DataFlow::Configuration cfg).isBarrier(node) and kind = "full"
+      or
+      any(DataFlow::Configuration cfg).isBarrierIn(node) and kind = "in"
+      or
+      any(DataFlow::Configuration cfg).isBarrierOut(node) and kind = "out"
+    |
+      kind, ", "
+    )
+  or
+  // Is there partial flow from a source to this node?
+  // This property will only be emitted if partial flow is enabled by overriding
+  // `DataFlow::Configration::explorationLimit()`.
+  key = "pflow" and
+  result =
+    strictconcat(DataFlow::PartialPathNode sourceNode, DataFlow::PartialPathNode destNode, int dist,
+      int order1, int order2 |
+      any(DataFlow::Configuration cfg).hasPartialFlow(sourceNode, destNode, dist) and
+      destNode.getNode() = node and
+      // Only print flow from a source in the same function.
+      sourceNode.getNode().getEnclosingCallable() = node.getEnclosingCallable()
+    |
+      nodeId(sourceNode.getNode(), order1, order2) + "+" + dist.toString(), ", "
+      order by
+        order1, order2, dist desc
+    )
+}
+
+/**
+ * Property provider for local IR dataflow.
+ */
+class LocalFlowPropertyProvider extends IRPropertyProvider {
+  override string getOperandProperty(Operand operand, string key) {
+    exists(DataFlow::Node node |
+      operand = node.asOperand() and
+      result = getNodeProperty(node, key)
+    )
+  }
+
+  override string getInstructionProperty(Instruction instruction, string key) {
+    exists(DataFlow::Node node |
+      instruction = node.asInstruction() and
+      result = getNodeProperty(node, key)
+    )
+  }
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/PrintIRStoreSteps.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/PrintIRStoreSteps.qll
new file mode 100644
index 00000000000..8c318216217
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/PrintIRStoreSteps.qll
@@ -0,0 +1,33 @@
+/**
+ * Print the dataflow local store steps in IR dumps.
+ */
+
+private import cpp
+// The `ValueNumbering` library has to be imported right after `cpp` to ensure
+// that the cached IR gets the same checksum here as it does in queries that use
+// `ValueNumbering` without `DataFlow`.
+private import semmle.code.cpp.ir.ValueNumbering
+private import semmle.code.cpp.ir.IR
+private import semmle.code.cpp.ir.dataflow.DataFlow
+private import semmle.code.cpp.ir.dataflow.internal.DataFlowUtil
+private import semmle.code.cpp.ir.dataflow.internal.DataFlowPrivate
+private import PrintIRUtilities
+
+/**
+ * Property provider for local IR dataflow store steps.
+ */
+class LocalFlowPropertyProvider extends IRPropertyProvider {
+  override string getInstructionProperty(Instruction instruction, string key) {
+    exists(DataFlow::Node objectNode, Content content |
+      key = "content[" + content.toString() + "]" and
+      instruction = objectNode.asInstruction() and
+      result =
+        strictconcat(string element, DataFlow::Node fieldNode |
+          storeStep(fieldNode, content, objectNode) and
+          element = nodeId(fieldNode, _, _)
+        |
+          element, ", "
+        )
+    )
+  }
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/PrintIRUtilities.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/PrintIRUtilities.qll
new file mode 100644
index 00000000000..5fc15cf986c
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/PrintIRUtilities.qll
@@ -0,0 +1,39 @@
+/**
+ * Shared utilities used when printing dataflow annotations in IR dumps.
+ */
+
+private import cpp
+// The `ValueNumbering` library has to be imported right after `cpp` to ensure
+// that the cached IR gets the same checksum here as it does in queries that use
+// `ValueNumbering` without `DataFlow`.
+private import semmle.code.cpp.ir.ValueNumbering
+private import semmle.code.cpp.ir.IR
+private import semmle.code.cpp.ir.dataflow.DataFlow
+
+/**
+ * Gets a short ID for an IR dataflow node.
+ * - For `Instruction`s, this is just the result ID of the instruction (e.g. `m128`).
+ * - For `Operand`s, this is the label of the operand, prefixed with the result ID of the
+ *   instruction and a dot (e.g. `m128.left`).
+ * - For `Variable`s, this is the qualified name of the variable.
+ */
+string nodeId(DataFlow::Node node, int order1, int order2) {
+  exists(Instruction instruction | instruction = node.asInstruction() |
+    result = instruction.getResultId() and
+    order1 = instruction.getBlock().getDisplayIndex() and
+    order2 = instruction.getDisplayIndexInBlock()
+  )
+  or
+  exists(Operand operand, Instruction instruction |
+    operand = node.asOperand() and
+    instruction = operand.getUse()
+  |
+    result = instruction.getResultId() + "." + operand.getDumpId() and
+    order1 = instruction.getBlock().getDisplayIndex() and
+    order2 = instruction.getDisplayIndexInBlock()
+  )
+  or
+  result = "var(" + node.asVariable().getQualifiedName() + ")" and
+  order1 = 1000000 and
+  order2 = 0
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/SsaInternals.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/SsaInternals.qll
new file mode 100644
index 00000000000..61ff5707d77
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/SsaInternals.qll
@@ -0,0 +1,547 @@
+private import codeql.ssa.Ssa as SsaImplCommon
+private import semmle.code.cpp.ir.IR
+private import DataFlowUtil
+private import DataFlowImplCommon as DataFlowImplCommon
+private import semmle.code.cpp.models.interfaces.Allocation as Alloc
+private import semmle.code.cpp.models.interfaces.DataFlow as DataFlow
+private import semmle.code.cpp.ir.internal.IRCppLanguage
+private import DataFlowPrivate
+private import ssa0.SsaInternals as SsaInternals0
+import SsaInternalsCommon
+
+private module SourceVariables {
+  int getMaxIndirectionForIRVariable(IRVariable var) {
+    exists(Type type, boolean isGLValue |
+      var.getLanguageType().hasType(type, isGLValue) and
+      if isGLValue = true
+      then result = 1 + getMaxIndirectionsForType(type)
+      else result = getMaxIndirectionsForType(type)
+    )
+  }
+
+  class BaseSourceVariable = SsaInternals0::BaseSourceVariable;
+
+  class BaseIRVariable = SsaInternals0::BaseIRVariable;
+
+  class BaseCallVariable = SsaInternals0::BaseCallVariable;
+
+  cached
+  private newtype TSourceVariable =
+    TSourceIRVariable(BaseIRVariable baseVar, int ind) {
+      ind = [0 .. getMaxIndirectionForIRVariable(baseVar.getIRVariable())]
+    } or
+    TCallVariable(AllocationInstruction call, int ind) {
+      ind = [0 .. countIndirectionsForCppType(getResultLanguageType(call))]
+    }
+
+  abstract class SourceVariable extends TSourceVariable {
+    int ind;
+
+    bindingset[ind]
+    SourceVariable() { any() }
+
+    abstract string toString();
+
+    int getIndirection() { result = ind }
+
+    abstract BaseSourceVariable getBaseVariable();
+  }
+
+  class SourceIRVariable extends SourceVariable, TSourceIRVariable {
+    BaseIRVariable var;
+
+    SourceIRVariable() { this = TSourceIRVariable(var, ind) }
+
+    IRVariable getIRVariable() { result = var.getIRVariable() }
+
+    override BaseIRVariable getBaseVariable() { result.getIRVariable() = this.getIRVariable() }
+
+    override string toString() {
+      ind = 0 and
+      result = this.getIRVariable().toString()
+      or
+      ind > 0 and
+      result = this.getIRVariable().toString() + " indirection"
+    }
+  }
+
+  class CallVariable extends SourceVariable, TCallVariable {
+    AllocationInstruction call;
+
+    CallVariable() { this = TCallVariable(call, ind) }
+
+    AllocationInstruction getCall() { result = call }
+
+    override BaseCallVariable getBaseVariable() { result.getCallInstruction() = call }
+
+    override string toString() {
+      ind = 0 and
+      result = "Call"
+      or
+      ind > 0 and
+      result = "Call indirection"
+    }
+  }
+}
+
+import SourceVariables
+
+predicate hasIndirectOperand(Operand op, int indirectionIndex) {
+  exists(CppType type, int m |
+    not ignoreOperand(op) and
+    type = getLanguageType(op) and
+    m = countIndirectionsForCppType(type) and
+    indirectionIndex = [1 .. m]
+  )
+}
+
+predicate hasIndirectInstruction(Instruction instr, int indirectionIndex) {
+  exists(CppType type, int m |
+    not ignoreInstruction(instr) and
+    type = getResultLanguageType(instr) and
+    m = countIndirectionsForCppType(type) and
+    indirectionIndex = [1 .. m]
+  )
+}
+
+cached
+private newtype TDefOrUseImpl =
+  TDefImpl(Operand address, int indirectionIndex) {
+    isDef(_, _, address, _, _, indirectionIndex) and
+    // We only include the definition if the SSA pruning stage
+    // concluded that the definition is live after the write.
+    any(SsaInternals0::Def def).getAddressOperand() = address
+  } or
+  TUseImpl(Operand operand, int indirectionIndex) {
+    isUse(_, operand, _, _, indirectionIndex) and
+    not isDef(_, _, operand, _, _, _)
+  }
+
+abstract private class DefOrUseImpl extends TDefOrUseImpl {
+  /** Gets a textual representation of this element. */
+  abstract string toString();
+
+  /** Gets the block of this definition or use. */
+  abstract IRBlock getBlock();
+
+  /** Holds if this definition or use has index `index` in block `block`. */
+  abstract predicate hasIndexInBlock(IRBlock block, int index);
+
+  final predicate hasIndexInBlock(IRBlock block, int index, SourceVariable sv) {
+    this.hasIndexInBlock(block, index) and
+    sv = this.getSourceVariable()
+  }
+
+  /** Gets the location of this element. */
+  abstract Cpp::Location getLocation();
+
+  /**
+   * Gets the index (i.e., the number of loads required) of this
+   * definition or use.
+   *
+   * Note that this is _not_ the definition's (or use's) index in
+   * the enclosing basic block. To obtain this index, use
+   * `DefOrUseImpl::hasIndexInBlock/2` or `DefOrUseImpl::hasIndexInBlock/3`.
+   */
+  abstract int getIndirectionIndex();
+
+  /**
+   * Gets the instruction that computes the base of this definition or use.
+   * This is always a `VariableAddressInstruction` or an `AllocationInstruction`.
+   */
+  abstract Instruction getBase();
+
+  final BaseSourceVariable getBaseSourceVariable() {
+    exists(IRVariable var |
+      result.(BaseIRVariable).getIRVariable() = var and
+      instructionHasIRVariable(this.getBase(), var)
+    )
+    or
+    result.(BaseCallVariable).getCallInstruction() = this.getBase()
+  }
+
+  /** Gets the variable that is defined or used. */
+  final SourceVariable getSourceVariable() {
+    exists(BaseSourceVariable v, int ind |
+      sourceVariableHasBaseAndIndex(result, v, ind) and
+      defOrUseHasSourceVariable(this, v, ind)
+    )
+  }
+}
+
+pragma[noinline]
+private predicate instructionHasIRVariable(VariableAddressInstruction vai, IRVariable var) {
+  vai.getIRVariable() = var
+}
+
+private predicate defOrUseHasSourceVariable(DefOrUseImpl defOrUse, BaseSourceVariable bv, int ind) {
+  defHasSourceVariable(defOrUse, bv, ind)
+  or
+  useHasSourceVariable(defOrUse, bv, ind)
+}
+
+pragma[noinline]
+private predicate defHasSourceVariable(DefImpl def, BaseSourceVariable bv, int ind) {
+  bv = def.getBaseSourceVariable() and
+  ind = def.getIndirection()
+}
+
+pragma[noinline]
+private predicate useHasSourceVariable(UseImpl use, BaseSourceVariable bv, int ind) {
+  bv = use.getBaseSourceVariable() and
+  ind = use.getIndirection()
+}
+
+pragma[noinline]
+private predicate sourceVariableHasBaseAndIndex(SourceVariable v, BaseSourceVariable bv, int ind) {
+  v.getBaseVariable() = bv and
+  v.getIndirection() = ind
+}
+
+class DefImpl extends DefOrUseImpl, TDefImpl {
+  Operand address;
+  int ind;
+
+  DefImpl() { this = TDefImpl(address, ind) }
+
+  override Instruction getBase() { isDef(_, _, address, result, _, _) }
+
+  Operand getAddressOperand() { result = address }
+
+  int getIndirection() { isDef(_, _, address, _, result, ind) }
+
+  override int getIndirectionIndex() { result = ind }
+
+  Instruction getDefiningInstruction() { isDef(_, result, address, _, _, _) }
+
+  override string toString() { result = "DefImpl" }
+
+  override IRBlock getBlock() { result = this.getDefiningInstruction().getBlock() }
+
+  override Cpp::Location getLocation() { result = this.getDefiningInstruction().getLocation() }
+
+  final override predicate hasIndexInBlock(IRBlock block, int index) {
+    this.getDefiningInstruction() = block.getInstruction(index)
+  }
+
+  predicate isCertain() { isDef(true, _, address, _, _, ind) }
+}
+
+class UseImpl extends DefOrUseImpl, TUseImpl {
+  Operand operand;
+  int ind;
+
+  UseImpl() { this = TUseImpl(operand, ind) }
+
+  Operand getOperand() { result = operand }
+
+  override string toString() { result = "UseImpl" }
+
+  final override predicate hasIndexInBlock(IRBlock block, int index) {
+    operand.getUse() = block.getInstruction(index)
+  }
+
+  final override IRBlock getBlock() { result = operand.getUse().getBlock() }
+
+  final override Cpp::Location getLocation() { result = operand.getLocation() }
+
+  final int getIndirection() { isUse(_, operand, _, result, ind) }
+
+  override int getIndirectionIndex() { result = ind }
+
+  override Instruction getBase() { isUse(_, operand, result, _, ind) }
+
+  predicate isCertain() { isUse(true, operand, _, _, ind) }
+}
+
+/**
+ * Holds if `defOrUse1` is a definition which is first read by `use`,
+ * or if `defOrUse1` is a use and `use` is a next subsequent use.
+ *
+ * In both cases, `use` can either be an explicit use written in the
+ * source file, or it can be a phi node as computed by the SSA library.
+ */
+predicate adjacentDefRead(DefOrUse defOrUse1, UseOrPhi use) {
+  exists(IRBlock bb1, int i1, SourceVariable v |
+    defOrUse1.asDefOrUse().hasIndexInBlock(bb1, i1, v)
+  |
+    exists(IRBlock bb2, int i2 |
+      adjacentDefRead(_, pragma[only_bind_into](bb1), pragma[only_bind_into](i1),
+        pragma[only_bind_into](bb2), pragma[only_bind_into](i2))
+    |
+      use.asDefOrUse().(UseImpl).hasIndexInBlock(bb2, i2, v)
+    )
+    or
+    exists(PhiNode phi |
+      lastRefRedef(_, bb1, i1, phi) and
+      use.asPhi() = phi and
+      phi.getSourceVariable() = pragma[only_bind_into](v)
+    )
+  )
+}
+
+private predicate useToNode(UseOrPhi use, Node nodeTo) {
+  exists(UseImpl useImpl |
+    useImpl = use.asDefOrUse() and
+    nodeHasOperand(nodeTo, useImpl.getOperand(), useImpl.getIndirectionIndex())
+  )
+  or
+  nodeTo.(SsaPhiNode).getPhiNode() = use.asPhi()
+}
+
+pragma[noinline]
+predicate outNodeHasAddressAndIndex(
+  IndirectArgumentOutNode out, Operand address, int indirectionIndex
+) {
+  out.getAddressOperand() = address and
+  out.getIndirectionIndex() = indirectionIndex
+}
+
+private predicate defToNode(Node nodeFrom, Def def) {
+  nodeHasInstruction(nodeFrom, def.getDefiningInstruction(), def.getIndirectionIndex())
+}
+
+private predicate nodeToDefOrUse(Node nodeFrom, SsaDefOrUse defOrUse) {
+  // Node -> Def
+  defToNode(nodeFrom, defOrUse)
+  or
+  // Node -> Use
+  useToNode(defOrUse, nodeFrom)
+}
+
+/**
+ * Perform a single conversion-like step from `nFrom` to `nTo`. This relation
+ * only holds when there is no use-use relation out of `nTo`.
+ */
+private predicate indirectConversionFlowStep(Node nFrom, Node nTo) {
+  not exists(UseOrPhi defOrUse |
+    nodeToDefOrUse(nTo, defOrUse) and
+    adjacentDefRead(defOrUse, _)
+  ) and
+  exists(Operand op1, Operand op2, int indirectionIndex, Instruction instr |
+    hasOperandAndIndex(nFrom, op1, pragma[only_bind_into](indirectionIndex)) and
+    hasOperandAndIndex(nTo, op2, pragma[only_bind_into](indirectionIndex)) and
+    instr = op2.getDef() and
+    conversionFlow(op1, instr, _)
+  )
+}
+
+/**
+ * The reason for this predicate is a bit annoying:
+ * We cannot mark a `PointerArithmeticInstruction` that computes an offset based on some SSA
+ * variable `x` as a use of `x` since this creates taint-flow in the following example:
+ * ```c
+ * int x = array[source]
+ * sink(*array)
+ * ```
+ * This is because `source` would flow from the operand of `PointerArithmeticInstruction` to the
+ * result of the instruction, and into the `IndirectOperand` that represents the value of `*array`.
+ * Then, via use-use flow, flow will arrive at `*array` in `sink(*array)`.
+ *
+ * So this predicate recurses back along conversions and `PointerArithmeticInstruction`s to find the
+ * first use that has provides use-use flow, and uses that target as the target of the `nodeFrom`.
+ */
+private predicate adjustForPointerArith(Node nodeFrom, UseOrPhi use) {
+  nodeFrom = any(PostUpdateNode pun).getPreUpdateNode() and
+  exists(DefOrUse defOrUse, Node adjusted |
+    indirectConversionFlowStep*(adjusted, nodeFrom) and
+    nodeToDefOrUse(adjusted, defOrUse) and
+    adjacentDefRead(defOrUse, use)
+  )
+}
+
+/** Holds if there is def-use or use-use flow from `nodeFrom` to `nodeTo`. */
+predicate ssaFlow(Node nodeFrom, Node nodeTo) {
+  // `nodeFrom = any(PostUpdateNode pun).getPreUpdateNode()` is implied by adjustedForPointerArith.
+  exists(UseOrPhi use |
+    adjustForPointerArith(nodeFrom, use) and
+    useToNode(use, nodeTo)
+  )
+  or
+  not nodeFrom = any(PostUpdateNode pun).getPreUpdateNode() and
+  exists(DefOrUse defOrUse1, UseOrPhi use |
+    nodeToDefOrUse(nodeFrom, defOrUse1) and
+    adjacentDefRead(defOrUse1, use) and
+    useToNode(use, nodeTo)
+  )
+}
+
+/** Holds if `nodeTo` receives flow from the phi node `nodeFrom`. */
+predicate fromPhiNode(SsaPhiNode nodeFrom, Node nodeTo) {
+  exists(PhiNode phi, SourceVariable sv, IRBlock bb1, int i1, UseOrPhi use |
+    phi = nodeFrom.getPhiNode() and
+    phi.definesAt(sv, bb1, i1) and
+    useToNode(use, nodeTo)
+  |
+    exists(IRBlock bb2, int i2 |
+      use.asDefOrUse().hasIndexInBlock(bb2, i2, sv) and
+      adjacentDefRead(phi, bb1, i1, bb2, i2)
+    )
+    or
+    exists(PhiNode phiTo |
+      lastRefRedef(phi, _, _, phiTo) and
+      nodeTo.(SsaPhiNode).getPhiNode() = phiTo
+    )
+  )
+}
+
+private SsaInternals0::SourceVariable getOldSourceVariable(SourceVariable v) {
+  v.getBaseVariable().(BaseIRVariable).getIRVariable() =
+    result.getBaseVariable().(SsaInternals0::BaseIRVariable).getIRVariable()
+  or
+  v.getBaseVariable().(BaseCallVariable).getCallInstruction() =
+    result.getBaseVariable().(SsaInternals0::BaseCallVariable).getCallInstruction()
+}
+
+/**
+ * Holds if there is a write at index `i` in basic block `bb` to variable `v` that's
+ * subsequently read (as determined by the SSA pruning stage).
+ */
+private predicate variableWriteCand(IRBlock bb, int i, SourceVariable v) {
+  exists(SsaInternals0::Def def, SsaInternals0::SourceVariable v0 |
+    def.asDefOrUse().hasIndexInBlock(bb, i, v0) and
+    v0 = getOldSourceVariable(v)
+  )
+}
+
+private module SsaInput implements SsaImplCommon::InputSig {
+  import InputSigCommon
+  import SourceVariables
+
+  /**
+   * Holds if the `i`'th write in block `bb` writes to the variable `v`.
+   * `certain` is `true` if the write is guaranteed to overwrite the entire variable.
+   */
+  predicate variableWrite(IRBlock bb, int i, SourceVariable v, boolean certain) {
+    DataFlowImplCommon::forceCachingInSameStage() and
+    variableWriteCand(bb, i, v) and
+    exists(DefImpl def | def.hasIndexInBlock(bb, i, v) |
+      if def.isCertain() then certain = true else certain = false
+    )
+  }
+
+  /**
+   * Holds if the `i`'th read in block `bb` reads to the variable `v`.
+   * `certain` is `true` if the read is guaranteed. For C++, this is always the case.
+   */
+  predicate variableRead(IRBlock bb, int i, SourceVariable v, boolean certain) {
+    exists(UseImpl use | use.hasIndexInBlock(bb, i, v) |
+      if use.isCertain() then certain = true else certain = false
+    )
+  }
+}
+
+/**
+ * The final SSA predicates used for dataflow purposes.
+ */
+cached
+module SsaCached {
+  /**
+   * Holds if `def` is accessed at index `i1` in basic block `bb1` (either a read
+   * or a write), `def` is read at index `i2` in basic block `bb2`, and there is a
+   * path between them without any read of `def`.
+   */
+  cached
+  predicate adjacentDefRead(Definition def, IRBlock bb1, int i1, IRBlock bb2, int i2) {
+    SsaImpl::adjacentDefRead(def, bb1, i1, bb2, i2)
+  }
+
+  /**
+   * Holds if the node at index `i` in `bb` is a last reference to SSA definition
+   * `def`. The reference is last because it can reach another write `next`,
+   * without passing through another read or write.
+   */
+  cached
+  predicate lastRefRedef(Definition def, IRBlock bb, int i, Definition next) {
+    SsaImpl::lastRefRedef(def, bb, i, next)
+  }
+}
+
+cached
+private newtype TSsaDefOrUse =
+  TDefOrUse(DefOrUseImpl defOrUse) {
+    defOrUse instanceof UseImpl
+    or
+    // Like in the pruning stage, we only include definition that's live after the
+    // write as the final definitions computed by SSA.
+    exists(Definition def, SourceVariable sv, IRBlock bb, int i |
+      def.definesAt(sv, bb, i) and
+      defOrUse.(DefImpl).hasIndexInBlock(bb, i, sv)
+    )
+  } or
+  TPhi(PhiNode phi)
+
+abstract private class SsaDefOrUse extends TSsaDefOrUse {
+  string toString() { none() }
+
+  DefOrUseImpl asDefOrUse() { none() }
+
+  PhiNode asPhi() { none() }
+
+  abstract Location getLocation();
+}
+
+class DefOrUse extends TDefOrUse, SsaDefOrUse {
+  DefOrUseImpl defOrUse;
+
+  DefOrUse() { this = TDefOrUse(defOrUse) }
+
+  final override DefOrUseImpl asDefOrUse() { result = defOrUse }
+
+  final override Location getLocation() { result = defOrUse.getLocation() }
+
+  final SourceVariable getSourceVariable() { result = defOrUse.getSourceVariable() }
+
+  override string toString() { result = defOrUse.toString() }
+}
+
+class Phi extends TPhi, SsaDefOrUse {
+  PhiNode phi;
+
+  Phi() { this = TPhi(phi) }
+
+  final override PhiNode asPhi() { result = phi }
+
+  final override Location getLocation() { result = phi.getBasicBlock().getLocation() }
+
+  override string toString() { result = "Phi" }
+}
+
+class UseOrPhi extends SsaDefOrUse {
+  UseOrPhi() {
+    this.asDefOrUse() instanceof UseImpl
+    or
+    this instanceof Phi
+  }
+
+  final override Location getLocation() {
+    result = this.asDefOrUse().getLocation() or result = this.(Phi).getLocation()
+  }
+}
+
+class Def extends DefOrUse {
+  override DefImpl defOrUse;
+
+  Operand getAddressOperand() { result = defOrUse.getAddressOperand() }
+
+  Instruction getAddress() { result = this.getAddressOperand().getDef() }
+
+  /**
+   * This predicate ensures that joins go from `defOrUse` to the result
+   * instead of the other way around.
+   */
+  pragma[inline]
+  int getIndirectionIndex() {
+    pragma[only_bind_into](result) = pragma[only_bind_out](defOrUse).getIndirectionIndex()
+  }
+
+  Instruction getDefiningInstruction() { result = defOrUse.getDefiningInstruction() }
+}
+
+private module SsaImpl = SsaImplCommon::Make<SsaInput>;
+
+class PhiNode = SsaImpl::PhiNode;
+
+class Definition = SsaImpl::Definition;
+
+import SsaCached
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/SsaInternalsCommon.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/SsaInternalsCommon.qll
new file mode 100644
index 00000000000..36ab036c4e5
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/SsaInternalsCommon.qll
@@ -0,0 +1,268 @@
+import cpp as Cpp
+import semmle.code.cpp.ir.IR
+import semmle.code.cpp.ir.internal.IRCppLanguage
+private import semmle.code.cpp.ir.implementation.raw.internal.SideEffects as SideEffects
+private import DataFlowImplCommon as DataFlowImplCommon
+private import DataFlowUtil
+
+/**
+ * Holds if `operand` is an operand that is not used by the dataflow library.
+ * Ignored operands are not recognizd as uses by SSA, and they don't have a
+ * corresponding `(Indirect)OperandNode`.
+ */
+predicate ignoreOperand(Operand operand) {
+  operand = any(Instruction instr | ignoreInstruction(instr)).getAnOperand()
+}
+
+/**
+ * Holds if `instr` is an instruction that is not used by the dataflow library.
+ * Ignored instructions are not recognized as reads/writes by SSA, and they
+ * don't have a corresponding `(Indirect)InstructionNode`.
+ */
+predicate ignoreInstruction(Instruction instr) {
+  DataFlowImplCommon::forceCachingInSameStage() and
+  (
+    instr instanceof WriteSideEffectInstruction or
+    instr instanceof PhiInstruction or
+    instr instanceof ReadSideEffectInstruction or
+    instr instanceof ChiInstruction or
+    instr instanceof InitializeIndirectionInstruction
+  )
+}
+
+/**
+ * Gets the C++ type of `this` in the member function `f`.
+ * The result is a glvalue if `isGLValue` is true, and
+ * a prvalue if `isGLValue` is false.
+ */
+bindingset[isGLValue]
+private CppType getThisType(Cpp::MemberFunction f, boolean isGLValue) {
+  result.hasType(f.getTypeOfThis(), isGLValue)
+}
+
+/**
+ * Gets the C++ type of the instruction `i`.
+ *
+ * This is equivalent to `i.getResultLanguageType()` with the exception
+ * of instructions that directly references a `this` IRVariable. In this
+ * case, `i.getResultLanguageType()` gives an unknown type, whereas the
+ * predicate gives the expected type (i.e., a potentially cv-qualified
+ * type `A*` where `A` is the declaring type of the member function that
+ * contains `i`).
+ */
+cached
+CppType getResultLanguageType(Instruction i) {
+  if i.(VariableAddressInstruction).getIRVariable() instanceof IRThisVariable
+  then
+    if i.isGLValue()
+    then result = getThisType(i.getEnclosingFunction(), true)
+    else result = getThisType(i.getEnclosingFunction(), false)
+  else result = i.getResultLanguageType()
+}
+
+/**
+ * Gets the C++ type of the operand `operand`.
+ * This is equivalent to the type of the operand's defining instruction.
+ *
+ * See `getResultLanguageType` for a description of this behavior.
+ */
+CppType getLanguageType(Operand operand) { result = getResultLanguageType(operand.getDef()) }
+
+/**
+ * Gets the maximum number of indirections a glvalue of type `type` can have.
+ * For example:
+ * - If `type = int`, the result is 1
+ * - If `type = MyStruct`, the result is 1
+ * - If `type = char*`, the result is 2
+ */
+int getMaxIndirectionsForType(Type type) {
+  result = countIndirectionsForCppType(getTypeForGLValue(type))
+}
+
+/**
+ * Gets the maximum number of indirections a value of type `type` can have.
+ *
+ * Note that this predicate is intended to be called on unspecified types
+ * (i.e., `countIndirections(e.getUnspecifiedType())`).
+ */
+private int countIndirections(Type t) {
+  result =
+    1 +
+      countIndirections([t.(Cpp::PointerType).getBaseType(), t.(Cpp::ReferenceType).getBaseType()])
+  or
+  not t instanceof Cpp::PointerType and
+  not t instanceof Cpp::ReferenceType and
+  result = 0
+}
+
+/**
+ * Gets the maximum number of indirections a value of C++
+ * type `langType` can have.
+ */
+int countIndirectionsForCppType(LanguageType langType) {
+  exists(Type type | langType.hasType(type, true) |
+    result = 1 + countIndirections(type.getUnspecifiedType())
+  )
+  or
+  exists(Type type | langType.hasType(type, false) |
+    result = countIndirections(type.getUnspecifiedType())
+  )
+}
+
+/**
+ * A `CallInstruction` that calls an allocation function such
+ * as `malloc` or `operator new`.
+ */
+class AllocationInstruction extends CallInstruction {
+  AllocationInstruction() { this.getStaticCallTarget() instanceof Cpp::AllocationFunction }
+}
+
+/**
+ * Holds if `i` is a base instruction that starts a sequence of uses
+ * of some variable that SSA can handle.
+ *
+ * This is either when `i` is a `VariableAddressInstruction` or when
+ * `i` is a fresh allocation produced by an `AllocationInstruction`.
+ */
+private predicate isSourceVariableBase(Instruction i) {
+  i instanceof VariableAddressInstruction or i instanceof AllocationInstruction
+}
+
+/**
+ * Holds if the value pointed to by `operand` can potentially be
+ * modified be the caller.
+ */
+predicate isModifiableByCall(ArgumentOperand operand) {
+  exists(CallInstruction call, int index, CppType type |
+    type = getLanguageType(operand) and
+    call.getArgumentOperand(index) = operand and
+    if index = -1
+    then not call.getStaticCallTarget() instanceof Cpp::ConstMemberFunction
+    else not SideEffects::isConstPointerLike(any(Type t | type.hasType(t, _)))
+  )
+}
+
+cached
+private module Cached {
+  /**
+   * Holds if `op` is a use of an SSA variable rooted at `base` with `ind` number
+   * of indirections.
+   *
+   * `certain` is `true` if the operand is guaranteed to read the variable, and
+   * `indirectionIndex` specifies the number of loads required to read the variable.
+   */
+  cached
+  predicate isUse(boolean certain, Operand op, Instruction base, int ind, int indirectionIndex) {
+    not ignoreOperand(op) and
+    certain = true and
+    exists(LanguageType type, int m, int ind0 |
+      type = getLanguageType(op) and
+      m = countIndirectionsForCppType(type) and
+      isUseImpl(op, base, ind0) and
+      ind = ind0 + [0 .. m] and
+      indirectionIndex = ind - ind0
+    )
+  }
+
+  /**
+   * Holds if `operand` is a use of an SSA variable rooted at `base`, and the
+   * path from `base` to `operand` passes through `ind` load-like instructions.
+   */
+  private predicate isUseImpl(Operand operand, Instruction base, int ind) {
+    DataFlowImplCommon::forceCachingInSameStage() and
+    ind = 0 and
+    operand.getDef() = base and
+    isSourceVariableBase(base)
+    or
+    exists(Operand mid, Instruction instr |
+      isUseImpl(mid, base, ind) and
+      instr = operand.getDef() and
+      conversionFlow(mid, instr, false)
+    )
+    or
+    exists(int ind0 |
+      isUseImpl(operand.getDef().(LoadInstruction).getSourceAddressOperand(), base, ind0)
+      or
+      isUseImpl(operand.getDef().(InitializeParameterInstruction).getAnOperand(), base, ind0)
+    |
+      ind0 = ind - 1
+    )
+  }
+
+  /**
+   * Holds if `address` is an address of an SSA variable rooted at `base`,
+   * and `instr` is a definition of the SSA variable with `ind` number of indirections.
+   *
+   * `certain` is `true` if `instr` is guaranteed to write to the variable, and
+   * `indirectionIndex` specifies the number of loads required to read the variable
+   * after the write operation.
+   */
+  cached
+  predicate isDef(
+    boolean certain, Instruction instr, Operand address, Instruction base, int ind,
+    int indirectionIndex
+  ) {
+    certain = true and
+    exists(int ind0, CppType type, int m |
+      address =
+        [
+          instr.(StoreInstruction).getDestinationAddressOperand(),
+          instr.(InitializeParameterInstruction).getAnOperand(),
+          instr.(InitializeDynamicAllocationInstruction).getAllocationAddressOperand(),
+          instr.(UninitializedInstruction).getAnOperand()
+        ]
+    |
+      isDefImpl(address, base, ind0) and
+      type = getLanguageType(address) and
+      m = countIndirectionsForCppType(type) and
+      ind = ind0 + [1 .. m] and
+      indirectionIndex = ind - (ind0 + 1)
+    )
+  }
+
+  /**
+   * Holds if `address` is a use of an SSA variable rooted at `base`, and the
+   * path from `base` to `address` passes through `ind` load-like instructions.
+   *
+   * Note: Unlike `isUseImpl`, this predicate recurses through pointer-arithmetic
+   * instructions.
+   */
+  private predicate isDefImpl(Operand address, Instruction base, int ind) {
+    DataFlowImplCommon::forceCachingInSameStage() and
+    ind = 0 and
+    address.getDef() = base and
+    isSourceVariableBase(base)
+    or
+    exists(Operand mid, Instruction instr |
+      isDefImpl(mid, base, ind) and
+      instr = address.getDef() and
+      conversionFlow(mid, instr, _)
+    )
+    or
+    exists(int ind0 |
+      isDefImpl(address.getDef().(LoadInstruction).getSourceAddressOperand(), base, ind0)
+      or
+      isDefImpl(address.getDef().(InitializeParameterInstruction).getAnOperand(), base, ind0)
+    |
+      ind0 = ind - 1
+    )
+  }
+}
+
+import Cached
+
+/**
+ * Inputs to the shared SSA library's parameterized module that is shared
+ * between the SSA pruning stage, and the final SSA stage.
+ */
+module InputSigCommon {
+  class BasicBlock = IRBlock;
+
+  BasicBlock getImmediateBasicBlockDominator(BasicBlock bb) { result.immediatelyDominates(bb) }
+
+  BasicBlock getABasicBlockSuccessor(BasicBlock bb) { result = bb.getASuccessor() }
+
+  class ExitBasicBlock extends IRBlock {
+    ExitBasicBlock() { this.getLastInstruction() instanceof ExitFunctionInstruction }
+  }
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/TaintTrackingUtil.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/TaintTrackingUtil.qll
new file mode 100644
index 00000000000..1ab232923bf
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/TaintTrackingUtil.qll
@@ -0,0 +1,208 @@
+private import semmle.code.cpp.ir.IR
+private import experimental.semmle.code.cpp.ir.dataflow.DataFlow
+private import ModelUtil
+private import semmle.code.cpp.models.interfaces.DataFlow
+private import semmle.code.cpp.models.interfaces.SideEffect
+private import DataFlowUtil
+private import DataFlowPrivate
+private import semmle.code.cpp.models.Models
+
+/**
+ * Holds if taint propagates from `nodeFrom` to `nodeTo` in exactly one local
+ * (intra-procedural) step.
+ */
+predicate localTaintStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
+  DataFlow::localFlowStep(nodeFrom, nodeTo)
+  or
+  localAdditionalTaintStep(nodeFrom, nodeTo)
+}
+
+/**
+ * Holds if taint can flow in one local step from `nodeFrom` to `nodeTo` excluding
+ * local data flow steps. That is, `nodeFrom` and `nodeTo` are likely to represent
+ * different objects.
+ */
+cached
+predicate localAdditionalTaintStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
+  operandToInstructionTaintStep(nodeFrom.asOperand(), nodeTo.asInstruction())
+  or
+  modeledTaintStep(nodeFrom, nodeTo)
+  or
+  // Flow from `op` to `*op`.
+  exists(Operand operand, int indirectionIndex |
+    nodeHasOperand(nodeFrom, operand, indirectionIndex) and
+    nodeHasOperand(nodeTo, operand, indirectionIndex - 1)
+  )
+  or
+  // Flow from `instr` to `*instr`.
+  exists(Instruction instr, int indirectionIndex |
+    nodeHasInstruction(nodeFrom, instr, indirectionIndex) and
+    nodeHasInstruction(nodeTo, instr, indirectionIndex - 1)
+  )
+  or
+  // Flow from (the indirection of) an operand of a pointer arithmetic instruction to the
+  // indirection of the pointer arithmetic instruction. This provides flow from `source`
+  // in `x[source]` to the result of the associated load instruction.
+  exists(PointerArithmeticInstruction pai, int indirectionIndex |
+    nodeHasOperand(nodeFrom, pai.getAnOperand(), pragma[only_bind_into](indirectionIndex)) and
+    hasInstructionAndIndex(nodeTo, pai, indirectionIndex + 1)
+  )
+}
+
+/**
+ * Holds if taint propagates from `nodeFrom` to `nodeTo` in exactly one local
+ * (intra-procedural) step.
+ */
+private predicate operandToInstructionTaintStep(Operand opFrom, Instruction instrTo) {
+  // Taint can flow through expressions that alter the value but preserve
+  // more than one bit of it _or_ expressions that follow data through
+  // pointer indirections.
+  instrTo.getAnOperand() = opFrom and
+  (
+    instrTo instanceof ArithmeticInstruction
+    or
+    instrTo instanceof BitwiseInstruction
+    or
+    instrTo instanceof PointerArithmeticInstruction
+  )
+  or
+  // The `CopyInstruction` case is also present in non-taint data flow, but
+  // that uses `getDef` rather than `getAnyDef`. For taint, we want flow
+  // from a definition of `myStruct` to a `myStruct.myField` expression.
+  instrTo.(LoadInstruction).getSourceAddressOperand() = opFrom
+  or
+  // Unary instructions tend to preserve enough information in practice that we
+  // want taint to flow through.
+  // The exception is `FieldAddressInstruction`. Together with the rules below for
+  // `LoadInstruction`s and `ChiInstruction`s, flow through `FieldAddressInstruction`
+  // could cause flow into one field to come out an unrelated field.
+  // This would happen across function boundaries, where the IR would not be able to
+  // match loads to stores.
+  instrTo.(UnaryInstruction).getUnaryOperand() = opFrom and
+  (
+    not instrTo instanceof FieldAddressInstruction
+    or
+    instrTo.(FieldAddressInstruction).getField().getDeclaringType() instanceof Union
+  )
+}
+
+/**
+ * Holds if taint may propagate from `source` to `sink` in zero or more local
+ * (intra-procedural) steps.
+ */
+pragma[inline]
+predicate localTaint(DataFlow::Node source, DataFlow::Node sink) { localTaintStep*(source, sink) }
+
+/**
+ * Holds if taint can flow from `i1` to `i2` in zero or more
+ * local (intra-procedural) steps.
+ */
+pragma[inline]
+predicate localInstructionTaint(Instruction i1, Instruction i2) {
+  localTaint(DataFlow::instructionNode(i1), DataFlow::instructionNode(i2))
+}
+
+/**
+ * Holds if taint can flow from `e1` to `e2` in zero or more
+ * local (intra-procedural) steps.
+ */
+pragma[inline]
+predicate localExprTaint(Expr e1, Expr e2) {
+  localTaint(DataFlow::exprNode(e1), DataFlow::exprNode(e2))
+}
+
+/**
+ * Holds if the additional step from `src` to `sink` should be included in all
+ * global taint flow configurations.
+ */
+predicate defaultAdditionalTaintStep(DataFlow::Node src, DataFlow::Node sink) {
+  localAdditionalTaintStep(src, sink)
+}
+
+/**
+ * Holds if default `TaintTracking::Configuration`s should allow implicit reads
+ * of `c` at sinks and inputs to additional taint steps.
+ */
+bindingset[node]
+predicate defaultImplicitTaintRead(DataFlow::Node node, DataFlow::Content c) { none() }
+
+/**
+ * Holds if `node` should be a sanitizer in all global taint flow configurations
+ * but not in local taint.
+ */
+predicate defaultTaintSanitizer(DataFlow::Node node) { none() }
+
+/**
+ * Holds if taint can flow from `instrIn` to `instrOut` through a call to a
+ * modeled function.
+ */
+predicate modeledTaintStep(DataFlow::Node nodeIn, DataFlow::Node nodeOut) {
+  // Normal taint steps
+  exists(CallInstruction call, TaintFunction func, FunctionInput modelIn, FunctionOutput modelOut |
+    call.getStaticCallTarget() = func and
+    func.hasTaintFlow(modelIn, modelOut)
+  |
+    (
+      nodeIn = callInput(call, modelIn)
+      or
+      exists(int n |
+        modelIn.isParameterDerefOrQualifierObject(n) and
+        if n = -1
+        then nodeIn = callInput(call, any(InQualifierAddress inQualifier))
+        else nodeIn = callInput(call, any(InParameter inParam | inParam.getIndex() = n))
+      )
+    ) and
+    nodeOut = callOutput(call, modelOut)
+    or
+    exists(int d |
+      nodeIn = callInput(call, modelIn, d)
+      or
+      exists(int n |
+        d = 1 and
+        modelIn.isParameterDerefOrQualifierObject(n) and
+        if n = -1
+        then nodeIn = callInput(call, any(InQualifierAddress inQualifier))
+        else nodeIn = callInput(call, any(InParameter inParam | inParam.getIndex() = n))
+      )
+    |
+      call.getStaticCallTarget() = func and
+      func.hasTaintFlow(modelIn, modelOut) and
+      nodeOut = callOutput(call, modelOut, d)
+    )
+  )
+  or
+  // Taint flow from one argument to another and data flow from an argument to a
+  // return value. This happens in functions like `strcat` and `memcpy`. We
+  // could model this flow in two separate steps, but that would add reverse
+  // flow from the write side-effect to the call instruction, which may not be
+  // desirable.
+  exists(
+    CallInstruction call, Function func, FunctionInput modelIn, OutParameterDeref modelMidOut,
+    int indexMid, InParameter modelMidIn, OutReturnValue modelOut
+  |
+    nodeIn = callInput(call, modelIn) and
+    nodeOut = callOutput(call, modelOut) and
+    call.getStaticCallTarget() = func and
+    func.(TaintFunction).hasTaintFlow(modelIn, modelMidOut) and
+    func.(DataFlowFunction).hasDataFlow(modelMidIn, modelOut) and
+    modelMidOut.isParameterDeref(indexMid) and
+    modelMidIn.isParameter(indexMid)
+  )
+  or
+  // Taint flow from a pointer argument to an output, when the model specifies flow from the deref
+  // to that output, but the deref is not modeled in the IR for the caller.
+  exists(
+    CallInstruction call, DataFlow::SideEffectOperandNode indirectArgument, Function func,
+    FunctionInput modelIn, FunctionOutput modelOut
+  |
+    indirectArgument = callInput(call, modelIn) and
+    indirectArgument.getAddressOperand() = nodeIn.asOperand() and
+    call.getStaticCallTarget() = func and
+    (
+      func.(DataFlowFunction).hasDataFlow(modelIn, modelOut)
+      or
+      func.(TaintFunction).hasTaintFlow(modelIn, modelOut)
+    ) and
+    nodeOut = callOutput(call, modelOut)
+  )
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/ssa0/SsaInternals.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/ssa0/SsaInternals.qll
new file mode 100644
index 00000000000..3a89f1d170f
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/ssa0/SsaInternals.qll
@@ -0,0 +1,314 @@
+/**
+ * This module defines an initial SSA pruning stage that doesn't take
+ * indirections into account.
+ */
+
+private import codeql.ssa.Ssa as SsaImplCommon
+private import semmle.code.cpp.ir.IR
+private import experimental.semmle.code.cpp.ir.dataflow.internal.DataFlowImplCommon as DataFlowImplCommon
+private import semmle.code.cpp.models.interfaces.Allocation as Alloc
+private import semmle.code.cpp.models.interfaces.DataFlow as DataFlow
+private import semmle.code.cpp.ir.implementation.raw.internal.SideEffects as SideEffects
+private import semmle.code.cpp.ir.internal.IRCppLanguage
+private import experimental.semmle.code.cpp.ir.dataflow.internal.DataFlowPrivate
+private import experimental.semmle.code.cpp.ir.dataflow.internal.DataFlowUtil
+private import experimental.semmle.code.cpp.ir.dataflow.internal.SsaInternalsCommon
+
+private module SourceVariables {
+  newtype TBaseSourceVariable =
+    // Each IR variable gets its own source variable
+    TBaseIRVariable(IRVariable var) or
+    // Each allocation gets its own source variable
+    TBaseCallVariable(AllocationInstruction call)
+
+  abstract class BaseSourceVariable extends TBaseSourceVariable {
+    abstract string toString();
+
+    abstract DataFlowType getType();
+  }
+
+  class BaseIRVariable extends BaseSourceVariable, TBaseIRVariable {
+    IRVariable var;
+
+    IRVariable getIRVariable() { result = var }
+
+    BaseIRVariable() { this = TBaseIRVariable(var) }
+
+    override string toString() { result = var.toString() }
+
+    override DataFlowType getType() { result = var.getIRType() }
+  }
+
+  class BaseCallVariable extends BaseSourceVariable, TBaseCallVariable {
+    AllocationInstruction call;
+
+    BaseCallVariable() { this = TBaseCallVariable(call) }
+
+    AllocationInstruction getCallInstruction() { result = call }
+
+    override string toString() { result = call.toString() }
+
+    override DataFlowType getType() { result = call.getResultIRType() }
+  }
+
+  private newtype TSourceVariable =
+    TSourceIRVariable(BaseIRVariable baseVar) or
+    TCallVariable(AllocationInstruction call)
+
+  abstract class SourceVariable extends TSourceVariable {
+    abstract string toString();
+
+    abstract BaseSourceVariable getBaseVariable();
+  }
+
+  class SourceIRVariable extends SourceVariable, TSourceIRVariable {
+    BaseIRVariable var;
+
+    SourceIRVariable() { this = TSourceIRVariable(var) }
+
+    IRVariable getIRVariable() { result = var.getIRVariable() }
+
+    override BaseIRVariable getBaseVariable() { result.getIRVariable() = this.getIRVariable() }
+
+    override string toString() { result = this.getIRVariable().toString() }
+  }
+
+  class CallVariable extends SourceVariable, TCallVariable {
+    AllocationInstruction call;
+
+    CallVariable() { this = TCallVariable(call) }
+
+    AllocationInstruction getCall() { result = call }
+
+    override BaseCallVariable getBaseVariable() { result.getCallInstruction() = call }
+
+    override string toString() { result = "Call" }
+  }
+}
+
+import SourceVariables
+
+private newtype TDefOrUseImpl =
+  TDefImpl(Operand address) { isDef(_, _, address, _, _, _) } or
+  TUseImpl(Operand operand) {
+    isUse(_, operand, _, _, _) and
+    not isDef(_, _, operand, _, _, _)
+  }
+
+abstract private class DefOrUseImpl extends TDefOrUseImpl {
+  /** Gets a textual representation of this element. */
+  abstract string toString();
+
+  /** Gets the block of this definition or use. */
+  abstract IRBlock getBlock();
+
+  /** Holds if this definition or use has index `index` in block `block`. */
+  abstract predicate hasIndexInBlock(IRBlock block, int index);
+
+  final predicate hasIndexInBlock(IRBlock block, int index, SourceVariable sv) {
+    this.hasIndexInBlock(block, index) and
+    sv = this.getSourceVariable()
+  }
+
+  /** Gets the location of this element. */
+  abstract Cpp::Location getLocation();
+
+  abstract Instruction getBase();
+
+  final BaseSourceVariable getBaseSourceVariable() {
+    exists(IRVariable var |
+      result.(BaseIRVariable).getIRVariable() = var and
+      instructionHasIRVariable(this.getBase(), var)
+    )
+    or
+    result.(BaseCallVariable).getCallInstruction() = this.getBase()
+  }
+
+  /** Gets the variable that is defined or used. */
+  final SourceVariable getSourceVariable() {
+    exists(BaseSourceVariable v |
+      sourceVariableHasBaseAndIndex(result, v) and
+      defOrUseHasSourceVariable(this, v)
+    )
+  }
+}
+
+pragma[noinline]
+private predicate instructionHasIRVariable(VariableAddressInstruction vai, IRVariable var) {
+  vai.getIRVariable() = var
+}
+
+private predicate defOrUseHasSourceVariable(DefOrUseImpl defOrUse, BaseSourceVariable bv) {
+  defHasSourceVariable(defOrUse, bv)
+  or
+  useHasSourceVariable(defOrUse, bv)
+}
+
+pragma[noinline]
+private predicate defHasSourceVariable(DefImpl def, BaseSourceVariable bv) {
+  bv = def.getBaseSourceVariable()
+}
+
+pragma[noinline]
+private predicate useHasSourceVariable(UseImpl use, BaseSourceVariable bv) {
+  bv = use.getBaseSourceVariable()
+}
+
+pragma[noinline]
+private predicate sourceVariableHasBaseAndIndex(SourceVariable v, BaseSourceVariable bv) {
+  v.getBaseVariable() = bv
+}
+
+class DefImpl extends DefOrUseImpl, TDefImpl {
+  Operand address;
+
+  DefImpl() { this = TDefImpl(address) }
+
+  override Instruction getBase() { isDef(_, _, address, result, _, _) }
+
+  Operand getAddressOperand() { result = address }
+
+  Instruction getDefiningInstruction() { isDef(_, result, address, _, _, _) }
+
+  override string toString() { result = address.toString() }
+
+  override IRBlock getBlock() { result = this.getDefiningInstruction().getBlock() }
+
+  override Cpp::Location getLocation() { result = this.getDefiningInstruction().getLocation() }
+
+  final override predicate hasIndexInBlock(IRBlock block, int index) {
+    this.getDefiningInstruction() = block.getInstruction(index)
+  }
+
+  predicate isCertain() { isDef(true, _, address, _, _, _) }
+}
+
+class UseImpl extends DefOrUseImpl, TUseImpl {
+  Operand operand;
+
+  UseImpl() { this = TUseImpl(operand) }
+
+  Operand getOperand() { result = operand }
+
+  override string toString() { result = operand.toString() }
+
+  final override predicate hasIndexInBlock(IRBlock block, int index) {
+    operand.getUse() = block.getInstruction(index)
+  }
+
+  final override IRBlock getBlock() { result = operand.getUse().getBlock() }
+
+  final override Cpp::Location getLocation() { result = operand.getLocation() }
+
+  override Instruction getBase() { isUse(_, operand, result, _, _) }
+
+  predicate isCertain() { isUse(true, operand, _, _, _) }
+}
+
+private module SsaInput implements SsaImplCommon::InputSig {
+  import InputSigCommon
+  import SourceVariables
+
+  /**
+   * Holds if the `i`'th write in block `bb` writes to the variable `v`.
+   * `certain` is `true` if the write is guaranteed to overwrite the entire variable.
+   */
+  predicate variableWrite(IRBlock bb, int i, SourceVariable v, boolean certain) {
+    DataFlowImplCommon::forceCachingInSameStage() and
+    exists(DefImpl def | def.hasIndexInBlock(bb, i, v) |
+      if def.isCertain() then certain = true else certain = false
+    )
+  }
+
+  /**
+   * Holds if the `i`'th read in block `bb` reads to the variable `v`.
+   * `certain` is `true` if the read is guaranteed.
+   */
+  predicate variableRead(IRBlock bb, int i, SourceVariable v, boolean certain) {
+    exists(UseImpl use | use.hasIndexInBlock(bb, i, v) |
+      if use.isCertain() then certain = true else certain = false
+    )
+  }
+}
+
+private newtype TSsaDefOrUse =
+  TDefOrUse(DefOrUseImpl defOrUse) {
+    defOrUse instanceof UseImpl
+    or
+    // If `defOrUse` is a definition we only include it if the
+    // SSA library concludes that it's live after the write.
+    exists(Definition def, SourceVariable sv, IRBlock bb, int i |
+      def.definesAt(sv, bb, i) and
+      defOrUse.(DefImpl).hasIndexInBlock(bb, i, sv)
+    )
+  } or
+  TPhi(PhiNode phi)
+
+abstract private class SsaDefOrUse extends TSsaDefOrUse {
+  string toString() { result = "SsaDefOrUse" }
+
+  DefOrUseImpl asDefOrUse() { none() }
+
+  PhiNode asPhi() { none() }
+
+  abstract Location getLocation();
+}
+
+class DefOrUse extends TDefOrUse, SsaDefOrUse {
+  DefOrUseImpl defOrUse;
+
+  DefOrUse() { this = TDefOrUse(defOrUse) }
+
+  final override DefOrUseImpl asDefOrUse() { result = defOrUse }
+
+  final override Location getLocation() { result = defOrUse.getLocation() }
+
+  final SourceVariable getSourceVariable() { result = defOrUse.getSourceVariable() }
+}
+
+class Phi extends TPhi, SsaDefOrUse {
+  PhiNode phi;
+
+  Phi() { this = TPhi(phi) }
+
+  final override PhiNode asPhi() { result = phi }
+
+  final override Location getLocation() { result = phi.getBasicBlock().getLocation() }
+}
+
+class UseOrPhi extends SsaDefOrUse {
+  UseOrPhi() {
+    this.asDefOrUse() instanceof UseImpl
+    or
+    this instanceof Phi
+  }
+
+  final override Location getLocation() {
+    result = this.asDefOrUse().getLocation() or result = this.(Phi).getLocation()
+  }
+
+  override string toString() {
+    result = this.asDefOrUse().toString()
+    or
+    this instanceof Phi and
+    result = "Phi"
+  }
+}
+
+class Def extends DefOrUse {
+  override DefImpl defOrUse;
+
+  Operand getAddressOperand() { result = defOrUse.getAddressOperand() }
+
+  Instruction getAddress() { result = this.getAddressOperand().getDef() }
+
+  Instruction getDefiningInstruction() { result = defOrUse.getDefiningInstruction() }
+
+  override string toString() { result = this.asDefOrUse().toString() + " (def)" }
+}
+
+private module SsaImpl = SsaImplCommon::Make<SsaInput>;
+
+class PhiNode = SsaImpl::PhiNode;
+
+class Definition = SsaImpl::Definition;
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking1/TaintTrackingImpl.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking1/TaintTrackingImpl.qll
new file mode 100644
index 00000000000..e6ce1ada8d4
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking1/TaintTrackingImpl.qll
@@ -0,0 +1,186 @@
+/**
+ * Provides an implementation of global (interprocedural) taint tracking.
+ * This file re-exports the local (intraprocedural) taint-tracking analysis
+ * from `TaintTrackingParameter::Public` and adds a global analysis, mainly
+ * exposed through the `Configuration` class. For some languages, this file
+ * exists in several identical copies, allowing queries to use multiple
+ * `Configuration` classes that depend on each other without introducing
+ * mutual recursion among those configurations.
+ */
+
+import TaintTrackingParameter::Public
+private import TaintTrackingParameter::Private
+
+/**
+ * A configuration of interprocedural taint tracking analysis. This defines
+ * sources, sinks, and any other configurable aspect of the analysis. Each
+ * use of the taint tracking library must define its own unique extension of
+ * this abstract class.
+ *
+ * A taint-tracking configuration is a special data flow configuration
+ * (`DataFlow::Configuration`) that allows for flow through nodes that do not
+ * necessarily preserve values but are still relevant from a taint tracking
+ * perspective. (For example, string concatenation, where one of the operands
+ * is tainted.)
+ *
+ * To create a configuration, extend this class with a subclass whose
+ * characteristic predicate is a unique singleton string. For example, write
+ *
+ * ```ql
+ * class MyAnalysisConfiguration extends TaintTracking::Configuration {
+ *   MyAnalysisConfiguration() { this = "MyAnalysisConfiguration" }
+ *   // Override `isSource` and `isSink`.
+ *   // Optionally override `isSanitizer`.
+ *   // Optionally override `isSanitizerIn`.
+ *   // Optionally override `isSanitizerOut`.
+ *   // Optionally override `isSanitizerGuard`.
+ *   // Optionally override `isAdditionalTaintStep`.
+ * }
+ * ```
+ *
+ * Then, to query whether there is flow between some `source` and `sink`,
+ * write
+ *
+ * ```ql
+ * exists(MyAnalysisConfiguration cfg | cfg.hasFlow(source, sink))
+ * ```
+ *
+ * Multiple configurations can coexist, but it is unsupported to depend on
+ * another `TaintTracking::Configuration` or a `DataFlow::Configuration` in the
+ * overridden predicates that define sources, sinks, or additional steps.
+ * Instead, the dependency should go to a `TaintTracking2::Configuration` or a
+ * `DataFlow2::Configuration`, `DataFlow3::Configuration`, etc.
+ */
+abstract class Configuration extends DataFlow::Configuration {
+  bindingset[this]
+  Configuration() { any() }
+
+  /**
+   * Holds if `source` is a relevant taint source.
+   *
+   * The smaller this predicate is, the faster `hasFlow()` will converge.
+   */
+  // overridden to provide taint-tracking specific qldoc
+  override predicate isSource(DataFlow::Node source) { none() }
+
+  /**
+   * Holds if `source` is a relevant taint source with the given initial
+   * `state`.
+   *
+   * The smaller this predicate is, the faster `hasFlow()` will converge.
+   */
+  // overridden to provide taint-tracking specific qldoc
+  override predicate isSource(DataFlow::Node source, DataFlow::FlowState state) { none() }
+
+  /**
+   * Holds if `sink` is a relevant taint sink
+   *
+   * The smaller this predicate is, the faster `hasFlow()` will converge.
+   */
+  // overridden to provide taint-tracking specific qldoc
+  override predicate isSink(DataFlow::Node sink) { none() }
+
+  /**
+   * Holds if `sink` is a relevant taint sink accepting `state`.
+   *
+   * The smaller this predicate is, the faster `hasFlow()` will converge.
+   */
+  // overridden to provide taint-tracking specific qldoc
+  override predicate isSink(DataFlow::Node sink, DataFlow::FlowState state) { none() }
+
+  /** Holds if the node `node` is a taint sanitizer. */
+  predicate isSanitizer(DataFlow::Node node) { none() }
+
+  final override predicate isBarrier(DataFlow::Node node) {
+    this.isSanitizer(node) or
+    defaultTaintSanitizer(node)
+  }
+
+  /**
+   * Holds if the node `node` is a taint sanitizer when the flow state is
+   * `state`.
+   */
+  predicate isSanitizer(DataFlow::Node node, DataFlow::FlowState state) { none() }
+
+  final override predicate isBarrier(DataFlow::Node node, DataFlow::FlowState state) {
+    this.isSanitizer(node, state)
+  }
+
+  /** Holds if taint propagation into `node` is prohibited. */
+  predicate isSanitizerIn(DataFlow::Node node) { none() }
+
+  final override predicate isBarrierIn(DataFlow::Node node) { this.isSanitizerIn(node) }
+
+  /** Holds if taint propagation out of `node` is prohibited. */
+  predicate isSanitizerOut(DataFlow::Node node) { none() }
+
+  final override predicate isBarrierOut(DataFlow::Node node) { this.isSanitizerOut(node) }
+
+  /**
+   * DEPRECATED: Use `isSanitizer` and `BarrierGuard` module instead.
+   *
+   * Holds if taint propagation through nodes guarded by `guard` is prohibited.
+   */
+  deprecated predicate isSanitizerGuard(DataFlow::BarrierGuard guard) { none() }
+
+  deprecated final override predicate isBarrierGuard(DataFlow::BarrierGuard guard) {
+    this.isSanitizerGuard(guard)
+  }
+
+  /**
+   * DEPRECATED: Use `isSanitizer` and `BarrierGuard` module instead.
+   *
+   * Holds if taint propagation through nodes guarded by `guard` is prohibited
+   * when the flow state is `state`.
+   */
+  deprecated predicate isSanitizerGuard(DataFlow::BarrierGuard guard, DataFlow::FlowState state) {
+    none()
+  }
+
+  deprecated final override predicate isBarrierGuard(
+    DataFlow::BarrierGuard guard, DataFlow::FlowState state
+  ) {
+    this.isSanitizerGuard(guard, state)
+  }
+
+  /**
+   * Holds if taint may propagate from `node1` to `node2` in addition to the normal data-flow and taint steps.
+   */
+  predicate isAdditionalTaintStep(DataFlow::Node node1, DataFlow::Node node2) { none() }
+
+  final override predicate isAdditionalFlowStep(DataFlow::Node node1, DataFlow::Node node2) {
+    this.isAdditionalTaintStep(node1, node2) or
+    defaultAdditionalTaintStep(node1, node2)
+  }
+
+  /**
+   * Holds if taint may propagate from `node1` to `node2` in addition to the normal data-flow and taint steps.
+   * This step is only applicable in `state1` and updates the flow state to `state2`.
+   */
+  predicate isAdditionalTaintStep(
+    DataFlow::Node node1, DataFlow::FlowState state1, DataFlow::Node node2,
+    DataFlow::FlowState state2
+  ) {
+    none()
+  }
+
+  final override predicate isAdditionalFlowStep(
+    DataFlow::Node node1, DataFlow::FlowState state1, DataFlow::Node node2,
+    DataFlow::FlowState state2
+  ) {
+    this.isAdditionalTaintStep(node1, state1, node2, state2)
+  }
+
+  override predicate allowImplicitRead(DataFlow::Node node, DataFlow::ContentSet c) {
+    (this.isSink(node) or this.isAdditionalTaintStep(node, _)) and
+    defaultImplicitTaintRead(node, c)
+  }
+
+  /**
+   * Holds if taint may flow from `source` to `sink` for this configuration.
+   */
+  // overridden to provide taint-tracking specific qldoc
+  override predicate hasFlow(DataFlow::Node source, DataFlow::Node sink) {
+    super.hasFlow(source, sink)
+  }
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking1/TaintTrackingParameter.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking1/TaintTrackingParameter.qll
new file mode 100644
index 00000000000..07185a4ad57
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking1/TaintTrackingParameter.qll
@@ -0,0 +1,5 @@
+import experimental.semmle.code.cpp.ir.dataflow.internal.TaintTrackingUtil as Public
+
+module Private {
+  import experimental.semmle.code.cpp.ir.dataflow.DataFlow::DataFlow as DataFlow
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking2/TaintTrackingImpl.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking2/TaintTrackingImpl.qll
new file mode 100644
index 00000000000..e6ce1ada8d4
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking2/TaintTrackingImpl.qll
@@ -0,0 +1,186 @@
+/**
+ * Provides an implementation of global (interprocedural) taint tracking.
+ * This file re-exports the local (intraprocedural) taint-tracking analysis
+ * from `TaintTrackingParameter::Public` and adds a global analysis, mainly
+ * exposed through the `Configuration` class. For some languages, this file
+ * exists in several identical copies, allowing queries to use multiple
+ * `Configuration` classes that depend on each other without introducing
+ * mutual recursion among those configurations.
+ */
+
+import TaintTrackingParameter::Public
+private import TaintTrackingParameter::Private
+
+/**
+ * A configuration of interprocedural taint tracking analysis. This defines
+ * sources, sinks, and any other configurable aspect of the analysis. Each
+ * use of the taint tracking library must define its own unique extension of
+ * this abstract class.
+ *
+ * A taint-tracking configuration is a special data flow configuration
+ * (`DataFlow::Configuration`) that allows for flow through nodes that do not
+ * necessarily preserve values but are still relevant from a taint tracking
+ * perspective. (For example, string concatenation, where one of the operands
+ * is tainted.)
+ *
+ * To create a configuration, extend this class with a subclass whose
+ * characteristic predicate is a unique singleton string. For example, write
+ *
+ * ```ql
+ * class MyAnalysisConfiguration extends TaintTracking::Configuration {
+ *   MyAnalysisConfiguration() { this = "MyAnalysisConfiguration" }
+ *   // Override `isSource` and `isSink`.
+ *   // Optionally override `isSanitizer`.
+ *   // Optionally override `isSanitizerIn`.
+ *   // Optionally override `isSanitizerOut`.
+ *   // Optionally override `isSanitizerGuard`.
+ *   // Optionally override `isAdditionalTaintStep`.
+ * }
+ * ```
+ *
+ * Then, to query whether there is flow between some `source` and `sink`,
+ * write
+ *
+ * ```ql
+ * exists(MyAnalysisConfiguration cfg | cfg.hasFlow(source, sink))
+ * ```
+ *
+ * Multiple configurations can coexist, but it is unsupported to depend on
+ * another `TaintTracking::Configuration` or a `DataFlow::Configuration` in the
+ * overridden predicates that define sources, sinks, or additional steps.
+ * Instead, the dependency should go to a `TaintTracking2::Configuration` or a
+ * `DataFlow2::Configuration`, `DataFlow3::Configuration`, etc.
+ */
+abstract class Configuration extends DataFlow::Configuration {
+  bindingset[this]
+  Configuration() { any() }
+
+  /**
+   * Holds if `source` is a relevant taint source.
+   *
+   * The smaller this predicate is, the faster `hasFlow()` will converge.
+   */
+  // overridden to provide taint-tracking specific qldoc
+  override predicate isSource(DataFlow::Node source) { none() }
+
+  /**
+   * Holds if `source` is a relevant taint source with the given initial
+   * `state`.
+   *
+   * The smaller this predicate is, the faster `hasFlow()` will converge.
+   */
+  // overridden to provide taint-tracking specific qldoc
+  override predicate isSource(DataFlow::Node source, DataFlow::FlowState state) { none() }
+
+  /**
+   * Holds if `sink` is a relevant taint sink
+   *
+   * The smaller this predicate is, the faster `hasFlow()` will converge.
+   */
+  // overridden to provide taint-tracking specific qldoc
+  override predicate isSink(DataFlow::Node sink) { none() }
+
+  /**
+   * Holds if `sink` is a relevant taint sink accepting `state`.
+   *
+   * The smaller this predicate is, the faster `hasFlow()` will converge.
+   */
+  // overridden to provide taint-tracking specific qldoc
+  override predicate isSink(DataFlow::Node sink, DataFlow::FlowState state) { none() }
+
+  /** Holds if the node `node` is a taint sanitizer. */
+  predicate isSanitizer(DataFlow::Node node) { none() }
+
+  final override predicate isBarrier(DataFlow::Node node) {
+    this.isSanitizer(node) or
+    defaultTaintSanitizer(node)
+  }
+
+  /**
+   * Holds if the node `node` is a taint sanitizer when the flow state is
+   * `state`.
+   */
+  predicate isSanitizer(DataFlow::Node node, DataFlow::FlowState state) { none() }
+
+  final override predicate isBarrier(DataFlow::Node node, DataFlow::FlowState state) {
+    this.isSanitizer(node, state)
+  }
+
+  /** Holds if taint propagation into `node` is prohibited. */
+  predicate isSanitizerIn(DataFlow::Node node) { none() }
+
+  final override predicate isBarrierIn(DataFlow::Node node) { this.isSanitizerIn(node) }
+
+  /** Holds if taint propagation out of `node` is prohibited. */
+  predicate isSanitizerOut(DataFlow::Node node) { none() }
+
+  final override predicate isBarrierOut(DataFlow::Node node) { this.isSanitizerOut(node) }
+
+  /**
+   * DEPRECATED: Use `isSanitizer` and `BarrierGuard` module instead.
+   *
+   * Holds if taint propagation through nodes guarded by `guard` is prohibited.
+   */
+  deprecated predicate isSanitizerGuard(DataFlow::BarrierGuard guard) { none() }
+
+  deprecated final override predicate isBarrierGuard(DataFlow::BarrierGuard guard) {
+    this.isSanitizerGuard(guard)
+  }
+
+  /**
+   * DEPRECATED: Use `isSanitizer` and `BarrierGuard` module instead.
+   *
+   * Holds if taint propagation through nodes guarded by `guard` is prohibited
+   * when the flow state is `state`.
+   */
+  deprecated predicate isSanitizerGuard(DataFlow::BarrierGuard guard, DataFlow::FlowState state) {
+    none()
+  }
+
+  deprecated final override predicate isBarrierGuard(
+    DataFlow::BarrierGuard guard, DataFlow::FlowState state
+  ) {
+    this.isSanitizerGuard(guard, state)
+  }
+
+  /**
+   * Holds if taint may propagate from `node1` to `node2` in addition to the normal data-flow and taint steps.
+   */
+  predicate isAdditionalTaintStep(DataFlow::Node node1, DataFlow::Node node2) { none() }
+
+  final override predicate isAdditionalFlowStep(DataFlow::Node node1, DataFlow::Node node2) {
+    this.isAdditionalTaintStep(node1, node2) or
+    defaultAdditionalTaintStep(node1, node2)
+  }
+
+  /**
+   * Holds if taint may propagate from `node1` to `node2` in addition to the normal data-flow and taint steps.
+   * This step is only applicable in `state1` and updates the flow state to `state2`.
+   */
+  predicate isAdditionalTaintStep(
+    DataFlow::Node node1, DataFlow::FlowState state1, DataFlow::Node node2,
+    DataFlow::FlowState state2
+  ) {
+    none()
+  }
+
+  final override predicate isAdditionalFlowStep(
+    DataFlow::Node node1, DataFlow::FlowState state1, DataFlow::Node node2,
+    DataFlow::FlowState state2
+  ) {
+    this.isAdditionalTaintStep(node1, state1, node2, state2)
+  }
+
+  override predicate allowImplicitRead(DataFlow::Node node, DataFlow::ContentSet c) {
+    (this.isSink(node) or this.isAdditionalTaintStep(node, _)) and
+    defaultImplicitTaintRead(node, c)
+  }
+
+  /**
+   * Holds if taint may flow from `source` to `sink` for this configuration.
+   */
+  // overridden to provide taint-tracking specific qldoc
+  override predicate hasFlow(DataFlow::Node source, DataFlow::Node sink) {
+    super.hasFlow(source, sink)
+  }
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking2/TaintTrackingParameter.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking2/TaintTrackingParameter.qll
new file mode 100644
index 00000000000..7d545fe5d04
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking2/TaintTrackingParameter.qll
@@ -0,0 +1,5 @@
+import experimental.semmle.code.cpp.ir.dataflow.internal.TaintTrackingUtil as Public
+
+module Private {
+  import experimental.semmle.code.cpp.ir.dataflow.DataFlow2::DataFlow2 as DataFlow
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking3/TaintTrackingImpl.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking3/TaintTrackingImpl.qll
new file mode 100644
index 00000000000..e6ce1ada8d4
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking3/TaintTrackingImpl.qll
@@ -0,0 +1,186 @@
+/**
+ * Provides an implementation of global (interprocedural) taint tracking.
+ * This file re-exports the local (intraprocedural) taint-tracking analysis
+ * from `TaintTrackingParameter::Public` and adds a global analysis, mainly
+ * exposed through the `Configuration` class. For some languages, this file
+ * exists in several identical copies, allowing queries to use multiple
+ * `Configuration` classes that depend on each other without introducing
+ * mutual recursion among those configurations.
+ */
+
+import TaintTrackingParameter::Public
+private import TaintTrackingParameter::Private
+
+/**
+ * A configuration of interprocedural taint tracking analysis. This defines
+ * sources, sinks, and any other configurable aspect of the analysis. Each
+ * use of the taint tracking library must define its own unique extension of
+ * this abstract class.
+ *
+ * A taint-tracking configuration is a special data flow configuration
+ * (`DataFlow::Configuration`) that allows for flow through nodes that do not
+ * necessarily preserve values but are still relevant from a taint tracking
+ * perspective. (For example, string concatenation, where one of the operands
+ * is tainted.)
+ *
+ * To create a configuration, extend this class with a subclass whose
+ * characteristic predicate is a unique singleton string. For example, write
+ *
+ * ```ql
+ * class MyAnalysisConfiguration extends TaintTracking::Configuration {
+ *   MyAnalysisConfiguration() { this = "MyAnalysisConfiguration" }
+ *   // Override `isSource` and `isSink`.
+ *   // Optionally override `isSanitizer`.
+ *   // Optionally override `isSanitizerIn`.
+ *   // Optionally override `isSanitizerOut`.
+ *   // Optionally override `isSanitizerGuard`.
+ *   // Optionally override `isAdditionalTaintStep`.
+ * }
+ * ```
+ *
+ * Then, to query whether there is flow between some `source` and `sink`,
+ * write
+ *
+ * ```ql
+ * exists(MyAnalysisConfiguration cfg | cfg.hasFlow(source, sink))
+ * ```
+ *
+ * Multiple configurations can coexist, but it is unsupported to depend on
+ * another `TaintTracking::Configuration` or a `DataFlow::Configuration` in the
+ * overridden predicates that define sources, sinks, or additional steps.
+ * Instead, the dependency should go to a `TaintTracking2::Configuration` or a
+ * `DataFlow2::Configuration`, `DataFlow3::Configuration`, etc.
+ */
+abstract class Configuration extends DataFlow::Configuration {
+  bindingset[this]
+  Configuration() { any() }
+
+  /**
+   * Holds if `source` is a relevant taint source.
+   *
+   * The smaller this predicate is, the faster `hasFlow()` will converge.
+   */
+  // overridden to provide taint-tracking specific qldoc
+  override predicate isSource(DataFlow::Node source) { none() }
+
+  /**
+   * Holds if `source` is a relevant taint source with the given initial
+   * `state`.
+   *
+   * The smaller this predicate is, the faster `hasFlow()` will converge.
+   */
+  // overridden to provide taint-tracking specific qldoc
+  override predicate isSource(DataFlow::Node source, DataFlow::FlowState state) { none() }
+
+  /**
+   * Holds if `sink` is a relevant taint sink
+   *
+   * The smaller this predicate is, the faster `hasFlow()` will converge.
+   */
+  // overridden to provide taint-tracking specific qldoc
+  override predicate isSink(DataFlow::Node sink) { none() }
+
+  /**
+   * Holds if `sink` is a relevant taint sink accepting `state`.
+   *
+   * The smaller this predicate is, the faster `hasFlow()` will converge.
+   */
+  // overridden to provide taint-tracking specific qldoc
+  override predicate isSink(DataFlow::Node sink, DataFlow::FlowState state) { none() }
+
+  /** Holds if the node `node` is a taint sanitizer. */
+  predicate isSanitizer(DataFlow::Node node) { none() }
+
+  final override predicate isBarrier(DataFlow::Node node) {
+    this.isSanitizer(node) or
+    defaultTaintSanitizer(node)
+  }
+
+  /**
+   * Holds if the node `node` is a taint sanitizer when the flow state is
+   * `state`.
+   */
+  predicate isSanitizer(DataFlow::Node node, DataFlow::FlowState state) { none() }
+
+  final override predicate isBarrier(DataFlow::Node node, DataFlow::FlowState state) {
+    this.isSanitizer(node, state)
+  }
+
+  /** Holds if taint propagation into `node` is prohibited. */
+  predicate isSanitizerIn(DataFlow::Node node) { none() }
+
+  final override predicate isBarrierIn(DataFlow::Node node) { this.isSanitizerIn(node) }
+
+  /** Holds if taint propagation out of `node` is prohibited. */
+  predicate isSanitizerOut(DataFlow::Node node) { none() }
+
+  final override predicate isBarrierOut(DataFlow::Node node) { this.isSanitizerOut(node) }
+
+  /**
+   * DEPRECATED: Use `isSanitizer` and `BarrierGuard` module instead.
+   *
+   * Holds if taint propagation through nodes guarded by `guard` is prohibited.
+   */
+  deprecated predicate isSanitizerGuard(DataFlow::BarrierGuard guard) { none() }
+
+  deprecated final override predicate isBarrierGuard(DataFlow::BarrierGuard guard) {
+    this.isSanitizerGuard(guard)
+  }
+
+  /**
+   * DEPRECATED: Use `isSanitizer` and `BarrierGuard` module instead.
+   *
+   * Holds if taint propagation through nodes guarded by `guard` is prohibited
+   * when the flow state is `state`.
+   */
+  deprecated predicate isSanitizerGuard(DataFlow::BarrierGuard guard, DataFlow::FlowState state) {
+    none()
+  }
+
+  deprecated final override predicate isBarrierGuard(
+    DataFlow::BarrierGuard guard, DataFlow::FlowState state
+  ) {
+    this.isSanitizerGuard(guard, state)
+  }
+
+  /**
+   * Holds if taint may propagate from `node1` to `node2` in addition to the normal data-flow and taint steps.
+   */
+  predicate isAdditionalTaintStep(DataFlow::Node node1, DataFlow::Node node2) { none() }
+
+  final override predicate isAdditionalFlowStep(DataFlow::Node node1, DataFlow::Node node2) {
+    this.isAdditionalTaintStep(node1, node2) or
+    defaultAdditionalTaintStep(node1, node2)
+  }
+
+  /**
+   * Holds if taint may propagate from `node1` to `node2` in addition to the normal data-flow and taint steps.
+   * This step is only applicable in `state1` and updates the flow state to `state2`.
+   */
+  predicate isAdditionalTaintStep(
+    DataFlow::Node node1, DataFlow::FlowState state1, DataFlow::Node node2,
+    DataFlow::FlowState state2
+  ) {
+    none()
+  }
+
+  final override predicate isAdditionalFlowStep(
+    DataFlow::Node node1, DataFlow::FlowState state1, DataFlow::Node node2,
+    DataFlow::FlowState state2
+  ) {
+    this.isAdditionalTaintStep(node1, state1, node2, state2)
+  }
+
+  override predicate allowImplicitRead(DataFlow::Node node, DataFlow::ContentSet c) {
+    (this.isSink(node) or this.isAdditionalTaintStep(node, _)) and
+    defaultImplicitTaintRead(node, c)
+  }
+
+  /**
+   * Holds if taint may flow from `source` to `sink` for this configuration.
+   */
+  // overridden to provide taint-tracking specific qldoc
+  override predicate hasFlow(DataFlow::Node source, DataFlow::Node sink) {
+    super.hasFlow(source, sink)
+  }
+}
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking3/TaintTrackingParameter.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking3/TaintTrackingParameter.qll
new file mode 100644
index 00000000000..3e69abcf4a7
--- /dev/null
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/tainttracking3/TaintTrackingParameter.qll
@@ -0,0 +1,5 @@
+import experimental.semmle.code.cpp.ir.dataflow.internal.TaintTrackingUtil as Public
+
+module Private {
+  import experimental.semmle.code.cpp.ir.dataflow.DataFlow3::DataFlow3 as DataFlow
+}

From 08a17b355eea7a3236d326ac7aa53bbad82a8716 Mon Sep 17 00:00:00 2001
From: Edward Minnix III <egregius313@github.com>
Date: Fri, 9 Sep 2022 09:30:49 -0400
Subject: [PATCH 081/203] allowBackup documentation updates

Make error messages and descriptions clearer about application backups not being disabled, rather than focusing on `android:allowBackup` specifically.

Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
---
 .../2022-08-18-android-manifest-backup-predicate.md         | 2 +-
 .../src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/java/ql/lib/change-notes/2022-08-18-android-manifest-backup-predicate.md b/java/ql/lib/change-notes/2022-08-18-android-manifest-backup-predicate.md
index 5346dc58b91..0af4f964170 100644
--- a/java/ql/lib/change-notes/2022-08-18-android-manifest-backup-predicate.md
+++ b/java/ql/lib/change-notes/2022-08-18-android-manifest-backup-predicate.md
@@ -1,4 +1,4 @@
 ---
 category: feature
 ---
-* Added a new predicate, `allowsBackup`, in the `AndroidApplicationXmlElement` class. This predicate detects if the application element has its `android:allowBackup` attribute enabled.
+* Added a new predicate, `allowsBackup`, in the `AndroidApplicationXmlElement` class. This predicate detects if the application element does not disable the `android:allowBackup` attribute.
diff --git a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
index 43827aeb081..d2810d70250 100644
--- a/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
+++ b/java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
@@ -1,6 +1,6 @@
 /**
- * @name Android allowBackup attribute enabled
- * @description Enabling the `android:allowBackup` attribute may allow an attacker to extract sensitive data.
+ * @name Application backup allowed
+ * @description Allowing application backups may allow an attacker to extract sensitive data.
  * @kind problem
  * @problem.severity recommendation
  * @security-severity 7.5
@@ -15,4 +15,4 @@ import semmle.code.xml.AndroidManifest
 
 from AndroidApplicationXmlElement androidAppElem
 where androidAppElem.allowsBackup()
-select androidAppElem, "The 'android:allowBackup' attribute is enabled."
+select androidAppElem, "Backups are allowed in this Android application."

From 49220a4f194be12289b77257f5b63c8b5e659390 Mon Sep 17 00:00:00 2001
From: james <jf205@github.com>
Date: Fri, 2 Sep 2022 10:36:02 +0100
Subject: [PATCH 082/203] update info about downloading dbs in vs code

---
 .../analyzing-your-projects.rst                  |  4 +---
 .../customizing-settings.rst                     |  2 +-
 .../setting-up-codeql-in-visual-studio-code.rst  | 16 +---------------
 3 files changed, 3 insertions(+), 19 deletions(-)

diff --git a/docs/codeql/codeql-for-visual-studio-code/analyzing-your-projects.rst b/docs/codeql/codeql-for-visual-studio-code/analyzing-your-projects.rst
index b23ddacf157..2b4e26b405a 100644
--- a/docs/codeql/codeql-for-visual-studio-code/analyzing-your-projects.rst
+++ b/docs/codeql/codeql-for-visual-studio-code/analyzing-your-projects.rst
@@ -14,7 +14,7 @@ To analyze a project, you need to add a :ref:`CodeQL database <codeql-database>`
 
 #. Open the CodeQL Databases view in the sidebar.
 
-#. Hover over the **Databases** title bar and click the appropriate icon to add your database. You can add a database from a local ZIP archive or folder, from a public URL, or from a project slug or URL on LGTM.com.
+#. Hover over the **Databases** title bar and click the appropriate icon to add your database. You can add a database from a local ZIP archive or folder, from a public URL, or from a project slug on GitHub.com.
 
    .. image:: ../images/codeql-for-visual-studio-code/choose-database.png
       :width: 350
@@ -31,8 +31,6 @@ If you have a CodeQL database saved locally, as an unarchived folder or as a ZIP
 
 - To create a database with the CodeQL CLI, see ":ref:`Creating CodeQL databases <creating-codeql-databases>`."
 
-- .. include:: ../reusables/download-lgtm-database.rst
-
 - To analyze a test database, add a ``.testproj`` folder to the Databases view.
   Test databases (that is, folders with a ``.testproj`` extension) are generated when you run regression tests on custom queries using the :ref:`CodeQL CLI <codeql-cli>`.
   If a query fails a regression test, you may want to analyze the test database in Visual Studio Code to debug the failure.
diff --git a/docs/codeql/codeql-for-visual-studio-code/customizing-settings.rst b/docs/codeql/codeql-for-visual-studio-code/customizing-settings.rst
index 940a8a0c50c..8899bc97bc7 100644
--- a/docs/codeql/codeql-for-visual-studio-code/customizing-settings.rst
+++ b/docs/codeql/codeql-for-visual-studio-code/customizing-settings.rst
@@ -28,7 +28,7 @@ Editing settings
 Choosing a version of the CodeQL CLI
 --------------------------------------
 
-The CodeQL extension uses the CodeQL CLI to run commands. If you already have the CLI installed and added to your ``PATH``, the extension uses that version. This might be the case if you create your own CodeQL databases instead of downloading them from LGTM.com. Otherwise, the extension automatically manages access to the executable of the CLI for you. For more information about creating databases, see ":ref:`Creating CodeQL databases <creating-codeql-databases>`" in the CLI help.
+The CodeQL extension uses the CodeQL CLI to run commands. If you already have the CLI installed and added to your ``PATH``, the extension uses that version. This might be the case if you create your own CodeQL databases instead of downloading them from GitHub.com. Otherwise, the extension automatically manages access to the executable of the CLI for you. For more information about creating databases, see ":ref:`Creating CodeQL databases <creating-codeql-databases>`" in the CLI help.
 
 To override the default behavior and use a different CLI, you can specify the CodeQL CLI **Executable Path**.
 
diff --git a/docs/codeql/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code.rst b/docs/codeql/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code.rst
index 1c762348a9d..5592992373b 100644
--- a/docs/codeql/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code.rst
+++ b/docs/codeql/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code.rst
@@ -28,7 +28,7 @@ Configuring access to the CodeQL CLI
 
 The extension uses the CodeQL CLI to compile and run queries.
 
-If you already have the CLI installed and added to your ``PATH``, the extension uses that version. This might be the case if you create your own CodeQL databases instead of downloading them from LGTM.com. For more information, see ":ref:`CodeQL CLI <codeql-cli>`."
+If you already have the CLI installed and added to your ``PATH``, the extension uses that version. This might be the case if you create your own CodeQL databases instead of downloading them from GitHub.com. For more information, see ":ref:`CodeQL CLI <codeql-cli>`."
 
 Otherwise, the extension automatically manages access to the executable of the CLI for you. This ensures that the CLI is compatible with the CodeQL extension. You can also check for updates with the **CodeQL: Check for CLI Updates** command.
 
@@ -57,20 +57,6 @@ There are two ways to do this:
 
    For CLI users there is a third option: If you have followed the instructions in ":ref:`Getting started with the CodeQL CLI <getting-started-with-the-codeql-cli>`" to create a CodeQL directory (for example ``codeql-home``) containing the CodeQL libraries, you can open this directory in VS Code. This also gives the extension access to the CodeQL libraries.
 
-.. container:: toggle
-
-   .. container:: name
-
-      **Click to show information for LGTM Enterprise users**
-
-   Your local version of the CodeQL queries and libraries should match your version of LGTM Enterprise. For example, if you
-   use LGTM Enterprise 1.27, then you should clone the ``1.27.0`` branch of the `starter workspace <https://github.com/github/vscode-codeql-starter/>`__ (or the appropriate ``1.27.x`` branch, corresponding to each maintenance release).
-
-   This ensures that the queries and libraries you write in VS Code also work in the query console on LGTM Enterprise.
-
-   If you prefer to add the CodeQL queries and libraries to an :ref:`existing workspace <existing-workspace>` instead of the starter workspace, then you should
-   clone the appropriate branch of the `CodeQL repository <https://github.com/github/codeql>`__ and add it to your workspace.
-
 .. _starter-workspace:
 
 Using the starter workspace

From faf1d0a5d94993a472b42df176518a97991165f7 Mon Sep 17 00:00:00 2001
From: james <jf205@github.com>
Date: Fri, 2 Sep 2022 10:43:36 +0100
Subject: [PATCH 083/203] new screenshot

---
 .../choose-database.png                       | Bin 58515 -> 112731 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/docs/codeql/images/codeql-for-visual-studio-code/choose-database.png b/docs/codeql/images/codeql-for-visual-studio-code/choose-database.png
index 71ca5d6b4c3512bcdc641be0a14043c108a320a5..58287111cc162e7ed95e8e59ecbfc84e55d8b187 100644
GIT binary patch
literal 112731
zcmc$^g<q7-_dkq?q)1E0k|ME4H`1L-34(NYcP%a5tx_W0Af@EeNH+otNG!4BlF#M+
z`F?+&`}aJ5z_YK{wKLZ>ac0h$IcMg)Pqc=bJT5i`HVO&~uA+jB777X~3<c#;Cnh@Z
zWl5jF1_kA*y^XZAhN84IorbHErH#D>3W`E>nl6Uko5AP#23m^NkI;%Bt7u6Suaz)4
zg3svZF%{`P_h#b1J+RRH*%*sCKcP*~*Mw?1P{kh80e=2A)kBk%@}-j$>i0voHIX%e
z%X=ZWZHcWh*y`ipS&aO**^#!76Tz&BOb`qn`O;z@MfFGIWRI|Go}kefb6O1a$v%GZ
z__AxbjS@w3wOW|1^<L<~SXP%V_4Lu}eyLp6#M4ud_%jrvzKkJk6uOt^Iw?3sN}`me
zV&qTpH?);<E4!D{1mA??T`n;)In#AMMak;l9ISgZ(T;IGA{EFF`*r)Ywp@lT9pw|>
z(+!l)D3)M7@|&95+h`@jXSHGt8B$L-A61MT3D!UK7YISeH!bi?wT<qio)HWe`?Qxm
zSlQe+!**EF{pY(Si3aHjQ;|Ist3!EY#l5^yZH!s3YKPuQ-%7G;%uu7GzSNRoEI-gB
z>dbw-kMWewljK<H3mt!mph_|+QRS?aWpqyqe$Ps%8Ud+u3LQVh`?Cg3_SdF`7de@q
zF2ZN61_kXK@2S*hk92qUL+AyvDz}3e2wi7xGcA)|u#%X*?41qYNF|Hn19>LxFw2!W
z$UTo1eD#>0TQ-zC&@PGyl6?GuL_#N%2}fCDDFZf)f#~Cp>0Kt{Th*mgiqV+C5b4`F
zAHZ|_$%(^s0DDC9+28%_H7BZx!q=Bx2dx^(xnH-DbR3v!8kK!zlkI|yVvejMIJ$cr
zpo>IO=5KQwtWTWXzFnQL+ejKFzf@~~5lKp38iQes{^bz{1ch1SM-mouC>5O}-1bjs
z*IOQwU<`9QO3aY@cRV%pjX`p#)zP0YZyzP$Low!_T#jQ)f~JGWr@vK=(Uk`^)db0M
zdSknYN1^&0H-8CAGoLWP_D1E~2=d<f`7`ol`{(D}hs*0nZ~<IO+b=T|eZlf2v%yTS
zQpuz~(nSzZJDZ83T=o>M^I<*{$PK@F3OgCiKTe&H^Ok8*vu0V&r^{!%0S#$>qDDlP
z*(D(ZIGhcjyU`e%_leZpo9HdCocqN-(el$^iup-#$Wu4hy&R!!c}V~1r7rCt?^66J
z6_iRBbC<xzN6jaOp`Y4#-zol0j|XFalsp&tOJb*O59hbop1iU>sEJl2Ht)xnS!6Bx
zkKTBbI6WLsnP?2Jxs>}AzTX_5CGriS4EK=|`HQ7>$*yzn=G5lKzqO*Sr=o8C+*C<b
zON*|TeWJqeFM^q6h_z-xHZ?jkii@(<CU<^$&fob!9ZJ^VKQ($ojq+d?5D*aAxl5n$
zsAi6m<{@m&{em6Eofk#WE3rC}<ePg7LMr%y@ZE6{`6HeWPYz7P9e?0lh0x(+(@U}|
zpxS&8t*FC1bR*AvS`sGoi7YkL;sf7T6v`i#HPi>FH?JQHK2;0m`Ay&Qv?{F4`O-Z&
z;}d23;||QwM10}y*B|lSdeL2^mhqnx21Dq7DWE1tnA0spp=r`hCHW|@)}fZY<_GaX
zjbL=Hs6q)1pys4V1r`K45@PxScSc%O)4*MDNNT~FI2#f#UH?nbnn0NLeQ0{&%pbJ|
z8nF-~nd(CLALRy&$C>Ds!TKM@$Z$44)anVRhY!|d>0#+aXq$QH5&4hl)_PXp+(Z$%
zppW(Dtv`$Zk>VmQj#Us1?q@rOdy55Pcg0Bbww+X?3IBxrmN{l}#wx^GfDA%RrN~X#
z)=}1ZMU|-`UNZE*g01DxBCKA;WlHDD8LAk{FRO~G*)xbUUnD9pG9(iX77#0MBw;J`
z6*U&+6`2*W6+N58s6$`KJ&=3GP@2L7YlU$mo*^_5BnTc?uxyU0^ht5A7FudqYH=z@
zD)SJN5=L>xH|fU0>o+N1g{Fn3U2Un)dCzIiD<dKziX#%_+9UMLn&evhY2w@{@c6_h
z-EHD|pE<CrN*YKl$%&}7sro6GPC4vKp1J!z3c%`!2u!{YzL!k-y!&NvhS+*+vSPYo
zuKf#ADfWv+Vc#r8wRVwqNu%+8vQ7rS?2=AS;pkL;+555pjhhnBglE!L5VZ=m&N0(G
zYT+G^{QYEi2M=kFC*My!1orc%14e$3={$WFHl8^!-z_-$XM$mGVb|r{^-Ss9bGLEN
zV}F0o?@#F;^<UM~5?|IFgURP9oN*CP(<u&kT1<{@qIU5w@YfS%rS~EX$q}p0UriD}
zPt^1}H?Mp2sLQDoY7`n4Zpq=wUB<bX$!~gZ4)*WIsZ)C4&QR_Nq)IfH|LOefrJ_M3
zpMsWR!<?h~PQ_PcRHa9?xWrCXJ=-&jJo8D`R%Ru)i0!P+7#AKFX-+k_gynr`*|<5+
zY3A0*n-NDGqF79v@IK~PomeAfkzw=U*7P=xBLmG!Jso|W@`~)r@0FvK^7`t{RgIly
z(zPZFQTDU*xs5(fc2+sIZ9kfRUbN<Yrk<;UR?Qyfi>-)H1SSVG-tl34c{~i7Gs)|*
zke~iFr3us9^&Z6XK)4c$RJz$x%8_mJsBl;K&Z}Bw^DMPaw9X<w$A&033>#*kXXy4+
zMwa3ki{Bm`S6Ag%`BWJg9>q^k69}0eMwJjaEmN&rIi@+zE$<$h9M&&Wt{D3X`e2I9
z`Yj{Oz2gyvzZVXWeZx!2+uA!byAJTY_4iu=Da8XZW*nAzr=Tmen-PT2!RfEL;pQJ+
z1xE#eV}Y%KBDeVo4V0`@trjq|AmyO^2j+(h6wB9gKl+0&UdO&R`rz@qkgl9ga$@$A
zl|6>%Ge4Fa?Haop_N&*&e(_){^c`=^=Y%v`gp(BCD6^^F5nR)aaI=e4@K=Z|^Z38J
zI>D5ZdE1MK$}xPySzyouk3WmgCGdF}^E{1Ao8bJ#;;VPhS9r0hNrY^-zWTl5f0djW
zp@%;l_nzEOVvN&KYx%RcslTDW#qAV?0Bee9jG3E|h4E0qKZ7{8fp^!jE})LSRY;c2
z!d^*r=w>=`nxqU~7@3g&>e@8hC0nraRbFa-awlJhmCB#Y88hL2-*^rhKeODG7S_$N
z1Ob`?fqN)gC00Au4G$)H8Mz3z_^GMSOnbhHqouZ`KtYdjPY^36VFjT(_FXs|WW4US
zUdLQ){9@cFYlRh?I4$~nFO^I9m4}+lSVZn+Yi;Y2>kUHd)N?20lm~&Q<j&NZ{Dx?h
zSuJax*(3S6@)8SD?VVVe!E>gim-4VpSlkoe<HAl^lj<wQlNzp1HFd{5u++hu(myIm
zDmGbrf*!x7tz=DPyHt8gPfGdJn={3&u6xK2$a5^|d3db&$Lq5Bf^-HBju)18G<INP
zNQbKZWfHfC><r;*o6g<ag;UxG;`=uawU)INSKFvvPbi;n;Pl}bkhX%~wf(V+{sfaM
zv$N6P-RZmSBMqcEaYK#=DA%PoaGt;W9!TzzWxf!%6*AmhJ)y7JuyHb^$+oZiN;j?I
z+U^`OvokC@#9#5bO0&WSoWSX1XxHJnusBZgC1yYEXIfji%D3m*9mXtrUKRlp*WYnV
zD3t{K7hkM;+r7Cexwc)}s~hbd4bLfXR9tYqAe{yC8N@ZGJKoi))>Q`hbzi*UTjk>u
zQSoH2l(i#i%o7<nY;R{X*EP#?TPayVZ&SVu7K;%BUsxV=)Pik|PXlM~zZ*LQRto<R
z)X++pR<AsA#OG@eDB)|O{wO-X44ZTRojCm2A(G>nF3m5Ay0aJOe{Kr{24dpRsWNDe
zgp&d`Tuvd|Z7lKy?Vd01-|p{zo!S|L<O%tt2VBexJ-9`V-{ebphj@Hm|1#Hi{d_$A
zahK1%=ck$S#{1;U;{IXrjGRTeCh87C@2%dM#B!@Dm+JTJG;SSmIYgX+z`&|~7gNjm
zt>-Fy&I|kKY&9<+!MPgNd2v^V!HoAU$m=S=t4;SNDH4QdK*J>d{U-C_YKsV&GERM3
zFj<f;#uKD-x(r9IkJXF~gZtb6c(Vp9ENS0Hj?rpY9~j?VTTK*jtQ5A17!4a;cIe;E
z{((1jiQd~DM(_I^b3VL3x=F^9qiqT@4-ma!J)f#y9V}2R8154Ex4EV`KQ}TCG%iSG
z**p)z{^0ycUmvA?0UbpQ7X|%b>8sh>jt^aQ-|ib}LmnX7ccxw5k2Em4);8OI&yA|0
zT-b-eNnvxL9kx`|!Hl%Q-`nt>HA3r`SKb=(&X?lToSk=si&5Gzp%|y1pP%boo(C*E
z4GZtsbcz0kp^Z&&@szUFnERCHXBUBX(DnOxiPaEpRJ`NOJ7aRe#Lkv@)>Gj65o4jJ
zXsN1-@)F2nqM$vZKzRb>9s!T|Bg+4imwWUA<?%n?QBhDLZBWqur;Zws{{1Ba&)+ux
zNgpRipkM%Rguvtd3H5(#qryHt{@?tgPM{1$@{P2jB9Oi@bG5K=bhCDHFQW>Y20map
zE9kqSpgd>#`#e(AVmt==pS5|b=dP!!B5da5z-eOcWNN|b?cn^k9~4n<VIb>Z;ci0b
z?O^ZdChRRn|4$8JApiF>n4a#RD(-e-^m?iqbka_)7IgfaT%26=;@EU_bfT{2mcm*x
za{tpDcoU<yc6WCc27|r4yg0phIGtRrz^{aaguq<fU~X;>pazGVkE6SZH;1De!+$#Y
z-+p8)+{|2UoZW4l9O?e{Yhvo;;Vwo`|CiAJ`Tb{{7Tz}hrR3=LKhpvx2>x3Fe#OZJ
z{y%*KO-28H71prvwy@Wiv2g%+2G9`a<>eRsr~dz^<i8aE)l%=jEd_YF{@wClCI9c1
z+HMxE(oPNlNq6!8itB$G|GV&i8j6Dd&ir4T_z#=^`3mq^99tCpe`F?(-3PBp0K`aT
zBcuKnNP$K6&u<O*e*rvyQ{Wj|LGzZeM?rawq9`Nz*89=Hihhcrq9^UuYm$qA@|T~2
zUov8URV^%u6XgG5uTcL={OPFNsAD5^d+`>t5O4ZuV{&<#e!(}9=8S9du?0_M7IP_O
zqY3M$Z^7M0^BFHk?pinL9OdNt(+Q%Xy)MJhHsrO}<z|pXVAUF~I>nq~1|}nF^lSRW
z|0d&4LU0wK1vrOU*8lztRMNnoKklKu=i-BvFOzj5w{yle2aLV)MUj?iZ^mGRAu@CX
z3TXe6Scd$Fz@-!hcbsVrxEN+Y{0)0ceoJ5>iC>Sr_;<}r2DIeFaZQVl$!UzR!cVDz
z|1Q)M!DIv(i+E_eW<&hrwDl|n{!4%`1Oyb)qE57nsY!`D@g*Y_|Cct<#RrSOEy)AR
zX@s$m-=y=gnEy3Pt~Y;a60h#c=R^FjGc7;<n*pNgK%s>C8H<7l7831~MdH6_wM`bn
z2y-(Ox~ofvw9~%y0snhEjj^u@5qvsciqJW|a0^eOfANDX6et3rj4o|5!cKJ<vI_p)
zsZIn?n6}=$_c<l8S{Rn~;oofMk)^{zs;uV)!W5yU2{!$i{}oj9k5d_-@Kh!!v>_!?
z9pxSR|HXlL0tG4YfwU>Gog(z+bMoc?#n`sL>@o8I<nsS3ThZx`VTu7QCemX4=fQNy
z7X+CGXueA>hT{$qJZ4V-UfWfG{tlEReL)qFZmT59FFCbE$c^HSsiSK)xguIgEJ__I
z=k@D-9nqmpH<=Ib2@o$v`r{}?{w_QQ?>1a#!jD*cO2M=lo1&P9jIfkx^N7D(A|-j`
z??+>P85<Ln?sre{BTYvkW4kNSjxO@23CnsFW#Cm0t@!&te)mk3xVF+(!|5D(c_Lov
z3|gIpk+<UB$DiDG#`0X<@7kaE0kWI6j`%yg^Z3_<$LB^p`knd=iD&_{n3oAbEBJ^E
z<G|K>pVRHJ*-8T(keB!`_QEXYm{=UCz?%#BScl)GFdnV=f&bn4+<01Q^?NBAo@2r8
zIe*7oq4&6y=fZ(kT9xBl#w5-jef>p;KI#YgIGDiJ<a&&T@637gwh#2cf;uHb*S|FV
zNu6ls-sPvS)_#2JWFo`wHm@U2h$!zSw0uo4z7>bVFVPi^ia;Jp;6~x*A`V{f(!ug!
zDgvkVUrZ`fQrrrU!b-AH<8&mT-VPPuE<;^$8VMSfTkEos{tU%cWon05zq1zzu`zRV
zexYGKqL9Xz9}T?g<I3sP+RHp^c0?g`vuuL_)C0PN(h<~<*Uq_$d$v`W$R>v+VPK+c
z<`kNzIB^$rD82=ti#AXAp8aCOF8K*_O<$k;mXF=g+%r)1;(_qbg~bXZdt2z$aCl}m
z*Uz`qV!mfzvtXk3W3+r|D>5w18t`KSr2rZ4lw!v#ipXP!(0jx%vrY~rVSAZMl?tk0
zn779&p0^hB69k>T$lX@A{2#&W8Z26uUbLF3dFW+7^Ie>(xKW@SwD|n$WKMl*R*jZ-
z$2jAK$>aL#a);ylJ3pqNBug5i5K{7xKRqe<yNccIP(7=KIRR86g09kUi0MrAE{6&>
zsleYqLQI=nAMWqsX%Qc9KW^gR+}&Jecqg)>wyUD_-H7sS*@Y+0MV!07qV<J0>JBqv
z41U}qYk3)~I5tzRD`FhrQ4ZR^ESSkSrsQvb+ue1&S3bHoP!&-`KX-1if>|x@xZ1AY
zz1A5}u97=_c>!M%!N8;OZ?dI_H%WIk#sT8xUw29sCedxkFj;5dG;v%`yw_EwS~+WW
zSXvcw{t%>SoMW4#k%cMh`&Rcoq|NvI-IUHz`U~Vzt(pAK;h2Qz-#Z0Cnj7)Fr<s`T
zUoq)63zPRW@8V*%8a65UR?adopGtio)Dnxk+9MNtQR2_fiJB&$+5{S0wt*6GWjinq
z<ALPA4Y)}5W>#{ke{Mx1)H;l;5mQ%1z5~Jb9;N$T9`4h@6j%>nYd<0~Ps5z)r{}8I
ztfS!PC1ZyIGv`H#NARU)zV%D~bz{43C#UYomvhH^klCyf@~jRYqS}th>Cu&q@z@Ue
zcq*SJ+wQK0qNC;N1(eEV=^_HN-gh~li;X$`t?LR^&k0?Tnw;j>6QAdlM2ChHb7Ji*
zk}issGln2i293!zR^$1}PDIit1ww8mKX-hwavlH`KoDX>biz0XHf0;)#z6JBjV-?)
z(7eUeADFs#fvue22V1=07{FPW?h%F8g&wP>Bu>4J@WK8f)1%}@UPPtoOOuUgl!6j0
zN=H5;mFn==PnYrs8_Q)nk(%0e_w-`gL~^i8+?`EHjp25Rcpbiw$))v(RWWXLEk5xo
zRY}eaJ(#bpzj^~^RyX!Pkp*3hCHX+8Ud=*hwi@l`VkELJ9G3Qmy9}Bg*({l&+K(Hy
z04-s=vAQbI?!8zwXKpc7GK%|o_5F}1und!%NP>Zy8Qhq|sp#T2m$cSZ`KctRkfow-
zQ4p37<+^ClF9Ndgk9hR+Vfjy*X2yB^np*M(WIj*>zPhhJWyxiJV2BZw@AOx>vq_`G
zD?$y(n)qN)(v7&^pbZ6LdMsW>>S!1X?{1~FrKj)%q}}sA;O4^f`Sa)4mRv<oO0ncr
zY`!<!FD&9u286fJuW*U_UD*FZ<Jo<!MEX3QWD0lOx&~}Se6NF*@RkAI0OkF&2O9==
z*(+S0_mAuL$)JIBt+<Gutv9*Svv<c=U?62H`hxDR8?~zUT8+Iu#G#5u6Q8BkS?CRv
zZ?0}n$0^|=Umj}ER@!}(PyN+*&gYE5DYy<$w_U$qe27#EgrvewJ?Wzm#lb6A#`c@|
zA?rUJq~q3~r*!FSzGISM47iL)-LwXtoVCq8+ec;&Hizx_grPi5No>xR!gpO_q1QNh
zOk64Ch9)t_gNCOsL!sL<Dgv7OnUzeJf`c;<dvUYT2gcUy^t)91IYKx5oGKsKi>#3B
zk`~pLq{+>J1kwtyQM+E0FkEm1H`!>iNPh><r9{^1F!U-2xm7&*^@hN9TW)VMHof7X
zo1uSiiKq8!7!1z1J;#ywn8;Hr<awZ{uiEN&X*8(LSKRuB8GSM8nS8mEto${C6JBpM
z&IkV!NQjvEqmb3V%)s^W<0Zpz$7MRh?~eP3kXKa?CMR2`G9R)r$)@^UhLJ~1f9`J2
z+emHv_$_tlt!XIHerG`1XNW@+85HgFZPci-U^NW#(2xi!2AB$=uPXUFO|^6PRV<$a
zwQj1-`C0)Sxl;848%*Sk=~0Jw@Un)A&NCX(iQh<9P&G3@1rx4_X?eT-*Q^`}t}msA
z$Oe`8t*^AHSBCKCkS^zS|FUXL%=4=EZ6fjsI#bV2CX0+)oY(cePu%v9h^^r*Jx9^I
zfoIFMij5pWTFmq;YPm1iShdZ9Dvuy>=&R<vFGDhP(rz{rBv?-vc83Zm5d4!q_w*nx
zPVytBk=U(~Nm5C_J8&fY>wP*-!6i}1jLZjoeaD@`xwXmtzU<TD@r(kLV-W|fcwMf5
zxKVQFM`k5vOFoY0d0L65YPx>)QO5>%jhp*N;M?k10#9J&TVsH{7(Xs`El#}rK!B!c
zwsg=!;kb$=M7hVsB;<eP3@R`1M<^~R7Cm!}h4Y5}=y_f{L#7%5sOL57s<w3k*AjN#
zT?gI${WMe5ZbKQdTn80ne3&LC@&Ya*T-~nKGxe^XNy4j&GQZzoXXa#IjVo4H%H8vw
zkEIYI@&f~m*=c9o_yrNc_%+tEi+xX1A>Xq&({G5A0osf+RnDRuNc;OKpZhO#Tu~n{
z31Jr=)&Ba|6|o;~^e-L#D=Gq5#sSM5``Z3;$pCfJVX3itX(w*1=>@d=Xv0dokaB!c
z{@yp)T7u?gd0xe3tK-$lJ55W}{dv#)C7JG|)3L>3W#jZs)1Y%|zLTMH?}~}j2hqIt
z5e`to2uP-fTX9pN9!jgVEpHbGi`(oCdn$C{wjtlN@gk2A_P*%1+&)#dF*9=%vy@m2
zrGTgwWz(NMT%=gQwL9oXAwELszMR9a>$tW#pd#X|sq|}*OukNh5X5jvY)R#5MgBD2
zqnUvI$B)@iJ>S+QJKtVO>0@C^ImQk!!b0BC7&D?VvuvK+g;w#mtA6(zFP_?84D>D7
z@}RHLA>ev`F5J9$d6Nh3oSVsPK8kI=6rObLQlC8Wu3&Jy?5A`}Pjf!e3hiUYheuuc
zosOExO73*#O^M%~8J=`a7hGMW-o_p+3*{&+Tl*QDyID~7dt?kxt9a>`rL}&>-}KJX
zlFM*Y;C@4xty!O^h}Fv5%g`A(1`F<}rA1gTFk<<TvSvb9(MNgwt)T-T*d|0Cn&m~;
z%{#<wvWbr{S??R36~k=Bl3P+d8cHiK?jWCF0|k}4yO!`{3c*{B9U>F!O`3^@ySq=M
zw%3c`*%RKoJbW;RUc{~J>rYjo92_=a{rLSR8>LGlizOG1CeL>G4g9pPY<A{X-zDND
zL1qw|GfOr+uu8mKeR0P@)pz+w44Z_1`-FY+Pe=R>+<SAC5#VEwW)3SzK8gU;OA7Mp
zG%OzeW(DO%gneY-PqBtZl2Gb5kNkYwjVGxrwJNJB248M1PgJ~d?qR|7nNi}<QQiH$
zm;F@o9XuG-_?=T*+EW}_+TW6p1;27P8Sl3#B<l+`Qwo<j>iA#XvQGlRN2^^<7@0X1
z8=w8t5_$A}%CcMv*h+*ud!zBE6DYFY`m#0>y56t(pN=N4DM63;iL$2?y$s&wcf7#-
zBXNi6deqVKjC-}iNTv5C>G-%D&vX2ybP4a$Gc$1f)QG+&8}sRg4BWrrZst^Jelw6N
z9E*_pGM%Q}l=o0xxMS|HO?Mk(-KN_tyW%N^V+n++ww{ApiYD6yQmH#dwouesl6UUU
zM1hEMYBeK7Y$cXm+KJh7H2rdF|H*&7ACXwV*)+XZ;`KU~1JlD0w&dpG9=#_J*Wb4I
zX^FE|pnY)BuA2I#vi_pV%J{N!-r7fVX-9<f)$!-a+3Cs*;qih?Ei2r$8?Dl&8P6d|
zg<oq5Pm-Vy!W?vB?C(-r@w9h!f3dC(L{m#hM2jC2jWI=<66{}AALp81?S+=kusO7H
zcnScOA2A4yu5rH@-B>RhQ(SH|^#5$9-Vt1%bfV|NM!ka`eqCRLv{0+(UfOnSiks5x
zC?_Z@`dsafX57F<&%|lBgpK#8;wM$GeC99c7aCRr6>vi5#<fT7`Cz4>f@$+&<7K#?
zB6P``T}+-gX{;vB(}C8JnXT4T6RXStC*YHn0cZ-Hm$v^TnQ;fFU?2fZ4EMo3V#`0z
zLkYyf$(zPW^wh7dZo#{r(D4)MIlbqHc@5Q1Xy{7$e}#ql;2Lm)L)d8pkCkb8;R88v
zipqStOZ)lMyOT|MCS0fB8?Ho8VyXTj)L#-y^SSjQ)sXh=-z_C4<6sY4lHFN0)L{Yy
z|F5{yKy%T2(58z~!V2lB3F&xfL-Wy-rgfGo;MiIri{^{vdb4=d-`Am(y<(u!y>!1A
zXgB{$!6(ij%Do3am}HDt5ASp>P~1&wtn>LVIi*{C?%wtS9Mth!;AkWP(b>;Ow^)*b
zTzkKg(4_r)KyAXkt+TGNNrU&-+0Bhb_#bjCy1(1T8TAaqto@mcd)_T|SCi<QaQD;Z
zhs{t@;IQ80XV6>}{4%bE{-;sqfjo3ecAhIdCW8gHyNQoD-zLU$4t!e^0JWKh+f^Cb
z_ZD9wch19P6k52Kf(%zZgo#v$RJS(qT-2pH-#PG2WnrL|sP>0xFdVL&vdC7waJn(N
z`EL4)>Fit>xatA-ETz4dCpw{YJ{|I#9ydk?W`}{vh?(+-n9E#3*WM@5<l%r7*}N(s
z-k45Ih%m%|10l7vuiShrG$Mj;xlJEc_WjMk&UgXXNr>T~iK7nw`55|Ya!99uS^r82
z+MIFBJJPV3!HEo>h-0qwV^V`;qZ=~F@7a9YDkMa3FjZs-+f=At`3GZWm9mz)9FZD{
zIz(#Zs9a^SUt^alO5MRZ!h%*x?*nT=x~pLr#x|3yMqf<6xNZ$?ArPhQ0`BXqpfzLr
zC0c=-uYo6hI~Md)YNT@cpyM!|_(c<hC_$z?+T!A#=Y2ZiP9HN%{*CNa%b|Sll8eVU
z=>QAdyGf9COYuf0p9R$|0!6EXS6Q+_Ec(=_n|l13z|Dl-P&8rx(51FS^zd?<IV#}j
zuKkc6rLA=)F+sW}CDDt`gJ#TB!WFXU$hL=JBFl*DOF^B23#oHhbUDh0KNgW~vrll&
zcD+f!PPnD;4`=bOh-isqoU&!;l$?i$$7?Y3kL2^Z_iA4|goHqG-1cX6!#~ExqSFil
zeDHOMgfg5=b_Lw%3?|g^6#Jad0JjkklpW*xL&$9=u`};xlR>f<I4HY)B5}#&iR10i
zo1>vbtYF2bJO%r6<w6=F#y<I&6;II4&hHsp76aI%MUR*k55e;NoB9IwnN{wJ-Z%QH
zr8zp3ZO3z+89UKG+CdXEbM#J!<ZP|pMn^L_P~^t`H-ZGej&U<~1FAVwsa3Ud#@jRF
zxO(7R;71UwNr*6di*8sN;g2F%DKA|2Ue@}jalm<6T^JVOkY`Tt*T*h*ldPkS35Rr>
zQOu;cM6cwaHp?coagEPf)`&;>wPG~ZY&$2Tr(Ms(Brys)$f(d-MD6c?)iJcDO|RN3
zAmPjbw8v$;csR5tXN0ar1+gmz)_+u)VPcTX_8b+ioLA&E1$)5#MtOCmRF-tiJhUK?
z6WD}r5v%W{Khc7mh<*z?EycBwUYdmh^BL?s?Yl%CiQ7en>l(^a!2O2T$xYJz@_}QX
zK0UtKpsP(oK{MaRZDdJy!C|%X$ci1&5kKn@sZMT(&9tAo6)Go%?$oy(WS0ag$qldm
zZh~4t8{iBJp1jn7ADGZ+4W12$7cp$1^FqjKWlRZ7n8{WoYsU`4FX<Wm?9H|HWY%7D
zeoQ!QNZ|cV1s8ck433|5))vIneNWxcb^nfLPr0XIE$QBMoxz<dTob)Z@6oYJ_K0q3
zj*g-KE7nBjWVNtE@;7Oe0`r|~FZ7OC)<%4Lr^bs1mHsndI^JctfAe6~sV_Cf;bI7&
zyS}rndxCY=ZRh)BM7tHh3cg}N%w+i`x@qVg<A$ZmXxjvj%;WuhU!Vyh76L2{;kFH=
zL`T;Zggf8L;NnMw7cIbSH~mxg-gK`pttVN+e!jvCxG~E2A_&%hLEYvhFOq{)&a<hj
zYoHH}dg5ZZXC{6$t#+?vV^3kov&=zX)8qEu3f@h>wHZm9-+kaePf&6w&VbvShrYrR
zsLFr9F8wAxajFFvh!HUwIsrndm(3+Yo@qWU6QkBK<!}osn6+@;HE&)VQSBm65fV^D
zJ9j?MbO^t>yK4%7`OtF-0T#<4u2MOe;i73xuzJ(Ux-3kltxASc^BFzaC8TWAArW3&
z)ZR}?6vFu{BSS$1v6TsFkL#a2{n1YAsT=_AOo50>JZ)%^ecC=*<`ZS+FIN44GAHp3
z|LM66^~eC$n#Al(i@_6J5<TWOylYUwFGei-P3Qj8x!@*E<G6MU3czRj`iHGHILX0y
zz{k4o{f)<9<9-!-E_wFO+WkeBKTY2tFHwj`_z(3!1TA(Mzue5p@YRwSo~q9cIm)7W
zT>#CvR9IKlk8CZI-y}qZE`=&mfDd_@Kjr=(ckc_#X{>WouJ4TPY7J&gTu^T?C?O#{
znoUJJ@Km6yLvXTP3Gfrv5?r-)-6(?Q95{ReFe+a5`(m}CEpBt2`<9_gG{S~;Wr6cZ
z?d}bu1N5dlS>T_Z$#6o9q-e|y8C_OqgD;a$yq{;EC_%e+{dYvxSdmvh@$RiFZi{wg
ze#^@JUc1eCC?tL`zKspij1RhL4l=;>w6<@{Mx@ycrX+&bhLRJ(394%>z*hKI_a+ek
z8qeJK-h7(7gsxx<iCzE8wlxkU;6&E(DB2;V0_fih1f2?~^T9mj%8w*Hu*{gYhHVCs
zICJ7&U@RZH`m_1I=GZkY<GZ7xL8a`9GbeJN|2XU)Ve+;kv!08#do*r@jcQ8~jRj?V
zWcbth=2&&dZ|%k?nj2`I1GpmuQ9B^F0}}TqQyIc=M;$D01LakI3rWT>Z#*7@vcSll
z9oe%ai2uktbzEd-aPj3oZggM#KQr-u%L$2Xq!K3IceE*2nP6!j+wLpZuIHE<8DV0d
z03*YN@^}1mL3c+(C6Cj*FKq|+J(v<}7o@1%n$sR};rXXR{OLrMX_-OBF^a4IIMP2*
zq3K9LH)Y3wtETP1$_;$&zVa_hu{o`99q^0b4-+itTsNpADiP>x^U1hTeVPe{t6=GZ
z(!(r(4oGkguc}IQvhyPUgNl5{e9Em$&|>>D<B&AIH?lRx%rLSHoBQzgX6+$xP?`|&
zSv!e_FvJS;j1bXvJKSX-<>o(99r(a7^7f@r!ch#w(!X{A+m*a3;4puGcJuh6n>Hme
zVF3Uu60r1q)q!Ot^9duw2v>-ZrivDXhkB@QAWeg|Lh4rDf1ASydt?rHG+*KWk%!u}
zEyUe8M!3m{9zd5U5EJ<rC))yJ7M}wSh529_dV8}ZAPMK+uTNV~Mz`!DJH5S+Ryz>d
zy~Ta`x6h;w>vsYHM-xYZaF^?r($3*ZTZ+7}oWkRY4fT-(0>O@dV3y-t0<t0yo+*t1
zg^ug$JsCd7l|X>;_ETKs(e2n#Dq%^)t&pxeb5{xeUml*22K~~Nj_0M{`pi_#=vtfZ
zpScjjRR%I%6a|K|))f?Vdfvkk4v_%-z=;;wDK_7)!}~a>dzX)XhG9@csF23E0F1$>
zF~<8B_tC+ufB*s+@Eg^J4y@g+ta0e8ONp0LjCjv6{9Rn*54YnuyN6aylj_Pwik|qV
zKf#{Nprf_WSzM5Ouh-G)`-WLdM-Q8N+c(#w0d;L2gC(6N?6@+w+oL(*nd;9sy*~pS
zkJP<Z12~S9`k*DHcJV7$<f5MT;d*~yYvJf_^(YOM1yoS&JH9+3@Ry{##I+^}2JUJ<
z$&#ZI8VJeEg+z!}0a#Ca;2bWfwAHezJJoz3o_fo0-EzHG`Ed{cEl5GL21EmIy`L*`
zMDt)F2^A1>04h`gLW@{PU{jJvN#h4qZ?i`Ec(qCI96sD1v4D)FM?v+%EPt1e#7#Y|
z7}JKb@qv9##YZV9No__#F*R~B##jI%iY)~waS_`WJya4<e=4j1bHBtgoYAYENIV>n
zRbA-Ewq^=WETrwHTpIuw{K1Y-Rz#gaBlOO~#%tVV&LOU4KM;}|v3w_S6}AS}2eu)*
zE!U=D^*?0qrX<)P?FA9-4t0|Wi2`SB_{aQMP6a&^=O5im?3!Xi2QEzcltQ-ml=C!y
zQVakvO#x@=)49ac{VkQQ8VRdVseLi1wy8bJSK6;+Ft6<K<V1C%(T{8Z$fiRS@(U9=
z$$>`zR~oVD-M@%5H?i*PF=PUUI%`?dn2)a)pQvkLky!~DRLZPmzyF}Yw2<b7yJQ2@
zn4GN#aEQqb+^*C1=2uktJ$>SU2JC03{<~ltKwKl{;jP$_!IAu;V`0G<LJ9C^J??$a
z-UeMo25EGcMzsG(1l+|*|14GnOVHvAfv{lR`ZQbB38wYha}YiGJGY%>E~$KGHsx|A
zET8%}*hCqCUps^LP3p{Yzq3u+Q^0KbbBQB)fr)HWhS=aECgMeOPDw5{XCg$gkp6Q)
z+m7M{z}8GUpj$T)paFZ%?kkM}kY1@;N+Ph7)Rc$xfT7Y6kcIwWWM(s|A{423i`sb=
zKGrm-1mKEki3vm@;+X96P|}<VF70Tq!{<k`;#Cn;NEJ#%A4w7fAhPj1N%tR^a|AOa
z4d2z0)uel}9F#yRY%>^i945ius-BWYu5BvU#`%w8yB!G9YS`3Prs0Rh0w7W1d!lru
zI(Z&_MXAmPawZUPQ)$qK<^7|6ErWl2g;1SrzdWgG0zgVD4G_5n{V{P!8X;mn$Iv~^
zzUyuLqZ&U4z~>kzC#L?_UfPsHMgB7w6u<}Xy3N+G0sT%YOmH=wIR0sad&nc<wS<(B
zSEbpPjpDKSgm$|+EiCgHfEC6*L|JzK056CTS_AxR<jd^_i63SeB(y|``g4=c=~jeX
z+N*yM?FqaP7fc^7tF$dX*a^KAAtKOvr$gq0J6Z%0;t(f)rmEfchgm5Jq#d|8XHp=3
z{i+t<$xb|4>v~vN{VhHl#!mEO%H1;Hf>wUy4*#KCxB59kV${8agcKKFRl^>aztWp0
z|3CAO`#~o~WBKx~b8=T7*qMy5`l{NG53-UUo<pcS6)bP`IP+JJYE7f%!3QpmSVGC|
z050;Sk)N_0bs^{6BVo~IMlWx7hKbaL0Ve(whLd~x2SBIID$Vo%E>B`K9VO^s*I{JH
zcLQoqKA6$ot>mCm=d_SgTv36{C;FPy#0QsG+GT!8;MGVfCv2iLNeb6jEFjv_@R>X-
z)cRVf`{PK7+=a^xn<@dPRYMiU1ENF!WR>`Lbc>e&EI~Xf$Sv-mdixbgwhhKYazPM2
zfT9^;Lsf+CG+J^SgN1=yK@bidZI1dEk|$>^tqWYrQZ(QEvRxs|zbfpXKO2;VI<0lS
z=iRI_L%KiTtz;Zygt1A2djL}a0Ms9JAfioTMXZ3PIIUP$@vEe-p#nKM`H|6LDd8gR
zZH3q+nb!+=m|!uKMgE)pap51wm85CtyiMHm2Z4C@L}}3bzlu*5uyfUY?}kOYFahK`
z=)RH4&>c`yr;%3ou89!;`#natQ~((-1OYF+xs!mOfAKHE?a-T10vHEYX14$qETo~X
zx+N#D2hr((S}1}5-0U6yx3~D;5~@I$z-e_@?cdJWTPEH9@_+z!iVh}@{uZO^kdw_s
z`tV9V=uE!2w{>`kO55ME7>s&QFW|7aY?5xbi9IkM3Lw0y78yj39B%wC4_90dyjBDd
zubeIj5kWUj4-TiVKE;iW-*389&|;a29|Sfs9R-p>?+&XwPf1JqT|U}t2f6SS$csR~
z;vE9skx@%pPh`%55%ahwkxEJ$D)RP0SxWrDBUMNRusip_sE-nqR|8%V9KY&bX}fg4
zI9!=ps2_0hYV|zKA7vLbcolTLi*!9O3c5b{?)`4PixH;$Xt~b9t}JCcu79l3z?g5z
zRKolF`hdNHk1aG~_NU>RqLldDOiGqAK;RK(g|<{D0P&0gHdZ9QeBD~Q+OSot;Y)dv
zQAzE0%!%)|$^fRj-+q6+J{IyA0|zAEP2k?^4;&Swv3wc`;Kh}a1x37y(6+DPmi}{9
zdBu(gt$~1eBU0Bm*S?h*e=HDZRhL?=4C8Z2hxn_$ePhWD2<DouMh6R-<J7r;Y&5=^
ziQlwsQJ1)DI5oZ>4svMtQcxx5n$`c3;q~Jx4i0v9ceQ*`O$FNIF%>2ioy_Wa%S3}Q
z^CzHEp*gi%>q!<5fI1YQzSen{r)wmnxA(JYey-a1$RD}2g&57Y)!}}xl@Dn*z_8n3
z$3kX*Eg3Nfq<$v(p^^}Bx$0Ma+HrJOF7-u<ZK2egt&=3%8@30WOfU1^l&V#}7>jax
zJK71>4mzJ1m0R+y28G}iERIyYz#(r5e{J0lKy}N%O4M=%e>Ic|#CW!EIl!j4ERe7i
zbtMDjMl6_lHdQ?=v7XNghgQOKo06Zsi7BD`ydGp#=zt)QSR>JUuiKT{>apKcCq+;q
z!z_Q!c4+LuY20bpslU0Iq@J&GIeelB)opIl&3#9RAd$`__-m})q&`#<x%PUdXYWt+
z@<?Q&gA%UfW)6(MpIPkCKAg}B0|yImFBO)efEbz-PkdC@<!T#suVIeVG>gk;A^BeQ
zyz5V4nd;wI3(!GUMB~$z<M|zNLTY@i(RjiaL1k_|UraG}`F<Vy9e?mxDiGz?t<?%i
ztzXv_ILx8?v6Qh)E9yP(ui|=b><-w6uR<daz&!?8U5JF5<n0dQ5b_QS^z<DTXUJKS
zGz;&}G$0-p{~55gde{rFuHEP80v%xjS}AdbdRqSaW~a56%=j6c?|qe`XxKAmWG{F6
zwmZD$2qD<(9uMn1N+mFovUj5-!A7H3C!08V00=8!3|cc%pqUiLepQ-g(e<(AB?e1w
z1}@m>_KVy0$U-#V7O<azzyn)m@@fe`P~%}Yw}NzMW+K~Kp?re!63^fSjnz8-!S#%$
z2(*1U5zbOfW8HrK<dWa9p-^Si?+gzfm7;F!<#n)wZ#RC-CqGx%@;79OS3dBc2&NGi
zojsK<Y&-|cw;^0MNjf4Oil<rY`CveQVr<f)WmntaKSbf#P!=u78`?M-`@tJcrE1-F
zs-!gJ_{cw{Q4>G>)>1#RIjUl+?!2~TO}G(oT(&<50*mE2`?r2$L+QwNX&U^zVoBd?
z=|en4LWBh-4Mc8b6jLP<srf5BobS*5XH@|vtSfV!OaE1wnU`4nV2r01;FJy>Whuzz
z+{!ZA|I^=#_GBA4!?Vh#<bF#E(jZpu=RrPWdeg|d_U1O$g3KlG_G<sjih$;qt!i+H
z=aliGy<YopxLZ&UUeHy~FYAX-dWZ!*%n=a~;9Sh`Z{n{XSuJi^G#^nImE(IW)vsxG
zz!WcehDoWcAe^k$-PN!5H7n%%fcl*SC(p8GaAWfyAmk<HLT1sjcZJlh_l;tu`{8nQ
zz=yU`@$_bTxHp#k;)<dR2kDLA?w}X^(~38J^^nzZjX-7l3*Ed93427DnFMxqY`py?
zCMhxzqbqYodG5!{(eE%z%ZC=oPS8>lym*AKyN@DPfiZm_Qfjlo?+_#A1}`wUEcNJ8
zLn+dSKeBPNz4QIvFmhPp_X=OH9CDlIwR-4(v$Vz;u+??f+;wEwa=f7O^5D-ehP<Hr
z@u1?}eJ>FS<e<7RZQ#|fm`N-t&SXh6iKv5GGbi`^U5Ps#=@DaU*7q`NhdfhtKD4aA
z#Pg+i9OnqjAKhFYv6<n;!2v}YV_2lwq>R4dalV%}_BZmvXwt2~Feg0LpIX@c>uIG^
zK>6vI$PqEBs<?8&^GwSnL2hBtks3SH|J(xr!^$wWj+1vHX#?kxk-*uM`7l;>LC%l#
z0|ms;U}F2@5^cblX4tvz=*u7Rp<R9mQtvkYSzGDc8)nXKx7C80Z#+0aTu4)0PaGD?
z)3`xqJ7)Yl-o;;IX|gMWeiA#K-+4QmmX^Mj2>cBf6CSwS&P&9Qw2-zGDFq^*I3?eZ
z^ZNFVB~Js9E3uzs_{Ho*;(|`MzjeHFWB$<k_aMRX$l=i!rDOP_Mfq2;;zIHdaxTq|
zD=)+LM{@)yCa*kr3|4Q?ES`Bfcij94eAmG4F{u$<?4GLq9q#ar-XZX=cXaz>@Hgs*
zv8llU(@<=%a@Iy+BQ{8`?G(9Fz$bWa(7mLQE^h3zHA5I*Bl$<#Qeh2|jTP?Nlu_kS
zOY&F}{|f4NV?9ai8NfwqwUS?+?zhxbInInSTBy~9j=IJ7;;WSho8fm-(nm9EOXwTl
z{VL$SjmCNHBK?HNdqHH@CMKUx_q*=*!w*0tg|_hnl{SbeM)IF`;}1v)ud#eF5l7<K
z+XN+On4sfYXXV+x=9bm`R|eWJ%!e;3qrd5yi2-!PJrJ4kpij<%Z<KA0P|E{p^KN_c
zt&87ZrGy?8@y{_OgC6LOS=2jckZH!qw0KWO+9+DTqpPeJE!Bq@LhvdFU$YH!RIBc&
zr#RJ|4LMy8H(gFc-oCK3V10bo7FrR{ijT$p+-6Z&VTE>^hV5&gXkbBnn60(GChOi=
zExT_0rQ_l^6>jjw^G*slpzMGEuubkheF<H@BZHV_Exfs^_jb(hJ#P1Rx-N~<yi(#)
z%0Nf5ZX{LmEU>A%U21UtB3*NOWoSIDgc0<Wo~d)3+tzDBEM_MT<1WX9@#>hScGo7Q
z<;0VfHXEU5p7Atdi@8Uf)cS&`mqTe3I_(Ygw*=qe(Xah>%kuC{+{r?-Cip>Ik1xKA
zvH{39rsq?YnY96?YBbZQ(52=h>q)=jtBj`jVOC>&jnIKsQc1_<79-(Kc#2_UiLiZ*
zjrXeWekGxCPU7&|0Bz8+icysq6E8^t*$=EtKxOli9XK_3FAcG;7DY-o*nE|KjW3GX
z*?<hXT=7!&MX=J|tx}Qd(5U3!_97SUA}QMOh;w1u<P2hhx&}WeExI2|un`Q~Tq*y!
zZ9XKJXl{&aiUpv9drYA$gmTwerPOo4eruvz+(~w2M#Mf^>m^kzq`qAkzyFLsl-4Wp
z5>&t&r$4Zk1BT%0z~bB_-szP4JETz7eN}B)R|>)JoxchuL!aGqeXb^4-F5GqREsG@
zKB{;$U52M5RxLwBMMQr-K@(K*n+`_ne=NzP7HHJJV6v6-1eCFTbJVqFzwiC&Be|xd
z{AL`-lO?oeATpoGDXn6x+nlLiSx<4GrL1!KyGPrLp^w$fI2{ylF8zg8H+f?zN73o$
zaUH1<8^j5&%plrX#O$#f$z98@rV9pDxT(zn1#P5g|A)B?o*`t*31skz6eYxP5dq&3
zP4_p<k>s&?jo2G$wKZnw67ifM>zc*P(alzSKUm^#VEP5#;lD7sX(em-p{a6{QZ#(i
zJ@sOkoTO_&)#xSb>yPRM;_oNrHLyI8=|SeAmfZlbpbeU2#v8-(RugU@zEw7eO!YDs
zysars!Mg;m3~v-Vn5O8;HbUxYB~LDvj)=eDu&A}L=~ksPy{0x?)_g!`evE5sub;}5
z_#E|_Zk6gpA=Pm@DeWgZu41+T8yjP1TM^|ylM$qn3~GY#wV+Q=qiz|NyV=0Yy)1Y`
ztPeWq74}7bE(F%u@-_?(Xbt35ez_7-j`{`?(lpjXHmRjHJk-6|pwHy;lk?A0+}K>|
znMdm5yP6MRJQdL8L+q7&IT~#^w`!>itbUx6I2_l<V$%F+gDqJJ12Mtj+=`;56$JtR
zOe&3vPB(EBdma<0+2C0U31qn_>?zImc1WV#5wYnqyV2fLQ-}8Y4M!>-Ir8$mhKxWo
z;VA!1%WDmdCE0e*^v`d3?qlS|E*Y-iHE=iX2|bFsnmhY>;8Y$7;tktL)9}Pva8;aM
zSiF!L%X~JWbHRh9&*|?FOc_f}V_>qonB$olQBR0)u-NvyZ6W`YPpD&7IwN<%Yg?ph
zm8c%4E`J;$_~qN1i0w=vXm@w56j{&nxS*5FK6)q+)x#<?PPxzf2e^^iZB#L{rPa(@
zFt5Wl%c~vv&^n*FTlNc!zri23Sy({!eWYoXWlvJg8%F!2%5L-8I%f0?%Xl}-{1~j}
zI1r!5Br$Z5RTopr;oQxOQ7hrHQ8`(*6`6uzNpCfl%euapZJC)F+zWYqJ!D;z)ESK-
zaeS;YA4>`*$+a0IxVl^ms)p!}#i)CAYjRKAx)ppNsOJ8W#as~aDEjq0$EA(k<g2V&
z--(F|ErFWCECG<h<p%vHMftX8#DFFT#7g6nNAf7I*;}5^Bsv<+f02loJG3IIU_Y$|
zs*Z14RC!Z1UQ)U_T|%D|bUpQ8)SoQ;S-;)E2;X--iQD|CiNzv)HEj7S|6E~esh7nQ
z{Y_{flK13Y^x%l=38h)8@~y<pf;AflaDeQ$V@~X^z#-*Kt$W6;zdMuoX5L#e?KJe;
ziETEg&X*!da*Ji{Bl83o99luY3l(xFdBwR*)@P!>XLOD25S`5xzoE@1jzUD4TN~*K
zjIiO)Jdv03OfZE{3xX*LfWju$Dyn@#K&`_YN3<*T%{mhErSVt7Il4JzD4%Z$D`qkJ
zOFZH78z3T*mBI%1o&1@OC!cZaeFekhkIuV`K`F96jtV(ST+&~KPw0Z%=k<(v4?3r#
zxo9LhH6}x-r!t#Rcz@ERCMh8Wy)}HDNTo(3Sl;s(`J{Ha?f4VG<$Pw9p<8$a>9ju5
zQAz%xdPeRaiikm_eORF}KPcGo?UZvB+%t2b8P900^mL?yg*?#Y*K>Ph7XusU5vrJ=
zRmAVs8)pr4a3dOsw7^%`?_wEnV)U46@M)S^*>=;vM^5t>S!Jb0C<PW<4WPp@JM%B6
zL=|{eV#8if-6~PqXXxd?z5{V8QPaH3MKT4VUqWaulCAKme3*_BDaT-WCD|1Y!%GO~
z(4eG(6m^H%E!?v6Q!PdwDMSi;GL6qvg5DdH!PDsegFkbDa9zr*mabmO=fmJpR|$Fv
z$#i9W?&Pu<U+b<n;p`6s4_5`)CJ_roMCq$(IhzBdO5aT;%cx(ye|7Q94G?syn&4yH
zI<GcCGqmNnfLEGs?kmdBxXAuzV}davDpRt4e20T6F1YuII1LGJ=dKDF14){`b@YbK
zes2%e!58A2`=2soGGcR{sz`NG3A=d*8A??>!Va6TVWb$|98fmS|M-PI)l=?Q^vK15
zy;ftc7Y;dfMq>Q~Gb6!*Es<x3yG*tlkJUSD9~to^$@}>ThOP$s{3*RDad~Nv=`0WQ
z(96OE@t0^BIxF=}(r<ehr71QZeuv@3Mzp}IvG=HDU$gUqS6>8;jNzhBN;~2T(+V^#
zD{#;NSB`jD3WSkVRhTxn5ta~pcv`~zb0u+nzeQT)7Ht{R+s!QRmq}fQQD8s6vDgav
z1Wsm{^Vyp<v~0x~ZiT{rw{pxj5iiFK$;-RT@(4r!?up)d4=0iNTAyljKdUlQ{<}T3
zJEig83Q<bZzI!Uv1S1~F+yQa&A_+d?514;=7Uh@vJT6-<Fnyk$#TN>?wy1t!VH)e1
z+>0aC$ITLXQ4!4>Dsspl1;tvZ>M9UEmrNRkvSc+Al4d*9Az_2XV2fl)1>rg7X-)89
z^U1SOan;uETp=HH1`>?@_%!Af^KQ9a5CnACSsI6QLsRpzEC`bG1E}mxvYOu({q3d5
zGkVxafW7ypz((9HF7Y=Lg1+iFSORLZUQL-JI`z-yqN-0)LSur)T5At`qpL;*!{dbu
z>E2*qB6z9ktHz2=w45IT-w%3r)Ht`pPJ8eqUf%x5B;~eg6{Y(<^jfmmn3agWGneDq
z^`tjo_sMv)Um?wuxy9R}l0WJeVu7N|=1<CI^{iDFj2L1l1hu@%e`$eBS*yXChmPIw
zmpt0LSsd8%Q)O>(U4>r~I&BY|Td;yyGWV<KD7aAfSPZQ{;Zlqx2{&yzb$GPH!Y9%?
z<GX`K<i_(vbTM1G8t5GaUV^Ga4UG1bKOcW9x=|$0goTIo0e1#HNYhwY%O#I~h&EHH
zwltlnDSJXX!WxQIFoA+UI}p!7%x?WD9IrAWtNFH-WqEh1AT>Jb_N?>mOKO+ym>~IW
zrFdpC-hGJ22b(7wcb9DtL$YCeH0>oUX()c84t+yexMfX}lLMN*fIgAYH6)LgyDE3m
z(|DyAFu;1%5K+wh%@^?>?TCu$-ge(#4Lo#OtI0=OWfrV@pPOZ`n;<KgV{??&Dzi6#
zi4zku6T^1O-q7-vJ6OpFmN{$aC%$Maov@}H@NMRJO6lU#z_<C2@T(B_ACmqbrp`L5
z$+-Xf3J61KR60f@%8)LJfpiE+Nq2Wk35>2G-BKdmUDBhwOJInA)aZUL@87x4{rox3
z**Rm^H$R{E>$Uw+!uudB{3DGpfvrHnud{Nxw#h}*QQCcw!DsUdCM1~%o#`5SK07Ei
zWJGl`?y66JF!i#?!F0LGmmN|b{j5)7OL|v;QnJ;yNr3G~Uoz>Qc~x%lT?YTLhHN*U
z;dA9aA**7x{j7nAfz(!<O`%FL<a*b-tVYC4)v<C5Wj`aB2CGcqNaz(fHuY5*%hU@h
z5ZR>4jn$xAS~1z$s%xXKBKnGkAkl+@x~1C4y`?8s(*($?aJbrvo8Whz^qwmIq?C};
z^=T>;ge^Ok>PVZ$-4~YctYyr(FmCjkOTWpv$u*Z_D@-^>4zaZr%@>n&`Z^UH%RN8I
zc@s?kMzF;OmJ&jNy;5(tM+e2TP-+K(sa|tGJs>{9Xmjps{~b-qW|blARjnXK;Bh~i
zAwVw!1dR1Daoixwp)|8(t&Qtq@=6qCSzGUtu(tF>49)4pw0dAT>*uA4h`LlngUJ%%
z_tjbEo>Ix5_tAW-EIWfi=iS(v;hr<XAZA6gGPef)Rd;f)_IrRg(%-wB8WY*So$GiI
z6^dE*cIcS9(p<Zr8}ZAj0VBgOqhFJuC_0WicsMUC<IK9b;ih|{_nV^J=AXCI{r)me
z6_O7nXS?#+TK5HBuX+_;tr}TO#gAn2#kOnLuhR!zhm`cv+&pxtDRL1<XWzSeQ5>&^
z1^sAVbI3K(1>eMV5l53nz74%K#yqLXjyCsRNjJX{oW##nz%0iEXES61rE!y}kr$Rh
z(H6UWh(`J=(J(kgq_J@BT|MjL5rHhQ(x|mZsT@T`R7cE|<J-=B3`qn~511@SJZPX$
zQ;!c;;a>K{qwEQVZ$9p`-8_+FA_Ax^m8BBW{vWW6m(A;%!KU=#+%q!iN>fbcIjn_b
z(!Vby>RqYHjbRZ4-_59``Z_s)3A(fY8iTZoOM+37K(8fBCU%4hYWMQh8hI;rVCxP}
z7^l%U;jRf`A%_+fYyn%P48sz?O1Lh@S3Pi`tUNx66%lDI^CZ1iVnZ1iAIcs(m>0Bj
zd&?^Eg4+#Ed^3ua_@$uxU&f*A#s%kYpB%C%oaY&WMw}9Aqo*?O=#Q9iHfWcp^8%P;
zs(I-}G0D$Z51Guk=P>ie;qndj6$Rf#9pCxi`^c`zH|YP!wFBLFo>@RGQdKDl@mpbx
zw$ff$InOyC%5*Sh*}!x6XQKTo%WV$!9_7BiMVpAWmLp}swL1g<mJ{TCNPCY{0{_hw
zHZ;s~9Pw3_dj$EL1s4BTx~FY?ZC2P}e$mI+$KXV~{x`zTZ_@VS94WRvq8XcrKLh6x
z`6k)2iZ=&|&0Bt^$d%f6o|d}7ax8UKFcAyq$~KHK8qN#m`+bQAt1|z%v?qQQdrBqX
zJfGscJ8i3|!6a)z0Ok`R4~=3wqx$ZxNI|}0+I#7WMC_Rfb1Ug=@y+&mKA|v)cfv2?
zF}EyfivZs<IW79@Jt=A_vCLMmEZADUY_BwA^s|ti^W+KBnoD$Q>6qa}Sfu~LPyfTN
z83G*Jz+8nFY!hVm)kF)@)x(l*pc^v^4sL2mY}RMdp)uwQPjVPeLBEEQ0meb+0e@cd
zwyj?UyXlm`4t904J~xCzydVV-;ju=xmfYPlFo~=LAttO*D>F9^(*{N48__yuyl#+y
zPr}8|fS?ims+AS>-NB#9@4v`NV@V?1^fT2(2wln*5mx~a-8hH9xNxkI7=Bm&F6tcf
zuh2YYEd=uvC0Ybcqd~LlvDIxw;&r^HQAv1=`m;lHVfH{msZ~ej53kXyFVskm0@M|r
zBIQ^24&|)y?V$E%KjmO1ORSNZAkbhaK20KbVyI$Pr^2=SSlst)Zlj#?=CjY`1OC2b
z^;8~N9sHnDO{j=HuKoN(tK_})iLs6ga@BV;+qM0q!>8i}IV$fPzS(#j`alaaomck1
zUW>ft_dF64XvQOZc`yC${I`F9NZ;!17N4L4rLHA%KAdyGAw4XL{LuM65FT&B^b#ny
zsl>4%k7-G^whL*%v6XLgj5oSg(}&Zf?&;T1;_PW4CzL~PR|rO)!fU$hHfc{p%Vn9*
zILc*;2^m)SLf4Gro|NAG@4U9Durd3)-{Bg{Y}-FtCG>TlIb^IW0R`_Pd~y%THPS8>
z0y3S#A~Fae-@|8Y?gCYBz87O{(^j`VSdO@C3rwIvbA{gt@2NJ}7bEC{(^@IU`d8Eo
zBp0uNw&s(*PyE2q4KkbHU`I}Q65?Ah0oF`}JFsBjRS`Wfq#gfM3Z=4_IAD~5Xu290
zPmjByNlxITee=55!Lo6Eg!|$uYBXnx*0*b*#__n?d|#*z9hV-t@g4kDhk4leg}7j4
zoIPCIs(Fnu#X>%75vJ?o7@aBtes8$bsBg^kmNN_iQEUj0y@o48+&+&!De|yKp=q*D
z;z8|#yH9|v?gFXihi$`#jfo6P=XjBI{xk%m;8cJ~0B8riL3eLDJ~bE_3ks~`d>RT9
zN=_22#34hMRH#SFYwb)}M_-?R7TOm!5C#27f7|%J2)J$OdPCf#w58si6D?{JJ1-hw
zpg*>t*=r=C*jc?jTv=}As@+=|oj`x~e#jOl6*C7{n1p=4G?~7Q<NCNi&)?|8ix`FQ
zXq}do?OfPsIN*B_*ADox>6qYtO5dc<On8`>h<`S$qDmG7UsJK0!LmYlV+*7@n5Cl)
zkQyq8%S5mDA+Jl!qeg*0FWCuqT9+TkN|+Psc=4GlO!fZ8LV*>pr0=^WnG(!*`%~UO
zF7WU1R*R$A<am<i@#9xH4(jz`{NLh99VyPrn1aL(AS3OX330=NT1bt3oMnNyoiov7
zVz8cU;Bvl@j4&7@<i~yPMXt$3y>mv71pUAqLUta|PR8L&^46lnRS9|h_F1WK0&MaH
zC0p`lV^r48lRVHLb$MJl>jg$6vxX2l_o!l-B^f_V|0$h}XC`&3)1ATT;gZ(_UU1pK
zs8cn0KiOUx<vvz6+GLbLt5u@4o%1Y)S<pkWv%s~rQ@i|w-+WZ`uZoD1*`6pP)6JK0
z478EBeHcI^wCUQM&0bsS9{%}Cbg5L5g9~V-Ln8*@f|f#Fc>7p6@1IrRrT$3y$kCSL
z#&PAi#_$tEqTSj{F-3%Br+#zfgyb0j*w(dsWAB$@UmgE`_Z&kp8`!ZxsksVr7~Urj
zgQMM<59>4jvtD)=adh2q;vI$JfW!S4`nC<ewDCl2t{Z3T>A(#hZ<+(29*I<6GVLwr
z#44-|B)F1Z^xL2Fs{?NO;;58(|4R<NR8!;US24Z|(TRN!6HqAaQklYSUfODu1fs0D
z<K{rfY?+gnjE^NHN|BeG<0TnIR8E2_$}D4DfhbC}j|a(zvR%%Yp3ak8-p=M$Acf}H
zp&3Q-Fp*(xRqR7^kav~!Z<?Gmgh7qBX_7z25)X<em6p7Ku&d<n+fNc{FgRo;K{MT%
z3Q8|VSz><cPB<B+w{&XqQR|h{{y{Y~56m7-Ga$jcR~XaqVk2bP>QC(;s6|}DkNf)a
z+ZWEz0T{h>CAbQaeT4CNq<KK{rdzZd<mJsOk2M9xRmC8GOo*Q33bK*D3SZFxQCJad
zfV_l+g%`TKot{iEKTjZ`PKJ03oCJj+{nQlHdve%8pf1Jh%E@)3X5cbL_Xy@;aH%YE
z)p%)<obOcoUl#yMLM+A9i6gKfJGH|HyeY%|6`zg2GxCk7IIFJ`=@{jbQW}b(W7uey
z;kO}ctgt+>eimEB%*(C{oz-c0!?BObSUh|#?U1pyh6$;!MeiYE>mEklkLlgyzL@?n
zcLDTRvtu8uE#~@sw}NGa6cwP{$?_0)2d}*{;@;UMQ?!ZO%grft=9j=el)B_s6mPZ8
ztwE4WIYj7OO(X(3VIWRMTnxlJB!&+{YXS`wxbGeN;L2(HOuY}l+3VbSmm4HtZ)|K>
z`fMwqp4Om`4A`!sSK=%-Wms||`dM#FB1+4pmM-5=MR1#BoYcpY@YA7gf5zGI2NRDp
zI%_ZR-8*>>$+@dr748dTdqL=2{N4$GE1pb^-_H97D+)|n3<*j`=~YX;#U@LJibB~%
zKH)}xx*y59I&mpmr>_9fy<rn#C)dCr9gvK0ivr5xt(N`;#7q#GY&;l8nj3ww?OISH
zFmA&h(jBO6Ks%k#daFc5%KUBSF(AFmo%AQgJww2yS;15|Z%5h(TMj*&6I?l1h!a-i
z9GOiE*CZw&C4H@kx!cn<xfcAjp0g9L=%wg-%%5iF+fbUx@ihp!qi6451O60Q=G{dx
z`ZpKBW!?w+_LWP=QScLau}&r5x=dGvB!%UKaKpR>{LcJVSbQ}bGv##TchgYnGw1u;
z!3IK`ZPu|lYP3a(M94~OzuN`>ylHUjBqr|ab-e7i84BqOzoQ_U1jN4t&n^>ZL5&fH
zgDmH}mbjji<a+<91<!A9*=%B#yVm0~4IZ-ZFGk~AC<GshysRdkS@iNeb5*9cvy2K%
zU&CNWQNSq0DQq70a;_X+)lR^u7rpaOMA>goM!#1yBqnx4$hCdrG4GX5jBlQzXx^7Q
zUyqDJC4`r5;Qb`Lgu2erw{#u|RcAQaMnlKlK2fwYeUY8OFr?}8>7O_hC$oUZ?le}g
zX&KO-M^P>D6l3kk#Ok)Y?YXDQj2kc24cYS^#OI+DW6o>dF!w9cM)CCFc>3(=tXcOB
zYSIrlXGo&2$s-;vV;>s9Gj7>VR&{oWGf|<l9#6|slWH^_GoAxF<a130*(N`jPq*nv
za}VF3=+#>(Dt^bx>9<{Wx`hdWJQ+*uAg`!}-S9Fm%d7P-aEi6*<clNA$smW?O=oJ|
zZ+w~h{!WURUA(47%QRalOl&}F*G%-44JWRbDF)cVy~J9E`s<(f!a@0u%XmL9k&i@U
zQ%%m*gQXdG*hPa1={NdWBSWGnuNBJs?D`3y3f;`GtGNJ>P8T1!h#iDTj%%dC^&MA{
zrH%O_jM84S+|_PmE5NV>c9|%ZV*83p-7^rzDz!3z0j{Y3JQ*R|)%%<H6jba8DsB{x
ztlotwo>P?WC4HErZ)~kKM%!5K+1PJTPOA1iXfF`mnTxTanZs3F#u^ku{vl_=Bteg3
z)a3FAdfJ7z1~jaUx;xh-H@bqGb)JIhDaEmw*YgLmO_qA|WtzhT#HDHb85j_)uGkxw
zMezqq+bhXoOHSKYkwIVXzeU&T>3YQOg~Bfmq=>fsn%*+5wzj0&YQ}GjcHV^w9%kQK
zWLD6)3O*bvKV**<NU`<5Yg+U9xb>MnFMX2%_`*|4Y18u-pUXQ~-Z$`kj~OAYw%EQO
z-NRbl752JR-Jasw7MvT}H8eqa6oN_F5dH}QVMJ&M+b5lL@vIKOr6*xT&@1ecPGL0F
zwesC|LV9?lBa%!2QmSW>LPdAdM;iaK-w(!*;@W-NhkHg#wd3VcSe_;FYSE|!!6UjY
z-;7dJx=1JJk?ZX0f|6bQb!BX=YTb{*-SoqDrGzS#tNoUlyEGsEu{n^{M2GA%AzjB-
z=?C!^qz`x_GJdizraHy>6W7Ly<X(Q(3iCW7A{K!yUn+-(iJrMQl5aDrUlncM8<Q<S
z4psq*%9~I-*e0=#6DqQ#VEtp57KGhHuCl)kE$P)*k)}>bwY<e(9cjc{&wxuly89b2
zf*(o{kuKVkVfan^SF9s1`fq3r6$FrmaZkbYeC;2c9OMsK8C3b@Ke(fd{|HLqv;*T5
z6vh*aad$DjMf^A|02|z8#4sr^BHb&R)XRaRMv^S{NVe+|aYR_8MvpvqoHEr)`!5u2
zEXv|&eJo$<9c{0!9an7RY<eXhOBI(#_Jc|P?$Sn_MhCsE5q&F(9?0m-^k)E;I8z(#
z*@i}c7lF(X({vKC?%m|D_a1%#Neukr?{^}e<|;yB9e3{YGUeXhgO!`~`<0YL?sN)Y
z=iR)~Iw{~-=eD&6;Y&1uQEijLGF~%j!bgD1y6e(`{!{{x>F==euBn+!QjES`T3D#^
zGT2^U`E7%U&fOR-YtG!1JE7U>ok$Tgp8#=1i=`nXIWfV~UlYij3Khhct>6N@+kI)#
zBi>xkpH<S<`0XUOt8XymSr*?6tjYK<n;?O+?iA5g?iVOxK=n|r?QAxjPBdDlc6c&5
z)(=KW$k+MDSC$)P)(Q)#1_}~aKkO-?_LK#r#SzKLk;@)-t#;|9q}ij{73tiq5BI9^
ziROPYinty_bEB8Iw_ZP5Y$-WqQu6BM4#xg*@zU{8iMnF}S>YF=LZ|ZVkTyP%t$yZ>
zp~bc_?}~W%1s&)1T%vAt`~JE$iL}Iwtd$)$J+g96{Yh#n?N>Q2hw#y72_qVYxDzGo
z1j36q4o~Bz!M9y~3gm+Lbe3qel(v^|)$m8$Gmj5g?zzveTWy41av4jzpLeC6&DIX9
z?kUVf1a3j^Go*DVk@?EwLgy~GYz>!gruAC~ome?9G(Jr-exO=XYSwr{X{7LhqcGgl
z@G;-w=j{!b(N0YtCX6s1yC@$-?5UNYb?g3flI#)+t4Z>332IQejIw9^S46r`u>Vfe
zL1CO$hMazx2S%;He*6Bv^S?AXN&t*x8V%#m<;7d4ltS<w+Fsv{_DLcOMlu}^?EVTj
z-u-ZC0fX@=%D_P3O{tw+2SMJ0h{MS(sEydAhPICr%#G*M|D_}%Gq@C9YF&Q%EF!MB
zXa1up!@{!ieG-W2lH@8n8B+F<QrPnwi@5>;f#g*J))q(A2jws?QQSM{B^Ie!xDUCf
z+0Bl!|EC1CW7~Nra##k``dB{GEz)fN(2K~q<h+l@&4$xF>To;CAVE99m&x1oYxvh=
zH8SJ(m{_D{!t%IYq6u>oZC=dCJ<u+X_H(peNley?#cO6|W?`mB@eAK^F>~AFf1Va8
zBI1s{^asdvzxxQXVVJ*1;KnSbZ@#ue1QDcC-W=iX&(Sty4D`=Ic;b=KBOXuF=o`HI
z??>Y_S9g~?&Kgf5{cj%xlPPdn8-O8&fQ<Yt>eJoo3V!yUE7CJ&BV?<irtXU9IL0nh
z`XX(nZS27HK-VS#L!&G0eyoi9ArD!#k7Z?C-Q}L~a$)e%*HN$u;svE;On+)h?Nkb~
zmCs-Uj*s!_e%C=K^&>43wJ_Ej5o)p&OlQHkr4s{>-(QTC#Vf$y7b(!3fooE@w3IjU
z-UIjz!I?)}=&x%IxKCHsfXvwvd++HOYqX(*u+Pyiztlzn^6VrJ3i7RF68;MwuTq0K
zCY>mU1m_LOMQJi+#pg3s+|o`=kNEXjn5D3Z{U%Kr;aa@_Nvn?Gt;qEL5wCG22*IIU
zRPU_*wn<A!Ad^lbM@JKDzQVhyyq#|xXJAT}&P1C8RO$weN#Gz8yM{j_{t{4rg{N@W
zbGzZ^c%o8+`#1A96<m5w?kE$&XHJ^F`e*re!(HO^L1(*$_L|M7hzsQn<YHv|<>q9r
z*xS?nB~TADb9{mj9wf3v-a~Nv{%}l)PsBlCJ&ikyFyh5;(dxIm6LM6}kzw>@VFJWY
zV}6s8<-e2CEiA&ON$Objd7DQ|!4}u9iJ}v&y$xb|3gD;XQ5E?<K_G!CIU1BvEEQX?
zMiHT!=yoD(?jm%f_3HtyncM8sGM}z{4U@@QU<5ipJ!g70*`H0BT{p(~LON$_Z%!kB
zPnu|k@L`apopzH~gmm_yf8SveNK)sk{=Sd`B64Nv!`eXf5J$?e0Ji+a3{H=Q8-h6p
zP+=$sa@;GLB!yw)<V4RR_En)Ap7fp-AD=RpgZutWijlabYfov5!yrvT10L9|g(!tx
zdb7%8riP#Q)b7ZGX7<`a#zP0Yn>}y8mt#&Guah;gv#AHcdZybdy@7P>te)OHoZcP5
zU;X)bgJg^wafh0eN3i8&$NctZ1wX_?p;ic!2fH+9CNZXW;ys(B46TZzL2xdeC=Yl-
z{BKVlke4V9)|!q2;>-c5s~@DRqi0;Ntr!uafWTs|M_Lh~7~#Vg(SY$vPc*d!$VzKb
z2Z+OTS<qEqKbbqZE|;bHQEa{k+|uUV@xVqW@+Q3D-mO=D+pDALnf>V{I|%uU^b6&3
zKIGr#<X$$TREE`6j;TQhht{?$f6vXm(af4yL41eTtC>Z7%hr0KQq5_Bu8JB2YctbP
z7fF1mt%8q>-oz~&CF12)jad7EQ}T$y9I{wpp#QTfi@L*RVw16Mg_tqU4qDEc7FZ9m
z2~@BZ4r?f6?Fqd<)8p{<6u}nY?lLuV@RFUufQ>ZD2De)=^QCjKplkCe0-@qG%W|kL
z5W;+nRG<U0tLA|}`C+=4#Z0YfqGZ#!T0m^xcB)B`9Ay<Sc~gz7HSo*O5J`@-DBJdL
zaxR;_8&3$u%*Ku!K;OUnwxR;RT)T{ZD60XQN+~U#vS)zrVkg5+UsbQ@w?6?GUkw+z
z<i(?j&6Nm5kq=xFZRfTFioEUkI$*78e|s+e9y_(%ZBa04Jcc_$VAp63$vgwOR_Ufp
zV21`ck0X${$Ni{k{`OzOmW~5hkE!YYxZ4y<L)=D3O$!`ym>QdAvG+fXJz%Kw&d}zt
z;^T@yV=|^z@fWFrdGC__uabx4lWI4sY;bZLRY&|qp)p}}>)btwQ5~c}*g=A7CiXeC
zEfX!pVA7!N+8(=^{!_hMeFQhT3=zueTVsS15X638$yEf5fRtBgc|^|P<QccSlN?it
z1>`6mc|?QXl$X`o+*Y?xK`Gnqqw$YyRxre84+HJ}m5)-0jWiSyxl1Z_{tlkMf;0hY
zON5qNc3o2rQL-bKQZ)XxLJ!yLm!^l+!iugvi+4Bxy2hJ}_Z6hVD4*IO7y&FMF;V-U
zoa_BRFlcVYyI3lNQgVC=COrCZg#Yj@Um!ABkmQ9qBS~9!zQNXtjK<e9B6r{+^*&PI
z3mi|0bc25vx}DJVuHtAvGn{Nz1sd@WNag#}R1F^iTrb~%8luB98H9uyp3d6A4}N6>
zE^5H4CJfi22fElc`MI3w0O&AI@>s{XUT=nfMrd^NebMLD8Tef1D|dBm1w`D*ypx$C
z0gCq#fc_3Y{ztqwN6PW&iT_;UMUIxdX~f_CXiQzd(ant<7Mpw{^=+_mwmv742ETRC
z7lGBql^zNp7eO|CX+ZkDB<LqM$SXMmOT1#yndV3a+AesOQdA1TxF&Sgp~l3PZVbwx
zUjfJ?<px{^a5j4uSL_??t6}gc@byR<N`VxNtBv8-OL6q4NW(jI=s|(f-0fW_&8^?S
zoo;&RFla4`moVk|KaQ@@|JuS=K_l=R{pMN8xcI1qnn-a->vcAF!ycFJKM7vN|0H<7
z$k6f#QP-0RoveO(L?XAn03R^+YcyWc&=l|-Acq!W>8Fj_12Z5@$dx^W7{S@O+n7?=
z@t@##0E=g$p8Y>X-OK-=I@^9USadg-ZS&gu0RMP<fB2v;3#|B&hGUVEhP3}-yzc)>
zj}5C9d&yPY@uxdo6xX*ZB38B+8Crc0v=`wLMpY#dp~bFRx2Bisi*WpY%Uys6Ql^@W
z;s9od24R5sCuedxds482&G3Na_g6;sDDMtn!oMitivRQ<z>4PXk94r@#S~oAC2;~M
zPLNd~eKQ~N^%}#?VyWMD*wpKhPXTQ~Vj#f=z-PG6xnh8^@2L+`kVEV_AD{rg0`A7)
z{lQ^UZb8Vc*No%$mY4sbZtl1J??2wG_=mp87u4VV%kwW@0-zja??1er-hTn$ej)QN
z=ZP?Yo)crr1|B#Y)Q}Md&{jm}N#Z@Y=A-`G9)5*L0ON=#W<~EX{0C)qTt;@Vz*^>X
zpESjISJfF2p?0{FioyOL^*_+?^#Ou_$oc2D0Aqv}M)n@qgM>8!!Yqz{m2z^0an-3^
zOMcYhulWBlir9d8=Kmw1u9E$=ZF}MzmZ(D78u#?~J@3TE{}}8j+#KJlt6u4?ye;mC
z-8uvwA$5A{I{+=<vgF$Mw+B4Iz_daz8pvK6L-l37Rt`97k#~O)RtSKHgEE>E?coIg
zfSIhEW%rU$@kg}PhhU|ju;0RBa`A~`#z%x5dAg32b7itn{bZfpxdLO2!e9HC5|=J|
zBMNuUlMJ+pVc#!-|NnXC@DE^2|7xNgF99cq*DsgNsUI{Om^o3lkfX|@%7aL264&nc
z*It>);d%vt9~jZ-!Q;Th-mSR*j7?T?YgGgwZU+v>cx-m|FUVwZy=bd0W!U?Mb|SNJ
zIzG9;bi3ypolGoFevf1-rt>Bm+@U^Z?s!q7iI}s-Qoq|3_PMO|Iysx@;Ywcr5OY9}
zef3AHVC>)er~D5oEr~i{+|q;I>vWt|$OF>HF^d(8^54Y&1yo-WI^X`7)9r0@+V4*k
z!S;IK{eUg7P_M*;tn2(p!D0$@;-IVYedu)g4T{4-aQdxS8c{!~;VW$bvGS=S96S9t
zn->AxR0q3>Jm~A*C0S*$PdR6r)H2t_#@6Ve@1Zv%fWa5)*^sS$mim?qf4J-ywGZPm
zGrJSCNQZ~M0|s<xti@TQ(L|Ll_e0OrZNXlUSfYda!ua;_PaPYmM2xG$LUq9{VD>v#
zU@JGZ+n_>QyW<78GqPv_s2?E2`)4&A^a8vSbs5|=qFJ_>b)US3U4hR9Fl-@W6-gNx
zxSCr|{z53vm#7B$!9B6_l|#P<Nr3JiA2y-m_#bQB^nvGi-@1SAelwA|PEkGZi)MV1
zOk793{JtkebnkX2&r-ExRqR&9?=-j#27=#?pAM)h%{trnNyF*qbN2C0p3{OzjI5@6
z*Z*WW$_PMXQl>JV31NE<bqij~5}`UTk$^gpP>TYDLywdbmse`<Q%>QJwa|l(9`a=#
z0&w+{FTgUMM`g;sjsEZXGypg??%___3BXp6@H*w{<9b!N>keGnv@js;xL;<++o@-j
zamBy*&ML#tc@V0_W=mjgN)DEG6c}49=dDl9TF9V3-;nqtq4pp7BamCjvRYhPw{QdY
zXbpsUE3jDrUK>E2U=>PvK;42`c-O(pYVn=u0wJ~Cah1NNKVoe9Dg0-%<S$_TU=CIQ
zIK<)~QTUI~=r_dxn6}L{Bbx#F;m=|5>k{YEe-m)DAVfHfn=28>aK9vq&R}CfDYWc|
z!b2Y!w1;I{d~!GS0XUxbLov(rTcD=K9(lF)|HD6p{jIbL764$#Dz*++*nZJaFDJEQ
zdDJ0>*M50gVSK%@YUg2ioSLuN@a+2VmagVnz(&$JZYWZ%yd**9k$?`i7!M>$U9q~M
z+?wu>9`0w$L7*<^-^4%oUjlwW`CbBy)EnVf)gMv0CPe9TvUlo351OToMBLkFUB0+U
zBe0zoZINVPX;T0~72saXA=A7xVh6Q*!cnxp#Rmb_XbC`MG{XH8E<+0V{sIR{BT(7c
zwvhYZzpdwsHo*!aK9@fLPv`z9Ae^9>D)Qc|`N{Qa22ha+{)^9*n41Q+dv6WSm>c_g
zNU@sN1_2!T*Ez<c<Ut`(A$MB{D(Nqy4y$N!YZ+TS!gD4`Q}rOj2T78%Ry)ApJ~Z`W
zQt+|bw#UJ;S8;;)UmCvq7UH0K9EWU=p>hA=KZgwz*7Mp_4fWh6nk#ohFbNUXn8xA)
z?)uaZ_H3Jr-}p<S!jA4vgjsw<(jge1!|nJyB1goR9d4psq$L}vOX^#$qu=19W@9YG
zn6%CD$Xl&dI7#{tY6{)SEVVfnQQ<RO(+tGHjqZG3`+FR4Bgr4xUB*xeMT|qUnmh^P
zzvStqN_twCiVqU{24)d3{&E0Rk{H6dqO!|F60N7e&@V`71$hA2*pjvu|LQ`WjfIs9
z;J*3ebKFZZ!f-Mh`QbKhNQ>u}!nFP?h^VNa?UHIXT{)W;fHNFs@H^#pI%$GEfH*lD
zKi%&g4VnO2q$wX+i&><HUp*gZ>#L8@(XZa7b_CA*_oJCD!IfW|a#%@1XYh|dJ{hc+
z5>QioNgo3+D167uR@bAMOrtmNmsa)HamZqRxH#!me7{*ERb|H0Fl<P4>LvYN$`mm;
zWVaj^<-qFa4iMT2N<q%f7YA*CMbj-;`<M*reO&YXRa!H=LUF`NVn@0vNO5{@gTRXi
zAB6E(!(UgoVQj_5rn<#c2;`pbT0?W_(XkroX(PB^AtY{DI0gY)xEqzr{=RN{1gOPv
z-sj*}z!&NKk)Iqh%_$%7rw#?Y{VQUmEE7EY<TyFx5?cxSk-WwgICq5~-1bGwWC7ut
zJUg4AFyz$<i6CJ0bn)Z5qjavfnLCg|zyG}R!1U{%>NAyNjU{D3i3qj*fffC$<mZ9$
zV({wnLW_s;HsCg-%8y55z;tttr5_v6Ha$5R6NL=Iiy15ODY4fY91Kz&<HnF~LNOfP
z;=e2O+a_ycE1p(WM5G-=enfF2aJ@xXY;RI;cc%u~I{IF2M)_ol`nOYFHSEe0_EZcA
zyt(=&40>3w$WA=E#YHWRDobpVw+fE+sl-#1NM9U^vNY<b$XwhKhVi!PDlLvJVPrhe
z_TIYs>(L$PCx@L(`OZR0`MsxpTr?wv%j?Qqhv>g$mp_B*^Uy;`)Lx)Pa^R2fcL^7n
zw~`3%gr$o`iFeZ)38)KJ^~_V)f0_ffnqcH&#P-hsbO5vQD#Ynq<bgULEH^=AW;JBZ
z)0ggU@LgB^ZuX(}rMh}8?sX?y$p%SV{;Y)qgSN*seD1Atw6L&))wU9sqhFoIsz|}r
zvmB%t5!|LH^R~_J?(=rMvJ#1^9fg*291WXHC>|BN)A6Ani(JODSd7T2d<|jl355<i
zNShgH=J0ul?!6%QD$3^T54}N61zLbOm=FN`bZ_N}BQL0<Y?vtgZae!MXU9^b^jkfv
zQcMRrs-rgoIqcTj^G*iYuqaCTcsA2!!i3C(&qm)jUrCDH9J(F!?gRQA^$xr0H>DOs
zaZY1PV_gp{rmcH(+Ra-8S^#yAVK*PcR{1#fciOl$M3x<^@5e<PO7P2HzwZ;Yr`Rf{
zRxi<nQAxnP!LtgmZvv`E*ujd&nq6&p3;F)9kq}!wD+N{dm#W|ppCT7-O3f(}Tt4H^
zmq&ZS@WX|g7Wki&ZAiilE-YOeixGtT7ES&;fPWTd4kbfKs%6+G>FCQ=2|-YYVC40g
z%?SU8wYvExm;Nb_xAiZ!u%{|cwncrvhaWJvu%%MPO~imQoOTm6^;xgnVhrUez|Qu6
zIoIJHN(%#zwt@msn(=i@zG~d-952<;-ubO=$$sWWf&^}(oB)#K*#+hDU!p^I^FUY&
z$+jKZO4}Uc#(G0?=>`4f%;7Km$H(2l?rr*84}PFh3aC<8@IL?gd&3F8aXNz8I}AHf
zF{w6^9YS5Z=t%4@wcj)Kk!*k$L?w1+w#qNS4e*_gJc9DO@;s@E4>|wf!I&evmmnTn
zRvfO2!-+`~U$$#aH5;%mZl!EgxO;WEqd{Sg2LCqY2gj7md)k|}eVzMh<#3g=>Xd@Y
zn2b_F!rri!L64`yBOCkEJ)C4LagO1m4^M}inRN4u!t1I~)R7hcB@l4iw`Ei!n+ZOh
zZ=bZDt)2?I_5wo&wMPb;ckEd1B}{%O8UOkq<@;>H@L`XI{dg}D3%`95@OO?lE0u)K
z({8;LNOqrp9(sjF;Sv;lPFwa<eA&qRpq)EccoGM<;MP*;4z;&1=^XM9A>ZQjg5IvP
zVzyAvkRPTdsP|g1U|+=Z!=9p0%;#qmzdo&T4^2Q``NctwBa}1OS_-MJZFH|FdS`B9
z=i0ZPfJL2=mU(w8I)ek>AO0@XMB{X*3`*uHw9|(>v|pK9p(|(*IJ=eTr@H=K>!?U+
z{dv04E3dd>VE>$vFA`HY?BSozZl{xUq1AD{CRbKNWZm$4`9R1gzB=UOxOr({S5cb*
zN5^hI41YFpc)Grvx@FyG=PLc{96;jmB0qZ&dzIO^F;j0Qqx?|=%<m&1ZsdEK24xuf
z0(JXb7NgG@Kj4mO#&@y`*rhV*`^_(EI@7cWs-rL|M0ZNM|4g0vRPnxWAM96N3eIq>
zu=#9iJlV5|Ah@eGAiq_rY26ntOFntUTwAsawLhf}vOIZl*Wj(c*X&EReWukv6jpOL
z?A1u_pu6QHfB|I}irM?UTcCvOtEMsfj!v9bGp$AZ5%!XZR<ElM;}MwI$Hb75WZLMy
zH`4X&X}!_<?A}SUYSng;U4aMIwEqhzIghioBNs~v4TI9ne2s;}_P^BSxv}Hsbb)x{
z5y4B@W3>5X1N~PRjd#w!8h85aS;D?%5~T>W0S4!SeM@;%K0ci~D#}#1*|i8K1m*ne
z=l#E{b!mKLfADiprcz-Wib3Zq&Lyo9iHistGc|VftAiEqL9xh$r~TNWx?S79M=GAm
zY8UOifadwLFe`r3Gk&E~<c6-Z^$`M`sC{8@?4gjaa}uHYY-fv%xhwmJmLhrj1QxJ^
z5x&?&Gxr|F>&XvzI~>P3D#0YU#m!QjwYXcnvJ=$#>Q0T?ySiHJM^pCG!Ht9hXRum&
zg~*c|XKWHlobqJ$x8O!S)USeGP5q*?ig%XigJnv{Hl6I5S?zYKki<8)&C;tZ6qGY<
z0~i*O3Z}8VGs=3?yc$b9WPu+e&<7f9@Y78^OM4U-+a=IT^=pGZmD?03lqZs@%q9V@
z;6X1&q^6v&l}=WtjMvQm&Xh&Oz*oPLcK#myPaGkk?fFW%ZCto2{ie;WGV#JzhSq*7
zerSb);F9BA<(X4c58{Ve3pdc3`$O^i0iTnDck#g5r|Wcgx;JO?&&qEB{PCCz*pqHT
z2Vw8;Q>C*6T<Wd-`O;LM>_8*r-)i0}d(Rabn&x8Ckj^@VzU(+Z{Ha1_VysnFzW;P}
zG1>9@tNWaLSGT-(EVqJ|p}jM4%P1oBX1AnI?Zu0!R}MnTds~#>?dIBJ-f|uY%%1QA
zYMb-9b2feA@1OsEC-xf*DtxeB-WT#}r$hroDEr-9fGz<)23f8oKLMgP?CrN0okpX3
zY)}^i2FpWEFufMi=%rGtECQ_aBvd@8@0l!T7}19MrXsLn&Fy#3N0R@<ZHEm5)abL$
z_oRfWqy&UdV`$uL4fDhCCiC7Aa%_Gtd9!P}$lN716)Hx0I#Xl;9@ag9ba2BEtsLA)
zOy98*URnOYs)OW;ch(mmfwD^BXC(@Ytmz+M)U15JLe5DRCd}ic<dI$UmT?tmh?EC7
zrWGr5sa|(uQao*i<oj#^AO_0H%qfeYX9MmChyPfA)xx@R8%)D|{b@2f|FhjX&Z}=L
zB7QzOhOge3ea(8TyD*QP{m%Ql;qj=DL$c?L-HO?ku^J@(S^F+JICQN*-gc}+_RCG}
zA;(81e*e=6>0nUz<WLxZ$6Zg|&bHP+&>QbgX(WbGLht_>Titaok{j3*RtjXvg1&rW
zREgb{qZs!y1flO($7T&xd?w~|E{3EWSwWbL5!AxdMVEEyw3@eUC;c=Y*oH!fdD-4Y
ze%0q?t8t?U=GVIzjpdeBOM~qmhwY;idD3zM3bYAi^}C0NxI9I#i^KseN`;@od*^IH
zx^^Cw<LrT@dlHl8yOPBFTZT?uWUCp%KXua8W3MBwRWy;E>)p0<Es#8^>=;Lm^QqrG
zCGR@*J2o}nSxGM@-`W@~@)e4lVfjAATcn|I>Jc7fj<GyBI*~ADc2ZZ`XTR%}&lImO
z*h>A(`}<Y8H&Uf{szKx+`JCLY@%+vqt(k*5oujM9TE92PwtTNe-wi4oBQNo3mvNFK
z{G<EXuQ~Z6X4bt=AYwORd;Q?4`tG_-K!9jWbrBul)PBlOPL^C=xi2iKk7|7W*w=H?
z$)g<9q~vh)R)!3Q&E1s(PYIqvfGE-HT(Pwn25FT)5Jc5DzGA~}QqmWtM7se%n5WtS
z0!C%4*q)H^i4^+Zm@4E26ny2$o!#Fq4q6Tq9*_Qfv7UQ?gMsOv_DwFL+!cUhHFvez
zV$;jTweFES^HnBh<I(ljjM73pjaL0K0iTmJC5K=?e+I+p8y3kQYI{Hpw~<4J`#*5H
zSREMIbe^hIN!lMx?IaF7BI9R;D6B}p31bp{I6{-0jMnFKMZ%;0q@%*b=-&<oXbn{e
za$eH$4u&ryN^W-hy~>i?3J#l?DK{9Y8K{lw4TM^M8Nx#y;NZK&XfK7H>7n3f0NCTu
zap!I&EfbV1KI1VX=1%_LO^$m@QLx$*AnAKL5z2_$5@@O1c4ha|4kfQrS%@RoHNOy~
z*usmEol^S4Asz=M(PYS=v=yv<n=pU}UNjTdbSIACipK5+JU?>jeByOP<7J1%-{3I=
zsqUEcS6|pD*&esPS|V-~^kmy(*l$r{c-0i2{pZ<WZ0#WAYgBDZp<cF#?{@{MS~cGg
z)@M-mQs-iCX)_!WNp(-AH%HJ<d&P+}d2Izsr72p9Y9t&aSg-4puWIO=*1N7$4Ny{K
z`6~nI*Mu5vM~A6-wRIBviDaOTFu7Cgd&CPnsF3AcXuaF%ABqB>MNDP~Q#m-}m9w(Y
zRBWOOH4t<T!=^HRO>L)^njk@41}aLH(IKA<ebIyr^JL3&9w;1$_f)_bAm93sjZFGH
z8L~w}$V{W~X(q_iT9D~$Uq?S9wXbH2SDYTjgE)Wf-IJu-{yYBWx!H(|lPURMSL=&T
z(?Vxiyjk|#7^h(0PA6SH57_dff_P#~jI>eFA~ABzkiKncN5T&n^^a*WKSE7jDw#2Y
z=O);|(vJuf83qhZIk*v@56F!F$k@32j?yD5PkKB~`{kElaS2BN$0g}E+-gK-06`IS
zSmgGoJGV;paQJbbqNX5bVLbDi{l<zqCb8+1m}w=~CE2%HX7p?nZ6Dy*_p+L^gO=OT
zSEKC23e}}RNKLJvnIg5qLBj|HOXTe?4XD^vkygOS(qKz*O&o!n<(N_X5O(s9cW@$R
z#~hVI&?G<B{H(!?v%4$#c~FAQYojL|%DY~g!NicL`_5|D%qD0ofKw|yh2<Gt@#-`&
z=gF*2zkJ7YjkGR$R*qR}Kqx}w?E8Wc$ks#2U@u?B@a-HxV0a=RLP~*sWKVc}a3!F8
z0EkTcEL+Rn6Uid3E5br&ne?TqJil@5CNa5$nW4{Ny+Dd(prZcS#ZdBs5a5)w@(1x`
zOf%miXI!*s1)11)OJ^_6MzLsq94-~Kb&Go<Kaz@?ef3DwI{un0BalkBzu3-9j~rxw
zvy+wa&9_7}=6m8Z=#Okz{m1r#oVI?9o*r4!GnfCk2KM`u{nhF(2l8$>K8Wf^<Oh6z
zJnNo9x#PW9UU`%RsqW6FHb*_;I*ZbZ?B}Uw$DjORw2Q}*rHviwS46!isiQ4`@o`Cw
zndA8b5Ql>su#VN~97-XwMJTtXz9;na*dleVC*%CD=*MasoH9_r<`OqqUrSLfMv+jD
zvdr!S&&wHzhUDB%I}rr<&o7tUQ$Px$Q(1n9^6yYEZ8;`7ko%)B`>rwmUY;m;nv{P2
zpmaH{XIhM{HPalc)^)b0sY9E5-E>_lVwH`BeZg>WLA_T~kap}&x@|WX)8H#Qc0>OS
z@;-a_(B!JcMIJ#&MwP@dd1bN1t%Z&SmXpB%GdF_bwD}VgVU*Qw<L{;5D((?UXM4XW
z$a#^`JKcL`<Ax_TU#56*;GpsV={B;If0_{j^2}Uo_rHG}zr8l1U=aa)FPw;XwzjIc
z&o}dJzDzR_L<NV0k?E#z$Y@@>!HaMH45goL(Tf~`-(0CvU-VimNie;^)FCgK)Az2c
zeZP)7*m2nlk@HL|=ct3@b?FT_?Ne|_G7(trU!u%@<0q$A>$7VqPR8_Fjl0`c>!5zz
zUgMOJC^9J)i_i6lrDglN=iprCbcRIw&^3+<9PhYb{!M{R@N>NhVC5t}d!>&t?;`m~
z`$P5}sHxs0(DCS3K;V;w<4!ClL(QkF*PbhFW)__<7gYRr2YmCPEvk@8m(eFxk{O9F
zngrZ-gP0((@<MQfi<#tb;9`><HW)`Q{Y+L(X^Zdi2kL(-!Z6z&#LuZ1&eWsYx)_m2
z@LjO0$lEO^X1#)Hkgrgf4Ge^j7kX)4AIB`UZ^{?dmC??hNodJfGa8>U%A17--&*%G
z<s-B*|75-1n&lgK98XE?>IRK0Ur8n1p`jdBEG2NU8n4{L8huyeoZC+D$%!tHQ2!S7
zEo+Mmyic@s9TQt$o;4kO3r^c*b$rR5abFgFb?kt11wfK%+`AY>8&w~&<U@tO@@;uf
zr+n@dT}*M^>PTz#axnLq!gHR0jSdFPd|7HJ>w9OpsFa!VQ-UTAABB+1=dEk<3efTU
zm3#Pg2tXuWUBw$*srqx&qZMWDN%YyWy-b83vK+I7`myS9Dzz|f8|F~aB9CxVX|#Sj
zy+w2U>t<hfcp+rqQ$gf(Tzh!Y5>tD*7w;-OYC?l?%DBG(teA7K46&(W3t0pkYsr!X
z&`D~zDxLP<|LZ7ii6gTc)K)9rE%qz5lSF(SrxlYQIs7H4k&Gkm1+3DVx22~7@4G&o
zkOqtZZ8*E)c1GOt)Rhp6s*I?NzCe%e5|J(r!rrt*#~sDg+wz)jtqil3@*~6yiW8={
z#C$g@_TD9!K!BXU|NbO9xslK=sFfeb=T3ih5ASFCkQl@O(-r*>!{`?qM-9lXc;*j^
zo?b2{T3ch>K1_Ec=3{6Yf%*K9#GU%^mIS2?njK|^VFbsxpUYq8HUEb;RgEAw2LU`v
z{`q7${Tq#UhSFS@m&bX5kS;0oNZWsi+O&KveF+d~3;Y$&cLaUZ+i#V=i_?y1YRwWn
zi&T9uTFiOfMQfNtIAdRCDcPppbr%^J@7ZhizQ=_DFNDdk_N&pS?pQ|+xmQ(tPrXd<
z_WLBIwa^QlF;$*FG%At7z4!6s=so(a)~?0)P2$4Yh;d7Ft^;`UsCJk)qz(u;rRT&E
ziJ_v$zzS1p+qRy&g2=-z9>^7;WTWEv(BT+cdEIio@v7+uFKTy^hcoJrP0%8v+A}Ln
zfsZGzshp(lY-kcK)Bn5=-y0Q09gy73!9H~S`t?}zDm3`Kz(>IVh<)PuaTF2XmlWW#
zJn*wmPSMmU+O@RDcFp>0vYO}|n{LSo;p;lA6hpeZ2YLvN=A?V+*N%)!l<mPwV00Ft
z;@gve{BpZySrXeis~t-$Q0uuOb#aiZJfW77M4A3#x$lYyey`@G-mNXGfWyt6EFJZh
z(<8LK2sni)&Jo5dXzoeFle<TheSY~yL{VWuuGmIhNrvFpL59&($M8oO%GQV$^!xz4
zw{Jgyt6=rbMWQ+>>RmBmvy9g0(`DvgmbF0wbVe7?dPaWP!q;&~yT~aCNqQz9S$yFJ
zHBvL{?L)oarjUg}(E-H>IoAe9??hHYr=i);x1dxpQs5(F>@5rM9=mJ*xOpCmTle^b
z7cj~U5-Jt=3HXrkDZZWscgLxut@lDnKt+oAfyh!Xu)zV9Wlm7=q-5ytp!A3Cv0rcA
z&HvQDqkZJi;ae^2@rGvbhp_In4dc1HL*<i=Jf<wcoYVw(`l$>>j^wblufNLfC+fNy
zphA)0H-eP(E5LTSQipJysfl(u?&|9Lji%E29(5Kmjm185ViKy=F|#E$W;j3)!fwT6
zTjWdG#3dB|PSSPkz6=2gypEx<`0Vm6e}Teb;NwZGyJ`!_Uq)5v?uc(!Wl6yCn-V6o
z)mngNzJ+lFva_t{Y|<}*jGf7aNr7p6_c8C{*Uv%09AVcB=1Y>qnrGtFduqEX53~@Z
zw$|3~Q^@fiO;>P8tMF?!XC&GbC4|g9>kK@HlwINJw})2g8DDJa-VG`HwMe!MA<jtL
z+EU<C@VRT=ruSc|3d*tu2r!bO#w!w*A_Bv+oIZR)!bBv)Ibwq1&ou#ZB0}Lyq$`qs
zbp%_Wz!n)<t)oIKQOaMe>6UwN`2vfW^KQQVgz4?U@mQ%s+pE0m=ON1<9>NNa21&`?
z&LFxi9noriXMae_^BVR2<ttjqosQr5w)+U)#-v26R9{1{w1Mg-w~8PeSWJtsKBp+n
zy)49$b{e-YL;Q<lYQdKe^#IHtqeqe=@)wfEy*Oey9Dv^`_J!iFrNuQd>dpHp<MCYC
zDSQ4i8+Z|*VdCV#c7Sh6w@v+uPGh%A>nz4wPJ~bCPBv0}Xn|#Ll-wMWhgqkle44hy
zuj4^JH?s6EQoFfO@WXW-ygA8!$R(qsAqo8LcZzE_{bh9woUkE{Tx^LtJz09trxGTl
zCfC18;&UVHkx89?hSLOeys+V)Cn^Hr-IBU*#ilsvbU2Vqj7Za9&p5iCD6at5nK}^?
z)Dw3QC0YqC9mT&vM<ATi=g@@R<eKt{1xu0F$55R3W<pxQv^X5C<>B8zyHwmL-L-^>
zk6XSZG}wAS2$0ggno}X<hsL>U47$s&fss_pCE6H0)h^Lpx@Hx0U1{<wj5KYYm2HYB
zp1A~j5i4+8kco7$={m06!VXKG>3LWMubh<&5TK7vW*!6H9t1CeuwNJ6?(|b`V4L`U
zdYAUiW{OGYT2BG(GTdN9QxCg{93?jx1jh<l)NW}{bl6scsD5Jf)Ll#!d7M|z#aeBg
zcSl#U_^fHmhmvGpx!Lq_M!rSCQ2u*?ttZr#YW};3x_jsjcttw;>S+d{j}hXLbHR?a
z;yX%qt*=F>!V$+s-YHr$c>85{+yGN0D%XBS8IgE&LPtGN?zHTDAN|g5Zp@&=o3O9u
zZ4Ht5$vo|c{u_20Qmlj~PHiv@`zbneKzJB2!^A*8>pY7eHl`I3Ckz)XIZu=iGX))~
zY>@XW6QLqB2tJ^v1boQs&Q1!hSEFj&He>1O69f3qsUFf=g3Y1imTWD}jx4Y+=I6lg
z2QiK<1a5YA8Lkd1D3r<_Ehyc+XJklk(v6yYm2`gBuptNMdXZC+E0>=g%tsqC5K&+3
z>vzq%wAB23ZRtG4f|dw%`VD;6hVEDKuxi8Kjkhk~cUzXL$mK~s9!I$&-z|w*^_4k3
zQSQrVa_2cvn}0J;;W!hW?U?a6$epq?M>dF6$UBY4o)v7dx3Xd&1d_Le_WIuYlw#Pj
zun{`6ooRGxXZ~^U8w>`~?qqX+ms(6~r42(x3QwPV)Ld#S5kAtqde7fw`d<6{dqf;@
zV;4<5ih_yg$+yA>0vSkA+7}iIRnuHT;=uYfmC-Zlo@Zp)`My&LlN|JJyX36qF*(Af
zR(6_aQ~~kKCQF0XyMR-zFc^cS;WSZ4uLt%m)Blqux%1g~h*h%fVI4i2(Sa;6p8G=8
zl*(K$hQE%iG8G%2z#|7cF@NmbKTYkANIGO7VeWu<sfPb0u`@Yph|%k6ww@K-^NilK
zwjmR{;vIRsux5;`!q_YDp*12pZ&y5f$|Et74Ce}f6Bc2Q1AZT#@5>?1d`sZ9yQuHO
zMo9(2*IIQ?E;#QtCl6=9uV)0b8Dg}s!<^cqU5HQ`&w!s{xF9+TE27ys@POP3F_Ags
zy<KQ(H)(aEoEv!o=KHbJBl8?=^-BW5_Bf^VOVFdY{KQ}PPjS#N=JLPb$w9Khg}8q@
z9ljSnUsNDo&h{UbYE4TZHN<tsd<=Uoa43zaBU>ax*Yv$Q)Y!qn=n#Ky^!AI5GH~Hy
zmwcRR0yX|c%A*G>u^+3iA$S{vt79)eC=(D6?a2LWF#fzijXX+$6URNCz}Y<;giaYa
zoGr4?*pUL7rXqUXA|Efzcgb2|pzvJE&cu<IrMvHd{u-nTGC+r*6o*25Xxj&Ovp#dJ
zPsCbX5<EQ%Wa&G1Jv!2D+uhtn7~*t$vVIU)^FC}-^^nQ*T*r~HGj2*2Gzkn0tDLDj
zt%!cB!x<p<2u^dAvtE9`=XahHSGrXj+oET*dv1RuW=!z%lP~hU{(5!g_^he2w1mAh
z0r{`qGd%-L^@`ePR3Kd5ApO_$m>dYGlr+z^h4(e?Q-Gy^tV2U)MRwvZ&LnJ5KiCuG
zTP8$=)&3!c6QhK7W>XHeE@Ob?r$!Mu4H+r*K+6xVO{)a?-(DV1R&1^K?oW_HSBr)2
zf?DUydqYcGq}yfGygvfJ3;(&imKdfkRQENf4M3{~e-|FIq=$DUvL(Xf1s1nrsAL}U
z=(rLTDUwONl1NZ;0{KJ2a-!L$1@fOY8le*U%p_+fo>@D@i!DBbvAjx5#nN{l?{*qc
zg&ms9_=&=wXFXXt6<e8bj-Blji2IPS10^$HJI%YD8zYJPhZ+y&Tg7E1nx9lL&I}pY
z1;Mq7i>iy;R1a%fIa^H2>#tyFZ~AKtaMc`uL!%wKKt6tFc-vR04ziJ3?#Xg0?VLh6
z#7Io^;79Nfh2DBiH0VMq+ia!CUiNyVXCW~=T__LL|K>g737HZC#*>OWY`Vq4^v;OP
zf{54mI^ATw^$D7<f3fO6k-g4&U^4B?o_Ugro`xH22K!ZLDS^$XF9CRa*;mQ~)JB{4
z=Kpc^-hpg>{r^8ojo50{j2Lb0sJ&H<s#UE~n^?7}y+>^lv_&b3(w3UF_l~_<1ho=7
z_735f_x<_apU-{&{_;n1o$Gp?9OpXcyq?e3!#6svxo~Npxq&DS4tXl!d=V<Iy%tcV
zoz=iuaA>R$f#Z<Oo=G+$GQx#6(@iVc-obXJgzyU@<46_=q;nPyV&W>TnFWk1?TkC{
z<Dc3$z30xyq(^)polfbWVlKJayb~d+gQWeHk%4<zgzYVit$Aa+<OzJ`c-{&9_CD#T
zjXSJ$zNBAmRg<i;%L}a4P|HuH3p@*5jLwR7b9yL-a_c(zs(L8!2BSXr+`++Pg+UQZ
zglC$si?jv+-DmY}000c{{_zI?Q+7i46*^p+AC$eWYPkeWXhYC)y&G=2n{vQi@0t7r
zj`;BOb5)AXl5cbxb&Ybf8H0yQs(Y=ss#|or#W4L@V&!X%<HG<}a!>JFM8mt7DyQz8
z0@FP8q)l;GIXB-QLX0oALU6S)&Sv?qtobm7w$Z8kRgT85k47q5V_;*9&15QVlZnGk
zL9ztSlB7E`8*_kyT^Ik`Z1KNv4TsRp-W*4VixFl3!<n=7s&^><-Ah8|wv_8RYQA9>
zTgePdaotB-FD~w=A03fPtDybbx^hT@ZPcsujRK&;byfob)PMuV-jZ>)plDawFWk)d
z4ghAJt9Qf;AwpT!q7*@=wO_+zY5LS8LZ-oT1naZ*cA3t<R+@mH=F6Hf0Z|<(Koo(B
z{n&G}PAchjDQ%a|S*w1YAsYWxsi;t?H?9tbv4t1!ztSEl)$8Wyh~vwol##TJ<yE|2
zPTVBb1B+ElxL8vIb-8#tNIzEB?*24Teji$!d@-OzmJn%?5lW<nQc*I!Q0k#(@&eMM
zV+FN!$L=*EvUdK^&B7yKpcxHtK#cU0@??MCdf|jD_c_15(<R#RkdH<B`E)1PpNhLs
z9KVw9nA&sjIqxu`;l-!0x)!2Wipp(iu%!plo}mh3Izy^`HO)jWh(LVH<yhjhr=vR~
zBSC!y<0HC?z23u@cnxG1<#e;j-XIknzJp0(dAqwN%Ne5P7Aa*#Y!vUPV44uBII?T6
znJ4S8wvhEd#xT{RM{^EgE+4KlgaY<X^2Jb9iBb7g#5{~eb=Xv^v!Io(caxN9$(g`R
z2w6zbHHQkj<hQO)D)UsWW*kV3SAfx+E4T0Kt<agP-zFL%rY)~~XM4w7;zRBhm^AB<
zIeplD^VI3sPYy$s3qC0q7xGni(BRLu_CEO{pT}I!c2AaZyV^7_I}uk)<YFZ-uST)G
zhS;*D*9bm*MV^aFW3CIgoj)nk&ik%@n{}zSUh@lQGoQlA;!53tDiX))hB@f!euh1`
z*I-9((n!Nee?OCDMp};)X~3q^B)`aTfKzDJF-p?N3M~dO2<48Kkd3B8bgwUL(D%Eo
znjCnB=IpTr6xbpsZw3>N_YZgBbD|k=1JVG;x5le-WjC>|V?HD8uX*GC89LUihpY}g
zT}7{?G*ZNK(gZIiIG{yTqtOP-BDiRFy;(8KNeXt~aiX~o`gE*>H@<i=ib)Ux+aLvY
zkcMQ4%3>HAXu7gM^Zl(VFOiBs<@b#~QEsh|8S<nu=2w5zV13_tJ^G9W0WB^X*^ue>
zP%K1=zKqb1(Dt56N@b5>Ysm!sV*ZEX^^(e@F%8i>^0>aq$)75@Ps-iSSdTq)r=Y^%
zL+#IPW&CY_Mf$%hMiW~<sZOOr5v<f2ScRHAx8oJ_nVSZr33JY;Wng_Dt1CAUzU?8h
z$9#FR3(~_Vge`XQ=CbUCAV)y_abKK&->zlAgIVZoqC`M`8cb#PvW)xVXQM)C`0CzE
zkOV12B~K8^9tGx0e>&-=irc~9jCiTiwyU<&v|eXXNkQ5w<ss^XM^$MjBSuvZFG|{y
zMc>lXe0Ywe@p61l-zAd}QVLK%qm|NOv?No<@bR<KYf||J?o9u**9ky>DVfWxnTsnC
z>J&ev3fe_2fPMXeWqrGTgfqbo_29Vxo!4PoEWvwzkaT(D&CZvKXd-L1*{Qr9E}q<3
zRle<Ge0KH0Jwv)9|G{UQkD+B|56;wL;$(9-#ZC9(Mb($nyzeN?N$Mc0E}q6Aw9Te$
zZtpJ?F{KZOv6^i0J<1`LG;GUYKPl-^3AVia8-z)|L5fy;SSNaDBL+ycisb1`g43V!
zW=pQy8{dxLW<gox<C2vMg;lqt+PCWAf8Pq4I7I(2Z=Um+IUZYw&Xn6}v6*PDXd5bv
zlGa3c>S<<*J@8=@ao}tK>CLGRwq$fFU*-7B_!{h4TRtppU6XWa{p`zDf)^IiZSa&@
zz_fAEU^8;ceui0&(2_Ez+zh%r`SpC3C=IIQWGWA#5gmP=bS8D9k9o>T_z*+)o3Qw1
zBJoeipgl0ov-q!mvOf-Y{Ub6<@HH5qQFr#?R}k|_V<W;Q1H19yYBj~5EOG2~cfaFN
zE{ZGLIhbTLiuinJ-^C0M{bDvOY2pyCXj23DP_sBV_n2_>K-Fp)gmgNb=s%w?;5!yt
zgP&P52gciq&%N}@srGqG?i_K4CX#q{eT&!Qu|+f9Zgzlo*>>pp-*fG0;Wnv$pV7PN
zHRfHEprD<`ZB2r!qhdDcBU;_0s!gkO1`W;YS>{O13bNaG7qISq20;b^M7!rC&!rhs
zLj|4Lqk~Tn-Ezs=_(iMw(FxK|M$<*`jgUE}=9gm1Vy$l2`YXmO!?A@Z4x611!5%I{
zBTHQblqY%2#;5ev-S2N`lyrqBguKwRcY<vBw>R{^9hA`E36jAn=7Z5T&0%d(f?0fT
z?K~MmFzbjZqMb~mDlF?6Tl2&9Z!Q&L`?=O*$c5jH|E>kl53#1|d+w&Vt{QeDF)4}J
zM$#QewmT!cb&WIcvs|87ugraoj(<*Xvc7@bgxboF<;@2qxzp7xN0xdvDXc?i;~Pjn
z;cSo{T2&7uH_%L+e_dcXHs0BK-DzVUxT2;dRm}?6nDb>i*-yfQSA7;keI!L}?!kZh
z^4@@4AjqBV5?p2d!x871Y93N);@(428`hj9ZAhol_;EsT*0OnmuhhK=9T7<8+=>V6
z4yDaK>Sp-zoX2x)e~Zu0cJFekewaG>CSQ&pwHM@m6@9dwdrJ%w`ZPU>S4AfSEFF30
zMIk#2n1j%iFx+kH(^QEq<#*@yYJX<EUlnbf0(U+re@Hqh<(P^68PgIeJTIm;!<3Ep
zUHhrW2{SG7F8>Ut&|Li3Na780=7ht)*Y-}-x1On2zm*|&JHv%SJfsqcVG6I!A*KNm
zMU<ki2sksg+(xeYOGq#s2SV3dCnRK?IK*jaN&0+Krtk7qfVPXEjevz&>~pwrmox)c
zo21q0M+Mg8zoiB39p1Z0u5L>6{*SXjW*cipB!%qJ?@zx#5_KhJR4lfI>fAAM3B6wg
zntZY4$-cK(&lsKLUYnR4eZ_0e>sd<kEB#qY)1#4c&0xgs+E7N~NWk2{w?Mu-VR0zm
zDtE65VUrcdg+2{kk?Q%UvESX>yXl0IpJ{zDZD`76Uv?0Jfw1DiR<0JH(g>ql0m&ql
zy-JhWbY=aq)6f?TzGY)|H+MFSU8=Pe-X)>)u1~&&HbYqEzKHp-<^e9PklV(poqVpK
zlQ+a<%wd0ju}Cn02U-0Ry*-X>^}Wx~!D442c8r~?cMy^mvy*gKm=*^nHf*ztHOy2*
zB9!OaAk^CQV&)*esxa$V@|4(n_9|OWVJyIn5uhMa6b81#PMTod3rIRFFAu;Ib<Vb>
zG*<mK>krOa>`0|cV&ni4h6{K5l|7?1C>@3y?>BJtij%6y@KmtI=a;j&22%9j$EV#I
zFFsRH2fB~I!jj%@l5HVdu2hA6K8Z_tkFq0F;fREv&g##oNp*7DXu_>M*z1<iVY|+(
zsc>?37Bok_Nzg9$Z3<p|K9Q#epOsu>zQE_C7PNDQO>P!lb==`wVrF+`g_KqDMCUWj
z+>0&ZbxtV`V`Gbp31@0M<d70=V))2*$Zx$8$rlzE80)a^S^W|n8B5kNSE>T0p2=2v
z#cOJ)y6OQM&kR?R4VF8wDevp1R=+<UMEls+)@>4N-+S#RZ_Xr^x9e9opi8W|xIj6p
zjR6Qw+V%m$s2+({Tu_<(RY2fs;{0LSmG^$c0H_*&rm|>}pET(u5Vt!2bYtB<5qp%3
zzJrL3Akb}!_v8f%b7-R!XPsp?(%UE1FIzwACMqr8I9+}F8I~08FZ$!NyQWGm#4M(t
zD%K_ZvKv@mlN&<(mv1BI(Tn2pGpV<V;5*MCMyvMv?HhwwTYtXW6wlyGJjF}T<Ru&0
z3gZy~oH=ve)ghcs6>b-?nJ)H15`JwT5!4Vm4=%frkJM?AG+zHRqq|+f>GWD`wC54Y
zdzM+9lYgW<(;*q`Vs{*65eCjK6Y5sUoC<Q~2<O!u_om&UPex_8_v<(tHZG>yeP84i
zwH(fcw4|rm`pA~XC$l(1e{!K*ZjaXZDRlOEzxjcaY?t)w+u?hkq{&zurqI0L@4L_U
z-Xz_{_WBkmu)Odae}z3awA^3)HFG1Lej$j7&<&1fYP7+xj1SL#E3}1zr`UpQ^0*DJ
zHq9<nGaVneUQZ>9_9O>ff3IA?6-_(z<XJX-G9nuT6MMk@x{hzm|7sqO#=du{{8*B!
zO~y7YMaFH@na(R^U@0LG93JYDg}L(n_zd3vM3!VDH^w6uEhr@P@o5H#e^gcm`bk}`
zZ^!OxT0+s~DFA+%SuIp3TJQ2X2ouFJLwNGKj-6oi!&Jp*>Vdocm%-NeUeu?brZjM+
zyV`u__TF*YI@Wq0Z3a#hltS*Rt;j$X+l6@lf|hc5Hk5XLUVm!~RVMT$2WE_@^@)iI
z4Smk?=rI`(@XI+)+J)eubWN$0pRa!6?8FW?`HI!tG=9eEsayq<kAfg00&@$|y*dly
zF|gURk>2?Sg8NA_si$6)lI}mY!9vHtG5d`ytkCIBZ60w%LzR>plh5-A=-a6pTVS*P
zzUFv(K58jXoyD|-v2OW>fb>CCANKBU;UiP^$wvcfBxSY8>!3oJ(;8uD_=VGAau<Jn
zPwEHmQFz@S`4>Wk$;N9_ujZl`d_v8llD;olNEbiDqeXGKacX((znWLNqQz}+H1pXl
z(cD^&vT}PT>V4YL!i6)MNk8iJX_y%BH=y&9!p}tDk#pi@cIRBwhazrCP>>9gEdtT1
zF`a5e*aWKFC2joBl2reywXEcM<MOJSmg<mm+J+oUxy}tL$fBlUk!rQ|j1PavS@GPN
z2bHe8P(_a5+~7n2%(kYbdtW~ykY$U|fb^uhU#A5B2{Q0)nvP|*M8g`vzN9}CS?|^c
zYCpB2CE;!-7n=OpEBpxv{SX|?9BKOqj0`1LE$(M_uYgbIM~3q;tB=lrP@1Fa_>Ow*
z$TlO=%LbBZ41Gj`($jn{J(_PMFA3`y2<AV+K;zXbU}OqAJPlNuQi3|}OFc}Edz*#{
z*8cM?{dBH<W5e>Omi9<EK6JPF|6TZq0M||jil#%-vjvrB9(ZBH>_s@o?7{3AZ5Fc-
zlu`mulKrt-cCI6UOE9YboECjW_^(U;xpieW&8#nu!sOdS$eh7^zAaC<z}U=*3gGqU
zdsIhz^!eK#nd1L=Mqe?4`2-kfG3C4evxMP>k{_HKDc?C)4>y~_)SjKYGlITF2RA$Z
z7&Q4;ME~zDR#Jp@I7nLGXBKtb@JvY>igB=C05!|e+wo;QgZowc?#%x0^XSpcCX=|Z
zsH6mMASr0Pvb+cv8gXHKT(G)Eqh63+>P)+_nf`B=JtAnPiEveh+x6S^$vZ6Q)AyL!
zFN|cfyJlKW*Gvsa-T4_EEU7akv;LnUfC)@<VY0=m@sBS3pR|L%W-*Tm-ykR;IY2{|
zw)7I)|9|^}x^TPhzb#u6G1Vx-kIa5_eBd@jO`qSV7yQ5_r~5yV-*G?QzeBADRoam@
z4*Opn#>6!i@?Z8Uk~FeN(ft1V@)2-Jd#>E}=YM=zk`wpk0Cs}`;hQf>!wEq?Pd3~@
zND&+ri>&s4oBU^Z%u18EIH~M?d$!mU9~by3!S<2c>OwLk2Z4j_c=KAaY5qr#(BqT1
zn5g9TzhZrL826;#;3)o4^jQsy77waff5&I|KZYC{LRcpN^owDoIY;`b{=Pi?eABC#
z&1}kp$_BnvtoXkN#SN2I>e=dO)}*)w7HKSwz<Bmzpl=e_U7`x7Q~%Moj|k=|B0T-~
ze&61lxBm@rLjm42;>Ie;4I_F^X9CCj8A^}sy1V#TQsTD8&M)Z<eK^u|rHJ;}b@gpn
zygARD6eh8)X{bN0tG`58wppRESAHY<4H+XygIjExO-NN6pPf;vR6L(;XU0vo+%wIh
zmVo2B+3$a~{iz;h`Fp-heQvS!!|BWKKX=)xu)bOEuUjp+L%kdfZ-dSr-*Ftop#v1)
z2kTF6qq-IwPUj1^Zz<KOq&SVN4&68@vG-5waiLh@{;NnYC8o@HQ1j2N>1h1|1B?AI
zCtK^h8&M<LBexP`tCm~xq1Q#gMq$3+-H>c){{yRi97<+w-UoYgv{t%^y*dx%=jTt~
z{bq}+PO|@4D)7W{A1BmVbJE7aX}0Bq&dO}HWRXXjh*v@#l<aaZ+ay;zA}Yw@Rf{a!
zuAAk6&V}!EsjV&X{3@%mKx-e$Vb&6R&3w6vmQF6Wr;nETcodJ?{q}Qj+h{(GY+HuE
zeL0!lI$KUm*0ZZss(IOPYDBT!u2>vMOvV174)e$8kc|~$UFz(4QSl7>^`F61NAgmo
zZR90x4w5jKjqZ8s#>l`Bq@FT-FY*92Ftzx%*^eddAXr8Ic^$LrR<^s2WYM`Qume7f
zb3+B{=E`NcsI!^Y40)huCl=9Y7n5a9sj!<%hkcwjlFf9EIRol!q*+8Wo0YXiWw|Qx
zmwKKX<vwVG-fzc|sW&Pt8W}gW@kQd$iz;#s_V$AWqorq%_DfmaX%#q*gjmtHXn8Mk
z53usyb1frF@@}+WAjTtA@k&=EB|0cSoG9X5<&wOw5p#X06Qm;ySAPDADm|S~mqCuu
z8Jtv8`QZ}BVJoe^7|%6N47>es878ZgfHCAc5Ov#6pm@1J`voIIN{Ayc5GLeRB|n2J
zf@V#>@hjsvAz^NCRF#SzyJF~q>FYEE))}CQU|hpVJX>oV#w2>qAwU$n31%ZN<5Ss9
z22UHffloJgb7W+MUL^%>-r(`&{9vWK?Vx$H-gB2MRX*@U1K1~W`t3F1NNx|<aZz<p
z^`NG-rsX=H+C@ZGhMPadIP7>tl7}TJ4%C#;L`IPGzI4eVE`?vQU`^8khjiTkEPd>{
z#X$oFaba(0jBG3OTX2rG8mY>{qc+x`%q5}B3*onv9Jza+WyEJ@w+Fx*f_hfgi<WJ{
zUsI8X;jgpXdv65OLUzQ#P8$hSqIIvQ)j2(6EmA1@xDM^AB5*jXpO)W4U(jsEg-egN
zP44@Aw-|%@DLbpo7^)}$IqOZtz)kJfM_NE3jiRKzWERP1(;obkYnv0ct@~}+!aXxI
zH1lXi;hPCK)-JwcUp#zmVc~mPXU487JR>8co+~NOtk`q+k)O)1s7+u)il3C>yGpJZ
z5%o&DPl(;q9mzl(^Fc80ihN7XXZz*;PDQ(rswjv1PQx>H&_sE`B92J}5Y4cg*^oLW
z5UurB4IRsoHh@rEBAbQa$sVAsJ}#}WwZRWyN|V5Ss6n2hd&Y2sssBIxj^v-C;()m)
zUpexsrf{|PB>?aVH2nl_U>RulVf6-5<{Oock{dss(!>!>ez)OZ0ORCWf0xf3T^79f
zdgRIXNWFT7LKq6Et53gH<hd~7#>$e=Ck&^<zh?up)yF{57`I{^cJ&LUfHB3{h~yBe
zcw?+lTUIS_fip`EW;AHJ$=<~kl$}}2q&`X<pL?i0OvKUSZM_m(?U7ETMsAm%r+_Vm
zc%)iyV9ogwQ+^8z3VvXtDAMo^WmVa0X&P=ow<$mp-2XQHg<t;4vBZ%~Ee9}H!{Xpm
z9Ek6F{5CO7l&z%gY>o%2Ha@hvs=_SBwb$?9>(vKDHFAChn1uOvH`xcyzrMIQH<PN?
z2Rv=4q8Ui_Okm?l)Nk@3pAe$X{-$o-r|fezje9?4Z<W&?{UJ*%p+@sF7s;_aoQJ)$
z^;SzuPb^7magH>tFbmrpUs)wNmMe96>h@}AFN?L>YP99Y(x}<neaTTrHIKhI;^{r2
z;Qg<|n0#C8mgMMQo3P1WZg!2Rq~j>!x|`b@y`{JT7So+=K*Qxr05WYQeFBgp*UROZ
z5O|=ko98U%7r#+i;Y`|Cwt*XJLudY0tRZ1#c^yt~gOTfU>cHiBg&RB$Tfb@M#wV48
z9lkLw*`XF8<GLL55r0He;NN7LR<@W#4bOU}Vb3JC&U><2z+X@!=f8dWntt-hBxBMi
z46<SF5F?Bo%i)xwH@a^&FBDS+vqy2Kyj^f330U9`LXmU@6?bA@MqO5^%nDny%t8V=
z80O!zDdM#3z!QwpZ=89~u)5AAqwQD3uUXHCecUXsReUi~*iTerz1|ymG~_lmmgfqQ
zo!E2@OBDuR=q9jlifT^b_!O2W0XP}_WV<at13B`yrB?JYJF!0y<D0Sh)OzfIEf%JJ
z)t|7i&dyO&ebh4hUSalr^AJbfklPkP%>JUZ%1PTSkGTgB{pYIuI4kY=fdwKg#|Y|t
zLIWVjLO3Q;&<Fj@tDRo&DpX-pV_UKbPsycM2NbvYF_LZ}^qz?=qV~<Akbz5w-~`W_
zJAfw=tKKr6<YU1icX!o;FiD}w6F~?|n-XoWfcvQuBUB;sIPdFlw(_Cc=hwap1lD;R
z^S2_P3U$L6Wv8wgkGqXO#aD{!?YtxJ9WgThvbE!{3kelxD-nQM@#1;qk0y~FfH^d>
zxGqR5S8$7ZoSATvdg<yN-h9l4*@trM`jj5Ew$5iz-BYNGM;~OhCG|0Qh?|Su%|=Y~
zbFZ2lgggCS0C~<Bn6r|?R@pZP;Hvnit6`z+F25^h*!IKifr}2}0Y~CZuTGNNpS-B4
z<eYu7n5vPb_U{6xwk^9QeMt$zD)YSJa6f9|2#LrlJOGu1tu?NqFUt;}i_Oo_wCL~w
zE_XM#x?ir@riwI~G_+9TB=7MPTTwfjqRQCI%S)A;O-50v@dYL)xi5U3=GgYcTzE1y
z=LYgUH!7r=Y;vR=(@+I9;sL=G<{VPeJ*F4~h8ZEOYGmM{QJOa)skgYv;DN*&p@9AR
zrBHsP5y!)UlEqA_${J(++YHOm4`)fAlbb2^U&{+O4Y-e*W(NGp%hti2?rpg<jYr-5
zW4@crW5dHLhG2>|?Q<~BVrA<i=S#9bz*ow=l3ohJ3g6u;3OP)wI;x!U4UTiM6Rrwp
zQ~u`NZr#4;_f)oJs$XkVQ}}M773U#Q>prqVy^(XGd96fG>c-BSV#2;ko}PZCsOzxz
zs`?Zv;hJssFx|-2ap*MInOo@SO|+y&UFhoF73|uRnO>=`jFRMDpMYQ6KHn>HyCj=N
z>D=L+P;R&NA|fd;6=SbIfjU$B?YN~Cq4(1;m(i9I=b0L3+2_|1WpjtcFMr(b`V-Dl
zvuK)bgO{JdoAbrLI6o}iz2N<gmT=*%^OW~Noou<^FY&F0nMUw}7YQyGX`jPhZgAW3
zhkW(SG~gitpjZpW!~k5d2jwfqMD|&Z$})An-6np!88zYq)Qk}y=onDaYdPVOajWh#
z=`#|=;f0g|cK1R?CjfVC!r!nqaXy^o1k}|Hl$DD<{pel}^HjFf8_F*!?}%|}G<hDP
zo37EApvQKL+re)n5eeWkj`n5Y4=qJfo7l0ZQrX!TXItE{R6e$fnuw1SE_m-?XZ>}l
zV-$gEwG(Av?w5PQ4$Z1Dw$)8}ZQQ_3xn0uD?XcNj$Y&`&(;}Q17@3$&R~rHERJgL&
zt+2c`h|B4XJwDNB9NYR3YPXkqch|0uaz%GoMVCSN<d>O?<l4@+0xxM<m-!EeYfwP7
zWg?;Nbj78TgT_bEH0IpK4o=zZ_e82UC%`+q{_%ksLcOW<USp%9r??^}q5R%6mma<>
z$G@;A`QO1tW+fGshihq?u@h29^IyDNh?Kz`Hj;v4(D{Mt4q3eu+s-1X7f(hV#^4vB
zWthv0F78USo9D#T`;_;WHf8G+m$M|-eFL!U^SP8mu7O-mx*O=Nk`Rqu;_LW3GDRia
z`M|MKwWX{3=B)e*>MSIX>{-wpL-!m~Ybta$NqU<PH=Qc&gcv(=;M;F3+NuZ3$fnDE
z0aVv$wRQWDlm$Y#`LoQUlvrYoYz=yJs+$&}?E~uURUJMD({1M`o%Q~I7-S_aPx;+8
zwFJVQF{|7tl<&_oNUMQb$a>4l%ofNt+258u;N26U_X!85?QBq`KE?`j-0sGlCcER5
zRfh*fgO*lTe&gx+h1yUjeG2eG@)Zf5N=)WZhefk*D-0NouPGI#03OW}*B90V^+Q!j
z;5iSEApF_h>|ZTaV}dmXs1&dDFdIEYk5r?h7|99Q2qSXsmI*@%H9VB$V9!VAPf3*R
zV}J1sZT(^TEoNa$rs7!uv62o;|C_mLth|i6-`N|arKQDVDyWne@IEbiq2Nv<!!n^x
z#9e%myQsm2;20*$*1+19ZK|`x#O|FxDqIK2Vgo1q4~D=_rj>h0Sp$(n$sDdHH<fVZ
z;_<P8NFJ>5z0R&v<_2rWh&~}4I^7auXw>fZsgM|-Uh_*Kw}^*fhWuhn<L_VC2DpY_
ziretW$o<f&#BWqJ8ND$??%4C4C4oS2o&KrnVx4&w03qC^tc#(z%6xS8>(|>-YVRIi
z1}^0v*OZ{d=iDSW43T}s3d~zv8(%WJbHlE7XH;Tf+8C>_b(8l}iybMU*wdLwhR?=H
zW^KWZn=W#fOY~XEbmb`B)r@x8=}5D{rQjyt-PfRvLK_1Uhu@g*^=IWNg^vdRfj0_S
zIV|c#!lsguBJj$#5p|ivtCP11zF=Qpg4=^y8owJs0D%nHVK=xVT7he8;?^QM_*oJg
z$mg`1*d83MyR2T@P3e^pe=8w*boi0s5lO`k;zinm+7FxTEE5M=hQ{lHcdB!rZ%)7G
zO=?Xs%W4M<YljLmru5wbfWND=?{ZC}mF5}9BIc1VW+*x<ZSQP9Kv<q2_!Y9;#f6$h
zuJ2q65KIzx>4%kzve$hC)J-~K-TOfuc{q)JGwxuonM)#Kr(5)F?5=M9fGdKKZ}7{|
zB;1VjaZVPxYcN63B6>{!BXW&i6c_)SfgZ15jYy?EdQxRKHtiKcX|t59!Zi^hEy;uH
z%aV;(-Z&UVvu97fRy#&{F7)Qo47eT#T?RFPBqNhMgb%pHn8|U@bpuxaY=4sQlwYuU
ze~4FzCw0Id`fDMJ7URBj-H7mXB`f^=C2sj`PIJhUb((^;wOAr`e7E<LyeN1yXGSym
z$rHcInUXOg92^a!TR|P(yhRU;-H%^v^j6G}Kty_Sjr0*Q+R~HMLOp<tB+`iM<T6MI
z7$L5=M9|ljQg%qB9h>m?n;*`wH+f#aB*V`p@r0pB|JFr!zVAM+>Nb^(!R^6{7ikB2
z>-y4CD`Y`=31YCcPlAo7>rc$x9Q0o>V+wrz5an@CzLr$_b7kZ2bn`TB6sAb{jN0KF
z()gbAy%}bZnS;Z|{TzF;#dR7l?v6}TRPtvS=K==DPLz|gK+pQy!4bTx(aV)4-d!rB
zH|sPmc5@$c7?E(x`)_V=4#RP(AYj;BLa4zK!wZxamvmqV>ZcK=riOqDdq_cxcTJF8
zw<AWXQoifno?NrF4%zP6e~b3Etvl|hSSCW}Vl{ORWKTep2<6p^d;6xDfg^`fEP}wu
z6Ryl_O13P;YhJm_*L5o)J&z$?0*^wek8ml;yBs}#Z0d~WrWAva8-E;1sn`W1U2jbL
zl)~0o@&?sxXMP)_34&jtGlecmAoB#PCtJo=m4{*3h0>@(;_6EGX2yqwhnr(pOQ9^#
zooIdgo<DXR9>4OrDgwye0l`cY;$c1Ozijum#(X?fhXw1L5%MIJc6F<@&flY3_-*JK
za;x9Ou)<PLsUN56kLuMCDzF0k`2pN<q~zoaQ*<zXN+{?aT-t4vegbD&bVG_54c6v7
zIC^^ofyhZaMbl`e`K&25pYStzPJ&SY0DuRN)CKdWeK|JR;{r0Jm}RF<L>ZDg<KI#t
z50ytP%;WQXmg|Q){(xE;n_WCtB=LhJBT1=5RO{sIDcpuAoK*Z_PmPmb;P?VCMk`#E
z6vI9OV$5LKy;axejnr{S@V@Mdb0@?CMH!73b|n!^WPZ{1@S^L?<v94Q6c>?4IGvo`
z)Uv8#T*qfw^x9!8=Jw<Am<6GgKTwDS#SwO`AJ+?26#D3UDi}8uKEI{}rY2Smr(|Gc
zBtz8X+vqYtDwW_wArjApqUCEcG@t+B<M@n_CY2Ako^uSGw4i+*`0=#e6U5H1p=&_l
z>2b{oeNm~EnU;Nh@?*SYY#FQ=RtJ-nLQz%I*xH${Tm63WDJhn9yGA!rbN7=snr8hn
z%4*G~pTHz5`ugja_4b7<YYxmPhjC^}pT~}2aE-HVwYCYHRP%JKu;~=Xm35v-{`uFh
zro9f8ngID3m~{?_e|?ox#VuGwEs%$GR^apD*Ep$3jr#It?+v$!<flbv!*^z0JElT^
z_RGl{pkKxW*!8+ugjo*?ne8+rHdatbe3a-2>->~gtCy9V`)~$Ww*Ed41upp=|G9G5
zIPXm#Ex--3z-mY}%|O!kB}`&7#PzV5L^>q9IrWQQimclvABW<gLq`l6N4hs2Pm_&T
zKnT43UE<&?IJ!CG$<FjT9~L{B%%TIa*$7q^Y$nF{ju>tA75o76d+I_kV_?XG3Ri`L
zkeyjv4{{_+GML#$Us)X_rzQyBQx0`uBU2!dCQh{CBvlq!E&Us{*?(5vUrqXg#3PNA
zu2`!bjCjkZ#~B?d6baP>vgfo!dT=fgBp-67k=PApE2j<{nX1bjNjFB;?}n&ia9br|
zSI`_mlLXkq>w0%p%xjBrfP1FjAz)ry;-*y_PUNjjc}QP&51(WLv_GbJYj(mnZc51c
zE>fQ{I5}2_nh+pzVe!vPsWhbMN%4r(DZgH^*$L8pza+Fk0ej-U{zoB_GhN6zi*TS|
zbD`0jhkqjw(-?|<Eygf5Z`ftA)j0w1zanSvOC|xLPP8oc>rb-*dPm=NDWy8KLZTgT
z?{ZdzZ5~R(t*F6rH8;^ROx|*x?uD`f;K9YilPtnJ3Mu9$sy$bh^jzxdb0cD#@Z5KC
z&-uaj==HM8aE*yCm+1RFeGZxor?<F+qy#GXyKSkX4dY9|@jJoHFzb?0f_7oAES8is
zCck+hwV%RKpZaCxdfzQ+hN;%W1q(8xS<i5uYI{Gx0@|J$=-`c#^5Ar@PV%1Y8{r#y
zoaG_WrF&SY`~a!uxewZA=m`GM%Y3ENK2$N;+SKPj*)`3T7G{tJ3;I*Cvr@(ltiPD3
z2(az{QIQw&mCXkph9h0uh@oS1KW1D3I=E3OxfgO_EmRI??;M*wvnn17@odOjO2onX
zGm8@x!>Ph-Sl4Txz813h<)rMep?#<jWa|)Ie!iOkX<sYAER`#Vj~v+k-&^xxDeX~A
z?&Fjxs(#^a&Ty`D=3mI;hKGPEB#HF1&XgL}BqFbV{a|`=hd2R`3o<UwJ5dW<uL*GU
zKoXCmo4v^jrNJ$(N25$T>h`bNcS#@MHS1K0-c^Nqs~N)i3*#z{jTaojS(+DwU}*l6
zSwayc7JCl(T0Wc|PDxB;V!3m$V(+QK5Rq)ArBxV4=Sb^?C9}!WjLEZc>5H4?3WOAL
zbWYV)?#JveCGV}s8oa%`l*oAdAi6er|KwNp(<@ypiAu;9NV&a(t!O$%pM&x(jFMK(
z^RL-Jrk$cf2?sNVvka<0J$)wmovUuoT*?w%8^RVD4x9flVZS-UsL1n0_#3_aS-dB!
zGpWtOUWt<2?=VfcEsz>OD$88$vuiWFF&2w`Iz16t=pOc6_c&50RVtd*!X?}y*nZD=
z_LH*<tQ91<?ryr|0*Xw>v#Z)3U{!{18B9+_8gh7W7~Qb)Gmr2j_V%eJ>H=lEo=QU0
zL<YumtS5xbcXs+y07=8H#|-7y_a;fRE7}#z(RUB+#8L{f_^dMmITZX^hH&!}D=}q*
z=aI+6hb3!D%O;K1>JjeQ6I+GUyc@w^tYd>>3w==sN7<TswOTVIm6xAFh2}S|SZ%HO
zQnurL7@QC4k>5G0-((0u(gp}6RX?^OJdrbkFKVCYDj5Bu^2Sz!c1`Xb4qZo{3kXmj
zN$JorziH_0vJwHFHxluN5pYzT*qA|9sgk3Hv1}jD?IKJ`1N61A&|cg@bt^i&`&+bJ
zJsjz>b={IQJ#m{PeYoNRQVRUIABZ#Dq{qi^+?Qn>Y~*K^NV^|>ok0ts?&IEFxrp7L
zVJNn;0_JOD%P7leUJfJ`kwg>NJRh&;k$vY68E2@RU-}(Sc=>#O6wI=}-)`v`Iheh;
zx@r?(`7ssCi6WTG=dvQPh`YgF<$ANr-i<2%yV)uMjQ!BzUxho<B(DVo;8w@=Dv`^H
zBwd3-%8ae|>4J$26Vnvh800D`f(0q56$#<cj)&gR&5LZg($ktIg|5h#&3z2MC&%he
zd7%Q-QI12LVJ-O+>a<>9(|oD9BT-=3?B@CUeVlkvc@Q>)s@nlk7rs}HzTSS7g{_TV
znD}^1ahQBXK78klSTXCc&jlcDqo{cg;RWf?#m3h6a(6j>K}ykA3l=^TR&Ggo40+=t
z!MdfgXyvT49ffs{9bH-EMRmjTPV*Ek9~R97&j>A9k7n|b9Z86Z{e_49kV_daSehMh
z56$G)IR19Jh3)4E6S!cKoZoWLvt<+#E9<LJ1c)5f$om(!v#8zf(0JX1ms7jUFgc7e
z?{?u7XzEgSUSg%8XXvaW<~$&BSH?C1z`VQ6#K`tZkwJn%zRK}<^VK<7k1fTe{OmDf
zoZOK%yH~32e5ISeRux-aC$3+X#>@K=)tZSWyT;^Ye%{>kH5$tm)LsbpW6#}Su5PvH
zoM4wM`9{Wgx%lkfh>IQv$E69)-Q(RxP<IOA<p_*%)^|6IX8(#bUr6aUc>v=t-nXti
zD0~R59wBk(>NrfAGC7LDtaYP!^zyQ%H=b$`=Dn;jaa7Gg_-kJygqM0q1jOi8@I;A_
zFXfk3JF9p>SJg&pg4T$(6Na7~1YpVvP=1|Hoda<q<WY9Hry}IIo=V@t6wh+cV^S{F
zNIB}chCHkK!$R7lj)94E&e87e4;F-59q03rCd)f&6$+gyZ<d9n27e<cl;EvrjE|QX
z3dFv(b!hEtgxL$Q0rO2U6TBg7kq`Yu2)d;(hx6{9kf-Y@yFhl5=d30JY}C2~CfVQ5
zF4}KW8S8EiR{Yfy(_k!sB`z`CiTE6dzlxfZ!=^I^^36^J!IyQ<wwSo6?DL<|fL{#_
zdh4Tqo6i##Mj2{qIbSQkNfp~CeV)MBzH@%HANBxHYZk{@%&_3G|44CR<PK^+mDyXT
zc|GjPUIsO0_E=55bXNCljHB|W=k_sA`?Xiwud(T5^Q$>=UxX?5Zz=QaJlS$?&`8_r
zX8$sgFMic&-lgb+CvM7i5l+gbx>&*$sIaPSo=diwGW_<<I=uZI-Vkg`wAqN-^(Kv?
zBQ5!eFQumgDr6qTZK_wvXbWPIAFscRgUfF0iXr#uu>LMwS(~vGgE6L@og!cqu>$Py
z&)A5&vVQ1iZs5k93*ie0SGSbi+2s=n!uGFUjlWF^3%rR5{%PpDzl1|-iTyQFVJ9;U
zvVV=Y(n0jvgl3cm|LN@13I!J`5^n?goRch6@*x-xm(lq+92f3&y8VZ?GS!nAm&qlc
zs=#}Mw>37!MMx{D3{+CKxp|o7iTFhFJlC1U@==68@LM6Zm#!2%$-{o8!otVfPKa<-
z6OSM^oKFPst8a&ok<7eg0GHEc9#~!=vP6Assq|)G1X5ol(GAd^2zuaf6C9F0gM(Z+
z?hO_qkr7%D3gIdYUHHAFL8cOgS1sJ+c|xM2h&?f=0{9F>RW@!hY}M>2*Voi|+eHvN
zGmD;WzcMAM5D+z0GqlU!or8y`nX{d_^hbsKU{u74Rhyr_k6tJxfbM9on=mlhqm|nq
z*1xNKC#<65OZW(fw=oSlOLDBj0pH~CnIlTuKT}v(gc|qRGs0P?++a#j!H{W)O{#1i
zGxXEjWDG>q$Q!+##c009$1hDSbyPz{`1@K?!dIi@t&`hkUMM1CxDA8LQas2^Hn6<H
z?Jev?;e2I+C@t`w-_24LHNsLh$QKMBJd1sZ;=pN#DrijdoQIe$^#Os{YF!0r3MTqG
z&nC9g2wMIN8CVzfeo#lf4w3#{?sVHx)86=k<q7<zc$h+c5Ap{=A%D=%!1A_SyKeQ*
z1P>s5%SrNmUj|?cC(SkeS}ulC&<&|J3f0rM4AMj)GSPCE{R1#l_ybg>hzM~HXHyLc
zjabrB%W{TQDK}73cvid}|4Pz5X3D{-=%(J5+Ujb(VW#}6{r~Lx`GHi_G+quNsS?~g
zB$uC6xTznQj(`<NDAgap$+=LCf08vgr&$Z?2susP*KJ})Be*PbzT$B!`R&Y1z076o
z$5|;FkDlpts)SDom7p~MjWj~@RRltfM5+2DjS9Q8oT>y>O3}|b&EN$|6fdG2y9kuS
ziCAIUCP(^%{?TUC*;~=>as!<s6=JtEe99A7buic38d6ybFv>;6gMm=k>|nOLpJ%*=
zFG~-<$-Mn`v+LWww>M2nhA=K^ysm9>QAL5$S^g@C`D)5d5I@F|m}^=uXW`Wd<lrX?
zi_S5hh-jlxJ4KMrkJn+GYDnTREUp9Y#j>u|{B`71gz@rS6c5t`|Kx?5JG(J4ve<w$
zCU8dxj9n3URcxopq+gQJ{&FkCE7cE9r4+q}LS?#^vmXjFoVu4)iJaL9VEduld7}_(
zq$jlP-oRAa>N>joXeY0X0l*;TbVWkH5K=4*1{(Ca-HhM)EFcUz@yl*MhrZ(Q6c_Ry
zF92-e(r|ywY-Z32Y_S}PC1RH>0k(<V_k5e#ff)^sbS8-}izY8ppZQ!)NC4Hl2G*16
zci_&411Vh+NK;c914-p(-VJru_{4thz_EoXMHYZcX#Mr5n}GcYvy5{2r6{-YlEvl2
z<A@OrC0K2iT5m3zyOKVvMzT(o-ACYhw#b$TN$rJ9xIC_AK9Ay3{M!|^+X1DDO$6~X
ze13K@us?XQ?0N_u4QB7VyDe_Y81W2VU+#AInIUOF2N#TMDCK=acAl7OIW@jc_Hm-v
zcN%U?gv+V+=bRcm7%CH~R!(>qpFor$`qwTAz74NG2+thz)G88>6)h;xW4lP`?Ij=F
zU{)<1DIfX74Zr_%8%Tmu%7HmYM9X#O0B2$Z(mZqJcS;dd8HY?2V`(seRa`{-X$e+X
z84jv>uPe@EQQ>=^TGjSl#bGt+1=n2{6>5fyEof*6rDb$*00J~!eBXx2Qlm&AWLy&K
z=<qXCVDh&*3{pk3X!gx%e#2w5mqEqGlMlqlDeDz6Zt7pPCIRHD=pctK)bXWb5Wdsu
zk7m&i-VJNQ5v-;&B^*U@We+8<S(TN7*%ed7hS7Jw@MMprdKq)o1=ANu%kK19AQufp
zJS7ys2cv?z8Ek-KO;a>g1Q<FWo!fR#f<=~Ccd+)Y^pES40&|D_fw+Z3q80U3tuCu%
zm(&sHJBCZMCk%-#p4*@-kD7xjYEv!v%3YR=PkAJN*M`{Jx0&KL{5KABSHN%jMB-pO
zODZ2im_aUvhH{Pl$;VYp;q=WebY6MK+Thmfud4B7-n4JL@if<=15{e5_pM#9)=JUy
zr17tHvr5w$ni>AeMTn>y-072wA^1`N+uR#3?eb+^?0Ayk5g28#CXdbBS<h(vIx>Kp
z|AP*b`>_J`o;zdwA)UVs%uY&;;r>6;50AyKiI(sf>#T=s(d_@ElkJ<zqvh`Lilrln
zO%bfE%P3+s*2a$T6EEMbN+Nt^6+Mzj786NjP68W)QqME^9llS|lq*kgznb!$)U8Q(
zdlaDvp?U~Dx%C8Z)@g;MVq^+Puqx!HAj$onid#$M&%;~=wy`k=RH_#CKL6wwn6ik;
z>!w$c#&Gf1O2*m1nLUoM3!ASa?%S$&;j<K$fLuNb-!_dNitHL9TNzamT1%#lOlv5U
z#e?YJM&%9z<y9x~ZRdV*W~MD3pWo9^SD)SHRPrhYt5j%@I5daTLc}f%L!Vg-+N_Q}
zOQqla>aFHTO>&B;m)SOz0@80c`@S!*^j&+E_v~!`<GcerKU7djU>a^i$(0xpuu2a-
ze4dk@1i$&-9;mfs)YzXvdKvSKkWFoF6r&+r5QUdb6;Kf??RF@Wa=qR;oTQE!VNlsV
zKLJ{7vFwpG!k35JjeM2+k-sw{KI%_Hk5;~3?<xAvibe_BI4DC(D1nkU<5vewmQdJE
zqT(uFQU+@<S8GiW@_E=SFX}Kr;5BvNZV=V?U&uJ)^a*{2qKv$hfHlO5sPL)l;@s00
z1#P$m)wp;GoQJeKBUKBSUboeovs`G`Jo03w#_5>xGWLULrwLkVJR^fcqQ_``VWhvC
z!(^iU=67te*hyTi^qc#|*zuoZD^6v;+$&sL-MRGGXK2_=?VQBeKYE_^%zoLFx+f<0
zD{ft731`KwpaFliuLB`pSuE%pKUEVxOAnD`)Omjgxh(&R5Px;NwZy|EhnYD3u}7R{
zpB;ypFbu#+LR&Jb?@;_qUNsi^f#%7B+I~dJWCbRY4!dT4zMK6miSO#Yrn1GH>A6Ot
zpdJ2w8qS)I2Xx;_KK5}%r98i1@w~uQ4?q_&P=%K_WPd4JNf!C21`=F824ZJm*L<YK
z_vAW*@~JsCRnroz80E&x1KnszS3Ct-O_(sY^0tYnu5TGF#~RHMB4*zuWvZxQe4<qj
z45%L;{oq(q-E?tLhy=U)hZvwcwUfV06;Iu@<srD*vPXN81L4{*!6rr*qIH;L-SHm~
zKTh)p&zvGQHFyzvx}{;RYUUxy9)c48+C_c)jw4`7K&hC8>%Qu25Sse#Nv>-bg*_&k
z?u9GmLzWeK2{!z`)0EC=bnXh9%y_JXz%n(<F@o#<I)lbFE9-3Z@d?`7uGc^;a=c-&
zMafYum4kUY!<SY6m`oSR*Ir<bonX71XCC$3$)J?DpdzgecYs2okohJ1F5^8vpsf4h
zVy!izJyeacqA#4<X6*{-kh-$gcNT4l1CkQPP8!qHNkHk?@?pPY=9O2=(eH=en07R#
z>?yM<fa2pI2?1Re?Bd`)?RM0Wt*2Ufnfl$CK`9o1Jg{$WhRTw<DXF0&_t#e7nWNmp
z3?gV7GENIpnRqY~R=qoiWD$UEb(&d~9wdpO`luBm6-lnBt~})zPMk-1-R6*d$;nhN
zR|iCepIxm7;ZE-&G6A^7E=zJY`~%FuNXm{<A8%!tD=r%Ow3ucd{sLa)|5`Knin(xX
zm^1dl)PwOkj1lyXyO0y>e)j6Jv};Np$k0e+bFLzZM7^x-?2oz(Q6~8fq{tH6kSmrV
z+Ec$qO4he|e_yt#K$|C?0t|eDx=+X@CJNSb>o{)Yz!F=ePSC&*A3T59PEebU$7)@5
z-;}WVr)pDA@^&F#c}#~k!=8%xQD6y2-8xR<eyyB-x_C3+^{korlXr=zVV0zBS-fEA
z1z9F0JdZQWi>EUI<BBCIQ@%eN_cT?2MV_14J@jE_7v=OEm3cp9beoy(bcb}F+9V%}
zK}-2M_rqU82~FJujK=#WCv_KstlEan7u1YBAIoQ(L><M}U&&=>C0CwqW-Lt9H=UFP
zCmF#^Y@tbC$nB@GCCm2YXt8H<JNFmY3p_LFG-$Jn`N3QV7@j);)op<y2QmrQ(iVvU
zxIHu)BN^H-?jr=d)?u%Ee+059oVgtzmJvo1v!mnLItpDYc3zrp>`H}lr6*T*{f>NL
zkH}0?=D<Wpcrq)RcTX>Qln~1tSXi-pr|d1S%O9IxIq}8Uj7=Hs^k1zT$j*<EPo2LR
z3N{p`<rOU<*OTA9ny_3d7kG4qB|Mb;X#ZF{NQApRVABsdxD%qVNy20@K#|cCEof}T
zi6Rk~zK|QBW!l1N`+8_axvNj-^nPVDCD+-Sp}bo~r>ldgae2JV|6A8SOgvUze6t1W
z`0nM{=*kqs7Eu)Tikf7U5%C_#7|urFS)}T*N(j<Z)kBbPSYNpgjo-+VCU>Z=bFT5)
zo|7Wn{A!lcJ9dmZ{xMF#tICpx3x~}zB1K4_)tw-Ve@^7u=7yvsR(O)3Mk)teL`Q{Y
z>rT^|-qo<GDJn~J=N8<aqH(6-(YC(ARdxyAfKtc-4zPmS-;WzlZ;DgSNMn`_y#KaB
zX-Odx272DTJUwG1r^R9DO3<2>v@T+!;jmtPxULdd)3iIL{$VK?E<KJr-JmP<+^JU=
zZCqN3*Q*vj|J#xI8DUqoV};MgL(3*|P+0W0e<S@;aaWabj$^USMm_2t{3P)ByRcmn
zvRm)d4hz2!#3A!?-rcTs2_s7xoA|juC8|(FIFaKI{d~N_jC1c*MDtRDf9Pe8X#QLM
z+xZtHmFfB$IMuAB(ueo2NG~~;r@lO;UK#GH`sv$3G94H#C&m)_uBlskZw14~?b*VJ
z4+`ZFIL7$&Uvk3>7?Q-Q$O!IB9tjEvJdVEhFVTT~U&W>OykcH5__lx*aMku{k!G$`
z*+UZLp_o(2>XK8EMq93jVcEZCiImIbBD%EQeVLo?HPff$&Z_xE^ST8(*H=y}#PkZD
z&_gKqs*?A8G7H#Ql8j_nK8}~UhP=G2rIXna-fOlm>-*X6D}cNe1i2ZFS24=!GK>bO
z4v$2yySDcPJEhNBpU$}3)+}}DShY^HTr_;>n7-<s8EWgw<(2-}87<d#@<TQ>;);9i
zim4qlYN!^jZKTrnLHw6m-81+M-sIufu)hpdLqo$X?ATuj?8RjZVeyt^RMq%Mi#UFK
z*P)~N9>UkO4eXw)6qz$qElrS1z5@7`qwL3xuj#e~s;ndGXUc*4?9JdRP75~OQ@<ym
zv`YrW1{61Iv7FBBMuoGzM<D#?C^#N~aveIG(N->bG-2$T-d~Uxz@-hjpjPJNW2<($
zpzk<|n-fkk?@7;)C8j!c{KnO_xv_sFq;yO!Wq!=}CkKLi{xrbbC?nP5fv4J($-Gp}
z($^ceR>PQi(MKDLf{w7G<Tx+(Ue6QGy(e+UKe|`@p*>j#QW<;uuYH9GXsO(&Yh@iv
zct#z=f{Oz-xDK4u)*n!V_l)l^ogX4Db*J22eH{KrQ~Zy^K+jlCR+3#@{8cUqwd5NL
zZ(dJY?2N=Cf>N5er1Q7H=W*3R%-aN>;%cWA6Etz3D_T}scW81ZuKr$%BT2Nc{K;Ot
zf__E^kAx-A7^>Vn)Wb%*;v}2Q9>?pV4ou!dbuyC!R;H#~DN6P&G$jpHlDQ3Z5{TB;
z*M(e__ak)uQUZMxn-41zcHMqsN|?NPP<aG@bZ6~xf2kMd-u|bIJVH2J2{)$kPCT2+
zqJvpa-u(S9p|>g3KO3D~9f|kfXpbmXzH=D<TLb?u!MgANXp9a2(HI-k*Z-GOf%l)!
zNR>=?k+>E<sr``q4^8?@!oDZ@v`2>rSLj-P;4N;gM9Ke;z2V<BiQpHwHS}%Kflk}u
zGdLgA$+hagn$A$gT`U}bLlT0+%M&=(KKrkT1e0(PnHoz+sg_0uQ$IRw{oiK)QQOb|
zYwMP^_s<%gtaSCi;~~UFD~az|8e&FzX*i|vq2#}A>yL{_fju;@)fd;1Y)5m}|8-m4
z1l(=&?kx^TT996%M1KnYSJM}1xQlOiCOE$AKZC2|{WSa!I{{93|BeP{sQ~ahz#Koo
zs8qhT8U2^D;_80}mifQrsjn9PE1qmloRFOt&$SlH548N58gg}ZPRXJ0JNwhz)D=$f
z9C&+k<-U)rL)v=2zx1=sW5lw23C9$0$5B{XE81lA%EK;?><n(Tz1Ob9jofb)&(Vna
zB=0cyrM3|H_V%Fjy7TQnrHk2;eWpWhPptMW&JJFQ5zlt#f*mZ{L;tk2WpB2O*GV_I
zFD(}TZKW7Cuq)3hbQ#-e_FJFl-dK3aJcT<~f0l<fzgj<=uMb`Pxx-<WeJW8+8k&h-
zabA?%)mFLr9x2~aTwFZJ%2V3dREIsW6iJqDEwN%bv_AH9`~RqV>$oP{_ivm=q*N3{
z+5qX4W&=?{$s3fAZjh4BZ6F{bDJeNn5Rq<13{bkId&G#*jND-Cx$e*R_kDh!=dbJa
z;*X2%x{mWWkG;=#NYz<^Xj@JXT|0yWA3AT|=}Ma17E7FP{_huQQCb05E1j-yY-o%C
zCM5p=p7#zdtwiVyMFh;yqG4TBWoM~9OzC7}ef^bX3&5~0;;QtyMe3_nXmOxp1F-!4
z-R<pv#9XZP8@2!e7AFP<2FTpkwcDZ*ZF#DZfqdFoE<09@La&5h?4w{Ks(pNNqC&p$
z?CBUS9UYlnPJwVHap=jGUAptmjhE|Fy!t<`rz^c*Dz@GR?EgeoRb1d;*y8y|7B-P*
zjO?-_Kmdu+u%KSE`M-R0aLq~MdB)+I4uVk%gi$wEZ-x>Y|8{S`Se&B#UMF-p1*j=B
zBz|YrHQX-`50@jXbfPF%b*h(g1PGPcs*y{y#Y&Xa_~1k9wXlIqz8AALzgi6`d=<#%
z5)-@>4K}OD&FA7IsXJ8Ghqd*p#9IRNIn1`aeSPcB`bArlNdke8l*K=h@fmFwB@|W7
z_9Mk4ya`3H)18?_Gvd*(MvGcJ=Wfry(DAY6{=W)=hda-hIvCS(A-l7+ivS;=s$Cy7
zw|tFV&NKgPw;q-H{2n%{1gMJ^o^+Uwt$7cYQ{KCRXGM~}T?rqWz$J8b?`4g`(ay|K
z7XzUr8P`|;+`z~C;B24x3$y(m!%}It-Nlzw3csu*2_WF%%zvMM3L2bV#%i@&KH%?h
z-*eP4`F;x(V~5smen<nHJqR?8Tv@;l9m+q;TAP~&{S@*(7mLoW4L5Bu3Yk8U9I9ud
zcjy`Z(YG=fmk+X9^NSY2{xClQo?&#=<MR!!=%^FFhaYzu%nfc%-?{b>#?i^BP1uJK
zFLs=sF$iVdiX3L0_FXVhN2t74tfGh$MW<dq4x9TmTMoo1+1mn9KfCpbl&Sy|p6fIR
z1kv+u#rI9XXhy$qfG2KXB_GKW54$_{z&mTznWyha`7Wmb1I+&4Hom8}Jp3PODL<J-
zy!GWG1D^0Ugh=pf`B&b+_09o<UF(lf*RnRJSO$;PaM3DLEL7gSn$tP2lo>RI%mQ=*
z?IZjY#i!NRJVX@a%&hmSKe65>3}nM|P?CTF3XXYH<Kkt^@*xlrm>RMD!h?Jni0f35
zgmI=tP_D?m;^BJg{1-bYgG%0M{+ddAZTHAoz05joxg%=zInvbBK~La41Z8<q$2!$7
z@gkZE?EA1wFi)mV9N<qJ4@V|i{H;$6w9`4;TM)(9e!c6{u6M7L_=dulhAcQvuI9_W
zG2`c9?H(=s^e+Y7D$Z*N$+ks{?Hev9y{2e{b=W-3BX;w_ghCOWZ233W<V@6`UZHze
zzg_%WdAp0N-SH>mU@s~j*h16$W$Pp>3pd`5A%%-iA&|3$V7Z(J&W|n4o6ps%9~`{D
zp?K255!Y5}(;Y-h3kD1+jCeZIL<loCT3KucX`$0{I}hvPULxS+JV{?p6}aNOGpawW
zmYQe`HU}9=G+v%Oe)MVAuoKC`!jidj__yn<Riu{{&FtiJyPMUQ;^tqUXS;ywxB#h`
z4K3_F0P0p5`R%Cs2I#)OZL;&DC|<}fMZqKSj+*E4$;p(3j3*a=)$jgq0RaJs`Wp1(
z1&imt#zY|0KzcPxn00F)zq>`Wg_m<rupu$s)V5|x9MvuNS*>tSrSf}2!?}&IvU>1Z
z{FS9<`DJv(Fd)m(_^?{un&Xzi&H8+!R{ObSA&(`eEA7*vP>;r}U#{}y2>FfXQ6Ag6
zw%o+zetU19uO<_}N##gLu1CClrt<pD-;{*%Ng(yP_|Ry-9GKBm?fsC%qHBoEXW9I9
zUbPh!x<hhv5ieKz4Es|bY)O>%;DF}Y|8$zwcOzbnzeh>07&TU?!-5UiUtFjfQ68|%
z`(lJPOl380S!DmKV)VuB*}`x1coAYz2TXX~vo@Hi@#v59&6~D$qUm1y*4LlD)4cRd
zOO)jRL%;D%qf!SN(1~BEm|PPpb$Z|_`AHli*xon|cG;ZB^F{-YXFcaP{dT8A8v;+>
zwfm0@=KbkoKO<x3KhIK9umDm+p}GeU9CrW3V*OxH5NOi}X^Bx!jF<%Wv*@fpr*F!O
zuk9H8D?1#f`!rE6M7GiC<nf8!=9Z^+j{t}G#>3KaO7ilu!|H5+Ia*ws7CxW;qFsZe
zio}NHL&?((mrk<53$i4V>VG~q8xx<9isk&iuiLL^eEW1RCg^recU=uiWG7y@O5XuA
z<38^9rsTuiX{LkXmpdC06S3S}I_8^arEZ*qukPR6J+qTsOo$Hd61ABgN>C6CUhRst
zcT*JfdSs^x>RI{m#Gi+A_tw!3&O<caY7ErIjWsC~ID+-F8|Xp@vPw@W=wE+jEMxSL
zLE`82ryKY-&5OK0Z4cs<?lQ^QQQa)-C^uF74P)ExHwac#`rUAzxx?u8efs5bJ#(7u
z#vG?#jQAzntqn;ZeT!wrQN~k`5Z7t*<4~d6-9K{M+-_?9KHGLZ7^*x;AosC=zMDQ{
z2cG@><LSXN<|%X|GqbdppDFgd4_VE(svK<h4TqiR(C2LkvO*mlNpyQXvigJU-OWjq
z=GhRn{T92uKA8C^jLr5G(z}DdjO2nohFdg$Rhv#saKEi!ot6r(xLB_(<vZQtJNytG
z;C6GFlbMEBB8ZFE99Q`eJv5uC7R9zA?7VjbsPrz?{2vvwL&O>Kv)w<0ZR2GkyR@r8
zGd*wRW^OC&U(}vG+TP=}+-+o`gfdIb*7gIrm7(C4x9<<R4*beL+k}6=(;%H{lJj}u
zEU!X}ueWb+`uk|BNZhc$XqUrKN0Q|LKh*8kNsWcZb4$Hz;bzr?vB85&i=gc<cjCgT
zReI!ZG5t-=DgE=+Qk-O}H<kMzs4PQxR`pR+;2a{Mb#Z)VDwkxL4l%$o8loQ9aqp?M
zLYh@|JRQEyjgmLq@4?fds0RtNgQe()s<XBlWDIkSFd~$PjrF#=!#|rp_#9O2+9^<U
z!QP*O6JHWeZ?X}1B*;V(ABZ_eH*ZB=p>7Ag_!e`B?wyek^=vMSlFT~0zC6ibJR7c9
zu5trgQtCm|v3?uDsd&T1;<()ndi0udZZhXt=s19~++JF8(UvzUCXRF>KUy|a?i=xN
zt@F(%f9>9<J*+4d&a`hn@NEf*3BQ&<YcOmb4kheHG2m5BZ82T^dFAOZP~F$RIBnC4
z;D3mItv~4;dQq9wBYWy0u1(QnWHWzp-Rk}66szUxb8ilhrKxG_2L{IMJpxI^vE+I^
zr%RjElRJDH<XM>CjB|llG^Xu=;MPdt^J_$BkC!h_{}@b1eYZZ|Q(FC+o-QIyJeex|
zT>kcLqw%cT>}GuS5I|-hf)fjR?B~7RLme67^%90V*MDB03y<|JGex}J`@+ql^nCs5
zb&}Op<#eeBPqO-h;2D0H1ej<hxp;N6?)2#orS3UT-kZ;U+%!14TX&$}lgnsq<6p_w
zSd;L6XmP{#pY9LJSvKzP|AoVM=7P{i2=V(XTO%rq$Gvelh7Q8Teyb=!p(=6e5aP|%
zLGW(3;MnE2&3C5t(Xk4=3NDzY%dGh$Cgb<ZxCdeuyjh?DlimdhK|h<%P+o>5z#oGW
zwE%{B?eu$0?kdbSg2!}P>_YF{!uJo=TsjQ?Cj}G}rn&z1e7NB-85SJ~S&@9#68EPl
z&5%O+SqN;Mw%J!0o{~WOl)&9mE-R(Y@|QQ5p{+yGLrzp%?PiTxH;t$496}f1<3Z?o
zc~}xKU!jyNai&qqh{6P!jX#vvC?Z=b_)eyBc+QNc=MH(>dagqjrpNM#yr1jLR9QZK
z3Sp7a4hT0n7PS%e|3WK%>v;5(;%+M~-KXTX?iXKdWLyH?#n2_?Ci!NE@>@_EJe=H6
zCkeRYnn_;eT=$vMJ9I%Ba?7)-{qZ$7+sf}|4@EzvB78RDgo%Z*rV=$|nUsB%*xT2q
zG5Rnb8(S<!`5@9u<gV?c?a+-oJ`|%JG*0!qZkJ_K)DTCMY!Bszw;pTOAnEGpaJE8S
z2R!Z2k09EuB&llQ#dYkn6Na=t6lu!Be{%@`+-%ETzRG2`OVRGQ`WqxM<~R>EP0BYU
zs((4tvo|(s_(>gUQlEMck;9VBoyIIJQK6E5mL@)ug8w|_=&YkpJXC(FZBa1+yH#JZ
z@nqKm5-sEV;Ra8HdQqq4#p74ErVt<JdE8vm1}P3r1<+N+3}*4y)|*4qC07i~>m;ki
z4W0q}I869!g$yV(J1L11GISMl7MMi(!gnT%Ou_%cWtZVri;-9*`H9tDAoyC#^H07z
zx8_?i9U6s2vT-2O^}BQ(!r1m9b_P?oCtmAo0^hW9*ko+a)B1fpc799^Y|Bb?lq2L)
zu4<O$!M8|*SzDiJpEC*+O?Ah^Z-eb_x@cpa;-=f$8N!CG9J0EoRb^=Ze1O@cX=v<J
z%?+td8{P8gtqrqNp%m?$ufDddf$zA4AU^KrGlrYeJmnM*-4jAD_eLfzSpT+mO%B`^
z9(mP$()w9hjbgMr9JOhHtG?y=Fq7%9kM(Q#7gm2lJ0{{Fi>xZt`>Q3Cr9lqDK-N1m
z)HyB4v+pcMBPVgkm??c=qZ4!)`>aRzfi}C;%KO!>6KmQYJ1R@Gl-rhf(t|2!v+Xwu
zBiC!#s!tLQAIKDLOKGu(E)0Ij5#Uz8##v?VFgzqP#m+zF$QAV+tYQdh*L$B}HSF-S
z-xl~agro_swo7o@_%idkP^f2z&v>k?&DACD!!;rGuK^*Nv|WDti-NER=!2)s1GGK^
zw4OAtZJ**V&oxO{bSW1)C^$cHY7X#$KPY-SLhZRVvw9<i?CiDX7WIdlW4NBh?MQr7
z>pPk4b>ROK(tPkS8`&EzB_zYzI9I=lJA@S9y{dmG)^m7yIm0Nwdq?R9^88j6h6VTh
z=M7N915Sxlv)yL~<*~GxDz{>0$Re&rQI(aKp_D<ikPeX#;v*+1f@#q@&y;^(4KXWD
zyeU`8sZpt;(=cAqNCP2@#-?Y;AVvFrRev9R_$a$(Y(@JZJgMx4to$?I0UED=dNm&^
zm>RwBx>T+d_kG9N=ACSPl__KU7QUpD5|A?0E`M!bkEbIqUN%hIx6WyiE#BkzU(_s1
z(5!;`*qDd!T=N~jWYhfOOdYkC%>#a{fu|IL(00WtZh&NQ;*>{T-)YYmqRBkJ?s!r8
z$yaPM#=<7;z>ck~`aoB4FEI<#8WRC|ypsUqDfGoXx%$I!yXnIbpe!|JPvD33xI?F(
zd?%N-3qDw*ZQQe58%nDDN)5PPJwfYjesINrH|~25mc{BQNj%;{>*$wSa-4A939`xj
zJ}J2e7-%Ft<=zRbp~Df$Nl1vqH~JqO|JR&qXMx5<|K;)i1^wg4+&^WV6>9X)5Jay<
z_tw&&y|LZ#AxYT}pRapv>p%A)qf-CPy(s`>7dQQ|&_cZp+U;wzfDvlPcXVX|{k<2u
z=gT?}6F3O4_l_`Qh3mkuJh(9oH%zv)w9I9_ckkT`HMLA&nq5bMgU?5TFVDrharl$%
z&)bGX9_WR$lT(ostP}|?Bwn5Fnp9U*eC<1SEv#Nl!2!c+GY$w<%q%J@nisWqaL5EG
z71Gdm+h4wr4_4af52DewdrbSNR(CfPG6~GZ#npc}lqHvR@fS>-cl;L#p<`euknPSW
zHY}F{5(fJq8vqAuu-H&?@bYrQ9)--iyy{KjV<UK4S@A$le<6a-%(rZ~GNYn;*Ut}a
z1_8h#6Ofw90I<uTDB;aTY+T%vNJgD?#p7B)#4RH!DLEL;BI+49RZjfUUxF&?2IT6a
z!-x`MM@L@P-ub!zRTH$#yer}iXtZhD?_AW+0N8~eRj^)<8Y=MQ7`98RlLwSJbpc1~
zT4iC4$yHp#KEXt&bT<rt{Bp}(%WHiAV`~4l&p9x#@k@E|$H>Sd2PP(_fS5ocK(mRh
zbeMm~75G=R5qJXq8G!D{PAhg>zfikCJSd-)jm;Suj7uCVWE}(`rZg#qM4u$^0y+;0
zL>>3Fo{g!fy?CLQ&8IgL&$sY)_mM?;XQw+tF_Iy617y3SrPHcu2TQ|uM&_?Qvmk`q
z;|riK(f|-^P3q*%uDGmh!rT_1x#x$uwj}!mU7Tv|InNF|)D%SGc29Tb5Ut|~9ikwn
z4iERof0CWeA1WLhljOfDwRhW7oiqZAiyTJ*YR`GYn))jxF|n^(N{c`^sYHsa)EWKi
z`cSq4Le%eFq(mXZ52*3FM*v*b<NnzLg2@%WV++@;|2BJZ3<`K2sO`<wS||o!A8!AJ
zwgi`(HRaS^VAs4RN6*i(Yt910hx43UWfqU4E43uo>dVd-n!gc%^q!3Fc;qX!lf3Ov
z^7Zg?W7^rj{S5_$bsmI)7~BeKesXthjO*%rHGZBiHhZ*{tI#)H!^Q=+S7=yfI)qD?
zIld!`%m23KsiUopuGLYhX_b3A2Ow3l6IK=vkhLD~-;15G9mO?MK(t`vWnB#cyC~TH
z4?ME><ZFifETGwXbi#2MSp~v}2Mn?=*~JK!U)F5T&%2a)1u4nk&E)Y#I72Xy913%b
z@9d0Vf74>Bs$nNpI4}(B!(W}wxy$9$jY4PtF{3yvp|NQFd?r84)>jTcV{(6x)05r>
z%TrFfzFFOs2ygiqnoZ%!WKQWx`Gj;L>SxOmFDuiBsA1*P`rbS;1Zksz7-sUE*8;}W
zWqJB5>FDjD-wJ^Qn<8N1O@gSK>|*ApEqKlvzD2v#{xlfy-<XeMwu~OXBK#@R;TWPV
zc*&MP{w<7J<+5@eKy3p4lIHX7GjgqCtxZGFy07+M?<Mhi9ryw{+vB3(LdxA|aj@gf
z*Kg_8*>J{Enu}emxl?JPrVR-!93H^{i89R8T)E7YnGJHetlEYXF*I!kawn9g4B^2?
z>#j!tMA&TkifvO+Mr_0nW2NHbs*o`DN)ZRWx_qQVhHnlYhJ)c!nd%<Qo|jF2`vsLF
zQfVS)ee!R|WBA+jbA80q=E!~llC~UR^BSauKu}K^9l4YOzn(~a6pqO?L==c3a|z=n
zLBSVwU%S^14%CN;E1k3fq!S-ADY0bSySpcHwNovo$We0*M9TnQpTP#x$yjR}V@vx>
zQ386kTc;?#CS-nIZ!S!P<e7=47Ds=s<NO#~4<>T<o)qrVbXNV`6r5Bh;RG8ga8JP}
zU#Xew`k{ONzTTrHo-kn+kp!iLZ6-@?V);=iGFM9{$Hg_5<nLgnjAu}fjZbcT<xlOl
zZvT`zUxPgf5VNOAdEDF}D&!JIC<l8XVxj<}kD4!#9IFZ?q<FyY?8JO3{#$G~^jGOb
z_lw5gzpe`4EJhsaPVogko!ge2nPW84DHns8Q<(j7nnX2Ej*0&13w&)`^I;is%k_wF
zBx!M_KC(6>*!L7dWer*1ns|E^VJf}*TltX@-&z6WvdrRVn6y-mG667&@M_8=j}e9A
z%qm!=p#?n1L&$2^ps9A|Gs604L399=yrU~Da8~S{&D1rY%X@I?vg6%HBQx`Edy^Ki
zG8sjMR}Nz~ilcAwTR$1!k;@mio=*6#x7{0-{ZWZP$$l^Pc0Ip{qF#RxPG(XN67c8i
zN%d64cjX~#t1qNrsytFR3Gtt8FX-*46%)%PAHNysc=ucU=UjQI$FCDr)98<BinF2f
zANX~^u!morg_yLAdNj7*aMzDabW$cbd#Nap$xT(#IRV&K^x8m&h<Q_lsp6zik~Hmi
zX$M@jqp^2;UaouPCK;)L87*0^gO5!fGit@&s?me|r;)!&*ud`}ico>>?J4(LvZ!8K
zc5dpQ_!58Rh2M{-jcS<D*6ode^y}jzxJf=qP{j4<TI{yuot~7I<ZXK@7E9y)uIs?>
zoix46qGt6_wxtm%awneF)T45nUkg<R-kd|J{Iv25oS@*ZEYD~avPlt#fk*45C54qn
z7l-5Hm06%0V%oxJyYGhvwR(^J%1HEUx!)BJk|8{eKgqlkg?y^jCRRp?$yC&k4nXlV
zx|Vjy?h};fn-2K9)Bi{l02J9P!0ULwmAF3anoDtzM>IoT2JOil*F}v{cbJtEolwPw
z#`1-pW&+%0bqSg7Az7X?*VHXYG==*53K{Ufpdclsq`8{f++<&U1G_}{;SVUutBX4t
zrx#gnt;9RDI5_LlmSTl?LYjgJ07&*jw3Uv*Yp<a;&sZl+?rKch?3NDURd!*3na$vo
z|L|;{8<e`3dt!RT&t;r&47wqD^n2j5fS~Fw3a^eq#p}!Uo%>O5U*b?zaZ7q~W`=Xm
zk(27%1yx4Hv;7zX_^Kgi+i?iX+7ctzZZrW))+c)KEp^4hu$Ow^G1T_#+sW@$hq|J;
z{y(xX+~^B8-p*R>H2OcE`^t_YF9Bzh%s#P<ja#mH?xF5LXQcm#SRX6I%~SO`DsIDL
zc=pIr>D8hN=ht1qgZxtdSC__aNzj!jE}q-d0+cZhHou<0eBszQGDL4Dh1D&I<?*PV
zp($Hi51B*6&=aa3DEi5FDw`Ce%#-p_>L}a$9Q%gcX=x3-!c4J>1s4yVrjwX(A3f-+
z$i&vjRwXzqL}&G;^?!c;YUCsH^(j)b$$b{l&l=Iv99&!`q-fsY3TrD0_Swb{xBN@U
zpL3CaA-Necxjp~O-ioS&**=<MDt01OjF#9L&2sd67MhI};1hHxq(r<u?=Xa77MuLQ
zYe&3OQ`Uj}#u;WZQc_=8{wVml5vkEzcH+O-D5FgyJZPqmfo%r&npmV5_iGKca<Tz8
zb&6XHM!O1~^S{oHePqL!>+xKddi7;aTaq^M@@QD1p;nqqP^IHVe&e^>H+s|aCC0Zm
zZNy#7rnp8*Cm4$7irc!b#?z><;WS;Y9mk<SMVh_3T<IGdwUa-ov}f&MT!T7?sX2)7
z&-TwJHNHf?XkCArTS|)9cBBv(ggKwI0&A{kw$QEFfLv~Sqm?+DFq9uqXE*X#`SsFx
zHlNpfew4R>MgQoon_lgW;z$pxxHm)qy?3x2Gn7_<PeSt+?<n_o1=+QZm;*Cg|57P&
z3(Ux=IFRdiU}-G#;>AaOHqkYZ%TPJQ6!l{+f_9@Cx#$1^rZV$5aB9fHdF5XT@Xw|z
zYnO44<w9-?wsWB4j@G6T-OJSq4*_F?c%+RYtKn$5N_sLPPHsB_l$#}eHaP@LoM?R0
zq{bXV`-V>IAyz@P9q8$L1kf5n`{Hlg$+~eHZE$I;G*_{iSIqYd48tdh<6AY~udK5M
z2R%Gi&ATD4AU^#*W1-_dYo=n6W0J{rZi2F6z?8q;V$LhJxTxgQ_hrBeliK0SQM~_e
zk0e2kzy%$S6Ze2>Bz3$mlXutqN}5Cq&C8uq;h3RL_W~X?tXx8l(0`<rF#1GSCA)R*
zc~S1NQc~P;NQh!|M7iC`&huty`J2Lug!*x3YR_m>QqOuz6J<B6lGHbZ!Zn*k)*hA5
z5&z6m))-$IiI|W$9a5E+;W&FlZ4WG4jA=iGEJe_|5wssw+%rb**_+=bK}68A7mX$H
z3E5H#&4!wy9A?mox-8A95lxEVWk~L8VW9Lbjntzf+#cO{O`EkHLo>CYN$aVQupNe#
zW{zpsZg=2rv)(_gz>{1%coPzAhg6PQV;C6;KFJQ1V2E}H=US^sGGMA%xv*}brd(t#
z-eN49Y7@T~bil^+=whED<^Tfo<B=vZ_rJlGtUd7s3c?}5n_zB3PP_|!LX+xip`*^0
zpYuEt-J{y(A<Zqpls&BlNYmhq6Pev0;3P{?rdUCjd_bsmclDRP#n!qK#*fT(SUp*{
z&8QWbV=8^DCRPAvwK%TtC25wvAvM{0j5=M4n_TM`+*c0ZrA+1o51lv(kQam8$sceK
zo?ocLox^=zweHgQAWB|a`ttp1SpJ(Dl!Q#L>fLRNeX2D7q+&+ekJR~XH9NWIs%GXy
zT5XBG*#2FM4^T(9@iV8@p$~!Yqkp;CSpuhJsd+%aeHXpoih<ju!rH_YCwCg$BbPqq
z&%*VLGM0CW&W%2(%TD3WK;g$tS`mj<3^G#<s;VZqlY2U|H=l-<>g8rD1!;Myg*Jbv
zB(=F!#U0|XPfl^?FsNndnPWw|V|!?ngU|cYW4e`z8~cGt$-QIfb-U1{G|K0*+oZi)
z%|Hk%FfqO&BV+btD(Qs<2J)KN8@~zPYP#;y5a{@4Yt)*wn3;pAj#94~ue<)P9}apB
zvvMgh3NCQ|Fva(|zb{Ryk|iyLtfsTRSx8;(-Br2KV^N2n<UyUaXx}~eIU4k_1XSq#
zgx-Q1j|Hu6=q507NVtrsTy6~GHhqzH&O0HjHsdQg-%moC-K0#_Y}jI9#FGT>esFH3
z2j>vUIRGhc40@6N8YD&3)!iWHXTt`nS^5MOQ9E-S{38Qv;><lB(>YGNew^)%Vd-%y
z)9m^aNQfU&UaVbjs5Lb>KLh)}2geI$&dbNYYI1vf!hghbKn9zj@10%^d?UOXa$Be_
zc)7T^b3OJRet4qT&=c%@!o{eC99kW`OFqk;!id05;eh#ggEfnfPf1xJW8<1vQ=<`h
zR+Y8Bl~|Z5MS_suPV=Tjt<<_-76fgLW2BgQJyAE~%}wQJ$+Z*^CAYaeGsU)1(=g{R
zgE6(`am#OYe8d@zR~yEAs7EsPUDO9i`*d@Cb|al?WwsmWL+}$<_eEF)2vjkGPx}PU
z6hvO)!+j?1)*i};)~8js3}r)E&gKzhJ(OLfxY@N5ryBBrSi{ouGScO)>_e+TchZ2$
zgw;^<l_HC9UCZLz(~`>Of^<K3Jn4DEx>3w(O!0k2LZswvRhzgO2E8ZQ*Y`#xddc?g
z4cor60{X?2afq<_sJ9j$?JF%<6O<~U{B<3fT!QUC_5ohBqxtVDN5Mjt%<{<i#nnug
z`*x+b$`>N%$=33Or-C;1z*anoWmmSLRh!1sAzvvQLKro$gX1#mO#Z2ne~txdFBXnR
zzMkWgBWUk_>V7K1v2QXR5|3<NP<9j7V<{71en&_bQGS}fkVyS^kz9(|Tp0?SPvN|T
zmHCjJrglas;jWSoQk28YPSETt`!^KL*=^NzKQ1?2+hrz`<M*)tFl3O*gPOf%%xlHp
z`(~pqXxg43j=#^EpY7f0N2MJPkc^D-uCq0=5}7@`B2XuQg;f+Tj2CarXNITrBxuQn
zMpgN2!DcDi%o|^GUKOxu9PZAcz~e=6rp<4WZQArsO5?`MUH*+8-;JI^${;RpCvGON
zJ;0~aGe>(n8J1B|@)CqBH})6FNhaJ26AQ9h8?o~iP@~r-n7MWLz`2m3H2O!n6lq<E
zs;x*oyb5pH`YZDWAvb0YD^`MNXegN<#E?6|n^Z05-}87z_BGnB76x~HKnm#$>m5^}
z!w?KHB<oKgn}4Xw8H>QsL7!2b+7=I6PON1eZb+7Na%)378Cp(1prB1J;kUKzJ$g2t
z(iGb`{S0x1wWA7OS$XL8_soZrc1vCV$XHGo<0ztrVQC?kOS^ScTPL=duUfqoZQf^W
zYT$COR-8Ur|KhV6*KXnPg#Vh=Kf`AY)nduDM<t<+r%di{A|cIZfA5J;>RAqxBBI7D
zrL6o}{i*U$T3Nh$<kLD~w_j(<8d4`k$}(T4O>3pM6!j>0o^^eXS3W5{;zb~{d{U{i
zp9BR^Tuo$%h^Il-AIDdFYVxky3n*MLeA54LdP=otW|2NuNHDR~8fV@UG%UMh>COkt
zA*09ZvqDJGd|rx9lM%R~Y}nCC0l2b5j#t;B_U@}RxX5P3-P>Fv`hXYwgDIoCZ5`Sq
z2nmxV;4nAO@s0K^kHDD0vIuhor&3_nGd~w=gdM%haS&+5+e+?@&g!41@5pU~6(M*b
zcWEQa&{up1C8bX6?^Jg&l(ID`-ZjOCPIQ4z`m1l*Qn4qDXdlyleXuTL#&}xrIE${6
zq!-yIt5R}Rl6*Myn|b#w61OJ_V==z7zq=ybq<#??y-9s{txQMEI0_4=K&K;FKg&s8
zL%zAGlQNx4s=b11#KJ*oM1+@v7h$uIeyyEAayb*erBB&Gnu5r@nO{x&dY8|cAe8%t
zQ>>u)YB$ej?XQmGH)2t}L~&AVn#9brInB?7jEz5(K>bx!_qIV(I<wu8tArBTJ3SK<
z4F_U%jrYb(dmDB}Kt6eND=j2)75UX5f6QosDfPV!g&5U}!ROiw<4IQ&v(DyZSF<yU
zo7#Euc$3C1{x$=*Rnmjv;z}_Eg*2IF?=!KYtGC_6qm5%o%1KJ<<pAXPABLlc1Xcl;
z^Ivx?-m+2R(jr9}3j$>js1%1V_9kPYg{@q(T6pD8ks4{8sB+LO@=keHvMQI?r@@cI
zuIl5paQ`mV|7llVK)W(mnfYLy$WLC~*6_U7w!qVwl3X{dYC84%PdZ1Y+6LaQr@DM>
zOsNgbucL3Dqk1j#EWgxLyl|9g_Asv0b(GxAGt*4wPRb0W?4mGb?wbnW@#XM8HdaUo
zV`=~Gi5cx|es63Pay~HN?dAuIk2TKfH%8)P{h41(_4Yf2bpFm|zw@pJ4%&c#PoB_H
zJ+5mAgb9Yu^X3xrw3ql9_b8YpY&yTaWLrB;?@Ue|8;kSFG&a}lrxDGKm|O|dJDeE&
zN<z9tp)G`FOzebnE|4H9ul*v4jA(fKo!%<JK&HD!hB-DAAs3C&#6I8S>cOD`N2XSW
z5{s|4%7~k4*vj^wu0L8xG)cc8=m1A5CX9iwg6r$X>V*Aa0_tPP)h@F!9s}zuB~IW;
zEcd8EQ<28~Cokmz5TYfbxvQMe(d@8yf`sNO1^*zD>*F3bHIk||&fdQ3UUn!KZJ(Vv
zXme#BvAZD^C-vHEWTVE6biJB&0A1jct3mw5cH?BC?ktItLw4?AbUE>JIWYxf%6VN1
zd7|3L%2wvg#U<@HNm<A{fxpMJCv?}w&UA)?qZeYh;Ph7^Ax%Gd^H<iaDX6UhA3LVp
z^iy<jP!Lb4O37^iCCopW9ciHM_pajCV}#?1;?}9;F=sJ!vl9z<UeGoIhnH&}o3o=1
z8f@d21q;wu<DOow=VA7HyweBx1^>VHouf(#sOr6HmpL&H%wO$wD$7!s^F|}*IMig+
zmBT_HF3Gmx&k2*x#fxi{b+1Uh!k{J_-R7eU|8QZoDXYcqTJowe{Zw%v$@rwjy-k^v
z-cGxzrAHyQr1hSc|62|9)ID^W%uL0Nj2(1+k_tjon-u-rCxoWwgml;4YDBcAkmc@(
z%)1~b$!MNyB%dcFwvO-#Z$78uQ&w9)7e6=4Z4fhRE&%cvnI%A#%y!Y=>iz=pZvcwB
zE=7`k7V>4uuN}pm^&F*xF{v?8X7KJ)bzo-5!}q<7=`e&}xE9{6=t!Y#I<MLq+q?GI
z@WhpiO|ahi#7p#Tg*?CEL|o?%;0()Zv=#Q6*%U{nG#ly}9Xv7LaL{z<z(ZYT*|;@L
zqv%yI3Y$2aIIm*0{_-O)LN9$hWpdui#W#5ZHGAut0pwla!c}s4O<O9KzZey2pRM{X
z=<h3q-eDbBCd)fQAkcNma{E43B#GQ{JJ!j~y{dPUv$K<T&bX~Xzz1<pamA4DDea9o
zie_w8?~2IQGL9LHz!XU3#3Z|moP*d~$J9->TPe5fy%g%=1zjIA5`NzuV?0T3Tskiz
zdK?-B4A_YnOc5urn+guYIT|ORtPLlc$4wHBg0Am0N1{^u+?%7_y`GA;U2mMw!F8PJ
zXOb#s-dj}#C!`))ad@gd<@)I{Vc2rQg}EqVho-^YmG^4$Lg!O+jX>r;3)Ld(bLYD8
zWLv{tO*I$hO-z;`0k$;B0H*KImEtsqhqF^MyT3}jo$HT_Z8(T;;BUKUMO|)pxDL0@
zQN4+8To-Vj;eK4$G`SwFXBgrp>EyMPXOkK84)X&NVBD|&pisB}r;ht`MU2{iYU>Ed
zFmWhfjwDBrWnQB<N>T@QskTX4UbQ4+O3$ebTP@p_I>s9LbaFpj`g?&T%7pSl>?y3v
zZ=5Bof-YdzqT;>dgI(UuB{z;Rnfig+%Fe;xwxsY3`Bc6mYpdY;=5wsEh}$b|odjg(
zs|>2>tL4-}(9w>u+}XVKKYUP+0@r0Mw!TyO28yhZeMO<XKIi)C+ir%yYnmu5BH}x=
zj4?;6El<&s<x?HlR1Rd0toU?d5uj2$Cgk#PoLq=M`pSaE!$xf;nO2OHuB|u1-p#Eb
z{^8g9zqtz8ou%^8?sNi@#Ys{w?CnojxGHSs=UewpPXh7JQy+@%kua(M%Ji@guIk{=
ze9onaSS6K${Mcg-E~BaWb@G_s_Y6#*U)uVUEjmj&0TvXL&V<g>USsx0yb(4B6FOel
zD4C6Sk~@0a%)IGpy!n&uaR3X6Qf7bOeGNmuN6P7gndf#kl2{9cJL>!ui5Wtj!l*z2
zh{s%agmjUY>5~__scxfI0X`1byfF%$uHPmWYm7yEEVzmYMr?-f%|sWshLbzLl6iDh
z2MU%$_2w#1c`_LxH3ZX>49?tYmC;rujZsdEY}a>2&riZmJ@`<kr{l1#h8yLlk~Yr*
zjC@@EF_WCfO5HyM)L4l_f897%e_8xY+um9z`;}IM$>sQ!1Kn!sYR%PDo>jDF#}#qC
zR2|_g6Fyq=o{UnU+tn=W`gAlt*A1I6ysFJ1L9B%_<_A$4uGzj9L^ZgAgicDl9K|)$
zSr*nT>BNcmT0^p4Op<%q@}rbRTCsoC!No6b`|Qb>XYW`0A6h)FcuBc+7Ym@Jg`xA@
zPul2BbC>)=UR&JR)Uq_^HJVEIkFu+><sju&VC@TMVaEOnFwX7sNU<9g9lq<RBUV@{
z#5>DGhj(hPYN+^4a&1yww~eu~MnO<hZe1Hcn`Kudbd9;B>Y!(sZ15HN&>WvbbWTm@
zS=D9$4YpqQ_NT{dz-7zka3-z%i(6$)%CIpe<U>vJA6I*bE(hg)*jr`$v1JG(h2c(a
ziWdAd$AeoN*VMrHSfkWXONI}b1$t~CgBfXfBP!2Qin*3RVV4J&wH&?w)_aI+gD5ag
zMxm_zz>TMNXX1k!-P`wTG+m)LH+7-P`K5t0eU4*1Tz0P#(Vnm1lVnP-GH1deIQP6W
z<5ohr?>0tn+vEaXNA{v1#;%G=2vmMRtsGotfuqwLH3JoZgphc+^RGKE-r`@%X{o~9
zxLEL!_%TECQlx&{M<_Qkwf|)IM8bZOw$Elh8R}R<zj0-9F&^kK2Ofjs!zy!ieyQ@S
z;l6R=NSth5rl%O9q~UecxGmM1u`B2#=*@b(s9cWJZ1=*}Y5tqiu;7{~>DLTi@g8LN
zQ@$&Ga?sL)x-K7GPc1W95KSH|uF((m@NoI%3=^yGZ3-v*ffZlx`xs^(LvN>V-VMtZ
z)tJGc6@C0tO;%gqnc@=ynYA<!C$xSnvqu&pFATx2pasHx9$)ZzxgfllYwXKaeXs=V
zE0?2nwPTrh+C;5N^EYQXnAw6flaBF!up?y*oDiF)M31JbdpVHb(PvA-HqXnW>-Ll<
zZd*uzSt*sbb;{X@RC7Rqm8?fbuSrPOXSs@D;<@$ruiFq2rRdZMHMUJQbKWDjr^4~h
z!ko-S3pd`i9D9Y7n?ijJ%dI=#QOEDCmX)*|cJ5w#A7uR47-@WtG3(~;=Z>xno=+!P
zJw{ujnL%GMk4WU$oGsl+%RzbTRJsq7ug0=@-wZ=9UW(f7U(IUoj++q2z~l6r#U{qG
z*KK_*;%dvs-DZbPT~w)l2hyxtcV9Sldzv@y7d&>Oe<bYZ{<*Uz(^~^VYBiG(ZL?VK
z;S@`#)e~^;@AFXE-&_A&t4FvZTrUyko-$N$l|sgwEEb)NqguvGFK|&vY0LS(K3?*j
zQw8dhH(hIq>$OIp4@LE3mnNa}AH&w>FLh-=TW?n&jEaOV!Gb8FYG~;{xdX+hvtc(q
z)R=PF2dbaF_Z-Q|!i-2}CVu@>ewa=(dBF=Car+>mu*2@Ec16p*|6=|6n%(JQ2IbR?
z{$iE4Mv~EIHEne(es9$qizZG@#{^g`H*3wMiW+|!7MbinDg}+r4=dWzj>MFo##SC~
z*a^LLL?A2NqMcPvV$(V4b{`p);F`j)DU5fRKcyJB6ABB|z=5ZFr{-m@?uCn6`d<H(
zPwtzT)o%${OB#eU*DG+Cf&t(4ES?yjhJpS9dRj+j!<fAbha%AhqgKiaV|+vFWaPGQ
zi;ScQy2kwH+L-hc_~LARoioljq_%0W&@&~lsw~Yz@7T;D^JJ^~%AvMoYpZYn2tzSh
zyx-&VdCtB0q@NA`k*tN^^73_<g}eBe(IsFxj^w)8@}sJEJGAEc{QX_#`+(z<7;S(|
zJK69n5e{&HO(KtGgzMC`D=L~0Q}ZhkCS4gh*TE;GXp`?Y`BhD~#k%INZ(M9A)6(Xj
zwY{eA%Al{Lm-P2tY(8|`!DgRv!^P({#B$nO#0Se+2A)p`P}bx{+VmIQ<IEEEa;twN
zzHziW^>O`b<=cqsPQ#wVKW$w@98zA99)t8>H1Yy$T1J46JsLCoG}Qdg`C2G@a1#eZ
z2cq<~tW0jyDrK`4mV2IT&o1P`rBIawr!B~d+YKl4VQ;jt^RUI7zRweP3f?+XZgy)}
z$ip_xZQETkgHKir#vxG!&MrqjYjI2a*A&V_q{mN9pIw@p+BAwrLfaM`y+Hj78!U!<
z+LXs!d(P6>by`B+-JwaYDMHs=w!pKZ(_dskoIQ;G*A<L=&gctQ5u+>`1H)-)G_w#X
zVk1ph@bWqBkE93lBGjAwq0P!BKk4_d37T@>6-DP+dy-mp-gcy=>OoPXB8s>r23z9N
zZm18=cYk$CYj8C~*YfPKE~Fw<R?Oka8FxC={eg=<U6<0&2~6tAUeU|shqtd$`o0a_
zdintMPIucrXH#ZTdrB00fw(h$qzv+WUy`mE*v!h#>I@R1ld>3f_P7~-<g8JzG!~{l
z)9xDPOR-lXaY-3@i-hiT8aX^?vglqLH~2{o><3>TOVS(HL$B(Z1nsKxjJPoqb&IUZ
z^G7O(!uom;MS^?Fk1s23dLi(i9!A<Q{z7naWMu<Sg>L{WH2`Aja^E&83c-DE)_1e?
zbH2MRv)DJkTCQs;d40!>n|eSMqh20{VcX!1mm&Xy*=}s5e?qIl*+#k&=jqkVR<Sqq
zYOy83)cEt8VE%SLDs1@?P0!d&2Q5usXuyYKUPzZUGKD83Sa2ey=0E@H8s&d3=ZF8^
z9p#s6d{1tkjziNSEdEFN?*+dKW6jKE@98&sDJ=>r{)+<cPhzHCXrvbi`&VT<q^0mS
zl|1Y>t4bDyrn{zsTAistg`(h>%txhkKvfsn=ij*=PL`+q_{P7Nws=F!ebRucKpEgG
zlq?_GFD<>66iY;|Oz(%S_59`%#*Ee<M=)8eOC*Rw0#k-`vjiux!k$(%+{C}a?6}DP
zdn4t?6}8uQl(<ncvve_>&QuKSZd8$scKxzb$vc9`+S%i@*(yO=4V+9W7I%EI%;oS|
zPy@za_UVo?@@d@p1K_Ry-*2u|-nK}JwSynp`vZaP;1tdkP30V+HS(~QY{Mpf;ksmP
z(`Az@VMJ+gW)SfA{rZkV#gO2_w_;eD|NkbsmJYY46_k-Xk|6&jbu1e=Luj>EFQ-+-
zwJEqmW{#w{b$;qvVWc7pxWx@Q*gA6yjwQhk)@gJw{`Won_$#PG6gdJ?OIFEyb(&c<
zQV%K6+qf7;diwmMj<GLJm<?U|E?pzdZf22uJ`j+RnaX)-+Q%5&=myk1Y^ubKc?x2t
zZgCymqpA~qonH>aP<Y(Q!aU|+!8|&%RCbuKfi1xOIkq_Ar$!G(ZVc*S`B4LMYozEm
zGv}=T{ho&N+RCW01!yj0a-0miCTLZ4)gd$Q*h?7hvBAQ1m(_(qhfZdd`s@kyE!ovo
z9SfFBL_F<a(@go`hA1XF=$2+Y=iPU41=|d9vb={E2XgHfO**uLk+_KU?G1OF5H^qE
zz=nTuJny!<zuc~9^k8xFUbpwIHQ9Lq#ev}ODjl3P_K`(aP@>S9yNr)^01588&uTod
zD*o?#J8dRw;_4a0@N4wS1CQLX8g{7}m>_A~r$AwFNd8B4uwxo&zjdHahRw6Ls7m;=
zTHYH--{Y_db+c!Zg=vk@O%HP_jA+J`9jkC17d-4eC-8?}^v{S6&LJq~xR~#DXGR?o
z2A7ZJGt8-PCD4`yWtRn{neUHnYmgmJ7<f)WfOk{wrNfla>PBVMJLV)r2q(cpUq{RS
zZ>j%V@jK>}zTkwyqfR!^D)o;H$c&#NVS$JJl_ex_OWDiC^P#G=Uy4p|pD?>-s;e#_
z0I8eWw*AYgy>BK9t&mfklo$D1xyF69bd~4w26npVB}oub!Ci>rS~LpPs(rGWuD@rw
z)?>Ezrg44mh;cA8*_UtXPGOmltp(Qmwl!WZ;cAbMBH`@&+m8RIQqKe`wnG)uJ2ShA
z1ZcV<Pl0^Hq>ERDV(BH58#-~)YJ8_M7m-v+?q~Jugu>3_3uP})>wMN(nUQ8K11yGO
zCf;GR{vB@u2=dT)l<_vLT+cciD8tl<fv>><hXfz-lj9<7-@rBZ2?2Y$UXI>B1K>jI
z@FY}28zbbt@f@nKh8UnY)vRuC9&tPagKqRk5K@t~UWeN*N5bv?tK%u<m|!gEDM<j=
zx97?K{mOkS$(lHOs9*4AgsQgMadT<%mD16bc#9X!#yzqGr3;}S(EP-~U{}r41H+=y
zk%_}+`@L0=&7~_Bad-d`fgtYKNTzXTMn^|VQMT&ve%;`LO5jpquMSC1w;4M#hESK-
zsK2%Zw+scL<zA)dOGr=LxKZGNR10y%=4fSb1HF=HYM5Gjg!^`k8r74h5{EeRaa&|S
zl995HIl`vZu5s_H)_l74-^)nEz><+9An@zaLFZ*@R+!~{0GfmB#>Q$(e9$ZG&9nDw
zx)RpazHl9GrNm$)itifyB{P<9?5MYIVf|0GWuUb;%xk@)ef=E$UNU_Na=JRT-t`?}
zFQPOaAd6_vQdFG3^hGOEoe+bFkh<`~1r;cfX!=#1F^S;`qxrA{H!Kr-o-9o+_%yKL
z$mD}3Y7udM3MIqV3xf7e<69Wes;U>GKZ@qp&M)N_o*0>K)@^y1{ZFI*pMDK4_;-<U
zc=?}ul3~9`!P@;R9n0P5L93SRcjF7F6%b!FANAy@i|}i|#w7?X`dL6-%#noAVD$>Z
zBSbzrA(2g;829K#E7Yxd87~1h)i!^GI=mPLOViTq=xD`C@r{Ok<70?LN2(I{34U@M
zhdR9VX+(&}H&zYCFGzJLS_mzA>nluML`X2~!Ohl3+^_|qW`YbP%t4;2GQMIeG}zm_
zM$UJ~zYGT;mq&-I-JsW>9{=|Wyi~lt6Ugn?*f;V;aK_F~_^!J<gEA<6UgJEG+|hC`
zZ)nE05}6i~6@SK_mT1R4j9kU=Xj>AxXAWIn!ZON8C$;Tf?rjcYY^Ws@xY)R~m9J`X
zt!JsiXnvc+D;+ZIAq7#?LBE;eayV%pp>Kv{#AqH-prhUQ&|?NjV(_ZpsXzk2Vr*sQ
z;Bby(mmAHJ_mMC>#vQQ?Hu<?H1^wOdesMX44%!dTSc@I)((AbM|9tq{*Dt-5LCKs0
z>@OX@#PjwyBpJr>egb8epg51c%g+1jj|RW9z%%^%MFgpnPA=8S{4F8SEla#auKVC1
zA6LeP`}$G(TAU0z6M7#4l^_N6pAj>K&>?0$%1|c>lOFh^V)-RFG(`x_U%vmRoEDvw
z6q!lOG9&}!5WS1zR7xxWgppcD_>*FL;21Pa&RI?@{y+Qp|8D2y`TuScp(17mSQ>ts
zva?6r7V3OI{d-1PC^=qs-!p#&LJO@8QTz4v4XRc5rd?`CH|YEr9xfP;=i@q5eW0y@
zo4q`GFJiGls?B`%UF}u{U)miI`l$D0jTj_5*Q|+AU$Xr`AZ}ddU5a7;*l}THFp`YP
zWpu4S`d^)}f<0Djy#P}^TMlrF>E{<mEW#}?A~FDneSQRxI4RaTA!`n#K%`Edy}!RK
z<oh<#{{2W1I2xnf7TicX;`F_)s?ep|V!q|$=#TO2&&$hSg85beEt(T~zM}RvYA6Az
zB(oNDu+*-|yKvLk=sZK`>9?`XpJ&u#X2qfbsxOKg^sBOWZ#w;dQ^}6>zs)}0`%Je`
zbO+)6P6~Fk-bC?d|CZ5({m@_Uz|Z;yaRuKQBgg(m4$%@XR7khB6t246S247(kD2ip
zHl<K}7+PU38v02xYbBl+?wxv2Of#RP5#Y6oF+CE13}q6G<Wtu0m`b{{dh_6()FT~?
zQAc^Pw((1y^s7Wh9|QQIq=PmeEiPiGstTa?QdnT3lW!$}gHCG@KHI*3;Fk`b#-wny
zICj^r?rw>g4=5H<b7?NnvETffJs(2`muv#^nzQwN+yPfVTX=Uo*M@Y(KMSD8Iu56W
z8w%*4Qy2V?1&XD;PmV!sw+X9&*Rj)s7BEWq@Txl=GjK(*^FM>@zgx7$^H3!c^a4ka
zY|6ZL*^fvGzQoQTP-v|?Iyh-5qqr~qI5rEJ&gAEBbTpKNSa<a_W_?*Ph$X0f-cUT`
z>(z?r?;Xe#9qjgQ{M<%q5A!sU%PDJ0Z3}uxASiNV%ccpfg#;@ak7Rp^44Vvt(2+_k
zqxC*zpvX%@h0}yiFBB5ZkR03<dJeF*GXXA~1IhP)#nF=C-~ensK!$b$c*!tE#4Bf+
zkE)RjYw}#6VA%yFR;PcN*nlD%;6<PMH4fQt_q+vzK#Q7MT6SXgv2`~CPqyAH`n$0t
zG-<3cga$A0Sn=22OxT~FkEGa&%y0&hu48k+upE3xasC}6Q4y=mQoq=8_F5f*Fs&Yd
zqmwEVYX7lWuqds2*pBjP{pR)mto5Cke|NPef;IQmO5v!CyL{cj`@l9&SXE!8o{264
zFC04z%&~bIg(c0JpheW^XT>$yKejlK-?1_>buH8VeB-#SQ1tAkgl>LyUp%`2^ZEDQ
z`ydL55&uAlMw(pInh&08B&fIQikEO~df#g9Px)!5a&F{FQgq)$@l@jec@&+QP(B$6
z^-4S!xYzQkI=fCnTzn=AOf<o!fiuhujiCGUh@_G>OmrSpxq|=k<l!n!&+x+~!svW+
zzyp(F4GXgwi~3)m0xszo3I?Yu=@zA_YJv0|_@MF?AUU_+R^oP0f&pA=Ph1A-*L}1%
zl|JjoNDcV0B6-@~VKIO<&(ky%9<AwsP^}+o>}dMWQ*o*N_o<|va=2u8qnDRLi|pa>
ztGydra%eRsSuULs#Z;jw%aCP_M-EAy7XhAzhZCn<i9Yiffe>~_u9uTu78Kqxkjmlh
z<AB()9D3S|sP7NxxzFrWAN1k{gSGj>WKpKgX*BB!;DPiu2+zVt9lny_OxT1JW<wd@
z1g|jEHnxhTT%Er?1P7xkZqo*LfP>ZjZkZzol=n7<&&BvQoBR)-QhAD9p6)iS1ML18
ziFutScj=*?p3rfsB%DZRx@5?u7eMis!P;-KflFMgZm@+(Tg5eAuEuW%c#-ueNm?fT
ze#+2;IDgFzGzy<ToeqLw5(n9S8z1@^NMMI6&yik-l89HX1@@z}A`9;t_j3Ma@|yir
zw6KCk|Id%9@}F&c)Yx|Kpa6eGQrur#A@CU850pYgAOj*&K`pWT{OZ{2J<dcH5ihG`
z2QnUjgsnftvlTP)$=sP@<f~8Zq<Dm+*mSPSXNg|!GY$S;=zetD0T$S+b0hu{2&UlZ
z`R0pn;lXad>5<Q#6KL-}Hvx1|3g((=AwvTu1&&u6uq!@t+_cf*_aC%r^o$-L2wtjv
zNz>Eh>qSv;xAPoz0?Q*`+Jx%kMrZv6UlLq@+8BaJ`dixuS+`bxS)Jr2t>3k~VvRSC
z$hQG6FSY;O=|aav4K5ezVCItaGfayB3=gP=13`g`i_l=ppT_s@X)EV&?y>7IMijuw
zF)g*oO8o~PT#2>h2=~4D&m>}fXH0jvbp-X)SW<}CSG1F(dQ~KYt**=)IS;vEb96#b
zC#umPLihp$y7P^lP}n)~3Pl_v@yg4RNE~v~VU(`AUH#E5!cMVX?cEJr)iYq{7JUNQ
zBayRcQ<hA{;Q|VSYTyEiNX>URE44%8?N_G%^mmoq*>`?bX!o)#_kK<qlV%lT($^v#
z*_Z3+-lQ3=j*VhrG&a#MYF{dKO+mg&JD_?N>yZj;TC2!OUExtbNqG^JK9Mr{fyq3W
zNgzAr{}A_HVNI>k7HEoqNZS@bdaxl~LFpxcfQkar1EDAa(t8gOM8qvpl%~=}I)q+A
z2|=ZW-g^-URa&SC?Jl?boV(A%eZH^BmzA~VU)KER7;_A7f1!C)S)yL#@#xyCla(P%
zs94)!U*>ebrwWk1RD@1sb^1#<tf%F8`?KExIZbWQq{aQsJx1L8d6n%Nxuid<JfA<~
zpw?bP#-1h>K(f~IFl)#2hqUEOKiNMIR~F0|j~9LAWpZ-PjPk-Hh&|9H+w(lRv4)&&
zv$S%lm%T{Prg#WY+~j}Q?#>z8D4J#j2JQ=_4=m!rO#J=A*u~6@hsy>ky#jHwiUF}@
z^=1or9ku1WFj?m2Fq#M~U+@;dMkmT%O#~ksXZ<-*;>~nt4tKvEveO>{O>b85YYLh?
zhFPIkgw>!zbC%f`K4v?wKWbpQ)=u{0E#mWh@*upC<X3DKyRJ}X;mTdKs;>jfJURYc
zoiwIX`bzX#_<`hf2l=OO*$<hN!iUEXY<Q<St43CR=aBl<1;zKzvAE!Oe~p$cG=|WO
zhM@#kz<vkR+fme~EPiwffAub)FSR0mVQ>0G7jrQ(a<O;YWB?rx&%Mv}7(9iX@w==m
zx6Zs~(Lr@DsjaQ;2*Pr`JCptgKI5Cri@@!LwQ~t^l<4c`?rC#Nid$5U9abT!#{e~7
z_mj<O8Rx_Ng-(X&DAX@S?Tbvs21XEUV0Kk!s}~6CCm=alAt^slyW*@1F5chZ(Oh$v
z8!n7#f4c{r)0_scjWNHm6Xc-B8}OQ$mfMS_$GYEyrj<T4OudO)f!E5tDoCPXjE#sq
znJZ@<?qR+uaB-M5pdkJ+*XoU&1r_LWwHik(!|MnQ={2>(L(@&R)WBm8&-$ett(7^-
zM-;e1YI{4f5Q%-#QKtJj(N6Ka7OGe@fMsbfP^eyqXD*ZxjdjR7GLz`rmY!A#yP;#7
zKw8jAZt^VL`%qLWSmgFLUzoU04EKwB{7jhD@H$3CA`X-O{`SJt4IW>)oV_>y7Iw7p
zoDN+306L=r#~}*>Xg+6poVfzyA>igSXbJ7gJ@$>>3zS#OLiTh#iA}#`PqNq!k~Bw*
zMkc=7$x_WTYrhy|kTUtGt_B|_Y&Q${!0}KIO+9`-+gR}y$!W&6h?`1GXFcAk%Qt0u
zz0igoj6dssOnn*31_Hn2dc1UBEqVyoe!+0G@fvLZR@NOjb$iCDBS@~?wjYd#tB10a
zA7*52uMDoz&-Z~7Ek;8kEjVMLcY3aYxS}D=WL+(-?s>Nynvt!hhbwe1j6^hWO`iC>
zu*dA&c~r@$CP$%4Xe(GKf4etB7tvA!&Im~;%?&?!x}72F0dbQ-iwz6<JJvp9<9@^u
zOa8UdmFJi-yK&dM5z!QPI_Pnb7ZPOE&)1mhB?1b#wQ901_t9kMICQ`qRfNw@$`(;I
z+@)Tms2sk|eHZe6{$dcUUQIWk&sHn98*Jq0Af8Fz{MLR@iQB_<A|rJyO4U^HiHNPO
zH}OkEsjMO{zU{RVJHcREQe<8q&H00`swUPeH=IFD`l%XaOm$SJ6sy^nlgP_KwVRR3
z@M5r2O?6uLhUb<qmD>i{L>^yFYO8gsY;Iv9mcKJ0e>N`<=`4*%zzLYW`sd^wc%7=F
zXu(d=pFx&x-u9*Qht-GTa=rACd>YbHJP$9PT9k<G8Xv6T0+&tv;I>=t+rml*RoKPH
z+r$8|;Txx|4qO|G-VuYqt2b5UZ`*WgZspq0A{6EL6k}Cl8ZafLA=<vMy(kJKsa?0M
z-kUqp9w{_MOz{`fiE-th)fQfdr5PDFJQw6W0E0Z-{b(9InLfNM?$7T2DyC&sJ#;$V
z;N32ljE})k-Qm7Rd<$mz0i^3sA#+&zE4sSsWhR;xl`k3bA|fMMG;f}rKl3SayEfp^
zpi%_FqP=#sW^mL^drybw0SDF4_j7lr{CAd~3_YGS;+Gf7!;PJt2kG^+o8C)FGeY@7
zM}WR8zBosJG}1R|?3p{<28IysF7LSkGLk)*q|Uw=9d7=U6=cwQDJ-0}SWlfJk%npA
zrd2q`!26<MsL3Y3sFiz_+H`!FL>a%frlYomu5ESJ{NMv@MS5U<mxQ}eJ7KxK5G68D
z%Q^-(1|0z0N-WdJk^VuUg>YnDd0~kTQj#!vIV~T#Qe@ib&u=*TV#Scy)%XZQ^JZvc
zhhdA*oHgNjKEbRxMIp0p#mVxirIdt33PuzoLrT-)*QIE_F25ZcznbSnNe;|QAq@<#
zT)7g+K)8REct^xGe`EFH?Au|2y+T4~mS;ZCN+I#@)IYhY0aZu(!gra3J)N#(Dw1(&
zK%1C?Ujf^F+<eIQFjB4{2RU{)N0uZmJcVjb&Lge0JCp%=cY;FKHC>bTMK^I`j}gFk
zZTe==RX}|cGE<i31+k64RaIa*9ylchd(J%0-R`qBSMf0<AE2{YOBKHfQJOjPrSVPz
zqk+TbIr`X^g!AM>LYyF3+|whU(<qlO0wD=L>!QuNJXPZ<2>y=jqT6w4e?p!1lgJLG
zeW8~x9}T$<^yIO%W-={(WoT`*h@e}d@_p;90#|`E>cpnrJzg0U<d0Cnc92lJb~ntk
zH3!``vP(zrJMcx9y%S`Lpfc$Ca&<V(nQdqStL>D?={P{!y8M7|=n2OSMKCYE!uAWz
zW=8MYxVKI{>b>56wj1c7v0zKCE}y%Z$KX04vlAq~X%pa81u^Q==CGq7l47hzOu_7j
z<H-r7Y$nDS=h37$t42*W-5>Ie`(_WeE@BlQ8Y(^s<WM1sMIJedU*YkjX`_65e^ugj
zALV1w6V@V1N~egaW2@caYMI0>)r?H~aZ-AT$I>d6I$&XESy!6J(tO$`nT6G3)qMpf
zuQ08Uo!A{gJ~u>|lOK!glt?I?rF_9unBR;#5#>%xXb}5kA~#}-s`p<M8CqDsw$OF?
zH1v0tRUCHdmf>g1<6n1=F2nZWHl^<*k6M{D??SJ}n37}njj@46MGA8osTY$19;$QR
zNZq=DAS5dA%py%0BPx>NjDAKn$sB>C`P?LVy40}SO3_Vq@<!TC2w;_Kj{?KoW{P9}
z40xb^1XEouNqcDq|NiW3me2`WnQxH=Z%3blF>gpwgo2SOE0VVCbQte&ZkIlY!vuEQ
znVN@1;TA+00SD5tg#OrUP%NHHLn1oXxgr|M;3SXceDxOU;^1e8@{BogZa9wbhit<_
z_sT1`z;LaUoQ?c5aVvD|1j%PIL)v3P<rYDQXcX)_i6`jjy;AhL1ml{FTUA=9>^TXo
znf!~<<EWg}gEh1Uoq^Tv7Exz*TFbont8;Kq9%7l<{#2`|A~=cTf$Q~N1DI*e--)`4
zKaD-)Y-MB1Q89}7>+FMkDVbc+A)URwB}mP+YYb>d-D{IIx9>>cF&+-=N_WC*71W`C
zoWkG-A>m;yt%R$};ClPGP89xnvsR*(t#9uG+{!cYwDl>QLDqT8tJ!8~&TD1S{d(qB
zN=0-~E(fC_C`pHr!<%V7D{M&jnq?ICSocARYcwX%xL=pa&u4l;2Rl$v<6JoTW$VE|
zl|01+$k5+18+*oOJka@y*mecr<ose(Ck18H$JIL@^tnK@4LVXk<54l}^$H~_J9$>K
z_EY&~>zOWvxzrCf4@=+i!KTlpZVg@^{=Jg(c?i!NSI-O)N}Q*)&5VLs&U#Eqfv9eP
z`oF&d%$GIjj`m><HD>iErbuW~et?ikUSoH|=}BU{-4@L?$PE8F6)F(H8y>1HogB_!
zJlIW#2fYN6FpFP6V;$SA_35DKMhNmH3V!B?(}YWk_ZTX3N?WCZ6Z*hKC!jT$rN_Vt
zeWr&zRAy93lUjm@@~6#i+jVAEPyp{azBvCIQ0>AZADgbE&gBp!ahwrm$miGB(wvn!
z*YS3b8cq0$TM;(ngJoxThIoO#>PJEPu1cp08j373ygi^?GCb$4TtjOQmPXIBL+A&2
zJHv7x_jyx)Rd87EX~vJ=(D+p6AU6>1AMdftA)-Wh7SkH4UW<)CG3zUB?B}US-l;&0
zx^NQ6fb3AUQCfpFjD{c)HQS@c)6;EK1}<`ap_0WZp)fbMJpL-75$ABJ4;d=}^nS>-
zJYi+A^*iK>c9#@09ZOOOIuSaJWwKy3936&|AQRp0i8t-RZsuxtKkfFbr8M<e3vI%W
zC$MD*cgskFpLxoeXMdlO@&$^$gX<`<W$_zYxGp4OFDlbeX6>c3FG+HdFl(?mq#_;E
zG5fhR_UIe=t!O~9R?)mV;V#kMujFlZx5TPAuEx?yG8)<jR57eCKhLbVTxL<|C10{s
zI^kQq1(;}cD>jCM*yZYeyAJ=t^|TFIdDi<Kn@s8Iwut3`Z^YLpN;+G=NPizG{356r
z!mXqn044&xLeF6kv_*^X(K#Osjo>;<PY9y~Yr$ufUog{0$Xz7DC~q9PwseJu40wXY
zb{<OHMn42yqXL=mx0-O7G8w!$cPS2fCVvC)Zx;VpIc&(`5&^=KEPN*zVMS>-crc3P
zH)UAt13jg+nG*SibE_I;!B~*<m$d)U0&wfsmUS7`c2e@Mz@J8)aiKY>HL<*S#-f&X
z4DFR~YVcxJ{FZ}m+T)#1V_F04Hg~MosADDWBTeK&@RL+&P=5=gk|}BzG)Fn@>9K&=
zpA0o!(4-mGW4#?D7)Fxw+mWg&QpkEl`QUb`-Ou-O46|{K$54=iz&ll6kS%3UH}ss*
zYB$kGb61z=ufiy>8)Y1pqfvWOkvt4_b8T-ftzQ4gLFL+1rlhCXa=kB#j=m}tL=w_H
zV*Lj~FtFHwklmmn*O$CBePe_cptKz{eUiQqQe*nDZKDPg3PLL1bhHKev$e`se{w2<
zkmkj4XMXha3nWV0pfcQy?|TCU1_^kqNjr-!=xn^vq!F$WtZh+9Wn55_*7vf@u3c+f
zB^oJQc@;#9r`0q;8#kQ8akVN{Z+~o`yr2jSQG;Iv`Wjt@7_{)*{A@K8w)VTm)uY45
z;-pXydoB(aF^zw;Mw{c{B1850WwIYfL(TFfnBnwt?CVbTQFO7~Slay{+2EwtyTSN4
zIL^&d7hPslEoyGY(~9^^7hRjt2XS*u7j=sOx1f7Hflfd?^Sv_VTKi|)+LVX347&rG
z7M>D_DER|>cVYmG<rZgH&h!B?HNAE<Ur?h$d$?90EmcHVTjZ9=WBAD?@AMvIzfZDq
zpw>xXwIqxJN}jh5!87MM%;IQPH3QoHh33#mxq!#U;^Kv}#sCGmnz97c1`{@@%iYSr
zl(i~S!K+$pG;(r@6F$|)A4vBbnYHMK`hHnMY5G!cc+5Vme9O0LUE2NpFD<D`;ld<`
zd0TlZr6#MUkfh}YUGyve#Qhtvj6ymfo@?<Nz4TC6U0_MnG&!P-P;vzdF+di30Ij1(
z7ljI_K64DZXLKtupdl%Pp&_ccYL{}9Hl22C*~egmP_`57aDu6@(FHJf)dxG*3R?d7
z$vNBauKdH(lJ80dYQkrN@4z6lh=s=I{xhQVdWhCwJx>H!9_bHHJh0$IgX=Ywd>grp
zpjK8FJ!G8UJPa^Ym@opZdQck;L+aLwqgmTMM~hvKd%0CxJ~=F7WM1xVZOw)iPL(e`
z=Up6vj1a8X5o06FtlVqa0LlR@<b~-~E`~8^qZ8y<2GLr<XUG)TwE~l}Z8_xDyriyJ
z#$P;I0AH60cr#Tne?!O7Rzb&nPDL8rAQP1xQHaZ90N1(xWKXZ@Xr0~#gc>y0_7qzB
znc|epJ-qQ+9A{>V7~oi0x~wZ0y*@)0t3uq7bj;n8@pG^$Y5m9uG*Wu<_ARX(dk~pD
z;({|!Z^w(~;<Z5Y4F<K2lF^2D^F_&a8q%x`c!ryDJG2y|Eh87ikWpd)Bc@V(AOfnr
z9es7_y<|TBWqzi32I~>9N}8GtjY}Hn4d?-E$+_4<oENhSXIh;Cq&IBmTxGJe&1Un<
zSlcrj>O~daK-Dx8Kx;tnea9_z8e$D_fOvh2gAG3Qb|YOIH$&7gtCn;T)wY)OezD4@
zA+iLiw4ks4n`U;5XJy{s=_)9;eAo*ly{UI&*8-cxXOyWzrDTl0Z;WM(UTH{1C$UT@
z{P?Yk;dC+a{2IMWlcDGaRwbhdEW0-G*odyx(QC)@7&LFE@)`W-7&O!OLA92vwMkb*
zVQT&3O+GxvoLf&KTT}6q*4jdNK4Dp8Oi$j?fcWI;<O2QImwsykqR02KrgNF}Gp3&=
z_;cr+{Km36-hT`u*<i|e`xyJuu?M91l(ZuhHnR*thYf5Fc)fuwdETEJbQ7>nFb}G*
zElkW=u{SSVm53a}IoP?KpKJJYFyyC#wC)?ZZ(NEtoH1R#It6jI(0iK1T=dc}V8*GI
z)c_4P&L>{-fa-F9<Hw?w?=Taek@aZM4D3m<jd7r);_A{!5#b7))LHGG5mQLZT<%pL
zP$H@c%oxsp-+d*_4aC6o)zvDR<<>La1ko9gqEG`G$=1jxwRVZ810>Gk;|paQBN!&v
z0eZ5;Ga+;2dY$P6Tg#adSsO2{1zGBes{=gq4ouM;Qcwhq!rls<+VT&vN9r+jM!MZ!
zGQwDZZWHZE?438=gKgAQsJ<sh#*0JW3kqd<IT+?D&`6VUmt{UkwAW|a>LK-VE3n)8
zHDNkw7g4<Q`;AM>qMFoOINXMDK&RT@RP|Gx{KrjMy(($uZVlzjF;Ta(lflxg9|7LF
zNN@zr3nGSk(-FNBpu~|-ey*TD$qR1E*^sZ{2n~2>ej!REk;-lDOVnz3)Ah`xuU|A*
z($)zx2kOTvvVs}1CV><a>F|x3TKaW4fWr@LM>E4ZFf=NvVqX*N8)sFKnG_dq)hUc(
zkpVx)c<3X>`D(Ii$*Dr+P+BoYNdVpH=sDAaD6p|6y!SzSICQ-CRTr0nnr!|G*0u21
z`-Oe(n@mWf@yM%SGx9r#)Msf8p=EJu;m8wgrM4BSWDZ=h#;Z|H1fTZ}k#IB!<}AL?
zfhVNC?qfA4<7r_u((vYK0^Na9c-^2ODqb5V;s~Nyily<vVw_kinOc)SnW0|UX5xe@
z?ildwVpyz+Itm+ALh~D9#m9gaEy7-#W+XUybxCL9btKW_g;JRR{yNeAk(t@#D_{g_
zw*jKm3FHUyC+18v^%(b~fnlK2R&hIp;X@!^XWf~|%HsoZXTL0t*Ha**Cxc5U#XiG(
z0tP-zp7HLu2zdh^_MSnNmgbZ@<wZU#Mb0ZUQ`uGfaZPQa1eF%ZeAu>D;u#JIo^h`V
z(pnKr8S5!NVRa;^lzQxbvScFWcX)Uv<wS%AKGdoijgFONDEJrLI`F)7OVU`p#&mcr
zj$G2hU70Y?N-?!`TvSQU&qO-%+r&XH7kIE3SEZ2+%IqMw=~lYpoMF(j=4R-Q6?$v%
z*<^Td)076bx_pyJO+PrCVE?z}3h0yD@OD(w6K}X>8Q9NA4siu50eaFhrT@`Q{*5JX
zc6bAE<GLP?TlOG`4>r6`x*F-m@kW7lAQ%U1rCq+P_W7a&*Ovr6jCjwpxWe5+--q9A
zU^cSBNb_Q{c8cAW9+Qjk0Ik|F{F*!uK#7z*pT?X6apR!ZzL6sHW>Hmr7i23`V@6@a
zYw)x;264R3Q}^V0&$Q_oSts^_NxRTdgN*f!r9tmPhgVgEPS;<7ECN~=!s$NTaX7nM
zNV&x~BjS0Pz>b~M5ndi^w^_+^AT|kSfuxg>`N;L0>O(MLeEgFH-t4p>V2rxk2<Yqd
zpRKOkyUhV9cIvnMjzz$#Ms)(&2NUXue9n$m;+97*EZ3})*kxDvaH|yn%i_>!B*#_h
z&vE8GWaw3m#Ex+xh-Ah*{&My1P#4%a9}m<hfzBt<RUt!q10<d3$I&*6UcjrRX?_ep
z+e|YKasEj&0%tkGTCG2oW^sYF$ecZU&=xK#ypfs17C#WB|Cx@yU1Ig?{+amux4Ko&
zL_-qK!I>W(=}}wI+(GB0LXOcaro=Vpo--u+hnrMp_?ROym!SA9sA<7slYo3BXHhJc
z@x@=ZG2kVz^s0b;zFc-zB+<)nXX)wdM|ip%Kia!I$GxUtTldG{ETQ_{uNRKNcLZcR
z9k_ScMEDDG@x81!`30p|jIt_J2X(num<Co@ukDU?$3Cb*CuJIsgWR+q9zq(%(#tKE
zWtl(s|9n7;QF05_2uP3BSKQ=mG7=F_b&a<{3o+~tWf3(SdrvX_L#p3NJ($%UdEB(9
zxh9{KXN!tSS&vrML8PTnqHONUcgk6YfZRA#X1WL^R^f|jeq=>G(okrJh=sEFfr?K1
z?s3U-o#t{%JRbW-jn{&kuAk9QtGtcuIDUfIrIQ(Ly_sDz=#|eAungeX@mZ_Z*2dX&
zIrje+4ymYC<koD8c+qu+O_ei#;X_d%QVsg0SqrD}y++#mq-ZY55S}L@bc!FJC!f)U
zHBV336lSsd{0yOUY4lzDb)Y6!tUJqW@AtO}{O>^yPB5+QU^NLOH|weaRxoQmul>OW
zTM7EKkIqen9JnO}W6TIoW^(0RXd;&o?F?r%>PRjCy*}@U@aBr2ExH6UrOPG-_T6Ij
zdKMO@+MWyB(WdccLA#17k&W&I^DQMva?wpBkaB`@Y1)G*FDJjUF*Idl>prTZc^y|f
zk^BPj4w0XkzK$u{qAc5Zkc7~kOrSv~5SAf<fzv|N*zZm0?o5WlHM9mXrb<GONr}80
z+~)-=Uz)9f%#lk`T$8(TrOVLaJ|UL#4XfU>xi(beal|~1%2HZ^0DoR*w<V#0!0TqC
zALA8FNn+lYg!5lZP-k|QKejFE8`kiXxJcAgl3r7lA!Ij<y#cuev`F1%)f;BBx=sD?
z@bJRdP-In}jl4mulbKb>l}JkkN7Q$#(AU4w_?h7+c)#H;w)z1%bRBC&<&trPK5M`5
z!_w^Md6^Se=vxu}UNNfe%1rn2GO=*!n|sEhmo`DFRITBj_3&N4EtJ75gbuu;XVLEL
zvBd-9-=Y!wQBF;y5LuW|qsS#ziR;{YMB^XVU+Z6pE*q;1%e&~Z&+xgRxc*F!K|!w2
z0j||XM7?Oaa#id5x<~9i>H16vM>LI1{R(3Bi?HnvH+t?#rIJtOY`&x)k}u<BS%{Rr
zz0A`~X$2re|M;)&zJ`g$2l8Trg_)g{HRLMqDZBd7?xAO|&T*(gDj~>eMbZ41ZgA3W
zDsggIs^F)miluI^X>Eer5X2E#<Y#q6|Ia&f@d+L^x*^8}KY>z$n<?+%U2j{zw28G+
znqIaS`RyB(pVN!W0>2D2;qfx=G-^yU67>gWokrcW$7>4RpZ$aVf|zFr4TDU>WUQDO
z)pdi7h+x!BmBFU)NE^92P44L+J)x6{>r>bMvQOqPL)R>6-(6B|`Jih{^ZA@m)!o7)
zHKx<$Y#}`InNf2vc4uLs`bvewg~Dql$JzMjRRP&?-zW`(3I>=JvqXcs3+hKsgi0AR
zN!OvGU@d#avNl^9H{5J{=g{_uJ+bDll|v?L!=HNHA@f<-^s!_4msg7Ht%jFwoQ!y$
z(+l!D!KF>Cod%uO$MCE>h&q&18}Ly2*^I^&r<c4FZ`+pL+E@tN6o}r|_mafF?xX&&
zAr<5iPdZyKsLiuL<Ze1m%Bo$~L~PuBd-<Od@R1Ra=miy=$S-okr^=o;=$&yAEl3dh
z#w|rum<u++oDozhNdo?2#i@++x#CpJb%2J>dzkA(oE3(H2{$f8Ji!EZ9;IOQ?=6{v
zo%o5Pw9_x!Pba7y751y9bi@Dr$twtW-oJq9O!P(x_4v<O19K0SM~lhs-7cjX^32b}
z!pk&D1rwQWbxnT%I-FeFBEo-y5mNIE-HNe);;WhVqE?WOGxXd)$2CL2zu>t1#KpsJ
zRMA0259<0c@Gbr#CV%#swd|MW=4AV0v*WQr8B}al)>?ShG5MYIW7;cme^OeOe^Ocv
z>fd(}KKuH=T;pKi206}_k1H_3rX7VZ5dROK()}Dj=hkfCisFLf=02#u{wHq#a-JRX
zfnSabYz*;n!*RQx)!zR1%cJ|hWBZj7FwX^_3VU(>`u|IBRSq^SfP=^)PDz@oKsUwL
zhjo970)N<f_$mE=(m+!XncKejrqiEK|B$jcZUPYqhS#pmfk=}>SDvK&mqIC#4P10#
zXMAe}JTEKa`~32M$%>T%z%L6)P64w3al6R&>;L&ON)LuUQqP-Kp90SZykU9rzw~L~
z@*_<^1U6=ym-Wg)B+a}Z{{MZ*U#9<rb)4$|udvoi5qf&G#R0M;J;RzkH4RN-Q&SUw
zI+1s_P5hjTM;n5ID5$RpW6BVq2$xHyc=8Tf+lJfSiSAeQ*@TPVx)n`2?h_J1b^5kD
zi@pvHZv3sUxbtP)WoQjhNka^;4ZDj9uvjtvo_|0r7=Fj%wZT$4K!2BiQ$Zsl|3^x)
z*BXTq`hI&UaBJ4;H3>??cn45C1jHU&#IzLxkE(r7PXb;(VjdTYW%|m1hijg8d@7?o
z3H$u%)2AdHL*qBd=Cpq!wY7)Go#AkxR37M<BIi2+aA!(J&E)q}44%yXJIs?AzzDC~
zhGQOHfKSCe@?ZD@Fr4mYYo$5?HXRf1-o3k1R#w&th(C(MBcq}ub#-<BQG*mU$K9!N
znshR&_lrYwzH?@5rJ)HUQO}H&<N~5+8g0r7BXX#NTiJ?=r?%Y?GC*^&c5}P3>P4Dw
zD=#4@dDO;vPHM{6uDU>d=fuUtl6EVXUDbcs7froi!c4j9|2u8fey^0TJtBtyfj;4G
z>y2>nf0;(^J4?O4o;5-O7rT-dzK1cj{~;MY_x=Es74HCmjtOLbLb|!R`8S*EZo~1O
z3AGEk^n-gidC$=`=I-I`Ucl<&W4YXi4FM1dkYHR$4LWIqo2^SYM5S;Hd%=`^VhZ<x
zQsoDYPTWAVyYJlYa*XT+b4krBn131N2e!YrQ_II3a9j(!L&&VACbyG_SzUB+Qs@zY
z_H+Ug@Sm|*rZzi;PiV4_`vN`eGzm{qgDfncX-}+*c8`<x^ALbayHJG!Mzu)I({ZsK
zXYB*igAzY%zRRzXt%ZTy7&ad;`Eb8%Ja4gC=Ms#EN7VaX^-!JvzKHWBU<yQ=+Dm9&
z{ongR{Bu9T|8qYlH(^B<tyWfUZeot0h4|nkDzkLS#S3Lh6;*3<lXUZWa?z>G#o%YW
zLHp|gl^?=FQR6i#*EoN#Z+yxVV7KVLqtE{WL?%$r9Zm%LQTMn$yHBez`nf~haC2rB
zP-U(B?AQH(lXxlSxScNv)$T-fln>_TF=wKZ3AiWaVsXt}l#5Kr`nLM*+cVPkNm9|i
z|1K>CH%8jhF|fFC8D(ji!2qAr{JHG}@Lde3U5$qJH;Q)SEB%5rh~^!{Czw2?E~#Ui
zt1dskksTf{;Jz8RtN#|;!<v<E{q=Q6{s_^I>=R}}^%=_}HkRj~U*=2Vl#}`#L^08}
zar}bAxUc*@eb`%8Sw+g-U)h^#2$E6}O+_(%cROBgR>mRZ-BoK3q9i1gGzYip@Yz~C
z?x%gCp~i}Q>j$Q3zP`(b7+cdtcgI=^hPHmUUW|nx^<uZJablX7ZdwuAEt7fm_;(fk
zH<e+$2#p;<ZrBt(odG-<R^$zeus?PMFWrO>Kyb`FCoh9QVu9be=b;vsmX>UF!DsIS
zlCK&HBGGp=rw=xNTKf5HDS7oudAyJ_2_rj0wJi8SPh1-(0Jd+LdBsk36lk=!H-t<<
zxl*(etK(1a=JT~eQj`N)qnXDv#^9}JD7-JODxs#%ce_$Bf!UUxX`>q!H2dT4=I`mA
z86XS}1;!ChMdDWVMRY}aNI{w~tQ*nIZBFU~q2VL^=&?Isv4S**N#1t7iA5z*oHMiu
z6Z4O0>}zItA0);nh-SxVwAL0(FD)679w;VMq@))4Mb4K3t=>_(S_Abw^0s<+iSe@@
zpLI6+rdF;vCer(Dw{1|jO6D(?7I2&t|GhbZe*8AZoM4?rEHkHU2O|R;=qMi^r`rz}
z?XewCE#z~Ck?-#E8z%6xZH{lg&^W%hxq30THWMe2)Svy{ufJXDr}G9mxb*Um0nN@o
zA^#N%ydq^YcUXuQ;bx&i3fLxA%8SY!5*KwHC}aIrxEUSW7>GPx<y<CONwWgyf3s*$
z9}D`s8pKrB(S_?~S(S7)v$0U{UPmf0P~8Nx*&Z%CyC$O{gyZ?wpc=H81@$qA#b=lV
z7HrfKwXOHt^;3ZvN)oA(j__JZQYm1gn!EB=P#4g_XxSo}uUL@Dp7D7-u*Jp)k6SB$
z;>ypNfEm^Rpi-Arym`Q&EclL&<SvUA3f<Nh1o+Y*E4}37)K7MR8lEl2S=8@g;@zt9
z{r6UiTb8-?Od_kx>(n<zhn^GN*MOZ&;tZ*C^^?`cisEt1t{K^Z(e})1Dzrmc`h?~)
z@E~YBOWmZVOnbvCmZ9Y*(&kvNHrQ#GbtOx6+Cw?&<X7Vp^!kKv>UdAdw}i?P*W_;E
zXnTv<0-*)aM+K(tFD0r1)dfp{tMQa~L%&40+RU<|_MU^%2Y<1@&lL;R?WVV$<4I$B
z<zf%wfnPow44XOFpFX{I`LoIEnz=Ts`FpQnJ>SP#AxJagQ(51V%Ydlt4HGVTm*p35
zU(m0s>XFy*Y;Ab{-;AfsgEBT2;DoziN!OUKM2$Ccthj2Ad;GGLUpCFU)9f_8>(hXl
z2Ahv4@+MQrOYvel1%y<bYJG6Bn9T6e?y8}$dwOK9jPF%a3s2D3qn6Se5*PaWMa$IS
z*eOSCO>He!V#08`%0+%NtOjTyRnGTA`<gdAP(E1U@s6&HYv<;t8bKz!-oDw+Ko-)*
z&VL-$%l#tW&we8S3phSdpBNPF3eP7Fy5q99G90osle?_E4WD{>iP#<jO~TZ@rX1|6
z`JOsMr{&Jei995=CzF$n+Uic46b=i~?21kOgzmQ3ZkM6d^}hF&3<;@s^=`5nHe@44
zL4$&`HvhiKyaX+}PHoXip}p<TZsZsR3^qB|QcbS!4DzAt4njg0TJ}tFC~4@~C1_OI
zh;U#J<m<Sp42rr3e%IV=rY&r|LUR`MV20^qc`XuT_g793*lzQCDXm{VlT_<ZitF6#
zokg)b8mA62>UHS;@uW(zm8i78<4kG>OBLni%S57~_6C|(4Q@m`439QI=Yg78T)ON|
zdz+=YQ7V~8-d<!Yj}5JDsjxQ`{|L4t1Lin5!0@DUNif5&&S&e&D$yBchJ5_?Frp5q
z2YuMCY|CYFGqBiXYR=Bame+L$X@m@|OogX-5c!HG42#U#hJ0BT`liIC*ZQU|V(T-D
zQaHe5>)o$fqQMH0p9Z`E^R5_zIrlHUJs=@^ZbaSXQR><|y(8H3%X#LpRsi1hqtN73
zzqf7rF?q{9+%-()aD3jDj%CX(*n6LPKHGt`Td=ir_w__$bc&cB>qoPd%ftU>-#Zwz
z^nNyobZ)ju#^;vka~3|j_lEV!)3x_%1=T>lwo%WP-6Qw5=%rv;lb&C`(c6pM`Y8sH
zX!PQPRkiu<w6f0Cb;To#Cr`Am*w@M-Y%@DskSPTb1pF0xNO1N}uz)trJc)WA5Rz`6
zIrr)ezEyzmjj4m7IYMZj&`lAZq+=DaeghdxOYE*L4ZgKp;*nqG3L4tT7UhH>3uYz6
zX165)(=sP&xAnh-0534t<Axfa){CIGVciGUw=-z^kybk`ns5<w*ZP46sCBWvTLy#m
ztnvte9B;A`z&pIv7L$GIcxHkvXIjn<de7aPN5Ty;T97ike_;rK#<Du_6DWPtM?12K
zN*uiI9PPUR^~ufrDLC65yo)7D2qpd?5%0H@E?~U9Uvf7+2KraRruw6Tt33#&5ur)A
z&QB*rLHGVma7F^D0@-0zX^0twQ1JT(!Dtg7xHdTV<jB3Ufxo65DAX+d@V*QOX-s>x
zT?stgE2NLANH(Rlu2!p#9E@+OycoTDRnj^BpsA%6eRjz@`OL#zy}#fHNi-$VgQy#P
z1PHHo1w>uHRQ-}GEpYC&`w#O>of5ftykTO~uqSD(H7u#2`0;BBNQ-FE7$4|g9~Y_-
zQn$+n2mUIV-a}t9HKf6$%IVk;lbdVF29Pw(ai~wbde%<Nkao-+x*qdZvNyzSGY4tG
z9Xp<O_IO1a5MJ^~0r=QRuQ@>UN|sHzeIfUtyZ^Na!A4g{^1gkt3Xm2cM*IOtAFDw9
z1?-cYzoT-jIsFBT%i;pWu3|BW`^Jxm3N};jEen7mx-`bGR{Sf|$XS5Ke62|k-X&?8
z+RN7w#RBpjGaCD=RaZu6pN=j?8ff#%4451HC*P*%&t!w$SS0BTsN8~BeG1iweQ&N<
zn!P&bQjwNpz7=?{PA6N+DzqZ1BG&V>#@kA&I#Bdrk+NvCG|;+2eP`JH_R^Vobnjt*
zzhDDxj6Gbw^HmcE=jbnA#Vz*}uD_O@&1SZNz_#6T-<oZrA4_|Co%sMVw+D(0Iz8S;
zC3{H9ScNikO1Vy2q*LS4*nd=fk15q_@b&BHc(lk6Mzg1xA{Vz?{N4hKbDgs$?0Zs+
zvzylYT@QiX%E&GqFFuRpn5Xpta{r{&3EEcMZ@cL~ydfHYPZy=EIF`Z89WnK>CiMg3
z_int4h{&cSw+@fY5A2!I{Z0q+4N*O{Oh9Na#nu~tt4QtC=&jumJ^uch)SJ<gE3ZJr
z0RjQ|#=FB;nY`>&Zms*R*;}4zZLGFr4OsAIYOBcy^|Zg<h7S$yPMGiTyIcJ!8!88{
z8UBta-MPy&78ac^t#9W>KXWa4W9akr@kF=<H{6U`Rlb`I1+v2X07L|Obh1#>VBuHD
zm>rKB+#HSaYs!J9rqN6!D+CDa3lBY*$vD;f*n0|J0wm8$bE+cVpmyy=7^xmMOuvA*
zwMZ%eN19>4NiIn-@DBK}@wt-M$w6V=`Dm7zdcTT;c<)k|VOKRR4#u8g+E!CTRKLl|
zoY;n;)=WW{#1(=Ox^A1gpynJFSGn&8$Fa!=+lxNE8(lWD9a^+5u~1a{UVyJ)320@O
zF@yyjY(AlO)b2E_t7a6oYL{TW==j|*iLUS0FXT#0Q6IJI?aqh{HVPPvGnOnQh%#-k
zsWZ1K1%iA<3pxJmg*^=rMd9c&5$1+rw|hxVkF0{FZ&q#k1Xn@Cj>D^CZbMtc$C!WN
z+01Pn&*~XHmq(tx@rptv1*7^^yysOKT|_l6G>e4clc#riFr4s5iV!iO*n&<o(B{T-
z-h@-~Hh^MN_wGt=8}=8K=ahPxV|9=Q_+d2>L3j5uX+`4CnsmkAga@d1HiPwT&SBAc
z^2fpqp>d(@J9CzuVM!trH<p%nn0prF{YqoYI?hSdGh1NmS{qnlK)iOdL}B}nKx?v&
z_^(>5YlWtH;eEz%V0G?>nSHZ^8RG2f4Xi1oNz8U^d2rPU<3OkFSYm!eEkj>MSYXb^
zSwQx-ZOGHx1ZlIqEE2_#<ose6o{j4pYYk{$?r%q3hNoD)JN<L|enM5yHZ&0U(Zi6-
z-$>YdP#L2GYlT?8w>)-@&}Nl|GbZJ!>L*Qd$KKXN@UzIHA&(Gth%<<6rEB?DSJNJ|
zS%3#DG!JXDSYi9oa~loj1Ty*x{ut0||K<11*_5sNK3Xr@BsfU}Y@x5<yK0ZGN_ho|
zm4DO{cJ!OU#JyV|!M!q&onIU2Ja)<9Ueb+k4Ig(E^kt!+NiQV=vUbSir0xoPVv-9y
zOK!F-mTsj{8PhS_Ln6Cp7sU48tJWL2mm}yHkqU^mn#&K4k5oRD3OYeKnOG34&V0@D
zE)nzpSRpqsiUXVcUWD1$jD%wL*2YrYic@IVole~;cXjyT$k$O$Tlav@<|p;`{-bCg
zwQnIf%<!V=Mr2!i0#a*=&k^^0%>fyZWvX~1)!lJby!qU+y>1#%-qQ$guJ|XFbcpyp
z*-VV^)Eb|uvLXId?#xvmDHF;IHdNb%@4ftWXknr?r3-e37*-)1NGB0`uV>c#7IdJc
zrKOarXL|Q?os+2noRFy@7<?2cQ}}APSNPO!%aaRa?F!g~ws3b@<H7UXGKIe5f4yn1
zfFoVn-Duy$`uh20STd3QWcN0WDhsw{t*PRQoIB1CNdlY3sE$T9G}IVhWQ1>V<79DJ
zjIGUw6@PHEm5%4WT>gG=8ZTwKdP8|^#ZD;r=ReU~wx)-=tuYA2wY$E-_rGp|W^*4s
z=QU(H{?2Iutz?PTs4|y#)XQ^1)QOy!Fw9Tr%gH^kXCd`znGsJczpL9grWfTj$W%eG
z7u~B1^x7p;-FJIMhzH-?7U~ZG*On-9q}5d0T}rwbx$c`E$d{FYE#aS<Uvbm9qjESS
zrjb?Z;zXa-Q&MRwV!|i}9^J$lZFqB^`>)Xm;9Xm<Phj0klJ^%0ksbj(9n)$V!kNKZ
z4nd_5<0?3#!B?g;g2htSe{GIj8pt?6-C#n~v?5jzF^D9@l9EvSSD%?r=2fD>VCA&W
z707W-XV5&wBTr`vjeO)y&6#)>UoC$?@4yTbWvUmrsFC9q><kY)rc@MA8D84p&%X`R
zn??boX9vFao>ClgZeJ#4-Vj}9lt&)dm_8t#baXuAAqDR0NwT=Wi>3(KPJ}|nW{lkO
zug_zwKTMcf4+r~`-vK@-R`9F`RX_b<HoT{w7q43sYL10ajdM1ess=cW;434hGCT-x
zC73&GCQ1eL`tjQg3f>dxt5nAwYN|3;{VR0ED2eDp-pLngEdc2W@rU$;j})+QYyt=F
zv3pgt6YPMJ2lX{H+s&$v2)rKm55zm6O|uzWNo7C}fZ${t`IDm)4nd+z_6DaY=!D9_
zu7V{vRT|i>n7&;8Om#eyFF2*mp??0QPP*!6<=_+24401p3#mc;AS9ncCCr?M7Xw*-
z8ely(?YkeF{7p?^9yDx3`~rG77+isr4vs&0a#(ZZ2ud36R9+X~^a4Z@V|Dw1lf3A6
zp^rA1%s<$;_h73&uLD{ZbIVHE`I@O$1>~1+bhbocBV)^&4I$*Y*po+<GaM$$4So=t
zU{#|4M8u$}N!75)WSp-2yw%lGh3Nfkn?liqsNdUQ_Voh^9#_N@#l?z#efa@(Q^Kl0
zOq3%dB-fPh!;SSf^ox%_1#0?ZM3trePkgA|9TPruTB<0laTu&|{NJ^^a3r(8|9LhA
z>=swh2r*3Od|_1H4$&_lvUnRPDhhV&3Tk({3kC^j97OBJ?k4h7_IoCA-;TGaOVR!b
zHpBN)Al&gv@b!2_ItfXp;*KV;5VZMlpJzVo>iBrLekqEr>p8V{yc+20lA+aA!!&x%
zQW?_iMMiw4D$g9B2#;%Ug2K%=Cgy~82>n-($bADIs}w-WEg&HIgU$rKQ4ZJ!TtX_I
zItX$RUF*|gDP_8?fjMy~gFGX1LfcHLl4=!V2s7c41g>;rbH8Bw8Rt5^o{A?_jw?+h
zQEna&+yuVQ6pT4PtG8O)8R?_^I8}o-Z9~7i27Hm{qy7Hg-Ysjvqkdz5dqb;{hw>G=
z&U3{(hVZTg6M4?NZ7m#k`a=)nC_S3Vgn1<8BW~UoB=P_mBk+Rt<6e_O1~!$AX{<%<
z5s&k*vj4+|`p5Q)?-Nj_&bs_3PIn*9M_&3vmfnov*IqbEolwSnSWBN=c@BmWSvKqt
zR1cUtgq>J!Y^=T3X6ca%Lvr{5>bqm0^N&D?Tj|F}=}Jqvy4e>!c)Hd)xbVKj-TaZ@
z_ZM#_Ie^^+q=qWvY5vMP{!ziKE%;~{2ac3O8iC5;ekD@=X(Rbb`XV?H+wa;qh9{>x
z&jv-ACQ3fMyhAQA%BKsO(@}`mb&?_;y$CR*kRZFj)_q^*653jtm_h#xF=VT!74TC*
zm*majMP7KK(3aK!Vo!)CH7O9j**RUjDx7)>C`yl-zU~$WNLVCkf28ktqi30)0cenW
zWu8yo)-dYJS6eD0G{&@|*I*^r%*rf%vN?UvFcI&**tH;5Rtj~Cc0~3Y@bpe2ix|h6
zZ36eXg>5mI>#=1&G$sj>ZFvpdyQ;_cZw6HFH1ug1`}U}reibdUd$(zpYuUzs@~;HS
zhyqnd)xu2R!lb+{ueoq$6K9W4unb)tRr?jIpZTJ6#rqUydr#c)iSVfxepxcPp1TOb
zcndhsKBIo%En##IA=>zKHr#<I@4xqm+I_7h6bvtg>|GT2>mkQMIYmX%!eAyB^t|0F
zE!C|cQWu;oV!?y2A`CrGNTGD5Q=}t|T9uyqTc~ET(v`c7MY9Ztk%ZKC!)=zWR2SV`
z7rPopm8Y~CCX!O%{mrkaQd4$EqnyUR)DKOc;@+oBw-}vrO}}mvdo0Ppb`dit4p64h
zrj)yqHyoGr(|xu*1+ELlQ)B|`hNrZKid0eTe{h##({o28K!?6GCnV~br#(5|pXW!(
zW$?D&>an_r1!<iIRhbVxuJ)iaa#^nS>HQv|?#8jwGe##=#$vAvBIpogx>!e5KH=*d
zw9||yAR6Q<OpGzDGR$63N$|-;5E$@U{i>C!ksxBVS}isbeRQ}n`AcHUJa(sj#E6`w
zfe~gV>;_P1CGs^f>4lH;7`l#$x;9Hsw%b{~cc&M2p0gRUq?fmJEsg3Aj)}M}2HU@9
zh*D@1SWh?3ZYX}nx_0m8agCaz^LNVBLJ&*6j%4dof6@qw|7z$zha;eQr~rCQB5FP5
zEs8L0Od3Cj&KD5^y@Jn#P*r}Tg)bXcf3{Ingti*y86b5utzb4Kg-+_ssAVhNCRM1M
zj9U*ha%{`++%DY*qZhkYi_ZQdF{!TpH<?ViyF?U_CNJzPjd$-n9r-0Co0x^i9gqCj
zE1%tuhcLG;=W6wJE%e+_RQ^-00m@_WsUaGH*pN*-;i7e+!H7(*4#A|V>m_RqfSh;i
zNHW7;%Z-{$Yvg6#j+*z+glXi>P{rZq?(J1xR(6UT=J4XAZ?`{ez<M%(!7sYq;Q9IG
z{jIupG>wyNC-dAh^NF1{sab<BPqqcBv7ea};@pI6*uLX#k0d9p(BZH<SH1o%8%-Gi
zmH3Fgd~Gv}B2<6&{#gT4qcNU?=b^i!USS|o*Ez$PpV|4H=<9~)bMq2fYfM;AP2ys}
zuu7_g5T%$#KDkr}=`W*LfTWzd43$EpS!re%zU>}^w$=|du-~<{7MC~Dlh@tD1yz1y
zQD>?4J_EH?`*Ne&iX`UBn$iPAV^Rg@$8w&S>Pc-N;lnl(RD5>p7G|G4k*(^yAW6q0
z<K%tlAu<^iRJFUA5vI@%O{Mf1`wg5pTh5g;Q_f)k?tGV~qjFH4pUIP#@y<S@RnDgi
z0fG;?Z2tv3fp+#d#E@~quwauGQ3YqF+W5|7PpHUj!U!(?B3Ik2ka%Lo<T2C^G^s#Z
zYoG9A{tuM8@q3`GOql7e+CN?Wc+X|ZN!W&;X2Gl=Z2UZ=wMu31zW9GJQl4zQ7IYqt
zRX{I1y@SK-UJ429IJLh^d#i})g3M27>><ZZs2fwev`$neN>&*}_R3+m{V%S&Id|zG
z7d_z`n#Ot4nKe2gtc<!;OL{Yb@8*7B0J<18+Oo%)&k8@8qt=-J2TJ(^5v1e2Zf^F2
zq=(NlAzxZ*Ga>`d)9=48ER7zfnKb%Aj;%^H#JDESH$LoAX6&lE3SeGgdGD?NcPavF
zUr{qSmAZBODci^V%a^C~w%=!(r}JzMi!zcF?o-d;egU^W>Hq)r$SF_~#U(S<Vnjpx
zJtZ$FVQy4{rkVLizCP!hvUi8$HfSDnNYIcgZf=d(8an>%6bPJl$9;kS2F^4Mp8_FK
z;MZZ+RErX`^5C48PhF6>GuGQJOc1A;PKIW>ckTU$7Cf&E!>j97u^sm&F#tGhN>Ho$
zFSdJhnab;WG<0e&EgD~&LS+_EwThU*crw5+ffE*N*PtVs%N5xT6mMVsgQCD?=4R7&
z0kdt}u+zb1hn8so7f-kQ`hQfXqI4~W!O}iXL4%N&TYh=8Qq&zY0~$Ght!<oZN7X1{
zyT9@m?iuop3cfKMzN9!lsr%JbcuoQ&`;^&P)CS~R%f99R-zfW=2NP<6T(XjwC<DHo
ze`mF7nhq`UeD&bRk9%GmPqbmk$$Lj@em(2ipd>EEC3d)J|AnG{l>`OW;R@J9c;egr
zH{S&qf2_7oAHRvGtNI&=q$ID|J%&F>?>}`l3syi(2>?vXUKw7dP6M&u@;A?!ezP2a
z76vV@n0?Dswcur)KAf#($thBZ@39%=%A&m0h|=fk0pfauuD(+rcrSVbfYiq5k3Jp+
z-AlgO{V$IDX9u<Z9pA%esgxP(&}WK>Lhu$)eHV*8tmkS)R5c|gC3VC*Z5F<?Fxm7z
zl>V7tID5C-j=AWTh-T;(4-k|MKo)+@?#IS|$Lv=Cl^4*W^b};;;2Ps;0-84)WDXrP
z{wW9>?nYGS+iM(8*r5Hqyd<F5=>UUCU8AYSKq}W%|F-X1JsbMll=q$7@RO^9QFZ@r
zF@Mh8epI(^G_Qu;t!fJ6lq*9*R{_-7>Q<4$%sJX<#lWMFL0%uA_z+*k%<GIAl7ik;
zZp`sv_C`&Jc}EC*|8#mP;Fg-_^X2ai7p^Qmzr|+B;otmpwhPDOsn8qb&FA~UkrNan
z{xNAcWtyM4=7Y%>z{;K7aP)Ci%|_woKyKdRt2`6n*&l^62VT!qYc<qyF0Z+Bh8@BX
z{2H#3#@q9kkNX(|PTt{b_t=%Jv1*w2)<MIBD_w7v)AYV;*R^MVaJ`1R;7cCZjAs{L
zuYLG!QrEI6py7kg)p@~ONn_LhT<FEwI%!DUoX9J0k-tOhByuk-u-D8wUqh&d<q9dA
zZIockE|BcD_7ZO~8@Q#uKVlb*++oyJD_nKMNh&KSj>X<eS2v@?ao(q@DqWmuqC1wY
zQdTF&Xz3qONHd2exA{ny$U2c?OO6=-tyy1!Eq{oZ;U$@UtP`qkz!8O7KpZ04rWCJ>
zrt4&4RJp^y)BsRH!E_9t1e-r>aAIxQ3R}R#cVp=Fm9^L}f8#?J+b%k$Udw7Xes5s(
zPaIyHy>rF@3>hLTOkd6<Xgq9ve<j}aRb2{3M|k49Uf=P0oB*48HKHN&;RxL)folyH
zisK$O51QCi=o-LoOEIh3tLz*%M<)vBx?oA8W!bJZT_M^v+*y2I1+2^5)4w`S)(F#9
z9iKDv<O#MvZ&#|XoLBkduzWx3wJvQ0;NHAN|K(kEk;&rC$D;d>Iz;@Mr{{MXL&82W
ziRDkf_c^@E2!QzKT7YgJ(hDuC&cPJ6Pa<<X-#Qt&<vv<oetioI6ftKT-VMG`z573d
zYoQM-o;@r5^4%s(&FoDS>o*`%OTMNX9l&Ml71eJrudnh%pi$XtqT3F!?PnV3`}5pE
z_IXlcvbInuM-0e7)u}zcv-foGg2#ir{OniH49xYF^08xD#X+Yh*GQ2q1)`*uv2g9H
z6iiIe_2K!&WnF(}?i*we9_3Dfg6>w{4>eZpLq5|VO65~K-XlnX8&k&x_MMj9DU*|c
z7*+qnp!EstI$&YWI~@hgzi9xF@dmJ52l3DYz~^$3*q(4P@$Ie~&X7Dan$|-SS`r;P
zjQ`)+wpn=|Pg}6N?HYnzslLYIb`8}M$@QQhdYk<M`q5RMHv_lgR0+|LAHZsBKYkN=
zM0th6sA0-CDl!nQHv0sl3yLhG$+F(pMpe=Izh1oy>p07&^drS)Iwlx^HL^mnuj5)P
zE<BiGZn3}eL8!N2K<@7I?PTw%2RfbX=2kgF_fKKu^?HwGx4P*EfH4n+!F777BlXMu
zu1xH6w!iDW){J9=WLFL>&D772)Ou@q1L(Iyi}!TEex8$HgpmO!Kd)eL^tK<ToDXaf
z`gRmBC@poqsUZBnLpS4i6&O0->wQ!96NTRQ*m<iycBww2SX|Kq_PDNM=HX#hHy5DD
z+ffvBY)76rOYTU?;}rnDJNL!!nu<)c^AC>OuM_m-MKS6F@=cy&-{iPRC4l_I`dpNv
zCY_WtHt^Wbn@EW30MymxlN0QXrV!sXq}tn~2SqH0)*hst`7jKaoHidzeiJ}R3a@YA
z4xOgL2lAN^9;a#ZfzLV9ZLZslPFC1^UmyVnp{gfQwSag%6>md|Cx`VTdI6hUoQW;3
zVDaHh2$N2(z}ultJ)aJ~|MPejTrCKe(iG9ZLpjsW^Mwz<G|$GeYOp9r{?K!iXZ1OY
zx;`)Tz7-Kr@~%5jXAwy*__4vkn>s33FeEheMl8Por~dUl=0f}NHD{RNw?{_V{B|E!
zjT(xOSoXJ5$45>g$|6YOQtwp+<0$Ijub;SR;?hM9`KHjT<1~z%_aR;9M1$hpUe#Z4
z^Mr*d9&M`l*avpF*_?j=995tz@XF9(tXz77wRAR640)CuahYjdBvIXFal7)w%r;S`
ztp)Ip6@UJwMXBMpyQfRtekII~DDgkbZiX2m7#V$a`mC1x@z>_}S8tqU3^$lWk@J}A
zna;9Zi2_8Cu;P~92#)ixubgdL2=4sbca;^&hX0zeY>A|5o4WWERxtF2l&L*sl(nHA
zq;=7am#4M5Cmyg8yFQvZ50vk3JYV&)mSg3u;@$qvq<CMjf-bc5EE}L>W&NT&2K)2F
z|HIXL_%-z{-NQ<eAT1Q>ErcqeOK%c-uVRqi1f+vV2Z7LA=qOFP3etO3Y5);Iiu4vh
zLFo_z1b+G6=icXi?)wLv&)H{Y?|o)wt(o;_|7U%ptPjfTncc`dj-V5Xu>RV01<!9d
zoOx<p87&(gGOoDTdY}>g7@JIXA2&iGBu|Slu#%LXe-}s;TY>lbeFhy*FTJ9kqsUtH
z$#jkZomS22)yM&pq=(j6$eBc3yF|~xB!6ty>T0uGQ8NEu)0Ci&A^%2wGef7`hfa1S
z`6l3^bZ+}<BaK3bZml@e`4hv1cF>}%Wf(Emu)>G;Ad?=u5#;-&P(GMiv1lB0s65*3
z+AA6WnpW>_(hq(_k<ukt2R9zM)h*J;3BLW#@Yj;A24}?QwCM1gZONQv<bMQz(PgoG
zcG<4b^|gBndcg1B8qV}T|1=v6Q1~EkZ0uU`S-Z9!sP!|fnq-8R=aW~swqxm1)KgTD
zf!}g$E-b)ofoq*O?(JYxIwty2fI;9Gw&2?f5!8?O;P-4{7q$<rFLP$Dt}!Q?a1y>e
zax*@7pt}FB@5Nn(`3A>&1()2!T^2hWD7(*QF#o>`Z^|gv6+<sy#$?fKm;ka3stRQP
zTEdE=61Xf2fc=sn)N#lymRj>7&3PSyBTS5ltOqEW`kLCXMkyGUzdk4C6>YU2KBs3|
z+$?lg5-cLH+DXsVD_z(+pdlHp4{$YggfUnLqZ5i(aX{9<Z>Gjkc<p&YC{JZy9MFPb
zmi|vsL*$=5*)!7}=n6@@O4!VshSSYdfA9p6F+5N=yAwD2jd}6dw8n(^L&tp)DsGiD
zg9#jM;raVipXvJATz=(W>Bmho`AYYAJppwsn)}7hht3w=LE_#;++PDnG;U40;0kFE
zD$z89<#Hfc;K&I0>42rVJA3xphiBVuLDig&A3XL$8?PR|nJ8IM{C8|orvs>#f?6%Q
zueWNLzl1E%3X@Q}W)D(N=IVYFC_H0DgVbqvUl97Hs(Ol7sv)%xe!JRoNJw*x#?ejj
zZ0AKYgP1b&eSFqFzl8XcVZGSg(iW6NP}LO>RF@!%+|U7|_I-DLlZFfR;n~L-%6h0#
z+O`7d>HeH`BVv`_WSrApwTH5-p0k!mKP(qspFV@T+RM`8f6mekMsRFc*&}7!D`_(K
zikzG&8vd|ux){j6h$Es(yf%IebcdT(_grN?8Rcc{Zh+ksRFrs<v&iIfK4plj%?;w2
zU_Tye`r!t<36wzLhv(v^dTvFx1vYwoe9&Sn@q&byDy&Sd){a<EE230D$a)*p{-(_A
z{RHl>m+p{9k!c)PYiwFrk?w_4n}g`D_Ngpd?#W<WNscXd(mx(bYxz!N2IOK?`d{Nc
zHbv4N>zm=`mZ?k6efjLas}sgcqOhn46n12>Ew{=-<bjuWWI4m9uaJj%yo}zy+W)cq
z9fE4f?fr(D<m@l$Fr@1P$RmyBr_F9zgCAjw5IMguFH@tJ>>SgSzd_ztYt<;(An=3&
ztGCM<-$sXA%6Y+;p34v1vu%o}3Y?ycqG|`a3c@4GAEaS!t`0JgBx#3>>`*;cT!YP9
zhvcL*epF+SJ2LkvF^R}KB<Gkrv67dHT@j+Q1-9);{_**e&~zE84u(CR4X68)6g#dd
zL5bO$t1VB$@hjx^KBWvrua15YcKk!HET;nb0@+w>aUX~Iqm1QyE_bVnc<((C5jnrC
zKOdEPRlRmcTl39v4xJACH+$r6wA2-=QU#FxOJ5K$sQ#AbS5U7%2E5lJ$;Wqv8*>!M
zHr9MYS;2`JmmgBttEYYy@|=qYAJ?m>6&>dvk^hsl>Huhp9oi705GsRpqH5hv;0N7T
zd8(`4S-TTZa{GjyV|7i)hJ)?NwvStdPw8lyR)9`g&Q8Q87ShjfvTxXOV|1(aHZ6EG
z@@g-1q1@wg{#tT3bck%;y^Q(ZzkhaH$~J?P$6D2t5S2bW2V12UE|L<}{*uv4n1D%G
zYwp|?q=X93)$mhd9a<r6BGGhGF&UBb?PK0O%02XoY~k$VJcwC`+34BHI~76L$k<VY
z`bPQ)dx#=Ie0$*l<vf!Ll8gop<b%?Wl=r+pj(Zsda#me=@k=S*Q7!2bz7z_0czp5W
z5yM&dTU2&)o`ow9N%v*W5A&MJEUTV484ee@x}W`bl}y#)Zyjem<I4QQT`ODIy`t>q
zv(QJwY+S`^I%#sn?9m7|ZNe`X)27*Os3u+>ibglb_d;7g1N?B{D4o&dYy3V6^|PbA
zE3>ezT8{;;@IVd}fSXE45yd1pDgY0W%OcJ8MSnI8`1<?DDo+dqGYaN8{I0*C60!OF
zanSOPl;+v&+#x^wIxw?UVXwn;^(HrV$he)|3CFKV>>7Q(R&>6;=Bf4mTTP}ChGSz_
z`!4_N$?+Or?)=N$Zs6XhVuP-Xn0uqy=lxce%S4j6X7{k|cwru+IJNdvxzRkg)@k5B
z!9641SnTHnFp8E|CGu>X!^QA-h6jAvZe5nd$WjWTmDP4tZF{B=c<JVS(hvv6s}gbX
zY()6GOsXs(98~TL>Io=io{G%VXC{QW>p;V<FM^dEX1}txRS!o2q#NQMgWN_{xJN3l
zGc7O6^S4XgwC>{V6;y*Fvk>5X6l37qs>15lINoFAL%j&8pi>x?Wc}Vkd|AW&Do-v{
z+$RLfFc*hMx_883J8SW3qm#_QmM);(d-q1n=^MB7tlqlp5M$NpNCww{TDS?+!;NET
zmjs`{fK;}s<LX)vPH5$IT+q^|1-J+Oqp)dy)wQQQXA1o^4z=vTp66BP>{0pzlf7`J
zPL%KCZ_;GAtPc{PWq9<TSpYK}V*}d3UnL>a=j4Y7=aZMtCi25p@%@}TTXch@B0Fi6
z-w2d_-nsV(*%}HNfADImXbSWN&0bOz?(?AoZD!sMB=(i`&=A8d3K!rAir}Ia;w#FO
zA4dPqs~~Luiijv^?MaATTOCBy0<NF0pL(p<BVN2l9sG`7F!bJXASUVR;xsi51WEf+
z7I%3O-Wtahy}IoZfB}Zswf#XTU$kd)HFyU45UJiQ1qK7q?9h~J4F}@+CQy2Qx}gux
z>J7L0Tw=M}HA0WGQ6D*S6ar^fda!7rf&Rvcva1<6#Kk!ooXsBJLk_ypQwyJ1!_>o~
zQw%s><ckHOnOsF8W8U@P^41uA1LmHaOOu$m)7bI-WvH7TcVQ^h!<XMK>2Vcxh?`zk
zssnQ{sOPe8M?q;?EtEnr^r=SB{GSh&fYyVp#nj|l+FLE;NIZg8N|S3fXg9IcwBTCw
z)199Lt_Kk}65(yu03e}rZW+sNxh@d}>sM(~Z$W}KpieIth3uW!9WthB?cqS}{#MAw
z5z!C0Vs`mfpD6~+0}}uA-xus(sZ`KoW)!D!q9<Jt|Mz7tEQ!aTj%bvdRi&$Mc^6!p
zC}M>2$H{Z(eI#4IQGMC<bnI!f!ze!An^eF!+05ugIpy&bg~Sj@J?<=?8nR5SSqJ2@
zW$FXo<3b0#04JUlOSuyk0*bGYgnOtEc-JU9Ud>mnB{wM*QA)5a9+i<5q<_a);R?>o
zP!2GG!uFm$&{0_$;m*`ArrPBXcL3hau5}%0;d#x0+^q>c=H5fCN<FRts)HDf<Xf@2
z#O)$+8pc52TG-n}gz+=I!fW0KZ?&c;3S^7i1<*OL7o60AbW_CwUbChHxm-V;j($i?
zzQsQ!q&l#S)K{e0@q>54)Blhs6<juOd0FIOX6fCrHY*?@5)i6fUZT-sY`l6GCeM2=
zf}Ark-KuI?^z&kGj1#}=$EkIuBj_BfmeeQNtp|@i$U|})RQ1$xSH!ngBIVF$FaC8!
zkVOotzdQapim%3Jt103441q{^LD)(Ura?wW&!K5ow0@@fd;re)d~4fFqe@P<wtT-Q
zuF-yNYX8vPnbt>zSW_8kW|78K2CP?;ORG>KPV-Hr;}<c*oG*HA_An`37jo5O`9QsI
z=ZMWfQ2-O-@wIYZk*?9&ya!vBBY85RC*!T4RDCBHaz?*><DFBb4DX0S$rF9?d0_ny
zji91CB$YNF)KB3N7dqRN#`db|6dO8sg$1WG9?;_O`#hOuYx5Tm31+FaukvIn?UBp;
z;iIYF5r%;FT>pf`hQvOO?68XR`L<c|c%IjN_;VivoLdnT?s=>`5<YZem_zt=Sb7jh
zgXR(aTOln)x^k<V1+7<{XEAf_zKW#opgCG!+UUOLcAK#9x|gy;MhsC#hH_&#_3<m%
zIUmgNhv!k|5iJPyZ7!C0%V-5<lX<nj+*xEF7u{X{?_v{7fnaw*aV|*MS~nYxFb4<>
zWjR;TAOBhQw4#;lo$GxvbzntX9TeI<d{&cny}#8ulRMo#h}diAAb|`6SfNjd3t`9Y
zP+|+7S^9QmtM*^|1u|Kja2@vFV#Mv6H#IR`b&vzy`Ha@OJEj4lN=-=mbfi}3g_raW
zGXu1(pdwPvl%!pzu8^P3n>jN9qOTSv+lTMPadKARMJR$=DTi8+VAL*v>RYCX@~-k6
zn#ASr*<aKspQf3c?rI^&a(OrLK(~WJz+-{=duM+<cP)592eH+4E8t@%uxU?BH4P+T
z;}h8>!?#`UKR@dSa3Y(Z<RKk)Bb1Zat5w}Wm8<psjL!@F*lFlK4ehY7f<{-<a3NkW
zfY;?xeK~WJfcpMK8d#l5`)K}<J{qydGy4LAz=s7#@~b-Z99<hj72XWXa4cp*Pa<$a
z%I8c5H}I;s)LL2}cQ0nt-hNbNi;MsN#(*J!Ouum3>zA4U%&~Z=U-mSvOb}*2sRE;X
zs6`hUdecROzpSS%u~*9J@VJd&Pq^<ZlppkUb&Fauv7FJ6O$ABGG`vw?*l-_ggiMaD
zuQO4bR2t<;7sl}eIam2XPLpc?TmnbGV@(_!?_HN#%H7eB6HVsK2BvnJapMW<M6}+i
zFHH)n-|ip6W|HC;pzqv0W6-4QD6zt|+-Op%xgdCH_i<#uZZ{#wawk1}X-HM%VAu3Y
z8`2^=Z4I~|t(1rG!tO|(VR2=IlG}ko#nb~2M^Z_ST6xF>A=)xNI`|UT6j3;zz(gWG
zsHKQmj>_S6p%IjF6*?v}m-^T$BLGL7{BrILV#U>2wkVId)MxOeK3QbdF%{-cvHbw?
z3;V7%{mDwMgFb_;jPQu27&Q9qY11Ct9)NS|xLp5JulRfnvJo(U|D}!ccx$inDVI3(
z=6=Gp0o!Sm0q7GXLZW=0=64yTgL=ao!w_NUa6<Am`vFon+;>%<Sehe9+&+O4>Ik^1
zGtAgx4zv$dYlFSS<%<Py5^rA?J2Vzu8Re#6eh0*+T@t4;`<-&&r*|+iTjG7H0SWv;
zyiqNV_*s$u`9+7*#6D!M`3LQmlct=zpo4pMrLpE3_m@hlKot)W;`X}SC?X2SZW|TQ
z<B+Tf6^>zK$E*7DglM&&GbdQ|>cl~`Lja7DL>#J%dFKr3SYY;j*0eK33bnFdXx8oJ
zP2Gt3X@r+xhYowT5K7b^q*K;$(OsC=gFs~MP8I`LWl#~COpV>uKX)TT63ypQHDvR7
zna-&U&Lunx6&zJD4*r)4mAAiKS@Vxf=tpA7iUBfEy%C0O1q{d56KU-T=i7hRoIj_7
zzXLGo%3W=QkDv<F6IxCDwsvL$B25$-5HJeBIJNx&p&?c!dK~n3;f&KN`hsRdAs1my
zTq1^j%pA-N<SnBJ<b#K}CFr<oL(M<+0(yU#PJiK}ry<gcxY}++%+UvO?x98~G7LtD
z0!^(QIp!C}eava1ca%Ct)r`)5JSPCQKNnXIF+)c`GH`%prdgSWff$dorYY(j1!A~1
zDwleqE!s5-gK=@wqKVw4yfJazF{QgyzT&}1iGJy~>hnRL)YtuZW-nRt_bPP%mL5u(
zQY!iVDFw2wc4pgg<g0e|oW~{3Npg#C;h6Su0cU0G=u5WsiZ)PfCce~*)*miw#mmQ3
z&o_dFupPostM4BMo&_!xv)O8B9wOM?y&skI)>;b{gF~SyHpX^MY!a91d5P*u;oZod
z!_JJ{Qz59rpHLbCd$pebvp;brJ+|%U#cfRmYPDisfW#C^GYL|zAvqOof~#z9kNR!N
z1;O#>?J%^Wue)ZyXSV~|yMRwrsK3~bsJsQTqd8uTo<f^|G9XF_3d)SAplT3h2GMau
z<$w4mZ7m_QJb07~%>|0XbIO^1oANk<-B2o)(}{kjvS#o!#oW((KkFGY<kL{P!8(BB
z$C;EKtHgUsUi={Sq_pihN}mJ*)w|Nw@ch0t1p>_Hh^UC)=hc<xhK$os!~61@P3K3m
zPCd`y@7YB63KIg|YcKn|^^s{V6y!dNUzhaBEu1DIQ2E}Yk>9zcoP!4^&n{K0=gyOS
z{@Bt2Z=GdDYZU4}xNptdE@x+&X@pC=_Joh#x3fgmxILd~Z9Iq)AM23eucSJ*-8c3K
zZ*(?&kNxrQd_X(pF&L#yezZZ0GoX!J+EY_=&R85BnVy&~g&ib^q@jw1<Ve}pH;75r
z)|Y^vAKSM-IFF>^XouuxU4Uh>035H&Ntryx`Xf+^*tIt~F2yQ#TfL5n21)8l1O@h%
z)l+Yj4%h~?&4I`MtMWk3Kfk9jo05^jx}Mv{`a31ymR(ejR-c*1jC$ToEMCdqd)+by
zKwgGSLe!_#dvnfgR8PGwM7$3R?CICnSTUAuYnhpy-3!JvEyLW%eiujekmv}DUK}M`
zx0$Bjesk#f(TdRlRAXH^@cq%HXinuTj+2Gu-kzjHsL`2v;M(_7?*y+&Q=zuw>hDi7
zBM^z&>K0f*PZhIBe9~_IR6K(t3uJ~&6`l+A$A)R`&@Ia`4%fK)7JhTy#Fi>HD24CY
zJ9e6Rem{$(t8E#<M_>NWnFiUA)nx~=i8s?98&aCX_n1Izq#Px2)$B%bCH_LI+5l1?
zvugNOqm<byIwQCZv&^%<cs8?<bbZ0{#$NSr4wyn^{OtH81xLa!28-%kK=;-14r4J@
z4O=EW(Iin=6<?{UvcW(QhAn^dclLQUj$1UwJ+Z-MkaEc$u<u7E3J@#WGS;;H(3t$O
zFd^}e?&g{-`hh6y8=y7*yEwM2z^{=nv1--KosT+Qbp4l%<DwLwg{qPIT)#p0jQW&B
z9*wQF_i6XuI<eCU%tYh>Cn*y`x$a}#-rJJn51(0Sd%Hhp#Df*k_v6c@i`1((uJjrG
z=3LBjShcRvOcredMr{%Bx=;G=?q4c^=ByGP@Q1qhpN6X54bHe~`t-lCPZ+K!lZ+5j
z+$RyNr#xPNSCx(2{ic4OGHZ~7d22f9_>hs4azquG)*ns&K5PvBM5@q`_kN-PNz;#K
zaM;%zL?^Dgm7}#nwEUFVF7UG+=w0+uhi7|wsa~`d4Ri&4hqOjXn$fSLV8&iJ>B(JC
zwri-+N`_04mgT7@XcT~%D!8J!HPSmGHQ=q-Gt%4tP3;r9naNVWvin}(iPGLG$yoGK
z<>`Mg78?wuGdu(%5?)G$^Co$Z)}wCi!JrP|r{CA8C_A7lz=sa+f!>Y|@ll>k$L6*S
zI8B5JVdky4K>ufn;NRQ&<$5)I?qMvNp9Y$`syeSO%e-!mY4_%S2R)6Hw*FQgeieGv
z@#@@{A5EG3CG<(1!O+yE;SrlfPJ5g<p)R(3D&{&f{K}~q-97p)^nbE<vIs}jca+DD
z(O2UnuJG$|5eqWuOxQWN{cf70H7RZ|Y|fNu2jlMQZkrUqL_ak*T<h)8!Ap9O&PjRn
zillYn-`4*Gp)v%FAZr=79L^mzWDddXgPaf4#>|1v{pGM1BK>+=l(avlCWs<7i0k}|
z2bNAONE7CZl9AAZyaN5JP8?$T&vLSfB5=<V?WpqO(kay_A5|w#!Gb5#L-I@%1r3q8
zi6D>PJF#~n<;7-0+JFVoE9evDw&u2fJ=|r9dwn>rCDS4Zi~=jSJoJ3rGjJDdaz;ZI
z>iN0l)K|sk26oa;Y4$7BcjsrA%m0^`P#zBsztr?~gNJCYyT6hA5906-iVJ)7&o{k7
zu2z3mL#~qczViQHQ1c(qEGq_g)A4^&w=ynLLt5h-T($rEJN|{JeSWBnGwhRD+hjy-
z1G(#r`@diLFMAy_{<B=N$NYbHM(V|vQ5P}ag8vg^{*Nsf@v7J&awdviO%yHdb)~)?
zy15uuYyq>Wss1IaWixO6#Izdpp2@oRFPZO)*8f_yGoYG)pir@6S-vN*;zZ%a3wVgh
z0PXtaQF3Qz{4!5x{h4e>&IGG}hR|aBbmAS?v6BB<b^};gqNjq%y0bX==<qrEaJ09>
z30<3P5vzt&kNGq1`5tcZb96I!u5(9!CmepBm-Ex-KU?WPTj4$d_pCdv7kYV7S0Nbp
z7cjchWfEu#y=gFCly3{|2|oX|Z}ed1_`fWIvo@4q)?;bbeI>AM&q~e%9zyJGbz02?
zvVN&y9`nD*`akblxsR8O=zZ{Wwd*_1FU<Yf%Kz<`*Z=sXn2y!}w`RIK&pONh>jUqr
z;QaF7CtttG2g+kxgBNrEh1|n1fJe}t<11$yGTadbXkRt_*TWzG<<vRH@;;nfr&3&J
zJpQj+g-LK5*y(P=vm4xYYCbioa{8}@{p<9Hg_!=SO-4+tif?Y(FJHVp^7#8!e0ian
zdim|qQ4Le#ro466pF;WYN%_=&@WPH9As#1(ChmQ+Ru6Yc35i+x)K$w{QLBs${2Ftn
zIaTSJKuUcrzvXw=vwAuxzhk7UQx=n|A2qdW2ie}7W4nH#Lh7abMA!2i+0uri*jF|2
z5*^|0T_M>;S2*pEHyF9lbGfm<tFo*C)s}mO@gA0I#`Pc0it>{r96M1*#`%|l<7kZg
znzVK3uIGbRzdh~_U8Y%{Su~s6ZlPQ-?b=M0S_s9`$eSKstjJ`ty3=%6IBn>qR>kv?
z<v6ZSZ^v*mYzNvN@;zomSoJ&-T&K1dQ0Qg!@W#NddDu2{ll0+9+Cm#L4H(q#M#K!=
z4>T!qHDGp!8g#H%Ix%wVaQdaO?ZD*}lSt2>Arn>{s`&2f`ICPcm7Wl1Yjq`8Ld!(}
z=DI+H(!tjr_({NA!cVppxB2ePH#aGUT{d<4qLus)Zu<8pOL>+X*{iTk-kX;m=x^@J
zZ($b)iXqH%a{GmH^)|h~tg{1gD55ys#jt*%gH<Z4;_pJmyg-)p?$E1jPHMn#29JIx
zuDI0ukS=iOU8|b>YN*pwst%^sgIDNCW`$(ev<(bZdV|Z47>}{-<mHr4li$epI8wzm
zulE&$rkA_Xb)6@h-TOzIm12Og%QM%`Pu|$`fG<Srfrr9}aWYz&*~5l6{m!@jpYQ6`
zYD|SZczd?!vngG5A$<#99Qy2zPWiOF?vHlp4fWlI`k$P4M^iTPZM2csOy(?hwRr5#
z65dr|WQ%dTrWcJpRV3Fb8c)xV=I<B{e~&$2;bYYq?xfF|=wMSeO_pp>YtK3^MCjTF
z?wpS=w~Xf*t?<d9GD56-vG$|9cMG)Dj78$=+r)=P3h7t(lz)dYHiRh-ZH&vJjlS{l
z;rlw)jb0T$>BSw4|Nm)$weoZb<VkQVshXsfu$Z^P&jQ_-glT7+*iq<6#4z+`ZM~FJ
z!-avYs;LQ#JgM)$%DB_E|84ndxq#gT*<vE#zS!#iJB2x<a*;-5QwbP6x7_B<a~zUC
zmzCJb*%iAf1K+T<K-;4N_e_Ct7m)fgj^W@}?guGs3#+;WhFw7?dj8;=cIts^L*Q?v
zkx-;0N6I01cCnRaFv{sQmnnmPmj8|i+WsL(>A0UU&X+xzC@QX}(Mi3Pe_wrrjex;U
zcla#=2}Ksc@s4;GRW)sr^KHK{o3yX^k0m?R{t8sAq3~%Dph?5OdgafP%BG|Gd*b%G
zrSs((H@Yu>z~fZ~%|p@pFiS+Y02B2bCko`RAx%L5VT+!6B?*wm`=F1scnCjQT-1Sl
zL;3`HS6mh_ch&dZ$+@UKzx{@&$53sdcas;F|FRwUr*4Q*7;bzlLcThksrhS8ZO=;9
zo2Hs@c9y63sulYC^v&^7>&vHOmlerOq7-L8yGwyST07WWeBkk-_w6!0*dZ+Qrl?j|
z`^-E`+B7WQKZ2v4%8wXZMqwHx-x&F~NLBrH^^lFOGPOR0X!^&g^SGz;v(tp?bW+@n
z%f%wz`4)Fasc{a6w(>&?57=bCcQ*z*QITZ}+ww2XOpU>sKjtlN1dD5&wmJ!NyEMQ1
zyV}`!bxn6bnD&#=bT@W6Yp=CaOwmHGWGyUlOa=A3LtjDat;4w?%6Dtw@BZGw1Yugw
zo~Roqar~Y_;x$5yr1x6Tq9c3Yt0Mrrzr5IqfAD8Nh0xo{uoA!?vs%<mbJnrbP{fHk
zSZ;G#Ei6#l#);3;(c0XFkoX>TgMY@g`}E2Oi$Fdb_O{s^)UYfI>9guW6V_l$X2a3d
zxhh+>#j#ljwXu<he<^Y{upY3CN`YL(4?nAgvY95#1}88)R2^atTL!#bY^?IRaLnyZ
z*vC#U%#a2=$s(EP!!pzT2X?pL_E~<D6$=wv+m3LNctvwHB)+stzL5&YT=GljHkN2#
z<42!;?+nhU{wNf^zBE|%TQw-7WMmzN-0U3sF?>*-f3Hq{3WjRT_U0MIu5UDF{#Y!2
z{H$qR%Mg3`^GjQ}dMjv%#bV@nALH%kX({ei>tU%1<hj5y6VydKo3AhyeW2-ysLK+c
z^nCFdKl-ONvE$m_fe<`ol@IiS|52Gnr+5$VaaWk-!wj!Gq;950MiYLML?1utGu*eM
zvhqH&(9Fg1%&2NqHV=k$f|Fo0!{(&A#`iwlmbD0~nd2fIQkqpLE6(i%mU55ybL&!5
zR~7S3>)wb|sDkz9{0720tsoEku4epqI<)6J${z%HA{JLeFKq?a?AnDaJLj=`dt#bP
zS-d?V+6a1Ea)2~iaw-^voUxwj3*zU`KH96N2g&wcokrCyc>elEIN#~DrRHC+J^%ya
z#){Kn{^}lcG^qtd?e$z7zXZ0L<I@RoUZdjsHQ%R&l33NBDr%Q2L!|Ladmz++Ge!LZ
z-4Y?UdtWd(-MN=UQDt@M_o?5#cJ^(4fmy-szLc$wt>h?E?hYe`@)11GeQC2=<2dM>
zE7Kms(Zr7|3{$xXz^O%fTKn&mhJGm|vQyyogr~L=)ZhNPC_Y89FGHF&(g^`B)^wu7
z+9jo#(T@vdSO|oxJN<e;zq`)4?941hr@}ev<-0j0!PlFsm0`bXqI0%&sW9px>&I7!
z@J+b?FA<XSJG00uACVzO>F%q|s7%}S=S1j({V;~J#$3gqYpDbEcU(TY5#sx1ZMSEC
z+xItSn3nsIdoH8ibXJH%2bKVylX<pL{x{q^s8C2;Uku+wOb7O=^F&&rsvN7k(EAf@
zs(%k3-%M06aF#QGy>r3AEl-hlcb&azn|$l&ZC6q^XV**3i&$qGyc&Hid9an@E|N(#
z{=Hx3)0q8op69m3Udkqps+M-k5%K;To)i7=y5$@Bb%!K}7Yq+{348t1y6E4~>m~`X
z8rWvc_7Ilm76r73(ui(rWI2A<ocN6=`qfW(!Tp*wp<d^%Lhy|i+;GMEvBxc@6&FHj
zUEykbZ&-L7HV?maYYJ2RS<V{R(Sr2~9QsGTtmK#RsF(5zZ|q_rJx&R!n30M5*-rBG
z1U;c3Q#h~^Igora7f$TRt70C9ylJDDR0#W3KpI=`T+sWn+upXD9+S&yO^IgjDhdgB
zBv5Wmc-KDSlgRS3&pzleic~HU2#9>6*P8naPU0LlB?6=zI6I&<By*FezoI`@3WM45
zIZZUW4XIRK!vJQAW_=W@ERe`mIF2>d!vd0$#f!4OJyzL{;#?t5>XBul#js1H6FyGD
ztgyd`MgP@I%!gT?72*2g_h75&BOnA^*t|5?Ekp~dO`uE?kU@U;UpEB#pWktSyj;^(
zposbUCnc0fjta0g2cnPzp%1`_XosGfl|-y8<_d+XKfPeLn}e?0vL?I}IpXFMXsdtM
zsC9cu#{<Q%9Q2U(CH`8}c>`VGXGcQ_j+6z{NNk;A?c~@N*z9F8WeB!kBGJvCpJ-?&
z#nD&o8K(u@B0Kqt=<vo8K}9?L_|YcA@Al3Q=Ch8~$u}oX_42om61*cJ^lWSeQZ!mS
zm&hx<l++&e>ZgOPmy<9BAj~M=r&eP+=ghEVEq4{JVtCkOEq4Q@;%EtMl;_LiAn-6w
zzaA^*T_#~*;hw>y4Quc+I}#I%I~`FyNoCO=n9ubLOng4!*`L|CP@}2uYy*vmjq0Y_
zUTTL@xn99x#KqGG+hm&`i$<USqMJmgPL1{BKjchNvH^VvYN@7Bx9j0BmwT!>6!5!N
zseij5xE*@$eE9A4WH6Dj*~MbcYPovgPq{F?IdR<n3hw-8e?5)+`w|c{_<Io+Kv}48
z_j$eTB#rE~Exd(YOXKz44MVn<!$m)uoU6Wdev$wketW?k-@*{DdesdknmTTktPYEd
z8jOjyBo)<`J|5F*@)r`tX}MEUe-ynrpZR@_)dW%y*t<b2E|nz05@AHPxJljJbZ8FN
z@GCUhw!WKnpay2%3^RiSLsG*pu1l9*2Z<r2O0c?ZOJbZ{HKjm+>pUIxdOVmikJW+1
zR;kHj$S&?0=iPD()Gr_S(lvJMz?xD-$}v9>@j4ZcVx488gp3ZHDpX?CPbI<Rkb|%P
zGwy?R(MsxXV?SOVhz3O64ohiGQsR0=>oYqjR1ywkoc+SM;h^NxeKSUXRoBH41$lCr
zz-*WV*T8jqp04W!SbQ74`m}F$%9MyuC|&y17*)K)42Vui3SrCUpk2;0<mS)ZO9u|(
zWz*Ipd-Xe}qlv(KlxKg3k1Kb0E|)?X7AUd0lOI3CJa>-Gx%4F7a4f!Nhr08=UkJJS
zh6Sv5Ah0At!GcR9QHE5QMdst-lM@%-vO{c<P>)`;o~)I6-}KHVMM|0DqM9DTC7XzX
zkVX5vJaM@?>z-Zy;o-Fmv~M7%v4M%mI`m38CiV-}b}x48>H}ms&O5S>WO+*OXAcur
z-F8icO3z!G<{%u-Ov=AnYSVyl9f2Pef(+L&i*z8v>I&4`4Gxe?TxM9wVF)&qR{<1@
zTzHQ)Rc=o*cT^y+)<4_MYG1H{9LjVYbQ>Vf)#N1y>A_ByEA*VDHDIS!q}eHc{+QZI
zYiEvK%`1UfbkbwF;%$>z*WjSb!m0Mr5BD1bE0}eJ848!A<k%g=l{fH=eLL$kWAFa*
zx3Vk?`ToJ$H_NzpPIA*WZh_8qPN+{zHLyj{XxjH4y*uNt*`dOkaod3g@~~H;+Y!0F
zH>;~Xqk-?T=T|EKDG4zqJ~_i>qi>cS`=}W0@RX$nVv1x!6;=fRwEQC_Hg~D_5_uE6
zp9j_<u$Y6@muS0;xneKx#sHuCdQ$AFqLy1dp~u0uzqNL?(d_Jx?WR59XSrk7P@prD
z8f6c-UXvOWAZfA1jZ`G8ce0fL`I6Mc6Y59<q+O?H*q_td)cCmr8$%Up4m|P1ZEN1#
zC%mYgP|&f{WdOeLPT?2k4jS=;-fM|<OjcdpSu~7YGN3<OY_=ckf-hkKWFfG_?pjMR
zN|Iln+=vLD=VpqGj=io#uv_7))Z|MTr_`uuz^u(~CSuCf<EX}(!}h3s67yEq^(adX
z)*ESictDDF8Tv#$t$igtYHyg`0VKlEi>kvrUi{YNK1#Ojz!fT5E=L|rQix6bpU+1Q
z@Rqtv!;U}lZ8V|&ihaB<!=4S;t*gaMNBF!p%aET{y#jtyNovK7F~@8rle*mY)KwVL
zR0W%}uoBe!2#sNz-&dC20(s8p^!m~@&w*jHj!cOYaKayFB+?JKl>=KmHK8}&Nn*4X
zASJ*_70p?~EfKfW{8+L6U~m=17<LQc2Wv}BGL4S2TMxEhuPvr`-ODxrB=zbmN@Ziu
z#^<%A6+DL&0Jh3Q>|F}?OZeGD%ZhGkPCnNi%hw$zUO2|w!2cL*3~W@DO30AKef_mK
zJ~?-}5;C}PS!<v%ee2C@LepzVMS||(B`G|($47lnG6}Eneh6;?^d5su0JFzXu03Qe
ztyJz%@8izoPk#F@m)Ibq^r=!2E!C&<&2lbmgkPG6<0p5XBN?JmrZ!^MA8`nQ^J|Xd
z9lOE?28KcjIpe8(RtLQeZ>a~td~licqxs6P@u%6VFXG~l4)+j}_PZ0LM%!0`Lwgn&
z38(^{XjHE!JVaQK|7H<KC#0(<HOm#~x;?{;us<?Cp>LXtHf2{BjzY9~hU>hFt43rn
z^+|8EMu~vt%VNJ`#UaDT_HUFkr#KkP+Mn@B5Ha{@5tP8aEJ)I~OmZ?r?&ke$8FX+d
zR=@DIOZ@1hp-mNIr_}WLjfOxS8?!vHSJs^is>0DbufhaUFAKYMslO)XDt>JdPpHQW
zzc3_uH<){DJ0)Qz`%Lc-w|@l;gMpy@?y##B4GuuE=QKIEFR9*&F@y9I%^`hIx@<gs
zkZParIlN?`xhfpC4NHboff^N7$&QbefsXtBv@W>(tUWWWZFl)G{72{*ltJ`)aVh(k
z+`hq%hYDt-mqHxbtKwXozk@nThz5TSbG3gt?0(OK7asm1iYGGPmeH0t1|5&kW+lF_
zq<cIUdr4=grqkYKCX6*b=lG)!ZIT_j)2I6?i|=&Q3C*FjsxDiGR{ln=(%VsJ^zreW
zG#}vZ&HmC>QyVd5@pMYMg!_F$P@mG;$(Kog{JEUv-d^cEf}$)Fjy>8CM<e)U<u~?M
zz2vG7SkuorVpgt3E-sgy*aoCl%r&flvA1L!sigbl3~2et_c!5K|A6;U+wJ0yDi1tR
z+&dBM65A2CpRz+FzDU!=gt25Fi{;#2{$eV;M=&CHRC^Gnp^6PV<tf*XiyvP;Ao_OK
z1+9Bpi&?AxUidkOCqnL!bp}E7^J#7T&2!GfJj{>Zh5$?<pw<V)m)IG|Z@*Vslqn*6
zH1s#MN7(aYmAzfByg#2@qNK6jx~DIXJ$@>as%1M45?cd){gjDBcqj1aXQN+e6hGdv
zdINNxqn&S&1gC^1*SmJTpaxaM1r@#~8|^7|D0}*)_9*YH53RaCV3i}H5<f1sOU79H
z!4+0C!t=&kQFZ>>f}Dhxsnv47aK7y_SoxGqT7luO8q(H%qMrc-o7AV_PdI#MLfjts
zH*jg^veteg1LGXJHquXGj4>a!IcJ$LuV&hoP7t<FdL_dCi6p<l{XR(>T$W?MIaK3D
zaMUu%{6w4tlVj^_=eINHTc999XGs3nNn_CZ3S6#3cs@%%_m&6uU(Ug9x}JP4$aD<&
z7>lXhaKj!mlNN%o5<1eOGqu0pkObyh3WZ7*+%{Pp?Yh;lj=*?OhKt2|3&NwU30)Yn
z8yEOB+2`QARtX%CDJfE&JhDL0H`V3RAH!}nm;Tr~#p`vu9b5a}YP>3uZGaGD{u@uL
zjWu~6ABdorn1n_2q<K6^2}#MmV|uF)f1CZ1vLicMWP4fAazlhNK}lQ$^_xn>@NHfG
z$0JoC&N5b6B-G=s?+V&F$_wC#;e<@tCF@QB9KtgSFk_tADx4BU`{9+m_bB?4NA7=Z
z77A<XLYz2BAAR6CKH=bo)#wP0*a8AKfNc*c(u|4})!nY@XjKxsqVYwZ-It^ME3b6z
z#wyR49gtY=#pOWvr4a$<r{PS@=)PlpPo(Ve8F72`cm*%h%_$g~%nT!4i61mz<M<Ot
zjAy%UugR%6++X58b+gyoJC<P#r+>n67ai8{nSIl%UIRH?mij$kN>mroe~&qFcDcHe
zFvJ&9QSGp|83y9tJ$eGkgl6WeMLrIttzT>RiY0ZiF8oe?yph}c$&lNuq6-U_Kywso
zmf$hn@B3yT2vMus%n~7Q`^*yfp^$-O)f4He@Kl>WB!y6+&v{Cg(tYNYsM}ZP;30+B
zzK2UB@#(;%7a;%cqm!KQ28#(!)X)T57}oGSN-o)0(0i09@|S-l9Vq;ah9xwLS5r7Z
zvc{VQ<4v=B8$!uiPd|+P@$7h`^-#aim961JSdkil!tBB|;J%G&y>P|gjq9-NWDWpW
zikGfVKGGY?j_Q+(4*5JH7xfM>xq%V6b=%S<k%s;mkt58XjCiX1{`*s<uaqCYzid3X
z^fCwo>Y-1_7seuype1pguNDF?`z=1R_qh&iTv@^rhD&5uDDdJQF@{5i^%g&f%<c-o
zHCbs?E05XNH>L+=z<ZbCZ?jiV*so>f2zz8H|0==lw@J6U<SqmjA2jF<jnFVqKjS4e
z>`o#aO~Gs#(ZlFX0=knxz9rYlHeo8i65jUMGxLJ=m)lEO*Lfn!*SEz8^)t@kI(<TE
zFDy5yi1>6}>W2wmN}tNWtpz$i@s_oHVSGOyExN&GUYXP%#skzZrA8$ubomE_sE2()
z+Q-2__hyQU-bzi&nUkP3hi@W8MsY~WuIgA}5yksk$_tkLjnBVwT;te;3gr++G@)#Q
z3H(qcJX?49h%|*awV_O(m#9B8BSC%5X1S?QOtejL?}7UoribQiGIbDPNX~_XVWQU4
zbZYJ1fL#EW-<9swv~G_Nf}f-3@@|#^m^_Y)?0rvo*PWu`J4!Va>PZVbY%JQY?>8qP
zuyz-2?l`4*?Pcj{q%cV({V<h}517uABpm@HDewYjNVryiPhTBI(~^_CiDxl$w56&1
z8hLr(8HUu{ZKZ_TgOtdHzy_4&Zm+d1a-q-3RdkM8c>CdB#V;OJ<M+lztGh|J)*9e~
z#l6lXcX4l3aqHzGoGf?aRaWN|XKZ!g9bGPziy!HfQ=i>mQKg{}oWypmkFnGI&yQBL
z1|-B!do&l}+)X>BpNH`thG!frf`?|yWON!XWN*leVYt(oXfMZ-)~oP?jh3DyZt$*j
z9gqXO)Um)fYyC^}433*4Mu#8oS9E2DZ;JqND*b|gL8QI-&>U#2!>jt8+b+?Rs=e(g
zk4x)S)!<Ocj6SW5Lj;$;ya1=&n`pZBr?*)4M_jw{aCfpjX`itd?b4ZgBr8RfCbXMv
zg|VM2_(*zQA@1IPD}(qFdNh?o`$LF>dpdM9HqlsTl#hQ?GY0wLRYQI~6&Z&OwuSWa
zE8Yug{*VB5$l8MD4MKy2OUFj52H1blUlJq_IiUfQY^n3~_0u@0t+M|`{h)Vn7bgXZ
zqL3A~S~)Kj4(S*-gR-qq`fagdLqvl$L8e~{VM*io60wXt;SF@0Lm`Tsykg-bw{-&^
zDGFSxdVbJ8pcE@9Jg-mJmIJ@g_Hj+q-C|HI>f9N~gRP=~`HfIBWYB3>5!nU$D+a;<
zpxXPHKfST>Nz&a~z2_N6ZD0-ND1r%&4X}guasVskXd);Wb?~AK{#66@t2g}2Fa{HP
zH1meJGLy{I7GxOreDo>u9>z{{I}LQ(yPM2!B^Hq7q%Mc_cCCI-vcbcqCHm)UcvnJ~
zzyg>?H*9!Q=H#TtT}iFK?_;+r1MjRqYU!eh+~6gzRv_^4SLH-iq|>IB*)7T;DN4BM
zm-$I!;DSY+<k%`hEd8HvuNZ&SD8;eeyE&%?6+E>|-gM7RMHr)s?uGSTe$89)O^H(w
zEgZ=fjg|<b^9ho?6e12xs-3VCitlF4WUgdSdm@U|xVz&D;=i<XlaF>Z4uBwMgtva_
z@3jLZH-El;#u_8}=6?1y1DH212kOGZKL~3CKloBoXE?vnYp_dSgZx5vVib_i>oMld
zXbMJ2FFjrTho7%dRsWH8#d=`CE#lTm2Tr?9bdqnCrlLS=Pu)##lX37tjBCi`E12W_
zs_rofi;bV2t~578eM?a^VV?Nwa>_s;^@!1DnZ1tQ=<?~Z>saf8B;qh_e`yT@x)Ngx
z9p|Y|+xeR(ZW3Z?jMs5px~{aw6jTj&Wc%mUntKUA>Od<3v(}#)7Kzom5Z;<kTZyfX
z<@M}f!L5LL9?hnL7hXImnZ{`UD3$xfHr+>$G&@hj+g^&tvumert_4s+47evPP$ljQ
zX_Y1ecnT(Vlc~4Bs`Af2$}Tle*~*avHMQ^?7;ydbld;ROPr;|3S2*ujhlI*hH>2(Q
ztc#AY+#%Uw!$v;i&%W{r(FzP4I>Rg=q_q+lHD_v$FC{rYi8L#&L6K*fEXSPFcfNqw
zWFz05XWZ2PG8h<uH!u^oHwd$@e;YiPCn<@p8j1tIgWzWNGHJU6M7XsS00Na4C<(OU
zTY5E&3@v&bG-bEWo&bf52_Rvz8@5J8F&tH)$e8GxgL;HHy+92%xfFZZyYKs~5KmHz
z0Qxn-)sUYxpB_Kr?>B_Nv8o|QrRq^P18T=~cIz?keDwDNJyr8%UIxf(Dj$5IGM%=F
zOxk0i9<B1rpSB4L`z9)Gf4<S5|Jn=_4bMFJh32mRA>?<`?Dfvj-s>t*XlN%1L}5mC
zf5U`R<Y%VaeUMSawShtxuQ!7vv%7H2IOXNpronsPBAq1Slhoi5rU`OsRU=**lvThS
z6lxmqKFqZzDKO*u_+0_9wnWLQe%5Qg9G%>!O|j8a*f<&O597@_$}Lrn>CD&Ry|@uZ
zApJ3~)9!On&bb4k{*-3uVs>Zfrq;et_1*XgQj+2$<_o>#1ZMnN6F0g%h%s2Rrowx$
z%PHl7Rw>JETws4#`cg0@*49m|FTdUEZ<bC49?c1<^oHT<--+y>p%JuV4vrEaNpd|E
z=j<IbgP6e5Kjp&12JEo6e03Thf501x`oU%66Lvj73H1mL{gdeGUt$AK7e85c0cN@X
zZhiWGJ0#u}KpOZ^Vo=5|w8i5s9g<x+BZ{C})nQtWy=)XM@x(lpcQgsmpJ}h)z+Qau
zOWQst_VJZ}Of2H5(N&-a@BLYKBEDRGzRdvqb_1LeOKBhpUu&TOEPL}&wHorOaq!{g
z5+Lw*HD|?<hCBXEj&b&Wcudt)Ux*^@`}UL!W#pd9Q6P*K*wEuxz?Dxp54Y)SSgV&|
z4}IiC{kdpUN~K14HV{AWL4xDVZ(iDg)j{di-QmGeJ5MTcLs;g(>syI1_4iwj5p}O8
zQMxrflI_oI_~`c!^Z^z>0GT6cgg>DIkchl?!5|ufvZ*q=A0LU>K|vD1-nKW~cHb%f
z(rr`HCgi?@JRi*v;>e?Ib{3-I$^1N!S4=ud4!TpynXzxQ=CW~(-C?V6RFM~x5TiBO
zR~zZWC(3rLafe;Y(z1Fyp)K$aco_MfqsV#)-6y_3RA!k<Hm3W*+Zq%TY@|eGpG4a2
zfBN|0qhPx}|33~zhiO823c8m(;P6Cvndhutb#gSM`elUp2ESU4-BBz%3IexVK0}wY
zkNY(;Y5%UcNN&d9_>kYd6V#ow1e*%7Cbne;?8j-=DHS^eHDoYSlmzp57w&CS#;nSP
z0?4B95IH(geOJ}5H$!0Rv!IO3V)k`xeeMg{M2Xe_vZ{2+29!S*Plz)z$xI_ntrBEr
zL#d9fP9BP_|0PD{(R=4lk~Sv=<upZ?(Qss(L9Sa+ULvA$P@=9_N=jXUI1rv~NM5MI
zR(XceeI4*4xRPdplsNv9L47yry>SQfcfV8-3xj$XkX*EX)F~A|`f9U{LZY%#;&%i0
z+f`ULrH$<~nx@)*u}B*u_)^Zj2&8MSZcR<4!9uN(gygUoo#4>+Hs987KVb)eRS>6S
zxluLS)v-0PG`~Xhh=uB`d+r>$sAu7LUBX3jr9tik)%-0>jaZSCCUD`l5>Hre<Bv$z
zxir36ui<PCAJpu1IC~Ng4Su1xeRiaK4;}4Y*BAy?67<P*2y3yuoc(za!b#st4WO9p
zo#<ecOX*j?));^0mcM=9>`kb({2*Zp-vNk7t_H_E__p~vnahgLm2AqjAV5fOwIN5N
zOB`Ag`qXnJ1!#ctbjNBm2flJ8Sj0;e|A$yo-46euh(bc^U)66Sqp$Mo!fsaq*bb^T
zVY`uo6LyqC4iS7EPXf?gH>ND|G?ysgkU7jIj8>sP(M3MQQu;F5DK<LaP0ZoV)A0um
z7A$aq`&*YFJM<@Snq0fD3)v^h-=|M$24R#P4njGZduS8Il#c!J{fRj&E_~brJ}d5(
zgj&fAK^qm~;t0>?*ou(R^MQ+TPi|kP&oA?$9MlnysG|wTI5Ftji6JQSenaknju%@j
z|LQ>E_cuVD*|_tbIJ4)LsD+k0Z}WkFC?enIotoj0S+)8*-t})o+)@(F1mYGl9Tm8p
zse8s{s#PH2qxIk4vptoMyjIqUp-H-NA)vLW5_Df_cI-C|q)%)!rX@1<q9vIHV^GrL
zh7{{!ak)hJEaa}_qV^{#nq=gV1>;*D!>2;`qpsw>M~G81&~ur^;i@O_eTwzb*;E)C
zNw$=Y#}mE|e!4v>nFbKgFHie*iFNbG{zM7@X^!I@gR-^iP>FI)+No~Cm}^&!{-UV5
zw}*R_F>xf)7eya7yEqm(2Sz!WhWn^g3ppDGrV3|2vKz<U4V)xO*-;k6>7wQCdB^Qn
zWgE>hR}zm5a~s!pSO1~m9e5Iua8u!Cu)yo!Fk3SAa1_s!W`Jq=j5iOjjs`BLEYN2s
z#5usB)3ZOkp+U~4nl1qrhBiSukix2;quPLioXaI&J0o-JU=0bok|fgUslo=i(RK!S
z@Gf?g#a8A^>^3vD6AdnVKc{FGalvyXc{y?I%>minMTgg87Pj?8-{rR!LSse<?e0>*
zo{R~Q^tSY?{32*oY_H?lW(nrEyOE)?&$ml>lx}XH-;i8=-_WM%F@l~7I8R7@d<gI$
zNhOKgmeL2Y`ssh(6UOy9%-w@q1Wc~F^`yQ6#C}&JprTYqCM%;%c%y-E=39}2hdCTd
zN1KKYHb;4K$hyF(k!NumieQ2m(NdlJf*Vc>D8uyHGC2ZkYvNn#-Cq^~*w$(IwbxhN
zh)pg+(2a4x@z=#Xd**aHS~pihv&maMdn5e@rMnFbmp;sMGHf8BA;yXKaZVNk3tMnD
z*ECFw&sSH+iTn72w?k4KzC*odlpsk>W1H%UzQF0hkZAfvF%B~!hA^ukwZmkl&5JeA
zXt4?70ctr!2V)?i`UFPaE^!Np*kD+H&^SDH{W*9*OkilqZ(9fZ?SytlJ5Yk{7I>dF
zb<3y%NAsgv=K6|5aPR~h3{&r(syy}x_6VUq!FXXNn%Q#=bg1qfrO{_TvQ`=UEGCi%
zOJQBfDbscn#dB;>YipM_<L!wfVy@GY-eR9HBb!q!8R+1iysR23ntcsh!}iE>L$|`{
z8Kvk}GI+c{KF+sIPVy}P4fvs3qqziPMIxk!CU@){n|*r_)UyLiZ&))}w9|BJG?D$s
zuQPr9=MZ;QqRN>g=r+mm-5Ys*ci!f5QkP%CUV9ME)1*gS7&6nQAJZVXKL3bJK)4cZ
z5%EptTzaV`s46$`S|^OKiZr*?<%3cC{BXH%q5kKuAor-CBLy|RK%X6-3~H@}Hg}T8
zF$e-dizdxqn~W+c793p~q8s4)Qx1(d_G&X~C#vK4{b@6JNCnhvi`ly=7DOD#OWQ{V
z3(cSTdsmWHIX?e6Y10EPTKWcPh3!e`lDb;$aJM#&<oY{#QjN8Qv^4(aLZq*pR~9?4
z;R;f7KsKM(eQ%t;GG}&qwi&5Y_ul+;L=-bU{7baF>tP*q$Zcg>@!MMK+5#%tIk7#q
z>gwU79)$+*&6|PH-GCup{18tukSqXdShMkd+_|^@FBj>3@9(chvtu#rcGfYGPAedi
zZ9xLU>`Z3g=*(l_T>m#IbtL@j7Z(tGNs2Qk&U*RIPeqoGcDeUA-fk?5J<SRWp~Uuz
z>5bt=b__W^LzdQljE!5mMSCiwT*gGpLDd7y=>^jfu}XuQe4!Li1X7g<L6WyiUDU-k
z#gP1NVQd-lZS9^7*nyC*%6k$r5+^Cgk~iY>?f%#AU%)O3`)nk9Y{jaw(7<WBxDKG=
zrY#?F`z13;qGavEF$L9#E|T#@T2_Zq2p1kD4~a${*xM|H?<LLqTl8FQI$%N_Ig%&`
zTN+OU$UBDHmAJX7ddx%{ZDLruMjd7u;fVgTnG=9r%E!&I3+nWN+ySuLwQ<Xqq>l8Z
zQah>u^0Bm8Y%c1T{=l^<Qc;=FlL&&$yOAu)O=MU?_L^KRvzEJhvjx)lEC2#o%>IVn
z!%-ROq;?}6AKyNe<5lM!O0^}k*JW+`@ILZlmpIXT^_#nSl-o_Npu~XL(x0LKSJ!!m
zHT7(JUl9ZZCG;XC2_1qorArAQAWc9ZC?X|*N(U*CCX!I3g^pC|ph#1ClODQA?-CMF
zs)XKeJm>uGbG*;{?tk~Q%gkQ$U3+HM`Ye`j#NeqM`_D0`G~blI^u3;=VZAy_O0oBe
zqW4mHQy6=pHiiJ9HZuFAxGf0vUMrN(D?V3i#QMiU`g?2IdkT;uy)l4Zo2`IUMnf!$
zBUWP<wmpdA?ZpjU69l<1UCJ9!JA7XIz--*Hpl5^*oEK^g-;bBuF`rGD<k@?`70(u7
z*POE<B`U(hTVea$0<KUefGR2f@_{>l(b2J*@#Cz%k)Oh+;@@grg0>VypPX?~c>p{v
z=30ffT6sb-F<pIa{fuio6q|?*x5$}PfLfCM8JruiMnj0@Ob52ZI~Kx1b;GRh?~sNH
z(+UCJGQHt}lNl)8e9J@iJrPE_S|F8Y((+h2U~ky>xj6GH8<2Zh%3vgAv^(0*9m;BZ
zWLmARs~O@YN)9UP<}@T3rQ!6a(cicUx|^krp$5mB%oa81_8Sk5oX|(yj+lrL1aojn
zg2uXnmb9y~Iyo-8vT09!k;h-A?`5))Bg%gv*Kw6Fg9OdJoCn+zcXo?5$%^*;9&Z`b
zE`h{N(V*b?M%E=rJUo(oap~a3inkQ6uMc$@B^kP3t5KZ6pyw_%)hTsbnScawE9LGj
zB$`UTToB<cP^{n-_UuB%*6i8oXTGqRdI9Ele9X)Ag)dUp06aU8BlXwEG=s$*2mt6p
z;CLupGV$kFWuqxHS{WQ}9dzQ0c+tE}vm@mPAgp#;m59Y0&sS8hI_NQ$R?6<b7kjvy
z<wzC!wDZaYT6K}GPaPBG!l}8`Bl9h5)z-q}yl(%Uszvh;%Ih|27#iC_wtRmDBLz*!
z$PO`~<VUPbB2tIdcbVzzx~L6x(6UOi|JL~|QUS7khm>!k;b);D$h-DUv*qvt<Dcd1
zRTr-7oe3l^8Tqb`;rp?Y4)0t!(meD#>Erx0=5KWQy?~enBIsG(=S^=>+$9@HA3W)*
zZ%!yS`(N>Y_aha!S`6a5Nu1x8GngT%g;s#t)}7by(NBbm$Bra)+Na2ztgxFVH&C98
zd|TJ`DT)5#P%1{{wScmXJAVRDO?nibf76U<WHP3Q(b_;7<ld4-(czNXctR<zI;ktf
zr=u3!**=9UiC$GT_%`nMx{rYp{!8iz_SLMl)9YNw+(RDvt5($@{8hx0FF+cPb*mOV
z7XqT^cVs|GxAs*dt-g0g&{B0s9)N=M>L8OKPMr%}_q$@MyFdw<UN!jUV@oOdc;W*i
zcr+)SBwJc-TsaEQ4=F!xzo&h+p_RZ?L#(0zkuNE?o)R%k;NgKCmD;x+<J!5c#%9r#
zT9;2j3>0Ti28S2os9uwG73kf3kLK%0D5*UE>3s%CN;18|%6p-aa|;@dY(xv<zJs-j
z0Tw%bGE4&`a=~bgx~z~lmNqxFO}9@IcACvXF>VY>?sSUSNfpw8aB>A<NIXM<f)&Ue
z8UE@*LXRdJ*g{eH8gMFUKA!O6Y-v%k1i?T>vpeh!nVl+w<XMq16QHfxkoJL!B-h{?
zltq7&II?K<Y1%!JlH+vwSwSd;$kA`LHia>P(#7KYb=M=uJB&Q>Wt@=Su8h;U+(4hA
zb($dNoD!!lF2quzE0=(V?%wcHFPK|F8o_S)!%S~q*?rA}vQ3r6hmy7UUXVftKis@Y
zV3WZ(Nn<I?n>2bE*kRaTjSExU36YIL)pwvJ1^S<y9KX)Lf2u%fOkKA9K!FZ#{yY<m
z)GE62QK-(fo}9I!c*JK%4CM44Cd`$@fL-XyWY(9?bOLE$oJ>kqx(^(t_;Cr(Y-O8@
z9?1!g1|IJ9po24t9plq>NkcjlBsvT~IJa>QcKN%0u@AGqJ|)?8PD|+h%su8Qz_?lD
zn}rU<!oH`}EDD6o3W|NUX+7~gK$Nn$bH3UBeH-0kJ_HTW4}spx&bG{lzC5<ZoK2^j
zVq_}?Uuvh{J}UR+SGshGlU++q<)Jb2c%VnbaXZcC9?Rl_hGuRRGCyr)@>M}rAnQ&B
zLbDFim#NoZsbdz$6%&bgjz*aWWQIYM{9V?+PRg9=BG<P`DLL*~M2FgIN1lk`pNVR>
zxD6hv4wn~(sJ!<6ItkL47Ob9c3=@^XM`B-CR1{}fX&V+)z!lX;dpa^$xN(kxM#QA7
z@J+g9;+#as)r<$$3*ZT!{Hl?Pwl{gf#2vh#Top?`h2Ok=8Mqa;da(HDi<lOl4ZY5z
zX4QD9%RM7itPMAVYq)Zq!RHDPwNedWTw^y-qqbRLPjwu${1vEZq|XpVs8j0nd;7cu
zKW^g2TUp&VQJ@=P7xl?Qh-zYXMI}$?wN&qO{<TsvGOGvVJlzJS-P{k6d$IUpI%Ve$
zJP%Ggh`$6q>h6cze7V^E>tymv(WeCVYb^RCYlUd?h`4hbGD$O2Dp_~zE7CT%Bv%MX
zMCzb14G(nXJ8$Wjzf3RhPTbY?p`{IZ+^}m^q691B*y*OzQrzoozB|Kxwbl_VHzvPe
zVP2OKa8z*$rdd$Gi(-W_zzSerJMX+5!4EGY3^*mC6v9O(4k+qSV@JbG0xJ#<{OkgS
z#JoY^8JG!%oa5_}Czd1XV{zNl^eBvEkv`|*HHPZNR`gKSdA|*cX9V1`36Jv;TXo)H
zXruI4dZ5W@8)8pV%5Y-?S`>x<UWV7y+n^&s!sIf7!EKc<g2t4>@{Ob-$(SUr9oN{4
z+H#hQ)A(F^TV2=<p4N?Je!E<&w>`}OJh=?%KTepLc@xDG2jbDq@VQirLkZW$^ivK8
z)rhk(-)qoNsn9m>XaL*cG|pFP$W5%K5Wn^5QXe$N3d?x37}3EnN(%eV<J)V%XAGQa
z^#e4^U^TL8%~Y8E&iJ_ixdG~<$IlCCh6iUk1dp*6<avkPH;hqA`ni$5J6!csixY+?
zm>RUI-Wv4lSM7~Vins-Tm-KDrN}bPMFSuxwo$E6gD+zo=vfm9GQJNw9j2K$U4u*HZ
zS0eQ?no?|rpX<Wi8K8QX-P3`=)OBztMsSC<{8J*VAf7+-YHfS}qXLoT8*fdG6&6ny
z-1L<4XOAuCbJWV=fh?Sod*U}nuYjaorU81@7s61sfuJ*^P)Dzqax4=16;evFE>AFc
z`Rvh@mdGAr24(<X76g~9Dm9v1`95%`9LXZOd?(2tq!=B{QNZr&vmauciJCPBet9sd
zH@FxS;}zG}U{!aq(2~*Hd@hFTIkmiQ{8YcT$!n=QJ&mO;y3_CD!fy&ra)({0s?^Hb
z(z#0%T0c9R-ZQfmi{CPcR}Wb>9{iXdaM)3FMD5|vjgvHhLcF@a+R(}}HT<B3L@>8m
z+us#V?2H(X>@N_$%M|9j-9#BF9AA~Q6$d7vQ0&X6yjBdKI`q}a<EuHRr*@#AHbnYW
z?8{ob<-Ihl5e*yEQD`}{t$<fRfG!XfzL)^)_W_UZ?QAw4MU^9j=Rs6hYdWiUx?q+)
z9k5T;v%|*A5N;{%;)os;?~)_?kZn#g?cVou;_#ZTPVq4zySlA<ETB^|$M@jYJ<@g_
zZQ9`lF=Z3Ki?VW^qfh!65%ZWg6e*LjX4!%iGT?PM{W#;eI&v$`6;YX@sWthg{Ik$B
z@I!1HFF-nikHm^LhZ-g(f@Siq+#Wk%HoUA{GP-pJ1JbhjcYSz9UkZDc^nl4{54ghW
z%h^KN3Y@s}rFYwo0Z_<N6x?ak9`ZYmR1uTixoXkz?LgY|#e}axpnE3&HT62E9s5O5
zRG3p&PIsH^eQ5bd^@ZS247aV+)7Y|EODr4z9NNq#$nV-%HmQ#*vjX6~Ig5>7{Q`_o
zbL{TGJ#rjDVnff-25F3JWbE6B?e7-PED5#G@t;P8eLen~KnK_1&I}{zjKWX(VUMm-
z=*V)(L)Nn&P8RKp_XUh{fuz0DkI&5kK`Yzuvw`_;Tye;6a(40fOxya9#Oo2fovf{)
z?I$WFJ-8{ECL}auog0I79=j5RRzlGa^QulC7yxL_{1lhTX=YV01EP&o4A&=rIS@$}
zVPrQ!7eKvibk^M)t}2F$a+)ee`fr21)?6f9*xAUnFjtt7=7BBDd%F#Yx~^r30H5-x
zfkZfppYT#Z0y2XA&T4?E2zX}&qM`eFdX^2r8DwD*snzIYayE_|G0zoVQZWrbRmhSe
zE4xk;T50Bory)Q5%1T*^Jl!HPu{+p6`LO<K^b)<^o|vgqjBH<RzR!o4>)~a-hWt>i
z_h$Qu!BG#VAIN8GzT}sRlseHQVLlC4gG#fNn|HnmfS}9J9h7fRjN}61yx+eubomOC
z`%ct0R0X>SC}^jP5s1IO6F<=4s#3COZJsJ@{}{vJ`)n{DeN&Xs@ott})PsE}hx{jK
zwM^lfYC`T@V+{38S1}F4SN$0baywtD+hWKg`_n$p*;o`b1~3n)0LxZMO?N&a-hz}Z
zGHsR5lO>3m*r;1{&5E2Il_2vT3%)P|L*6AR<Xnr3N|AVLt_Zw6X^QCH@;Xe}!ub4F
zVpG3T2O#^~O{sNy-q_JvS1gUImk)K3>Wl=k1^ev(0x_|qy#csKq=p~p8>O{>&*zFq
zA!|A0YNbCVK&BzOgN0S$acQGS-e_@=yNloz3AkI&fUm*6<G^EIfDe5xKl-hy9iuR5
zbH}S`W0!0@yba2qK_c{0T<7;eaC?c-rfmgXbnC0vMG$FF=!o^=^NLu2Bo5Oqttb-!
z<eS^jx=+h^?Hvkj4s6w|CHn?-Y1<4fVW2`N?1K61?CWAe9Tc2(@#Zbu+|Lm=zQ6fx
zJi%+0!$1*4zz_+4>mnwu%<<a8E06A7s`HY(Cq*Gjf;1;qMx;GX8T+0)FGz75_a^2y
z{*=MiOfyc5{P}3Ic|+UN*#j-4GjJXr#eSfwCvh>^k=#+`y$*86(;iTy*tA2|HE9q>
z=cjnIw_Cj13thkmVo)b4s`DNBm2A4?;-{li_cfZWa-+Jq)VmL{vT<ky((bba?K7+F
zkcc7kIrv;fU<oW*TTN}xlVj^nQU-7TvR*{9qL|_yy?SyaFb@iW{g&M2={-Q2Ee&~G
z6Od$h*1=$<`i)jJZ~RKb?7;z$P65ze$iNQQWWRWd^*s>5si=nA{Mgm|@fyaBE)O<y
z%60gj!r&CdjSW-&dJPn)grhV72fKP?d9@F*|CCX~g=uqo9l@V$+=!5;a^s9(A?({C
z-}EFqwl`(1`k{7zKNN~-6fQ)TP|Oj;a_$I{hp~6I@@b2owOz%CHTGb;fZ>`So5!VW
zU<(GA`AD<|H3HDjRta^}Q3q?j15n<)GjN@ed*J0YCK4@0zpb7u$VB6(w$Km|Zn{Dg
z+gBx;CBVK>%t@S=E?muj0kU`fG4}1Kv8hYO{6))-(ASVtBY~cbX1G9QDCX+Q9a?P8
z-Q(QBh%R7VE!~a*9icWEol=NMDiK*W=*CpO5bl1YK|9{PX05YxpQ*9nB)oFZ2x`Ge
z4G*ZeN*TnOw)*%`%o5%HxguGG?qf8B#wgl%L$!SKabT3bO>BB<Xe2Y<@P0GZ5Rc#P
zU9xYr5_<g;%Q}>$<4i}_f?hri{2XZUh4kWdol>@S7kfU{i13JW%hF}f&6894^@W)0
zM%r2##yXiFtkL6;;y_G?jHI)+rDfiXt*{Xn>*hA0ZH)u)bPL+f!U4kcB5@{^^Xulc
zCH3z?cDJ9c7&nw<t#(BFG&b;?hZ@|7NLxeS+Af;Wwcb9-{??n-EjwChgH`bZyjGzB
zR``GiAvnmL*_yf|Atr|SC?D+&20CD5YmNXZ`4oQ)pH>8wLkw!y4<<3%nOE`zV#&m<
z)zC}@UGjg>t9wi3fzEtl2X(#kzV~XjLcCmlFy2c1ce+z?`F1Gy>QkzGvf0|C(aT;;
zAN|NGD&K>?QgHXl5niWjt_qx+QojwKZR4|xw`FzPc~1k^=mnE_jL*N2{mcR*tyIF2
zOqh`HhU{1iJX<vose2a_5TX9sGj44hx*DWQcn}uVrCCkZmKpRA*#4q024w<^1gx4j
zLiKi<F_YlnNzJkP!E3s=5LagPy%xP7Ov)QTRcr4d)M-6myGhQeL7ZRWCml8IGk}oV
z$H7m__uS1HFTLFs);F+p=`VNYh(HT#9QJ6p6tvNIbiA?Xa+6IO>3W_t7Jv<~zb+L`
zh@A#)F+Gyd8Sa_fdH_cWC6HTGpmkjokr8M%|K3%5_KMXHq5OF8dt8LyB;?+p;MV3+
zC)m4;^C6>8d0b2?hQ)UNXrd%MAvj^{S@6R|r4vrf*t-<dADUBdWVL~HmUnqpJk5V{
zb8`Fg&)Rd+<?3acyL_(vtuzr|b3}n~ia%n0r~T1Bfq%CY<66v*?W`Pnb?bIyVc(=!
z4V(AoXBTp>-Z70Xu1Ho>p;+%1A-({?Lbw47s`i<NQUxvmkjbAdoA6@iW`0>TrDs}L
z^Jok|Hi6E)w=aPO#V)qon5xt+nXM>ABIIrJn>1-^<hhv$=U}}>*c>yHeIpTtRm0n8
z+349=bc`~5c3yMjc?(*aZe!I`U5ZwzoY5~27NjW_lie{2w5V|Q`4*4RdnXp3@Pv_<
z<#)OtBPXXjWXubFWhu1q&FoG&t2_ZK`y&IKMG(I4yPh3}=!0dmfC;@iez_cx@Kvg(
z3w_!PslKRq*3hvN!7oEHYz6FHOiNH%J?Y%ra4t4*Y@oAwbhC882EF*L0nur#)?Tj=
z_J@8Bz6x{kp=p(ptV`-ok|oa8DeKe$m+cuB>c`-BY3aXyDYy+eEH2iI^$Etg!JIbd
zo6?d9Ry!>C`g<7iTw7(cmk`)hg}(PsmJ;8?keR3)I6;{OK$16>rzB9fkjJeQAL{#T
zVsnlEh})`k$vvt{tmn;IoMU%~WsXE$#Y>h+P7ADe#7kbEGX;OICawM^&Ac^{#!~ya
z2bre?pSr_!dC%BFGA1{5x>bLQu!l4FCr_#(46*(XtjX;1#ao#TEf~^OCiYuK^x|(u
zB>d)piC)bltn+V_(sWh0#s}Zo&cMBlUSIo4a-&3Y*?8jX5Y+y(ZGtD0rOQQ;yDcp1
zRa(bd!PI%9qlyq-ep!@n?+(a&J6gGy`J72ffAnP=71gI#Xjy_lPrDLaYCHU7FZbj#
zr)%WeT<F&ip}w)VsI)iqD_yvOeeuZMSC`%fDBqrKClTTDB=}b~duYr|zB{<*kES`4
z`K8>P%VX=R^m(~yeeu2?;x>=?9Om5-)2+5nJIvG3Aj3C06-iW}*B|SDGK+7<aLqi^
zYR>9fDc0yZ5W3bd`-6Q0$fdQq6yStxX-04!%1D*%y2M_%Kdk_Ba~-#(8}to}c9Hr)
zhL3~kY|IT^VOe+4;dH1kt&cOVd?({|H(1jf-<5{&+L#|rU(tt;%#$&GeEYIkUp5vM
z7q>)6RM=b2E&?LHmrg4>8DAVhO<v^M4YhOyziKm5YMr4EjVd%Pd?z3oFi|SUX_TGu
zfq&@DaeYYtHOT~;c2z9h67weG$|L42*YAPL$cI;RIHnC(PS#gaCK62<ISvn-g@${P
z;`-D&(rSoaUV8Y1!3SgKH5p`Z#fq={tuna_{)*@m$}15&O_$fSoPymkO6Km0VXyX#
z;06qRMWJ3})nkax9wB_TjCcSE70pGQk7qxBxWle=XRyRtfL2|Cu*18fY(?QKn>f{z
zNE?4CPDF3vu945vw!{3neYj7J^M@7y7fXt%z*%k5GVG(J`3i4kx@Va0?4M=v@l%sh
zdjM$7XeaQrV4g6h=%Ksca-=T*Y0GG1eW>Qxgy<OAPL>~Ch}s@c(Yt5xJw$o>^(B?x
zKp{ub@dmGl)I|st&oK0$7SA=4N4*+7_LF~{(G9`)6j(#E@unGdrJU9E<i6gP57i^c
z!cUq2Y|S@a#OKHBKD7r+x9O6S(${k$t>RD=f>!U!%}O6xhSYgyPo&^zZ;5|2yv3jz
z2U=RNjx9TM%&xF3hu(-!a7wIr0J7uri9pE#aqYcNmUB5-<>=pi2$gCq;9QM*T|czC
zcx<&fQvJvq0dzh39aD~`1X)(F^BPAa2YAa}tAs3c@KQvnDH;ie$+aPxiNop~iZN?)
zlv5vHZtz%k8M7|U+N1h@+vOrI|4=`*3CM5Jv~E9YlX>#0Ci1kR7j>sVNK3t#(tVGO
zea^ugP4mn4OW-Y4<xen?vf1}ptD@~qh2OO=M??yQB+O5ku`wGCExy<}{`evN*ItgY
zdT{P=ZnbZ79G#JbamS0{9j=G_9}yz01K_7KG=!e|uG)bFg0W)KYBE9sFK8)|WFf7j
zJD1_1@+AIlRV~K(tm+_BEXv{r?^jMh@u)+9ZEdxr+gqjGgEib2(?0c+NeaZv>8>a@
zPJ4j6XomNRSBLmLOwSrqcz`GnOW20~Mtz)ZL`aq>O2&L%TiD^t`t!B!Ug`g_dyBXA
z)j-=F^FiUY52hPme%v$C70{A$w?pjIyB`IfsyGI`bxr5N84QYr-yx-B3|>hQ6+h{V
zb+^uVq-mk?&~DWJ#buu=*s=KZr7kOa1Jy7=tyPep76&@ZU^xL?X_jrc3)sW>_C}42
zabTNYxrs<h(}&2L>J+3*#8M()iH?B2DERP7Np_e>+ZE<;bNB+a72?B&HRA^T>j~Q4
z>C)rOCAF3gX1L_ZlILM9j7{Y#;TScaEIo8a19>5Dp6IS#9nvw}6j$ASQKoB@Oyjw+
z-k)H6BEN0X_G<8!FDTId@zXo78|_xN-OY|&R|~9;Epeyz3uycv)j-m9-jT8&DI&s3
zJsv(KcG%O@6Q&2zr_6jSMl9-&b4^qiC2y`uAD!6iV}xVxbxAu-C)_H!DUGctRmsyZ
zQ@|VTplP5MJBaujscZB1Fe}gk{}u*{uwkY?f#p(UNk_*WHHi?wRrxjT$j$x{cnBuv
z34salqm6MyxWGTqN4<7HL(96Mv-9m#l^J@b`5%N%%1t6jp%5~Ys1tGXgIYZ;p^mKZ
zjIaY$F3DgqsYohG7(4zg#{gr6z3$kub#y?oeECA4{b5YUnX`bp7uL$bOQ{P``moSM
zbMu4beb$ZXe*;dkkYC^O<CxCbo+&{ne|kTt_!iCurM5dUckB|%=8Hlf7&v782QK~x
zwem0g3sn%KK8Ea^d%z+wC59wg=FuWIWTCF^Ig=nU1BK!COx0f$5H^yCsIPB%aV3k1
zk@9ihhLKdfIL`0E3BLH~8O}dfRH%QzPyB~U^`9%nu8{~Qp(mCoG9FpS^I#i^C^iKz
zk&>loP)RrIz6d@F9Rt4gpC<gnVIk5h?^$-zxih)Ztg2vQ?Z&qix<m%C9K3Zg`5B(G
z!LQiuVeO{4&(oAgI3I=8gZVw5+Rk7D%jXmSi?9E83rhe*E=uRf%bLv%zO1`HIW3M%
z57y7CVjZORyOqwj3mbSf2JM!whaHwa8C0-HCVezXDJ(5<_r5#dVYL%}yJatS|IE)s
z9>n#yCD-?8-7S4Z{!lAE*K(}%|B_S!NV~Abg-Z_7FGV@KBpprYK+FY|#IgiDxIxkb
zXi-)tw}pmQSd$-ME0snVF<@UsN2u_eso(w-TED$Fb1x|O$;{vVRt}~0IsfT(aJc+#
z@TBOu76kW)U~)a)#zAgTX#Vj(n9qLzFlQ8vew_SQ6ze94{HilzShO;=T!SA#8M3hl
z*}?l5+E0}ngIA>=>72c<ui5(F0u=x5@p(m(vz3*|M`;%_(10DgjxDvY{&G0GB{8zZ
z;;B^ZIDbI&wVz@W#QG-G_cv1i^T>ZAXg-n$Wr+}X{)EBbA6GkS(GlxoG!627C!#w2
zRuR7x8!q-YW)L6x48v52tKmT}`ab`~c9~KAVXuwhhzL`jIsJ8;sj$93z~`IToFNw+
zDeyUZMrL)^BP$t9Og&{Ns#f^Rb{p@K22>;2WB1(^z*Mrr(r==RVp3oK++|w4MIkFJ
z>)ygZOzz89uEJ0Kceno70R8^Vivwz4XkEv*kD<L9T8zp}ZY$~B%bK6J{=ZKW$}*=2
zG#^Wo6UL1hMu*M3|Me>~H}4uSLdGy!Ow^W$`w<*=Li~jUf(4KYWt~pZxf25g2On+j
z2o#f;e!}i;84y_T(|;%`AOHT~miRwFLH*-r5YBpfH=M;1y~?+C>*yly=7`!IqQ8o~
z0N>(0zaHTeQl!>@*tfDh*XIlwqHqBTD+N{i5C3-~--CYB6In-DWLk=p9s~8IX_Mcg
zKFy6r={l}=O_XePjh9?kjDDZ2o5k5LDSOnI=0_{OB#JHSSc$3cv8QR+JX&&I?;HW*
zos3o>&t|gzj{;l)z=n~td|HJ`GEKOnopQw(bb4wfu}okjRkFr_L#ZEMJIT2O#ep{5
zZ=ef^yBUmjxdCkkQR7uG-4mS-13J)iiOiHE32avuH!da^twaIk%wrd)iJK=Aw-<lf
zKMFNrq8~^y{TFfOAIwor%pcjIs9L(>l(4JF9Ggki_9{JFH<eISR!2b4B2Rv$ip=$e
z0~Z~zcbXNU#$a<^s0pldL?Uw=f2Ye&2+k{lSE)Da2!7u}t$h?xcu?QNujFN;znRzR
zS1NZ4cS58Vy?NA7_?L0^s{hd-nst>-4(^{Ev>d#$cgTus3`WlO?#O2)Td@Wz))n|l
zHG?RQ#>>&%OSGkQ;{;S*PqM*6;XyoFU$K75b6b`e*v!!Oo#F`kDu3=DUf;iZ)DjOa
zx2CMqnC8x+`UC_I%59D^9E~>OCiM0B`Rh;O)9MT7LN?VK`MNva${&|MYCAEd*_IVq
z?le4)%Rk-Da3(B9(e+AnY?L+R(Gn&=qX91e%|$A&2fzdt#(H`0hNh#~k6t#{Bo7e@
zsk3$1FvLLni7+(!W%s>-LYtcnp*D{j?B}`;uhWXANofc=e5;Cg!@eEJ6y<ir<IjYx
z1X~&e#ECLZ18wmCOWQ5?{?!5&*NP=6n{j^2Xp+yai5oLD-cZxor#p1@ae`7#UN^m7
z#;;X-&rNU4<)v(^gO~DO%g~A2^m2KLa?Y(<C^k3!>*mZaXIlO;v~wc>tO7ZkyPi>s
z-6Ixfj^yPcd&#s<to)dl*top(CDDEeTLewJJ>m4Le&D2G`?`EX_@RPSv)BAOsyVWZ
zH9{<<!r7^jUG*Gi2K)W=>Ne9=NlCh8V~aZl?4T`9^Iv@21*f`$M5lGi_+{g7n$-mb
zX@D2<^w&<9c1-T|?smCmyS`Ru-A4QV!_gzG$KGmc__p)h@wW3wNVxM!fehz%C)|5y
zb7ZsCMuV#|WT*!dT&^*x+Y#4N8z>IJd(Zz&ClG%gR<rm0|FY__@UKHL=<Z+0cq>}2
zh4PP&8}Q1~gNBOw*0fJ+yc%a%)ciaE+n=_lo87>lmR4L8R-G3j$ghy~Xnb4I7HyX}
zUq8<W;%e%}O$ahkwjiS5q27;g{sUV3mrR$t(;gnt5@d|?XKIBhjy8Sv^&2C2v-q86
z%L`_z{QYZuXQrJGl04^<fXfd2UG?%bnVt*gh{-1x+gb<fS^xqNzr(u{uQUWB$XpYj
z@5XMS^8Vjr<;RK!roo49rJ!l<kT~wwYBbDi2hu$XMXYESTI_9V0#}Zm7pjRTGCIC{
zP7q%npMNr!IHQ6gnpx)>1tPtcpuowr`+W*WQ|4`xxmx#{2>K;acBuKA71m18NDGQd
zTZtKgwO)5IcKC0b|KrR`yhyu<T$PO{ldB7Vi(+{y?cv4cGsliMGoM!>mxza!x}I7o
I)bh>$0HH%;UjP6A

literal 58515
zcmb5Vbx@mc@GpuxrMN?jyIXPBQZxh&?pid(rMR?Eq_`I+P#l6=ad#;McXzw=`@84N
zoOA!WnRzFZ-F-HXzPr!vXCu`=DPUueVZgz`VJj)hYQn+6557M8Xb7(qOwH8R*DrJz
zMLjn-I6U`%5B#bXHTac?>aL_Jhq{S^j)Bgl)T_Y$A4yKvUCP7V#@Q9Fq;gpCm4xN~
zN|Lp7Gk3Lhakq7Lg2P9DPy0&8_(zv<cKPCJYi;8WSB^6*{7QZEAJx^;^q=TEcUwnG
zIQ|<P^j8l0KaQ5OmAjXzt0kO~%gaA;%>R_zx|utezKXiSHFVT|dnKd&BLhucoot<~
z;X25-!(VBr|I^;X)!Y*9>Lujhe~HOBJ33lAxx-x#C%3=SQ2vQ&+qyeg!WAD+GQz=a
zfRtpVw84vqt*Gu6dLG43UFYZLZu%!rC!~keOBONQrYKwjC>wA;`AiV|=8^CnxJWa&
z-h8C8GC?RNC{qT|Cn>Wexw4cf7qTc-Wa#hbBu}qsvhv}BNpQN~qIACm+&JuA0{|t7
zJ_VDj2cOjT!thV-M#Ud8e69nSMYc7ywY78d^733SH`|#&fY)CHkSHJ_Az^PB3?L^b
zcUB4pXuN))EdQAQC+~kT{}0~()$o6K|8K*jAA!JzBDS}-aed}1ODb%Olj>UQ0BC7(
zF%zi4yll=uV`(~dSLy2d`ub{1=>Gox;o-siM`UIFFPB2#S?Oyx!6WpbcFxK8-J=r~
zPyXq-Q2Q<eilYhLNv?Xx%^I3dG1!BUXr`7CzogAW$(?ToWtOuE!+z1H(nz^?kz6_}
zb_ZjSd}%}JfhOTFuKp{96mWV*0e_C8D4}&?F~Mv=Mb5*o)@MW6xs-9@kdv9kFrbP}
zcV?W(v7&4;1t>@Va;8sp%I{ftpQ~md*U@n0cQtY(R?=pnrbd$`IiY&pvq)yo;_Gx1
z-(#<&WZOtjL{3T_*}tJdThb=$Rl8uUu5GBPK^^-oBkQoifil^B${7obPJiE?t%rz6
zn_gjb_~Z2r!`1+}bZ2^gTD`W6S(`2=rU&0#Ybqa6%vDCgr?$HEr^@mE;;&UHi+83R
zJ<ZMc3=H=zEo7`Kg*rMz2k8mj8zE=%eqR8ubDn;>m>yBrARt)pA+76PuWKOVQ8>0C
zZU$y&VJ@q5CKnbHn_nXRoI*6D=gbvB1OmV+iceBSC3rJzu#=LMFX^Av{chmcs2t9m
z*F4G_>Pw}w*si_H@(0=?FRbrrpA*bdIuHJwmW+D8`~nZL=--F;$%iM5tVi)EDQSGR
z)bh32Ka|ZAUt`sHU1KJY+ge>=Zm#h1IMvBsFTqkuOx<ia!j=#HVeVR86*Nyk+<W`d
zrmVeqJjt_yO?^q+)ylJc#3ucXhoJgWBAEp5<Q_Ydd*S*_!lb6!&{`-aZAII;CeRa_
zJWb#C>08m_KC5yjHxU7nu>5H3&CCo^6d{C#C2FoB2C*dTSeG$>b+l4f&AFZ4Pi&&O
zH0qr8D^Sg&*v-bO8PZ$Dew5bEA}qu!HmRwe;aR~);z0USTx43$P?un^$6o4lYJ=k;
ztSP83u%Tzo!<}vc7hM;2^8hX60IJ$qc=HjWBlBnyM5uMF^x3tmyl&NmcCZI6RnaXg
zqN+%jy_OHnLJG$zKcREwoBMBXK~Hrv1J!ODD}Y%xfbcGh^laU#x|GH}e?Xwh4&!|(
zW^`H2>y%7ut$6u6iH5Z<bRFE@MPpvL5pQ!C{!AD1@opReOmg#m_Re87+#CI<Ika{=
zZ31*0&wo9v0|ro(E)Ufa_KG*Q_Rc4@L~kygL+19=nzxCZ>c3sbdDbMaeT8{gfOE>K
z^ZqElmq!CimBBpP&-rPMpGv9buHH_}Ia7l@e3l90w=1)<EC%)0o0ZsD_dUUK6Ib3t
zlrWsc29NGJ+Hjy66G5-g_}{c%p*4ZNpw#$ThrS@47{riFIRi4(#eR+~N}GAEHw6nI
zBjlNqc+w#u_4r;Pt}otfGcLbl5tXY&g$N)9Y|iXAGhTGw-abCCYTY8O=4P0f-_i!Z
zN`z&_ikQM%Na$A3;{56GW=Zo$!laT4m!;F;LrK2@t2TWtgVv9Za$<T#^--dh>+_q-
z?ku{;%*$qWWkLxgVq&X9(>kfV@;Y7e3K~CY`GfNCh3X0wHAl1Hp!bgzD^EmN2HkZt
zohDm-8kCi`kwxd|5Vqm-x!LSAafwvrdY#0ia`RefDT|?j0pPHr_#n#!U|+tfRo`Y+
z#;3mWorHvnbhqT(Qt#*1b&4RPTI|Oxae!8D53n;Cvj$<rFT~uOwj_B`*~e6;>I1i{
zw_O!Itj0`)8@y7gCw|%iyb_A*N8daIos!vOXy0E~xvr6{6Ut2*>8~s<pwE4}s+#Ro
zWFd^Mle;a?DW-dCdteb{M-%^DMT|rN<=)KU*Sq^)cjYE_IqhCgt~{#&EDN)fZ`pK>
zcP+(Pf0B}a9KbfpG@|tIcc`)itcPuu1a;<i7Br2oWRhfLwTlWa%BPa|h0Im+^5V;I
z8|aH>{eHBvw=!sbc}Bey;^?n020*j8pkzJG81_mgG))|lHs(eyloq}O<aS4K#x1i0
zUZqY;QTm|2i!&=VpW|_+^F~Zh7|iVo;>N5XN;IU-<+{d-<Y;n>Er+ZntDEDgHTWgE
z)&?qm9`8ur%zC*qX5w9WuQ0-wj}rN051z$WsHfk22SBO5d?qADTEu^1s_m93iHorG
z6~aXc!YW<mbi7&}IVViYXR+n43tD`b5=!s?`f58UjOv960gNBp55KpZv?+Yc{~}a2
zfNof%oc{Me_6O*%>KP?~ZG-Xs<O+q?%2lC5_}~vFJv&*JA(YCIg$lGX@IN)e29AX@
zC}r=iKGAxSG>OSLX?;1Ts}U|pD;Pwo6R^m%b7;fUIV*LQT}UG=57yQ{XKz>@{CqLe
z@aL?TbG5vG;=`eLydB;-hINg!fHC^3(hvIJI!6Qn1LSf6fNkrG)u!>wmGO(E%(LDW
zQ=}2+bi6iEot2x;JA3?DTYB|>hVl(E#J03-M5mUD{Pi!$P9>hEh{a#-0`3)PUvgY8
zWlO_^^L`;UPG@54?N2i}=pes#==FcVGcy91LJNaj_}CE)EZT)v&rg3}p8h_q{C%p3
zAM?L<v+cJQzt9t_+=<si*5seY<(KnAw=R*|k6(1h6Bv>Gu7+_K1gm2tL!Z+=GL)VH
zP@>zbr2K>d0CV=GWj~Rt#<`;i>f=f_Q_xIHjO`X|Y5wpcU%xxuze)->SkS8yOp4eb
zD|PEf4d(1vweT`1U{SApozvg2<&tKzB6GILHklCLQMarz1uBYZp*p2Z&6;V5R#07=
zpgQ!|Mp7n5D<QvX=4WvPRm&8Ry$t)1j6)w`8?j>r&b_bCRed3NL}DmV%cEDnKSJ{?
z%^F<zsYI^`AwA_f2(hy)f|J13BL4`>*3ot^B7aH0typAn3L-F#BD(5#8wG%FlY%mJ
zfCLoVGF1!ApbIR>G&8@-lQ4T#)EotP<@`fKOIvFTG3RV1iPg{>T>{9R1-OnK@i(4|
zHqc6r0P-aaxUWs1t5>vDg|nG-cO|?w6OvNl0o7pz0qQ%;rg#EF<M_pfMOgp0>R$_}
z|J<ackbe8LbpRV8pM-pT`Ju+Yj+AKG=`b`FA5;v#3iOr@!f(vjf-MOK7L|JKv(}S@
z3#~G@U+FNwmhd{^4+<4p?y<8ioU$px|GJTwR_I@1sh8yeJJUaQj;n^tNl|@B-?#T-
z^QfyknjH+%hKdoCYeP#NVu3ra`VS(z>}Pus8POnA&R;xaM5qx0=i7{^2f(!@m0c%V
z(9%N`$Z*hUXd#S$>{R)6QKIHXVAr8!i^9U@)wh*&vojOg26~`l4%UCNSdj9?cuT~n
zIp1E^D^~j&0*JzYUY*##!S<F#!2tjE;_E?b^F6XR@Wb^<ITXkNi=l%HD@)GG!E$k3
z(feoM;7$`IrIObH%C24Eyqwl$KW;KQFSI_6{PjKLhun$vX23kcVOQQQ&1O?mQ<1WH
z1qHINhc1H+aS4{RlE!;>Kk@B3b_k&O?$%}TPDA$(ZRJh-3+GKoD7mxmUi#n1ZHck(
zf^BE9g3B)Xu5Q5Bz2X%NToRWw3TaZL(`*l|LU3<5Tp~3XGB8+@SLh$j5)<L(o>*Bq
z@@z5UNPz+9v(KU$aQV{J{Pw4uy{FQ>{Hy%Lv9Iv6Z#StLPx}KN8G96`tZ%FzOrkYs
zy8{l*sb5z9`i-y}--+1vJ3q}jx8L@1e$dtzd%0_WK2Les9s*sT6GPVo&j}&!QU2}O
zD=MgLq{H4=I5>iW4IOPEesX$j03)N7-S3l{ACX@7jc-3Ib!q$4(aAhu$^WM1g@WN2
z8xn8@3|LuQjM8fR7VwCFeYU3-kj6JvIs%05b&UkvrBH(>qCvijCVm&`e}gL!6?6y)
zByKO@Y@ZL>pM!x=SOe%HZ4P=G%9*eWx+(?!b)Pa|?#A&ymAPc1e%e*|`>=Y`c99uy
ze?Qm$OwZZ0{$=ce|M>28RglH71E}7C-jf-m<VkpXde${~S%}FiD1?WFRewLe$YkT-
zs4OWdDJ$b`KIM-&XFLY%@9)=8iROU;1JqDhH@X;s@t2d;*s8eJswy<TLu^Q=$;^TA
zi-PUW%kH<;*B(9A*hcN4R@4?3-_AguR}igP5A*HUSvBP$wZ1ulS)o)<SvSxd$!Xp1
z_sI>=Q0KC?*GA(q(EAyP|6I#+OtXm>tC^{LjPTwWc(2T*OjY50F5qd-8Qe|2dR^bZ
zowXK^6L1SrFV22g-l0STMKZ<jre<VVxS|^+XjbqT&tZPy#!O63mdnq?T9?V)_iOvH
zwIxm?>~(CYs`|6JX6(UNe0s-iVRJZ@_vz`05fxI2*U)dIuW9(Rg^pRQVa`A&@hPF-
znDpZh42jOy`{S{zai~XKg7c*4CAeq*3ZQKz>bQbeewsu&q*~IylTw7RwaT+&QvemM
zx|<jrR5rHFom$q?)r2iHM#5oY8jY?t^bpTy*ip-Abb0O&+LoY?b47pbH{8Z4Fk<H5
z5MBh!1?7eEF1?NJCG%uhkzaNi%YL~trg#T(qnM|$c^U4aMAHm7n#=kYf71}~kW?Jb
zR7w}d^Ef5pM_fvS!6U&WzkAv|*XsZBxpf`e*}?^`$;Q|w&iD~Vj2HwL;=YWRSBV!&
zk=W<+_d$Fg^IqM{f~e!n*~0_7H<ZU`4V;;ps;8$%N==O#U?`n$sN0C<mOruke5M?(
zsy;L{6dfI1^eK~tlhcch$|ShV-fBDM;%9ogfxdpT%Q`~Jr#GOXef*~Z8<|!}u?s70
zWLZ@eoA%T^FW)#J%P?QzEsK2uFR=300PL=9_4@b7G6xo8-!IMzSC6Cfg#qn?D!ApV
zOpu{oQ`&obR{LmtBz1lD<wZg67K_Xl9tnZvFBL!7BHnx(agGCD4W94C4SKMp*P@b<
zeHuwS1wuG7<JJ|e^MOokr4`Pp`tz5Mj}~r5LX#8Xe$4D2F3i`P-%%==tIQ4essgwB
z>|{FgV}b5`wJe$eV`4YZvsmZF0jVE_SfopN_mn6gjamN<LC~(KdSx~F+q%b8K>AV>
zb09KKOuq(I>Shqa(b3UvFV?`3j|m5I7Z%m$4`V0mw>^yF@b=@O)$gXvWpuak0(QJW
z$b*?dGQOiOT<r>18safnRYJV=IVnVCT~cc^_}{!P2*8<XX~BN9wE1tBBj@h#!?cP}
zZruVftDwH-7~GvVkB`uxt7I#kFewuHagc(%e8#&`FDQ{<kAgLE^0xK80r_A9%O7<*
zaqs8J$t|~TqZwpUg3&mjiVnwU+?8zQ3h5rzhX4)rX79Z&@NXvtaO|(XZQ`xXq$XY&
z%BEAhEGQ3Q#W_T48aTJ=Gy3Lv(7i~o%AbC6-rw7wJu~ma+2VYbkQ?_?ym=rnPU7xI
zL%wMcS5@7Q?n6H>Myy5h&-J~miJfGul|^!E2tVGlrSIJAh~IqZ8}j)@C9lSd6o()Z
zQ&HaivdJis)W=C+@NtqPB8Zmkc-0&C1Ib!`*>flL<9l6HSirUQi4`;9P{AMEZ7YZ0
zW;v1ry?mWYr7>qnKf<e$T-O8<qs!%Y#MY9S#sTT+>9&WPZ>9zK`OzmFpa>$_W9?(T
zh`H(!$hu5_z6PAZdh6>227SxYNpU`3>`fKvjk)Cgs*h5Ej#TIJ)(~4;qX?7nq90V)
zD#m1`8vhjWE9EuRN$3r$3Yx1+YFdv<V=4U&&G*`T%zMA`xasoH7wZ^e?xtd&!pX_b
z0cvh;77|%Cw#R;2S#{+c<GXs3Ays3fPa-ihlAUqc9BovYcDp&;o0QZ$ge9$0$zha1
zwX4{DFxcfDP+l!cP<bH2T9tW(0|1Xuu7|}%VwM4QbcnWhDp*zU9RdF4HN|^2*}A$d
z%}{sKyl)zLN&Dx=6YI~-*w9LLBVmzcP#Xso2IPI#&$e36tHHv(+|9nb&1qTVUGN&=
zU?5N<U;X$QO=Q=~^cI6s){(Cze7QOR8m#!N8og_D;!W(SlnVW&Iw(bd`vgCX`)Klr
z=6h5B6_YSQ4zu{jPks}=M;eMX`a82e^eP0A(R^neZEc?K3V#cB!7k3J{9NpTduHKJ
zmqij&)6-asrEKV?_6*l^ZPy+@rGm%~^0+48`Wm2H3>e`_SlRc}MLA<xb-?DgY!XTG
z<H3=5fjoXaIL})YVOH(jHVfd;_T4P2^_5k|Iwrophskj6A7T2<Glrz-<~-OlN$GAM
zUpDuqlgp+lZT5sc?w23$QiFCGy1Z%GOFow~>@awX&~8~Ss8~@#?8}B~ij;k=sufC#
z+G@PKO?zPnck5P7kk6-wp@nrbO=oU9zpRKLl^}76AMUyVcFkHvoRuJ>4D!7NxZ)vU
z5%KV@7O*GmF?FCRsg4!1NWoz8R9G<829pr{)Ol?CdY(xtDlb!O!xoqNw}Ep+oJJXY
zq}9W4_9=aNQte57%{JkMd6gBQEHQitu3N>@4l5@+J1(@61C(*>?D7Vjh9_ptX|VFA
zYgpFZ&t&V&+=rc6TnB8~m+_ac{nRR#R1z>jih~6C$i(dvlJ<iLmjz2Tp0G|5wQ%f9
z2Mot=x4X5qwIjfpjDGMP8IAjBDbDX52{(0{L<{^wJX%}HNCq+LhxvZc{bb6~dwGVE
zs^%O#|I-j^I?4UwB1ZH&iPIn)m}Q_Po(0BicfNshYpfn82GVJ@_j-l1A8Vbw7eY>r
zm8S@FRjpxqZZ6ym-1lbzOUl%OCR#%@(EQWh`PPt_nAmcpce>2Nvd$kPV`GUPx-&l9
zF42Hz(GVOx&=G;Vg|FGz=%}m2N=KyO&n=b<om%&6wS}*BKVcR2N138-rq{!YJY?5C
z^|FdYP=tAP6;}t-8OhQH49mQnv+3d9-nyA+{AyWaQGctw{lTqhtw@%1W4$x|B#LY~
zTO-kw{rv;wnBYOy3*xW?!F3PEyYo=DA_WG9A}daIqcpLZX<Z|SU%418OWt8p=aZo|
zv|>r?+=&1fwKERN7szs5teBQN+_>u<j1<(?3GO-J?k@D$=-3~GJ(6MpFNbJbCjueM
zOXCyH%=5b7>R&NfIM{u5%Y}2c+<ow{B<@3lzxM*}4L6R-?YGf4(7g(0|H1UEdras1
z(16yRzt`V@c{y?`Uv`W>#);6HMNW#Wp1ommCfCir7HR)jpyo3(rCWw%j}U|*{&7D2
z?#lRi%a}Q@LMNB|d)ra{5_gQSnzVsH5ksb~|IJ(4C@wACoF75LD|po*<o@k1PbVq8
zh+HXb`L+I=wA6Q};Sz=<Y`*VqJ4SAnrDLnIf>>m7SGxz{L5P=9RiT!8ZNxUiZ<8CP
zXX4_RMDp_-KuxZp1N2xBcg6=jg|Amcziw`_@v`!8L-buo7Gr8f)`b%L#mOV5ClE8I
zJs=zn4U;s7cgW>P6JaJs3MbPGO_)Rm_6S*q-4W$rb~HXuJuT(ei{#iFKAsOcBBHG>
zmL49azgxH|9BdS`4D=0}cqEd_*_b>XBj+S<hVO=0fsl+n=UAjNgS-u5;9N4%7|v`e
zKWb|IT-{7z=zzADR*7EiTL+~WV_i@SkKl(%kcQ?gmp6LI@qTaotfFN}-C+*R<b;S&
zT~)I<tLJC$P3`im8Du>Nh@1I(sYwu{I^eH|own6ZWo1PL$46{^yVjyh-F5!{vvT8r
z>#_Eeoq*#fiJP&Try=pPsN|@v>iql=jnn#r?5uMIHTuaS=o#~H74Of`DjyIJGKjg*
z3%Zdh($CueYRnqmCKDq2L=&iz@|h1?{(Oo5=9>sWdW%X=hJD7HeTPLExf#769flU_
z5lY>@v(Z4jJi1IK_LgYAwZbQK&6l<V0f!B)xZ9>53v*cc*}e<#F2V>QDfQ0J{i6<)
z$7KP>U;wQXk3gB*6XlKTh_yalUA+LzP#>;GuNw|jJv<1j!hh5Y8agVm*(3XzWnlOd
zB`jroEVfIh-HRMwRR`K!X5hn^v$ek!Jyl|2s$p~5^_awORXZAoMVJ4C*zGoN1$>qF
zcu<KpTsR#h3zeLkrr-7U*z1~CH|F~wB!oDx&N3FKL!3yoxOgzx>o#TX_w|FYd571X
zgMxid`Sfc{dsuJqsL*YyD9@<+cq*l`^844OTpPzwXbAnPq$A&qmtD@uBP?l#e;dZo
za?o{T=3}JS#wW5c_xJDI-#KFEt1rE22HTL*gTo_o3aXz*zpa{di2Cw!O;Ta}l#p7c
zKx7NAyl@Oq_Vcy1?;0X?Aa481LqOHe7xu7C5|;*^Hx|9D`=VLpOv4SWN8fI02(Us>
ze&#!y^u^Ivdj0hiq_#96%|S9@vVyn6@VLr1eoXgz>dy8%Yvbf$OrF_nHh_k8*Oh2<
zLN`PzqM|SkOMhFv^~D5@G*8p?A?beo&`w=eHUY3#B%IRQcoUSn+v__N$UIv$)0>7J
z*j825L8cosdOwqFNzZhZnp$~>xzndbnd>@sO&E_1p$ahfU1Jl_VyGIu<R>ITR?BR6
zwd6NX2=Le&bO(mAttxkymGuCqvJG`XdP9a<E?-O=yV5L|EPU9Ru24ljai$w^#C&Br
z5WWxJ{>^Tqn@VmAsW`ub4kP_R2<b`)-X6G!*3l*|N;B|jsA}~_@FzM<Cg({>OfhLO
zGTMj_tzNum>9rRI*=jR=_KmK?$1h#GvZVg<;c$a}WsHZ}s<@mv`+*w#dJP<tomByy
z<8?F;f-GJ4j+_HT*lr(pB*vZ|BFSQYZ^Mh7$xz>qs|v1s9SJIiXEG0nq53WThX0!X
z<h~VW<$ir^^-=Hg{>hiXeuFSmLo$pM^O~EATEJ{%)@ki3XH^E}Hb#*P+2oU0s~+6(
z`1srXChn%>VAqeWT3SVx6~QnMKb@*7zGVu>$XjJ)ujv6JgAX11g<*<>@(uGHjdhwH
zSA)I0h-XzTe+1o$y5R!GcvY<|Je`iudG=w8F!yDk{<d;|S=qeN>=!Fj(m;03(Xo+1
zE#mE+WSt2G$S5|_kTT}nnfKYS$!~UDLMI!g0kZO>8b81~L78QcxcwWVLuYxSWF0sf
zRto)eyz2V+>JlvyGbI;QE+J7j+tgzdr^b>G?-vh}hIabRJ~rqJY9l{oP1aiohRti2
zeWBCDr%Lagb@8yg))vAOa)%zf$#hYG{kAc)t}e;5-uFYGkHCQI5Qzs~>ig7he;>};
zTc1w+UycGg2CUmoQ++xP*4Ex(W91k8aJoJ_+!5=KOWX)(KMHsm4iDG{7=y2lDwkf)
zd8xnuSgsKq=7#<HVty^h=r`uGN}G-q_(>;MGiHsjuT#A5kkfY^Q?I6%DQi{=*V1UI
z{Q{9bv+?J)nH*Bup2*+3PszTmk6WBCvE-oJ<rJ}-(DtjmzrG`^t2gU60mnnx4~K}^
zt$VG4j!S0*o6FooeXNrGJb@lbb%ks=Ipzl3!4qp8XBfXr^xOf%ZAt0Kjl8z<h25kH
zooVdi!Y0WHAkQf;p`bv2f)=-dwqrs|Pg_r4CY=qI3m+6tHttJM3m0C=8>jLc439D0
zi${AEUZbrx%{eQm^ql0w-j*f7YT=$mf!&G;RdMehNy+k7vNzx%k(vr0<YH@Y8Gv8w
z2BymF4rc2>-_;3P)t_wP7PM?22UcGgiin!AvfBA%(?pnyN4*Dx)%u4jVz<?nq_>64
zOy^**dCZ)#?-6I-hrzQN>f43v+m`G#@I)qO^ZG1#*7ZQq=ku54%Yf@ZAWCUWVguQu
z_=enAE$!BAiQ40|+H<#>_(q&Hbbl52)TNL`!<c=RV11bCt}CsP!Og?7&=sszjvW)R
zU=tSUAb&J3!_57wU6-XJ=Isyt<?nUm^GlsDR2YBFMIoC?;~vDx`*|nprP;vv2K|Kb
zxVUwr)!6$4`=n`|6ym$h8?d1_=G|FC$}ReEH@1oclFDj*|2_<Nl#QfQ-DM5jI~<iK
zEF_e8=K+@tk3~>!0eA4|V~Gjh88znz^RP6{YvKK>IVjv$SyEV*Y--})Sh;xIILKPM
zRZ>?*e9!unH3DY$@<AOnn5*Q--mAp?azyV=m^*=a9@?R;a5`-v4AOA0_GvwybaCB3
zw1h!@+aP7VrVqu`8JRU7e-T^DTQh`nIy`5XI@N~Vu>w1Fz(>d5)Yycms+lAR=7Rux
zl1GR>7dkFaXNwC90~Yr>f)=o=qW06NvE~Ck!Bx+EKUWDbp;1D0JH^N2{5&3IWWnK@
z8a%4S!Dkf1l`&$o4|#q2gE4xhwiB7TBF@m0KI7)66#w(>?8lRa$D0@Lp@1jnm+Qa&
zFlv8Tk@&L~!R?Fh+{<IA;ES{lp!Ho*LogrI>E2`}Lafds5N!E`NF9>PU=5PyRb}`g
z+Yj*n==gq~n*h>M-A9lNBNJ3zwlvc$OjenNG!I2pE=+$J6nFMSH*teIaIS$z$PTL}
zn=`yjOcD~G+bZFC5S^%esb+?0=CQHm5;q*Xra0&)>T5Uqx0O#D>Fh6L*r}DwKSs}A
z(27aWl@%8x5_nJ2vbs~^Lp6zq$<7=WKO1-Y-4Ly?_EUy>L1D*0=;3k73U$-V^@CHu
z$`Z)gR=556@bwyt(g)SCazE$?o;1*Ifp7dy{I{MUz6VCmemf5@i6mR#YqxB-Kxp@B
zls~Eyi3o3dkLw(wHn8DdAZ4#ErR}m%5c=4+vvLcyZr}Vc1|Hz$ZWrB(ReLf%c?>Au
zP<xphYkhTk?jio$0lt?3qO9o%>EsZSpA+<{I=_<%^VHs8TT|_fX7<~36wFGse(jx2
zrm*zY`A&#5Z}GO0M|nO<+SZ<&0K%dmeH{Xn?_}Gsu8$INqsV@NNvybBU~{(J^=7wj
zxH$+_?NmS(Qn#pI&Zw(hx8p{|S3NJ5K)x3$PPeDA;SCD{`*bB{pQvN;+&cZ+f>*|*
zvd@OvuUOkJ(_U_XptG_u@T(W)zrpK&WvLe4<PPt1S|=ABR>k(+Y=pV&h8HJMm91v3
zXuU=>@Tm5O{BCzu^S<XI%UvK)r=}*r<P8*o812EQ{pO+R8?gP_E8r}@{dT(j%RcMs
zC5B?d&Wy%K8g8RDNB8S9`xAfhc=4l(cHd$f86$eYM?0~mC0j%-@qF<8n~&6=pqlO5
zTFvgjFq^3PFAJg3oW{I3^17oH2si+BqtssMZ&sm182r(Wu?epkpaD#19@lyAj=v%4
zB4&;MRiRpYR!_AAs}MQ|$TJ$apP06S0Z|y#VnYn5wbcebudqA*n@lta$=kcNbCa|C
zLt~#&E#rr1HNO?D?7J>&BQ+Qoh+)$B`N;SKI@nTwO#k>g*!qYRGA&XUz(@I6M)%j^
zbq>#KZX%8b6ziO1pto^%H}--*6gZ9RmDR*k@R~W<pF70+(vRDJkoAh+aNRr|Wck#|
z>LXPxfuCN;^1rhf7@(5R|79YoPFcRzoekE1EEg!c8-T(8%Txf8vDMqBc|0690Q3J7
z^v3{MdPXxa+ShQ6aYt$YuUv<YrN$f&r0~DAfGDVjgQ{u-5<~Mp*^Fsh@W?v4{C^27
zF6e90L^kNZWR0AMY7G_>=rwg8Zb#ktw;t!uIa}(Q=0BB|nnO*n8C{g)F~*_5*Brv1
zRO4RpHEk0;vJbx!jHNS$0l*?l$^SGOJ_Jr7uzr>MYbqN#5~qi|ovF9by*SX$-$k5k
zi`v3}@LBBJFw6H++=k6*;yU>ijgaa5su^345taWmN3c|x1$p2lSJTZ3Z_C)^mG9w>
zKIg{=sDJRL0nlm}wiWa5$B`9KWjd(VG;jadf1QL6Q5fY@vhThodFTsRyo^NT=xk;K
z;u7Ysq$!mw7fh0pbOj6?Yb2jbDqmy#wBd7n_(5-pFf%2ID*CtCP`f{V@N87dp_<#N
zI*=<>Dpp=W*Ns)^@u;@~7!m%<Cdn`!zMi{L47;gKfh0yXo-&zIrBXIl-HV?UQFD(3
z0)qt9gbq(W<>&|6=8k_btdZ*$;#y8`0@a!;D><M-%Z08+^eVB6mP)<ox|z!MR5e#z
zXZy@I038J~gC!9cbpnG|kA2ie!9YdJud#Hp2rR~CI<$Tvf7<I#ah9f}8&v+Ire3kd
zgQ`)>68ME;Y`vZL;uS1#<f8LK6;L#pHlWjcP!GF8?e<W0q%=B{RU3rvJUu;{KUF=?
zrSI?U9q&6h+Z9)wXOci+gp?<ejiS-Lu<#0PDlMoLeL1$?Y=+1O`yn6?(#t?1ugLI5
z_%SPsT2{f#Gz#FvE13V=f;SrY3MrT$o1L=ym<~hMnFsg4&e^srRJtdjxjC%Qs%i<_
z;~~cZT2q%Ru*plca6t(<?2UFFiYDg#^yw217zjQ7TJ`CVu#k^x;Rs7(DHR!6my8%y
z>ao@b1X#I{b?C1dkLOrg93n{Dpo^Qqu%;fnXFdO%f}M2Ivn#4!Yg?3whog~}eYl5#
zv2kfjO-cQtbCcl+4ipwu)YMcsmB10#*C&7d!Meds^!oDVW&_X9$>~jljjHNMhV|v5
zLqTDo<;F8ZUp+rRKP9Cup!qfhwIP<kqp__GJ|th1W^^GFOkWumCLbA`SXWoKUWK+(
z^JYXikas7Rym|MnTk-s>f_0Y)Sp}PliVE1@ic*#yXJ4zgjRbOjeqvNHXR2!aXOK+Q
zEP4zWe?!vvnL0}1fIOKnGyJ3>5UA$aNXj{NNjk}ZKIlG+n^BKP{H1e&V(Vk64TR6c
zSF2k`lol5)z%}7H=4~T(d`|u4b!q>5icbYuZ>y+8L4HYB6-Hvk6<jr~%oG^lhUO`w
zV+fjHz58pV;Qqn8B_Df6D!bqB@l4rl{HK+b)$QT8ZNKB?5B@T_gM;suKlt5W4h{}(
z4W($9yk}$V#O9cU<FIbb{>z1nh%uNltok`J;PakUJ{RlZ;^HEDMkAVqnOQKHn25*$
zdM@O7vbVR#Ydz}HJwJc@_$a!X9_lUmosW0=XJ#fPf7iG5^>vdf7JGLguMo@Ap}08N
z1cmR)e<gV$(7xjG{1oxIW{c->T4z}%Kphg5UKAR`UJj#n5vEG$8L>z%OW`nrp~}f}
zpYL2=V%=OYYD^KJN4YenO4E`i5;nwJohzyvKj_12Z(-eZ80QZe{L;l^Xrld+$i>LJ
z1f>f1E_ly>vfv#E_DK1Hh@Dwg2WcoOYt3b8tN_d$T_MqoR9i%)v@$O0YVBQ6_&^h=
zv^9Luq7A6H_;}sI!eW0V&j`VR*57Gwp&m18T;Ad%$ponvlOd@KtdS7F%>Bv~C)U=O
zN$}Eg!lg5|wk#tMLAlm6@oNpFY`|zurCU6<XQ9|aSGeYND_sOS%-xt`uwFhb5iHmk
zk5ZO4WD~O>Sb|TrL*e&?1$STq<vrnO2)L_&;v;iY>a0S1zbFPPGUQ!SLT<$PB`OMv
z;>+YDUgb|_Ru`ohBm)ETT>iY7^BowB=EhmP=Bul+R6N(bUFEDMtxM{1s!Ab+I*INN
z0r#B>GAPyDx)A!0;g_wPS#)ssM5ElG1<*|uU}9b1?lV}LmXAK9_<a{GoOR`ksgDQu
z;*~DU5>BN?VaR;Gg%D)BKki~Kl|)^EO%TjN${+FxP43+$0W#5RXohS(oQqiTEMkpz
z>KbF4fq?;CXWXiA41i|cTg_#qY!XF-?rSL<z)sFVye^V=fhW!w#9xq)8GljSA^CP*
zirXZXCT4pG`!QNaWie(0b_G_wZ*?cPPzNh(pn>+@n^eZY1u`Hb*C|n1qt&;Fz|*|X
z$JTOHIHAW*QmB&tj*_EfBLHF!hzkCGrz*T6UyMmg%5_#4qg6_U2>p#wmK)8F@Z@(k
zyO<LIw6m!yEEAcT%a#nn_WmXTGJX3~@<QLhpvCU%b}K71*xVs56&%XLg;}T;On8NF
zhx<;Adwf*5P7cil!@tlrA1<Ou5l@+(J1uAOu!$-{NuI8GW(I%&ul8u4T^m{!44hbq
zOyiYIR($_EljStr$w|WUkjem-G~6Z22%?YoWDe3^VvxE1B8$b$R1pl+3^oeBC`(74
z(LM973XiCa6vcuj%gl`uL_-p)e+{m25F0chsycrDh!k1bmu7cz*2gN;QHy$Og57Sr
z<1-Fw=ql4-RLRXkE7(AB5}||QQLeWL!Zu!*YBK1Uj(3>9$utg*NNZZPqJ6-IkYK|x
z+40~c_?6c#*+G1|S-JCSl~Z$Q-EeTs96PLFAK6h3y1JwtUsx2VAg}mMilb_V60-`a
z_J9T%UoSax1ur#c=R8_GbSiUb8uKp!vJZ`4$znpe?RnrNn4nICobWu8f()a0dhjT-
zM<wisaLbZtlKoT#ypFwq!=jirCB*3vOA*7~P-Zv+>E?1JgwSP4YMC_>)G8uVigy<0
zOmKyXitjhPT9{trubK#L6D3+DiSrgnkmZiY_sRH9C?$)FfVlUdA;h03Y+H3j`NCD<
z=qz52_Kep-RLO_{YI|sMeQj+QzdDUK{l#86req`{gz57<#d^-f-Xm%Ra5yIiH6s!s
z`aZ08Dr-@CT`q}%NY9E>%ixhg_t$w7{PZ~^dJUm&v20hpeg><MJS~Ic?_$iari6u5
zQj8IFPbBar6c{|!T+*nH!&&g^vql3f++Y^kOR){Yt+~zO!Qx7O*}<Hk#$9s<sF@Q3
zhqut5Au~=*CQS6=H%oXGd9Jl*`(>y6{XP%X+4TUV>vKvSRX4t@p5N*~W4D;IK@)t-
z?|m_|D8}l`l2pF%^0n3)&ZLE|C@$lRq?J@?AoTE11@-i$h(sn6>dR_kt6bTO^^9^3
zuI%wEw@4&7vNg1CCb4XoKTh_+6dCb9%O_0H5q9Y`b%b!q#>i^Q!w+3ni(|2oFb^%l
zFpQE4&9$^1McJ7*^}aVyLr2FrGsJx2ika<%KBcBF)VsR7F@p9~ZhwH$vt1cH8O{^~
z6RV;Ixx4IrxYm}sF9RA2YaVVlW`^yPxVRJyEaLIQ_2~W%xU#}AMp0of@Sen&k`4#U
zO)ELU$y~o9zCgHfQ#uakWD3K2v@8U^N#`s((MrDTdWXRMm*0JHs7amcPD`^_bz8H9
zcY%b1Wcu}WV8X5)S7^c&Pp9PmXnl<HLwXuSVm%FL7(U0vy|cVR_-OHJgg??u$PBnJ
z290mM#l_Kl$CPW<68K=)>uMJ+Q=<9iH^IkK<sxKV^e8y=<cQ5FlnFJ15k@34r(a9v
z!9$~zf<N%;2#YC*m+U);_de?L8cZm5G(0SnoHy6&O2;6+UzwD%Bp;}4EiK;U1g$)u
z57s+fJOO-|-p*It?^ifhw<#!A|6-+3hnBvgvI!t>B)$FWj>H@yXR>#TOG@WwHj|g|
zoxbU}5cG)9%(NH_<@|H9i#K^ecO5gp87n`(nZHvDjV%?1PuLm<T8nMR^@<*$$2X<F
z@u56!y_-Kjsg-1)LGwDATd`l!UT$+)qrcKvUPcLk&Hy)HmxJ*5j5g(Y%c~c@gmD2Z
zl(*<+CrpC&m+{L07RE^%>c1RCdhpHa+_f(GDUg>sN9#qEA<wzYP&Eu|{)2OGih+if
zXV@vN0*Drl>X<bFdTmMBKV8Ipobns5Z;G0i$n99Jo2hgELCopL&h|N2As7wiBFtO~
zT^lM2_FCqC1p<cn7{4!hbpb~Banmz`b@g%^E6J;A%6*IE-BRsd5SM@BE#Bk@>E#>Y
zmY%E)m9?!}KtsNH=`XQ;<Ls-`;hCWP=HXfOU377Qu=^>wuDeXm__2p?c1An7W#u8#
z;2)km0RpxRE=B0AW3`PzFdDf6_-}i%meOLgJ04{kogGsJHoqURP(zrPUt)Kzo*`U)
z$~XG2SvJ_ipbax!WW--@K-b<p_GHo8zzHJw7O5t7<UH2Qz(B=KOU6h@d!18)D+Kc2
zD5+mZ2`R30KCo(spT(3-FB99!`hCFm4{M(!+EXT>y);c9WiP6~bI~|d`9Dznb8N_S
z>EbUYa-%CVf(U`oEQ0#~Q24L(RTD>Z1!%uM-1sX<>!|%%9{v@A6{SoC<5$PGJ^G#8
z$gq*g9)Hv}_TO?afxLb-&hp8bC&SVr>IA;B`eyy+={;Ee8hgLMmlm7XyK(s(`b}^?
zg3K!jcDosY=3`ak`IQoKwj$l-(%F$Ud+0?UXCXAEYzwWovDf}E@Xy_0Ejw6hDL=aQ
zF>{QKAC&yE@Pn<N4ALR@XegD9i2fF*{A<_={>JE#hwSgj7ZPawnsH83Q|Q;T>Va2}
z;^b|X{;rXWc}NJ6AqSPB;VqkujZIH1NhZ;%r7pIO=%Aq+$|o{2`9|gH3!SCPuFrU#
zqz^2{{X#|pRcYztX5?M^GDSm({%(D3QB#rStL_m9#^`;dvLzd}m;o5K_TRyuZ*nq6
zBD>3$v_Kj|3~aNEz?F$#%{ebh)@3k$)$!o72E6Fr-q=Ch9##^V@na*LPVF3GKkH^!
z5s?TH9>Y=>Y%IPpkWAdF5o1wtpr?oKB}-f^Hk>1;k3_mM;pb;s!_2I#&K6=j{?eN;
zgjM-KTKU}$Fj0dT`LW%pwfP6plrlU{(3jIE`VyKVq37HST5eIrIWwQAP2|1->@hsr
z(FG>#`rq^b2lQWHVJWaBWAdVaxQ8nJhGT4Q;9o7BUtlpauvi+b$9}P}yMq-A8;OlN
z;&rpYVXBgbMDFG?MgC-ff;b`A&z&xN5n~FU@)U+@-oBNSt_%j2hW+RumdtNXSVX9y
zr6E-CRQ$m3rZQMVlFi>GHcB5p|8v$KTJSv#g-`E1B0xT`JDk?Q_0<eSb(x;%Z)i54
zCnX1TmfZ$ui)PYo1TJk{ho>(trQ7+c?K{lk_LpH6`SY!vV@q`|u*3_1Y*VjknY1Ps
zV`sH?7v45G`P!$f$<DTApEju;??^dStqkgWY@fLxsyQPae`W|njctg$DmV}6u&iQR
zDoyJb!y_ik5Q`hNGx4yJqTzotVDt&vMTUQPPv6N3Jloj^FK@)4&3qd_Jm+&^TaDZc
zIn=5W+U=u=FTujYq_PXj)X<oMXeJb3bRis!Al`Yb>#>a9-i*R}h-U~rc@uI-m^6Qm
zX2W{%dT0AsN#XNNh&|FZ@h*_bI0VflfufmAO9vW>`C-7c*Hj(0m4^%o3v8DU6-3HD
zxjJsFqoXrBJ9{e?LfmE|SWr0e?(SwViPf-BDL+~Y`|=&a4pv&6#;l>4&(<dbdUWcs
zB~eydJteGw$t=OOE$Mc1rdBAF4QPtJEzylhY-oZIwL3l;5$zK=t;1_2iN6fTGbzIn
z5vMqS7Lyaq;|NLoW{3w(_%!{IiV<7%6VY&vPv$ut$^F~kn<+geM*QxpRFEF&DgtK#
zs5d;R9s?j1XiB3*Lo1{)w#_$}gb%62hB8bUPPzs#fS8%iltx2}2ZDiYI8ltRp`4iy
z5E#5#t@RpB%_hl2j*=4;fxx9Zq}Yn-v#1JYVmt%55WAb;UBuZN-SN|Rl!9=2RrKol
zq|wJeB7r%>Oi6lVjq+wT13AjIMzB19Tf0<gdZQxN4L(CIItbkmuNynh*=jp@{2jvk
z4Wgw*FCJZF@eU%2Wpog|Lcv#NN|XtcP;1h6=?fpqQAc>NtaD=9A{j5v&LUrdGMQ^h
z>0iDh^w2r7-qu&Drhb=(@e^szZI=}$5)P11Q3-sSm~uTr2#wiQqO<&|$AH9iSJyI7
zaXMH-z*ZQJjJQJ7o1v{?{NsmKuDaq`!K*0*;U`MzQy!uIQS?bZyV7A>6KGVT6^zQ|
zzm(6+HJ$1}K|v{x?Pp;@!=}V=z<o!nFxt%^^yeuf=-o0LcOkzOEGgZ#AuzoIo|=r5
zqP()wv}Z&zDZR6H*VrcKZS43O0uwRR^<sS7CC-+}{8#z=(65F7LKeQ@_k>&vSSv&j
z$+ri*g|alJ_+y$3RgrK5oIpKv6Zu^Z{6&6Dc^y-sZ+kyXB0rm$e3$0sj2zmnu_WO1
zu&B%`v|zGGox}4JAUoPDxsY%CF>TeHksB8luApeDruOa9&Q=<wngvdEHM~}Z6wLme
zZ77jg3?3&gE^cO4J_cU)Uq#l6jfc=&erQKq=C01Cjlik#Fh_V~A|9R=n!cde&fk_C
zJ(;P)%9w8_DonU<x);j9^kO!lUEWSaY57m+=i@6GZ{P<IglK)YJJ;WUw*+6d{~#2|
zG$5xK8F42tGQKB^SZMkT$JcEmA{n7ZV@f@YoM@P|eB{dzi!0cRM$HVLCveD-JQ^r1
zxmA!8A-8?cyc1j2yKP5FKf98d<HE#&XZ0h_4m;c){X5IXX9u2i>;*QQVloPfyz$*;
z^;BNm)JWi^4aV0ucvl&Gyb15xd+aaG{uPyZgkW|cWN_!2j;S6YL2Ox3Er#PxX<0#*
zLhUlpb4KWQiA=CuHC}X)TUc5bflpbgFV3j}gN5sMb7EoIT7rkl?=V{&uty~YoGDj?
ztTfX)t?j5bq8E*oU6~9++@wxvYHnZ>9vhs++gARO#9;tzOOI>t=ZdcXGShTHcub)5
zr$svmme$Yq1Z2bliL%A?NZ=}|dR(8Kfo+M|?2HD(ZjBz}$SWqA5f{S8*yqkiWfJem
zV^Q>atjwor-^%ZXhXVs?4g`a`woOmC^ww~HHo8I0@(8Ea!{U2*Hjc-IzJ~#Y=mohx
z?XXb7_360xwE{45QV?qS?fdEI@b6>SX68+OQ|pv4_TE>?YB^Qm6nr9k5BO9Sg@QrP
z?8p+g^t+PpPZUr&=5Jz_+wVBC_Y^dPACsbBSDT9<+wfZML|on*O$U_HEiOLCdm(H{
z&Q}2x$ym}+6(1B-tWWSG>+6IGW~OU;Q`1j*&3I_#MW*@eQAZvI&?qG&tklA^x<}jD
zPr8Bg>(fNGYgQML+9d@+yj&67B7#3eZ=;i@s+Q#1d$FyybWCS2#~IHO3EFnUcsSMI
zHM0!sQttDY68KM}M6mUg!h#GOO0<yzG;u{$m^C7IZ*6{&yXooCBsmS#cOSlm5b!Kk
zyMNN`Er>c+W;s*zBY!RX^GgW5%z^&w{b&t`Y9-PrX|Oox&IGpnoyDNgji|=QyC$uY
zY~@=F-oia5=t|K3iH0;{2DZ=acyq>r=;*^!G=X=pM5ibHx>I<Z<B~B<HI|v))+Cmy
zp&Zg>8M@#M1b!~QCU_%JpLT~Uk*0Zz#H2D6fw}Ts9MLRzh>Vs*vayGcSZ)L``km|d
zFpiG5iF#kh;D$Cv6~mT#R<XSRCLvN?Q$U~MA^@Bz(4p2{<~t%6(5IBQhU@NWr*-&0
zFJOMZKLd)?6oKUK)FEB$5*maL3?rHhal|ob;+rU!gXpxA%IK(;;p7$zM9M@Ji4q!_
zKeek(k<vFmhqYQom0QvBQKP7)aYW@NlFPWdFeq&qbC9|cF4z%#GlyGI>U&Qd^NxZC
zfm1QT(T6aJqKn5Pgh7!grg^c8UJ^&QNtUAkX*YujyT}8%<FkjU%<g+v-vqU^fzV~8
zxE#jD6iY<+PrplzE0u+-sUm0`ew}OfI7tivmI^xVt5Q>WF-fJ(b_<#K?#@|M|B#Wo
zGko(3G5JF8K)*Qu1u>)67%q751akXY3owUBz{P}_93?;<`ay@7a=^i2J8wKD)F^c&
z%+2m#9ODw4QuMD_pxHQ{n;CJncO)2v@oyD1rYTn(!w~pyDl$)KX~cc96}p_U)z=}L
zG$=L7`6~w0>Q@q@t&9i2r|@+{Bdr7K-xUwP4g1<}2c*NoeP(ynkbeoPP`5hOJsJ3}
zM?`LElu;XCIy{;-HQe)auT$D_h9wHP!p*9N6lP}8GstEvlT+)&ra0~)_ey`Q#PFZi
zuQ|ZTCaelGeiK8rt>yQ>3t<0$7rFjl1+f30%Gs*{qU#%T#BPe?Q*Dgl)zxWn<hpQG
z$^|gFF_t*(InlaEpxN9A*6XG3OB|3QxvGi!Q|jf>@Ov<<>pg-9b<|R|QM{gE20JHY
zt)I&hNr6p>Z+P9@ihQ~SBU+%x;d8nV>gS;uX$=AHH^dljAb=OvzY)T&ieWRJTyaC3
z8|n2wsUJF7(>Pc0Pm`)FkWvhrx^YvCh1?7W-%=#5o5YuS+SISb1*r~}l}hVh{i`Io
z>R@fgs(Q7=otE#(7M}BeaYbgbSAUL-Q0s&ClnH6AN%=All1k6>z6Q%O;PJ_hiP1?L
zzPbE3{S5ow&G&wl$RYQb$&IRDQb}eJAWK0BYj<URY5X_!2SFSBE4Vk}$ls=f9DBcE
z3Qyw-J|B}pa@EmpHX607C^L^xAxP5e8|CoXEtj6(aqD5IF(bX)+sAZBHkc_TpP}n%
zl9Pw+98ljM`ukgwrMhxw-Z5v&_EJ|Sw~@jjngi`Nd>`tM6_k3|1qw*G5)|pwEi%CL
zA=ud1*VsY}eKmZC8&Vmfycq<X{-QIlCJGsb%j$&0S<%=5!+q}kR(rJZ4JD>bN+fh#
z6fe@`n05i|(%E{D#0oq`9?`lT@f7YEr6AZawl|SMLv_ssz2A(GI8td$A`&!2PR3t|
zx@~s<0hfV;F->xfAf#oc6Rea_A<p|n?$g8lJ$>!-vsP?utc~w$l+lf$WSmAsq=iY6
zic#0l+42`D1mmmZi&Soq90vT#_gpbBy>4&<9<9aXA)S#&9l$I>v@%%KRk=$@i7X<~
zP~}MLbK?7jBASoPUuu#QD0zY+D&CPD)v649kjzbVq5AYrWV0>`#xHS(foszd5+ZXN
zAEq3lKpzxX+gE;r$Qibt_wkA(DB(gL2~sPz_(9y#6uv^=$)xy?(8S4&4ELFo$_5>g
z5ET}R6yxF#xD?MJ?AidTpd^&p-tP#22wp$=U%!6c;`^hgd?8Z#dwYxY2QA#bfd_Zo
zRFa<QBU=Fm(i#s@1iqq-%*LNTOtu1~%6Pa99v;0U3K#E|=`ip<4s<Zoie9QmAg(n2
zK-DY(1=Hvv-e{ioh%G~LO}-^2T`C0wSK;poy9$=+j71YXz@KE@-_r$3(|%<7$en;2
z7!l6JlJ^%4oxwsIJRlw<BR{~rLe9*6{R2&(vG<c*32n;(!czwsW%8RqK8s|$&c!lH
z#Scn&f|g&Cx9=vH>fdWPl;{;E!LDRC2q~jH<)&hLVFe?#J9dex+V$l(QwX*Vy9_oQ
zu3>#jm<4qqz~3mWwmZumUo`0MxXqE?S@FL)MH?YM!V(W=)TSa6P$if?N6iPCZKBw2
zE=$UOg=0`WeG`jV@D=G|dY380jKRRLxUU%4X+l^+gT#?5g6X1&Q?iA1O0S?EIWP78
zMr9?Q?z;k!5G@LZFiy3JrjyOFJKWo-7?s0<SltfQR|o$KY~(0fr0jE`wG!bV=RGa`
z?Bt{}p*k*IAPAl<0i}9I(`GXhR!D*lfBIo6>^J(2wKb<YT3sEku&AcZN7REtq#I^>
z1D`Fd2*w3jcFy5#*Lnhj()@}Fv5V6GUb2Mq6Mv-Mt9}j-Qy~x=m$^XXPOS%in!L8T
zV@j$g8c=E+z?L*+g(jeU>hdOCm4-LV?F^v{8{T#5K;8|H9mhXqjDdp}>0u4(5bvr*
zx5Siu&)3o4rTI`mM`90miU6Vew&yXesb{5a{8#dxneSBj{~_xw!{P|GXi?nVU4naX
zm*DO&=-}=?xVyW%1Omz65Exv769^XE-Gc_nn{&>+@BMi5v%l%?>fO~<wbxpERX`b@
z<lzyqBA!3()jlHS$JmR-QMOQ?m95B&Z1%#FfeFm+*j!}`1WhQRWhrYKokX8{C*#hU
zZmU(_G00YoFxl6flkql)L+7VWGv!uZUt=oweBd#tFru%^0@UCG&YjpR_Os=y#xuAY
zf1;I^vrH=TaYUDx$WV1gpRu58x+Wmo(g$S^)NGizKrD%*t}^8$VQgGw6rn5qk7~iO
zQ2gFXo=2hKXIf{N^Xe-$s=%QlHRyx?&j~{m>u~z=k2Asu(W`kTFJtH@zfpk}-YG0E
z#TqW<x|SbklxmyyQC@8rQ?X)jm=Tzy2G};>50nTHR4i;csxj;9s~L4x_xXOI4C#%f
zP!=WlKJ-FM*YOhoy3z$i6u$|9-?y4@HV%f__Ny5p=@kS_8|6z@#ewzQ_wywd3QGfr
zST_j~?XW3d8bJIpdrs)v7YJ_A0PRFI{9^9Na;ky)p19M1oyEvcFz7Hhp4k*yxcNzR
zn8%Q+flKvT+$?<-3w2jL<q!1P>{2c*yR2{gjNHt9=Ebx#xMuX9D?mL|hp>hg@XEgS
z6lM1jR<>5ws|qpI$2_B0V`9yPj0w$3YwdQ|-|>Brf)mK0(uRCz++Uv<Cw)@@>>2Rz
zkvJ12^G(s=yhq_!#~#Of`Vl(>M3JhHii!xi8S6qAZ*Hd1HwUzLi@j`DDb>x_{-?=n
z3T5ra{Bf%`r12IP;w<4DoR*LE*-dZ<QnHphGX$<>1;b_O&*GeiaGbcE+ze+wjG)ny
zY#T9RSQUd8DdZx#YAh|tPd-<pEE+&0r?x~!sFT(RLm{;pmA_Lv4{jAv4dIjgRg!3q
zX6Gz$Fzi&#K4k&~GRo7k@4$G-*CE<|Aord8`#^y&D~l!(r)#@n|7uMkmX36e6y;{W
zNEd07#U&(19ATJEVY5pZHEzk019Y*E%R$qa<4zqmC@icNZAwHj=e7fdfwJ|GWk1ov
z8(MzG)1qQQI4_ys@z5qx$EDQD#0{XqQ>w~>ClJs{w`ju9^q4XeR;~-F%nD$x##2!q
zM|}Qp-HHfrNm^E+M5yeY(&oYXoCwe;Ywqf;YwPKub5v3YH1-Pa%t%#N=L9-1(O?*S
z+?6>9XR)N;aC97GpGts{xGd%SkO*|Bkj5`y?*D)@vjRKcZc$O}aZJ;q$39Nqx(?!J
z!MG&{x@W*V6VnVzkgnksGrQtY90b&3>TF{T=ZZ3<jgPaCAoE8xHp?eu(j!HnB%w_W
zHt<0TMwA+Y$mo?a6mVNK>(UTDdeEOO?u(^ne!TSz12MR>@Zm`T6;U6{bSIAf5wNs7
zbfd{y^Ppi>oapEu%^K?zAS9L~8nG_XD#stDYbo<*@%DflI@IU`c<@=MBh%^r9#WDO
z=-#4$53=>ra~{6Q@{Fi#y1k!Ws4?tPPTwzv^gYUk>PxjaySh5?!lCrbrnr&PvOAG$
zdF{W8sGMp=pOd<i3H?n8hEEoD@hqyYfr(RjMgK9^2%;db7q6)LipRW=>2uQR(hyFs
z3P*3f($!?W!9YgJ^gUcSpMpi<m$ifAS`1F~@iGY->X!OPNoLp|6UbcSDlPDu@lsoy
ze8bx-?+s-b^e$1$qi|dVs`E<Un@(Y-%IV;F+#O`ZV$I8>e$XG-Pd|Jts-SygUL}uq
zKG@iljFw(8v2;0J5V#-Xf6d;%0Y5vIjm=>nFjtp7OH_E)cSKNFyv_wf)X9M2;qE%d
z?D?l^_rsMJ)2+Fqqf7Q;@fA7em-e-oe<4hSU_(N2vb_83d0Pu<sJd1`Uy5odqt&|d
z?9(aT`*_3iYacJ~fxD((fUfW=R6%jJW*M*R#<Mg>R`-SZD64x4K<IjU8q-(@3N)>q
zuLSkjrpZMPS$^y^Bq8KsmY85cmM5Y3m66P!ws{u^_Eez$TtBNSy!tJ~=nIr|BC~fs
zIaRu66e)C+QRi<Hb1uG886|Z^f~uJQ<Git<?4v>+6Q&Dk`!?EP_|@e&?vI|YUm(;F
zXH*9xL)_jIMQ4es<G)CJ1xPJ3p(ckD0}SOOSJN^xE>TvUnz^zO!Aoel=FIae>#Iwf
ztMj^MI(h>v9sjeY=~4=Iv6oSauAIwJYz%s<l3ZAbzi7i=b8=x${x;CHlyXTQWB9we
z4lJ0h>Mck9E6eOZAo+ySkNO|fuI=aW!AtYu225-;m6WC%sOonXq_tM}XZ$@2d-u`C
zqBe-cn#n(`np`nDh%5sw=SFFK;r?@a!mf{1!_|H4X~EhaQbCV=Lp6B(a^`SVvp>+~
zci0ad;NnXDZu_RJf|se9o()5Nx^&w;M^n|kbwv-BPQ(8i9)MZY8x}oY^N^=yq!XV~
zqu42Oyw#B0T-8&@HX?{DUhK0taC`6c^ZS=}hLVUeaZ3J!kktR3TJRA3Nza8XZ#ZYw
zka~<~<}vqWwHs=aqurE)*0<#VtgXFNyt{`|EMyaJ2mdqjaUzqb|6;s!W0X6caLV@B
zHu{yzcF(0;s{i66C&JJiJxJ~Uc>4tQv!R=wi3I!&cwQ>2uBmBW@A`3Z^CYu~IVbC8
z7U~9R8$Hw63;S;jazQpbQvRJB1FW1m9zIY`K_>g%+(*r-JO8(GO&6IAFje7m`+wbp
zx<}Z;IQ|sQVm9!D-_9(*2CH$CFHx|rZFRB#_jQbq)IZx!>X5pgHww^)H7+GAU(U40
ztWLl`IseB<r6S`Wh~tavyRzw3t`XzaxlpKr_vOPeWY3_JE#$dmcs@69D%}9m{W5QA
z`e)r2u$CW47E4`w!hVbRANv<*FLVNZO?_N`R44fH`RW|vZoGV8ygS)JzvQZJva#c#
z@_737rg}}3_|mbsmup_<7%U8}$<HKjXR`(e`i|M<YKQFAMN_JD^ltqSXjmV;oO^j3
z97dWwU-(h;w>voPt?GAfLGt^`M2?Yp)L>3~klCPXqi~6(ljFlE<LCWc_C^K%_KNjq
zn-_OqC!6)iRB*7Z{yG?MPk*M#3#Fwss6;V@h1=syN(h9%(vs`keq6JEGwq{zrDtcC
zD|A=wnfip3k+94W^QPxxb93?%NaUu{u-R-?<vQ|vt($Z67oQQ1vzRc5(64b9D>eA(
z29^$}l!RS>{^8yBTFo+O|AH7y6G=il;!168=4isSEswa&Q$}?BE8|8l^Mo&uS0|z~
z0aq~Yymz8xckPgvV$TIJm-ThU&i1B}CIxhY=ljB*0?*8Ft5R^I^hsc3RxKsvlQQZu
z#@pLx>sdn+$hN68=Z@BgX)g5?tURpj({^!oXSO@zrxIFu?ZiF!8xh)GE?5yDp68Rc
zjxZj`Mkq8i_{ucCy6_QM|H#AX740xOVj>1V0ze>@Cad!CZ**dZnON^i^2gF^Wx6BQ
zl+QnbF19ZF%ekST>bPTRX6gjQ+BvYM(`(w4Ya-wk=97HTfwYpxKbsf$P5rnmPkE(W
zB+DY{B|LuAQC?fDe{QS_a9{@Dzqg$g%DHEF>$5I0a<krUo8~cqp3&h<Amn!b*XXrZ
z#~+0hE+A<kJ|zp&n`r9s({8p3G)r2S|5nEmCy$$sYvQ@%#3l%w<73f=WlQaso$x;b
z5tgRz{=!iGQ`Tu<w;qOXLUhRtOyvXi=`T(-EQGf#GM)oY|0;|1TEzlhw+uxE^p_Wm
z@OC6)h72jw$|iP}2#_^9<M~Tk>DHAJE7Y3Lk~^c|jD?c8cMOncz?w49OiY9w)c}U!
zgV?dfmvI+XL>%(EW{L?*=!y{?coUVtqRENN=qtY_%Eyq@ZX>BElN|?Ld}*s!;h-Vc
z@`XguiDLw+g|ML{4}Y{gC`o=b5)7jqV2gKlc5cq3l}qRCV<3I@$>bVfJ0&Oe05*#w
z?aKe;M8nsr7Sdbi0FIan3z1V%;bL#j=a=i^VL^fZWIyA+I(fE9-^D*deRag=sJeVR
z){bDvM{;Z<t}tC@e_X#l2;lAmL=s|~cj9mNQOd%)?DbbG04PV*F*yNgI!!+xA9AYe
zer3b_?0N#+gxOtoJMljbFONl6pkg8OALf7hDc)mt^y*Rv-jcj?pZh7(@euTOxDfe>
zC2>v`aJ<<I-s<82;yZPW5GB5ryAZC>MFW7YV%$Gp?W4A_`I7;p_w>`;UtBczE{@u>
zv$LVHskxIfjwn3w=-d)yVGaA&#CNzp^YHELG>5g87UF$8%<NG}wiUo#Dr`OUWS#*P
z$6_BvsA}LBnZuE%gNH{Gv^0_veaSQtIXd1~d5mV-tpk*uPl4Ci)s+AzSJmoEPN6Ba
zt`8rLPQ1iB@@B1n&H9|J0{vNjYb#E+JIswxp5#JOC_@4YNAkyjsv|mMrE!euNofrz
zTvgP+%ia%sIw|sv1_bS{>ifLVJJ0~@%p$6BI>T29uFmi%Q@DN=x#{STf_&!eG*ne*
z3IxMUG$RQZPlf5Li9nSgu#lvLM0mXxd1XF`fy?@nvP?p8Gefa(5kfr$ClEbi+OMtD
z3+86PI5X80bglqZ%qvJf%~FTH%v~|g1n;#EFGe)E6}`=*hTIkZxVi|vPN{QC4L*zA
z`upIAY}e;8JLA3b;)p-8+0Q-5=3FgzV+&74z~De)Pc6*&>sJyyWJv%>i*-?C8~Fg+
z$&H9Zz(k8>B~ON}MtKm8w~ZIxU-tFGV1`O!1<O3#9QYZ3Hi6G=fbAk#9?@?fFMWPW
zwa~j9FevmFW<^c3N`=P7<bVaGJ9IA$pTd1W*dS$Og-l2uuAhx*oGTn2F(JZ}26&jr
zoZo=!LB3~pi>@|C5Xz&-6m-c{_%oj(9WNqcP}(>lMKt>B^+=wADSfKcF-SIhlMoo6
z=&T*Qe)W+!3Z?Wk#XwuZem{}7qNy1xJPNni5I+MQOdvD>HOGm|^YBmTJSW73awj?}
z)5C0BtZs;QvZ1+t@o=*}aIyzDH-Dvm^;2%lkaDyxy9pHk8-<5YMc@i~y!9(FF#MZ3
z#s~>%c`Rq@eSUgmvh6c0di{&FOcGRg@14%&opha0;WraUiqR!oDhFG&aS02CZ1I4y
zexRc-N8&*$PNYb+w#;EKiiqqRnhcY}XkBS6$j`m<%RozrHum#n{_uL7-i~oH+kB>c
zEb}tFn?LbQTO9{sDKMC@alo>&V<sP*+V!K;%m(V+)s(YqKPNf2ZHAGfWTpwa@9m1y
z_E`q<+h68V;P#R<E0O%=cN8@=U)}g7p~caZLxlv4&n2(b{6vlza=H+9T)yT2KD&yn
z%Is8Ji%IwM1Mzdol)IpR5EWBFwmO5bE|Y?H0*yZ##<%6inDx~Yk4cy`U2i0&zMH?_
zcD$Z}-fmL+{%p)3mx7)GB_YkPS35i4EnCU?mu(J}E#rXwri`7~=3S^>Iy(H?V}NZ`
zVpEX}gDYTl+x1AtSRFE7vP1TT2#sKR6xe0I26S033p206heQ~m@O01)in^!%MI|E%
z;0?W?&`I>@ht*Vx{Xks1vyCK4;9k@Op`;1m42Ao2cMQJ>bTa>t#ne|6F78X}s_IhQ
zanFK7145jrU7LBGnJS`Hy;adt3{m>x0%-f(UIg!ZtDdoq1%c1SkQl3^q{(N%kru^(
zC@-!tXo#Gw2`O#0a{zHS1-Vbs2CEtBQ^rOvZyfVSY@#V>-LvteiUAM_CD2#LE+&z}
zn()o}KleWme$0y9MuJ0+Vx3aOhzdiVR3et4MlyTUuh->FA$QwDsRC+Z-hT5px?3_G
zCT}~Hsp6NE!Jx$KMz(JWW6;RJyA*`O>YPelJ051e`uN=QP<=LR)}#oq{YK#q)x)E*
zeIy%$E&K>KAC{lGs{tK{r37I`=KFa7SSz4t#9FQX+~ac?VFOhpC#gl)T|$Fjk``!C
zxkZ(WN<I$3_>770_OR2^>mUnNmGkrbzzmmMuFpYOG9baoJ19i-kBaH_w(E@}yWELK
zllr7X;IxTwn0QnsK?syUmd)Tmm0GU3s)`#XX*PyvA0iA+BPjZ7e;OW{tbvj?*JKXe
z-DlEBKyVl1zn;tW%1G>xe-j<Of^FAo8doB~e|^-i$2Zjfj(3pz2ub`kUEgni(xoS+
zCYuEZ?TSkN9l#C&?UY}oaJ?yvJPqaJoBTil+lnwuvCSlMdQHC!*Hf|^(T~wtyH>Ux
zjXGWC3;z7IzAi0vED8gcX$GzOAaKoz$^9zIB5nX#MJF7ii}aR06bN*5VuQGf{z3_+
z?;B>&F*e@GKCPsfDH(~H&mdiOy-}8bLP`y6gj-|s&w15uZ<N3XSLF=5M~aWmCIFb@
z$MduhH)6E@s3d*;&4YDL1U4t@j@A88#Ls1%MqlT#4V~UP?<b2}I&A;l-VcCN#074W
zne?ecTCKc?gswNPG(uk_sh=Mnk&fQoc37O`1~%Za0Y(2(hj*>w6+-WNt|Ym8Zw)Lj
zw>Ido?Ko#W^%kh;*4V)8U=}b}US>7N&v1a)kAi0kP<7Ky!XyEyBRk)xukg&!#k;PJ
z_4KjvD#>)AYy~=R+)OwiZd`|%XWiU31dSn;&%wZ}5tPlZbevkV&K}4n#?bGm;tPGv
zDF~Iplk7N(i1PhdzWe=b(NldGY2h{bJf5V#qHGYhA|H&*C4?B$%O=d{<nq>MN%ixz
z&@BVyo^(`8?+^&g4_md#fHwZ{=wd>2=weTq2K2<;gKTFELNYbS@Kqt>l$75c!5UOR
z_;lpe&sT~KCNi`wdX-z(Sd!j$w*!F+z2djm_|Q*dRk&TE?SAh{j4Chib<pbH^H^W#
z=f`zAvkNaW<dUbQ%G5ylW^&|}YnwF=loSH!q!X0Y#DPh&!mTq<pY-=TGNhvXCxK2K
zaL^)6<%PCZnGTwIm?J_<J~3fZkT4qUGn+kWkb$%j7yu<&zuQiz#gz+kB0y>!CHFN$
z$C7q=KbNP<ZWSIl7ftz`oUzr^<Z(jixt+bwEzDx0LIsPNYW3w1@1PMGGEpT~%R~L%
zfzQ~-qG9m?L})A^%#c3JAkMr2!#5iau>3(Kovg{IZPMIjg$?4*O2y$KWO}atd7QBD
z@RwfQ<=IpX-p_|iq@fmjGvN6q|3IN|CWNi`Z%?&CpJeyb6=Cp9HvGR1*PFn})PL6l
z3cVZr_dov*HY`MTOa<F{K1&)f6%vB|1e0C5lb5t!8p0m4A2a;C=TRg{f^6Oz`hm_;
zm2HprWpCG~P}q7ZVs0EW9K9&(*@i|gktg}bAe*nep>bw=*$?4q={!yOh>EsKYVO)B
zd3Cs=UtCqC{oKdn+L{F-;cMez-tIVUfOhZnwk}&0V!<i6#5BPl=cVT~Ryr`28P2^g
zvcKpVaE4P*CK3;^lu<|<){MK#Y#H%X|J^x93!t%b^wDP{=-|?qc<`ZBdU>YOmkX_x
zVhbfwR(>7+z*aCF(H>_wN64s@1mhX{KHM4p`8>;Aa%YS|WFz@4_2mF*f~dc`iT~nj
zBL}uOhp$IEohuE6C#~SM{0)=avh9l=?tw<^PEvFNZ_V00fn`oP-xFX|gmsx3Z1YX?
zEO&KwW7h!QeQka3&%c}D$W-y0pOsssW`V7~gW8JJBq7$<>C|BhT#vzThwpCf;GnB{
z=+G3hQ+Qb%)R}D%SjO0O5o@gQuhKx<J|>6I0XZPQ!FP%mR@<6`w=ay53-G11^%d$I
z2uu$=3-}#!&?u3h*3cwp(bVw)`+-6VRgSV>+t;S$BgNWKJ4nIo=NA&A8k?N+HAnLj
z)QNZf=V=Q9ZKyAtt~uKWXBQv)Kr9oB$P4WbL9TXh?ouKGLOTk%hk&UdJfc%#!;F%x
z^-_R+2$U9_aX}U{!))99e)4N2ay8TaWD+w{^!Kb>4`D4-5J?OCDvm1N3yxX6be0SZ
zbME2rC2hZ4=T7>s3K9E;wYxXu>z9Me!<)A?i)VRsCeu-B)waK@+FDw|Cm?=(I53-L
zV5kt5_0@5n4c({pu5%FD<X_)@&(=kOKiPjn6irQlb>A@lYX)2xbpfENz3ddsc=a6W
z&n1ub1xe}sd~GxT)gFlbUr<4v8CXj2ANN<N{p<hI@&9<m{RctNbJF_%?1ledmtbhZ
z{$E1&zyJ78_7CO$#Zv~=r=C*rk7^KY?E>5X{-D;a!wuP9kPY&^&{@I7MW&avcJm9Z
zifT>w2y!{7RTHC(TVq3$75uyQU<wUzi8o}oK2j~$BRxtGO91P@%tUwxm%jdA?;Fad
zrF*BetU9>b;dO*XF`6O!u(scB+-J?1T99d1N)ys&O_&jtDE=y|MH8!gvY%@riXP5W
zZcQObFo(Ya@Q|kEL=p6ZA9?z+lfj!lssR3hMf#6h)I)bbN9cVZ9s78_U7<<5alE^=
zucI2{A3B8B;Rsd`NJ4*=H6&q%O~vF_XvXVwWP<iXOLHmqb}a`F(N!`6F8v{HA#S~2
z@0A3~T6_TBq{RLZ*`wt0F20#aOyS~sSTW-n40#zXww%77!}r)%7=3xs_#INq6CD$-
z1A~%?T`Tj&`!62^@H@H@0!e~r+dEih5XTXWvx58X_!@;=9XD08I+EoT91I^nJez$%
znxwLySa@On9o7wyZ$Hz(ALPCxUG#B;dlibu8<0?J|Hc52sk^0m#`_U+#b%&Sz=oa#
z28grA;GuI)x}T4&xr*LbNL|~7Bg@ypP2{WRTJN(nPqY`=T1rYIPtiS)OMl%N!aO?l
z%)Z;pJ?}cfOjxdr1k_U!k>P4AEaQVaIk-0)>6)h{fN=gT9$txm-6<zN@wf&F?%RLU
z7Lt3>o%TctY20B6CU4rl!$FQ~m0uT1=%tewXOU4xjYdJ148zV19kuDG{=Flfh6Hhp
zsuuui-N8`jc6E2pS&aB&L;$v-`o3n27^swQ3`7PzaV0g{Nl0hkM#+d%FD;R0TX!+3
zy&zzD_oyxdojF67F?Tn*uyV?T+jW`eGRB`vr}->EpX?DVM@i)l`KhWOcdM=ojP}%O
zcHPC}|FZUm+(a~h#63V84N9hVdtnEsi=3(-MjY(1G?x8Y<o($2O;OW^J{d8F=+P3N
z+WGlK_@c{HXEi42$Uglfdhp<-DI2!$f|*+a9^hen@}dwi5HodFe6<sa4sO0?t%DQ4
zYmmx8SOZnBMTQmOwh$W9aBdo-#bP-Cu#%ZYfE*DKe&$)w%2Yg_gIQV&&lXVpXYj-v
z_mC5s@}0e7vI4VlhJr&S-CkJ<+^}&=TXkvmxIDAA_n))92eq4keoG`F+O7aHsw<p-
z^R#XU^PHIAg}3c(95gt1?E$tcYIr+foC95LrmF96BbZTy)fSUo+fAQMrcq_Sq!Uc;
zniy7ca4UsnD|Pun;^WCwlt*@;r@g_-nC1_tzv7dh<0&6)qLBjUSg$Osjv~F5JKnCj
z6``pH8B!=5*Qje!)+hLXM9v_d+!fqg^~mxHIb>Pq`f8SM_Yln)ljhH`BYuK__z1o+
zaeA1uwG_frX|13!bb3U#*D}M^Z!`WkD5dYI)?T~}s>1jZb%@#m!0|vG9p0UvO~0+Q
zn^k*JKKcdBU!%pCQ$OP&pNvwu_>V_D<rsRvgXyJA1}g7<Kh><Tpz(>~owPEF3Xh1(
z!e)c4!VB=h+5}~36=}PK{AtY1F*%Vj3%Hn2>UKsaKz&cD{YI9JrM$?G3UMGII{7hk
zL7N7H;EDG2AhuNqI5|X)!~(>Y1Nm&@j#WmGmS{%9q@P;nwG7p9gpel!89>zz+}iLI
ze5{-|(vxRn^rFd_vG)+c#z;U>XBqh_a&qjJW|(<72ev1C6FQJvC0>Lv*Sv$fQQwYH
z6{)dxlmaZ_#+u4|$PjIhECvTlPDUmyEG8zssYKG0Nm4PybXkQvfbWtamO(j_MhT<F
zCVd4jWo>dx$S<9#P9I?Zhi~kUy!Ax%4a-4f3??Eo#btS$j&~Le7@-(vyq^kLuUx~+
z3w;B|MnzU&tK)((p0YKaH9*vpsV7=|U!jwpq&Xfte#}Q7qJ4fR?n&;$^!9;re&%LE
zF+$QG_MBZ)KdW4e)u{*+9W$SehKYNcehlJ}i<~L;+r(r7juS~yledg&@2AK!`Qp7-
zT|PJ$A7PFs1Dttup&?!J-Gr%gji`1672)kseq=bzB(GKG)cV9nG;+p0#FnFM#D5VE
z1QbwcZkw)uQF2R!3WTTjT8#s&LJA*yjazv!3?Tjt^44<1|89AvXMixskjGXA0){)o
z0X8Ilvb?0L&f#K6oD{vww$gcHn98we(t_u<o~jSCW<_p#FrG%U+)*^6J7x_&ZgkjR
z`SUsZ&lvgfxpzM^l&Ek~fpwZQk<J9nd|Z{ydcR(uc81yd<Z|ixct5u06yu_M#CvF7
zD?e*m+ICGL&czkCa?`eCrZ?k69ott}M_q;=!{l#h;u<y6uazXt4A<xVV^$U6{VOaj
zu%PIUeNtY4MFF<|ML^e)ZXO_Nxqn|4OIMfl!%un$17ak-8y|-ib6PW7>0Zn7Cx8MC
zsKh({sf!QIJ=WrOckXwh)}*(y8bpPD1(<G`B(_1&`w3c%`?O7%ob)KAs%xmQ4qXcG
zTr+VDa}T-x&h88s%qVmK!C+;r;aCS0GY+o}^@S}`C8Gi7%8T~c9pqlms^GuI1^%Q)
z{p3vz11mVEvBq(-E!nITR?(Az)XGard+Yg!=4-*n@0o|l0p=9R2!G;Qi8g)egi5L#
z%BZ#*Z<N2|qGUzU%`|=W))fGTBQ`;Cp^NgaJmu*kZK-Qk{JZv5X&DCp^%%|=JeONb
z%BWGjz%-Rr`)7g%?~fTV;?Vk^0DlyPoOLa9d+XP24Jj!~k8E}ON@r21zv#sQe&A63
z8>a_qoD`8i8^|jzMFrwxZCFtmRD09<&aV?F2cW@(klb}g048ER@MsfRmN4|sVd(7B
z3FxA2j}k2foj&?T0WO`LT4E&ja|hG2XAs7_=ay`dSL_*=zSVUVky4k2eKo1pg%+zv
z1M1W_udI1&u;Cx$ms{&Npg4svmtc(mkYM#=Kir2fjQ#R7Jg!wz!Jj#unSftGd73#s
zj%=9V#=IC>8AYH(H}}s66nrB!5?Z}hHg0DRyb9d5DLKW=l2WsN0?{3unq^eADWD}a
z%^UqF@Yr!rZ`6+-?=B5&z^=X^jSnrBvYnbJcU?nMg0nvz=H%7dH$n?18y{wikEQgz
z1r0Y;bL8lw(Vzqc1jJDL3M&2LkJ(l_@*}mRC~I&obkm0@*K{V|v~hn=ncFT8YdSSL
zG)jop-e9h$3Y6`mhRV$=K3;!8D*K6(nCwj`g{H3TT@`N8Y?@?vqx?e#h1`amFZ#p|
zMEl45u9twtuo1p$2}H=^et3Bv<Plmx>WB{Ms-=vmMq}m-FzYt=*8_1^Vc?2jj5;Ec
z*GH1JjU7j=kN3}I8NgSvWw_+#xln9p>p-ZOAQ1wayqj*DUtEs-A7cOx&tf0m+Eo><
zBREOQf8`ju@wR_OL|!3En!yVv`+mckD#d4+6~5RWKRe7Of}4&Ptux|9Q<LOJ)_)T+
zM8ghGUOA}-YHPzFk>#Z^YfhSr2T%!$c+TtJNrkcJSGjlc3IaRY*R#3P?MJEc!)Aq3
z7*lnTQ&lo^Na|QB+`s)@K?6HfQlOzdqz|mCtdFyF;F9qxB5HA2hX?%@r(U3&G`yM6
zJE=al^mjq|p}+6vL_y<dAU}qob50zIcSwb1J?o^%d&7zz#X<yRC7V+}q#fa;Z(w3R
zqH9jbd5o2ATqahg)*vh-mbnRNa0YK@Jd8U1Fm7(ru0lC?<?n_f+NcSz#Rzihfq^eV
zk+;lefzFh_fqig>LJqm(qb3Rjri{oyEyuE$#%yBmSg!$SEh!wI6;9Z^MN53iD6qj1
zhFh*M%SPOmsN0?w_?7>t#>*2GJizRj8^mJ0m+g)cbsNrw$3I;n)yRs2a^ZpvVi?%o
ztb>{^>0@l!7Kf?W&dM2j86mao>ak9KBWP_25C3#4=a)xLNiV}Hr)#Uc*pMU2;Yj15
zb+v892C3*ymo{__e_%~GqPm_Sm&;FMk<PjN*}%{!Vm0RTAMSqwvlymcB?VixXs}+z
z@c=$;O3(E=+>^1mL62ry7a?0tOEU>VU-W7AAT9gwwkeWXzG$c8+2EVzO@M9`H*R)M
zbMv4R#~$t`E!k@c0ITt`09!pNdeX6j22~1%*w7B1t-5Xv#DJiRZ*B<y$>~@{F=x(*
zn%P0C72NxkQAv;`s{C=t@?_4^uL%4<8;Vb04o8n#oIMEuZL)<bg-N$uq5+=Mdpr)K
z{)VhD_V$WMAHG2yS3Xp9PBkdX2=t6H$lxz{J&l!S(T8fg&ZH_pBXf8;MaFn$iiki!
zHhJXbh9!ln>B{599377qqs~;n>tcoChH|B(54p{__SHhMRNDI93@z|(Y!cei-aH`=
zCxGe%`#<eu!=;bVKjeCf=BwstU?&9+Web;OX^`xT(;CD^44Qa^btFm(<}4Ygh52bP
zYEAj!e{T6!uLY41{!mH2DeRavsu7uMSkv>BLW<1-VH!GgBgm;_j=D)KwIj(w*M~43
zxab-;50lQlMS^Vj9K4cTP$cY@CmdcEhHNTAW~Q{%M?J_T5#aDg)?+S?K5S_)5OQ;1
zPkVBNJHs1m)uD<E6klO3evVjf*5!4v$YCEC0MSH8Y6`WV_8>zt&=U%z%Pxzer6L70
zW2<?@K4UP*H%kfHV(UPmlG=kr1JpE}PNpBDe6>apLhUdyl;Ud8!HatHxOXxFBD$wN
zSPbz4V&V+yym$jeS+<r(zoNDrDh_)GY2}}R28uK;ER<5#G=p=$Ja#udrv;&4*5IT+
zxZEf|1q+qF<8`uh>!mrjtkSbO*4=5`l2UPHt4iLkl0cSj*BsEbAyl}7&Hk~uf;FQk
z7Ze1pi$jyP`0mPwL{GU}MLS|{FpJoRPaU>0_Dz<r89j0h!DdO<k@AY{hjnN#A!Mv_
z^rfpAtoWU?7F+B`82{!Kr(!V{`3s|mGxNUUo52ar1tr&<H1ku!wYF%aRhWt}`GXKV
zBp4icOQnrcMgPbR?t4to+Yc{+PXxxwf|*D=xU{gUFn3qF194CUg=VcC6Px#R<!Kw|
zH|fIYCh0dNxSR&(PfMvH*7L22*R(3HMOdp@9|agPGLmyYuPa&Dy%h}JOp*^ixB4j|
zG{=bt0H_7sAS9cu`Nk*r7bfRkPMpfv_YqO!H1fTD85;scgQZ#itNVp5h~ojnd^@;n
z`sM|T|7JIfLw@+s+YN^P`<Ke<NE=s-&`(GYi}NC__%+8!Mdj4BZtYZ0WsT~EVs^!D
zl=mU&;t}xNsGW<bYeB0RVLe)2_ND95R$g9SjFdEAa8EwrV(c?@(|{CKEn9+MotB(t
zu)0`9&*ycxh3)%lTy)&VJ^P?LK98jmkJGu@IfK`((<eMmv9w@|*gQVR>%Y=<=gknA
zk&Y6^%+4;C7OhJ3&kcNNM8zS-A(cpA4&zUi@_R%us%vrr(YVnxlku4NYV4Rma)^NA
z-T8F@!=%ZkS!0sdIn}=W|Bf!y4md?F%O{iZJ6^BWYE}OK4tKeOiqot?CzrQF*|Cpq
zT+<qAYJ4D<g<7r1<-{^4onL;-j}KJT5}RAU1MbY99|rI9>ztt1=68fX5UGQwV}Q-k
z+mF~Q(V4xsp~$!5X$9=dO$fKB`0wqu|K5%Z4v6h5=<DnE@b~+~qpyH|j+<#|X>hNr
z^MBjbgL~ceay(ib=$8W!Z1;V9A?faG=?QRi@U;!_w5%9#s)RNkA^{JXF)jTQ?EAj-
zw)k};@<#<?Z0e%`;PQ?RahZ_}`uNZXJ!|QA3Mu;D>m6$K*grma^~ep?6!?4i9vb~G
z0-#_4P|vCP&iG0G_rgbk2do6*z{c*j_w9$lb=}D2BefJY&x#hWbIQW~v~A*9srfFU
zNnxfxqWH789Wy>5+zRUxT-%MzXAPApL7a8uZXzi_w8)!h1oC8BOYdz9JOW`tV^@^h
zEV&A$!{?zhbB*(b^Yy`vY=yP>(MuP%Z{nRTpy1|#vp>;*qi>?h-wzc61`w9>@-dh_
z6OI`jp0<mf*(&E#OxcB5l-n~>CErJC`NSHf1jtaOGyHCao66Do%!q^Z#*ib`9=C(f
zZ$wY^V&SNTx4#@cv7NLh>20XuF91g!Zl_veIPK6%GuV#$ySCDeHt2_s=*Hoy0O>&^
z&#~%HW~QbpGaWa3-zpD~KRly}<nG(PQKe^%z_yuDmd|&s9of$Ro*-j;=|4jO4;bJC
z?j3F*pS^+3_afgmrth-@{fLejp&bqsj786Z7MTUEX8a}of%><{x19tf$-d0jY;33Y
z_V({SFeutEbkr&dUnHJx1(my6f&r*M^!%A3`+h1%u#8E&LP?&|jBt*Tu2x8p*^wt9
z<q_*y0kWEox-f75JPlw)URz!wvf#eu-NANT&ig<XwCG;(u`UB;5;>#1wD+`OA9jBK
zg;Lpes(|E9)p~)R)KV#=g}4&Lg$yi(1bqw)-g$V7JzMj2rKCE)aQ-F^3G}kC-8IaC
zK)Va5r?m<lMbaHL{%L`KlC~`U0}4sgzkQh~_M5}~xy-Gp6)6+X>jBN*gx%K#1dX@q
zjMuyMJT?b=uO%O>`QQ^B5U)yz{hPuo@prNlzsSoNd1l>oSIOR@P>7-3jW6e03)rQq
znI^U}aD>Qg^OJ~*ulZR4mi-=H*3htg1*kT^x2$YYiryIYv-NPJB))mDc{lbAYFE~j
zJ_$aNk58Ykj~i9RmV2$^6c|yNnHd_|07w^|gku6Gjy^TY!PO+!B-Cj+8nke*?AdgZ
zM*tYu?1H7Ju0#+g(w8u?tMh!`b;aUti1Ol$zsR>W9fbj~^*iLk4G>iuW+;dNxQqjg
zO*D5N#&Q%9$b3;{7pf|7T7bRj^z1@94SHmaTUy5#sjw@IpYEeN-_=YdmUVYPUQGGN
z;8g>O<r93^u=eWe!fm{;UF2BvvE_`Pd?g!tWvC1T-+F)YDR~9!YfV#|Xsyu~7%TA1
z{fqh@KBrVZ-;tSYuxuXbn$_B@@qNwcYpNp8X>3o%tw4UyXP*gATE{_5CYe(44BCCZ
zfpFUSme#u=?9ds<7*3X)nKAkGlY?KWm&@Knu%|lF^lJ~~Fkp?>mHg+mM}R=P-wVkL
z2uj!wi3$=Q*35=C<)Q(t2)%QWLf@acrUMMn-$)kQl!m7TEjWq@QZN#uHK~IaG(KE-
z^tDJOP$|R=BBJwAobxnhAb2B1F(}{vwk!Rkwk~E|3njf%lsZq_vrIBLe)SplW>_+u
z?9UL)NOB1V4GhGyq&R?`YglktejZs<3nN239b38MbF&#|d9AtTpHS99ZaVABqV(8`
zoHsH}N(!XBw}So{3!cH@4JFleY{BMpUhAc9({5^7f?vsOY#kCQK-xFw3kTqKNzk>X
zOqp<dd~`n{;WPc3*KI{99*|ZGQF$F|f7VQnpTx$bzcP196-5~Vn10M&?X=c}bqVuf
z_IYT+_z5d=sNRO3E`X;cNJN2}*=MUy>z;g)2g~x_W~PiB{P1*B?hzqIsOUcf3ofW@
zQr@=5w3!_t-1LsU43V!-`qKC5`tLqT-tQ4nY-*P~v)fa*^;KYZhj;Mb?3iWMU*-vY
z<M2}))jza)t#$}2l#FLJGd)QuH2GJz>&z=~Nxm=wUf$os$4y_^^%@a!VQ|WJlH8Zd
zV(J)v?%R9s=%Hk=M5ufj^|Nx)gy&-m$E!DLYKR#5!kqreU@9$aj09u@4<V<hA^tc-
zr8^KXiwu6^KC<zQ&%d2%ozyY>t(hWiUZiYzOKcWIs?iulw-qgPFpnnKILL-I6vGp|
zq<M*#2mK%<c$$crpJ_BL$zYWUjzjJ(jl1u%$P!Bzb=X~9)M<`>nb&_CF6SJ(9ztgy
z+OgX}WNSuS<Bz{<x>goK$QZ!bho!MpLhyR!$s%u6#BWV+9}Z_o=7c!XwP`hgU-jJ^
z6!>!VpS1qH?_h_99l{>4yA+cHF-s?w6KI*pc9bh8dUK<Zz`wBlux63K@M*<{UH|Ou
z{%v2sJwA3&t(yj9@3bkHR@{9y;f{Np7^~m1z&j=WJ8hd0(gP>BNNxRg-h?^v<BdgP
z?k(yX#>sS?G@<8~dt=*aIS0;vD&r8AC;G|g0M&a}l@N5X7ZO^(5hen;*DX+)*pYCO
zD58W1GgQ8Hw=vHWwFhn!rkLX`F$o+QE_JuG6pGT~GTUv!jFm}iej}PZk0jO?FWm2@
z1oa$p2~2reIAtH<K=9DpzdQT*C<gAV(&&niU-9F|t-~xurdG=V?m!)Ka!Ea8TnXJS
zcOP6fTd7MCfv9PU_o5+LsPAJ-CY@0{cMI9|#ot)P?|nxH@8WRza__+5`HF-q_rT-^
zQcK}Oocyd-N|kT`8R0c0HrVKmk6a_4mGLd(X0#vavfFouRev0rX```FAqGuMKiAO<
zh!5%!5cYBM34GjkKT^FG@whl$zd$a0L;3V?F|ud+#g7PR3R;|YPGuljQ{XV5Mh8=!
zq->h-u0rFz_3OlSofmz$q4rxsf3f9|c=Si|PP(<nrt1kslJ<4qjbKU0N9-?h4y-oy
zhpU8PUDscP`xT!hU$2LtGw?B&sA_;+<DkjnyH$DL`#qQy+T#4RccHS*`c_y-4$JG&
z24nY^seqPQM`S6Qyq~S#8WJGr)UcRUW2$|FPJ_fSgE~`fu5x4%0M0M<1!j-^@?i*^
ztNmNpkS?Z~TO3FiEFXXoH9_nQ2mPjv65jpu?qN%ReTojjZ(IBbT2ko&mbdC2`M6fW
zDV+42oDG6sUvxq^C^E_7{*Xn?Vs3~7!>-Px9hKa}J}gdcR&EoPWumsTk-OH*1ft43
z#(G6eH0;I!x^b?`Ju{wV&p#k)^R`P7$aLx6x$L$@EYqAX5O9tEQ;%-Q)cGTryDadC
zg@wds;zxY++3aA&DH@>jWET$LgpbBIs+PK&wWTVPGHYo;E^uFeB~)U6SegtWrWJE^
zIsMEB*JA+ELl@?q9EVL8%lTLqq}tUojDLj?seTItBM?X@Fo<AKBZJ?L$)8Gs3TSer
z8weO=Yu(eTE(%D;0ifiquN>R#x5G%fB1AwxzgbkU2T3<ag5+g81X8A>t9(&!W%DJy
z*r2Vym3WPjlk%Sv36OW;guO5a?c;sIu`7eFGQsMLx5mAxLoXF&q{MX!PKcS})e~AS
ze<%TjY_#jTp#LuZnvALIA8;<Lv4Ezn*O#0+-#|IEM|9u$!wvpHR^FBKa<$%=W_YFd
z31RGV-Saz9eOq$!v^4pW_Z7#qnsE5_ev5I<;i2oMndueS$-}r<u`$5yCg{uvI^+1T
z{s`aX-R4C^j@fRz#6d`eiQsmhV8%qpC2c)DP-xu!^V1pKgh#IJ7s!4sxyO?I6X)S_
zywB#u2RuFmFkgw!BF}e@^QepDgr42lVkzbwt6I}rNwZl|vArE1)pH*dAYwW{>@oJ&
zz=fTGY7F6mx}d({R*~z!zp#)mHFj4ok0!(^DLP9p&iLmQN=A91c006VH`gLx<cuy@
zlIrT&2kyHp6c#ON<jEU%h{d%(Z$g=FEh(ApS|7tDwoj*WtaJA`sm{1($Y&>biTvyw
z1QYG+&4DL&KL(uyRsxiXBU@Vf&y4BXCsfT#bUg|g!mZqfQawpVq75F|V8QrrJHjO=
zQ-jklPULVk2g5m@qxF7>z8%Zd>!x`Hy}tKG<yMicynh7UBtcol;8-fd?m#c7h38$H
zms@a;u8MJzfG8}Cr7bgshJHcVw!^kw;<^T*K?)wmo-$j^9Z>$hQ!J@HfMOx5zL0@S
z0DhYpAO3idjd>rxF3u>oI*-Z;b;+ENpx~2TD1*9Xt3;=WtwVkP*%xv?THgw^939^o
zGYrV>)2#?ToyJ`<{bI%mhhXvmTMIidl&;I@QA-cRuPn~2D@@?R$Ac?P48+yEMiGRV
z-w}fL@#10G;h^(7EB;@*ix=h;b5(4zq~u(idc#?OVC4I^NnZkBn^CN7&n7ZeQ3Xh-
z7p}M2)gNOgheSNP%Q5J;s$!qLVym>*vD5}On`*<9vlh*oT`WM2cS;9uZvbWTVh2I;
zW7Cpn({;fny@vFkd^?(|nk~H_yR~S+?N<9)_&*cFm*dAzo(mtT#5#L~1l!!*7L_<s
zU#<`vBur|mA1}W)Tv6Ql8C*2@>)CqTJZuE|xp7QM5;ArQ1X|76HYgYiKpwW%R-t<e
zbhHZnYhWS-vVs;FMB?8^sHX12DCuS$M;*5LJ(O}@KhesugcI8MNbmHHS~S$dmQ0h?
zpLR-?9NZ1Wl_wis=e8kRG*tmLo*90Ys#PwK{jC+0<9_GfbZYP2W7>)1BXT1~0awuq
z5J!n0_h|<oivxfL$%MCTdeiTEM(sco(g=Wk2FK$&>!+R7?4BkW@|M<U-Hj6@8(YCV
zPdrjFWQeVym|ktyJ6(>DD+%YolG{R}o(ugm%^?X$&5l7zL%emeI;m5>@^n_BXJC&k
zE;Uz#&!dK(><ll?1GU~?OXzgpZ3*uQ)B5H78tv_*>K$s69-77(@pWx^%z8odCh6Kp
z>{wx!o=k;z`cK>p=00>LU)n_F8Q<MZ3<q$TaB#R?9<0~j7xx5jcip)AJGk2N7&j2P
zZfvbyFh%}03U2-0)YH+|-4x(wA>zta>SJ*-Gju=wPTq82p1T;>k^5~HINSuEd(j5>
z+KAJ5-`V-F>9<cqQGYiwkiVZhcit66=r(Ck-~g+0Zp6iG{g8!y>^;3Q8J(&U{O%di
z>=n09N*LS0Swd2~;V(q9GG_{i56tjPV{KOOoEl}9XuJMBU`|xY>2gDiW8bW@-%mhF
z%R5SfNo7PwRnX7F`zY44?6Uf#^<A4dT$hUwzV}P@)2$?ItWspf2meDOYCk5N$Id2L
zmC^Di8~9<9R--&o@m=i;A;|L=2cJh#oqeuU2i)HUdJA9Jb_VXmW^fT{j#ihuZpS!{
z*0hM$D+!D5ze#*!p&;5fM6;SAA<Vd?;pbIj=~^H^{iJ2C_p7Vl2{j;u27{6o$4V;$
zxR8qAt)NG4StZ9HB#}+~<LGlFxy(&b>FOGTB-ZHH66{vpK(5nT%Cgk@RW;eqmG{yo
zfBhQwBgw~pM<r2fM)^NV1GC@%sdxWzJUr}a``YtEZa;Y7%2lG%>*en{enB61UuScZ
zpeDoinOeB9pl#2Uh}YZb1v1sfRq0W4cgv34N_F&abkW@F+dcx7$mF5c(75dxLu`DO
zKtf55?%!7uZteJACyAOm$a+Y<y&dZ3(BpfInhU$XLo6a4L-Df_>xwU???2mH1^)Xe
z+JNP|^m1gU@nH2;$8X8+MY!{?`q}8jM&Tb`;=<6g+ab21U7<Xgx4#aoSN6r9QvK0_
zkPq^98Ri3;)CC*3UeE%5_w*N!e_OGW1k^$C6(lf|0t#c!Qad)*4?ORUtq_oxgFqpI
z?dMCEJ37?cADacG{#c}4TWNHro&B~cgEcm0b8ko7NXKI4jx$c2`2Ybq+Jdvy?Y6nZ
zh~;kb?$pWkP(QyTp^2BTqN%PM1=x@o)lL6K-%y83qsg{=)huFUc2R?0K~x8SOrnd<
zBVNzK78vXo*{h%^%Mm7+v9jY*!odHjw(rxnyW58Am%6><UJgJi_G7!?5+LVl!=zJd
zQ!p>cb>;72e?0@2dbRmKFOecXE@EHb%C$L<3+aa%zJO?Ea8tXCgxN=k5yWV1Rq_~&
zi~j9W!l+Xs@I3f&so&{0Vqjy-{q^QW{cLdoE1%=SF*LFGo&Wu%zR<YPn89i3eRPBT
z2jf&hU*BdZp;PH&*Xkn>EckygsT+%Br%bP9H+By8Z?3<ou0eJeOZVR^1M6$9x`M7d
zL-{7Ze$PLt8~=YXD!y(rrkYFfQ#V)f71M4nFW1x6pWFz3%N-OUHa03XgYorTG5-aS
zj`d;zcDS=!ou-iGq4&f3wu3eFmIDf+A1kWU(_HIK4)vkV^@81yET7;2$NvjVmBf9`
z{Il%#)s+(TY1_Q7RI59*zyEOcO;iOP+QxNA$1Xv{`<ao(w+k2WW;eee|Nn)>ez;8)
z6q^CL+-RxK$Euq|6nAzRB3{WMsNF$sKEY0(OHq97{tR4@|6i!>R0$PGeCc+6@pY@P
zTR=FS7nR!Oey<VH82dpM;S$J|TSMe3X|m-mw6p7tjs=Y>6c1zBg@21e$c&6MoK)K1
z5JY1P?b7xAT>1|M+Vh}@U_j;eeTMe`!Ny$v3lAcJ|93y=$%RXHGrk@*U4INlI?aR+
zi;d2%WtcXZKA+fF%?iIFtf@VLYHEZ9O*au@ca||wj_4-IRzR?^HG)u}ar>TyRTy1D
ziLtwUohr9f**E7UL)2lgmO_{--8!Ad;ONwsBt#<suTMqe!-1@z+XD_mb(yU8cq~c3
zn)2#_wB}kuW0hV%pr9@5H-jWS!}wgQ6%+-8Voqw?ZK0#X>qT$Ww_1Ik*QZnRWsH+M
zO()&62w;YPE1v2^xd)n-3jR0BU*b07ua&*6k6S*|e@-Kw$L+dR6S|qz^HWBDs>c$Z
z1>lMM!-y|#xBUkoT_yq^wCnVWB@t(<U&;+S;Yq-;pXiq20uSDGuqgO6kP|(LCtg`U
z%P7&Ul4FD4g$M9CRd|pc2gK9v3B9Q(TPeP((6}m6_5U}3kd$)Z(bk`sWp2XavC$hr
zUC@Os6Q${3d|y%owA5<)mDFfCd^!8q_`lDdPhU(y2P$x~{`<QqiDW9|uu|nNM-4Yj
zvseRXG%ojcO3WOLG%xTP0`Dg}i;sVQw|D23#4OvLY(bG+GqCKsc7K85dwJS(SynV6
zaw=`O7!e{mBq!ahs`34pP9tc2x-Xa=!V@@p?#9aFkWEv+huOonM@ulN*Y0Sv${`!z
z2PAp$j3fYVhZPs<znBs|QHQ?XK=%rUT1sRU1pjr2J=>s(W1nav7D~cPxL%g$=+*=I
z6q-DIl)G@eIo+C?a_&(>!Rw3?4-KX=a&3-4kQ#!_E3)H6!uEy!dwaxN%X2EsP$8}{
z{W0Wtg=P_QzX+&{%L>AR$P*YH5u4`@X7a?kXBko$EPm~zbv{NnJ#pO5HXu0g3erPV
z_D`mcb~4Sy6byR!eZ+b4iCqu0h=ZClA1|~}z7cg%rQljeRys=uZw$r8b5VddL+8Iy
zGg~kQNjk$}yb1IpOh*M!ju7=-Uz>mCjX1@@z*<n_2%6se1O~1_ZvV`N=C|3le>FfF
z7s_v~ka)d5a!nDO$a}U&eTA0!YghUNJ&lxbWAhD|l;y+nf|$L|@g%o?oeHRi)3gz1
zg=K2Rnd}gLK;d^}jNzt%M=B4#9+<VYvy)S&Mcf?2vHHgPt2p7FKiZzy)gu3(42qe>
zkbcAjKgaKmNSS#Nbar>!b&?%~)sIQl8W2L6g5hJ9Cxh*_R7fw`IBTsx-5m1)(q8PW
ziTZ5U@4bCUON+{3TCtSat}GVM)qceJjp~LQ{n;rzR~`v0gLoZ0259laP^9aiHDNjx
zH+`Tis&$2Su5P)(^i>M<V~6y*UbFU&Hj*M;XlS!9&D7@YMi131G1C#_>=S*$DdjDW
z)s)IC9umqlG*_0r*3Ea$-r!Nsj(~2#w>ahhT^jPyIWlAH4`0(VG#@+<zxt@N@2;~*
z1Kms+*<fB|idl@RBHMf9FJj4GG}j15q>rgXpVai}79xWgyyogG!BI$aFu^6tb}nv@
zJtO_~3A(3VwvRheKXnn#_nCh1ro#nWX~%z?Vceq+?{sX10rM;XK#P=SM5nuDU&OQX
zoYkrhTg==mP}4bdN8;t<KW=0GX%8LYQt#1NUWATSXNX`S3jq@h{6!tk)udQ}Ji5|v
zN9`hbO(0%38ic2Bw_YOu;kIgp>S{DKsnmwG98KXl#}I~^`Gz!8`6G$0I>;X;F&<5)
zaT7fp@VbY#wo~dA`=_7HPK{jU{Qm1e)r(Z}Y4#Fktwrjx7y;YUX}uY#`qP)Eqkeq^
z0OPndWE|v62GWzr^CcIyR^BvS6~P74xx4mq=qu#5tD}PV57l|17WkzIK#THzOZ<HB
zN+Kg$QT$o9AAefUKZxo>H@hXP_<vY?tEf1lu3Z;*3mPOy2<{f#A!u-y#+~5OxCamJ
z8r&OAkjCAEySoG$cQ~Ez-`^SM;_R!vZ)=R|URA4B)m-m<<~w<Se!^QkUjUo?o5}oI
z%E1es_sl*%KAf_Tr8=%#T_;mH@bRp8niPwqJE7|CVVO^3w=j7RY-MmAPCuiKbQ`;c
z=r3layO|~(I?cPTu?d};f2{GtaCg(>el7E=_tp2O$v>^q8Ykti?Ndj0WQ6nh5U)3;
zE_R#@sTdyND05p`4Ab^YAgwigSY2F1015O%ZBrtxZEYXv!6Y@@q~NG7Eg)ha&G#$*
zO>%tTH#@tm-jiQvpX<#$vFL@m4G5;Vg;4^6_%3}S`=K9e$m6m%=)6lx4+}-<VH(SK
z455LQ2A;@B83T(fOdA%qWOPx7HklZKJ{JWUfn9;usf1Evm4>4AK84fdECZ}f;JkNS
zrS(8A#KFgo0Qy1%c+U=34-uZZLenR9zi+^qIfRRZ;n1kK&yxN;<12D`)V|PF$uS&W
z<ri5940Rfr2=X7=i)MR#cTB<<wsx<PurdbEZZQ9NQ0W-`*4jwGjZpvY2P4=h@M;?}
zp-n#2-IcH0mg$QRkkhYw_s+&#7aN<gDXMIXmFM5J2n+&<KRcP{VNi~WzhGD-sk;*j
zNs-AtA-qpqv<9<7cAYCJ=mr2=nSnMOYviD)DN9B)d_FDa)M1N~xa0x!(E>E~OI;S<
zEf_N1r2}J!-Qi(OZa2drs>|fV(ozg0W-?z$!q3U{aU=r3T9WvlJk@3y&S?e@Q=e5o
zTw#nFIjmJ6L!I_F4khCz1g4D%T+xVw&jZCxVxh2i>78*$%#i9Y%J0mA!KgoR4A;_A
zyaHVyfyzmdeG##Wi$jlDz&gN?{aQ#W89WF|`91fu)pO3zq#k?HLCyFIZCZU~C2`4c
zTIv4;6ia10itBrdKqcrouWqVWpQUe?2~Yn?_vCExB#0A^)&x@82fN{vDj~(y)Ij>T
zt6DO6ZEr+R`ggVnMD%`sFWtmdgjnm8Q|wp;k$Mcp)|=pkTCDN^P+pK>QjoiwV=_Po
zt--uA9kXB56gSVtbHV&dt~-*2$jey24mZn9=$n3=Yk2_k+Va5r*l2794`wG1v?*gL
z5~F<&v#|*OlDS`r%@8WPmQM%?4Ywx=6A5BzH@>XluT2b<>F*Y2JjbT9IGJN1cp!OY
z0{8gcz;PyamzknReWN|zuJn#hcDOL%F<P)X2;4tG#GqGc^Hnkc47-;E^GchD@k>s9
zf>Z=?i}zkVW^ZxfA-a44YGqo7D5yL+qW$MV$UOJ47#m}L`tnXcHX+Ufc(7#UV41NR
zKZZ8gRjERm7Xgp5>`#UxczRZ|hv~e5pI+I859fgnn}0g9|7X^YaCI$)*k{5n(_+rT
zTSExy32~=}j*ff+Is61P^q_N`+i=n;x^AW}CJzmxO%aBxQ~j-vg%V<+Ib?h4P#tc;
z=R7Qol%o0sV8E8GejZE+9ff|bXENXi$aM&nhQJL|$JN{W=Up;stMO}Xwg_o99ZMmT
z&r7TM1cr4G#hud~6WQ4A6Gt@F?;6!OcA=3|bR(cSlcy6<r?WmPmi=cbJIJGVXVV<K
zz>7Urm@hjMnZ>#;98wq_yeYq>FIgo=sho4pYVqGS<WXuviWvnd?UT8WWuD*Tp;&Ka
zA^9M?l8Yfr;RBKPeK{G$`U&2^0C!7T#nau(^=57Ik9yu+@wQH;T`D31ZF1t|=LxwS
z_vE*`AB65z?+MmTc5Is&SNgr*6&mF_NP|{x_Fj{h1bg1*o-5-#rSOU8P4ia0MiA%z
z1wMIP$b1ZB^df7HxwJ|r4_F;O7qAxU%T)V3;o9qdlgBQ&QadQFq7Rpbuj6;&&wu{q
zkUP8~BLwv%{=b#)THiu>2ARnW8AEaP$xJ)I-<sHMhtDomexx<Yf9~r%?EVw|1`Uvb
z-{>r%dG7x=g${ia{Qu_A|8E@UQsb9#FUVehJG%mn*A<<YRhrKq^Hf^@i{no)K$lz!
zf3}4J22(`NTeF$yg=5UFa-zMbE>CHeh%QaW>bBY9y|-)*ea`^rxb@5b88H%QFrk19
zpGi6LnZADK9s;-Q@=@;3NB$HkzWQU2fVA4tgq8cg>Z@O<<{IDY{&R<x&401>rWCmk
zBRzuG_^m9Vy+~6ul-kj^-weZbLS~CBl9e<|81nWId|QIQdPwm1nMaq2j;v?S#;V<J
zvzODvII+}kK>xf@K?axO^qfNWH{F4Jy`$V2X2Yi^1(Ag`2^XyZNH;Pxm=@L9(v;6q
z7JaD_dy_28Jk`9+Xp_;KPaCp@#&V@UBP)}59o7vy-i(=9HUOD<8QwQrn!7(nTiV(@
zfkQ$Y;k1{5<XK7bE|y6ahrRnJarN!;<Ky9aIy&rzDNi%s9B<Ua*Ar`_mlVEM=n#J)
zVES9;<9i!DR*st;ql>H_ok$__Y~wv)wx>}cu~o0gB+6x~_I2(oO{EgwpE4`TBWS31
zx;8fUt8V__5bVk@PbJG%RJipm%Y#RKu}cPpupai6th?I28-;ejaiSEVnIRiF7iaCh
zxV@+Pt}TA@wQS87X6IqUp3dY}Q_931EubbJn|_tp{CdwKfv!zb*>lR!{LEo&*n%D2
z3~%b0@bYq+G?4kjsY4C(hJauXRG<r^=Cpn}wW1(&eF^-=W!ciSwJ??SbzrUcCwwLW
zi7Xsaw}Gop-GZX(#xb4m`o1!Q)_{$&bJL>eJtW9H;PomF0dK2+dwZLHJwGOkCX+RO
z3OzYM3x%A@89=jG2eXWOizrzEAK_wp(6FJIX+QTdovdATuBC`zI~`{BJ3=9|%_ao^
z{e~nI##{dCi7w9<ZFH4^jnEB`+&#-a1g6#CMJo1BhVL{^r>wM+7I20h_cKY0`4zlL
z>k=k;Uv1_6n1Ci6zU>9N5+k@(9bT^45^gZ?_Hhd5((QHaODrok7?72#r?(`)C*%w6
zygHm(9-&`eT(?jWJh^jN1Ey>duyfd?_h?<*Y6XPZs>(l_HSA}w^}_KXN^NhnWN7vZ
zzRxMHrUD`o#%EFtwq4&qH!UG-9l`K7!5FXmDkX>V23!QN7S9L{zkWS7+_bm*i3Q*T
zxCHm>(1sYF!zuhB(KTux!mp#*IuHT|u}I<BUcXgiow>SSocj}7MYAm#-L$%&+#Vn6
z6*V@xamDh)QlXi`ep`lPH6&=Ab4sK_ll>|JlMHY7(XmX0bE3|6EP{drmawtCqz;KO
zEqLFUXcF4*-4MuQ@Ge@uGGwe1sc-pYKXt8j$|7u`e5riz>&$3x$T+eq7Z>%pe(Uf0
zcI04+)%KT>9;V;uA`*CfE+hCAg!Ax(7J${AGq2S~qOK2N+LS$iN5=G0wIZ%~1Fl$%
z;mrMEO&q>+1{D=bX_1NX^&IUaz<MfCjKPU5@k8ULRk^e%Wj}(7%>CXHd@NV0rsMqQ
z_dv}brcFvL&e=`D0VLmdwj_ix-LgoU4EsXz6aqIjixt9VCFJ=$2`aYn6ydiGXt;TO
z`qF<&JE_~~EgYrgZqczqF6#$6R-k}S$bvQoV2MS@wCrO_X`|d30R^TKELMK+Ce^z>
zU%OfkI}9)!`ulFlvC|tVAj{UmN%vPE+LBjjytLviH^g=@u?G*64->pS!@Y`@SYn~Z
zHcg^(#W%DAv=x*cmzXhnz5I~u#`QM)P3!jM{%;_pq<s-4cxivH+&g8=>mm@Jwr8o7
z`qRtTcYJrr&e5x<gDMd+VxMVm^fn0;7s8l3nPi3^O=s=%RiQ5xHdsIyztZ_7Bo0Bp
z#W0Zb=bRL7E;MbwEru~$YcUcY>Ni^d+TU9_2d$tZKC#WZ5f=My^*&0ji?NyNERu=!
z@6)+x3qBAr*<T2E*&n(0K6G~QyB{(%10zp#gOiH5x&htrV#7aP3{t#3E_6PkyZ*E_
z1#Ow*>}EW)suZo2O<jdAMB3q@d!~+Z4$<p%2#azFUs(3o!TH*Ao^3JYZ3*>g>GY<+
z`)*QqT?lQ?!8qNW3Gcm!;nZjAo>>p;wWHlc6CwmO^?x#K?A9q@&9x^291$m9S8*6y
zC--FiVPUw?jKj2I`U9aYA`NIk`nG;Dqb$%+Uw`}=swcio30&UU|6(oEFnAB&{Ef7M
zq#Xy?B-;dhoB9!X&bPd=;@t>#^4nh~MFsiYshHzA)s8Vs>Zfi|SQz?f$R>MT<=)p)
z#)TbN{5*gK1!81((_%A@r<UB?5n+KCd(u%D?*0f9+e`W5rFZx}VLfx+X)C;UI`Rzb
zVzM4cM;3SeRdr$IY<i%@Pr9{+>-L&;a}(<#(WAe_N=tiE(b?SN^{{MY^T{_1yM0Rl
z-v_ZBb-6;qjODuJdS&BP>AC1{g~K)6rn{x3gO`P!GWWLtM~uG|LjJzBZFL^!12;#!
z?*JUs9jM+wolQ1<=28E`B@T4c{V50dk+Z7Jd!bDp*^w4_KyA!Pre?{(J2ISleE9KT
z0$Ca~if6=cX!t-)y^j@3WVc_bAbOuIzv3Yxb3M@u)sWF=Bz}F@{Chdq%8<p!h7LYi
z=LUbh-ZG-z)ffZZF}I<`G3fJh0}3eQj@$iP&&k-BgiIpr3CziBd$lg@6m++{nIG3z
zC_LPHoapY}>Yi90&$@E_2u?*kCD6}*|Dcyg{?O(Ap;M?QhQB30>O}8+H`DpTJ}4?~
zAGa31FT*aY(Yr`&4i80zfh@>+r?+EqhuyoS>l!@aD_(Kba{1S48(Jc+$r2OKOENO2
zi>V4Ms#eRX7T^=~uhrGjnPqi>Od>N$XZ*sJljBM$;TIYtk*od6qy2KgI95%=R4VjD
zk2~?Xs@vW;*mD)sAXGMn0y&Z!Xx!j0mFzY(Q@r1O&J_XAlub4CoIKy$to06t`<&d-
zg1-I$|Gn*vZGY(<{3kVgt8d-VU)+oR{BwLe(-#wmNhv~ou@g9|Vz?d%mqtV`7kZO@
za_POGKIbgacB1f~*b4FphO3XCMYt_29ag(ZPpg{v`Ya+2`Pn+=JF3t~^c+Q}ojh~Y
zU-R>L%ylFg{BH?QVgu-`O3tdzKXe4#1AYF^j~Aa5T6<aedA?n&-@XX)t|YKRf7=$~
z%?Vag{5r9wyC!njN%*wbnXvoVy*{v<(|__`LDd|{(q;jgSTk(e<+)W%8+_8Y^CYTK
z{soWvKWt+%WLai0(r$r>$WiYH`OW$MbZkaOd1R!=`u`w_xv+p}?3L2tsW;k*km~>Z
z>h(ac-Kf?dC}xQS+Szmu*m;dT;obj+D*EWSK5#o%{SwkU*mg2{=RoeG{J<;7CG1`e
zjg|gIURax&mPvyX_`qxHZ}{KNlB*Dq+w}EMs2%n6{eW+0)3Hnc)w6jZkDt6|-^&LV
z;yKhK+j+Xayly`${x1=iWxet@$Rk_4Q6%cuoqeZwXWoN_mFw=;tQA2A!9_!(wzdC4
znGQB~4oA1gKMH?;<~{qbw*DVg7|M1212>_A`ux8n_x~QgNukU@Bok!m9}Pjq-oOc)
zF~Z7E<{NsqO1IyfdiCX%=>a9N`Ban23#SO(b(`hIS6680K^By~!+N6>(t-qnKK5#U
zOEN|6E~_`B1x_@Pr+zI%MZFad279ANjwht?V3X-FSqW;v=wu@bzw5f+FMyw)NpKV6
zgqPd^XqYrscF>`9pO9{~k4U3<-+P|pZ+9xhq{oCF?!*Pa67BZD^+BiM-?0BF(Al5n
zelgd&w2h1jI5}=4(aK;+{S5gh&u$<9bF$hxe*NVO@?&V&-?#drDm=Zn-d>!*%d)QP
z-?$RKaI?373-A%*Y>~C|$@z`Ku$$(wZ~8KYc?qKhWGOEyb&34?XgDzMuiKtGITO;;
zn)XTmM)tL(+o&tlcW5gvM8<N2T6=)2x{=j~QEfReoN4!zXz*5vNbA{|>s*Z|=V{{u
z`|Ynv&X@;5VPnHgP*JUW-1oL)-Mr#b#QgQb8h+C@eBetzn?DtiJwdRkooll09-%57
zi&w&mkFBcXV~@Ht-$Vyki&X7>mVhc>ae-$W!9!KSwGE5B^zhmT;LYuC16xfI8mtvk
zjLLIO%p<@w*;jf$fpU%KnQZ@&){ly5YMMvUkzC!CF8FE>+Bz<^Pb-rQoIHDu+O%@A
z&r&~q+963bd1NXa?YRX=d3p3|XjL|2<r_1xIl$%KdpUfOBD;z+=`;Z?u9VjgHa>oa
zFXdDW6-+C(_&Zl~oyNeN%#5~%`u1~`ph2^v;X3#iS45?e=lZ64-<O+^1%E<2JCe?~
zm-Ei2v$k_|zt@L@dE#q&jF+u&ic9LbaApF)*Vz7#Z<lGE&DW)(FT;KO(fn@FVfVse
zExUHCkxKqAHw#dlF1FJjSrV64kIi(^R>Sx`<n&d9*B093(^-Cr%UWJsXX$B&;thpb
zUfOS_9{1)z^z9)@S>&OY;&rnkv8jJc$bb07b}C-yN6dW90L@@}7D1)E=h^DlRL43f
zS7-kKem*gJ+lK~-l#PY#L_lewRg{B4iU19JxshsqVd92>mlLCK<R;&Ty)>E!2W&d2
zAmquYtL?22Y>_`79XN-(PPh@?8DDVt><p4;$6wvSU*fCZ884?(xVK*Ypp@9ul)jf^
zizjc#wtNS7>gt+1Qk)-{LSLZrPUNMAu+lsfgvvNwttlznylHms23c0eO0CF8F^U*C
z?~~>nA<CONI%399nSe0}l^ZHwHp-LJoJlmvWp}TU9-38PfeoxEmmv=F211&SQ=%B9
z9>wM=)e=w#8YdbQR~jnvQ|FSoyWOn17CDO4X8}G^?xv4{bI|UccKEvnT3SA7uz)8N
zL17;si_*O5y%(#ZUMOjWeCLpT^?W*t0U7|<R(raW3mbEZ4eInBD*_pavplg4OU*gW
zkO2%quO6h7uEP!7d_Jf#jrdsCUAic;P*<qfNb;G_PQB9xrmaZkdzCpBYVtkZft4{b
zTZkrcbR9qC*Y<@Xh5FM+)z1en`h<$FqrtTpav1@P2sgfldU|l?_Awj?05jah!Wpzr
zc)a%sa@gH=7>dKo((*D}Ddl(*gA{i=@GzKtwFBuCZb|TDkH(9#`F~lr$jlJ{s9Mr}
z(i8UOVh<n=B$6&<X9gpt=dy+YH@kQ}vnCDc+<v6GK<R2)ZVYR|It{3rPSYm74G6;G
z*&c`KosDhshdSWQo-n-Zy<>p`ohjZGD^urLqs+){D+iW2ahBVK>};io{rc@0Q*V16
z*Jn@=Wa~K`?#B9{qBK55#LZ$8gUT<7Pc!QwU->s-3ktZz?W8W3Em*lHgb?=IA8D>W
zFG=(;$g@hicLs2XVSOQ~zf5`0QPME5t3A&>X6=*k*F6py+LjNq)aAG1#+36%RlTBJ
zJUUo541kS&fCsk^Y@c9WCK$)5-5ersbVE#&-$Y#C-oRRfQx!2$N3kD%=!}W=zHw$|
zKqoC7f#9dtr?dU;##SN)c;1+q@!hhI-(}8s2oco}$F1`G2nT24emmS;v;zNl{@Bxf
zfI4qSshM#s0AN@3JDCyQRouxxjh?OqzoKC|n~o-fY^|t{i${PcVB6%UUj8~`Ia1gY
z95CT8klNiQt-|~>E4X4P4(G4Dk<<BozPXm(FG7PztUhctHb?Tw)7mIFS}lx^^aJH$
z4kEd7S?>voyB4p?>gXC^50j3Z;1Fxc>o-|c%~lh<5Kx$SRFY6dXXb8hFyRoKY_EY5
zOg3#5T+QA>5c%5f627>L^9b~2BL;*86ufQts<Df~UZ!6cDpq@mZ0~~MSQwE2Ht&$O
z#iOT-441Ie#G@VlEFyF?-i=C>25Ixse{!aZrSZy<5at}S4#VofW_Yk-_AK`X&C0Q4
zs+jk4um60I{|rNh9?fWK(W=9u8aYk<(uJOiFP$TwUNbl+D{cIn6v?X`;>~b$*;Sbf
z|K*Dr)~rh26jH0iS6$vR#>~gr>C}lc<{0~_1yjc)#Qcq7GW(Q-Hg&3O`7~TIl@Er)
zZVc($M0X3*QM7(!cKoT|)^Xqq4-KC+88k~0xOpJ*L<HnzaNMk0$nnx~TtV*e1Gr>e
zUmC%RON_X}LTDh=t_vP$U!Ir4#KDl<kVQModOs9+ow`Y84^^1J69z~rs?&&3$WmPa
z3`idRc<viUJ`OlIPIXiTsIsqmXXF{eZm6<aoO8B=ij^FAX|Gp`136A}6IOxG<m0#`
zUK|^20S0MzCaYH8O0%uMtgri{MhYcZ`2sqM&Q{jeqP_F;UQT-(9q4c6;TgmnMin=Z
zfjOIEzR%VPPw;B&SnGQgTfaz1xUWwcws=-ekzz{f7UzF%rj&vRGu4SU(&71$0V$I3
zHi9{C&!{hIb>wv4G}~k{S~ev!eq0-#V?3LyJ&m4|)X;Yx_>Y~qNw8}qix+pF6o+dY
z|BPEAprh$^=LO0P^ZCUme9xFy<;(Otod`k$;ULGiNU<DZHljVcZ4qeJVwKS60X(v2
z@~ZZ9esNX4?6GwY&353Xr4rT$sX|-VE#1-s``;__(}1;LT?kCtTkZYkS|kObY#%}I
zC3XX$Q4?0LJ(3v#AY2L-0Bf<@g$5!?-;9i0s=K7}P<BV|mw)MB^|^yli3+puhgJK}
znJL%wFuyJaDqkSId34+cTXQrx^I_WCm)bJ3A~ZCIVjCLWm<TzQVfa77sep6T6<YQF
zx`u|mIwgG2E};2VaUl!3$J!rr7wo#O6(LcQ#qK0eRO#qoHJhg7vY|dzV6onL=Nl}`
z<&bUo`-EW}-SYNd%gCa~U#Ho3jRTi`FNaG9ipJ7nb&h*_XQYMQ-tL>~p;=QzfZ21T
zJ|?V;;rwh)qx^=I<+$-c7n9j2bCyl9SgQ_e4lKaNgbew+C-aI^RFG=N8D{ne(bR|8
z5%iD+=08~=np*2eVI+WwHA$s;2g?#J%9iz!?&eL7@mJkJL4SsfkR1jmEyD31R1G$U
z1A#nI?F+@#P;$I7Q){(yt;#MbQo$-%8wQPx0ZB!WgAa!ILUM3c|FKd=q*d_eF5cFh
z6|||>EM6R}KPDpb5OH64l2lUUY_l|%Ax)H$8O3HrkDUPhj`;pZ)RW5PmlAw$Q6@~Q
zkBB6>ksKxzE;C06b}nB0yp}vbVS+j*Z{?se<8AmxgjJR8=kaeEQKlR)cX2`50@d8h
zM@!ppO8vOd5Wc|QqPm2F=32oZP_>dbx8Sg)l-_$|fbYX;X_X_hFf=ns|6X;&OH(9t
zWQ0$U0v?nvUTnM7IDoC$Y&z%zT~<zIvNl~4+F@ehs!>u7fv7z_(e}<WUy>|L2V01(
z3u<_V;sbl>fdoM&w~A}@iCw(N&r;`_!$2Lq)^ev}8wRT8Z)4~n0stzS_SA2KX&gN_
zl5+wd`9B}rB=twWG};9{!Gb$-YTJ57KZ*x1p-@@jg&D;NbkLqjVY=zw0IEI9X+~p=
zmqnis(Szkr=ZwDR-yz?x#AQ^tX;h}j-C>|c@|cM!ww#Utc?q@Q-X%>DhJ0L`_mrQ>
zYL(pb*Cz5GEAXX76PDmT?wa4cvB34eFH&SuDOj=g$RModV$nMxdgJ7EgHM5S=B=X9
zV14}+{A4}!HLQL>T+a!`D`e2I^Q9e*N_G1?ie;>>#rMRLGQ?(V20W~vR9H<kKGJy<
zU^NS!qi)&no;!E-&IJ_sq!eT-dIN#!$l&);?d0enl5Hhd^ZlHb3N6V8j<w7vn7oN?
z*r3GbF1Q?a4Sv0!>bRS<u^bS2(+XF*{;tm|GYgV+3x$v<x$0ZKVfYW}#WuMgT&*Ps
zeR7n2se><-uQ+C6+kXUW4<Jq;*mu)-nNG@9dDIdB5u5#I7Z#DMykoQC=9*)r62=L>
zi`~@2VS?(ky|Z8w`Ee+#hd9mF_$litq^F(Ys6T3M*6A0W)G$AZq@fqve#pszhxP8!
zNUro2H*t$;#SPPwrA#Ns<OmwoD@%R+vw5Qy54#$w2YSB!oqX#_)7mH<=YD&Rq%r^J
ziOuiWFiP6*NSB3*Nyq{{4RiX%#@H_^42CB)Y3;N?;dSnhrs3qz6St4b7B)|P_rkRk
zmUB3UyG(OymK+!{76QssYX)f!i|M2q^5UbZ-}yP%d<Vpt?9g9?6|2h56xBptXqobO
zZhya<Kle}jTX6dM9S03CO0_?LA$mW$r|$s~=RNTKcjWHacOM<+gV|Y8Eg@o*lHEa7
z4lSa}uxT@7U|dfT#Q{77{ZH}B3HuBEz04nBmw>{dsV^<LYD5-8(?;GhRID66YX`V}
zgKAdiQ%Rd*^W7D+F;PX@F7UH3US2ow6D7mYUa(S(25KFG4Cb42FRgJU-EBjwvR`UV
z-dD0pciYwiP)Tryn=3$TdE?|XS`gKW0S{;9N5i}zst$IXv4&jv-FAoFAwW$<>KSue
zf1I{uwt7smhlc!j*i5ZCX7Nw(pWR<JL-Jar;N<6RzfB=(MC6+B0ifC>Z_W?*rPc%^
z0l(ydbESZsL+jI~C)56wK{>i7AmA*TQN|3!mKGC1({W+(%hiBVoI8J#=QDQ)IkF!#
z8Lz&X0>3wHlv`pCtg=IQWCqiAjX07dVq3Am#v_3YJJTm8I@=&Y;ZMVNMa346Zvq$(
z(9I=2kVl%pHosZ<Evp)o*EtN)o9Cb%CC@G0rG~qzCpfj}VLA{7Dd{3bkd25$8Kn>j
zlM8XB>+!CP!s!tPHDoLxym@sh{=<?^5PR(kIUwGVN6>TLl8y4T=`K4Y3sQ9vy)94u
z1qJn8aS&$b6}w>--X`7IZ2#ee2eaDf-D0~vA*LW?i@aE2UQn{@EHYmu>nm1!<)taT
z41V>sP1Cdfa7iON!|KH6Gbfg%`jn&IQ7n&tDf@rPt^X2W|G21sD!{+2=l|jH6ZC>a
zCgAkDsX{E{&fVQGH!DWExjE;BrzLAbwAkSk$oBB))A~10LXBaN`xxn&QdCcaS%Lg*
z8W9A|cd{-#?W=q#oei8U)38Qa=+5s*hh%#r*|(0$fI5vN4CqARZQU#?)`4(fwdlzC
zbI%sdFZiq0i50LeOdZq0{}vLfd>`5Z0#nobyl&VwDG7pIFbL#2)MUI~q~!dm#p|m?
zH6(h1GcopyA(AJ%d|hhe6sphfbxB<|cbP>7cc*OrsR?s|+G4kr5|X+dZ2VwO(b8S<
z#l-2e`fjFF5Dw7f6mC_rpN6Nm<>i_c?9!WbOlvcktI90*-g({<tGm)8X!gwcNQxzE
z2|YaxT3icNzBX^F>EyInCFN5Zpyr-NpH{4b7j_wywJOn3X<?)y!MhfesaLS3M1Ul%
z@Wb3Scf=o@-g2St^C1r5n{x(I^G%-uLKm=#uXTM!x5BmmgT`rY-MCCMY~F-TXKXf+
zb+u;iekV$dm#3@vupN;hA_xZL>x2>o8mrZdqJu{ojvBc35s}v!hbQ-vlYJLZ_vFTx
zHg8gbv?DbSD>EYC7hSvBl1Ir9WcU<JpZfzpEgCBj0Agz}MB@0AHd=ay|LP?!i_&N8
zbPUlL?KJ#p!A9zve&%7O%c^V4XZ&izI&2`g4`ZY3r6oW07~PwgLiv+}ZCG_=_{{)h
z+Vw&sb2ryjS$Jy0zCI1mbxg{Ovg=xhgk%(5$xqA{kzmS!aCS^q$g4W>@{1!m@LV5~
z)<C;wOIy1GBo^(d0{Tkt<kC-QR5h}pX3cs*s9;*ez#kF$MNc(Hp#Gzei<x2C(X#~W
zt8u~@e}w(S@ojvDf4(Rr3Qd)pZ+)VbbeeWBi@|7vjBLTdYLa}S4a(;jJO8vl0ga#5
zHSR{)IvFF&t=#b(ioag*#2tDT)MOv3o5^VwB`V(`eJEt_kng@+^W308XC@zr$oT^F
z__H{vDYMlEsVH=2mFABb{X@f=yjr&vWviJwB#K&hBY{xqG>!^qYdPJ0VZ!i}LMARu
zScts<Kau;A05E3?p@dwQQ1w-mR66+FW}`#X+hkMPxnVV5U%$00OyY!;u7ZUuZ4|$w
zUytPkX`jF-wgXIU@Da(9DL0b`L-5gxtk6og9aCnPlE0fY6FZGMV_GlfPH*yrOrk=J
z2-QZ*@b<+^N%7STu{EQG9uf5zh(+Cgud`VRw}<nfX;AZ69Jnp#R3y3Ut`PS=Ki@#V
zQAfnCO-{TA*H1BMTBOXrLGM$LnpHz#c)o}eL?nA<$+o@EETgawb0(Sl8dZocUw?)T
zTWqB%<3@gmz9sv(+d$&D(Shgo)T)wigrGId;W7t{!YkNlL=+#BU5-I88Ao3I6nK@`
zY+;M>>$n7?F4y!{o>np&84!te82Ve5`lSZdR)g&`bowTP4a>yuH~gPiSbFHF93Ahj
z2LA-bxY~ZgF;xz#Ph$e_rgg~S2P)3>XRYvfsI{nyFeBj?EI>D;IblplKsTFF?J!cK
zJ!%z(ZZ&(Mp;rkJ+w0^kXIVpz!ctk~QW*6L3lv2qmspp%{2^3&ESd8~Yg9|w-j|aT
zQu8cRUGXsO=X+sNRE^l*=HdbCUQ8rlz$fC?2Kx%59e*{W+pf5L0XIZr6CK_LG+tzY
zjmK;PHBM(_O)aeV4iZFLLQfmtIy?LwcM9oyAP+drq(u~kZXtErx|W1%HU!?t*`kj;
zOnoe+f(9g9@ItPN?<9l??qOgKL)Lm1VWJ=j8R0dzWKYH%+zG4*4S_B8LMXA;VBLZh
z!wIV_l!%9=RZfT*NKDjXXEA^cp6Oz8+th#8_RBh$G@|E#75rF%c1pbKmJzjB<c}a(
zj=0MHy2wKHRucdEp*X|&eWb*Sg5)|CPAn!Em)eF2_W9!Q3dIB}tnohEt&)?Hp@37B
zxF-)85IpD}#rYT?8<q2pu(V@!^or_2PbbuokPT>9*JKK#)|OU3mkMO^BLU>*s2%bb
zcdLSqd)_N4&bbr1&k;T5G&f?AE@LG-yJT*PWia37O~2C(|AaTgQ&0wx2Rr<EwKtk-
zX;nKv*@zyoo!PvRmipu7B;Z0{QYiD)yz}Mu&T`d)%>Os3Pi)~-r1>{QyOD|Rj;U00
z8D@*QZw?|tz8l3|m7oheCNP$?%Ti#eK)wft(v$@6AO2s1BpJwbVPA32BO#Ape+CO`
zbG{6Al8!W9FhK3MF4Vt&{2mO$XWmL#PF<HVMic3l+?CWfE4)ZaQ>~J=jCuggPvU>7
zX>B$UlaG!1+ryOAr!U@Xq68zKQDQ%jW$~AB4v_}-IJuS6S=<}Pw>BVRhe6W{hCHhM
z_^aaa4+k-%WV(XwK~+e_UlPrL;rqU+@20jO1{BE>`OU?{y<=4%rUTX@;Ab6D%I-$Z
zyD`<e1y-=>_rqkx40V#<+B41T8hY-Jh8g}8q3E>SXl5m*vzOcuJ!Wf6Ef>{FCU0{a
zyYFkNX2F_if?S5y>nD{6pzB<9JYmvh=8Vt*H$93IjrNIY_JGrAt+0g*3H%(i9>L6G
zr9!{31*lzAP~14a0uKW{PjOfwpVi!^<b!;dm6*yyY0yHUg1+8?%%d;@2xz8<CPebA
z*_81bUziCrAnP@Yl<d=p5}mu78p5IbNLu9g5ln8ld`Y>YMV<Y(r&1+`LIKC@z1H(#
zqSE<k^5K&K;vVnZN5up_O10*W9|sY?&#V{17MkB$L;70XZK6x>Eebd1b}RyY?N9(W
z36mMj0qazno8ccnge`C`J=U(5fL>~zaLq+YKxD9>U^-WCx|uhJIhxvz_@Iqq#wgb=
zJGf>Ew0#8kc)`|lf*#zkp1B{w+D$~HEVqv%T}-k(v?m&PV`g^+uHS&Rfzv~B>cpsg
zr0^j8WLVOSa_MWznE|eDCZiA%#2Fc9K=z6M7*R4)_c)0}Clk1S(%Y4Gs&G@2bX4)y
z?istAX`eW&;JamhHxJhaYknZK^_yYZE&Z1I7Q#fWGon#_BppOvrKtw!WVXpe9|xHU
z)9$3R9R`tA2#d+p&LL_UlF0?gd=(N-p)!GJysdriL;%=Cy!L##la5Jjczl5y!Jb3|
zEh}7Jq~%#0h;je?!mbPt>Wi>??`?0)ShoO0Q;{_1^)@O`;@!{x)?u;TL^v%&ZHyUi
zN8s?h;REXQAESCNOW%Hbe~k1E8sdPUoo>$t!k0wUXA6)6LeAfzlizD`1EIBq?2<;t
zTjWI>WT{dw^roMiU<!?cXx~4STM_}B^?`>p5~VEuuoRLI`2}aVFAdR@WvYqcldc+E
zFc@QPbSjnR_Hh9eLFU`@TS>Z>XW35rHaB$T=vVfUq?%e|poJXxT=~*6UP&U<z&KX0
zB^GG_m&A~WZ=OPYtEkauFYFatZ5v&HkIKQTWb$Fq>$rL(`Rgwn;GR`Wk*$+fH`Z)w
zSO3A1sIdyaFxVDulC`I50Jlle)h+g7C(F^lvH_}2NPnadmQILrxU2sgpy(v_0EOVt
zE6$b#Qj;?`_%Xq1RFH~+AYfeBLdV34jQGjOGV{E5#b*&4f4}N{?q6w>_+2pjwpxPE
z>e>R_D~;}^Q&F$#UVb~PZFm1(@Z!SFW^oF-5qVKLPhqcn=NX$R8&bcmNdx2qxENcl
z^U1M64(!@$KrJ69IIZUFosG`@-R&Sv<C4YQU6_4`a{S-Sd9R55e6vuN^Q{+Kw2UUs
zxC=8f9IKn@JKhDtH&r)9#=%bsc?D<$7V4o2W0L&-6rD{onqLleSNtPBP929@WYknN
z^!#d^HDa&~B>*^Y+a-Jpz#MT~JWPC=d%K<p0+6YpRLZ!8eqjKQ?Ks*tOKh+8s(a%8
z00@%E9iD!xaIY?1z?b;W$1I5Kjf9GZ6H_Dju`8&{;*kX21aw9UEnz77DN{f|jCirR
zKZa3T;rqgA$<HdO(K>k?pk?v%^EFwgE9GN8FJ4PYs7^5q`-v2Ae728m>5V;#Ek_Bq
zO!yltN@SznWi=#oSa<&mv99J;8l^w%#RiOlS_Py0WKb2K4&2}zl{Ms%v;6cr8;<y6
zQ7gnVEU<iuEU6IoL3*%P<(Nl=ZxiVj=^}YQ0c<PbJlI>gU9J#_i|rPc`lt4Stqhpj
zw8Ng%=gk#+_e6olfCH~mvN)}*pzn`O_K7>YJ*l4!hz9Vppj(ynAm^8gOOZ^mX^}Xl
z>4y{PjPoQj&?Lgsbo8u|VcPztnPHWGjD$Q(KtX4p^yw*Pl)sT<G%j@0PT(U@bzT3r
zrg5aj7rqva&+o^6IK%VH!)Tz|F#moRylej5evDDI#G>F#UeZ<3pBl3rL|E8N(!@k6
z1bqxexNrksD}v_rLP(bMb68)YSol)r=VO|8BVsHwWA^SUJAXPBsDPTl&&OKtY=~Ar
z<w5O27#Ku3wJiatq!w<dmnFOnPfcx&77J1&xi18bHCQW1v&=GhB3U1m)jle>A_O=1
z?H$?zLKf1#*FHDb@0BTw)N1+-%e3+5yJ*ccaS|Wpaho_S{uPabrxs8xVL5Ns%exdj
zHfUAN?)x1c3@_F<p3_RJ>`O}LK*?SJSliPed(>0t#W2%iFw|xv0CVIQPn!lD9a3Je
zq9>6@_FMkmnV!bmx>vb9F<+4k2v;FUm@E}ikiLf5ZXheDDUgkhsMJD`|9CKl;770*
z+K@ubqh*DYXQMI4Dsfn^y+7qh_oWKjd8TVA5~SC2Qg3!XOg+$WZ68Z_Z~VS&F6Bk%
z+&!%aM*i3>3y{wx%~8^pg(<Y>m>DnGV;jUc4vD9Vg3R>4;`Y3MC0JCgE*=|H_=|2k
z8L6wWwt$QJmqzH(ZBnE~V_U-2Yp3K_G=2T?3e#4tnxRqa9?cKuaO}f`Yl)T?(clX1
z+;C(lnp&49Ab`~*xTf3_QaGDB!i4bx3&W+cw|bz&4fOLnTr93Wvs3a7$`k!sBGL2Q
zSj)GDyjr~7ZCJo-z`*;~6UfoWp9apq6<pF)g-bYZufl_n2)}*fKfmY;pY75<(F4aS
zjCw$Y21EeAu9NMPjZ0?)>D{~lh#|!*Y3j)$huV|*f_jXm-JC;e-*4uHm)$Cc*lVxO
z<it)<_lQId-srD};7Jf0=pz(YP?}Vn%$Ax_U#Ni^F!?b+1fs@{_-a=dtJXx%xk6c^
z?kg;P`1OK_Tr&*Qzc?}*Vt`!&2+!AzIs$Ol+IU2H*EVk+zUDJWCf{vqE59YDC(AH%
z#w-(g@yl`dMxp&;`4zL_I$t(bi3v(lpJ5UVkF$Avf)~Jexo&?OT_4EF;)U)a|5G+b
zym|9FkZTr>h1N$dBEq-0!DQZEBzC$3f7RSxJ*OXi^<RX7xqCrkH15|Ox#+r|+tY3A
zrJuKhrPoQ|d25@8pThw5H=D};SU^om-pxNkTCWc0tNF^+8`MX$5CPf;mZd8bLH{3x
z;h#0t|Aw}O9zJycz7Sb%KentZ2nX`9LwB9Q12KaI1a@_m=Kja6%1Ux!X|L%U=pET<
z)d)l|5LyxW^g@LBOFO3o_?IATA=fN7Cq!52ojuA5ROcYV1mP(#t+cIAEw2E9R|8|4
zel^2K`f(l`cbp6Bk2$2S>d;vc08PsIy<IE6?b_dRl>Xs`-k+(fzy&*Pt22@18>OnD
zz^foZkkwZu<uxJ>J|Uq+gBE^K&%bja+E$z|lWz~AZ#$x|I{|O!Z#lEfUmc-n%60Ij
zyQz!qmU#D{mvLl;E3SpyFY8D8l`F`|FKHI%EQSFoN@Fe`+Y51DpP=W}-gLg6biTfx
zzpb~R9Vo45RS~F>r8O2_4X*Flt6Ra#3#-k1$;r)5-_zg>Q($*3LC)bTR-?l^sC13q
zV|KcqzY@{bC(X$@G%%Mz@3>8+t@@<7Fd6VV_4qiDzUuoAJqbD4UCrT9&<jUytK=oJ
zqKjiT`8v+x=x{FT5AJMnc^c>!sD*+zIh#!Ae?*^qMV~w0?%s?~pw}fTP;IHGw5cB0
zWI*J)flq=+|07I^b<x#aS#ZM()O~G^JHDVSa#VVd<Z#Gu6_m!|G(fywzaSgsNkt<7
z(y}ayLwhi;C2kdeWgT>EL)({SD2I2IL&KvZ>+#mcRF%Q|F3JT4B%n%6lf<ZoAPHjv
zl!=JaGYxgtmqkz8YDS~EW(ErmPIJPuCT0W{4fQ*CMBN{@H0!1>hX{!}Zvvj<-l(wq
zxsU)!vnU9BaXd0rOn<CObr<?<q1kOeM1+vjFOvymk(jV@#)=huKA!_AJ;^z9bvBX1
zfE%A6(p2T90*l@Xq+#A8;u#c0!xc!r0zFF(XW`WoUP+3iSjXk6axc(D<4pw-;NWj?
z@^L@dgnFR0H|Z~w%2-gRchrG9hI`jm3|iXQxty1_QrLPIUn~E-JsQ0!04D2}0w?7@
ze;RTc-aIjRf)0p{fZyUPoNerJiTH=Lcnc>vng~-fGrZJcm`tb-A)Qyrbh3-;lT6E3
zWq92d>AgL7_`0@F5{b`-YCHFgQ&nJ}wd)Az5^7h0x}~`KU5GmyV*k>1oSYa}j4kT-
zQ6^iIxjP?I23P`{U=@aLjNWdHOitcjI^VP_b`y0UM;NMQgXL=Gb41n%5aNN;o!j}t
z*^f1oF{w?GPX4Lo9M<}VhC9qx`-!ScyZCBF2raeuTEkO`jrHVYjjiWcm2mVCNzeiz
zyhNk<L1jgEegqH_u3}HVxx)NyB8mqC;w7v?<|5PFILQ6Mu`d2O(~In2v2s{O0We40
z`Ki?Aax---ACJc4`3x#Ss7<UzOzhkrsP>3QqMpVoNSx2Og=S$I4h(U+E$Mj@88FJn
zn&>}FGq(k4$YJDWe!)Phs8pjF$zl@J1>)fcx4^HT9R{Pd$yv)Yr(7AkvFCicLXmel
zMFYu0@{#r#Xwqj4Dx|Dp0gT|D2<e&=vnM@l&xLcg26e2ZvVc1+UXR=67AO#Qmqtqm
zpas*yKh@Pqf0?*==Mq-^5&j?cQRhEW^v53F$%(w5H6#mHr@Ji?(Z6#5kil(t!29rQ
zNX6?EAB4U!66e&dO~EI48|vI9Z@HPPQ)~6`OZQ%lG7H)l5gtUIkiNWQM3hLID;#&%
z^J4(u*H85j=!595ITUyN_;UVc{Aj?*ekac8Rr``_*~;?FloW{B#!B<;MV}@l+KK?h
z+V*sA9H&Ie%)$9Hl?~(Nf^Am97rc(QS07_!Sc1i`a>BGlkj-w%o`qCg)^p<FS#)l@
zeZeMpgVkfsCTnR-*d49eZR~*iLV#;0XjPxrOpf$s2#UBE;1J$4$hEOxFpX;#6H9X&
zDZ)=`@(J|Mb=f5cabFr|Dl(^gX-?<xcy~ab{f1g#fa`f}i9bKhhtqFD&Ag%)^_v7r
zQ~pTQGrRE(VhtI4P?DEu@iFi1A+HBcO*K~pW)Oeeq`SCtc)f;D1)cKyCXdK$T{o;H
zl039~-h0x%ZtOv{s%#{{n}%#~gibj&OtdEw)&w$09v;o2{NURJH4+Ra1H*=PS&?rI
zvDAz}_9kIX4zv&Om`bG6wuHpD>@<xVD-<l_$mH2dv2oaMC5X`U0L%|wz24RIAkTC<
zN%(ZyHofbgrD{%96iJ^F4zLbUMc=*eEmaT)nBG;fDv1s3w01SnGDTh)n>je-rn)Fa
z_Jr_J(f3E)nwIZ2|4niUu6=BWRS#LHyi)L-_t1%tIG(VP^G<(#t^Rw1tiXm2SRy#z
zF?xkw`q}yG#B7z1jfqLZ1-ur-7Q|#II&+B?W32k8^s%2d_tr%`e5RKviR;}&!DsDE
zO?YNjY_?Nw$jEH_tBNos3Zhh0r|-Ehq(ZC{1E77<7F1*VW1tl+7iOcY?YtjeIQ*`n
zog5*;awbF^f;yc;4shSlHhN*igB$NQ@f&pz0%vmf-ApKkY2B~&A@0)r!ih4fvT;^5
zRHMxGtMRFJDUFP{;Xq7XLvMFW&9ZY6qgp=e9{D+;i9gQW$ZhNmHK6gn*oUt<*$K&!
zsZ>xeEhhCmtNDBCYW!RKY`h%-$Ww_3@PJFde|zeDd-}(0BgDYg?y_}0AHO~4y}|24
zXZ<ZhJT*42)DN977$v=4EnO`Hb%dKr7!Taq-Rj}NU>xWdtUZ>E3+NU5-Cjc|>TvV#
zY9mw}=d-&ijXBaVe;X_apyK@bwC>u)l!iIreD$;C_&9Y1x_P(wlV#gYda$6r3<w1A
zl0)^>waDb=<M$BC%`1M^imXU&Gv_l#`xhvdO$FkQ|Gr6aAj##;qSoxQd0MBSZz=6;
z+4&*<n3M7SCldDdEr<Yrz*YCMM?kTy-Oa>v6IWH(TJwvOnR2MH)k*jCEIPEnh<+n9
z<cNS7P;tXVNKQmh=5;j}N2dSFd7h;vs0Y_l7)S{Gdq&2G495CP2GP(OTe@x8BGCAN
z4Emj43Z!PP+;njOYQlx`gzTS&2q~3W#d1K^f7S^`G&*u-p9b4g_fk?H8p3Mo<I@ak
zNhR*PrI8{*6XBl^hF}Q_6M~gwWKn2+M;@NBJL&5QLMQH#R}pCv)LEsiqki_+ES09+
z<&}R{;Z$+>!cqSUlm0KLZ2(BbKww5y2QSH$_ern?3ma-=aW-Mt{`sOH1im(|n~Mcy
zG#s&{3(ofW@5XDjAKZ4eMEJqtcLMrQ+C0Bo-6os~GjMKnu=X8Mr_E=|p39$s#C!BW
zi^e=6QwS9Q_J6xw+1P2R$+|G-fsVaDSFAd)tTGeZ0M~>pc;So@OjE*~ApT|Q04ms&
z+vWa|&0WC~7S|_H)BY<rpjn`h>`VWhRc)){Pt*@eCzS}yLXthIj8=bX5t8WN$N1X7
zaX7QJ8g#(Tj|6H+g}yKfpn>ZrG{2W;@TWx|d#BZ*W>uH365aco_v`-UcWrBm^E07l
zjw}0n?~WY!Yz8D_J2PJ$NAo2{h~wL>V-I49jag5!*>6nnH)UKf41Ek83c3XX+50)D
zC)jP^JNj~UsBzMWa_E{xtWQQuFnPN5m!&Xm_m=J)=FIU*?N~+cF~N5SAq&mMeZ~B?
z3j$|!bW?0W+GANUk{@T_WHWzn#@O;fQJkd${JLg@so<D+B`TX9sE#a=8q5{MPbn+4
zo8KA%_q%I?4cHZFqKv1Z+R>r@IiAI$<0II(-Vp=(!8iUy4PfESnRJtK9TMt>6$*Gf
zvdWAn;OCpLyQQ|QS1Tn%w2UJ`YHrtEme)@FM69Jqcg5kT!|lzr>3%t|Hn-jCP%YBz
zmFsChXXS{GJnvD{v~ra+Suc08`UDt78~E_ZvY6S#40Tx)W#3nK=oOInVo=B!dml`H
z9D@BwCHl*o8T^PQN6a6P6pfr)f9{SC=F~VGNHWa`)X9hvKm%2Tq<A303i39*T_B@m
zV*{L{X%ga36`e{WMN2_FcFWPd_qo6jK6%$(=pw5j{PnbZ=R(-6hPuCcp_%auR;<R%
zGhG#4%%*DEJg!nf)jJ5M!Uy>F3J*hPYCI?_70!gkpg5+A?cLn~_53EUS}DC>lkY7;
z>{W9SU9>IK+2j#lVe7cBpS_VSJtV27CT6d!x&JjmygB5911>Q)KHfhCDkQD#tLaYL
zU(@!U#6B@8;Q%*YD^kK=oF7jc-41ShtJ`1OBA-Y-OD$=Q;J~z4qmhBo;?NIkaFn^u
z^#feNwf3ZC4})dCKZtr`baRYG268f1G1%TSYA`yt>Ux|Z0rYj9PF#nmzvrUDS-MJy
zbA$yvPRUSIqB914UZ;S$;iK0`qY(W&V}*vSymOa&goFIWY3Y(6^WGLvC8mmx=#kdn
z<%bk9cIO<nHCtRPGDtBf2j;)af@?!-;z05S25kD*R-0<Oa?8i4k#R{}VZVLJcdIE8
zr%<tAS>GA_6~@L!0+ZVl8NgWm!-NLMpeS}uc~)PWXD;lwI8$zGG9Uap<h-JTl0M9g
z!4JVi&g{=lUaR=xC&fn<fsZ*i?>LSv40YGcJAJ3w?ixPkDJMTLhwE{BvuwIwbVCaS
zeKhmPMSD9%{yMID*+4Rhg~_%8mK0!Q>h)jY%I`g&R)rJV(pF|ZhX%8&MwGsdr}2id
zo{sYtBHm&4VEqNQQ66{Rde}2vlIRqE0g0cwU)+Yo{%wB=u`2dkX*g2?WPu-{Nh)%!
z)g)K&en2CAP*`hDw1TFoYhEV5-j!F2a4c+4u&D6Yr6xV1`HA)Q*UzuZh$4`}FhQ?`
z13r}tZnK{)4G}HCGZiLz^Fo?L>uZ57JGm=PPqT~thCkEOJ?>U*iU#f8H^n_CFz<aP
z9rBjwx@PeXLzhdUbQf9?1~xXz0+Mr!w`gyCH5=CMJ0k@{77FQLMc%X;iR4JzMIhdq
zLpIyX4O4xHU?QJ#&VHAr(7#nuL9<|VyOc<yZ1%kq8OuGw2<C;w+?3dhXSYS~v!?EU
z<UHVGs|I8w7I)-&{%i5&{IlH?n%4xe&S^XdbfPo;&szE4zW1L|%KvyI|MPGDkK^+H
z*<pZ$3ray!Rt|wMqqI(<AU~e5FaJc2OXII9IxJN`={O5#NF_J>^uz4fqB8pN2RaFy
z{>YYDGK!yMp5)_wbN|N08zC>S7*}K%Z@sxlN)}?|GDh};Eu0;?fox_&zC56R)&5~z
zfcNghs=NL1msppMZ~SY%Pkrwc$ca1!k`I~|D8hvVB4ko)+x%M70wyr3b={fxU1li#
zN|F+is97!K<JGZ=KJN-*wrDL>^Gf=NvW>)&!l#}I9RJ?;ar~EP?@y3yA@e!R)<wNZ
zkD{(QVim2)4Tky+G3`Jd8T06DQugWEKc`2~lYoCX&24<Pb1o`!9id@;{7O~+z16Bq
zoz9hHkeIYxDbKs`Q^CeXMBUr(uw<1>mYZxaYh}M9QW2o(?S3cj`xke9jwO3V2W}bf
zW5l?&t;ZWuqIBKDe`YXO2xu5Liv8jX?xs)sU3O{db%h<o)!z@&`;b6|k2%WnRz+}v
ztQ2aZ$k;{Ha{OdDroQq(o}vUU^JFIsZb8HKaO(xt1|EcC5*egX2>lw!;2Y<!pyeX6
z&kU+<y<rMHJ5WLIe~e-}I0dL%%o9T?!n7Z_Kj2bS2ga2ukuBg!qDV!d?$Y&K^L3Mt
z%P^4SY7iYUDAj=SKO3Vtxfj$_@e7lJJD~nHjzw?W2@if$t^aImvk<;Hyy6pBtXN96
z{QOkz@0*#}uX%-kSk%OsJ1za7jZk4Om;WQtn*$z_Ag4u!`5;p){<p_Yw^Oe#-6gSU
zMMKZOixoVAe<Ggddz<fDLsvg2oKPVUN1sucU|#2}XdaGuCq((T|Fb`PFh^%7W|J>K
zwoR!@!Hn8u&L%=e$3Akroh3Wml|?O#9(ITltz{%qqC(zdJxu!!y>ye#&*WG>kpC6j
zQ|UIaocQHv&`h#*?Lsbs7W3ip#1T@m0OeLw@(Tp&`m;zAGZ%1lNONE3=>MO_t}>{N
zuHWPC4n<0l;vS$l6n6_!N^p0lSaElPwzz9>DZ!-_3od<dCr}8q&_a=$=biiUzB6|}
z?9Qys+L=A)|Fhz|Ak^A}vz1q9$qgIq#{rFoBZu^pY)xh0_K1oy%D9RPdBQ70rFxs)
z?C)TT9+j+$n-MK#_O6~?4k+9)vzCC>NeWQ@`A))7Lspth?@vajZ}nXns=5)Hm;BF#
zvA7BqN6Nir1tIsTGPba2YKrWBAI>`%^67RW5}C^D`5bJ{n_0WVK40*kcHX<-2&B^H
z+AjUJjM!$ztS)i1^&sffcM(0}%m`CO<)5x_q^X20P~{<jOO#+?%9EG=NA*2GYLF9G
z{E&(GuRF1UQ;RZ4gz=cZFHqpk6~Ej3D;!C#^B6ZJK>>iZT>g38&eUo}sU}f|f>4jm
z?gPa@_l)tNmB=;iN;eZ-5JJ(_@3o9t+FhkB8CD@&C}|Wcdii$Y%hyTYv`@TsC45ja
z27y;*FlRK{;SwHVEYRVNmoSgP(tVJu221Sb8?Fv&tc`Rd5;PKdc~o;<%<hhkMiW)i
zyb=_w@REe-WAG3^@^72bv{u=_!a~=ir+9y+z((>xsloKDJ;3cpMhE9~J-)<G)S>hh
zQlcEh&Xe99+g+@?Dj5se90CK9wxvdxI?O%p@9&?WG#QW>{b68-@ObUEtBmn3j*alt
zU27gsb0JP>8;%L`D%0~rnNW=O9K{}81ny$-nx8Db!mT-JWg~D$1Z9k3+Zz80_VVIP
z_L@7%vKWl8I4Oo1S~;Dv=aolVgQiE;@TpVX@HMb9rfY4x`u91XrDlyQ-QFVb>a+=n
zIOgcx?CnLDhja@XJxz3Xf!sTKNOuX}paxHbFHeIUp__<(4I7~K2R1RIGX*1<G;l0)
z_>A!UD?b2l7Xo9XMTdB411m(Rl!BmK=crZX2s{SlX&s5~at#lRrIMaoD}H8RqeF_u
ze3Fg0!|{o-Mb*#HAVpk7OSVP~NYu{OU3VI%8uwj=$|Tw&d7xGr2dZ$v4)xxG{F+aj
zd=jrC(MBmv6B^I=8eTiT>%b7@S7XCG1(w_eAC-+ZXINwso00CEJM8qIxmB2pFu{Y;
z!p!j&=vsMkX>|3gT+mF>C$;_;EzBa6*{Ps8$!~Cbg({`*b|(vx;<j{t*A=+AZemtQ
z|Ni$(mb;otkk<z1mWRHpX@-PUbJ}^s3zK`NSuakEu<puHYsEjkpBQRC`L=WZ*7cko
z@$R*6-tGn)&Y<F{*AB4756@^k+4SA4wreBiB#O&GapYsmv#6*jbI14fSooTpLq+}#
zK1VXF27|!TV-D_Oi8I0o>2*`(XO0w%$Q4&)HTpD;3;{Y0Uri6~XREmu&%lF`dF)W~
zaEUgX3~jpEMVslXW{lVrv471XrU~>TzU0v<!~(SmG17mtWl|*5Ua#KJ$a3lb#gQz7
zRxmeN_yxA@Y0a*^{-^Z!rR*F7s{!;<#bLqrk#bwN@@@WNYRoFLAJ<U5MFKi<FbT-|
zHaEyuFrwRWhPJR0x+f)*N99?6N)XX&D>H8m@xX&d8urfRQ~j!~TZ~!VYn8Sq*nzxq
z@*>VPrM9apc@U|Bj(nB^hK?XTkFYeyjEz^tRTA{ZWqJ`3?d@Z0c^K*XJe9^^BaTUn
zoROphamS9}a1XJ9@ulqPkHm6q*nDnHSOzqj0ipq~pqXjv-x5dbP+)`*_alENZM5|Z
zX7WSdT|Y;sr1*!uC(V~A+g8kW*VRb1e4Ghf&YLb!2^gfZ3%HBLzCh?85<g0j%M=k~
zSNQl^L*Ha37<~rjr<{=P&#AAHKojvZ20D`vaO;kJ=rA|)-wi+f_IbBF>aVKF%iGbC
zzC&{b*_j<8ysxZ)XAE|5%qM^YRaPzoh|r4=#7_chBdny8%_=#=^!dBxviEzb#hDBT
z#s56+mj0{{3&d$87CV+vYITf5v=brv6D_auj^!{`oy3g*8o3nMJ=PcW*YO-pk!wTR
z53`&uGd5Ui>r5{&Mp5@ADt0%lJi$Yp5d=s<-a2P<9Sju`T`p3#BVkt@LT!*bTt9qQ
zAs+oQB35rGq8y<f<R_Ln(Ayi#_T|0-0ngx}S*g6^W4jHK39Kw*)ckBq0A0XNCY2Fg
zur;9nVz}d%s#09pDA9N|1Pl|LUAz=Az5K(5A6l;ZyN8#>B?RAFrr!98Y^Ouh@C6h!
zQG~4fFtu4l_;Qm=r-Ol;WWk}>Pxj{GS=My+rz6He!d$m>6S`>JlS$kOYxhCEPD#v^
zqtHq!lpqQacNIn{g*#RLrts!Yc(4d+Fdb0OgQBWgFuh{;9X0kwVUFW9*n%t=NfQwb
zWa8rb>&hO9xe*d8AtOF$ftAau?7pU<Wa=r4hg9U(-(DP7{FTChMCS-p#`~8|TXOF!
ziiwvD5(L|so_i%wd!z(~o^U|PTD8CBEDXPexVHQeci$8q<}L!H9Mncc2$vVWKwOTT
z?gDTR&ZelFc?1e>){tcAr+c*Eu@4{9Ximc~P#_@=>P73JW#jImh~Uo-x_;l-<}{7t
zlyPPRg_N$>b6)sO`hLyK^(S>QZ&>_vG2qJ2AQIT8y6_bYI^e#Ad85%LmtN2}2iJy3
z3$*R8w*Z3-L>H6Gr$6S4W#5#nEf(V;IT|Ra9Y#Ei@$pxNNZa;g@;z|vp`Y-3wzvNv
z*+&J9`y?yj@_)(YU-bFx;0^FgHigW=&r^rx{8^BPx>`&T2?GO13#T(r#s^)lzz#d!
z{)lu&i-elCgHQ^PX>eI3<F2WTq`Y6>YQsJ$4o`E%$V4cTWP%x*qR&p$HiP3CKC2fj
zl{)NVWKI#|z>E1If5?`4scnS2Nr)IBueb3Q$E4(;Z*im^JNt<9)lGh<Z5l=cJuyVW
zSOwg(%IGJgd+K=qR((wNhm+0v>z^_|7O0g7?|;DibxgvqM@r2JZ7Z8pi{vK#n+62I
zSe{Cs(azNSjV8dPufH;i%<tUXtp6@}gyo1ozl%4YPaXyJn&6Upzb&~HVZ&CDx<-zy
zIdqx7j)V3EBZ%inupAu%oTeU0SdFjpQ^b)hYdI5f&4wM3d5QPywsb_<raI|w@F28K
zk<A~XYioQ%&O5M_cPv>ODE}}~(obyZJek)GqW?YTbMwl;A?#{Gi*Y4lz$3ElHKD`w
zQgwQ`K0-D*Un7`v8g>sK>uo_#WX89BPNadC$dnhdxWrZ2PJte~W#B&T?X#rzLTd}f
zF~-=KT$%<4VQl`*mN;<Tq)*I{G_W!YSlB*HvbNcs>11)w=Wm!Zwe_$4)rbq|&S9DP
zLe9U_e>c0&{KdxZNDKG7ud&6~VA&9p72qyF#T)!X@iH1)_REZ{Y^%tC@YFPud4LBT
zMtEn;4$b?x%9>>PNEqjr>c23a5JtIaUEejub-!U=NQ1{u(Nv^5jEzhm4V+O!i%Pt2
z(h6|GuT}M{mCpP&V;aQOHk%-y6y)BdbSDj?627p&1GW%Xh@|#P-LzM4FCzAAZnzWM
zH3Fb7hzvBwh+xX^Ia#ImJm%_rFC>-Rwx+1&Rl`cOv!dR3L*gG_H_|}bf$C8?AZdSO
zAu^w4VXaJi^^4Fii0JDFrsYJ5v^Vc8vFfx}HU04$P*eC|bsV~LNLwVVJ_>wnT3Oke
z{*OY+-+oq2LL_Y4`61?;G_B5W#d3$*lcIh)Gk6OouF){9pMN6Jd~ARBPp_hoGPs;L
zQ;u}W*zT(Cw^6wlY50f*1G7vCjYgJE)an!wL||AXU4>R`=CgS^SjEU1@p=HMJG;p4
z+sqCjZ{eD2J9NpZyM|}rmRr~3|8&;dY8G&t_77+jcnAT;*Sb{I>u5xBTzDCN;4W%C
zW`0VwQl8`G&jz?kd!1%S^70d_`Q;C$F-ol=eT3NFe}@;}k9=3!=y{hAawkdQA%ShT
z4dBpgps@zk?H=}(<qa>9*J~xo{Mm7^plY3yjklz~-1!uT2gQ3CPkEGwIj_Gkn~(c1
zD?HR~H(O(Defq^CyY-V-hxRn7CtYik8yl<Ly@ULYLSpC#QaE>x3{Ewky6bnUmePRe
zR5pA76*_iVplj1ys9D3mRP!Hl!~bsp`2TWY`tNY@fA%)ezl@Rna}@s{TDu1qRAPBf
zJ|rng!y$C;O<n4x4<k_Q@a9Z~Xidx8pxUz#u&b|D`P0YYg}U4V$*ya;DMSSlKg*mC
z`9<oEWcE7-VrHZs=Ahj+5UY>D6%DJ)R}8fw+)#G&9u_>deTl_36ooI!$G4K8`xHzx
ze+;||$-jQgo~IAjUFut+rmQ%}t2$XxFwX1@O}vJKOwaMVu~y&T7k%_@$(g`iuu~RD
zEzr+M1UrJB^QxE+tj^cASph&cKDv?mp96*OKJg$;22|otu&_VJgAQCr1bcsto*vCQ
z27GRki7dLllGD6B6gO8j#<dPX)(S}h&~jrKE~qqx3t@xBj$b|P&BlLz;DQ5*<xBw=
z{rngH`wuofzz2Rp)_i{qJa#=R`%56>iChRE$yu8#t~Z3BG{5!kbVb(9`=naECeb`1
zrXg<3EY(OBOsl(OqS#zU>yt16ybqg~_CpcJ*pLV7)5WW(w+kiD*Ws!-zwp>{C3&Hf
zvYL_q*8lHd&kr#0pDt?kX9V#x;_~_Fvh@#LEyypBx6ZTBP)t;_PBdk(wTLGFO9m$w
z+KniFk3r%hQlKs}KS?jO_OsmQ$z?F(Z7JWO&0Dn5!FrL+%y86~0Ew+)!hp6oJQ*%4
zAGt&=<($l)@J<Zg3k!>Fq?bbBFutxc3F~zixU;A87Dr*(HtB<NdHXh#+cCWw&g26t
zb{2a<Mm#3B(UYJPzGqYWM%u`<T786*Q#aig5k}CJ#X=gyCbN6A0br5ZYQk=hf@jBV
z+7XNdno_z`;wNUJ0Ft$zEf+o#(sk^1Y8oc!RWVsyZVz0N=870BhjBVBUL2DaRvI`v
zVZ0gv{vayT?XPDPA(<>wR(t?Vmb+xC8(Eo?E`#6DDJgyh(J4`2$pRl)U;oyr-1|$`
zdc@eLc^GfUF-6qA`TaZJ#NY0UrAJ&)`49BF2JnM<pM=XPSBNnMiil3k#~a2^Nz^uZ
zrBVTxTYawUo%|>ufSHh2Sbgg64^Ike(U{K9i?Wa8*+G@Nl)~pm={OYZThDjL0}nqu
zK2pnlvqmB3a?%|r<GV-@Q`t}Ixz&y~_E!yMW@n0<48pM2`<*yHm$-QKRrYD#ZF0Io
z=VThn58(Q`KSs38yC!j}eN>ug@vxUwG3-x?!8+5ZmJbB{l>hPW-Ir79sv2dbu_Qfe
z%LQsd^odL?=YDL$;`2Dt`y_{!m%sNFEk@+$Iy*Wl$C1EM5_sGQKu%=s8qg)H@wk`7
z&%*KVaKMQo#JIPUq}PZQm9AMMOG{v;f4wf9LXsG|XYivqWZ|;Iq*VlrnE{a#o8BKH
zR0Jz$Ta_0#ZMb15RD?aBl&5WeyD?xO<s`f_cS<A#MahmNT*Sw3?ARl4)TA{iNHePA
z9o^lvDU;jdPjX3Xv7;_4w62vDEff`>QoXi1Vq7VK7Z20e3s@%+#vfn{30Ek{9)6~Z
zxv`WjEi!qAVI)eUV^Ph7*cl=ZmP_;(jDu~Siq_O6C7{)f>rcG@$cgudh_(YVE<na-
zoC_+&J##|-Lm!dM5SGA7sxJ@Lxz)d-ho6x^AsfR3e3;vje9w~cB}>7iB?n=f!?ACM
zl>zA__RSg={_ah8#Ozf?Dnl1iyr8qoCFK3Z<k<T4a6LRkS}J6q+wZbfGya?R9}0R@
zO#A#uT1z>VHvdBd$H9u;=Z9li;W2n}MTGMKLitkIWuK>wZB|L{b12n8fu1<lUN$`;
zk*+KnZfdw{bB)OFUesbWj08fH%Z1t5iv&a+2QeM46n@*DWf2w#KrV+^6h8RZls8PT
z%6-^>yeRYbL7mD+0JkoaATMyL22p`8H{KO<@EdbTpnwK9MTny7-d?%tCG~l%iuh_z
z!3S3Hxu`L<RaHfgn?+py3@eIQ!vuWMQ%tQ9;;|Q$g-iOM9r{h+U*OtI?HPP`dM(QA
zgshq%S=73iFn<U8_r|>0XFOr<$b1r5T^638iL=Kzih==VXuS7i`YlqMVJB6^NFfL7
z2TY7M(Z5V*pX2+zsIRUh+p$FGhZ4wwOtM^H#8a2Ji^(QS98f9m5=OsXLdKm**U7Qe
zIu(|X;_D)i@5cETdOPj(+4~}ueX_I2*iGEOdVw>|u!TXFfPxUZ%jGD5L@8C_gqf8B
zxM*6?wMy#E%asdK35Gzw>N01)b9zH31p-ZKIg!qa=!G?g>F`F1O1~!OLOy$8B(;A>
z_Nn{wRko>T@nAIFIt>Racgh&!tj=d*B#GkdkPJQh)NiCj8stxzag@cJhozRNe)3Wi
z4O3w*ZH^pgJorY#4(qsXYA{_Fr37{5Vn|=nP(%2yQU4c#+DoKLIgAs#HN0m7GWGO)
zdvOU&<W4~U^ZX2td6?V8n8usJdT$;7r8%j@^p-hKZYwiaiUS^5)|}Yff9?RE`uywH
zbo+0jfHBD~yq@IEYFL^CaND4|PP>bC^~;t0)p*Nwet(=&KEo!;P}^LYbH`rJw*`mp
z;^(>$cv@9Y(>~=<1M}a2vus?c_e|p&td`bvkyAr>$}R#T4e<mV9?E-%0(>@U{&~6Q
z=$hPW@z@Q&9uM>fxl`vr=i|N-B+(sI8Rl(5^{Cb02Dc+()0k8OkWJ!(zRO>fNlv6#
z!OXZ${D$d6qFD;Td{YcG>zp=*%Ib{d!eID}ryVn4B|J>bv?YyEItZ#Jp=P#6AHOVx
z?CehRd)Z+@Rv{lNnI}imL>gx(jbKzz@1QVTbprU+e#$ikQX-?&7)(W^fKdP~F-8Yv
z^E-@fV@Dzj3Du>IiopUA-Fu=f8*ezQ=>xUkQxu?t2<5iK=^em%!E!9_-yOf1GD0Ec
zeSiplcme*|C12Y_jUP%<9&D|Hw{OMLzjE?%*|EJt=C+@doz3HIj(=?DFFYJeh@R~t
zI%JtjaB6TB5oGPBXZ3xCH)U2RmzJBAWQ4G77z>HQK)(~9O;YoNaPE_|`a<p&LiX{8
z*vvd_@5TMOZ?^%v;G53f8<arcvOw!BCg>vv7v$nHx+NkHeJ8uBC)h7bAe!qU+PKkX
z!v4%y%Vh(6Zi;RwOSQWt1f{$2P?C7_KK&RCa!>m+q%Ets296RqhGEskOBI@^B)Lne
zafjMz7O)-fI?g0zvfhRp&wvF1E<2Qm3DFXdi+r__zS&M0TteoDP}OX&)i=|eT4Iu>
z3;-e&F{@V2+C8p>VE$oW2_OfYGTnH5+mk`=$9rEmNBi>~!oeo}Jh}prT@&pLY|u<D
z7KT~W5!NeQH_kykmRIXEL?Q%VPYzmr!pE&;-e}v};6XZC9!1yWBU|Q|&ZCT-rvXQ#
z_qq|?A8S3~)-QaG0uM=rsAgJ#I$3#`W0_+8>163N#@e<YsCr}FFMWu129z9a9Wg<h
zTzUfq(b4A@zlZ8i4QNd2N2z8uXu-JOJNEnijRFai9yU*vH)4&m+{LRbx8YM}bW|S%
zo)$xAQB&YpLo~E#lC_53heHC03`{%W(y+4>g2V*b0Bk53x_4@D$()kln}Gc|UZV{>
zZi4i4s~Ed2KjDc9fL8C0U*-ERZj+Pa&wGD%DIr#s^Wz$pjlqxi9hG6Pp|6tJ`<K=%
zilX;@h;$99LL*tb)vcSB@(t12iQF0$q$^e^6{>!wr{*Jk^kTAgwy3|~V<nPaO`I()
z#`z_yT;Vw%4a}F3epg@{Ek4Wcmwy|J3!X=vPAi{dtx^DdVi}(`-32}-sAQxZq|;_F
z*?oFw(T{w}Y`#&2v+|xwtzag^law?Ftgbpw)eXi1tNm|2(1K83nJ%ko5)Gr_xJynk
z&M&J+2BRcB>Fj31zdQbeZwz(Mjy*}lwu&re6MTuYmqE7_Aom0L@l5aN&C!b&bng-a
zee@~F5c36Q=O>94n>fFOW!J+K_V?Y80&d17Sm^8OETQ;+vc<gHT$f$upvm_@A$0UN
zMsC`~GqXMK1_a#{*X$9A`F>|Xds$7E-AwFs9^CIdh4DXW3pG0jUtvzkIW&v;W3hzi
zzMMrhuVgurmi}5c9pCR(y~oH5rQ;3kkh98i@_+pCPZvHyJ-D&nLd%i<m3YB4YTcAw
zg7B{y6O1!-oh2Jqdn?iqy;vb~i0hED$&N^ZX+meNw9;$H6^IR24T$vh)9L7u>;O5%
z5Y-^Zp_R7u-7T@x>@@0sG~ynoWZYTp3vofbWcI>{Qm%^5D@GI{6kjx|9#w*i?T;uK
z+`zN`rx!{)%N7MWpbWkN^ID~|gT4<CPk9*nhVI+snUC^C-x2TK-hDQO3_M(O=Wxk=
zyODprI6{F4_R*DPzdAv-?AN2o1T|VdbPUHCt>_5xenDohX^h?G{zlVw_`s8<*WAsd
zTaZaU`YKf?+MtMOsCd-tqG7SV1v7K~p1S7m6>ACFT?Tk3*`aC*`oe))O+|8*bY!t(
z82GU*4$XXZZ@dg?=!{JI!nh`vUf}bM1p%V)944$XR@7ur%~YG;Fa`pS6yIqQ=UfpW
zniif55$fv0>zr&^BlPryP-U1ETXwH825Q8+5J))zIY`+7Pq(zAuvL*FVJLIcU3;#U
zBz%vNR7YITtp|r5XlAMy5-+AnqQj(~G<mYS^cSn-bg&Pgm;8tCp)!TBok!ar(l8~-
zvL}zeto)Ca7d)Dir%>+`=2|019h#;<Oiy)($(x_tSr##8{f$j8s?K<*H(q4d_zbz0
zdQaM*2{gJ5y`GC$H8ab8X5IV)bD`Q4euW<!>wQs^d|@_LCRq_MGv4b5-?ja5aJO(T
z$UxCM?V0zi=}oLnywt)ZJ$tVmM=7ifATE|no*+p5&M`bF6jPe_Db}Jv+=>#u@#Rln
z^ithHF;<edzKwWcj-6W42X&auys*vJ69MPH(|Jh0<ZqwC%s}%n+H1emBkhWJI`27G
zzpC*VC3#5{N4<!m6nA|!j7?1`jA+%7P0E)wIZ&b6<fcv}iZhmQUEb5S>xnlKG;dTO
zWzlu1y^5kwe-TrA|MM8;;9w=KFL4`Z6S+#ON1PD$S1Ld_66dOz;Cf(Ggz5n+H*U|o
zH2>o!>u^3r4LeVnE=_Bal30N(H5O>5>@bG({@`0ywN9~2@GZ|}Y4e2eN)biMPpJo#
z5W(jy*0}~O?zQ<r7qU{f+{oB-(oDB{yMe5BxZQGdi<YmodZ&kG0)9L5{XpyLwauci
z4e70sK%;R<_5@JmbeAeAELpbn)OzrYM^H{$H<R4bf-pVcD45}fezBI<U1-?NG3+14
z>%B4J<+7EfCB*kQYvSrrwkoxqY+~Qu!-m@0T|Zn<Ap;6zx&<BdqFeK2g2RfLc{BsR
z2=p3vtx%2Y^U<+|_{R_fgGKBZV<LtgYLM!QZ;sr|h!0zn86@Pee&&<zeJDgrOA8qU
z@j;sn1P!`@Z}tXwY(ei}J(;8EDr6O%3D2TXQ2@Z4FHq@v)q6bF<7&Pq69XNzN+0YI
z=;rMF#TP-B>BsT+_iaz+IosN1v5+frCGv7D5|LY-o&VkE-}!%*|GW4vD<3^8WI=-$
zeUUd-2j!v5a-rZ|m)CjK#pd^_6ZnGAVojl&U!T~t9A0Ie-7Jp=-ccTD5ki>2(3q_&
z;p*>Dbl2lJcxn_JpW`_%6!nmWnLqjlnE3;i{n6FXBC`9gi?>zaPxJ6~S5@Q24QE{M
zhf(6FnJ(MT)nJp;e^BA{)Mr2Ox>S7j$)lM)`eD@pgWP6A8avRqe<J>X11ct}$?3#&
b)Sl7Hmup;LzbhV4kdvB{wqlclW#s<=JOCS{


From fc86347b0fbce9ed8a4d4c0d22835b2b7c3064ba Mon Sep 17 00:00:00 2001
From: james <jf205@github.com>
Date: Fri, 9 Sep 2022 15:40:10 +0100
Subject: [PATCH 084/203] Add section about using the API to download dbs

---
 .../codeql-cli/creating-codeql-databases.rst  | 18 +++++-------
 .../getting-started-with-the-codeql-cli.rst   | 29 +++----------------
 .../analyzing-your-projects.rst               |  2 ++
 .../reusables/download-github-database.rst    |  5 ++++
 .../reusables/download-lgtm-database.rst      |  6 ----
 5 files changed, 19 insertions(+), 41 deletions(-)
 create mode 100644 docs/codeql/reusables/download-github-database.rst
 delete mode 100644 docs/codeql/reusables/download-lgtm-database.rst

diff --git a/docs/codeql/codeql-cli/creating-codeql-databases.rst b/docs/codeql/codeql-cli/creating-codeql-databases.rst
index 62ed161e9b9..c3d29972cde 100644
--- a/docs/codeql/codeql-cli/creating-codeql-databases.rst
+++ b/docs/codeql/codeql-cli/creating-codeql-databases.rst
@@ -379,17 +379,15 @@ The following example shows how you could use indirect build tracing in an Azure
        # `codeql database analyze`
        # then `codeql github upload-results` ...
 
-Obtaining databases from LGTM.com
----------------------------------
-
-`LGTM.com <https://lgtm.com>`__ analyzes thousands of open-source projects using
-CodeQL. For each project on LGTM.com, you can download an archived CodeQL
-database corresponding to the most recently analyzed revision of the code. These
-databases can also be analyzed using the CodeQL CLI or used with the CodeQL
-extension for Visual Studio Code.
-
-.. include:: ../reusables/download-lgtm-database.rst
+Obtaining databases from GitHub.com
+-----------------------------------
 
+.. include:: ../reusables/download-github-database.rst
+   
+Before running an analysis, unzip the databases and try :doc:`upgrading <upgrading-codeql-databases>` the
+unzipped databases to ensure they are compatible with your local copy of the
+CodeQL queries and libraries.
+   
 .. pull-quote::
 
    Note
diff --git a/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst b/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst
index 0fd8e6b8fa0..976aa302fc6 100644
--- a/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst
+++ b/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst
@@ -47,22 +47,9 @@ Conditions <https://securitylab.github.com/tools/codeql/license>`__.
 
 .. pull-quote:: Important
 
-   There are different versions of the CLI available to download, depending
-   on your use case:
-
-   - If you want to use the most up to date CodeQL tools and features, download the
-     version tagged ``latest``.
-
-   - If you want to create CodeQL databases to upload to LGTM Enterprise, download
-     the version that is compatible with the relevant LGTM Enterprise version
-     number. Compatibility information is included in the description for each
-     release on the `CodeQL CLI releases page
-     <https://github.com/github/codeql-cli-binaries/releases>`__ on GitHub. Using the
-     correct version of the CLI ensures that your CodeQL databases are
-     compatible with your version of LGTM Enterprise. For more information,
-     see `Preparing CodeQL databases to upload to LGTM
-     <https://help.semmle.com/lgtm-enterprise/admin/help/prepare-database-upload.html>`__
-     in the LGTM admin help.
+   There are several different versions of the CLI available to download, depending
+   on your use case. If you want to use the most up to date CodeQL tools and features, download the
+   version tagged ``latest``.
 
 If you use Linux, Windows, or macOS version 10.14 ("Mojave") or earlier, simply
 `download the zip archive
@@ -232,15 +219,7 @@ see ":doc:`About CodeQL packs <about-codeql-packs>`."
    - For the most up to date CodeQL queries, check out the ``main`` branch.
      This branch represents the very latest version of CodeQL's analysis.
 
-   - For the queries used in a particular LGTM Enterprise release, check out the
-     branch tagged with the relevant release number. For example, the branch
-     tagged ``v1.27.0`` corresponds to LGTM Enterprise 1.27. You must use this
-     version if you want to upload data to LGTM Enterprise. For further
-     information, see `Preparing CodeQL databases to upload to LGTM
-     <https://help.semmle.com/lgtm-enterprise/admin/help/prepare-database-upload.html>`__
-     in the LGTM admin help.
-
-1. Extract the zip archive
+4. Extract the zip archive
 ~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 For Linux, Windows, and macOS users (version 10.14 "Mojave", and earlier)
diff --git a/docs/codeql/codeql-for-visual-studio-code/analyzing-your-projects.rst b/docs/codeql/codeql-for-visual-studio-code/analyzing-your-projects.rst
index 2b4e26b405a..6a59754eaa5 100644
--- a/docs/codeql/codeql-for-visual-studio-code/analyzing-your-projects.rst
+++ b/docs/codeql/codeql-for-visual-studio-code/analyzing-your-projects.rst
@@ -37,6 +37,8 @@ If you have a CodeQL database saved locally, as an unarchived folder or as a ZIP
 
   For more information about running query tests, see ":ref:`Testing custom queries <testing-custom-queries>`" in the CodeQL CLI help.
 
+.. include:: ../reusables/download-github-database.rst
+
 Running a query
 ------------------------
 
diff --git a/docs/codeql/reusables/download-github-database.rst b/docs/codeql/reusables/download-github-database.rst
new file mode 100644
index 00000000000..c95482fa6a5
--- /dev/null
+++ b/docs/codeql/reusables/download-github-database.rst
@@ -0,0 +1,5 @@
+GitHub also stores CodeQL databases for over 200,000 repos on GitHub.com, which you can download using the API. The list of repos is constantly growing and evolving to make sure that it includes the most interesting codebases for security research.
+
+To download a database from GitHub.com using the `GitHub CLI <https://cli.github.com/manual/gh_api>`__, use the following command:: 
+
+   gh api /repos/<owner>/<repo>/code-scanning/codeql/databases/<language> -H 'Accept: application/zip' > path/to/local/database.zip
diff --git a/docs/codeql/reusables/download-lgtm-database.rst b/docs/codeql/reusables/download-lgtm-database.rst
deleted file mode 100644
index 11652d6512a..00000000000
--- a/docs/codeql/reusables/download-lgtm-database.rst
+++ /dev/null
@@ -1,6 +0,0 @@
-To download a database from LGTM.com: 
-
-#. Log in to `LGTM.com <https://lgtm.com/>`__.
-#. Find a project you're interested in and display the Integrations tab (for example, `Apache Kafka <https://lgtm.com/projects/g/apache/kafka/ci/>`__).
-#. Scroll to the **CodeQL databases for local analysis** section at the bottom of the page.
-#. Download databases for the languages that you want to explore.
\ No newline at end of file

From f717dd6c0f308d25543574a390b14028b6f66d81 Mon Sep 17 00:00:00 2001
From: james <jf205@github.com>
Date: Fri, 9 Sep 2022 16:10:35 +0100
Subject: [PATCH 085/203] remove link to deleted file

---
 docs/codeql/codeql-cli/creating-codeql-databases.rst | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/docs/codeql/codeql-cli/creating-codeql-databases.rst b/docs/codeql/codeql-cli/creating-codeql-databases.rst
index c3d29972cde..857258e570e 100644
--- a/docs/codeql/codeql-cli/creating-codeql-databases.rst
+++ b/docs/codeql/codeql-cli/creating-codeql-databases.rst
@@ -384,9 +384,7 @@ Obtaining databases from GitHub.com
 
 .. include:: ../reusables/download-github-database.rst
    
-Before running an analysis, unzip the databases and try :doc:`upgrading <upgrading-codeql-databases>` the
-unzipped databases to ensure they are compatible with your local copy of the
-CodeQL queries and libraries.
+Before running an analysis with the CodeQL CLI, you must unzip the databases.
    
 .. pull-quote::
 

From 817f12cae63bb83e4816f9a3c41c6392ba5b86ab Mon Sep 17 00:00:00 2001
From: Ed Minnix <egregius313@github.com>
Date: Fri, 9 Sep 2022 11:35:48 -0400
Subject: [PATCH 086/203] Updated expectations file with new message

The warning message for the `android:allowBackup` query was updated.
This updates the message in the expectations file.
---
 .../CWE-312/android/backup/AllowBackupEnabledTest.expected    | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.expected b/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.expected
index 72deef0a120..a4e41d774ca 100644
--- a/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.expected
+++ b/java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.expected
@@ -1,2 +1,2 @@
-| TestExplicitlyEnabled/AndroidManifest.xml:6:5:27:19 | application | The 'android:allowBackup' attribute is enabled. |
-| TestMissing/AndroidManifest.xml:6:5:27:19 | application | The 'android:allowBackup' attribute is enabled. |
+| TestExplicitlyEnabled/AndroidManifest.xml:6:5:27:19 | application | Backups are allowed in this Android application. |
+| TestMissing/AndroidManifest.xml:6:5:27:19 | application | Backups are allowed in this Android application. |

From 5509562fe616af7c18ca8ac74d434a9e0059c414 Mon Sep 17 00:00:00 2001
From: Mathias Vorreiter Pedersen <mathiasvp@github.com>
Date: Fri, 26 Aug 2022 14:55:20 +0100
Subject: [PATCH 087/203] C++: Repair a few broken models that were incorrectly
 a pointer as tainted (instead of the pointee), or vice versa. Because of
 existing dataflow pointer/pointee conflation we never noticed that, but since
 this PR removes those imprecisions we now need to update these models.

---
 .../lib/semmle/code/cpp/models/implementations/Iterator.qll | 2 +-
 .../semmle/code/cpp/models/implementations/StdContainer.qll | 2 +-
 .../semmle/code/cpp/models/implementations/StdString.qll    | 6 +++---
 .../lib/semmle/code/cpp/models/implementations/Strcat.qll   | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/cpp/ql/lib/semmle/code/cpp/models/implementations/Iterator.qll b/cpp/ql/lib/semmle/code/cpp/models/implementations/Iterator.qll
index 2fa9803d053..8d0e97dc2ec 100644
--- a/cpp/ql/lib/semmle/code/cpp/models/implementations/Iterator.qll
+++ b/cpp/ql/lib/semmle/code/cpp/models/implementations/Iterator.qll
@@ -223,7 +223,7 @@ private class IteratorCrementMemberOperator extends MemberFunction, DataFlowFunc
     output.isQualifierObject()
     or
     input.isQualifierObject() and
-    output.isReturnValueDeref()
+    output.isReturnValue()
   }
 
   override predicate hasTaintFlow(FunctionInput input, FunctionOutput output) {
diff --git a/cpp/ql/lib/semmle/code/cpp/models/implementations/StdContainer.qll b/cpp/ql/lib/semmle/code/cpp/models/implementations/StdContainer.qll
index c93a5ad147b..8c531891bcd 100644
--- a/cpp/ql/lib/semmle/code/cpp/models/implementations/StdContainer.qll
+++ b/cpp/ql/lib/semmle/code/cpp/models/implementations/StdContainer.qll
@@ -176,7 +176,7 @@ private class StdSequenceContainerInsert extends TaintFunction {
     ) and
     (
       output.isQualifierObject() or
-      output.isReturnValueDeref()
+      output.isReturnValue()
     )
   }
 }
diff --git a/cpp/ql/lib/semmle/code/cpp/models/implementations/StdString.qll b/cpp/ql/lib/semmle/code/cpp/models/implementations/StdString.qll
index ae190688b70..b5c18a8e09f 100644
--- a/cpp/ql/lib/semmle/code/cpp/models/implementations/StdString.qll
+++ b/cpp/ql/lib/semmle/code/cpp/models/implementations/StdString.qll
@@ -176,7 +176,7 @@ private class StdStringAppend extends TaintFunction {
     ) and
     (
       output.isQualifierObject() or
-      output.isReturnValueDeref()
+      output.isReturnValue()
     )
     or
     // reverse flow from returned reference to the qualifier (for writes to
@@ -543,11 +543,11 @@ private class StdOStreamOutNonMember extends DataFlowFunction, TaintFunction {
 
   override predicate hasTaintFlow(FunctionInput input, FunctionOutput output) {
     // flow from second parameter to first parameter
-    input.isParameter(1) and
+    input.isParameterDeref(1) and
     output.isParameterDeref(0)
     or
     // flow from second parameter to return value
-    input.isParameter(1) and
+    input.isParameterDeref(1) and
     output.isReturnValueDeref()
     or
     // reverse flow from returned reference to the first parameter
diff --git a/cpp/ql/lib/semmle/code/cpp/models/implementations/Strcat.qll b/cpp/ql/lib/semmle/code/cpp/models/implementations/Strcat.qll
index 1a65e7b6ca4..e729c3cb0a4 100644
--- a/cpp/ql/lib/semmle/code/cpp/models/implementations/Strcat.qll
+++ b/cpp/ql/lib/semmle/code/cpp/models/implementations/Strcat.qll
@@ -61,7 +61,7 @@ class StrcatFunction extends TaintFunction, DataFlowFunction, ArrayFunction, Sid
     input.isParameterDeref(0) and
     output.isParameterDeref(0)
     or
-    input.isParameter(1) and
+    input.isParameterDeref(1) and
     output.isParameterDeref(0)
   }
 

From 869833a95aa3d3491ccce8812a20f0fa0de9d516 Mon Sep 17 00:00:00 2001
From: james <jf205@github.com>
Date: Fri, 9 Sep 2022 17:11:54 +0100
Subject: [PATCH 088/203] delete old note that refers to lgtm

---
 docs/codeql/codeql-cli/creating-codeql-databases.rst | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/docs/codeql/codeql-cli/creating-codeql-databases.rst b/docs/codeql/codeql-cli/creating-codeql-databases.rst
index 857258e570e..334a5241b47 100644
--- a/docs/codeql/codeql-cli/creating-codeql-databases.rst
+++ b/docs/codeql/codeql-cli/creating-codeql-databases.rst
@@ -386,13 +386,6 @@ Obtaining databases from GitHub.com
    
 Before running an analysis with the CodeQL CLI, you must unzip the databases.
    
-.. pull-quote::
-
-   Note
-
-   .. include:: ../reusables/index-files-note.rst
-
-
 Further reading
 ---------------
 

From 0e5df6c08a33c7624a0c2842f4d55dbff3420deb Mon Sep 17 00:00:00 2001
From: james <jf205@github.com>
Date: Fri, 9 Sep 2022 17:14:26 +0100
Subject: [PATCH 089/203] delete unused reusable note

---
 docs/codeql/reusables/index-files-note.rst | 8 --------
 1 file changed, 8 deletions(-)
 delete mode 100644 docs/codeql/reusables/index-files-note.rst

diff --git a/docs/codeql/reusables/index-files-note.rst b/docs/codeql/reusables/index-files-note.rst
deleted file mode 100644
index aad0637cbe1..00000000000
--- a/docs/codeql/reusables/index-files-note.rst
+++ /dev/null
@@ -1,8 +0,0 @@
-The CodeQL CLI currently extracts data from additional, external files in a 
-different way to the legacy QL tools. For example, when you run ``codeql database create`` 
-the CodeQL CLI extracts data from some relevant XML files for Java and C#, but not 
-for the other supported languages, such as JavaScript. This means that CodeQL databases 
-created using the CodeQL CLI may be slightly different from those obtained from LGTM.com or 
-created using the legacy QL command-line tools. As such, analysis results generated from
-databases created using the CodeQL CLI may also differ from those generated from
-databases obtained from elsewhere.
\ No newline at end of file

From 6dcfe0348b760f3bc4cfc6cd1a19e754da720023 Mon Sep 17 00:00:00 2001
From: Mathias Vorreiter Pedersen <mathiasvp@github.com>
Date: Fri, 9 Sep 2022 17:06:21 +0100
Subject: [PATCH 090/203] C++: Copy over the required changes to
 non-experimental libraries.

---
 .../code/cpp/ir/dataflow/TaintTracking.qll    |   2 +-
 .../code/cpp/ir/dataflow/TaintTracking2.qll   |   2 +-
 .../code/cpp/ir/dataflow/TaintTracking3.qll   |   2 +-
 .../raw/internal/SideEffects.qll              |  10 +-
 .../interfaces/FunctionInputsAndOutputs.qll   | 141 ++++++++++++++++--
 5 files changed, 141 insertions(+), 16 deletions(-)

diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking.qll
index 7eada0bb244..43064116499 100644
--- a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking.qll
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking.qll
@@ -19,5 +19,5 @@ import semmle.code.cpp.ir.dataflow.DataFlow
 import semmle.code.cpp.ir.dataflow.DataFlow2
 
 module TaintTracking {
-  import semmle.code.cpp.ir.dataflow.internal.tainttracking1.TaintTrackingImpl
+  import experimental.semmle.code.cpp.ir.dataflow.internal.tainttracking1.TaintTrackingImpl
 }
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking2.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking2.qll
index 3ef03a3bd2c..aa9fd392803 100644
--- a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking2.qll
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking2.qll
@@ -11,5 +11,5 @@
  * See `semmle.code.cpp.ir.dataflow.TaintTracking` for the full documentation.
  */
 module TaintTracking2 {
-  import semmle.code.cpp.ir.dataflow.internal.tainttracking2.TaintTrackingImpl
+  import experimental.semmle.code.cpp.ir.dataflow.internal.tainttracking2.TaintTrackingImpl
 }
diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking3.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking3.qll
index 98e1caebf38..bcd35ccd02f 100644
--- a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking3.qll
+++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/TaintTracking3.qll
@@ -11,5 +11,5 @@
  * See `semmle.code.cpp.ir.dataflow.TaintTracking` for the full documentation.
  */
 module TaintTracking3 {
-  import semmle.code.cpp.ir.dataflow.internal.tainttracking3.TaintTrackingImpl
+  import experimental.semmle.code.cpp.ir.dataflow.internal.tainttracking3.TaintTrackingImpl
 }
diff --git a/cpp/ql/lib/semmle/code/cpp/ir/implementation/raw/internal/SideEffects.qll b/cpp/ql/lib/semmle/code/cpp/ir/implementation/raw/internal/SideEffects.qll
index 93b20865cac..684aa4f14f2 100644
--- a/cpp/ql/lib/semmle/code/cpp/ir/implementation/raw/internal/SideEffects.qll
+++ b/cpp/ql/lib/semmle/code/cpp/ir/implementation/raw/internal/SideEffects.qll
@@ -55,7 +55,15 @@ private predicate isDeeplyConstBelow(Type t) {
   isDeeplyConstBelow(t.(TypedefType).getBaseType())
 }
 
-private predicate isConstPointerLike(Type t) {
+/**
+ * INTERNAL: Do not use.
+ *
+ * Holds if `t` is a pointer-like type (i.e., a pointer,
+ * an array a reference, or a pointer-wrapper such as
+ * `std::unique_ptr`) that is constant and only contains
+ * constant types, excluding the type itself.
+ */
+predicate isConstPointerLike(Type t) {
   (
     t instanceof PointerWrapper
     or
diff --git a/cpp/ql/lib/semmle/code/cpp/models/interfaces/FunctionInputsAndOutputs.qll b/cpp/ql/lib/semmle/code/cpp/models/interfaces/FunctionInputsAndOutputs.qll
index 5e899be68d4..56746c928b0 100644
--- a/cpp/ql/lib/semmle/code/cpp/models/interfaces/FunctionInputsAndOutputs.qll
+++ b/cpp/ql/lib/semmle/code/cpp/models/interfaces/FunctionInputsAndOutputs.qll
@@ -46,6 +46,26 @@ class FunctionInput extends TFunctionInput {
    */
   deprecated final predicate isInParameter(ParameterIndex index) { this.isParameter(index) }
 
+  /**
+   * Holds if this is the input value pointed to by a pointer parameter to a function, or the input
+   * value referred to by a reference parameter to a function, where the parameter has index
+   * `index`.
+   *
+   * Example:
+   * ```
+   * void func(int n, char* p, float& r);
+   * ```
+   * - `isParameterDeref(1, 1)` holds for the `FunctionInput` that represents the value of `*p` (with
+   *   type `char`) on entry to the function.
+   * - `isParameterDeref(2, 1)` holds for the `FunctionInput` that represents the value of `r` (with type
+   *   `float`) on entry to the function.
+   * - There is no `FunctionInput` for which `isParameterDeref(0, _)` holds, because `n` is neither a
+   *   pointer nor a reference.
+   */
+  predicate isParameterDeref(ParameterIndex index, int ind) {
+    ind = 1 and this.isParameterDeref(index)
+  }
+
   /**
    * Holds if this is the input value pointed to by a pointer parameter to a function, or the input
    * value referred to by a reference parameter to a function, where the parameter has index
@@ -62,7 +82,7 @@ class FunctionInput extends TFunctionInput {
    * - There is no `FunctionInput` for which `isParameterDeref(0)` holds, because `n` is neither a
    *   pointer nor a reference.
    */
-  predicate isParameterDeref(ParameterIndex index) { none() }
+  predicate isParameterDeref(ParameterIndex index) { this.isParameterDeref(index, 1) }
 
   /**
    * Holds if this is the input value pointed to by a pointer parameter to a function, or the input
@@ -87,7 +107,22 @@ class FunctionInput extends TFunctionInput {
    * - `isQualifierObject()` holds for the `FunctionInput` that represents the value of `*this`
    *   (with type `C const`) on entry to the function.
    */
-  predicate isQualifierObject() { none() }
+  predicate isQualifierObject(int ind) { ind = 1 and this.isQualifierObject() }
+
+  /**
+   * Holds if this is the input value pointed to by the `this` pointer of an instance member
+   * function.
+   *
+   * Example:
+   * ```
+   * struct C {
+   *   void mfunc(int n, char* p, float& r) const;
+   * };
+   * ```
+   * - `isQualifierObject()` holds for the `FunctionInput` that represents the value of `*this`
+   *   (with type `C const`) on entry to the function.
+   */
+  predicate isQualifierObject() { this.isQualifierObject(1) }
 
   /**
    * Holds if this is the input value pointed to by the `this` pointer of an instance member
@@ -143,16 +178,49 @@ class FunctionInput extends TFunctionInput {
    * rare, but they do occur when a function returns a reference to itself,
    * part of itself, or one of its other inputs.
    */
-  predicate isReturnValueDeref() { none() }
+  predicate isReturnValueDeref() { this.isReturnValueDeref(1) }
+
+  /**
+   * Holds if this is the input value pointed to by the return value of a
+   * function, if the function returns a pointer, or the input value referred
+   * to by the return value of a function, if the function returns a reference.
+   *
+   * Example:
+   * ```
+   * char* getPointer();
+   * float& getReference();
+   * int getInt();
+   * ```
+   * - `isReturnValueDeref(1)` holds for the `FunctionInput` that represents the
+   *   value of `*getPointer()` (with type `char`).
+   * - `isReturnValueDeref(1)` holds for the `FunctionInput` that represents the
+   *   value of `getReference()` (with type `float`).
+   * - There is no `FunctionInput` of `getInt()` for which
+   *   `isReturnValueDeref(_)` holds because the return type of `getInt()` is
+   *   neither a pointer nor a reference.
+   *
+   * Note that data flows in through function return values are relatively
+   * rare, but they do occur when a function returns a reference to itself,
+   * part of itself, or one of its other inputs.
+   */
+  predicate isReturnValueDeref(int ind) { ind = 1 and this.isReturnValueDeref() }
+
+  /**
+   * Holds if `i >= 0` and `isParameterDeref(i)` holds for this value, or
+   * if `i = -1` and `isQualifierObject()` holds for this value.
+   */
+  final predicate isParameterDerefOrQualifierObject(ParameterIndex i, int ind) {
+    i >= 0 and this.isParameterDeref(i, ind)
+    or
+    i = -1 and this.isQualifierObject(ind)
+  }
 
   /**
    * Holds if `i >= 0` and `isParameterDeref(i)` holds for this value, or
    * if `i = -1` and `isQualifierObject()` holds for this value.
    */
   final predicate isParameterDerefOrQualifierObject(ParameterIndex i) {
-    i >= 0 and this.isParameterDeref(i)
-    or
-    i = -1 and this.isQualifierObject()
+    this.isParameterDerefOrQualifierObject(i, 1)
   }
 }
 
@@ -308,7 +376,9 @@ class FunctionOutput extends TFunctionOutput {
    * - There is no `FunctionOutput` for which `isParameterDeref(0)` holds, because `n` is neither a
    *   pointer nor a reference.
    */
-  predicate isParameterDeref(ParameterIndex i) { none() }
+  predicate isParameterDeref(ParameterIndex i) { this.isParameterDeref(i, 1) }
+
+  predicate isParameterDeref(ParameterIndex i, int ind) { ind = 1 and this.isParameterDeref(i) }
 
   /**
    * Holds if this is the output value pointed to by a pointer parameter to a function, or the
@@ -333,7 +403,22 @@ class FunctionOutput extends TFunctionOutput {
    * - `isQualifierObject()` holds for the `FunctionOutput` that represents the value of `*this`
    *   (with type `C`) on return from the function.
    */
-  predicate isQualifierObject() { none() }
+  predicate isQualifierObject() { this.isQualifierObject(1) }
+
+  /**
+   * Holds if this is the output value pointed to by the `this` pointer of an instance member
+   *   function.
+   *
+   * Example:
+   * ```
+   * struct C {
+   *   void mfunc(int n, char* p, float& r);
+   * };
+   * ```
+   * - `isQualifierObject()` holds for the `FunctionOutput` that represents the value of `*this`
+   *   (with type `C`) on return from the function.
+   */
+  predicate isQualifierObject(int ind) { ind = 1 and this.isQualifierObject() }
 
   /**
    * Holds if this is the output value pointed to by the `this` pointer of an instance member
@@ -385,7 +470,27 @@ class FunctionOutput extends TFunctionOutput {
    * - There is no `FunctionOutput` of `getInt()` for which `isReturnValueDeref()` holds because the
    *   return type of `getInt()` is neither a pointer nor a reference.
    */
-  predicate isReturnValueDeref() { none() }
+  predicate isReturnValueDeref() { this.isReturnValueDeref(_) }
+
+  /**
+   * Holds if this is the output value pointed to by the return value of a function, if the function
+   * returns a pointer, or the output value referred to by the return value of a function, if the
+   * function returns a reference.
+   *
+   * Example:
+   * ```
+   * char* getPointer();
+   * float& getReference();
+   * int getInt();
+   * ```
+   * - `isReturnValueDeref(1)` holds for the `FunctionOutput` that represents the value of
+   *   `*getPointer()` (with type `char`).
+   * - `isReturnValueDeref(1)` holds for the `FunctionOutput` that represents the value of
+   *   `getReference()` (with type `float`).
+   * - There is no `FunctionOutput` of `getInt()` for which `isReturnValueDeref(_)` holds because the
+   *   return type of `getInt()` is neither a pointer nor a reference.
+   */
+  predicate isReturnValueDeref(int ind) { ind = 1 and this.isReturnValueDeref() }
 
   /**
    * Holds if this is the output value pointed to by the return value of a function, if the function
@@ -399,10 +504,18 @@ class FunctionOutput extends TFunctionOutput {
    * Holds if `i >= 0` and `isParameterDeref(i)` holds for this is the value, or
    * if `i = -1` and `isQualifierObject()` holds for this value.
    */
-  final predicate isParameterDerefOrQualifierObject(ParameterIndex i) {
-    i >= 0 and this.isParameterDeref(i)
+  final predicate isParameterDerefOrQualifierObject(ParameterIndex i, int ind) {
+    i >= 0 and this.isParameterDeref(i, ind)
     or
-    i = -1 and this.isQualifierObject()
+    i = -1 and this.isQualifierObject(ind)
+  }
+
+  /**
+   * Holds if `i >= 0` and `isParameterDeref(i)` holds for this is the value, or
+   * if `i = -1` and `isQualifierObject()` holds for this value.
+   */
+  final predicate isParameterDerefOrQualifierObject(ParameterIndex i) {
+    this.isParameterDerefOrQualifierObject(i, 1)
   }
 }
 
@@ -431,6 +544,10 @@ class OutParameterDeref extends FunctionOutput, TOutParameterDeref {
   ParameterIndex getIndex() { result = index }
 
   override predicate isParameterDeref(ParameterIndex i) { i = index }
+
+  override predicate isParameterDeref(ParameterIndex i, int ind) {
+    this.isParameterDeref(i) and ind = 1
+  }
 }
 
 /**

From 8ac3e10896d1ad3fe7de160dea80bd49c2584594 Mon Sep 17 00:00:00 2001
From: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
Date: Fri, 9 Sep 2022 17:59:41 +0100
Subject: [PATCH 091/203] C++: Put a warning on the PointsTo library.

---
 cpp/ql/lib/semmle/code/cpp/pointsto/PointsTo.qll | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/cpp/ql/lib/semmle/code/cpp/pointsto/PointsTo.qll b/cpp/ql/lib/semmle/code/cpp/pointsto/PointsTo.qll
index 83b8c2936f0..ed42aac3cbb 100644
--- a/cpp/ql/lib/semmle/code/cpp/pointsto/PointsTo.qll
+++ b/cpp/ql/lib/semmle/code/cpp/pointsto/PointsTo.qll
@@ -19,6 +19,9 @@
  * `pointstoinfo` predicate determines the transitively implied points-to
  * information by collapsing pointers into equivalence classes. These
  * equivalence classes are called "points-to sets".
+ *
+ * WARNING: This library may perform poorly on very large projects.
+ * Consider using another library such as ??? instead.
  */
 
 import semmle.code.cpp.commons.File

From c988547e9c13f53a9dc264eb453d4eb921572528 Mon Sep 17 00:00:00 2001
From: Mathias Vorreiter Pedersen <mathiasvp@github.com>
Date: Sun, 11 Sep 2022 18:31:53 +0100
Subject: [PATCH 092/203] C++: Accept test changes.

---
 .../dataflow/taint-tests/localTaint.expected  | 36 +++++++++----------
 1 file changed, 18 insertions(+), 18 deletions(-)

diff --git a/cpp/ql/test/library-tests/dataflow/taint-tests/localTaint.expected b/cpp/ql/test/library-tests/dataflow/taint-tests/localTaint.expected
index 07bf9a85cf4..7029593ba22 100644
--- a/cpp/ql/test/library-tests/dataflow/taint-tests/localTaint.expected
+++ b/cpp/ql/test/library-tests/dataflow/taint-tests/localTaint.expected
@@ -3488,7 +3488,7 @@
 | standalone_iterators.cpp:41:19:41:19 | call to operator++ | standalone_iterators.cpp:41:10:41:10 | call to operator* | TAINT |
 | standalone_iterators.cpp:42:12:42:12 | call to operator++ | standalone_iterators.cpp:42:10:42:10 | call to operator* | TAINT |
 | standalone_iterators.cpp:42:14:42:20 | ref arg source1 | standalone_iterators.cpp:39:45:39:51 | source1 |  |
-| standalone_iterators.cpp:42:14:42:20 | source1 | standalone_iterators.cpp:42:12:42:12 | call to operator++ |  |
+| standalone_iterators.cpp:42:14:42:20 | source1 | standalone_iterators.cpp:42:12:42:12 | call to operator++ | TAINT |
 | standalone_iterators.cpp:45:39:45:45 | source1 | standalone_iterators.cpp:45:39:45:45 | source1 |  |
 | standalone_iterators.cpp:45:39:45:45 | source1 | standalone_iterators.cpp:46:11:46:17 | source1 |  |
 | standalone_iterators.cpp:45:39:45:45 | source1 | standalone_iterators.cpp:47:12:47:18 | source1 |  |
@@ -3500,7 +3500,7 @@
 | standalone_iterators.cpp:47:19:47:19 | call to operator++ | standalone_iterators.cpp:47:10:47:10 | call to operator* | TAINT |
 | standalone_iterators.cpp:48:12:48:12 | call to operator++ | standalone_iterators.cpp:48:10:48:10 | call to operator* | TAINT |
 | standalone_iterators.cpp:48:14:48:20 | ref arg source1 | standalone_iterators.cpp:45:39:45:45 | source1 |  |
-| standalone_iterators.cpp:48:14:48:20 | source1 | standalone_iterators.cpp:48:12:48:12 | call to operator++ |  |
+| standalone_iterators.cpp:48:14:48:20 | source1 | standalone_iterators.cpp:48:12:48:12 | call to operator++ | TAINT |
 | standalone_iterators.cpp:51:37:51:43 | source1 | standalone_iterators.cpp:52:11:52:17 | source1 |  |
 | standalone_iterators.cpp:51:37:51:43 | source1 | standalone_iterators.cpp:53:12:53:18 | source1 |  |
 | standalone_iterators.cpp:51:37:51:43 | source1 | standalone_iterators.cpp:54:14:54:20 | source1 |  |
@@ -3788,7 +3788,7 @@
 | string.cpp:120:16:120:24 | call to basic_string | string.cpp:125:50:125:50 | s |  |
 | string.cpp:120:16:120:24 | call to basic_string | string.cpp:129:16:129:16 | s |  |
 | string.cpp:121:15:121:15 | (__begin) | string.cpp:121:15:121:15 | call to operator* | TAINT |
-| string.cpp:121:15:121:15 | (__begin) | string.cpp:121:15:121:15 | call to operator++ |  |
+| string.cpp:121:15:121:15 | (__begin) | string.cpp:121:15:121:15 | call to operator++ | TAINT |
 | string.cpp:121:15:121:15 | (__end) | string.cpp:121:15:121:15 | call to iterator |  |
 | string.cpp:121:15:121:15 | (__range) | string.cpp:121:15:121:15 | call to begin | TAINT |
 | string.cpp:121:15:121:15 | (__range) | string.cpp:121:15:121:15 | call to end | TAINT |
@@ -3816,7 +3816,7 @@
 | string.cpp:125:50:125:50 | ref arg s | string.cpp:125:50:125:50 | s |  |
 | string.cpp:125:50:125:50 | ref arg s | string.cpp:129:16:129:16 | s |  |
 | string.cpp:125:50:125:50 | s | string.cpp:125:52:125:54 | call to end | TAINT |
-| string.cpp:125:61:125:62 | it | string.cpp:125:59:125:59 | call to operator++ |  |
+| string.cpp:125:61:125:62 | it | string.cpp:125:59:125:59 | call to operator++ | TAINT |
 | string.cpp:125:61:125:62 | ref arg it | string.cpp:125:44:125:45 | it |  |
 | string.cpp:125:61:125:62 | ref arg it | string.cpp:125:61:125:62 | it |  |
 | string.cpp:125:61:125:62 | ref arg it | string.cpp:126:9:126:10 | it |  |
@@ -3825,7 +3825,7 @@
 | string.cpp:126:9:126:10 | ref arg it | string.cpp:125:61:125:62 | it |  |
 | string.cpp:126:9:126:10 | ref arg it | string.cpp:126:9:126:10 | it |  |
 | string.cpp:129:16:129:16 | (__begin) | string.cpp:129:16:129:16 | call to operator* | TAINT |
-| string.cpp:129:16:129:16 | (__begin) | string.cpp:129:16:129:16 | call to operator++ |  |
+| string.cpp:129:16:129:16 | (__begin) | string.cpp:129:16:129:16 | call to operator++ | TAINT |
 | string.cpp:129:16:129:16 | (__end) | string.cpp:129:16:129:16 | call to iterator |  |
 | string.cpp:129:16:129:16 | (__range) | string.cpp:129:16:129:16 | call to begin | TAINT |
 | string.cpp:129:16:129:16 | (__range) | string.cpp:129:16:129:16 | call to end | TAINT |
@@ -3847,7 +3847,7 @@
 | string.cpp:133:28:133:33 | call to source | string.cpp:133:28:133:36 | call to basic_string | TAINT |
 | string.cpp:133:28:133:36 | call to basic_string | string.cpp:134:22:134:28 | const_s |  |
 | string.cpp:134:22:134:22 | (__begin) | string.cpp:134:22:134:22 | call to operator* | TAINT |
-| string.cpp:134:22:134:22 | (__begin) | string.cpp:134:22:134:22 | call to operator++ |  |
+| string.cpp:134:22:134:22 | (__begin) | string.cpp:134:22:134:22 | call to operator++ | TAINT |
 | string.cpp:134:22:134:22 | (__range) | string.cpp:134:22:134:22 | call to begin | TAINT |
 | string.cpp:134:22:134:22 | (__range) | string.cpp:134:22:134:22 | call to end | TAINT |
 | string.cpp:134:22:134:22 | call to begin | string.cpp:134:22:134:22 | (__begin) |  |
@@ -4259,12 +4259,12 @@
 | string.cpp:398:8:398:9 | i2 | string.cpp:399:12:399:13 | i3 |  |
 | string.cpp:399:10:399:10 | call to operator++ | string.cpp:399:8:399:8 | call to operator* | TAINT |
 | string.cpp:399:10:399:10 | ref arg call to operator++ | string.cpp:399:12:399:13 | ref arg i3 |  |
-| string.cpp:399:12:399:13 | i3 | string.cpp:399:10:399:10 | call to operator++ |  |
+| string.cpp:399:12:399:13 | i3 | string.cpp:399:10:399:10 | call to operator++ | TAINT |
 | string.cpp:400:8:400:9 | i2 | string.cpp:400:3:400:9 | ... = ... |  |
 | string.cpp:400:8:400:9 | i2 | string.cpp:401:12:401:13 | i4 |  |
 | string.cpp:401:10:401:10 | call to operator-- | string.cpp:401:8:401:8 | call to operator* | TAINT |
 | string.cpp:401:10:401:10 | ref arg call to operator-- | string.cpp:401:12:401:13 | ref arg i4 |  |
-| string.cpp:401:12:401:13 | i4 | string.cpp:401:10:401:10 | call to operator-- |  |
+| string.cpp:401:12:401:13 | i4 | string.cpp:401:10:401:10 | call to operator-- | TAINT |
 | string.cpp:402:8:402:9 | i2 | string.cpp:402:3:402:9 | ... = ... |  |
 | string.cpp:402:8:402:9 | i2 | string.cpp:403:3:403:4 | i5 |  |
 | string.cpp:402:8:402:9 | i2 | string.cpp:404:9:404:10 | i5 |  |
@@ -4293,7 +4293,7 @@
 | string.cpp:413:11:413:13 | call to end | string.cpp:413:3:413:15 | ... = ... |  |
 | string.cpp:413:11:413:13 | call to end | string.cpp:414:5:414:6 | i9 |  |
 | string.cpp:413:11:413:13 | call to end | string.cpp:415:9:415:10 | i9 |  |
-| string.cpp:414:5:414:6 | i9 | string.cpp:414:3:414:3 | call to operator-- |  |
+| string.cpp:414:5:414:6 | i9 | string.cpp:414:3:414:3 | call to operator-- | TAINT |
 | string.cpp:414:5:414:6 | ref arg i9 | string.cpp:415:9:415:10 | i9 |  |
 | string.cpp:415:9:415:10 | i9 | string.cpp:415:8:415:8 | call to operator* | TAINT |
 | string.cpp:417:9:417:10 | i2 | string.cpp:417:3:417:10 | ... = ... |  |
@@ -6579,7 +6579,7 @@
 | vector.cpp:17:21:17:33 | call to vector | vector.cpp:35:1:35:1 | v |  |
 | vector.cpp:17:26:17:32 | source1 | vector.cpp:17:21:17:33 | call to vector | TAINT |
 | vector.cpp:19:14:19:14 | (__begin) | vector.cpp:19:14:19:14 | call to operator* | TAINT |
-| vector.cpp:19:14:19:14 | (__begin) | vector.cpp:19:14:19:14 | call to operator++ |  |
+| vector.cpp:19:14:19:14 | (__begin) | vector.cpp:19:14:19:14 | call to operator++ | TAINT |
 | vector.cpp:19:14:19:14 | (__end) | vector.cpp:19:14:19:14 | call to iterator |  |
 | vector.cpp:19:14:19:14 | (__range) | vector.cpp:19:14:19:14 | call to begin | TAINT |
 | vector.cpp:19:14:19:14 | (__range) | vector.cpp:19:14:19:14 | call to end | TAINT |
@@ -6609,7 +6609,7 @@
 | vector.cpp:23:55:23:55 | ref arg v | vector.cpp:27:15:27:15 | v |  |
 | vector.cpp:23:55:23:55 | ref arg v | vector.cpp:35:1:35:1 | v |  |
 | vector.cpp:23:55:23:55 | v | vector.cpp:23:57:23:59 | call to end | TAINT |
-| vector.cpp:23:66:23:67 | it | vector.cpp:23:64:23:64 | call to operator++ |  |
+| vector.cpp:23:66:23:67 | it | vector.cpp:23:64:23:64 | call to operator++ | TAINT |
 | vector.cpp:23:66:23:67 | ref arg it | vector.cpp:23:49:23:50 | it |  |
 | vector.cpp:23:66:23:67 | ref arg it | vector.cpp:23:66:23:67 | it |  |
 | vector.cpp:23:66:23:67 | ref arg it | vector.cpp:24:9:24:10 | it |  |
@@ -6618,7 +6618,7 @@
 | vector.cpp:24:9:24:10 | ref arg it | vector.cpp:23:66:23:67 | it |  |
 | vector.cpp:24:9:24:10 | ref arg it | vector.cpp:24:9:24:10 | it |  |
 | vector.cpp:27:15:27:15 | (__begin) | vector.cpp:27:15:27:15 | call to operator* | TAINT |
-| vector.cpp:27:15:27:15 | (__begin) | vector.cpp:27:15:27:15 | call to operator++ |  |
+| vector.cpp:27:15:27:15 | (__begin) | vector.cpp:27:15:27:15 | call to operator++ | TAINT |
 | vector.cpp:27:15:27:15 | (__end) | vector.cpp:27:15:27:15 | call to iterator |  |
 | vector.cpp:27:15:27:15 | (__range) | vector.cpp:27:15:27:15 | call to begin | TAINT |
 | vector.cpp:27:15:27:15 | (__range) | vector.cpp:27:15:27:15 | call to end | TAINT |
@@ -6641,7 +6641,7 @@
 | vector.cpp:31:33:31:45 | call to vector | vector.cpp:35:1:35:1 | const_v |  |
 | vector.cpp:31:38:31:44 | source1 | vector.cpp:31:33:31:45 | call to vector | TAINT |
 | vector.cpp:32:21:32:21 | (__begin) | vector.cpp:32:21:32:21 | call to operator* | TAINT |
-| vector.cpp:32:21:32:21 | (__begin) | vector.cpp:32:21:32:21 | call to operator++ |  |
+| vector.cpp:32:21:32:21 | (__begin) | vector.cpp:32:21:32:21 | call to operator++ | TAINT |
 | vector.cpp:32:21:32:21 | (__range) | vector.cpp:32:21:32:21 | call to begin | TAINT |
 | vector.cpp:32:21:32:21 | (__range) | vector.cpp:32:21:32:21 | call to end | TAINT |
 | vector.cpp:32:21:32:21 | call to begin | vector.cpp:32:21:32:21 | (__begin) |  |
@@ -7652,7 +7652,7 @@
 | vector.cpp:344:56:344:57 | ref arg v2 | vector.cpp:347:7:347:8 | v2 |  |
 | vector.cpp:344:56:344:57 | ref arg v2 | vector.cpp:415:1:415:1 | v2 |  |
 | vector.cpp:344:56:344:57 | v2 | vector.cpp:344:59:344:61 | call to end | TAINT |
-| vector.cpp:344:68:344:69 | it | vector.cpp:344:66:344:66 | call to operator++ |  |
+| vector.cpp:344:68:344:69 | it | vector.cpp:344:66:344:66 | call to operator++ | TAINT |
 | vector.cpp:344:68:344:69 | ref arg it | vector.cpp:344:50:344:51 | it |  |
 | vector.cpp:344:68:344:69 | ref arg it | vector.cpp:344:68:344:69 | it |  |
 | vector.cpp:344:68:344:69 | ref arg it | vector.cpp:345:4:345:5 | it |  |
@@ -7669,7 +7669,7 @@
 | vector.cpp:345:9:345:14 | call to source | vector.cpp:345:3:345:16 | ... = ... |  |
 | vector.cpp:347:7:347:8 | ref arg v2 | vector.cpp:415:1:415:1 | v2 |  |
 | vector.cpp:349:15:349:15 | (__begin) | vector.cpp:349:15:349:15 | call to operator* | TAINT |
-| vector.cpp:349:15:349:15 | (__begin) | vector.cpp:349:15:349:15 | call to operator++ |  |
+| vector.cpp:349:15:349:15 | (__begin) | vector.cpp:349:15:349:15 | call to operator++ | TAINT |
 | vector.cpp:349:15:349:15 | (__end) | vector.cpp:349:15:349:15 | call to iterator |  |
 | vector.cpp:349:15:349:15 | (__range) | vector.cpp:349:15:349:15 | call to begin | TAINT |
 | vector.cpp:349:15:349:15 | (__range) | vector.cpp:349:15:349:15 | call to end | TAINT |
@@ -7701,7 +7701,7 @@
 | vector.cpp:354:56:354:57 | ref arg v4 | vector.cpp:357:7:357:8 | v4 |  |
 | vector.cpp:354:56:354:57 | ref arg v4 | vector.cpp:415:1:415:1 | v4 |  |
 | vector.cpp:354:56:354:57 | v4 | vector.cpp:354:59:354:61 | call to end | TAINT |
-| vector.cpp:354:68:354:69 | it | vector.cpp:354:66:354:66 | call to operator++ |  |
+| vector.cpp:354:68:354:69 | it | vector.cpp:354:66:354:66 | call to operator++ | TAINT |
 | vector.cpp:354:68:354:69 | ref arg it | vector.cpp:354:50:354:51 | it |  |
 | vector.cpp:354:68:354:69 | ref arg it | vector.cpp:354:68:354:69 | it |  |
 | vector.cpp:354:68:354:69 | ref arg it | vector.cpp:355:32:355:33 | it |  |
@@ -7961,7 +7961,7 @@
 | vector.cpp:442:3:442:3 | ref arg call to operator* | vector.cpp:444:2:444:2 | out |  |
 | vector.cpp:442:4:442:4 | call to operator++ | vector.cpp:442:3:442:3 | call to operator* | TAINT |
 | vector.cpp:442:4:442:4 | ref arg call to operator++ | vector.cpp:442:6:442:7 | ref arg it |  |
-| vector.cpp:442:6:442:7 | it | vector.cpp:442:4:442:4 | call to operator++ |  |
+| vector.cpp:442:6:442:7 | it | vector.cpp:442:4:442:4 | call to operator++ | TAINT |
 | vector.cpp:442:11:442:36 | call to basic_string | vector.cpp:442:3:442:3 | ref arg call to operator* | TAINT |
 | vector.cpp:442:23:442:35 | source_string | vector.cpp:442:11:442:36 | call to basic_string | TAINT |
 | vector.cpp:443:8:443:10 | ref arg out | vector.cpp:444:2:444:2 | out |  |
@@ -7976,7 +7976,7 @@
 | vector.cpp:449:3:449:3 | ref arg call to operator* | vector.cpp:451:2:451:2 | out |  |
 | vector.cpp:449:4:449:4 | call to operator++ | vector.cpp:449:3:449:3 | call to operator* | TAINT |
 | vector.cpp:449:4:449:4 | ref arg call to operator++ | vector.cpp:449:6:449:7 | ref arg it |  |
-| vector.cpp:449:6:449:7 | it | vector.cpp:449:4:449:4 | call to operator++ |  |
+| vector.cpp:449:6:449:7 | it | vector.cpp:449:4:449:4 | call to operator++ | TAINT |
 | vector.cpp:449:11:449:16 | call to source | vector.cpp:449:3:449:3 | ref arg call to operator* | TAINT |
 | vector.cpp:450:8:450:10 | ref arg out | vector.cpp:451:2:451:2 | out |  |
 | vector.cpp:467:22:467:25 | call to vector | vector.cpp:471:8:471:8 | v |  |

From 776df33f55911a8ded4920c31934f752bfd5acdf Mon Sep 17 00:00:00 2001
From: Paolo Tranquilli <redsun82@github.com>
Date: Mon, 12 Sep 2022 08:47:43 +0200
Subject: [PATCH 093/203] Swift: fix typos and comments in `testCrypto.swift`

---
 .../Security/CWE-328/testCrypto.swift         | 42 +++++++++----------
 1 file changed, 21 insertions(+), 21 deletions(-)

diff --git a/swift/ql/test/query-tests/Security/CWE-328/testCrypto.swift b/swift/ql/test/query-tests/Security/CWE-328/testCrypto.swift
index 73434ce977b..a97eab7501d 100644
--- a/swift/ql/test/query-tests/Security/CWE-328/testCrypto.swift
+++ b/swift/ql/test/query-tests/Security/CWE-328/testCrypto.swift
@@ -66,23 +66,23 @@ func testHashMethods(passwd : UnsafeRawBufferPointer, cert: String, encrypted_pa
     hash = Crypto.Insecure.SHA1.hash(data: account_no)   // BAD [NOT DETECTED]
     hash = Crypto.Insecure.SHA1.hash(data: credit_card_no)   // BAD
 
-    hash = Crypto.SHA256.hash(data: passwd)   // BAD [NOT DETECTED] not a computationally hard hash
-    hash = Crypto.SHA256.hash(data: cert)   // GOOD
-    hash = Crypto.SHA256.hash(data: account_no)   // GOOD
-    hash = Crypto.SHA256.hash(data: credit_card_no)   // GOOD
-    hash = Crypto.SHA256.hash(data: credit_card_no)   // GOOD
+    hash = Crypto.SHA256.hash(data: passwd)   // BAD [NOT DETECTED] not a computationally expensive hash
+    hash = Crypto.SHA256.hash(data: cert)   // GOOD, computationally expensive hash not required
+    hash = Crypto.SHA256.hash(data: account_no)   // GOOD, computationally expensive hash not required
+    hash = Crypto.SHA256.hash(data: credit_card_no)   // GOOD, computationally expensive hash not required
+    hash = Crypto.SHA256.hash(data: credit_card_no)   // GOOD, computationally expensive hash not required
 
-    hash = Crypto.SHA256.hash(data: passwd)   // BAD [NOT DETECTED] not a computationally hard hash
-    hash = Crypto.SHA384.hash(data: cert)   // GOOD
-    hash = Crypto.SHA384.hash(data: account_no)   // GOOD
-    hash = Crypto.SHA384.hash(data: credit_card_no)   // GOOD
-    hash = Crypto.SHA384.hash(data: credit_card_no)   // GOOD
+    hash = Crypto.SHA384.hash(data: passwd)   // BAD [NOT DETECTED] not a computationally expensive hash
+    hash = Crypto.SHA384.hash(data: cert)   // GOOD, computationally expensive hash not required
+    hash = Crypto.SHA384.hash(data: account_no)   // GOOD, computationally expensive hash not required
+    hash = Crypto.SHA384.hash(data: credit_card_no)   // GOOD, computationally expensive hash not required
+    hash = Crypto.SHA384.hash(data: credit_card_no)   // GOOD, computationally expensive hash not required
 
-    hash = Crypto.SHA256.hash(data: passwd)   // BAD [NOT DETECTED] not a computationally hard hash
-    hash = Crypto.SHA512.hash(data: cert)   // GOOD
-    hash = Crypto.SHA512.hash(data: account_no)   // GOOD
-    hash = Crypto.SHA512.hash(data: credit_card_no)   // GOOD
-    hash = Crypto.SHA512.hash(data: credit_card_no)   // GOOD
+    hash = Crypto.SHA512.hash(data: passwd)   // BAD [NOT DETECTED] not a computationally expensive hash
+    hash = Crypto.SHA512.hash(data: cert)   // GOOD, computationally expensive hash not required
+    hash = Crypto.SHA512.hash(data: account_no)   // GOOD, computationally expensive hash not required
+    hash = Crypto.SHA512.hash(data: credit_card_no)   // GOOD, computationally expensive hash not required
+    hash = Crypto.SHA512.hash(data: credit_card_no)   // GOOD, computationally expensive hash not required
 }
 
 func testMD5UpdateWithData(passwd : String, cert: String, encrypted_passwd : String, account_no : String, credit_card_no : String) {
@@ -105,7 +105,7 @@ func testSHA1UpdateWithData(passwd : String, cert: String, encrypted_passwd : St
 
 func testSHA256UpdateWithData(passwd : String, cert: String, encrypted_passwd : String, account_no : String, credit_card_no : String) {
     var hash = Crypto.SHA256()
-    hash.update(data: passwd)  // BAD [NOT DETECTED] not a computationally hard hash
+    hash.update(data: passwd)  // BAD [NOT DETECTED] not a computationally expensive hash
     hash.update(data: cert)  // GOOD
     hash.update(data: account_no)   // GOOD
     hash.update(data: credit_card_no)   // GOOD
@@ -113,7 +113,7 @@ func testSHA256UpdateWithData(passwd : String, cert: String, encrypted_passwd :
 
 func testSHA384UpdateWithData(passwd : String, cert: String, encrypted_passwd : String, account_no : String, credit_card_no : String) {
     var hash = Crypto.SHA384()
-    hash.update(data: passwd)  // BAD [NOT DETECTED] not a computationally hard hash
+    hash.update(data: passwd)  // BAD [NOT DETECTED] not a computationally expensive hash
     hash.update(data: cert)  // GOOD
     hash.update(data: account_no)   // GOOD
     hash.update(data: credit_card_no)   // GOOD
@@ -121,7 +121,7 @@ func testSHA384UpdateWithData(passwd : String, cert: String, encrypted_passwd :
 
 func testSHA512UpdateWithData(passwd : String, cert: String, encrypted_passwd : String, account_no : String, credit_card_no : String) {
     var hash = Crypto.SHA512()
-    hash.update(data: passwd)  // BAD [NOT DETECTED] not a computationally hard hash
+    hash.update(data: passwd)  // BAD [NOT DETECTED] not a computationally expensive hash
     hash.update(data: cert)  // GOOD
     hash.update(data: account_no)   // GOOD
     hash.update(data: credit_card_no)   // GOOD
@@ -147,7 +147,7 @@ func testSHA1UpdateWithUnsafeRawBufferPointer(passwd : UnsafeRawBufferPointer, c
 
 func testSHA256UpdateWithUnsafeRawBufferPointer(passwd : UnsafeRawBufferPointer, cert: UnsafeRawBufferPointer, encrypted_passwd : UnsafeRawBufferPointer, account_no : UnsafeRawBufferPointer, credit_card_no : UnsafeRawBufferPointer) {
     var hash = Crypto.SHA256()
-    hash.update(bufferPointer: passwd)  // BAD [NOT DETECTED] not a computationally hard hash
+    hash.update(bufferPointer: passwd)  // BAD [NOT DETECTED] not a computationally expensive hash
     hash.update(bufferPointer: cert)  // GOOD
     hash.update(bufferPointer: account_no)   // GOOD
     hash.update(bufferPointer: credit_card_no)   // GOOD
@@ -155,7 +155,7 @@ func testSHA256UpdateWithUnsafeRawBufferPointer(passwd : UnsafeRawBufferPointer,
 
 func testSHA384UpdateWithUnsafeRawBufferPointer(passwd : UnsafeRawBufferPointer, cert: UnsafeRawBufferPointer, encrypted_passwd : UnsafeRawBufferPointer, account_no : UnsafeRawBufferPointer, credit_card_no : UnsafeRawBufferPointer) {
     var hash = Crypto.SHA384()
-    hash.update(bufferPointer: passwd)  // BAD [NOT DETECTED] not a computationally hard hash
+    hash.update(bufferPointer: passwd)  // BAD [NOT DETECTED] not a computationally expensive hash
     hash.update(bufferPointer: cert)  // GOOD
     hash.update(bufferPointer: account_no)   // GOOD
     hash.update(bufferPointer: credit_card_no)   // GOOD
@@ -163,7 +163,7 @@ func testSHA384UpdateWithUnsafeRawBufferPointer(passwd : UnsafeRawBufferPointer,
 
 func testSHA512UpdateWithUnsafeRawBufferPointer(passwd : UnsafeRawBufferPointer, cert: UnsafeRawBufferPointer, encrypted_passwd : UnsafeRawBufferPointer, account_no : UnsafeRawBufferPointer, credit_card_no : UnsafeRawBufferPointer) {
     var hash = Crypto.SHA512()
-    hash.update(bufferPointer: passwd)  // BAD [NOT DETECTED] not a computationally hard hash
+    hash.update(bufferPointer: passwd)  // BAD [NOT DETECTED] not a computationally expensive hash
     hash.update(bufferPointer: cert)  // GOOD
     hash.update(bufferPointer: account_no)   // GOOD
     hash.update(bufferPointer: credit_card_no)   // GOOD

From c9ea10b1ef0fdcd39d9aaca080b065e14c57267c Mon Sep 17 00:00:00 2001
From: Erik Krogh Kristensen <erik-krogh@github.com>
Date: Mon, 12 Sep 2022 12:00:57 +0200
Subject: [PATCH 094/203] revise some Python names

Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
---
 python/ql/lib/semmle/python/frameworks/Multidict.qll | 5 +----
 python/ql/lib/semmle/python/frameworks/Stdlib.qll    | 2 +-
 python/ql/lib/semmle/python/frameworks/Yarl.qll      | 2 +-
 3 files changed, 3 insertions(+), 6 deletions(-)

diff --git a/python/ql/lib/semmle/python/frameworks/Multidict.qll b/python/ql/lib/semmle/python/frameworks/Multidict.qll
index 71c1a9cd995..06700e28347 100644
--- a/python/ql/lib/semmle/python/frameworks/Multidict.qll
+++ b/python/ql/lib/semmle/python/frameworks/Multidict.qll
@@ -16,7 +16,7 @@ private import semmle.python.frameworks.internal.InstanceTaintStepsHelper
  * Provides models for the `multidict` PyPI package.
  * See https://multidict.readthedocs.io/en/stable/.
  */
-module MultiDict {
+module Multidict {
   /**
    * Provides models for a `MultiDictProxy` class:
    * - `multidict.MultiDictProxy`
@@ -88,6 +88,3 @@ module MultiDict {
     }
   }
 }
-
-/** DEPRECATED: Alias for MultiDict */
-deprecated module Multidict = MultiDict;
diff --git a/python/ql/lib/semmle/python/frameworks/Stdlib.qll b/python/ql/lib/semmle/python/frameworks/Stdlib.qll
index a6f476abecd..57d38c6c433 100644
--- a/python/ql/lib/semmle/python/frameworks/Stdlib.qll
+++ b/python/ql/lib/semmle/python/frameworks/Stdlib.qll
@@ -1877,7 +1877,7 @@ private module StdlibPrivate {
   API::Node http() { result = API::moduleImport("http") }
 
   /** Provides models for the `http` module. */
-  module StdHttp {
+  module StdlibHttp {
     // -------------------------------------------------------------------------
     // http.server
     // -------------------------------------------------------------------------
diff --git a/python/ql/lib/semmle/python/frameworks/Yarl.qll b/python/ql/lib/semmle/python/frameworks/Yarl.qll
index 4a352431001..5ea78c1ac8e 100644
--- a/python/ql/lib/semmle/python/frameworks/Yarl.qll
+++ b/python/ql/lib/semmle/python/frameworks/Yarl.qll
@@ -102,7 +102,7 @@ module Yarl {
     }
 
     /** An attribute read on a `yarl.URL` that is a `MultiDictProxy` instance. */
-    class YarlUrlMultiDictProxyInstance extends MultiDict::MultiDictProxy::InstanceSource {
+    class YarlUrlMultiDictProxyInstance extends Multidict::MultiDictProxy::InstanceSource {
       YarlUrlMultiDictProxyInstance() {
         this.(DataFlow::AttrRead).getObject() = Yarl::Url::instance() and
         this.(DataFlow::AttrRead).getAttributeName() = "query"

From 80158f803525c962a39d4bb9bd84bf29e09db8fe Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Mon, 12 Sep 2022 12:08:30 +0200
Subject: [PATCH 095/203] fix some python uses of renamed features

---
 python/ql/lib/semmle/python/frameworks/Aiohttp.qll | 2 +-
 python/ql/lib/semmle/python/frameworks/Stdlib.qll  | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/python/ql/lib/semmle/python/frameworks/Aiohttp.qll b/python/ql/lib/semmle/python/frameworks/Aiohttp.qll
index f067ecf6eee..2557b544ee1 100644
--- a/python/ql/lib/semmle/python/frameworks/Aiohttp.qll
+++ b/python/ql/lib/semmle/python/frameworks/Aiohttp.qll
@@ -319,7 +319,7 @@ module AiohttpWebModel {
     }
 
     /** An attribute read on an `aiohttp.web.Request` that is a `MultiDictProxy` instance. */
-    class AiohttpRequestMultiDictProxyInstances extends MultiDict::MultiDictProxy::InstanceSource {
+    class AiohttpRequestMultiDictProxyInstances extends Multidict::MultiDictProxy::InstanceSource {
       AiohttpRequestMultiDictProxyInstances() {
         this.(DataFlow::AttrRead).getObject() = Request::instance() and
         this.(DataFlow::AttrRead).getAttributeName() in ["query", "headers"]
diff --git a/python/ql/lib/semmle/python/frameworks/Stdlib.qll b/python/ql/lib/semmle/python/frameworks/Stdlib.qll
index 57d38c6c433..38f9aca1ff0 100644
--- a/python/ql/lib/semmle/python/frameworks/Stdlib.qll
+++ b/python/ql/lib/semmle/python/frameworks/Stdlib.qll
@@ -1944,9 +1944,9 @@ private module StdlibPrivate {
           SimpleHttpServer::SimpleHttpRequestHandler::classRef(),
           CgiHttpServer::CgiHttpRequestHandler::classRef(),
           // Python 3
-          StdHttp::Server::BaseHttpRequestHandler::classRef(),
-          StdHttp::Server::SimpleHttpRequestHandler::classRef(),
-          StdHttp::Server::CgiHttpRequestHandler::classRef()
+          StdlibHttp::Server::BaseHttpRequestHandler::classRef(),
+          StdlibHttp::Server::SimpleHttpRequestHandler::classRef(),
+          StdlibHttp::Server::CgiHttpRequestHandler::classRef()
         ].getASubclass*()
     }
 

From bae44906201bf5548fa46388fbca326abcb69533 Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Mon, 12 Sep 2022 12:12:18 +0200
Subject: [PATCH 096/203] add change-note

---
 cpp/ql/lib/change-notes/2022-09-12-uppercase.md        | 5 +++++
 csharp/ql/lib/change-notes/2022-09-12-uppercase.md     | 5 +++++
 go/ql/lib/change-notes/2022-09-12-uppercase.md         | 5 +++++
 javascript/ql/lib/change-notes/2022-09-12-uppercase.md | 5 +++++
 python/ql/lib/change-notes/2022-09-12-uppercase.md     | 5 +++++
 ruby/ql/lib/change-notes/2022-09-12-uppercase.md       | 5 +++++
 6 files changed, 30 insertions(+)
 create mode 100644 cpp/ql/lib/change-notes/2022-09-12-uppercase.md
 create mode 100644 csharp/ql/lib/change-notes/2022-09-12-uppercase.md
 create mode 100644 go/ql/lib/change-notes/2022-09-12-uppercase.md
 create mode 100644 javascript/ql/lib/change-notes/2022-09-12-uppercase.md
 create mode 100644 python/ql/lib/change-notes/2022-09-12-uppercase.md
 create mode 100644 ruby/ql/lib/change-notes/2022-09-12-uppercase.md

diff --git a/cpp/ql/lib/change-notes/2022-09-12-uppercase.md b/cpp/ql/lib/change-notes/2022-09-12-uppercase.md
new file mode 100644
index 00000000000..996861f1c2c
--- /dev/null
+++ b/cpp/ql/lib/change-notes/2022-09-12-uppercase.md
@@ -0,0 +1,5 @@
+---
+category: deprecated
+---
+* Some classes/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
+  The old name still exists as a deprecated alias.
\ No newline at end of file
diff --git a/csharp/ql/lib/change-notes/2022-09-12-uppercase.md b/csharp/ql/lib/change-notes/2022-09-12-uppercase.md
new file mode 100644
index 00000000000..996861f1c2c
--- /dev/null
+++ b/csharp/ql/lib/change-notes/2022-09-12-uppercase.md
@@ -0,0 +1,5 @@
+---
+category: deprecated
+---
+* Some classes/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
+  The old name still exists as a deprecated alias.
\ No newline at end of file
diff --git a/go/ql/lib/change-notes/2022-09-12-uppercase.md b/go/ql/lib/change-notes/2022-09-12-uppercase.md
new file mode 100644
index 00000000000..996861f1c2c
--- /dev/null
+++ b/go/ql/lib/change-notes/2022-09-12-uppercase.md
@@ -0,0 +1,5 @@
+---
+category: deprecated
+---
+* Some classes/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
+  The old name still exists as a deprecated alias.
\ No newline at end of file
diff --git a/javascript/ql/lib/change-notes/2022-09-12-uppercase.md b/javascript/ql/lib/change-notes/2022-09-12-uppercase.md
new file mode 100644
index 00000000000..996861f1c2c
--- /dev/null
+++ b/javascript/ql/lib/change-notes/2022-09-12-uppercase.md
@@ -0,0 +1,5 @@
+---
+category: deprecated
+---
+* Some classes/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
+  The old name still exists as a deprecated alias.
\ No newline at end of file
diff --git a/python/ql/lib/change-notes/2022-09-12-uppercase.md b/python/ql/lib/change-notes/2022-09-12-uppercase.md
new file mode 100644
index 00000000000..996861f1c2c
--- /dev/null
+++ b/python/ql/lib/change-notes/2022-09-12-uppercase.md
@@ -0,0 +1,5 @@
+---
+category: deprecated
+---
+* Some classes/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
+  The old name still exists as a deprecated alias.
\ No newline at end of file
diff --git a/ruby/ql/lib/change-notes/2022-09-12-uppercase.md b/ruby/ql/lib/change-notes/2022-09-12-uppercase.md
new file mode 100644
index 00000000000..996861f1c2c
--- /dev/null
+++ b/ruby/ql/lib/change-notes/2022-09-12-uppercase.md
@@ -0,0 +1,5 @@
+---
+category: deprecated
+---
+* Some classes/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
+  The old name still exists as a deprecated alias.
\ No newline at end of file

From 98243118b269740f1b171a30a6f05843f2ff1ae9 Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Mon, 12 Sep 2022 13:41:07 +0200
Subject: [PATCH 097/203] recognize a list of bad strings as a sanitizer for
 js/prototype-polluting-assignment

---
 .../PrototypePollutingAssignmentQuery.qll      | 18 ++++++++++++++++++
 .../PrototypePollutingAssignment.expected      | 14 ++++++++++++++
 .../PrototypePollutingAssignment/tst.js        | 14 ++++++++++++++
 3 files changed, 46 insertions(+)

diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qll
index 23abee9db2d..047d21574e7 100644
--- a/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qll
+++ b/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qll
@@ -275,3 +275,21 @@ private class IncludesCheck extends TaintTracking::LabeledSanitizerGuardNode, In
     outcome = this.getPolarity().booleanNot()
   }
 }
+
+/**
+ * A sanitizer guard that checks tests whether `x` is included in a list of strings.
+ */
+private class StringListCheck extends TaintTracking::SanitizerGuardNode, InclusionTest {
+  StringListCheck() {
+    this.getContainerNode()
+        .getALocalSource()
+        .(DataFlow::ArrayCreationNode)
+        .getAnElement()
+        .mayHaveStringValue("__proto__")
+  }
+
+  override predicate sanitizes(boolean outcome, Expr e) {
+    e = this.getContainedNode().asExpr() and
+    outcome = super.getPolarity().booleanNot()
+  }
+}
diff --git a/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingAssignment/PrototypePollutingAssignment.expected b/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingAssignment/PrototypePollutingAssignment.expected
index 662b3315c80..92fdfa8f889 100644
--- a/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingAssignment/PrototypePollutingAssignment.expected
+++ b/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingAssignment/PrototypePollutingAssignment.expected
@@ -165,6 +165,13 @@ nodes
 | tst.js:97:9:97:19 | req.query.x |
 | tst.js:97:9:97:19 | req.query.x |
 | tst.js:97:9:97:45 | req.que ... /g, '') |
+| tst.js:102:9:102:38 | taint |
+| tst.js:102:17:102:38 | String( ... y.data) |
+| tst.js:102:24:102:37 | req.query.data |
+| tst.js:102:24:102:37 | req.query.data |
+| tst.js:105:5:105:17 | object[taint] |
+| tst.js:105:5:105:17 | object[taint] |
+| tst.js:105:12:105:16 | taint |
 edges
 | lib.js:1:38:1:40 | obj | lib.js:6:7:6:9 | obj |
 | lib.js:1:38:1:40 | obj | lib.js:6:7:6:9 | obj |
@@ -318,6 +325,12 @@ edges
 | tst.js:97:9:97:19 | req.query.x | tst.js:97:9:97:45 | req.que ... /g, '') |
 | tst.js:97:9:97:45 | req.que ... /g, '') | tst.js:97:5:97:46 | obj[req ... g, '')] |
 | tst.js:97:9:97:45 | req.que ... /g, '') | tst.js:97:5:97:46 | obj[req ... g, '')] |
+| tst.js:102:9:102:38 | taint | tst.js:105:12:105:16 | taint |
+| tst.js:102:17:102:38 | String( ... y.data) | tst.js:102:9:102:38 | taint |
+| tst.js:102:24:102:37 | req.query.data | tst.js:102:17:102:38 | String( ... y.data) |
+| tst.js:102:24:102:37 | req.query.data | tst.js:102:17:102:38 | String( ... y.data) |
+| tst.js:105:12:105:16 | taint | tst.js:105:5:105:17 | object[taint] |
+| tst.js:105:12:105:16 | taint | tst.js:105:5:105:17 | object[taint] |
 #select
 | lib.js:6:7:6:9 | obj | lib.js:1:43:1:46 | path | lib.js:6:7:6:9 | obj | This assignment may alter Object.prototype if a malicious '__proto__' string is injected from $@. | lib.js:1:43:1:46 | path | library input |
 | lib.js:15:3:15:14 | obj[path[0]] | lib.js:14:38:14:41 | path | lib.js:15:3:15:14 | obj[path[0]] | This assignment may alter Object.prototype if a malicious '__proto__' string is injected from $@. | lib.js:14:38:14:41 | path | library input |
@@ -342,3 +355,4 @@ edges
 | tst.js:87:9:87:21 | object[taint] | tst.js:77:24:77:37 | req.query.data | tst.js:87:9:87:21 | object[taint] | This assignment may alter Object.prototype if a malicious '__proto__' string is injected from $@. | tst.js:77:24:77:37 | req.query.data | user controlled input |
 | tst.js:94:5:94:37 | obj[req ... ', '')] | tst.js:94:9:94:19 | req.query.x | tst.js:94:5:94:37 | obj[req ... ', '')] | This assignment may alter Object.prototype if a malicious '__proto__' string is injected from $@. | tst.js:94:9:94:19 | req.query.x | user controlled input |
 | tst.js:97:5:97:46 | obj[req ... g, '')] | tst.js:97:9:97:19 | req.query.x | tst.js:97:5:97:46 | obj[req ... g, '')] | This assignment may alter Object.prototype if a malicious '__proto__' string is injected from $@. | tst.js:97:9:97:19 | req.query.x | user controlled input |
+| tst.js:105:5:105:17 | object[taint] | tst.js:102:24:102:37 | req.query.data | tst.js:105:5:105:17 | object[taint] | This assignment may alter Object.prototype if a malicious '__proto__' string is injected from $@. | tst.js:102:24:102:37 | req.query.data | user controlled input |
diff --git a/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingAssignment/tst.js b/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingAssignment/tst.js
index 61e2ff7300b..517d7d10230 100644
--- a/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingAssignment/tst.js
+++ b/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingAssignment/tst.js
@@ -97,3 +97,17 @@ app.get('/foo', (req, res) => {
     obj[req.query.x.replace(/__proto__/g, '')].x = 'foo'; // NOT OK - "__pr__proto__oto__"
     obj[req.query.x.replace('o', '0')].x = 'foo'; // OK
 });
+
+app.get('/bar', (req, res) => {
+    let taint = String(req.query.data);
+
+    let object = {};
+    object[taint][taint] = taint; // NOT OK
+    
+    const bad = ["__proto__", "constructor"];
+    if (bad.includes(taint)) {
+        return;
+    }
+
+    object[taint][taint] = taint; // OK
+});
\ No newline at end of file

From 568eb3a118a060b1924bbe7ea48eb207954e336c Mon Sep 17 00:00:00 2001
From: AlexDenisov <alexdenisov@github.com>
Date: Mon, 12 Sep 2022 14:00:29 +0200
Subject: [PATCH 098/203] Update
 swift/ql/src/queries/Security/CWE-757/InsecureTLS.qhelp

Co-authored-by: hubwriter <hubwriter@github.com>
---
 swift/ql/src/queries/Security/CWE-757/InsecureTLS.qhelp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/swift/ql/src/queries/Security/CWE-757/InsecureTLS.qhelp b/swift/ql/src/queries/Security/CWE-757/InsecureTLS.qhelp
index b0450580131..aa403b0153b 100644
--- a/swift/ql/src/queries/Security/CWE-757/InsecureTLS.qhelp
+++ b/swift/ql/src/queries/Security/CWE-757/InsecureTLS.qhelp
@@ -12,7 +12,7 @@
 </recommendation>
 <example>
 
-<p>Specify newer <code>tls_protocol_version_t</code> explicitly, or omit it completely as the OS will use secure defaults.</p>
+<p>Specify a newer <code>tls_protocol_version_t</code> explicitly, or omit it completely as the OS will use secure defaults.</p>
 
 <sample src="SecureTLS.swift" />
 

From 03cc4a2f7a488e00df86c22c2fb869f49f145097 Mon Sep 17 00:00:00 2001
From: Rasmus Wriedt Larsen <rasmuswl@github.com>
Date: Mon, 12 Sep 2022 14:35:20 +0200
Subject: [PATCH 099/203] Ruby: Fix typo in QLDoc

---
 ruby/ql/lib/codeql/ruby/dataflow/internal/DataFlowPrivate.qll | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ruby/ql/lib/codeql/ruby/dataflow/internal/DataFlowPrivate.qll b/ruby/ql/lib/codeql/ruby/dataflow/internal/DataFlowPrivate.qll
index acca30eb219..675009d0062 100644
--- a/ruby/ql/lib/codeql/ruby/dataflow/internal/DataFlowPrivate.qll
+++ b/ruby/ql/lib/codeql/ruby/dataflow/internal/DataFlowPrivate.qll
@@ -613,7 +613,7 @@ private module ParameterNodes {
    * where direct keyword matching is possible, since we construct a synthesized hash
    * splat argument (`SynthHashSplatArgumentNode`) at the call site, which means that
    * `taint(1)` will flow into `p1` both via normal keyword matching and via the synthesized
-   * nodes (and similarly for `p2`). However, this redunancy is OK since
+   * nodes (and similarly for `p2`). However, this redundancy is OK since
    *  (a) it means that type-tracking through keyword arguments also works in most cases,
    *  (b) read/store steps can be avoided when direct keyword matching is possible, and
    *      hence access path limits are not a concern, and

From 4296ac1ac0aa24ef3ac41641cf60e292a63fb643 Mon Sep 17 00:00:00 2001
From: Rasmus Wriedt Larsen <rasmuswl@github.com>
Date: Mon, 12 Sep 2022 15:03:13 +0200
Subject: [PATCH 100/203] Python: Allow `CallNode.getArgByName` for keyword
 args after `**kwargs`

---
 .../ql/lib/change-notes/2022-09-12-CallNode-getArgByName.md   | 4 ++++
 python/ql/lib/semmle/python/Flow.qll                          | 2 +-
 .../ql/test/experimental/dataflow/coverage/argumentPassing.py | 2 +-
 3 files changed, 6 insertions(+), 2 deletions(-)
 create mode 100644 python/ql/lib/change-notes/2022-09-12-CallNode-getArgByName.md

diff --git a/python/ql/lib/change-notes/2022-09-12-CallNode-getArgByName.md b/python/ql/lib/change-notes/2022-09-12-CallNode-getArgByName.md
new file mode 100644
index 00000000000..4bcde8386a8
--- /dev/null
+++ b/python/ql/lib/change-notes/2022-09-12-CallNode-getArgByName.md
@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* Changed `CallNode.getArgByName` such that it has results for keyword arguments given after a dictionary unpacking argument, as the `bar=2` argument in `func(foo=1, **kwargs, bar=2)`.
diff --git a/python/ql/lib/semmle/python/Flow.qll b/python/ql/lib/semmle/python/Flow.qll
index ce886151135..b63a958efe6 100644
--- a/python/ql/lib/semmle/python/Flow.qll
+++ b/python/ql/lib/semmle/python/Flow.qll
@@ -376,7 +376,7 @@ class CallNode extends ControlFlowNode {
   ControlFlowNode getArgByName(string name) {
     exists(Call c, Keyword k |
       this.getNode() = c and
-      k = c.getAKeyword() and
+      k = c.getANamedArg() and
       k.getValue() = result.getNode() and
       k.getArg() = name and
       result.getBasicBlock().dominates(this.getBasicBlock())
diff --git a/python/ql/test/experimental/dataflow/coverage/argumentPassing.py b/python/ql/test/experimental/dataflow/coverage/argumentPassing.py
index 1962bf2889e..92b466cd25a 100644
--- a/python/ql/test/experimental/dataflow/coverage/argumentPassing.py
+++ b/python/ql/test/experimental/dataflow/coverage/argumentPassing.py
@@ -94,7 +94,7 @@ def with_multiple_kw_args(a, b, c):
 def test_multiple_kw_args():
     with_multiple_kw_args(b=arg2, c=arg3, a=arg1)  #$ arg1 arg2 arg3
     with_multiple_kw_args(arg1, *(arg2,), arg3)  #$ arg1 MISSING: arg2 arg3
-    with_multiple_kw_args(arg1, **{"c": arg3}, b=arg2)  #$ arg1 arg3 func=with_multiple_kw_args MISSING: arg2
+    with_multiple_kw_args(arg1, **{"c": arg3}, b=arg2)  #$ arg1 arg2 arg3 func=with_multiple_kw_args MISSING:
     with_multiple_kw_args(**{"b": arg2}, **{"c": arg3}, **{"a": arg1})  #$ arg1 arg2 arg3 func=with_multiple_kw_args
 
 

From 842af4bf743e72d38af7820885f783454a86204f Mon Sep 17 00:00:00 2001
From: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
Date: Mon, 12 Sep 2022 14:25:45 +0100
Subject: [PATCH 101/203] C++: Specifically suggest DataFlow as an alternative.

---
 cpp/ql/lib/semmle/code/cpp/pointsto/PointsTo.qll | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/cpp/ql/lib/semmle/code/cpp/pointsto/PointsTo.qll b/cpp/ql/lib/semmle/code/cpp/pointsto/PointsTo.qll
index ed42aac3cbb..542ce985060 100644
--- a/cpp/ql/lib/semmle/code/cpp/pointsto/PointsTo.qll
+++ b/cpp/ql/lib/semmle/code/cpp/pointsto/PointsTo.qll
@@ -21,7 +21,8 @@
  * equivalence classes are called "points-to sets".
  *
  * WARNING: This library may perform poorly on very large projects.
- * Consider using another library such as ??? instead.
+ * Consider using another library such as `semmle.code.cpp.dataflow.DataFlow`
+ * instead.
  */
 
 import semmle.code.cpp.commons.File

From 05ef76cbca7b30676406fd9ed50305a249187a38 Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Mon, 12 Sep 2022 15:41:28 +0200
Subject: [PATCH 102/203] add change-note

---
 python/ql/lib/change-notes/2022-09-12-deprecate-pointsto.md | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 python/ql/lib/change-notes/2022-09-12-deprecate-pointsto.md

diff --git a/python/ql/lib/change-notes/2022-09-12-deprecate-pointsto.md b/python/ql/lib/change-notes/2022-09-12-deprecate-pointsto.md
new file mode 100644
index 00000000000..e3b67321a40
--- /dev/null
+++ b/python/ql/lib/change-notes/2022-09-12-deprecate-pointsto.md
@@ -0,0 +1,4 @@
+---
+category: deprecated
+---
+* Some unused predicates in `SsaDefinitions.qll`, `TObject.qll`, `protocols.qll`, and the `pointsto/` folder have been deprecated.
\ No newline at end of file

From 47480acba5d227b800fe402f3b3fd67e436ab6ee Mon Sep 17 00:00:00 2001
From: James Fletcher <42464962+jf205@users.noreply.github.com>
Date: Mon, 12 Sep 2022 15:53:54 +0100
Subject: [PATCH 103/203] Apply suggestions from code review

Co-authored-by: Felicity Chapman <felicitymay@github.com>
---
 docs/codeql/codeql-cli/creating-codeql-databases.rst | 4 ++--
 docs/codeql/reusables/download-github-database.rst   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/codeql/codeql-cli/creating-codeql-databases.rst b/docs/codeql/codeql-cli/creating-codeql-databases.rst
index 334a5241b47..0ea4f1ef4b5 100644
--- a/docs/codeql/codeql-cli/creating-codeql-databases.rst
+++ b/docs/codeql/codeql-cli/creating-codeql-databases.rst
@@ -379,8 +379,8 @@ The following example shows how you could use indirect build tracing in an Azure
        # `codeql database analyze`
        # then `codeql github upload-results` ...
 
-Obtaining databases from GitHub.com
------------------------------------
+Downloading databases from GitHub.com
+-------------------------------------
 
 .. include:: ../reusables/download-github-database.rst
    
diff --git a/docs/codeql/reusables/download-github-database.rst b/docs/codeql/reusables/download-github-database.rst
index c95482fa6a5..0b1325fc5fe 100644
--- a/docs/codeql/reusables/download-github-database.rst
+++ b/docs/codeql/reusables/download-github-database.rst
@@ -1,4 +1,4 @@
-GitHub also stores CodeQL databases for over 200,000 repos on GitHub.com, which you can download using the API. The list of repos is constantly growing and evolving to make sure that it includes the most interesting codebases for security research.
+GitHub stores CodeQL databases for over 200,000 repos on GitHub.com, which you can download using the REST API. The list of repos is constantly growing and evolving to make sure that it includes the most interesting codebases for security research.
 
 To download a database from GitHub.com using the `GitHub CLI <https://cli.github.com/manual/gh_api>`__, use the following command:: 
 

From bb1c088fe08330879da7aa74dcbf8751a02674eb Mon Sep 17 00:00:00 2001
From: Mathias Vorreiter Pedersen <mathiasvp@github.com>
Date: Mon, 12 Sep 2022 15:52:27 +0100
Subject: [PATCH 104/203] C++: Undo changes to iterator models.

---
 .../cpp/models/implementations/Iterator.qll   |  2 +-
 .../cpp/models/implementations/StdString.qll  |  2 +-
 .../dataflow/taint-tests/localTaint.expected  | 36 +++++++++----------
 3 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/cpp/ql/lib/semmle/code/cpp/models/implementations/Iterator.qll b/cpp/ql/lib/semmle/code/cpp/models/implementations/Iterator.qll
index 8d0e97dc2ec..2fa9803d053 100644
--- a/cpp/ql/lib/semmle/code/cpp/models/implementations/Iterator.qll
+++ b/cpp/ql/lib/semmle/code/cpp/models/implementations/Iterator.qll
@@ -223,7 +223,7 @@ private class IteratorCrementMemberOperator extends MemberFunction, DataFlowFunc
     output.isQualifierObject()
     or
     input.isQualifierObject() and
-    output.isReturnValue()
+    output.isReturnValueDeref()
   }
 
   override predicate hasTaintFlow(FunctionInput input, FunctionOutput output) {
diff --git a/cpp/ql/lib/semmle/code/cpp/models/implementations/StdString.qll b/cpp/ql/lib/semmle/code/cpp/models/implementations/StdString.qll
index b5c18a8e09f..3d2eda59799 100644
--- a/cpp/ql/lib/semmle/code/cpp/models/implementations/StdString.qll
+++ b/cpp/ql/lib/semmle/code/cpp/models/implementations/StdString.qll
@@ -176,7 +176,7 @@ private class StdStringAppend extends TaintFunction {
     ) and
     (
       output.isQualifierObject() or
-      output.isReturnValue()
+      output.isReturnValueDeref()
     )
     or
     // reverse flow from returned reference to the qualifier (for writes to
diff --git a/cpp/ql/test/library-tests/dataflow/taint-tests/localTaint.expected b/cpp/ql/test/library-tests/dataflow/taint-tests/localTaint.expected
index 7029593ba22..07bf9a85cf4 100644
--- a/cpp/ql/test/library-tests/dataflow/taint-tests/localTaint.expected
+++ b/cpp/ql/test/library-tests/dataflow/taint-tests/localTaint.expected
@@ -3488,7 +3488,7 @@
 | standalone_iterators.cpp:41:19:41:19 | call to operator++ | standalone_iterators.cpp:41:10:41:10 | call to operator* | TAINT |
 | standalone_iterators.cpp:42:12:42:12 | call to operator++ | standalone_iterators.cpp:42:10:42:10 | call to operator* | TAINT |
 | standalone_iterators.cpp:42:14:42:20 | ref arg source1 | standalone_iterators.cpp:39:45:39:51 | source1 |  |
-| standalone_iterators.cpp:42:14:42:20 | source1 | standalone_iterators.cpp:42:12:42:12 | call to operator++ | TAINT |
+| standalone_iterators.cpp:42:14:42:20 | source1 | standalone_iterators.cpp:42:12:42:12 | call to operator++ |  |
 | standalone_iterators.cpp:45:39:45:45 | source1 | standalone_iterators.cpp:45:39:45:45 | source1 |  |
 | standalone_iterators.cpp:45:39:45:45 | source1 | standalone_iterators.cpp:46:11:46:17 | source1 |  |
 | standalone_iterators.cpp:45:39:45:45 | source1 | standalone_iterators.cpp:47:12:47:18 | source1 |  |
@@ -3500,7 +3500,7 @@
 | standalone_iterators.cpp:47:19:47:19 | call to operator++ | standalone_iterators.cpp:47:10:47:10 | call to operator* | TAINT |
 | standalone_iterators.cpp:48:12:48:12 | call to operator++ | standalone_iterators.cpp:48:10:48:10 | call to operator* | TAINT |
 | standalone_iterators.cpp:48:14:48:20 | ref arg source1 | standalone_iterators.cpp:45:39:45:45 | source1 |  |
-| standalone_iterators.cpp:48:14:48:20 | source1 | standalone_iterators.cpp:48:12:48:12 | call to operator++ | TAINT |
+| standalone_iterators.cpp:48:14:48:20 | source1 | standalone_iterators.cpp:48:12:48:12 | call to operator++ |  |
 | standalone_iterators.cpp:51:37:51:43 | source1 | standalone_iterators.cpp:52:11:52:17 | source1 |  |
 | standalone_iterators.cpp:51:37:51:43 | source1 | standalone_iterators.cpp:53:12:53:18 | source1 |  |
 | standalone_iterators.cpp:51:37:51:43 | source1 | standalone_iterators.cpp:54:14:54:20 | source1 |  |
@@ -3788,7 +3788,7 @@
 | string.cpp:120:16:120:24 | call to basic_string | string.cpp:125:50:125:50 | s |  |
 | string.cpp:120:16:120:24 | call to basic_string | string.cpp:129:16:129:16 | s |  |
 | string.cpp:121:15:121:15 | (__begin) | string.cpp:121:15:121:15 | call to operator* | TAINT |
-| string.cpp:121:15:121:15 | (__begin) | string.cpp:121:15:121:15 | call to operator++ | TAINT |
+| string.cpp:121:15:121:15 | (__begin) | string.cpp:121:15:121:15 | call to operator++ |  |
 | string.cpp:121:15:121:15 | (__end) | string.cpp:121:15:121:15 | call to iterator |  |
 | string.cpp:121:15:121:15 | (__range) | string.cpp:121:15:121:15 | call to begin | TAINT |
 | string.cpp:121:15:121:15 | (__range) | string.cpp:121:15:121:15 | call to end | TAINT |
@@ -3816,7 +3816,7 @@
 | string.cpp:125:50:125:50 | ref arg s | string.cpp:125:50:125:50 | s |  |
 | string.cpp:125:50:125:50 | ref arg s | string.cpp:129:16:129:16 | s |  |
 | string.cpp:125:50:125:50 | s | string.cpp:125:52:125:54 | call to end | TAINT |
-| string.cpp:125:61:125:62 | it | string.cpp:125:59:125:59 | call to operator++ | TAINT |
+| string.cpp:125:61:125:62 | it | string.cpp:125:59:125:59 | call to operator++ |  |
 | string.cpp:125:61:125:62 | ref arg it | string.cpp:125:44:125:45 | it |  |
 | string.cpp:125:61:125:62 | ref arg it | string.cpp:125:61:125:62 | it |  |
 | string.cpp:125:61:125:62 | ref arg it | string.cpp:126:9:126:10 | it |  |
@@ -3825,7 +3825,7 @@
 | string.cpp:126:9:126:10 | ref arg it | string.cpp:125:61:125:62 | it |  |
 | string.cpp:126:9:126:10 | ref arg it | string.cpp:126:9:126:10 | it |  |
 | string.cpp:129:16:129:16 | (__begin) | string.cpp:129:16:129:16 | call to operator* | TAINT |
-| string.cpp:129:16:129:16 | (__begin) | string.cpp:129:16:129:16 | call to operator++ | TAINT |
+| string.cpp:129:16:129:16 | (__begin) | string.cpp:129:16:129:16 | call to operator++ |  |
 | string.cpp:129:16:129:16 | (__end) | string.cpp:129:16:129:16 | call to iterator |  |
 | string.cpp:129:16:129:16 | (__range) | string.cpp:129:16:129:16 | call to begin | TAINT |
 | string.cpp:129:16:129:16 | (__range) | string.cpp:129:16:129:16 | call to end | TAINT |
@@ -3847,7 +3847,7 @@
 | string.cpp:133:28:133:33 | call to source | string.cpp:133:28:133:36 | call to basic_string | TAINT |
 | string.cpp:133:28:133:36 | call to basic_string | string.cpp:134:22:134:28 | const_s |  |
 | string.cpp:134:22:134:22 | (__begin) | string.cpp:134:22:134:22 | call to operator* | TAINT |
-| string.cpp:134:22:134:22 | (__begin) | string.cpp:134:22:134:22 | call to operator++ | TAINT |
+| string.cpp:134:22:134:22 | (__begin) | string.cpp:134:22:134:22 | call to operator++ |  |
 | string.cpp:134:22:134:22 | (__range) | string.cpp:134:22:134:22 | call to begin | TAINT |
 | string.cpp:134:22:134:22 | (__range) | string.cpp:134:22:134:22 | call to end | TAINT |
 | string.cpp:134:22:134:22 | call to begin | string.cpp:134:22:134:22 | (__begin) |  |
@@ -4259,12 +4259,12 @@
 | string.cpp:398:8:398:9 | i2 | string.cpp:399:12:399:13 | i3 |  |
 | string.cpp:399:10:399:10 | call to operator++ | string.cpp:399:8:399:8 | call to operator* | TAINT |
 | string.cpp:399:10:399:10 | ref arg call to operator++ | string.cpp:399:12:399:13 | ref arg i3 |  |
-| string.cpp:399:12:399:13 | i3 | string.cpp:399:10:399:10 | call to operator++ | TAINT |
+| string.cpp:399:12:399:13 | i3 | string.cpp:399:10:399:10 | call to operator++ |  |
 | string.cpp:400:8:400:9 | i2 | string.cpp:400:3:400:9 | ... = ... |  |
 | string.cpp:400:8:400:9 | i2 | string.cpp:401:12:401:13 | i4 |  |
 | string.cpp:401:10:401:10 | call to operator-- | string.cpp:401:8:401:8 | call to operator* | TAINT |
 | string.cpp:401:10:401:10 | ref arg call to operator-- | string.cpp:401:12:401:13 | ref arg i4 |  |
-| string.cpp:401:12:401:13 | i4 | string.cpp:401:10:401:10 | call to operator-- | TAINT |
+| string.cpp:401:12:401:13 | i4 | string.cpp:401:10:401:10 | call to operator-- |  |
 | string.cpp:402:8:402:9 | i2 | string.cpp:402:3:402:9 | ... = ... |  |
 | string.cpp:402:8:402:9 | i2 | string.cpp:403:3:403:4 | i5 |  |
 | string.cpp:402:8:402:9 | i2 | string.cpp:404:9:404:10 | i5 |  |
@@ -4293,7 +4293,7 @@
 | string.cpp:413:11:413:13 | call to end | string.cpp:413:3:413:15 | ... = ... |  |
 | string.cpp:413:11:413:13 | call to end | string.cpp:414:5:414:6 | i9 |  |
 | string.cpp:413:11:413:13 | call to end | string.cpp:415:9:415:10 | i9 |  |
-| string.cpp:414:5:414:6 | i9 | string.cpp:414:3:414:3 | call to operator-- | TAINT |
+| string.cpp:414:5:414:6 | i9 | string.cpp:414:3:414:3 | call to operator-- |  |
 | string.cpp:414:5:414:6 | ref arg i9 | string.cpp:415:9:415:10 | i9 |  |
 | string.cpp:415:9:415:10 | i9 | string.cpp:415:8:415:8 | call to operator* | TAINT |
 | string.cpp:417:9:417:10 | i2 | string.cpp:417:3:417:10 | ... = ... |  |
@@ -6579,7 +6579,7 @@
 | vector.cpp:17:21:17:33 | call to vector | vector.cpp:35:1:35:1 | v |  |
 | vector.cpp:17:26:17:32 | source1 | vector.cpp:17:21:17:33 | call to vector | TAINT |
 | vector.cpp:19:14:19:14 | (__begin) | vector.cpp:19:14:19:14 | call to operator* | TAINT |
-| vector.cpp:19:14:19:14 | (__begin) | vector.cpp:19:14:19:14 | call to operator++ | TAINT |
+| vector.cpp:19:14:19:14 | (__begin) | vector.cpp:19:14:19:14 | call to operator++ |  |
 | vector.cpp:19:14:19:14 | (__end) | vector.cpp:19:14:19:14 | call to iterator |  |
 | vector.cpp:19:14:19:14 | (__range) | vector.cpp:19:14:19:14 | call to begin | TAINT |
 | vector.cpp:19:14:19:14 | (__range) | vector.cpp:19:14:19:14 | call to end | TAINT |
@@ -6609,7 +6609,7 @@
 | vector.cpp:23:55:23:55 | ref arg v | vector.cpp:27:15:27:15 | v |  |
 | vector.cpp:23:55:23:55 | ref arg v | vector.cpp:35:1:35:1 | v |  |
 | vector.cpp:23:55:23:55 | v | vector.cpp:23:57:23:59 | call to end | TAINT |
-| vector.cpp:23:66:23:67 | it | vector.cpp:23:64:23:64 | call to operator++ | TAINT |
+| vector.cpp:23:66:23:67 | it | vector.cpp:23:64:23:64 | call to operator++ |  |
 | vector.cpp:23:66:23:67 | ref arg it | vector.cpp:23:49:23:50 | it |  |
 | vector.cpp:23:66:23:67 | ref arg it | vector.cpp:23:66:23:67 | it |  |
 | vector.cpp:23:66:23:67 | ref arg it | vector.cpp:24:9:24:10 | it |  |
@@ -6618,7 +6618,7 @@
 | vector.cpp:24:9:24:10 | ref arg it | vector.cpp:23:66:23:67 | it |  |
 | vector.cpp:24:9:24:10 | ref arg it | vector.cpp:24:9:24:10 | it |  |
 | vector.cpp:27:15:27:15 | (__begin) | vector.cpp:27:15:27:15 | call to operator* | TAINT |
-| vector.cpp:27:15:27:15 | (__begin) | vector.cpp:27:15:27:15 | call to operator++ | TAINT |
+| vector.cpp:27:15:27:15 | (__begin) | vector.cpp:27:15:27:15 | call to operator++ |  |
 | vector.cpp:27:15:27:15 | (__end) | vector.cpp:27:15:27:15 | call to iterator |  |
 | vector.cpp:27:15:27:15 | (__range) | vector.cpp:27:15:27:15 | call to begin | TAINT |
 | vector.cpp:27:15:27:15 | (__range) | vector.cpp:27:15:27:15 | call to end | TAINT |
@@ -6641,7 +6641,7 @@
 | vector.cpp:31:33:31:45 | call to vector | vector.cpp:35:1:35:1 | const_v |  |
 | vector.cpp:31:38:31:44 | source1 | vector.cpp:31:33:31:45 | call to vector | TAINT |
 | vector.cpp:32:21:32:21 | (__begin) | vector.cpp:32:21:32:21 | call to operator* | TAINT |
-| vector.cpp:32:21:32:21 | (__begin) | vector.cpp:32:21:32:21 | call to operator++ | TAINT |
+| vector.cpp:32:21:32:21 | (__begin) | vector.cpp:32:21:32:21 | call to operator++ |  |
 | vector.cpp:32:21:32:21 | (__range) | vector.cpp:32:21:32:21 | call to begin | TAINT |
 | vector.cpp:32:21:32:21 | (__range) | vector.cpp:32:21:32:21 | call to end | TAINT |
 | vector.cpp:32:21:32:21 | call to begin | vector.cpp:32:21:32:21 | (__begin) |  |
@@ -7652,7 +7652,7 @@
 | vector.cpp:344:56:344:57 | ref arg v2 | vector.cpp:347:7:347:8 | v2 |  |
 | vector.cpp:344:56:344:57 | ref arg v2 | vector.cpp:415:1:415:1 | v2 |  |
 | vector.cpp:344:56:344:57 | v2 | vector.cpp:344:59:344:61 | call to end | TAINT |
-| vector.cpp:344:68:344:69 | it | vector.cpp:344:66:344:66 | call to operator++ | TAINT |
+| vector.cpp:344:68:344:69 | it | vector.cpp:344:66:344:66 | call to operator++ |  |
 | vector.cpp:344:68:344:69 | ref arg it | vector.cpp:344:50:344:51 | it |  |
 | vector.cpp:344:68:344:69 | ref arg it | vector.cpp:344:68:344:69 | it |  |
 | vector.cpp:344:68:344:69 | ref arg it | vector.cpp:345:4:345:5 | it |  |
@@ -7669,7 +7669,7 @@
 | vector.cpp:345:9:345:14 | call to source | vector.cpp:345:3:345:16 | ... = ... |  |
 | vector.cpp:347:7:347:8 | ref arg v2 | vector.cpp:415:1:415:1 | v2 |  |
 | vector.cpp:349:15:349:15 | (__begin) | vector.cpp:349:15:349:15 | call to operator* | TAINT |
-| vector.cpp:349:15:349:15 | (__begin) | vector.cpp:349:15:349:15 | call to operator++ | TAINT |
+| vector.cpp:349:15:349:15 | (__begin) | vector.cpp:349:15:349:15 | call to operator++ |  |
 | vector.cpp:349:15:349:15 | (__end) | vector.cpp:349:15:349:15 | call to iterator |  |
 | vector.cpp:349:15:349:15 | (__range) | vector.cpp:349:15:349:15 | call to begin | TAINT |
 | vector.cpp:349:15:349:15 | (__range) | vector.cpp:349:15:349:15 | call to end | TAINT |
@@ -7701,7 +7701,7 @@
 | vector.cpp:354:56:354:57 | ref arg v4 | vector.cpp:357:7:357:8 | v4 |  |
 | vector.cpp:354:56:354:57 | ref arg v4 | vector.cpp:415:1:415:1 | v4 |  |
 | vector.cpp:354:56:354:57 | v4 | vector.cpp:354:59:354:61 | call to end | TAINT |
-| vector.cpp:354:68:354:69 | it | vector.cpp:354:66:354:66 | call to operator++ | TAINT |
+| vector.cpp:354:68:354:69 | it | vector.cpp:354:66:354:66 | call to operator++ |  |
 | vector.cpp:354:68:354:69 | ref arg it | vector.cpp:354:50:354:51 | it |  |
 | vector.cpp:354:68:354:69 | ref arg it | vector.cpp:354:68:354:69 | it |  |
 | vector.cpp:354:68:354:69 | ref arg it | vector.cpp:355:32:355:33 | it |  |
@@ -7961,7 +7961,7 @@
 | vector.cpp:442:3:442:3 | ref arg call to operator* | vector.cpp:444:2:444:2 | out |  |
 | vector.cpp:442:4:442:4 | call to operator++ | vector.cpp:442:3:442:3 | call to operator* | TAINT |
 | vector.cpp:442:4:442:4 | ref arg call to operator++ | vector.cpp:442:6:442:7 | ref arg it |  |
-| vector.cpp:442:6:442:7 | it | vector.cpp:442:4:442:4 | call to operator++ | TAINT |
+| vector.cpp:442:6:442:7 | it | vector.cpp:442:4:442:4 | call to operator++ |  |
 | vector.cpp:442:11:442:36 | call to basic_string | vector.cpp:442:3:442:3 | ref arg call to operator* | TAINT |
 | vector.cpp:442:23:442:35 | source_string | vector.cpp:442:11:442:36 | call to basic_string | TAINT |
 | vector.cpp:443:8:443:10 | ref arg out | vector.cpp:444:2:444:2 | out |  |
@@ -7976,7 +7976,7 @@
 | vector.cpp:449:3:449:3 | ref arg call to operator* | vector.cpp:451:2:451:2 | out |  |
 | vector.cpp:449:4:449:4 | call to operator++ | vector.cpp:449:3:449:3 | call to operator* | TAINT |
 | vector.cpp:449:4:449:4 | ref arg call to operator++ | vector.cpp:449:6:449:7 | ref arg it |  |
-| vector.cpp:449:6:449:7 | it | vector.cpp:449:4:449:4 | call to operator++ | TAINT |
+| vector.cpp:449:6:449:7 | it | vector.cpp:449:4:449:4 | call to operator++ |  |
 | vector.cpp:449:11:449:16 | call to source | vector.cpp:449:3:449:3 | ref arg call to operator* | TAINT |
 | vector.cpp:450:8:450:10 | ref arg out | vector.cpp:451:2:451:2 | out |  |
 | vector.cpp:467:22:467:25 | call to vector | vector.cpp:471:8:471:8 | v |  |

From d2b150eaf59f0f4f258ea5d8c1bc9c599d74b175 Mon Sep 17 00:00:00 2001
From: Mathias Vorreiter Pedersen <mathiasvp@github.com>
Date: Mon, 12 Sep 2022 16:00:49 +0100
Subject: [PATCH 105/203] C++: Fix QLDoc on the model predicates used by the
 new experimental use-use code.

---
 .../interfaces/FunctionInputsAndOutputs.qll   | 30 ++++++++++++++-----
 1 file changed, 23 insertions(+), 7 deletions(-)

diff --git a/cpp/ql/lib/semmle/code/cpp/models/interfaces/FunctionInputsAndOutputs.qll b/cpp/ql/lib/semmle/code/cpp/models/interfaces/FunctionInputsAndOutputs.qll
index 56746c928b0..de44913a39f 100644
--- a/cpp/ql/lib/semmle/code/cpp/models/interfaces/FunctionInputsAndOutputs.qll
+++ b/cpp/ql/lib/semmle/code/cpp/models/interfaces/FunctionInputsAndOutputs.qll
@@ -47,9 +47,9 @@ class FunctionInput extends TFunctionInput {
   deprecated final predicate isInParameter(ParameterIndex index) { this.isParameter(index) }
 
   /**
-   * Holds if this is the input value pointed to by a pointer parameter to a function, or the input
-   * value referred to by a reference parameter to a function, where the parameter has index
-   * `index`.
+   * Holds if this is the input value pointed to (through `ind` number of indirections) by a
+   * pointer parameter to a function, or the input value referred to by a reference parameter
+   * to a function, where the parameter has index `index`.
    *
    * Example:
    * ```
@@ -206,8 +206,8 @@ class FunctionInput extends TFunctionInput {
   predicate isReturnValueDeref(int ind) { ind = 1 and this.isReturnValueDeref() }
 
   /**
-   * Holds if `i >= 0` and `isParameterDeref(i)` holds for this value, or
-   * if `i = -1` and `isQualifierObject()` holds for this value.
+   * Holds if `i >= 0` and `isParameterDeref(i, ind)` holds for this value, or
+   * if `i = -1` and `isQualifierObject(ind)` holds for this value.
    */
   final predicate isParameterDerefOrQualifierObject(ParameterIndex i, int ind) {
     i >= 0 and this.isParameterDeref(i, ind)
@@ -378,6 +378,22 @@ class FunctionOutput extends TFunctionOutput {
    */
   predicate isParameterDeref(ParameterIndex i) { this.isParameterDeref(i, 1) }
 
+  /**
+   * Holds if this is the output value pointed to by a pointer parameter (through `ind` number
+   * of indirections) to a function, or the output value referred to by a reference parameter to
+   * a function, where the parameter has index `index`.
+   *
+   * Example:
+   * ```
+   * void func(int n, char* p, float& r);
+   * ```
+   * - `isParameterDeref(1, 1)` holds for the `FunctionOutput` that represents the value of `*p` (with
+   *   type `char`) on return from the function.
+   * - `isParameterDeref(2, 1)` holds for the `FunctionOutput` that represents the value of `r` (with
+   *   type `float`) on return from the function.
+   * - There is no `FunctionOutput` for which `isParameterDeref(0, _)` holds, because `n` is neither a
+   *   pointer nor a reference.
+   */
   predicate isParameterDeref(ParameterIndex i, int ind) { ind = 1 and this.isParameterDeref(i) }
 
   /**
@@ -501,8 +517,8 @@ class FunctionOutput extends TFunctionOutput {
   deprecated final predicate isOutReturnPointer() { this.isReturnValueDeref() }
 
   /**
-   * Holds if `i >= 0` and `isParameterDeref(i)` holds for this is the value, or
-   * if `i = -1` and `isQualifierObject()` holds for this value.
+   * Holds if `i >= 0` and `isParameterDeref(i, ind)` holds for this is the value, or
+   * if `i = -1` and `isQualifierObject(ind)` holds for this value.
    */
   final predicate isParameterDerefOrQualifierObject(ParameterIndex i, int ind) {
     i >= 0 and this.isParameterDeref(i, ind)

From ceda5f69fcc91b12569d857592bb0a638d8759db Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Mon, 12 Sep 2022 17:29:20 +0200
Subject: [PATCH 106/203] recognize returning an instanceof of a class as
 exporting that class

---
 .../ql/lib/semmle/javascript/PackageExports.qll   | 10 ++++++++++
 .../PrototypePollutingAssignment.expected         | 12 ++++++++++++
 .../CWE-915/PrototypePollutingAssignment/lib.js   | 15 +++++++++++++++
 3 files changed, 37 insertions(+)

diff --git a/javascript/ql/lib/semmle/javascript/PackageExports.qll b/javascript/ql/lib/semmle/javascript/PackageExports.qll
index 01cd134ff0c..057dd47e946 100644
--- a/javascript/ql/lib/semmle/javascript/PackageExports.qll
+++ b/javascript/ql/lib/semmle/javascript/PackageExports.qll
@@ -52,6 +52,16 @@ private DataFlow::Node getAValueExportedByPackage() {
     not isPrivateMethodDeclaration(result)
   )
   or
+  // module.exports.foo = function () {
+  //   return new Foo(); // <- result
+  // };
+  exists(DataFlow::FunctionNode func, DataFlow::NewNode inst, DataFlow::ClassNode clz |
+    func = getAValueExportedByPackage().getALocalSource() and inst = unique( | | func.getAReturn())
+  |
+    clz.getAnInstanceReference() = inst and
+    result = clz.getAnInstanceMethod()
+  )
+  or
   result = getAValueExportedByPackage().getALocalSource()
   or
   // Nested property reads.
diff --git a/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingAssignment/PrototypePollutingAssignment.expected b/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingAssignment/PrototypePollutingAssignment.expected
index 662b3315c80..689e0548dc6 100644
--- a/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingAssignment/PrototypePollutingAssignment.expected
+++ b/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingAssignment/PrototypePollutingAssignment.expected
@@ -111,6 +111,12 @@ nodes
 | lib.js:119:13:119:24 | obj[path[0]] |
 | lib.js:119:17:119:20 | path |
 | lib.js:119:17:119:23 | path[0] |
+| lib.js:127:14:127:17 | path |
+| lib.js:127:14:127:17 | path |
+| lib.js:128:9:128:20 | obj[path[0]] |
+| lib.js:128:9:128:20 | obj[path[0]] |
+| lib.js:128:13:128:16 | path |
+| lib.js:128:13:128:19 | path[0] |
 | sublib/sub.js:1:37:1:40 | path |
 | sublib/sub.js:1:37:1:40 | path |
 | sublib/sub.js:2:3:2:14 | obj[path[0]] |
@@ -269,6 +275,11 @@ edges
 | lib.js:119:17:119:20 | path | lib.js:119:17:119:23 | path[0] |
 | lib.js:119:17:119:23 | path[0] | lib.js:119:13:119:24 | obj[path[0]] |
 | lib.js:119:17:119:23 | path[0] | lib.js:119:13:119:24 | obj[path[0]] |
+| lib.js:127:14:127:17 | path | lib.js:128:13:128:16 | path |
+| lib.js:127:14:127:17 | path | lib.js:128:13:128:16 | path |
+| lib.js:128:13:128:16 | path | lib.js:128:13:128:19 | path[0] |
+| lib.js:128:13:128:19 | path[0] | lib.js:128:9:128:20 | obj[path[0]] |
+| lib.js:128:13:128:19 | path[0] | lib.js:128:9:128:20 | obj[path[0]] |
 | sublib/sub.js:1:37:1:40 | path | sublib/sub.js:2:7:2:10 | path |
 | sublib/sub.js:1:37:1:40 | path | sublib/sub.js:2:7:2:10 | path |
 | sublib/sub.js:2:7:2:10 | path | sublib/sub.js:2:7:2:13 | path[0] |
@@ -329,6 +340,7 @@ edges
 | lib.js:87:10:87:14 | proto | lib.js:83:14:83:22 | arguments | lib.js:87:10:87:14 | proto | This assignment may alter Object.prototype if a malicious '__proto__' string is injected from $@. | lib.js:83:14:83:22 | arguments | library input |
 | lib.js:108:3:108:10 | obj[one] | lib.js:104:13:104:21 | arguments | lib.js:108:3:108:10 | obj[one] | This assignment may alter Object.prototype if a malicious '__proto__' string is injected from $@. | lib.js:104:13:104:21 | arguments | library input |
 | lib.js:119:13:119:24 | obj[path[0]] | lib.js:118:29:118:32 | path | lib.js:119:13:119:24 | obj[path[0]] | This assignment may alter Object.prototype if a malicious '__proto__' string is injected from $@. | lib.js:118:29:118:32 | path | library input |
+| lib.js:128:9:128:20 | obj[path[0]] | lib.js:127:14:127:17 | path | lib.js:128:9:128:20 | obj[path[0]] | This assignment may alter Object.prototype if a malicious '__proto__' string is injected from $@. | lib.js:127:14:127:17 | path | library input |
 | sublib/sub.js:2:3:2:14 | obj[path[0]] | sublib/sub.js:1:37:1:40 | path | sublib/sub.js:2:3:2:14 | obj[path[0]] | This assignment may alter Object.prototype if a malicious '__proto__' string is injected from $@. | sublib/sub.js:1:37:1:40 | path | library input |
 | tst.js:8:5:8:17 | object[taint] | tst.js:5:24:5:37 | req.query.data | tst.js:8:5:8:17 | object[taint] | This assignment may alter Object.prototype if a malicious '__proto__' string is injected from $@. | tst.js:5:24:5:37 | req.query.data | user controlled input |
 | tst.js:9:5:9:17 | object[taint] | tst.js:5:24:5:37 | req.query.data | tst.js:9:5:9:17 | object[taint] | This assignment may alter Object.prototype if a malicious '__proto__' string is injected from $@. | tst.js:5:24:5:37 | req.query.data | user controlled input |
diff --git a/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingAssignment/lib.js b/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingAssignment/lib.js
index b65f6fb3c1f..fb550533d12 100644
--- a/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingAssignment/lib.js
+++ b/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingAssignment/lib.js
@@ -119,4 +119,19 @@ module.exports.returnsObj = function () {
             obj[path[0]][path[1]] = value; // NOT OK
         }
     }
+}
+
+class MyClass {
+    constructor() {}
+
+    set(obj, path, value) {
+        obj[path[0]][path[1]] = value; // NOT OK
+    }
+
+    static staticSet(obj, path, value) {
+        obj[path[0]][path[1]] = value; // OK - not exported
+    }
+}
+module.exports.returnsMewMyClass = function () {
+    return new MyClass();
 }
\ No newline at end of file

From 9446cad32e7b520c4d50bacc34bdb668b3fd62ce Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Mon, 12 Sep 2022 22:39:20 +0200
Subject: [PATCH 107/203] add ql/unmentioned-guard class

---
 .../queries/bugs/MissingSanitizerGuardCase.ql | 28 +++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 ql/ql/src/queries/bugs/MissingSanitizerGuardCase.ql

diff --git a/ql/ql/src/queries/bugs/MissingSanitizerGuardCase.ql b/ql/ql/src/queries/bugs/MissingSanitizerGuardCase.ql
new file mode 100644
index 00000000000..325d2877cb3
--- /dev/null
+++ b/ql/ql/src/queries/bugs/MissingSanitizerGuardCase.ql
@@ -0,0 +1,28 @@
+/**
+ * @name Unmentioned guard class
+ * @description A sanitizer guard should be included in the `isSanitizerGuard` predicate.
+ * @kind problem
+ * @problem.severity warning
+ * @id ql/unmentioned-guard
+ * @tags correctness
+ *       maintainability
+ * @precision medium
+ */
+
+import ql
+
+class SanGuard extends Class {
+  SanGuard() {
+    exists(Class sup |
+      sup = this.getASuperType().getResolvedType().(ClassType).getDeclaration() and
+      sup.getName() = ["SanitizerGuardNode", "SanitizerGuard", "BarrierGuardNode", "BarrierGuard"] and
+      sup.getLocation().getFile() != this.getLocation().getFile()
+    )
+  }
+}
+
+from SanGuard guard
+where
+  not exists(TypeExpr t | t.getResolvedType().(ClassType).getDeclaration() = guard) and
+  not guard.hasAnnotation("deprecated")
+select guard, "Guard class is not mentioned anywhere"

From a567c132c110f4111debeb696d61894507d20fab Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Mon, 12 Sep 2022 22:42:46 +0200
Subject: [PATCH 108/203] fix all ql/unmentioned-guard

---
 .../semmle/javascript/security/dataflow/DomBasedXssQuery.qll   | 2 +-
 .../security/dataflow/UnsafeHtmlConstructionQuery.qll          | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/DomBasedXssQuery.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/DomBasedXssQuery.qll
index 72c4020526b..e8c1a144920 100644
--- a/javascript/ql/lib/semmle/javascript/security/dataflow/DomBasedXssQuery.qll
+++ b/javascript/ql/lib/semmle/javascript/security/dataflow/DomBasedXssQuery.qll
@@ -75,7 +75,7 @@ class Configuration extends TaintTracking::Configuration {
   }
 
   override predicate isSanitizerGuard(TaintTracking::SanitizerGuardNode guard) {
-    guard instanceof PrefixStringSanitizer or
+    guard instanceof PrefixStringSanitizerActivated or
     guard instanceof QuoteGuard or
     guard instanceof ContainsHtmlGuard
   }
diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/UnsafeHtmlConstructionQuery.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/UnsafeHtmlConstructionQuery.qll
index bf8468572b4..8e5060036af 100644
--- a/javascript/ql/lib/semmle/javascript/security/dataflow/UnsafeHtmlConstructionQuery.qll
+++ b/javascript/ql/lib/semmle/javascript/security/dataflow/UnsafeHtmlConstructionQuery.qll
@@ -43,7 +43,8 @@ class Configration extends TaintTracking::Configuration {
   override predicate isSanitizerGuard(TaintTracking::SanitizerGuardNode guard) {
     guard instanceof PrefixStringSanitizer or
     guard instanceof QuoteGuard or
-    guard instanceof ContainsHtmlGuard
+    guard instanceof ContainsHtmlGuard or
+    guard instanceof TypeTestGuard
   }
 }
 

From 9e63a3d30b3da79da9e3e4e5ab621a77061d7aee Mon Sep 17 00:00:00 2001
From: Raul Garcia <raulga@microsoft.com>
Date: Mon, 12 Sep 2022 18:22:13 -0700
Subject: [PATCH 109/203] Fixing a couple of bug from PR comments

---
 .../JsonWebTokenHandler/JsonWebTokenHandlerLib.qll            | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll
index 5f0b823d09c..d5d0db6af1d 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
@@ -23,7 +23,7 @@ class TokenValidationParametersPropertySensitiveValidation extends Property {
  */
 class FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation extends DataFlow::Configuration {
   FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation() {
-    this = "FlowsToTokenValidationResultIsValidCall"
+    this = "FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation"
   }
 
   override predicate isSource(DataFlow::Node source) {
@@ -75,7 +75,7 @@ class JsonWebTokenHandlerValidateTokenCall extends MethodCall {
  */
 private class TokenValidationResultIsValidCall extends PropertyRead {
   TokenValidationResultIsValidCall() {
-    exists(Property p | p.getAnAccess().(PropertyRead) = this |
+    exists(Property p | p.getAnAccess() = this |
       p.hasName("IsValid") or
       p.hasName("Exception")
     )

From 0468b3a361310222e0a6460fccd35fd4afdc8290 Mon Sep 17 00:00:00 2001
From: Sebastian Bauersfeld <>
Date: Tue, 13 Sep 2022 11:35:04 +0700
Subject: [PATCH 110/203] Java: Track taint through constructor arguments of
 java.net.URI.

---
 .../code/java/dataflow/ExternalFlow.qll       |  5 ++
 .../CWE-022/semmle/tests/TaintedPath.expected | 63 +++++++++++++++++++
 .../security/CWE-022/semmle/tests/Test.java   | 11 +++-
 3 files changed, 78 insertions(+), 1 deletion(-)

diff --git a/java/ql/lib/semmle/code/java/dataflow/ExternalFlow.qll b/java/ql/lib/semmle/code/java/dataflow/ExternalFlow.qll
index 6ee18ccb9cf..899832e339f 100644
--- a/java/ql/lib/semmle/code/java/dataflow/ExternalFlow.qll
+++ b/java/ql/lib/semmle/code/java/dataflow/ExternalFlow.qll
@@ -401,6 +401,11 @@ private class SummaryModelCsvBase extends SummaryModelCsv {
         "java.io;File;false;File;;;Argument[0];Argument[-1];taint;manual",
         "java.io;File;false;File;;;Argument[1];Argument[-1];taint;manual",
         "java.net;URI;false;URI;(String);;Argument[0];Argument[-1];taint;manual",
+        "java.net;URI;false;URI;(String,String,String);;Argument[0..2];Argument[-1];taint;manual",
+        "java.net;URI;false;URI;(String,String,String,int,String,String,String);;Argument[0..2];Argument[-1];taint;manual",
+        "java.net;URI;false;URI;(String,String,String,int,String,String,String);;Argument[4..6];Argument[-1];taint;manual",
+        "java.net;URI;false;URI;(String,String,String,String);;Argument[0..3];Argument[-1];taint;manual",
+        "java.net;URI;false;URI;(String,String,String,String,String);;Argument[0..4];Argument[-1];taint;manual",
         "java.net;URL;false;URL;(String);;Argument[0];Argument[-1];taint;manual",
         "javax.xml.transform.stream;StreamSource;false;StreamSource;;;Argument[0];Argument[-1];taint;manual",
         "javax.xml.transform.sax;SAXSource;false;SAXSource;(InputSource);;Argument[0];Argument[-1];taint;manual",
diff --git a/java/ql/test/query-tests/security/CWE-022/semmle/tests/TaintedPath.expected b/java/ql/test/query-tests/security/CWE-022/semmle/tests/TaintedPath.expected
index 830f4d76085..b1fafe20d99 100644
--- a/java/ql/test/query-tests/security/CWE-022/semmle/tests/TaintedPath.expected
+++ b/java/ql/test/query-tests/security/CWE-022/semmle/tests/TaintedPath.expected
@@ -9,6 +9,42 @@ edges
 | Test.java:80:31:80:32 | br : BufferedReader | Test.java:80:31:80:43 | readLine(...) : String |
 | Test.java:80:31:80:43 | readLine(...) : String | Test.java:82:67:82:81 | ... + ... |
 | Test.java:88:17:88:37 | getHostName(...) : String | Test.java:90:26:90:29 | temp |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:96:20:96:20 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:96:23:96:23 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:96:26:96:26 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:97:20:97:20 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:97:23:97:23 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:97:26:97:26 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:97:29:97:29 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:98:20:98:20 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:98:23:98:23 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:98:26:98:26 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:98:29:98:29 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:98:32:98:32 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:20:99:20 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:23:99:23 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:26:99:26 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:32:99:32 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:35:99:35 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:38:99:38 | t : String |
+| Test.java:96:20:96:20 | t : String | Test.java:96:12:96:27 | new URI(...) |
+| Test.java:96:23:96:23 | t : String | Test.java:96:12:96:27 | new URI(...) |
+| Test.java:96:26:96:26 | t : String | Test.java:96:12:96:27 | new URI(...) |
+| Test.java:97:20:97:20 | t : String | Test.java:97:12:97:30 | new URI(...) |
+| Test.java:97:23:97:23 | t : String | Test.java:97:12:97:30 | new URI(...) |
+| Test.java:97:26:97:26 | t : String | Test.java:97:12:97:30 | new URI(...) |
+| Test.java:97:29:97:29 | t : String | Test.java:97:12:97:30 | new URI(...) |
+| Test.java:98:20:98:20 | t : String | Test.java:98:12:98:33 | new URI(...) |
+| Test.java:98:23:98:23 | t : String | Test.java:98:12:98:33 | new URI(...) |
+| Test.java:98:26:98:26 | t : String | Test.java:98:12:98:33 | new URI(...) |
+| Test.java:98:29:98:29 | t : String | Test.java:98:12:98:33 | new URI(...) |
+| Test.java:98:32:98:32 | t : String | Test.java:98:12:98:33 | new URI(...) |
+| Test.java:99:20:99:20 | t : String | Test.java:99:12:99:39 | new URI(...) |
+| Test.java:99:23:99:23 | t : String | Test.java:99:12:99:39 | new URI(...) |
+| Test.java:99:26:99:26 | t : String | Test.java:99:12:99:39 | new URI(...) |
+| Test.java:99:32:99:32 | t : String | Test.java:99:12:99:39 | new URI(...) |
+| Test.java:99:35:99:35 | t : String | Test.java:99:12:99:39 | new URI(...) |
+| Test.java:99:38:99:38 | t : String | Test.java:99:12:99:39 | new URI(...) |
 nodes
 | Test.java:19:18:19:38 | getHostName(...) : String | semmle.label | getHostName(...) : String |
 | Test.java:24:20:24:23 | temp | semmle.label | temp |
@@ -23,6 +59,29 @@ nodes
 | Test.java:82:67:82:81 | ... + ... | semmle.label | ... + ... |
 | Test.java:88:17:88:37 | getHostName(...) : String | semmle.label | getHostName(...) : String |
 | Test.java:90:26:90:29 | temp | semmle.label | temp |
+| Test.java:95:14:95:34 | getHostName(...) : String | semmle.label | getHostName(...) : String |
+| Test.java:96:12:96:27 | new URI(...) | semmle.label | new URI(...) |
+| Test.java:96:20:96:20 | t : String | semmle.label | t : String |
+| Test.java:96:23:96:23 | t : String | semmle.label | t : String |
+| Test.java:96:26:96:26 | t : String | semmle.label | t : String |
+| Test.java:97:12:97:30 | new URI(...) | semmle.label | new URI(...) |
+| Test.java:97:20:97:20 | t : String | semmle.label | t : String |
+| Test.java:97:23:97:23 | t : String | semmle.label | t : String |
+| Test.java:97:26:97:26 | t : String | semmle.label | t : String |
+| Test.java:97:29:97:29 | t : String | semmle.label | t : String |
+| Test.java:98:12:98:33 | new URI(...) | semmle.label | new URI(...) |
+| Test.java:98:20:98:20 | t : String | semmle.label | t : String |
+| Test.java:98:23:98:23 | t : String | semmle.label | t : String |
+| Test.java:98:26:98:26 | t : String | semmle.label | t : String |
+| Test.java:98:29:98:29 | t : String | semmle.label | t : String |
+| Test.java:98:32:98:32 | t : String | semmle.label | t : String |
+| Test.java:99:12:99:39 | new URI(...) | semmle.label | new URI(...) |
+| Test.java:99:20:99:20 | t : String | semmle.label | t : String |
+| Test.java:99:23:99:23 | t : String | semmle.label | t : String |
+| Test.java:99:26:99:26 | t : String | semmle.label | t : String |
+| Test.java:99:32:99:32 | t : String | semmle.label | t : String |
+| Test.java:99:35:99:35 | t : String | semmle.label | t : String |
+| Test.java:99:38:99:38 | t : String | semmle.label | t : String |
 subpaths
 #select
 | Test.java:24:11:24:24 | new File(...) | Test.java:19:18:19:38 | getHostName(...) : String | Test.java:24:20:24:23 | temp | $@ flows to here and is used in a path. | Test.java:19:18:19:38 | getHostName(...) | User-provided value |
@@ -31,3 +90,7 @@ subpaths
 | Test.java:34:12:34:25 | new File(...) | Test.java:19:18:19:38 | getHostName(...) : String | Test.java:34:21:34:24 | temp | $@ flows to here and is used in a path. | Test.java:19:18:19:38 | getHostName(...) | User-provided value |
 | Test.java:82:52:82:88 | new FileWriter(...) | Test.java:79:74:79:97 | getInputStream(...) : ServletInputStream | Test.java:82:67:82:81 | ... + ... | $@ flows to here and is used in a path. | Test.java:79:74:79:97 | getInputStream(...) | User-provided value |
 | Test.java:90:26:90:29 | temp | Test.java:88:17:88:37 | getHostName(...) : String | Test.java:90:26:90:29 | temp | $@ flows to here and is used in a path. | Test.java:88:17:88:37 | getHostName(...) | User-provided value |
+| Test.java:96:3:96:28 | new File(...) | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:96:12:96:27 | new URI(...) | $@ flows to here and is used in a path. | Test.java:95:14:95:34 | getHostName(...) | User-provided value |
+| Test.java:97:3:97:31 | new File(...) | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:97:12:97:30 | new URI(...) | $@ flows to here and is used in a path. | Test.java:95:14:95:34 | getHostName(...) | User-provided value |
+| Test.java:98:3:98:34 | new File(...) | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:98:12:98:33 | new URI(...) | $@ flows to here and is used in a path. | Test.java:95:14:95:34 | getHostName(...) | User-provided value |
+| Test.java:99:3:99:40 | new File(...) | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:12:99:39 | new URI(...) | $@ flows to here and is used in a path. | Test.java:95:14:95:34 | getHostName(...) | User-provided value |
diff --git a/java/ql/test/query-tests/security/CWE-022/semmle/tests/Test.java b/java/ql/test/query-tests/security/CWE-022/semmle/tests/Test.java
index f0d0147df08..3723f05ff8b 100644
--- a/java/ql/test/query-tests/security/CWE-022/semmle/tests/Test.java
+++ b/java/ql/test/query-tests/security/CWE-022/semmle/tests/Test.java
@@ -6,7 +6,7 @@ import javax.servlet.http.*;
 import javax.servlet.ServletException;
 
 import java.io.*;
-import java.net.InetAddress;
+import java.net.*;
 import java.nio.file.Path;
 import java.nio.file.Paths;
 import java.nio.file.FileSystems;
@@ -89,4 +89,13 @@ class Test {
 		// BAD: open a file based on user input, using a MaD-documented API
 		new LockableFileWriter(temp);
 	}
+
+	void doGet5(InetAddress address)
+	throws URISyntaxException {
+		String t = address.getHostName();
+		new File(new URI(t, t, t));
+		new File(new URI(t, t, t, t));
+		new File(new URI(t, t, t, t, t));
+		new File(new URI(t, t, t, 0, t, t, t));
+	}
 }

From f95663cdfba7892b27213c02adf1fe6220e7f03b Mon Sep 17 00:00:00 2001
From: Sebastian Bauersfeld <>
Date: Tue, 13 Sep 2022 11:38:15 +0700
Subject: [PATCH 111/203] Java: Added change note.

---
 .../2022-09-13-flow-model-for-uri-constructors.md             | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 java/ql/src/change-notes/2022-09-13-flow-model-for-uri-constructors.md

diff --git a/java/ql/src/change-notes/2022-09-13-flow-model-for-uri-constructors.md b/java/ql/src/change-notes/2022-09-13-flow-model-for-uri-constructors.md
new file mode 100644
index 00000000000..8b86c0074b8
--- /dev/null
+++ b/java/ql/src/change-notes/2022-09-13-flow-model-for-uri-constructors.md
@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* Added taint model for arguments of `java.net.URI` constructors.

From 3eb7675292250322658fe0fe4d22229f814f8f9e Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Tue, 13 Sep 2022 07:27:31 +0200
Subject: [PATCH 112/203] rename to DenyListInclusionGuard

---
 .../security/dataflow/PrototypePollutingAssignmentQuery.qll | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qll
index 047d21574e7..cbc70aa27a6 100644
--- a/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qll
+++ b/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qll
@@ -277,10 +277,10 @@ private class IncludesCheck extends TaintTracking::LabeledSanitizerGuardNode, In
 }
 
 /**
- * A sanitizer guard that checks tests whether `x` is included in a list of strings.
+ * A sanitizer guard that checks tests whether `x` is included in a list like `["__proto__"].includes(x)`.
  */
-private class StringListCheck extends TaintTracking::SanitizerGuardNode, InclusionTest {
-  StringListCheck() {
+private class DenyListInclusionGuard extends TaintTracking::SanitizerGuardNode, InclusionTest {
+  DenyListInclusionGuard() {
     this.getContainerNode()
         .getALocalSource()
         .(DataFlow::ArrayCreationNode)

From dd5db2e6d71b403aa01e6b5da36bce25abe5a1e9 Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Tue, 13 Sep 2022 07:27:51 +0200
Subject: [PATCH 113/203] add to isSanitizerGuard

---
 .../security/dataflow/PrototypePollutingAssignmentQuery.qll    | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qll
index cbc70aa27a6..536c5ebf971 100644
--- a/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qll
+++ b/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qll
@@ -124,7 +124,8 @@ class Configuration extends TaintTracking::Configuration {
     guard instanceof TypeofCheck or
     guard instanceof NumberGuard or
     guard instanceof EqualityCheck or
-    guard instanceof IncludesCheck
+    guard instanceof IncludesCheck or
+    guard instanceof DenyListInclusionGuard
   }
 }
 

From dd5da79e46b60f5520dd9d586379b12fb482c5e1 Mon Sep 17 00:00:00 2001
From: Erik Krogh Kristensen <erik-krogh@github.com>
Date: Tue, 13 Sep 2022 10:04:02 +0200
Subject: [PATCH 114/203] recognize setters and getters of a class as exported

Co-authored-by: Asger F <asgerf@github.com>
---
 javascript/ql/lib/semmle/javascript/PackageExports.qll | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/javascript/ql/lib/semmle/javascript/PackageExports.qll b/javascript/ql/lib/semmle/javascript/PackageExports.qll
index 057dd47e946..909564f740b 100644
--- a/javascript/ql/lib/semmle/javascript/PackageExports.qll
+++ b/javascript/ql/lib/semmle/javascript/PackageExports.qll
@@ -59,7 +59,7 @@ private DataFlow::Node getAValueExportedByPackage() {
     func = getAValueExportedByPackage().getALocalSource() and inst = unique( | | func.getAReturn())
   |
     clz.getAnInstanceReference() = inst and
-    result = clz.getAnInstanceMethod()
+    result = clz.getAnInstanceMember(_)
   )
   or
   result = getAValueExportedByPackage().getALocalSource()

From 03a325ca31aee8bd1e88acdcf2e832b1adedb49a Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Tue, 13 Sep 2022 10:06:35 +0200
Subject: [PATCH 115/203] autoformat

---
 python/ql/lib/semmle/python/frameworks/Django.qll | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/python/ql/lib/semmle/python/frameworks/Django.qll b/python/ql/lib/semmle/python/frameworks/Django.qll
index 03d34e8548e..e67bb8cf385 100644
--- a/python/ql/lib/semmle/python/frameworks/Django.qll
+++ b/python/ql/lib/semmle/python/frameworks/Django.qll
@@ -2066,7 +2066,8 @@ module PrivateDjango {
 
         /** Gets a reference to the `django.http.response.HttpResponse.write` function. */
         private DataFlow::TypeTrackingNode write(
-          DjangoImpl::DjangoHttp::Response::HttpResponse::InstanceSource instance, DataFlow::TypeTracker t
+          DjangoImpl::DjangoHttp::Response::HttpResponse::InstanceSource instance,
+          DataFlow::TypeTracker t
         ) {
           t.startInAttr("write") and
           instance = DjangoImpl::DjangoHttp::Response::HttpResponse::instance() and

From b4e6fb781ac19b49e9565eee1b5a1ceed7f59a30 Mon Sep 17 00:00:00 2001
From: Asger F <asgerf@github.com>
Date: Tue, 13 Sep 2022 10:13:03 +0200
Subject: [PATCH 116/203] JS: Consider empty regexp to be obviously empty

---
 javascript/ql/src/RegExp/RegExpAlwaysMatches.ql             | 2 ++
 .../ql/test/query-tests/RegExp/RegExpAlwaysMatches/tst.js   | 6 +++---
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/javascript/ql/src/RegExp/RegExpAlwaysMatches.ql b/javascript/ql/src/RegExp/RegExpAlwaysMatches.ql
index 06e0a8146ef..eb3eed056c4 100644
--- a/javascript/ql/src/RegExp/RegExpAlwaysMatches.ql
+++ b/javascript/ql/src/RegExp/RegExpAlwaysMatches.ql
@@ -54,6 +54,8 @@ predicate isUniversalRegExp(RegExpTerm term) {
     or
     child.(RegExpCharacterClass).isUniversalClass()
   )
+  or
+  term.(RegExpSequence).getNumChild() = 0
 }
 
 /**
diff --git a/javascript/ql/test/query-tests/RegExp/RegExpAlwaysMatches/tst.js b/javascript/ql/test/query-tests/RegExp/RegExpAlwaysMatches/tst.js
index c9f581a6f65..a266e2d86f6 100644
--- a/javascript/ql/test/query-tests/RegExp/RegExpAlwaysMatches/tst.js
+++ b/javascript/ql/test/query-tests/RegExp/RegExpAlwaysMatches/tst.js
@@ -83,10 +83,10 @@ function nonWordBoundary(x) {
 }
 
 function emptyRegex(x) {
-  return new RegExp("").test(x); // NOT OK
+  return new RegExp("").test(x); // OK
 }
 
 function parserTest(x) {
   /(\w\s*:\s*[^:}]+|#){|@import[^\n]+(?:url|,)/.test(x); // OK
-  /^((?:a{0,2}|-)|\w\{\d,\d\})+X$/.text(x); // ok 
-}
\ No newline at end of file
+  /^((?:a{0,2}|-)|\w\{\d,\d\})+X$/.text(x); // ok
+}

From f4117981015378f6f33ccb695f8baa617ce481bf Mon Sep 17 00:00:00 2001
From: Asger F <asgerf@github.com>
Date: Tue, 13 Sep 2022 10:13:34 +0200
Subject: [PATCH 117/203] JS: Fix typo in alert message

---
 javascript/ql/src/RegExp/RegExpAlwaysMatches.ql | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/javascript/ql/src/RegExp/RegExpAlwaysMatches.ql b/javascript/ql/src/RegExp/RegExpAlwaysMatches.ql
index eb3eed056c4..4ddbe4516cc 100644
--- a/javascript/ql/src/RegExp/RegExpAlwaysMatches.ql
+++ b/javascript/ql/src/RegExp/RegExpAlwaysMatches.ql
@@ -118,6 +118,6 @@ where
     call instanceof RegExpSearchCall and
     not term.getAChild*() instanceof RegExpDollar and
     message =
-      "This regular expression always the matches at index 0 when used $@, as it matches the empty substring."
+      "This regular expression always matches at index 0 when used $@, as it matches the empty substring."
   )
 select term, message, call, "here"

From eca2632a3e182e8521612e3f5bef049974a17919 Mon Sep 17 00:00:00 2001
From: Asger F <asgerf@github.com>
Date: Tue, 13 Sep 2022 10:17:34 +0200
Subject: [PATCH 118/203] JS: Add change note

---
 .../src/change-notes/2022-09-13-regexp-always-matches-fp.md | 6 ++++++
 1 file changed, 6 insertions(+)
 create mode 100644 javascript/ql/src/change-notes/2022-09-13-regexp-always-matches-fp.md

diff --git a/javascript/ql/src/change-notes/2022-09-13-regexp-always-matches-fp.md b/javascript/ql/src/change-notes/2022-09-13-regexp-always-matches-fp.md
new file mode 100644
index 00000000000..9e3dc2e980d
--- /dev/null
+++ b/javascript/ql/src/change-notes/2022-09-13-regexp-always-matches-fp.md
@@ -0,0 +1,6 @@
+---
+category: minorAnalysis
+---
+
+- The `js/regexp/always-matches` query will no longer report an empty regular expression as always
+  matching, as this is often the intended behavior.

From 87ab16a7af4543d0c77949b5be5e8905738ef0c7 Mon Sep 17 00:00:00 2001
From: Asger F <asgerf@github.com>
Date: Tue, 13 Sep 2022 10:59:12 +0200
Subject: [PATCH 119/203] JS: Update test expectations

---
 .../RegExp/RegExpAlwaysMatches/RegExpAlwaysMatches.expected      | 1 -
 1 file changed, 1 deletion(-)

diff --git a/javascript/ql/test/query-tests/RegExp/RegExpAlwaysMatches/RegExpAlwaysMatches.expected b/javascript/ql/test/query-tests/RegExp/RegExpAlwaysMatches/RegExpAlwaysMatches.expected
index 20c613bdd91..5edf60c00e2 100644
--- a/javascript/ql/test/query-tests/RegExp/RegExpAlwaysMatches/RegExpAlwaysMatches.expected
+++ b/javascript/ql/test/query-tests/RegExp/RegExpAlwaysMatches/RegExpAlwaysMatches.expected
@@ -5,4 +5,3 @@
 | tst.js:34:21:34:26 | (baz)? | This regular expression always matches when used in a test $@, as it can match an empty substring. | tst.js:34:10:34:35 | /^foo\|b ... test(x) | here |
 | tst.js:58:20:58:25 | [a-z]* | This regular expression always the matches at index 0 when used $@, as it matches the empty substring. | tst.js:58:10:58:27 | x.search(/[a-z]*/) | here |
 | tst.js:70:20:70:26 | ^(foo)? | This regular expression always the matches at index 0 when used $@, as it matches the empty substring. | tst.js:70:10:70:28 | x.search(/^(foo)?/) | here |
-| tst.js:86:22:86:21 |  | This regular expression always matches when used in a test $@, as it can match an empty substring. | tst.js:86:10:86:31 | new Reg ... test(x) | here |

From 9227203336c48dcc1ccf778f30ad9f7f5652d8b7 Mon Sep 17 00:00:00 2001
From: Paolo Tranquilli <redsun82@github.com>
Date: Tue, 13 Sep 2022 11:00:47 +0200
Subject: [PATCH 120/203] Swift: print a helpful message on macOS ARM

Also remove the tentative way compilation was expected to be fixed on
macOS ARM without really working.

In the future we will create universal binaries (which requires
compiling our prebuilt package for ARM as well), but until then we must
require the developer to pass `--cpu=darwin_x86_64` to the build
command when building on an ARM macOS platform like the M1. This will be
printed out explicitly now if it's not the case.
---
 swift/rules.bzl                  |  6 +-----
 swift/tools/prebuilt/BUILD.bazel | 21 +++++++++------------
 2 files changed, 10 insertions(+), 17 deletions(-)

diff --git a/swift/rules.bzl b/swift/rules.bzl
index 29a1a704f02..ba9e4b0e8bf 100644
--- a/swift/rules.bzl
+++ b/swift/rules.bzl
@@ -5,11 +5,7 @@ def _wrap_cc(rule, kwargs):
     _add_args(kwargs, "copts", [
         # Required by LLVM/Swift
         "-fno-rtti",
-    ] + select({
-        # temporary, before we do universal merging and have an arm prebuilt package, we make arm build x86
-        "@platforms//os:macos": ["-arch=x86_64"],
-        "//conditions:default": [],
-    }))
+    ])
     _add_args(kwargs, "features", [
         # temporary, before we do universal merging
         "-universal_binaries",
diff --git a/swift/tools/prebuilt/BUILD.bazel b/swift/tools/prebuilt/BUILD.bazel
index db5c09085a4..38fb5cecbc1 100644
--- a/swift/tools/prebuilt/BUILD.bazel
+++ b/swift/tools/prebuilt/BUILD.bazel
@@ -1,21 +1,18 @@
 package(default_visibility = ["//swift:__subpackages__"])
 
 #TODO we will be introducing universal binaries at a later stage, when we have both architectures prebuilt for macOS
-# for the moment, we make arm build an x86_64 binary
-_arch_override = {
-    "darwin_arm64": "darwin_x86_64",
-}
-
+# for the moment, we require --cpu=darwin_x86_64 on an ARM macOS
 [
     alias(
         name = name,
-        actual = select({
-            "@bazel_tools//src/conditions:%s" % arch: "@swift_prebuilt_%s//:%s" % (
-                _arch_override.get(arch, arch),
-                name,
-            )
-            for arch in ("linux", "darwin_x86_64", "darwin_arm64")
-        }),
+        actual = select(
+            {
+                "@bazel_tools//src/conditions:%s" % arch: "@swift_prebuilt_%s//:%s" % (arch, name)
+                for arch in ("linux", "darwin_x86_64")
+            },
+            no_match_error = "Unsupported platform. Support for the ARM macOS platform is still a todo, " +
+                             "please pass --cpu=darwin_x86_64 for the time being",
+        ),
     )
     for name in ("swift-llvm-support", "swift-test-sdk")
 ]

From 87db5fc6b1077521eb1b0c25874ad73d8fa2ce8f Mon Sep 17 00:00:00 2001
From: Tom Hvitved <hvitved@github.com>
Date: Tue, 13 Sep 2022 11:34:33 +0200
Subject: [PATCH 121/203] Ruby: Add tests for `getEnclosing{Method,Module}`

---
 .../library-tests/modules/ancestors.expected  |   2 +-
 .../library-tests/modules/callgraph.expected  |   1 +
 .../library-tests/modules/methods.expected    | 104 ++++
 ruby/ql/test/library-tests/modules/methods.ql |   2 +
 .../library-tests/modules/modules.expected    | 529 +++++++++++++++++-
 ruby/ql/test/library-tests/modules/modules.ql |   2 +
 ruby/ql/test/library-tests/modules/modules.rb |   8 +
 .../modules/superclasses.expected             |   2 +-
 8 files changed, 638 insertions(+), 12 deletions(-)

diff --git a/ruby/ql/test/library-tests/modules/ancestors.expected b/ruby/ql/test/library-tests/modules/ancestors.expected
index f371d95a301..ff6d480762a 100644
--- a/ruby/ql/test/library-tests/modules/ancestors.expected
+++ b/ruby/ql/test/library-tests/modules/ancestors.expected
@@ -155,7 +155,7 @@ modules.rb:
 #  116| XX::YY
 #-----| super -> YY
 
-#  120| Test::Foo1::Bar::Baz
+#  123| Test::Foo1::Bar::Baz
 
 modules_rec.rb:
 #    1| B::A
diff --git a/ruby/ql/test/library-tests/modules/callgraph.expected b/ruby/ql/test/library-tests/modules/callgraph.expected
index d40ab5351e5..e07cbdd0779 100644
--- a/ruby/ql/test/library-tests/modules/callgraph.expected
+++ b/ruby/ql/test/library-tests/modules/callgraph.expected
@@ -79,6 +79,7 @@ getTarget
 | modules.rb:90:24:90:36 | call to prepend | calls.rb:93:5:93:20 | prepend |
 | modules.rb:96:3:96:14 | call to include | calls.rb:92:5:92:20 | include |
 | modules.rb:102:3:102:16 | call to prepend | calls.rb:93:5:93:20 | prepend |
+| modules.rb:126:6:126:11 | call to new | calls.rb:99:5:99:16 | new |
 | modules_rec.rb:8:3:8:11 | call to prepend | calls.rb:93:5:93:20 | prepend |
 | private.rb:2:3:3:5 | call to private | calls.rb:94:5:94:20 | private |
 | private.rb:10:3:10:19 | call to private | calls.rb:94:5:94:20 | private |
diff --git a/ruby/ql/test/library-tests/modules/methods.expected b/ruby/ql/test/library-tests/modules/methods.expected
index a8df6e9ffe8..853e6e2b7ec 100644
--- a/ruby/ql/test/library-tests/modules/methods.expected
+++ b/ruby/ql/test/library-tests/modules/methods.expected
@@ -272,3 +272,107 @@ lookupMethod
 | private.rb:42:1:60:3 | F | private3 | private.rb:55:3:56:5 | private3 |
 | private.rb:42:1:60:3 | F | private4 | private.rb:58:3:59:5 | private4 |
 | private.rb:42:1:60:3 | F | public | private.rb:46:3:47:5 | public |
+enclosingMethod
+| calls.rb:2:5:2:14 | call to puts | calls.rb:1:1:3:3 | foo |
+| calls.rb:2:5:2:14 | self | calls.rb:1:1:3:3 | foo |
+| calls.rb:2:10:2:14 | "foo" | calls.rb:1:1:3:3 | foo |
+| calls.rb:2:11:2:13 | foo | calls.rb:1:1:3:3 | foo |
+| calls.rb:8:5:8:14 | call to puts | calls.rb:7:1:9:3 | bar |
+| calls.rb:8:5:8:14 | self | calls.rb:7:1:9:3 | bar |
+| calls.rb:8:10:8:14 | "bar" | calls.rb:7:1:9:3 | bar |
+| calls.rb:8:11:8:13 | bar | calls.rb:7:1:9:3 | bar |
+| calls.rb:38:9:38:18 | call to instance_m | calls.rb:37:5:43:7 | baz |
+| calls.rb:38:9:38:18 | self | calls.rb:37:5:43:7 | baz |
+| calls.rb:39:9:39:12 | self | calls.rb:37:5:43:7 | baz |
+| calls.rb:39:9:39:23 | call to instance_m | calls.rb:37:5:43:7 | baz |
+| calls.rb:41:9:41:19 | call to singleton_m | calls.rb:37:5:43:7 | baz |
+| calls.rb:41:9:41:19 | self | calls.rb:37:5:43:7 | baz |
+| calls.rb:42:9:42:12 | self | calls.rb:37:5:43:7 | baz |
+| calls.rb:42:9:42:24 | call to singleton_m | calls.rb:37:5:43:7 | baz |
+| calls.rb:53:9:53:13 | call to super | calls.rb:52:5:54:7 | baz |
+| calls.rb:62:18:62:18 | a | calls.rb:62:1:65:3 | optional_arg |
+| calls.rb:62:18:62:18 | a | calls.rb:62:1:65:3 | optional_arg |
+| calls.rb:62:22:62:22 | 4 | calls.rb:62:1:65:3 | optional_arg |
+| calls.rb:62:25:62:25 | b | calls.rb:62:1:65:3 | optional_arg |
+| calls.rb:62:25:62:25 | b | calls.rb:62:1:65:3 | optional_arg |
+| calls.rb:62:28:62:28 | 5 | calls.rb:62:1:65:3 | optional_arg |
+| calls.rb:63:5:63:5 | a | calls.rb:62:1:65:3 | optional_arg |
+| calls.rb:63:5:63:16 | call to bit_length | calls.rb:62:1:65:3 | optional_arg |
+| calls.rb:64:5:64:5 | b | calls.rb:62:1:65:3 | optional_arg |
+| calls.rb:64:5:64:16 | call to bit_length | calls.rb:62:1:65:3 | optional_arg |
+| calls.rb:68:5:68:11 | yield ... | calls.rb:67:1:69:3 | call_block |
+| calls.rb:68:11:68:11 | 1 | calls.rb:67:1:69:3 | call_block |
+| calls.rb:72:5:72:7 | var | calls.rb:71:1:75:3 | foo |
+| calls.rb:72:5:72:18 | ... = ... | calls.rb:71:1:75:3 | foo |
+| calls.rb:72:11:72:14 | Hash | calls.rb:71:1:75:3 | foo |
+| calls.rb:72:11:72:18 | call to new | calls.rb:71:1:75:3 | foo |
+| calls.rb:73:5:73:7 | var | calls.rb:71:1:75:3 | foo |
+| calls.rb:73:5:73:10 | ...[...] | calls.rb:71:1:75:3 | foo |
+| calls.rb:73:9:73:9 | 1 | calls.rb:71:1:75:3 | foo |
+| calls.rb:74:5:74:29 | call to call_block | calls.rb:71:1:75:3 | foo |
+| calls.rb:74:5:74:29 | self | calls.rb:71:1:75:3 | foo |
+| calls.rb:74:16:74:29 | { ... } | calls.rb:71:1:75:3 | foo |
+| calls.rb:74:19:74:19 | x | calls.rb:71:1:75:3 | foo |
+| calls.rb:74:19:74:19 | x | calls.rb:71:1:75:3 | foo |
+| calls.rb:74:22:74:24 | var | calls.rb:71:1:75:3 | foo |
+| calls.rb:74:22:74:27 | ...[...] | calls.rb:71:1:75:3 | foo |
+| calls.rb:74:26:74:26 | x | calls.rb:71:1:75:3 | foo |
+| calls.rb:110:15:110:19 | &body | calls.rb:110:3:116:5 | foreach |
+| calls.rb:110:16:110:19 | body | calls.rb:110:3:116:5 | foreach |
+| calls.rb:111:5:111:5 | x | calls.rb:110:3:116:5 | foreach |
+| calls.rb:111:5:111:9 | ... = ... | calls.rb:110:3:116:5 | foreach |
+| calls.rb:111:9:111:9 | 0 | calls.rb:110:3:116:5 | foreach |
+| calls.rb:112:5:115:7 | while ... | calls.rb:110:3:116:5 | foreach |
+| calls.rb:112:11:112:11 | x | calls.rb:110:3:116:5 | foreach |
+| calls.rb:112:11:112:25 | ... < ... | calls.rb:110:3:116:5 | foreach |
+| calls.rb:112:15:112:18 | self | calls.rb:110:3:116:5 | foreach |
+| calls.rb:112:15:112:25 | call to length | calls.rb:110:3:116:5 | foreach |
+| calls.rb:112:26:115:7 | do ... | calls.rb:110:3:116:5 | foreach |
+| calls.rb:113:9:113:24 | yield ... | calls.rb:110:3:116:5 | foreach |
+| calls.rb:113:15:113:15 | x | calls.rb:110:3:116:5 | foreach |
+| calls.rb:113:18:113:21 | self | calls.rb:110:3:116:5 | foreach |
+| calls.rb:113:18:113:24 | ...[...] | calls.rb:110:3:116:5 | foreach |
+| calls.rb:113:23:113:23 | x | calls.rb:110:3:116:5 | foreach |
+| calls.rb:114:9:114:9 | x | calls.rb:110:3:116:5 | foreach |
+| calls.rb:114:9:114:9 | x | calls.rb:110:3:116:5 | foreach |
+| calls.rb:114:9:114:14 | ... += ... | calls.rb:110:3:116:5 | foreach |
+| calls.rb:114:9:114:14 | ... = ... | calls.rb:110:3:116:5 | foreach |
+| calls.rb:114:11:114:12 | ... + ... | calls.rb:110:3:116:5 | foreach |
+| calls.rb:114:14:114:14 | 1 | calls.rb:110:3:116:5 | foreach |
+| calls.rb:120:5:120:20 | yield ... | calls.rb:119:1:121:3 | funny |
+| calls.rb:120:11:120:20 | "prefix: " | calls.rb:119:1:121:3 | funny |
+| calls.rb:120:12:120:19 | prefix:  | calls.rb:119:1:121:3 | funny |
+| calls.rb:137:14:137:15 | &b | calls.rb:137:1:139:3 | indirect |
+| calls.rb:137:15:137:15 | b | calls.rb:137:1:139:3 | indirect |
+| calls.rb:138:5:138:17 | call to call_block | calls.rb:137:1:139:3 | indirect |
+| calls.rb:138:5:138:17 | self | calls.rb:137:1:139:3 | indirect |
+| calls.rb:138:16:138:17 | &... | calls.rb:137:1:139:3 | indirect |
+| calls.rb:138:17:138:17 | b | calls.rb:137:1:139:3 | indirect |
+| calls.rb:146:9:146:12 | self | calls.rb:145:5:147:7 | s_method |
+| calls.rb:146:9:146:17 | call to to_s | calls.rb:145:5:147:7 | s_method |
+| calls.rb:171:9:171:12 | self | calls.rb:170:5:172:7 | singleton_a |
+| calls.rb:171:9:171:24 | call to singleton_b | calls.rb:170:5:172:7 | singleton_a |
+| calls.rb:175:9:175:12 | self | calls.rb:174:5:176:7 | singleton_b |
+| calls.rb:175:9:175:24 | call to singleton_c | calls.rb:174:5:176:7 | singleton_b |
+| calls.rb:182:9:182:12 | self | calls.rb:181:5:183:7 | singleton_d |
+| calls.rb:182:9:182:24 | call to singleton_a | calls.rb:181:5:183:7 | singleton_d |
+| hello.rb:3:9:3:22 | return | hello.rb:2:5:4:7 | hello |
+| hello.rb:3:16:3:22 | "hello" | hello.rb:2:5:4:7 | hello |
+| hello.rb:3:17:3:21 | hello | hello.rb:2:5:4:7 | hello |
+| hello.rb:6:9:6:22 | return | hello.rb:5:5:7:7 | world |
+| hello.rb:6:16:6:22 | "world" | hello.rb:5:5:7:7 | world |
+| hello.rb:6:17:6:21 | world | hello.rb:5:5:7:7 | world |
+| hello.rb:14:9:14:20 | return | hello.rb:13:5:15:7 | message |
+| hello.rb:14:16:14:20 | call to hello | hello.rb:13:5:15:7 | message |
+| hello.rb:14:16:14:20 | self | hello.rb:13:5:15:7 | message |
+| hello.rb:20:9:20:40 | return | hello.rb:19:5:21:7 | message |
+| hello.rb:20:16:20:20 | call to super | hello.rb:19:5:21:7 | message |
+| hello.rb:20:16:20:26 | ... + ... | hello.rb:19:5:21:7 | message |
+| hello.rb:20:16:20:34 | ... + ... | hello.rb:19:5:21:7 | message |
+| hello.rb:20:16:20:40 | ... + ... | hello.rb:19:5:21:7 | message |
+| hello.rb:20:24:20:26 | " " | hello.rb:19:5:21:7 | message |
+| hello.rb:20:25:20:25 |   | hello.rb:19:5:21:7 | message |
+| hello.rb:20:30:20:34 | call to world | hello.rb:19:5:21:7 | message |
+| hello.rb:20:30:20:34 | self | hello.rb:19:5:21:7 | message |
+| hello.rb:20:38:20:40 | "!" | hello.rb:19:5:21:7 | message |
+| hello.rb:20:39:20:39 | ! | hello.rb:19:5:21:7 | message |
diff --git a/ruby/ql/test/library-tests/modules/methods.ql b/ruby/ql/test/library-tests/modules/methods.ql
index e92ce65e684..6442dfb9e51 100644
--- a/ruby/ql/test/library-tests/modules/methods.ql
+++ b/ruby/ql/test/library-tests/modules/methods.ql
@@ -6,3 +6,5 @@ query MethodBase getMethod(Module m, string name) {
 }
 
 query MethodBase lookupMethod(Module m, string name) { result = M::lookupMethod(m, name) }
+
+query predicate enclosingMethod(AstNode n, MethodBase m) { m = n.getEnclosingMethod() }
diff --git a/ruby/ql/test/library-tests/modules/modules.expected b/ruby/ql/test/library-tests/modules/modules.expected
index 29aacf18e5d..d0d59bc3a77 100644
--- a/ruby/ql/test/library-tests/modules/modules.expected
+++ b/ruby/ql/test/library-tests/modules/modules.expected
@@ -54,9 +54,9 @@ getModule
 | modules.rb:107:1:110:3 | MM |
 | modules.rb:108:3:109:5 | MM::MM |
 | modules.rb:112:1:113:3 | YY |
-| modules.rb:115:1:118:3 | XX |
+| modules.rb:115:1:121:3 | XX |
 | modules.rb:116:7:117:9 | XX::YY |
-| modules.rb:120:1:121:3 | Test::Foo1::Bar::Baz |
+| modules.rb:123:1:124:3 | Test::Foo1::Bar::Baz |
 | modules_rec.rb:1:1:2:3 | B::A |
 | modules_rec.rb:4:1:5:3 | A::B |
 | private.rb:1:1:29:3 | E |
@@ -72,7 +72,7 @@ getADeclaration
 | calls.rb:97:1:100:3 | Object | calls.rb:1:1:186:22 | calls.rb |
 | calls.rb:97:1:100:3 | Object | calls.rb:97:1:100:3 | Object |
 | calls.rb:97:1:100:3 | Object | hello.rb:1:1:22:3 | hello.rb |
-| calls.rb:97:1:100:3 | Object | modules.rb:1:1:121:4 | modules.rb |
+| calls.rb:97:1:100:3 | Object | modules.rb:1:1:129:4 | modules.rb |
 | calls.rb:97:1:100:3 | Object | modules_rec.rb:1:1:11:26 | modules_rec.rb |
 | calls.rb:97:1:100:3 | Object | private.rb:1:1:60:3 | private.rb |
 | calls.rb:102:1:104:3 | Hash | calls.rb:102:1:104:3 | Hash |
@@ -115,9 +115,9 @@ getADeclaration
 | modules.rb:107:1:110:3 | MM | modules.rb:107:1:110:3 | MM |
 | modules.rb:108:3:109:5 | MM::MM | modules.rb:108:3:109:5 | MM |
 | modules.rb:112:1:113:3 | YY | modules.rb:112:1:113:3 | YY |
-| modules.rb:115:1:118:3 | XX | modules.rb:115:1:118:3 | XX |
+| modules.rb:115:1:121:3 | XX | modules.rb:115:1:121:3 | XX |
 | modules.rb:116:7:117:9 | XX::YY | modules.rb:116:7:117:9 | YY |
-| modules.rb:120:1:121:3 | Test::Foo1::Bar::Baz | modules.rb:120:1:121:3 | Baz |
+| modules.rb:123:1:124:3 | Test::Foo1::Bar::Baz | modules.rb:123:1:124:3 | Baz |
 | modules_rec.rb:1:1:2:3 | B::A | modules_rec.rb:1:1:2:3 | A |
 | modules_rec.rb:4:1:5:3 | A::B | modules_rec.rb:4:1:5:3 | B |
 | private.rb:1:1:29:3 | E | private.rb:1:1:29:3 | E |
@@ -205,9 +205,10 @@ resolveConstantReadAccess
 | modules.rb:103:10:103:13 | Foo2 | Test::Foo2 |
 | modules.rb:108:10:108:11 | MM | MM |
 | modules.rb:116:18:116:19 | YY | YY |
-| modules.rb:120:8:120:11 | Test | Test |
-| modules.rb:120:8:120:17 | Foo1 | Test::Foo1 |
-| modules.rb:120:8:120:22 | Bar | Test::Foo1::Bar |
+| modules.rb:123:8:123:11 | Test | Test |
+| modules.rb:123:8:123:17 | Foo1 | Test::Foo1 |
+| modules.rb:123:8:123:22 | Bar | Test::Foo1::Bar |
+| modules.rb:126:6:126:7 | XX | XX |
 | modules_rec.rb:1:7:1:7 | B | B |
 | modules_rec.rb:4:7:4:7 | A | A |
 | modules_rec.rb:7:11:7:11 | B | B |
@@ -276,11 +277,519 @@ resolveConstantWriteAccess
 | modules.rb:108:3:109:5 | MM | MM::MM |
 | modules.rb:108:3:109:5 | MM | MM::MM::MM |
 | modules.rb:112:1:113:3 | YY | YY |
-| modules.rb:115:1:118:3 | XX | XX |
+| modules.rb:115:1:121:3 | XX | XX |
 | modules.rb:116:7:117:9 | YY | XX::YY |
-| modules.rb:120:1:121:3 | Baz | Test::Foo1::Bar::Baz |
+| modules.rb:123:1:124:3 | Baz | Test::Foo1::Bar::Baz |
 | modules_rec.rb:1:1:2:3 | A | B::A |
 | modules_rec.rb:4:1:5:3 | B | A::B |
 | modules_rec.rb:7:1:9:3 | A | A |
 | private.rb:1:1:29:3 | E | E |
 | private.rb:42:1:60:3 | F | F |
+enclosingModule
+| calls.rb:1:1:3:3 | foo | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:2:5:2:14 | call to puts | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:2:5:2:14 | self | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:2:10:2:14 | "foo" | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:2:11:2:13 | foo | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:5:1:5:3 | call to foo | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:5:1:5:3 | self | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:7:1:9:3 | bar | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:7:5:7:8 | self | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:8:5:8:14 | call to puts | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:8:5:8:14 | self | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:8:10:8:14 | "bar" | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:8:11:8:13 | bar | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:11:1:11:4 | self | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:11:1:11:8 | call to bar | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:13:1:13:4 | self | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:13:1:13:8 | call to foo | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:15:1:24:3 | M | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:16:5:16:23 | instance_m | calls.rb:15:1:24:3 | M |
+| calls.rb:17:5:17:29 | singleton_m | calls.rb:15:1:24:3 | M |
+| calls.rb:17:9:17:12 | self | calls.rb:15:1:24:3 | M |
+| calls.rb:19:5:19:14 | call to instance_m | calls.rb:15:1:24:3 | M |
+| calls.rb:19:5:19:14 | self | calls.rb:15:1:24:3 | M |
+| calls.rb:20:5:20:8 | self | calls.rb:15:1:24:3 | M |
+| calls.rb:20:5:20:19 | call to instance_m | calls.rb:15:1:24:3 | M |
+| calls.rb:22:5:22:15 | call to singleton_m | calls.rb:15:1:24:3 | M |
+| calls.rb:22:5:22:15 | self | calls.rb:15:1:24:3 | M |
+| calls.rb:23:5:23:8 | self | calls.rb:15:1:24:3 | M |
+| calls.rb:23:5:23:20 | call to singleton_m | calls.rb:15:1:24:3 | M |
+| calls.rb:26:1:26:1 | M | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:26:1:26:12 | call to instance_m | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:27:1:27:1 | M | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:27:1:27:13 | call to singleton_m | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:29:1:44:3 | C | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:30:5:30:13 | call to include | calls.rb:29:1:44:3 | C |
+| calls.rb:30:5:30:13 | self | calls.rb:29:1:44:3 | C |
+| calls.rb:30:13:30:13 | M | calls.rb:29:1:44:3 | C |
+| calls.rb:31:5:31:14 | call to instance_m | calls.rb:29:1:44:3 | C |
+| calls.rb:31:5:31:14 | self | calls.rb:29:1:44:3 | C |
+| calls.rb:32:5:32:8 | self | calls.rb:29:1:44:3 | C |
+| calls.rb:32:5:32:19 | call to instance_m | calls.rb:29:1:44:3 | C |
+| calls.rb:34:5:34:15 | call to singleton_m | calls.rb:29:1:44:3 | C |
+| calls.rb:34:5:34:15 | self | calls.rb:29:1:44:3 | C |
+| calls.rb:35:5:35:8 | self | calls.rb:29:1:44:3 | C |
+| calls.rb:35:5:35:20 | call to singleton_m | calls.rb:29:1:44:3 | C |
+| calls.rb:37:5:43:7 | baz | calls.rb:29:1:44:3 | C |
+| calls.rb:38:9:38:18 | call to instance_m | calls.rb:29:1:44:3 | C |
+| calls.rb:38:9:38:18 | self | calls.rb:29:1:44:3 | C |
+| calls.rb:39:9:39:12 | self | calls.rb:29:1:44:3 | C |
+| calls.rb:39:9:39:23 | call to instance_m | calls.rb:29:1:44:3 | C |
+| calls.rb:41:9:41:19 | call to singleton_m | calls.rb:29:1:44:3 | C |
+| calls.rb:41:9:41:19 | self | calls.rb:29:1:44:3 | C |
+| calls.rb:42:9:42:12 | self | calls.rb:29:1:44:3 | C |
+| calls.rb:42:9:42:24 | call to singleton_m | calls.rb:29:1:44:3 | C |
+| calls.rb:46:1:46:1 | c | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:46:1:46:9 | ... = ... | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:46:5:46:5 | C | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:46:5:46:9 | call to new | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:47:1:47:1 | c | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:47:1:47:5 | call to baz | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:48:1:48:1 | c | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:48:1:48:13 | call to singleton_m | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:49:1:49:1 | c | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:49:1:49:12 | call to instance_m | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:51:1:55:3 | D | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:51:11:51:11 | C | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:52:5:54:7 | baz | calls.rb:51:1:55:3 | D |
+| calls.rb:53:9:53:13 | call to super | calls.rb:51:1:55:3 | D |
+| calls.rb:57:1:57:1 | d | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:57:1:57:9 | ... = ... | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:57:5:57:5 | D | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:57:5:57:9 | call to new | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:58:1:58:1 | d | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:58:1:58:5 | call to baz | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:59:1:59:1 | d | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:59:1:59:13 | call to singleton_m | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:60:1:60:1 | d | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:60:1:60:12 | call to instance_m | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:62:1:65:3 | optional_arg | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:62:18:62:18 | a | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:62:18:62:18 | a | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:62:22:62:22 | 4 | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:62:25:62:25 | b | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:62:25:62:25 | b | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:62:28:62:28 | 5 | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:63:5:63:5 | a | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:63:5:63:16 | call to bit_length | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:64:5:64:5 | b | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:64:5:64:16 | call to bit_length | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:67:1:69:3 | call_block | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:68:5:68:11 | yield ... | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:68:11:68:11 | 1 | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:71:1:75:3 | foo | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:72:5:72:7 | var | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:72:5:72:18 | ... = ... | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:72:11:72:14 | Hash | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:72:11:72:18 | call to new | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:73:5:73:7 | var | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:73:5:73:10 | ...[...] | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:73:9:73:9 | 1 | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:74:5:74:29 | call to call_block | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:74:5:74:29 | self | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:74:16:74:29 | { ... } | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:74:19:74:19 | x | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:74:19:74:19 | x | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:74:22:74:24 | var | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:74:22:74:27 | ...[...] | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:74:26:74:26 | x | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:77:1:80:3 | Integer | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:78:5:78:23 | bit_length | calls.rb:77:1:80:3 | Integer |
+| calls.rb:79:5:79:16 | abs | calls.rb:77:1:80:3 | Integer |
+| calls.rb:82:1:84:3 | String | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:83:5:83:23 | capitalize | calls.rb:82:1:84:3 | String |
+| calls.rb:86:1:88:3 | Kernel | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:87:5:87:17 | puts | calls.rb:86:1:88:3 | Kernel |
+| calls.rb:90:1:95:3 | Module | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:91:5:91:24 | module_eval | calls.rb:90:1:95:3 | Module |
+| calls.rb:92:5:92:20 | include | calls.rb:90:1:95:3 | Module |
+| calls.rb:93:5:93:20 | prepend | calls.rb:90:1:95:3 | Module |
+| calls.rb:94:5:94:20 | private | calls.rb:90:1:95:3 | Module |
+| calls.rb:97:1:100:3 | Object | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:97:16:97:21 | Module | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:98:5:98:18 | call to include | calls.rb:97:1:100:3 | Object |
+| calls.rb:98:5:98:18 | self | calls.rb:97:1:100:3 | Object |
+| calls.rb:98:13:98:18 | Kernel | calls.rb:97:1:100:3 | Object |
+| calls.rb:99:5:99:16 | new | calls.rb:97:1:100:3 | Object |
+| calls.rb:102:1:104:3 | Hash | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:103:5:103:15 | [] | calls.rb:102:1:104:3 | Hash |
+| calls.rb:106:1:117:3 | Array | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:107:3:107:13 | [] | calls.rb:106:1:117:3 | Array |
+| calls.rb:108:3:108:17 | length | calls.rb:106:1:117:3 | Array |
+| calls.rb:110:3:116:5 | foreach | calls.rb:106:1:117:3 | Array |
+| calls.rb:110:15:110:19 | &body | calls.rb:106:1:117:3 | Array |
+| calls.rb:110:16:110:19 | body | calls.rb:106:1:117:3 | Array |
+| calls.rb:111:5:111:5 | x | calls.rb:106:1:117:3 | Array |
+| calls.rb:111:5:111:9 | ... = ... | calls.rb:106:1:117:3 | Array |
+| calls.rb:111:9:111:9 | 0 | calls.rb:106:1:117:3 | Array |
+| calls.rb:112:5:115:7 | while ... | calls.rb:106:1:117:3 | Array |
+| calls.rb:112:11:112:11 | x | calls.rb:106:1:117:3 | Array |
+| calls.rb:112:11:112:25 | ... < ... | calls.rb:106:1:117:3 | Array |
+| calls.rb:112:15:112:18 | self | calls.rb:106:1:117:3 | Array |
+| calls.rb:112:15:112:25 | call to length | calls.rb:106:1:117:3 | Array |
+| calls.rb:112:26:115:7 | do ... | calls.rb:106:1:117:3 | Array |
+| calls.rb:113:9:113:24 | yield ... | calls.rb:106:1:117:3 | Array |
+| calls.rb:113:15:113:15 | x | calls.rb:106:1:117:3 | Array |
+| calls.rb:113:18:113:21 | self | calls.rb:106:1:117:3 | Array |
+| calls.rb:113:18:113:24 | ...[...] | calls.rb:106:1:117:3 | Array |
+| calls.rb:113:23:113:23 | x | calls.rb:106:1:117:3 | Array |
+| calls.rb:114:9:114:9 | x | calls.rb:106:1:117:3 | Array |
+| calls.rb:114:9:114:9 | x | calls.rb:106:1:117:3 | Array |
+| calls.rb:114:9:114:14 | ... += ... | calls.rb:106:1:117:3 | Array |
+| calls.rb:114:9:114:14 | ... = ... | calls.rb:106:1:117:3 | Array |
+| calls.rb:114:11:114:12 | ... + ... | calls.rb:106:1:117:3 | Array |
+| calls.rb:114:14:114:14 | 1 | calls.rb:106:1:117:3 | Array |
+| calls.rb:119:1:121:3 | funny | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:120:5:120:20 | yield ... | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:120:11:120:20 | "prefix: " | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:120:12:120:19 | prefix:  | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:123:1:123:30 | call to funny | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:123:1:123:30 | self | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:123:7:123:30 | { ... } | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:123:10:123:10 | i | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:123:10:123:10 | i | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:123:13:123:29 | call to puts | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:123:13:123:29 | self | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:123:18:123:18 | i | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:123:18:123:29 | call to capitalize | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:125:1:125:3 | "a" | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:125:1:125:14 | call to capitalize | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:125:2:125:2 | a | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:126:1:126:1 | 1 | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:126:1:126:12 | call to bit_length | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:127:1:127:1 | 1 | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:127:1:127:5 | call to abs | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:1:129:13 | Array | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:1:129:13 | [...] | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:1:129:13 | call to [] | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:1:129:62 | call to foreach | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:2:129:4 | "a" | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:3:129:3 | a | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:6:129:8 | "b" | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:7:129:7 | b | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:10:129:12 | "c" | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:11:129:11 | c | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:23:129:62 | { ... } | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:26:129:26 | i | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:26:129:26 | i | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:29:129:29 | v | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:29:129:29 | v | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:32:129:61 | call to puts | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:32:129:61 | self | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:37:129:61 | "#{...} -> #{...}" | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:38:129:41 | #{...} | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:40:129:40 | i | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:42:129:45 |  ->  | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:46:129:60 | #{...} | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:48:129:48 | v | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:129:48:129:59 | call to capitalize | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:131:1:131:7 | Array | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:131:1:131:7 | [...] | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:131:1:131:7 | call to [] | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:131:1:131:35 | call to foreach | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:131:2:131:2 | 1 | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:131:4:131:4 | 2 | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:131:6:131:6 | 3 | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:131:17:131:35 | { ... } | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:131:20:131:20 | i | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:131:20:131:20 | i | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:131:23:131:23 | i | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:131:23:131:34 | call to bit_length | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:133:1:133:7 | Array | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:133:1:133:7 | [...] | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:133:1:133:7 | call to [] | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:133:1:133:40 | call to foreach | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:133:2:133:2 | 1 | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:133:4:133:4 | 2 | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:133:6:133:6 | 3 | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:133:17:133:40 | { ... } | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:133:20:133:20 | i | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:133:20:133:20 | i | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:133:23:133:39 | call to puts | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:133:23:133:39 | self | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:133:28:133:28 | i | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:133:28:133:39 | call to capitalize | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:135:1:135:8 | Array | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:135:1:135:8 | [...] | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:135:1:135:8 | call to [] | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:135:1:135:37 | call to foreach | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:135:2:135:2 | 1 | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:135:4:135:5 | - ... | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:135:5:135:5 | 2 | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:135:7:135:7 | 3 | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:135:18:135:37 | { ... } | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:135:21:135:21 | _ | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:135:21:135:21 | _ | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:135:24:135:24 | v | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:135:24:135:24 | v | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:135:27:135:36 | call to puts | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:135:27:135:36 | self | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:135:32:135:32 | v | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:135:32:135:36 | call to abs | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:137:1:139:3 | indirect | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:137:14:137:15 | &b | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:137:15:137:15 | b | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:138:5:138:17 | call to call_block | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:138:5:138:17 | self | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:138:16:138:17 | &... | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:138:17:138:17 | b | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:141:1:141:28 | call to indirect | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:141:1:141:28 | self | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:141:10:141:28 | { ... } | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:141:13:141:13 | i | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:141:13:141:13 | i | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:141:16:141:16 | i | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:141:16:141:27 | call to bit_length | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:144:1:148:3 | S | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:145:5:147:7 | s_method | calls.rb:144:1:148:3 | S |
+| calls.rb:146:9:146:12 | self | calls.rb:144:1:148:3 | S |
+| calls.rb:146:9:146:17 | call to to_s | calls.rb:144:1:148:3 | S |
+| calls.rb:150:1:153:3 | A | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:150:11:150:11 | S | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:151:5:152:7 | to_s | calls.rb:150:1:153:3 | A |
+| calls.rb:155:1:158:3 | B | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:155:11:155:11 | S | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:156:5:157:7 | to_s | calls.rb:155:1:158:3 | B |
+| calls.rb:160:1:160:1 | S | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:160:1:160:5 | call to new | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:160:1:160:14 | call to s_method | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:161:1:161:1 | A | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:161:1:161:5 | call to new | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:161:1:161:14 | call to s_method | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:162:1:162:1 | B | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:162:1:162:5 | call to new | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:162:1:162:14 | call to s_method | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:164:1:165:3 | private_on_main | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:167:1:167:15 | call to private_on_main | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:167:1:167:15 | self | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:169:1:184:3 | Singletons | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:170:5:172:7 | singleton_a | calls.rb:169:1:184:3 | Singletons |
+| calls.rb:170:9:170:12 | self | calls.rb:169:1:184:3 | Singletons |
+| calls.rb:171:9:171:12 | self | calls.rb:169:1:184:3 | Singletons |
+| calls.rb:171:9:171:24 | call to singleton_b | calls.rb:169:1:184:3 | Singletons |
+| calls.rb:174:5:176:7 | singleton_b | calls.rb:169:1:184:3 | Singletons |
+| calls.rb:174:9:174:12 | self | calls.rb:169:1:184:3 | Singletons |
+| calls.rb:175:9:175:12 | self | calls.rb:169:1:184:3 | Singletons |
+| calls.rb:175:9:175:24 | call to singleton_c | calls.rb:169:1:184:3 | Singletons |
+| calls.rb:178:5:179:7 | singleton_c | calls.rb:169:1:184:3 | Singletons |
+| calls.rb:178:9:178:12 | self | calls.rb:169:1:184:3 | Singletons |
+| calls.rb:181:5:183:7 | singleton_d | calls.rb:169:1:184:3 | Singletons |
+| calls.rb:181:9:181:12 | self | calls.rb:169:1:184:3 | Singletons |
+| calls.rb:182:9:182:12 | self | calls.rb:169:1:184:3 | Singletons |
+| calls.rb:182:9:182:24 | call to singleton_a | calls.rb:169:1:184:3 | Singletons |
+| calls.rb:186:1:186:10 | Singletons | calls.rb:1:1:186:22 | calls.rb |
+| calls.rb:186:1:186:22 | call to singleton_a | calls.rb:1:1:186:22 | calls.rb |
+| hello.rb:1:1:8:3 | EnglishWords | hello.rb:1:1:22:3 | hello.rb |
+| hello.rb:2:5:4:7 | hello | hello.rb:1:1:8:3 | EnglishWords |
+| hello.rb:3:9:3:22 | return | hello.rb:1:1:8:3 | EnglishWords |
+| hello.rb:3:16:3:22 | "hello" | hello.rb:1:1:8:3 | EnglishWords |
+| hello.rb:3:17:3:21 | hello | hello.rb:1:1:8:3 | EnglishWords |
+| hello.rb:5:5:7:7 | world | hello.rb:1:1:8:3 | EnglishWords |
+| hello.rb:6:9:6:22 | return | hello.rb:1:1:8:3 | EnglishWords |
+| hello.rb:6:16:6:22 | "world" | hello.rb:1:1:8:3 | EnglishWords |
+| hello.rb:6:17:6:21 | world | hello.rb:1:1:8:3 | EnglishWords |
+| hello.rb:11:1:16:3 | Greeting | hello.rb:1:1:22:3 | hello.rb |
+| hello.rb:12:5:12:24 | call to include | hello.rb:11:1:16:3 | Greeting |
+| hello.rb:12:5:12:24 | self | hello.rb:11:1:16:3 | Greeting |
+| hello.rb:12:13:12:24 | EnglishWords | hello.rb:11:1:16:3 | Greeting |
+| hello.rb:13:5:15:7 | message | hello.rb:11:1:16:3 | Greeting |
+| hello.rb:14:9:14:20 | return | hello.rb:11:1:16:3 | Greeting |
+| hello.rb:14:16:14:20 | call to hello | hello.rb:11:1:16:3 | Greeting |
+| hello.rb:14:16:14:20 | self | hello.rb:11:1:16:3 | Greeting |
+| hello.rb:18:1:22:3 | HelloWorld | hello.rb:1:1:22:3 | hello.rb |
+| hello.rb:18:20:18:27 | Greeting | hello.rb:1:1:22:3 | hello.rb |
+| hello.rb:19:5:21:7 | message | hello.rb:18:1:22:3 | HelloWorld |
+| hello.rb:20:9:20:40 | return | hello.rb:18:1:22:3 | HelloWorld |
+| hello.rb:20:16:20:20 | call to super | hello.rb:18:1:22:3 | HelloWorld |
+| hello.rb:20:16:20:26 | ... + ... | hello.rb:18:1:22:3 | HelloWorld |
+| hello.rb:20:16:20:34 | ... + ... | hello.rb:18:1:22:3 | HelloWorld |
+| hello.rb:20:16:20:40 | ... + ... | hello.rb:18:1:22:3 | HelloWorld |
+| hello.rb:20:24:20:26 | " " | hello.rb:18:1:22:3 | HelloWorld |
+| hello.rb:20:25:20:25 |   | hello.rb:18:1:22:3 | HelloWorld |
+| hello.rb:20:30:20:34 | call to world | hello.rb:18:1:22:3 | HelloWorld |
+| hello.rb:20:30:20:34 | self | hello.rb:18:1:22:3 | HelloWorld |
+| hello.rb:20:38:20:40 | "!" | hello.rb:18:1:22:3 | HelloWorld |
+| hello.rb:20:39:20:39 | ! | hello.rb:18:1:22:3 | HelloWorld |
+| modules.rb:1:1:2:3 | Empty | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:4:1:24:3 | Foo | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:5:3:14:5 | Bar | modules.rb:4:1:24:3 | Foo |
+| modules.rb:6:5:7:7 | ClassInFooBar | modules.rb:5:3:14:5 | Bar |
+| modules.rb:9:5:10:7 | method_in_foo_bar | modules.rb:5:3:14:5 | Bar |
+| modules.rb:12:5:12:26 | call to puts | modules.rb:5:3:14:5 | Bar |
+| modules.rb:12:5:12:26 | self | modules.rb:5:3:14:5 | Bar |
+| modules.rb:12:10:12:26 | "module Foo::Bar" | modules.rb:5:3:14:5 | Bar |
+| modules.rb:12:11:12:25 | module Foo::Bar | modules.rb:5:3:14:5 | Bar |
+| modules.rb:13:5:13:15 | $global_var | modules.rb:5:3:14:5 | Bar |
+| modules.rb:13:5:13:19 | ... = ... | modules.rb:5:3:14:5 | Bar |
+| modules.rb:13:19:13:19 | 0 | modules.rb:5:3:14:5 | Bar |
+| modules.rb:16:3:17:5 | method_in_foo | modules.rb:4:1:24:3 | Foo |
+| modules.rb:19:3:20:5 | ClassInFoo | modules.rb:4:1:24:3 | Foo |
+| modules.rb:22:3:22:19 | call to puts | modules.rb:4:1:24:3 | Foo |
+| modules.rb:22:3:22:19 | self | modules.rb:4:1:24:3 | Foo |
+| modules.rb:22:8:22:19 | "module Foo" | modules.rb:4:1:24:3 | Foo |
+| modules.rb:22:9:22:18 | module Foo | modules.rb:4:1:24:3 | Foo |
+| modules.rb:23:3:23:13 | $global_var | modules.rb:4:1:24:3 | Foo |
+| modules.rb:23:3:23:17 | ... = ... | modules.rb:4:1:24:3 | Foo |
+| modules.rb:23:17:23:17 | 1 | modules.rb:4:1:24:3 | Foo |
+| modules.rb:26:1:35:3 | Foo | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:27:3:28:5 | method_in_another_definition_of_foo | modules.rb:26:1:35:3 | Foo |
+| modules.rb:30:3:31:5 | ClassInAnotherDefinitionOfFoo | modules.rb:26:1:35:3 | Foo |
+| modules.rb:33:3:33:25 | call to puts | modules.rb:26:1:35:3 | Foo |
+| modules.rb:33:3:33:25 | self | modules.rb:26:1:35:3 | Foo |
+| modules.rb:33:8:33:25 | "module Foo again" | modules.rb:26:1:35:3 | Foo |
+| modules.rb:33:9:33:24 | module Foo again | modules.rb:26:1:35:3 | Foo |
+| modules.rb:34:3:34:13 | $global_var | modules.rb:26:1:35:3 | Foo |
+| modules.rb:34:3:34:17 | ... = ... | modules.rb:26:1:35:3 | Foo |
+| modules.rb:34:17:34:17 | 2 | modules.rb:26:1:35:3 | Foo |
+| modules.rb:37:1:46:3 | Bar | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:38:3:39:5 | method_a | modules.rb:37:1:46:3 | Bar |
+| modules.rb:41:3:42:5 | method_b | modules.rb:37:1:46:3 | Bar |
+| modules.rb:44:3:44:19 | call to puts | modules.rb:37:1:46:3 | Bar |
+| modules.rb:44:3:44:19 | self | modules.rb:37:1:46:3 | Bar |
+| modules.rb:44:8:44:19 | "module Bar" | modules.rb:37:1:46:3 | Bar |
+| modules.rb:44:9:44:18 | module Bar | modules.rb:37:1:46:3 | Bar |
+| modules.rb:45:3:45:13 | $global_var | modules.rb:37:1:46:3 | Bar |
+| modules.rb:45:3:45:17 | ... = ... | modules.rb:37:1:46:3 | Bar |
+| modules.rb:45:17:45:17 | 3 | modules.rb:37:1:46:3 | Bar |
+| modules.rb:48:1:57:3 | Bar | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:48:8:48:10 | Foo | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:49:3:50:5 | ClassInAnotherDefinitionOfFooBar | modules.rb:48:1:57:3 | Bar |
+| modules.rb:52:3:53:5 | method_in_another_definition_of_foo_bar | modules.rb:48:1:57:3 | Bar |
+| modules.rb:55:3:55:30 | call to puts | modules.rb:48:1:57:3 | Bar |
+| modules.rb:55:3:55:30 | self | modules.rb:48:1:57:3 | Bar |
+| modules.rb:55:8:55:30 | "module Foo::Bar again" | modules.rb:48:1:57:3 | Bar |
+| modules.rb:55:9:55:29 | module Foo::Bar again | modules.rb:48:1:57:3 | Bar |
+| modules.rb:56:3:56:13 | $global_var | modules.rb:48:1:57:3 | Bar |
+| modules.rb:56:3:56:17 | ... = ... | modules.rb:48:1:57:3 | Bar |
+| modules.rb:56:17:56:17 | 4 | modules.rb:48:1:57:3 | Bar |
+| modules.rb:60:1:61:3 | MyModuleInGlobalScope | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:63:1:81:3 | Test | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:65:3:68:5 | Foo1 | modules.rb:63:1:81:3 | Test |
+| modules.rb:66:5:67:7 | Bar | modules.rb:65:3:68:5 | Foo1 |
+| modules.rb:66:11:66:14 | Foo1 | modules.rb:65:3:68:5 | Foo1 |
+| modules.rb:70:3:74:5 | Foo2 | modules.rb:63:1:81:3 | Test |
+| modules.rb:71:5:71:19 | Foo2 | modules.rb:70:3:74:5 | Foo2 |
+| modules.rb:72:5:73:7 | Bar | modules.rb:70:3:74:5 | Foo2 |
+| modules.rb:72:11:72:14 | Foo2 | modules.rb:70:3:74:5 | Foo2 |
+| modules.rb:76:3:80:5 | Foo3 | modules.rb:63:1:81:3 | Test |
+| modules.rb:77:5:77:8 | Foo3 | modules.rb:76:3:80:5 | Foo3 |
+| modules.rb:77:5:77:17 | ... = ... | modules.rb:76:3:80:5 | Foo3 |
+| modules.rb:77:12:77:17 | Object | modules.rb:76:3:80:5 | Foo3 |
+| modules.rb:78:5:79:7 | Bar | modules.rb:76:3:80:5 | Foo3 |
+| modules.rb:78:11:78:14 | Foo3 | modules.rb:76:3:80:5 | Foo3 |
+| modules.rb:83:1:86:3 | Other | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:84:3:85:5 | Foo1 | modules.rb:83:1:86:3 | Other |
+| modules.rb:88:1:93:3 | IncludeTest | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:89:3:89:16 | call to include | modules.rb:88:1:93:3 | IncludeTest |
+| modules.rb:89:3:89:16 | self | modules.rb:88:1:93:3 | IncludeTest |
+| modules.rb:89:11:89:16 | Test | modules.rb:88:1:93:3 | IncludeTest |
+| modules.rb:90:3:90:8 | Object | modules.rb:88:1:93:3 | IncludeTest |
+| modules.rb:90:3:90:38 | call to module_eval | modules.rb:88:1:93:3 | IncludeTest |
+| modules.rb:90:22:90:38 | { ... } | modules.rb:88:1:93:3 | IncludeTest |
+| modules.rb:90:24:90:36 | call to prepend | modules.rb:88:1:93:3 | IncludeTest |
+| modules.rb:90:24:90:36 | self | modules.rb:88:1:93:3 | IncludeTest |
+| modules.rb:90:32:90:36 | Other | modules.rb:88:1:93:3 | IncludeTest |
+| modules.rb:91:3:92:5 | Y | modules.rb:88:1:93:3 | IncludeTest |
+| modules.rb:91:10:91:13 | Foo1 | modules.rb:88:1:93:3 | IncludeTest |
+| modules.rb:95:1:99:3 | IncludeTest2 | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:96:3:96:14 | call to include | modules.rb:95:1:99:3 | IncludeTest2 |
+| modules.rb:96:3:96:14 | self | modules.rb:95:1:99:3 | IncludeTest2 |
+| modules.rb:96:11:96:14 | Test | modules.rb:95:1:99:3 | IncludeTest2 |
+| modules.rb:97:3:98:5 | Z | modules.rb:95:1:99:3 | IncludeTest2 |
+| modules.rb:97:10:97:13 | Foo1 | modules.rb:95:1:99:3 | IncludeTest2 |
+| modules.rb:101:1:105:3 | PrependTest | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:102:3:102:16 | call to prepend | modules.rb:101:1:105:3 | PrependTest |
+| modules.rb:102:3:102:16 | self | modules.rb:101:1:105:3 | PrependTest |
+| modules.rb:102:11:102:16 | Test | modules.rb:101:1:105:3 | PrependTest |
+| modules.rb:103:3:104:5 | Y | modules.rb:101:1:105:3 | PrependTest |
+| modules.rb:103:10:103:13 | Foo2 | modules.rb:101:1:105:3 | PrependTest |
+| modules.rb:107:1:110:3 | MM | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:108:3:109:5 | MM | modules.rb:107:1:110:3 | MM |
+| modules.rb:108:10:108:11 | MM | modules.rb:107:1:110:3 | MM |
+| modules.rb:112:1:113:3 | YY | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:115:1:121:3 | XX | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:116:7:117:9 | YY | modules.rb:115:1:121:3 | XX |
+| modules.rb:116:18:116:19 | YY | modules.rb:115:1:121:3 | XX |
+| modules.rb:119:7:120:9 | class << ... | modules.rb:115:1:121:3 | XX |
+| modules.rb:119:16:119:19 | self | modules.rb:119:7:120:9 | class << ... |
+| modules.rb:123:1:124:3 | Baz | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:123:8:123:11 | Test | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:123:8:123:17 | Foo1 | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:123:8:123:22 | Bar | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:126:1:126:2 | xx | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:126:1:126:11 | ... = ... | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:126:6:126:7 | XX | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:126:6:126:11 | call to new | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:128:1:129:3 | class << ... | modules.rb:1:1:129:4 | modules.rb |
+| modules.rb:128:10:128:11 | xx | modules.rb:128:1:129:3 | class << ... |
+| modules_rec.rb:1:1:2:3 | A | modules_rec.rb:1:1:11:26 | modules_rec.rb |
+| modules_rec.rb:1:7:1:7 | B | modules_rec.rb:1:1:11:26 | modules_rec.rb |
+| modules_rec.rb:4:1:5:3 | B | modules_rec.rb:1:1:11:26 | modules_rec.rb |
+| modules_rec.rb:4:7:4:7 | A | modules_rec.rb:1:1:11:26 | modules_rec.rb |
+| modules_rec.rb:7:1:9:3 | A | modules_rec.rb:1:1:11:26 | modules_rec.rb |
+| modules_rec.rb:7:11:7:11 | B | modules_rec.rb:1:1:11:26 | modules_rec.rb |
+| modules_rec.rb:8:3:8:11 | call to prepend | modules_rec.rb:7:1:9:3 | A |
+| modules_rec.rb:8:3:8:11 | self | modules_rec.rb:7:1:9:3 | A |
+| modules_rec.rb:8:11:8:11 | B | modules_rec.rb:7:1:9:3 | A |
+| modules_rec.rb:11:1:11:9 | call to prepend | modules_rec.rb:1:1:11:26 | modules_rec.rb |
+| modules_rec.rb:11:1:11:9 | self | modules_rec.rb:1:1:11:26 | modules_rec.rb |
+| modules_rec.rb:11:9:11:9 | A | modules_rec.rb:1:1:11:26 | modules_rec.rb |
+| private.rb:1:1:29:3 | E | private.rb:1:1:60:3 | private.rb |
+| private.rb:2:3:3:5 | call to private | private.rb:1:1:29:3 | E |
+| private.rb:2:3:3:5 | self | private.rb:1:1:29:3 | E |
+| private.rb:2:11:3:5 | private1 | private.rb:1:1:29:3 | E |
+| private.rb:5:3:6:5 | public | private.rb:1:1:29:3 | E |
+| private.rb:8:3:9:5 | private2 | private.rb:1:1:29:3 | E |
+| private.rb:10:3:10:19 | call to private | private.rb:1:1:29:3 | E |
+| private.rb:10:3:10:19 | self | private.rb:1:1:29:3 | E |
+| private.rb:10:11:10:19 | :private2 | private.rb:1:1:29:3 | E |
+| private.rb:10:11:10:19 | private2 | private.rb:1:1:29:3 | E |
+| private.rb:12:3:12:9 | call to private | private.rb:1:1:29:3 | E |
+| private.rb:12:3:12:9 | self | private.rb:1:1:29:3 | E |
+| private.rb:14:3:15:5 | private3 | private.rb:1:1:29:3 | E |
+| private.rb:17:3:18:5 | private4 | private.rb:1:1:29:3 | E |
+| private.rb:20:3:21:5 | public2 | private.rb:1:1:29:3 | E |
+| private.rb:20:7:20:10 | self | private.rb:1:1:29:3 | E |
+| private.rb:23:3:24:5 | call to private_class_method | private.rb:1:1:29:3 | E |
+| private.rb:23:3:24:5 | self | private.rb:1:1:29:3 | E |
+| private.rb:23:24:24:5 | private5 | private.rb:1:1:29:3 | E |
+| private.rb:23:28:23:31 | self | private.rb:1:1:29:3 | E |
+| private.rb:26:3:27:5 | private6 | private.rb:1:1:29:3 | E |
+| private.rb:26:7:26:10 | self | private.rb:1:1:29:3 | E |
+| private.rb:28:3:28:32 | call to private_class_method | private.rb:1:1:29:3 | E |
+| private.rb:28:3:28:32 | self | private.rb:1:1:29:3 | E |
+| private.rb:28:24:28:32 | :private6 | private.rb:1:1:29:3 | E |
+| private.rb:28:24:28:32 | private6 | private.rb:1:1:29:3 | E |
+| private.rb:31:1:32:3 | private_on_main | private.rb:1:1:60:3 | private.rb |
+| private.rb:34:1:34:1 | E | private.rb:1:1:60:3 | private.rb |
+| private.rb:34:1:34:5 | call to new | private.rb:1:1:60:3 | private.rb |
+| private.rb:34:1:34:14 | call to private1 | private.rb:1:1:60:3 | private.rb |
+| private.rb:35:1:35:1 | E | private.rb:1:1:60:3 | private.rb |
+| private.rb:35:1:35:5 | call to new | private.rb:1:1:60:3 | private.rb |
+| private.rb:35:1:35:14 | call to private2 | private.rb:1:1:60:3 | private.rb |
+| private.rb:36:1:36:1 | E | private.rb:1:1:60:3 | private.rb |
+| private.rb:36:1:36:5 | call to new | private.rb:1:1:60:3 | private.rb |
+| private.rb:36:1:36:14 | call to private3 | private.rb:1:1:60:3 | private.rb |
+| private.rb:37:1:37:1 | E | private.rb:1:1:60:3 | private.rb |
+| private.rb:37:1:37:5 | call to new | private.rb:1:1:60:3 | private.rb |
+| private.rb:37:1:37:14 | call to private4 | private.rb:1:1:60:3 | private.rb |
+| private.rb:38:1:38:1 | E | private.rb:1:1:60:3 | private.rb |
+| private.rb:38:1:38:5 | call to new | private.rb:1:1:60:3 | private.rb |
+| private.rb:38:1:38:12 | call to public | private.rb:1:1:60:3 | private.rb |
+| private.rb:40:1:40:15 | call to private_on_main | private.rb:1:1:60:3 | private.rb |
+| private.rb:40:1:40:15 | self | private.rb:1:1:60:3 | private.rb |
+| private.rb:42:1:60:3 | F | private.rb:1:1:60:3 | private.rb |
+| private.rb:43:3:44:5 | call to private | private.rb:42:1:60:3 | F |
+| private.rb:43:3:44:5 | self | private.rb:42:1:60:3 | F |
+| private.rb:43:11:44:5 | private1 | private.rb:42:1:60:3 | F |
+| private.rb:46:3:47:5 | public | private.rb:42:1:60:3 | F |
+| private.rb:49:3:50:5 | private2 | private.rb:42:1:60:3 | F |
+| private.rb:51:3:51:19 | call to private | private.rb:42:1:60:3 | F |
+| private.rb:51:3:51:19 | self | private.rb:42:1:60:3 | F |
+| private.rb:51:11:51:19 | :private2 | private.rb:42:1:60:3 | F |
+| private.rb:51:11:51:19 | private2 | private.rb:42:1:60:3 | F |
+| private.rb:53:3:53:9 | call to private | private.rb:42:1:60:3 | F |
+| private.rb:53:3:53:9 | self | private.rb:42:1:60:3 | F |
+| private.rb:55:3:56:5 | private3 | private.rb:42:1:60:3 | F |
+| private.rb:58:3:59:5 | private4 | private.rb:42:1:60:3 | F |
diff --git a/ruby/ql/test/library-tests/modules/modules.ql b/ruby/ql/test/library-tests/modules/modules.ql
index d5c8207dc2c..792ace8ecd8 100644
--- a/ruby/ql/test/library-tests/modules/modules.ql
+++ b/ruby/ql/test/library-tests/modules/modules.ql
@@ -18,3 +18,5 @@ query predicate resolveConstantReadAccess(ConstantReadAccess a, string s) {
 query predicate resolveConstantWriteAccess(ConstantWriteAccess c, string s) {
   s = Internal::resolveConstantWriteAccess(c)
 }
+
+query predicate enclosingModule(AstNode n, ModuleBase m) { m = n.getEnclosingModule() }
diff --git a/ruby/ql/test/library-tests/modules/modules.rb b/ruby/ql/test/library-tests/modules/modules.rb
index 764ba455ba0..4c30e3b4596 100644
--- a/ruby/ql/test/library-tests/modules/modules.rb
+++ b/ruby/ql/test/library-tests/modules/modules.rb
@@ -115,7 +115,15 @@ end
 module XX
       class YY < YY
       end
+
+      class << self
+      end
 end
 
 module Test::Foo1::Bar::Baz
 end
+
+xx = XX.new
+
+class << xx
+end
diff --git a/ruby/ql/test/library-tests/modules/superclasses.expected b/ruby/ql/test/library-tests/modules/superclasses.expected
index d0185dddd6f..9a7415ec797 100644
--- a/ruby/ql/test/library-tests/modules/superclasses.expected
+++ b/ruby/ql/test/library-tests/modules/superclasses.expected
@@ -147,7 +147,7 @@ modules.rb:
 #  116| XX::YY
 #-----|  -> YY
 
-#  120| Test::Foo1::Bar::Baz
+#  123| Test::Foo1::Bar::Baz
 
 modules_rec.rb:
 #    1| B::A

From 4247843a279d054201be32d738ea87e986b7ea91 Mon Sep 17 00:00:00 2001
From: Tom Hvitved <hvitved@github.com>
Date: Tue, 13 Sep 2022 11:08:00 +0200
Subject: [PATCH 122/203] Ruby: Adjust the scope of singleton class targets

In

```rb
class << x
  ...
end
```

the scope of `x` is not the singleton class itself, but rather the outer scope.
---
 ruby/ql/lib/codeql/ruby/AST.qll                     | 4 ++--
 ruby/ql/lib/codeql/ruby/ast/internal/Scope.qll      | 2 +-
 ruby/ql/test/library-tests/modules/modules.expected | 4 ++--
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/ruby/ql/lib/codeql/ruby/AST.qll b/ruby/ql/lib/codeql/ruby/AST.qll
index 49edd048301..a9f8f8b5f9f 100644
--- a/ruby/ql/lib/codeql/ruby/AST.qll
+++ b/ruby/ql/lib/codeql/ruby/AST.qll
@@ -60,10 +60,10 @@ class AstNode extends TAstNode {
   final string getPrimaryQlClasses() { result = concat(this.getAPrimaryQlClass(), ",") }
 
   /** Gets the enclosing module, if any. */
-  ModuleBase getEnclosingModule() { result = getEnclosingModule(scopeOfInclSynth(this)) }
+  final ModuleBase getEnclosingModule() { result = getEnclosingModule(scopeOfInclSynth(this)) }
 
   /** Gets the enclosing method, if any. */
-  MethodBase getEnclosingMethod() { result = getEnclosingMethod(scopeOfInclSynth(this)) }
+  final MethodBase getEnclosingMethod() { result = getEnclosingMethod(scopeOfInclSynth(this)) }
 
   /** Gets a textual representation of this node. */
   cached
diff --git a/ruby/ql/lib/codeql/ruby/ast/internal/Scope.qll b/ruby/ql/lib/codeql/ruby/ast/internal/Scope.qll
index e8e601e911b..8f5bde5aeec 100644
--- a/ruby/ql/lib/codeql/ruby/ast/internal/Scope.qll
+++ b/ruby/ql/lib/codeql/ruby/ast/internal/Scope.qll
@@ -128,7 +128,7 @@ private AstNode specialParentOfInclSynth(AstNode n) {
   n =
     [
       result.(Namespace).getScopeExpr(), result.(ClassDeclaration).getSuperclassExpr(),
-      result.(SingletonMethod).getObject()
+      result.(SingletonMethod).getObject(), result.(SingletonClass).getValue()
     ]
 }
 
diff --git a/ruby/ql/test/library-tests/modules/modules.expected b/ruby/ql/test/library-tests/modules/modules.expected
index d0d59bc3a77..01e5685e67e 100644
--- a/ruby/ql/test/library-tests/modules/modules.expected
+++ b/ruby/ql/test/library-tests/modules/modules.expected
@@ -712,7 +712,7 @@ enclosingModule
 | modules.rb:116:7:117:9 | YY | modules.rb:115:1:121:3 | XX |
 | modules.rb:116:18:116:19 | YY | modules.rb:115:1:121:3 | XX |
 | modules.rb:119:7:120:9 | class << ... | modules.rb:115:1:121:3 | XX |
-| modules.rb:119:16:119:19 | self | modules.rb:119:7:120:9 | class << ... |
+| modules.rb:119:16:119:19 | self | modules.rb:115:1:121:3 | XX |
 | modules.rb:123:1:124:3 | Baz | modules.rb:1:1:129:4 | modules.rb |
 | modules.rb:123:8:123:11 | Test | modules.rb:1:1:129:4 | modules.rb |
 | modules.rb:123:8:123:17 | Foo1 | modules.rb:1:1:129:4 | modules.rb |
@@ -722,7 +722,7 @@ enclosingModule
 | modules.rb:126:6:126:7 | XX | modules.rb:1:1:129:4 | modules.rb |
 | modules.rb:126:6:126:11 | call to new | modules.rb:1:1:129:4 | modules.rb |
 | modules.rb:128:1:129:3 | class << ... | modules.rb:1:1:129:4 | modules.rb |
-| modules.rb:128:10:128:11 | xx | modules.rb:128:1:129:3 | class << ... |
+| modules.rb:128:10:128:11 | xx | modules.rb:1:1:129:4 | modules.rb |
 | modules_rec.rb:1:1:2:3 | A | modules_rec.rb:1:1:11:26 | modules_rec.rb |
 | modules_rec.rb:1:7:1:7 | B | modules_rec.rb:1:1:11:26 | modules_rec.rb |
 | modules_rec.rb:4:1:5:3 | B | modules_rec.rb:1:1:11:26 | modules_rec.rb |

From d3d47a261c9cdee253b02126a7f916f081c2b058 Mon Sep 17 00:00:00 2001
From: Asger F <asgerf@github.com>
Date: Tue, 13 Sep 2022 11:56:51 +0200
Subject: [PATCH 123/203] JS: Accept test output again

---
 .../RegExp/RegExpAlwaysMatches/RegExpAlwaysMatches.expected   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/javascript/ql/test/query-tests/RegExp/RegExpAlwaysMatches/RegExpAlwaysMatches.expected b/javascript/ql/test/query-tests/RegExp/RegExpAlwaysMatches/RegExpAlwaysMatches.expected
index 5edf60c00e2..5d3568e728c 100644
--- a/javascript/ql/test/query-tests/RegExp/RegExpAlwaysMatches/RegExpAlwaysMatches.expected
+++ b/javascript/ql/test/query-tests/RegExp/RegExpAlwaysMatches/RegExpAlwaysMatches.expected
@@ -3,5 +3,5 @@
 | tst.js:22:11:22:34 | ^(?:https?:\|ftp:\|file:)? | This regular expression always matches when used in a test $@, as it can match an empty substring. | tst.js:22:10:22:43 | /^(?:ht ... test(x) | here |
 | tst.js:30:11:30:20 | (foo\|bar)? | This regular expression always matches when used in a test $@, as it can match an empty substring. | tst.js:30:10:30:29 | /(foo\|bar)?/.test(x) | here |
 | tst.js:34:21:34:26 | (baz)? | This regular expression always matches when used in a test $@, as it can match an empty substring. | tst.js:34:10:34:35 | /^foo\|b ... test(x) | here |
-| tst.js:58:20:58:25 | [a-z]* | This regular expression always the matches at index 0 when used $@, as it matches the empty substring. | tst.js:58:10:58:27 | x.search(/[a-z]*/) | here |
-| tst.js:70:20:70:26 | ^(foo)? | This regular expression always the matches at index 0 when used $@, as it matches the empty substring. | tst.js:70:10:70:28 | x.search(/^(foo)?/) | here |
+| tst.js:58:20:58:25 | [a-z]* | This regular expression always matches at index 0 when used $@, as it matches the empty substring. | tst.js:58:10:58:27 | x.search(/[a-z]*/) | here |
+| tst.js:70:20:70:26 | ^(foo)? | This regular expression always matches at index 0 when used $@, as it matches the empty substring. | tst.js:70:10:70:28 | x.search(/^(foo)?/) | here |

From 85d4742a0199e4e704056246f4da66ad90ae10e7 Mon Sep 17 00:00:00 2001
From: Anders Schack-Mulligen <aschackmull@github.com>
Date: Tue, 13 Sep 2022 13:29:25 +0200
Subject: [PATCH 124/203] Java: Add dispatch test showing lack of union types.

---
 .../dispatch/ViableCallable4.java             | 23 +++++++++++++++++++
 .../dispatch/viableCallable.expected          | 12 ++++++++++
 2 files changed, 35 insertions(+)
 create mode 100644 java/ql/test/library-tests/dispatch/ViableCallable4.java

diff --git a/java/ql/test/library-tests/dispatch/ViableCallable4.java b/java/ql/test/library-tests/dispatch/ViableCallable4.java
new file mode 100644
index 00000000000..bb1a5f4a678
--- /dev/null
+++ b/java/ql/test/library-tests/dispatch/ViableCallable4.java
@@ -0,0 +1,23 @@
+public class ViableCallable4 {
+  static class Sup {
+    void f() { }
+  }
+  static class A1 extends Sup {
+    @Override void f() { }
+  }
+  static class A2 extends Sup {
+    @Override void f() { }
+  }
+  static class A3 extends Sup {
+    @Override void f() { }
+  }
+
+  void foo(Sup s, boolean b) {
+    s.f();
+    if (s instanceof A1 || s instanceof A2) {
+      s.f();
+    }
+    Sup s2 = b ? new A3() : new Sup();
+    s2.f();
+  }
+}
diff --git a/java/ql/test/library-tests/dispatch/viableCallable.expected b/java/ql/test/library-tests/dispatch/viableCallable.expected
index 7490e4693b9..032bac595ac 100644
--- a/java/ql/test/library-tests/dispatch/viableCallable.expected
+++ b/java/ql/test/library-tests/dispatch/viableCallable.expected
@@ -7,6 +7,18 @@
 | ViableCallable3.java:12:5:12:9 | h(...) | h | 1 | ViableCallable3 |
 | ViableCallable3.java:17:9:17:17 | get(...) | get | 9 | new Func(...) { ... } |
 | ViableCallable3.java:18:9:18:18 | get(...) | get | 10 | new Func(...) { ... } |
+| ViableCallable4.java:16:5:16:9 | f(...) | f | 2 | Sup |
+| ViableCallable4.java:16:5:16:9 | f(...) | f | 5 | A1 |
+| ViableCallable4.java:16:5:16:9 | f(...) | f | 8 | A2 |
+| ViableCallable4.java:16:5:16:9 | f(...) | f | 11 | A3 |
+| ViableCallable4.java:18:7:18:11 | f(...) | f | 2 | Sup |
+| ViableCallable4.java:18:7:18:11 | f(...) | f | 5 | A1 |
+| ViableCallable4.java:18:7:18:11 | f(...) | f | 8 | A2 |
+| ViableCallable4.java:18:7:18:11 | f(...) | f | 11 | A3 |
+| ViableCallable4.java:21:5:21:10 | f(...) | f | 2 | Sup |
+| ViableCallable4.java:21:5:21:10 | f(...) | f | 5 | A1 |
+| ViableCallable4.java:21:5:21:10 | f(...) | f | 8 | A2 |
+| ViableCallable4.java:21:5:21:10 | f(...) | f | 11 | A3 |
 | ViableCallable.java:5:3:5:13 | M(...) | M | 81 | C2 |
 | ViableCallable.java:5:3:5:13 | M(...) | M | 86 | C3 |
 | ViableCallable.java:5:3:5:13 | M(...) | M | 91 | C4 |

From 7692a9e2e76c82e4eb73dffdd2ddcf302f42a5b2 Mon Sep 17 00:00:00 2001
From: Anders Schack-Mulligen <aschackmull@github.com>
Date: Wed, 7 Sep 2022 11:46:45 +0200
Subject: [PATCH 125/203] Java: Minor TypeFlow tweaks.

---
 .../semmle/code/java/dataflow/TypeFlow.qll    | 45 +++++++++++++++----
 1 file changed, 36 insertions(+), 9 deletions(-)

diff --git a/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll b/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
index d5b66baafb2..1b1f0f41ef5 100644
--- a/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
+++ b/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
@@ -337,7 +337,7 @@ private predicate exactTypeBase(TypeFlowNode n, RefType t) {
     n.asExpr() = e and
     e.getType() = t and
     not e instanceof FunctionalExpr and
-    exists(RefType sub | sub.getASourceSupertype() = t.getSourceDeclaration())
+    exists(SrcRefType sub | sub.getASourceSupertype() = t.getSourceDeclaration())
   )
 }
 
@@ -384,17 +384,23 @@ private predicate upcastCand(TypeFlowNode n, RefType t1, RefType t1e, RefType t2
   )
 }
 
+private predicate unconstrained(BoundedType t) {
+  t.(Wildcard).isUnconstrained()
+  or
+  t.(BoundedType).getUpperBoundType() instanceof TypeObject and
+  not t.(Wildcard).hasLowerBound()
+  or
+  unconstrained(t.(BoundedType).getUpperBoundType())
+  or
+  unconstrained(t.(Wildcard).getLowerBoundType())
+}
+
 /** Holds if `t` is a raw type or parameterised type with unrestricted type arguments. */
 private predicate unbound(RefType t) {
   t instanceof RawType
   or
   exists(ParameterizedType pt | pt = t |
-    forex(RefType arg | arg = pt.getATypeArgument() |
-      arg.(Wildcard).isUnconstrained()
-      or
-      arg.(BoundedType).getUpperBoundType() instanceof TypeObject and
-      not arg.(Wildcard).hasLowerBound()
-    )
+    forex(RefType arg | arg = pt.getATypeArgument() | unconstrained(arg))
   )
 }
 
@@ -492,9 +498,10 @@ predicate arrayInstanceOfGuarded(ArrayAccess aa, RefType t) {
 
 /**
  * Holds if `n` has type `t` and this information is discarded, such that `t`
- * might be a better type bound for nodes where `n` flows to.
+ * might be a better type bound for nodes where `n` flows to. This might include
+ * multiple bounds for a single node.
  */
-private predicate typeFlowBase(TypeFlowNode n, RefType t) {
+private predicate typeFlowBaseCand(TypeFlowNode n, RefType t) {
   exists(RefType srctype |
     upcast(n, srctype) or
     upcastEnhancedForStmt(n.asSsa(), srctype) or
@@ -509,6 +516,26 @@ private predicate typeFlowBase(TypeFlowNode n, RefType t) {
   )
 }
 
+/**
+ * Holds if `n` has type `t` and this information is discarded, such that `t`
+ * might be a better type bound for nodes where `n` flows to. This only includes
+ * the best such bound for each node.
+ */
+private predicate typeFlowBase(TypeFlowNode n, RefType t) {
+  exists(RefType te |
+    typeFlowBaseCand(n, t) and
+    te = t.getErasure() and
+    not exists(RefType better |
+      typeFlowBaseCand(n, better) and
+      better != t and
+      not t.getASupertype+() = better
+    |
+      better.getASupertype+() = t or
+      better.getErasure().(RefType).getASourceSupertype+() = te
+    )
+  )
+}
+
 private module TypeFlowPropagation implements TypePropagation {
   predicate candType = typeFlow/2;
 

From 6f062678929e79de971d2dba0b33ca94998d7a30 Mon Sep 17 00:00:00 2001
From: Anders Schack-Mulligen <aschackmull@github.com>
Date: Wed, 7 Sep 2022 11:47:13 +0200
Subject: [PATCH 126/203] Java: Implement union type flow.

---
 .../semmle/code/java/dataflow/TypeFlow.qll    | 147 ++++++++++++++++--
 1 file changed, 137 insertions(+), 10 deletions(-)

diff --git a/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll b/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
index 1b1f0f41ef5..339c178fb10 100644
--- a/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
+++ b/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
@@ -616,6 +616,127 @@ private predicate bestTypeFlow(TypeFlowNode n, RefType t) {
   not irrelevantBound(n, t)
 }
 
+private predicate bestTypeFlow(TypeFlowNode n, RefType t, boolean exact) {
+  exactType(n, t) and exact = true
+  or
+  not exactType(n, _) and bestTypeFlow(n, t) and exact = false
+}
+
+private predicate bestTypeFlowOrTypeFlowBase(TypeFlowNode n, RefType t, boolean exact) {
+  bestTypeFlow(n, t, exact)
+  or
+  typeFlowBase(n, t) and
+  exact = false and
+  not bestTypeFlow(n, _, _)
+}
+
+/**
+ * Holds if `n` has type `t` and this information is not propagated as a
+ * universal bound to a subsequent node, such that `t` might form the basis for
+ * a union type bound for that node.
+ */
+private predicate unionTypeFlowBaseCand(TypeFlowNode n, RefType t, boolean exact) {
+  exists(TypeFlowNode next |
+    joinStep(n, next) and
+    bestTypeFlowOrTypeFlowBase(n, t, exact) and
+    not bestTypeFlowOrTypeFlowBase(next, t, exact) and
+    not exactType(next, _)
+  )
+}
+
+/**
+ * Holds if all incoming type flow can be traced back to a
+ * `unionTypeFlowBaseCand`, such that we can compute a union type bound for `n`.
+ * Disregards nodes for which we have an exact bound.
+ */
+private predicate hasUnionTypeFlow(TypeFlowNode n) {
+  not exactType(n, _) and
+  (
+    forex(TypeFlowNode mid | joinStep(mid, n) |
+      unionTypeFlowBaseCand(mid, _, _) or hasUnionTypeFlow(mid)
+    )
+    or
+    exists(TypeFlowNode scc |
+      sccRepr(n, scc) and
+      forex(TypeFlowNode mid | sccJoinStep(mid, scc) |
+        unionTypeFlowBaseCand(mid, _, _) or hasUnionTypeFlow(mid)
+      )
+    )
+    or
+    exists(TypeFlowNode mid | step(mid, n) and hasUnionTypeFlow(mid))
+  )
+}
+
+pragma[nomagic]
+private RefType getTypeBound(TypeFlowNode n) {
+  bestTypeFlow(n, result)
+  or
+  not bestTypeFlow(n, _) and result = n.getType()
+}
+
+pragma[nomagic]
+private predicate unionTypeFlow0(TypeFlowNode n, RefType t, boolean exact) {
+  hasUnionTypeFlow(n) and
+  exists(TypeFlowNode mid | anyStep(mid, n) |
+    unionTypeFlowBaseCand(mid, t, exact) or unionTypeFlow(mid, t, exact)
+  )
+}
+
+/** Holds if we have a union type bound for `n` and `t` is one of its parts. */
+private predicate unionTypeFlow(TypeFlowNode n, RefType t, boolean exact) {
+  unionTypeFlow0(n, t, exact) and
+  // filter impossible union parts:
+  if exact = true
+  then t.getErasure().(RefType).getASourceSupertype*() = getTypeBound(n).getErasure()
+  else haveIntersection(getTypeBound(n), t)
+}
+
+/**
+ * Holds if the inferred union type bound for `n` contains the best universal
+ * bound and thus is irrelevant.
+ */
+private predicate irrelevantUnionType(TypeFlowNode n) {
+  exists(RefType t, RefType nt, RefType te, RefType nte |
+    unionTypeFlow(n, t, false) and
+    nt = getTypeBound(n) and
+    te = t.getErasure() and
+    nte = nt.getErasure()
+  |
+    nt.getASupertype*() = t
+    or
+    nte.getASourceSupertype+() = te
+    or
+    nte = te and unbound(t)
+  )
+}
+
+/**
+ * Holds if `t` is an irrelevant part of the union type bound for `n` due to
+ * being contained in another part of the union type bound.
+ */
+private predicate irrelevantUnionTypePart(TypeFlowNode n, RefType t, boolean exact) {
+  unionTypeFlow(n, t, exact) and
+  not irrelevantUnionType(n) and
+  exists(RefType weaker |
+    unionTypeFlow(n, weaker, false) and
+    t.getASupertype*() = weaker
+  |
+    exact = true or not weaker.getASupertype*() = t
+  )
+}
+
+/**
+ * Holds if the runtime type of `n` is bounded by a union type and if this
+ * bound is likely to be better than the static type of `n`. The union type is
+ * made up of the types `t` related to `n` by this predicate, and the flag
+ * `exact` indicates whether `t` is an exact bound or merely an upper bound.
+ */
+private predicate bestUnionType(TypeFlowNode n, RefType t, boolean exact) {
+  unionTypeFlow(n, t, exact) and
+  not irrelevantUnionType(n) and
+  not irrelevantUnionTypePart(n, t, exact)
+}
+
 cached
 private module TypeFlowBounds {
   /**
@@ -627,11 +748,7 @@ private module TypeFlowBounds {
   predicate fieldTypeFlow(Field f, RefType t, boolean exact) {
     exists(TypeFlowNode n |
       n.asField() = f and
-      (
-        exactType(n, t) and exact = true
-        or
-        not exactType(n, _) and bestTypeFlow(n, t) and exact = false
-      )
+      bestTypeFlow(n, t, exact)
     )
   }
 
@@ -644,11 +761,21 @@ private module TypeFlowBounds {
   predicate exprTypeFlow(Expr e, RefType t, boolean exact) {
     exists(TypeFlowNode n |
       n.asExpr() = e and
-      (
-        exactType(n, t) and exact = true
-        or
-        not exactType(n, _) and bestTypeFlow(n, t) and exact = false
-      )
+      bestTypeFlow(n, t, exact)
+    )
+  }
+
+  /**
+   * Holds if the runtime type of `e` is bounded by a union type and if this
+   * bound is likely to be better than the static type of `e`. The union type is
+   * made up of the types `t` related to `e` by this predicate, and the flag
+   * `exact` indicates whether `t` is an exact bound or merely an upper bound.
+   */
+  cached
+  predicate exprUnionTypeFlow(Expr e, RefType t, boolean exact) {
+    exists(TypeFlowNode n |
+      n.asExpr() = e and
+      bestUnionType(n, t, exact)
     )
   }
 }

From a8eedce8abcde48fc99c302125985e040a6cf387 Mon Sep 17 00:00:00 2001
From: Anders Schack-Mulligen <aschackmull@github.com>
Date: Wed, 7 Sep 2022 14:38:05 +0200
Subject: [PATCH 127/203] Java: Replace ad-hoc variable tracking with union
 type flow in dispatch.

---
 .../code/java/dispatch/VirtualDispatch.qll    | 81 ++++++++++---------
 1 file changed, 41 insertions(+), 40 deletions(-)

diff --git a/java/ql/lib/semmle/code/java/dispatch/VirtualDispatch.qll b/java/ql/lib/semmle/code/java/dispatch/VirtualDispatch.qll
index 52b1b34dc35..38208db9b71 100644
--- a/java/ql/lib/semmle/code/java/dispatch/VirtualDispatch.qll
+++ b/java/ql/lib/semmle/code/java/dispatch/VirtualDispatch.qll
@@ -62,10 +62,6 @@ private module Dispatch {
   cached
   Method viableImpl_v3(MethodAccess ma) { result = DispatchFlow::viableImpl_out(ma) }
 
-  private predicate qualType(VirtualMethodAccess ma, RefType t, boolean exact) {
-    exprTypeFlow(ma.getQualifier(), t, exact)
-  }
-
   /**
    * INTERNAL: Use `viableImpl` instead.
    *
@@ -73,6 +69,35 @@ private module Dispatch {
    */
   cached
   Method viableImpl_v2(MethodAccess ma) {
+    result = viableImpl_v2_cand(pragma[only_bind_into](ma)) and
+    exists(Method def, RefType t, boolean exact |
+      qualUnionType(pragma[only_bind_into](ma), pragma[only_bind_into](t),
+        pragma[only_bind_into](exact)) and
+      def = ma.getMethod().getSourceDeclaration()
+    |
+      exact = true and result = exactMethodImpl(def, t.getSourceDeclaration())
+      or
+      exact = false and
+      exists(RefType t2 |
+        result = viableMethodImpl(def, t.getSourceDeclaration(), t2) and
+        not Unification_v2::failsUnification(t, t2)
+      )
+    )
+    or
+    result = viableImpl_v2_cand(ma) and
+    not qualUnionType(ma, _, _)
+  }
+
+  private predicate qualUnionType(VirtualMethodAccess ma, RefType t, boolean exact) {
+    exprUnionTypeFlow(ma.getQualifier(), t, exact)
+  }
+
+  private predicate unificationTargetLeft_v2(ParameterizedType t1) { qualUnionType(_, t1, _) }
+
+  private module Unification_v2 =
+    MkUnification<unificationTargetLeft_v2/1, unificationTargetRight/1>;
+
+  private Method viableImpl_v2_cand(MethodAccess ma) {
     result = viableImpl_v1(ma) and
     (
       exists(Method def, RefType t, boolean exact |
@@ -84,7 +109,7 @@ private module Dispatch {
         exact = false and
         exists(RefType t2 |
           result = viableMethodImpl(def, t.getSourceDeclaration(), t2) and
-          not Unification_v2::failsUnification(t, t2)
+          not Unification_v2_cand::failsUnification(t, t2)
         )
       )
       or
@@ -92,10 +117,14 @@ private module Dispatch {
     )
   }
 
-  private predicate unificationTargetLeft_v2(ParameterizedType t1) { qualType(_, t1, _) }
+  private predicate qualType(VirtualMethodAccess ma, RefType t, boolean exact) {
+    exprTypeFlow(ma.getQualifier(), t, exact)
+  }
 
-  private module Unification_v2 =
-    MkUnification<unificationTargetLeft_v2/1, unificationTargetRight/1>;
+  private predicate unificationTargetLeft_v2_cand(ParameterizedType t1) { qualType(_, t1, _) }
+
+  private module Unification_v2_cand =
+    MkUnification<unificationTargetLeft_v2_cand/1, unificationTargetRight/1>;
 
   /**
    * INTERNAL: Use `viableImpl` instead.
@@ -161,9 +190,8 @@ private module Dispatch {
   }
 
   private predicate hasQualifierType(VirtualMethodAccess ma, RefType t, boolean exact) {
-    exists(Expr src | src = variableTrack(ma.getQualifier()) |
-      // If we have a qualifier, then we track it through variable assignments
-      // and take the type of the assigned value.
+    exists(Expr src | src = ma.getQualifier() |
+      // If we have a qualifier, then we take its type.
       exists(RefType srctype | srctype = getPreciseType(src) |
         exists(BoundedType bd | bd = srctype |
           t = bd.getAnUltimateUpperBoundType()
@@ -224,34 +252,7 @@ private module Dispatch {
 
 import Dispatch
 
-private Expr variableTrackStep(Expr use) {
-  exists(Variable v |
-    pragma[only_bind_out](use) = v.getAnAccess() and
-    use.getType() instanceof RefType and
-    not result instanceof NullLiteral and
-    not v.(LocalVariableDecl).getDeclExpr().hasImplicitInit()
-  |
-    not v instanceof Parameter and
-    result = v.getAnAssignedValue()
-    or
-    exists(Parameter p | p = v and p.getCallable().isPrivate() |
-      result = p.getAnAssignedValue() or
-      result = p.getAnArgument()
-    )
-  )
-}
-
-private Expr variableTrackPath(Expr use) {
-  result = variableTrackStep*(use) and
-  not exists(variableTrackStep(result))
-}
-
 /**
- * Gets an expression by tracking `use` backwards through variable assignments.
+ * DEPRECATED: Use `TypeFlow` instead.
  */
-pragma[inline]
-Expr variableTrack(Expr use) {
-  result = variableTrackPath(use)
-  or
-  not exists(variableTrackPath(use)) and result = use
-}
+deprecated Expr variableTrack(Expr use) { result = use }

From c8b93e091032fa6e56bec0a3f40e4725efe06569 Mon Sep 17 00:00:00 2001
From: Anders Schack-Mulligen <aschackmull@github.com>
Date: Wed, 7 Sep 2022 15:00:46 +0200
Subject: [PATCH 128/203] Java: Replace uses of deprecated variableTrack.

---
 .../java/dataflow/internal/DataFlowDispatch.qll   | 15 +++++++++++----
 .../CWE/CWE-327/MaybeBrokenCryptoAlgorithm.ql     |  2 +-
 2 files changed, 12 insertions(+), 5 deletions(-)

diff --git a/java/ql/lib/semmle/code/java/dataflow/internal/DataFlowDispatch.qll b/java/ql/lib/semmle/code/java/dataflow/internal/DataFlowDispatch.qll
index 3eedae0159b..c61c256505a 100644
--- a/java/ql/lib/semmle/code/java/dataflow/internal/DataFlowDispatch.qll
+++ b/java/ql/lib/semmle/code/java/dataflow/internal/DataFlowDispatch.qll
@@ -4,6 +4,7 @@ private import DataFlowUtil
 private import semmle.code.java.dataflow.InstanceAccess
 private import semmle.code.java.dataflow.FlowSummary
 private import semmle.code.java.dispatch.VirtualDispatch as VirtualDispatch
+private import semmle.code.java.dataflow.TypeFlow
 private import semmle.code.java.dispatch.internal.Unification
 
 private module DispatchImpl {
@@ -63,15 +64,21 @@ private module DispatchImpl {
   private predicate contextArgHasType(Call ctx, int i, RefType t, boolean exact) {
     relevantContext(ctx, i) and
     exists(RefType srctype |
-      exists(Expr arg, Expr src |
+      exists(Expr arg |
         i = -1 and
         ctx.getQualifier() = arg
         or
         ctx.getArgument(i) = arg
       |
-        src = VirtualDispatch::variableTrack(arg) and
-        srctype = getPreciseType(src) and
-        if src instanceof ClassInstanceExpr then exact = true else exact = false
+        exprTypeFlow(arg, srctype, exact)
+        or
+        not exprTypeFlow(arg, _, _) and
+        exprUnionTypeFlow(arg, srctype, exact)
+        or
+        not exprTypeFlow(arg, _, _) and
+        not exprUnionTypeFlow(arg, _, _) and
+        srctype = getPreciseType(arg) and
+        if arg instanceof ClassInstanceExpr then exact = true else exact = false
       )
       or
       exists(Node arg |
diff --git a/java/ql/src/Security/CWE/CWE-327/MaybeBrokenCryptoAlgorithm.ql b/java/ql/src/Security/CWE/CWE-327/MaybeBrokenCryptoAlgorithm.ql
index e187320ba5d..49de716b1dc 100644
--- a/java/ql/src/Security/CWE/CWE-327/MaybeBrokenCryptoAlgorithm.ql
+++ b/java/ql/src/Security/CWE/CWE-327/MaybeBrokenCryptoAlgorithm.ql
@@ -38,7 +38,7 @@ predicate objectToString(MethodAccess ma) {
   exists(ToStringMethod m |
     m = ma.getMethod() and
     m.getDeclaringType() instanceof TypeObject and
-    variableTrack(ma.getQualifier()).getType().getErasure() instanceof TypeObject
+    exprNode(ma.getQualifier()).getTypeBound().getErasure() instanceof TypeObject
   )
 }
 

From 686e03e1cc324721d607cccdf280f9ab096b031a Mon Sep 17 00:00:00 2001
From: Anders Schack-Mulligen <aschackmull@github.com>
Date: Thu, 8 Sep 2022 12:18:37 +0200
Subject: [PATCH 129/203] Java: Fix perf issue.

---
 .../semmle/code/java/dataflow/TypeFlow.qll    | 43 +++++++++++++------
 1 file changed, 30 insertions(+), 13 deletions(-)

diff --git a/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll b/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
index 339c178fb10..9749f7004a3 100644
--- a/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
+++ b/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
@@ -287,10 +287,12 @@ private module RankEdge<edgeSig/2 edge> implements RankedEdge {
 }
 
 private signature module TypePropagation {
-  predicate candType(TypeFlowNode n, RefType t);
+  class Typ;
+
+  predicate candType(TypeFlowNode n, Typ t);
 
   bindingset[t]
-  predicate supportsType(TypeFlowNode n, RefType t);
+  predicate supportsType(TypeFlowNode n, Typ t);
 }
 
 /** Implements recursion through `forall` by way of edge ranking. */
@@ -300,7 +302,7 @@ private module ForAll<RankedEdge Edge, TypePropagation T> {
    * thus is a candidate bound for `n`.
    */
   pragma[nomagic]
-  private predicate candJoinType(TypeFlowNode n, RefType t) {
+  private predicate candJoinType(TypeFlowNode n, T::Typ t) {
     exists(TypeFlowNode mid |
       T::candType(mid, t) and
       Edge::edgeRank(_, mid, n)
@@ -311,7 +313,7 @@ private module ForAll<RankedEdge Edge, TypePropagation T> {
    * Holds if `t` is a candidate bound for `n` that is also valid for data coming
    * through the edges into `n` ranked from `1` to `r`.
    */
-  private predicate flowJoin(int r, TypeFlowNode n, RefType t) {
+  private predicate flowJoin(int r, TypeFlowNode n, T::Typ t) {
     (
       r = 1 and candJoinType(n, t)
       or
@@ -325,7 +327,7 @@ private module ForAll<RankedEdge Edge, TypePropagation T> {
    * coming through all the incoming edges, and therefore is a valid bound for
    * `n`.
    */
-  predicate flowJoin(TypeFlowNode n, RefType t) { flowJoin(Edge::lastRank(n), n, t) }
+  predicate flowJoin(TypeFlowNode n, T::Typ t) { flowJoin(Edge::lastRank(n), n, t) }
 }
 
 module RankedJoinStep = RankEdge<joinStep/2>;
@@ -342,6 +344,8 @@ private predicate exactTypeBase(TypeFlowNode n, RefType t) {
 }
 
 private module ExactTypePropagation implements TypePropagation {
+  class Typ = RefType;
+
   predicate candType = exactType/2;
 
   predicate supportsType = exactType/2;
@@ -387,10 +391,10 @@ private predicate upcastCand(TypeFlowNode n, RefType t1, RefType t1e, RefType t2
 private predicate unconstrained(BoundedType t) {
   t.(Wildcard).isUnconstrained()
   or
-  t.(BoundedType).getUpperBoundType() instanceof TypeObject and
+  t.getUpperBoundType() instanceof TypeObject and
   not t.(Wildcard).hasLowerBound()
   or
-  unconstrained(t.(BoundedType).getUpperBoundType())
+  unconstrained(t.getUpperBoundType())
   or
   unconstrained(t.(Wildcard).getLowerBoundType())
 }
@@ -537,6 +541,8 @@ private predicate typeFlowBase(TypeFlowNode n, RefType t) {
 }
 
 private module TypeFlowPropagation implements TypePropagation {
+  class Typ = RefType;
+
   predicate candType = typeFlow/2;
 
   bindingset[t]
@@ -644,6 +650,17 @@ private predicate unionTypeFlowBaseCand(TypeFlowNode n, RefType t, boolean exact
   )
 }
 
+private module HasUnionTypePropagation implements TypePropagation {
+  class Typ = Unit;
+
+  predicate candType(TypeFlowNode mid, Unit unit) {
+    exists(unit) and
+    (unionTypeFlowBaseCand(mid, _, _) or hasUnionTypeFlow(mid))
+  }
+
+  predicate supportsType = candType/2;
+}
+
 /**
  * Holds if all incoming type flow can be traced back to a
  * `unionTypeFlowBaseCand`, such that we can compute a union type bound for `n`.
@@ -652,15 +669,15 @@ private predicate unionTypeFlowBaseCand(TypeFlowNode n, RefType t, boolean exact
 private predicate hasUnionTypeFlow(TypeFlowNode n) {
   not exactType(n, _) and
   (
-    forex(TypeFlowNode mid | joinStep(mid, n) |
-      unionTypeFlowBaseCand(mid, _, _) or hasUnionTypeFlow(mid)
-    )
+    // Optimized version of
+    // `forex(TypeFlowNode mid | joinStep(mid, n) | unionTypeFlowBaseCand(mid, _, _) or hasUnionTypeFlow(mid))`
+    ForAll<RankedJoinStep, HasUnionTypePropagation>::flowJoin(n, _)
     or
     exists(TypeFlowNode scc |
       sccRepr(n, scc) and
-      forex(TypeFlowNode mid | sccJoinStep(mid, scc) |
-        unionTypeFlowBaseCand(mid, _, _) or hasUnionTypeFlow(mid)
-      )
+      // Optimized version of
+      // `forex(TypeFlowNode mid | sccJoinStep(mid, scc) | unionTypeFlowBaseCand(mid, _, _) or hasUnionTypeFlow(mid))`
+      ForAll<RankedSccJoinStep, HasUnionTypePropagation>::flowJoin(scc, _)
     )
     or
     exists(TypeFlowNode mid | step(mid, n) and hasUnionTypeFlow(mid))

From d0f7052de28e927405ec5b9368912bfe910a2850 Mon Sep 17 00:00:00 2001
From: Anders Schack-Mulligen <aschackmull@github.com>
Date: Fri, 9 Sep 2022 12:01:52 +0200
Subject: [PATCH 130/203] Java: Support instanceof disjunction in union type
 flow.

---
 .../semmle/code/java/dataflow/TypeFlow.qll    | 41 ++++++++++++++++++-
 1 file changed, 39 insertions(+), 2 deletions(-)

diff --git a/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll b/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
index 9749f7004a3..86b66abf30f 100644
--- a/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
+++ b/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
@@ -650,6 +650,37 @@ private predicate unionTypeFlowBaseCand(TypeFlowNode n, RefType t, boolean exact
   )
 }
 
+/**
+ * Holds if `ioe` checks `v`, its true-successor is `bb`, and `bb` has 2 or more
+ * predecessors.
+ */
+private predicate instanceofDisjunct(InstanceOfExpr ioe, BasicBlock bb, BaseSsaVariable v) {
+  ioe.getExpr() = v.getAUse() and
+  strictcount(bb.getABBPredecessor()) > 1 and
+  exists(ConditionBlock cb | cb.getCondition() = ioe and cb.getTestSuccessor(true) = bb)
+}
+
+/** Holds if `bb` is disjunctively guarded by two or more `instanceof` tests on `v`. */
+private predicate instanceofDisjunction(BasicBlock bb, BaseSsaVariable v) {
+  strictcount(InstanceOfExpr ioe | instanceofDisjunct(ioe, bb, v)) =
+    strictcount(bb.getABBPredecessor())
+}
+
+/**
+ * Holds if `n` is a value that is guarded by a disjunction of
+ * `instanceof t_i` where `t` is one of those `t_i`.
+ */
+private predicate instanceofDisjunctionGuarded(TypeFlowNode n, RefType t) {
+  exists(BasicBlock bb, InstanceOfExpr ioe, BaseSsaVariable v, VarAccess va |
+    instanceofDisjunction(bb, v) and
+    bb.bbDominates(va.getBasicBlock()) and
+    va = v.getAUse() and
+    instanceofDisjunct(ioe, bb, v) and
+    t = ioe.getCheckedType() and
+    n.asExpr() = va
+  )
+}
+
 private module HasUnionTypePropagation implements TypePropagation {
   class Typ = Unit;
 
@@ -681,6 +712,8 @@ private predicate hasUnionTypeFlow(TypeFlowNode n) {
     )
     or
     exists(TypeFlowNode mid | step(mid, n) and hasUnionTypeFlow(mid))
+    or
+    instanceofDisjunctionGuarded(n, _)
   )
 }
 
@@ -694,8 +727,12 @@ private RefType getTypeBound(TypeFlowNode n) {
 pragma[nomagic]
 private predicate unionTypeFlow0(TypeFlowNode n, RefType t, boolean exact) {
   hasUnionTypeFlow(n) and
-  exists(TypeFlowNode mid | anyStep(mid, n) |
-    unionTypeFlowBaseCand(mid, t, exact) or unionTypeFlow(mid, t, exact)
+  (
+    exists(TypeFlowNode mid | anyStep(mid, n) |
+      unionTypeFlowBaseCand(mid, t, exact) or unionTypeFlow(mid, t, exact)
+    )
+    or
+    instanceofDisjunctionGuarded(n, t) and exact = false
   )
 }
 

From 0e376b32d2968382730cdfd9af1affee5b0984c8 Mon Sep 17 00:00:00 2001
From: Anders Schack-Mulligen <aschackmull@github.com>
Date: Tue, 13 Sep 2022 13:14:22 +0200
Subject: [PATCH 131/203] Java: extend typeflow tests to cover union types.

---
 .../library-tests/typeflow/UnionTypes.java    | 54 +++++++++++++++++++
 .../library-tests/typeflow/typeflow.expected  |  1 +
 .../typeflow/uniontypeflow.expected           | 24 +++++++++
 .../library-tests/typeflow/uniontypeflow.ql   | 10 ++++
 4 files changed, 89 insertions(+)
 create mode 100644 java/ql/test/library-tests/typeflow/UnionTypes.java
 create mode 100644 java/ql/test/library-tests/typeflow/uniontypeflow.expected
 create mode 100644 java/ql/test/library-tests/typeflow/uniontypeflow.ql

diff --git a/java/ql/test/library-tests/typeflow/UnionTypes.java b/java/ql/test/library-tests/typeflow/UnionTypes.java
new file mode 100644
index 00000000000..a82b3828d2f
--- /dev/null
+++ b/java/ql/test/library-tests/typeflow/UnionTypes.java
@@ -0,0 +1,54 @@
+import java.util.*;
+import java.util.concurrent.*;
+
+public class UnionTypes {
+  public void m1() {
+    m1_map_put(new LinkedHashMap<>(), "k", "v");
+    m1_map_put(new ConcurrentHashMap<>(), "k", "v");
+  }
+
+  private void m1_map_put(Map<String, String> m, String k, String v) {
+    m.put(k, v);
+  }
+
+  static class Sup { }
+  interface Inter { }
+
+  static class A1 extends Sup implements Inter { }
+  static class A2 extends Sup implements Inter { }
+  static class A3 extends Sup { }
+  static class A4 extends Sup implements Inter { }
+  static class A2sub extends A2 { }
+
+  private void m2(boolean b) {
+    scc1(new A1(), 10);
+    Sup x = b ? new A2() : new A3();
+    scc2(x, 10);
+  }
+
+  private void scc1(Sup x1, int i) {
+    scc2(x1, i);
+  }
+
+  private void scc2(Sup x2, int i) {
+    scc3(x2, i);
+  }
+
+  private void scc3(Sup x3, int i) {
+    next(x3);
+    if (i > 0)
+      scc1(x3, --i);
+  }
+
+  private void next(Sup x) {
+    if (x instanceof Inter) {
+      x.hashCode();
+    }
+  }
+
+  void m3(Object d) {
+    if (d instanceof A1 || d instanceof A2 || d instanceof A3) {
+      d.hashCode();
+    }
+  }
+}
diff --git a/java/ql/test/library-tests/typeflow/typeflow.expected b/java/ql/test/library-tests/typeflow/typeflow.expected
index 1f879fe37ea..021d04b55d3 100644
--- a/java/ql/test/library-tests/typeflow/typeflow.expected
+++ b/java/ql/test/library-tests/typeflow/typeflow.expected
@@ -13,3 +13,4 @@
 | A.java:67:22:67:22 | x | Integer | false |
 | A.java:70:23:70:24 | x2 | Integer | false |
 | A.java:92:18:92:18 | n | Integer | false |
+| UnionTypes.java:45:7:45:7 | x | Inter | false |
diff --git a/java/ql/test/library-tests/typeflow/uniontypeflow.expected b/java/ql/test/library-tests/typeflow/uniontypeflow.expected
new file mode 100644
index 00000000000..7c595175301
--- /dev/null
+++ b/java/ql/test/library-tests/typeflow/uniontypeflow.expected
@@ -0,0 +1,24 @@
+| UnionTypes.java:11:5:11:5 | m | 2 | ConcurrentHashMap<String,String> | false |
+| UnionTypes.java:11:5:11:5 | m | 2 | LinkedHashMap<String,String> | false |
+| UnionTypes.java:26:10:26:10 | x | 2 | A2 | true |
+| UnionTypes.java:26:10:26:10 | x | 2 | A3 | false |
+| UnionTypes.java:30:10:30:11 | x1 | 3 | A1 | false |
+| UnionTypes.java:30:10:30:11 | x1 | 3 | A2 | true |
+| UnionTypes.java:30:10:30:11 | x1 | 3 | A3 | false |
+| UnionTypes.java:34:10:34:11 | x2 | 3 | A1 | false |
+| UnionTypes.java:34:10:34:11 | x2 | 3 | A2 | true |
+| UnionTypes.java:34:10:34:11 | x2 | 3 | A3 | false |
+| UnionTypes.java:38:10:38:11 | x3 | 3 | A1 | false |
+| UnionTypes.java:38:10:38:11 | x3 | 3 | A2 | true |
+| UnionTypes.java:38:10:38:11 | x3 | 3 | A3 | false |
+| UnionTypes.java:40:12:40:13 | x3 | 3 | A1 | false |
+| UnionTypes.java:40:12:40:13 | x3 | 3 | A2 | true |
+| UnionTypes.java:40:12:40:13 | x3 | 3 | A3 | false |
+| UnionTypes.java:44:9:44:9 | x | 3 | A1 | false |
+| UnionTypes.java:44:9:44:9 | x | 3 | A2 | true |
+| UnionTypes.java:44:9:44:9 | x | 3 | A3 | false |
+| UnionTypes.java:45:7:45:7 | x | 2 | A1 | false |
+| UnionTypes.java:45:7:45:7 | x | 2 | A2 | true |
+| UnionTypes.java:51:7:51:7 | d | 3 | A1 | false |
+| UnionTypes.java:51:7:51:7 | d | 3 | A2 | false |
+| UnionTypes.java:51:7:51:7 | d | 3 | A3 | false |
diff --git a/java/ql/test/library-tests/typeflow/uniontypeflow.ql b/java/ql/test/library-tests/typeflow/uniontypeflow.ql
new file mode 100644
index 00000000000..769ac89172c
--- /dev/null
+++ b/java/ql/test/library-tests/typeflow/uniontypeflow.ql
@@ -0,0 +1,10 @@
+import java
+import semmle.code.java.dataflow.TypeFlow
+
+int countUnionTypes(Expr e) {
+  result = strictcount(RefType t, boolean exact | exprUnionTypeFlow(e, t, exact))
+}
+
+from RValue e, RefType t, boolean exact
+where exprUnionTypeFlow(e, t, exact)
+select e, countUnionTypes(e), t.toString(), exact

From b8a1818422eb26a26b15765c1dd78cebe993d1b0 Mon Sep 17 00:00:00 2001
From: Anders Schack-Mulligen <aschackmull@github.com>
Date: Tue, 13 Sep 2022 13:29:59 +0200
Subject: [PATCH 132/203] Java: Fix test expectation.

---
 java/ql/test/library-tests/dispatch/viableCallable.expected | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/java/ql/test/library-tests/dispatch/viableCallable.expected b/java/ql/test/library-tests/dispatch/viableCallable.expected
index 032bac595ac..15ff247a514 100644
--- a/java/ql/test/library-tests/dispatch/viableCallable.expected
+++ b/java/ql/test/library-tests/dispatch/viableCallable.expected
@@ -11,13 +11,9 @@
 | ViableCallable4.java:16:5:16:9 | f(...) | f | 5 | A1 |
 | ViableCallable4.java:16:5:16:9 | f(...) | f | 8 | A2 |
 | ViableCallable4.java:16:5:16:9 | f(...) | f | 11 | A3 |
-| ViableCallable4.java:18:7:18:11 | f(...) | f | 2 | Sup |
 | ViableCallable4.java:18:7:18:11 | f(...) | f | 5 | A1 |
 | ViableCallable4.java:18:7:18:11 | f(...) | f | 8 | A2 |
-| ViableCallable4.java:18:7:18:11 | f(...) | f | 11 | A3 |
 | ViableCallable4.java:21:5:21:10 | f(...) | f | 2 | Sup |
-| ViableCallable4.java:21:5:21:10 | f(...) | f | 5 | A1 |
-| ViableCallable4.java:21:5:21:10 | f(...) | f | 8 | A2 |
 | ViableCallable4.java:21:5:21:10 | f(...) | f | 11 | A3 |
 | ViableCallable.java:5:3:5:13 | M(...) | M | 81 | C2 |
 | ViableCallable.java:5:3:5:13 | M(...) | M | 86 | C3 |

From 2f8151d8d238d9749a7bba3eb24777cca58f7031 Mon Sep 17 00:00:00 2001
From: Ian Lynagh <igfoo@github.com>
Date: Tue, 13 Sep 2022 13:51:00 +0100
Subject: [PATCH 133/203] Kotlin: Remove a throw statement

We have a way to carry on here, so we may as well do so
---
 .../src/main/kotlin/KotlinExtractorExtension.kt            | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/java/kotlin-extractor/src/main/kotlin/KotlinExtractorExtension.kt b/java/kotlin-extractor/src/main/kotlin/KotlinExtractorExtension.kt
index d6f25d73efa..3b58400eca5 100644
--- a/java/kotlin-extractor/src/main/kotlin/KotlinExtractorExtension.kt
+++ b/java/kotlin-extractor/src/main/kotlin/KotlinExtractorExtension.kt
@@ -354,7 +354,12 @@ private fun getTrapFileWriter(compression: Compression, logger: FileLogger, trap
     return when (compression) {
         Compression.NONE -> NonCompressedTrapFileWriter(logger, trapFileName)
         Compression.GZIP -> GZipCompressedTrapFileWriter(logger, trapFileName)
-        Compression.BROTLI -> throw Exception("Brotli compression is not supported by the Kotlin extractor")
+        Compression.BROTLI -> {
+            // Brotli should have been replaced with gzip earlier, but
+            // if we somehow manage to get here then keep going
+            logger.error("Impossible Brotli compression requested. Using Gzip instead.")
+            getTrapFileWriter(Compression.GZIP, logger, trapFileName)
+        }
     }
 }
 

From 1fceeed32ca256847cde2ca4ea71f27e46c431ba Mon Sep 17 00:00:00 2001
From: james <jf205@github.com>
Date: Tue, 13 Sep 2022 13:53:05 +0100
Subject: [PATCH 134/203] address review comments

---
 docs/codeql/codeql-cli/creating-codeql-databases.rst  | 10 +++++++++-
 .../analyzing-your-projects.rst                       |  2 +-
 docs/codeql/reusables/download-github-database.rst    | 11 ++++++++++-
 3 files changed, 20 insertions(+), 3 deletions(-)

diff --git a/docs/codeql/codeql-cli/creating-codeql-databases.rst b/docs/codeql/codeql-cli/creating-codeql-databases.rst
index 0ea4f1ef4b5..af254d865cf 100644
--- a/docs/codeql/codeql-cli/creating-codeql-databases.rst
+++ b/docs/codeql/codeql-cli/creating-codeql-databases.rst
@@ -5,11 +5,17 @@ Creating CodeQL databases
 
 Before you analyze your code using CodeQL, you need to create a CodeQL
 database containing all the data required to run queries on your code.
+You can create CodeQL databases yourself using the CodeQL CLI,
+or download them from GitHub.com.
 
 CodeQL analysis relies on extracting relational data from your code, and
 using it to build a :ref:`CodeQL database <codeql-database>`. CodeQL
 databases contain all of the important information about a codebase, which can
-be analyzed by executing CodeQL queries against it.
+be analyzed by executing CodeQL queries against it. GitHub creates and 
+stores CodeQL databases for a large number of open-source projects. For more information,
+see ":ref:`Downloading CodeQL databases from GitHub.com <downloading-codeql-databases-from-github-com>`."
+
+You can also create CodeQL databases yourself using the CodeQL CLI. 
 Before you generate a CodeQL database, you need to:
 
 - Install and set up the CodeQL CLI. For more information, see
@@ -379,6 +385,8 @@ The following example shows how you could use indirect build tracing in an Azure
        # `codeql database analyze`
        # then `codeql github upload-results` ...
 
+.. _downloading-databases-from-github-com:
+
 Downloading databases from GitHub.com
 -------------------------------------
 
diff --git a/docs/codeql/codeql-for-visual-studio-code/analyzing-your-projects.rst b/docs/codeql/codeql-for-visual-studio-code/analyzing-your-projects.rst
index 6a59754eaa5..89fe41c454e 100644
--- a/docs/codeql/codeql-for-visual-studio-code/analyzing-your-projects.rst
+++ b/docs/codeql/codeql-for-visual-studio-code/analyzing-your-projects.rst
@@ -14,7 +14,7 @@ To analyze a project, you need to add a :ref:`CodeQL database <codeql-database>`
 
 #. Open the CodeQL Databases view in the sidebar.
 
-#. Hover over the **Databases** title bar and click the appropriate icon to add your database. You can add a database from a local ZIP archive or folder, from a public URL, or from a project slug on GitHub.com.
+#. Hover over the **Databases** title bar and click the appropriate icon to add your database. You can add a database from a local ZIP archive or folder, from a public URL, or from a project's URL on GitHub.com.
 
    .. image:: ../images/codeql-for-visual-studio-code/choose-database.png
       :width: 350
diff --git a/docs/codeql/reusables/download-github-database.rst b/docs/codeql/reusables/download-github-database.rst
index 0b1325fc5fe..2e4bfd9a58c 100644
--- a/docs/codeql/reusables/download-github-database.rst
+++ b/docs/codeql/reusables/download-github-database.rst
@@ -1,5 +1,14 @@
 GitHub stores CodeQL databases for over 200,000 repos on GitHub.com, which you can download using the REST API. The list of repos is constantly growing and evolving to make sure that it includes the most interesting codebases for security research.
 
-To download a database from GitHub.com using the `GitHub CLI <https://cli.github.com/manual/gh_api>`__, use the following command:: 
+You can check if a repo has any CodeQL databases available to download using the `/repos/<owner>/<repo>/code-scanning/codeql/databases` endpoint.
+For example, to check for CodeQL databases using the `GitHub CLI <https://cli.github.com/manual/gh_api>`__ you would run::
+
+   gh api /repos/<owner>/<repo>/code-scanning/codeql/databases/
+
+This command will return information about the CodeQL databases that are available for a repository, including the language the database represents, and when the database was last updated. If no CodeQL databases are available, the response will be empty.
+
+When you have confirmed that a CodeQL database exists for the language you are interested in, you can download it using the following command:: 
 
    gh api /repos/<owner>/<repo>/code-scanning/codeql/databases/<language> -H 'Accept: application/zip' > path/to/local/database.zip
+
+TODO: add link to the REST API docs.
\ No newline at end of file

From 24d28e04825d7be94790a761b549eb0906558e6a Mon Sep 17 00:00:00 2001
From: Rasmus Wriedt Larsen <rasmuswl@github.com>
Date: Tue, 13 Sep 2022 15:20:49 +0200
Subject: [PATCH 135/203] Docs: Use `instanceof` in `::Range` pattern
 description

Had to change the example away from Go, since their libs have not been
updated to use `instanceof` yet (but I'll make a PR from them shortly)
---
 docs/ql-design-patterns.md | 22 +++++++---------------
 1 file changed, 7 insertions(+), 15 deletions(-)

diff --git a/docs/ql-design-patterns.md b/docs/ql-design-patterns.md
index 6984088e925..d63ccec496f 100644
--- a/docs/ql-design-patterns.md
+++ b/docs/ql-design-patterns.md
@@ -31,13 +31,9 @@ Applying the `::Range` pattern yields the following:
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `MySpecialExpr::Range` instead.
  */
-class MySpecialExpr extends Expr {
-  MySpecialExpr::Range range;
-
-  MySpecialExpr() { this = range }
-
+class MySpecialExpr extends Expr instanceof MySpecialExpr::Range {
   /** <QLDoc...> */
-  int memberPredicate() { result = range.memberPredicate() }
+  int memberPredicate() { result = super.memberPredicate() }
 }
 
 /** Provides a class for modeling new <...> APIs. */
@@ -56,22 +52,18 @@ module MySpecialExpr {
 ```
 Now, a concrete subclass can derive from `MySpecialExpr::Range` if it wants to extend the set of values in `MySpecialExpr`, and it will be required to implement the abstract `memberPredicate()`. Conversely, if it wants to refine `MySpecialExpr` and override `memberPredicate` for all extensions, it can do so by deriving from `MySpecialExpr` directly.
 
-The key element of the pattern is to provide a field of type `MySpecialExpr::Range`, equating it to `this` in the characteristic predicate of `MySpecialExpr`. In member predicates, we can use either `this` or `range`, depending on which type has the API we need.
-
 </details>
 
-Note that in some libraries, the `range` field is in fact called `self`. While we do recommend using `range` for consistency, the name of the field does not matter (and using `range` avoids confusion in contexts like Python analysis that has strong usage of `self`).
-
 ### Rationale
 
-Let's use an example from the Go libraries: https://github.com/github/codeql-go/blob/2ba9bbfd8ba1818b5ee9f6009c86a605189c9ef3/ql/src/semmle/go/Concepts.qll#L119-L157
+Let's use an example from the Python libraries: https://github.com/github/codeql/blob/46751e515c40c6b4c9b61758cc840eec1894a624/python/ql/lib/semmle/python/Concepts.qll#L601-L683
 
-`EscapeFunction`, as the name suggests, models various APIs that escape meta-characters. It has a member-predicate `kind()` that tells you what sort of escaping the modelled function does. For example, if the result of that predicate is `"js"`, then this means that the escaping function is meant to make things safe to embed inside JavaScript.
-`EscapeFunction::Range` is subclassed to model various APIs, and `kind()` is implemented accordingly.
-But we can also subclass `EscapeFunction` to, as in the above example, talk about all JS-escaping functions.
+`Escaping`, as the name suggests, models various APIs that escape meta-characters. It has a member-predicate `getKind()` that tells you what sort of escaping the modelled function does. For example, if the result of that predicate is `"html"`, then this means that the escaping function is meant to make things safe to embed inside HTML.
+`Escaping::Range` is subclassed to model various APIs, and `kind()` is implemented accordingly.
+But we can also subclass `Escaping` to, as in the above example, talk about all HTML-escaping functions.
 
 You can, of course, do the same without the `::Range` pattern, but it's a little cumbersome:
-If you only had an `abstract class EscapeFunction { ... }`, then `JsEscapeFunction` would need to be implemented in a slightly tricky way to prevent it from extending `EscapeFunction` (instead of refining it). You would have to give it a charpred `this instanceof EscapeFunction`, which looks useless but isn't. And additionally, you'd have to provide trivial `none()` overrides of all the abstract predicates defined in `EscapeFunction`. This is all pretty awkward, and we can avoid it by distinguishing between `EscapeFunction` and `EscapeFunction::Range`.
+If you only had an `abstract class Escaping { ... }`, then `HtmlEscaping` would need to be implemented in a slightly tricky way to prevent it from extending `Escaping` (instead of refining it). You would have to give it a charpred `this instanceof Escaping`, which looks useless but isn't. And additionally, you'd have to provide trivial `none()` overrides of all the abstract predicates defined in `Escaping`. This is all pretty awkward, and we can avoid it by distinguishing between `Escaping` and `Escaping::Range`.
 
 
 ## Importing all subclasses of a class

From 4e582debfc02826ac5e73879e9a5b6baaa62e52c Mon Sep 17 00:00:00 2001
From: james <jf205@github.com>
Date: Tue, 13 Sep 2022 14:21:41 +0100
Subject: [PATCH 136/203] mention compatibility with CLI used by GHES

---
 .../codeql-cli/getting-started-with-the-codeql-cli.rst       | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst b/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst
index 976aa302fc6..db8b36ef58f 100644
--- a/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst
+++ b/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst
@@ -48,8 +48,11 @@ Conditions <https://securitylab.github.com/tools/codeql/license>`__.
 .. pull-quote:: Important
 
    There are several different versions of the CLI available to download, depending
-   on your use case. If you want to use the most up to date CodeQL tools and features, download the
+   on your use case:
+
+   * If you want to use the most up to date CodeQL tools and features, download the
    version tagged ``latest``.
+   * If you want to generate code scanning data to upload to GitHub Enterprise server, then download the version that is compatible with the CodeQL CLI used in your CI system. For more information, see "`Installing CodeQL CLI in your CI system <https://docs.github.com/en/enterprise-server@3.6/code-security/code-scanning/using-codeql-code-scanning-with-your-existing-ci-system/installing-codeql-cli-in-your-ci-system#downloading-the-codeql-cli>`__" in the GitHub documentation.
 
 If you use Linux, Windows, or macOS version 10.14 ("Mojave") or earlier, simply
 `download the zip archive

From ff4b1ce913abe2d6b42b98122b866e81e133ef28 Mon Sep 17 00:00:00 2001
From: james <jf205@github.com>
Date: Tue, 13 Sep 2022 14:34:06 +0100
Subject: [PATCH 137/203] fix indentation

---
 docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst b/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst
index db8b36ef58f..c188c0a9c72 100644
--- a/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst
+++ b/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst
@@ -50,8 +50,7 @@ Conditions <https://securitylab.github.com/tools/codeql/license>`__.
    There are several different versions of the CLI available to download, depending
    on your use case:
 
-   * If you want to use the most up to date CodeQL tools and features, download the
-   version tagged ``latest``.
+   * If you want to use the most up to date CodeQL tools and features, download the version tagged ``latest``.
    * If you want to generate code scanning data to upload to GitHub Enterprise server, then download the version that is compatible with the CodeQL CLI used in your CI system. For more information, see "`Installing CodeQL CLI in your CI system <https://docs.github.com/en/enterprise-server@3.6/code-security/code-scanning/using-codeql-code-scanning-with-your-existing-ci-system/installing-codeql-cli-in-your-ci-system#downloading-the-codeql-cli>`__" in the GitHub documentation.
 
 If you use Linux, Windows, or macOS version 10.14 ("Mojave") or earlier, simply

From 6f5701f9c7c87e7fc5122af843493a3fa130e48b Mon Sep 17 00:00:00 2001
From: Rasmus Wriedt Larsen <rasmuswl@github.com>
Date: Tue, 13 Sep 2022 15:27:15 +0200
Subject: [PATCH 138/203] Go: Rewrite concepts to use `extends ... instanceof
 ...`

---
 go/ql/lib/semmle/go/Concepts.qll | 110 ++++++++++---------------------
 1 file changed, 35 insertions(+), 75 deletions(-)

diff --git a/go/ql/lib/semmle/go/Concepts.qll b/go/ql/lib/semmle/go/Concepts.qll
index f3920c2ec5c..c6043ae46b3 100644
--- a/go/ql/lib/semmle/go/Concepts.qll
+++ b/go/ql/lib/semmle/go/Concepts.qll
@@ -16,16 +16,12 @@ import semmle.go.concepts.GeneratedFile
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `SystemCommandExecution::Range` instead.
  */
-class SystemCommandExecution extends DataFlow::Node {
-  SystemCommandExecution::Range self;
-
-  SystemCommandExecution() { this = self }
-
+class SystemCommandExecution extends DataFlow::Node instanceof SystemCommandExecution::Range {
   /** Gets the argument that specifies the command to be executed. */
-  DataFlow::Node getCommandName() { result = self.getCommandName() }
+  DataFlow::Node getCommandName() { result = super.getCommandName() }
 
   /** Holds if this node is sanitized whenever it follows `--` in an argument list. */
-  predicate doubleDashIsSanitizing() { self.doubleDashIsSanitizing() }
+  predicate doubleDashIsSanitizing() { super.doubleDashIsSanitizing() }
 }
 
 /** Provides a class for modeling new system-command execution APIs. */
@@ -52,22 +48,18 @@ module SystemCommandExecution {
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `TemplateInstantiation::Range` instead.
  */
-class TemplateInstantiation extends DataFlow::Node {
-  TemplateInstantiation::Range self;
-
-  TemplateInstantiation() { this = self }
-
+class TemplateInstantiation extends DataFlow::Node instanceof TemplateInstantiation::Range {
   /**
    * Gets the argument to this template instantiation that is the template being
    * instantiated.
    */
-  DataFlow::Node getTemplateArgument() { result = self.getTemplateArgument() }
+  DataFlow::Node getTemplateArgument() { result = super.getTemplateArgument() }
 
   /**
    * Gets an argument to this template instantiation that is data being inserted
    * into the template.
    */
-  DataFlow::Node getADataArgument() { result = self.getADataArgument() }
+  DataFlow::Node getADataArgument() { result = super.getADataArgument() }
 }
 
 /** Provides a class for modeling new template-instantiation APIs. */
@@ -100,13 +92,9 @@ module TemplateInstantiation {
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `FileSystemAccess::Range` instead.
  */
-class FileSystemAccess extends DataFlow::Node {
-  FileSystemAccess::Range self;
-
-  FileSystemAccess() { this = self }
-
+class FileSystemAccess extends DataFlow::Node instanceof FileSystemAccess::Range {
   /** Gets an argument to this file system access that is interpreted as a path. */
-  DataFlow::Node getAPathArgument() { result = self.getAPathArgument() }
+  DataFlow::Node getAPathArgument() { result = super.getAPathArgument() }
 }
 
 /** Provides a class for modeling new file-system access APIs. */
@@ -125,17 +113,13 @@ module FileSystemAccess {
 }
 
 /** A function that escapes meta-characters to prevent injection attacks. */
-class EscapeFunction extends Function {
-  EscapeFunction::Range self;
-
-  EscapeFunction() { this = self }
-
+class EscapeFunction extends Function instanceof EscapeFunction::Range {
   /**
    * The context that this function escapes for.
    *
    * Currently, this can be "js", "html", or "url".
    */
-  string kind() { result = self.kind() }
+  string kind() { result = super.kind() }
 }
 
 /** Provides a class for modeling new escape-function APIs. */
@@ -161,7 +145,7 @@ module EscapeFunction {
  * JavaScript string literal.
  */
 class JsEscapeFunction extends EscapeFunction {
-  JsEscapeFunction() { self.kind() = "js" }
+  JsEscapeFunction() { super.kind() = "js" }
 }
 
 /**
@@ -170,7 +154,7 @@ class JsEscapeFunction extends EscapeFunction {
  * `<p>{}</p>`.
  */
 class HtmlEscapeFunction extends EscapeFunction {
-  HtmlEscapeFunction() { self.kind() = "html" }
+  HtmlEscapeFunction() { super.kind() = "html" }
 }
 
 /**
@@ -178,7 +162,7 @@ class HtmlEscapeFunction extends EscapeFunction {
  * of a URL.
  */
 class UrlEscapeFunction extends EscapeFunction {
-  UrlEscapeFunction() { self.kind() = "url" }
+  UrlEscapeFunction() { super.kind() = "url" }
 }
 
 /**
@@ -187,27 +171,23 @@ class UrlEscapeFunction extends EscapeFunction {
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `RegexpPattern::Range` instead.
  */
-class RegexpPattern extends DataFlow::Node {
-  RegexpPattern::Range self;
-
-  RegexpPattern() { this = self }
-
+class RegexpPattern extends DataFlow::Node instanceof RegexpPattern::Range {
   /**
    * Gets the node where this pattern is parsed as a part of a regular
    * expression.
    */
-  DataFlow::Node getAParse() { result = self.getAParse() }
+  DataFlow::Node getAParse() { result = super.getAParse() }
 
   /**
    * Gets this regexp pattern as a string.
    */
-  string getPattern() { result = self.getPattern() }
+  string getPattern() { result = super.getPattern() }
 
   /**
    * Gets a use of this pattern, either as itself in an argument to a function or as a compiled
    * regexp object.
    */
-  DataFlow::Node getAUse() { result = self.getAUse() }
+  DataFlow::Node getAUse() { result = super.getAUse() }
 }
 
 /** Provides a class for modeling new regular-expression APIs. */
@@ -244,15 +224,11 @@ module RegexpPattern {
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `RegexpMatchFunction::Range` instead.
  */
-class RegexpMatchFunction extends Function {
-  RegexpMatchFunction::Range self;
-
-  RegexpMatchFunction() { this = self }
-
+class RegexpMatchFunction extends Function instanceof RegexpMatchFunction::Range {
   /**
    * Gets the function input that is the regexp being matched.
    */
-  FunctionInput getRegexpArg() { result = self.getRegexpArg() }
+  FunctionInput getRegexpArg() { result = super.getRegexpArg() }
 
   /**
    * Gets the regexp pattern that is used in the call to this function `call`.
@@ -264,12 +240,12 @@ class RegexpMatchFunction extends Function {
   /**
    * Gets the function input that is the string being matched against.
    */
-  FunctionInput getValue() { result = self.getValue() }
+  FunctionInput getValue() { result = super.getValue() }
 
   /**
    * Gets the function output that is the Boolean result of the match function.
    */
-  FunctionOutput getResult() { result = self.getResult() }
+  FunctionOutput getResult() { result = super.getResult() }
 }
 
 /** Provides a class for modeling new regular-expression matcher APIs. */
@@ -304,15 +280,11 @@ module RegexpMatchFunction {
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `RegexpReplaceFunction::Range` instead.
  */
-class RegexpReplaceFunction extends Function {
-  RegexpReplaceFunction::Range self;
-
-  RegexpReplaceFunction() { this = self }
-
+class RegexpReplaceFunction extends Function instanceof RegexpReplaceFunction::Range {
   /**
    * Gets the function input that is the regexp that matches text to replace.
    */
-  FunctionInput getRegexpArg() { result = self.getRegexpArg() }
+  FunctionInput getRegexpArg() { result = super.getRegexpArg() }
 
   /**
    * Gets the regexp pattern that is used to match patterns to replace in the call to this function
@@ -326,13 +298,13 @@ class RegexpReplaceFunction extends Function {
    * Gets the function input corresponding to the source value, that is, the value that is having
    * its contents replaced.
    */
-  FunctionInput getSource() { result = self.getSource() }
+  FunctionInput getSource() { result = super.getSource() }
 
   /**
    * Gets the function output corresponding to the result, that is, the value after replacement has
    * occurred.
    */
-  FunctionOutput getResult() { result = self.getResult() }
+  FunctionOutput getResult() { result = super.getResult() }
 }
 
 /** Provides a class for modeling new regular-expression replacer APIs. */
@@ -369,13 +341,9 @@ module RegexpReplaceFunction {
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `LoggerCall::Range` instead.
  */
-class LoggerCall extends DataFlow::Node {
-  LoggerCall::Range self;
-
-  LoggerCall() { this = self }
-
+class LoggerCall extends DataFlow::Node instanceof LoggerCall::Range {
   /** Gets a node that is a part of the logged message. */
-  DataFlow::Node getAMessageComponent() { result = self.getAMessageComponent() }
+  DataFlow::Node getAMessageComponent() { result = super.getAMessageComponent() }
 }
 
 /** Provides a class for modeling new logging APIs. */
@@ -398,19 +366,15 @@ module LoggerCall {
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `MarshalingFunction::Range` instead.
  */
-class MarshalingFunction extends Function {
-  MarshalingFunction::Range self;
-
-  MarshalingFunction() { this = self }
-
+class MarshalingFunction extends Function instanceof MarshalingFunction::Range {
   /** Gets an input that is encoded by this function. */
-  FunctionInput getAnInput() { result = self.getAnInput() }
+  FunctionInput getAnInput() { result = super.getAnInput() }
 
   /** Gets the output that contains the encoded data produced by this function. */
-  FunctionOutput getOutput() { result = self.getOutput() }
+  FunctionOutput getOutput() { result = super.getOutput() }
 
   /** Gets an identifier for the format this function encodes into, such as "JSON". */
-  string getFormat() { result = self.getFormat() }
+  string getFormat() { result = super.getFormat() }
 }
 
 /** Provides a class for modeling new marshaling APIs. */
@@ -439,19 +403,15 @@ module MarshalingFunction {
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `UnmarshalingFunction::Range` instead.
  */
-class UnmarshalingFunction extends Function {
-  UnmarshalingFunction::Range self;
-
-  UnmarshalingFunction() { this = self }
-
+class UnmarshalingFunction extends Function instanceof UnmarshalingFunction::Range {
   /** Gets an input that is decoded by this function. */
-  FunctionInput getAnInput() { result = self.getAnInput() }
+  FunctionInput getAnInput() { result = super.getAnInput() }
 
   /** Gets the output that contains the decoded data produced by this function. */
-  FunctionOutput getOutput() { result = self.getOutput() }
+  FunctionOutput getOutput() { result = super.getOutput() }
 
   /** Gets an identifier for the format this function decodes from, such as "JSON". */
-  string getFormat() { result = self.getFormat() }
+  string getFormat() { result = super.getFormat() }
 }
 
 /** Provides a class for modeling new unmarshaling APIs. */

From 511030df485d14fa5c6c5e816f134088a3b371f2 Mon Sep 17 00:00:00 2001
From: Rasmus Wriedt Larsen <rasmuswl@github.com>
Date: Tue, 13 Sep 2022 15:36:42 +0200
Subject: [PATCH 139/203] Ruby: Rewrite a few `::Range` uses to `instanceof`

---
 ruby/ql/lib/codeql/ruby/Concepts.qll           | 18 +++++-------------
 .../codeql/ruby/dataflow/RemoteFlowSources.qll |  8 ++------
 2 files changed, 7 insertions(+), 19 deletions(-)

diff --git a/ruby/ql/lib/codeql/ruby/Concepts.qll b/ruby/ql/lib/codeql/ruby/Concepts.qll
index 214f6734473..efa27518607 100644
--- a/ruby/ql/lib/codeql/ruby/Concepts.qll
+++ b/ruby/ql/lib/codeql/ruby/Concepts.qll
@@ -611,16 +611,12 @@ module CodeExecution {
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `XmlParserCall::Range` instead.
  */
-class XmlParserCall extends DataFlow::Node {
-  XmlParserCall::Range range;
-
-  XmlParserCall() { this = range }
-
+class XmlParserCall extends DataFlow::Node instanceof XmlParserCall::Range {
   /** Gets the argument that specifies the XML content to be parsed. */
-  DataFlow::Node getInput() { result = range.getInput() }
+  DataFlow::Node getInput() { result = super.getInput() }
 
   /** Holds if this XML parser call is configured to process external entities */
-  predicate externalEntitiesEnabled() { range.externalEntitiesEnabled() }
+  predicate externalEntitiesEnabled() { super.externalEntitiesEnabled() }
 }
 
 /** Provides a class for modeling new XML parsing APIs. */
@@ -790,13 +786,9 @@ module CookieSecurityConfigurationSetting {
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `Logging::Range` instead.
  */
-class Logging extends DataFlow::Node {
-  Logging::Range range;
-
-  Logging() { this = range }
-
+class Logging extends DataFlow::Node instanceof Logging::Range {
   /** Gets an input that is logged. */
-  DataFlow::Node getAnInput() { result = range.getAnInput() }
+  DataFlow::Node getAnInput() { result = super.getAnInput() }
 }
 
 /** Provides a class for modeling new logging mechanisms. */
diff --git a/ruby/ql/lib/codeql/ruby/dataflow/RemoteFlowSources.qll b/ruby/ql/lib/codeql/ruby/dataflow/RemoteFlowSources.qll
index 617bfd8678e..de85af6b938 100644
--- a/ruby/ql/lib/codeql/ruby/dataflow/RemoteFlowSources.qll
+++ b/ruby/ql/lib/codeql/ruby/dataflow/RemoteFlowSources.qll
@@ -13,13 +13,9 @@ private import codeql.ruby.Frameworks
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `RemoteFlowSource::Range` instead.
  */
-class RemoteFlowSource extends DataFlow::Node {
-  RemoteFlowSource::Range self;
-
-  RemoteFlowSource() { this = self }
-
+class RemoteFlowSource extends DataFlow::Node instanceof RemoteFlowSource::Range {
   /** Gets a string that describes the type of this remote flow source. */
-  string getSourceType() { result = self.getSourceType() }
+  string getSourceType() { result = super.getSourceType() }
 }
 
 /** Provides a class for modeling new sources of remote user input. */

From 2c757c714dfbdb5bec3a9b8a39d13059bd443f9a Mon Sep 17 00:00:00 2001
From: Tamas Vajk <tamasvajk@github.com>
Date: Tue, 13 Sep 2022 15:12:38 +0200
Subject: [PATCH 140/203] Kotlin: Code quality improvements: refactor a cast

---
 java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt b/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt
index 7ea97d54624..74dbb8288ce 100644
--- a/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt
+++ b/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt
@@ -3105,13 +3105,14 @@ open class KotlinFileExtractor(
                     extractTypeOperatorCall(e, callable, exprParent.parent, exprParent.idx, exprParent.enclosingStmt)
                 }
                 is IrVararg -> {
-                    if (e.elements.size != 1 || e.elements[0] !is IrSpreadElement) {
+                    var spread = e.elements.getOrNull(0) as? IrSpreadElement
+                    if (spread == null || e.elements.size != 1) {
                         logger.errorElement("Unexpected IrVararg", e)
                         return
                     }
                     // There are lowered IR cases when the vararg expression is not within a call, such as
                     // val temp0 = [*expr]
-                    extractExpression((e.elements[0] as IrSpreadElement).expression, callable, parent)
+                    extractExpression(spread.expression, callable, parent)
                 }
                 is IrGetObjectValue -> {
                     // For `object MyObject { ... }`, the .class has an

From ca66a29b18cac4ab39873d3c49df18e803d3d6c0 Mon Sep 17 00:00:00 2001
From: Rasmus Wriedt Larsen <rasmuswl@github.com>
Date: Tue, 13 Sep 2022 15:43:06 +0200
Subject: [PATCH 141/203] Go: Rewrite `::Range` patterns to use `instanceof`

---
 go/ql/lib/semmle/go/StringOps.qll             | 24 ++----
 .../lib/semmle/go/concepts/GeneratedFile.qll  |  6 +-
 go/ql/lib/semmle/go/concepts/HTTP.qll         | 80 ++++++-------------
 .../go/dataflow/internal/DataFlowNodes.qll    | 16 ++--
 go/ql/lib/semmle/go/frameworks/Email.qll      |  6 +-
 go/ql/lib/semmle/go/frameworks/NoSQL.qll      |  6 +-
 go/ql/lib/semmle/go/frameworks/SQL.qll        | 16 +---
 go/ql/lib/semmle/go/frameworks/Testing.qll    | 12 +--
 go/ql/lib/semmle/go/frameworks/WebSocket.qll  | 16 +---
 go/ql/lib/semmle/go/frameworks/XPath.qll      |  6 +-
 go/ql/lib/semmle/go/security/FlowSources.qll  |  6 +-
 11 files changed, 53 insertions(+), 141 deletions(-)

diff --git a/go/ql/lib/semmle/go/StringOps.qll b/go/ql/lib/semmle/go/StringOps.qll
index 70f83328c05..d88aea71e23 100644
--- a/go/ql/lib/semmle/go/StringOps.qll
+++ b/go/ql/lib/semmle/go/StringOps.qll
@@ -12,20 +12,16 @@ module StringOps {
    * Extend this class to refine existing API models. If you want to model new APIs,
    * extend `StringOps::HasPrefix::Range` instead.
    */
-  class HasPrefix extends DataFlow::Node {
-    HasPrefix::Range range;
-
-    HasPrefix() { range = this }
-
+  class HasPrefix extends DataFlow::Node instanceof HasPrefix::Range {
     /**
      * Gets the `A` in `strings.HasPrefix(A, B)`.
      */
-    DataFlow::Node getBaseString() { result = range.getBaseString() }
+    DataFlow::Node getBaseString() { result = super.getBaseString() }
 
     /**
      * Gets the `B` in `strings.HasPrefix(A, B)`.
      */
-    DataFlow::Node getSubstring() { result = range.getSubstring() }
+    DataFlow::Node getSubstring() { result = super.getSubstring() }
 
     /**
      * Gets the polarity of the check.
@@ -33,7 +29,7 @@ module StringOps {
      * If the polarity is `false` the check returns `true` if the string does not start
      * with the given substring.
      */
-    boolean getPolarity() { result = range.getPolarity() }
+    boolean getPolarity() { result = super.getPolarity() }
   }
 
   class StartsWith = HasPrefix;
@@ -241,25 +237,21 @@ module StringOps {
    * Extend this class to refine existing API models. If you want to model new APIs,
    * extend `StringOps::Concatenation::Range` instead.
    */
-  class Concatenation extends DataFlow::Node {
-    Concatenation::Range self;
-
-    Concatenation() { this = self }
-
+  class Concatenation extends DataFlow::Node instanceof Concatenation::Range {
     /**
      * Gets the `n`th operand of this string concatenation, if there is a data-flow node for it.
      */
-    DataFlow::Node getOperand(int n) { result = self.getOperand(n) }
+    DataFlow::Node getOperand(int n) { result = super.getOperand(n) }
 
     /**
      * Gets the string value of the `n`th operand of this string concatenation, if it is a constant.
      */
-    string getOperandStringValue(int n) { result = self.getOperandStringValue(n) }
+    string getOperandStringValue(int n) { result = super.getOperandStringValue(n) }
 
     /**
      * Gets the number of operands of this string concatenation.
      */
-    int getNumOperand() { result = self.getNumOperand() }
+    int getNumOperand() { result = super.getNumOperand() }
   }
 
   /** Provides predicates and classes for working with string concatenations. */
diff --git a/go/ql/lib/semmle/go/concepts/GeneratedFile.qll b/go/ql/lib/semmle/go/concepts/GeneratedFile.qll
index dec6872120c..d1067b60ad0 100644
--- a/go/ql/lib/semmle/go/concepts/GeneratedFile.qll
+++ b/go/ql/lib/semmle/go/concepts/GeneratedFile.qll
@@ -43,8 +43,4 @@ module GeneratedFile {
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `GeneratedFile::Range` instead.
  */
-class GeneratedFile extends File {
-  GeneratedFile::Range self;
-
-  GeneratedFile() { this = self }
-}
+class GeneratedFile extends File instanceof GeneratedFile::Range { }
diff --git a/go/ql/lib/semmle/go/concepts/HTTP.qll b/go/ql/lib/semmle/go/concepts/HTTP.qll
index 89a716d4f1a..83d387d386d 100644
--- a/go/ql/lib/semmle/go/concepts/HTTP.qll
+++ b/go/ql/lib/semmle/go/concepts/HTTP.qll
@@ -31,11 +31,7 @@ module HTTP {
    * Extend this class to refine existing API models. If you want to model new APIs,
    * extend `HTTP::ResponseWriter::Range` instead.
    */
-  class ResponseWriter extends Variable {
-    ResponseWriter::Range self;
-
-    ResponseWriter() { this = self }
-
+  class ResponseWriter extends Variable instanceof ResponseWriter::Range {
     /** Gets the body that is written in this HTTP response. */
     ResponseBody getBody() { result.getResponseWriter() = this }
 
@@ -47,8 +43,8 @@ module HTTP {
 
     /** Gets a data-flow node that is a use of this response writer. */
     DataFlow::Node getANode() {
-      result = self.getANode() or
-      result.(DataFlow::PostUpdateNode).getPreUpdateNode() = self.getANode()
+      result = super.getANode() or
+      result.(DataFlow::PostUpdateNode).getPreUpdateNode() = super.getANode()
     }
   }
 
@@ -100,19 +96,15 @@ module HTTP {
    * Extend this class to refine existing API models. If you want to model new APIs,
    * extend `HTTP::HeaderWrite::Range` instead.
    */
-  class HeaderWrite extends DataFlow::ExprNode {
-    HeaderWrite::Range self;
-
-    HeaderWrite() { this = self }
-
+  class HeaderWrite extends DataFlow::ExprNode instanceof HeaderWrite::Range {
     /** Gets the (lower-case) name of a header set by this definition. */
-    string getHeaderName() { result = self.getHeaderName() }
+    string getHeaderName() { result = super.getHeaderName() }
 
     /** Gets the value of the header set by this definition. */
-    string getHeaderValue() { result = self.getHeaderValue() }
+    string getHeaderValue() { result = super.getHeaderValue() }
 
     /** Holds if this header write defines the header `header`. */
-    predicate definesHeader(string header, string value) { self.definesHeader(header, value) }
+    predicate definesHeader(string header, string value) { super.definesHeader(header, value) }
 
     /**
      * Gets the node representing the name of the header defined by this write.
@@ -121,13 +113,13 @@ module HTTP {
      * sets the `Content-Type` header) may not have such a node, so callers should use
      * `getHeaderName` in preference to this method).
      */
-    DataFlow::Node getName() { result = self.getName() }
+    DataFlow::Node getName() { result = super.getName() }
 
     /** Gets the node representing the value of the header defined by this write. */
-    DataFlow::Node getValue() { result = self.getValue() }
+    DataFlow::Node getValue() { result = super.getValue() }
 
     /** Gets the response writer associated with this header write, if any. */
-    ResponseWriter getResponseWriter() { result = self.getResponseWriter() }
+    ResponseWriter getResponseWriter() { result = super.getResponseWriter() }
   }
 
   /** A data-flow node whose value is written to an HTTP header. */
@@ -171,11 +163,7 @@ module HTTP {
    * Extend this class to refine existing API models. If you want to model new APIs,
    * extend `HTTP::RequestBody::Range` instead.
    */
-  class RequestBody extends DataFlow::Node {
-    RequestBody::Range self;
-
-    RequestBody() { this = self }
-  }
+  class RequestBody extends DataFlow::Node instanceof RequestBody::Range { }
 
   /** Provides a class for modeling new HTTP response-body APIs. */
   module ResponseBody {
@@ -215,19 +203,15 @@ module HTTP {
    * Extend this class to refine existing API models. If you want to model new APIs,
    * extend `HTTP::ResponseBody::Range` instead.
    */
-  class ResponseBody extends DataFlow::Node {
-    ResponseBody::Range self;
-
-    ResponseBody() { this = self }
-
+  class ResponseBody extends DataFlow::Node instanceof ResponseBody::Range {
     /** Gets the response writer associated with this header write, if any. */
-    ResponseWriter getResponseWriter() { result = self.getResponseWriter() }
+    ResponseWriter getResponseWriter() { result = super.getResponseWriter() }
 
     /** Gets a content-type associated with this body. */
-    string getAContentType() { result = self.getAContentType() }
+    string getAContentType() { result = super.getAContentType() }
 
     /** Gets a dataflow node for a content-type associated with this body. */
-    DataFlow::Node getAContentTypeNode() { result = self.getAContentTypeNode() }
+    DataFlow::Node getAContentTypeNode() { result = super.getAContentTypeNode() }
   }
 
   /** Provides a class for modeling new HTTP template response-body APIs. */
@@ -250,13 +234,9 @@ module HTTP {
    * Extend this class to refine existing API models. If you want to model new APIs,
    * extend `HTTP::TemplateResponseBody::Range` instead.
    */
-  class TemplateResponseBody extends ResponseBody {
-    override TemplateResponseBody::Range self;
-
-    TemplateResponseBody() { this = self }
-
+  class TemplateResponseBody extends ResponseBody instanceof TemplateResponseBody::Range {
     /** Gets the read of the variable inside the template where this value is read. */
-    HtmlTemplate::TemplateRead getRead() { result = self.getRead() }
+    HtmlTemplate::TemplateRead getRead() { result = super.getRead() }
   }
 
   /** Provides a class for modeling new HTTP client request APIs. */
@@ -285,15 +265,11 @@ module HTTP {
    * Extend this class to refine existing API models. If you want to model new APIs,
    * extend `HTTP::ClientRequest::Range` instead.
    */
-  class ClientRequest extends DataFlow::Node {
-    ClientRequest::Range self;
-
-    ClientRequest() { this = self }
-
+  class ClientRequest extends DataFlow::Node instanceof ClientRequest::Range {
     /**
      * Gets the URL of the request.
      */
-    DataFlow::Node getUrl() { result = self.getUrl() }
+    DataFlow::Node getUrl() { result = super.getUrl() }
   }
 
   /** Provides a class for modeling new HTTP redirect APIs. */
@@ -337,16 +313,12 @@ module HTTP {
    * Extend this class to refine existing API models. If you want to model new APIs,
    * extend `HTTP::Redirect::Range` instead.
    */
-  class Redirect extends DataFlow::Node {
-    Redirect::Range self;
-
-    Redirect() { this = self }
-
+  class Redirect extends DataFlow::Node instanceof Redirect::Range {
     /** Gets the data-flow node representing the URL being redirected to. */
-    DataFlow::Node getUrl() { result = self.getUrl() }
+    DataFlow::Node getUrl() { result = super.getUrl() }
 
     /** Gets the response writer that this redirect is sent on, if any. */
-    ResponseWriter getResponseWriter() { result = self.getResponseWriter() }
+    ResponseWriter getResponseWriter() { result = super.getResponseWriter() }
   }
 
   /** Provides a class for modeling new HTTP handler APIs. */
@@ -369,12 +341,8 @@ module HTTP {
    * Extend this class to refine existing API models. If you want to model new APIs,
    * extend `HTTP::RequestHandler::Range` instead.
    */
-  class RequestHandler extends DataFlow::Node {
-    RequestHandler::Range self;
-
-    RequestHandler() { this = self }
-
+  class RequestHandler extends DataFlow::Node instanceof RequestHandler::Range {
     /** Gets a node that is used in a check that is tested before this handler is run. */
-    predicate guardedBy(DataFlow::Node check) { self.guardedBy(check) }
+    predicate guardedBy(DataFlow::Node check) { super.guardedBy(check) }
   }
 }
diff --git a/go/ql/lib/semmle/go/dataflow/internal/DataFlowNodes.qll b/go/ql/lib/semmle/go/dataflow/internal/DataFlowNodes.qll
index 7f4d87adbb5..ea3f757b440 100644
--- a/go/ql/lib/semmle/go/dataflow/internal/DataFlowNodes.qll
+++ b/go/ql/lib/semmle/go/dataflow/internal/DataFlowNodes.qll
@@ -341,13 +341,9 @@ module Public {
   }
 
   /** A function, viewed as a node in a data flow graph. */
-  class FunctionNode extends Node {
-    FunctionNode::Range self;
-
-    FunctionNode() { this = self }
-
+  class FunctionNode extends Node instanceof FunctionNode::Range {
     /** Gets the `i`th parameter of this function. */
-    ParameterNode getParameter(int i) { result = self.getParameter(i) }
+    ParameterNode getParameter(int i) { result = super.getParameter(i) }
 
     /** Gets a parameter of this function. */
     ParameterNode getAParameter() { result = this.getParameter(_) }
@@ -356,18 +352,18 @@ module Public {
     int getNumParameter() { result = count(this.getAParameter()) }
 
     /** Gets the name of this function, if it has one. */
-    string getName() { result = self.getName() }
+    string getName() { result = super.getName() }
 
     /**
      * Gets the dataflow node holding the value of the receiver, if any.
      */
-    ReceiverNode getReceiver() { result = self.getReceiver() }
+    ReceiverNode getReceiver() { result = super.getReceiver() }
 
     /**
      * Gets a value returned by the given function via a return statement or an assignment to a
      * result variable.
      */
-    ResultNode getAResult() { result = self.getAResult() }
+    ResultNode getAResult() { result = super.getAResult() }
 
     /**
      * Gets the data-flow node corresponding to the `i`th result of this function.
@@ -379,7 +375,7 @@ module Public {
      *
      * Note that this predicate has no result for function literals.
      */
-    Function getFunction() { result = self.getFunction() }
+    Function getFunction() { result = super.getFunction() }
   }
 
   /** A representation of a function that is declared in the module scope. */
diff --git a/go/ql/lib/semmle/go/frameworks/Email.qll b/go/ql/lib/semmle/go/frameworks/Email.qll
index 049af5f87bf..340cdad3d10 100644
--- a/go/ql/lib/semmle/go/frameworks/Email.qll
+++ b/go/ql/lib/semmle/go/frameworks/Email.qll
@@ -9,11 +9,7 @@ import go
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `EmailData::Range` instead.
  */
-class EmailData extends DataFlow::Node {
-  EmailData::Range self;
-
-  EmailData() { this = self }
-}
+class EmailData extends DataFlow::Node instanceof EmailData::Range { }
 
 /** Provides classes for working with data that is incorporated into an email. */
 module EmailData {
diff --git a/go/ql/lib/semmle/go/frameworks/NoSQL.qll b/go/ql/lib/semmle/go/frameworks/NoSQL.qll
index 578cf67d33f..ff8190d854d 100644
--- a/go/ql/lib/semmle/go/frameworks/NoSQL.qll
+++ b/go/ql/lib/semmle/go/frameworks/NoSQL.qll
@@ -12,11 +12,7 @@ module NoSql {
    * Extend this class to refine existing API models. If you want to model new APIs,
    * extend `NoSQL::Query::Range` instead.
    */
-  class Query extends DataFlow::Node {
-    Query::Range self;
-
-    Query() { this = self }
-  }
+  class Query extends DataFlow::Node instanceof Query::Range { }
 
   /** Provides classes for working with NoSql queries. */
   module Query {
diff --git a/go/ql/lib/semmle/go/frameworks/SQL.qll b/go/ql/lib/semmle/go/frameworks/SQL.qll
index 66566f7540c..322d17a420a 100644
--- a/go/ql/lib/semmle/go/frameworks/SQL.qll
+++ b/go/ql/lib/semmle/go/frameworks/SQL.qll
@@ -12,13 +12,9 @@ module SQL {
    * Extend this class to refine existing API models. If you want to model new APIs,
    * extend `SQL::Query::Range` instead.
    */
-  class Query extends DataFlow::Node {
-    Query::Range self;
-
-    Query() { this = self }
-
+  class Query extends DataFlow::Node instanceof Query::Range {
     /** Gets a result of this query execution. */
-    DataFlow::Node getAResult() { result = self.getAResult() }
+    DataFlow::Node getAResult() { result = super.getAResult() }
 
     /**
      * Gets a query string that is used as (part of) this SQL query.
@@ -26,7 +22,7 @@ module SQL {
      * Note that this may not resolve all `QueryString`s that should be associated with this
      * query due to data flow.
      */
-    QueryString getAQueryString() { result = self.getAQueryString() }
+    QueryString getAQueryString() { result = super.getAQueryString() }
   }
 
   /**
@@ -59,11 +55,7 @@ module SQL {
    * Extend this class to refine existing API models. If you want to model new APIs,
    * extend `SQL::QueryString::Range` instead.
    */
-  class QueryString extends DataFlow::Node {
-    QueryString::Range self;
-
-    QueryString() { this = self }
-  }
+  class QueryString extends DataFlow::Node instanceof QueryString::Range { }
 
   /** Provides classes for working with SQL query strings. */
   module QueryString {
diff --git a/go/ql/lib/semmle/go/frameworks/Testing.qll b/go/ql/lib/semmle/go/frameworks/Testing.qll
index 2df3d6c0ddd..f56e58288e5 100644
--- a/go/ql/lib/semmle/go/frameworks/Testing.qll
+++ b/go/ql/lib/semmle/go/frameworks/Testing.qll
@@ -8,11 +8,7 @@ import go
  * Extend this class to refine existing models of testing frameworks. If you want to model new
  * frameworks, extend `TestCase::Range` instead.
  */
-class TestCase extends AstNode {
-  TestCase::Range self;
-
-  TestCase() { this = self }
-}
+class TestCase extends AstNode instanceof TestCase::Range { }
 
 /** Provides classes for working with test cases. */
 module TestCase {
@@ -47,11 +43,7 @@ module TestCase {
  * Extend this class to refine existing models of testing frameworks. If you want to model new
  * frameworks, extend `TestFile::Range` instead.
  */
-class TestFile extends File {
-  TestFile::Range self;
-
-  TestFile() { this = self }
-}
+class TestFile extends File instanceof TestFile::Range { }
 
 /** Provides classes for working with test files. */
 module TestFile {
diff --git a/go/ql/lib/semmle/go/frameworks/WebSocket.qll b/go/ql/lib/semmle/go/frameworks/WebSocket.qll
index d3264467b45..44445b538b2 100644
--- a/go/ql/lib/semmle/go/frameworks/WebSocket.qll
+++ b/go/ql/lib/semmle/go/frameworks/WebSocket.qll
@@ -8,13 +8,9 @@ import go
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `WebSocketRequestCall::Range` instead.
  */
-class WebSocketRequestCall extends DataFlow::CallNode {
-  WebSocketRequestCall::Range self;
-
-  WebSocketRequestCall() { this = self }
-
+class WebSocketRequestCall extends DataFlow::CallNode instanceof WebSocketRequestCall::Range {
   /** Gets the URL of the request. */
-  DataFlow::Node getRequestUrl() { result = self.getRequestUrl() }
+  DataFlow::Node getRequestUrl() { result = super.getRequestUrl() }
 }
 
 /** Provides classes for working with WebSocket request functions. */
@@ -143,13 +139,9 @@ class WebSocketReaderAsSource extends UntrustedFlowSource::Range {
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `WebSocketReader::Range` instead.
  */
-class WebSocketReader extends Function {
-  WebSocketReader::Range self;
-
-  WebSocketReader() { this = self }
-
+class WebSocketReader extends Function instanceof WebSocketReader::Range {
   /** Gets an output of this function containing data that is read from a WebSocket connection. */
-  FunctionOutput getAnOutput() { result = self.getAnOutput() }
+  FunctionOutput getAnOutput() { result = super.getAnOutput() }
 }
 
 /** Provides classes for working with messages read from a WebSocket. */
diff --git a/go/ql/lib/semmle/go/frameworks/XPath.qll b/go/ql/lib/semmle/go/frameworks/XPath.qll
index 896007f4641..e3b7282c4e3 100644
--- a/go/ql/lib/semmle/go/frameworks/XPath.qll
+++ b/go/ql/lib/semmle/go/frameworks/XPath.qll
@@ -12,11 +12,7 @@ module XPath {
    * Extend this class to refine existing API models. If you want to model new APIs,
    * extend `XPath::XPathExpressionString::Range` instead.
    */
-  class XPathExpressionString extends DataFlow::Node {
-    XPathExpressionString::Range self;
-
-    XPathExpressionString() { this = self }
-  }
+  class XPathExpressionString extends DataFlow::Node instanceof XPathExpressionString::Range { }
 
   /** Provides classes for working with XPath expression strings. */
   module XPathExpressionString {
diff --git a/go/ql/lib/semmle/go/security/FlowSources.qll b/go/ql/lib/semmle/go/security/FlowSources.qll
index c1e08710e06..de8fb5c3732 100644
--- a/go/ql/lib/semmle/go/security/FlowSources.qll
+++ b/go/ql/lib/semmle/go/security/FlowSources.qll
@@ -11,11 +11,7 @@ private import semmle.go.dataflow.ExternalFlow as ExternalFlow
  * Extend this class to refine existing API models. If you want to model new APIs,
  * extend `UntrustedFlowSource::Range` instead.
  */
-class UntrustedFlowSource extends DataFlow::Node {
-  UntrustedFlowSource::Range self;
-
-  UntrustedFlowSource() { this = self }
-}
+class UntrustedFlowSource extends DataFlow::Node instanceof UntrustedFlowSource::Range { }
 
 /** Provides a class for modeling new sources of untrusted data. */
 module UntrustedFlowSource {

From 1c4488e7c854069cfd00a8604a63897d0a57ea2c Mon Sep 17 00:00:00 2001
From: gx1 <18548727+giper45@users.noreply.github.com>
Date: Tue, 13 Sep 2022 15:58:25 +0200
Subject: [PATCH 142/203] Updated vulnerable XSS.java version

---
 java/ql/src/Security/CWE/CWE-079/XSS.java | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/java/ql/src/Security/CWE/CWE-079/XSS.java b/java/ql/src/Security/CWE/CWE-079/XSS.java
index 273da84901c..e667036ee42 100644
--- a/java/ql/src/Security/CWE/CWE-079/XSS.java
+++ b/java/ql/src/Security/CWE/CWE-079/XSS.java
@@ -1,8 +1,9 @@
 public class XSS extends HttpServlet {
 	protected void doGet(HttpServletRequest request, HttpServletResponse response)
 	throws ServletException, IOException {
-		// BAD: a request parameter is written directly to an error response page
-		response.sendError(HttpServletResponse.SC_NOT_FOUND,
-				"The page \"" + request.getParameter("page") + "\" was not found.");
+		// BAD: a request parameter is written directly to the Servlet response stream
+		response.getWriter().print(
+				"The page \"" + request.getParameter("page") + "\" was not found."); // $xss
+
 	}
 }

From d782e6c37ce6ddf0ba58c581c2d1c389317ef358 Mon Sep 17 00:00:00 2001
From: james <jf205@github.com>
Date: Tue, 13 Sep 2022 15:01:16 +0100
Subject: [PATCH 143/203] fix broken anchor

---
 docs/codeql/codeql-cli/creating-codeql-databases.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/codeql/codeql-cli/creating-codeql-databases.rst b/docs/codeql/codeql-cli/creating-codeql-databases.rst
index af254d865cf..65afbca40c1 100644
--- a/docs/codeql/codeql-cli/creating-codeql-databases.rst
+++ b/docs/codeql/codeql-cli/creating-codeql-databases.rst
@@ -385,7 +385,7 @@ The following example shows how you could use indirect build tracing in an Azure
        # `codeql database analyze`
        # then `codeql github upload-results` ...
 
-.. _downloading-databases-from-github-com:
+.. _downloading-codeql-databases-from-github-com:
 
 Downloading databases from GitHub.com
 -------------------------------------

From e08e22ac329adfb48167a275d3e162dcc53cbfcd Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 13 Sep 2022 14:06:57 +0000
Subject: [PATCH 144/203] JS: Bump patch version of ML-powered library and
 query packs

---
 .../ql/experimental/adaptivethreatmodeling/lib/qlpack.yml       | 2 +-
 .../ql/experimental/adaptivethreatmodeling/src/qlpack.yml       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/javascript/ql/experimental/adaptivethreatmodeling/lib/qlpack.yml b/javascript/ql/experimental/adaptivethreatmodeling/lib/qlpack.yml
index 99c1030e053..d7698ed15b9 100644
--- a/javascript/ql/experimental/adaptivethreatmodeling/lib/qlpack.yml
+++ b/javascript/ql/experimental/adaptivethreatmodeling/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/javascript-experimental-atm-lib
-version: 0.3.2
+version: 0.3.3
 extractor: javascript
 library: true
 groups:
diff --git a/javascript/ql/experimental/adaptivethreatmodeling/src/qlpack.yml b/javascript/ql/experimental/adaptivethreatmodeling/src/qlpack.yml
index a034ce1aa7f..8c6ac3ea38f 100644
--- a/javascript/ql/experimental/adaptivethreatmodeling/src/qlpack.yml
+++ b/javascript/ql/experimental/adaptivethreatmodeling/src/qlpack.yml
@@ -1,6 +1,6 @@
 name: codeql/javascript-experimental-atm-queries
 language: javascript
-version: 0.3.2
+version: 0.3.3
 suites: codeql-suites
 defaultSuiteFile: codeql-suites/javascript-atm-code-scanning.qls
 groups:

From b40def71b9bedcede2710fe61d3348ba78c7da21 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 13 Sep 2022 14:11:16 +0000
Subject: [PATCH 145/203] JS: Bump version of ML-powered library and query
 packs to 0.3.4

---
 .../ql/experimental/adaptivethreatmodeling/lib/qlpack.yml       | 2 +-
 .../ql/experimental/adaptivethreatmodeling/src/qlpack.yml       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/javascript/ql/experimental/adaptivethreatmodeling/lib/qlpack.yml b/javascript/ql/experimental/adaptivethreatmodeling/lib/qlpack.yml
index d7698ed15b9..b437e4de0ba 100644
--- a/javascript/ql/experimental/adaptivethreatmodeling/lib/qlpack.yml
+++ b/javascript/ql/experimental/adaptivethreatmodeling/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/javascript-experimental-atm-lib
-version: 0.3.3
+version: 0.3.4
 extractor: javascript
 library: true
 groups:
diff --git a/javascript/ql/experimental/adaptivethreatmodeling/src/qlpack.yml b/javascript/ql/experimental/adaptivethreatmodeling/src/qlpack.yml
index 8c6ac3ea38f..0942785b20a 100644
--- a/javascript/ql/experimental/adaptivethreatmodeling/src/qlpack.yml
+++ b/javascript/ql/experimental/adaptivethreatmodeling/src/qlpack.yml
@@ -1,6 +1,6 @@
 name: codeql/javascript-experimental-atm-queries
 language: javascript
-version: 0.3.3
+version: 0.3.4
 suites: codeql-suites
 defaultSuiteFile: codeql-suites/javascript-atm-code-scanning.qls
 groups:

From 2b027709e4874b5c023debc564c57ef4bde36a45 Mon Sep 17 00:00:00 2001
From: Tony Torralba <atorralba@users.noreply.github.com>
Date: Tue, 13 Sep 2022 16:39:48 +0200
Subject: [PATCH 146/203] Update XSS qhelp

---
 java/ql/src/Security/CWE/CWE-079/XSS.qhelp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/ql/src/Security/CWE/CWE-079/XSS.qhelp b/java/ql/src/Security/CWE/CWE-079/XSS.qhelp
index 428b44c8db9..05b0f268002 100644
--- a/java/ql/src/Security/CWE/CWE-079/XSS.qhelp
+++ b/java/ql/src/Security/CWE/CWE-079/XSS.qhelp
@@ -18,7 +18,7 @@ reference.</p>
 </recommendation>
 <example>
 
-<p>The following example shows the page parameter being written directly to the server error page,
+<p>The following example shows the <code>page</code> parameter being written directly to the page,
 leaving the website vulnerable to cross-site scripting.</p>
 
 <sample src="XSS.java" />

From ac46a38b9d80e3d187cc9e0217b5f48976feab0e Mon Sep 17 00:00:00 2001
From: Tony Torralba <atorralba@users.noreply.github.com>
Date: Tue, 13 Sep 2022 16:49:20 +0200
Subject: [PATCH 147/203] Update java/ql/src/Security/CWE/CWE-079/XSS.java

---
 java/ql/src/Security/CWE/CWE-079/XSS.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/ql/src/Security/CWE/CWE-079/XSS.java b/java/ql/src/Security/CWE/CWE-079/XSS.java
index e667036ee42..8b9a26825bc 100644
--- a/java/ql/src/Security/CWE/CWE-079/XSS.java
+++ b/java/ql/src/Security/CWE/CWE-079/XSS.java
@@ -3,7 +3,7 @@ public class XSS extends HttpServlet {
 	throws ServletException, IOException {
 		// BAD: a request parameter is written directly to the Servlet response stream
 		response.getWriter().print(
-				"The page \"" + request.getParameter("page") + "\" was not found."); // $xss
+				"The page \"" + request.getParameter("page") + "\" was not found.");
 
 	}
 }

From fc445736b28e298bf96a68a09d0fa4bc0eb3574e Mon Sep 17 00:00:00 2001
From: Ian Lynagh <igfoo@github.com>
Date: Tue, 13 Sep 2022 15:58:00 +0100
Subject: [PATCH 148/203] Java: Use hasQualifiedName rather than
 getQualifiedName in ExternalAPIs

It's more efficient, as it doesn't require building intermediate
strings.
---
 java/ql/lib/semmle/code/java/security/ExternalAPIs.qll | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll b/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll
index 74d8c2e1577..141eff983a2 100644
--- a/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll
+++ b/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll
@@ -24,7 +24,7 @@ private class DefaultSafeExternalApiMethod extends SafeExternalApiMethod {
     or
     this.getDeclaringType().hasQualifiedName("org.apache.commons.lang3", "Validate")
     or
-    this.getQualifiedName() = "Objects.equals"
+    this.hasQualifiedName("java.util", "Objects", "equals")
     or
     this.getDeclaringType() instanceof TypeString and this.getName() = "equals"
     or

From 6a63b86f8a5381bb4b8173fcb7b0f8306db9c013 Mon Sep 17 00:00:00 2001
From: Ian Lynagh <igfoo@github.com>
Date: Tue, 13 Sep 2022 16:05:51 +0100
Subject: [PATCH 149/203] Java: Member.getQualifiedName() tweaked

It now includes the qualified name of the declaring type.
---
 .../ql/lib/change-notes/2022-09-13-Member-getQualifier.md | 4 ++++
 java/ql/lib/semmle/code/java/Member.qll                   | 8 ++++++--
 java/ql/lib/semmle/code/java/security/ExternalAPIs.qll    | 3 +--
 3 files changed, 11 insertions(+), 4 deletions(-)
 create mode 100644 java/ql/lib/change-notes/2022-09-13-Member-getQualifier.md

diff --git a/java/ql/lib/change-notes/2022-09-13-Member-getQualifier.md b/java/ql/lib/change-notes/2022-09-13-Member-getQualifier.md
new file mode 100644
index 00000000000..72eb6e6a0c3
--- /dev/null
+++ b/java/ql/lib/change-notes/2022-09-13-Member-getQualifier.md
@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* The `Member.getQualifiedName()` predicate result now includes the qualified name of the declaring type.
diff --git a/java/ql/lib/semmle/code/java/Member.qll b/java/ql/lib/semmle/code/java/Member.qll
index ef3546b0af8..b3a980fa0cc 100644
--- a/java/ql/lib/semmle/code/java/Member.qll
+++ b/java/ql/lib/semmle/code/java/Member.qll
@@ -20,8 +20,12 @@ class Member extends Element, Annotatable, Modifiable, @member {
   /** Gets the type in which this member is declared. */
   RefType getDeclaringType() { declaresMember(result, this) }
 
-  /** Gets the qualified name of this member. */
-  string getQualifiedName() { result = this.getDeclaringType().getName() + "." + this.getName() }
+  /**
+   * Gets the qualified name of this member.
+   * This is useful for debugging, but for normal use `hasQualifiedName`
+   * is recommended, as it is more efficient.
+   */
+  string getQualifiedName() { result = this.getDeclaringType().getQualifiedName() + "." + this.getName() }
 
   /**
    * Holds if this member has the specified name and is declared in the
diff --git a/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll b/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll
index 141eff983a2..24a10f613ed 100644
--- a/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll
+++ b/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll
@@ -93,8 +93,7 @@ class ExternalApiDataNode extends DataFlow::Node {
 
   /** Gets the description of the method being called. */
   string getMethodDescription() {
-    result =
-      this.getMethod().getDeclaringType().getPackage() + "." + this.getMethod().getQualifiedName()
+    result = this.getMethod().getQualifiedName()
   }
 }
 

From c63240d62c6b2ef4fc18980f69e8bb6aab0f56b4 Mon Sep 17 00:00:00 2001
From: Raul Garcia <raulga@microsoft.com>
Date: Tue, 13 Sep 2022 08:48:53 -0700
Subject: [PATCH 150/203] D:\Code\tokenv2\csharp\ql\src\experimental\Security
 Features\JsonWebTokenHandler\JsonWebTokenHandlerLib.qll

---
 .../JsonWebTokenHandler/JsonWebTokenHandlerLib.qll            | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll
index d5d0db6af1d..bf9df3e5184 100644
--- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
+++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll	
@@ -54,10 +54,6 @@ class JsonWebTokenHandlerValidateTokenMethod extends Method {
   JsonWebTokenHandlerValidateTokenMethod() {
     this.hasQualifiedName("Microsoft.IdentityModel.JsonWebTokens.JsonWebTokenHandler.ValidateToken") or
     this.hasQualifiedName("Microsoft.AzureAD.DeviceIdentification.Common.Tokens.JwtValidator.ValidateEncryptedToken")
-    //// TODO: ValidateEncryptedToken has the same behavior than ValidateToken, but it will be changed in a future release
-    ////       The line below would allow to check if the ValidateEncryptedToken version used meets the minimum requirement
-    ////       Once we have the fixed assembly version we can uncomment the line below
-    // and isAssemblyOlderVersion("Microsoft.AzureAD.DeviceIdentification", "0.0.0")
   }
 }
 

From 6debbc0d3e57a565f85e401f0dd4c7132f92a94e Mon Sep 17 00:00:00 2001
From: James Fletcher <42464962+jf205@users.noreply.github.com>
Date: Tue, 13 Sep 2022 19:22:15 +0100
Subject: [PATCH 151/203] Apply suggestions from code review

Co-authored-by: Felicity Chapman <felicitymay@github.com>
---
 .../codeql/codeql-cli/getting-started-with-the-codeql-cli.rst | 2 +-
 docs/codeql/reusables/download-github-database.rst            | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst b/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst
index c188c0a9c72..1984b12d6d8 100644
--- a/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst
+++ b/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst
@@ -51,7 +51,7 @@ Conditions <https://securitylab.github.com/tools/codeql/license>`__.
    on your use case:
 
    * If you want to use the most up to date CodeQL tools and features, download the version tagged ``latest``.
-   * If you want to generate code scanning data to upload to GitHub Enterprise server, then download the version that is compatible with the CodeQL CLI used in your CI system. For more information, see "`Installing CodeQL CLI in your CI system <https://docs.github.com/en/enterprise-server@3.6/code-security/code-scanning/using-codeql-code-scanning-with-your-existing-ci-system/installing-codeql-cli-in-your-ci-system#downloading-the-codeql-cli>`__" in the GitHub documentation.
+   * If you want to generate code scanning data to upload to GitHub Enterprise server, then download the version that is compatible with the CodeQL CLI used in your CI system. For more information, see "`Installing CodeQL CLI in your CI system <https://docs.github.com/en/enterprise-server/code-security/code-scanning/using-codeql-code-scanning-with-your-existing-ci-system/installing-codeql-cli-in-your-ci-system#downloading-the-codeql-cli>`__" in the GitHub documentation.
 
 If you use Linux, Windows, or macOS version 10.14 ("Mojave") or earlier, simply
 `download the zip archive
diff --git a/docs/codeql/reusables/download-github-database.rst b/docs/codeql/reusables/download-github-database.rst
index 2e4bfd9a58c..02d41114da5 100644
--- a/docs/codeql/reusables/download-github-database.rst
+++ b/docs/codeql/reusables/download-github-database.rst
@@ -1,11 +1,11 @@
 GitHub stores CodeQL databases for over 200,000 repos on GitHub.com, which you can download using the REST API. The list of repos is constantly growing and evolving to make sure that it includes the most interesting codebases for security research.
 
-You can check if a repo has any CodeQL databases available to download using the `/repos/<owner>/<repo>/code-scanning/codeql/databases` endpoint.
+You can check if a repository has any CodeQL databases available for download using the ``/repos/<owner>/<repo>/code-scanning/codeql/databases`` endpoint.
 For example, to check for CodeQL databases using the `GitHub CLI <https://cli.github.com/manual/gh_api>`__ you would run::
 
    gh api /repos/<owner>/<repo>/code-scanning/codeql/databases/
 
-This command will return information about the CodeQL databases that are available for a repository, including the language the database represents, and when the database was last updated. If no CodeQL databases are available, the response will be empty.
+This command returns information about any CodeQL databases that are available for a repository, including the language the database represents, and when the database was last updated. If no CodeQL databases are available, the response is empty.
 
 When you have confirmed that a CodeQL database exists for the language you are interested in, you can download it using the following command:: 
 

From e7aef17d3036e6307391b74b47fd17b84e07b009 Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Tue, 13 Sep 2022 20:43:52 +0200
Subject: [PATCH 152/203] don't report every non-ascii range in
 js/overly-large-range

---
 .../lib/semmle/javascript/security/OverlyLargeRangeQuery.qll | 5 ++++-
 .../Security/CWE-020/SuspiciousRegexpRange/tst.js            | 3 +++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/javascript/ql/lib/semmle/javascript/security/OverlyLargeRangeQuery.qll b/javascript/ql/lib/semmle/javascript/security/OverlyLargeRangeQuery.qll
index e11bc5182f0..65e662f0bc5 100644
--- a/javascript/ql/lib/semmle/javascript/security/OverlyLargeRangeQuery.qll
+++ b/javascript/ql/lib/semmle/javascript/security/OverlyLargeRangeQuery.qll
@@ -96,7 +96,10 @@ class OverlyWideRange extends RegExpCharacterRange {
       toCodePoint("A") <= high
       or
       // a non-alphanumeric char as part of the range boundaries
-      exists(int bound | bound = [low, high] | not isAlphanumeric(bound.toUnicode()))
+      exists(int bound | bound = [low, high] | not isAlphanumeric(bound.toUnicode())) and
+      // while still being ascii
+      low < 128 and
+      high < 128
     ) and
     // allowlist for known ranges
     not this = allowedWideRanges()
diff --git a/javascript/ql/test/query-tests/Security/CWE-020/SuspiciousRegexpRange/tst.js b/javascript/ql/test/query-tests/Security/CWE-020/SuspiciousRegexpRange/tst.js
index 62d325539ff..a698856d379 100644
--- a/javascript/ql/test/query-tests/Security/CWE-020/SuspiciousRegexpRange/tst.js
+++ b/javascript/ql/test/query-tests/Security/CWE-020/SuspiciousRegexpRange/tst.js
@@ -25,3 +25,6 @@ var numberToLetter = /[7-F]/; // NOT OK
 var overlapsWithClass1 = /[0-9\d]/; // NOT OK
 
 var overlapsWithClass2 = /[\w,.-?:*+]/; // NOT OK
+
+var tst2 = /^([ァ-ヾ]|[ｧ-ﾝﾞﾟ])+$/; // OK
+var tst3 = /[0-9０-９]/; // OK
\ No newline at end of file

From 252394666c04dfe72408beec153c79b38dd71836 Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Tue, 13 Sep 2022 20:44:05 +0200
Subject: [PATCH 153/203] sync files

---
 .../lib/semmle/code/java/security/OverlyLargeRangeQuery.qll  | 5 ++++-
 .../ql/lib/semmle/python/security/OverlyLargeRangeQuery.qll  | 5 ++++-
 ruby/ql/lib/codeql/ruby/security/OverlyLargeRangeQuery.qll   | 5 ++++-
 3 files changed, 12 insertions(+), 3 deletions(-)

diff --git a/java/ql/lib/semmle/code/java/security/OverlyLargeRangeQuery.qll b/java/ql/lib/semmle/code/java/security/OverlyLargeRangeQuery.qll
index e11bc5182f0..65e662f0bc5 100644
--- a/java/ql/lib/semmle/code/java/security/OverlyLargeRangeQuery.qll
+++ b/java/ql/lib/semmle/code/java/security/OverlyLargeRangeQuery.qll
@@ -96,7 +96,10 @@ class OverlyWideRange extends RegExpCharacterRange {
       toCodePoint("A") <= high
       or
       // a non-alphanumeric char as part of the range boundaries
-      exists(int bound | bound = [low, high] | not isAlphanumeric(bound.toUnicode()))
+      exists(int bound | bound = [low, high] | not isAlphanumeric(bound.toUnicode())) and
+      // while still being ascii
+      low < 128 and
+      high < 128
     ) and
     // allowlist for known ranges
     not this = allowedWideRanges()
diff --git a/python/ql/lib/semmle/python/security/OverlyLargeRangeQuery.qll b/python/ql/lib/semmle/python/security/OverlyLargeRangeQuery.qll
index e11bc5182f0..65e662f0bc5 100644
--- a/python/ql/lib/semmle/python/security/OverlyLargeRangeQuery.qll
+++ b/python/ql/lib/semmle/python/security/OverlyLargeRangeQuery.qll
@@ -96,7 +96,10 @@ class OverlyWideRange extends RegExpCharacterRange {
       toCodePoint("A") <= high
       or
       // a non-alphanumeric char as part of the range boundaries
-      exists(int bound | bound = [low, high] | not isAlphanumeric(bound.toUnicode()))
+      exists(int bound | bound = [low, high] | not isAlphanumeric(bound.toUnicode())) and
+      // while still being ascii
+      low < 128 and
+      high < 128
     ) and
     // allowlist for known ranges
     not this = allowedWideRanges()
diff --git a/ruby/ql/lib/codeql/ruby/security/OverlyLargeRangeQuery.qll b/ruby/ql/lib/codeql/ruby/security/OverlyLargeRangeQuery.qll
index e11bc5182f0..65e662f0bc5 100644
--- a/ruby/ql/lib/codeql/ruby/security/OverlyLargeRangeQuery.qll
+++ b/ruby/ql/lib/codeql/ruby/security/OverlyLargeRangeQuery.qll
@@ -96,7 +96,10 @@ class OverlyWideRange extends RegExpCharacterRange {
       toCodePoint("A") <= high
       or
       // a non-alphanumeric char as part of the range boundaries
-      exists(int bound | bound = [low, high] | not isAlphanumeric(bound.toUnicode()))
+      exists(int bound | bound = [low, high] | not isAlphanumeric(bound.toUnicode())) and
+      // while still being ascii
+      low < 128 and
+      high < 128
     ) and
     // allowlist for known ranges
     not this = allowedWideRanges()

From c3320a3afe77476c69cc3fcd21e2994230c9f886 Mon Sep 17 00:00:00 2001
From: Paolo Tranquilli <redsun82@github.com>
Date: Wed, 14 Sep 2022 08:21:58 +0200
Subject: [PATCH 154/203] Apply suggestions from code review

Co-authored-by: hubwriter <hubwriter@github.com>
---
 .../CWE-328/WeakSensitiveDataHashing.qhelp     | 18 ++++++------------
 1 file changed, 6 insertions(+), 12 deletions(-)

diff --git a/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.qhelp b/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.qhelp
index a3a161298de..d6806b2ddcc 100755
--- a/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.qhelp
+++ b/swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.qhelp
@@ -13,22 +13,16 @@
         </p>
         <ul>
             <li>
-                pre-image attacks: if you know a hash value <code>h(x)</code>,
+                <b>Pre-image attacks</b>. If you know a hash value <code>h(x)</code>,
                 you should not be able to easily find the input <code>x</code>.
             </li>
             <li>
-                collision attacks: if you know a hash value <code>h(x)</code>,
+                <b>Collision attacks</b>. If you know a hash value <code>h(x)</code>,
                 you should not be able to easily find a different input
                 <code>y</code>
                 with the same hash value <code>h(x) = h(y)</code>.
             </li>
         </ul>
-        <!--<p>
-             In cases with a limited input space, such as for passwords, the hash
-             function also needs to be computationally expensive to be resistant to
-             brute-force attacks. Passwords should also have an unique salt applied
-             before hashing, but that is not considered by this query.
-        </p>-->
 
         <p>
             As an example, both MD5 and SHA-1 are known to be vulnerable to collision attacks.
@@ -44,16 +38,16 @@
     <recommendation>
 
         <p>
-            Ensure that you use a strong, modern cryptographic hash function:
+            Ensure that you use a strong, modern cryptographic hash function, such as:
         </p>
 
         <ul>
             <li>
-                such as Argon2, scrypt, bcrypt, or PBKDF2 for passwords and other data with limited input space where
+                Argon2, scrypt, bcrypt, or PBKDF2 for passwords and other data with limited input space where
                 a dictionary-like attack is feasible.
             </li>
             <li>
-                such as SHA-2, or SHA-3 in other cases.
+                SHA-2, or SHA-3 in other cases.
             </li>
         </ul>
 
@@ -69,7 +63,7 @@
         <sample src="WeakSensitiveDataHashingBad.swift"/>
         <p>
 
-            Here is the same function using SHA-512 that is a strong cryptographic hashing function.
+            Here is the same function using SHA-512, which is a strong cryptographic hashing function.
         </p>
         <sample src="WeakSensitiveDataHashingGood.swift"/>
 

From 22eb23e95a9533bb5dcfbf61db471682abd0d935 Mon Sep 17 00:00:00 2001
From: james <jf205@github.com>
Date: Wed, 14 Sep 2022 08:48:20 +0100
Subject: [PATCH 155/203] add link and remove todo

---
 docs/codeql/reusables/download-github-database.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/codeql/reusables/download-github-database.rst b/docs/codeql/reusables/download-github-database.rst
index 02d41114da5..732d4479ba7 100644
--- a/docs/codeql/reusables/download-github-database.rst
+++ b/docs/codeql/reusables/download-github-database.rst
@@ -11,4 +11,4 @@ When you have confirmed that a CodeQL database exists for the language you are i
 
    gh api /repos/<owner>/<repo>/code-scanning/codeql/databases/<language> -H 'Accept: application/zip' > path/to/local/database.zip
 
-TODO: add link to the REST API docs.
\ No newline at end of file
+For more information, see the documentation for the `Get CodeQL database <https://docs.github.com/en/rest/reference/code-scanning#get-codeql-database>`__ endpoint in the GitHub REST API documentation.
\ No newline at end of file

From 83e7bf71d7aa799d83328f8ca13fa4d86a9d88b1 Mon Sep 17 00:00:00 2001
From: Anders Schack-Mulligen <aschackmull@github.com>
Date: Wed, 14 Sep 2022 10:16:09 +0200
Subject: [PATCH 156/203] Java: Adjust qldoc.

---
 java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll b/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
index 86b66abf30f..c3fd63cbf26 100644
--- a/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
+++ b/java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
@@ -651,7 +651,7 @@ private predicate unionTypeFlowBaseCand(TypeFlowNode n, RefType t, boolean exact
 }
 
 /**
- * Holds if `ioe` checks `v`, its true-successor is `bb`, and `bb` has 2 or more
+ * Holds if `ioe` checks `v`, its true-successor is `bb`, and `bb` has multiple
  * predecessors.
  */
 private predicate instanceofDisjunct(InstanceOfExpr ioe, BasicBlock bb, BaseSsaVariable v) {
@@ -660,7 +660,7 @@ private predicate instanceofDisjunct(InstanceOfExpr ioe, BasicBlock bb, BaseSsaV
   exists(ConditionBlock cb | cb.getCondition() = ioe and cb.getTestSuccessor(true) = bb)
 }
 
-/** Holds if `bb` is disjunctively guarded by two or more `instanceof` tests on `v`. */
+/** Holds if `bb` is disjunctively guarded by multiple `instanceof` tests on `v`. */
 private predicate instanceofDisjunction(BasicBlock bb, BaseSsaVariable v) {
   strictcount(InstanceOfExpr ioe | instanceofDisjunct(ioe, bb, v)) =
     strictcount(bb.getABBPredecessor())

From 9f200633ca2a190aaa7ee758be1bb62edeadc46f Mon Sep 17 00:00:00 2001
From: Anders Schack-Mulligen <aschackmull@github.com>
Date: Wed, 14 Sep 2022 10:17:31 +0200
Subject: [PATCH 157/203] Java: convert test to inline expectation

---
 .../library-tests/dataflow/callctx/A.java     | 30 +++++++++----------
 .../dataflow/callctx/test.expected            | 15 ----------
 .../library-tests/dataflow/callctx/test.ql    | 15 +---------
 3 files changed, 16 insertions(+), 44 deletions(-)

diff --git a/java/ql/test/library-tests/dataflow/callctx/A.java b/java/ql/test/library-tests/dataflow/callctx/A.java
index 3bb6382b356..00a084658e4 100644
--- a/java/ql/test/library-tests/dataflow/callctx/A.java
+++ b/java/ql/test/library-tests/dataflow/callctx/A.java
@@ -1,7 +1,7 @@
 public class A {
   static void sink(Object x) { }
 
-  static Object source() { return null; }
+  static Object source(String srctag) { return null; }
 
   static class C1 {
     C1() { }
@@ -20,7 +20,7 @@ public class A {
 
     void foo(Object x) {
       Object c1 = x;
-      sink(c1);
+      sink(c1); // $ hasValueFlow=c.1 hasValueFlow=c.2 hasValueFlow=c.3 hasValueFlow=C1 hasValueFlow=C1.1 hasValueFlow=C1.2 hasValueFlow=C1.3
     }
   }
 
@@ -33,11 +33,11 @@ public class A {
 
     void foo(Object x) {
       Object c2 = x;
-      sink(c2);
+      sink(c2); // $ hasValueFlow=2 hasValueFlow=c.1 hasValueFlow=c.2 hasValueFlow=c.3 hasValueFlow=C2 hasValueFlow=C2.1 hasValueFlow=C2.2 hasValueFlow=C2.3
     }
 
     void callWrapFoo2() {
-      wrapFoo2(source());
+      wrapFoo2(source("2"));
     }
   }
 
@@ -46,18 +46,18 @@ public class A {
   }
 
   void test(C1 c) {
-    c.wrapFoo1(source());
-    c.wrapFoo2(source());
-    wrapFoo3(c, source());
+    c.wrapFoo1(source("c.1"));
+    c.wrapFoo2(source("c.2"));
+    wrapFoo3(c, source("c.3"));
 
-    new C1(source());
-    new C1().wrapFoo1(source());
-    new C1().wrapFoo2(source());
-    wrapFoo3(new C1(), source());
+    new C1(source("C1"));
+    new C1().wrapFoo1(source("C1.1"));
+    new C1().wrapFoo2(source("C1.2"));
+    wrapFoo3(new C1(), source("C1.3"));
 
-    new C2(source());
-    new C2().wrapFoo1(source());
-    new C2().wrapFoo2(source());
-    wrapFoo3(new C2(), source());
+    new C2(source("C2"));
+    new C2().wrapFoo1(source("C2.1"));
+    new C2().wrapFoo2(source("C2.2"));
+    wrapFoo3(new C2(), source("C2.3"));
   }
 }
diff --git a/java/ql/test/library-tests/dataflow/callctx/test.expected b/java/ql/test/library-tests/dataflow/callctx/test.expected
index d633eae89ce..e69de29bb2d 100644
--- a/java/ql/test/library-tests/dataflow/callctx/test.expected
+++ b/java/ql/test/library-tests/dataflow/callctx/test.expected
@@ -1,15 +0,0 @@
-| A.java:40:16:40:23 | source(...) | A.java:36:12:36:13 | c2 |
-| A.java:49:16:49:23 | source(...) | A.java:23:12:23:13 | c1 |
-| A.java:49:16:49:23 | source(...) | A.java:36:12:36:13 | c2 |
-| A.java:50:16:50:23 | source(...) | A.java:23:12:23:13 | c1 |
-| A.java:50:16:50:23 | source(...) | A.java:36:12:36:13 | c2 |
-| A.java:51:17:51:24 | source(...) | A.java:23:12:23:13 | c1 |
-| A.java:51:17:51:24 | source(...) | A.java:36:12:36:13 | c2 |
-| A.java:53:12:53:19 | source(...) | A.java:23:12:23:13 | c1 |
-| A.java:54:23:54:30 | source(...) | A.java:23:12:23:13 | c1 |
-| A.java:55:23:55:30 | source(...) | A.java:23:12:23:13 | c1 |
-| A.java:56:24:56:31 | source(...) | A.java:23:12:23:13 | c1 |
-| A.java:58:12:58:19 | source(...) | A.java:36:12:36:13 | c2 |
-| A.java:59:23:59:30 | source(...) | A.java:36:12:36:13 | c2 |
-| A.java:60:23:60:30 | source(...) | A.java:36:12:36:13 | c2 |
-| A.java:61:24:61:31 | source(...) | A.java:36:12:36:13 | c2 |
diff --git a/java/ql/test/library-tests/dataflow/callctx/test.ql b/java/ql/test/library-tests/dataflow/callctx/test.ql
index 36ba2f3d17b..5d91e4e8e26 100644
--- a/java/ql/test/library-tests/dataflow/callctx/test.ql
+++ b/java/ql/test/library-tests/dataflow/callctx/test.ql
@@ -1,15 +1,2 @@
 import java
-import semmle.code.java.dataflow.DataFlow
-import DataFlow
-
-class Conf extends Configuration {
-  Conf() { this = "qqconf" }
-
-  override predicate isSource(Node n) { n.asExpr().(MethodAccess).getMethod().hasName("source") }
-
-  override predicate isSink(Node n) { n.asExpr().(Argument).getCall().getCallee().hasName("sink") }
-}
-
-from Node src, Node sink, Conf c
-where c.hasFlow(src, sink)
-select src, sink
+import TestUtilities.InlineFlowTest

From dad0e4decc66ccc304357a84df6c7fb83604f905 Mon Sep 17 00:00:00 2001
From: Paolo Tranquilli <redsun82@github.com>
Date: Wed, 14 Sep 2022 10:34:46 +0200
Subject: [PATCH 158/203] Revert "Swift: print a helpful message on macOS ARM"

---
 swift/rules.bzl                  |  6 +++++-
 swift/tools/prebuilt/BUILD.bazel | 21 ++++++++++++---------
 2 files changed, 17 insertions(+), 10 deletions(-)

diff --git a/swift/rules.bzl b/swift/rules.bzl
index ba9e4b0e8bf..29a1a704f02 100644
--- a/swift/rules.bzl
+++ b/swift/rules.bzl
@@ -5,7 +5,11 @@ def _wrap_cc(rule, kwargs):
     _add_args(kwargs, "copts", [
         # Required by LLVM/Swift
         "-fno-rtti",
-    ])
+    ] + select({
+        # temporary, before we do universal merging and have an arm prebuilt package, we make arm build x86
+        "@platforms//os:macos": ["-arch=x86_64"],
+        "//conditions:default": [],
+    }))
     _add_args(kwargs, "features", [
         # temporary, before we do universal merging
         "-universal_binaries",
diff --git a/swift/tools/prebuilt/BUILD.bazel b/swift/tools/prebuilt/BUILD.bazel
index 38fb5cecbc1..db5c09085a4 100644
--- a/swift/tools/prebuilt/BUILD.bazel
+++ b/swift/tools/prebuilt/BUILD.bazel
@@ -1,18 +1,21 @@
 package(default_visibility = ["//swift:__subpackages__"])
 
 #TODO we will be introducing universal binaries at a later stage, when we have both architectures prebuilt for macOS
-# for the moment, we require --cpu=darwin_x86_64 on an ARM macOS
+# for the moment, we make arm build an x86_64 binary
+_arch_override = {
+    "darwin_arm64": "darwin_x86_64",
+}
+
 [
     alias(
         name = name,
-        actual = select(
-            {
-                "@bazel_tools//src/conditions:%s" % arch: "@swift_prebuilt_%s//:%s" % (arch, name)
-                for arch in ("linux", "darwin_x86_64")
-            },
-            no_match_error = "Unsupported platform. Support for the ARM macOS platform is still a todo, " +
-                             "please pass --cpu=darwin_x86_64 for the time being",
-        ),
+        actual = select({
+            "@bazel_tools//src/conditions:%s" % arch: "@swift_prebuilt_%s//:%s" % (
+                _arch_override.get(arch, arch),
+                name,
+            )
+            for arch in ("linux", "darwin_x86_64", "darwin_arm64")
+        }),
     )
     for name in ("swift-llvm-support", "swift-test-sdk")
 ]

From 64e2f4164de15a8470ac044500e7202e541bd69e Mon Sep 17 00:00:00 2001
From: Anders Schack-Mulligen <aschackmull@github.com>
Date: Wed, 14 Sep 2022 10:38:10 +0200
Subject: [PATCH 159/203] Java: Add test for disjunctive type in call context.

---
 .../library-tests/dataflow/callctx/A.java     | 36 +++++++++++++++++++
 1 file changed, 36 insertions(+)

diff --git a/java/ql/test/library-tests/dataflow/callctx/A.java b/java/ql/test/library-tests/dataflow/callctx/A.java
index 00a084658e4..99a3bed4f07 100644
--- a/java/ql/test/library-tests/dataflow/callctx/A.java
+++ b/java/ql/test/library-tests/dataflow/callctx/A.java
@@ -60,4 +60,40 @@ public class A {
     new C2().wrapFoo2(source("C2.2"));
     wrapFoo3(new C2(), source("C2.3"));
   }
+
+  static class Sup {
+    void wrap(Object x) {
+      tgt(x);
+    }
+
+    void tgt(Object x) {
+      sink(x); // $ hasValueFlow=s
+    }
+  }
+
+  static class A1 extends Sup {
+    void tgt(Object x) {
+      sink(x); // $ hasValueFlow=s hasValueFlow=s12
+    }
+  }
+
+  static class A2 extends Sup {
+    void tgt(Object x) {
+      sink(x); // $ hasValueFlow=s hasValueFlow=s12
+    }
+  }
+
+  static class A3 extends Sup {
+    void tgt(Object x) {
+      sink(x); // $ hasValueFlow=s
+    }
+  }
+
+  void test2(Sup s) {
+    s.wrap(source("s"));
+
+    if (s instanceof A1 || s instanceof A2) {
+      s.wrap(source("s12"));
+    }
+  }
 }

From fec6c35f21bafd04e66e84910982a5fbba2208fc Mon Sep 17 00:00:00 2001
From: Ian Lynagh <igfoo@github.com>
Date: Wed, 14 Sep 2022 10:52:43 +0100
Subject: [PATCH 160/203] Java: Accept test output for getQualifiedName change

---
 .../data-classes/callees.expected             | 14 ++--
 .../generics-location/locations.expected      | 24 +++----
 .../test.expected                             | 12 ++--
 .../multiple_files/method_accesses.expected   |  4 +-
 .../reflection/reflection.expected            | 64 +++++++++----------
 .../MemberRefExpr/MemberRefExpr.expected      | 20 +++---
 .../play/PlayMvcHttpRequestHeader.expected    | 54 ++++++++--------
 .../play/PlayMvcResultsClass.expected         | 38 +++++------
 8 files changed, 115 insertions(+), 115 deletions(-)

diff --git a/java/ql/test/kotlin/library-tests/data-classes/callees.expected b/java/ql/test/kotlin/library-tests/data-classes/callees.expected
index c4b66f2d3a0..4c01e2402fa 100644
--- a/java/ql/test/kotlin/library-tests/data-classes/callees.expected
+++ b/java/ql/test/kotlin/library-tests/data-classes/callees.expected
@@ -1,8 +1,8 @@
-| dc.kt:0:0:0:0 | hashCode(...) | Arrays.hashCode |
-| dc.kt:0:0:0:0 | hashCode(...) | Arrays.hashCode |
+| dc.kt:0:0:0:0 | hashCode(...) | java.util.Arrays.hashCode |
+| dc.kt:0:0:0:0 | hashCode(...) | java.util.Arrays.hashCode |
 | dc.kt:0:0:0:0 | new ProtoMapValue(...) | ProtoMapValue.ProtoMapValue |
-| dc.kt:0:0:0:0 | plus(...) | Int.plus |
-| dc.kt:0:0:0:0 | times(...) | Int.times |
-| dc.kt:0:0:0:0 | toString(...) | Arrays.toString |
-| dc.kt:0:0:0:0 | toString(...) | Arrays.toString |
-| dc.kt:1:1:1:71 | super(...) | Object.Object |
+| dc.kt:0:0:0:0 | plus(...) | kotlin.Int.plus |
+| dc.kt:0:0:0:0 | times(...) | kotlin.Int.times |
+| dc.kt:0:0:0:0 | toString(...) | java.util.Arrays.toString |
+| dc.kt:0:0:0:0 | toString(...) | java.util.Arrays.toString |
+| dc.kt:1:1:1:71 | super(...) | java.lang.Object.Object |
diff --git a/java/ql/test/kotlin/library-tests/generics-location/locations.expected b/java/ql/test/kotlin/library-tests/generics-location/locations.expected
index c0c37948cb6..bafdc26e216 100644
--- a/java/ql/test/kotlin/library-tests/generics-location/locations.expected
+++ b/java/ql/test/kotlin/library-tests/generics-location/locations.expected
@@ -12,15 +12,15 @@ classLocations
 | main.B<String> | file:///!unknown-binary-location/main/B.class:0:0:0:0 | file:///!unknown-binary-location/main/B.class:0:0:0:0 |
 | main.B<String> | generics-location.testproj/test.class.files/main/B.class:0:0:0:0 | generics-location.testproj/test.class.files/main/B.class:0:0:0:0 |
 callableLocations
-| A.fn | A.class:0:0:0:0 | A.class:0:0:0:0 |
-| A.fn | A.java:4:17:4:18 | A.java:4:17:4:18 |
-| A<Integer>.fn | A.class:0:0:0:0 | A.class:0:0:0:0 |
-| A<Object>.fn | file:///!unknown-binary-location/main/A.class:0:0:0:0 | file:///!unknown-binary-location/main/A.class:0:0:0:0 |
-| A<String>.fn | A.class:0:0:0:0 | A.class:0:0:0:0 |
-| A<String>.fn | file:///!unknown-binary-location/main/A.class:0:0:0:0 | file:///!unknown-binary-location/main/A.class:0:0:0:0 |
-| B.fn | generics-location.testproj/test.class.files/main/B.class:0:0:0:0 | generics-location.testproj/test.class.files/main/B.class:0:0:0:0 |
-| B.fn | generics.kt:4:5:10:5 | generics.kt:4:5:10:5 |
-| B<Integer>.fn | generics-location.testproj/test.class.files/main/B.class:0:0:0:0 | generics-location.testproj/test.class.files/main/B.class:0:0:0:0 |
-| B<Object>.fn | file:///!unknown-binary-location/main/B.class:0:0:0:0 | file:///!unknown-binary-location/main/B.class:0:0:0:0 |
-| B<String>.fn | file:///!unknown-binary-location/main/B.class:0:0:0:0 | file:///!unknown-binary-location/main/B.class:0:0:0:0 |
-| B<String>.fn | generics-location.testproj/test.class.files/main/B.class:0:0:0:0 | generics-location.testproj/test.class.files/main/B.class:0:0:0:0 |
+| main.A.fn | A.class:0:0:0:0 | A.class:0:0:0:0 |
+| main.A.fn | A.java:4:17:4:18 | A.java:4:17:4:18 |
+| main.A<Integer>.fn | A.class:0:0:0:0 | A.class:0:0:0:0 |
+| main.A<Object>.fn | file:///!unknown-binary-location/main/A.class:0:0:0:0 | file:///!unknown-binary-location/main/A.class:0:0:0:0 |
+| main.A<String>.fn | A.class:0:0:0:0 | A.class:0:0:0:0 |
+| main.A<String>.fn | file:///!unknown-binary-location/main/A.class:0:0:0:0 | file:///!unknown-binary-location/main/A.class:0:0:0:0 |
+| main.B.fn | generics-location.testproj/test.class.files/main/B.class:0:0:0:0 | generics-location.testproj/test.class.files/main/B.class:0:0:0:0 |
+| main.B.fn | generics.kt:4:5:10:5 | generics.kt:4:5:10:5 |
+| main.B<Integer>.fn | generics-location.testproj/test.class.files/main/B.class:0:0:0:0 | generics-location.testproj/test.class.files/main/B.class:0:0:0:0 |
+| main.B<Object>.fn | file:///!unknown-binary-location/main/B.class:0:0:0:0 | file:///!unknown-binary-location/main/B.class:0:0:0:0 |
+| main.B<String>.fn | file:///!unknown-binary-location/main/B.class:0:0:0:0 | file:///!unknown-binary-location/main/B.class:0:0:0:0 |
+| main.B<String>.fn | generics-location.testproj/test.class.files/main/B.class:0:0:0:0 | generics-location.testproj/test.class.files/main/B.class:0:0:0:0 |
diff --git a/java/ql/test/kotlin/library-tests/methods-mixed-java-and-kotlin/test.expected b/java/ql/test/kotlin/library-tests/methods-mixed-java-and-kotlin/test.expected
index dc6cb870289..12654f3142a 100644
--- a/java/ql/test/kotlin/library-tests/methods-mixed-java-and-kotlin/test.expected
+++ b/java/ql/test/kotlin/library-tests/methods-mixed-java-and-kotlin/test.expected
@@ -1,6 +1,6 @@
-| A.class:0:0:0:0 | foo | A<String>.foo | foo(java.lang.String) | A.java:4:10:4:12 | foo | A.foo |
-| A.java:4:10:4:12 | foo | A.foo | foo(java.lang.Object) | A.java:4:10:4:12 | foo | A.foo |
-| B.java:4:17:4:19 | foo | B.foo | foo(java.lang.String) | B.java:4:17:4:19 | foo | B.foo |
-| W.kt:4:5:4:17 | foo | A.foo | foo(java.lang.Object) | W.kt:4:5:4:17 | foo | A.foo |
-| W.kt:8:14:8:34 | foo | B.foo | foo(java.lang.String) | W.kt:8:14:8:34 | foo | B.foo |
-| file:///!unknown-binary-location/k/A.class:0:0:0:0 | foo | A<String>.foo | foo(java.lang.String) | W.kt:4:5:4:17 | foo | A.foo |
+| A.class:0:0:0:0 | foo | j.A<String>.foo | foo(java.lang.String) | A.java:4:10:4:12 | foo | j.A.foo |
+| A.java:4:10:4:12 | foo | j.A.foo | foo(java.lang.Object) | A.java:4:10:4:12 | foo | j.A.foo |
+| B.java:4:17:4:19 | foo | j.B.foo | foo(java.lang.String) | B.java:4:17:4:19 | foo | j.B.foo |
+| W.kt:4:5:4:17 | foo | k.A.foo | foo(java.lang.Object) | W.kt:4:5:4:17 | foo | k.A.foo |
+| W.kt:8:14:8:34 | foo | k.B.foo | foo(java.lang.String) | W.kt:8:14:8:34 | foo | k.B.foo |
+| file:///!unknown-binary-location/k/A.class:0:0:0:0 | foo | k.A<String>.foo | foo(java.lang.String) | W.kt:4:5:4:17 | foo | k.A.foo |
diff --git a/java/ql/test/kotlin/library-tests/multiple_files/method_accesses.expected b/java/ql/test/kotlin/library-tests/multiple_files/method_accesses.expected
index fdb38b16ff7..849ae5204e9 100644
--- a/java/ql/test/kotlin/library-tests/multiple_files/method_accesses.expected
+++ b/java/ql/test/kotlin/library-tests/multiple_files/method_accesses.expected
@@ -1,5 +1,5 @@
 | file1.kt:4:18:4:23 | fun2(...) | file2.kt:3:5:3:18 | fun2 | Class2.fun2 | file2.kt:2:1:4:1 | Class2 |
 | file1.kt:5:9:5:14 | fun3(...) | file3.kt:5:1:6:1 | fun3 | MyJvmName.fun3 | file3.kt:0:0:0:0 | MyJvmName |
 | file1.kt:6:9:6:14 | fun4(...) | file4.kt:4:1:5:1 | fun4 | File4Kt.fun4 | file4.kt:0:0:0:0 | File4Kt |
-| file1.kt:11:29:11:56 | toArray(...) | file://<external>/CollectionToArray.class:0:0:0:0 | toArray | CollectionToArray.toArray | file://<external>/CollectionToArray.class:0:0:0:0 | CollectionToArray |
-| file1.kt:11:47:11:55 | listOf(...) | file://<external>/CollectionsKt.class:0:0:0:0 | listOf | CollectionsKt.listOf | file://<external>/CollectionsKt.class:0:0:0:0 | CollectionsKt |
+| file1.kt:11:29:11:56 | toArray(...) | file://<external>/CollectionToArray.class:0:0:0:0 | toArray | kotlin.jvm.internal.CollectionToArray.toArray | file://<external>/CollectionToArray.class:0:0:0:0 | CollectionToArray |
+| file1.kt:11:47:11:55 | listOf(...) | file://<external>/CollectionsKt.class:0:0:0:0 | listOf | kotlin.collections.CollectionsKt.listOf | file://<external>/CollectionsKt.class:0:0:0:0 | CollectionsKt |
diff --git a/java/ql/test/kotlin/library-tests/reflection/reflection.expected b/java/ql/test/kotlin/library-tests/reflection/reflection.expected
index 9b6899f4b6e..12bbfb4db98 100644
--- a/java/ql/test/kotlin/library-tests/reflection/reflection.expected
+++ b/java/ql/test/kotlin/library-tests/reflection/reflection.expected
@@ -73,48 +73,48 @@ propertySetReferences
 | reflection.kt:68:17:68:34 | ...::... | reflection.kt:68:17:68:34 | set | file://<external>/Class1$Generic.class:0:0:0:0 | setP2 |
 | reflection.kt:109:17:109:27 | ...::... | reflection.kt:109:17:109:27 | set | reflection.kt:105:18:105:31 | setProp1 |
 callsInsideInvocationMethods
-| reflection.kt:7:49:7:54 | ...::... | reflection.kt:7:49:7:54 | new Function2<Ccc,Integer,Double>(...) { ... } | reflection.kt:7:49:7:54 | invoke | reflection.kt:7:49:7:54 | m(...) | Ccc.m |
-| reflection.kt:10:38:10:42 | ...::... | reflection.kt:10:38:10:42 | new KProperty1<C,Integer>(...) { ... } | reflection.kt:10:38:10:42 | get | reflection.kt:10:38:10:42 | getP0(...) | C.getP0 |
-| reflection.kt:10:38:10:42 | ...::... | reflection.kt:10:38:10:42 | new KProperty1<C,Integer>(...) { ... } | reflection.kt:10:38:10:42 | invoke | reflection.kt:10:38:10:42 | get(...) | .get |
-| reflection.kt:14:38:14:44 | ...::... | reflection.kt:14:38:14:44 | new Function1<C,Integer>(...) { ... } | reflection.kt:14:38:14:44 | invoke | reflection.kt:14:38:14:44 | get(...) | KProperty1<C,Integer>.get |
-| reflection.kt:15:35:15:41 | ...::... | reflection.kt:15:35:15:41 | new KProperty0<Integer>(...) { ... } | reflection.kt:15:35:15:41 | get | reflection.kt:15:35:15:41 | getP0(...) | C.getP0 |
-| reflection.kt:15:35:15:41 | ...::... | reflection.kt:15:35:15:41 | new KProperty0<Integer>(...) { ... } | reflection.kt:15:35:15:41 | invoke | reflection.kt:15:35:15:41 | get(...) | .get |
-| reflection.kt:17:45:17:49 | ...::... | reflection.kt:17:45:17:49 | new KMutableProperty1<C,Integer>(...) { ... } | reflection.kt:17:45:17:49 | get | reflection.kt:17:45:17:49 | getP1(...) | C.getP1 |
-| reflection.kt:17:45:17:49 | ...::... | reflection.kt:17:45:17:49 | new KMutableProperty1<C,Integer>(...) { ... } | reflection.kt:17:45:17:49 | invoke | reflection.kt:17:45:17:49 | get(...) | .get |
-| reflection.kt:17:45:17:49 | ...::... | reflection.kt:17:45:17:49 | new KMutableProperty1<C,Integer>(...) { ... } | reflection.kt:17:45:17:49 | set | reflection.kt:17:45:17:49 | setP1(...) | C.setP1 |
-| reflection.kt:21:44:21:50 | ...::... | reflection.kt:21:44:21:50 | new Function2<C,Integer,Unit>(...) { ... } | reflection.kt:21:44:21:50 | invoke | reflection.kt:21:44:21:50 | set(...) | KMutableProperty1<C,Integer>.set |
-| reflection.kt:22:42:22:48 | ...::... | reflection.kt:22:42:22:48 | new KMutableProperty0<Integer>(...) { ... } | reflection.kt:22:42:22:48 | get | reflection.kt:22:42:22:48 | getP1(...) | C.getP1 |
-| reflection.kt:22:42:22:48 | ...::... | reflection.kt:22:42:22:48 | new KMutableProperty0<Integer>(...) { ... } | reflection.kt:22:42:22:48 | invoke | reflection.kt:22:42:22:48 | get(...) | .get |
-| reflection.kt:22:42:22:48 | ...::... | reflection.kt:22:42:22:48 | new KMutableProperty0<Integer>(...) { ... } | reflection.kt:22:42:22:48 | set | reflection.kt:22:42:22:48 | setP1(...) | C.setP1 |
+| reflection.kt:7:49:7:54 | ...::... | reflection.kt:7:49:7:54 | new Function2<Ccc,Integer,Double>(...) { ... } | reflection.kt:7:49:7:54 | invoke | reflection.kt:7:49:7:54 | m(...) | Reflection$Ccc.m |
+| reflection.kt:10:38:10:42 | ...::... | reflection.kt:10:38:10:42 | new KProperty1<C,Integer>(...) { ... } | reflection.kt:10:38:10:42 | get | reflection.kt:10:38:10:42 | getP0(...) | Reflection$C.getP0 |
+| reflection.kt:10:38:10:42 | ...::... | reflection.kt:10:38:10:42 | new KProperty1<C,Integer>(...) { ... } | reflection.kt:10:38:10:42 | invoke | reflection.kt:10:38:10:42 | get(...) | <anonymous class>.get |
+| reflection.kt:14:38:14:44 | ...::... | reflection.kt:14:38:14:44 | new Function1<C,Integer>(...) { ... } | reflection.kt:14:38:14:44 | invoke | reflection.kt:14:38:14:44 | get(...) | kotlin.reflect.KProperty1<C,Integer>.get |
+| reflection.kt:15:35:15:41 | ...::... | reflection.kt:15:35:15:41 | new KProperty0<Integer>(...) { ... } | reflection.kt:15:35:15:41 | get | reflection.kt:15:35:15:41 | getP0(...) | Reflection$C.getP0 |
+| reflection.kt:15:35:15:41 | ...::... | reflection.kt:15:35:15:41 | new KProperty0<Integer>(...) { ... } | reflection.kt:15:35:15:41 | invoke | reflection.kt:15:35:15:41 | get(...) | <anonymous class>.get |
+| reflection.kt:17:45:17:49 | ...::... | reflection.kt:17:45:17:49 | new KMutableProperty1<C,Integer>(...) { ... } | reflection.kt:17:45:17:49 | get | reflection.kt:17:45:17:49 | getP1(...) | Reflection$C.getP1 |
+| reflection.kt:17:45:17:49 | ...::... | reflection.kt:17:45:17:49 | new KMutableProperty1<C,Integer>(...) { ... } | reflection.kt:17:45:17:49 | invoke | reflection.kt:17:45:17:49 | get(...) | <anonymous class>.get |
+| reflection.kt:17:45:17:49 | ...::... | reflection.kt:17:45:17:49 | new KMutableProperty1<C,Integer>(...) { ... } | reflection.kt:17:45:17:49 | set | reflection.kt:17:45:17:49 | setP1(...) | Reflection$C.setP1 |
+| reflection.kt:21:44:21:50 | ...::... | reflection.kt:21:44:21:50 | new Function2<C,Integer,Unit>(...) { ... } | reflection.kt:21:44:21:50 | invoke | reflection.kt:21:44:21:50 | set(...) | kotlin.reflect.KMutableProperty1<C,Integer>.set |
+| reflection.kt:22:42:22:48 | ...::... | reflection.kt:22:42:22:48 | new KMutableProperty0<Integer>(...) { ... } | reflection.kt:22:42:22:48 | get | reflection.kt:22:42:22:48 | getP1(...) | Reflection$C.getP1 |
+| reflection.kt:22:42:22:48 | ...::... | reflection.kt:22:42:22:48 | new KMutableProperty0<Integer>(...) { ... } | reflection.kt:22:42:22:48 | invoke | reflection.kt:22:42:22:48 | get(...) | <anonymous class>.get |
+| reflection.kt:22:42:22:48 | ...::... | reflection.kt:22:42:22:48 | new KMutableProperty0<Integer>(...) { ... } | reflection.kt:22:42:22:48 | set | reflection.kt:22:42:22:48 | setP1(...) | Reflection$C.setP1 |
 | reflection.kt:50:13:50:28 | ...::... | reflection.kt:50:13:50:28 | new KProperty1<String,Character>(...) { ... } | reflection.kt:50:13:50:28 | get | reflection.kt:50:13:50:28 | getLastChar(...) | ReflectionKt.getLastChar |
-| reflection.kt:50:13:50:28 | ...::... | reflection.kt:50:13:50:28 | new KProperty1<String,Character>(...) { ... } | reflection.kt:50:13:50:28 | invoke | reflection.kt:50:13:50:28 | get(...) | .get |
+| reflection.kt:50:13:50:28 | ...::... | reflection.kt:50:13:50:28 | new KProperty1<String,Character>(...) { ... } | reflection.kt:50:13:50:28 | invoke | reflection.kt:50:13:50:28 | get(...) | <anonymous class>.get |
 | reflection.kt:51:13:51:28 | ...::... | reflection.kt:51:13:51:28 | new KProperty0<Character>(...) { ... } | reflection.kt:51:13:51:28 | get | reflection.kt:51:13:51:28 | getLastChar(...) | ReflectionKt.getLastChar |
-| reflection.kt:51:13:51:28 | ...::... | reflection.kt:51:13:51:28 | new KProperty0<Character>(...) { ... } | reflection.kt:51:13:51:28 | invoke | reflection.kt:51:13:51:28 | get(...) | .get |
-| reflection.kt:60:17:60:32 | ...::... | reflection.kt:60:17:60:32 | new Function2<Generic<Integer>,Integer,String>(...) { ... } | reflection.kt:60:17:60:32 | invoke | reflection.kt:60:17:60:32 | m1(...) | Generic<Integer>.m1 |
-| reflection.kt:61:17:61:34 | ...::... | reflection.kt:61:17:61:34 | new Function1<Integer,String>(...) { ... } | reflection.kt:61:17:61:34 | invoke | reflection.kt:61:17:61:34 | m1(...) | Generic<Integer>.m1 |
+| reflection.kt:51:13:51:28 | ...::... | reflection.kt:51:13:51:28 | new KProperty0<Character>(...) { ... } | reflection.kt:51:13:51:28 | invoke | reflection.kt:51:13:51:28 | get(...) | <anonymous class>.get |
+| reflection.kt:60:17:60:32 | ...::... | reflection.kt:60:17:60:32 | new Function2<Generic<Integer>,Integer,String>(...) { ... } | reflection.kt:60:17:60:32 | invoke | reflection.kt:60:17:60:32 | m1(...) | Class1$Generic<Integer>.m1 |
+| reflection.kt:61:17:61:34 | ...::... | reflection.kt:61:17:61:34 | new Function1<Integer,String>(...) { ... } | reflection.kt:61:17:61:34 | invoke | reflection.kt:61:17:61:34 | m1(...) | Class1$Generic<Integer>.m1 |
 | reflection.kt:62:17:62:34 | ...::... | reflection.kt:62:17:62:34 | new Function1<Generic<Integer>,String>(...) { ... } | reflection.kt:62:17:62:34 | invoke | reflection.kt:62:17:62:34 | ext1(...) | ReflectionKt.ext1 |
 | reflection.kt:63:17:63:36 | ...::... | reflection.kt:63:17:63:36 | new Function0<String>(...) { ... } | reflection.kt:63:17:63:36 | invoke | reflection.kt:63:17:63:36 | ext1(...) | ReflectionKt.ext1 |
 | reflection.kt:64:17:64:34 | ...::... | reflection.kt:64:17:64:34 | new Function1<Generic<Integer>,String>(...) { ... } | reflection.kt:64:17:64:34 | invoke | reflection.kt:64:17:64:34 | ext2(...) | ReflectionKt.ext2 |
 | reflection.kt:65:17:65:36 | ...::... | reflection.kt:65:17:65:36 | new Function0<String>(...) { ... } | reflection.kt:65:17:65:36 | invoke | reflection.kt:65:17:65:36 | ext2(...) | ReflectionKt.ext2 |
-| reflection.kt:67:17:67:32 | ...::... | reflection.kt:67:17:67:32 | new KMutableProperty1<Generic<Integer>,Integer>(...) { ... } | reflection.kt:67:17:67:32 | get | reflection.kt:67:17:67:32 | getP2(...) | Generic<Integer>.getP2 |
-| reflection.kt:67:17:67:32 | ...::... | reflection.kt:67:17:67:32 | new KMutableProperty1<Generic<Integer>,Integer>(...) { ... } | reflection.kt:67:17:67:32 | invoke | reflection.kt:67:17:67:32 | get(...) | .get |
-| reflection.kt:67:17:67:32 | ...::... | reflection.kt:67:17:67:32 | new KMutableProperty1<Generic<Integer>,Integer>(...) { ... } | reflection.kt:67:17:67:32 | set | reflection.kt:67:17:67:32 | setP2(...) | Generic<Integer>.setP2 |
-| reflection.kt:68:17:68:34 | ...::... | reflection.kt:68:17:68:34 | new KMutableProperty0<Integer>(...) { ... } | reflection.kt:68:17:68:34 | get | reflection.kt:68:17:68:34 | getP2(...) | Generic<Integer>.getP2 |
-| reflection.kt:68:17:68:34 | ...::... | reflection.kt:68:17:68:34 | new KMutableProperty0<Integer>(...) { ... } | reflection.kt:68:17:68:34 | invoke | reflection.kt:68:17:68:34 | get(...) | .get |
-| reflection.kt:68:17:68:34 | ...::... | reflection.kt:68:17:68:34 | new KMutableProperty0<Integer>(...) { ... } | reflection.kt:68:17:68:34 | set | reflection.kt:68:17:68:34 | setP2(...) | Generic<Integer>.setP2 |
-| reflection.kt:70:17:70:30 | ...::... | reflection.kt:70:17:70:30 | new KProperty0<Integer>(...) { ... } | reflection.kt:70:17:70:30 | get | reflection.kt:70:17:70:30 | getMAX_VALUE(...) | IntCompanionObject.getMAX_VALUE |
-| reflection.kt:70:17:70:30 | ...::... | reflection.kt:70:17:70:30 | new KProperty0<Integer>(...) { ... } | reflection.kt:70:17:70:30 | invoke | reflection.kt:70:17:70:30 | get(...) | .get |
-| reflection.kt:71:17:71:34 | ...::... | reflection.kt:71:17:71:34 | new KProperty0<Integer>(...) { ... } | reflection.kt:71:17:71:34 | invoke | reflection.kt:71:17:71:34 | get(...) | .get |
-| reflection.kt:72:17:72:35 | ...::... | reflection.kt:72:17:72:35 | new KMutableProperty0<Integer>(...) { ... } | reflection.kt:72:17:72:35 | invoke | reflection.kt:72:17:72:35 | get(...) | .get |
-| reflection.kt:90:18:90:24 | ...::... | reflection.kt:90:18:90:24 | new Function1<String,Inner<String>>(...) { ... } | reflection.kt:90:18:90:24 | invoke | reflection.kt:90:18:90:24 | new Inner<String>(...) | Inner<String>.Inner<String> |
+| reflection.kt:67:17:67:32 | ...::... | reflection.kt:67:17:67:32 | new KMutableProperty1<Generic<Integer>,Integer>(...) { ... } | reflection.kt:67:17:67:32 | get | reflection.kt:67:17:67:32 | getP2(...) | Class1$Generic<Integer>.getP2 |
+| reflection.kt:67:17:67:32 | ...::... | reflection.kt:67:17:67:32 | new KMutableProperty1<Generic<Integer>,Integer>(...) { ... } | reflection.kt:67:17:67:32 | invoke | reflection.kt:67:17:67:32 | get(...) | <anonymous class>.get |
+| reflection.kt:67:17:67:32 | ...::... | reflection.kt:67:17:67:32 | new KMutableProperty1<Generic<Integer>,Integer>(...) { ... } | reflection.kt:67:17:67:32 | set | reflection.kt:67:17:67:32 | setP2(...) | Class1$Generic<Integer>.setP2 |
+| reflection.kt:68:17:68:34 | ...::... | reflection.kt:68:17:68:34 | new KMutableProperty0<Integer>(...) { ... } | reflection.kt:68:17:68:34 | get | reflection.kt:68:17:68:34 | getP2(...) | Class1$Generic<Integer>.getP2 |
+| reflection.kt:68:17:68:34 | ...::... | reflection.kt:68:17:68:34 | new KMutableProperty0<Integer>(...) { ... } | reflection.kt:68:17:68:34 | invoke | reflection.kt:68:17:68:34 | get(...) | <anonymous class>.get |
+| reflection.kt:68:17:68:34 | ...::... | reflection.kt:68:17:68:34 | new KMutableProperty0<Integer>(...) { ... } | reflection.kt:68:17:68:34 | set | reflection.kt:68:17:68:34 | setP2(...) | Class1$Generic<Integer>.setP2 |
+| reflection.kt:70:17:70:30 | ...::... | reflection.kt:70:17:70:30 | new KProperty0<Integer>(...) { ... } | reflection.kt:70:17:70:30 | get | reflection.kt:70:17:70:30 | getMAX_VALUE(...) | kotlin.jvm.internal.IntCompanionObject.getMAX_VALUE |
+| reflection.kt:70:17:70:30 | ...::... | reflection.kt:70:17:70:30 | new KProperty0<Integer>(...) { ... } | reflection.kt:70:17:70:30 | invoke | reflection.kt:70:17:70:30 | get(...) | <anonymous class>.get |
+| reflection.kt:71:17:71:34 | ...::... | reflection.kt:71:17:71:34 | new KProperty0<Integer>(...) { ... } | reflection.kt:71:17:71:34 | invoke | reflection.kt:71:17:71:34 | get(...) | <anonymous class>.get |
+| reflection.kt:72:17:72:35 | ...::... | reflection.kt:72:17:72:35 | new KMutableProperty0<Integer>(...) { ... } | reflection.kt:72:17:72:35 | invoke | reflection.kt:72:17:72:35 | get(...) | <anonymous class>.get |
+| reflection.kt:90:18:90:24 | ...::... | reflection.kt:90:18:90:24 | new Function1<String,Inner<String>>(...) { ... } | reflection.kt:90:18:90:24 | invoke | reflection.kt:90:18:90:24 | new Inner<String>(...) | Class2$Inner<String>.Inner<String> |
 | reflection.kt:97:14:97:21 | ...::... | reflection.kt:97:14:97:21 | new Function1<String,Class2<String>>(...) { ... } | reflection.kt:97:14:97:21 | invoke | reflection.kt:97:14:97:21 | new Class2<String>(...) | Class2<String>.Class2<String> |
 | reflection.kt:98:14:98:17 | ...::... | reflection.kt:98:14:98:17 | new Function1<String,Unit>(...) { ... } | reflection.kt:98:14:98:17 | invoke | reflection.kt:98:14:98:17 | fn(...) | ReflectionKt.fn |
-| reflection.kt:99:14:99:29 | ...::... | reflection.kt:99:14:99:29 | new Function1<String,Inner<String>>(...) { ... } | reflection.kt:99:14:99:29 | invoke | reflection.kt:99:14:99:29 | new Inner<String>(...) | Inner<String>.Inner<String> |
+| reflection.kt:99:14:99:29 | ...::... | reflection.kt:99:14:99:29 | new Function1<String,Inner<String>>(...) { ... } | reflection.kt:99:14:99:29 | invoke | reflection.kt:99:14:99:29 | new Inner<String>(...) | Class2<Integer>$Inner<String>.Inner<String> |
 | reflection.kt:109:17:109:27 | ...::... | reflection.kt:109:17:109:27 | new KMutableProperty0<Integer>(...) { ... } | reflection.kt:109:17:109:27 | get | reflection.kt:109:17:109:27 | getProp1(...) | Base1.getProp1 |
-| reflection.kt:109:17:109:27 | ...::... | reflection.kt:109:17:109:27 | new KMutableProperty0<Integer>(...) { ... } | reflection.kt:109:17:109:27 | invoke | reflection.kt:109:17:109:27 | get(...) | .get |
+| reflection.kt:109:17:109:27 | ...::... | reflection.kt:109:17:109:27 | new KMutableProperty0<Integer>(...) { ... } | reflection.kt:109:17:109:27 | invoke | reflection.kt:109:17:109:27 | get(...) | <anonymous class>.get |
 | reflection.kt:109:17:109:27 | ...::... | reflection.kt:109:17:109:27 | new KMutableProperty0<Integer>(...) { ... } | reflection.kt:109:17:109:27 | set | reflection.kt:109:17:109:27 | setProp1(...) | Base1.setProp1 |
-| reflection.kt:116:40:116:44 | ...::... | reflection.kt:116:40:116:44 | new Function1<Integer,Unit>(...) { ... } | reflection.kt:116:40:116:44 | invoke | reflection.kt:116:40:116:44 | fn1(...) | .fn1 |
-| reflection.kt:116:40:116:44 | ...::... | reflection.kt:116:40:116:44 | new Function1<Integer,Unit>(...) { ... } | reflection.kt:116:40:116:44 | invoke | reflection.kt:116:40:116:44 | new (...) | . |
+| reflection.kt:116:40:116:44 | ...::... | reflection.kt:116:40:116:44 | new Function1<Integer,Unit>(...) { ... } | reflection.kt:116:40:116:44 | invoke | reflection.kt:116:40:116:44 | fn1(...) | LocalFn$.fn1 |
+| reflection.kt:116:40:116:44 | ...::... | reflection.kt:116:40:116:44 | new Function1<Integer,Unit>(...) { ... } | reflection.kt:116:40:116:44 | invoke | reflection.kt:116:40:116:44 | new (...) | LocalFn$. |
 | reflection.kt:126:9:126:13 | ...::... | reflection.kt:126:9:126:13 | new Function0<Unit>(...) { ... } | reflection.kt:126:9:126:13 | invoke | reflection.kt:126:9:126:13 | fn1(...) | ReflectionKt.fn1 |
 fieldAccessInsideInvocationMethods
 | reflection.kt:14:38:14:44 | ...::... | reflection.kt:14:38:14:44 | new Function1<C,Integer>(...) { ... } | reflection.kt:14:38:14:44 | invoke | reflection.kt:14:38:14:44 | this.<dispatchReceiver> |
diff --git a/java/ql/test/library-tests/MemberRefExpr/MemberRefExpr.expected b/java/ql/test/library-tests/MemberRefExpr/MemberRefExpr.expected
index b02fa9c0e9a..3260a055b94 100644
--- a/java/ql/test/library-tests/MemberRefExpr/MemberRefExpr.expected
+++ b/java/ql/test/library-tests/MemberRefExpr/MemberRefExpr.expected
@@ -1,14 +1,14 @@
-| Test.java:24:26:24:51 | ...::... | Inner<>.Inner<> | Test$Generic$Inner.class:0:0:0:0 | Inner<> |
-| Test.java:38:29:38:42 | ...::... | Object.toString | Test.java:1:7:1:10 | Test |
-| Test.java:39:29:39:42 | ...::... | Object.hashCode | Test.java:1:7:1:10 | Test |
-| Test.java:40:29:40:39 | ...::... | Object.clone | Test.java:1:7:1:10 | Test |
-| Test.java:41:40:41:64 | ...::... | Object.toString | Test$Generic.class:0:0:0:0 | Generic<String> |
-| Test.java:43:23:43:36 | ...::... | Object.toString | Test.java:1:7:1:10 | Test |
-| Test.java:44:23:44:36 | ...::... | Object.hashCode | Test.java:1:7:1:10 | Test |
-| Test.java:45:23:45:33 | ...::... | Object.clone | Test.java:1:7:1:10 | Test |
-| Test.java:48:22:48:35 | ...::... | Object.toString | Test.java:1:7:1:10 | Test |
+| Test.java:24:26:24:51 | ...::... | Test$Generic<Number>$Inner<>.Inner<> | Test$Generic$Inner.class:0:0:0:0 | Inner<> |
+| Test.java:38:29:38:42 | ...::... | java.lang.Object.toString | Test.java:1:7:1:10 | Test |
+| Test.java:39:29:39:42 | ...::... | java.lang.Object.hashCode | Test.java:1:7:1:10 | Test |
+| Test.java:40:29:40:39 | ...::... | java.lang.Object.clone | Test.java:1:7:1:10 | Test |
+| Test.java:41:40:41:64 | ...::... | java.lang.Object.toString | Test$Generic.class:0:0:0:0 | Generic<String> |
+| Test.java:43:23:43:36 | ...::... | java.lang.Object.toString | Test.java:1:7:1:10 | Test |
+| Test.java:44:23:44:36 | ...::... | java.lang.Object.hashCode | Test.java:1:7:1:10 | Test |
+| Test.java:45:23:45:33 | ...::... | java.lang.Object.clone | Test.java:1:7:1:10 | Test |
+| Test.java:48:22:48:35 | ...::... | java.lang.Object.toString | Test.java:1:7:1:10 | Test |
 | Test.java:51:13:51:21 | ...::... | Test.Test | Test.java:1:7:1:10 | Test |
-| Test.java:52:13:52:32 | ...::... | Generic<String>.Generic<String> | Test$Generic.class:0:0:0:0 | Generic<String> |
+| Test.java:52:13:52:32 | ...::... | Test$Generic<String>.Generic<String> | Test$Generic.class:0:0:0:0 | Generic<String> |
 | Test.java:56:13:56:22 | ...::... |  | file://:0:0:0:0 | int[] |
 | Test.java:57:13:57:26 | ...::... |  | file://:0:0:0:0 | Generic<>[] |
 | Test.java:61:31:61:47 | ...::... | Test.doSomething | Test.java:1:7:1:10 | Test |
diff --git a/java/ql/test/library-tests/frameworks/play/PlayMvcHttpRequestHeader.expected b/java/ql/test/library-tests/frameworks/play/PlayMvcHttpRequestHeader.expected
index 79ab2a9ded6..9ccaba383d1 100644
--- a/java/ql/test/library-tests/frameworks/play/PlayMvcHttpRequestHeader.expected
+++ b/java/ql/test/library-tests/frameworks/play/PlayMvcHttpRequestHeader.expected
@@ -1,27 +1,27 @@
-| play.mvc.Http$RequestHeader | RequestHeader.acceptLanguages |
-| play.mvc.Http$RequestHeader | RequestHeader.accepts |
-| play.mvc.Http$RequestHeader | RequestHeader.addAttr |
-| play.mvc.Http$RequestHeader | RequestHeader.attrs |
-| play.mvc.Http$RequestHeader | RequestHeader.charset |
-| play.mvc.Http$RequestHeader | RequestHeader.clientCertificateChain |
-| play.mvc.Http$RequestHeader | RequestHeader.contentType |
-| play.mvc.Http$RequestHeader | RequestHeader.cookie |
-| play.mvc.Http$RequestHeader | RequestHeader.cookies |
-| play.mvc.Http$RequestHeader | RequestHeader.getHeader |
-| play.mvc.Http$RequestHeader | RequestHeader.getHeaders |
-| play.mvc.Http$RequestHeader | RequestHeader.getQueryString |
-| play.mvc.Http$RequestHeader | RequestHeader.hasBody |
-| play.mvc.Http$RequestHeader | RequestHeader.hasHeader |
-| play.mvc.Http$RequestHeader | RequestHeader.header |
-| play.mvc.Http$RequestHeader | RequestHeader.headers |
-| play.mvc.Http$RequestHeader | RequestHeader.host |
-| play.mvc.Http$RequestHeader | RequestHeader.method |
-| play.mvc.Http$RequestHeader | RequestHeader.path |
-| play.mvc.Http$RequestHeader | RequestHeader.queryString |
-| play.mvc.Http$RequestHeader | RequestHeader.remoteAddress |
-| play.mvc.Http$RequestHeader | RequestHeader.secure |
-| play.mvc.Http$RequestHeader | RequestHeader.tags |
-| play.mvc.Http$RequestHeader | RequestHeader.uri |
-| play.mvc.Http$RequestHeader | RequestHeader.version |
-| play.mvc.Http$RequestHeader | RequestHeader.withAttrs |
-| play.mvc.Http$RequestHeader | RequestHeader.withBody |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.acceptLanguages |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.accepts |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.addAttr |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.attrs |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.charset |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.clientCertificateChain |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.contentType |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.cookie |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.cookies |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.getHeader |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.getHeaders |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.getQueryString |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.hasBody |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.hasHeader |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.header |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.headers |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.host |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.method |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.path |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.queryString |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.remoteAddress |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.secure |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.tags |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.uri |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.version |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.withAttrs |
+| play.mvc.Http$RequestHeader | play.mvc.Http$RequestHeader.withBody |
diff --git a/java/ql/test/library-tests/frameworks/play/PlayMvcResultsClass.expected b/java/ql/test/library-tests/frameworks/play/PlayMvcResultsClass.expected
index 4553e207bf6..0659069aa13 100644
--- a/java/ql/test/library-tests/frameworks/play/PlayMvcResultsClass.expected
+++ b/java/ql/test/library-tests/frameworks/play/PlayMvcResultsClass.expected
@@ -1,19 +1,19 @@
-| play.mvc.Results | Results.<clinit> |
-| play.mvc.Results | Results.badRequest |
-| play.mvc.Results | Results.created |
-| play.mvc.Results | Results.forbidden |
-| play.mvc.Results | Results.found |
-| play.mvc.Results | Results.internalServerError |
-| play.mvc.Results | Results.movedPermanently |
-| play.mvc.Results | Results.noContent |
-| play.mvc.Results | Results.notAcceptable |
-| play.mvc.Results | Results.notFound |
-| play.mvc.Results | Results.ok |
-| play.mvc.Results | Results.paymentRequired |
-| play.mvc.Results | Results.permanentRedirect |
-| play.mvc.Results | Results.redirect |
-| play.mvc.Results | Results.seeOther |
-| play.mvc.Results | Results.status |
-| play.mvc.Results | Results.temporaryRedirect |
-| play.mvc.Results | Results.unauthorized |
-| play.mvc.Results | Results.unsupportedMediaType |
+| play.mvc.Results | play.mvc.Results.<clinit> |
+| play.mvc.Results | play.mvc.Results.badRequest |
+| play.mvc.Results | play.mvc.Results.created |
+| play.mvc.Results | play.mvc.Results.forbidden |
+| play.mvc.Results | play.mvc.Results.found |
+| play.mvc.Results | play.mvc.Results.internalServerError |
+| play.mvc.Results | play.mvc.Results.movedPermanently |
+| play.mvc.Results | play.mvc.Results.noContent |
+| play.mvc.Results | play.mvc.Results.notAcceptable |
+| play.mvc.Results | play.mvc.Results.notFound |
+| play.mvc.Results | play.mvc.Results.ok |
+| play.mvc.Results | play.mvc.Results.paymentRequired |
+| play.mvc.Results | play.mvc.Results.permanentRedirect |
+| play.mvc.Results | play.mvc.Results.redirect |
+| play.mvc.Results | play.mvc.Results.seeOther |
+| play.mvc.Results | play.mvc.Results.status |
+| play.mvc.Results | play.mvc.Results.temporaryRedirect |
+| play.mvc.Results | play.mvc.Results.unauthorized |
+| play.mvc.Results | play.mvc.Results.unsupportedMediaType |

From d735b9e6f2e9600bff6805faf443f892cfadd44b Mon Sep 17 00:00:00 2001
From: Ian Lynagh <igfoo@github.com>
Date: Wed, 14 Sep 2022 11:56:13 +0100
Subject: [PATCH 161/203] Java: Format QL

---
 java/ql/lib/semmle/code/java/Member.qll                | 4 +++-
 java/ql/lib/semmle/code/java/security/ExternalAPIs.qll | 4 +---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/java/ql/lib/semmle/code/java/Member.qll b/java/ql/lib/semmle/code/java/Member.qll
index b3a980fa0cc..456e6e8b12a 100644
--- a/java/ql/lib/semmle/code/java/Member.qll
+++ b/java/ql/lib/semmle/code/java/Member.qll
@@ -25,7 +25,9 @@ class Member extends Element, Annotatable, Modifiable, @member {
    * This is useful for debugging, but for normal use `hasQualifiedName`
    * is recommended, as it is more efficient.
    */
-  string getQualifiedName() { result = this.getDeclaringType().getQualifiedName() + "." + this.getName() }
+  string getQualifiedName() {
+    result = this.getDeclaringType().getQualifiedName() + "." + this.getName()
+  }
 
   /**
    * Holds if this member has the specified name and is declared in the
diff --git a/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll b/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll
index 24a10f613ed..ccd4e5a757a 100644
--- a/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll
+++ b/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll
@@ -92,9 +92,7 @@ class ExternalApiDataNode extends DataFlow::Node {
   int getIndex() { result = i }
 
   /** Gets the description of the method being called. */
-  string getMethodDescription() {
-    result = this.getMethod().getQualifiedName()
-  }
+  string getMethodDescription() { result = this.getMethod().getQualifiedName() }
 }
 
 /** DEPRECATED: Alias for ExternalApiDataNode */

From 4ac0ecbc6117f22ff04bcfc7f7a910cdaae1af42 Mon Sep 17 00:00:00 2001
From: Ian Lynagh <igfoo@github.com>
Date: Wed, 14 Sep 2022 12:10:13 +0100
Subject: [PATCH 162/203] Java: Mark the getQualifiedName change as breaking

---
 ...er-getQualifier.md => 2022-09-13-Member-getQualifiedName.md} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename java/ql/lib/change-notes/{2022-09-13-Member-getQualifier.md => 2022-09-13-Member-getQualifiedName.md} (82%)

diff --git a/java/ql/lib/change-notes/2022-09-13-Member-getQualifier.md b/java/ql/lib/change-notes/2022-09-13-Member-getQualifiedName.md
similarity index 82%
rename from java/ql/lib/change-notes/2022-09-13-Member-getQualifier.md
rename to java/ql/lib/change-notes/2022-09-13-Member-getQualifiedName.md
index 72eb6e6a0c3..70b897911a8 100644
--- a/java/ql/lib/change-notes/2022-09-13-Member-getQualifier.md
+++ b/java/ql/lib/change-notes/2022-09-13-Member-getQualifiedName.md
@@ -1,4 +1,4 @@
 ---
-category: minorAnalysis
+category: breaking
 ---
 * The `Member.getQualifiedName()` predicate result now includes the qualified name of the declaring type.

From 6eccb5e99cf9fecf2060fbaefd778edbab3b66e4 Mon Sep 17 00:00:00 2001
From: Tamas Vajk <tamasvajk@github.com>
Date: Tue, 13 Sep 2022 15:03:00 +0200
Subject: [PATCH 163/203] Kotlin: Add integration test to show missing compiler
 arguments

---
 .../compiler_arguments/app/build.gradle       | 25 +++++++++++++++++++
 .../app/src/main/kotlin/testProject/App.kt    | 15 +++++++++++
 .../compiler_arguments/compArgs.expected      |  0
 .../kotlin/compiler_arguments/compArgs.ql     |  4 +++
 .../kotlin/compiler_arguments/settings.gradle | 11 ++++++++
 .../kotlin/compiler_arguments/test.py         |  5 ++++
 6 files changed, 60 insertions(+)
 create mode 100644 java/ql/integration-tests/posix-only/kotlin/compiler_arguments/app/build.gradle
 create mode 100644 java/ql/integration-tests/posix-only/kotlin/compiler_arguments/app/src/main/kotlin/testProject/App.kt
 create mode 100644 java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.expected
 create mode 100644 java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.ql
 create mode 100644 java/ql/integration-tests/posix-only/kotlin/compiler_arguments/settings.gradle
 create mode 100644 java/ql/integration-tests/posix-only/kotlin/compiler_arguments/test.py

diff --git a/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/app/build.gradle b/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/app/build.gradle
new file mode 100644
index 00000000000..c0bc3340524
--- /dev/null
+++ b/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/app/build.gradle
@@ -0,0 +1,25 @@
+/*
+ * This file was generated by the Gradle 'init' task.
+ *
+ * This generated file contains a sample Kotlin application project to get you started.
+ * For more details take a look at the 'Building Java & JVM projects' chapter in the Gradle
+ * User Manual available at https://docs.gradle.org/7.0.2/userguide/building_java_projects.html
+ */
+
+plugins {
+    // Apply the org.jetbrains.kotlin.jvm Plugin to add support for Kotlin.
+    id 'org.jetbrains.kotlin.jvm' version '1.7.0'
+
+    // Apply the application plugin to add support for building a CLI application in Java.
+    id 'application'
+}
+
+repositories {
+    // Use Maven Central for resolving dependencies.
+    mavenCentral()
+}
+
+application {
+    // Define the main class for the application.
+    mainClass = 'testProject.AppKt'
+}
diff --git a/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/app/src/main/kotlin/testProject/App.kt b/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/app/src/main/kotlin/testProject/App.kt
new file mode 100644
index 00000000000..0ed9df24a57
--- /dev/null
+++ b/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/app/src/main/kotlin/testProject/App.kt
@@ -0,0 +1,15 @@
+/*
+ * This Kotlin source file was generated by the Gradle 'init' task.
+ */
+package testProject
+
+class App {
+    val greeting: String
+        get() {
+            return "Hello World!"
+        }
+}
+
+fun main() {
+    // TODO: println(App().greeting)
+}
diff --git a/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.expected b/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.expected
new file mode 100644
index 00000000000..e69de29bb2d
diff --git a/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.ql b/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.ql
new file mode 100644
index 00000000000..cf9d21c9d33
--- /dev/null
+++ b/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.ql
@@ -0,0 +1,4 @@
+import java
+
+from Compilation c, int i
+select i, c.getArgument(i)
diff --git a/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/settings.gradle b/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/settings.gradle
new file mode 100644
index 00000000000..a56fb7dd11c
--- /dev/null
+++ b/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/settings.gradle
@@ -0,0 +1,11 @@
+/*
+ * This file was generated by the Gradle 'init' task.
+ *
+ * The settings file is used to specify which projects to include in your build.
+ *
+ * Detailed information about configuring a multi-project build in Gradle can be found
+ * in the user manual at https://docs.gradle.org/7.0.2/userguide/multi_project_builds.html
+ */
+
+rootProject.name = 'testProject'
+include('app')
diff --git a/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/test.py b/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/test.py
new file mode 100644
index 00000000000..e5e9aca69bc
--- /dev/null
+++ b/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/test.py
@@ -0,0 +1,5 @@
+from create_database_utils import *
+
+run_codeql_database_create(
+    ["gradle build --no-daemon --no-build-cache"], lang="java")
+runSuccessfully(["gradle", "clean"])

From a68b61f50a8612b5cf7b7fd1f73ceff1fe4dc0d5 Mon Sep 17 00:00:00 2001
From: Tamas Vajk <tamasvajk@github.com>
Date: Tue, 13 Sep 2022 15:03:54 +0200
Subject: [PATCH 164/203] Kotlin: adjust expected test results after fixing
 compiler argument interception

---
 .../kotlin/compiler_arguments/compArgs.expected   | 15 +++++++++++++++
 .../kotlin/compiler_arguments/compArgs.ql         | 13 ++++++++++++-
 2 files changed, 27 insertions(+), 1 deletion(-)

diff --git a/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.expected b/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.expected
index e69de29bb2d..d560b9b520d 100644
--- a/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.expected
+++ b/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.expected
@@ -0,0 +1,15 @@
+| 0 | -Xallow-no-source-files |
+| 1 | -classpath |
+| 2 | <PATH> |
+| 3 | -d |
+| 4 | app/build/classes/kotlin/main |
+| 5 | -jdk-home |
+| 6 | <PATH> |
+| 7 | -module-name |
+| 8 | app |
+| 9 | -no-reflect |
+| 10 | -no-stdlib |
+| 11 | <PLUGINS> |
+| 12 | app/src/main/kotlin/testProject/App.kt |
+| 13 | -jvm-target |
+| 14 | 1.8 |
diff --git a/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.ql b/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.ql
index cf9d21c9d33..2be349c0432 100644
--- a/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.ql
+++ b/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.ql
@@ -1,4 +1,15 @@
 import java
 
+private string getArgument(Compilation c, int i) {
+  exists(string arg | arg = c.getArgument(i) |
+    if exists(arg.indexOf("-Xplugin="))
+    then result = "<PLUGINS>"
+    else
+      if exists(string arg0 | arg0 = c.getArgument(i - 1) | arg0 = ["-classpath", "-jdk-home"])
+      then result = "<PATH>"
+      else result = arg
+  )
+}
+
 from Compilation c, int i
-select i, c.getArgument(i)
+select i, getArgument(c, i)

From ba3ebeec2ce482be928af517be46db1498b69b4d Mon Sep 17 00:00:00 2001
From: Anders Schack-Mulligen <aschackmull@github.com>
Date: Tue, 23 Aug 2022 15:50:30 +0200
Subject: [PATCH 165/203] Java: Remove low confidence dispatch for which we
 have a manual summary.

---
 .../dataflow/internal/DataFlowDispatch.qll    | 26 +++++++++--
 .../code/java/dispatch/VirtualDispatch.qll    | 46 +++++++++++++++++++
 2 files changed, 68 insertions(+), 4 deletions(-)

diff --git a/java/ql/lib/semmle/code/java/dataflow/internal/DataFlowDispatch.qll b/java/ql/lib/semmle/code/java/dataflow/internal/DataFlowDispatch.qll
index c61c256505a..a57d1ca32be 100644
--- a/java/ql/lib/semmle/code/java/dataflow/internal/DataFlowDispatch.qll
+++ b/java/ql/lib/semmle/code/java/dataflow/internal/DataFlowDispatch.qll
@@ -8,9 +8,27 @@ private import semmle.code.java.dataflow.TypeFlow
 private import semmle.code.java.dispatch.internal.Unification
 
 private module DispatchImpl {
+  private predicate hasHighConfidenceTarget(Call c) {
+    exists(SummarizedCallable sc |
+      sc = c.getCallee().getSourceDeclaration() and not sc.isAutoGenerated()
+    )
+    or
+    exists(Callable srcTgt |
+      srcTgt = VirtualDispatch::viableCallable(c) and
+      not VirtualDispatch::lowConfidenceDispatchTarget(c, srcTgt)
+    )
+  }
+
+  private Callable sourceDispatch(Call c) {
+    result = VirtualDispatch::viableCallable(c) and
+    if VirtualDispatch::lowConfidenceDispatchTarget(c, result)
+    then not hasHighConfidenceTarget(c)
+    else any()
+  }
+
   /** Gets a viable implementation of the target of the given `Call`. */
   DataFlowCallable viableCallable(DataFlowCall c) {
-    result.asCallable() = VirtualDispatch::viableCallable(c.asCall())
+    result.asCallable() = sourceDispatch(c.asCall())
     or
     result.asSummarizedCallable() = c.asCall().getCallee().getSourceDeclaration()
   }
@@ -22,7 +40,7 @@ private module DispatchImpl {
    */
   private predicate mayBenefitFromCallContext(MethodAccess ma, Callable c, int i) {
     exists(Parameter p |
-      2 <= strictcount(VirtualDispatch::viableImpl(ma)) and
+      2 <= strictcount(sourceDispatch(ma)) and
       ma.getQualifier().(VarAccess).getVariable() = p and
       p.getPosition() = i and
       c.getAParameter() = p and
@@ -31,7 +49,7 @@ private module DispatchImpl {
     )
     or
     exists(OwnInstanceAccess ia |
-      2 <= strictcount(VirtualDispatch::viableImpl(ma)) and
+      2 <= strictcount(sourceDispatch(ma)) and
       (ia.isExplicit(ma.getQualifier()) or ia.isImplicitMethodQualifier(ma)) and
       i = -1 and
       c = ma.getEnclosingCallable()
@@ -47,7 +65,7 @@ private module DispatchImpl {
   private predicate relevantContext(Call ctx, int i) {
     exists(Callable c |
       mayBenefitFromCallContext(_, c, i) and
-      c = VirtualDispatch::viableCallable(ctx)
+      c = sourceDispatch(ctx)
     )
   }
 
diff --git a/java/ql/lib/semmle/code/java/dispatch/VirtualDispatch.qll b/java/ql/lib/semmle/code/java/dispatch/VirtualDispatch.qll
index 38208db9b71..dd1406ef352 100644
--- a/java/ql/lib/semmle/code/java/dispatch/VirtualDispatch.qll
+++ b/java/ql/lib/semmle/code/java/dispatch/VirtualDispatch.qll
@@ -54,6 +54,16 @@ private module Dispatch {
   cached
   Method viableImpl(MethodAccess ma) { result = ObjFlow::viableImpl_out(ma) }
 
+  /**
+   * Holds if `m` is a viable implementation of the method called in `ma` for
+   * which we only have imprecise open-world type-based dispatch resolution, and
+   * the dispatch type is likely to yield implausible dispatch targets.
+   */
+  cached
+  predicate lowConfidenceDispatchTarget(MethodAccess ma, Method m) {
+    m = viableImpl(ma) and lowConfidenceDispatch(ma)
+  }
+
   /**
    * INTERNAL: Use `viableImpl` instead.
    *
@@ -62,6 +72,42 @@ private module Dispatch {
   cached
   Method viableImpl_v3(MethodAccess ma) { result = DispatchFlow::viableImpl_out(ma) }
 
+  /**
+   * Holds if the best type bounds for the qualifier of `ma` are likely to
+   * contain implausible dispatch targets.
+   */
+  private predicate lowConfidenceDispatch(VirtualMethodAccess ma) {
+    exists(RefType t | hasQualifierType(ma, t, false) |
+      lowConfidenceDispatchType(t.getSourceDeclaration())
+    ) and
+    (
+      not qualType(ma, _, _)
+      or
+      exists(RefType t | qualType(ma, t, false) |
+        lowConfidenceDispatchType(t.getSourceDeclaration())
+      )
+    ) and
+    (
+      not qualUnionType(ma, _, _)
+      or
+      exists(RefType t | qualUnionType(ma, t, false) |
+        lowConfidenceDispatchType(t.getSourceDeclaration())
+      )
+    )
+  }
+
+  private predicate lowConfidenceDispatchType(SrcRefType t) {
+    t instanceof TypeObject
+    or
+    t instanceof FunctionalInterface
+    or
+    t.hasQualifiedName("java.io", "Serializable")
+    or
+    t.hasQualifiedName("java.lang", "Cloneable")
+    or
+    t.getPackage().hasName("java.util") and t instanceof Interface
+  }
+
   /**
    * INTERNAL: Use `viableImpl` instead.
    *

From 4ea1c0050bbda0434e81a394c842b275c6304143 Mon Sep 17 00:00:00 2001
From: Tom Hvitved <hvitved@github.com>
Date: Wed, 14 Sep 2022 13:53:34 +0200
Subject: [PATCH 166/203] Change two ```codeql to ```ql

---
 python/ql/lib/semmle/python/frameworks/Peewee.qll | 2 +-
 ruby/ql/lib/codeql/ruby/ApiGraphs.qll             | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/python/ql/lib/semmle/python/frameworks/Peewee.qll b/python/ql/lib/semmle/python/frameworks/Peewee.qll
index 189ab14876a..977428fb98b 100644
--- a/python/ql/lib/semmle/python/frameworks/Peewee.qll
+++ b/python/ql/lib/semmle/python/frameworks/Peewee.qll
@@ -32,7 +32,7 @@ private module Peewee {
             .getASubclass*()
       or
       // Ohter known subclasses, semi auto generated by using
-      // ```codeql
+      // ```ql
       // class DBClass extends Class, SelfRefMixin {
       //   DBClass() {
       //     exists(this.getLocation().getFile().getRelativePath()) and
diff --git a/ruby/ql/lib/codeql/ruby/ApiGraphs.qll b/ruby/ql/lib/codeql/ruby/ApiGraphs.qll
index 4272b24145d..8cec5f0d190 100644
--- a/ruby/ql/lib/codeql/ruby/ApiGraphs.qll
+++ b/ruby/ql/lib/codeql/ruby/ApiGraphs.qll
@@ -33,7 +33,7 @@ module API {
    * 3. Map the resulting API graph nodes to data-flow nodes, using `asSource` or `asSink`.
    *
    * For example, a simplified way to get arguments to `Foo.bar` would be
-   * ```codeql
+   * ```ql
    * API::getTopLevelMember("Foo").getMethod("bar").getParameter(0).asSink()
    * ```
    *

From 16836de02b3e2879bdda804564c4636332e6144d Mon Sep 17 00:00:00 2001
From: Tamas Vajk <tamasvajk@github.com>
Date: Wed, 14 Sep 2022 15:15:06 +0200
Subject: [PATCH 167/203] Code quality improvment to simplify test QL

---
 .../posix-only/kotlin/compiler_arguments/compArgs.ql            | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.ql b/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.ql
index 2be349c0432..fe4bedba634 100644
--- a/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.ql
+++ b/java/ql/integration-tests/posix-only/kotlin/compiler_arguments/compArgs.ql
@@ -5,7 +5,7 @@ private string getArgument(Compilation c, int i) {
     if exists(arg.indexOf("-Xplugin="))
     then result = "<PLUGINS>"
     else
-      if exists(string arg0 | arg0 = c.getArgument(i - 1) | arg0 = ["-classpath", "-jdk-home"])
+      if c.getArgument(i - 1) = ["-classpath", "-jdk-home"]
       then result = "<PATH>"
       else result = arg
   )

From 3d0f7862479e31e5b1831e602c39c4a69d9ff0f3 Mon Sep 17 00:00:00 2001
From: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
Date: Wed, 14 Sep 2022 15:39:48 +0200
Subject: [PATCH 168/203] docs: grammar fix

Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com>
---
 docs/ql-design-patterns.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/ql-design-patterns.md b/docs/ql-design-patterns.md
index d63ccec496f..e0ff4f57a41 100644
--- a/docs/ql-design-patterns.md
+++ b/docs/ql-design-patterns.md
@@ -58,7 +58,7 @@ Now, a concrete subclass can derive from `MySpecialExpr::Range` if it wants to e
 
 Let's use an example from the Python libraries: https://github.com/github/codeql/blob/46751e515c40c6b4c9b61758cc840eec1894a624/python/ql/lib/semmle/python/Concepts.qll#L601-L683
 
-`Escaping`, as the name suggests, models various APIs that escape meta-characters. It has a member-predicate `getKind()` that tells you what sort of escaping the modelled function does. For example, if the result of that predicate is `"html"`, then this means that the escaping function is meant to make things safe to embed inside HTML.
+`Escaping`, as the name suggests, models various APIs that escape meta-characters. It has a member-predicate `getKind()` that tells you what sort of escaping the modeled function does. For example, if the result of that predicate is `"html"`, then this means that the escaping function is meant to make things safe to embed inside HTML.
 `Escaping::Range` is subclassed to model various APIs, and `kind()` is implemented accordingly.
 But we can also subclass `Escaping` to, as in the above example, talk about all HTML-escaping functions.
 

From 8f7f63121103c59db8a1268fc2f2acf6e164ed6f Mon Sep 17 00:00:00 2001
From: Philip Ginsbach <ginsbach@github.com>
Date: Wed, 14 Sep 2022 14:49:51 +0100
Subject: [PATCH 169/203] upper-case variable names are deprecated

---
 .../General Class-Level Information/HubClasses.ql             | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/cpp/ql/src/Architecture/General Class-Level Information/HubClasses.ql b/cpp/ql/src/Architecture/General Class-Level Information/HubClasses.ql
index 7361e875581..f0e0b39754d 100644
--- a/cpp/ql/src/Architecture/General Class-Level Information/HubClasses.ql	
+++ b/cpp/ql/src/Architecture/General Class-Level Information/HubClasses.ql	
@@ -12,5 +12,5 @@ import cpp
 
 from Class c
 where c.fromSource()
-select c as Class, c.getMetrics().getAfferentCoupling() as AfferentCoupling,
-  c.getMetrics().getEfferentSourceCoupling() as EfferentCoupling order by AfferentCoupling desc
+select c as Class, c.getMetrics().getAfferentCoupling() as afferentCoupling,
+  c.getMetrics().getEfferentSourceCoupling() as efferentCoupling order by afferentCoupling desc

From c5622135a63090b15e2d8309e5104162c36f97fd Mon Sep 17 00:00:00 2001
From: Dave Bartolomeo <dbartol@github.com>
Date: Wed, 14 Sep 2022 10:21:40 -0400
Subject: [PATCH 170/203] Add lock files for Swift packs

---
 swift/ql/lib/qlpack.lock.yml | 4 ++++
 swift/ql/src/qlpack.lock.yml | 4 ++++
 2 files changed, 8 insertions(+)
 create mode 100644 swift/ql/lib/qlpack.lock.yml
 create mode 100644 swift/ql/src/qlpack.lock.yml

diff --git a/swift/ql/lib/qlpack.lock.yml b/swift/ql/lib/qlpack.lock.yml
new file mode 100644
index 00000000000..06dd07fc7dc
--- /dev/null
+++ b/swift/ql/lib/qlpack.lock.yml
@@ -0,0 +1,4 @@
+---
+dependencies: {}
+compiled: false
+lockVersion: 1.0.0
diff --git a/swift/ql/src/qlpack.lock.yml b/swift/ql/src/qlpack.lock.yml
new file mode 100644
index 00000000000..06dd07fc7dc
--- /dev/null
+++ b/swift/ql/src/qlpack.lock.yml
@@ -0,0 +1,4 @@
+---
+dependencies: {}
+compiled: false
+lockVersion: 1.0.0

From f3a4ba39a8356e7360fa92e71921bade4af9d0dd Mon Sep 17 00:00:00 2001
From: James Fletcher <42464962+jf205@users.noreply.github.com>
Date: Wed, 14 Sep 2022 16:20:07 +0100
Subject: [PATCH 171/203] Update
 docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst

Co-authored-by: Andrew Eisenberg <aeisenberg@github.com>
---
 docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst b/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst
index 1984b12d6d8..b3ad59da2b5 100644
--- a/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst
+++ b/docs/codeql/codeql-cli/getting-started-with-the-codeql-cli.rst
@@ -47,7 +47,7 @@ Conditions <https://securitylab.github.com/tools/codeql/license>`__.
 
 .. pull-quote:: Important
 
-   There are several different versions of the CLI available to download, depending
+   There are several versions of the CLI available to download, depending
    on your use case:
 
    * If you want to use the most up to date CodeQL tools and features, download the version tagged ``latest``.

From 8f2a718787fb5461a1212bff3ec7a5d271c57915 Mon Sep 17 00:00:00 2001
From: Ian Lynagh <igfoo@github.com>
Date: Wed, 14 Sep 2022 16:31:11 +0100
Subject: [PATCH 172/203] Kotlin: Remove an unused method

---
 .../java/com/semmle/extractor/java/OdasaOutput.java   | 11 -----------
 1 file changed, 11 deletions(-)

diff --git a/java/kotlin-extractor/src/main/java/com/semmle/extractor/java/OdasaOutput.java b/java/kotlin-extractor/src/main/java/com/semmle/extractor/java/OdasaOutput.java
index 73dc090f69b..22fcbdf0011 100644
--- a/java/kotlin-extractor/src/main/java/com/semmle/extractor/java/OdasaOutput.java
+++ b/java/kotlin-extractor/src/main/java/com/semmle/extractor/java/OdasaOutput.java
@@ -255,17 +255,6 @@ public class OdasaOutput {
 	 * Trap writers.
 	 */
 
-	/**
-	 * A {@link TrapFileManager} to output facts for the given source file,
-	 * or <code>null</code> if the source file should not be populated.
-	 */
-	private TrapFileManager getTrapWriterForCurrentSourceFile() {
-		File trapFile = getTrapFileForCurrentSourceFile();
-		if (trapFile==null)
-			return null;
-		return trapWriter(trapFile, null, null);
-	}
-
 	/**
 	 * Get a {@link TrapFileManager} to write members
 	 * about a declaration, or <code>null</code> if the declaration shouldn't be populated.

From c5703898b04f0b68d1833f0361d7f7a9b7ef6004 Mon Sep 17 00:00:00 2001
From: Philip Ginsbach <ginsbach@github.com>
Date: Wed, 14 Sep 2022 16:35:24 +0100
Subject: [PATCH 173/203] remove upper-case NamedExpression variable names

---
 .../InheritanceDepthDistribution.ql                           | 4 ++--
 .../General Top-Level Information/GeneralStatistics.ql        | 2 +-
 .../Refactoring Opportunities/ClassesWithManyDependencies.ql  | 2 +-
 .../Refactoring Opportunities/ComplexFunctions.ql             | 2 +-
 cpp/ql/src/Metrics/Namespaces/AbstractNamespaces.ql           | 2 +-
 cpp/ql/src/Metrics/Namespaces/ConcreteNamespaces.ql           | 2 +-
 .../src/Metrics/Namespaces/HighAfferentCouplingNamespaces.ql  | 2 +-
 .../Metrics/Namespaces/HighDistanceFromMainLineNamespaces.ql  | 2 +-
 .../src/Metrics/Namespaces/HighEfferentCouplingNamespaces.ql  | 2 +-
 cpp/ql/src/Metrics/Namespaces/StableNamespaces.ql             | 2 +-
 cpp/ql/src/Metrics/Namespaces/UnstableNamespaces.ql           | 2 +-
 11 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/cpp/ql/src/Architecture/General Class-Level Information/InheritanceDepthDistribution.ql b/cpp/ql/src/Architecture/General Class-Level Information/InheritanceDepthDistribution.ql
index 0fc6f0ba2a7..693c2961e4d 100644
--- a/cpp/ql/src/Architecture/General Class-Level Information/InheritanceDepthDistribution.ql	
+++ b/cpp/ql/src/Architecture/General Class-Level Information/InheritanceDepthDistribution.ql	
@@ -16,5 +16,5 @@ predicate hasInheritanceDepth(Class c, int d) {
 
 from int depth
 where hasInheritanceDepth(_, depth)
-select depth as InheritanceDepth, count(Class c | hasInheritanceDepth(c, depth)) as NumberOfClasses
-  order by InheritanceDepth
+select depth as inheritanceDepth, count(Class c | hasInheritanceDepth(c, depth)) as numberOfClasses
+  order by inheritanceDepth
diff --git a/cpp/ql/src/Architecture/General Top-Level Information/GeneralStatistics.ql b/cpp/ql/src/Architecture/General Top-Level Information/GeneralStatistics.ql
index 6f842baec42..a065e4d4823 100644
--- a/cpp/ql/src/Architecture/General Top-Level Information/GeneralStatistics.ql	
+++ b/cpp/ql/src/Architecture/General Top-Level Information/GeneralStatistics.ql	
@@ -51,4 +51,4 @@ where
         100 * sum(Class c | c.fromSource() | c.getMetrics().getEfferentSourceCoupling()) /
           sum(Class c | c.fromSource() | c.getMetrics().getEfferentCoupling())
       ).toString() + "%"
-select l as Title, n as Value
+select l as title, n as value
diff --git a/cpp/ql/src/Architecture/Refactoring Opportunities/ClassesWithManyDependencies.ql b/cpp/ql/src/Architecture/Refactoring Opportunities/ClassesWithManyDependencies.ql
index 384af9ebef8..a38cbbd9cb6 100644
--- a/cpp/ql/src/Architecture/Refactoring Opportunities/ClassesWithManyDependencies.ql	
+++ b/cpp/ql/src/Architecture/Refactoring Opportunities/ClassesWithManyDependencies.ql	
@@ -16,4 +16,4 @@ where
   t.fromSource() and
   n = t.getMetrics().getEfferentSourceCoupling() and
   n > 10
-select t as Class, "This class has too many dependencies (" + n.toString() + ")"
+select t as class_, "This class has too many dependencies (" + n.toString() + ")"
diff --git a/cpp/ql/src/Architecture/Refactoring Opportunities/ComplexFunctions.ql b/cpp/ql/src/Architecture/Refactoring Opportunities/ComplexFunctions.ql
index 5fe0585131c..ff4ce9fbda1 100644
--- a/cpp/ql/src/Architecture/Refactoring Opportunities/ComplexFunctions.ql	
+++ b/cpp/ql/src/Architecture/Refactoring Opportunities/ComplexFunctions.ql	
@@ -17,4 +17,4 @@ where
   n = f.getMetrics().getNumberOfCalls() and
   n > 99 and
   not f.isMultiplyDefined()
-select f as Function, "This function makes too many calls (" + n.toString() + ")"
+select f as function, "This function makes too many calls (" + n.toString() + ")"
diff --git a/cpp/ql/src/Metrics/Namespaces/AbstractNamespaces.ql b/cpp/ql/src/Metrics/Namespaces/AbstractNamespaces.ql
index 2d1440813f4..a468ce4a46d 100644
--- a/cpp/ql/src/Metrics/Namespaces/AbstractNamespaces.ql
+++ b/cpp/ql/src/Metrics/Namespaces/AbstractNamespaces.ql
@@ -14,4 +14,4 @@ where
   n.fromSource() and
   c = n.getMetrics().getAbstractness() and
   c > 0.2
-select n as Namespace, c as Abstractness order by Abstractness desc
+select n as namespace, c as abstractness order by abstractness desc
diff --git a/cpp/ql/src/Metrics/Namespaces/ConcreteNamespaces.ql b/cpp/ql/src/Metrics/Namespaces/ConcreteNamespaces.ql
index c71f654f275..cd60b46594a 100644
--- a/cpp/ql/src/Metrics/Namespaces/ConcreteNamespaces.ql
+++ b/cpp/ql/src/Metrics/Namespaces/ConcreteNamespaces.ql
@@ -13,4 +13,4 @@ where
   n.fromSource() and
   c = n.getMetrics().getAbstractness() and
   c = 0
-select n as Namespace, c as Abstractness order by Abstractness desc
+select n as namespace, c as abstractness order by abstractness desc
diff --git a/cpp/ql/src/Metrics/Namespaces/HighAfferentCouplingNamespaces.ql b/cpp/ql/src/Metrics/Namespaces/HighAfferentCouplingNamespaces.ql
index 89dae1a3404..4b89e3710ce 100644
--- a/cpp/ql/src/Metrics/Namespaces/HighAfferentCouplingNamespaces.ql
+++ b/cpp/ql/src/Metrics/Namespaces/HighAfferentCouplingNamespaces.ql
@@ -15,4 +15,4 @@ where
   n.fromSource() and
   c = n.getMetrics().getAfferentCoupling() and
   c > 20
-select n as Namespace, c as AfferentCoupling order by AfferentCoupling desc
+select n as namespace, c as afferentCoupling order by afferentCoupling desc
diff --git a/cpp/ql/src/Metrics/Namespaces/HighDistanceFromMainLineNamespaces.ql b/cpp/ql/src/Metrics/Namespaces/HighDistanceFromMainLineNamespaces.ql
index ce5553749d2..f97bb3e4f5c 100644
--- a/cpp/ql/src/Metrics/Namespaces/HighDistanceFromMainLineNamespaces.ql
+++ b/cpp/ql/src/Metrics/Namespaces/HighDistanceFromMainLineNamespaces.ql
@@ -15,4 +15,4 @@ where
   n.fromSource() and
   c = n.getMetrics().getDistanceFromMain() and
   c > 0.7
-select n as Namespace, c as DistanceFromMainline order by DistanceFromMainline desc
+select n as namespace, c as distanceFromMainline order by distanceFromMainline desc
diff --git a/cpp/ql/src/Metrics/Namespaces/HighEfferentCouplingNamespaces.ql b/cpp/ql/src/Metrics/Namespaces/HighEfferentCouplingNamespaces.ql
index 1de659f1384..35ebe468be6 100644
--- a/cpp/ql/src/Metrics/Namespaces/HighEfferentCouplingNamespaces.ql
+++ b/cpp/ql/src/Metrics/Namespaces/HighEfferentCouplingNamespaces.ql
@@ -15,4 +15,4 @@ where
   n.fromSource() and
   c = n.getMetrics().getEfferentCoupling() and
   c > 20
-select n as Namespace, c as EfferentCoupling order by EfferentCoupling desc
+select n as namespace, c as efferentCoupling order by efferentCoupling desc
diff --git a/cpp/ql/src/Metrics/Namespaces/StableNamespaces.ql b/cpp/ql/src/Metrics/Namespaces/StableNamespaces.ql
index 3fd17ee4066..37c1b698c56 100644
--- a/cpp/ql/src/Metrics/Namespaces/StableNamespaces.ql
+++ b/cpp/ql/src/Metrics/Namespaces/StableNamespaces.ql
@@ -14,4 +14,4 @@ where
   n.fromSource() and
   c = n.getMetrics().getInstability() and
   c < 0.2
-select n as Namespace, c as Instability order by Instability desc
+select n as namespace, c as instability order by instability desc
diff --git a/cpp/ql/src/Metrics/Namespaces/UnstableNamespaces.ql b/cpp/ql/src/Metrics/Namespaces/UnstableNamespaces.ql
index 8e150d62f03..8dbaa5f1cc7 100644
--- a/cpp/ql/src/Metrics/Namespaces/UnstableNamespaces.ql
+++ b/cpp/ql/src/Metrics/Namespaces/UnstableNamespaces.ql
@@ -14,4 +14,4 @@ where
   n.fromSource() and
   c = n.getMetrics().getInstability() and
   c > 0.8
-select n as Package, c as Instability order by Instability desc
+select n as package, c as instability order by instability desc

From fce111bebe1f2420ca17ff3802d66eec20b366f0 Mon Sep 17 00:00:00 2001
From: Ian Lynagh <igfoo@github.com>
Date: Wed, 14 Sep 2022 16:42:57 +0100
Subject: [PATCH 174/203] Kotlin: Compile with -Werror, and fix warnings

---
 java/kotlin-extractor/build.py                   |  3 ++-
 .../src/main/kotlin/KotlinFileExtractor.kt       | 16 ++++++----------
 .../src/main/kotlin/KotlinUsesExtractor.kt       |  2 +-
 3 files changed, 9 insertions(+), 12 deletions(-)

diff --git a/java/kotlin-extractor/build.py b/java/kotlin-extractor/build.py
index 3f14eb0b28e..a4da1a2ea23 100755
--- a/java/kotlin-extractor/build.py
+++ b/java/kotlin-extractor/build.py
@@ -86,7 +86,8 @@ def compile_to_dir(srcs, classpath, java_classpath, output):
     run_process([kotlinc,
                  # kotlinc can default to 256M, which isn't enough when we are extracting the build
                  '-J-Xmx2G',
-                 '-Xopt-in=kotlin.RequiresOptIn',
+                 '-Werror',
+                 '-opt-in=kotlin.RequiresOptIn',
                  '-d', output,
                  '-module-name', 'codeql-kotlin-extractor',
                  '-no-reflect', '-no-stdlib',
diff --git a/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt b/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt
index 74dbb8288ce..e1caa98cb5a 100644
--- a/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt
+++ b/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt
@@ -2582,8 +2582,8 @@ open class KotlinFileExtractor(
                     indexVarDecl.initializer?.let { indexVarInitializer ->
                         (e.statements[2] as? IrCall)?.let { arraySetCall ->
                             if (isFunction(arraySetCall.symbol.owner, "kotlin", "(some array type)", { isArrayType(it) }, "set")) {
-                                val updateRhs = arraySetCall.getValueArgument(1)
-                                if (updateRhs == null) {
+                                val updateRhs0 = arraySetCall.getValueArgument(1)
+                                if (updateRhs0 == null) {
                                     logger.errorElement("Update RHS not found", e)
                                     return false
                                 }
@@ -2596,7 +2596,7 @@ open class KotlinFileExtractor(
                                             receiverVal -> receiverVal.symbol.owner == arrayVarDecl.symbol.owner
                                         } ?: false
                                     },
-                                    updateRhs
+                                    updateRhs0
                                 )?.let { updateRhs ->
                                     val origin = e.origin
                                     if (origin == null) {
@@ -3421,15 +3421,11 @@ open class KotlinFileExtractor(
 
     data class ReceiverInfo(val receiver: IrExpression, val type: IrType, val field: Label<DbField>, val indexOffset: Int)
 
-    private fun makeReceiverInfo(callableReferenceExpr: IrCallableReference<out IrSymbol>, receiver: IrExpression?, indexOffset: Int): ReceiverInfo? {
+    private fun makeReceiverInfo(receiver: IrExpression?, indexOffset: Int): ReceiverInfo? {
         if (receiver == null) {
             return null
         }
         val type = receiver.type
-        if (type == null) {
-            logger.warnElement("Receiver has no type", callableReferenceExpr)
-            return null
-        }
         val field: Label<DbField> = tw.getFreshIdLabel()
         return ReceiverInfo(receiver, type, field, indexOffset)
     }
@@ -3442,8 +3438,8 @@ open class KotlinFileExtractor(
         : GeneratedClassHelper(locId, ids) {
 
         // Only one of the receivers can be non-null, but we defensively handle the case when both are null anyway
-        private val dispatchReceiverInfo = makeReceiverInfo(callableReferenceExpr, callableReferenceExpr.dispatchReceiver, 0)
-        private val extensionReceiverInfo = makeReceiverInfo(callableReferenceExpr, callableReferenceExpr.extensionReceiver, if (dispatchReceiverInfo == null) 0 else 1)
+        private val dispatchReceiverInfo = makeReceiverInfo(callableReferenceExpr.dispatchReceiver, 0)
+        private val extensionReceiverInfo = makeReceiverInfo(callableReferenceExpr.extensionReceiver, if (dispatchReceiverInfo == null) 0 else 1)
 
         fun extractReceiverField() {
             val firstAssignmentStmtIdx = 1
diff --git a/java/kotlin-extractor/src/main/kotlin/KotlinUsesExtractor.kt b/java/kotlin-extractor/src/main/kotlin/KotlinUsesExtractor.kt
index 02c2f88c73b..747d0776512 100644
--- a/java/kotlin-extractor/src/main/kotlin/KotlinUsesExtractor.kt
+++ b/java/kotlin-extractor/src/main/kotlin/KotlinUsesExtractor.kt
@@ -327,7 +327,7 @@ open class KotlinUsesExtractor(
             return f
         return globalExtensionState.syntheticToRealFunctionMap.getOrPut(f) {
             val result = replacementClass.declarations.findSubType<IrSimpleFunction> { replacementDecl ->
-                replacementDecl is IrSimpleFunction && replacementDecl.name == f.name && replacementDecl.valueParameters.size == f.valueParameters.size && replacementDecl.valueParameters.zip(f.valueParameters).all {
+                replacementDecl.name == f.name && replacementDecl.valueParameters.size == f.valueParameters.size && replacementDecl.valueParameters.zip(f.valueParameters).all {
                     erase(it.first.type) == erase(it.second.type)
                 }
             }

From 8a5bc3b6357e94d7de04735f3b9987a81ac6ee18 Mon Sep 17 00:00:00 2001
From: Ian Lynagh <igfoo@github.com>
Date: Wed, 14 Sep 2022 17:56:27 +0100
Subject: [PATCH 175/203] Kotlin: Don't use hasQuestionMark

1.7.0 warns:
    'hasQuestionMark: Boolean' is deprecated. hasQuestionMark has
    ambiguous meaning. Use isNullable() or isMarkedNullable() instead
---
 .../src/main/kotlin/KotlinFileExtractor.kt             | 10 +++++-----
 .../src/main/kotlin/KotlinUsesExtractor.kt             | 10 +++++-----
 .../src/main/kotlin/utils/TypeSubstitution.kt          |  6 +++---
 3 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt b/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt
index e1caa98cb5a..45636455806 100644
--- a/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt
+++ b/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt
@@ -1694,7 +1694,7 @@ open class KotlinFileExtractor(
         result
     }
 
-    private fun isFunction(target: IrFunction, pkgName: String, classNameLogged: String, classNamePredicate: (String) -> Boolean, fName: String, hasQuestionMark: Boolean? = false): Boolean {
+    private fun isFunction(target: IrFunction, pkgName: String, classNameLogged: String, classNamePredicate: (String) -> Boolean, fName: String, isNullable: Boolean? = false): Boolean {
         val verbose = false
         fun verboseln(s: String) { if(verbose) println(s) }
         verboseln("Attempting match for $pkgName $classNameLogged $fName")
@@ -1704,14 +1704,14 @@ open class KotlinFileExtractor(
         }
         val extensionReceiverParameter = target.extensionReceiverParameter
         val targetClass = if (extensionReceiverParameter == null) {
-            if (hasQuestionMark == true) {
+            if (isNullable == true) {
                 verboseln("Nullablility of type didn't match (target is not an extension method)")
                 return false
             }
             target.parent
         } else {
             val st = extensionReceiverParameter.type as? IrSimpleType
-            if (hasQuestionMark != null && st?.hasQuestionMark != hasQuestionMark) {
+            if (isNullable != null && st?.isNullable() != isNullable) {
                 verboseln("Nullablility of type didn't match")
                 return false
             }
@@ -1738,8 +1738,8 @@ open class KotlinFileExtractor(
         return true
     }
 
-    private fun isFunction(target: IrFunction, pkgName: String, className: String, fName: String, hasQuestionMark: Boolean? = false) =
-        isFunction(target, pkgName, className, { it == className }, fName, hasQuestionMark)
+    private fun isFunction(target: IrFunction, pkgName: String, className: String, fName: String, isNullable: Boolean? = false) =
+        isFunction(target, pkgName, className, { it == className }, fName, isNullable)
 
     private fun isNumericFunction(target: IrFunction, fName: String): Boolean {
         return isFunction(target, "kotlin", "Int", fName) ||
diff --git a/java/kotlin-extractor/src/main/kotlin/KotlinUsesExtractor.kt b/java/kotlin-extractor/src/main/kotlin/KotlinUsesExtractor.kt
index 747d0776512..8a3dd214837 100644
--- a/java/kotlin-extractor/src/main/kotlin/KotlinUsesExtractor.kt
+++ b/java/kotlin-extractor/src/main/kotlin/KotlinUsesExtractor.kt
@@ -650,7 +650,7 @@ open class KotlinUsesExtractor(
                           otherIsPrimitive: Boolean,
                           javaClass: IrClass,
                           kotlinPackageName: String, kotlinClassName: String): TypeResults {
-            val javaResult = if ((context == TypeContext.RETURN || (context == TypeContext.OTHER && otherIsPrimitive)) && !s.hasQuestionMark && primitiveName != null) {
+            val javaResult = if ((context == TypeContext.RETURN || (context == TypeContext.OTHER && otherIsPrimitive)) && !s.isNullable() && primitiveName != null) {
                     val label: Label<DbPrimitive> = tw.getLabelFor("@\"type;$primitiveName\"", {
                         tw.writePrimitives(it, primitiveName)
                     })
@@ -660,7 +660,7 @@ open class KotlinUsesExtractor(
                 }
             val kotlinClassId = useClassInstance(kotlinClass, listOf()).typeResult.id
             val kotlinResult = if (true) TypeResult(fakeKotlinType(), "TODO", "TODO") else
-                if (s.hasQuestionMark) {
+                if (s.isNullable()) {
                     val kotlinSignature = "$kotlinPackageName.$kotlinClassName?" // TODO: Is this right?
                     val kotlinLabel = "@\"kt_type;nullable;$kotlinPackageName.$kotlinClassName\""
                     val kotlinId: Label<DbKt_nullable_type> = tw.getLabelFor(kotlinLabel, {
@@ -704,13 +704,13 @@ open class KotlinUsesExtractor(
             owner is IrClass -> {
                 val args = if (s.isRawType()) null else s.arguments
 
-                return useSimpleTypeClass(owner, args, s.hasQuestionMark)
+                return useSimpleTypeClass(owner, args, s.isNullable())
             }
             owner is IrTypeParameter -> {
                 val javaResult = useTypeParameter(owner)
                 val aClassId = makeClass("kotlin", "TypeParam") // TODO: Wrong
                 val kotlinResult = if (true) TypeResult(fakeKotlinType(), "TODO", "TODO") else
-                    if (s.hasQuestionMark) {
+                    if (s.isNullable()) {
                         val kotlinSignature = "${javaResult.signature}?" // TODO: Wrong
                         val kotlinLabel = "@\"kt_type;nullable;type_param\"" // TODO: Wrong
                         val kotlinId: Label<DbKt_nullable_type> = tw.getLabelFor(kotlinLabel, {
@@ -1485,7 +1485,7 @@ open class KotlinUsesExtractor(
                 if (t.isArray() || t.isNullableArray()) {
                     val elementType = t.getArrayElementType(pluginContext.irBuiltIns)
                     val erasedElementType = erase(elementType)
-                    return owner.typeWith(erasedElementType).codeQlWithHasQuestionMark(t.hasQuestionMark)
+                    return owner.typeWith(erasedElementType).codeQlWithHasQuestionMark(t.isNullable())
                 }
 
                 return if (t.arguments.isNotEmpty())
diff --git a/java/kotlin-extractor/src/main/kotlin/utils/TypeSubstitution.kt b/java/kotlin-extractor/src/main/kotlin/utils/TypeSubstitution.kt
index 38358d6fbd1..b402eee0030 100644
--- a/java/kotlin-extractor/src/main/kotlin/utils/TypeSubstitution.kt
+++ b/java/kotlin-extractor/src/main/kotlin/utils/TypeSubstitution.kt
@@ -56,7 +56,7 @@ private fun IrSimpleType.substituteTypeArguments(substitutionMap: Map<IrTypePara
 
     return IrSimpleTypeImpl(
         classifier,
-        hasQuestionMark,
+        isNullable(),
         newArguments,
         annotations
     )
@@ -92,7 +92,7 @@ private fun subProjectedType(substitutionMap: Map<IrTypeParameterSymbol, IrTypeA
             if (conflictingVariance(outerVariance, substitutedTypeArg.variance))
                 IrStarProjectionImpl
             else {
-                val newProjectedType = substitutedTypeArg.type.let { if (t.hasQuestionMark) it.codeQlWithHasQuestionMark(true) else it }
+                val newProjectedType = substitutedTypeArg.type.let { if (t.isNullable()) it.codeQlWithHasQuestionMark(true) else it }
                 val newVariance = combineVariance(outerVariance, substitutedTypeArg.variance)
                 makeTypeProjection(newProjectedType, newVariance)
             }
@@ -196,7 +196,7 @@ fun IrTypeArgument.withQuestionMark(b: Boolean): IrTypeArgument =
         is IrStarProjection -> this
         is IrTypeProjection ->
             this.type.let { when(it) {
-                is IrSimpleType -> if (it.hasQuestionMark == b) this else makeTypeProjection(it.codeQlWithHasQuestionMark(b), this.variance)
+                is IrSimpleType -> if (it.isNullable() == b) this else makeTypeProjection(it.codeQlWithHasQuestionMark(b), this.variance)
                 else -> this
             }}
         else -> this

From 5cfed75e4c9a865eea056d033701c196ad0d8f7c Mon Sep 17 00:00:00 2001
From: Tom Hvitved <hvitved@github.com>
Date: Wed, 14 Sep 2022 16:18:54 +0200
Subject: [PATCH 176/203] Ruby: Fix bad join-order in DB upgrade script

Before
```
Evaluated relational algebra for predicate #select#query#ffffff@3e1dedi5 with tuple counts:
          30411461   ~0%    {6} r1 = locations_default AND NOT #select#query#ffffff#antijoin_rhs(Lhs.0, Lhs.1, Lhs.2, Lhs.3, Lhs.4, Lhs.5)

          30840645   ~4%    {2} r2 = SCAN #select#query#ffff OUTPUT In.0, In.3
            515559   ~1%    {3} r3 = JOIN r2 WITH #select#query#ffffff#join_rhs ON FIRST 1 OUTPUT Rhs.1, Lhs.0, Lhs.1
            515559   ~0%    {5} r4 = JOIN r3 WITH locations_default ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Lhs.2, Rhs.4, Rhs.5
        2397708060   ~0%    {9} r5 = JOIN r4 WITH locations_default_1023#join_rhs ON FIRST 1 OUTPUT Lhs.1, 0, Rhs.1, Lhs.2, Lhs.0, Lhs.3, Lhs.4, Rhs.2, Rhs.3
            515559   ~4%    {6} r6 = JOIN r5 WITH query#f0820431::body_statement#3#bff ON FIRST 3 OUTPUT Lhs.3, Lhs.4, Lhs.7, Lhs.8, Lhs.5, Lhs.6

          30927020   ~0%    {6} r7 = r1 UNION r6
                            return
```

After
```
Evaluated relational algebra for predicate #select#query#ffffff@8810e071 with tuple counts:
        30411461   ~0%    {6} r1 = #select#query#ffffff#shared AND NOT #select#query#ffffff#antijoin_rhs(Lhs.0, Lhs.1, Lhs.2, Lhs.3, Lhs.4, Lhs.5)

        30840645   ~4%    {2} r2 = SCAN #select#query#ffff OUTPUT In.0, In.3
          515559   ~1%    {3} r3 = JOIN r2 WITH #select#query#ffffff#join_rhs ON FIRST 1 OUTPUT Rhs.1, Lhs.0, Lhs.1
          515559   ~0%    {6} r4 = JOIN r3 WITH locations_default ON FIRST 1 OUTPUT Lhs.1, 0, Lhs.2, Rhs.1, Rhs.4, Rhs.5
          515559   ~0%    {5} r5 = JOIN r4 WITH query#f0820431::body_statement#3#bff ON FIRST 2 OUTPUT Rhs.2, Lhs.3, Lhs.2, Lhs.4, Lhs.5
          515559   ~0%    {6} r6 = JOIN r5 WITH locations_default ON FIRST 2 OUTPUT Lhs.1, Lhs.2, Lhs.3, Lhs.4, Rhs.2, Rhs.3
          515559   ~4%    {6} r7 = JOIN r6 WITH files ON FIRST 1 OUTPUT Lhs.1, Lhs.0, Lhs.4, Lhs.5, Lhs.2, Lhs.3

        30927020   ~0%    {6} r8 = r1 UNION r7
                          return r8
```
---
 .../locations_default.ql                                      | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/locations_default.ql b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/locations_default.ql
index 7300d50b097..e98f74d7bf1 100644
--- a/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/locations_default.ql
+++ b/ruby/ql/lib/upgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d/locations_default.ql
@@ -58,11 +58,11 @@ where
     ruby_ast_node_info(node, _, _, loc) and
     exists(Location first |
       body_statement(node, 0, first) and
-      locations_default(first, file, start_line, start_column, _, _)
+      locations_default(first, pragma[only_bind_into](file), start_line, start_column, _, _)
     ) and
     exists(Location last |
       last = max(Location l, int i | body_statement(node, i, l) | l order by i) and
-      locations_default(last, file, _, _, end_line, end_column)
+      locations_default(last, pragma[only_bind_into](file), _, _, end_line, end_column)
     )
   )
 select loc, file, start_line, start_column, end_line, end_column

From 25b4d485b48ea4fb592a67a1dd4a424ee0fd41d5 Mon Sep 17 00:00:00 2001
From: Chris Smowton <smowton@github.com>
Date: Fri, 26 Aug 2022 15:51:44 +0100
Subject: [PATCH 177/203] Java: Add test regarding the type of an implicit
 `this` expression

---
 .../implicit-this-type/Test.java              | 83 +++++++++++++++++++
 .../implicit-this-type/test.expected          | 20 +++++
 .../library-tests/implicit-this-type/test.ql  |  5 ++
 3 files changed, 108 insertions(+)
 create mode 100644 java/ql/test/library-tests/implicit-this-type/Test.java
 create mode 100644 java/ql/test/library-tests/implicit-this-type/test.expected
 create mode 100644 java/ql/test/library-tests/implicit-this-type/test.ql

diff --git a/java/ql/test/library-tests/implicit-this-type/Test.java b/java/ql/test/library-tests/implicit-this-type/Test.java
new file mode 100644
index 00000000000..0eff32dddaf
--- /dev/null
+++ b/java/ql/test/library-tests/implicit-this-type/Test.java
@@ -0,0 +1,83 @@
+class Gen<T> {
+  void m(T t) { }
+}
+
+class SubSpec extends Gen<String> {
+  void foo() {
+    m("direct implicit this");
+    this.m("direct explicit this");
+  }
+
+  class Inner {
+    void bar() {
+      m("direct implicit this from inner");
+      SubSpec.this.m("direct explicit this from inner");
+    }
+  }
+
+  void hasLocal() {
+    class Local {
+      void baz() {
+        m("direct implicit this from local");
+        SubSpec.this.m("direct explicit this from local");
+      }
+    }
+  }
+}
+
+class SubGen<S> extends Gen<S> {
+  void foo() {
+    m((S)"direct implicit this (generic sub)");
+    this.m((S)"direct explicit this (generic sub)");
+  }
+
+  class Inner {
+    void bar() {
+      m((S)"direct implicit this from inner (generic sub)");
+      SubGen.this.m((S)"direct explicit this from inner (generic sub)");
+    }
+  }
+}
+
+class Intermediate<S> extends Gen<S> { }
+
+class GrandchildSpec extends Intermediate<String> {
+  void foo() {
+    m("indirect implicit this");
+    this.m("indirect explicit this");
+  }
+
+  class Inner {
+    void bar() {
+      m("indirect implicit this from inner");
+      GrandchildSpec.this.m("indirect explicit this from inner");
+    }
+  }
+}
+
+class GrandchildGen<R> extends Intermediate<R> {
+  void foo() {
+    m((R)"indirect implicit this (generic sub)");
+    this.m((R)"indirect explicit this (generic sub)");
+  }
+
+  class Inner {
+    void bar() {
+      m((R)"indirect implicit this from inner (generic sub)");
+      GrandchildGen.this.m((R)"indirect explicit this from inner (generic sub)");
+    }
+  }
+}
+
+class UninvolvedOuter {
+  class InnerGen<T> {
+    void m(T t) { }
+  }
+  
+  class InnerSpec extends InnerGen<String> {
+    void foo() {
+      m("direct implicit this, from inner to inner");
+      this.m("direct explicit this, from inner to inner");
+    }
+  }
+}
diff --git a/java/ql/test/library-tests/implicit-this-type/test.expected b/java/ql/test/library-tests/implicit-this-type/test.expected
new file mode 100644
index 00000000000..3ce0796397b
--- /dev/null
+++ b/java/ql/test/library-tests/implicit-this-type/test.expected
@@ -0,0 +1,20 @@
+| Test.java:7:5:7:29 | m(...) | Test.java:7:7:7:28 | "direct implicit this" | Gen.class:0:0:0:0 | m | Gen.class:0:0:0:0 | Gen<String> |
+| Test.java:8:5:8:34 | m(...) | Test.java:8:12:8:33 | "direct explicit this" | Gen.class:0:0:0:0 | m | Gen.class:0:0:0:0 | Gen<String> |
+| Test.java:13:7:13:42 | m(...) | Test.java:13:9:13:41 | "direct implicit this from inner" | Gen.class:0:0:0:0 | m | Gen.class:0:0:0:0 | Gen<String> |
+| Test.java:14:7:14:55 | m(...) | Test.java:14:22:14:54 | "direct explicit this from inner" | Gen.class:0:0:0:0 | m | Gen.class:0:0:0:0 | Gen<String> |
+| Test.java:21:9:21:44 | m(...) | Test.java:21:11:21:43 | "direct implicit this from local" | Gen.class:0:0:0:0 | m | Gen.class:0:0:0:0 | Gen<String> |
+| Test.java:22:9:22:57 | m(...) | Test.java:22:24:22:56 | "direct explicit this from local" | Gen.class:0:0:0:0 | m | Gen.class:0:0:0:0 | Gen<String> |
+| Test.java:30:5:30:46 | m(...) | Test.java:30:10:30:45 | "direct implicit this (generic sub)" | Gen.class:0:0:0:0 | m | Gen.class:0:0:0:0 | Gen<S> |
+| Test.java:31:5:31:51 | m(...) | Test.java:31:15:31:50 | "direct explicit this (generic sub)" | Gen.class:0:0:0:0 | m | Gen.class:0:0:0:0 | Gen<S> |
+| Test.java:36:7:36:59 | m(...) | Test.java:36:12:36:58 | "direct implicit this from inner (generic sub)" | Gen.class:0:0:0:0 | m | Gen.class:0:0:0:0 | Gen<S> |
+| Test.java:37:7:37:71 | m(...) | Test.java:37:24:37:70 | "direct explicit this from inner (generic sub)" | Gen.class:0:0:0:0 | m | Gen.class:0:0:0:0 | Gen<S> |
+| Test.java:46:5:46:31 | m(...) | Test.java:46:7:46:30 | "indirect implicit this" | Gen.class:0:0:0:0 | m | Gen.class:0:0:0:0 | Gen<String> |
+| Test.java:47:5:47:36 | m(...) | Test.java:47:12:47:35 | "indirect explicit this" | Gen.class:0:0:0:0 | m | Gen.class:0:0:0:0 | Gen<String> |
+| Test.java:52:7:52:44 | m(...) | Test.java:52:9:52:43 | "indirect implicit this from inner" | Gen.class:0:0:0:0 | m | Gen.class:0:0:0:0 | Gen<String> |
+| Test.java:53:7:53:64 | m(...) | Test.java:53:29:53:63 | "indirect explicit this from inner" | Gen.class:0:0:0:0 | m | Gen.class:0:0:0:0 | Gen<String> |
+| Test.java:60:5:60:48 | m(...) | Test.java:60:10:60:47 | "indirect implicit this (generic sub)" | Gen.class:0:0:0:0 | m | Gen.class:0:0:0:0 | Gen<R> |
+| Test.java:61:5:61:53 | m(...) | Test.java:61:15:61:52 | "indirect explicit this (generic sub)" | Gen.class:0:0:0:0 | m | Gen.class:0:0:0:0 | Gen<R> |
+| Test.java:66:7:66:61 | m(...) | Test.java:66:12:66:60 | "indirect implicit this from inner (generic sub)" | Gen.class:0:0:0:0 | m | Gen.class:0:0:0:0 | Gen<R> |
+| Test.java:67:7:67:80 | m(...) | Test.java:67:31:67:79 | "indirect explicit this from inner (generic sub)" | Gen.class:0:0:0:0 | m | Gen.class:0:0:0:0 | Gen<R> |
+| Test.java:79:7:79:52 | m(...) | Test.java:79:9:79:51 | "direct implicit this, from inner to inner" | UninvolvedOuter$InnerGen.class:0:0:0:0 | m | UninvolvedOuter$InnerGen.class:0:0:0:0 | InnerGen<String> |
+| Test.java:80:7:80:57 | m(...) | Test.java:80:14:80:56 | "direct explicit this, from inner to inner" | UninvolvedOuter$InnerGen.class:0:0:0:0 | m | UninvolvedOuter$InnerGen.class:0:0:0:0 | InnerGen<String> |
diff --git a/java/ql/test/library-tests/implicit-this-type/test.ql b/java/ql/test/library-tests/implicit-this-type/test.ql
new file mode 100644
index 00000000000..f3b1774ff6b
--- /dev/null
+++ b/java/ql/test/library-tests/implicit-this-type/test.ql
@@ -0,0 +1,5 @@
+import java
+
+from MethodAccess ma
+select ma, ma.getAnArgument().getAChildExpr*().(StringLiteral), ma.getCallee(),
+  ma.getCallee().getDeclaringType()

From 3bdccb38b6bedc15e2327f0a8eec4fa06462508f Mon Sep 17 00:00:00 2001
From: Chris Smowton <smowton@github.com>
Date: Wed, 14 Sep 2022 16:18:34 +0100
Subject: [PATCH 178/203] Adapt inner-class-could-be-static query now that
 specialised methods are callable via an implicit `this` qualifier.

Previously such a call always targeted the unbound method, so we checked for an inherited method that could be a specialisation thereof; now we expect it should be directly inherited.
---
 java/ql/src/Performance/InnerClassCouldBeStatic.ql | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/ql/src/Performance/InnerClassCouldBeStatic.ql b/java/ql/src/Performance/InnerClassCouldBeStatic.ql
index 02ca5544da2..67ee835b747 100644
--- a/java/ql/src/Performance/InnerClassCouldBeStatic.ql
+++ b/java/ql/src/Performance/InnerClassCouldBeStatic.ql
@@ -78,7 +78,7 @@ RefType enclosingInstanceAccess(Expr expr) {
       result = ma.getMethod().getDeclaringType() and
       not exists(ma.getQualifier()) and
       not ma.getMethod().isStatic() and
-      not exists(Method m | m.getSourceDeclaration() = ma.getMethod() | enclosing.inherits(m))
+      not enclosing.inherits(ma.getMethod())
     )
   )
 }

From c149754c6b6f4d8d87a63d1f8f2ab4c78ad24ae0 Mon Sep 17 00:00:00 2001
From: Chris Smowton <smowton@github.com>
Date: Wed, 14 Sep 2022 17:09:47 +0100
Subject: [PATCH 179/203] Fix java/iterator-remove-failure to handle calls to
 specialised generic functions

---
 .../Collections/IteratorRemoveMayFail.ql         |  8 ++++----
 .../IteratorRemoveMayFail.expected               |  1 +
 .../query-tests/IteratorRemoveMayFail/Test.java  | 16 ++++++++++++++++
 3 files changed, 21 insertions(+), 4 deletions(-)

diff --git a/java/ql/src/Likely Bugs/Collections/IteratorRemoveMayFail.ql b/java/ql/src/Likely Bugs/Collections/IteratorRemoveMayFail.ql
index b350eecae7f..46b7c599f24 100644
--- a/java/ql/src/Likely Bugs/Collections/IteratorRemoveMayFail.ql	
+++ b/java/ql/src/Likely Bugs/Collections/IteratorRemoveMayFail.ql	
@@ -36,11 +36,11 @@ predicate containsSpecialCollection(Expr e, SpecialCollectionCreation origin) {
   or
   exists(Call c, int i |
     containsSpecialCollection(c.getArgument(i), origin) and
-    e = c.getCallee().getParameter(i).getAnAccess()
+    e = c.getCallee().getSourceDeclaration().getParameter(i).getAnAccess()
   )
   or
   exists(Call c, ReturnStmt r | e = c |
-    r.getEnclosingCallable() = c.getCallee() and
+    r.getEnclosingCallable() = c.getCallee().getSourceDeclaration() and
     containsSpecialCollection(r.getResult(), origin)
   )
 }
@@ -58,11 +58,11 @@ predicate iterOfSpecialCollection(Expr e, SpecialCollectionCreation origin) {
   or
   exists(Call c, int i |
     iterOfSpecialCollection(c.getArgument(i), origin) and
-    e = c.getCallee().getParameter(i).getAnAccess()
+    e = c.getCallee().getSourceDeclaration().getParameter(i).getAnAccess()
   )
   or
   exists(Call c, ReturnStmt r | e = c |
-    r.getEnclosingCallable() = c.getCallee() and
+    r.getEnclosingCallable() = c.getCallee().getSourceDeclaration() and
     iterOfSpecialCollection(r.getResult(), origin)
   )
 }
diff --git a/java/ql/test/query-tests/IteratorRemoveMayFail/IteratorRemoveMayFail.expected b/java/ql/test/query-tests/IteratorRemoveMayFail/IteratorRemoveMayFail.expected
index 8509ce7dde7..85653b45351 100644
--- a/java/ql/test/query-tests/IteratorRemoveMayFail/IteratorRemoveMayFail.expected
+++ b/java/ql/test/query-tests/IteratorRemoveMayFail/IteratorRemoveMayFail.expected
@@ -1,2 +1,3 @@
 | Test.java:16:5:16:17 | remove(...) | This call may fail when iterating over the collection created $@, since it does not support element removal. | Test.java:29:16:29:32 | asList(...) | here |
 | Test.java:16:5:16:17 | remove(...) | This call may fail when iterating over the collection created $@, since it does not support element removal. | Test.java:33:16:33:43 | singletonList(...) | here |
+| Test.java:44:3:44:23 | remove(...) | This call may fail when iterating over the collection created $@, since it does not support element removal. | Test.java:52:15:52:31 | asList(...) | here |
diff --git a/java/ql/test/query-tests/IteratorRemoveMayFail/Test.java b/java/ql/test/query-tests/IteratorRemoveMayFail/Test.java
index 782c1d3b565..3ed2c563327 100644
--- a/java/ql/test/query-tests/IteratorRemoveMayFail/Test.java
+++ b/java/ql/test/query-tests/IteratorRemoveMayFail/Test.java
@@ -36,4 +36,20 @@ class A {
 	public List<Integer> getL() {
 		return l;
 	}
+}
+
+class Parent<T> {
+
+	public void removeFirst(List<T> l) {
+		l.iterator().remove();
+	}
+
+}
+
+class Child extends Parent<String> {
+
+	public void test(String... ss) {
+		removeFirst(Arrays.asList(ss));
+	}
+
 }
\ No newline at end of file

From da04673cb04f6408a38d02c1745d31a575c32e48 Mon Sep 17 00:00:00 2001
From: Chris Smowton <smowton@github.com>
Date: Wed, 14 Sep 2022 20:52:43 +0100
Subject: [PATCH 180/203] Fix query java/internal-representation-exposure
 regarding generic callees, and add a test

---
 .../ExposeRepresentation.ql                   |  4 +-
 .../ExposeRepresentation.expected             |  7 +++
 .../ExposeRepresentation.qlref                |  1 +
 .../ExposeRepresentation/ExposesRep.java      | 30 +++++++++++++
 .../ExposeRepresentation/User.java            | 45 +++++++++++++++++++
 5 files changed, 85 insertions(+), 2 deletions(-)
 create mode 100644 java/ql/test/query-tests/ExposeRepresentation/ExposeRepresentation.expected
 create mode 100644 java/ql/test/query-tests/ExposeRepresentation/ExposeRepresentation.qlref
 create mode 100644 java/ql/test/query-tests/ExposeRepresentation/ExposesRep.java
 create mode 100644 java/ql/test/query-tests/ExposeRepresentation/User.java

diff --git a/java/ql/src/Violations of Best Practice/Implementation Hiding/ExposeRepresentation.ql b/java/ql/src/Violations of Best Practice/Implementation Hiding/ExposeRepresentation.ql
index 817634f7d2c..8fe3d4e6ba6 100644
--- a/java/ql/src/Violations of Best Practice/Implementation Hiding/ExposeRepresentation.ql	
+++ b/java/ql/src/Violations of Best Practice/Implementation Hiding/ExposeRepresentation.ql	
@@ -72,7 +72,7 @@ predicate mayWriteToArray(Expr modified) {
   // return __array__;    ...  method()[1] = 0
   exists(ReturnStmt rs | modified = rs.getResult() and relevantType(modified.getType()) |
     exists(Callable enclosing, MethodAccess ma |
-      enclosing = rs.getEnclosingCallable() and ma.getMethod() = enclosing
+      enclosing = rs.getEnclosingCallable() and ma.getMethod().getSourceDeclaration() = enclosing
     |
       mayWriteToArray(ma)
     )
@@ -100,7 +100,7 @@ VarAccess varPassedInto(Callable c, int i) {
 predicate exposesByReturn(Callable c, Field f, Expr why, string whyText) {
   returnsArray(c, f) and
   exists(MethodAccess ma |
-    ma.getMethod() = c and ma.getCompilationUnit() != c.getCompilationUnit()
+    ma.getMethod().getSourceDeclaration() = c and ma.getCompilationUnit() != c.getCompilationUnit()
   |
     mayWriteToArray(ma) and
     why = ma and
diff --git a/java/ql/test/query-tests/ExposeRepresentation/ExposeRepresentation.expected b/java/ql/test/query-tests/ExposeRepresentation/ExposeRepresentation.expected
new file mode 100644
index 00000000000..0056c25bb53
--- /dev/null
+++ b/java/ql/test/query-tests/ExposeRepresentation/ExposeRepresentation.expected
@@ -0,0 +1,7 @@
+| ExposesRep.java:11:19:11:28 | getStrings | getStrings exposes the internal representation stored in field strings. The value may be modified $@. | User.java:5:5:5:19 | User.java:5:5:5:19 | after this call to getStrings |
+| ExposesRep.java:11:19:11:28 | getStrings | getStrings exposes the internal representation stored in field strings. The value may be modified $@. | User.java:13:12:13:26 | User.java:13:12:13:26 | after this call to getStrings |
+| ExposesRep.java:11:19:11:28 | getStrings | getStrings exposes the internal representation stored in field strings. The value may be modified $@. | User.java:38:12:38:26 | User.java:38:12:38:26 | after this call to getStrings |
+| ExposesRep.java:13:30:13:41 | getStringMap | getStringMap exposes the internal representation stored in field stringMap. The value may be modified $@. | User.java:9:5:9:21 | User.java:9:5:9:21 | after this call to getStringMap |
+| ExposesRep.java:17:15:17:24 | setStrings | setStrings exposes the internal representation stored in field strings. The value may be modified $@. | User.java:22:5:22:6 | User.java:22:5:22:6 | through the variable ss |
+| ExposesRep.java:21:15:21:26 | setStringMap | setStringMap exposes the internal representation stored in field stringMap. The value may be modified $@. | User.java:27:5:27:5 | User.java:27:5:27:5 | through the variable m |
+| ExposesRep.java:29:14:29:21 | getArray | getArray exposes the internal representation stored in field array. The value may be modified $@. | User.java:31:5:31:18 | User.java:31:5:31:18 | after this call to getArray |
diff --git a/java/ql/test/query-tests/ExposeRepresentation/ExposeRepresentation.qlref b/java/ql/test/query-tests/ExposeRepresentation/ExposeRepresentation.qlref
new file mode 100644
index 00000000000..6452bb942d2
--- /dev/null
+++ b/java/ql/test/query-tests/ExposeRepresentation/ExposeRepresentation.qlref
@@ -0,0 +1 @@
+Violations of Best Practice/Implementation Hiding/ExposeRepresentation.ql
diff --git a/java/ql/test/query-tests/ExposeRepresentation/ExposesRep.java b/java/ql/test/query-tests/ExposeRepresentation/ExposesRep.java
new file mode 100644
index 00000000000..11cf4456788
--- /dev/null
+++ b/java/ql/test/query-tests/ExposeRepresentation/ExposesRep.java
@@ -0,0 +1,30 @@
+import java.util.Map;
+
+public class ExposesRep {
+  private String[] strings;
+  private Map<String, String> stringMap;
+
+  public ExposesRep() {
+    strings = new String[1];
+  }
+
+  public String[] getStrings() { return strings; }
+
+  public Map<String, String> getStringMap() {
+    return stringMap;
+  }
+
+  public void setStrings(String[] ss) {
+    this.strings = ss;
+  }
+
+  public void setStringMap(Map<String, String> m) {
+    this.stringMap = m;
+  }
+}
+
+class GenericExposesRep<T> {
+  private T[] array;
+
+  public T[] getArray() { return array; }
+}
diff --git a/java/ql/test/query-tests/ExposeRepresentation/User.java b/java/ql/test/query-tests/ExposeRepresentation/User.java
new file mode 100644
index 00000000000..e13580cfa32
--- /dev/null
+++ b/java/ql/test/query-tests/ExposeRepresentation/User.java
@@ -0,0 +1,45 @@
+import java.util.Map;
+
+public class User {
+  public static void test1(ExposesRep er) {
+    er.getStrings()[0] = "Hello world";
+  }
+
+  public static void test2(ExposesRep er) {
+    er.getStringMap().put("Hello", "world");
+  }
+
+  public String[] indirectGetStrings(ExposesRep er) {
+    return er.getStrings();
+  }
+
+  public void test3(ExposesRep er) {
+    indirectGetStrings(er)[0] = "Hello world";
+  }
+
+  public static void test4(ExposesRep er, String[] ss) {
+    er.setStrings(ss);
+    ss[0] = "Hello world";
+  }
+
+  public static void test5(ExposesRep er, Map<String, String> m) {
+    er.setStringMap(m);
+    m.put("Hello", "world");
+  }
+
+  public static void test6(GenericExposesRep<String> ger) {
+    ger.getArray()[0] = "Hello world";
+  }
+}
+
+class GenericUser<T> {
+
+  public String[] indirectGetStrings(ExposesRep er) {
+    return er.getStrings();
+  }
+
+  public static void test1(ExposesRep er, GenericUser<String> gu) {
+    gu.indirectGetStrings(er)[0] = "Hello world";
+  }
+
+}

From b926bc9efae4c6b1b013ef1d4a550b6ed6b6513e Mon Sep 17 00:00:00 2001
From: Chris Smowton <smowton@github.com>
Date: Wed, 14 Sep 2022 21:23:04 +0100
Subject: [PATCH 181/203] Fix and add test for java/subtle-inherited-call
 involving inheritence from generic types

---
 .../Naming Conventions/AmbiguousOuterSuper.ql |  2 +-
 .../AmbiguousOuterSuper.expected              |  2 ++
 .../AmbiguousOuterSuper.qlref                 |  1 +
 .../AmbiguousOuterSuper/GenericTest.java      | 19 +++++++++++++++++++
 .../query-tests/AmbiguousOuterSuper/Test.java | 19 +++++++++++++++++++
 5 files changed, 42 insertions(+), 1 deletion(-)
 create mode 100644 java/ql/test/query-tests/AmbiguousOuterSuper/AmbiguousOuterSuper.expected
 create mode 100644 java/ql/test/query-tests/AmbiguousOuterSuper/AmbiguousOuterSuper.qlref
 create mode 100644 java/ql/test/query-tests/AmbiguousOuterSuper/GenericTest.java
 create mode 100644 java/ql/test/query-tests/AmbiguousOuterSuper/Test.java

diff --git a/java/ql/src/Violations of Best Practice/Naming Conventions/AmbiguousOuterSuper.ql b/java/ql/src/Violations of Best Practice/Naming Conventions/AmbiguousOuterSuper.ql
index ec71b1207fa..f4161160303 100644
--- a/java/ql/src/Violations of Best Practice/Naming Conventions/AmbiguousOuterSuper.ql	
+++ b/java/ql/src/Violations of Best Practice/Naming Conventions/AmbiguousOuterSuper.ql	
@@ -27,7 +27,7 @@ predicate callToInheritedMethod(RefType lexicalScope, MethodAccess ma, string si
   not ma.getMethod().isStatic() and
   not ma.hasQualifier() and
   ma.getEnclosingCallable().getDeclaringType() = lexicalScope and
-  nestedSupertypePlus(lexicalScope).getAMethod() = ma.getMethod() and
+  nestedSupertypePlus(lexicalScope).getAMethod() = ma.getMethod().getSourceDeclaration() and
   signature = ma.getMethod().getSignature()
 }
 
diff --git a/java/ql/test/query-tests/AmbiguousOuterSuper/AmbiguousOuterSuper.expected b/java/ql/test/query-tests/AmbiguousOuterSuper/AmbiguousOuterSuper.expected
new file mode 100644
index 00000000000..e8c6ba5752a
--- /dev/null
+++ b/java/ql/test/query-tests/AmbiguousOuterSuper/AmbiguousOuterSuper.expected
@@ -0,0 +1,2 @@
+| GenericTest.java:14:7:14:9 | f(...) | A $@ is called instead of a $@. | GenericTest.class:0:0:0:0 | f | method declared in a superclass | GenericTest.java:9:8:9:8 | f | method with the same signature in an enclosing class |
+| Test.java:14:7:14:9 | f(...) | A $@ is called instead of a $@. | Test.java:3:8:3:8 | f | method declared in a superclass | Test.java:9:8:9:8 | f | method with the same signature in an enclosing class |
diff --git a/java/ql/test/query-tests/AmbiguousOuterSuper/AmbiguousOuterSuper.qlref b/java/ql/test/query-tests/AmbiguousOuterSuper/AmbiguousOuterSuper.qlref
new file mode 100644
index 00000000000..70c62b8c851
--- /dev/null
+++ b/java/ql/test/query-tests/AmbiguousOuterSuper/AmbiguousOuterSuper.qlref
@@ -0,0 +1 @@
+Violations of Best Practice/Naming Conventions/AmbiguousOuterSuper.ql
\ No newline at end of file
diff --git a/java/ql/test/query-tests/AmbiguousOuterSuper/GenericTest.java b/java/ql/test/query-tests/AmbiguousOuterSuper/GenericTest.java
new file mode 100644
index 00000000000..f0d14dc4867
--- /dev/null
+++ b/java/ql/test/query-tests/AmbiguousOuterSuper/GenericTest.java
@@ -0,0 +1,19 @@
+public class GenericTest<T> {
+
+  void f() { }
+
+}
+
+class Outer2 {
+
+  void f() { }
+
+  class Inner<T> extends GenericTest<T> {
+
+    public void test() {
+      f();
+    }
+
+  }
+
+}
diff --git a/java/ql/test/query-tests/AmbiguousOuterSuper/Test.java b/java/ql/test/query-tests/AmbiguousOuterSuper/Test.java
new file mode 100644
index 00000000000..e2a506f1438
--- /dev/null
+++ b/java/ql/test/query-tests/AmbiguousOuterSuper/Test.java
@@ -0,0 +1,19 @@
+public class Test {
+
+  void f() { }
+
+}
+
+class Outer {
+
+  void f() { }
+
+  class Inner extends Test {
+
+    public void test() {
+      f();
+    }
+
+  }
+
+}

From 20d78972f58c7c39f5305e95d5bf010f53a38dcf Mon Sep 17 00:00:00 2001
From: Sebastian Bauersfeld <>
Date: Thu, 15 Sep 2022 16:44:36 +0700
Subject: [PATCH 182/203] Address review comments.

---
 .../code/java/dataflow/ExternalFlow.qll       |  5 --
 .../CWE/CWE-022/TaintedPathCommon.qll         | 13 ++++
 .../CWE-022/semmle/tests/TaintedPath.expected | 73 +++++--------------
 .../security/CWE-022/semmle/tests/Test.java   | 10 ++-
 4 files changed, 37 insertions(+), 64 deletions(-)

diff --git a/java/ql/lib/semmle/code/java/dataflow/ExternalFlow.qll b/java/ql/lib/semmle/code/java/dataflow/ExternalFlow.qll
index 899832e339f..6ee18ccb9cf 100644
--- a/java/ql/lib/semmle/code/java/dataflow/ExternalFlow.qll
+++ b/java/ql/lib/semmle/code/java/dataflow/ExternalFlow.qll
@@ -401,11 +401,6 @@ private class SummaryModelCsvBase extends SummaryModelCsv {
         "java.io;File;false;File;;;Argument[0];Argument[-1];taint;manual",
         "java.io;File;false;File;;;Argument[1];Argument[-1];taint;manual",
         "java.net;URI;false;URI;(String);;Argument[0];Argument[-1];taint;manual",
-        "java.net;URI;false;URI;(String,String,String);;Argument[0..2];Argument[-1];taint;manual",
-        "java.net;URI;false;URI;(String,String,String,int,String,String,String);;Argument[0..2];Argument[-1];taint;manual",
-        "java.net;URI;false;URI;(String,String,String,int,String,String,String);;Argument[4..6];Argument[-1];taint;manual",
-        "java.net;URI;false;URI;(String,String,String,String);;Argument[0..3];Argument[-1];taint;manual",
-        "java.net;URI;false;URI;(String,String,String,String,String);;Argument[0..4];Argument[-1];taint;manual",
         "java.net;URL;false;URL;(String);;Argument[0];Argument[-1];taint;manual",
         "javax.xml.transform.stream;StreamSource;false;StreamSource;;;Argument[0];Argument[-1];taint;manual",
         "javax.xml.transform.sax;SAXSource;false;SAXSource;(InputSource);;Argument[0];Argument[-1];taint;manual",
diff --git a/java/ql/src/Security/CWE/CWE-022/TaintedPathCommon.qll b/java/ql/src/Security/CWE/CWE-022/TaintedPathCommon.qll
index beea2d5f666..b9a5d8560ae 100644
--- a/java/ql/src/Security/CWE/CWE-022/TaintedPathCommon.qll
+++ b/java/ql/src/Security/CWE/CWE-022/TaintedPathCommon.qll
@@ -5,6 +5,19 @@
 import java
 import semmle.code.java.controlflow.Guards
 import semmle.code.java.security.PathCreation
+import semmle.code.java.dataflow.ExternalFlow
+
+class TaintedPathInjectionSummaries extends SummaryModelCsv {
+  override predicate row(string row) {
+    row =
+      [
+        "java.net;URI;false;URI;(String,String,String);;Argument[1];Argument[-1];taint;manual",
+        "java.net;URI;false;URI;(String,String,String,String);;Argument[1..2];Argument[-1];taint;manual",
+        "java.net;URI;false;URI;(String,String,String,String,String);;Argument[2];Argument[-1];taint;manual",
+        "java.net;URI;false;URI;(String,String,String,int,String,String,String);;Argument[4];Argument[-1];taint;manual",
+      ]
+  }
+}
 
 private predicate inWeakCheck(Expr e) {
   // None of these are sufficient to guarantee that a string is safe.
diff --git a/java/ql/test/query-tests/security/CWE-022/semmle/tests/TaintedPath.expected b/java/ql/test/query-tests/security/CWE-022/semmle/tests/TaintedPath.expected
index b1fafe20d99..e9ca2f3eae8 100644
--- a/java/ql/test/query-tests/security/CWE-022/semmle/tests/TaintedPath.expected
+++ b/java/ql/test/query-tests/security/CWE-022/semmle/tests/TaintedPath.expected
@@ -9,42 +9,16 @@ edges
 | Test.java:80:31:80:32 | br : BufferedReader | Test.java:80:31:80:43 | readLine(...) : String |
 | Test.java:80:31:80:43 | readLine(...) : String | Test.java:82:67:82:81 | ... + ... |
 | Test.java:88:17:88:37 | getHostName(...) : String | Test.java:90:26:90:29 | temp |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:96:20:96:20 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:96:23:96:23 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:96:26:96:26 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:97:20:97:20 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:97:23:97:23 | t : String |
 | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:97:26:97:26 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:97:29:97:29 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:98:20:98:20 | t : String |
 | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:98:23:98:23 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:98:26:98:26 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:98:29:98:29 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:98:32:98:32 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:20:99:20 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:23:99:23 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:26:99:26 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:32:99:32 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:35:99:35 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:38:99:38 | t : String |
-| Test.java:96:20:96:20 | t : String | Test.java:96:12:96:27 | new URI(...) |
-| Test.java:96:23:96:23 | t : String | Test.java:96:12:96:27 | new URI(...) |
-| Test.java:96:26:96:26 | t : String | Test.java:96:12:96:27 | new URI(...) |
-| Test.java:97:20:97:20 | t : String | Test.java:97:12:97:30 | new URI(...) |
-| Test.java:97:23:97:23 | t : String | Test.java:97:12:97:30 | new URI(...) |
-| Test.java:97:26:97:26 | t : String | Test.java:97:12:97:30 | new URI(...) |
-| Test.java:97:29:97:29 | t : String | Test.java:97:12:97:30 | new URI(...) |
-| Test.java:98:20:98:20 | t : String | Test.java:98:12:98:33 | new URI(...) |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:29:99:29 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:100:32:100:32 | t : String |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:101:41:101:41 | t : String |
+| Test.java:97:26:97:26 | t : String | Test.java:97:12:97:33 | new URI(...) |
 | Test.java:98:23:98:23 | t : String | Test.java:98:12:98:33 | new URI(...) |
-| Test.java:98:26:98:26 | t : String | Test.java:98:12:98:33 | new URI(...) |
-| Test.java:98:29:98:29 | t : String | Test.java:98:12:98:33 | new URI(...) |
-| Test.java:98:32:98:32 | t : String | Test.java:98:12:98:33 | new URI(...) |
-| Test.java:99:20:99:20 | t : String | Test.java:99:12:99:39 | new URI(...) |
-| Test.java:99:23:99:23 | t : String | Test.java:99:12:99:39 | new URI(...) |
-| Test.java:99:26:99:26 | t : String | Test.java:99:12:99:39 | new URI(...) |
-| Test.java:99:32:99:32 | t : String | Test.java:99:12:99:39 | new URI(...) |
-| Test.java:99:35:99:35 | t : String | Test.java:99:12:99:39 | new URI(...) |
-| Test.java:99:38:99:38 | t : String | Test.java:99:12:99:39 | new URI(...) |
+| Test.java:99:29:99:29 | t : String | Test.java:99:12:99:33 | new URI(...) |
+| Test.java:100:32:100:32 | t : String | Test.java:100:12:100:45 | new URI(...) |
+| Test.java:101:41:101:41 | t : String | Test.java:101:12:101:54 | new URI(...) |
 nodes
 | Test.java:19:18:19:38 | getHostName(...) : String | semmle.label | getHostName(...) : String |
 | Test.java:24:20:24:23 | temp | semmle.label | temp |
@@ -60,28 +34,16 @@ nodes
 | Test.java:88:17:88:37 | getHostName(...) : String | semmle.label | getHostName(...) : String |
 | Test.java:90:26:90:29 | temp | semmle.label | temp |
 | Test.java:95:14:95:34 | getHostName(...) : String | semmle.label | getHostName(...) : String |
-| Test.java:96:12:96:27 | new URI(...) | semmle.label | new URI(...) |
-| Test.java:96:20:96:20 | t : String | semmle.label | t : String |
-| Test.java:96:23:96:23 | t : String | semmle.label | t : String |
-| Test.java:96:26:96:26 | t : String | semmle.label | t : String |
-| Test.java:97:12:97:30 | new URI(...) | semmle.label | new URI(...) |
-| Test.java:97:20:97:20 | t : String | semmle.label | t : String |
-| Test.java:97:23:97:23 | t : String | semmle.label | t : String |
+| Test.java:97:12:97:33 | new URI(...) | semmle.label | new URI(...) |
 | Test.java:97:26:97:26 | t : String | semmle.label | t : String |
-| Test.java:97:29:97:29 | t : String | semmle.label | t : String |
 | Test.java:98:12:98:33 | new URI(...) | semmle.label | new URI(...) |
-| Test.java:98:20:98:20 | t : String | semmle.label | t : String |
 | Test.java:98:23:98:23 | t : String | semmle.label | t : String |
-| Test.java:98:26:98:26 | t : String | semmle.label | t : String |
-| Test.java:98:29:98:29 | t : String | semmle.label | t : String |
-| Test.java:98:32:98:32 | t : String | semmle.label | t : String |
-| Test.java:99:12:99:39 | new URI(...) | semmle.label | new URI(...) |
-| Test.java:99:20:99:20 | t : String | semmle.label | t : String |
-| Test.java:99:23:99:23 | t : String | semmle.label | t : String |
-| Test.java:99:26:99:26 | t : String | semmle.label | t : String |
-| Test.java:99:32:99:32 | t : String | semmle.label | t : String |
-| Test.java:99:35:99:35 | t : String | semmle.label | t : String |
-| Test.java:99:38:99:38 | t : String | semmle.label | t : String |
+| Test.java:99:12:99:33 | new URI(...) | semmle.label | new URI(...) |
+| Test.java:99:29:99:29 | t : String | semmle.label | t : String |
+| Test.java:100:12:100:45 | new URI(...) | semmle.label | new URI(...) |
+| Test.java:100:32:100:32 | t : String | semmle.label | t : String |
+| Test.java:101:12:101:54 | new URI(...) | semmle.label | new URI(...) |
+| Test.java:101:41:101:41 | t : String | semmle.label | t : String |
 subpaths
 #select
 | Test.java:24:11:24:24 | new File(...) | Test.java:19:18:19:38 | getHostName(...) : String | Test.java:24:20:24:23 | temp | $@ flows to here and is used in a path. | Test.java:19:18:19:38 | getHostName(...) | User-provided value |
@@ -90,7 +52,8 @@ subpaths
 | Test.java:34:12:34:25 | new File(...) | Test.java:19:18:19:38 | getHostName(...) : String | Test.java:34:21:34:24 | temp | $@ flows to here and is used in a path. | Test.java:19:18:19:38 | getHostName(...) | User-provided value |
 | Test.java:82:52:82:88 | new FileWriter(...) | Test.java:79:74:79:97 | getInputStream(...) : ServletInputStream | Test.java:82:67:82:81 | ... + ... | $@ flows to here and is used in a path. | Test.java:79:74:79:97 | getInputStream(...) | User-provided value |
 | Test.java:90:26:90:29 | temp | Test.java:88:17:88:37 | getHostName(...) : String | Test.java:90:26:90:29 | temp | $@ flows to here and is used in a path. | Test.java:88:17:88:37 | getHostName(...) | User-provided value |
-| Test.java:96:3:96:28 | new File(...) | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:96:12:96:27 | new URI(...) | $@ flows to here and is used in a path. | Test.java:95:14:95:34 | getHostName(...) | User-provided value |
-| Test.java:97:3:97:31 | new File(...) | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:97:12:97:30 | new URI(...) | $@ flows to here and is used in a path. | Test.java:95:14:95:34 | getHostName(...) | User-provided value |
+| Test.java:97:3:97:34 | new File(...) | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:97:12:97:33 | new URI(...) | $@ flows to here and is used in a path. | Test.java:95:14:95:34 | getHostName(...) | User-provided value |
 | Test.java:98:3:98:34 | new File(...) | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:98:12:98:33 | new URI(...) | $@ flows to here and is used in a path. | Test.java:95:14:95:34 | getHostName(...) | User-provided value |
-| Test.java:99:3:99:40 | new File(...) | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:12:99:39 | new URI(...) | $@ flows to here and is used in a path. | Test.java:95:14:95:34 | getHostName(...) | User-provided value |
+| Test.java:99:3:99:34 | new File(...) | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:12:99:33 | new URI(...) | $@ flows to here and is used in a path. | Test.java:95:14:95:34 | getHostName(...) | User-provided value |
+| Test.java:100:3:100:46 | new File(...) | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:100:12:100:45 | new URI(...) | $@ flows to here and is used in a path. | Test.java:95:14:95:34 | getHostName(...) | User-provided value |
+| Test.java:101:3:101:55 | new File(...) | Test.java:95:14:95:34 | getHostName(...) : String | Test.java:101:12:101:54 | new URI(...) | $@ flows to here and is used in a path. | Test.java:95:14:95:34 | getHostName(...) | User-provided value |
diff --git a/java/ql/test/query-tests/security/CWE-022/semmle/tests/Test.java b/java/ql/test/query-tests/security/CWE-022/semmle/tests/Test.java
index 3723f05ff8b..46c3eeec001 100644
--- a/java/ql/test/query-tests/security/CWE-022/semmle/tests/Test.java
+++ b/java/ql/test/query-tests/security/CWE-022/semmle/tests/Test.java
@@ -93,9 +93,11 @@ class Test {
 	void doGet5(InetAddress address)
 	throws URISyntaxException {
 		String t = address.getHostName();
-		new File(new URI(t, t, t));
-		new File(new URI(t, t, t, t));
-		new File(new URI(t, t, t, t, t));
-		new File(new URI(t, t, t, 0, t, t, t));
+		// BAD: construct a file path with user input
+		new File(new URI(null, t, null));
+		new File(new URI(t, t, null, t));
+		new File(new URI(t, null, t, t));
+		new File(new URI(null, null, t, null, null));
+		new File(new URI(null, null, null, 0, t, null, null));
 	}
 }

From ce6109547b219618702652e787198acbb908a042 Mon Sep 17 00:00:00 2001
From: Paolo Tranquilli <redsun82@github.com>
Date: Thu, 15 Sep 2022 12:30:30 +0200
Subject: [PATCH 183/203] Bazel: only pass `-std=c++17` for C++ compilation

---
 .bazelrc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.bazelrc b/.bazelrc
index 9a58b60c3ef..a304a7b0e1a 100644
--- a/.bazelrc
+++ b/.bazelrc
@@ -1,3 +1,3 @@
-build --repo_env=CC=clang --repo_env=CXX=clang++ --copt="-std=c++17"
+build --repo_env=CC=clang --repo_env=CXX=clang++ --cxxopt="-std=c++17"
 
 try-import %workspace%/local.bazelrc

From 5a56bb97fc4688f532c0a9d081b4eb2d88df08b4 Mon Sep 17 00:00:00 2001
From: Chris Smowton <smowton@github.com>
Date: Thu, 15 Sep 2022 12:49:12 +0100
Subject: [PATCH 184/203] deprecated-call query: notice calls to methods of
 specialised generic classes

---
 .../Advisory/Deprecated Code/AvoidDeprecatedCallableAccess.ql   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/ql/src/Advisory/Deprecated Code/AvoidDeprecatedCallableAccess.ql b/java/ql/src/Advisory/Deprecated Code/AvoidDeprecatedCallableAccess.ql
index 354b82fe165..f20be6d7f34 100644
--- a/java/ql/src/Advisory/Deprecated Code/AvoidDeprecatedCallableAccess.ql	
+++ b/java/ql/src/Advisory/Deprecated Code/AvoidDeprecatedCallableAccess.ql	
@@ -20,7 +20,7 @@ private predicate isDeprecatedCallable(Callable c) {
 
 from Call ca, Callable c
 where
-  ca.getCallee() = c and
+  ca.getCallee().getSourceDeclaration() = c and
   isDeprecatedCallable(c) and
   // Exclude deprecated calls from within deprecated code.
   not isDeprecatedCallable(ca.getCaller())

From a4ae9a09f9b2306aaf82370f6c24b4d0dca902f4 Mon Sep 17 00:00:00 2001
From: Anders Schack-Mulligen <aschackmull@github.com>
Date: Thu, 15 Sep 2022 13:55:44 +0200
Subject: [PATCH 185/203] Java: Use MaD summaries for java.util.Hashtable.

---
 java/ql/lib/semmle/code/java/dispatch/VirtualDispatch.qll | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/java/ql/lib/semmle/code/java/dispatch/VirtualDispatch.qll b/java/ql/lib/semmle/code/java/dispatch/VirtualDispatch.qll
index dd1406ef352..56385e89877 100644
--- a/java/ql/lib/semmle/code/java/dispatch/VirtualDispatch.qll
+++ b/java/ql/lib/semmle/code/java/dispatch/VirtualDispatch.qll
@@ -106,6 +106,8 @@ private module Dispatch {
     t.hasQualifiedName("java.lang", "Cloneable")
     or
     t.getPackage().hasName("java.util") and t instanceof Interface
+    or
+    t.hasQualifiedName("java.util", "Hashtable")
   }
 
   /**

From 0e3821d3e3e9281783e2d720e4785a0d2d89dc7e Mon Sep 17 00:00:00 2001
From: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
Date: Thu, 15 Sep 2022 15:13:08 +0200
Subject: [PATCH 186/203] Apply suggestions from code review

Co-authored-by: yoff <lerchedahl@gmail.com>
---
 docs/ql-design-patterns.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/ql-design-patterns.md b/docs/ql-design-patterns.md
index e0ff4f57a41..b6d7eab88fc 100644
--- a/docs/ql-design-patterns.md
+++ b/docs/ql-design-patterns.md
@@ -59,8 +59,8 @@ Now, a concrete subclass can derive from `MySpecialExpr::Range` if it wants to e
 Let's use an example from the Python libraries: https://github.com/github/codeql/blob/46751e515c40c6b4c9b61758cc840eec1894a624/python/ql/lib/semmle/python/Concepts.qll#L601-L683
 
 `Escaping`, as the name suggests, models various APIs that escape meta-characters. It has a member-predicate `getKind()` that tells you what sort of escaping the modeled function does. For example, if the result of that predicate is `"html"`, then this means that the escaping function is meant to make things safe to embed inside HTML.
-`Escaping::Range` is subclassed to model various APIs, and `kind()` is implemented accordingly.
-But we can also subclass `Escaping` to, as in the above example, talk about all HTML-escaping functions.
+`Escaping::Range` is subclassed to model various APIs, and `kind()` is implemented accordingly (this typically happens in library models).
+But we can also subclass `Escaping`, as in the above example, where `HtmlEscaping` represents all HTML-escaping functions.
 
 You can, of course, do the same without the `::Range` pattern, but it's a little cumbersome:
 If you only had an `abstract class Escaping { ... }`, then `HtmlEscaping` would need to be implemented in a slightly tricky way to prevent it from extending `Escaping` (instead of refining it). You would have to give it a charpred `this instanceof Escaping`, which looks useless but isn't. And additionally, you'd have to provide trivial `none()` overrides of all the abstract predicates defined in `Escaping`. This is all pretty awkward, and we can avoid it by distinguishing between `Escaping` and `Escaping::Range`.

From 26099d6ab7acb12df6604b4be46450f004df37ed Mon Sep 17 00:00:00 2001
From: Philip Ginsbach <ginsbach@github.com>
Date: Thu, 15 Sep 2022 14:35:52 +0100
Subject: [PATCH 187/203] remove more upper-case variable names

---
 .../Architecture/General Class-Level Information/HubClasses.ql  | 2 +-
 cpp/ql/src/PointsTo/TaintedFormatStrings.ql                     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/cpp/ql/src/Architecture/General Class-Level Information/HubClasses.ql b/cpp/ql/src/Architecture/General Class-Level Information/HubClasses.ql
index f0e0b39754d..ca8d277cc91 100644
--- a/cpp/ql/src/Architecture/General Class-Level Information/HubClasses.ql	
+++ b/cpp/ql/src/Architecture/General Class-Level Information/HubClasses.ql	
@@ -12,5 +12,5 @@ import cpp
 
 from Class c
 where c.fromSource()
-select c as Class, c.getMetrics().getAfferentCoupling() as afferentCoupling,
+select c as class_, c.getMetrics().getAfferentCoupling() as afferentCoupling,
   c.getMetrics().getEfferentSourceCoupling() as efferentCoupling order by afferentCoupling desc
diff --git a/cpp/ql/src/PointsTo/TaintedFormatStrings.ql b/cpp/ql/src/PointsTo/TaintedFormatStrings.ql
index 1b671697573..929833f52a0 100644
--- a/cpp/ql/src/PointsTo/TaintedFormatStrings.ql
+++ b/cpp/ql/src/PointsTo/TaintedFormatStrings.ql
@@ -119,4 +119,4 @@ predicate potentialViolation(InputBuffer source, FormatBuffer dest) {
 
 from InputBuffer source, FormatBuffer dest
 where potentialViolation(source, dest)
-select dest.getFile() as File, dest as FormatString
+select dest.getFile() as file, dest as formatString

From 62b1091c1750e001f4363126d198b04cdb96f72b Mon Sep 17 00:00:00 2001
From: Tony Torralba <atorralba@users.noreply.github.com>
Date: Thu, 15 Sep 2022 16:30:12 +0200
Subject: [PATCH 188/203] Fix wrong packages in minor analysis change

---
 java/ql/lib/change-notes/released/0.3.4.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/ql/lib/change-notes/released/0.3.4.md b/java/ql/lib/change-notes/released/0.3.4.md
index 3fcd4f17053..4270abf9774 100644
--- a/java/ql/lib/change-notes/released/0.3.4.md
+++ b/java/ql/lib/change-notes/released/0.3.4.md
@@ -19,7 +19,7 @@
 
 ### Minor Analysis Improvements
 
-* Added new flow steps for the classes `java.io.Path` and `java.nio.Paths`.
+* Added new flow steps for the classes `java.nio.file.Path` and `java.nio.file.Paths`.
 * The class `AndroidFragment` now also models the Android Jetpack version of the `Fragment` class (`androidx.fragment.app.Fragment`).
 * Java 19 builds can now be extracted. There are no non-preview new language features in this release, so the only user-visible change is that the CodeQL extractor will now correctly trace compilations using the JDK 19 release of `javac`.
 * Classes and methods that are seen with several different paths during the extraction process (for example, packaged into different JAR files) now report an arbitrarily selected location via their `getLocation` and `hasLocationInfo` predicates, rather than reporting all of them. This may lead to reduced alert duplication.

From 88644b6e766ebfc1b0732db3f53a4e1588c1c521 Mon Sep 17 00:00:00 2001
From: Chris Smowton <smowton@github.com>
Date: Thu, 15 Sep 2022 15:22:04 +0100
Subject: [PATCH 189/203] Add change note

---
 .../change-notes/2022-09-15-implicit-this-generic-method.md   | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 java/ql/src/change-notes/2022-09-15-implicit-this-generic-method.md

diff --git a/java/ql/src/change-notes/2022-09-15-implicit-this-generic-method.md b/java/ql/src/change-notes/2022-09-15-implicit-this-generic-method.md
new file mode 100644
index 00000000000..be30188b05d
--- /dev/null
+++ b/java/ql/src/change-notes/2022-09-15-implicit-this-generic-method.md
@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* The Java extractor now populates the `Method` relating to a `MethodAccess` consistently for calls using an explicit and implicit `this` qualifier. Previously if the method `foo` was inherited from a specialised generic type `ParentType<String>`, then an explicit call `this.foo()` would yield a `MethodAccess` whose `getMethod()` accessor returned the bound method `ParentType<String>.foo`, whereas an implicitly-qualified `foo()` `MethodAccess`'s `getMethod()` would return the unbound method `ParentType.foo`. Now both scenarios produce a bound method. This means that all data-flow queries may return more results where a relevant path transits a call to such an implicitly-qualified call to a member method with a bound generic type, while queries that inspect the result of `MethodAccess.getMethod()` may need to tolerate bound generic methods in more circumstances. The queries `java/iterator-remove-failure`, `java/non-static-nested-class`, `java/internal-representation-exposure`, `java/subtle-inherited-call` and `java/deprecated-call` have been amended to properly handle calls to bound generic methods, and in some instances may now produce more results in the explicit-`this` case as well.

From c2bdb69476cf45c08e7b21d2f7cfd2cd3107c2f9 Mon Sep 17 00:00:00 2001
From: Philip Ginsbach <ginsbach@github.com>
Date: Thu, 15 Sep 2022 16:32:16 +0100
Subject: [PATCH 190/203] remove upper-case variable name

---
 .../ql/src/Architecture/Refactoring Opportunities/HubClasses.ql | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/ql/src/Architecture/Refactoring Opportunities/HubClasses.ql b/java/ql/src/Architecture/Refactoring Opportunities/HubClasses.ql
index d50e1d3b5d9..97101414527 100644
--- a/java/ql/src/Architecture/Refactoring Opportunities/HubClasses.ql	
+++ b/java/ql/src/Architecture/Refactoring Opportunities/HubClasses.ql	
@@ -19,6 +19,6 @@ where
   eff = t.getMetrics().getEfferentSourceCoupling() and
   aff > 15 and
   eff > 15
-select t as Class,
+select t as class_,
   "Hub class: this class depends on " + eff.toString() + " classes and is used by " + aff.toString()
     + " classes."

From d1df2aa4577dedc6d7ea59adbfdffcbebd420615 Mon Sep 17 00:00:00 2001
From: Philip Ginsbach <ginsbach@github.com>
Date: Thu, 15 Sep 2022 16:28:32 +0100
Subject: [PATCH 191/203] remove upper-case variable names

---
 .../ql/src/meta/extraction-metrics/FileData.ql   | 16 +++++++++-------
 .../src/meta/extraction-metrics/PhaseTimings.ql  |  4 ++--
 2 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/javascript/ql/src/meta/extraction-metrics/FileData.ql b/javascript/ql/src/meta/extraction-metrics/FileData.ql
index 3d5cbfed59f..bb689cb99cf 100644
--- a/javascript/ql/src/meta/extraction-metrics/FileData.ql
+++ b/javascript/ql/src/meta/extraction-metrics/FileData.ql
@@ -16,10 +16,12 @@ FileWithExtractionMetrics getACacheHit(FileWithExtractionMetrics f) {
   result.isFromCache()
 }
 
-from FileWithExtractionMetrics file, boolean fromCache
-where (if file.isFromCache() then fromCache = true else fromCache = false)
-select file.getAbsolutePath() as FILE, file.getCpuTime() as CPU_NANO,
-  file.getNumberOfLines() as LINES, count(Locatable n | n.getFile() = file) as LOCATABLES,
-  count(TypeAnnotation n | n.getFile() = file) as TYPES, file.getLength() as LENGTH,
-  fromCache as FROM_CACHE, count(getACacheMember(file.getCacheFile())) as CACHE_MEMBERS,
-  count(getACacheHit(file)) as CACHE_HITS, file.getCacheFile() as CACHE_FILE
+from FileWithExtractionMetrics fileWithMetrics, boolean fromCache
+where (if fileWithMetrics.isFromCache() then fromCache = true else fromCache = false)
+select fileWithMetrics.getAbsolutePath() as file, fileWithMetrics.getCpuTime() as cpu_nano,
+  fileWithMetrics.getNumberOfLines() as lines,
+  count(Locatable n | n.getFile() = fileWithMetrics) as locatables,
+  count(TypeAnnotation n | n.getFile() = fileWithMetrics) as types,
+  fileWithMetrics.getLength() as length, fromCache as from_cache,
+  count(getACacheMember(fileWithMetrics.getCacheFile())) as cache_members,
+  count(getACacheHit(fileWithMetrics)) as cache_hits, fileWithMetrics.getCacheFile() as cache_file
diff --git a/javascript/ql/src/meta/extraction-metrics/PhaseTimings.ql b/javascript/ql/src/meta/extraction-metrics/PhaseTimings.ql
index 20e4bab4d35..c67e2caab50 100644
--- a/javascript/ql/src/meta/extraction-metrics/PhaseTimings.ql
+++ b/javascript/ql/src/meta/extraction-metrics/PhaseTimings.ql
@@ -9,5 +9,5 @@
 import semmle.javascript.meta.ExtractionMetrics::ExtractionMetrics
 
 from PhaseName phaseName
-select phaseName, Aggregated::getCpuTime(phaseName) as CPU_NANO,
-  Aggregated::getWallclockTime(phaseName) as WALLCLOCK_NANO
+select phaseName, Aggregated::getCpuTime(phaseName) as cpu_nano,
+  Aggregated::getWallclockTime(phaseName) as wallclock_nano

From ac91b30ed021fa0fd690b9d27fb3b5d98bd1ecb6 Mon Sep 17 00:00:00 2001
From: erik-krogh <erik-krogh@github.com>
Date: Thu, 15 Sep 2022 20:48:12 +0200
Subject: [PATCH 192/203] recognize the names from all VarDefs

---
 ql/ql/src/codeql_ql/style/NodeName.qll | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ql/ql/src/codeql_ql/style/NodeName.qll b/ql/ql/src/codeql_ql/style/NodeName.qll
index af1d10076dd..e5384864f92 100644
--- a/ql/ql/src/codeql_ql/style/NodeName.qll
+++ b/ql/ql/src/codeql_ql/style/NodeName.qll
@@ -20,7 +20,7 @@ string getName(AstNode node, string kind) {
   result = node.(NewType).getName() and
   kind = "newtype"
   or
-  result = node.(VarDecl).getName() and
+  result = node.(VarDef).getName() and
   kind = "variable" and
   not node = any(FieldDecl f).getVarDecl()
   or

From 0e1aca547b92c1ac8e3590e8afc75940d02f5653 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Fri, 16 Sep 2022 00:23:05 +0000
Subject: [PATCH 193/203] Add changed framework coverage reports

---
 java/documentation/library-coverage/coverage.csv | 1 +
 java/documentation/library-coverage/coverage.rst | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/java/documentation/library-coverage/coverage.csv b/java/documentation/library-coverage/coverage.csv
index d3599459e66..029f1b41e91 100644
--- a/java/documentation/library-coverage/coverage.csv
+++ b/java/documentation/library-coverage/coverage.csv
@@ -7,6 +7,7 @@ android.os,,2,122,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,2,,,,41,81
 android.util,6,16,,,,,,,,,,,,6,,,,,,,,,,,,,,,,,,,,,,16,,
 android.webkit,3,2,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,3,,,,2,,
 android.widget,,1,1,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,1,,,1,
+androidx.core.app,6,,95,,,,,,,,,,,,,,,6,,,,,,,,,,,,,,,,,,,12,83
 androidx.slice,2,5,88,,,,,,,,,,,,,,,2,,,,,,,,,,,,,,,,,5,,27,61
 cn.hutool.core.codec,,,1,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,1,
 com.esotericsoftware.kryo.io,,,1,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,1,
diff --git a/java/documentation/library-coverage/coverage.rst b/java/documentation/library-coverage/coverage.rst
index 1d209ea05d2..a9b34147fbb 100644
--- a/java/documentation/library-coverage/coverage.rst
+++ b/java/documentation/library-coverage/coverage.rst
@@ -18,6 +18,6 @@ Java framework & library support
    Java Standard Library,``java.*``,3,585,130,28,,,7,,,10
    Java extensions,"``javax.*``, ``jakarta.*``",63,609,32,,,4,,1,1,2
    `Spring <https://spring.io/>`_,``org.springframework.*``,29,477,101,,,,19,14,,29
-   Others,"``androidx.slice``, ``cn.hutool.core.codec``, ``com.esotericsoftware.kryo.io``, ``com.esotericsoftware.kryo5.io``, ``com.fasterxml.jackson.core``, ``com.fasterxml.jackson.databind``, ``com.opensymphony.xwork2.ognl``, ``com.rabbitmq.client``, ``com.unboundid.ldap.sdk``, ``com.zaxxer.hikari``, ``flexjson``, ``groovy.lang``, ``groovy.util``, ``jodd.json``, ``kotlin``, ``net.sf.saxon.s9api``, ``ognl``, ``okhttp3``, ``org.apache.commons.codec``, ``org.apache.commons.jexl2``, ``org.apache.commons.jexl3``, ``org.apache.commons.logging``, ``org.apache.commons.ognl``, ``org.apache.directory.ldap.client.api``, ``org.apache.ibatis.jdbc``, ``org.apache.log4j``, ``org.apache.logging.log4j``, ``org.apache.shiro.codec``, ``org.apache.shiro.jndi``, ``org.codehaus.groovy.control``, ``org.dom4j``, ``org.hibernate``, ``org.jboss.logging``, ``org.jdbi.v3.core``, ``org.jooq``, ``org.mvel2``, ``org.scijava.log``, ``org.slf4j``, ``org.xml.sax``, ``org.xmlpull.v1``, ``play.mvc``, ``ratpack.core.form``, ``ratpack.core.handling``, ``ratpack.core.http``, ``ratpack.exec``, ``ratpack.form``, ``ratpack.func``, ``ratpack.handling``, ``ratpack.http``, ``ratpack.util``, ``retrofit2``",65,2229,944,10,,,14,18,,5
-   Totals,,217,8331,1496,129,6,10,107,33,1,86
+   Others,"``androidx.core.app``, ``androidx.slice``, ``cn.hutool.core.codec``, ``com.esotericsoftware.kryo.io``, ``com.esotericsoftware.kryo5.io``, ``com.fasterxml.jackson.core``, ``com.fasterxml.jackson.databind``, ``com.opensymphony.xwork2.ognl``, ``com.rabbitmq.client``, ``com.unboundid.ldap.sdk``, ``com.zaxxer.hikari``, ``flexjson``, ``groovy.lang``, ``groovy.util``, ``jodd.json``, ``kotlin``, ``net.sf.saxon.s9api``, ``ognl``, ``okhttp3``, ``org.apache.commons.codec``, ``org.apache.commons.jexl2``, ``org.apache.commons.jexl3``, ``org.apache.commons.logging``, ``org.apache.commons.ognl``, ``org.apache.directory.ldap.client.api``, ``org.apache.ibatis.jdbc``, ``org.apache.log4j``, ``org.apache.logging.log4j``, ``org.apache.shiro.codec``, ``org.apache.shiro.jndi``, ``org.codehaus.groovy.control``, ``org.dom4j``, ``org.hibernate``, ``org.jboss.logging``, ``org.jdbi.v3.core``, ``org.jooq``, ``org.mvel2``, ``org.scijava.log``, ``org.slf4j``, ``org.xml.sax``, ``org.xmlpull.v1``, ``play.mvc``, ``ratpack.core.form``, ``ratpack.core.handling``, ``ratpack.core.http``, ``ratpack.exec``, ``ratpack.form``, ``ratpack.func``, ``ratpack.handling``, ``ratpack.http``, ``ratpack.util``, ``retrofit2``",65,2324,950,10,,,14,18,,5
+   Totals,,217,8426,1502,129,6,10,107,33,1,86
 

From 2b12aece63a08822fb1abfae7c7d1864d0d1abbd Mon Sep 17 00:00:00 2001
From: Alex Denisov <alexdenisov@github.com>
Date: Fri, 16 Sep 2022 09:24:20 +0200
Subject: [PATCH 194/203] Swift: skip more unsupported CLI args (new in Xcode
 14)

---
 swift/tools/tracing-config.lua | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/swift/tools/tracing-config.lua b/swift/tools/tracing-config.lua
index d9343285099..4644457515e 100644
--- a/swift/tools/tracing-config.lua
+++ b/swift/tools/tracing-config.lua
@@ -29,6 +29,8 @@ function RegisterExtractorPack(id)
       strip_unsupported_arg(args, '-emit-localized-strings', 0)
       strip_unsupported_arg(args, '-emit-localized-strings-path', 1)
       strip_unsupported_arg(args, '-stack-check', 0)
+      strip_unsupported_arg(args, '-disable-clang-spi', 0)
+      strip_unsupported_arg(args, '-empty-abi-descriptor', 0)
     end
 
     -- xcodebuild does not always specify the -resource-dir in which case the compiler falls back

From 95478f1af67bba4dbd32ce2d4de1330a4bec8ce8 Mon Sep 17 00:00:00 2001
From: Sebastian Bauersfeld <>
Date: Fri, 16 Sep 2022 14:35:30 +0700
Subject: [PATCH 195/203] Address review comments.

---
 .../src/Security/CWE/CWE-022/TaintedPath.ql   |  2 +-
 .../CWE/CWE-022/TaintedPathCommon.qll         | 44 ++++++++++++++-----
 .../Security/CWE/CWE-022/TaintedPathLocal.ql  |  2 +-
 3 files changed, 36 insertions(+), 12 deletions(-)

diff --git a/java/ql/src/Security/CWE/CWE-022/TaintedPath.ql b/java/ql/src/Security/CWE/CWE-022/TaintedPath.ql
index 671e9b00b4d..4f8b92b96d6 100644
--- a/java/ql/src/Security/CWE/CWE-022/TaintedPath.ql
+++ b/java/ql/src/Security/CWE/CWE-022/TaintedPath.ql
@@ -29,7 +29,7 @@ predicate containsDotDotSanitizer(Guard g, Expr e, boolean branch) {
   )
 }
 
-class TaintedPathConfig extends TaintTracking::Configuration {
+class TaintedPathConfig extends TaintedPathCommonConfig {
   TaintedPathConfig() { this = "TaintedPathConfig" }
 
   override predicate isSource(DataFlow::Node source) { source instanceof RemoteFlowSource }
diff --git a/java/ql/src/Security/CWE/CWE-022/TaintedPathCommon.qll b/java/ql/src/Security/CWE/CWE-022/TaintedPathCommon.qll
index b9a5d8560ae..1cb0aea1129 100644
--- a/java/ql/src/Security/CWE/CWE-022/TaintedPathCommon.qll
+++ b/java/ql/src/Security/CWE/CWE-022/TaintedPathCommon.qll
@@ -5,17 +5,41 @@
 import java
 import semmle.code.java.controlflow.Guards
 import semmle.code.java.security.PathCreation
-import semmle.code.java.dataflow.ExternalFlow
+import semmle.code.java.frameworks.Networking
+import semmle.code.java.dataflow.TaintTracking
 
-class TaintedPathInjectionSummaries extends SummaryModelCsv {
-  override predicate row(string row) {
-    row =
-      [
-        "java.net;URI;false;URI;(String,String,String);;Argument[1];Argument[-1];taint;manual",
-        "java.net;URI;false;URI;(String,String,String,String);;Argument[1..2];Argument[-1];taint;manual",
-        "java.net;URI;false;URI;(String,String,String,String,String);;Argument[2];Argument[-1];taint;manual",
-        "java.net;URI;false;URI;(String,String,String,int,String,String,String);;Argument[4];Argument[-1];taint;manual",
-      ]
+abstract class TaintedPathCommonConfig extends TaintTracking::Configuration {
+  bindingset[this]
+  TaintedPathCommonConfig() { any() }
+
+  final override predicate isAdditionalTaintStep(DataFlow::Node n1, DataFlow::Node n2) {
+    exists(Argument a |
+      a = n1.asExpr() and
+      a.getCall() = n2.asExpr() and
+      a = any(TaintPreservingUriCtorParam tpp).getAnArgument()
+    )
+  }
+}
+
+private class TaintPreservingUriCtorParam extends Parameter {
+  TaintPreservingUriCtorParam() {
+    exists(Constructor ctor, int idx, int nParams |
+      ctor.getDeclaringType() instanceof TypeUri and
+      this = ctor.getParameter(idx) and
+      nParams = ctor.getNumberOfParameters()
+    |
+      // URI(String scheme, String ssp, String fragment)
+      idx = 1 and nParams = 3
+      or
+      // URI(String scheme, String host, String path, String fragment)
+      idx = [1, 2] and nParams = 4
+      or
+      // URI(String scheme, String authority, String path, String query, String fragment)
+      idx = 2 and nParams = 5
+      or
+      // URI(String scheme, String userInfo, String host, int port, String path, String query, String fragment)
+      idx = 4 and nParams = 7
+    )
   }
 }
 
diff --git a/java/ql/src/Security/CWE/CWE-022/TaintedPathLocal.ql b/java/ql/src/Security/CWE/CWE-022/TaintedPathLocal.ql
index ebd9c4f079d..62118a4b297 100644
--- a/java/ql/src/Security/CWE/CWE-022/TaintedPathLocal.ql
+++ b/java/ql/src/Security/CWE/CWE-022/TaintedPathLocal.ql
@@ -19,7 +19,7 @@ import semmle.code.java.security.PathCreation
 import DataFlow::PathGraph
 import TaintedPathCommon
 
-class TaintedPathLocalConfig extends TaintTracking::Configuration {
+class TaintedPathLocalConfig extends TaintedPathCommonConfig {
   TaintedPathLocalConfig() { this = "TaintedPathLocalConfig" }
 
   override predicate isSource(DataFlow::Node source) { source instanceof LocalUserInput }

From 8e30754356a3d0ce18edec07d24dd2289604acd0 Mon Sep 17 00:00:00 2001
From: James Fletcher <42464962+jf205@users.noreply.github.com>
Date: Fri, 16 Sep 2022 09:22:32 +0100
Subject: [PATCH 196/203] Update download-github-database.rst

---
 docs/codeql/reusables/download-github-database.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/codeql/reusables/download-github-database.rst b/docs/codeql/reusables/download-github-database.rst
index 732d4479ba7..1156c273456 100644
--- a/docs/codeql/reusables/download-github-database.rst
+++ b/docs/codeql/reusables/download-github-database.rst
@@ -11,4 +11,4 @@ When you have confirmed that a CodeQL database exists for the language you are i
 
    gh api /repos/<owner>/<repo>/code-scanning/codeql/databases/<language> -H 'Accept: application/zip' > path/to/local/database.zip
 
-For more information, see the documentation for the `Get CodeQL database <https://docs.github.com/en/rest/reference/code-scanning#get-codeql-database>`__ endpoint in the GitHub REST API documentation.
\ No newline at end of file
+For more information, see the documentation for the `Get CodeQL database <https://docs.github.com/en/rest/code-scanning#get-a-codeql-database-for-a-repository>`__ endpoint in the GitHub REST API documentation.

From fdc8453a59cd50a6a706fe01c3387b3dd9655544 Mon Sep 17 00:00:00 2001
From: Tony Torralba <atorralba@users.noreply.github.com>
Date: Fri, 16 Sep 2022 10:42:15 +0200
Subject: [PATCH 197/203] Introduce TaintedPathAdditionalTaintStep

Use separate configurations for tainted path and tainted path local again.
---
 .../src/Security/CWE/CWE-022/TaintedPath.ql   |  6 +++++-
 .../CWE/CWE-022/TaintedPathCommon.qll         | 16 ++++++++++-----
 .../Security/CWE/CWE-022/TaintedPathLocal.ql  |  6 +++++-
 .../CWE-022/semmle/tests/TaintedPath.expected | 20 +++++--------------
 4 files changed, 26 insertions(+), 22 deletions(-)

diff --git a/java/ql/src/Security/CWE/CWE-022/TaintedPath.ql b/java/ql/src/Security/CWE/CWE-022/TaintedPath.ql
index 4f8b92b96d6..c9ea50c6f29 100644
--- a/java/ql/src/Security/CWE/CWE-022/TaintedPath.ql
+++ b/java/ql/src/Security/CWE/CWE-022/TaintedPath.ql
@@ -29,7 +29,7 @@ predicate containsDotDotSanitizer(Guard g, Expr e, boolean branch) {
   )
 }
 
-class TaintedPathConfig extends TaintedPathCommonConfig {
+class TaintedPathConfig extends TaintTracking::Configuration {
   TaintedPathConfig() { this = "TaintedPathConfig" }
 
   override predicate isSource(DataFlow::Node source) { source instanceof RemoteFlowSource }
@@ -48,6 +48,10 @@ class TaintedPathConfig extends TaintedPathCommonConfig {
     or
     node = DataFlow::BarrierGuard<containsDotDotSanitizer/3>::getABarrierNode()
   }
+
+  override predicate isAdditionalTaintStep(DataFlow::Node n1, DataFlow::Node n2) {
+    any(TaintedPathAdditionalTaintStep s).step(n1, n2)
+  }
 }
 
 /**
diff --git a/java/ql/src/Security/CWE/CWE-022/TaintedPathCommon.qll b/java/ql/src/Security/CWE/CWE-022/TaintedPathCommon.qll
index 1cb0aea1129..0e826a6fc01 100644
--- a/java/ql/src/Security/CWE/CWE-022/TaintedPathCommon.qll
+++ b/java/ql/src/Security/CWE/CWE-022/TaintedPathCommon.qll
@@ -6,13 +6,19 @@ import java
 import semmle.code.java.controlflow.Guards
 import semmle.code.java.security.PathCreation
 import semmle.code.java.frameworks.Networking
-import semmle.code.java.dataflow.TaintTracking
+import semmle.code.java.dataflow.DataFlow
 
-abstract class TaintedPathCommonConfig extends TaintTracking::Configuration {
-  bindingset[this]
-  TaintedPathCommonConfig() { any() }
+/**
+ * A unit class for adding additional taint steps.
+ *
+ * Extend this class to add additional taint steps that should apply to tainted path flow configurations.
+ */
+class TaintedPathAdditionalTaintStep extends Unit {
+  abstract predicate step(DataFlow::Node n1, DataFlow::Node n2);
+}
 
-  final override predicate isAdditionalTaintStep(DataFlow::Node n1, DataFlow::Node n2) {
+private class DefaultTaintedPathAdditionalTaintStep extends TaintedPathAdditionalTaintStep {
+  override predicate step(DataFlow::Node n1, DataFlow::Node n2) {
     exists(Argument a |
       a = n1.asExpr() and
       a.getCall() = n2.asExpr() and
diff --git a/java/ql/src/Security/CWE/CWE-022/TaintedPathLocal.ql b/java/ql/src/Security/CWE/CWE-022/TaintedPathLocal.ql
index 62118a4b297..9f138d138a6 100644
--- a/java/ql/src/Security/CWE/CWE-022/TaintedPathLocal.ql
+++ b/java/ql/src/Security/CWE/CWE-022/TaintedPathLocal.ql
@@ -19,7 +19,7 @@ import semmle.code.java.security.PathCreation
 import DataFlow::PathGraph
 import TaintedPathCommon
 
-class TaintedPathLocalConfig extends TaintedPathCommonConfig {
+class TaintedPathLocalConfig extends TaintTracking::Configuration {
   TaintedPathLocalConfig() { this = "TaintedPathLocalConfig" }
 
   override predicate isSource(DataFlow::Node source) { source instanceof LocalUserInput }
@@ -27,6 +27,10 @@ class TaintedPathLocalConfig extends TaintedPathCommonConfig {
   override predicate isSink(DataFlow::Node sink) {
     sink.asExpr() = any(PathCreation p).getAnInput()
   }
+
+  override predicate isAdditionalTaintStep(DataFlow::Node n1, DataFlow::Node n2) {
+    any(TaintedPathAdditionalTaintStep s).step(n1, n2)
+  }
 }
 
 from
diff --git a/java/ql/test/query-tests/security/CWE-022/semmle/tests/TaintedPath.expected b/java/ql/test/query-tests/security/CWE-022/semmle/tests/TaintedPath.expected
index e9ca2f3eae8..1d2935fe0d4 100644
--- a/java/ql/test/query-tests/security/CWE-022/semmle/tests/TaintedPath.expected
+++ b/java/ql/test/query-tests/security/CWE-022/semmle/tests/TaintedPath.expected
@@ -9,16 +9,11 @@ edges
 | Test.java:80:31:80:32 | br : BufferedReader | Test.java:80:31:80:43 | readLine(...) : String |
 | Test.java:80:31:80:43 | readLine(...) : String | Test.java:82:67:82:81 | ... + ... |
 | Test.java:88:17:88:37 | getHostName(...) : String | Test.java:90:26:90:29 | temp |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:97:26:97:26 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:98:23:98:23 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:29:99:29 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:100:32:100:32 | t : String |
-| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:101:41:101:41 | t : String |
-| Test.java:97:26:97:26 | t : String | Test.java:97:12:97:33 | new URI(...) |
-| Test.java:98:23:98:23 | t : String | Test.java:98:12:98:33 | new URI(...) |
-| Test.java:99:29:99:29 | t : String | Test.java:99:12:99:33 | new URI(...) |
-| Test.java:100:32:100:32 | t : String | Test.java:100:12:100:45 | new URI(...) |
-| Test.java:101:41:101:41 | t : String | Test.java:101:12:101:54 | new URI(...) |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:97:12:97:33 | new URI(...) |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:98:12:98:33 | new URI(...) |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:99:12:99:33 | new URI(...) |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:100:12:100:45 | new URI(...) |
+| Test.java:95:14:95:34 | getHostName(...) : String | Test.java:101:12:101:54 | new URI(...) |
 nodes
 | Test.java:19:18:19:38 | getHostName(...) : String | semmle.label | getHostName(...) : String |
 | Test.java:24:20:24:23 | temp | semmle.label | temp |
@@ -35,15 +30,10 @@ nodes
 | Test.java:90:26:90:29 | temp | semmle.label | temp |
 | Test.java:95:14:95:34 | getHostName(...) : String | semmle.label | getHostName(...) : String |
 | Test.java:97:12:97:33 | new URI(...) | semmle.label | new URI(...) |
-| Test.java:97:26:97:26 | t : String | semmle.label | t : String |
 | Test.java:98:12:98:33 | new URI(...) | semmle.label | new URI(...) |
-| Test.java:98:23:98:23 | t : String | semmle.label | t : String |
 | Test.java:99:12:99:33 | new URI(...) | semmle.label | new URI(...) |
-| Test.java:99:29:99:29 | t : String | semmle.label | t : String |
 | Test.java:100:12:100:45 | new URI(...) | semmle.label | new URI(...) |
-| Test.java:100:32:100:32 | t : String | semmle.label | t : String |
 | Test.java:101:12:101:54 | new URI(...) | semmle.label | new URI(...) |
-| Test.java:101:41:101:41 | t : String | semmle.label | t : String |
 subpaths
 #select
 | Test.java:24:11:24:24 | new File(...) | Test.java:19:18:19:38 | getHostName(...) : String | Test.java:24:20:24:23 | temp | $@ flows to here and is used in a path. | Test.java:19:18:19:38 | getHostName(...) | User-provided value |

From 8c3580374928b1eeaddbf3c41633503c205d5529 Mon Sep 17 00:00:00 2001
From: Sebastian Bauersfeld <>
Date: Fri, 16 Sep 2022 16:11:34 +0700
Subject: [PATCH 198/203] Add more details to change note.

---
 .../change-notes/2022-09-13-flow-model-for-uri-constructors.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/ql/src/change-notes/2022-09-13-flow-model-for-uri-constructors.md b/java/ql/src/change-notes/2022-09-13-flow-model-for-uri-constructors.md
index 8b86c0074b8..254fc55d42a 100644
--- a/java/ql/src/change-notes/2022-09-13-flow-model-for-uri-constructors.md
+++ b/java/ql/src/change-notes/2022-09-13-flow-model-for-uri-constructors.md
@@ -1,4 +1,4 @@
 ---
 category: minorAnalysis
 ---
-* Added taint model for arguments of `java.net.URI` constructors.
+* Added taint model for arguments of `java.net.URI` constructors to the queries `java/path-injection` and `java/path-injection-local`.

From 9714497268d60172e668d4e20693443f44863774 Mon Sep 17 00:00:00 2001
From: Anders Schack-Mulligen <aschackmull@github.com>
Date: Fri, 16 Sep 2022 11:14:44 +0200
Subject: [PATCH 199/203] Java: Add change note.

---
 java/ql/lib/change-notes/2022-09-16-dispatch-confidence.md | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 java/ql/lib/change-notes/2022-09-16-dispatch-confidence.md

diff --git a/java/ql/lib/change-notes/2022-09-16-dispatch-confidence.md b/java/ql/lib/change-notes/2022-09-16-dispatch-confidence.md
new file mode 100644
index 00000000000..9287e9abae3
--- /dev/null
+++ b/java/ql/lib/change-notes/2022-09-16-dispatch-confidence.md
@@ -0,0 +1,4 @@
+---
+category: majorAnalysis
+---
+* The virtual dispatch relation used in data flow now favors summary models over source code for dispatch to interface methods from `java.util` unless there is evidence that a specific source implementation is reachable. This should provide increased precision for any projects that include, for example, custom `List` or `Map` implementations.

From 80968eef4759afef15e388ffafe61b93d89a98e0 Mon Sep 17 00:00:00 2001
From: Chris Smowton <smowton@github.com>
Date: Thu, 15 Sep 2022 22:03:04 +0100
Subject: [PATCH 200/203] Add test for annotations with annotation-array-typed
 fields

---
 .../test/library-tests/annotation-arrays/Test.java | 14 ++++++++++++++
 .../library-tests/annotation-arrays/test.expected  |  3 +++
 .../test/library-tests/annotation-arrays/test.ql   |  9 +++++++++
 3 files changed, 26 insertions(+)
 create mode 100644 java/ql/test/library-tests/annotation-arrays/Test.java
 create mode 100644 java/ql/test/library-tests/annotation-arrays/test.expected
 create mode 100644 java/ql/test/library-tests/annotation-arrays/test.ql

diff --git a/java/ql/test/library-tests/annotation-arrays/Test.java b/java/ql/test/library-tests/annotation-arrays/Test.java
new file mode 100644
index 00000000000..d7e721d8ad2
--- /dev/null
+++ b/java/ql/test/library-tests/annotation-arrays/Test.java
@@ -0,0 +1,14 @@
+class Test {
+
+  @interface CustomAnnotation {
+    String value();
+  }
+
+  @interface ArrayValues {
+    CustomAnnotation[] annotationValues();
+  }
+
+  @ArrayValues(annotationValues = @CustomAnnotation(value = "only")) private int fieldWithSingular;
+  @ArrayValues(annotationValues = {@CustomAnnotation(value = "val1"), @CustomAnnotation(value = "val2")}) private int fieldWithMultiple;
+
+}
diff --git a/java/ql/test/library-tests/annotation-arrays/test.expected b/java/ql/test/library-tests/annotation-arrays/test.expected
new file mode 100644
index 00000000000..cd7c8dc15cc
--- /dev/null
+++ b/java/ql/test/library-tests/annotation-arrays/test.expected
@@ -0,0 +1,3 @@
+| Test.java:11:82:11:98 | fieldWithSingular | Test.java:11:3:11:68 | ArrayValues | Test.java:11:35:11:67 | {...} | Test.java:11:35:11:67 | CustomAnnotation |
+| Test.java:12:119:12:135 | fieldWithMultiple | Test.java:12:3:12:105 | ArrayValues | Test.java:12:35:12:104 | {...} | Test.java:12:36:12:68 | CustomAnnotation |
+| Test.java:12:119:12:135 | fieldWithMultiple | Test.java:12:3:12:105 | ArrayValues | Test.java:12:35:12:104 | {...} | Test.java:12:71:12:103 | CustomAnnotation |
diff --git a/java/ql/test/library-tests/annotation-arrays/test.ql b/java/ql/test/library-tests/annotation-arrays/test.ql
new file mode 100644
index 00000000000..4c0dfd89b7b
--- /dev/null
+++ b/java/ql/test/library-tests/annotation-arrays/test.ql
@@ -0,0 +1,9 @@
+import java
+
+from Field f, Annotation ann, Expr value, Expr valueChild
+where
+  f.getDeclaringType().fromSource() and
+  ann = f.getAnAnnotation() and
+  value = ann.getAValue() and
+  valueChild.getParent() = value
+select f, ann, value, valueChild

From 213cd94047eef22ff1d4fc58610b08cacb5d859b Mon Sep 17 00:00:00 2001
From: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
Date: Fri, 16 Sep 2022 13:21:28 +0100
Subject: [PATCH 201/203] Swift: Update the test.

---
 swift/ql/test/query-tests/Security/CWE-311/testURL.swift | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/swift/ql/test/query-tests/Security/CWE-311/testURL.swift b/swift/ql/test/query-tests/Security/CWE-311/testURL.swift
index c2881b613b1..2fe008f0b6f 100644
--- a/swift/ql/test/query-tests/Security/CWE-311/testURL.swift
+++ b/swift/ql/test/query-tests/Security/CWE-311/testURL.swift
@@ -18,5 +18,5 @@ func test1(passwd : String, encrypted_passwd : String, account_no : String, cred
 	let base = URL(string: "http://example.com/"); // GOOD (not sensitive)
 	let e = URL(string: "abc", relativeTo: base); // GOOD (not sensitive)
 	let f = URL(string: passwd, relativeTo: base); // BAD
-	let g = URL(string: "abc", relativeTo: f); // BAD [NOT DETECTED]
+	let g = URL(string: "abc", relativeTo: f); // BAD (reported on line above)
 }

From 867e31693dd64d94f6a3e1fabcd868d47768e499 Mon Sep 17 00:00:00 2001
From: Andrew Eisenberg <aeisenberg@github.com>
Date: Fri, 16 Sep 2022 14:31:17 -0700
Subject: [PATCH 202/203] Updates the library path section of the CodeQL spec

- Remove references to `queries.xml`. It is still supported, but we
  don't want people using it.
- Add reference to `codeql-pack.yml`. It is just an alias for
  `qlpack.yml` and not being used.
- Remove reference to `libraryPathDependencies` and use `dependencies`
  instead.

Note that this section does not give a complete description of library
paths. That will be a part of the "Developing a codeql pack" article
that is forthcoming.
---
 .../ql-language-specification.rst             | 31 +++++--------------
 1 file changed, 7 insertions(+), 24 deletions(-)

diff --git a/docs/codeql/ql-language-reference/ql-language-specification.rst b/docs/codeql/ql-language-reference/ql-language-specification.rst
index ea90ebbf843..68c4475aa0f 100644
--- a/docs/codeql/ql-language-reference/ql-language-specification.rst
+++ b/docs/codeql/ql-language-reference/ql-language-specification.rst
@@ -57,44 +57,27 @@ construction of the library path.
 First, determine the *query directory* of the ``.ql`` file being
 compiled. Starting with the directory containing the ``.ql`` file, and
 walking up the directory structure, each directory is checked for a
-file called ``queries.xml`` or ``qlpack.yml``. The first directory
+file called ``qlpack.yml`` or ``codeql-pack.yml``. The first directory
 where such a file is found is the query directory. If there is no such
 directory, the directory of the ``.ql`` file itself is the query
 directory.
 
-A ``queries.xml`` file that defines a query directory must always
-contain a single top-level tag named
-``queries``, which has a ``language`` attribute set to the identifier
-of the active database schema (for example, ``<queries
-language="java"/>``).
-
 A ``qlpack.yml`` file defines a :ref:`CodeQL pack <about-codeql-packs>`.
 The content of a ``qlpack.yml`` file is described in the CodeQL CLI documentation.
+``codeql-pack.yml`` is an alias for ``qlpack.yml``.
 
-If both a ``queries.xml`` and a ``qlpack.yml`` exist in the same
-directory, the latter takes precedence (and the former is assumed to
-exist for compatibility with older tooling).
-
-The CodeQL CLI and newer tools based on it (such as,
+The CodeQL CLI and tools based on it (such as,
 GitHub code scanning and the CodeQL extension for Visual Studio Code)
 construct a library path using CodeQL packs. For each CodeQL pack
 added to the library path, the CodeQL packs named in its
-``libraryPathDependencies`` will be subsequently added to the library
+``dependencies`` will be subsequently added to the library
 path, and the process continues until all packs have been
 resolved. The actual library path consists of the root directories of
 the selected CodeQL packs. This process depends on a mechanism for finding
-CodeQL packs by pack name, as described in the :ref:`CodeQL CLI documentation <codeql-cli>`.
+CodeQL packs by pack name and version, as described in the :ref:`CodeQL CLI documentation <codeql-cli>`.
 
-When the query directory contains a ``queries.xml`` file but no
-``qlpack.yml``, the CodeQL pack resolution behaves as if it defines a QL
-pack with no name and a single library path dependency named
-``legacy-libraries-LANGUAGE`` where ``LANGUAGE`` is taken from
-``queries.xml``. The ``github/codeql`` repository provides packs with
-names following this pattern, which themselves depend on the actual
-CodeQL libraries for each language.
-
-When the query directory contains neither a ``queries.xml`` nor
-``qlpack.yml`` file, it is considered to be a CodeQL pack with no name and
+When the query directory contains neither a ``qlpack.yml`` nor
+``codeql-pack.yml`` file, it is considered to be a CodeQL pack with no name and
 no library dependencies. This causes the library path to consist of
 *only* the query directory itself. This is not generally useful,
 but it suffices for running toy examples of QL code that don't

From e6eaf37e222eae516c7d6b05546ab70cedd60c1c Mon Sep 17 00:00:00 2001
From: Andrew Eisenberg <aeisenberg@github.com>
Date: Sun, 18 Sep 2022 10:23:49 -0700
Subject: [PATCH 203/203] Add redirect for removed 'About QL packs' article

Note that sphinx gives an error if you have a document to build that
is not part of a toctree. In order to avoid this error and not show
the document in any toctree that users will see, I added a hidden
toctree to the redirect article.
---
 docs/codeql/codeql-cli/about-codeql-workspaces.rst |  2 +-
 docs/codeql/codeql-cli/about-ql-packs.rst          | 12 ++++++++++++
 2 files changed, 13 insertions(+), 1 deletion(-)
 create mode 100644 docs/codeql/codeql-cli/about-ql-packs.rst

diff --git a/docs/codeql/codeql-cli/about-codeql-workspaces.rst b/docs/codeql/codeql-cli/about-codeql-workspaces.rst
index 3215c44042e..ba7baaf7361 100644
--- a/docs/codeql/codeql-cli/about-codeql-workspaces.rst
+++ b/docs/codeql/codeql-cli/about-codeql-workspaces.rst
@@ -1,6 +1,6 @@
 .. _about-codeql-workspaces:
 
-About CodeQL Workspaces
+About CodeQL workspaces
 =======================
 
 .. include:: ../reusables/beta-note-package-management.rst
diff --git a/docs/codeql/codeql-cli/about-ql-packs.rst b/docs/codeql/codeql-cli/about-ql-packs.rst
new file mode 100644
index 00000000000..2f8d4d9229d
--- /dev/null
+++ b/docs/codeql/codeql-cli/about-ql-packs.rst
@@ -0,0 +1,12 @@
+.. _about-ql-packs:
+
+About QL packs
+==============
+
+This page has been moved to ":doc:`About CodeQL packs <about-codeql-packs>`."
+
+
+.. toctree::
+   :hidden:
+
+   about-ql-packs