It turns out that the bminor/bash alert spewage was caused by

a bug in the extractor, which is verified fixed in the next release.
Reverting query to its original form.

cpp/ql/src/Likely Bugs/Underspecified Functions/TooManyArguments.ql

@@ -5,7 +5,7 @@
  *              that the code does not follow the author's intent.
  * @kind problem
  * @problem.severity warning
- * @precision high
+ * @precision very-high
  * @id cpp/futile-params
  * @tags correctness
  *       maintainability
@@ -34,7 +34,6 @@ predicate isCompiledAsC(Function f) {
 from FunctionCall fc, Function f
 where
   f = fc.getTarget() and
-  f.getNumberOfParameters() = 0 and
   not f.isVarargs() and
   hasZeroParamDecl(f) and
   isCompiledAsC(f) and

cpp/ql/test/query-tests/Likely Bugs/Underspecified Functions/test.c

@@ -38,7 +38,7 @@ void test(int *argv[]) {
 
   int x;
   declared_empty_defined_with(&x); // BAD
-  declared_empty_defined_with(3, &x); // BAD [NOT DETECTED]
+  declared_empty_defined_with(3, &x); // BAD
 
   not_declared_defined_with(-1, 0, 2U); // GOOD
   not_declared_defined_with(4LL, 0, 2.5e9f); // BAD