C++: When we generate a string for the node we avoid multiple results by only using the 0'th result from the 'asExpr' predicate. However, when we want to convert between nodes and expressions we don't care about which one we get.

2025-12-20 10:46:30 +01:00 · 2023-09-01 13:11:28 +01:00
parent d2bb73ba1f
commit f1c4fa2345
13 changed files with 8 additions and 1135 deletions
--- a/cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
+++ b/cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
@@ -414,9 +414,10 @@ class Node extends TIRDataFlowNode {
 }
 private string toExprString(Node n) {
-  result = n.asExpr().toString()
+  result = n.asExpr(0).toString()
  or
-  result = n.asIndirectExpr().toString() + " indirection"
+  not exists(n.asExpr()) and
  result = n.asIndirectExpr(0, 1).toString() + " indirection"
 }
 /**
@@ -1506,7 +1507,7 @@ OperandNode operandNode(Operand operand) { result.getOperand() = operand }
 * _out of_ an expression, like when an argument is passed by reference, use
 * `definitionByReferenceNodeFromArgument` instead.
 */
-ExprNode exprNode(Expr e) { result.getExpr() = e }
+ExprNode exprNode(Expr e) { result.getExpr(_) = e }
 /**
 * Gets the `Node` corresponding to the value of evaluating `e`. Here, `e` may
@@ -1514,7 +1515,7 @@ ExprNode exprNode(Expr e) { result.getExpr() = e }
 * argument is passed by reference, use
 * `definitionByReferenceNodeFromArgument` instead.
 */
-ExprNode convertedExprNode(Expr e) { result.getConvertedExpr() = e }
+ExprNode convertedExprNode(Expr e) { result.getConvertedExpr(_) = e }
 /**
 * Gets the `Node` corresponding to the value of `p` at function entry.
--- a/cpp/ql/test/library-tests/dataflow/dataflow-tests/dataflow-ir-consistency.expected
+++ b/cpp/ql/test/library-tests/dataflow/dataflow-tests/dataflow-ir-consistency.expected
@@ -4,297 +4,6 @@ uniqueType
 uniqueNodeLocation
 missingLocation
 uniqueNodeToString
 | clang.cpp:21:8:21:20 | * ... | Node should have one toString but has 2. |
 | clang.cpp:21:8:21:20 | sourceArray1 indirection | Node should have one toString but has 2. |
 | clang.cpp:22:8:22:20 | & ... | Node should have one toString but has 2. |
 | clang.cpp:22:8:22:20 | & ... indirection | Node should have one toString but has 2. |
 | clang.cpp:22:8:22:20 | & ... indirection | Node should have one toString but has 2. |
 | clang.cpp:22:8:22:20 | sourceArray1 | Node should have one toString but has 2. |
 | clang.cpp:22:8:22:20 | sourceArray1 indirection | Node should have one toString but has 2. |
 | clang.cpp:22:8:22:20 | sourceArray1 indirection | Node should have one toString but has 2. |
 | clang.cpp:23:17:23:29 | & ... | Node should have one toString but has 2. |
 | clang.cpp:23:17:23:29 | & ... indirection | Node should have one toString but has 2. |
 | clang.cpp:23:17:23:29 | & ... indirection | Node should have one toString but has 2. |
 | clang.cpp:23:17:23:29 | sourceArray1 | Node should have one toString but has 2. |
 | clang.cpp:23:17:23:29 | sourceArray1 indirection | Node should have one toString but has 2. |
 | clang.cpp:23:17:23:29 | sourceArray1 indirection | Node should have one toString but has 2. |
 | dispatch.cpp:78:23:78:39 | * ... | Node should have one toString but has 2. |
 | dispatch.cpp:78:23:78:39 | * ... indirection | Node should have one toString but has 2. |
 | dispatch.cpp:78:23:78:39 | call to allocateBottom | Node should have one toString but has 2. |
 | dispatch.cpp:78:23:78:39 | call to allocateBottom indirection | Node should have one toString but has 2. |
 | example.c:24:13:24:30 | ... + ... | Node should have one toString but has 2. |
 | example.c:24:13:24:30 | ... = ... | Node should have one toString but has 2. |
 | example.c:26:18:26:24 | & ... | Node should have one toString but has 2. |
 | example.c:26:18:26:24 | & ... indirection | Node should have one toString but has 2. |
 | example.c:26:18:26:24 | coords | Node should have one toString but has 2. |
 | example.c:26:18:26:24 | coords indirection | Node should have one toString but has 2. |
 | example.c:28:14:28:25 | & ... | Node should have one toString but has 2. |
 | example.c:28:14:28:25 | & ... indirection | Node should have one toString but has 2. |
 | example.c:28:14:28:25 | & ... indirection | Node should have one toString but has 2. |
 | example.c:28:14:28:25 | pos | Node should have one toString but has 2. |
 | example.c:28:14:28:25 | pos indirection | Node should have one toString but has 2. |
 | example.c:28:14:28:25 | pos indirection | Node should have one toString but has 2. |
 | lambdas.cpp:21:8:21:8 | t | Node should have one toString but has 2. |
 | lambdas.cpp:21:8:21:8 | t indirection | Node should have one toString but has 2. |
 | lambdas.cpp:22:8:22:8 | u | Node should have one toString but has 2. |
 | lambdas.cpp:22:8:22:8 | u indirection | Node should have one toString but has 2. |
 | lambdas.cpp:41:8:41:8 | a | Node should have one toString but has 2. |
 | lambdas.cpp:41:8:41:8 | a indirection | Node should have one toString but has 2. |
 | lambdas.cpp:42:8:42:8 | b | Node should have one toString but has 2. |
 | lambdas.cpp:42:8:42:8 | b indirection | Node should have one toString but has 2. |
 | self_parameter_flow.cpp:3:3:3:5 | * ... | Node should have one toString but has 2. |
 | self_parameter_flow.cpp:3:3:3:5 | ps indirection | Node should have one toString but has 2. |
 | self_parameter_flow.cpp:8:8:8:9 | & ... | Node should have one toString but has 2. |
 | self_parameter_flow.cpp:8:8:8:9 | & ... indirection | Node should have one toString but has 2. |
 | self_parameter_flow.cpp:8:8:8:9 | & ... indirection | Node should have one toString but has 2. |
 | self_parameter_flow.cpp:8:8:8:9 | s | Node should have one toString but has 2. |
 | self_parameter_flow.cpp:8:8:8:9 | s indirection | Node should have one toString but has 2. |
 | self_parameter_flow.cpp:8:8:8:9 | s indirection | Node should have one toString but has 2. |
 | test.cpp:90:8:90:14 | source1 | Node should have one toString but has 2. |
 | test.cpp:90:8:90:14 | source1 indirection | Node should have one toString but has 2. |
 | test.cpp:92:8:92:14 | source1 | Node should have one toString but has 2. |
 | test.cpp:92:8:92:14 | source1 indirection | Node should have one toString but has 2. |
 | test.cpp:103:10:103:12 | ref | Node should have one toString but has 2. |
 | test.cpp:103:10:103:12 | ref indirection | Node should have one toString but has 2. |
 | test.cpp:110:10:110:12 | ref | Node should have one toString but has 2. |
 | test.cpp:110:10:110:12 | ref indirection | Node should have one toString but has 2. |
 | test.cpp:115:3:115:6 | * ... | Node should have one toString but has 2. |
 | test.cpp:115:3:115:6 | * ... indirection | Node should have one toString but has 2. |
 | test.cpp:115:3:115:6 | out | Node should have one toString but has 2. |
 | test.cpp:115:3:115:6 | out indirection | Node should have one toString but has 2. |
 | test.cpp:120:3:120:6 | * ... | Node should have one toString but has 2. |
 | test.cpp:120:3:120:6 | * ... indirection | Node should have one toString but has 2. |
 | test.cpp:120:3:120:6 | out | Node should have one toString but has 2. |
 | test.cpp:120:3:120:6 | out indirection | Node should have one toString but has 2. |
 | test.cpp:125:3:125:6 | * ... | Node should have one toString but has 2. |
 | test.cpp:125:3:125:6 | * ... indirection | Node should have one toString but has 2. |
 | test.cpp:125:3:125:6 | out | Node should have one toString but has 2. |
 | test.cpp:125:3:125:6 | out indirection | Node should have one toString but has 2. |
 | test.cpp:384:10:384:13 | & ... | Node should have one toString but has 2. |
 | test.cpp:384:10:384:13 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:384:10:384:13 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:384:10:384:13 | tmp | Node should have one toString but has 2. |
 | test.cpp:384:10:384:13 | tmp indirection | Node should have one toString but has 2. |
 | test.cpp:384:10:384:13 | tmp indirection | Node should have one toString but has 2. |
 | test.cpp:384:16:384:23 | & ... | Node should have one toString but has 2. |
 | test.cpp:384:16:384:23 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:384:16:384:23 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:384:16:384:23 | source1 | Node should have one toString but has 2. |
 | test.cpp:384:16:384:23 | source1 indirection | Node should have one toString but has 2. |
 | test.cpp:384:16:384:23 | source1 indirection | Node should have one toString but has 2. |
 | test.cpp:390:18:390:21 | & ... | Node should have one toString but has 2. |
 | test.cpp:390:18:390:21 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:390:18:390:21 | tmp | Node should have one toString but has 2. |
 | test.cpp:390:18:390:21 | tmp indirection | Node should have one toString but has 2. |
 | test.cpp:391:10:391:13 | & ... | Node should have one toString but has 2. |
 | test.cpp:391:10:391:13 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:391:10:391:13 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:391:10:391:13 | tmp | Node should have one toString but has 2. |
 | test.cpp:391:10:391:13 | tmp indirection | Node should have one toString but has 2. |
 | test.cpp:391:10:391:13 | tmp indirection | Node should have one toString but has 2. |
 | test.cpp:391:16:391:23 | & ... | Node should have one toString but has 2. |
 | test.cpp:391:16:391:23 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:391:16:391:23 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:391:16:391:23 | source1 | Node should have one toString but has 2. |
 | test.cpp:391:16:391:23 | source1 indirection | Node should have one toString but has 2. |
 | test.cpp:391:16:391:23 | source1 indirection | Node should have one toString but has 2. |
 | test.cpp:400:10:400:13 | & ... | Node should have one toString but has 2. |
 | test.cpp:400:10:400:13 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:400:10:400:13 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:400:10:400:13 | tmp | Node should have one toString but has 2. |
 | test.cpp:400:10:400:13 | tmp indirection | Node should have one toString but has 2. |
 | test.cpp:400:10:400:13 | tmp indirection | Node should have one toString but has 2. |
 | test.cpp:400:16:400:22 | & ... | Node should have one toString but has 2. |
 | test.cpp:400:16:400:22 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:400:16:400:22 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:400:16:400:22 | clean1 | Node should have one toString but has 2. |
 | test.cpp:400:16:400:22 | clean1 indirection | Node should have one toString but has 2. |
 | test.cpp:400:16:400:22 | clean1 indirection | Node should have one toString but has 2. |
 | test.cpp:406:18:406:21 | & ... | Node should have one toString but has 2. |
 | test.cpp:406:18:406:21 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:406:18:406:21 | tmp | Node should have one toString but has 2. |
 | test.cpp:406:18:406:21 | tmp indirection | Node should have one toString but has 2. |
 | test.cpp:407:10:407:13 | & ... | Node should have one toString but has 2. |
 | test.cpp:407:10:407:13 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:407:10:407:13 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:407:10:407:13 | tmp | Node should have one toString but has 2. |
 | test.cpp:407:10:407:13 | tmp indirection | Node should have one toString but has 2. |
 | test.cpp:407:10:407:13 | tmp indirection | Node should have one toString but has 2. |
 | test.cpp:407:16:407:22 | & ... | Node should have one toString but has 2. |
 | test.cpp:407:16:407:22 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:407:16:407:22 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:407:16:407:22 | clean1 | Node should have one toString but has 2. |
 | test.cpp:407:16:407:22 | clean1 indirection | Node should have one toString but has 2. |
 | test.cpp:407:16:407:22 | clean1 indirection | Node should have one toString but has 2. |
 | test.cpp:423:20:423:25 | & ... | Node should have one toString but has 2. |
 | test.cpp:423:20:423:25 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:423:20:423:25 | local | Node should have one toString but has 2. |
 | test.cpp:423:20:423:25 | local indirection | Node should have one toString but has 2. |
 | test.cpp:436:8:436:13 | * ... | Node should have one toString but has 2. |
 | test.cpp:436:8:436:13 | local indirection | Node should have one toString but has 2. |
 | test.cpp:441:18:441:23 | & ... | Node should have one toString but has 2. |
 | test.cpp:441:18:441:23 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:441:18:441:23 | local | Node should have one toString but has 2. |
 | test.cpp:441:18:441:23 | local indirection | Node should have one toString but has 2. |
 | test.cpp:451:8:451:13 | * ... | Node should have one toString but has 2. |
 | test.cpp:451:8:451:13 | local indirection | Node should have one toString but has 2. |
 | test.cpp:457:9:457:22 | (statement expression) | Node should have one toString but has 2. |
 | test.cpp:457:9:457:22 | source1 | Node should have one toString but has 2. |
 | test.cpp:458:9:458:21 | (statement expression) | Node should have one toString but has 2. |
 | test.cpp:458:9:458:21 | clean1 | Node should have one toString but has 2. |
 | test.cpp:460:15:467:4 | (statement expression) | Node should have one toString but has 2. |
 | test.cpp:460:15:467:4 | tmp | Node should have one toString but has 2. |
 | test.cpp:472:3:472:4 | * ... | Node should have one toString but has 2. |
 | test.cpp:472:3:472:4 | * ... indirection | Node should have one toString but has 2. |
 | test.cpp:472:3:472:4 | p | Node should have one toString but has 2. |
 | test.cpp:472:3:472:4 | p indirection | Node should have one toString but has 2. |
 | test.cpp:477:21:477:22 | & ... | Node should have one toString but has 2. |
 | test.cpp:477:21:477:22 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:477:21:477:22 | x | Node should have one toString but has 2. |
 | test.cpp:477:21:477:22 | x indirection | Node should have one toString but has 2. |
 | test.cpp:490:8:490:17 | * ... | Node should have one toString but has 2. |
 | test.cpp:490:8:490:17 | p_content indirection | Node should have one toString but has 2. |
 | test.cpp:506:3:506:4 | * ... | Node should have one toString but has 2. |
 | test.cpp:506:3:506:4 | * ... indirection | Node should have one toString but has 2. |
 | test.cpp:506:3:506:4 | p | Node should have one toString but has 2. |
 | test.cpp:506:3:506:4 | p indirection | Node should have one toString but has 2. |
 | test.cpp:512:34:512:35 | & ... | Node should have one toString but has 2. |
 | test.cpp:512:34:512:35 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:512:34:512:35 | x | Node should have one toString but has 2. |
 | test.cpp:512:34:512:35 | x indirection | Node should have one toString but has 2. |
 | test.cpp:526:3:526:4 | * ... | Node should have one toString but has 2. |
 | test.cpp:526:3:526:4 | * ... indirection | Node should have one toString but has 2. |
 | test.cpp:526:3:526:4 | * ... indirection | Node should have one toString but has 2. |
 | test.cpp:526:3:526:4 | e | Node should have one toString but has 2. |
 | test.cpp:526:3:526:4 | e indirection | Node should have one toString but has 2. |
 | test.cpp:526:3:526:4 | e indirection | Node should have one toString but has 2. |
 | test.cpp:526:8:526:9 | & ... | Node should have one toString but has 2. |
 | test.cpp:526:8:526:9 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:526:8:526:9 | x | Node should have one toString but has 2. |
 | test.cpp:526:8:526:9 | x indirection | Node should have one toString but has 2. |
 | test.cpp:531:39:531:40 | & ... | Node should have one toString but has 2. |
 | test.cpp:531:39:531:40 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:531:39:531:40 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:531:39:531:40 | e | Node should have one toString but has 2. |
 | test.cpp:531:39:531:40 | e indirection | Node should have one toString but has 2. |
 | test.cpp:531:39:531:40 | e indirection | Node should have one toString but has 2. |
 | test.cpp:532:8:532:9 | * ... | Node should have one toString but has 2. |
 | test.cpp:532:8:532:9 | e indirection | Node should have one toString but has 2. |
 | test.cpp:536:10:536:11 | * ... | Node should have one toString but has 2. |
 | test.cpp:536:10:536:11 | p indirection | Node should have one toString but has 2. |
 | test.cpp:537:5:537:6 | * ... | Node should have one toString but has 2. |
 | test.cpp:537:5:537:6 | * ... indirection | Node should have one toString but has 2. |
 | test.cpp:537:5:537:6 | p | Node should have one toString but has 2. |
 | test.cpp:537:5:537:6 | p indirection | Node should have one toString but has 2. |
 | test.cpp:542:5:542:6 | * ... | Node should have one toString but has 2. |
 | test.cpp:542:5:542:6 | * ... indirection | Node should have one toString but has 2. |
 | test.cpp:542:5:542:6 | p | Node should have one toString but has 2. |
 | test.cpp:542:5:542:6 | p indirection | Node should have one toString but has 2. |
 | test.cpp:548:24:548:25 | & ... | Node should have one toString but has 2. |
 | test.cpp:548:24:548:25 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:548:24:548:25 | x | Node should have one toString but has 2. |
 | test.cpp:548:24:548:25 | x indirection | Node should have one toString but has 2. |
 | test.cpp:552:24:552:25 | & ... | Node should have one toString but has 2. |
 | test.cpp:552:24:552:25 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:552:24:552:25 | y | Node should have one toString but has 2. |
 | test.cpp:552:24:552:25 | y indirection | Node should have one toString but has 2. |
 | test.cpp:566:10:566:19 | * ... | Node should have one toString but has 2. |
 | test.cpp:566:10:566:19 | globalInt indirection | Node should have one toString but has 2. |
 | test.cpp:568:10:568:19 | * ... | Node should have one toString but has 2. |
 | test.cpp:568:10:568:19 | globalInt indirection | Node should have one toString but has 2. |
 | test.cpp:572:10:572:19 | * ... | Node should have one toString but has 2. |
 | test.cpp:572:10:572:19 | globalInt indirection | Node should have one toString but has 2. |
 | test.cpp:578:10:578:19 | * ... | Node should have one toString but has 2. |
 | test.cpp:578:10:578:19 | globalInt indirection | Node should have one toString but has 2. |
 | test.cpp:584:7:584:8 | & ... | Node should have one toString but has 2. |
 | test.cpp:584:7:584:8 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:584:7:584:8 | s | Node should have one toString but has 2. |
 | test.cpp:584:7:584:8 | s indirection | Node should have one toString but has 2. |
 | test.cpp:589:18:589:19 | & ... | Node should have one toString but has 2. |
 | test.cpp:589:18:589:19 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:589:18:589:19 | x | Node should have one toString but has 2. |
 | test.cpp:589:18:589:19 | x indirection | Node should have one toString but has 2. |
 | test.cpp:597:8:597:13 | * ... | Node should have one toString but has 2. |
 | test.cpp:597:8:597:13 | access to array indirection | Node should have one toString but has 2. |
 | test.cpp:603:8:603:9 | * ... | Node should have one toString but has 2. |
 | test.cpp:603:8:603:9 | p indirection | Node should have one toString but has 2. |
 | test.cpp:608:3:608:4 | * ... | Node should have one toString but has 2. |
 | test.cpp:608:3:608:4 | * ... indirection | Node should have one toString but has 2. |
 | test.cpp:608:3:608:4 | p | Node should have one toString but has 2. |
 | test.cpp:608:3:608:4 | p indirection | Node should have one toString but has 2. |
 | test.cpp:609:8:609:9 | * ... | Node should have one toString but has 2. |
 | test.cpp:609:8:609:9 | p indirection | Node should have one toString but has 2. |
 | test.cpp:615:13:615:21 | & ... | Node should have one toString but has 2. |
 | test.cpp:615:13:615:21 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:615:13:615:21 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:615:13:615:21 | p | Node should have one toString but has 2. |
 | test.cpp:615:13:615:21 | p indirection | Node should have one toString but has 2. |
 | test.cpp:615:13:615:21 | p indirection | Node should have one toString but has 2. |
 | test.cpp:616:8:616:17 | * ... | Node should have one toString but has 3. |
 | test.cpp:616:8:616:17 | * ... indirection | Node should have one toString but has 3. |
 | test.cpp:616:8:616:17 | q indirection | Node should have one toString but has 3. |
 | test.cpp:616:9:616:17 | * ... | Node should have one toString but has 2. |
 | test.cpp:616:9:616:17 | q indirection | Node should have one toString but has 2. |
 | test.cpp:665:26:665:27 | & ... | Node should have one toString but has 2. |
 | test.cpp:665:26:665:27 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:665:26:665:27 | s | Node should have one toString but has 2. |
 | test.cpp:665:26:665:27 | s indirection | Node should have one toString but has 2. |
 | test.cpp:666:8:666:16 | * ... | Node should have one toString but has 2. |
 | test.cpp:666:8:666:16 | ptr_to_s indirection | Node should have one toString but has 2. |
 | test.cpp:672:26:672:27 | & ... | Node should have one toString but has 2. |
 | test.cpp:672:26:672:27 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:672:26:672:27 | s | Node should have one toString but has 2. |
 | test.cpp:672:26:672:27 | s indirection | Node should have one toString but has 2. |
 | test.cpp:673:8:673:16 | * ... | Node should have one toString but has 2. |
 | test.cpp:673:8:673:16 | ptr_to_s indirection | Node should have one toString but has 2. |
 | test.cpp:678:26:678:27 | & ... | Node should have one toString but has 2. |
 | test.cpp:678:26:678:27 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:678:26:678:27 | s | Node should have one toString but has 2. |
 | test.cpp:678:26:678:27 | s indirection | Node should have one toString but has 2. |
 | test.cpp:679:8:679:16 | * ... | Node should have one toString but has 2. |
 | test.cpp:679:8:679:16 | ptr_to_s indirection | Node should have one toString but has 2. |
 | test.cpp:686:26:686:27 | & ... | Node should have one toString but has 2. |
 | test.cpp:686:26:686:27 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:686:26:686:27 | s | Node should have one toString but has 2. |
 | test.cpp:686:26:686:27 | s indirection | Node should have one toString but has 2. |
 | test.cpp:687:8:687:16 | * ... | Node should have one toString but has 2. |
 | test.cpp:687:8:687:16 | ptr_to_s indirection | Node should have one toString but has 2. |
 | test.cpp:694:3:694:6 | * ... | Node should have one toString but has 2. |
 | test.cpp:694:3:694:6 | buf indirection | Node should have one toString but has 2. |
 | test.cpp:704:22:704:25 | & ... | Node should have one toString but has 2. |
 | test.cpp:704:22:704:25 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:704:22:704:25 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:704:22:704:25 | buf | Node should have one toString but has 2. |
 | test.cpp:704:22:704:25 | buf indirection | Node should have one toString but has 2. |
 | test.cpp:704:22:704:25 | buf indirection | Node should have one toString but has 2. |
 | test.cpp:715:24:715:25 | & ... | Node should have one toString but has 2. |
 | test.cpp:715:24:715:25 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:715:24:715:25 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:715:24:715:25 | c | Node should have one toString but has 2. |
 | test.cpp:715:24:715:25 | c indirection | Node should have one toString but has 2. |
 | test.cpp:715:24:715:25 | c indirection | Node should have one toString but has 2. |
 | test.cpp:727:7:727:8 | & ... | Node should have one toString but has 2. |
 | test.cpp:727:7:727:8 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:727:7:727:8 | x | Node should have one toString but has 2. |
 | test.cpp:727:7:727:8 | x indirection | Node should have one toString but has 2. |
 | test.cpp:728:3:728:4 | * ... | Node should have one toString but has 2. |
 | test.cpp:728:3:728:4 | * ... indirection | Node should have one toString but has 2. |
 | test.cpp:728:3:728:4 | p | Node should have one toString but has 2. |
 | test.cpp:728:3:728:4 | p indirection | Node should have one toString but has 2. |
 | test.cpp:734:40:734:41 | & ... | Node should have one toString but has 2. |
 | test.cpp:734:40:734:41 | & ... indirection | Node should have one toString but has 2. |
 | test.cpp:734:40:734:41 | x | Node should have one toString but has 2. |
 | test.cpp:734:40:734:41 | x indirection | Node should have one toString but has 2. |
 | true_upon_entry.cpp:55:30:55:34 | 1 | Node should have one toString but has 2. |
 | true_upon_entry.cpp:55:30:55:34 | ... = ... | Node should have one toString but has 2. |
 | true_upon_entry.cpp:63:30:63:34 | 1 | Node should have one toString but has 2. |
 | true_upon_entry.cpp:63:30:63:34 | ... = ... | Node should have one toString but has 2. |
 | true_upon_entry.cpp:76:30:76:34 | 1 | Node should have one toString but has 2. |
 | true_upon_entry.cpp:76:30:76:34 | ... = ... | Node should have one toString but has 2. |
 | true_upon_entry.cpp:84:20:84:24 | 1 | Node should have one toString but has 2. |
 | true_upon_entry.cpp:84:20:84:24 | ... = ... | Node should have one toString but has 2. |
 | true_upon_entry.cpp:91:20:91:24 | 1 | Node should have one toString but has 2. |
 | true_upon_entry.cpp:91:20:91:24 | ... = ... | Node should have one toString but has 2. |
 missingToString
 parameterCallable
 localFlowIsLocal
--- a/cpp/ql/test/library-tests/dataflow/fields/dataflow-ir-consistency.expected
+++ b/cpp/ql/test/library-tests/dataflow/fields/dataflow-ir-consistency.expected
@@ -4,285 +4,6 @@ uniqueType
 uniqueNodeLocation
 missingLocation
 uniqueNodeToString
 | A.cpp:42:10:42:12 | & ... | Node should have one toString but has 2. |
 | A.cpp:42:10:42:12 | & ... indirection | Node should have one toString but has 2. |
 | A.cpp:42:10:42:12 | & ... indirection | Node should have one toString but has 2. |
 | A.cpp:42:10:42:12 | cc | Node should have one toString but has 2. |
 | A.cpp:42:10:42:12 | cc indirection | Node should have one toString but has 2. |
 | A.cpp:42:10:42:12 | cc indirection | Node should have one toString but has 2. |
 | A.cpp:43:10:43:12 | & ... | Node should have one toString but has 2. |
 | A.cpp:43:10:43:12 | & ... indirection | Node should have one toString but has 2. |
 | A.cpp:43:10:43:12 | & ... indirection | Node should have one toString but has 2. |
 | A.cpp:43:10:43:12 | ct | Node should have one toString but has 2. |
 | A.cpp:43:10:43:12 | ct indirection | Node should have one toString but has 2. |
 | A.cpp:43:10:43:12 | ct indirection | Node should have one toString but has 2. |
 | A.cpp:105:9:105:38 | (condition decl) | Node should have one toString but has 2. |
 | A.cpp:105:9:105:38 | c1 | Node should have one toString but has 2. |
 | A.cpp:110:9:110:38 | (condition decl) | Node should have one toString but has 2. |
 | A.cpp:110:9:110:38 | c2 | Node should have one toString but has 2. |
 | A.cpp:118:9:118:39 | (condition decl) | Node should have one toString but has 2. |
 | A.cpp:118:9:118:39 | c1 | Node should have one toString but has 2. |
 | E.cpp:33:18:33:19 | & ... | Node should have one toString but has 2. |
 | E.cpp:33:18:33:19 | & ... indirection | Node should have one toString but has 2. |
 | E.cpp:33:18:33:19 | p | Node should have one toString but has 2. |
 | E.cpp:33:18:33:19 | p indirection | Node should have one toString but has 2. |
 | aliasing.cpp:25:17:25:19 | & ... | Node should have one toString but has 2. |
 | aliasing.cpp:25:17:25:19 | & ... indirection | Node should have one toString but has 2. |
 | aliasing.cpp:25:17:25:19 | s1 | Node should have one toString but has 2. |
 | aliasing.cpp:25:17:25:19 | s1 indirection | Node should have one toString but has 2. |
 | aliasing.cpp:78:10:78:13 | & ... | Node should have one toString but has 2. |
 | aliasing.cpp:78:10:78:13 | & ... indirection | Node should have one toString but has 2. |
 | aliasing.cpp:78:10:78:13 | s | Node should have one toString but has 2. |
 | aliasing.cpp:78:10:78:13 | s indirection | Node should have one toString but has 2. |
 | aliasing.cpp:101:13:101:22 | & ... | Node should have one toString but has 2. |
 | aliasing.cpp:101:13:101:22 | & ... indirection | Node should have one toString but has 2. |
 | aliasing.cpp:101:13:101:22 | m1 | Node should have one toString but has 2. |
 | aliasing.cpp:101:13:101:22 | m1 indirection | Node should have one toString but has 2. |
 | aliasing.cpp:102:8:102:10 | * ... | Node should have one toString but has 2. |
 | aliasing.cpp:102:8:102:10 | px indirection | Node should have one toString but has 2. |
 | aliasing.cpp:106:3:106:5 | * ... | Node should have one toString but has 2. |
 | aliasing.cpp:106:3:106:5 | * ... indirection | Node should have one toString but has 2. |
 | aliasing.cpp:106:3:106:5 | pa | Node should have one toString but has 2. |
 | aliasing.cpp:106:3:106:5 | pa indirection | Node should have one toString but has 2. |
 | aliasing.cpp:111:15:111:19 | & ... | Node should have one toString but has 2. |
 | aliasing.cpp:111:15:111:19 | & ... indirection | Node should have one toString but has 2. |
 | aliasing.cpp:111:15:111:19 | m1 | Node should have one toString but has 2. |
 | aliasing.cpp:111:15:111:19 | m1 indirection | Node should have one toString but has 2. |
 | aliasing.cpp:127:8:127:16 | * ... | Node should have one toString but has 2. |
 | aliasing.cpp:127:8:127:16 | ... - ... indirection | Node should have one toString but has 2. |
 | aliasing.cpp:132:8:132:14 | & ... indirection | Node should have one toString but has 4. |
 | aliasing.cpp:132:8:132:14 | * ... | Node should have one toString but has 4. |
 | aliasing.cpp:132:8:132:14 | * ... indirection | Node should have one toString but has 4. |
 | aliasing.cpp:132:8:132:14 | xs indirection | Node should have one toString but has 4. |
 | aliasing.cpp:132:9:132:14 | & ... | Node should have one toString but has 3. |
 | aliasing.cpp:132:9:132:14 | * ... | Node should have one toString but has 3. |
 | aliasing.cpp:132:9:132:14 | xs | Node should have one toString but has 3. |
 | aliasing.cpp:136:15:136:17 | + ... | Node should have one toString but has 2. |
 | aliasing.cpp:136:15:136:17 | + ... indirection | Node should have one toString but has 2. |
 | aliasing.cpp:136:15:136:17 | xs | Node should have one toString but has 2. |
 | aliasing.cpp:136:15:136:17 | xs indirection | Node should have one toString but has 2. |
 | aliasing.cpp:137:8:137:11 | * ... | Node should have one toString but has 3. |
 | aliasing.cpp:137:8:137:11 | + ... indirection | Node should have one toString but has 3. |
 | aliasing.cpp:137:8:137:11 | xs indirection | Node should have one toString but has 3. |
 | aliasing.cpp:137:9:137:11 | + ... | Node should have one toString but has 2. |
 | aliasing.cpp:137:9:137:11 | xs | Node should have one toString but has 2. |
 | aliasing.cpp:147:15:147:22 | & ... | Node should have one toString but has 2. |
 | aliasing.cpp:147:15:147:22 | & ... indirection | Node should have one toString but has 2. |
 | aliasing.cpp:147:15:147:22 | m1 | Node should have one toString but has 2. |
 | aliasing.cpp:147:15:147:22 | m1 indirection | Node should have one toString but has 2. |
 | aliasing.cpp:159:8:159:14 | * ... | Node should have one toString but has 2. |
 | aliasing.cpp:159:8:159:14 | data indirection | Node should have one toString but has 2. |
 | aliasing.cpp:175:15:175:22 | & ... | Node should have one toString but has 2. |
 | aliasing.cpp:175:15:175:22 | & ... indirection | Node should have one toString but has 2. |
 | aliasing.cpp:175:15:175:22 | m1 | Node should have one toString but has 2. |
 | aliasing.cpp:175:15:175:22 | m1 indirection | Node should have one toString but has 2. |
 | aliasing.cpp:181:15:181:22 | & ... | Node should have one toString but has 2. |
 | aliasing.cpp:181:15:181:22 | & ... indirection | Node should have one toString but has 2. |
 | aliasing.cpp:181:15:181:22 | m1 | Node should have one toString but has 2. |
 | aliasing.cpp:181:15:181:22 | m1 indirection | Node should have one toString but has 2. |
 | aliasing.cpp:187:15:187:22 | & ... | Node should have one toString but has 2. |
 | aliasing.cpp:187:15:187:22 | & ... indirection | Node should have one toString but has 2. |
 | aliasing.cpp:187:15:187:22 | m1 | Node should have one toString but has 2. |
 | aliasing.cpp:187:15:187:22 | m1 indirection | Node should have one toString but has 2. |
 | aliasing.cpp:194:15:194:22 | & ... | Node should have one toString but has 2. |
 | aliasing.cpp:194:15:194:22 | & ... indirection | Node should have one toString but has 2. |
 | aliasing.cpp:194:15:194:22 | m1 | Node should have one toString but has 2. |
 | aliasing.cpp:194:15:194:22 | m1 indirection | Node should have one toString but has 2. |
 | aliasing.cpp:200:15:200:24 | & ... | Node should have one toString but has 2. |
 | aliasing.cpp:200:15:200:24 | & ... indirection | Node should have one toString but has 2. |
 | aliasing.cpp:200:15:200:24 | m1 | Node should have one toString but has 2. |
 | aliasing.cpp:200:15:200:24 | m1 indirection | Node should have one toString but has 2. |
 | aliasing.cpp:205:15:205:24 | & ... | Node should have one toString but has 2. |
 | aliasing.cpp:205:15:205:24 | & ... indirection | Node should have one toString but has 2. |
 | aliasing.cpp:205:15:205:24 | m1 | Node should have one toString but has 2. |
 | aliasing.cpp:205:15:205:24 | m1 indirection | Node should have one toString but has 2. |
 | arrays.cpp:9:8:9:11 | * ... | Node should have one toString but has 2. |
 | arrays.cpp:9:8:9:11 | * ... indirection | Node should have one toString but has 2. |
 | arrays.cpp:9:8:9:11 | arr indirection | Node should have one toString but has 2. |
 | arrays.cpp:9:8:9:11 | arr indirection | Node should have one toString but has 2. |
 | arrays.cpp:10:8:10:15 | & ... indirection | Node should have one toString but has 3. |
 | arrays.cpp:10:8:10:15 | & ... indirection | Node should have one toString but has 3. |
 | arrays.cpp:10:8:10:15 | * ... | Node should have one toString but has 3. |
 | arrays.cpp:10:8:10:15 | * ... indirection | Node should have one toString but has 3. |
 | arrays.cpp:10:8:10:15 | access to array indirection | Node should have one toString but has 3. |
 | arrays.cpp:10:8:10:15 | access to array indirection | Node should have one toString but has 3. |
 | arrays.cpp:10:9:10:15 | & ... | Node should have one toString but has 2. |
 | arrays.cpp:10:9:10:15 | access to array | Node should have one toString but has 2. |
 | arrays.cpp:15:3:15:10 | & ... | Node should have one toString but has 3. |
 | arrays.cpp:15:3:15:10 | & ... indirection | Node should have one toString but has 3. |
 | arrays.cpp:15:3:15:10 | & ... indirection | Node should have one toString but has 3. |
 | arrays.cpp:15:3:15:10 | & ... indirection | Node should have one toString but has 3. |
 | arrays.cpp:15:3:15:10 | * ... | Node should have one toString but has 3. |
 | arrays.cpp:15:3:15:10 | * ... indirection | Node should have one toString but has 3. |
 | arrays.cpp:15:3:15:10 | * ... indirection | Node should have one toString but has 3. |
 | arrays.cpp:15:3:15:10 | * ... indirection | Node should have one toString but has 3. |
 | arrays.cpp:15:3:15:10 | access to array | Node should have one toString but has 3. |
 | arrays.cpp:15:3:15:10 | access to array indirection | Node should have one toString but has 3. |
 | arrays.cpp:15:3:15:10 | access to array indirection | Node should have one toString but has 3. |
 | arrays.cpp:15:3:15:10 | access to array indirection | Node should have one toString but has 3. |
 | by_reference.cpp:68:17:68:18 | & ... | Node should have one toString but has 2. |
 | by_reference.cpp:68:17:68:18 | & ... indirection | Node should have one toString but has 2. |
 | by_reference.cpp:68:17:68:18 | s | Node should have one toString but has 2. |
 | by_reference.cpp:68:17:68:18 | s indirection | Node should have one toString but has 2. |
 | by_reference.cpp:69:22:69:23 | & ... | Node should have one toString but has 2. |
 | by_reference.cpp:69:22:69:23 | & ... indirection | Node should have one toString but has 2. |
 | by_reference.cpp:69:22:69:23 | s | Node should have one toString but has 2. |
 | by_reference.cpp:69:22:69:23 | s indirection | Node should have one toString but has 2. |
 | by_reference.cpp:92:3:92:5 | * ... | Node should have one toString but has 2. |
 | by_reference.cpp:92:3:92:5 | * ... indirection | Node should have one toString but has 2. |
 | by_reference.cpp:92:3:92:5 | * ... indirection | Node should have one toString but has 2. |
 | by_reference.cpp:92:3:92:5 | * ... indirection | Node should have one toString but has 2. |
 | by_reference.cpp:92:3:92:5 | pa | Node should have one toString but has 2. |
 | by_reference.cpp:92:3:92:5 | pa indirection | Node should have one toString but has 2. |
 | by_reference.cpp:92:3:92:5 | pa indirection | Node should have one toString but has 2. |
 | by_reference.cpp:92:3:92:5 | pa indirection | Node should have one toString but has 2. |
 | by_reference.cpp:102:21:102:39 | & ... | Node should have one toString but has 2. |
 | by_reference.cpp:102:21:102:39 | & ... indirection | Node should have one toString but has 2. |
 | by_reference.cpp:102:21:102:39 | inner_nested | Node should have one toString but has 2. |
 | by_reference.cpp:102:21:102:39 | inner_nested indirection | Node should have one toString but has 2. |
 | by_reference.cpp:104:15:104:22 | & ... | Node should have one toString but has 2. |
 | by_reference.cpp:104:15:104:22 | & ... indirection | Node should have one toString but has 2. |
 | by_reference.cpp:104:15:104:22 | & ... indirection | Node should have one toString but has 2. |
 | by_reference.cpp:104:15:104:22 | a | Node should have one toString but has 2. |
 | by_reference.cpp:104:15:104:22 | a indirection | Node should have one toString but has 2. |
 | by_reference.cpp:104:15:104:22 | a indirection | Node should have one toString but has 2. |
 | by_reference.cpp:106:21:106:41 | & ... | Node should have one toString but has 2. |
 | by_reference.cpp:106:21:106:41 | & ... indirection | Node should have one toString but has 2. |
 | by_reference.cpp:106:21:106:41 | inner_nested | Node should have one toString but has 2. |
 | by_reference.cpp:106:21:106:41 | inner_nested indirection | Node should have one toString but has 2. |
 | by_reference.cpp:108:15:108:24 | & ... | Node should have one toString but has 2. |
 | by_reference.cpp:108:15:108:24 | & ... indirection | Node should have one toString but has 2. |
 | by_reference.cpp:108:15:108:24 | & ... indirection | Node should have one toString but has 2. |
 | by_reference.cpp:108:15:108:24 | a | Node should have one toString but has 2. |
 | by_reference.cpp:108:15:108:24 | a indirection | Node should have one toString but has 2. |
 | by_reference.cpp:108:15:108:24 | a indirection | Node should have one toString but has 2. |
 | by_reference.cpp:123:21:123:36 | * ... | Node should have one toString but has 2. |
 | by_reference.cpp:123:21:123:36 | * ... indirection | Node should have one toString but has 2. |
 | by_reference.cpp:123:21:123:36 | inner_ptr | Node should have one toString but has 2. |
 | by_reference.cpp:123:21:123:36 | inner_ptr indirection | Node should have one toString but has 2. |
 | by_reference.cpp:127:21:127:38 | * ... | Node should have one toString but has 2. |
 | by_reference.cpp:127:21:127:38 | * ... indirection | Node should have one toString but has 2. |
 | by_reference.cpp:127:21:127:38 | inner_ptr | Node should have one toString but has 2. |
 | by_reference.cpp:127:21:127:38 | inner_ptr indirection | Node should have one toString but has 2. |
 | clearning.cpp:19:3:19:6 | * ... | Node should have one toString but has 2. |
 | clearning.cpp:19:3:19:6 | * ... indirection | Node should have one toString but has 2. |
 | clearning.cpp:19:3:19:6 | * ... indirection | Node should have one toString but has 2. |
 | clearning.cpp:19:3:19:6 | x | Node should have one toString but has 2. |
 | clearning.cpp:19:3:19:6 | x indirection | Node should have one toString but has 2. |
 | clearning.cpp:19:3:19:6 | x indirection | Node should have one toString but has 2. |
 | clearning.cpp:20:8:20:12 | * ... | Node should have one toString but has 3. |
 | clearning.cpp:20:8:20:12 | * ... indirection | Node should have one toString but has 3. |
 | clearning.cpp:20:8:20:12 | x indirection | Node should have one toString but has 3. |
 | clearning.cpp:20:9:20:12 | * ... | Node should have one toString but has 2. |
 | clearning.cpp:20:9:20:12 | x indirection | Node should have one toString but has 2. |
 | clearning.cpp:27:8:27:12 | * ... | Node should have one toString but has 3. |
 | clearning.cpp:27:8:27:12 | * ... indirection | Node should have one toString but has 3. |
 | clearning.cpp:27:8:27:12 | x indirection | Node should have one toString but has 3. |
 | clearning.cpp:27:9:27:12 | * ... | Node should have one toString but has 2. |
 | clearning.cpp:27:9:27:12 | x indirection | Node should have one toString but has 2. |
 | clearning.cpp:32:3:32:6 | * ... | Node should have one toString but has 2. |
 | clearning.cpp:32:3:32:6 | * ... indirection | Node should have one toString but has 2. |
 | clearning.cpp:32:3:32:6 | * ... indirection | Node should have one toString but has 2. |
 | clearning.cpp:32:3:32:6 | x | Node should have one toString but has 2. |
 | clearning.cpp:32:3:32:6 | x indirection | Node should have one toString but has 2. |
 | clearning.cpp:32:3:32:6 | x indirection | Node should have one toString but has 2. |
 | clearning.cpp:34:8:34:11 | * ... | Node should have one toString but has 2. |
 | clearning.cpp:34:8:34:11 | * ... indirection | Node should have one toString but has 2. |
 | clearning.cpp:34:8:34:11 | x indirection | Node should have one toString but has 2. |
 | clearning.cpp:34:8:34:11 | x indirection | Node should have one toString but has 2. |
 | clearning.cpp:39:3:39:6 | * ... | Node should have one toString but has 2. |
 | clearning.cpp:39:3:39:6 | * ... indirection | Node should have one toString but has 2. |
 | clearning.cpp:39:3:39:6 | * ... indirection | Node should have one toString but has 2. |
 | clearning.cpp:39:3:39:6 | x | Node should have one toString but has 2. |
 | clearning.cpp:39:3:39:6 | x indirection | Node should have one toString but has 2. |
 | clearning.cpp:39:3:39:6 | x indirection | Node should have one toString but has 2. |
 | clearning.cpp:41:8:41:11 | * ... | Node should have one toString but has 2. |
 | clearning.cpp:41:8:41:11 | * ... indirection | Node should have one toString but has 2. |
 | clearning.cpp:41:8:41:11 | x indirection | Node should have one toString but has 2. |
 | clearning.cpp:41:8:41:11 | x indirection | Node should have one toString but has 2. |
 | clearning.cpp:48:8:48:11 | * ... | Node should have one toString but has 2. |
 | clearning.cpp:48:8:48:11 | * ... indirection | Node should have one toString but has 2. |
 | clearning.cpp:48:8:48:11 | x indirection | Node should have one toString but has 2. |
 | clearning.cpp:48:8:48:11 | x indirection | Node should have one toString but has 2. |
 | clearning.cpp:53:3:53:6 | * ... | Node should have one toString but has 2. |
 | clearning.cpp:53:3:53:6 | * ... indirection | Node should have one toString but has 2. |
 | clearning.cpp:53:3:53:6 | * ... indirection | Node should have one toString but has 2. |
 | clearning.cpp:53:3:53:6 | x | Node should have one toString but has 2. |
 | clearning.cpp:53:3:53:6 | x indirection | Node should have one toString but has 2. |
 | clearning.cpp:53:3:53:6 | x indirection | Node should have one toString but has 2. |
 | clearning.cpp:76:7:76:12 | * ... | Node should have one toString but has 2. |
 | clearning.cpp:76:7:76:12 | val indirection | Node should have one toString but has 2. |
 | clearning.cpp:84:7:84:12 | * ... | Node should have one toString but has 2. |
 | clearning.cpp:84:7:84:12 | val indirection | Node should have one toString but has 2. |
 | clearning.cpp:90:2:90:9 | * ... | Node should have one toString but has 3. |
 | clearning.cpp:90:2:90:9 | * ... indirection | Node should have one toString but has 3. |
 | clearning.cpp:90:2:90:9 | ... ++ | Node should have one toString but has 3. |
 | clearning.cpp:90:2:90:9 | ... ++ indirection | Node should have one toString but has 3. |
 | clearning.cpp:90:2:90:9 | val | Node should have one toString but has 3. |
 | clearning.cpp:90:2:90:9 | val indirection | Node should have one toString but has 3. |
 | clearning.cpp:91:7:91:12 | * ... | Node should have one toString but has 2. |
 | clearning.cpp:91:7:91:12 | val indirection | Node should have one toString but has 2. |
 | clearning.cpp:98:7:98:12 | * ... | Node should have one toString but has 2. |
 | clearning.cpp:98:7:98:12 | val indirection | Node should have one toString but has 2. |
 | clearning.cpp:105:7:105:12 | * ... | Node should have one toString but has 2. |
 | clearning.cpp:105:7:105:12 | val indirection | Node should have one toString but has 2. |
 | clearning.cpp:112:7:112:12 | * ... | Node should have one toString but has 2. |
 | clearning.cpp:112:7:112:12 | val indirection | Node should have one toString but has 2. |
 | clearning.cpp:119:7:119:12 | * ... | Node should have one toString but has 2. |
 | clearning.cpp:119:7:119:12 | val indirection | Node should have one toString but has 2. |
 | conflated.cpp:10:3:10:7 | * ... | Node should have one toString but has 2. |
 | conflated.cpp:10:3:10:7 | * ... indirection | Node should have one toString but has 2. |
 | conflated.cpp:10:3:10:7 | p | Node should have one toString but has 2. |
 | conflated.cpp:10:3:10:7 | p indirection | Node should have one toString but has 2. |
 | conflated.cpp:11:8:11:12 | * ... | Node should have one toString but has 2. |
 | conflated.cpp:11:8:11:12 | p indirection | Node should have one toString but has 2. |
 | qualifiers.cpp:37:19:37:35 | * ... | Node should have one toString but has 2. |
 | qualifiers.cpp:37:19:37:35 | * ... indirection | Node should have one toString but has 2. |
 | qualifiers.cpp:37:19:37:35 | call to getInner | Node should have one toString but has 2. |
 | qualifiers.cpp:37:19:37:35 | call to getInner indirection | Node should have one toString but has 2. |
 | qualifiers.cpp:42:6:42:22 | * ... | Node should have one toString but has 2. |
 | qualifiers.cpp:42:6:42:22 | * ... indirection | Node should have one toString but has 2. |
 | qualifiers.cpp:42:6:42:22 | call to getInner | Node should have one toString but has 2. |
 | qualifiers.cpp:42:6:42:22 | call to getInner indirection | Node should have one toString but has 2. |
 | qualifiers.cpp:42:25:42:25 | * ... indirection [post update] | Node should have one toString but has 2. |
 | qualifiers.cpp:42:25:42:25 | call to getInner indirection [post update] | Node should have one toString but has 2. |
 | qualifiers.cpp:47:6:47:11 | & ... | Node should have one toString but has 2. |
 | qualifiers.cpp:47:6:47:11 | & ... indirection | Node should have one toString but has 2. |
 | qualifiers.cpp:47:6:47:11 | outer | Node should have one toString but has 2. |
 | qualifiers.cpp:47:6:47:11 | outer indirection | Node should have one toString but has 2. |
 | realistic.cpp:25:15:25:36 | & ... | Node should have one toString but has 2. |
 | realistic.cpp:25:15:25:36 | & ... indirection | Node should have one toString but has 2. |
 | realistic.cpp:25:15:25:36 | & ... indirection | Node should have one toString but has 2. |
 | realistic.cpp:25:15:25:36 | access to array | Node should have one toString but has 2. |
 | realistic.cpp:25:15:25:36 | access to array indirection | Node should have one toString but has 2. |
 | realistic.cpp:25:15:25:36 | access to array indirection | Node should have one toString but has 2. |
 | realistic.cpp:34:9:34:12 | * ... | Node should have one toString but has 3. |
 | realistic.cpp:34:9:34:12 | * ... indirection | Node should have one toString but has 3. |
 | realistic.cpp:34:9:34:12 | ... ++ | Node should have one toString but has 3. |
 | realistic.cpp:34:9:34:12 | ... ++ indirection | Node should have one toString but has 3. |
 | realistic.cpp:34:9:34:12 | d | Node should have one toString but has 3. |
 | realistic.cpp:34:9:34:12 | d indirection | Node should have one toString but has 3. |
 | realistic.cpp:34:16:34:19 | * ... | Node should have one toString but has 3. |
 | realistic.cpp:34:16:34:19 | ... ++ indirection | Node should have one toString but has 3. |
 | realistic.cpp:34:16:34:19 | s indirection | Node should have one toString but has 3. |
 | realistic.cpp:34:17:34:19 | ... ++ | Node should have one toString but has 2. |
 | realistic.cpp:34:17:34:19 | s | Node should have one toString but has 2. |
 | struct_init.c:24:10:24:12 | & ... | Node should have one toString but has 2. |
 | struct_init.c:24:10:24:12 | & ... indirection | Node should have one toString but has 2. |
 | struct_init.c:24:10:24:12 | ab | Node should have one toString but has 2. |
 | struct_init.c:24:10:24:12 | ab indirection | Node should have one toString but has 2. |
 | struct_init.c:28:5:28:7 | & ... | Node should have one toString but has 2. |
 | struct_init.c:28:5:28:7 | & ... indirection | Node should have one toString but has 2. |
 | struct_init.c:28:5:28:7 | ab | Node should have one toString but has 2. |
 | struct_init.c:28:5:28:7 | ab indirection | Node should have one toString but has 2. |
 | struct_init.c:36:10:36:24 | & ... | Node should have one toString but has 2. |
 | struct_init.c:36:10:36:24 | & ... indirection | Node should have one toString but has 2. |
 | struct_init.c:36:10:36:24 | nestedAB | Node should have one toString but has 2. |
 | struct_init.c:36:10:36:24 | nestedAB indirection | Node should have one toString but has 2. |
 | struct_init.c:43:5:43:7 | & ... | Node should have one toString but has 2. |
 | struct_init.c:43:5:43:7 | & ... indirection | Node should have one toString but has 2. |
 | struct_init.c:43:5:43:7 | ab | Node should have one toString but has 2. |
 | struct_init.c:43:5:43:7 | ab indirection | Node should have one toString but has 2. |
 missingToString
 parameterCallable
 localFlowIsLocal
--- a/cpp/ql/test/library-tests/dataflow/fields/ir-path-flow.expected
+++ b/cpp/ql/test/library-tests/dataflow/fields/ir-path-flow.expected
@@ -11,7 +11,6 @@ edges
 | A.cpp:31:20:31:20 | c | A.cpp:23:10:23:10 | c |
 | A.cpp:31:20:31:20 | c | A.cpp:31:14:31:21 | call to B [c] |
 | A.cpp:41:5:41:6 | insert output argument | A.cpp:43:10:43:12 | & ... indirection |
 | A.cpp:41:5:41:6 | insert output argument | A.cpp:43:10:43:12 | ct indirection |
 | A.cpp:41:15:41:21 | new | A.cpp:41:5:41:6 | insert output argument |
 | A.cpp:41:15:41:21 | new | A.cpp:41:5:41:6 | insert output argument |
 | A.cpp:41:15:41:21 | new | A.cpp:41:15:41:21 | new |
@@ -213,14 +212,12 @@ edges
 | E.cpp:29:24:29:29 | b indirection [post update] [buffer indirection] | E.cpp:32:10:32:10 | b indirection [buffer indirection] |
 | E.cpp:30:21:30:33 | argument_source output argument | E.cpp:30:28:30:33 | data indirection [post update] [buffer indirection] |
 | E.cpp:30:23:30:26 | p indirection [post update] [data, buffer indirection] | E.cpp:33:18:33:19 | & ... indirection [data, buffer indirection] |
 | E.cpp:30:23:30:26 | p indirection [post update] [data, buffer indirection] | E.cpp:33:18:33:19 | p indirection [data, buffer indirection] |
 | E.cpp:30:28:30:33 | data indirection [post update] [buffer indirection] | E.cpp:30:23:30:26 | p indirection [post update] [data, buffer indirection] |
 | E.cpp:32:10:32:10 | b indirection [buffer indirection] | E.cpp:32:13:32:18 | buffer indirection |
 | E.cpp:32:10:32:10 | b indirection [buffer indirection] | E.cpp:32:13:32:18 | buffer indirection |
 | E.cpp:32:13:32:18 | buffer indirection | E.cpp:32:13:32:18 | buffer indirection |
 | E.cpp:32:13:32:18 | buffer indirection | E.cpp:32:13:32:18 | buffer indirection |
 | E.cpp:33:18:33:19 | & ... indirection [data, buffer indirection] | E.cpp:19:27:19:27 | p indirection [data, buffer indirection] |
 | E.cpp:33:18:33:19 | p indirection [data, buffer indirection] | E.cpp:19:27:19:27 | p indirection [data, buffer indirection] |
 | aliasing.cpp:9:3:9:22 | ... = ... | aliasing.cpp:9:6:9:7 | s indirection [post update] [m1] |
 | aliasing.cpp:9:6:9:7 | s indirection [post update] [m1] | aliasing.cpp:25:17:25:19 | pointerSetter output argument [m1] |
 | aliasing.cpp:9:11:9:20 | call to user_input | aliasing.cpp:9:3:9:22 | ... = ... |
@@ -245,11 +242,7 @@ edges
 | aliasing.cpp:98:5:98:6 | s indirection [post update] [m1] | aliasing.cpp:101:14:101:19 | s_copy indirection [m1] |
 | aliasing.cpp:98:10:98:19 | call to user_input | aliasing.cpp:98:3:98:21 | ... = ... |
 | aliasing.cpp:101:13:101:22 | & ... indirection | aliasing.cpp:102:8:102:10 | * ... |
 | aliasing.cpp:101:13:101:22 | & ... indirection | aliasing.cpp:102:8:102:10 | px indirection |
 | aliasing.cpp:101:13:101:22 | m1 indirection | aliasing.cpp:102:8:102:10 | * ... |
 | aliasing.cpp:101:13:101:22 | m1 indirection | aliasing.cpp:102:8:102:10 | px indirection |
 | aliasing.cpp:101:14:101:19 | s_copy indirection [m1] | aliasing.cpp:101:13:101:22 | & ... indirection |
 | aliasing.cpp:101:14:101:19 | s_copy indirection [m1] | aliasing.cpp:101:13:101:22 | m1 indirection |
 | aliasing.cpp:105:23:105:24 | pa | aliasing.cpp:121:15:121:16 | taint_a_ptr output argument |
 | aliasing.cpp:105:23:105:24 | pa | aliasing.cpp:126:15:126:20 | taint_a_ptr output argument |
 | aliasing.cpp:105:23:105:24 | pa | aliasing.cpp:131:15:131:16 | taint_a_ptr output argument |
@@ -263,14 +256,8 @@ edges
 | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:105:23:105:24 | pa |
 | aliasing.cpp:121:15:121:16 | taint_a_ptr output argument | aliasing.cpp:122:8:122:12 | access to array |
 | aliasing.cpp:126:15:126:20 | taint_a_ptr output argument | aliasing.cpp:127:8:127:16 | * ... |
 | aliasing.cpp:126:15:126:20 | taint_a_ptr output argument | aliasing.cpp:127:8:127:16 | ... - ... indirection |
 | aliasing.cpp:131:15:131:16 | taint_a_ptr output argument | aliasing.cpp:132:8:132:14 | & ... indirection |
 | aliasing.cpp:131:15:131:16 | taint_a_ptr output argument | aliasing.cpp:132:8:132:14 | * ... |
 | aliasing.cpp:131:15:131:16 | taint_a_ptr output argument | aliasing.cpp:132:8:132:14 | * ... indirection |
 | aliasing.cpp:131:15:131:16 | taint_a_ptr output argument | aliasing.cpp:132:8:132:14 | xs indirection |
 | aliasing.cpp:136:15:136:17 | taint_a_ptr output argument | aliasing.cpp:137:8:137:11 | * ... |
 | aliasing.cpp:136:15:136:17 | taint_a_ptr output argument | aliasing.cpp:137:8:137:11 | + ... indirection |
 | aliasing.cpp:136:15:136:17 | taint_a_ptr output argument | aliasing.cpp:137:8:137:11 | xs indirection |
 | aliasing.cpp:141:17:141:20 | s indirection [post update] [data indirection] | aliasing.cpp:143:8:143:8 | s indirection [data indirection] |
 | aliasing.cpp:141:17:141:20 | taint_a_ptr output argument | aliasing.cpp:141:17:141:20 | s indirection [post update] [data indirection] |
 | aliasing.cpp:143:8:143:8 | s indirection [data indirection] | aliasing.cpp:143:8:143:16 | access to array |
@@ -279,7 +266,6 @@ edges
 | aliasing.cpp:158:15:158:20 | taint_a_ptr output argument | aliasing.cpp:158:17:158:20 | s indirection [post update] [data] |
 | aliasing.cpp:158:17:158:20 | s indirection [post update] [data] | aliasing.cpp:159:9:159:9 | s indirection [data] |
 | aliasing.cpp:159:9:159:9 | s indirection [data] | aliasing.cpp:159:8:159:14 | * ... |
 | aliasing.cpp:159:9:159:9 | s indirection [data] | aliasing.cpp:159:8:159:14 | data indirection |
 | aliasing.cpp:164:15:164:20 | taint_a_ptr output argument | aliasing.cpp:164:17:164:20 | s indirection [post update] [data] |
 | aliasing.cpp:164:17:164:20 | s indirection [post update] [data] | aliasing.cpp:165:8:165:8 | s indirection [data] |
 | aliasing.cpp:165:8:165:8 | s indirection [data] | aliasing.cpp:165:8:165:16 | access to array |
@@ -301,10 +287,7 @@ edges
 | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:7:8:7:13 | access to array |
 | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:8:8:8:13 | access to array |
 | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:9:8:9:11 | * ... |
 | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:9:8:9:11 | arr indirection |
 | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | & ... indirection |
 | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | * ... |
 | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | access to array indirection |
 | arrays.cpp:15:14:15:23 | call to user_input | arrays.cpp:16:8:16:13 | access to array |
 | arrays.cpp:15:14:15:23 | call to user_input | arrays.cpp:17:8:17:13 | access to array |
 | arrays.cpp:36:3:36:37 | ... = ... | arrays.cpp:36:19:36:22 | access to array indirection [post update] [data] |
@@ -391,13 +374,10 @@ edges
 | by_reference.cpp:63:8:63:8 | s indirection [a] | by_reference.cpp:43:9:43:27 | this indirection [a] |
 | by_reference.cpp:63:8:63:8 | s indirection [a] | by_reference.cpp:63:10:63:28 | call to getThroughNonMember |
 | by_reference.cpp:68:17:68:18 | nonMemberSetA output argument [a] | by_reference.cpp:69:22:69:23 | & ... indirection [a] |
 | by_reference.cpp:68:17:68:18 | nonMemberSetA output argument [a] | by_reference.cpp:69:22:69:23 | s indirection [a] |
 | by_reference.cpp:68:21:68:30 | call to user_input | by_reference.cpp:11:48:11:52 | value |
 | by_reference.cpp:68:21:68:30 | call to user_input | by_reference.cpp:68:17:68:18 | nonMemberSetA output argument [a] |
 | by_reference.cpp:69:22:69:23 | & ... indirection [a] | by_reference.cpp:31:46:31:46 | s indirection [a] |
 | by_reference.cpp:69:22:69:23 | & ... indirection [a] | by_reference.cpp:69:8:69:20 | call to nonMemberGetA |
 | by_reference.cpp:69:22:69:23 | s indirection [a] | by_reference.cpp:31:46:31:46 | s indirection [a] |
 | by_reference.cpp:69:22:69:23 | s indirection [a] | by_reference.cpp:69:8:69:20 | call to nonMemberGetA |
 | by_reference.cpp:84:3:84:25 | ... = ... | by_reference.cpp:84:10:84:10 | inner indirection [post update] [a] |
 | by_reference.cpp:84:10:84:10 | inner indirection [post update] [a] | by_reference.cpp:102:21:102:39 | taint_inner_a_ptr output argument [a] |
 | by_reference.cpp:84:10:84:10 | inner indirection [post update] [a] | by_reference.cpp:103:27:103:35 | taint_inner_a_ptr output argument [a] |
@@ -469,7 +449,6 @@ edges
 | clearning.cpp:32:10:32:19 | call to user_input | clearning.cpp:32:3:32:25 | ... = ... |
 | clearning.cpp:33:5:33:5 | s indirection [x indirection] | clearning.cpp:34:9:34:9 | s indirection [x indirection] |
 | clearning.cpp:34:9:34:9 | s indirection [x indirection] | clearning.cpp:34:8:34:11 | * ... |
 | clearning.cpp:34:9:34:9 | s indirection [x indirection] | clearning.cpp:34:8:34:11 | x indirection |
 | clearning.cpp:53:3:53:25 | ... = ... | clearning.cpp:53:6:53:6 | s indirection [post update] [x indirection] |
 | clearning.cpp:53:6:53:6 | s indirection [post update] [x indirection] | clearning.cpp:54:3:54:3 | s indirection [x indirection] |
 | clearning.cpp:53:10:53:19 | call to user_input | clearning.cpp:53:3:53:25 | ... = ... |
@@ -501,7 +480,6 @@ edges
 | clearning.cpp:74:20:74:22 | argument_source output argument | clearning.cpp:74:20:74:22 | s indirection [post update] [val indirection] |
 | clearning.cpp:74:20:74:22 | s indirection [post update] [val indirection] | clearning.cpp:76:8:76:8 | s indirection [val indirection] |
 | clearning.cpp:76:8:76:8 | s indirection [val indirection] | clearning.cpp:76:7:76:12 | * ... |
 | clearning.cpp:76:8:76:8 | s indirection [val indirection] | clearning.cpp:76:7:76:12 | val indirection |
 | clearning.cpp:81:20:81:22 | argument_source output argument | clearning.cpp:81:20:81:22 | s indirection [post update] [val indirection] |
 | clearning.cpp:81:20:81:22 | s indirection [post update] [val indirection] | clearning.cpp:83:13:83:13 | s indirection [val indirection] |
 | clearning.cpp:83:5:83:21 | ... = ... indirection | clearning.cpp:83:7:83:9 | s indirection [post update] [val indirection] |
@@ -511,7 +489,6 @@ edges
 | clearning.cpp:83:13:83:21 | ... + ... indirection | clearning.cpp:83:5:83:21 | ... = ... indirection |
 | clearning.cpp:83:15:83:17 | val indirection | clearning.cpp:83:5:83:21 | ... = ... indirection |
 | clearning.cpp:84:8:84:8 | s indirection [val indirection] | clearning.cpp:84:7:84:12 | * ... |
 | clearning.cpp:84:8:84:8 | s indirection [val indirection] | clearning.cpp:84:7:84:12 | val indirection |
 | clearning.cpp:89:20:89:22 | argument_source output argument | clearning.cpp:89:20:89:22 | s indirection [post update] [val indirection] |
 | clearning.cpp:89:20:89:22 | s indirection [post update] [val indirection] | clearning.cpp:90:3:90:3 | s indirection [val indirection] |
 | clearning.cpp:90:3:90:3 | s indirection [val indirection] | clearning.cpp:90:3:90:9 | ... ++ indirection |
@@ -522,7 +499,6 @@ edges
 | clearning.cpp:90:5:90:7 | s indirection [post update] [val indirection] | clearning.cpp:91:8:91:8 | s indirection [val indirection] |
 | clearning.cpp:90:5:90:7 | val indirection | clearning.cpp:90:3:90:9 | ... ++ indirection |
 | clearning.cpp:91:8:91:8 | s indirection [val indirection] | clearning.cpp:91:7:91:12 | * ... |
 | clearning.cpp:91:8:91:8 | s indirection [val indirection] | clearning.cpp:91:7:91:12 | val indirection |
 | clearning.cpp:96:20:96:22 | argument_source output argument | clearning.cpp:96:20:96:22 | s indirection [post update] [val indirection] |
 | clearning.cpp:96:20:96:22 | s indirection [post update] [val indirection] | clearning.cpp:97:10:97:10 | s indirection [val indirection] |
 | clearning.cpp:97:2:97:18 | ... = ... indirection | clearning.cpp:97:4:97:6 | s indirection [post update] [val indirection] |
@@ -532,7 +508,6 @@ edges
 | clearning.cpp:97:10:97:18 | ... + ... indirection | clearning.cpp:97:2:97:18 | ... = ... indirection |
 | clearning.cpp:97:12:97:14 | val indirection | clearning.cpp:97:2:97:18 | ... = ... indirection |
 | clearning.cpp:98:8:98:8 | s indirection [val indirection] | clearning.cpp:98:7:98:12 | * ... |
 | clearning.cpp:98:8:98:8 | s indirection [val indirection] | clearning.cpp:98:7:98:12 | val indirection |
 | clearning.cpp:103:20:103:22 | argument_source output argument | clearning.cpp:103:20:103:22 | s indirection [post update] [val indirection] |
 | clearning.cpp:103:20:103:22 | s indirection [post update] [val indirection] | clearning.cpp:104:2:104:2 | s indirection [val indirection] |
 | clearning.cpp:104:2:104:2 | s indirection [val indirection] | clearning.cpp:104:2:104:8 | ... ++ indirection |
@@ -543,7 +518,6 @@ edges
 | clearning.cpp:104:4:104:6 | s indirection [post update] [val indirection] | clearning.cpp:105:8:105:8 | s indirection [val indirection] |
 | clearning.cpp:104:4:104:6 | val indirection | clearning.cpp:104:2:104:8 | ... ++ indirection |
 | clearning.cpp:105:8:105:8 | s indirection [val indirection] | clearning.cpp:105:7:105:12 | * ... |
 | clearning.cpp:105:8:105:8 | s indirection [val indirection] | clearning.cpp:105:7:105:12 | val indirection |
 | clearning.cpp:110:20:110:22 | argument_source output argument | clearning.cpp:110:20:110:22 | s indirection [post update] [val indirection] |
 | clearning.cpp:110:20:110:22 | s indirection [post update] [val indirection] | clearning.cpp:111:4:111:4 | s indirection [val indirection] |
 | clearning.cpp:111:2:111:8 | ++ ... indirection | clearning.cpp:111:2:111:8 | ++ ... indirection |
@@ -554,7 +528,6 @@ edges
 | clearning.cpp:111:6:111:8 | s indirection [post update] [val indirection] | clearning.cpp:112:8:112:8 | s indirection [val indirection] |
 | clearning.cpp:111:6:111:8 | val indirection | clearning.cpp:111:2:111:8 | ++ ... indirection |
 | clearning.cpp:112:8:112:8 | s indirection [val indirection] | clearning.cpp:112:7:112:12 | * ... |
 | clearning.cpp:112:8:112:8 | s indirection [val indirection] | clearning.cpp:112:7:112:12 | val indirection |
 | clearning.cpp:117:20:117:22 | argument_source output argument | clearning.cpp:117:20:117:22 | s indirection [post update] [val indirection] |
 | clearning.cpp:117:20:117:22 | s indirection [post update] [val indirection] | clearning.cpp:118:2:118:2 | s indirection [val indirection] |
 | clearning.cpp:118:2:118:2 | s indirection [val indirection] | clearning.cpp:118:2:118:11 | ... += ... indirection |
@@ -565,7 +538,6 @@ edges
 | clearning.cpp:118:4:118:6 | s indirection [post update] [val indirection] | clearning.cpp:119:8:119:8 | s indirection [val indirection] |
 | clearning.cpp:118:4:118:6 | val indirection | clearning.cpp:118:2:118:11 | ... += ... indirection |
 | clearning.cpp:119:8:119:8 | s indirection [val indirection] | clearning.cpp:119:7:119:12 | * ... |
 | clearning.cpp:119:8:119:8 | s indirection [val indirection] | clearning.cpp:119:7:119:12 | val indirection |
 | clearning.cpp:151:3:151:22 | ... = ... | clearning.cpp:151:5:151:7 | s indirection [post update] [val] |
 | clearning.cpp:151:5:151:7 | s indirection [post update] [val] | clearning.cpp:152:8:152:8 | s indirection [val] |
 | clearning.cpp:151:11:151:20 | call to user_input | clearning.cpp:151:3:151:22 | ... = ... |
@@ -634,7 +606,6 @@ edges
 | conflated.cpp:10:7:10:7 | ra indirection [post update] [p indirection] | conflated.cpp:11:9:11:10 | ra indirection [p indirection] |
 | conflated.cpp:10:11:10:20 | call to user_input | conflated.cpp:10:3:10:22 | ... = ... |
 | conflated.cpp:11:9:11:10 | ra indirection [p indirection] | conflated.cpp:11:8:11:12 | * ... |
 | conflated.cpp:11:9:11:10 | ra indirection [p indirection] | conflated.cpp:11:8:11:12 | p indirection |
 | conflated.cpp:19:19:19:21 | argument_source output argument | conflated.cpp:20:8:20:10 | raw indirection |
 | conflated.cpp:29:3:29:22 | ... = ... | conflated.cpp:29:7:29:7 | pa indirection [post update] [x] |
 | conflated.cpp:29:7:29:7 | pa indirection [post update] [x] | conflated.cpp:30:8:30:9 | pa indirection [x] |
@@ -725,10 +696,8 @@ edges
 | qualifiers.cpp:38:16:38:20 | inner indirection [a] | qualifiers.cpp:38:16:38:20 | inner indirection [a] |
 | qualifiers.cpp:38:16:38:20 | inner indirection [a] | qualifiers.cpp:38:23:38:23 | a |
 | qualifiers.cpp:42:5:42:40 | ... = ... | qualifiers.cpp:42:25:42:25 | * ... indirection [post update] [a] |
 | qualifiers.cpp:42:5:42:40 | ... = ... | qualifiers.cpp:42:25:42:25 | call to getInner indirection [post update] [a] |
 | qualifiers.cpp:42:7:42:11 | getInner output argument [inner indirection, a] | qualifiers.cpp:43:10:43:14 | outer indirection [inner indirection, a] |
 | qualifiers.cpp:42:25:42:25 | * ... indirection [post update] [a] | qualifiers.cpp:42:7:42:11 | getInner output argument [inner indirection, a] |
 | qualifiers.cpp:42:25:42:25 | call to getInner indirection [post update] [a] | qualifiers.cpp:42:7:42:11 | getInner output argument [inner indirection, a] |
 | qualifiers.cpp:42:29:42:38 | call to user_input | qualifiers.cpp:42:5:42:40 | ... = ... |
 | qualifiers.cpp:43:10:43:14 | outer indirection [inner indirection, a] | qualifiers.cpp:43:16:43:20 | inner indirection [a] |
 | qualifiers.cpp:43:16:43:20 | inner indirection [a] | qualifiers.cpp:43:16:43:20 | inner indirection [a] |
@@ -805,14 +774,12 @@ edges
 | struct_init.c:15:8:15:9 | ab indirection [a] | struct_init.c:15:12:15:12 | a |
 | struct_init.c:20:13:20:14 | definition of ab indirection [a] | struct_init.c:22:8:22:9 | ab indirection [a] |
 | struct_init.c:20:13:20:14 | definition of ab indirection [a] | struct_init.c:24:10:24:12 | & ... indirection [a] |
 | struct_init.c:20:13:20:14 | definition of ab indirection [a] | struct_init.c:24:10:24:12 | ab indirection [a] |
 | struct_init.c:20:13:20:14 | definition of ab indirection [a] | struct_init.c:28:5:28:7 | & ... indirection [a] |
 | struct_init.c:20:17:20:36 | definition of ab indirection [post update] [a] | struct_init.c:20:13:20:14 | definition of ab indirection [a] |
 | struct_init.c:20:20:20:29 | call to user_input | struct_init.c:20:17:20:36 | definition of ab indirection [post update] [a] |
 | struct_init.c:20:20:20:29 | call to user_input | struct_init.c:20:20:20:29 | call to user_input |
 | struct_init.c:22:8:22:9 | ab indirection [a] | struct_init.c:22:11:22:11 | a |
 | struct_init.c:24:10:24:12 | & ... indirection [a] | struct_init.c:14:24:14:25 | ab indirection [a] |
 | struct_init.c:24:10:24:12 | ab indirection [a] | struct_init.c:14:24:14:25 | ab indirection [a] |
 | struct_init.c:26:16:26:20 | definition of outer indirection [nestedAB, a] | struct_init.c:31:8:31:12 | outer indirection [nestedAB, a] |
 | struct_init.c:26:16:26:20 | definition of outer indirection [nestedAB, a] | struct_init.c:36:11:36:15 | outer indirection [nestedAB, a] |
 | struct_init.c:26:23:29:3 | definition of outer indirection [post update] [nestedAB, a] | struct_init.c:26:16:26:20 | definition of outer indirection [nestedAB, a] |
@@ -829,9 +796,7 @@ edges
 | struct_init.c:33:14:33:22 | pointerAB indirection [a] | struct_init.c:33:14:33:22 | pointerAB indirection [a] |
 | struct_init.c:33:14:33:22 | pointerAB indirection [a] | struct_init.c:33:25:33:25 | a |
 | struct_init.c:36:10:36:24 | & ... indirection [a] | struct_init.c:14:24:14:25 | ab indirection [a] |
 | struct_init.c:36:10:36:24 | nestedAB indirection [a] | struct_init.c:14:24:14:25 | ab indirection [a] |
 | struct_init.c:36:11:36:15 | outer indirection [nestedAB, a] | struct_init.c:36:10:36:24 | & ... indirection [a] |
 | struct_init.c:36:11:36:15 | outer indirection [nestedAB, a] | struct_init.c:36:10:36:24 | nestedAB indirection [a] |
 | struct_init.c:40:13:40:14 | definition of ab indirection [a] | struct_init.c:43:5:43:7 | & ... indirection [a] |
 | struct_init.c:40:17:40:36 | definition of ab indirection [post update] [a] | struct_init.c:40:13:40:14 | definition of ab indirection [a] |
 | struct_init.c:40:20:40:29 | call to user_input | struct_init.c:40:17:40:36 | definition of ab indirection [post update] [a] |
@@ -860,9 +825,6 @@ nodes
 | A.cpp:41:15:41:21 | new | semmle.label | new |
 | A.cpp:41:15:41:21 | new | semmle.label | new |
 | A.cpp:43:10:43:12 | & ... indirection | semmle.label | & ... indirection |
 | A.cpp:43:10:43:12 | & ... indirection | semmle.label | ct indirection |
 | A.cpp:43:10:43:12 | ct indirection | semmle.label | & ... indirection |
 | A.cpp:43:10:43:12 | ct indirection | semmle.label | ct indirection |
 | A.cpp:47:12:47:18 | new | semmle.label | new |
 | A.cpp:48:12:48:18 | call to make indirection [c] | semmle.label | call to make indirection [c] |
 | A.cpp:48:20:48:20 | c | semmle.label | c |
@@ -1066,9 +1028,6 @@ nodes
 | E.cpp:32:13:32:18 | buffer indirection | semmle.label | buffer indirection |
 | E.cpp:32:13:32:18 | buffer indirection | semmle.label | buffer indirection |
 | E.cpp:33:18:33:19 | & ... indirection [data, buffer indirection] | semmle.label | & ... indirection [data, buffer indirection] |
 | E.cpp:33:18:33:19 | & ... indirection [data, buffer indirection] | semmle.label | p indirection [data, buffer indirection] |
 | E.cpp:33:18:33:19 | p indirection [data, buffer indirection] | semmle.label | & ... indirection [data, buffer indirection] |
 | E.cpp:33:18:33:19 | p indirection [data, buffer indirection] | semmle.label | p indirection [data, buffer indirection] |
 | aliasing.cpp:9:3:9:22 | ... = ... | semmle.label | ... = ... |
 | aliasing.cpp:9:6:9:7 | s indirection [post update] [m1] | semmle.label | s indirection [post update] [m1] |
 | aliasing.cpp:9:11:9:20 | call to user_input | semmle.label | call to user_input |
@@ -1097,50 +1056,18 @@ nodes
 | aliasing.cpp:98:5:98:6 | s indirection [post update] [m1] | semmle.label | s indirection [post update] [m1] |
 | aliasing.cpp:98:10:98:19 | call to user_input | semmle.label | call to user_input |
 | aliasing.cpp:101:13:101:22 | & ... indirection | semmle.label | & ... indirection |
 | aliasing.cpp:101:13:101:22 | & ... indirection | semmle.label | m1 indirection |
 | aliasing.cpp:101:13:101:22 | m1 indirection | semmle.label | & ... indirection |
 | aliasing.cpp:101:13:101:22 | m1 indirection | semmle.label | m1 indirection |
 | aliasing.cpp:101:14:101:19 | s_copy indirection [m1] | semmle.label | s_copy indirection [m1] |
 | aliasing.cpp:102:8:102:10 | * ... | semmle.label | * ... |
 | aliasing.cpp:102:8:102:10 | * ... | semmle.label | px indirection |
 | aliasing.cpp:102:8:102:10 | px indirection | semmle.label | * ... |
 | aliasing.cpp:102:8:102:10 | px indirection | semmle.label | px indirection |
 | aliasing.cpp:105:23:105:24 | pa | semmle.label | pa |
 | aliasing.cpp:106:9:106:18 | call to user_input | semmle.label | call to user_input |
 | aliasing.cpp:121:15:121:16 | taint_a_ptr output argument | semmle.label | taint_a_ptr output argument |
 | aliasing.cpp:122:8:122:12 | access to array | semmle.label | access to array |
 | aliasing.cpp:126:15:126:20 | taint_a_ptr output argument | semmle.label | taint_a_ptr output argument |
 | aliasing.cpp:127:8:127:16 | * ... | semmle.label | * ... |
 | aliasing.cpp:127:8:127:16 | * ... | semmle.label | ... - ... indirection |
 | aliasing.cpp:127:8:127:16 | ... - ... indirection | semmle.label | * ... |
 | aliasing.cpp:127:8:127:16 | ... - ... indirection | semmle.label | ... - ... indirection |
 | aliasing.cpp:131:15:131:16 | taint_a_ptr output argument | semmle.label | taint_a_ptr output argument |
 | aliasing.cpp:132:8:132:14 | & ... indirection | semmle.label | & ... indirection |
 | aliasing.cpp:132:8:132:14 | & ... indirection | semmle.label | * ... |
 | aliasing.cpp:132:8:132:14 | & ... indirection | semmle.label | * ... indirection |
 | aliasing.cpp:132:8:132:14 | & ... indirection | semmle.label | xs indirection |
 | aliasing.cpp:132:8:132:14 | * ... | semmle.label | & ... indirection |
 | aliasing.cpp:132:8:132:14 | * ... | semmle.label | * ... |
 | aliasing.cpp:132:8:132:14 | * ... | semmle.label | * ... indirection |
 | aliasing.cpp:132:8:132:14 | * ... | semmle.label | xs indirection |
 | aliasing.cpp:132:8:132:14 | * ... indirection | semmle.label | & ... indirection |
 | aliasing.cpp:132:8:132:14 | * ... indirection | semmle.label | * ... |
 | aliasing.cpp:132:8:132:14 | * ... indirection | semmle.label | * ... indirection |
 | aliasing.cpp:132:8:132:14 | * ... indirection | semmle.label | xs indirection |
 | aliasing.cpp:132:8:132:14 | xs indirection | semmle.label | & ... indirection |
 | aliasing.cpp:132:8:132:14 | xs indirection | semmle.label | * ... |
 | aliasing.cpp:132:8:132:14 | xs indirection | semmle.label | * ... indirection |
 | aliasing.cpp:132:8:132:14 | xs indirection | semmle.label | xs indirection |
 | aliasing.cpp:136:15:136:17 | taint_a_ptr output argument | semmle.label | taint_a_ptr output argument |
 | aliasing.cpp:137:8:137:11 | * ... | semmle.label | * ... |
 | aliasing.cpp:137:8:137:11 | * ... | semmle.label | + ... indirection |
 | aliasing.cpp:137:8:137:11 | * ... | semmle.label | xs indirection |
 | aliasing.cpp:137:8:137:11 | + ... indirection | semmle.label | * ... |
 | aliasing.cpp:137:8:137:11 | + ... indirection | semmle.label | + ... indirection |
 | aliasing.cpp:137:8:137:11 | + ... indirection | semmle.label | xs indirection |
 | aliasing.cpp:137:8:137:11 | xs indirection | semmle.label | * ... |
 | aliasing.cpp:137:8:137:11 | xs indirection | semmle.label | + ... indirection |
 | aliasing.cpp:137:8:137:11 | xs indirection | semmle.label | xs indirection |
 | aliasing.cpp:141:17:141:20 | s indirection [post update] [data indirection] | semmle.label | s indirection [post update] [data indirection] |
 | aliasing.cpp:141:17:141:20 | taint_a_ptr output argument | semmle.label | taint_a_ptr output argument |
 | aliasing.cpp:143:8:143:8 | s indirection [data indirection] | semmle.label | s indirection [data indirection] |
@@ -1149,9 +1076,6 @@ nodes
 | aliasing.cpp:158:15:158:20 | taint_a_ptr output argument | semmle.label | taint_a_ptr output argument |
 | aliasing.cpp:158:17:158:20 | s indirection [post update] [data] | semmle.label | s indirection [post update] [data] |
 | aliasing.cpp:159:8:159:14 | * ... | semmle.label | * ... |
 | aliasing.cpp:159:8:159:14 | * ... | semmle.label | data indirection |
 | aliasing.cpp:159:8:159:14 | data indirection | semmle.label | * ... |
 | aliasing.cpp:159:8:159:14 | data indirection | semmle.label | data indirection |
 | aliasing.cpp:159:9:159:9 | s indirection [data] | semmle.label | s indirection [data] |
 | aliasing.cpp:164:15:164:20 | taint_a_ptr output argument | semmle.label | taint_a_ptr output argument |
 | aliasing.cpp:164:17:164:20 | s indirection [post update] [data] | semmle.label | s indirection [post update] [data] |
@@ -1179,18 +1103,7 @@ nodes
 | arrays.cpp:7:8:7:13 | access to array | semmle.label | access to array |
 | arrays.cpp:8:8:8:13 | access to array | semmle.label | access to array |
 | arrays.cpp:9:8:9:11 | * ... | semmle.label | * ... |
 | arrays.cpp:9:8:9:11 | * ... | semmle.label | arr indirection |
 | arrays.cpp:9:8:9:11 | arr indirection | semmle.label | * ... |
 | arrays.cpp:9:8:9:11 | arr indirection | semmle.label | arr indirection |
 | arrays.cpp:10:8:10:15 | & ... indirection | semmle.label | & ... indirection |
 | arrays.cpp:10:8:10:15 | & ... indirection | semmle.label | * ... |
 | arrays.cpp:10:8:10:15 | & ... indirection | semmle.label | access to array indirection |
 | arrays.cpp:10:8:10:15 | * ... | semmle.label | & ... indirection |
 | arrays.cpp:10:8:10:15 | * ... | semmle.label | * ... |
 | arrays.cpp:10:8:10:15 | * ... | semmle.label | access to array indirection |
 | arrays.cpp:10:8:10:15 | access to array indirection | semmle.label | & ... indirection |
 | arrays.cpp:10:8:10:15 | access to array indirection | semmle.label | * ... |
 | arrays.cpp:10:8:10:15 | access to array indirection | semmle.label | access to array indirection |
 | arrays.cpp:15:14:15:23 | call to user_input | semmle.label | call to user_input |
 | arrays.cpp:16:8:16:13 | access to array | semmle.label | access to array |
 | arrays.cpp:17:8:17:13 | access to array | semmle.label | access to array |
@@ -1279,9 +1192,6 @@ nodes
 | by_reference.cpp:68:21:68:30 | call to user_input | semmle.label | call to user_input |
 | by_reference.cpp:69:8:69:20 | call to nonMemberGetA | semmle.label | call to nonMemberGetA |
 | by_reference.cpp:69:22:69:23 | & ... indirection [a] | semmle.label | & ... indirection [a] |
 | by_reference.cpp:69:22:69:23 | & ... indirection [a] | semmle.label | s indirection [a] |
 | by_reference.cpp:69:22:69:23 | s indirection [a] | semmle.label | & ... indirection [a] |
 | by_reference.cpp:69:22:69:23 | s indirection [a] | semmle.label | s indirection [a] |
 | by_reference.cpp:84:3:84:25 | ... = ... | semmle.label | ... = ... |
 | by_reference.cpp:84:10:84:10 | inner indirection [post update] [a] | semmle.label | inner indirection [post update] [a] |
 | by_reference.cpp:84:14:84:23 | call to user_input | semmle.label | call to user_input |
@@ -1353,9 +1263,6 @@ nodes
 | clearning.cpp:32:10:32:19 | call to user_input | semmle.label | call to user_input |
 | clearning.cpp:33:5:33:5 | s indirection [x indirection] | semmle.label | s indirection [x indirection] |
 | clearning.cpp:34:8:34:11 | * ... | semmle.label | * ... |
 | clearning.cpp:34:8:34:11 | * ... | semmle.label | x indirection |
 | clearning.cpp:34:8:34:11 | x indirection | semmle.label | * ... |
 | clearning.cpp:34:8:34:11 | x indirection | semmle.label | x indirection |
 | clearning.cpp:34:9:34:9 | s indirection [x indirection] | semmle.label | s indirection [x indirection] |
 | clearning.cpp:53:3:53:25 | ... = ... | semmle.label | ... = ... |
 | clearning.cpp:53:6:53:6 | s indirection [post update] [x indirection] | semmle.label | s indirection [post update] [x indirection] |
@@ -1382,9 +1289,6 @@ nodes
 | clearning.cpp:74:20:74:22 | argument_source output argument | semmle.label | argument_source output argument |
 | clearning.cpp:74:20:74:22 | s indirection [post update] [val indirection] | semmle.label | s indirection [post update] [val indirection] |
 | clearning.cpp:76:7:76:12 | * ... | semmle.label | * ... |
 | clearning.cpp:76:7:76:12 | * ... | semmle.label | val indirection |
 | clearning.cpp:76:7:76:12 | val indirection | semmle.label | * ... |
 | clearning.cpp:76:7:76:12 | val indirection | semmle.label | val indirection |
 | clearning.cpp:76:8:76:8 | s indirection [val indirection] | semmle.label | s indirection [val indirection] |
 | clearning.cpp:81:20:81:22 | argument_source output argument | semmle.label | argument_source output argument |
 | clearning.cpp:81:20:81:22 | s indirection [post update] [val indirection] | semmle.label | s indirection [post update] [val indirection] |
@@ -1394,9 +1298,6 @@ nodes
 | clearning.cpp:83:13:83:21 | ... + ... indirection | semmle.label | ... + ... indirection |
 | clearning.cpp:83:15:83:17 | val indirection | semmle.label | val indirection |
 | clearning.cpp:84:7:84:12 | * ... | semmle.label | * ... |
 | clearning.cpp:84:7:84:12 | * ... | semmle.label | val indirection |
 | clearning.cpp:84:7:84:12 | val indirection | semmle.label | * ... |
 | clearning.cpp:84:7:84:12 | val indirection | semmle.label | val indirection |
 | clearning.cpp:84:8:84:8 | s indirection [val indirection] | semmle.label | s indirection [val indirection] |
 | clearning.cpp:89:20:89:22 | argument_source output argument | semmle.label | argument_source output argument |
 | clearning.cpp:89:20:89:22 | s indirection [post update] [val indirection] | semmle.label | s indirection [post update] [val indirection] |
@@ -1406,9 +1307,6 @@ nodes
 | clearning.cpp:90:5:90:7 | s indirection [post update] [val indirection] | semmle.label | s indirection [post update] [val indirection] |
 | clearning.cpp:90:5:90:7 | val indirection | semmle.label | val indirection |
 | clearning.cpp:91:7:91:12 | * ... | semmle.label | * ... |
 | clearning.cpp:91:7:91:12 | * ... | semmle.label | val indirection |
 | clearning.cpp:91:7:91:12 | val indirection | semmle.label | * ... |
 | clearning.cpp:91:7:91:12 | val indirection | semmle.label | val indirection |
 | clearning.cpp:91:8:91:8 | s indirection [val indirection] | semmle.label | s indirection [val indirection] |
 | clearning.cpp:96:20:96:22 | argument_source output argument | semmle.label | argument_source output argument |
 | clearning.cpp:96:20:96:22 | s indirection [post update] [val indirection] | semmle.label | s indirection [post update] [val indirection] |
@@ -1418,9 +1316,6 @@ nodes
 | clearning.cpp:97:10:97:18 | ... + ... indirection | semmle.label | ... + ... indirection |
 | clearning.cpp:97:12:97:14 | val indirection | semmle.label | val indirection |
 | clearning.cpp:98:7:98:12 | * ... | semmle.label | * ... |
 | clearning.cpp:98:7:98:12 | * ... | semmle.label | val indirection |
 | clearning.cpp:98:7:98:12 | val indirection | semmle.label | * ... |
 | clearning.cpp:98:7:98:12 | val indirection | semmle.label | val indirection |
 | clearning.cpp:98:8:98:8 | s indirection [val indirection] | semmle.label | s indirection [val indirection] |
 | clearning.cpp:103:20:103:22 | argument_source output argument | semmle.label | argument_source output argument |
 | clearning.cpp:103:20:103:22 | s indirection [post update] [val indirection] | semmle.label | s indirection [post update] [val indirection] |
@@ -1430,9 +1325,6 @@ nodes
 | clearning.cpp:104:4:104:6 | s indirection [post update] [val indirection] | semmle.label | s indirection [post update] [val indirection] |
 | clearning.cpp:104:4:104:6 | val indirection | semmle.label | val indirection |
 | clearning.cpp:105:7:105:12 | * ... | semmle.label | * ... |
 | clearning.cpp:105:7:105:12 | * ... | semmle.label | val indirection |
 | clearning.cpp:105:7:105:12 | val indirection | semmle.label | * ... |
 | clearning.cpp:105:7:105:12 | val indirection | semmle.label | val indirection |
 | clearning.cpp:105:8:105:8 | s indirection [val indirection] | semmle.label | s indirection [val indirection] |
 | clearning.cpp:110:20:110:22 | argument_source output argument | semmle.label | argument_source output argument |
 | clearning.cpp:110:20:110:22 | s indirection [post update] [val indirection] | semmle.label | s indirection [post update] [val indirection] |
@@ -1442,9 +1334,6 @@ nodes
 | clearning.cpp:111:6:111:8 | s indirection [post update] [val indirection] | semmle.label | s indirection [post update] [val indirection] |
 | clearning.cpp:111:6:111:8 | val indirection | semmle.label | val indirection |
 | clearning.cpp:112:7:112:12 | * ... | semmle.label | * ... |
 | clearning.cpp:112:7:112:12 | * ... | semmle.label | val indirection |
 | clearning.cpp:112:7:112:12 | val indirection | semmle.label | * ... |
 | clearning.cpp:112:7:112:12 | val indirection | semmle.label | val indirection |
 | clearning.cpp:112:8:112:8 | s indirection [val indirection] | semmle.label | s indirection [val indirection] |
 | clearning.cpp:117:20:117:22 | argument_source output argument | semmle.label | argument_source output argument |
 | clearning.cpp:117:20:117:22 | s indirection [post update] [val indirection] | semmle.label | s indirection [post update] [val indirection] |
@@ -1454,9 +1343,6 @@ nodes
 | clearning.cpp:118:4:118:6 | s indirection [post update] [val indirection] | semmle.label | s indirection [post update] [val indirection] |
 | clearning.cpp:118:4:118:6 | val indirection | semmle.label | val indirection |
 | clearning.cpp:119:7:119:12 | * ... | semmle.label | * ... |
 | clearning.cpp:119:7:119:12 | * ... | semmle.label | val indirection |
 | clearning.cpp:119:7:119:12 | val indirection | semmle.label | * ... |
 | clearning.cpp:119:7:119:12 | val indirection | semmle.label | val indirection |
 | clearning.cpp:119:8:119:8 | s indirection [val indirection] | semmle.label | s indirection [val indirection] |
 | clearning.cpp:151:3:151:22 | ... = ... | semmle.label | ... = ... |
 | clearning.cpp:151:5:151:7 | s indirection [post update] [val] | semmle.label | s indirection [post update] [val] |
@@ -1519,9 +1405,6 @@ nodes
 | conflated.cpp:10:7:10:7 | ra indirection [post update] [p indirection] | semmle.label | ra indirection [post update] [p indirection] |
 | conflated.cpp:10:11:10:20 | call to user_input | semmle.label | call to user_input |
 | conflated.cpp:11:8:11:12 | * ... | semmle.label | * ... |
 | conflated.cpp:11:8:11:12 | * ... | semmle.label | p indirection |
 | conflated.cpp:11:8:11:12 | p indirection | semmle.label | * ... |
 | conflated.cpp:11:8:11:12 | p indirection | semmle.label | p indirection |
 | conflated.cpp:11:9:11:10 | ra indirection [p indirection] | semmle.label | ra indirection [p indirection] |
 | conflated.cpp:19:19:19:21 | argument_source output argument | semmle.label | argument_source output argument |
 | conflated.cpp:20:8:20:10 | raw indirection | semmle.label | raw indirection |
@@ -1618,9 +1501,6 @@ nodes
 | qualifiers.cpp:42:5:42:40 | ... = ... | semmle.label | ... = ... |
 | qualifiers.cpp:42:7:42:11 | getInner output argument [inner indirection, a] | semmle.label | getInner output argument [inner indirection, a] |
 | qualifiers.cpp:42:25:42:25 | * ... indirection [post update] [a] | semmle.label | * ... indirection [post update] [a] |
 | qualifiers.cpp:42:25:42:25 | * ... indirection [post update] [a] | semmle.label | call to getInner indirection [post update] [a] |
 | qualifiers.cpp:42:25:42:25 | call to getInner indirection [post update] [a] | semmle.label | * ... indirection [post update] [a] |
 | qualifiers.cpp:42:25:42:25 | call to getInner indirection [post update] [a] | semmle.label | call to getInner indirection [post update] [a] |
 | qualifiers.cpp:42:29:42:38 | call to user_input | semmle.label | call to user_input |
 | qualifiers.cpp:43:10:43:14 | outer indirection [inner indirection, a] | semmle.label | outer indirection [inner indirection, a] |
 | qualifiers.cpp:43:16:43:20 | inner indirection [a] | semmle.label | inner indirection [a] |
@@ -1706,9 +1586,6 @@ nodes
 | struct_init.c:22:8:22:9 | ab indirection [a] | semmle.label | ab indirection [a] |
 | struct_init.c:22:11:22:11 | a | semmle.label | a |
 | struct_init.c:24:10:24:12 | & ... indirection [a] | semmle.label | & ... indirection [a] |
 | struct_init.c:24:10:24:12 | & ... indirection [a] | semmle.label | ab indirection [a] |
 | struct_init.c:24:10:24:12 | ab indirection [a] | semmle.label | & ... indirection [a] |
 | struct_init.c:24:10:24:12 | ab indirection [a] | semmle.label | ab indirection [a] |
 | struct_init.c:26:16:26:20 | definition of outer indirection [nestedAB, a] | semmle.label | definition of outer indirection [nestedAB, a] |
 | struct_init.c:26:23:29:3 | definition of outer indirection [post update] [nestedAB, a] | semmle.label | definition of outer indirection [post update] [nestedAB, a] |
 | struct_init.c:26:23:29:3 | definition of outer indirection [post update] [nestedAB, a] | semmle.label | definition of outer indirection [post update] [nestedAB, a] |
@@ -1724,9 +1601,6 @@ nodes
 | struct_init.c:33:14:33:22 | pointerAB indirection [a] | semmle.label | pointerAB indirection [a] |
 | struct_init.c:33:25:33:25 | a | semmle.label | a |
 | struct_init.c:36:10:36:24 | & ... indirection [a] | semmle.label | & ... indirection [a] |
 | struct_init.c:36:10:36:24 | & ... indirection [a] | semmle.label | nestedAB indirection [a] |
 | struct_init.c:36:10:36:24 | nestedAB indirection [a] | semmle.label | & ... indirection [a] |
 | struct_init.c:36:10:36:24 | nestedAB indirection [a] | semmle.label | nestedAB indirection [a] |
 | struct_init.c:36:11:36:15 | outer indirection [nestedAB, a] | semmle.label | outer indirection [nestedAB, a] |
 | struct_init.c:40:13:40:14 | definition of ab indirection [a] | semmle.label | definition of ab indirection [a] |
 | struct_init.c:40:17:40:36 | definition of ab indirection [post update] [a] | semmle.label | definition of ab indirection [post update] [a] |
@@ -1772,7 +1646,6 @@ subpaths
 | by_reference.cpp:63:8:63:8 | s indirection [a] | by_reference.cpp:43:9:43:27 | this indirection [a] | by_reference.cpp:43:9:43:27 | getThroughNonMember indirection | by_reference.cpp:63:10:63:28 | call to getThroughNonMember |
 | by_reference.cpp:68:21:68:30 | call to user_input | by_reference.cpp:11:48:11:52 | value | by_reference.cpp:12:8:12:8 | s indirection [post update] [a] | by_reference.cpp:68:17:68:18 | nonMemberSetA output argument [a] |
 | by_reference.cpp:69:22:69:23 | & ... indirection [a] | by_reference.cpp:31:46:31:46 | s indirection [a] | by_reference.cpp:31:16:31:28 | nonMemberGetA indirection | by_reference.cpp:69:8:69:20 | call to nonMemberGetA |
 | by_reference.cpp:69:22:69:23 | s indirection [a] | by_reference.cpp:31:46:31:46 | s indirection [a] | by_reference.cpp:31:16:31:28 | nonMemberGetA indirection | by_reference.cpp:69:8:69:20 | call to nonMemberGetA |
 | complex.cpp:42:16:42:16 | f indirection [a_] | complex.cpp:9:7:9:7 | this indirection [a_] | complex.cpp:9:7:9:7 | a indirection | complex.cpp:42:18:42:18 | call to a |
 | complex.cpp:43:16:43:16 | f indirection [b_] | complex.cpp:10:7:10:7 | this indirection [b_] | complex.cpp:10:7:10:7 | b indirection | complex.cpp:43:18:43:18 | call to b |
 | complex.cpp:53:19:53:28 | call to user_input | complex.cpp:11:17:11:17 | a | complex.cpp:11:22:11:23 | this indirection [post update] [a_] | complex.cpp:53:12:53:12 | setA output argument [a_] |
@@ -1798,20 +1671,6 @@ subpaths
 #select
 | A.cpp:43:10:43:12 | & ... indirection | A.cpp:41:15:41:21 | new | A.cpp:43:10:43:12 | & ... indirection | & ... indirection flows from $@ | A.cpp:41:15:41:21 | new | new |
 | A.cpp:43:10:43:12 | & ... indirection | A.cpp:41:15:41:21 | new | A.cpp:43:10:43:12 | & ... indirection | & ... indirection flows from $@ | A.cpp:41:15:41:21 | new | new |
 | A.cpp:43:10:43:12 | & ... indirection | A.cpp:41:15:41:21 | new | A.cpp:43:10:43:12 | & ... indirection | ct indirection flows from $@ | A.cpp:41:15:41:21 | new | new |
 | A.cpp:43:10:43:12 | & ... indirection | A.cpp:41:15:41:21 | new | A.cpp:43:10:43:12 | & ... indirection | ct indirection flows from $@ | A.cpp:41:15:41:21 | new | new |
 | A.cpp:43:10:43:12 | & ... indirection | A.cpp:41:15:41:21 | new | A.cpp:43:10:43:12 | ct indirection | & ... indirection flows from $@ | A.cpp:41:15:41:21 | new | new |
 | A.cpp:43:10:43:12 | & ... indirection | A.cpp:41:15:41:21 | new | A.cpp:43:10:43:12 | ct indirection | & ... indirection flows from $@ | A.cpp:41:15:41:21 | new | new |
 | A.cpp:43:10:43:12 | & ... indirection | A.cpp:41:15:41:21 | new | A.cpp:43:10:43:12 | ct indirection | ct indirection flows from $@ | A.cpp:41:15:41:21 | new | new |
 | A.cpp:43:10:43:12 | & ... indirection | A.cpp:41:15:41:21 | new | A.cpp:43:10:43:12 | ct indirection | ct indirection flows from $@ | A.cpp:41:15:41:21 | new | new |
 | A.cpp:43:10:43:12 | ct indirection | A.cpp:41:15:41:21 | new | A.cpp:43:10:43:12 | & ... indirection | & ... indirection flows from $@ | A.cpp:41:15:41:21 | new | new |
 | A.cpp:43:10:43:12 | ct indirection | A.cpp:41:15:41:21 | new | A.cpp:43:10:43:12 | & ... indirection | & ... indirection flows from $@ | A.cpp:41:15:41:21 | new | new |
 | A.cpp:43:10:43:12 | ct indirection | A.cpp:41:15:41:21 | new | A.cpp:43:10:43:12 | & ... indirection | ct indirection flows from $@ | A.cpp:41:15:41:21 | new | new |
 | A.cpp:43:10:43:12 | ct indirection | A.cpp:41:15:41:21 | new | A.cpp:43:10:43:12 | & ... indirection | ct indirection flows from $@ | A.cpp:41:15:41:21 | new | new |
 | A.cpp:43:10:43:12 | ct indirection | A.cpp:41:15:41:21 | new | A.cpp:43:10:43:12 | ct indirection | & ... indirection flows from $@ | A.cpp:41:15:41:21 | new | new |
 | A.cpp:43:10:43:12 | ct indirection | A.cpp:41:15:41:21 | new | A.cpp:43:10:43:12 | ct indirection | & ... indirection flows from $@ | A.cpp:41:15:41:21 | new | new |
 | A.cpp:43:10:43:12 | ct indirection | A.cpp:41:15:41:21 | new | A.cpp:43:10:43:12 | ct indirection | ct indirection flows from $@ | A.cpp:41:15:41:21 | new | new |
 | A.cpp:43:10:43:12 | ct indirection | A.cpp:41:15:41:21 | new | A.cpp:43:10:43:12 | ct indirection | ct indirection flows from $@ | A.cpp:41:15:41:21 | new | new |
 | A.cpp:49:10:49:13 | c | A.cpp:47:12:47:18 | new | A.cpp:49:10:49:13 | c | c flows from $@ | A.cpp:47:12:47:18 | new | new |
 | A.cpp:56:10:56:17 | call to get | A.cpp:55:12:55:19 | new | A.cpp:56:10:56:17 | call to get | call to get flows from $@ | A.cpp:55:12:55:19 | new | new |
 | A.cpp:56:10:56:17 | call to get | A.cpp:55:12:55:19 | new | A.cpp:56:10:56:17 | call to get | call to get flows from $@ | A.cpp:55:12:55:19 | new | new |
@@ -1846,122 +1705,12 @@ subpaths
 | aliasing.cpp:62:14:62:15 | m1 | aliasing.cpp:60:11:60:20 | call to user_input | aliasing.cpp:62:14:62:15 | m1 | m1 flows from $@ | aliasing.cpp:60:11:60:20 | call to user_input | call to user_input |
 | aliasing.cpp:93:12:93:13 | m1 | aliasing.cpp:92:12:92:21 | call to user_input | aliasing.cpp:93:12:93:13 | m1 | m1 flows from $@ | aliasing.cpp:92:12:92:21 | call to user_input | call to user_input |
 | aliasing.cpp:102:8:102:10 | * ... | aliasing.cpp:98:10:98:19 | call to user_input | aliasing.cpp:102:8:102:10 | * ... | * ... flows from $@ | aliasing.cpp:98:10:98:19 | call to user_input | call to user_input |
 | aliasing.cpp:102:8:102:10 | * ... | aliasing.cpp:98:10:98:19 | call to user_input | aliasing.cpp:102:8:102:10 | * ... | px indirection flows from $@ | aliasing.cpp:98:10:98:19 | call to user_input | call to user_input |
 | aliasing.cpp:102:8:102:10 | * ... | aliasing.cpp:98:10:98:19 | call to user_input | aliasing.cpp:102:8:102:10 | px indirection | * ... flows from $@ | aliasing.cpp:98:10:98:19 | call to user_input | call to user_input |
 | aliasing.cpp:102:8:102:10 | * ... | aliasing.cpp:98:10:98:19 | call to user_input | aliasing.cpp:102:8:102:10 | px indirection | px indirection flows from $@ | aliasing.cpp:98:10:98:19 | call to user_input | call to user_input |
 | aliasing.cpp:102:8:102:10 | px indirection | aliasing.cpp:98:10:98:19 | call to user_input | aliasing.cpp:102:8:102:10 | * ... | * ... flows from $@ | aliasing.cpp:98:10:98:19 | call to user_input | call to user_input |
 | aliasing.cpp:102:8:102:10 | px indirection | aliasing.cpp:98:10:98:19 | call to user_input | aliasing.cpp:102:8:102:10 | * ... | px indirection flows from $@ | aliasing.cpp:98:10:98:19 | call to user_input | call to user_input |
 | aliasing.cpp:102:8:102:10 | px indirection | aliasing.cpp:98:10:98:19 | call to user_input | aliasing.cpp:102:8:102:10 | px indirection | * ... flows from $@ | aliasing.cpp:98:10:98:19 | call to user_input | call to user_input |
 | aliasing.cpp:102:8:102:10 | px indirection | aliasing.cpp:98:10:98:19 | call to user_input | aliasing.cpp:102:8:102:10 | px indirection | px indirection flows from $@ | aliasing.cpp:98:10:98:19 | call to user_input | call to user_input |
 | aliasing.cpp:122:8:122:12 | access to array | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:122:8:122:12 | access to array | access to array flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:127:8:127:16 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:127:8:127:16 | * ... | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:127:8:127:16 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:127:8:127:16 | * ... | ... - ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:127:8:127:16 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:127:8:127:16 | ... - ... indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:127:8:127:16 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:127:8:127:16 | ... - ... indirection | ... - ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:127:8:127:16 | ... - ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:127:8:127:16 | * ... | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:127:8:127:16 | ... - ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:127:8:127:16 | * ... | ... - ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:127:8:127:16 | ... - ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:127:8:127:16 | ... - ... indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:127:8:127:16 | ... - ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:127:8:127:16 | ... - ... indirection | ... - ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | & ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | & ... indirection | & ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | & ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | & ... indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | & ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | & ... indirection | * ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | & ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | & ... indirection | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | & ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... | & ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | & ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | & ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... | * ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | & ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | & ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... indirection | & ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | & ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | & ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... indirection | * ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | & ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... indirection | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | & ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | xs indirection | & ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | & ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | xs indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | & ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | xs indirection | * ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | & ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | xs indirection | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | & ... indirection | & ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | & ... indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | & ... indirection | * ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | & ... indirection | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... | & ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... | * ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... indirection | & ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... indirection | * ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... indirection | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | xs indirection | & ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | xs indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | xs indirection | * ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | xs indirection | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | & ... indirection | & ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | & ... indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | & ... indirection | * ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | & ... indirection | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... | & ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... | * ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... indirection | & ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... indirection | * ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... indirection | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | xs indirection | & ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | xs indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | xs indirection | * ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | * ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | xs indirection | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | & ... indirection | & ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | & ... indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | & ... indirection | * ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | & ... indirection | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... | & ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... | * ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... indirection | & ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... indirection | * ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | * ... indirection | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | xs indirection | & ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | xs indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | xs indirection | * ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:132:8:132:14 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:132:8:132:14 | xs indirection | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | * ... | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | * ... | + ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | * ... | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | + ... indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | + ... indirection | + ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | + ... indirection | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | xs indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | xs indirection | + ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | xs indirection | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | + ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | * ... | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | + ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | * ... | + ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | + ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | * ... | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | + ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | + ... indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | + ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | + ... indirection | + ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | + ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | + ... indirection | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | + ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | xs indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | + ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | xs indirection | + ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | + ... indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | xs indirection | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | * ... | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | * ... | + ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | * ... | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | + ... indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | + ... indirection | + ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | + ... indirection | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | xs indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | xs indirection | + ... indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:137:8:137:11 | xs indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:137:8:137:11 | xs indirection | xs indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:143:8:143:16 | access to array | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:143:8:143:16 | access to array | access to array flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:159:8:159:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:159:8:159:14 | * ... | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:159:8:159:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:159:8:159:14 | * ... | data indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:159:8:159:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:159:8:159:14 | data indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:159:8:159:14 | * ... | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:159:8:159:14 | data indirection | data indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:159:8:159:14 | data indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:159:8:159:14 | * ... | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:159:8:159:14 | data indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:159:8:159:14 | * ... | data indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:159:8:159:14 | data indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:159:8:159:14 | data indirection | * ... flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:159:8:159:14 | data indirection | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:159:8:159:14 | data indirection | data indirection flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:165:8:165:16 | access to array | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:165:8:165:16 | access to array | access to array flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:176:13:176:14 | m1 | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:176:13:176:14 | m1 | m1 flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
 | aliasing.cpp:189:15:189:16 | m1 | aliasing.cpp:106:9:106:18 | call to user_input | aliasing.cpp:189:15:189:16 | m1 | m1 flows from $@ | aliasing.cpp:106:9:106:18 | call to user_input | call to user_input |
@@ -1969,40 +1718,7 @@ subpaths
 | arrays.cpp:7:8:7:13 | access to array | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:7:8:7:13 | access to array | access to array flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:8:8:8:13 | access to array | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:8:8:8:13 | access to array | access to array flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:9:8:9:11 | * ... | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:9:8:9:11 | * ... | * ... flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:9:8:9:11 | * ... | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:9:8:9:11 | * ... | arr indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:9:8:9:11 | * ... | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:9:8:9:11 | arr indirection | * ... flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:9:8:9:11 | * ... | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:9:8:9:11 | arr indirection | arr indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:9:8:9:11 | arr indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:9:8:9:11 | * ... | * ... flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:9:8:9:11 | arr indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:9:8:9:11 | * ... | arr indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:9:8:9:11 | arr indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:9:8:9:11 | arr indirection | * ... flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:9:8:9:11 | arr indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:9:8:9:11 | arr indirection | arr indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | & ... indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | & ... indirection | & ... indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | & ... indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | & ... indirection | * ... flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | & ... indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | & ... indirection | access to array indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | & ... indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | * ... | & ... indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | & ... indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | * ... | * ... flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | & ... indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | * ... | access to array indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | & ... indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | access to array indirection | & ... indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | & ... indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | access to array indirection | * ... flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | & ... indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | access to array indirection | access to array indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | * ... | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | & ... indirection | & ... indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | * ... | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | & ... indirection | * ... flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | * ... | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | & ... indirection | access to array indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | * ... | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | * ... | & ... indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | * ... | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | * ... | * ... flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | * ... | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | * ... | access to array indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | * ... | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | access to array indirection | & ... indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | * ... | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | access to array indirection | * ... flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | * ... | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | access to array indirection | access to array indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | access to array indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | & ... indirection | & ... indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | access to array indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | & ... indirection | * ... flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | access to array indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | & ... indirection | access to array indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | access to array indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | * ... | & ... indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | access to array indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | * ... | * ... flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | access to array indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | * ... | access to array indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | access to array indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | access to array indirection | & ... indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | access to array indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | access to array indirection | * ... flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:10:8:10:15 | access to array indirection | arrays.cpp:6:12:6:21 | call to user_input | arrays.cpp:10:8:10:15 | access to array indirection | access to array indirection flows from $@ | arrays.cpp:6:12:6:21 | call to user_input | call to user_input |
 | arrays.cpp:16:8:16:13 | access to array | arrays.cpp:15:14:15:23 | call to user_input | arrays.cpp:16:8:16:13 | access to array | access to array flows from $@ | arrays.cpp:15:14:15:23 | call to user_input | call to user_input |
 | arrays.cpp:17:8:17:13 | access to array | arrays.cpp:15:14:15:23 | call to user_input | arrays.cpp:17:8:17:13 | access to array | access to array flows from $@ | arrays.cpp:15:14:15:23 | call to user_input | call to user_input |
 | arrays.cpp:37:24:37:27 | data | arrays.cpp:36:26:36:35 | call to user_input | arrays.cpp:37:24:37:27 | data | data flows from $@ | arrays.cpp:36:26:36:35 | call to user_input | call to user_input |
@@ -2028,84 +1744,21 @@ subpaths
 | by_reference.cpp:135:27:135:27 | a | by_reference.cpp:88:13:88:22 | call to user_input | by_reference.cpp:135:27:135:27 | a | a flows from $@ | by_reference.cpp:88:13:88:22 | call to user_input | call to user_input |
 | by_reference.cpp:136:16:136:16 | a | by_reference.cpp:96:8:96:17 | call to user_input | by_reference.cpp:136:16:136:16 | a | a flows from $@ | by_reference.cpp:96:8:96:17 | call to user_input | call to user_input |
 | clearning.cpp:34:8:34:11 | * ... | clearning.cpp:32:10:32:19 | call to user_input | clearning.cpp:34:8:34:11 | * ... | * ... flows from $@ | clearning.cpp:32:10:32:19 | call to user_input | call to user_input |
 | clearning.cpp:34:8:34:11 | * ... | clearning.cpp:32:10:32:19 | call to user_input | clearning.cpp:34:8:34:11 | * ... | x indirection flows from $@ | clearning.cpp:32:10:32:19 | call to user_input | call to user_input |
 | clearning.cpp:34:8:34:11 | * ... | clearning.cpp:32:10:32:19 | call to user_input | clearning.cpp:34:8:34:11 | x indirection | * ... flows from $@ | clearning.cpp:32:10:32:19 | call to user_input | call to user_input |
 | clearning.cpp:34:8:34:11 | * ... | clearning.cpp:32:10:32:19 | call to user_input | clearning.cpp:34:8:34:11 | x indirection | x indirection flows from $@ | clearning.cpp:32:10:32:19 | call to user_input | call to user_input |
 | clearning.cpp:34:8:34:11 | x indirection | clearning.cpp:32:10:32:19 | call to user_input | clearning.cpp:34:8:34:11 | * ... | * ... flows from $@ | clearning.cpp:32:10:32:19 | call to user_input | call to user_input |
 | clearning.cpp:34:8:34:11 | x indirection | clearning.cpp:32:10:32:19 | call to user_input | clearning.cpp:34:8:34:11 | * ... | x indirection flows from $@ | clearning.cpp:32:10:32:19 | call to user_input | call to user_input |
 | clearning.cpp:34:8:34:11 | x indirection | clearning.cpp:32:10:32:19 | call to user_input | clearning.cpp:34:8:34:11 | x indirection | * ... flows from $@ | clearning.cpp:32:10:32:19 | call to user_input | call to user_input |
 | clearning.cpp:34:8:34:11 | x indirection | clearning.cpp:32:10:32:19 | call to user_input | clearning.cpp:34:8:34:11 | x indirection | x indirection flows from $@ | clearning.cpp:32:10:32:19 | call to user_input | call to user_input |
 | clearning.cpp:55:10:55:10 | x indirection | clearning.cpp:53:10:53:19 | call to user_input | clearning.cpp:55:10:55:10 | x indirection | x indirection flows from $@ | clearning.cpp:53:10:53:19 | call to user_input | call to user_input |
 | clearning.cpp:62:10:62:10 | x indirection | clearning.cpp:60:11:60:20 | call to user_input | clearning.cpp:62:10:62:10 | x indirection | x indirection flows from $@ | clearning.cpp:60:11:60:20 | call to user_input | call to user_input |
 | clearning.cpp:76:7:76:12 | * ... | clearning.cpp:74:20:74:22 | argument_source output argument | clearning.cpp:76:7:76:12 | * ... | * ... flows from $@ | clearning.cpp:74:20:74:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:76:7:76:12 | * ... | clearning.cpp:74:20:74:22 | argument_source output argument | clearning.cpp:76:7:76:12 | * ... | val indirection flows from $@ | clearning.cpp:74:20:74:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:76:7:76:12 | * ... | clearning.cpp:74:20:74:22 | argument_source output argument | clearning.cpp:76:7:76:12 | val indirection | * ... flows from $@ | clearning.cpp:74:20:74:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:76:7:76:12 | * ... | clearning.cpp:74:20:74:22 | argument_source output argument | clearning.cpp:76:7:76:12 | val indirection | val indirection flows from $@ | clearning.cpp:74:20:74:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:76:7:76:12 | val indirection | clearning.cpp:74:20:74:22 | argument_source output argument | clearning.cpp:76:7:76:12 | * ... | * ... flows from $@ | clearning.cpp:74:20:74:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:76:7:76:12 | val indirection | clearning.cpp:74:20:74:22 | argument_source output argument | clearning.cpp:76:7:76:12 | * ... | val indirection flows from $@ | clearning.cpp:74:20:74:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:76:7:76:12 | val indirection | clearning.cpp:74:20:74:22 | argument_source output argument | clearning.cpp:76:7:76:12 | val indirection | * ... flows from $@ | clearning.cpp:74:20:74:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:76:7:76:12 | val indirection | clearning.cpp:74:20:74:22 | argument_source output argument | clearning.cpp:76:7:76:12 | val indirection | val indirection flows from $@ | clearning.cpp:74:20:74:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:84:7:84:12 | * ... | clearning.cpp:81:20:81:22 | argument_source output argument | clearning.cpp:84:7:84:12 | * ... | * ... flows from $@ | clearning.cpp:81:20:81:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:84:7:84:12 | * ... | clearning.cpp:81:20:81:22 | argument_source output argument | clearning.cpp:84:7:84:12 | * ... | val indirection flows from $@ | clearning.cpp:81:20:81:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:84:7:84:12 | * ... | clearning.cpp:81:20:81:22 | argument_source output argument | clearning.cpp:84:7:84:12 | val indirection | * ... flows from $@ | clearning.cpp:81:20:81:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:84:7:84:12 | * ... | clearning.cpp:81:20:81:22 | argument_source output argument | clearning.cpp:84:7:84:12 | val indirection | val indirection flows from $@ | clearning.cpp:81:20:81:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:84:7:84:12 | val indirection | clearning.cpp:81:20:81:22 | argument_source output argument | clearning.cpp:84:7:84:12 | * ... | * ... flows from $@ | clearning.cpp:81:20:81:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:84:7:84:12 | val indirection | clearning.cpp:81:20:81:22 | argument_source output argument | clearning.cpp:84:7:84:12 | * ... | val indirection flows from $@ | clearning.cpp:81:20:81:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:84:7:84:12 | val indirection | clearning.cpp:81:20:81:22 | argument_source output argument | clearning.cpp:84:7:84:12 | val indirection | * ... flows from $@ | clearning.cpp:81:20:81:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:84:7:84:12 | val indirection | clearning.cpp:81:20:81:22 | argument_source output argument | clearning.cpp:84:7:84:12 | val indirection | val indirection flows from $@ | clearning.cpp:81:20:81:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:91:7:91:12 | * ... | clearning.cpp:89:20:89:22 | argument_source output argument | clearning.cpp:91:7:91:12 | * ... | * ... flows from $@ | clearning.cpp:89:20:89:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:91:7:91:12 | * ... | clearning.cpp:89:20:89:22 | argument_source output argument | clearning.cpp:91:7:91:12 | * ... | val indirection flows from $@ | clearning.cpp:89:20:89:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:91:7:91:12 | * ... | clearning.cpp:89:20:89:22 | argument_source output argument | clearning.cpp:91:7:91:12 | val indirection | * ... flows from $@ | clearning.cpp:89:20:89:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:91:7:91:12 | * ... | clearning.cpp:89:20:89:22 | argument_source output argument | clearning.cpp:91:7:91:12 | val indirection | val indirection flows from $@ | clearning.cpp:89:20:89:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:91:7:91:12 | val indirection | clearning.cpp:89:20:89:22 | argument_source output argument | clearning.cpp:91:7:91:12 | * ... | * ... flows from $@ | clearning.cpp:89:20:89:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:91:7:91:12 | val indirection | clearning.cpp:89:20:89:22 | argument_source output argument | clearning.cpp:91:7:91:12 | * ... | val indirection flows from $@ | clearning.cpp:89:20:89:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:91:7:91:12 | val indirection | clearning.cpp:89:20:89:22 | argument_source output argument | clearning.cpp:91:7:91:12 | val indirection | * ... flows from $@ | clearning.cpp:89:20:89:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:91:7:91:12 | val indirection | clearning.cpp:89:20:89:22 | argument_source output argument | clearning.cpp:91:7:91:12 | val indirection | val indirection flows from $@ | clearning.cpp:89:20:89:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:98:7:98:12 | * ... | clearning.cpp:96:20:96:22 | argument_source output argument | clearning.cpp:98:7:98:12 | * ... | * ... flows from $@ | clearning.cpp:96:20:96:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:98:7:98:12 | * ... | clearning.cpp:96:20:96:22 | argument_source output argument | clearning.cpp:98:7:98:12 | * ... | val indirection flows from $@ | clearning.cpp:96:20:96:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:98:7:98:12 | * ... | clearning.cpp:96:20:96:22 | argument_source output argument | clearning.cpp:98:7:98:12 | val indirection | * ... flows from $@ | clearning.cpp:96:20:96:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:98:7:98:12 | * ... | clearning.cpp:96:20:96:22 | argument_source output argument | clearning.cpp:98:7:98:12 | val indirection | val indirection flows from $@ | clearning.cpp:96:20:96:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:98:7:98:12 | val indirection | clearning.cpp:96:20:96:22 | argument_source output argument | clearning.cpp:98:7:98:12 | * ... | * ... flows from $@ | clearning.cpp:96:20:96:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:98:7:98:12 | val indirection | clearning.cpp:96:20:96:22 | argument_source output argument | clearning.cpp:98:7:98:12 | * ... | val indirection flows from $@ | clearning.cpp:96:20:96:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:98:7:98:12 | val indirection | clearning.cpp:96:20:96:22 | argument_source output argument | clearning.cpp:98:7:98:12 | val indirection | * ... flows from $@ | clearning.cpp:96:20:96:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:98:7:98:12 | val indirection | clearning.cpp:96:20:96:22 | argument_source output argument | clearning.cpp:98:7:98:12 | val indirection | val indirection flows from $@ | clearning.cpp:96:20:96:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:105:7:105:12 | * ... | clearning.cpp:103:20:103:22 | argument_source output argument | clearning.cpp:105:7:105:12 | * ... | * ... flows from $@ | clearning.cpp:103:20:103:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:105:7:105:12 | * ... | clearning.cpp:103:20:103:22 | argument_source output argument | clearning.cpp:105:7:105:12 | * ... | val indirection flows from $@ | clearning.cpp:103:20:103:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:105:7:105:12 | * ... | clearning.cpp:103:20:103:22 | argument_source output argument | clearning.cpp:105:7:105:12 | val indirection | * ... flows from $@ | clearning.cpp:103:20:103:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:105:7:105:12 | * ... | clearning.cpp:103:20:103:22 | argument_source output argument | clearning.cpp:105:7:105:12 | val indirection | val indirection flows from $@ | clearning.cpp:103:20:103:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:105:7:105:12 | val indirection | clearning.cpp:103:20:103:22 | argument_source output argument | clearning.cpp:105:7:105:12 | * ... | * ... flows from $@ | clearning.cpp:103:20:103:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:105:7:105:12 | val indirection | clearning.cpp:103:20:103:22 | argument_source output argument | clearning.cpp:105:7:105:12 | * ... | val indirection flows from $@ | clearning.cpp:103:20:103:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:105:7:105:12 | val indirection | clearning.cpp:103:20:103:22 | argument_source output argument | clearning.cpp:105:7:105:12 | val indirection | * ... flows from $@ | clearning.cpp:103:20:103:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:105:7:105:12 | val indirection | clearning.cpp:103:20:103:22 | argument_source output argument | clearning.cpp:105:7:105:12 | val indirection | val indirection flows from $@ | clearning.cpp:103:20:103:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:112:7:112:12 | * ... | clearning.cpp:110:20:110:22 | argument_source output argument | clearning.cpp:112:7:112:12 | * ... | * ... flows from $@ | clearning.cpp:110:20:110:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:112:7:112:12 | * ... | clearning.cpp:110:20:110:22 | argument_source output argument | clearning.cpp:112:7:112:12 | * ... | val indirection flows from $@ | clearning.cpp:110:20:110:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:112:7:112:12 | * ... | clearning.cpp:110:20:110:22 | argument_source output argument | clearning.cpp:112:7:112:12 | val indirection | * ... flows from $@ | clearning.cpp:110:20:110:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:112:7:112:12 | * ... | clearning.cpp:110:20:110:22 | argument_source output argument | clearning.cpp:112:7:112:12 | val indirection | val indirection flows from $@ | clearning.cpp:110:20:110:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:112:7:112:12 | val indirection | clearning.cpp:110:20:110:22 | argument_source output argument | clearning.cpp:112:7:112:12 | * ... | * ... flows from $@ | clearning.cpp:110:20:110:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:112:7:112:12 | val indirection | clearning.cpp:110:20:110:22 | argument_source output argument | clearning.cpp:112:7:112:12 | * ... | val indirection flows from $@ | clearning.cpp:110:20:110:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:112:7:112:12 | val indirection | clearning.cpp:110:20:110:22 | argument_source output argument | clearning.cpp:112:7:112:12 | val indirection | * ... flows from $@ | clearning.cpp:110:20:110:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:112:7:112:12 | val indirection | clearning.cpp:110:20:110:22 | argument_source output argument | clearning.cpp:112:7:112:12 | val indirection | val indirection flows from $@ | clearning.cpp:110:20:110:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:119:7:119:12 | * ... | clearning.cpp:117:20:117:22 | argument_source output argument | clearning.cpp:119:7:119:12 | * ... | * ... flows from $@ | clearning.cpp:117:20:117:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:119:7:119:12 | * ... | clearning.cpp:117:20:117:22 | argument_source output argument | clearning.cpp:119:7:119:12 | * ... | val indirection flows from $@ | clearning.cpp:117:20:117:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:119:7:119:12 | * ... | clearning.cpp:117:20:117:22 | argument_source output argument | clearning.cpp:119:7:119:12 | val indirection | * ... flows from $@ | clearning.cpp:117:20:117:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:119:7:119:12 | * ... | clearning.cpp:117:20:117:22 | argument_source output argument | clearning.cpp:119:7:119:12 | val indirection | val indirection flows from $@ | clearning.cpp:117:20:117:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:119:7:119:12 | val indirection | clearning.cpp:117:20:117:22 | argument_source output argument | clearning.cpp:119:7:119:12 | * ... | * ... flows from $@ | clearning.cpp:117:20:117:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:119:7:119:12 | val indirection | clearning.cpp:117:20:117:22 | argument_source output argument | clearning.cpp:119:7:119:12 | * ... | val indirection flows from $@ | clearning.cpp:117:20:117:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:119:7:119:12 | val indirection | clearning.cpp:117:20:117:22 | argument_source output argument | clearning.cpp:119:7:119:12 | val indirection | * ... flows from $@ | clearning.cpp:117:20:117:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:119:7:119:12 | val indirection | clearning.cpp:117:20:117:22 | argument_source output argument | clearning.cpp:119:7:119:12 | val indirection | val indirection flows from $@ | clearning.cpp:117:20:117:22 | argument_source output argument | argument_source output argument |
 | clearning.cpp:152:10:152:12 | val | clearning.cpp:151:11:151:20 | call to user_input | clearning.cpp:152:10:152:12 | val | val flows from $@ | clearning.cpp:151:11:151:20 | call to user_input | call to user_input |
 | complex.cpp:42:18:42:18 | call to a | complex.cpp:53:19:53:28 | call to user_input | complex.cpp:42:18:42:18 | call to a | call to a flows from $@ | complex.cpp:53:19:53:28 | call to user_input | call to user_input |
 | complex.cpp:42:18:42:18 | call to a | complex.cpp:55:19:55:28 | call to user_input | complex.cpp:42:18:42:18 | call to a | call to a flows from $@ | complex.cpp:55:19:55:28 | call to user_input | call to user_input |
 | complex.cpp:43:18:43:18 | call to b | complex.cpp:54:19:54:28 | call to user_input | complex.cpp:43:18:43:18 | call to b | call to b flows from $@ | complex.cpp:54:19:54:28 | call to user_input | call to user_input |
 | complex.cpp:43:18:43:18 | call to b | complex.cpp:56:19:56:28 | call to user_input | complex.cpp:43:18:43:18 | call to b | call to b flows from $@ | complex.cpp:56:19:56:28 | call to user_input | call to user_input |
 | conflated.cpp:11:8:11:12 | * ... | conflated.cpp:10:11:10:20 | call to user_input | conflated.cpp:11:8:11:12 | * ... | * ... flows from $@ | conflated.cpp:10:11:10:20 | call to user_input | call to user_input |
 | conflated.cpp:11:8:11:12 | * ... | conflated.cpp:10:11:10:20 | call to user_input | conflated.cpp:11:8:11:12 | * ... | p indirection flows from $@ | conflated.cpp:10:11:10:20 | call to user_input | call to user_input |
 | conflated.cpp:11:8:11:12 | * ... | conflated.cpp:10:11:10:20 | call to user_input | conflated.cpp:11:8:11:12 | p indirection | * ... flows from $@ | conflated.cpp:10:11:10:20 | call to user_input | call to user_input |
 | conflated.cpp:11:8:11:12 | * ... | conflated.cpp:10:11:10:20 | call to user_input | conflated.cpp:11:8:11:12 | p indirection | p indirection flows from $@ | conflated.cpp:10:11:10:20 | call to user_input | call to user_input |
 | conflated.cpp:11:8:11:12 | p indirection | conflated.cpp:10:11:10:20 | call to user_input | conflated.cpp:11:8:11:12 | * ... | * ... flows from $@ | conflated.cpp:10:11:10:20 | call to user_input | call to user_input |
 | conflated.cpp:11:8:11:12 | p indirection | conflated.cpp:10:11:10:20 | call to user_input | conflated.cpp:11:8:11:12 | * ... | p indirection flows from $@ | conflated.cpp:10:11:10:20 | call to user_input | call to user_input |
 | conflated.cpp:11:8:11:12 | p indirection | conflated.cpp:10:11:10:20 | call to user_input | conflated.cpp:11:8:11:12 | p indirection | * ... flows from $@ | conflated.cpp:10:11:10:20 | call to user_input | call to user_input |
 | conflated.cpp:11:8:11:12 | p indirection | conflated.cpp:10:11:10:20 | call to user_input | conflated.cpp:11:8:11:12 | p indirection | p indirection flows from $@ | conflated.cpp:10:11:10:20 | call to user_input | call to user_input |
 | conflated.cpp:20:8:20:10 | raw indirection | conflated.cpp:19:19:19:21 | argument_source output argument | conflated.cpp:20:8:20:10 | raw indirection | raw indirection flows from $@ | conflated.cpp:19:19:19:21 | argument_source output argument | argument_source output argument |
 | conflated.cpp:30:12:30:12 | x | conflated.cpp:29:11:29:20 | call to user_input | conflated.cpp:30:12:30:12 | x | x flows from $@ | conflated.cpp:29:11:29:20 | call to user_input | call to user_input |
 | conflated.cpp:37:12:37:12 | x | conflated.cpp:36:11:36:20 | call to user_input | conflated.cpp:37:12:37:12 | x | x flows from $@ | conflated.cpp:36:11:36:20 | call to user_input | call to user_input |
--- a/cpp/ql/test/library-tests/dataflow/taint-tests/taint.expected
+++ b/cpp/ql/test/library-tests/dataflow/taint-tests/taint.expected
@@ -8,37 +8,21 @@ testFailures
 | map.cpp:168:7:168:27 | ... = ... | Unexpected result: ir=168:20 |
 | map.cpp:168:7:168:27 | ... = ... indirection | Unexpected result: ir=168:7 |
 | map.cpp:168:7:168:27 | ... = ... indirection | Unexpected result: ir=168:20 |
 | map.cpp:168:7:168:27 | call to source | Unexpected result: ir=168:7 |
 | map.cpp:168:7:168:27 | call to source | Unexpected result: ir=168:20 |
 | map.cpp:168:7:168:27 | call to source indirection | Unexpected result: ir=168:7 |
 | map.cpp:168:7:168:27 | call to source indirection | Unexpected result: ir=168:20 |
 | map.cpp:168:31:168:41 | // $ ast,ir | Missing result:ir= |
 | map.cpp:170:7:170:30 | ... = ... | Unexpected result: ir=170:7 |
 | map.cpp:170:7:170:30 | ... = ... | Unexpected result: ir=170:23 |
 | map.cpp:170:7:170:30 | ... = ... indirection | Unexpected result: ir=170:7 |
 | map.cpp:170:7:170:30 | ... = ... indirection | Unexpected result: ir=170:23 |
 | map.cpp:170:7:170:30 | call to source | Unexpected result: ir=170:7 |
 | map.cpp:170:7:170:30 | call to source | Unexpected result: ir=170:23 |
 | map.cpp:170:7:170:30 | call to source indirection | Unexpected result: ir=170:7 |
 | map.cpp:170:7:170:30 | call to source indirection | Unexpected result: ir=170:23 |
 | map.cpp:170:34:170:44 | // $ ast,ir | Missing result:ir= |
 | map.cpp:320:7:320:27 | ... = ... | Unexpected result: ir=320:7 |
 | map.cpp:320:7:320:27 | ... = ... | Unexpected result: ir=320:20 |
 | map.cpp:320:7:320:27 | ... = ... indirection | Unexpected result: ir=320:7 |
 | map.cpp:320:7:320:27 | ... = ... indirection | Unexpected result: ir=320:20 |
 | map.cpp:320:7:320:27 | call to source | Unexpected result: ir=320:7 |
 | map.cpp:320:7:320:27 | call to source | Unexpected result: ir=320:20 |
 | map.cpp:320:7:320:27 | call to source indirection | Unexpected result: ir=320:7 |
 | map.cpp:320:7:320:27 | call to source indirection | Unexpected result: ir=320:20 |
 | map.cpp:320:31:320:41 | // $ ast,ir | Missing result:ir= |
 | map.cpp:322:7:322:30 | ... = ... | Unexpected result: ir=322:7 |
 | map.cpp:322:7:322:30 | ... = ... | Unexpected result: ir=322:23 |
 | map.cpp:322:7:322:30 | ... = ... indirection | Unexpected result: ir=322:7 |
 | map.cpp:322:7:322:30 | ... = ... indirection | Unexpected result: ir=322:23 |
 | map.cpp:322:7:322:30 | call to source | Unexpected result: ir=322:7 |
 | map.cpp:322:7:322:30 | call to source | Unexpected result: ir=322:23 |
 | map.cpp:322:7:322:30 | call to source indirection | Unexpected result: ir=322:7 |
 | map.cpp:322:7:322:30 | call to source indirection | Unexpected result: ir=322:23 |
 | map.cpp:322:34:322:44 | // $ ast,ir | Missing result:ir= |
 | taint.cpp:16:8:16:14 | source1 | Unexpected result: ir=12:13 |
 | taint.cpp:16:8:16:14 | source1 | Unexpected result: ir=12:22 |
--- a/cpp/ql/test/query-tests/Critical/MemoryFreed/DoubleFree.expected
+++ b/cpp/ql/test/query-tests/Critical/MemoryFreed/DoubleFree.expected
@@ -9,9 +9,6 @@ edges
 | test_free.cpp:83:12:83:12 | a | test_free.cpp:85:12:85:12 | a |
 | test_free.cpp:101:10:101:10 | a | test_free.cpp:103:10:103:10 | a |
 | test_free.cpp:128:10:128:11 | * ... | test_free.cpp:129:10:129:11 | * ... |
 | test_free.cpp:128:10:128:11 | * ... | test_free.cpp:129:10:129:11 | a indirection |
 | test_free.cpp:128:10:128:11 | a indirection | test_free.cpp:129:10:129:11 | * ... |
 | test_free.cpp:128:10:128:11 | a indirection | test_free.cpp:129:10:129:11 | a indirection |
 | test_free.cpp:152:27:152:27 | a | test_free.cpp:154:10:154:10 | a |
 | test_free.cpp:207:10:207:10 | a | test_free.cpp:209:10:209:10 | a |
 | test_free.cpp:252:7:252:7 | p | test_free.cpp:255:10:255:10 | p |
@@ -36,13 +33,7 @@ nodes
 | test_free.cpp:101:10:101:10 | a | semmle.label | a |
 | test_free.cpp:103:10:103:10 | a | semmle.label | a |
 | test_free.cpp:128:10:128:11 | * ... | semmle.label | * ... |
 | test_free.cpp:128:10:128:11 | * ... | semmle.label | a indirection |
 | test_free.cpp:128:10:128:11 | a indirection | semmle.label | * ... |
 | test_free.cpp:128:10:128:11 | a indirection | semmle.label | a indirection |
 | test_free.cpp:129:10:129:11 | * ... | semmle.label | * ... |
 | test_free.cpp:129:10:129:11 | * ... | semmle.label | a indirection |
 | test_free.cpp:129:10:129:11 | a indirection | semmle.label | * ... |
 | test_free.cpp:129:10:129:11 | a indirection | semmle.label | a indirection |
 | test_free.cpp:152:27:152:27 | a | semmle.label | a |
 | test_free.cpp:154:10:154:10 | a | semmle.label | a |
 | test_free.cpp:207:10:207:10 | a | semmle.label | a |
@@ -63,13 +54,6 @@ subpaths
 | test_free.cpp:85:12:85:12 | a | test_free.cpp:83:12:83:12 | a | test_free.cpp:85:12:85:12 | a | Memory pointed to by 'a' may already have been freed by $@. | test_free.cpp:83:5:83:13 | delete | delete |
 | test_free.cpp:103:10:103:10 | a | test_free.cpp:101:10:101:10 | a | test_free.cpp:103:10:103:10 | a | Memory pointed to by 'a' may already have been freed by $@. | test_free.cpp:101:5:101:8 | call to free | call to free |
 | test_free.cpp:129:10:129:11 | * ... | test_free.cpp:128:10:128:11 | * ... | test_free.cpp:129:10:129:11 | * ... | Memory pointed to by '* ...' may already have been freed by $@. | test_free.cpp:128:5:128:8 | call to free | call to free |
 | test_free.cpp:129:10:129:11 | * ... | test_free.cpp:128:10:128:11 | * ... | test_free.cpp:129:10:129:11 | a indirection | Memory pointed to by '* ...' may already have been freed by $@. | test_free.cpp:128:5:128:8 | call to free | call to free |
 | test_free.cpp:129:10:129:11 | * ... | test_free.cpp:128:10:128:11 | a indirection | test_free.cpp:129:10:129:11 | * ... | Memory pointed to by '* ...' may already have been freed by $@. | test_free.cpp:128:5:128:8 | call to free | call to free |
 | test_free.cpp:129:10:129:11 | * ... | test_free.cpp:128:10:128:11 | a indirection | test_free.cpp:129:10:129:11 | a indirection | Memory pointed to by '* ...' may already have been freed by $@. | test_free.cpp:128:5:128:8 | call to free | call to free |
 | test_free.cpp:129:10:129:11 | a indirection | test_free.cpp:128:10:128:11 | * ... | test_free.cpp:129:10:129:11 | * ... | Memory pointed to by '* ...' may already have been freed by $@. | test_free.cpp:128:5:128:8 | call to free | call to free |
 | test_free.cpp:129:10:129:11 | a indirection | test_free.cpp:128:10:128:11 | * ... | test_free.cpp:129:10:129:11 | a indirection | Memory pointed to by '* ...' may already have been freed by $@. | test_free.cpp:128:5:128:8 | call to free | call to free |
 | test_free.cpp:129:10:129:11 | a indirection | test_free.cpp:128:10:128:11 | a indirection | test_free.cpp:129:10:129:11 | * ... | Memory pointed to by '* ...' may already have been freed by $@. | test_free.cpp:128:5:128:8 | call to free | call to free |
 | test_free.cpp:129:10:129:11 | a indirection | test_free.cpp:128:10:128:11 | a indirection | test_free.cpp:129:10:129:11 | a indirection | Memory pointed to by '* ...' may already have been freed by $@. | test_free.cpp:128:5:128:8 | call to free | call to free |
 | test_free.cpp:154:10:154:10 | a | test_free.cpp:152:27:152:27 | a | test_free.cpp:154:10:154:10 | a | Memory pointed to by 'a' may already have been freed by $@. | test_free.cpp:152:22:152:25 | call to free | call to free |
 | test_free.cpp:209:10:209:10 | a | test_free.cpp:207:10:207:10 | a | test_free.cpp:209:10:209:10 | a | Memory pointed to by 'a' may already have been freed by $@. | test_free.cpp:207:5:207:8 | call to free | call to free |
 | test_free.cpp:255:10:255:10 | p | test_free.cpp:252:7:252:7 | p | test_free.cpp:255:10:255:10 | p | Memory pointed to by 'p' may already have been freed by $@. | test_free.cpp:252:2:252:5 | call to free | call to free |
--- a/cpp/ql/test/query-tests/Critical/MemoryFreed/UseAfterFree.expected
+++ b/cpp/ql/test/query-tests/Critical/MemoryFreed/UseAfterFree.expected
@@ -1,7 +1,6 @@
 edges
 | test_free.cpp:11:10:11:10 | a | test_free.cpp:12:5:12:5 | a |
 | test_free.cpp:11:10:11:10 | a | test_free.cpp:13:5:13:6 | * ... |
 | test_free.cpp:11:10:11:10 | a | test_free.cpp:13:5:13:6 | a |
 | test_free.cpp:42:27:42:27 | a | test_free.cpp:45:5:45:5 | a |
 | test_free.cpp:44:27:44:27 | a | test_free.cpp:45:5:45:5 | a |
 | test_free.cpp:69:10:69:10 | a | test_free.cpp:71:9:71:9 | a |
@@ -19,9 +18,6 @@ nodes
 | test_free.cpp:11:10:11:10 | a | semmle.label | a |
 | test_free.cpp:12:5:12:5 | a | semmle.label | a |
 | test_free.cpp:13:5:13:6 | * ... | semmle.label | * ... |
 | test_free.cpp:13:5:13:6 | * ... | semmle.label | a |
 | test_free.cpp:13:5:13:6 | a | semmle.label | * ... |
 | test_free.cpp:13:5:13:6 | a | semmle.label | a |
 | test_free.cpp:42:27:42:27 | a | semmle.label | a |
 | test_free.cpp:44:27:44:27 | a | semmle.label | a |
 | test_free.cpp:45:5:45:5 | a | semmle.label | a |
@@ -52,9 +48,6 @@ subpaths
 #select
 | test_free.cpp:12:5:12:5 | a | test_free.cpp:11:10:11:10 | a | test_free.cpp:12:5:12:5 | a | Memory may have been previously freed by $@. | test_free.cpp:11:5:11:8 | call to free | call to free |
 | test_free.cpp:13:5:13:6 | * ... | test_free.cpp:11:10:11:10 | a | test_free.cpp:13:5:13:6 | * ... | Memory may have been previously freed by $@. | test_free.cpp:11:5:11:8 | call to free | call to free |
 | test_free.cpp:13:5:13:6 | * ... | test_free.cpp:11:10:11:10 | a | test_free.cpp:13:5:13:6 | a | Memory may have been previously freed by $@. | test_free.cpp:11:5:11:8 | call to free | call to free |
 | test_free.cpp:13:5:13:6 | a | test_free.cpp:11:10:11:10 | a | test_free.cpp:13:5:13:6 | * ... | Memory may have been previously freed by $@. | test_free.cpp:11:5:11:8 | call to free | call to free |
 | test_free.cpp:13:5:13:6 | a | test_free.cpp:11:10:11:10 | a | test_free.cpp:13:5:13:6 | a | Memory may have been previously freed by $@. | test_free.cpp:11:5:11:8 | call to free | call to free |
 | test_free.cpp:45:5:45:5 | a | test_free.cpp:42:27:42:27 | a | test_free.cpp:45:5:45:5 | a | Memory may have been previously freed by $@. | test_free.cpp:42:22:42:25 | call to free | call to free |
 | test_free.cpp:45:5:45:5 | a | test_free.cpp:44:27:44:27 | a | test_free.cpp:45:5:45:5 | a | Memory may have been previously freed by $@. | test_free.cpp:44:22:44:25 | call to free | call to free |
 | test_free.cpp:71:9:71:9 | a | test_free.cpp:69:10:69:10 | a | test_free.cpp:71:9:71:9 | a | Memory may have been previously freed by $@. | test_free.cpp:69:5:69:8 | call to free | call to free |
--- a/cpp/ql/test/query-tests/Security/CWE/CWE-134/semmle/argv/argvLocal.expected
+++ b/cpp/ql/test/query-tests/Security/CWE/CWE-134/semmle/argv/argvLocal.expected
@@ -39,8 +39,6 @@ edges
 | argvLocal.c:105:14:105:17 | argv | argvLocal.c:111:15:111:17 | * ... |
 | argvLocal.c:105:14:105:17 | argv | argvLocal.c:111:15:111:17 | * ... |
 | argvLocal.c:105:14:105:17 | argv | argvLocal.c:111:15:111:17 | * ... |
 | argvLocal.c:105:14:105:17 | argv | argvLocal.c:111:15:111:17 | i2 indirection |
 | argvLocal.c:105:14:105:17 | argv | argvLocal.c:111:15:111:17 | i2 indirection |
 | argvLocal.c:115:13:115:16 | argv | argvLocal.c:116:9:116:10 | i3 |
 | argvLocal.c:115:13:115:16 | argv | argvLocal.c:116:9:116:10 | i3 |
 | argvLocal.c:115:13:115:16 | argv | argvLocal.c:116:9:116:10 | i3 |
@@ -65,8 +63,6 @@ edges
 | argvLocal.c:115:13:115:16 | argv | argvLocal.c:135:9:135:12 | ... ++ |
 | argvLocal.c:115:13:115:16 | argv | argvLocal.c:135:9:135:12 | ... ++ |
 | argvLocal.c:115:13:115:16 | argv | argvLocal.c:135:9:135:12 | ... ++ |
 | argvLocal.c:115:13:115:16 | argv | argvLocal.c:135:9:135:12 | i4 |
 | argvLocal.c:115:13:115:16 | argv | argvLocal.c:135:9:135:12 | i4 |
 | argvLocal.c:115:13:115:16 | argv | argvLocal.c:136:15:136:18 | -- ... |
 | argvLocal.c:115:13:115:16 | argv | argvLocal.c:136:15:136:18 | -- ... |
 | argvLocal.c:115:13:115:16 | argv | argvLocal.c:136:15:136:18 | -- ... |
@@ -141,9 +137,6 @@ nodes
 | argvLocal.c:110:9:110:11 | * ... | semmle.label | * ... |
 | argvLocal.c:111:15:111:17 | * ... | semmle.label | * ... |
 | argvLocal.c:111:15:111:17 | * ... | semmle.label | * ... |
 | argvLocal.c:111:15:111:17 | * ... | semmle.label | i2 indirection |
 | argvLocal.c:111:15:111:17 | i2 indirection | semmle.label | * ... |
 | argvLocal.c:111:15:111:17 | i2 indirection | semmle.label | i2 indirection |
 | argvLocal.c:115:13:115:16 | argv | semmle.label | argv |
 | argvLocal.c:115:13:115:16 | argv | semmle.label | argv |
 | argvLocal.c:116:9:116:10 | i3 | semmle.label | i3 |
@@ -168,9 +161,6 @@ nodes
 | argvLocal.c:135:9:135:12 | ... ++ | semmle.label | ... ++ |
 | argvLocal.c:135:9:135:12 | ... ++ | semmle.label | ... ++ |
 | argvLocal.c:135:9:135:12 | ... ++ | semmle.label | ... ++ |
 | argvLocal.c:135:9:135:12 | ... ++ | semmle.label | i4 |
 | argvLocal.c:135:9:135:12 | i4 | semmle.label | ... ++ |
 | argvLocal.c:135:9:135:12 | i4 | semmle.label | i4 |
 | argvLocal.c:136:15:136:18 | -- ... | semmle.label | -- ... |
 | argvLocal.c:136:15:136:18 | -- ... | semmle.label | -- ... |
 | argvLocal.c:136:15:136:18 | -- ... | semmle.label | -- ... |
--- a/cpp/ql/test/query-tests/Security/CWE/CWE-134/semmle/funcs/funcsLocal.expected
+++ b/cpp/ql/test/query-tests/Security/CWE/CWE-134/semmle/funcs/funcsLocal.expected
@@ -37,8 +37,6 @@ edges
 | funcsLocal.c:46:7:46:9 | * ... | funcsLocal.c:47:9:47:11 | * ... |
 | funcsLocal.c:46:7:46:9 | gets output argument | funcsLocal.c:47:9:47:11 | * ... |
 | funcsLocal.c:46:7:46:9 | gets output argument | funcsLocal.c:47:9:47:11 | * ... |
 | funcsLocal.c:46:7:46:9 | i7 indirection | funcsLocal.c:47:9:47:11 | * ... |
 | funcsLocal.c:46:7:46:9 | i7 indirection | funcsLocal.c:47:9:47:11 | * ... |
 | funcsLocal.c:52:8:52:11 | call to gets | funcsLocal.c:53:9:53:11 | * ... |
 | funcsLocal.c:52:8:52:11 | call to gets | funcsLocal.c:53:9:53:11 | * ... |
 | funcsLocal.c:52:8:52:11 | call to gets | funcsLocal.c:53:9:53:11 | * ... |
@@ -70,10 +68,7 @@ nodes
 | funcsLocal.c:42:9:42:10 | i6 | semmle.label | i6 |
 | funcsLocal.c:46:7:46:9 | * ... | semmle.label | * ... |
 | funcsLocal.c:46:7:46:9 | * ... | semmle.label | * ... |
 | funcsLocal.c:46:7:46:9 | * ... | semmle.label | i7 indirection |
 | funcsLocal.c:46:7:46:9 | gets output argument | semmle.label | gets output argument |
 | funcsLocal.c:46:7:46:9 | i7 indirection | semmle.label | * ... |
 | funcsLocal.c:46:7:46:9 | i7 indirection | semmle.label | i7 indirection |
 | funcsLocal.c:47:9:47:11 | * ... | semmle.label | * ... |
 | funcsLocal.c:47:9:47:11 | * ... | semmle.label | * ... |
 | funcsLocal.c:52:8:52:11 | call to gets | semmle.label | call to gets |
--- a/cpp/ql/test/query-tests/Security/CWE/CWE-190/semmle/TaintedAllocationSize/TaintedAllocationSize.expected
+++ b/cpp/ql/test/query-tests/Security/CWE/CWE-190/semmle/TaintedAllocationSize/TaintedAllocationSize.expected
@@ -3,7 +3,7 @@ edges
 | test.cpp:39:27:39:30 | argv indirection | test.cpp:44:38:44:63 | ... * ... |
 | test.cpp:39:27:39:30 | argv indirection | test.cpp:46:38:46:63 | ... + ... |
 | test.cpp:39:27:39:30 | argv indirection | test.cpp:49:32:49:35 | size |
-| test.cpp:39:27:39:30 | argv indirection | test.cpp:50:17:50:30 | size |
+| test.cpp:39:27:39:30 | argv indirection | test.cpp:50:17:50:30 | new[] |
 | test.cpp:39:27:39:30 | argv indirection | test.cpp:53:35:53:60 | ... * ... |
 | test.cpp:124:18:124:23 | call to getenv | test.cpp:128:24:128:41 | ... * ... |
 | test.cpp:124:18:124:31 | call to getenv indirection | test.cpp:128:24:128:41 | ... * ... |
@@ -40,7 +40,7 @@ nodes
 | test.cpp:44:38:44:63 | ... * ... | semmle.label | ... * ... |
 | test.cpp:46:38:46:63 | ... + ... | semmle.label | ... + ... |
 | test.cpp:49:32:49:35 | size | semmle.label | size |
-| test.cpp:50:17:50:30 | size | semmle.label | size |
+| test.cpp:50:17:50:30 | new[] | semmle.label | new[] |
 | test.cpp:53:35:53:60 | ... * ... | semmle.label | ... * ... |
 | test.cpp:124:18:124:23 | call to getenv | semmle.label | call to getenv |
 | test.cpp:124:18:124:31 | call to getenv indirection | semmle.label | call to getenv indirection |
@@ -82,7 +82,7 @@ subpaths
 | test.cpp:44:31:44:36 | call to malloc | test.cpp:39:27:39:30 | argv indirection | test.cpp:44:38:44:63 | ... * ... | This allocation size is derived from $@ and might overflow. | test.cpp:39:27:39:30 | argv indirection | user input (a command-line argument) |
 | test.cpp:46:31:46:36 | call to malloc | test.cpp:39:27:39:30 | argv indirection | test.cpp:46:38:46:63 | ... + ... | This allocation size is derived from $@ and might overflow. | test.cpp:39:27:39:30 | argv indirection | user input (a command-line argument) |
 | test.cpp:49:25:49:30 | call to malloc | test.cpp:39:27:39:30 | argv indirection | test.cpp:49:32:49:35 | size | This allocation size is derived from $@ and might overflow. | test.cpp:39:27:39:30 | argv indirection | user input (a command-line argument) |
-| test.cpp:50:17:50:30 | new[] | test.cpp:39:27:39:30 | argv indirection | test.cpp:50:17:50:30 | size | This allocation size is derived from $@ and might overflow. | test.cpp:39:27:39:30 | argv indirection | user input (a command-line argument) |
+| test.cpp:50:17:50:30 | new[] | test.cpp:39:27:39:30 | argv indirection | test.cpp:50:17:50:30 | new[] | This allocation size is derived from $@ and might overflow. | test.cpp:39:27:39:30 | argv indirection | user input (a command-line argument) |
 | test.cpp:53:21:53:27 | call to realloc | test.cpp:39:27:39:30 | argv indirection | test.cpp:53:35:53:60 | ... * ... | This allocation size is derived from $@ and might overflow. | test.cpp:39:27:39:30 | argv indirection | user input (a command-line argument) |
 | test.cpp:128:17:128:22 | call to malloc | test.cpp:124:18:124:23 | call to getenv | test.cpp:128:24:128:41 | ... * ... | This allocation size is derived from $@ and might overflow. | test.cpp:124:18:124:23 | call to getenv | user input (an environment variable) |
 | test.cpp:128:17:128:22 | call to malloc | test.cpp:124:18:124:31 | call to getenv indirection | test.cpp:128:24:128:41 | ... * ... | This allocation size is derived from $@ and might overflow. | test.cpp:124:18:124:31 | call to getenv indirection | user input (an environment variable) |
--- a/cpp/ql/test/query-tests/Security/CWE/CWE-193/InvalidPointerDeref.expected
+++ b/cpp/ql/test/query-tests/Security/CWE/CWE-193/InvalidPointerDeref.expected
@@ -3,79 +3,42 @@ edges
 | test.cpp:4:15:4:20 | call to malloc | test.cpp:5:15:5:22 | ... + ... |
 | test.cpp:4:15:4:20 | call to malloc | test.cpp:6:14:6:15 | * ... |
 | test.cpp:4:15:4:20 | call to malloc | test.cpp:6:14:6:15 | * ... |
 | test.cpp:4:15:4:20 | call to malloc | test.cpp:6:14:6:15 | q indirection |
 | test.cpp:4:15:4:20 | call to malloc | test.cpp:6:14:6:15 | q indirection |
 | test.cpp:4:15:4:20 | call to malloc | test.cpp:8:14:8:21 | * ... |
 | test.cpp:4:15:4:20 | call to malloc | test.cpp:8:14:8:21 | ... + ... indirection |
 | test.cpp:5:15:5:22 | ... + ... | test.cpp:5:15:5:22 | ... + ... |
 | test.cpp:5:15:5:22 | ... + ... | test.cpp:6:14:6:15 | * ... |
 | test.cpp:5:15:5:22 | ... + ... | test.cpp:6:14:6:15 | * ... |
 | test.cpp:5:15:5:22 | ... + ... | test.cpp:6:14:6:15 | * ... |
 | test.cpp:5:15:5:22 | ... + ... | test.cpp:6:14:6:15 | * ... |
 | test.cpp:5:15:5:22 | ... + ... | test.cpp:6:14:6:15 | q indirection |
 | test.cpp:5:15:5:22 | ... + ... | test.cpp:6:14:6:15 | q indirection |
 | test.cpp:5:15:5:22 | ... + ... | test.cpp:6:14:6:15 | q indirection |
 | test.cpp:5:15:5:22 | ... + ... | test.cpp:6:14:6:15 | q indirection |
 | test.cpp:5:15:5:22 | ... + ... | test.cpp:8:14:8:21 | * ... |
 | test.cpp:5:15:5:22 | ... + ... | test.cpp:8:14:8:21 | * ... |
 | test.cpp:5:15:5:22 | ... + ... | test.cpp:8:14:8:21 | ... + ... indirection |
 | test.cpp:5:15:5:22 | ... + ... | test.cpp:8:14:8:21 | ... + ... indirection |
 | test.cpp:6:14:6:15 | * ... | test.cpp:8:14:8:21 | * ... |
 | test.cpp:6:14:6:15 | * ... | test.cpp:8:14:8:21 | ... + ... indirection |
 | test.cpp:6:14:6:15 | q indirection | test.cpp:8:14:8:21 | * ... |
 | test.cpp:6:14:6:15 | q indirection | test.cpp:8:14:8:21 | ... + ... indirection |
 | test.cpp:16:15:16:20 | call to malloc | test.cpp:20:14:20:21 | * ... |
 | test.cpp:16:15:16:20 | call to malloc | test.cpp:20:14:20:21 | ... + ... indirection |
 | test.cpp:28:15:28:20 | call to malloc | test.cpp:29:15:29:28 | ... + ... |
 | test.cpp:28:15:28:20 | call to malloc | test.cpp:29:15:29:28 | ... + ... |
 | test.cpp:28:15:28:20 | call to malloc | test.cpp:30:14:30:15 | * ... |
 | test.cpp:28:15:28:20 | call to malloc | test.cpp:30:14:30:15 | * ... |
 | test.cpp:28:15:28:20 | call to malloc | test.cpp:30:14:30:15 | q indirection |
 | test.cpp:28:15:28:20 | call to malloc | test.cpp:30:14:30:15 | q indirection |
 | test.cpp:28:15:28:20 | call to malloc | test.cpp:32:14:32:21 | * ... |
 | test.cpp:28:15:28:20 | call to malloc | test.cpp:32:14:32:21 | ... + ... indirection |
 | test.cpp:29:15:29:28 | ... + ... | test.cpp:29:15:29:28 | ... + ... |
 | test.cpp:29:15:29:28 | ... + ... | test.cpp:30:14:30:15 | * ... |
 | test.cpp:29:15:29:28 | ... + ... | test.cpp:30:14:30:15 | * ... |
 | test.cpp:29:15:29:28 | ... + ... | test.cpp:30:14:30:15 | * ... |
 | test.cpp:29:15:29:28 | ... + ... | test.cpp:30:14:30:15 | * ... |
 | test.cpp:29:15:29:28 | ... + ... | test.cpp:30:14:30:15 | q indirection |
 | test.cpp:29:15:29:28 | ... + ... | test.cpp:30:14:30:15 | q indirection |
 | test.cpp:29:15:29:28 | ... + ... | test.cpp:30:14:30:15 | q indirection |
 | test.cpp:29:15:29:28 | ... + ... | test.cpp:30:14:30:15 | q indirection |
 | test.cpp:29:15:29:28 | ... + ... | test.cpp:32:14:32:21 | * ... |
 | test.cpp:29:15:29:28 | ... + ... | test.cpp:32:14:32:21 | * ... |
 | test.cpp:29:15:29:28 | ... + ... | test.cpp:32:14:32:21 | ... + ... indirection |
 | test.cpp:29:15:29:28 | ... + ... | test.cpp:32:14:32:21 | ... + ... indirection |
 | test.cpp:30:14:30:15 | * ... | test.cpp:32:14:32:21 | * ... |
 | test.cpp:30:14:30:15 | * ... | test.cpp:32:14:32:21 | ... + ... indirection |
 | test.cpp:30:14:30:15 | q indirection | test.cpp:32:14:32:21 | * ... |
 | test.cpp:30:14:30:15 | q indirection | test.cpp:32:14:32:21 | ... + ... indirection |
 | test.cpp:40:15:40:20 | call to malloc | test.cpp:41:15:41:28 | ... + ... |
 | test.cpp:40:15:40:20 | call to malloc | test.cpp:41:15:41:28 | ... + ... |
 | test.cpp:40:15:40:20 | call to malloc | test.cpp:42:14:42:15 | * ... |
 | test.cpp:40:15:40:20 | call to malloc | test.cpp:42:14:42:15 | * ... |
 | test.cpp:40:15:40:20 | call to malloc | test.cpp:42:14:42:15 | q indirection |
 | test.cpp:40:15:40:20 | call to malloc | test.cpp:42:14:42:15 | q indirection |
 | test.cpp:40:15:40:20 | call to malloc | test.cpp:44:14:44:21 | * ... |
 | test.cpp:40:15:40:20 | call to malloc | test.cpp:44:14:44:21 | ... + ... indirection |
 | test.cpp:41:15:41:28 | ... + ... | test.cpp:41:15:41:28 | ... + ... |
 | test.cpp:41:15:41:28 | ... + ... | test.cpp:42:14:42:15 | * ... |
 | test.cpp:41:15:41:28 | ... + ... | test.cpp:42:14:42:15 | * ... |
 | test.cpp:41:15:41:28 | ... + ... | test.cpp:42:14:42:15 | * ... |
 | test.cpp:41:15:41:28 | ... + ... | test.cpp:42:14:42:15 | * ... |
 | test.cpp:41:15:41:28 | ... + ... | test.cpp:42:14:42:15 | q indirection |
 | test.cpp:41:15:41:28 | ... + ... | test.cpp:42:14:42:15 | q indirection |
 | test.cpp:41:15:41:28 | ... + ... | test.cpp:42:14:42:15 | q indirection |
 | test.cpp:41:15:41:28 | ... + ... | test.cpp:42:14:42:15 | q indirection |
 | test.cpp:41:15:41:28 | ... + ... | test.cpp:44:14:44:21 | * ... |
 | test.cpp:41:15:41:28 | ... + ... | test.cpp:44:14:44:21 | * ... |
 | test.cpp:41:15:41:28 | ... + ... | test.cpp:44:14:44:21 | ... + ... indirection |
 | test.cpp:41:15:41:28 | ... + ... | test.cpp:44:14:44:21 | ... + ... indirection |
 | test.cpp:42:14:42:15 | * ... | test.cpp:44:14:44:21 | * ... |
 | test.cpp:42:14:42:15 | * ... | test.cpp:44:14:44:21 | ... + ... indirection |
 | test.cpp:42:14:42:15 | q indirection | test.cpp:44:14:44:21 | * ... |
 | test.cpp:42:14:42:15 | q indirection | test.cpp:44:14:44:21 | ... + ... indirection |
 | test.cpp:51:33:51:35 | end | test.cpp:60:34:60:37 | mk_array output argument |
 | test.cpp:52:19:52:24 | call to malloc | test.cpp:53:5:53:23 | ... = ... |
 | test.cpp:52:19:52:24 | call to malloc | test.cpp:53:12:53:23 | ... + ... |
@@ -101,25 +64,13 @@ edges
 | test.cpp:260:13:260:24 | new[] | test.cpp:261:14:261:21 | ... + ... |
 | test.cpp:260:13:260:24 | new[] | test.cpp:264:13:264:14 | * ... |
 | test.cpp:260:13:260:24 | new[] | test.cpp:264:13:264:14 | * ... |
 | test.cpp:260:13:260:24 | new[] | test.cpp:264:13:264:14 | x indirection |
 | test.cpp:260:13:260:24 | new[] | test.cpp:264:13:264:14 | x indirection |
 | test.cpp:261:14:261:21 | ... + ... | test.cpp:261:14:261:21 | ... + ... |
 | test.cpp:261:14:261:21 | ... + ... | test.cpp:264:13:264:14 | * ... |
 | test.cpp:261:14:261:21 | ... + ... | test.cpp:264:13:264:14 | * ... |
 | test.cpp:261:14:261:21 | ... + ... | test.cpp:264:13:264:14 | * ... |
 | test.cpp:261:14:261:21 | ... + ... | test.cpp:264:13:264:14 | * ... |
 | test.cpp:261:14:261:21 | ... + ... | test.cpp:264:13:264:14 | x indirection |
 | test.cpp:261:14:261:21 | ... + ... | test.cpp:264:13:264:14 | x indirection |
 | test.cpp:261:14:261:21 | ... + ... | test.cpp:264:13:264:14 | x indirection |
 | test.cpp:261:14:261:21 | ... + ... | test.cpp:264:13:264:14 | x indirection |
 | test.cpp:264:13:264:14 | * ... | test.cpp:264:13:264:14 | * ... |
 | test.cpp:264:13:264:14 | * ... | test.cpp:264:13:264:14 | * ... |
 | test.cpp:264:13:264:14 | * ... | test.cpp:264:13:264:14 | x indirection |
 | test.cpp:264:13:264:14 | * ... | test.cpp:264:13:264:14 | x indirection |
 | test.cpp:264:13:264:14 | x indirection | test.cpp:264:13:264:14 | * ... |
 | test.cpp:264:13:264:14 | x indirection | test.cpp:264:13:264:14 | * ... |
 | test.cpp:264:13:264:14 | x indirection | test.cpp:264:13:264:14 | x indirection |
 | test.cpp:264:13:264:14 | x indirection | test.cpp:264:13:264:14 | x indirection |
 | test.cpp:270:13:270:24 | new[] | test.cpp:271:14:271:21 | ... + ... |
 | test.cpp:270:13:270:24 | new[] | test.cpp:271:14:271:21 | ... + ... |
 | test.cpp:270:13:270:24 | new[] | test.cpp:274:5:274:10 | ... = ... |
@@ -154,71 +105,56 @@ edges
 | test.cpp:381:5:381:9 | ... ++ | test.cpp:384:13:384:16 | end indirection |
 | test.cpp:410:14:410:27 | new[] | test.cpp:411:15:411:23 | & ... |
 | test.cpp:410:14:410:27 | new[] | test.cpp:411:15:411:23 | & ... |
 | test.cpp:410:14:410:27 | new[] | test.cpp:411:15:411:23 | access to array |
 | test.cpp:410:14:410:27 | new[] | test.cpp:413:5:413:8 | ... ++ |
 | test.cpp:410:14:410:27 | new[] | test.cpp:413:5:413:8 | ... ++ |
 | test.cpp:410:14:410:27 | new[] | test.cpp:415:7:415:15 | ... = ... |
 | test.cpp:411:15:411:23 | & ... | test.cpp:411:15:411:23 | & ... |
 | test.cpp:411:15:411:23 | & ... | test.cpp:415:7:415:15 | ... = ... |
 | test.cpp:411:15:411:23 | & ... | test.cpp:415:7:415:15 | ... = ... |
 | test.cpp:411:15:411:23 | access to array | test.cpp:411:15:411:23 | & ... |
 | test.cpp:411:15:411:23 | access to array | test.cpp:415:7:415:15 | ... = ... |
 | test.cpp:413:5:413:8 | ... ++ | test.cpp:413:5:413:8 | ... ++ |
 | test.cpp:413:5:413:8 | ... ++ | test.cpp:415:7:415:15 | ... = ... |
 | test.cpp:413:5:413:8 | ... ++ | test.cpp:415:7:415:15 | ... = ... |
 | test.cpp:421:14:421:27 | new[] | test.cpp:422:15:422:23 | & ... |
 | test.cpp:421:14:421:27 | new[] | test.cpp:422:15:422:23 | & ... |
 | test.cpp:421:14:421:27 | new[] | test.cpp:422:15:422:23 | access to array |
 | test.cpp:421:14:421:27 | new[] | test.cpp:424:5:424:8 | ... ++ |
 | test.cpp:421:14:421:27 | new[] | test.cpp:424:5:424:8 | ... ++ |
 | test.cpp:421:14:421:27 | new[] | test.cpp:426:7:426:15 | ... = ... |
 | test.cpp:422:15:422:23 | & ... | test.cpp:422:15:422:23 | & ... |
 | test.cpp:422:15:422:23 | & ... | test.cpp:426:7:426:15 | ... = ... |
 | test.cpp:422:15:422:23 | & ... | test.cpp:426:7:426:15 | ... = ... |
 | test.cpp:422:15:422:23 | access to array | test.cpp:422:15:422:23 | & ... |
 | test.cpp:422:15:422:23 | access to array | test.cpp:426:7:426:15 | ... = ... |
 | test.cpp:424:5:424:8 | ... ++ | test.cpp:424:5:424:8 | ... ++ |
 | test.cpp:424:5:424:8 | ... ++ | test.cpp:426:7:426:15 | ... = ... |
 | test.cpp:424:5:424:8 | ... ++ | test.cpp:426:7:426:15 | ... = ... |
 | test.cpp:432:14:432:27 | new[] | test.cpp:433:15:433:23 | & ... |
 | test.cpp:432:14:432:27 | new[] | test.cpp:433:15:433:23 | & ... |
 | test.cpp:432:14:432:27 | new[] | test.cpp:433:15:433:23 | access to array |
 | test.cpp:432:14:432:27 | new[] | test.cpp:436:5:436:8 | ... ++ |
 | test.cpp:432:14:432:27 | new[] | test.cpp:436:5:436:8 | ... ++ |
 | test.cpp:432:14:432:27 | new[] | test.cpp:438:7:438:15 | ... = ... |
 | test.cpp:433:15:433:23 | & ... | test.cpp:433:15:433:23 | & ... |
 | test.cpp:433:15:433:23 | & ... | test.cpp:438:7:438:15 | ... = ... |
 | test.cpp:433:15:433:23 | & ... | test.cpp:438:7:438:15 | ... = ... |
 | test.cpp:433:15:433:23 | access to array | test.cpp:433:15:433:23 | & ... |
 | test.cpp:433:15:433:23 | access to array | test.cpp:438:7:438:15 | ... = ... |
 | test.cpp:436:5:436:8 | ... ++ | test.cpp:436:5:436:8 | ... ++ |
 | test.cpp:436:5:436:8 | ... ++ | test.cpp:438:7:438:15 | ... = ... |
 | test.cpp:436:5:436:8 | ... ++ | test.cpp:438:7:438:15 | ... = ... |
 | test.cpp:444:14:444:27 | new[] | test.cpp:445:15:445:23 | & ... |
 | test.cpp:444:14:444:27 | new[] | test.cpp:445:15:445:23 | & ... |
 | test.cpp:444:14:444:27 | new[] | test.cpp:445:15:445:23 | access to array |
 | test.cpp:444:14:444:27 | new[] | test.cpp:448:5:448:8 | ... ++ |
 | test.cpp:444:14:444:27 | new[] | test.cpp:448:5:448:8 | ... ++ |
 | test.cpp:444:14:444:27 | new[] | test.cpp:450:7:450:15 | ... = ... |
 | test.cpp:445:15:445:23 | & ... | test.cpp:445:15:445:23 | & ... |
 | test.cpp:445:15:445:23 | & ... | test.cpp:450:7:450:15 | ... = ... |
 | test.cpp:445:15:445:23 | & ... | test.cpp:450:7:450:15 | ... = ... |
 | test.cpp:445:15:445:23 | access to array | test.cpp:445:15:445:23 | & ... |
 | test.cpp:445:15:445:23 | access to array | test.cpp:450:7:450:15 | ... = ... |
 | test.cpp:448:5:448:8 | ... ++ | test.cpp:448:5:448:8 | ... ++ |
 | test.cpp:448:5:448:8 | ... ++ | test.cpp:450:7:450:15 | ... = ... |
 | test.cpp:448:5:448:8 | ... ++ | test.cpp:450:7:450:15 | ... = ... |
 | test.cpp:480:14:480:27 | new[] | test.cpp:481:15:481:23 | & ... |
 | test.cpp:480:14:480:27 | new[] | test.cpp:481:15:481:23 | & ... |
 | test.cpp:480:14:480:27 | new[] | test.cpp:481:15:481:23 | access to array |
 | test.cpp:480:14:480:27 | new[] | test.cpp:484:5:484:8 | ... ++ |
 | test.cpp:480:14:480:27 | new[] | test.cpp:484:5:484:8 | ... ++ |
 | test.cpp:480:14:480:27 | new[] | test.cpp:486:7:486:15 | ... = ... |
 | test.cpp:481:15:481:23 | & ... | test.cpp:481:15:481:23 | & ... |
 | test.cpp:481:15:481:23 | & ... | test.cpp:486:7:486:15 | ... = ... |
 | test.cpp:481:15:481:23 | & ... | test.cpp:486:7:486:15 | ... = ... |
 | test.cpp:481:15:481:23 | access to array | test.cpp:481:15:481:23 | & ... |
 | test.cpp:481:15:481:23 | access to array | test.cpp:486:7:486:15 | ... = ... |
 | test.cpp:484:5:484:8 | ... ++ | test.cpp:484:5:484:8 | ... ++ |
 | test.cpp:484:5:484:8 | ... ++ | test.cpp:486:7:486:15 | ... = ... |
 | test.cpp:484:5:484:8 | ... ++ | test.cpp:486:7:486:15 | ... = ... |
@@ -232,8 +168,6 @@ edges
 | test.cpp:705:18:705:18 | q | test.cpp:705:18:705:18 | q |
 | test.cpp:705:18:705:18 | q | test.cpp:706:12:706:13 | * ... |
 | test.cpp:705:18:705:18 | q | test.cpp:706:12:706:13 | * ... |
 | test.cpp:705:18:705:18 | q | test.cpp:706:12:706:13 | q indirection |
 | test.cpp:705:18:705:18 | q | test.cpp:706:12:706:13 | q indirection |
 | test.cpp:711:13:711:26 | new[] | test.cpp:714:11:714:11 | q |
 | test.cpp:714:11:714:11 | q | test.cpp:705:18:705:18 | q |
 | test.cpp:730:12:730:28 | new[] | test.cpp:732:16:732:26 | ... + ... |
@@ -265,51 +199,21 @@ nodes
 | test.cpp:5:15:5:22 | ... + ... | semmle.label | ... + ... |
 | test.cpp:6:14:6:15 | * ... | semmle.label | * ... |
 | test.cpp:6:14:6:15 | * ... | semmle.label | * ... |
 | test.cpp:6:14:6:15 | * ... | semmle.label | q indirection |
 | test.cpp:6:14:6:15 | * ... | semmle.label | q indirection |
 | test.cpp:6:14:6:15 | q indirection | semmle.label | * ... |
 | test.cpp:6:14:6:15 | q indirection | semmle.label | * ... |
 | test.cpp:6:14:6:15 | q indirection | semmle.label | q indirection |
 | test.cpp:6:14:6:15 | q indirection | semmle.label | q indirection |
 | test.cpp:8:14:8:21 | * ... | semmle.label | * ... |
 | test.cpp:8:14:8:21 | * ... | semmle.label | ... + ... indirection |
 | test.cpp:8:14:8:21 | ... + ... indirection | semmle.label | * ... |
 | test.cpp:8:14:8:21 | ... + ... indirection | semmle.label | ... + ... indirection |
 | test.cpp:16:15:16:20 | call to malloc | semmle.label | call to malloc |
 | test.cpp:20:14:20:21 | * ... | semmle.label | * ... |
 | test.cpp:20:14:20:21 | * ... | semmle.label | ... + ... indirection |
 | test.cpp:20:14:20:21 | ... + ... indirection | semmle.label | * ... |
 | test.cpp:20:14:20:21 | ... + ... indirection | semmle.label | ... + ... indirection |
 | test.cpp:28:15:28:20 | call to malloc | semmle.label | call to malloc |
 | test.cpp:29:15:29:28 | ... + ... | semmle.label | ... + ... |
 | test.cpp:29:15:29:28 | ... + ... | semmle.label | ... + ... |
 | test.cpp:30:14:30:15 | * ... | semmle.label | * ... |
 | test.cpp:30:14:30:15 | * ... | semmle.label | * ... |
 | test.cpp:30:14:30:15 | * ... | semmle.label | q indirection |
 | test.cpp:30:14:30:15 | * ... | semmle.label | q indirection |
 | test.cpp:30:14:30:15 | q indirection | semmle.label | * ... |
 | test.cpp:30:14:30:15 | q indirection | semmle.label | * ... |
 | test.cpp:30:14:30:15 | q indirection | semmle.label | q indirection |
 | test.cpp:30:14:30:15 | q indirection | semmle.label | q indirection |
 | test.cpp:32:14:32:21 | * ... | semmle.label | * ... |
 | test.cpp:32:14:32:21 | * ... | semmle.label | ... + ... indirection |
 | test.cpp:32:14:32:21 | ... + ... indirection | semmle.label | * ... |
 | test.cpp:32:14:32:21 | ... + ... indirection | semmle.label | ... + ... indirection |
 | test.cpp:40:15:40:20 | call to malloc | semmle.label | call to malloc |
 | test.cpp:41:15:41:28 | ... + ... | semmle.label | ... + ... |
 | test.cpp:41:15:41:28 | ... + ... | semmle.label | ... + ... |
 | test.cpp:42:14:42:15 | * ... | semmle.label | * ... |
 | test.cpp:42:14:42:15 | * ... | semmle.label | * ... |
 | test.cpp:42:14:42:15 | * ... | semmle.label | q indirection |
 | test.cpp:42:14:42:15 | * ... | semmle.label | q indirection |
 | test.cpp:42:14:42:15 | q indirection | semmle.label | * ... |
 | test.cpp:42:14:42:15 | q indirection | semmle.label | * ... |
 | test.cpp:42:14:42:15 | q indirection | semmle.label | q indirection |
 | test.cpp:42:14:42:15 | q indirection | semmle.label | q indirection |
 | test.cpp:44:14:44:21 | * ... | semmle.label | * ... |
 | test.cpp:44:14:44:21 | * ... | semmle.label | ... + ... indirection |
 | test.cpp:44:14:44:21 | ... + ... indirection | semmle.label | * ... |
 | test.cpp:44:14:44:21 | ... + ... indirection | semmle.label | ... + ... indirection |
 | test.cpp:51:33:51:35 | end | semmle.label | end |
 | test.cpp:52:19:52:24 | call to malloc | semmle.label | call to malloc |
 | test.cpp:53:5:53:23 | ... = ... | semmle.label | ... = ... |
@@ -335,12 +239,6 @@ nodes
 | test.cpp:261:14:261:21 | ... + ... | semmle.label | ... + ... |
 | test.cpp:264:13:264:14 | * ... | semmle.label | * ... |
 | test.cpp:264:13:264:14 | * ... | semmle.label | * ... |
 | test.cpp:264:13:264:14 | * ... | semmle.label | x indirection |
 | test.cpp:264:13:264:14 | * ... | semmle.label | x indirection |
 | test.cpp:264:13:264:14 | x indirection | semmle.label | * ... |
 | test.cpp:264:13:264:14 | x indirection | semmle.label | * ... |
 | test.cpp:264:13:264:14 | x indirection | semmle.label | x indirection |
 | test.cpp:264:13:264:14 | x indirection | semmle.label | x indirection |
 | test.cpp:270:13:270:24 | new[] | semmle.label | new[] |
 | test.cpp:271:14:271:21 | ... + ... | semmle.label | ... + ... |
 | test.cpp:271:14:271:21 | ... + ... | semmle.label | ... + ... |
@@ -361,45 +259,30 @@ nodes
 | test.cpp:410:14:410:27 | new[] | semmle.label | new[] |
 | test.cpp:411:15:411:23 | & ... | semmle.label | & ... |
 | test.cpp:411:15:411:23 | & ... | semmle.label | & ... |
 | test.cpp:411:15:411:23 | & ... | semmle.label | access to array |
 | test.cpp:411:15:411:23 | access to array | semmle.label | & ... |
 | test.cpp:411:15:411:23 | access to array | semmle.label | access to array |
 | test.cpp:413:5:413:8 | ... ++ | semmle.label | ... ++ |
 | test.cpp:413:5:413:8 | ... ++ | semmle.label | ... ++ |
 | test.cpp:415:7:415:15 | ... = ... | semmle.label | ... = ... |
 | test.cpp:421:14:421:27 | new[] | semmle.label | new[] |
 | test.cpp:422:15:422:23 | & ... | semmle.label | & ... |
 | test.cpp:422:15:422:23 | & ... | semmle.label | & ... |
 | test.cpp:422:15:422:23 | & ... | semmle.label | access to array |
 | test.cpp:422:15:422:23 | access to array | semmle.label | & ... |
 | test.cpp:422:15:422:23 | access to array | semmle.label | access to array |
 | test.cpp:424:5:424:8 | ... ++ | semmle.label | ... ++ |
 | test.cpp:424:5:424:8 | ... ++ | semmle.label | ... ++ |
 | test.cpp:426:7:426:15 | ... = ... | semmle.label | ... = ... |
 | test.cpp:432:14:432:27 | new[] | semmle.label | new[] |
 | test.cpp:433:15:433:23 | & ... | semmle.label | & ... |
 | test.cpp:433:15:433:23 | & ... | semmle.label | & ... |
 | test.cpp:433:15:433:23 | & ... | semmle.label | access to array |
 | test.cpp:433:15:433:23 | access to array | semmle.label | & ... |
 | test.cpp:433:15:433:23 | access to array | semmle.label | access to array |
 | test.cpp:436:5:436:8 | ... ++ | semmle.label | ... ++ |
 | test.cpp:436:5:436:8 | ... ++ | semmle.label | ... ++ |
 | test.cpp:438:7:438:15 | ... = ... | semmle.label | ... = ... |
 | test.cpp:444:14:444:27 | new[] | semmle.label | new[] |
 | test.cpp:445:15:445:23 | & ... | semmle.label | & ... |
 | test.cpp:445:15:445:23 | & ... | semmle.label | & ... |
 | test.cpp:445:15:445:23 | & ... | semmle.label | access to array |
 | test.cpp:445:15:445:23 | access to array | semmle.label | & ... |
 | test.cpp:445:15:445:23 | access to array | semmle.label | access to array |
 | test.cpp:448:5:448:8 | ... ++ | semmle.label | ... ++ |
 | test.cpp:448:5:448:8 | ... ++ | semmle.label | ... ++ |
 | test.cpp:450:7:450:15 | ... = ... | semmle.label | ... = ... |
 | test.cpp:480:14:480:27 | new[] | semmle.label | new[] |
 | test.cpp:481:15:481:23 | & ... | semmle.label | & ... |
 | test.cpp:481:15:481:23 | & ... | semmle.label | & ... |
 | test.cpp:481:15:481:23 | & ... | semmle.label | access to array |
 | test.cpp:481:15:481:23 | access to array | semmle.label | & ... |
 | test.cpp:481:15:481:23 | access to array | semmle.label | access to array |
 | test.cpp:484:5:484:8 | ... ++ | semmle.label | ... ++ |
 | test.cpp:484:5:484:8 | ... ++ | semmle.label | ... ++ |
 | test.cpp:486:7:486:15 | ... = ... | semmle.label | ... = ... |
@@ -416,9 +299,6 @@ nodes
 | test.cpp:705:18:705:18 | q | semmle.label | q |
 | test.cpp:705:18:705:18 | q | semmle.label | q |
 | test.cpp:706:12:706:13 | * ... | semmle.label | * ... |
 | test.cpp:706:12:706:13 | * ... | semmle.label | q indirection |
 | test.cpp:706:12:706:13 | q indirection | semmle.label | * ... |
 | test.cpp:706:12:706:13 | q indirection | semmle.label | q indirection |
 | test.cpp:711:13:711:26 | new[] | semmle.label | new[] |
 | test.cpp:714:11:714:11 | q | semmle.label | q |
 | test.cpp:730:12:730:28 | new[] | semmle.label | new[] |
@@ -446,33 +326,12 @@ nodes
 subpaths
 #select
 | test.cpp:6:14:6:15 | * ... | test.cpp:4:15:4:20 | call to malloc | test.cpp:6:14:6:15 | * ... | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:4:15:4:20 | call to malloc | call to malloc | test.cpp:5:19:5:22 | size | size |
 | test.cpp:6:14:6:15 | * ... | test.cpp:4:15:4:20 | call to malloc | test.cpp:6:14:6:15 | q indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:4:15:4:20 | call to malloc | call to malloc | test.cpp:5:19:5:22 | size | size |
 | test.cpp:6:14:6:15 | q indirection | test.cpp:4:15:4:20 | call to malloc | test.cpp:6:14:6:15 | * ... | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:4:15:4:20 | call to malloc | call to malloc | test.cpp:5:19:5:22 | size | size |
 | test.cpp:6:14:6:15 | q indirection | test.cpp:4:15:4:20 | call to malloc | test.cpp:6:14:6:15 | q indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:4:15:4:20 | call to malloc | call to malloc | test.cpp:5:19:5:22 | size | size |
 | test.cpp:8:14:8:21 | * ... | test.cpp:4:15:4:20 | call to malloc | test.cpp:8:14:8:21 | * ... | This read might be out of bounds, as the pointer might be equal to $@ + $@ + 1. | test.cpp:4:15:4:20 | call to malloc | call to malloc | test.cpp:5:19:5:22 | size | size |
 | test.cpp:8:14:8:21 | * ... | test.cpp:4:15:4:20 | call to malloc | test.cpp:8:14:8:21 | ... + ... indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@ + 1. | test.cpp:4:15:4:20 | call to malloc | call to malloc | test.cpp:5:19:5:22 | size | size |
 | test.cpp:8:14:8:21 | ... + ... indirection | test.cpp:4:15:4:20 | call to malloc | test.cpp:8:14:8:21 | * ... | This read might be out of bounds, as the pointer might be equal to $@ + $@ + 1. | test.cpp:4:15:4:20 | call to malloc | call to malloc | test.cpp:5:19:5:22 | size | size |
 | test.cpp:8:14:8:21 | ... + ... indirection | test.cpp:4:15:4:20 | call to malloc | test.cpp:8:14:8:21 | ... + ... indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@ + 1. | test.cpp:4:15:4:20 | call to malloc | call to malloc | test.cpp:5:19:5:22 | size | size |
 | test.cpp:20:14:20:21 | * ... | test.cpp:16:15:16:20 | call to malloc | test.cpp:20:14:20:21 | * ... | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:16:15:16:20 | call to malloc | call to malloc | test.cpp:17:19:17:22 | size | size |
 | test.cpp:20:14:20:21 | * ... | test.cpp:16:15:16:20 | call to malloc | test.cpp:20:14:20:21 | ... + ... indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:16:15:16:20 | call to malloc | call to malloc | test.cpp:17:19:17:22 | size | size |
 | test.cpp:20:14:20:21 | ... + ... indirection | test.cpp:16:15:16:20 | call to malloc | test.cpp:20:14:20:21 | * ... | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:16:15:16:20 | call to malloc | call to malloc | test.cpp:17:19:17:22 | size | size |
 | test.cpp:20:14:20:21 | ... + ... indirection | test.cpp:16:15:16:20 | call to malloc | test.cpp:20:14:20:21 | ... + ... indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:16:15:16:20 | call to malloc | call to malloc | test.cpp:17:19:17:22 | size | size |
 | test.cpp:30:14:30:15 | * ... | test.cpp:28:15:28:20 | call to malloc | test.cpp:30:14:30:15 | * ... | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:28:15:28:20 | call to malloc | call to malloc | test.cpp:29:20:29:27 | ... + ... | ... + ... |
 | test.cpp:30:14:30:15 | * ... | test.cpp:28:15:28:20 | call to malloc | test.cpp:30:14:30:15 | q indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:28:15:28:20 | call to malloc | call to malloc | test.cpp:29:20:29:27 | ... + ... | ... + ... |
 | test.cpp:30:14:30:15 | q indirection | test.cpp:28:15:28:20 | call to malloc | test.cpp:30:14:30:15 | * ... | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:28:15:28:20 | call to malloc | call to malloc | test.cpp:29:20:29:27 | ... + ... | ... + ... |
 | test.cpp:30:14:30:15 | q indirection | test.cpp:28:15:28:20 | call to malloc | test.cpp:30:14:30:15 | q indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:28:15:28:20 | call to malloc | call to malloc | test.cpp:29:20:29:27 | ... + ... | ... + ... |
 | test.cpp:32:14:32:21 | * ... | test.cpp:28:15:28:20 | call to malloc | test.cpp:32:14:32:21 | * ... | This read might be out of bounds, as the pointer might be equal to $@ + $@ + 1. | test.cpp:28:15:28:20 | call to malloc | call to malloc | test.cpp:29:20:29:27 | ... + ... | ... + ... |
 | test.cpp:32:14:32:21 | * ... | test.cpp:28:15:28:20 | call to malloc | test.cpp:32:14:32:21 | ... + ... indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@ + 1. | test.cpp:28:15:28:20 | call to malloc | call to malloc | test.cpp:29:20:29:27 | ... + ... | ... + ... |
 | test.cpp:32:14:32:21 | ... + ... indirection | test.cpp:28:15:28:20 | call to malloc | test.cpp:32:14:32:21 | * ... | This read might be out of bounds, as the pointer might be equal to $@ + $@ + 1. | test.cpp:28:15:28:20 | call to malloc | call to malloc | test.cpp:29:20:29:27 | ... + ... | ... + ... |
 | test.cpp:32:14:32:21 | ... + ... indirection | test.cpp:28:15:28:20 | call to malloc | test.cpp:32:14:32:21 | ... + ... indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@ + 1. | test.cpp:28:15:28:20 | call to malloc | call to malloc | test.cpp:29:20:29:27 | ... + ... | ... + ... |
 | test.cpp:42:14:42:15 | * ... | test.cpp:40:15:40:20 | call to malloc | test.cpp:42:14:42:15 | * ... | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:40:15:40:20 | call to malloc | call to malloc | test.cpp:41:20:41:27 | ... - ... | ... - ... |
 | test.cpp:42:14:42:15 | * ... | test.cpp:40:15:40:20 | call to malloc | test.cpp:42:14:42:15 | q indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:40:15:40:20 | call to malloc | call to malloc | test.cpp:41:20:41:27 | ... - ... | ... - ... |
 | test.cpp:42:14:42:15 | q indirection | test.cpp:40:15:40:20 | call to malloc | test.cpp:42:14:42:15 | * ... | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:40:15:40:20 | call to malloc | call to malloc | test.cpp:41:20:41:27 | ... - ... | ... - ... |
 | test.cpp:42:14:42:15 | q indirection | test.cpp:40:15:40:20 | call to malloc | test.cpp:42:14:42:15 | q indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:40:15:40:20 | call to malloc | call to malloc | test.cpp:41:20:41:27 | ... - ... | ... - ... |
 | test.cpp:44:14:44:21 | * ... | test.cpp:40:15:40:20 | call to malloc | test.cpp:44:14:44:21 | * ... | This read might be out of bounds, as the pointer might be equal to $@ + $@ + 1. | test.cpp:40:15:40:20 | call to malloc | call to malloc | test.cpp:41:20:41:27 | ... - ... | ... - ... |
 | test.cpp:44:14:44:21 | * ... | test.cpp:40:15:40:20 | call to malloc | test.cpp:44:14:44:21 | ... + ... indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@ + 1. | test.cpp:40:15:40:20 | call to malloc | call to malloc | test.cpp:41:20:41:27 | ... - ... | ... - ... |
 | test.cpp:44:14:44:21 | ... + ... indirection | test.cpp:40:15:40:20 | call to malloc | test.cpp:44:14:44:21 | * ... | This read might be out of bounds, as the pointer might be equal to $@ + $@ + 1. | test.cpp:40:15:40:20 | call to malloc | call to malloc | test.cpp:41:20:41:27 | ... - ... | ... - ... |
 | test.cpp:44:14:44:21 | ... + ... indirection | test.cpp:40:15:40:20 | call to malloc | test.cpp:44:14:44:21 | ... + ... indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@ + 1. | test.cpp:40:15:40:20 | call to malloc | call to malloc | test.cpp:41:20:41:27 | ... - ... | ... - ... |
 | test.cpp:67:9:67:14 | ... = ... | test.cpp:52:19:52:24 | call to malloc | test.cpp:67:9:67:14 | ... = ... | This write might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:52:19:52:24 | call to malloc | call to malloc | test.cpp:53:20:53:23 | size | size |
 | test.cpp:201:5:201:19 | ... = ... | test.cpp:194:15:194:33 | call to malloc | test.cpp:201:5:201:19 | ... = ... | This write might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:194:15:194:33 | call to malloc | call to malloc | test.cpp:195:21:195:23 | len | len |
 | test.cpp:213:5:213:13 | ... = ... | test.cpp:205:15:205:33 | call to malloc | test.cpp:213:5:213:13 | ... = ... | This write might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:205:15:205:33 | call to malloc | call to malloc | test.cpp:206:21:206:23 | len | len |
@@ -480,9 +339,6 @@ subpaths
 | test.cpp:239:5:239:22 | ... = ... | test.cpp:238:20:238:32 | new[] | test.cpp:239:5:239:22 | ... = ... | This write might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:238:20:238:32 | new[] | new[] | test.cpp:239:13:239:17 | index | index |
 | test.cpp:254:9:254:16 | ... = ... | test.cpp:248:13:248:36 | call to realloc | test.cpp:254:9:254:16 | ... = ... | This write might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:248:13:248:36 | call to realloc | call to realloc | test.cpp:254:11:254:11 | i | i |
 | test.cpp:264:13:264:14 | * ... | test.cpp:260:13:260:24 | new[] | test.cpp:264:13:264:14 | * ... | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:260:13:260:24 | new[] | new[] | test.cpp:261:19:261:21 | len | len |
 | test.cpp:264:13:264:14 | * ... | test.cpp:260:13:260:24 | new[] | test.cpp:264:13:264:14 | x indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:260:13:260:24 | new[] | new[] | test.cpp:261:19:261:21 | len | len |
 | test.cpp:264:13:264:14 | x indirection | test.cpp:260:13:260:24 | new[] | test.cpp:264:13:264:14 | * ... | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:260:13:260:24 | new[] | new[] | test.cpp:261:19:261:21 | len | len |
 | test.cpp:264:13:264:14 | x indirection | test.cpp:260:13:260:24 | new[] | test.cpp:264:13:264:14 | x indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:260:13:260:24 | new[] | new[] | test.cpp:261:19:261:21 | len | len |
 | test.cpp:274:5:274:10 | ... = ... | test.cpp:270:13:270:24 | new[] | test.cpp:274:5:274:10 | ... = ... | This write might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:270:13:270:24 | new[] | new[] | test.cpp:271:19:271:21 | len | len |
 | test.cpp:358:14:358:26 | end_plus_one indirection | test.cpp:355:14:355:27 | new[] | test.cpp:358:14:358:26 | end_plus_one indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@ + 1. | test.cpp:355:14:355:27 | new[] | new[] | test.cpp:356:20:356:23 | size | size |
 | test.cpp:359:14:359:32 | ... + ... indirection | test.cpp:355:14:355:27 | new[] | test.cpp:359:14:359:32 | ... + ... indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@ + 2. | test.cpp:355:14:355:27 | new[] | new[] | test.cpp:356:20:356:23 | size | size |
@@ -497,9 +353,6 @@ subpaths
 | test.cpp:647:5:647:19 | ... = ... | test.cpp:642:14:642:31 | new[] | test.cpp:647:5:647:19 | ... = ... | This write might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:642:14:642:31 | new[] | new[] | test.cpp:647:8:647:14 | src_pos | src_pos |
 | test.cpp:701:15:701:16 | p indirection | test.cpp:695:13:695:26 | new[] | test.cpp:701:15:701:16 | p indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:695:13:695:26 | new[] | new[] | test.cpp:696:19:696:22 | size | size |
 | test.cpp:706:12:706:13 | * ... | test.cpp:711:13:711:26 | new[] | test.cpp:706:12:706:13 | * ... | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:711:13:711:26 | new[] | new[] | test.cpp:712:19:712:22 | size | size |
 | test.cpp:706:12:706:13 | * ... | test.cpp:711:13:711:26 | new[] | test.cpp:706:12:706:13 | q indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:711:13:711:26 | new[] | new[] | test.cpp:712:19:712:22 | size | size |
 | test.cpp:706:12:706:13 | q indirection | test.cpp:711:13:711:26 | new[] | test.cpp:706:12:706:13 | * ... | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:711:13:711:26 | new[] | new[] | test.cpp:712:19:712:22 | size | size |
 | test.cpp:706:12:706:13 | q indirection | test.cpp:711:13:711:26 | new[] | test.cpp:706:12:706:13 | q indirection | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:711:13:711:26 | new[] | new[] | test.cpp:712:19:712:22 | size | size |
 | test.cpp:733:5:733:12 | ... = ... | test.cpp:730:12:730:28 | new[] | test.cpp:733:5:733:12 | ... = ... | This write might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:730:12:730:28 | new[] | new[] | test.cpp:732:21:732:25 | ... + ... | ... + ... |
 | test.cpp:767:16:767:29 | access to array | test.cpp:754:18:754:31 | new[] | test.cpp:767:16:767:29 | access to array | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:754:18:754:31 | new[] | new[] | test.cpp:767:22:767:28 | ... + ... | ... + ... |
 | test.cpp:767:16:767:29 | access to array | test.cpp:754:18:754:31 | new[] | test.cpp:767:16:767:29 | access to array | This read might be out of bounds, as the pointer might be equal to $@ + $@. | test.cpp:754:18:754:31 | new[] | new[] | test.cpp:772:22:772:28 | ... + ... | ... + ... |
--- a/cpp/ql/test/query-tests/Security/CWE/CWE-311/semmle/tests/CleartextTransmission.expected
+++ b/cpp/ql/test/query-tests/Security/CWE/CWE-311/semmle/tests/CleartextTransmission.expected
@@ -89,9 +89,6 @@ nodes
 | test3.cpp:368:15:368:22 | password | semmle.label | password |
 | test3.cpp:388:15:388:22 | password | semmle.label | password |
 | test3.cpp:400:15:400:23 | & ... | semmle.label | & ... |
 | test3.cpp:400:15:400:23 | & ... | semmle.label | password |
 | test3.cpp:400:15:400:23 | password | semmle.label | & ... |
 | test3.cpp:400:15:400:23 | password | semmle.label | password |
 | test3.cpp:414:15:414:24 | password | semmle.label | password |
 | test3.cpp:420:15:420:24 | password | semmle.label | password |
 | test3.cpp:431:8:431:15 | password | semmle.label | password |
--- a/cpp/ql/test/query-tests/Security/CWE/CWE-416/semmle/tests/UseAfterFree.expected
+++ b/cpp/ql/test/query-tests/Security/CWE/CWE-416/semmle/tests/UseAfterFree.expected
@@ -7,7 +7,6 @@ edges
 | test.cpp:138:7:138:10 | data | test.cpp:141:6:141:9 | data |
 | test.cpp:164:9:164:9 | c | test.cpp:165:2:165:2 | c |
 | test.cpp:164:9:164:9 | c | test.cpp:166:3:166:4 | * ... |
 | test.cpp:164:9:164:9 | c | test.cpp:166:3:166:4 | c |
 | test.cpp:181:7:181:10 | data | test.cpp:186:6:186:9 | data |
 | test.cpp:192:7:192:10 | data | test.cpp:197:6:197:9 | data |
 | test.cpp:203:7:203:10 | data | test.cpp:209:6:209:9 | data |
@@ -29,9 +28,6 @@ nodes
 | test.cpp:164:9:164:9 | c | semmle.label | c |
 | test.cpp:165:2:165:2 | c | semmle.label | c |
 | test.cpp:166:3:166:4 | * ... | semmle.label | * ... |
 | test.cpp:166:3:166:4 | * ... | semmle.label | c |
 | test.cpp:166:3:166:4 | c | semmle.label | * ... |
 | test.cpp:166:3:166:4 | c | semmle.label | c |
 | test.cpp:181:7:181:10 | data | semmle.label | data |
 | test.cpp:186:6:186:9 | data | semmle.label | data |
 | test.cpp:192:7:192:10 | data | semmle.label | data |
@@ -52,9 +48,6 @@ subpaths
 | test.cpp:141:6:141:9 | data | test.cpp:138:7:138:10 | data | test.cpp:141:6:141:9 | data | Memory may have been previously freed by $@. | test.cpp:138:2:138:5 | call to free | call to free |
 | test.cpp:165:2:165:2 | c | test.cpp:164:9:164:9 | c | test.cpp:165:2:165:2 | c | Memory may have been previously freed by $@. | test.cpp:164:2:164:10 | delete | delete |
 | test.cpp:166:3:166:4 | * ... | test.cpp:164:9:164:9 | c | test.cpp:166:3:166:4 | * ... | Memory may have been previously freed by $@. | test.cpp:164:2:164:10 | delete | delete |
 | test.cpp:166:3:166:4 | * ... | test.cpp:164:9:164:9 | c | test.cpp:166:3:166:4 | c | Memory may have been previously freed by $@. | test.cpp:164:2:164:10 | delete | delete |
 | test.cpp:166:3:166:4 | c | test.cpp:164:9:164:9 | c | test.cpp:166:3:166:4 | * ... | Memory may have been previously freed by $@. | test.cpp:164:2:164:10 | delete | delete |
 | test.cpp:166:3:166:4 | c | test.cpp:164:9:164:9 | c | test.cpp:166:3:166:4 | c | Memory may have been previously freed by $@. | test.cpp:164:2:164:10 | delete | delete |
 | test.cpp:186:6:186:9 | data | test.cpp:181:7:181:10 | data | test.cpp:186:6:186:9 | data | Memory may have been previously freed by $@. | test.cpp:181:2:181:5 | call to free | call to free |
 | test.cpp:197:6:197:9 | data | test.cpp:192:7:192:10 | data | test.cpp:197:6:197:9 | data | Memory may have been previously freed by $@. | test.cpp:192:2:192:5 | call to free | call to free |
 | test.cpp:209:6:209:9 | data | test.cpp:203:7:203:10 | data | test.cpp:209:6:209:9 | data | Memory may have been previously freed by $@. | test.cpp:203:2:203:5 | call to free | call to free |