Add axis 2 models

cpp/ql/lib/change-notes/2026-06-30-mad-qualified-field-names.md

@@ -1,4 +0,0 @@
----
-category: deprecated
----
-* Models-as-data flow summaries now use fully qualified field names (for example, `MyNamespace::MyStruct::myField`) instead of unqualified field names such as `myField`. We recommend updating existing flow summaries to use fully qualified field names. Unqualified field names are still supported, but that support will be removed in a future release.

cpp/ql/lib/semmle/code/cpp/dataflow/internal/FlowSummaryImpl.qll

@@ -40,24 +40,12 @@ module Input implements InputSig<Location, DataFlowImplSpecific::CppDataFlow> {
     arg = repeatStars(rk.(NormalReturnKind).getIndirectionIndex())
   }
 
-  bindingset[namespace, type, base]
-  private string formatQualifiedName(string namespace, string type, string base) {
-    if namespace = ""
-    then result = type + "::" + base
-    else result = namespace + "::" + type + "::" + base
-  }
-
   string encodeContent(ContentSet cs, string arg) {
-    exists(FieldContent c, string namespace, string type, string base |
+    exists(FieldContent c |
       cs.isSingleton(c) and
       // FieldContent indices have 0 for the address, 1 for content, so we need to subtract one.
       result = "Field" and
-      c.getField().hasQualifiedName(namespace, type, base)
-    |
-      arg = repeatStars(c.getIndirectionIndex() - 1) + formatQualifiedName(namespace, type, base)
-      or
-      // TODO: This disjunct can be removed once we stop supporting unqualified field names.
-      arg = repeatStars(c.getIndirectionIndex() - 1) + base
+      arg = repeatStars(c.getIndirectionIndex() - 1) + c.getField().getName()
     )
     or
     exists(ElementContent ec |

cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowPrivate.qll

@@ -1378,8 +1378,6 @@ predicate nodeIsHidden(Node n) {
   n instanceof InitialGlobalValue
   or
   n instanceof SsaSynthNode
-  or
-  n.(FlowSummaryNode).getSummaryNode().isHidden()
 }
 
 predicate neverSkipInPathGraph(Node n) {

cpp/ql/test/library-tests/dataflow/external-models/flow.expected

@@ -48,20 +48,19 @@ models
 | 47 | Summary: ; ; false; callWithArgument; ; ; Argument[1]; Argument[0].Parameter[0]; value; manual |
 | 48 | Summary: ; ; false; callWithNonTypeTemplate<T>; (const T &); ; Argument[*0]; ReturnValue; value; manual |
 | 49 | Summary: ; ; false; pthread_create; ; ; Argument[@3]; Argument[2].Parameter[@0]; value; manual |
-| 50 | Summary: ; ; false; read_field_from_struct; ; ; Argument[*0].Field[MyNamespace::MyStructInNamespace::myField]; ReturnValue; value; manual |
-| 51 | Summary: ; ; false; read_field_from_struct_2; ; ; Argument[*0].Field[MyGlobalStruct::myField]; ReturnValue; value; manual |
-| 52 | Summary: ; ; false; ymlStepGenerated; ; ; Argument[0]; ReturnValue; taint; df-generated |
-| 53 | Summary: ; ; false; ymlStepManual; ; ; Argument[0]; ReturnValue; taint; manual |
-| 54 | Summary: ; ; false; ymlStepManual_with_body; ; ; Argument[0]; ReturnValue; taint; manual |
-| 55 | Summary: ; TemplateClass1; true; templateFunction2<U,V>; (U,V); ; Argument[1]; ReturnValue; value; manual |
-| 56 | Summary: ; TemplateClass1<T>; false; templateFunction<U>; (T,U); ; Argument[0]; ReturnValue; value; manual |
-| 57 | Summary: ; TemplateClass2<T,U>; true; function; (U,T); ; Argument[1]; ReturnValue; value; manual |
-| 58 | Summary: Azure::Core::IO; BodyStream; true; Read; ; ; Argument[-1]; Argument[*0]; taint; manual |
-| 59 | Summary: Azure::Core::IO; BodyStream; true; ReadToCount; ; ; Argument[-1]; Argument[*0]; taint; manual |
-| 60 | Summary: Azure::Core::IO; BodyStream; true; ReadToEnd; ; ; Argument[-1]; ReturnValue.Element; taint; manual |
-| 61 | Summary: Azure; Nullable; true; Value; ; ; Argument[-1]; ReturnValue[*]; taint; manual |
-| 62 | Summary: boost::asio; ; false; buffer; ; ; Argument[*0]; ReturnValue; taint; manual |
+| 50 | Summary: ; ; false; ymlStepGenerated; ; ; Argument[0]; ReturnValue; taint; df-generated |
+| 51 | Summary: ; ; false; ymlStepManual; ; ; Argument[0]; ReturnValue; taint; manual |
+| 52 | Summary: ; ; false; ymlStepManual_with_body; ; ; Argument[0]; ReturnValue; taint; manual |
+| 53 | Summary: ; TemplateClass1; true; templateFunction2<U,V>; (U,V); ; Argument[1]; ReturnValue; value; manual |
+| 54 | Summary: ; TemplateClass1<T>; false; templateFunction<U>; (T,U); ; Argument[0]; ReturnValue; value; manual |
+| 55 | Summary: ; TemplateClass2<T,U>; true; function; (U,T); ; Argument[1]; ReturnValue; value; manual |
+| 56 | Summary: Azure::Core::IO; BodyStream; true; Read; ; ; Argument[-1]; Argument[*0]; taint; manual |
+| 57 | Summary: Azure::Core::IO; BodyStream; true; ReadToCount; ; ; Argument[-1]; Argument[*0]; taint; manual |
+| 58 | Summary: Azure::Core::IO; BodyStream; true; ReadToEnd; ; ; Argument[-1]; ReturnValue.Element; taint; manual |
+| 59 | Summary: Azure; Nullable; true; Value; ; ; Argument[-1]; ReturnValue[*]; taint; manual |
+| 60 | Summary: boost::asio; ; false; buffer; ; ; Argument[*0]; ReturnValue; taint; manual |
 edges
+| asio_streams.cpp:56:18:56:23 | [summary param] *0 in buffer | asio_streams.cpp:56:18:56:23 | [summary] to write: ReturnValue in buffer | provenance | MaD:60 |
 | asio_streams.cpp:87:34:87:44 | read_until output argument | asio_streams.cpp:91:7:91:17 | recv_buffer | provenance | Src:MaD:32  |
 | asio_streams.cpp:87:34:87:44 | read_until output argument | asio_streams.cpp:93:29:93:39 | *recv_buffer | provenance | Src:MaD:32 Sink:MaD:2 |
 | asio_streams.cpp:97:37:97:44 | call to source | asio_streams.cpp:98:7:98:14 | send_str | provenance | TaintFunction |
@@ -69,16 +68,25 @@ edges
 | asio_streams.cpp:100:44:100:62 | call to buffer | asio_streams.cpp:100:44:100:62 | call to buffer | provenance |  |
 | asio_streams.cpp:100:44:100:62 | call to buffer | asio_streams.cpp:101:7:101:17 | send_buffer | provenance |  |
 | asio_streams.cpp:100:44:100:62 | call to buffer | asio_streams.cpp:103:29:103:39 | *send_buffer | provenance | Sink:MaD:2 |
-| asio_streams.cpp:100:64:100:71 | *send_str | asio_streams.cpp:100:44:100:62 | call to buffer | provenance | MaD:62 |
+| asio_streams.cpp:100:64:100:71 | *send_str | asio_streams.cpp:56:18:56:23 | [summary param] *0 in buffer | provenance |  |
+| asio_streams.cpp:100:64:100:71 | *send_str | asio_streams.cpp:100:44:100:62 | call to buffer | provenance | MaD:60 |
+| azure.cpp:62:10:62:14 | [summary param] this in Value | azure.cpp:62:10:62:14 | [summary] to write: ReturnValue[*] in Value | provenance | MaD:59 |
+| azure.cpp:113:16:113:19 | [summary param] this in Read | azure.cpp:113:16:113:19 | [summary param] *0 in Read [Return] | provenance | MaD:56 |
+| azure.cpp:114:16:114:26 | [summary param] this in ReadToCount | azure.cpp:114:16:114:26 | [summary param] *0 in ReadToCount [Return] | provenance | MaD:57 |
+| azure.cpp:115:30:115:38 | [summary param] this in ReadToEnd | azure.cpp:115:30:115:38 | [summary] to write: ReturnValue.Element in ReadToEnd | provenance | MaD:58 |
+| azure.cpp:115:30:115:38 | [summary] to write: ReturnValue.Element in ReadToEnd | azure.cpp:115:30:115:38 | [summary] to write: ReturnValue in ReadToEnd [element] | provenance |  |
 | azure.cpp:253:48:253:60 | *call to GetBodyStream | azure.cpp:253:48:253:60 | *call to GetBodyStream | provenance | Src:MaD:29  |
 | azure.cpp:253:48:253:60 | *call to GetBodyStream | azure.cpp:257:5:257:8 | *resp | provenance |  |
 | azure.cpp:253:48:253:60 | *call to GetBodyStream | azure.cpp:262:5:262:8 | *resp | provenance |  |
 | azure.cpp:253:48:253:60 | *call to GetBodyStream | azure.cpp:266:38:266:41 | *resp | provenance |  |
-| azure.cpp:257:5:257:8 | *resp | azure.cpp:257:16:257:21 | Read output argument | provenance | MaD:58 |
+| azure.cpp:257:5:257:8 | *resp | azure.cpp:113:16:113:19 | [summary param] this in Read | provenance |  |
+| azure.cpp:257:5:257:8 | *resp | azure.cpp:257:16:257:21 | Read output argument | provenance | MaD:56 |
 | azure.cpp:257:16:257:21 | Read output argument | azure.cpp:258:10:258:16 | * ... | provenance |  |
-| azure.cpp:262:5:262:8 | *resp | azure.cpp:262:23:262:28 | ReadToCount output argument | provenance | MaD:59 |
+| azure.cpp:262:5:262:8 | *resp | azure.cpp:114:16:114:26 | [summary param] this in ReadToCount | provenance |  |
+| azure.cpp:262:5:262:8 | *resp | azure.cpp:262:23:262:28 | ReadToCount output argument | provenance | MaD:57 |
 | azure.cpp:262:23:262:28 | ReadToCount output argument | azure.cpp:263:10:263:16 | * ... | provenance |  |
-| azure.cpp:266:38:266:41 | *resp | azure.cpp:266:44:266:52 | call to ReadToEnd [element] | provenance | MaD:60 |
+| azure.cpp:266:38:266:41 | *resp | azure.cpp:115:30:115:38 | [summary param] this in ReadToEnd | provenance |  |
+| azure.cpp:266:38:266:41 | *resp | azure.cpp:266:44:266:52 | call to ReadToEnd [element] | provenance | MaD:58 |
 | azure.cpp:266:44:266:52 | call to ReadToEnd [element] | azure.cpp:266:44:266:52 | call to ReadToEnd [element] | provenance |  |
 | azure.cpp:266:44:266:52 | call to ReadToEnd [element] | azure.cpp:267:10:267:12 | vec [element] | provenance |  |
 | azure.cpp:267:10:267:12 | vec [element] | azure.cpp:267:10:267:12 | vec | provenance |  |
@@ -94,10 +102,12 @@ edges
 | azure.cpp:278:10:278:13 | body | azure.cpp:278:10:278:13 | body | provenance |  |
 | azure.cpp:281:68:281:84 | *call to ExtractBodyStream | azure.cpp:281:68:281:84 | *call to ExtractBodyStream | provenance | Src:MaD:26  |
 | azure.cpp:281:68:281:84 | *call to ExtractBodyStream | azure.cpp:282:21:282:23 | *call to get | provenance |  |
-| azure.cpp:282:21:282:23 | *call to get | azure.cpp:282:28:282:36 | call to ReadToEnd [element] | provenance | MaD:60 |
+| azure.cpp:282:21:282:23 | *call to get | azure.cpp:115:30:115:38 | [summary param] this in ReadToEnd | provenance |  |
+| azure.cpp:282:21:282:23 | *call to get | azure.cpp:282:28:282:36 | call to ReadToEnd [element] | provenance | MaD:58 |
 | azure.cpp:282:28:282:36 | call to ReadToEnd [element] | azure.cpp:282:10:282:38 | call to ReadToEnd | provenance |  |
 | azure.cpp:282:28:282:36 | call to ReadToEnd [element] | azure.cpp:282:28:282:36 | call to ReadToEnd [element] | provenance |  |
-| azure.cpp:289:24:289:56 | call to GetHeader | azure.cpp:289:63:289:65 | call to Value | provenance | MaD:61 |
+| azure.cpp:289:24:289:56 | call to GetHeader | azure.cpp:62:10:62:14 | [summary param] this in Value | provenance |  |
+| azure.cpp:289:24:289:56 | call to GetHeader | azure.cpp:289:63:289:65 | call to Value | provenance | MaD:59 |
 | azure.cpp:289:32:289:40 | call to GetHeader | azure.cpp:289:24:289:56 | call to GetHeader | provenance |  |
 | azure.cpp:289:32:289:40 | call to GetHeader | azure.cpp:289:32:289:40 | call to GetHeader | provenance | Src:MaD:30  |
 | azure.cpp:289:63:289:65 | call to Value | azure.cpp:289:63:289:65 | call to Value | provenance |  |
@@ -109,6 +119,9 @@ edges
 | azure.cpp:294:38:294:53 | call to operator[] | azure.cpp:295:10:295:20 | contentType | provenance |  |
 | azure.cpp:294:38:294:53 | call to operator[] | azure.cpp:295:10:295:20 | contentType | provenance |  |
 | azure.cpp:295:10:295:20 | contentType | azure.cpp:295:10:295:20 | contentType | provenance |  |
+| test.cpp:4:5:4:17 | [summary param] 0 in ymlStepManual | test.cpp:4:5:4:17 | [summary] to write: ReturnValue in ymlStepManual | provenance | MaD:51 |
+| test.cpp:5:5:5:20 | [summary param] 0 in ymlStepGenerated | test.cpp:5:5:5:20 | [summary] to write: ReturnValue in ymlStepGenerated | provenance | MaD:50 |
+| test.cpp:6:5:6:27 | [summary param] 0 in ymlStepManual_with_body | test.cpp:6:5:6:27 | [summary] to write: ReturnValue in ymlStepManual_with_body | provenance | MaD:52 |
 | test.cpp:7:47:7:52 | value2 | test.cpp:7:64:7:69 | value2 | provenance |  |
 | test.cpp:7:64:7:69 | value2 | test.cpp:7:5:7:30 | *ymlStepGenerated_with_body | provenance |  |
 | test.cpp:10:10:10:18 | call to ymlSource | test.cpp:10:10:10:18 | call to ymlSource | provenance | Src:MaD:25  |
@@ -119,13 +132,16 @@ edges
 | test.cpp:10:10:10:18 | call to ymlSource | test.cpp:32:41:32:41 | x | provenance |  |
 | test.cpp:17:10:17:22 | call to ymlStepManual | test.cpp:17:10:17:22 | call to ymlStepManual | provenance |  |
 | test.cpp:17:10:17:22 | call to ymlStepManual | test.cpp:18:10:18:10 | y | provenance | Sink:MaD:1 |
-| test.cpp:17:24:17:24 | x | test.cpp:17:10:17:22 | call to ymlStepManual | provenance | MaD:53 |
+| test.cpp:17:24:17:24 | x | test.cpp:4:5:4:17 | [summary param] 0 in ymlStepManual | provenance |  |
+| test.cpp:17:24:17:24 | x | test.cpp:17:10:17:22 | call to ymlStepManual | provenance | MaD:51 |
 | test.cpp:21:10:21:25 | call to ymlStepGenerated | test.cpp:21:10:21:25 | call to ymlStepGenerated | provenance |  |
 | test.cpp:21:10:21:25 | call to ymlStepGenerated | test.cpp:22:10:22:10 | z | provenance | Sink:MaD:1 |
-| test.cpp:21:27:21:27 | x | test.cpp:21:10:21:25 | call to ymlStepGenerated | provenance | MaD:52 |
+| test.cpp:21:27:21:27 | x | test.cpp:5:5:5:20 | [summary param] 0 in ymlStepGenerated | provenance |  |
+| test.cpp:21:27:21:27 | x | test.cpp:21:10:21:25 | call to ymlStepGenerated | provenance | MaD:50 |
 | test.cpp:25:11:25:33 | call to ymlStepManual_with_body | test.cpp:25:11:25:33 | call to ymlStepManual_with_body | provenance |  |
 | test.cpp:25:11:25:33 | call to ymlStepManual_with_body | test.cpp:26:10:26:11 | y2 | provenance | Sink:MaD:1 |
-| test.cpp:25:35:25:35 | x | test.cpp:25:11:25:33 | call to ymlStepManual_with_body | provenance | MaD:54 |
+| test.cpp:25:35:25:35 | x | test.cpp:6:5:6:27 | [summary param] 0 in ymlStepManual_with_body | provenance |  |
+| test.cpp:25:35:25:35 | x | test.cpp:25:11:25:33 | call to ymlStepManual_with_body | provenance | MaD:52 |
 | test.cpp:32:11:32:36 | call to ymlStepGenerated_with_body | test.cpp:32:11:32:36 | call to ymlStepGenerated_with_body | provenance |  |
 | test.cpp:32:11:32:36 | call to ymlStepGenerated_with_body | test.cpp:33:10:33:11 | z2 | provenance | Sink:MaD:1 |
 | test.cpp:32:41:32:41 | x | test.cpp:7:47:7:52 | value2 | provenance |  |
@@ -133,10 +149,20 @@ edges
 | test.cpp:46:30:46:32 | *arg [x] | test.cpp:47:12:47:19 | *arg [x] | provenance |  |
 | test.cpp:47:12:47:19 | *arg [x] | test.cpp:48:13:48:13 | *s [x] | provenance |  |
 | test.cpp:48:13:48:13 | *s [x] | test.cpp:48:16:48:16 | x | provenance | Sink:MaD:1 |
+| test.cpp:52:5:52:18 | [summary param] *3 in pthread_create [x] | test.cpp:52:5:52:18 | [summary] to write: Argument[2].Parameter[*0] in pthread_create [x] | provenance | MaD:49 |
+| test.cpp:52:5:52:18 | [summary] to write: Argument[2].Parameter[*0] in pthread_create [x] | test.cpp:46:30:46:32 | *arg [x] | provenance |  |
 | test.cpp:56:2:56:2 | *s [post update] [x] | test.cpp:59:55:59:64 | *& ... [x] | provenance |  |
 | test.cpp:56:2:56:18 | ... = ... | test.cpp:56:2:56:2 | *s [post update] [x] | provenance |  |
 | test.cpp:56:8:56:16 | call to ymlSource | test.cpp:56:2:56:18 | ... = ... | provenance | Src:MaD:25  |
-| test.cpp:59:55:59:64 | *& ... [x] | test.cpp:46:30:46:32 | *arg [x] | provenance | MaD:49 |
+| test.cpp:59:55:59:64 | *& ... [x] | test.cpp:52:5:52:18 | [summary param] *3 in pthread_create [x] | provenance |  |
+| test.cpp:63:6:63:21 | [summary param] 1 in callWithArgument | test.cpp:63:6:63:21 | [summary] to write: Argument[0].Parameter[0] in callWithArgument | provenance | MaD:47 |
+| test.cpp:63:6:63:21 | [summary param] 1 in callWithArgument | test.cpp:63:6:63:21 | [summary] to write: Argument[0].Parameter[0] in callWithArgument | provenance | MaD:47 |
+| test.cpp:63:6:63:21 | [summary param] 1 in callWithArgument | test.cpp:63:6:63:21 | [summary] to write: Argument[0].Parameter[0] in callWithArgument | provenance | MaD:47 |
+| test.cpp:63:6:63:21 | [summary param] 1 in callWithArgument | test.cpp:63:6:63:21 | [summary] to write: Argument[0].Parameter[0] in callWithArgument | provenance | MaD:47 |
+| test.cpp:63:6:63:21 | [summary] to write: Argument[0].Parameter[0] in callWithArgument | test.cpp:68:22:68:22 | y | provenance |  |
+| test.cpp:63:6:63:21 | [summary] to write: Argument[0].Parameter[0] in callWithArgument | test.cpp:74:22:74:22 | y | provenance |  |
+| test.cpp:63:6:63:21 | [summary] to write: Argument[0].Parameter[0] in callWithArgument | test.cpp:82:22:82:22 | y | provenance |  |
+| test.cpp:63:6:63:21 | [summary] to write: Argument[0].Parameter[0] in callWithArgument | test.cpp:88:22:88:22 | y | provenance |  |
 | test.cpp:68:22:68:22 | y | test.cpp:69:11:69:11 | y | provenance | Sink:MaD:1 |
 | test.cpp:74:22:74:22 | y | test.cpp:75:11:75:11 | y | provenance | Sink:MaD:1 |
 | test.cpp:82:22:82:22 | y | test.cpp:83:11:83:11 | y | provenance | Sink:MaD:1 |
@@ -146,61 +172,69 @@ edges
 | test.cpp:94:10:94:18 | call to ymlSource | test.cpp:101:26:101:26 | x | provenance |  |
 | test.cpp:94:10:94:18 | call to ymlSource | test.cpp:103:63:103:63 | x | provenance |  |
 | test.cpp:94:10:94:18 | call to ymlSource | test.cpp:104:62:104:62 | x | provenance |  |
-| test.cpp:97:26:97:26 | x | test.cpp:68:22:68:22 | y | provenance | MaD:47 |
-| test.cpp:101:26:101:26 | x | test.cpp:74:22:74:22 | y | provenance | MaD:47 |
-| test.cpp:103:63:103:63 | x | test.cpp:82:22:82:22 | y | provenance | MaD:47 |
-| test.cpp:104:62:104:62 | x | test.cpp:88:22:88:22 | y | provenance | MaD:47 |
+| test.cpp:97:26:97:26 | x | test.cpp:63:6:63:21 | [summary param] 1 in callWithArgument | provenance |  |
+| test.cpp:101:26:101:26 | x | test.cpp:63:6:63:21 | [summary param] 1 in callWithArgument | provenance |  |
+| test.cpp:103:63:103:63 | x | test.cpp:63:6:63:21 | [summary param] 1 in callWithArgument | provenance |  |
+| test.cpp:104:62:104:62 | x | test.cpp:63:6:63:21 | [summary param] 1 in callWithArgument | provenance |  |
+| test.cpp:111:3:111:25 | [summary param] *0 in callWithNonTypeTemplate | test.cpp:111:3:111:25 | [summary] to write: ReturnValue in callWithNonTypeTemplate | provenance | MaD:48 |
 | test.cpp:114:10:114:18 | call to ymlSource | test.cpp:114:10:114:18 | call to ymlSource | provenance | Src:MaD:25  |
 | test.cpp:114:10:114:18 | call to ymlSource | test.cpp:118:44:118:44 | *x | provenance |  |
 | test.cpp:118:11:118:42 | call to callWithNonTypeTemplate | test.cpp:118:11:118:42 | call to callWithNonTypeTemplate | provenance |  |
 | test.cpp:118:11:118:42 | call to callWithNonTypeTemplate | test.cpp:119:10:119:11 | y2 | provenance | Sink:MaD:1 |
+| test.cpp:118:44:118:44 | *x | test.cpp:111:3:111:25 | [summary param] *0 in callWithNonTypeTemplate | provenance |  |
 | test.cpp:118:44:118:44 | *x | test.cpp:118:11:118:42 | call to callWithNonTypeTemplate | provenance | MaD:48 |
+| test.cpp:125:5:125:20 | [summary param] 0 in templateFunction | test.cpp:125:5:125:20 | [summary] to write: ReturnValue in templateFunction | provenance | MaD:54 |
+| test.cpp:128:5:128:21 | [summary param] 1 in templateFunction2 | test.cpp:128:5:128:21 | [summary] to write: ReturnValue in templateFunction2 | provenance | MaD:53 |
 | test.cpp:133:10:133:18 | call to ymlSource | test.cpp:133:10:133:18 | call to ymlSource | provenance | Src:MaD:25  |
 | test.cpp:133:10:133:18 | call to ymlSource | test.cpp:134:45:134:45 | x | provenance |  |
 | test.cpp:134:13:134:43 | call to templateFunction | test.cpp:134:13:134:43 | call to templateFunction | provenance |  |
 | test.cpp:134:13:134:43 | call to templateFunction | test.cpp:135:10:135:10 | y | provenance | Sink:MaD:1 |
-| test.cpp:134:45:134:45 | x | test.cpp:134:13:134:43 | call to templateFunction | provenance | MaD:56 |
+| test.cpp:134:45:134:45 | x | test.cpp:125:5:125:20 | [summary param] 0 in templateFunction | provenance |  |
+| test.cpp:134:45:134:45 | x | test.cpp:134:13:134:43 | call to templateFunction | provenance | MaD:54 |
+| test.cpp:140:4:140:11 | [summary param] 1 in function | test.cpp:140:4:140:11 | [summary] to write: ReturnValue in function | provenance | MaD:55 |
+| test.cpp:140:4:140:11 | [summary param] 1 in function | test.cpp:140:4:140:11 | [summary] to write: ReturnValue in function | provenance | MaD:55 |
 | test.cpp:146:10:146:18 | call to ymlSource | test.cpp:146:10:146:18 | call to ymlSource | provenance | Src:MaD:25  |
 | test.cpp:146:10:146:18 | call to ymlSource | test.cpp:148:26:148:26 | x | provenance |  |
 | test.cpp:148:10:148:27 | call to function | test.cpp:148:10:148:27 | call to function | provenance |  |
 | test.cpp:148:10:148:27 | call to function | test.cpp:149:10:149:10 | z | provenance | Sink:MaD:1 |
-| test.cpp:148:26:148:26 | x | test.cpp:148:10:148:27 | call to function | provenance | MaD:57 |
+| test.cpp:148:26:148:26 | x | test.cpp:140:4:140:11 | [summary param] 1 in function | provenance |  |
+| test.cpp:148:26:148:26 | x | test.cpp:148:10:148:27 | call to function | provenance | MaD:55 |
 | test.cpp:155:10:155:18 | call to ymlSource | test.cpp:155:10:155:18 | call to ymlSource | provenance | Src:MaD:25  |
 | test.cpp:155:10:155:18 | call to ymlSource | test.cpp:157:26:157:26 | x | provenance |  |
 | test.cpp:157:13:157:20 | call to function | test.cpp:157:13:157:20 | call to function | provenance |  |
 | test.cpp:157:13:157:20 | call to function | test.cpp:158:10:158:10 | z | provenance | Sink:MaD:1 |
-| test.cpp:157:26:157:26 | x | test.cpp:157:13:157:20 | call to function | provenance | MaD:57 |
+| test.cpp:157:26:157:26 | x | test.cpp:140:4:140:11 | [summary param] 1 in function | provenance |  |
+| test.cpp:157:26:157:26 | x | test.cpp:157:13:157:20 | call to function | provenance | MaD:55 |
 | test.cpp:164:34:164:34 | x | test.cpp:165:69:165:69 | x | provenance |  |
 | test.cpp:165:12:165:64 | call to templateFunction2 | test.cpp:164:7:164:7 | *templateFunction3 | provenance |  |
 | test.cpp:165:12:165:64 | call to templateFunction2 | test.cpp:165:12:165:64 | call to templateFunction2 | provenance |  |
-| test.cpp:165:69:165:69 | x | test.cpp:165:12:165:64 | call to templateFunction2 | provenance | MaD:55 |
+| test.cpp:165:69:165:69 | x | test.cpp:128:5:128:21 | [summary param] 1 in templateFunction2 | provenance |  |
+| test.cpp:165:69:165:69 | x | test.cpp:165:12:165:64 | call to templateFunction2 | provenance | MaD:53 |
 | test.cpp:170:10:170:18 | call to ymlSource | test.cpp:170:10:170:18 | call to ymlSource | provenance | Src:MaD:25  |
 | test.cpp:170:10:170:18 | call to ymlSource | test.cpp:172:51:172:51 | x | provenance |  |
 | test.cpp:172:13:172:44 | call to templateFunction3 | test.cpp:172:13:172:44 | call to templateFunction3 | provenance |  |
 | test.cpp:172:13:172:44 | call to templateFunction3 | test.cpp:173:10:173:10 | y | provenance | Sink:MaD:1 |
 | test.cpp:172:51:172:51 | x | test.cpp:164:34:164:34 | x | provenance |  |
-| test.cpp:172:51:172:51 | x | test.cpp:172:13:172:44 | call to templateFunction3 | provenance | MaD:55 |
-| test.cpp:186:2:186:2 | *s [post update] [myField] | test.cpp:187:33:187:34 | *& ... [myField] | provenance |  |
-| test.cpp:186:2:186:24 | ... = ... | test.cpp:186:2:186:2 | *s [post update] [myField] | provenance |  |
-| test.cpp:186:14:186:22 | call to ymlSource | test.cpp:186:2:186:24 | ... = ... | provenance | Src:MaD:25  |
-| test.cpp:187:10:187:31 | call to read_field_from_struct | test.cpp:187:10:187:31 | call to read_field_from_struct | provenance |  |
-| test.cpp:187:10:187:31 | call to read_field_from_struct | test.cpp:188:10:188:10 | x | provenance | Sink:MaD:1 |
-| test.cpp:187:33:187:34 | *& ... [myField] | test.cpp:187:10:187:31 | call to read_field_from_struct | provenance | MaD:50 |
-| test.cpp:199:2:199:2 | *s [post update] [myField] | test.cpp:200:35:200:36 | *& ... [myField] | provenance |  |
-| test.cpp:199:2:199:24 | ... = ... | test.cpp:199:2:199:2 | *s [post update] [myField] | provenance |  |
-| test.cpp:199:14:199:22 | call to ymlSource | test.cpp:199:2:199:24 | ... = ... | provenance | Src:MaD:25  |
-| test.cpp:200:10:200:33 | call to read_field_from_struct_2 | test.cpp:200:10:200:33 | call to read_field_from_struct_2 | provenance |  |
-| test.cpp:200:10:200:33 | call to read_field_from_struct_2 | test.cpp:201:10:201:10 | x | provenance | Sink:MaD:1 |
-| test.cpp:200:35:200:36 | *& ... [myField] | test.cpp:200:10:200:33 | call to read_field_from_struct_2 | provenance | MaD:51 |
+| test.cpp:172:51:172:51 | x | test.cpp:172:13:172:44 | call to templateFunction3 | provenance | MaD:53 |
+| windows.cpp:17:8:17:25 | [summary param] *0 in CommandLineToArgvA | windows.cpp:17:8:17:25 | [summary] to write: ReturnValue[**] in CommandLineToArgvA | provenance | MaD:33 |
 | windows.cpp:22:15:22:29 | *call to GetCommandLineA | windows.cpp:22:15:22:29 | *call to GetCommandLineA | provenance | Src:MaD:3  |
 | windows.cpp:22:15:22:29 | *call to GetCommandLineA | windows.cpp:24:8:24:11 | * ... | provenance |  |
 | windows.cpp:22:15:22:29 | *call to GetCommandLineA | windows.cpp:27:36:27:38 | *cmd | provenance |  |
 | windows.cpp:27:17:27:34 | **call to CommandLineToArgvA | windows.cpp:27:17:27:34 | **call to CommandLineToArgvA | provenance |  |
 | windows.cpp:27:17:27:34 | **call to CommandLineToArgvA | windows.cpp:30:8:30:15 | * ... | provenance |  |
+| windows.cpp:27:36:27:38 | *cmd | windows.cpp:17:8:17:25 | [summary param] *0 in CommandLineToArgvA | provenance |  |
 | windows.cpp:27:36:27:38 | *cmd | windows.cpp:27:17:27:34 | **call to CommandLineToArgvA | provenance | MaD:33 |
 | windows.cpp:34:17:34:38 | *call to GetEnvironmentStringsA | windows.cpp:34:17:34:38 | *call to GetEnvironmentStringsA | provenance | Src:MaD:4  |
 | windows.cpp:34:17:34:38 | *call to GetEnvironmentStringsA | windows.cpp:36:10:36:13 | * ... | provenance |  |
 | windows.cpp:39:36:39:38 | GetEnvironmentVariableA output argument | windows.cpp:41:10:41:13 | * ... | provenance | Src:MaD:5  |
+| windows.cpp:90:6:90:15 | [summary param] *3 in ReadFileEx [*hEvent] | windows.cpp:90:6:90:15 | [summary] read: Argument[*3].Field[*hEvent] in ReadFileEx | provenance |  |
+| windows.cpp:90:6:90:15 | [summary param] *3 in ReadFileEx [hEvent] | windows.cpp:90:6:90:15 | [summary] read: Argument[*3].Field[hEvent] in ReadFileEx | provenance |  |
+| windows.cpp:90:6:90:15 | [summary] read: Argument[*3].Field[*hEvent] in ReadFileEx | windows.cpp:90:6:90:15 | [summary] to write: Argument[4].Parameter[*2].Field[*hEvent] in ReadFileEx | provenance | MaD:37 |
+| windows.cpp:90:6:90:15 | [summary] read: Argument[*3].Field[hEvent] in ReadFileEx | windows.cpp:90:6:90:15 | [summary] to write: Argument[4].Parameter[*2].Field[hEvent] in ReadFileEx | provenance | MaD:37 |
+| windows.cpp:90:6:90:15 | [summary] to write: Argument[4].Parameter[*2] in ReadFileEx [*hEvent] | windows.cpp:147:16:147:27 | *lpOverlapped [*hEvent] | provenance |  |
+| windows.cpp:90:6:90:15 | [summary] to write: Argument[4].Parameter[*2] in ReadFileEx [hEvent] | windows.cpp:157:16:157:27 | *lpOverlapped [hEvent] | provenance |  |
+| windows.cpp:90:6:90:15 | [summary] to write: Argument[4].Parameter[*2].Field[*hEvent] in ReadFileEx | windows.cpp:90:6:90:15 | [summary] to write: Argument[4].Parameter[*2] in ReadFileEx [*hEvent] | provenance |  |
+| windows.cpp:90:6:90:15 | [summary] to write: Argument[4].Parameter[*2].Field[hEvent] in ReadFileEx | windows.cpp:90:6:90:15 | [summary] to write: Argument[4].Parameter[*2] in ReadFileEx [hEvent] | provenance |  |
 | windows.cpp:147:16:147:27 | *lpOverlapped [*hEvent] | windows.cpp:149:42:149:53 | *lpOverlapped [*hEvent] | provenance |  |
 | windows.cpp:149:18:149:62 | *hEvent | windows.cpp:149:18:149:62 | *hEvent | provenance |  |
 | windows.cpp:149:18:149:62 | *hEvent | windows.cpp:151:8:151:14 | * ... | provenance |  |
@@ -217,11 +251,11 @@ edges
 | windows.cpp:189:21:189:26 | ReadFile output argument | windows.cpp:190:5:190:56 | *... = ... | provenance | Src:MaD:17  |
 | windows.cpp:190:5:190:14 | *overlapped [post update] [*hEvent] | windows.cpp:192:53:192:63 | *& ... [*hEvent] | provenance |  |
 | windows.cpp:190:5:190:56 | *... = ... | windows.cpp:190:5:190:14 | *overlapped [post update] [*hEvent] | provenance |  |
-| windows.cpp:192:53:192:63 | *& ... [*hEvent] | windows.cpp:147:16:147:27 | *lpOverlapped [*hEvent] | provenance | MaD:37 |
+| windows.cpp:192:53:192:63 | *& ... [*hEvent] | windows.cpp:90:6:90:15 | [summary param] *3 in ReadFileEx [*hEvent] | provenance |  |
 | windows.cpp:198:21:198:26 | ReadFile output argument | windows.cpp:199:5:199:57 | ... = ... | provenance | Src:MaD:17  |
 | windows.cpp:199:5:199:14 | *overlapped [post update] [hEvent] | windows.cpp:201:53:201:63 | *& ... [hEvent] | provenance |  |
 | windows.cpp:199:5:199:57 | ... = ... | windows.cpp:199:5:199:14 | *overlapped [post update] [hEvent] | provenance |  |
-| windows.cpp:201:53:201:63 | *& ... [hEvent] | windows.cpp:157:16:157:27 | *lpOverlapped [hEvent] | provenance | MaD:37 |
+| windows.cpp:201:53:201:63 | *& ... [hEvent] | windows.cpp:90:6:90:15 | [summary param] *3 in ReadFileEx [hEvent] | provenance |  |
 | windows.cpp:209:84:209:89 | NtReadFile output argument | windows.cpp:211:10:211:16 | * ... | provenance | Src:MaD:16  |
 | windows.cpp:286:23:286:35 | *call to MapViewOfFile | windows.cpp:286:23:286:35 | *call to MapViewOfFile | provenance | Src:MaD:12  |
 | windows.cpp:286:23:286:35 | *call to MapViewOfFile | windows.cpp:287:20:287:52 | *pMapView | provenance |  |
@@ -244,6 +278,12 @@ edges
 | windows.cpp:332:23:332:40 | *call to MapViewOfFileNuma2 | windows.cpp:332:23:332:40 | *call to MapViewOfFileNuma2 | provenance | Src:MaD:15  |
 | windows.cpp:332:23:332:40 | *call to MapViewOfFileNuma2 | windows.cpp:333:20:333:52 | *pMapView | provenance |  |
 | windows.cpp:333:20:333:52 | *pMapView | windows.cpp:335:10:335:16 | * ... | provenance |  |
+| windows.cpp:349:8:349:19 | [summary param] *3 in CreateThread [x] | windows.cpp:349:8:349:19 | [summary] to write: Argument[2].Parameter[*0] in CreateThread [x] | provenance | MaD:36 |
+| windows.cpp:349:8:349:19 | [summary] to write: Argument[2].Parameter[*0] in CreateThread [x] | windows.cpp:403:26:403:36 | *lpParameter [x] | provenance |  |
+| windows.cpp:357:8:357:25 | [summary param] *4 in CreateRemoteThread [x] | windows.cpp:357:8:357:25 | [summary] to write: Argument[3].Parameter[*0] in CreateRemoteThread [x] | provenance | MaD:34 |
+| windows.cpp:357:8:357:25 | [summary] to write: Argument[3].Parameter[*0] in CreateRemoteThread [x] | windows.cpp:410:26:410:36 | *lpParameter [x] | provenance |  |
+| windows.cpp:387:8:387:27 | [summary param] *4 in CreateRemoteThreadEx [x] | windows.cpp:387:8:387:27 | [summary] to write: Argument[3].Parameter[*0] in CreateRemoteThreadEx [x] | provenance | MaD:35 |
+| windows.cpp:387:8:387:27 | [summary] to write: Argument[3].Parameter[*0] in CreateRemoteThreadEx [x] | windows.cpp:417:26:417:36 | *lpParameter [x] | provenance |  |
 | windows.cpp:403:26:403:36 | *lpParameter [x] | windows.cpp:405:10:405:25 | *lpParameter [x] | provenance |  |
 | windows.cpp:405:10:405:25 | *lpParameter [x] | windows.cpp:406:8:406:8 | *s [x] | provenance |  |
 | windows.cpp:406:8:406:8 | *s [x] | windows.cpp:406:8:406:11 | x | provenance |  |
@@ -258,9 +298,22 @@ edges
 | windows.cpp:431:3:431:3 | *s [post update] [x] | windows.cpp:464:7:464:8 | *& ... [x] | provenance |  |
 | windows.cpp:431:3:431:16 | ... = ... | windows.cpp:431:3:431:3 | *s [post update] [x] | provenance |  |
 | windows.cpp:431:9:431:14 | call to source | windows.cpp:431:3:431:16 | ... = ... | provenance |  |
-| windows.cpp:439:7:439:8 | *& ... [x] | windows.cpp:403:26:403:36 | *lpParameter [x] | provenance | MaD:36 |
-| windows.cpp:451:7:451:8 | *& ... [x] | windows.cpp:410:26:410:36 | *lpParameter [x] | provenance | MaD:34 |
-| windows.cpp:464:7:464:8 | *& ... [x] | windows.cpp:417:26:417:36 | *lpParameter [x] | provenance | MaD:35 |
+| windows.cpp:439:7:439:8 | *& ... [x] | windows.cpp:349:8:349:19 | [summary param] *3 in CreateThread [x] | provenance |  |
+| windows.cpp:451:7:451:8 | *& ... [x] | windows.cpp:357:8:357:25 | [summary param] *4 in CreateRemoteThread [x] | provenance |  |
+| windows.cpp:464:7:464:8 | *& ... [x] | windows.cpp:387:8:387:27 | [summary param] *4 in CreateRemoteThreadEx [x] | provenance |  |
+| windows.cpp:473:17:473:37 | [summary param] *1 in RtlCopyVolatileMemory | windows.cpp:473:17:473:37 | [summary param] *0 in RtlCopyVolatileMemory [Return] | provenance | MaD:42 |
+| windows.cpp:479:17:479:35 | [summary param] *1 in RtlCopyDeviceMemory | windows.cpp:479:17:479:35 | [summary param] *0 in RtlCopyDeviceMemory [Return] | provenance | MaD:38 |
+| windows.cpp:485:6:485:18 | [summary param] *1 in RtlCopyMemory | windows.cpp:485:6:485:18 | [summary param] *0 in RtlCopyMemory [Return] | provenance | MaD:39 |
+| windows.cpp:493:6:493:29 | [summary param] *1 in RtlCopyMemoryNonTemporal | windows.cpp:493:6:493:29 | [summary param] *0 in RtlCopyMemoryNonTemporal [Return] | provenance | MaD:40 |
+| windows.cpp:510:6:510:25 | [summary param] *1 in RtlCopyUnicodeString [*Buffer] | windows.cpp:510:6:510:25 | [summary] read: Argument[*1].Field[*Buffer] in RtlCopyUnicodeString | provenance |  |
+| windows.cpp:510:6:510:25 | [summary] read: Argument[*1].Field[*Buffer] in RtlCopyUnicodeString | windows.cpp:510:6:510:25 | [summary] to write: Argument[*0].Field[*Buffer] in RtlCopyUnicodeString | provenance | MaD:41 |
+| windows.cpp:510:6:510:25 | [summary] to write: Argument[*0] in RtlCopyUnicodeString [*Buffer] | windows.cpp:510:6:510:25 | [summary param] *0 in RtlCopyUnicodeString [Return] [*Buffer] | provenance |  |
+| windows.cpp:510:6:510:25 | [summary] to write: Argument[*0].Field[*Buffer] in RtlCopyUnicodeString | windows.cpp:510:6:510:25 | [summary] to write: Argument[*0] in RtlCopyUnicodeString [*Buffer] | provenance |  |
+| windows.cpp:515:6:515:18 | [summary param] *1 in RtlMoveMemory | windows.cpp:515:6:515:18 | [summary param] *0 in RtlMoveMemory [Return] | provenance | MaD:44 |
+| windows.cpp:521:17:521:37 | [summary param] *1 in RtlMoveVolatileMemory | windows.cpp:521:17:521:37 | [summary param] *0 in RtlMoveVolatileMemory [Return] | provenance | MaD:45 |
+| windows.cpp:527:6:527:25 | [summary param] *1 in RtlInitUnicodeString | windows.cpp:527:6:527:25 | [summary] to write: Argument[*0].Field[*Buffer] in RtlInitUnicodeString | provenance | MaD:43 |
+| windows.cpp:527:6:527:25 | [summary] to write: Argument[*0] in RtlInitUnicodeString [*Buffer] | windows.cpp:527:6:527:25 | [summary param] *0 in RtlInitUnicodeString [Return] [*Buffer] | provenance |  |
+| windows.cpp:527:6:527:25 | [summary] to write: Argument[*0].Field[*Buffer] in RtlInitUnicodeString | windows.cpp:527:6:527:25 | [summary] to write: Argument[*0] in RtlInitUnicodeString [*Buffer] | provenance |  |
 | windows.cpp:533:11:533:16 | call to source | windows.cpp:533:11:533:16 | call to source | provenance |  |
 | windows.cpp:533:11:533:16 | call to source | windows.cpp:537:40:537:41 | *& ... | provenance |  |
 | windows.cpp:533:11:533:16 | call to source | windows.cpp:542:38:542:39 | *& ... | provenance |  |
@@ -269,29 +322,37 @@ edges
 | windows.cpp:533:11:533:16 | call to source | windows.cpp:568:32:568:33 | *& ... | provenance |  |
 | windows.cpp:533:11:533:16 | call to source | windows.cpp:573:40:573:41 | *& ... | provenance |  |
 | windows.cpp:537:27:537:37 | RtlCopyVolatileMemory output argument | windows.cpp:538:10:538:23 | access to array | provenance |  |
+| windows.cpp:537:40:537:41 | *& ... | windows.cpp:473:17:473:37 | [summary param] *1 in RtlCopyVolatileMemory | provenance |  |
 | windows.cpp:537:40:537:41 | *& ... | windows.cpp:537:27:537:37 | RtlCopyVolatileMemory output argument | provenance | MaD:42 |
 | windows.cpp:542:25:542:35 | RtlCopyDeviceMemory output argument | windows.cpp:543:10:543:23 | access to array | provenance |  |
+| windows.cpp:542:38:542:39 | *& ... | windows.cpp:479:17:479:35 | [summary param] *1 in RtlCopyDeviceMemory | provenance |  |
 | windows.cpp:542:38:542:39 | *& ... | windows.cpp:542:25:542:35 | RtlCopyDeviceMemory output argument | provenance | MaD:38 |
 | windows.cpp:547:19:547:29 | RtlCopyMemory output argument | windows.cpp:548:10:548:23 | access to array | provenance |  |
+| windows.cpp:547:32:547:33 | *& ... | windows.cpp:485:6:485:18 | [summary param] *1 in RtlCopyMemory | provenance |  |
 | windows.cpp:547:32:547:33 | *& ... | windows.cpp:547:19:547:29 | RtlCopyMemory output argument | provenance | MaD:39 |
 | windows.cpp:552:30:552:40 | RtlCopyMemoryNonTemporal output argument | windows.cpp:553:10:553:23 | access to array | provenance |  |
+| windows.cpp:552:43:552:44 | *& ... | windows.cpp:493:6:493:29 | [summary param] *1 in RtlCopyMemoryNonTemporal | provenance |  |
 | windows.cpp:552:43:552:44 | *& ... | windows.cpp:552:30:552:40 | RtlCopyMemoryNonTemporal output argument | provenance | MaD:40 |
 | windows.cpp:559:5:559:24 | ... = ... | windows.cpp:561:39:561:44 | *buffer | provenance |  |
 | windows.cpp:559:17:559:24 | call to source | windows.cpp:559:5:559:24 | ... = ... | provenance |  |
 | windows.cpp:561:26:561:36 | RtlInitUnicodeString output argument [*Buffer] | windows.cpp:562:10:562:19 | *src_string [*Buffer] | provenance |  |
 | windows.cpp:561:26:561:36 | RtlInitUnicodeString output argument [*Buffer] | windows.cpp:563:40:563:50 | *& ... [*Buffer] | provenance |  |
+| windows.cpp:561:39:561:44 | *buffer | windows.cpp:527:6:527:25 | [summary param] *1 in RtlInitUnicodeString | provenance |  |
 | windows.cpp:561:39:561:44 | *buffer | windows.cpp:561:26:561:36 | RtlInitUnicodeString output argument [*Buffer] | provenance | MaD:43 |
 | windows.cpp:562:10:562:19 | *src_string [*Buffer] | windows.cpp:562:10:562:29 | access to array | provenance |  |
 | windows.cpp:562:10:562:19 | *src_string [*Buffer] | windows.cpp:562:21:562:26 | *Buffer | provenance |  |
 | windows.cpp:562:21:562:26 | *Buffer | windows.cpp:562:10:562:29 | access to array | provenance |  |
 | windows.cpp:563:26:563:37 | RtlCopyUnicodeString output argument [*Buffer] | windows.cpp:564:10:564:20 | *dest_string [*Buffer] | provenance |  |
+| windows.cpp:563:40:563:50 | *& ... [*Buffer] | windows.cpp:510:6:510:25 | [summary param] *1 in RtlCopyUnicodeString [*Buffer] | provenance |  |
 | windows.cpp:563:40:563:50 | *& ... [*Buffer] | windows.cpp:563:26:563:37 | RtlCopyUnicodeString output argument [*Buffer] | provenance | MaD:41 |
 | windows.cpp:564:10:564:20 | *dest_string [*Buffer] | windows.cpp:564:10:564:30 | access to array | provenance |  |
 | windows.cpp:564:10:564:20 | *dest_string [*Buffer] | windows.cpp:564:22:564:27 | *Buffer | provenance |  |
 | windows.cpp:564:22:564:27 | *Buffer | windows.cpp:564:10:564:30 | access to array | provenance |  |
 | windows.cpp:568:19:568:29 | RtlMoveMemory output argument | windows.cpp:569:10:569:23 | access to array | provenance |  |
+| windows.cpp:568:32:568:33 | *& ... | windows.cpp:515:6:515:18 | [summary param] *1 in RtlMoveMemory | provenance |  |
 | windows.cpp:568:32:568:33 | *& ... | windows.cpp:568:19:568:29 | RtlMoveMemory output argument | provenance | MaD:44 |
 | windows.cpp:573:27:573:37 | RtlMoveVolatileMemory output argument | windows.cpp:574:10:574:23 | access to array | provenance |  |
+| windows.cpp:573:40:573:41 | *& ... | windows.cpp:521:17:521:37 | [summary param] *1 in RtlMoveVolatileMemory | provenance |  |
 | windows.cpp:573:40:573:41 | *& ... | windows.cpp:573:27:573:37 | RtlMoveVolatileMemory output argument | provenance | MaD:45 |
 | windows.cpp:645:45:645:50 | WinHttpReadData output argument | windows.cpp:647:10:647:16 | * ... | provenance | Src:MaD:23  |
 | windows.cpp:652:48:652:53 | WinHttpReadDataEx output argument | windows.cpp:654:10:654:16 | * ... | provenance | Src:MaD:24  |
@@ -299,8 +360,10 @@ edges
 | windows.cpp:669:70:669:79 | WinHttpQueryHeadersEx output argument | windows.cpp:673:10:673:29 | * ... | provenance | Src:MaD:21  |
 | windows.cpp:669:82:669:87 | WinHttpQueryHeadersEx output argument | windows.cpp:671:10:671:16 | * ... | provenance | Src:MaD:22  |
 | windows.cpp:669:105:669:112 | WinHttpQueryHeadersEx output argument | windows.cpp:675:10:675:27 | * ... | provenance | Src:MaD:20  |
+| windows.cpp:714:6:714:20 | [summary param] *0 in WinHttpCrackUrl | windows.cpp:714:6:714:20 | [summary param] *3 in WinHttpCrackUrl [Return] | provenance | MaD:46 |
 | windows.cpp:728:5:728:28 | ... = ... | windows.cpp:729:35:729:35 | *x | provenance |  |
 | windows.cpp:728:12:728:28 | call to source | windows.cpp:728:5:728:28 | ... = ... | provenance |  |
+| windows.cpp:729:35:729:35 | *x | windows.cpp:714:6:714:20 | [summary param] *0 in WinHttpCrackUrl | provenance |  |
 | windows.cpp:729:35:729:35 | *x | windows.cpp:729:44:729:57 | WinHttpCrackUrl output argument | provenance | MaD:46 |
 | windows.cpp:729:44:729:57 | WinHttpCrackUrl output argument | windows.cpp:731:10:731:36 | * ... | provenance |  |
 | windows.cpp:729:44:729:57 | WinHttpCrackUrl output argument | windows.cpp:733:10:733:35 | * ... | provenance |  |
@@ -323,6 +386,8 @@ edges
 | windows.cpp:936:70:936:78 | HttpReceiveClientCertificate output argument | windows.cpp:941:10:941:31 | * ... | provenance | Src:MaD:6  |
 | windows.cpp:937:15:937:48 | *& ... | windows.cpp:939:10:939:11 | * ... | provenance |  |
 nodes
+| asio_streams.cpp:56:18:56:23 | [summary param] *0 in buffer | semmle.label | [summary param] *0 in buffer |
+| asio_streams.cpp:56:18:56:23 | [summary] to write: ReturnValue in buffer | semmle.label | [summary] to write: ReturnValue in buffer |
 | asio_streams.cpp:87:34:87:44 | read_until output argument | semmle.label | read_until output argument |
 | asio_streams.cpp:91:7:91:17 | recv_buffer | semmle.label | recv_buffer |
 | asio_streams.cpp:93:29:93:39 | *recv_buffer | semmle.label | *recv_buffer |
@@ -333,6 +398,15 @@ nodes
 | asio_streams.cpp:100:64:100:71 | *send_str | semmle.label | *send_str |
 | asio_streams.cpp:101:7:101:17 | send_buffer | semmle.label | send_buffer |
 | asio_streams.cpp:103:29:103:39 | *send_buffer | semmle.label | *send_buffer |
+| azure.cpp:62:10:62:14 | [summary param] this in Value | semmle.label | [summary param] this in Value |
+| azure.cpp:62:10:62:14 | [summary] to write: ReturnValue[*] in Value | semmle.label | [summary] to write: ReturnValue[*] in Value |
+| azure.cpp:113:16:113:19 | [summary param] *0 in Read [Return] | semmle.label | [summary param] *0 in Read [Return] |
+| azure.cpp:113:16:113:19 | [summary param] this in Read | semmle.label | [summary param] this in Read |
+| azure.cpp:114:16:114:26 | [summary param] *0 in ReadToCount [Return] | semmle.label | [summary param] *0 in ReadToCount [Return] |
+| azure.cpp:114:16:114:26 | [summary param] this in ReadToCount | semmle.label | [summary param] this in ReadToCount |
+| azure.cpp:115:30:115:38 | [summary param] this in ReadToEnd | semmle.label | [summary param] this in ReadToEnd |
+| azure.cpp:115:30:115:38 | [summary] to write: ReturnValue in ReadToEnd [element] | semmle.label | [summary] to write: ReturnValue in ReadToEnd [element] |
+| azure.cpp:115:30:115:38 | [summary] to write: ReturnValue.Element in ReadToEnd | semmle.label | [summary] to write: ReturnValue.Element in ReadToEnd |
 | azure.cpp:253:48:253:60 | *call to GetBodyStream | semmle.label | *call to GetBodyStream |
 | azure.cpp:253:48:253:60 | *call to GetBodyStream | semmle.label | *call to GetBodyStream |
 | azure.cpp:257:5:257:8 | *resp | semmle.label | *resp |
@@ -377,6 +451,12 @@ nodes
 | azure.cpp:295:10:295:20 | contentType | semmle.label | contentType |
 | azure.cpp:295:10:295:20 | contentType | semmle.label | contentType |
 | azure.cpp:295:10:295:20 | contentType | semmle.label | contentType |
+| test.cpp:4:5:4:17 | [summary param] 0 in ymlStepManual | semmle.label | [summary param] 0 in ymlStepManual |
+| test.cpp:4:5:4:17 | [summary] to write: ReturnValue in ymlStepManual | semmle.label | [summary] to write: ReturnValue in ymlStepManual |
+| test.cpp:5:5:5:20 | [summary param] 0 in ymlStepGenerated | semmle.label | [summary param] 0 in ymlStepGenerated |
+| test.cpp:5:5:5:20 | [summary] to write: ReturnValue in ymlStepGenerated | semmle.label | [summary] to write: ReturnValue in ymlStepGenerated |
+| test.cpp:6:5:6:27 | [summary param] 0 in ymlStepManual_with_body | semmle.label | [summary param] 0 in ymlStepManual_with_body |
+| test.cpp:6:5:6:27 | [summary] to write: ReturnValue in ymlStepManual_with_body | semmle.label | [summary] to write: ReturnValue in ymlStepManual_with_body |
 | test.cpp:7:5:7:30 | *ymlStepGenerated_with_body | semmle.label | *ymlStepGenerated_with_body |
 | test.cpp:7:47:7:52 | value2 | semmle.label | value2 |
 | test.cpp:7:64:7:69 | value2 | semmle.label | value2 |
@@ -403,10 +483,20 @@ nodes
 | test.cpp:47:12:47:19 | *arg [x] | semmle.label | *arg [x] |
 | test.cpp:48:13:48:13 | *s [x] | semmle.label | *s [x] |
 | test.cpp:48:16:48:16 | x | semmle.label | x |
+| test.cpp:52:5:52:18 | [summary param] *3 in pthread_create [x] | semmle.label | [summary param] *3 in pthread_create [x] |
+| test.cpp:52:5:52:18 | [summary] to write: Argument[2].Parameter[*0] in pthread_create [x] | semmle.label | [summary] to write: Argument[2].Parameter[*0] in pthread_create [x] |
 | test.cpp:56:2:56:2 | *s [post update] [x] | semmle.label | *s [post update] [x] |
 | test.cpp:56:2:56:18 | ... = ... | semmle.label | ... = ... |
 | test.cpp:56:8:56:16 | call to ymlSource | semmle.label | call to ymlSource |
 | test.cpp:59:55:59:64 | *& ... [x] | semmle.label | *& ... [x] |
+| test.cpp:63:6:63:21 | [summary param] 1 in callWithArgument | semmle.label | [summary param] 1 in callWithArgument |
+| test.cpp:63:6:63:21 | [summary param] 1 in callWithArgument | semmle.label | [summary param] 1 in callWithArgument |
+| test.cpp:63:6:63:21 | [summary param] 1 in callWithArgument | semmle.label | [summary param] 1 in callWithArgument |
+| test.cpp:63:6:63:21 | [summary param] 1 in callWithArgument | semmle.label | [summary param] 1 in callWithArgument |
+| test.cpp:63:6:63:21 | [summary] to write: Argument[0].Parameter[0] in callWithArgument | semmle.label | [summary] to write: Argument[0].Parameter[0] in callWithArgument |
+| test.cpp:63:6:63:21 | [summary] to write: Argument[0].Parameter[0] in callWithArgument | semmle.label | [summary] to write: Argument[0].Parameter[0] in callWithArgument |
+| test.cpp:63:6:63:21 | [summary] to write: Argument[0].Parameter[0] in callWithArgument | semmle.label | [summary] to write: Argument[0].Parameter[0] in callWithArgument |
+| test.cpp:63:6:63:21 | [summary] to write: Argument[0].Parameter[0] in callWithArgument | semmle.label | [summary] to write: Argument[0].Parameter[0] in callWithArgument |
 | test.cpp:68:22:68:22 | y | semmle.label | y |
 | test.cpp:69:11:69:11 | y | semmle.label | y |
 | test.cpp:74:22:74:22 | y | semmle.label | y |
@@ -421,18 +511,28 @@ nodes
 | test.cpp:101:26:101:26 | x | semmle.label | x |
 | test.cpp:103:63:103:63 | x | semmle.label | x |
 | test.cpp:104:62:104:62 | x | semmle.label | x |
+| test.cpp:111:3:111:25 | [summary param] *0 in callWithNonTypeTemplate | semmle.label | [summary param] *0 in callWithNonTypeTemplate |
+| test.cpp:111:3:111:25 | [summary] to write: ReturnValue in callWithNonTypeTemplate | semmle.label | [summary] to write: ReturnValue in callWithNonTypeTemplate |
 | test.cpp:114:10:114:18 | call to ymlSource | semmle.label | call to ymlSource |
 | test.cpp:114:10:114:18 | call to ymlSource | semmle.label | call to ymlSource |
 | test.cpp:118:11:118:42 | call to callWithNonTypeTemplate | semmle.label | call to callWithNonTypeTemplate |
 | test.cpp:118:11:118:42 | call to callWithNonTypeTemplate | semmle.label | call to callWithNonTypeTemplate |
 | test.cpp:118:44:118:44 | *x | semmle.label | *x |
 | test.cpp:119:10:119:11 | y2 | semmle.label | y2 |
+| test.cpp:125:5:125:20 | [summary param] 0 in templateFunction | semmle.label | [summary param] 0 in templateFunction |
+| test.cpp:125:5:125:20 | [summary] to write: ReturnValue in templateFunction | semmle.label | [summary] to write: ReturnValue in templateFunction |
+| test.cpp:128:5:128:21 | [summary param] 1 in templateFunction2 | semmle.label | [summary param] 1 in templateFunction2 |
+| test.cpp:128:5:128:21 | [summary] to write: ReturnValue in templateFunction2 | semmle.label | [summary] to write: ReturnValue in templateFunction2 |
 | test.cpp:133:10:133:18 | call to ymlSource | semmle.label | call to ymlSource |
 | test.cpp:133:10:133:18 | call to ymlSource | semmle.label | call to ymlSource |
 | test.cpp:134:13:134:43 | call to templateFunction | semmle.label | call to templateFunction |
 | test.cpp:134:13:134:43 | call to templateFunction | semmle.label | call to templateFunction |
 | test.cpp:134:45:134:45 | x | semmle.label | x |
 | test.cpp:135:10:135:10 | y | semmle.label | y |
+| test.cpp:140:4:140:11 | [summary param] 1 in function | semmle.label | [summary param] 1 in function |
+| test.cpp:140:4:140:11 | [summary param] 1 in function | semmle.label | [summary param] 1 in function |
+| test.cpp:140:4:140:11 | [summary] to write: ReturnValue in function | semmle.label | [summary] to write: ReturnValue in function |
+| test.cpp:140:4:140:11 | [summary] to write: ReturnValue in function | semmle.label | [summary] to write: ReturnValue in function |
 | test.cpp:146:10:146:18 | call to ymlSource | semmle.label | call to ymlSource |
 | test.cpp:146:10:146:18 | call to ymlSource | semmle.label | call to ymlSource |
 | test.cpp:148:10:148:27 | call to function | semmle.label | call to function |
@@ -456,20 +556,8 @@ nodes
 | test.cpp:172:13:172:44 | call to templateFunction3 | semmle.label | call to templateFunction3 |
 | test.cpp:172:51:172:51 | x | semmle.label | x |
 | test.cpp:173:10:173:10 | y | semmle.label | y |
-| test.cpp:186:2:186:2 | *s [post update] [myField] | semmle.label | *s [post update] [myField] |
-| test.cpp:186:2:186:24 | ... = ... | semmle.label | ... = ... |
-| test.cpp:186:14:186:22 | call to ymlSource | semmle.label | call to ymlSource |
-| test.cpp:187:10:187:31 | call to read_field_from_struct | semmle.label | call to read_field_from_struct |
-| test.cpp:187:10:187:31 | call to read_field_from_struct | semmle.label | call to read_field_from_struct |
-| test.cpp:187:33:187:34 | *& ... [myField] | semmle.label | *& ... [myField] |
-| test.cpp:188:10:188:10 | x | semmle.label | x |
-| test.cpp:199:2:199:2 | *s [post update] [myField] | semmle.label | *s [post update] [myField] |
-| test.cpp:199:2:199:24 | ... = ... | semmle.label | ... = ... |
-| test.cpp:199:14:199:22 | call to ymlSource | semmle.label | call to ymlSource |
-| test.cpp:200:10:200:33 | call to read_field_from_struct_2 | semmle.label | call to read_field_from_struct_2 |
-| test.cpp:200:10:200:33 | call to read_field_from_struct_2 | semmle.label | call to read_field_from_struct_2 |
-| test.cpp:200:35:200:36 | *& ... [myField] | semmle.label | *& ... [myField] |
-| test.cpp:201:10:201:10 | x | semmle.label | x |
+| windows.cpp:17:8:17:25 | [summary param] *0 in CommandLineToArgvA | semmle.label | [summary param] *0 in CommandLineToArgvA |
+| windows.cpp:17:8:17:25 | [summary] to write: ReturnValue[**] in CommandLineToArgvA | semmle.label | [summary] to write: ReturnValue[**] in CommandLineToArgvA |
 | windows.cpp:22:15:22:29 | *call to GetCommandLineA | semmle.label | *call to GetCommandLineA |
 | windows.cpp:22:15:22:29 | *call to GetCommandLineA | semmle.label | *call to GetCommandLineA |
 | windows.cpp:24:8:24:11 | * ... | semmle.label | * ... |
@@ -482,6 +570,14 @@ nodes
 | windows.cpp:36:10:36:13 | * ... | semmle.label | * ... |
 | windows.cpp:39:36:39:38 | GetEnvironmentVariableA output argument | semmle.label | GetEnvironmentVariableA output argument |
 | windows.cpp:41:10:41:13 | * ... | semmle.label | * ... |
+| windows.cpp:90:6:90:15 | [summary param] *3 in ReadFileEx [*hEvent] | semmle.label | [summary param] *3 in ReadFileEx [*hEvent] |
+| windows.cpp:90:6:90:15 | [summary param] *3 in ReadFileEx [hEvent] | semmle.label | [summary param] *3 in ReadFileEx [hEvent] |
+| windows.cpp:90:6:90:15 | [summary] read: Argument[*3].Field[*hEvent] in ReadFileEx | semmle.label | [summary] read: Argument[*3].Field[*hEvent] in ReadFileEx |
+| windows.cpp:90:6:90:15 | [summary] read: Argument[*3].Field[hEvent] in ReadFileEx | semmle.label | [summary] read: Argument[*3].Field[hEvent] in ReadFileEx |
+| windows.cpp:90:6:90:15 | [summary] to write: Argument[4].Parameter[*2] in ReadFileEx [*hEvent] | semmle.label | [summary] to write: Argument[4].Parameter[*2] in ReadFileEx [*hEvent] |
+| windows.cpp:90:6:90:15 | [summary] to write: Argument[4].Parameter[*2] in ReadFileEx [hEvent] | semmle.label | [summary] to write: Argument[4].Parameter[*2] in ReadFileEx [hEvent] |
+| windows.cpp:90:6:90:15 | [summary] to write: Argument[4].Parameter[*2].Field[*hEvent] in ReadFileEx | semmle.label | [summary] to write: Argument[4].Parameter[*2].Field[*hEvent] in ReadFileEx |
+| windows.cpp:90:6:90:15 | [summary] to write: Argument[4].Parameter[*2].Field[hEvent] in ReadFileEx | semmle.label | [summary] to write: Argument[4].Parameter[*2].Field[hEvent] in ReadFileEx |
 | windows.cpp:147:16:147:27 | *lpOverlapped [*hEvent] | semmle.label | *lpOverlapped [*hEvent] |
 | windows.cpp:149:18:149:62 | *hEvent | semmle.label | *hEvent |
 | windows.cpp:149:18:149:62 | *hEvent | semmle.label | *hEvent |
@@ -535,6 +631,12 @@ nodes
 | windows.cpp:332:23:332:40 | *call to MapViewOfFileNuma2 | semmle.label | *call to MapViewOfFileNuma2 |
 | windows.cpp:333:20:333:52 | *pMapView | semmle.label | *pMapView |
 | windows.cpp:335:10:335:16 | * ... | semmle.label | * ... |
+| windows.cpp:349:8:349:19 | [summary param] *3 in CreateThread [x] | semmle.label | [summary param] *3 in CreateThread [x] |
+| windows.cpp:349:8:349:19 | [summary] to write: Argument[2].Parameter[*0] in CreateThread [x] | semmle.label | [summary] to write: Argument[2].Parameter[*0] in CreateThread [x] |
+| windows.cpp:357:8:357:25 | [summary param] *4 in CreateRemoteThread [x] | semmle.label | [summary param] *4 in CreateRemoteThread [x] |
+| windows.cpp:357:8:357:25 | [summary] to write: Argument[3].Parameter[*0] in CreateRemoteThread [x] | semmle.label | [summary] to write: Argument[3].Parameter[*0] in CreateRemoteThread [x] |
+| windows.cpp:387:8:387:27 | [summary param] *4 in CreateRemoteThreadEx [x] | semmle.label | [summary param] *4 in CreateRemoteThreadEx [x] |
+| windows.cpp:387:8:387:27 | [summary] to write: Argument[3].Parameter[*0] in CreateRemoteThreadEx [x] | semmle.label | [summary] to write: Argument[3].Parameter[*0] in CreateRemoteThreadEx [x] |
 | windows.cpp:403:26:403:36 | *lpParameter [x] | semmle.label | *lpParameter [x] |
 | windows.cpp:405:10:405:25 | *lpParameter [x] | semmle.label | *lpParameter [x] |
 | windows.cpp:406:8:406:8 | *s [x] | semmle.label | *s [x] |
@@ -553,6 +655,27 @@ nodes
 | windows.cpp:439:7:439:8 | *& ... [x] | semmle.label | *& ... [x] |
 | windows.cpp:451:7:451:8 | *& ... [x] | semmle.label | *& ... [x] |
 | windows.cpp:464:7:464:8 | *& ... [x] | semmle.label | *& ... [x] |
+| windows.cpp:473:17:473:37 | [summary param] *0 in RtlCopyVolatileMemory [Return] | semmle.label | [summary param] *0 in RtlCopyVolatileMemory [Return] |
+| windows.cpp:473:17:473:37 | [summary param] *1 in RtlCopyVolatileMemory | semmle.label | [summary param] *1 in RtlCopyVolatileMemory |
+| windows.cpp:479:17:479:35 | [summary param] *0 in RtlCopyDeviceMemory [Return] | semmle.label | [summary param] *0 in RtlCopyDeviceMemory [Return] |
+| windows.cpp:479:17:479:35 | [summary param] *1 in RtlCopyDeviceMemory | semmle.label | [summary param] *1 in RtlCopyDeviceMemory |
+| windows.cpp:485:6:485:18 | [summary param] *0 in RtlCopyMemory [Return] | semmle.label | [summary param] *0 in RtlCopyMemory [Return] |
+| windows.cpp:485:6:485:18 | [summary param] *1 in RtlCopyMemory | semmle.label | [summary param] *1 in RtlCopyMemory |
+| windows.cpp:493:6:493:29 | [summary param] *0 in RtlCopyMemoryNonTemporal [Return] | semmle.label | [summary param] *0 in RtlCopyMemoryNonTemporal [Return] |
+| windows.cpp:493:6:493:29 | [summary param] *1 in RtlCopyMemoryNonTemporal | semmle.label | [summary param] *1 in RtlCopyMemoryNonTemporal |
+| windows.cpp:510:6:510:25 | [summary param] *0 in RtlCopyUnicodeString [Return] [*Buffer] | semmle.label | [summary param] *0 in RtlCopyUnicodeString [Return] [*Buffer] |
+| windows.cpp:510:6:510:25 | [summary param] *1 in RtlCopyUnicodeString [*Buffer] | semmle.label | [summary param] *1 in RtlCopyUnicodeString [*Buffer] |
+| windows.cpp:510:6:510:25 | [summary] read: Argument[*1].Field[*Buffer] in RtlCopyUnicodeString | semmle.label | [summary] read: Argument[*1].Field[*Buffer] in RtlCopyUnicodeString |
+| windows.cpp:510:6:510:25 | [summary] to write: Argument[*0] in RtlCopyUnicodeString [*Buffer] | semmle.label | [summary] to write: Argument[*0] in RtlCopyUnicodeString [*Buffer] |
+| windows.cpp:510:6:510:25 | [summary] to write: Argument[*0].Field[*Buffer] in RtlCopyUnicodeString | semmle.label | [summary] to write: Argument[*0].Field[*Buffer] in RtlCopyUnicodeString |
+| windows.cpp:515:6:515:18 | [summary param] *0 in RtlMoveMemory [Return] | semmle.label | [summary param] *0 in RtlMoveMemory [Return] |
+| windows.cpp:515:6:515:18 | [summary param] *1 in RtlMoveMemory | semmle.label | [summary param] *1 in RtlMoveMemory |
+| windows.cpp:521:17:521:37 | [summary param] *0 in RtlMoveVolatileMemory [Return] | semmle.label | [summary param] *0 in RtlMoveVolatileMemory [Return] |
+| windows.cpp:521:17:521:37 | [summary param] *1 in RtlMoveVolatileMemory | semmle.label | [summary param] *1 in RtlMoveVolatileMemory |
+| windows.cpp:527:6:527:25 | [summary param] *0 in RtlInitUnicodeString [Return] [*Buffer] | semmle.label | [summary param] *0 in RtlInitUnicodeString [Return] [*Buffer] |
+| windows.cpp:527:6:527:25 | [summary param] *1 in RtlInitUnicodeString | semmle.label | [summary param] *1 in RtlInitUnicodeString |
+| windows.cpp:527:6:527:25 | [summary] to write: Argument[*0] in RtlInitUnicodeString [*Buffer] | semmle.label | [summary] to write: Argument[*0] in RtlInitUnicodeString [*Buffer] |
+| windows.cpp:527:6:527:25 | [summary] to write: Argument[*0].Field[*Buffer] in RtlInitUnicodeString | semmle.label | [summary] to write: Argument[*0].Field[*Buffer] in RtlInitUnicodeString |
 | windows.cpp:533:11:533:16 | call to source | semmle.label | call to source |
 | windows.cpp:533:11:533:16 | call to source | semmle.label | call to source |
 | windows.cpp:537:27:537:37 | RtlCopyVolatileMemory output argument | semmle.label | RtlCopyVolatileMemory output argument |
@@ -597,6 +720,8 @@ nodes
 | windows.cpp:671:10:671:16 | * ... | semmle.label | * ... |
 | windows.cpp:673:10:673:29 | * ... | semmle.label | * ... |
 | windows.cpp:675:10:675:27 | * ... | semmle.label | * ... |
+| windows.cpp:714:6:714:20 | [summary param] *0 in WinHttpCrackUrl | semmle.label | [summary param] *0 in WinHttpCrackUrl |
+| windows.cpp:714:6:714:20 | [summary param] *3 in WinHttpCrackUrl [Return] | semmle.label | [summary param] *3 in WinHttpCrackUrl [Return] |
 | windows.cpp:728:5:728:28 | ... = ... | semmle.label | ... = ... |
 | windows.cpp:728:12:728:28 | call to source | semmle.label | call to source |
 | windows.cpp:729:35:729:35 | *x | semmle.label | *x |
@@ -625,6 +750,30 @@ nodes
 | windows.cpp:939:10:939:11 | * ... | semmle.label | * ... |
 | windows.cpp:941:10:941:31 | * ... | semmle.label | * ... |
 subpaths
+| asio_streams.cpp:100:64:100:71 | *send_str | asio_streams.cpp:56:18:56:23 | [summary param] *0 in buffer | asio_streams.cpp:56:18:56:23 | [summary] to write: ReturnValue in buffer | asio_streams.cpp:100:44:100:62 | call to buffer |
+| azure.cpp:257:5:257:8 | *resp | azure.cpp:113:16:113:19 | [summary param] this in Read | azure.cpp:113:16:113:19 | [summary param] *0 in Read [Return] | azure.cpp:257:16:257:21 | Read output argument |
+| azure.cpp:262:5:262:8 | *resp | azure.cpp:114:16:114:26 | [summary param] this in ReadToCount | azure.cpp:114:16:114:26 | [summary param] *0 in ReadToCount [Return] | azure.cpp:262:23:262:28 | ReadToCount output argument |
+| azure.cpp:266:38:266:41 | *resp | azure.cpp:115:30:115:38 | [summary param] this in ReadToEnd | azure.cpp:115:30:115:38 | [summary] to write: ReturnValue in ReadToEnd [element] | azure.cpp:266:44:266:52 | call to ReadToEnd [element] |
+| azure.cpp:282:21:282:23 | *call to get | azure.cpp:115:30:115:38 | [summary param] this in ReadToEnd | azure.cpp:115:30:115:38 | [summary] to write: ReturnValue in ReadToEnd [element] | azure.cpp:282:28:282:36 | call to ReadToEnd [element] |
+| azure.cpp:289:24:289:56 | call to GetHeader | azure.cpp:62:10:62:14 | [summary param] this in Value | azure.cpp:62:10:62:14 | [summary] to write: ReturnValue[*] in Value | azure.cpp:289:63:289:65 | call to Value |
+| test.cpp:17:24:17:24 | x | test.cpp:4:5:4:17 | [summary param] 0 in ymlStepManual | test.cpp:4:5:4:17 | [summary] to write: ReturnValue in ymlStepManual | test.cpp:17:10:17:22 | call to ymlStepManual |
+| test.cpp:21:27:21:27 | x | test.cpp:5:5:5:20 | [summary param] 0 in ymlStepGenerated | test.cpp:5:5:5:20 | [summary] to write: ReturnValue in ymlStepGenerated | test.cpp:21:10:21:25 | call to ymlStepGenerated |
+| test.cpp:25:35:25:35 | x | test.cpp:6:5:6:27 | [summary param] 0 in ymlStepManual_with_body | test.cpp:6:5:6:27 | [summary] to write: ReturnValue in ymlStepManual_with_body | test.cpp:25:11:25:33 | call to ymlStepManual_with_body |
 | test.cpp:32:41:32:41 | x | test.cpp:7:47:7:52 | value2 | test.cpp:7:5:7:30 | *ymlStepGenerated_with_body | test.cpp:32:11:32:36 | call to ymlStepGenerated_with_body |
+| test.cpp:118:44:118:44 | *x | test.cpp:111:3:111:25 | [summary param] *0 in callWithNonTypeTemplate | test.cpp:111:3:111:25 | [summary] to write: ReturnValue in callWithNonTypeTemplate | test.cpp:118:11:118:42 | call to callWithNonTypeTemplate |
+| test.cpp:134:45:134:45 | x | test.cpp:125:5:125:20 | [summary param] 0 in templateFunction | test.cpp:125:5:125:20 | [summary] to write: ReturnValue in templateFunction | test.cpp:134:13:134:43 | call to templateFunction |
+| test.cpp:148:26:148:26 | x | test.cpp:140:4:140:11 | [summary param] 1 in function | test.cpp:140:4:140:11 | [summary] to write: ReturnValue in function | test.cpp:148:10:148:27 | call to function |
+| test.cpp:157:26:157:26 | x | test.cpp:140:4:140:11 | [summary param] 1 in function | test.cpp:140:4:140:11 | [summary] to write: ReturnValue in function | test.cpp:157:13:157:20 | call to function |
+| test.cpp:165:69:165:69 | x | test.cpp:128:5:128:21 | [summary param] 1 in templateFunction2 | test.cpp:128:5:128:21 | [summary] to write: ReturnValue in templateFunction2 | test.cpp:165:12:165:64 | call to templateFunction2 |
 | test.cpp:172:51:172:51 | x | test.cpp:164:34:164:34 | x | test.cpp:164:7:164:7 | *templateFunction3 | test.cpp:172:13:172:44 | call to templateFunction3 |
+| windows.cpp:27:36:27:38 | *cmd | windows.cpp:17:8:17:25 | [summary param] *0 in CommandLineToArgvA | windows.cpp:17:8:17:25 | [summary] to write: ReturnValue[**] in CommandLineToArgvA | windows.cpp:27:17:27:34 | **call to CommandLineToArgvA |
+| windows.cpp:537:40:537:41 | *& ... | windows.cpp:473:17:473:37 | [summary param] *1 in RtlCopyVolatileMemory | windows.cpp:473:17:473:37 | [summary param] *0 in RtlCopyVolatileMemory [Return] | windows.cpp:537:27:537:37 | RtlCopyVolatileMemory output argument |
+| windows.cpp:542:38:542:39 | *& ... | windows.cpp:479:17:479:35 | [summary param] *1 in RtlCopyDeviceMemory | windows.cpp:479:17:479:35 | [summary param] *0 in RtlCopyDeviceMemory [Return] | windows.cpp:542:25:542:35 | RtlCopyDeviceMemory output argument |
+| windows.cpp:547:32:547:33 | *& ... | windows.cpp:485:6:485:18 | [summary param] *1 in RtlCopyMemory | windows.cpp:485:6:485:18 | [summary param] *0 in RtlCopyMemory [Return] | windows.cpp:547:19:547:29 | RtlCopyMemory output argument |
+| windows.cpp:552:43:552:44 | *& ... | windows.cpp:493:6:493:29 | [summary param] *1 in RtlCopyMemoryNonTemporal | windows.cpp:493:6:493:29 | [summary param] *0 in RtlCopyMemoryNonTemporal [Return] | windows.cpp:552:30:552:40 | RtlCopyMemoryNonTemporal output argument |
+| windows.cpp:561:39:561:44 | *buffer | windows.cpp:527:6:527:25 | [summary param] *1 in RtlInitUnicodeString | windows.cpp:527:6:527:25 | [summary param] *0 in RtlInitUnicodeString [Return] [*Buffer] | windows.cpp:561:26:561:36 | RtlInitUnicodeString output argument [*Buffer] |
+| windows.cpp:563:40:563:50 | *& ... [*Buffer] | windows.cpp:510:6:510:25 | [summary param] *1 in RtlCopyUnicodeString [*Buffer] | windows.cpp:510:6:510:25 | [summary param] *0 in RtlCopyUnicodeString [Return] [*Buffer] | windows.cpp:563:26:563:37 | RtlCopyUnicodeString output argument [*Buffer] |
+| windows.cpp:568:32:568:33 | *& ... | windows.cpp:515:6:515:18 | [summary param] *1 in RtlMoveMemory | windows.cpp:515:6:515:18 | [summary param] *0 in RtlMoveMemory [Return] | windows.cpp:568:19:568:29 | RtlMoveMemory output argument |
+| windows.cpp:573:40:573:41 | *& ... | windows.cpp:521:17:521:37 | [summary param] *1 in RtlMoveVolatileMemory | windows.cpp:521:17:521:37 | [summary param] *0 in RtlMoveVolatileMemory [Return] | windows.cpp:573:27:573:37 | RtlMoveVolatileMemory output argument |
+| windows.cpp:729:35:729:35 | *x | windows.cpp:714:6:714:20 | [summary param] *0 in WinHttpCrackUrl | windows.cpp:714:6:714:20 | [summary param] *3 in WinHttpCrackUrl [Return] | windows.cpp:729:44:729:57 | WinHttpCrackUrl output argument |
 testFailures

cpp/ql/test/library-tests/dataflow/external-models/flow.ext.yml

@@ -21,6 +21,4 @@ extensions:
       - ["", "", False, "callWithNonTypeTemplate<T>", "(const T &)", "", "Argument[*0]", "ReturnValue", "value", "manual"]
       - ["", "TemplateClass1<T>", False, "templateFunction<U>", "(T,U)", "", "Argument[0]", "ReturnValue", "value", "manual"]
       - ["", "TemplateClass1", True, "templateFunction2<U,V>", "(U,V)", "", "Argument[1]", "ReturnValue", "value", "manual"]
-      - ["", "TemplateClass2<T,U>", True, "function", "(U,T)", "", "Argument[1]", "ReturnValue", "value", "manual"]
-      - ["", "", False, "read_field_from_struct", "", "", "Argument[*0].Field[MyNamespace::MyStructInNamespace::myField]", "ReturnValue", "value", "manual"]
-      - ["", "", False, "read_field_from_struct_2", "", "", "Argument[*0].Field[MyGlobalStruct::myField]", "ReturnValue", "value", "manual"]
+      - ["", "TemplateClass2<T,U>", True, "function", "(U,T)", "", "Argument[1]", "ReturnValue", "value", "manual"]

cpp/ql/test/library-tests/dataflow/external-models/sinks.expected

@@ -19,5 +19,3 @@
 | test.cpp:149:10:149:10 | z | test-sink |
 | test.cpp:158:10:158:10 | z | test-sink |
 | test.cpp:173:10:173:10 | y | test-sink |
-| test.cpp:188:10:188:10 | x | test-sink |
-| test.cpp:201:10:201:10 | x | test-sink |

cpp/ql/test/library-tests/dataflow/external-models/sources.expected

@@ -13,8 +13,6 @@
 | test.cpp:146:10:146:18 | call to ymlSource | local |
 | test.cpp:155:10:155:18 | call to ymlSource | local |
 | test.cpp:170:10:170:18 | call to ymlSource | local |
-| test.cpp:186:14:186:22 | call to ymlSource | local |
-| test.cpp:199:14:199:22 | call to ymlSource | local |
 | windows.cpp:22:15:22:29 | *call to GetCommandLineA | local |
 | windows.cpp:34:17:34:38 | *call to GetEnvironmentStringsA | local |
 | windows.cpp:39:36:39:38 | GetEnvironmentVariableA output argument | local |

cpp/ql/test/library-tests/dataflow/external-models/test.cpp

@@ -171,32 +171,4 @@ void test_class1() {
 	Class1<int> c;
 	auto y = c.templateFunction3<unsigned long>(0UL, x);
 	ymlSink(y); // $ ir
-}
-
-namespace MyNamespace {
-	struct MyStructInNamespace {
-		int myField;
-	};
-}
-
-int read_field_from_struct(MyNamespace::MyStructInNamespace* s);
-
-void test_fully_qualified_field_test() {
-	MyNamespace::MyStructInNamespace s;
-	s.myField = ymlSource();
-	int x = read_field_from_struct(&s);
-	ymlSink(x); // $ ir
-}
-
-struct MyGlobalStruct {
-	int myField;
-};
-
-int read_field_from_struct_2(MyGlobalStruct* s);
-
-void test_fully_qualified_field_test_2() {
-	MyGlobalStruct s;
-	s.myField = ymlSource();
-	int x = read_field_from_struct_2(&s);
-	ymlSink(x); // $ ir
 }

cpp/ql/test/library-tests/dataflow/models-as-data/testModels.expected

@@ -321,23 +321,23 @@ flowSummaryNode
 | tests.cpp:155:5:155:28 | [summary param] 2 in madAndImplementedComplex | ParameterNode | madAndImplementedComplex | madAndImplementedComplex |
 | tests.cpp:155:5:155:28 | [summary] to write: ReturnValue in madAndImplementedComplex | ReturnNode | madAndImplementedComplex | madAndImplementedComplex |
 | tests.cpp:160:5:160:24 | [summary param] 0 in madArg0FieldToReturn | ParameterNode | madArg0FieldToReturn | madArg0FieldToReturn |
-| tests.cpp:160:5:160:24 | [summary] read: Argument[0].Field[MyContainer::value]/Field[value] in madArg0FieldToReturn |  | madArg0FieldToReturn | madArg0FieldToReturn |
+| tests.cpp:160:5:160:24 | [summary] read: Argument[0].Field[value] in madArg0FieldToReturn |  | madArg0FieldToReturn | madArg0FieldToReturn |
 | tests.cpp:160:5:160:24 | [summary] to write: ReturnValue in madArg0FieldToReturn | ReturnNode | madArg0FieldToReturn | madArg0FieldToReturn |
 | tests.cpp:161:5:161:32 | [summary param] *0 in madArg0IndirectFieldToReturn | ParameterNode | madArg0IndirectFieldToReturn | madArg0IndirectFieldToReturn |
-| tests.cpp:161:5:161:32 | [summary] read: Argument[*0].Field[MyContainer::value]/Field[value] in madArg0IndirectFieldToReturn |  | madArg0IndirectFieldToReturn | madArg0IndirectFieldToReturn |
+| tests.cpp:161:5:161:32 | [summary] read: Argument[*0].Field[value] in madArg0IndirectFieldToReturn |  | madArg0IndirectFieldToReturn | madArg0IndirectFieldToReturn |
 | tests.cpp:161:5:161:32 | [summary] to write: ReturnValue in madArg0IndirectFieldToReturn | ReturnNode | madArg0IndirectFieldToReturn | madArg0IndirectFieldToReturn |
 | tests.cpp:162:5:162:32 | [summary param] 0 in madArg0FieldIndirectToReturn | ParameterNode | madArg0FieldIndirectToReturn | madArg0FieldIndirectToReturn |
-| tests.cpp:162:5:162:32 | [summary] read: Argument[0].Field[*MyContainer::ptr]/Field[*ptr] in madArg0FieldIndirectToReturn |  | madArg0FieldIndirectToReturn | madArg0FieldIndirectToReturn |
+| tests.cpp:162:5:162:32 | [summary] read: Argument[0].Field[*ptr] in madArg0FieldIndirectToReturn |  | madArg0FieldIndirectToReturn | madArg0FieldIndirectToReturn |
 | tests.cpp:162:5:162:32 | [summary] to write: ReturnValue in madArg0FieldIndirectToReturn | ReturnNode | madArg0FieldIndirectToReturn | madArg0FieldIndirectToReturn |
 | tests.cpp:163:13:163:32 | [summary param] 0 in madArg0ToReturnField | ParameterNode | madArg0ToReturnField | madArg0ToReturnField |
 | tests.cpp:163:13:163:32 | [summary] to write: ReturnValue in madArg0ToReturnField | ReturnNode | madArg0ToReturnField | madArg0ToReturnField |
-| tests.cpp:163:13:163:32 | [summary] to write: ReturnValue.Field[MyContainer::value]/Field[value] in madArg0ToReturnField |  | madArg0ToReturnField | madArg0ToReturnField |
+| tests.cpp:163:13:163:32 | [summary] to write: ReturnValue.Field[value] in madArg0ToReturnField |  | madArg0ToReturnField | madArg0ToReturnField |
 | tests.cpp:164:14:164:41 | [summary param] 0 in madArg0ToReturnIndirectField | ParameterNode | madArg0ToReturnIndirectField | madArg0ToReturnIndirectField |
 | tests.cpp:164:14:164:41 | [summary] to write: ReturnValue[*] in madArg0ToReturnIndirectField | ReturnNode | madArg0ToReturnIndirectField | madArg0ToReturnIndirectField |
-| tests.cpp:164:14:164:41 | [summary] to write: ReturnValue[*].Field[MyContainer::value]/Field[value] in madArg0ToReturnIndirectField |  | madArg0ToReturnIndirectField | madArg0ToReturnIndirectField |
+| tests.cpp:164:14:164:41 | [summary] to write: ReturnValue[*].Field[value] in madArg0ToReturnIndirectField |  | madArg0ToReturnIndirectField | madArg0ToReturnIndirectField |
 | tests.cpp:165:13:165:40 | [summary param] 0 in madArg0ToReturnFieldIndirect | ParameterNode | madArg0ToReturnFieldIndirect | madArg0ToReturnFieldIndirect |
 | tests.cpp:165:13:165:40 | [summary] to write: ReturnValue in madArg0ToReturnFieldIndirect | ReturnNode | madArg0ToReturnFieldIndirect | madArg0ToReturnFieldIndirect |
-| tests.cpp:165:13:165:40 | [summary] to write: ReturnValue.Field[*MyContainer::ptr]/Field[*ptr] in madArg0ToReturnFieldIndirect |  | madArg0ToReturnFieldIndirect | madArg0ToReturnFieldIndirect |
+| tests.cpp:165:13:165:40 | [summary] to write: ReturnValue.Field[*ptr] in madArg0ToReturnFieldIndirect |  | madArg0ToReturnFieldIndirect | madArg0ToReturnFieldIndirect |
 | tests.cpp:284:7:284:19 | [summary param] 0 in madArg0ToSelf | ParameterNode | madArg0ToSelf | madArg0ToSelf |
 | tests.cpp:284:7:284:19 | [summary param] this in madArg0ToSelf | ParameterNode | madArg0ToSelf | madArg0ToSelf |
 | tests.cpp:284:7:284:19 | [summary] to write: Argument[this] in madArg0ToSelf | PostUpdateNode | madArg0ToSelf | madArg0ToSelf |
@@ -346,9 +346,9 @@ flowSummaryNode
 | tests.cpp:287:7:287:20 | [summary param] 0 in madArg0ToField | ParameterNode | madArg0ToField | madArg0ToField |
 | tests.cpp:287:7:287:20 | [summary param] this in madArg0ToField | ParameterNode | madArg0ToField | madArg0ToField |
 | tests.cpp:287:7:287:20 | [summary] to write: Argument[this] in madArg0ToField | PostUpdateNode | madArg0ToField | madArg0ToField |
-| tests.cpp:287:7:287:20 | [summary] to write: Argument[this].Field[MyClass::val]/Field[val] in madArg0ToField |  | madArg0ToField | madArg0ToField |
+| tests.cpp:287:7:287:20 | [summary] to write: Argument[this].Field[val] in madArg0ToField |  | madArg0ToField | madArg0ToField |
 | tests.cpp:288:6:288:21 | [summary param] this in madFieldToReturn | ParameterNode | madFieldToReturn | madFieldToReturn |
-| tests.cpp:288:6:288:21 | [summary] read: Argument[this].Field[MyClass::val]/Field[val] in madFieldToReturn |  | madFieldToReturn | madFieldToReturn |
+| tests.cpp:288:6:288:21 | [summary] read: Argument[this].Field[val] in madFieldToReturn |  | madFieldToReturn | madFieldToReturn |
 | tests.cpp:288:6:288:21 | [summary] to write: ReturnValue in madFieldToReturn | ReturnNode | madFieldToReturn | madFieldToReturn |
 | tests.cpp:313:7:313:30 | [summary param] this in namespaceMadSelfToReturn | ParameterNode | namespaceMadSelfToReturn | namespaceMadSelfToReturn |
 | tests.cpp:313:7:313:30 | [summary] to write: ReturnValue in namespaceMadSelfToReturn | ReturnNode | namespaceMadSelfToReturn | namespaceMadSelfToReturn |
@@ -362,7 +362,7 @@ flowSummaryNode
 | tests.cpp:435:9:435:38 | [summary] read: Argument[0].ReturnValue in madCallArg0ReturnToReturnFirst | OutNode | madCallArg0ReturnToReturnFirst | madCallArg0ReturnToReturnFirst |
 | tests.cpp:435:9:435:38 | [summary] to write: Argument[0].Parameter[this pointer] in madCallArg0ReturnToReturnFirst | ArgumentNode | madCallArg0ReturnToReturnFirst | madCallArg0ReturnToReturnFirst |
 | tests.cpp:435:9:435:38 | [summary] to write: ReturnValue in madCallArg0ReturnToReturnFirst | ReturnNode | madCallArg0ReturnToReturnFirst | madCallArg0ReturnToReturnFirst |
-| tests.cpp:435:9:435:38 | [summary] to write: ReturnValue.Field[first]/Field[intPair::first] in madCallArg0ReturnToReturnFirst |  | madCallArg0ReturnToReturnFirst | madCallArg0ReturnToReturnFirst |
+| tests.cpp:435:9:435:38 | [summary] to write: ReturnValue.Field[first] in madCallArg0ReturnToReturnFirst |  | madCallArg0ReturnToReturnFirst | madCallArg0ReturnToReturnFirst |
 | tests.cpp:436:6:436:25 | [summary param] 0 in madCallArg0WithValue | ParameterNode | madCallArg0WithValue | madCallArg0WithValue |
 | tests.cpp:436:6:436:25 | [summary param] 1 in madCallArg0WithValue | ParameterNode | madCallArg0WithValue | madCallArg0WithValue |
 | tests.cpp:436:6:436:25 | [summary] read: Argument[0].Parameter[0] in madCallArg0WithValue | PostUpdateNode | madCallArg0WithValue | madCallArg0WithValue |

cpp/ql/test/query-tests/Likely Bugs/Format/NonConstantFormat/NonConstantFormat.expected

@@ -11,10 +11,12 @@ edges
 | nested.cpp:86:19:86:46 | *call to __builtin_alloca | nested.cpp:87:18:87:20 | *fmt | provenance |  |
 | test.cpp:46:27:46:30 | **argv | test.cpp:130:20:130:26 | *access to array | provenance |  |
 | test.cpp:167:31:167:34 | *data | test.cpp:170:12:170:14 | *res | provenance | DataFlowFunction |
+| test.cpp:179:6:179:21 | [summary param] *2 in StringCchPrintfW | test.cpp:179:6:179:21 | [summary param] *0 in StringCchPrintfW [Return] | provenance | MaD:403 |
 | test.cpp:193:32:193:34 | *str | test.cpp:195:31:195:33 | *str | provenance |  |
 | test.cpp:193:32:193:34 | *str | test.cpp:195:31:195:33 | *str | provenance |  |
 | test.cpp:193:32:193:34 | *str | test.cpp:197:11:197:14 | *wstr | provenance | TaintFunction |
 | test.cpp:195:20:195:23 | StringCchPrintfW output argument | test.cpp:197:11:197:14 | *wstr | provenance |  |
+| test.cpp:195:31:195:33 | *str | test.cpp:179:6:179:21 | [summary param] *2 in StringCchPrintfW | provenance |  |
 | test.cpp:195:31:195:33 | *str | test.cpp:195:20:195:23 | StringCchPrintfW output argument | provenance | MaD:403 |
 | test.cpp:204:25:204:36 | *call to get_string | test.cpp:204:25:204:36 | *call to get_string | provenance |  |
 | test.cpp:204:25:204:36 | *call to get_string | test.cpp:205:12:205:20 | *... + ... | provenance |  |
@@ -58,6 +60,8 @@ nodes
 | test.cpp:130:20:130:26 | *access to array | semmle.label | *access to array |
 | test.cpp:167:31:167:34 | *data | semmle.label | *data |
 | test.cpp:170:12:170:14 | *res | semmle.label | *res |
+| test.cpp:179:6:179:21 | [summary param] *0 in StringCchPrintfW [Return] | semmle.label | [summary param] *0 in StringCchPrintfW [Return] |
+| test.cpp:179:6:179:21 | [summary param] *2 in StringCchPrintfW | semmle.label | [summary param] *2 in StringCchPrintfW |
 | test.cpp:193:32:193:34 | *str | semmle.label | *str |
 | test.cpp:195:20:195:23 | StringCchPrintfW output argument | semmle.label | StringCchPrintfW output argument |
 | test.cpp:195:31:195:33 | *str | semmle.label | *str |
@@ -93,6 +97,7 @@ nodes
 | test.cpp:245:25:245:36 | *call to get_string | semmle.label | *call to get_string |
 | test.cpp:247:12:247:16 | *hello | semmle.label | *hello |
 subpaths
+| test.cpp:195:31:195:33 | *str | test.cpp:179:6:179:21 | [summary param] *2 in StringCchPrintfW | test.cpp:179:6:179:21 | [summary param] *0 in StringCchPrintfW [Return] | test.cpp:195:20:195:23 | StringCchPrintfW output argument |
 #select
 | NonConstantFormat.c:30:10:30:16 | *access to array | NonConstantFormat.c:28:27:28:30 | **argv | NonConstantFormat.c:30:10:30:16 | *access to array | The format string argument to $@ has a source which cannot be verified to originate from a string literal. | NonConstantFormat.c:30:3:30:8 | call to printf | printf |
 | NonConstantFormat.c:41:9:41:45 | *call to any_random_function | NonConstantFormat.c:41:9:41:45 | *call to any_random_function | NonConstantFormat.c:41:9:41:45 | *call to any_random_function | The format string argument to $@ has a source which cannot be verified to originate from a string literal. | NonConstantFormat.c:41:2:41:7 | call to printf | printf |

cpp/ql/test/query-tests/Security/CWE/CWE-497/semmle/tests/ExposedSystemData.expected

@@ -33,6 +33,7 @@ edges
 | tests2.cpp:111:14:111:15 | *c1 [*ptr] | tests2.cpp:111:14:111:19 | *ptr | provenance |  |
 | tests2.cpp:111:14:111:15 | *c1 [*ptr] | tests2.cpp:111:17:111:19 | *ptr | provenance |  |
 | tests2.cpp:111:17:111:19 | *ptr | tests2.cpp:111:14:111:19 | *ptr | provenance |  |
+| tests2.cpp:120:5:120:21 | [summary param] *1 in zmq_msg_init_data | tests2.cpp:120:5:120:21 | [summary param] *0 in zmq_msg_init_data [Return] | provenance | MaD:4 |
 | tests2.cpp:134:2:134:30 | *... = ... | tests2.cpp:138:23:138:34 | *message_data | provenance | Sink:MaD:2 |
 | tests2.cpp:134:2:134:30 | *... = ... | tests2.cpp:143:34:143:45 | *message_data | provenance |  |
 | tests2.cpp:134:17:134:22 | *call to getenv | tests2.cpp:134:2:134:30 | *... = ... | provenance |  |
@@ -40,6 +41,7 @@ edges
 | tests2.cpp:143:24:143:31 | zmq_msg_init_data output argument | tests2.cpp:147:20:147:27 | *& ... | provenance | Sink:MaD:1 |
 | tests2.cpp:143:24:143:31 | zmq_msg_init_data output argument | tests2.cpp:155:32:155:39 | *& ... | provenance | Sink:MaD:3 |
 | tests2.cpp:143:24:143:31 | zmq_msg_init_data output argument | tests2.cpp:158:20:158:27 | *& ... | provenance | Sink:MaD:1 |
+| tests2.cpp:143:34:143:45 | *message_data | tests2.cpp:120:5:120:21 | [summary param] *1 in zmq_msg_init_data | provenance |  |
 | tests2.cpp:143:34:143:45 | *message_data | tests2.cpp:143:24:143:31 | zmq_msg_init_data output argument | provenance | MaD:4 |
 | tests_sockets.cpp:26:15:26:20 | *call to getenv | tests_sockets.cpp:26:15:26:20 | *call to getenv | provenance |  |
 | tests_sockets.cpp:26:15:26:20 | *call to getenv | tests_sockets.cpp:39:19:39:22 | *path | provenance |  |
@@ -76,6 +78,8 @@ nodes
 | tests2.cpp:111:14:111:15 | *c1 [*ptr] | semmle.label | *c1 [*ptr] |
 | tests2.cpp:111:14:111:19 | *ptr | semmle.label | *ptr |
 | tests2.cpp:111:17:111:19 | *ptr | semmle.label | *ptr |
+| tests2.cpp:120:5:120:21 | [summary param] *0 in zmq_msg_init_data [Return] | semmle.label | [summary param] *0 in zmq_msg_init_data [Return] |
+| tests2.cpp:120:5:120:21 | [summary param] *1 in zmq_msg_init_data | semmle.label | [summary param] *1 in zmq_msg_init_data |
 | tests2.cpp:134:2:134:30 | *... = ... | semmle.label | *... = ... |
 | tests2.cpp:134:17:134:22 | *call to getenv | semmle.label | *call to getenv |
 | tests2.cpp:138:23:138:34 | *message_data | semmle.label | *message_data |
@@ -96,3 +100,4 @@ nodes
 | tests_sysconf.cpp:36:21:36:27 | confstr output argument | semmle.label | confstr output argument |
 | tests_sysconf.cpp:39:19:39:25 | *pathbuf | semmle.label | *pathbuf |
 subpaths
+| tests2.cpp:143:34:143:45 | *message_data | tests2.cpp:120:5:120:21 | [summary param] *1 in zmq_msg_init_data | tests2.cpp:120:5:120:21 | [summary param] *0 in zmq_msg_init_data [Return] | tests2.cpp:143:24:143:31 | zmq_msg_init_data output argument |

csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/FeedManager.cs

@@ -88,12 +88,12 @@ namespace Semmle.Extraction.CSharp.DependencyFetching
         private IEnumerable<string> GetFeedsFromNugetConfig(string nugetConfigPath) =>
             GetFeeds(() => dotnet.GetNugetFeeds(nugetConfigPath));
 
-        public string FeedsToRestoreArgument(IEnumerable<string> feeds, string sourceArgumentPrefix)
+        private string FeedsToRestoreArgument(IEnumerable<string> feeds)
         {
-            // If there are no feeds, we want to override any default feeds that `restore` would use by passing a dummy source argument.
+            // If there are no feeds, we want to override any default feeds that `dotnet restore` would use by passing a dummy source argument.
             if (!feeds.Any())
             {
-                return $" {sourceArgumentPrefix} \"{emptyPackageDirectory.DirInfo.FullName}\"";
+                return $" -s \"{emptyPackageDirectory.DirInfo.FullName}\"";
             }
 
             // Add package sources. If any are present, they override all sources specified in
@@ -101,7 +101,7 @@ namespace Semmle.Extraction.CSharp.DependencyFetching
             var feedArgs = new StringBuilder();
             foreach (var feed in feeds)
             {
-                feedArgs.Append($" {sourceArgumentPrefix} \"{feed}\"");
+                feedArgs.Append($" -s \"{feed}\"");
             }
 
             return feedArgs.ToString();
@@ -112,11 +112,17 @@ namespace Semmle.Extraction.CSharp.DependencyFetching
         /// (1) Use the feeds we get from `dotnet nuget list source`
         /// (2) Use private registries, if they are configured
         /// </summary>
-        /// <param name="path">Path to project/solution/packages.config</param>
+        /// <param name="path">Path to project/solution</param>
         /// <param name="reachableFeeds">The set of reachable NuGet feeds.</param>
-        /// <returns>The list of NuGet feeds to use for this restore.</returns>
-        public IEnumerable<string> FeedsToUse(string path, HashSet<string> reachableFeeds)
+        /// <returns>A string representing the NuGet sources argument for the restore command.</returns>
+        public string? MakeRestoreSourcesArgument(string path, HashSet<string> reachableFeeds)
         {
+            // Do not construct a set of explicit NuGet sources to use for restore.
+            if (!CheckNugetFeedResponsiveness && !HasPrivateRegistryFeeds)
+            {
+                return null;
+            }
+
             // Find the path specific feeds.
             var folder = GetDirectoryName(path);
             var feedsToConsider = folder is not null ? GetFeedsFromFolder(folder).ToHashSet() : new HashSet<string>();
@@ -130,28 +136,7 @@ namespace Semmle.Extraction.CSharp.DependencyFetching
                 ? feedsToConsider.Where(reachableFeeds.Contains)
                 : feedsToConsider;
 
-            return feedsToUse;
-        }
-
-        /// <summary>
-        /// Constructs the list of NuGet sources to use for dotnet restore.
-        /// (1) Use the feeds we get from `dotnet nuget list source`
-        /// (2) Use private registries, if they are configured
-        /// </summary>
-        /// <param name="path">Path to project/solution</param>
-        /// <param name="reachableFeeds">The set of reachable NuGet feeds.</param>
-        /// <returns>A string representing the NuGet sources argument for the restore command.</returns>
-        public string? MakeDotnetRestoreSourcesArgument(string path, HashSet<string> reachableFeeds)
-        {
-            // Do not construct a set of explicit NuGet sources to use for restore.
-            if (!CheckNugetFeedResponsiveness && !HasPrivateRegistryFeeds)
-            {
-                return null;
-            }
-
-            var feedsToUse = FeedsToUse(path, reachableFeeds);
-
-            return FeedsToRestoreArgument(feedsToUse, "-s");
+            return FeedsToRestoreArgument(feedsToUse);
         }
 
         private (int initialTimeout, int tryCount) GetFeedRequestSettings(bool isFallback)

csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/NugetPackageRestorer.cs

@@ -110,55 +110,58 @@ namespace Semmle.Extraction.CSharp.DependencyFetching
             logger.LogInfo($"Checking NuGet feed responsiveness: {feedManager.CheckNugetFeedResponsiveness}");
             compilationInfoContainer.CompilationInfos.Add(("NuGet feed responsiveness checked", feedManager.CheckNugetFeedResponsiveness ? "1" : "0"));
 
+            HashSet<string> explicitFeeds = [];
             HashSet<string> reachableFeeds = [];
 
-            EmitNugetConfigDiagnostics();
-
-            // Find feeds that are configured in NuGet.config files and divide them into ones that
-            // are explicitly configured for the project or by a private registry, and "all feeds"
-            // (including inherited ones) from other locations on the host outside of the working directory.
-            (var explicitFeeds, var allFeeds) = feedManager.GetAllFeeds();
-
-            if (feedManager.CheckNugetFeedResponsiveness)
-            {
-                var inheritedFeeds = allFeeds.Except(explicitFeeds).ToHashSet();
-
-                if (inheritedFeeds.Count > 0)
-                {
-                    compilationInfoContainer.CompilationInfos.Add(("Inherited NuGet feed count", inheritedFeeds.Count.ToString()));
-                }
-
-                var timeout = feedManager.CheckSpecifiedFeeds(explicitFeeds, out var reachableExplicitFeeds);
-                reachableFeeds.UnionWith(reachableExplicitFeeds);
-
-                var allExplicitReachable = explicitFeeds.Count == reachableExplicitFeeds.Count;
-                EmitUnreachableFeedsDiagnostics(allExplicitReachable);
-
-                if (timeout)
-                {
-                    // If we experience a timeout, we use this fallback.
-                    // todo: we could also check the reachability of the inherited nuget feeds, but to use those in the fallback we would need to handle authentication too.
-                    var unresponsiveMissingPackageLocation = DownloadMissingPackagesFromSpecificFeeds([], explicitFeeds);
-                    return unresponsiveMissingPackageLocation is null
-                        ? []
-                        : [unresponsiveMissingPackageLocation];
-                }
-
-                // Inherited feeds should only be used, if they are indeed reachable (as they may be environment specific).
-                feedManager.CheckSpecifiedFeeds(inheritedFeeds, out var reachableInheritedFeeds);
-                reachableFeeds.UnionWith(reachableInheritedFeeds);
-            }
-
             try
             {
-                var packagesConfigRestore = PackagesConfigRestoreFactory.Create(fileProvider, legacyPackageDirectory, logger, feedManager, reachableFeeds);
-                var count = packagesConfigRestore.InstallPackages();
-                if (packagesConfigRestore.PackageCount > 0)
+                EmitNugetConfigDiagnostics();
+
+                // Find feeds that are configured in NuGet.config files and divide them into ones that
+                // are explicitly configured for the project or by a private registry, and "all feeds"
+                // (including inherited ones) from other locations on the host outside of the working directory.
+                (explicitFeeds, var allFeeds) = feedManager.GetAllFeeds();
+
+                if (feedManager.CheckNugetFeedResponsiveness)
                 {
-                    compilationInfoContainer.CompilationInfos.Add(("packages.config files", packagesConfigRestore.PackageCount.ToString()));
-                    compilationInfoContainer.CompilationInfos.Add(("Successfully restored packages.config files", count.ToString()));
+                    var inheritedFeeds = allFeeds.Except(explicitFeeds).ToHashSet();
+
+                    if (inheritedFeeds.Count > 0)
+                    {
+                        compilationInfoContainer.CompilationInfos.Add(("Inherited NuGet feed count", inheritedFeeds.Count.ToString()));
+                    }
+
+                    var timeout = feedManager.CheckSpecifiedFeeds(explicitFeeds, out var reachableExplicitFeeds);
+                    reachableFeeds.UnionWith(reachableExplicitFeeds);
+
+                    var allExplicitReachable = explicitFeeds.Count == reachableExplicitFeeds.Count;
+                    EmitUnreachableFeedsDiagnostics(allExplicitReachable);
+
+                    if (timeout)
+                    {
+                        // If we experience a timeout, we use this fallback.
+                        // todo: we could also check the reachability of the inherited nuget feeds, but to use those in the fallback we would need to handle authentication too.
+                        var unresponsiveMissingPackageLocation = DownloadMissingPackagesFromSpecificFeeds([], explicitFeeds);
+                        return unresponsiveMissingPackageLocation is null
+                            ? []
+                            : [unresponsiveMissingPackageLocation];
+                    }
+
+                    // Inherited feeds should only be used, if they are indeed reachable (as they may be environment specific).
+                    feedManager.CheckSpecifiedFeeds(inheritedFeeds, out var reachableInheritedFeeds);
+                    reachableFeeds.UnionWith(reachableInheritedFeeds);
                 }
 
+                using (var packagesConfigRestore = PackagesConfigRestoreFactory.Create(fileProvider, legacyPackageDirectory, logger, feedManager.IsDefaultFeedReachable))
+                {
+                    var count = packagesConfigRestore.InstallPackages();
+
+                    if (packagesConfigRestore.PackageCount > 0)
+                    {
+                        compilationInfoContainer.CompilationInfos.Add(("packages.config files", packagesConfigRestore.PackageCount.ToString()));
+                        compilationInfoContainer.CompilationInfos.Add(("Successfully restored packages.config files", count.ToString()));
+                    }
+                }
 
                 var nugetPackageDlls = legacyPackageDirectory.DirInfo.GetFiles("*.dll", new EnumerationOptions { RecurseSubdirectories = true });
                 var nugetPackageDllPaths = nugetPackageDlls.Select(f => f.FullName).ToHashSet();
@@ -236,7 +239,7 @@ namespace Semmle.Extraction.CSharp.DependencyFetching
             var projects = fileProvider.Solutions.SelectMany(solution =>
                 {
                     logger.LogInfo($"Restoring solution {solution}...");
-                    var nugetSources = feedManager.MakeDotnetRestoreSourcesArgument(solution, reachableFeeds);
+                    var nugetSources = feedManager.MakeRestoreSourcesArgument(solution, reachableFeeds);
                     var res = dotnet.Restore(new(solution, PackageDirectory.DirInfo.FullName, ForceDotnetRefAssemblyFetching: true, NugetSources: nugetSources, TargetWindows: isWindows));
                     if (res.Success)
                     {
@@ -285,7 +288,7 @@ namespace Semmle.Extraction.CSharp.DependencyFetching
                 foreach (var project in projectGroup)
                 {
                     logger.LogInfo($"Restoring project {project}...");
-                    var nugetSources = feedManager.MakeDotnetRestoreSourcesArgument(project, reachableFeeds);
+                    var nugetSources = feedManager.MakeRestoreSourcesArgument(project, reachableFeeds);
                     var res = dotnet.Restore(new(project, PackageDirectory.DirInfo.FullName, ForceDotnetRefAssemblyFetching: true, NugetSources: nugetSources, TargetWindows: isWindows));
                     assets.AddDependenciesRange(res.AssetsFilePaths);
                     lock (sync)

csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/PackagesConfigRestorer.cs

@@ -7,7 +7,7 @@ using Semmle.Util;
 
 namespace Semmle.Extraction.CSharp.DependencyFetching
 {
-    internal interface IPackagesConfigRestore
+    internal interface IPackagesConfigRestore : IDisposable
     {
         /// <summary>
         /// The number of packages.config files found in the source tree.
@@ -33,11 +33,11 @@ namespace Semmle.Extraction.CSharp.DependencyFetching
     /// </summary>
     internal class PackagesConfigRestoreFactory
     {
-        public static IPackagesConfigRestore Create(FileProvider fileProvider, DependencyDirectory packageDirectory, Semmle.Util.Logging.ILogger logger, FeedManager feedManager, HashSet<string> reachableFeeds)
+        public static IPackagesConfigRestore Create(FileProvider fileProvider, DependencyDirectory packageDirectory, Semmle.Util.Logging.ILogger logger, Func<bool> useDefaultFeed)
         {
             if (SystemBuildActions.Instance.IsWindows() || SystemBuildActions.Instance.IsMonoInstalled())
             {
-                return new NugetExeWrapper(fileProvider, packageDirectory, logger, feedManager, reachableFeeds);
+                return new NugetExeWrapper(fileProvider, packageDirectory, logger, useDefaultFeed);
             }
 
             return new NoOpPackagesConfig(fileProvider.PackagesConfigs, logger);
@@ -55,6 +55,8 @@ namespace Semmle.Extraction.CSharp.DependencyFetching
 
             public int PackageCount => fileProvider.PackagesConfigs.Count;
 
+            private readonly string? backupNugetConfig;
+            private readonly string? nugetConfigPath;
             private readonly FileProvider fileProvider;
 
             /// <summary>
@@ -63,30 +65,57 @@ namespace Semmle.Extraction.CSharp.DependencyFetching
             /// so as to not trample the source tree.
             /// </summary>
             private readonly DependencyDirectory packageDirectory;
-            private readonly FeedManager feedManager;
-            private readonly HashSet<string> reachableFeeds;
 
             private bool IsWindows => SystemBuildActions.Instance.IsWindows();
 
-            private bool? isDefaultFeedReachable;
-            private bool IsDefaultFeedReachable =>
-                isDefaultFeedReachable ??= feedManager.IsDefaultFeedReachable();
-
             /// <summary>
             /// Create the package manager for a specified source tree.
             /// </summary>
-            public NugetExeWrapper(FileProvider fileProvider, DependencyDirectory packageDirectory, Semmle.Util.Logging.ILogger logger, FeedManager feedManager, HashSet<string> reachableFeeds)
+            public NugetExeWrapper(FileProvider fileProvider, DependencyDirectory packageDirectory, Semmle.Util.Logging.ILogger logger, Func<bool> useDefaultFeed)
             {
                 this.fileProvider = fileProvider;
                 this.packageDirectory = packageDirectory;
                 this.logger = logger;
-                this.feedManager = feedManager;
-                this.reachableFeeds = reachableFeeds;
 
                 if (fileProvider.PackagesConfigs.Count > 0)
                 {
                     logger.LogInfo($"Found packages.config files, trying to use nuget.exe for package restore");
                     nugetExe = ResolveNugetExe();
+                    if (!HasPackageSource() && useDefaultFeed())
+                    {
+                        // We only modify or add a top level nuget.config file
+                        nugetConfigPath = Path.Join(fileProvider.SourceDir.FullName, "nuget.config");
+                        try
+                        {
+                            if (File.Exists(nugetConfigPath))
+                            {
+                                var tempFolderPath = FileUtils.GetTemporaryWorkingDirectory(out _);
+
+                                do
+                                {
+                                    backupNugetConfig = Path.Join(tempFolderPath, Path.GetRandomFileName());
+                                }
+                                while (File.Exists(backupNugetConfig));
+                                File.Copy(nugetConfigPath, backupNugetConfig, true);
+                            }
+                            else
+                            {
+                                File.WriteAllText(nugetConfigPath,
+                                    """
+                                <?xml version="1.0" encoding="utf-8"?>
+                                <configuration>
+                                  <packageSources>
+                                  </packageSources>
+                                </configuration>
+                                """);
+                            }
+                            AddDefaultPackageSource(nugetConfigPath);
+                        }
+                        catch (Exception e)
+                        {
+                            logger.LogError($"Failed to add default package source to {nugetConfigPath}: {e}");
+                        }
+                    }
                 }
             }
 
@@ -169,21 +198,6 @@ namespace Semmle.Extraction.CSharp.DependencyFetching
             {
                 logger.LogInfo($"Restoring file \"{packagesConfig}\"...");
 
-                var sourcesArgument = "";
-                var feedsToUse = feedManager.FeedsToUse(packagesConfig, reachableFeeds).ToList();
-                var useDefaultFeed = feedsToUse.Count == 0 && IsDefaultFeedReachable;
-
-                // Explicitly construct the sources to be used for the restore command when checking feed
-                // responsiveness, using private registries, or falling back to nuget.org.
-                if (feedManager.CheckNugetFeedResponsiveness || feedManager.HasPrivateRegistryFeeds || useDefaultFeed)
-                {
-                    if (useDefaultFeed)
-                    {
-                        feedsToUse.Add(FeedManager.PublicNugetOrgFeed);
-                    }
-                    sourcesArgument = feedManager.FeedsToRestoreArgument(feedsToUse, "-Source");
-                }
-
                 /* Use nuget.exe to install a package.
                  * Note that there is a clutch of NuGet assemblies which could be used to
                  * invoke this directly, which would arguably be nicer. However they are
@@ -194,12 +208,12 @@ namespace Semmle.Extraction.CSharp.DependencyFetching
                 if (RunWithMono)
                 {
                     exe = "mono";
-                    args = $"\"{nugetExe}\" install -OutputDirectory \"{packageDirectory}\" {sourcesArgument} \"{packagesConfig}\"";
+                    args = $"\"{nugetExe}\" install -OutputDirectory \"{packageDirectory}\" \"{packagesConfig}\"";
                 }
                 else
                 {
                     exe = nugetExe!;
-                    args = $"install -OutputDirectory \"{packageDirectory}\" {sourcesArgument} \"{packagesConfig}\"";
+                    args = $"install -OutputDirectory \"{packageDirectory}\" \"{packagesConfig}\"";
                 }
 
                 var pi = new ProcessStartInfo(exe, args)
@@ -232,6 +246,98 @@ namespace Semmle.Extraction.CSharp.DependencyFetching
             {
                 return fileProvider.PackagesConfigs.Count(TryRestoreNugetPackage);
             }
+
+            private bool HasPackageSource()
+            {
+                if (IsWindows)
+                {
+                    return true;
+                }
+
+                try
+                {
+                    logger.LogInfo("Checking if default package source is available...");
+                    RunMonoNugetCommand("sources list -ForceEnglishOutput", out var stdout);
+                    if (stdout.All(line => line != "No sources found."))
+                    {
+                        return true;
+                    }
+
+                    return false;
+                }
+                catch (Exception e)
+                {
+                    logger.LogWarning($"Failed to check if default package source is added: {e}");
+                    return true;
+                }
+            }
+
+            private void RunMonoNugetCommand(string command, out IList<string> stdout)
+            {
+                string exe, args;
+                if (RunWithMono)
+                {
+                    exe = "mono";
+                    args = $"\"{nugetExe}\" {command}";
+                }
+                else
+                {
+                    exe = nugetExe!;
+                    args = command;
+                }
+
+                var pi = new ProcessStartInfo(exe, args)
+                {
+                    RedirectStandardOutput = true,
+                    RedirectStandardError = true,
+                    UseShellExecute = false
+                };
+
+                var threadId = Environment.CurrentManagedThreadId;
+                void onOut(string s) => logger.LogDebug(s, threadId);
+                void onError(string s) => logger.LogError(s, threadId);
+                pi.ReadOutput(out stdout, onOut, onError);
+            }
+
+            private void AddDefaultPackageSource(string nugetConfig)
+            {
+                logger.LogInfo("Adding default package source...");
+                RunMonoNugetCommand($"sources add -Name DefaultNugetOrg -Source {FeedManager.PublicNugetOrgFeed} -ConfigFile \"{nugetConfig}\"", out _);
+            }
+
+            public void Dispose()
+            {
+                if (nugetConfigPath is null)
+                {
+                    return;
+                }
+
+                try
+                {
+                    if (backupNugetConfig is null)
+                    {
+                        logger.LogInfo("Removing nuget.config file");
+                        File.Delete(nugetConfigPath);
+                        return;
+                    }
+
+                    logger.LogInfo("Reverting nuget.config file content");
+                    // The content of the original nuget.config file is reverted without changing the file's attributes or casing:
+                    using (var backup = File.OpenRead(backupNugetConfig))
+                    using (var current = File.OpenWrite(nugetConfigPath))
+                    {
+                        current.SetLength(0);   // Truncate file
+                        backup.CopyTo(current); // Restore original content
+                    }
+
+                    logger.LogInfo("Deleting backup nuget.config file");
+                    File.Delete(backupNugetConfig);
+                }
+                catch (Exception exc)
+                {
+                    logger.LogError($"Failed to restore original nuget.config file: {exc}");
+                }
+            }
         }
 
         private class NoOpPackagesConfig : IPackagesConfigRestore
@@ -255,6 +361,8 @@ namespace Semmle.Extraction.CSharp.DependencyFetching
                 }
                 return 0;
             }
+
+            public void Dispose() { }
         }
     }
 }

csharp/ql/lib/change-notes/2026-06-24-nuget-packages-config.md

@@ -1,4 +0,0 @@
----
-category: majorAnalysis
----
-* Simplified and streamlined the use of NuGet sources when downloading dependencies via `[mono] nuget.exe` in `build-mode: none`: NuGet sources are now supplied via the `-Source` flag instead of moving or creating `nuget.config` files in the checked-out repository, private registries are used if configured, and only reachable feeds are used when NuGet feed checking is enabled (the default).

go/ql/lib/change-notes/2026-06-30-model-log-slog.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
- * Improved models for the `log/slog` package (Go 1.21+), including `*slog.Logger` methods, `With`/`WithGroup`, and `Attr`/`Value` helpers, improving coverage for the `go/log-injection` and `go/clear-text-logging` queries.

go/ql/lib/ext/log.slog.model.yml

@@ -27,27 +27,3 @@ extensions:
       - ["log/slog", "Logger", True, "ErrorContext", "", "", "Argument[1..2]", "log-injection", "manual"]
       - ["log/slog", "Logger", True, "Log", "", "", "Argument[2..3]", "log-injection", "manual"]
       - ["log/slog", "Logger", True, "LogAttrs", "", "", "Argument[2..3]", "log-injection", "manual"]
-      # With/WithGroup add attributes that are included in every subsequent log call.
-      - ["log/slog", "", False, "With", "", "", "Argument[0]", "log-injection", "manual"]
-      - ["log/slog", "Logger", True, "With", "", "", "Argument[0]", "log-injection", "manual"]
-      - ["log/slog", "Logger", True, "WithGroup", "", "", "Argument[0]", "log-injection", "manual"]
-  - addsTo:
-      pack: codeql/go-all
-      extensible: summaryModel
-    data:
-      # Constructors for Attr that can carry a tainted string into the result.
-      - ["log/slog", "", False, "Any", "", "", "Argument[0..1]", "ReturnValue", "taint", "manual"]
-      - ["log/slog", "", False, "Group", "", "", "Argument[0]", "ReturnValue", "taint", "manual"]
-      - ["log/slog", "", False, "Group", "", "", "Argument[1].ArrayElement", "ReturnValue", "taint", "manual"]
-      - ["log/slog", "", False, "GroupAttrs", "", "", "Argument[0]", "ReturnValue", "taint", "manual"]
-      - ["log/slog", "", False, "GroupAttrs", "", "", "Argument[1].ArrayElement", "ReturnValue", "taint", "manual"]
-      - ["log/slog", "", False, "String", "", "", "Argument[0..1]", "ReturnValue", "taint", "manual"]
-      # Constructors for Value that can carry a tainted string into the result.
-      - ["log/slog", "", False, "AnyValue", "", "", "Argument[0]", "ReturnValue", "taint", "manual"]
-      - ["log/slog", "", False, "GroupValue", "", "", "Argument[0].ArrayElement", "ReturnValue", "taint", "manual"]
-      - ["log/slog", "", False, "StringValue", "", "", "Argument[0]", "ReturnValue", "taint", "manual"]
-      # Methods that read a string back out of an Attr or Value.
-      - ["log/slog", "Attr", True, "String", "", "", "Argument[receiver]", "ReturnValue", "taint", "manual"]
-      - ["log/slog", "Value", True, "Any", "", "", "Argument[receiver]", "ReturnValue", "taint", "manual"]
-      - ["log/slog", "Value", True, "Group", "", "", "Argument[receiver]", "ReturnValue.ArrayElement", "taint", "manual"]
-      - ["log/slog", "Value", True, "String", "", "", "Argument[receiver]", "ReturnValue", "taint", "manual"]

go/ql/test/library-tests/semmle/go/concepts/LoggerCall/slog.go

@@ -37,9 +37,4 @@ func slogTest() {
 	slog.InfoContext(ctx, text, key, v)            // $ logger=text logger=key logger=v
 	slog.Log(ctx, slog.LevelInfo, text, key, v)    // $ logger=text logger=key logger=v
 	slog.LogAttrs(ctx, slog.LevelInfo, text, attr) // $ logger=text logger=attr
-
-	// With/WithGroup add attributes that are included in every subsequent log call.
-	logger.With(key, v)    // $ logger=key logger=v
-	logger.WithGroup(text) // $ logger=text
-	slog.With(key, v)      // $ logger=key logger=v
 }

go/ql/test/library-tests/semmle/go/frameworks/Slog/CONSISTENCY/DataFlowConsistency.expected

@@ -1,2 +0,0 @@
-reverseRead
-| test.go:114:21:114:33 | call to Group | Origin of readStep is missing a PostUpdateNode. |

go/ql/test/library-tests/semmle/go/frameworks/Slog/TaintFlows.expected

@@ -1,2 +0,0 @@
-invalidModelRow
-testFailures

go/ql/test/library-tests/semmle/go/frameworks/Slog/TaintFlows.ql

@@ -1,14 +0,0 @@
-import go
-import semmle.go.dataflow.ExternalFlow
-import ModelValidation
-import utils.test.InlineFlowTest
-
-module Config implements DataFlow::ConfigSig {
-  predicate isSource(DataFlow::Node source) {
-    source.(DataFlow::CallNode).getTarget().getName() = ["getUntrustedData", "getUntrustedString"]
-  }
-
-  predicate isSink(DataFlow::Node sink) { sink = any(LoggerCall log).getAMessageComponent() }
-}
-
-import FlowTest<Config, Config>

go/ql/test/library-tests/semmle/go/frameworks/Slog/go.mod

@@ -1,3 +0,0 @@
-module codeql-go-tests/frameworks/slog
-
-go 1.26

go/ql/test/library-tests/semmle/go/frameworks/Slog/test.go

@@ -1,115 +0,0 @@
-package main
-
-import (
-	"context"
-	"log/slog"
-)
-
-func main() {}
-
-func getUntrustedData() interface{} { return nil }
-
-func getUntrustedString() string {
-	return "tainted string"
-}
-
-// Package-level convenience functions.
-
-func testSlogDebug() {
-	slog.Debug(getUntrustedString())                            // $ hasValueFlow="call to getUntrustedString"
-	slog.Debug("msg", "key", getUntrustedData())                // $ hasValueFlow="call to getUntrustedData"
-	slog.Debug("msg", slog.String("key", getUntrustedString())) // $ hasTaintFlow="call to String"
-}
-
-func testSlogInfo() {
-	slog.Info(getUntrustedString())                            // $ hasValueFlow="call to getUntrustedString"
-	slog.Info("msg", slog.Any("key", getUntrustedData()))      // $ hasTaintFlow="call to Any"
-	slog.Info("msg", slog.String("key", getUntrustedString())) // $ hasTaintFlow="call to String"
-}
-
-func testSlogWarn() {
-	slog.Warn(getUntrustedString())                            // $ hasValueFlow="call to getUntrustedString"
-	slog.Warn("msg", slog.String("key", getUntrustedString())) // $ hasTaintFlow="call to String"
-}
-
-func testSlogError() {
-	slog.Error(getUntrustedString())                            // $ hasValueFlow="call to getUntrustedString"
-	slog.Error("msg", slog.String("key", getUntrustedString())) // $ hasTaintFlow="call to String"
-}
-
-func testSlogContextVariants(ctx context.Context) {
-	slog.DebugContext(ctx, getUntrustedString())                           // $ hasValueFlow="call to getUntrustedString"
-	slog.InfoContext(ctx, getUntrustedString())                            // $ hasValueFlow="call to getUntrustedString"
-	slog.WarnContext(ctx, getUntrustedString())                            // $ hasValueFlow="call to getUntrustedString"
-	slog.ErrorContext(ctx, getUntrustedString())                           // $ hasValueFlow="call to getUntrustedString"
-	slog.InfoContext(ctx, "msg", slog.String("key", getUntrustedString())) // $ hasTaintFlow="call to String"
-}
-
-func testSlogLog(ctx context.Context) {
-	slog.Log(ctx, slog.LevelInfo, getUntrustedString())                                 // $ hasValueFlow="call to getUntrustedString"
-	slog.Log(ctx, slog.LevelInfo, "msg", slog.String("key", getUntrustedString()))      // $ hasTaintFlow="call to String"
-	slog.LogAttrs(ctx, slog.LevelInfo, getUntrustedString())                            // $ hasValueFlow="call to getUntrustedString"
-	slog.LogAttrs(ctx, slog.LevelInfo, "msg", slog.String("key", getUntrustedString())) // $ hasTaintFlow="call to String"
-}
-
-// Methods on *slog.Logger.
-
-func testLoggerMethods(logger *slog.Logger, ctx context.Context) {
-	logger.Debug(getUntrustedString())                                                    // $ hasValueFlow="call to getUntrustedString"
-	logger.Info(getUntrustedString())                                                     // $ hasValueFlow="call to getUntrustedString"
-	logger.Warn(getUntrustedString())                                                     // $ hasValueFlow="call to getUntrustedString"
-	logger.Error(getUntrustedString())                                                    // $ hasValueFlow="call to getUntrustedString"
-	logger.Info("msg", slog.Any("key", getUntrustedData()))                               // $ hasTaintFlow="call to Any"
-	logger.InfoContext(ctx, getUntrustedString())                                         // $ hasValueFlow="call to getUntrustedString"
-	logger.Log(ctx, slog.LevelInfo, getUntrustedString())                                 // $ hasValueFlow="call to getUntrustedString"
-	logger.LogAttrs(ctx, slog.LevelInfo, "msg", slog.String("key", getUntrustedString())) // $ hasTaintFlow="call to String"
-}
-
-// With, Logger.With and Logger.WithGroup. Note that for ease of modeling we make these functions
-// sinks, although strictly speaking we should consider logging functions called on the returned
-// loggers as the sinks.
-
-func testWith(logger *slog.Logger) {
-	logger1 := logger.With(slog.String("key", getUntrustedString())) // $ hasTaintFlow="call to String"
-	logger1.Info("hello world")
-	logger2 := logger.With(slog.Any(getUntrustedString(), nil)) // $ hasTaintFlow="call to Any"
-	logger2.Info("hello world")
-	logger.With("key", getUntrustedData()).Info("hello world") // $ hasValueFlow="call to getUntrustedData"
-}
-
-func testPackageWith() {
-	logger := slog.With(slog.String("key", getUntrustedString())) // $ hasTaintFlow="call to String"
-	logger.Info("hello world")
-	slog.With("key", getUntrustedData()).Info("hello world") // $ hasValueFlow="call to getUntrustedData"
-}
-
-func testWithGroup(logger *slog.Logger) {
-	grouped := logger.WithGroup(getUntrustedString()) // $ hasValueFlow="call to getUntrustedString"
-	grouped.Info("hello world")
-}
-
-// Summary models: functions relating to Attr/Value that propagate strings.
-
-func testAttrConstructors(logger *slog.Logger) {
-	logger.Info("msg", slog.Group("group", slog.String("key", getUntrustedString())))      // $ hasTaintFlow="call to Group"
-	logger.Info("msg", slog.GroupAttrs("group", slog.String("key", getUntrustedString()))) // $ hasTaintFlow="call to GroupAttrs"
-}
-
-func testValueConstructors(logger *slog.Logger) {
-	logger.Info("msg", "key", slog.AnyValue(getUntrustedString()))    // $ hasTaintFlow="call to AnyValue"
-	logger.Info("msg", "key", slog.StringValue(getUntrustedString())) // $ hasTaintFlow="call to StringValue"
-	attr := slog.String("key", getUntrustedString())
-	logger.Info("msg", "key", slog.GroupValue(attr)) // $ hasTaintFlow="call to GroupValue"
-}
-
-func testAttrAndValueAccessors(logger *slog.Logger) {
-	attr := slog.String("key", getUntrustedString())
-	logger.Info("msg", "key", attr.String()) // $ hasTaintFlow="call to String"
-
-	v := slog.AnyValue(getUntrustedString())
-	logger.Info("msg", "key", v.Any())    // $ hasTaintFlow="call to Any"
-	logger.Info("msg", "key", v.String()) // $ hasTaintFlow="call to String"
-
-	group := slog.GroupValue(slog.String("key", getUntrustedString()))
-	logger.Info("msg", group.Group()[0]) // $ hasTaintFlow="index expression"
-}

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.addressing.metadata.model.yml

@@ -0,0 +1,23 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.addressing.metadata", "InterfaceName", True, "InterfaceName", "(QName)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.metadata.InterfaceName.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing.metadata", "InterfaceName", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.addressing.metadata.InterfaceName.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing.metadata", "InterfaceName", True, "setName", "(QName)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.metadata.InterfaceName.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing.metadata", "ServiceName", True, "ServiceName", "(QName)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.metadata.ServiceName.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing.metadata", "ServiceName", True, "ServiceName", "(QName,String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.metadata.ServiceName.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing.metadata", "ServiceName", True, "ServiceName", "(QName,String)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.addressing.metadata.ServiceName.endpointName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing.metadata", "ServiceName", True, "getEndpointName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.addressing.metadata.ServiceName.endpointName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing.metadata", "ServiceName", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.addressing.metadata.ServiceName.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing.metadata", "ServiceName", True, "setEndpointName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.metadata.ServiceName.endpointName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing.metadata", "ServiceName", True, "setName", "(QName)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.metadata.ServiceName.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing.metadata", "WSDLLocation", True, "WSDLLocation", "(String,String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.metadata.WSDLLocation.targetNamespace]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing.metadata", "WSDLLocation", True, "WSDLLocation", "(String,String)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.addressing.metadata.WSDLLocation.wsdlURL]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing.metadata", "WSDLLocation", True, "getLocation", "()", "", "Argument[this].SyntheticField[org.apache.axis2.addressing.metadata.WSDLLocation.wsdlURL]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing.metadata", "WSDLLocation", True, "getTargetNamespace", "()", "", "Argument[this].SyntheticField[org.apache.axis2.addressing.metadata.WSDLLocation.targetNamespace]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing.metadata", "WSDLLocation", True, "setLocation", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.metadata.WSDLLocation.wsdlURL]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing.metadata", "WSDLLocation", True, "setTargetNamespace", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.metadata.WSDLLocation.targetNamespace]", "value", "dfc-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.addressing.model.yml

@@ -0,0 +1,55 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sinkModel
+    data:
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReferenceHelper", True, "fromString", "(String)", "", "Argument[0]", "xxe", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.addressing", "AddressingHelper", True, "getRequestAddressingRequirementParameterValue", "(MessageContext)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "EndpointReference", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.address]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "addAttribute", "(OMAttribute)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.attributes].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "addExtensibleElement", "(OMElement)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.extensibleElements].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "addMetaData", "(OMNode)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.metaData].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "addReferenceParameter", "(OMElement)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.referenceParameters].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "getAddress", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "getAddress", "()", "", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.address]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "getAddressAttributes", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "getAddressAttributes", "()", "", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.addressAttributes]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "getAllReferenceParameters", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "getAllReferenceParameters", "()", "", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.referenceParameters]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "getAttributes", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "getAttributes", "()", "", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.attributes]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "getExtensibleElements", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "getExtensibleElements", "()", "", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.extensibleElements]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "getLogCorrelationIDString", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "getMetaData", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "getMetaData", "()", "", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.metaData]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "getMetadataAttributes", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "getMetadataAttributes", "()", "", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.metaDataAttributes]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "getName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "setAddress", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.address]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "setAddressAttributes", "(ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.addressAttributes]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "setExtensibleElements", "(ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.extensibleElements]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "setMetadataAttributes", "(ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.metaDataAttributes]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "setName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "setReferenceParameters", "(Map)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.EndpointReference.referenceParameters]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "EndpointReference", True, "writeExternal", "(ObjectOutput)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.addressing", "RelatesTo", True, "RelatesTo", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.RelatesTo.value]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "RelatesTo", True, "RelatesTo", "(String,String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.RelatesTo.value]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "RelatesTo", True, "RelatesTo", "(String,String)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.addressing.RelatesTo.relationshipType]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "RelatesTo", True, "getExtensibilityAttributes", "()", "", "Argument[this].SyntheticField[org.apache.axis2.addressing.RelatesTo.extensibilityAttributes]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "RelatesTo", True, "getRelationshipType", "()", "", "Argument[this].SyntheticField[org.apache.axis2.addressing.RelatesTo.relationshipType]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "RelatesTo", True, "getValue", "()", "", "Argument[this].SyntheticField[org.apache.axis2.addressing.RelatesTo.value]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "RelatesTo", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.addressing", "RelatesTo", True, "setExtensibilityAttributes", "(ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.RelatesTo.extensibilityAttributes]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "RelatesTo", True, "setRelationshipType", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.RelatesTo.relationshipType]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "RelatesTo", True, "setValue", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.addressing.RelatesTo.value]", "value", "dfc-generated"]
+      - ["org.apache.axis2.addressing", "RelatesTo", True, "writeExternal", "(ObjectOutput)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.addressing.wsdl.model.yml

@@ -0,0 +1,19 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.addressing.wsdl", "WSDL11ActionHelper", True, "getFaultActionFromStringInformation", "(String,String,String,String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing.wsdl", "WSDL11ActionHelper", True, "getFaultActionFromStringInformation", "(String,String,String,String)", "", "Argument[1]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing.wsdl", "WSDL11ActionHelper", True, "getFaultActionFromStringInformation", "(String,String,String,String)", "", "Argument[2]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing.wsdl", "WSDL11ActionHelper", True, "getFaultActionFromStringInformation", "(String,String,String,String)", "", "Argument[3]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing.wsdl", "WSDL11ActionHelper", True, "getInputActionFromStringInformation", "(String,String,String,String,String)", "", "Argument[1]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing.wsdl", "WSDL11ActionHelper", True, "getInputActionFromStringInformation", "(String,String,String,String,String)", "", "Argument[2]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing.wsdl", "WSDL11ActionHelper", True, "getInputActionFromStringInformation", "(String,String,String,String,String)", "", "Argument[3]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing.wsdl", "WSDL11ActionHelper", True, "getInputActionFromStringInformation", "(String,String,String,String,String)", "", "Argument[4]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing.wsdl", "WSDL11ActionHelper", True, "getOutputActionFromStringInformation", "(String,String,String,String,String)", "", "Argument[1]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing.wsdl", "WSDL11ActionHelper", True, "getOutputActionFromStringInformation", "(String,String,String,String,String)", "", "Argument[2]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing.wsdl", "WSDL11ActionHelper", True, "getOutputActionFromStringInformation", "(String,String,String,String,String)", "", "Argument[3]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.addressing.wsdl", "WSDL11ActionHelper", True, "getOutputActionFromStringInformation", "(String,String,String,String,String)", "", "Argument[4]", "ReturnValue", "taint", "dfc-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.builder.model.yml

@@ -0,0 +1,47 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sourceModel
+    data:
+      - ["org.apache.axis2.builder", "ApplicationXMLBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "ApplicationXMLBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "ReturnValue", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "Builder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "Builder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[1]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "Builder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[2]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "Builder", True, "processDocument", "(InputStream,String,MessageContext)", "", "ReturnValue", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "DataSourceBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "DataSourceBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[1]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "DataSourceBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[2]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "MIMEAwareBuilder", True, "processMIMEMessage", "(Attachments,String,MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "MIMEAwareBuilder", True, "processMIMEMessage", "(Attachments,String,MessageContext)", "", "Parameter[1]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "MIMEAwareBuilder", True, "processMIMEMessage", "(Attachments,String,MessageContext)", "", "Parameter[2]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "MIMEBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "MIMEBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[1]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "MTOMBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "MTOMBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[1]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "MTOMBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[2]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "MTOMBuilder", True, "processMIMEMessage", "(Attachments,String,MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "MTOMBuilder", True, "processMIMEMessage", "(Attachments,String,MessageContext)", "", "Parameter[1]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "MTOMBuilder", True, "processMIMEMessage", "(Attachments,String,MessageContext)", "", "Parameter[2]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "MultipartFormDataBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "MultipartFormDataBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[1]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "MultipartFormDataBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[2]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "MultipartFormDataBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "ReturnValue", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "XFormURLEncodedBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "XFormURLEncodedBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[1]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder", "XFormURLEncodedBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[2]", "remote", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.builder", "BuilderUtil", True, "getBuilderFromSelector", "(String,MessageContext)", "", "Argument[0]", "Argument[1].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.builder", "BuilderUtil", True, "getCharSetEncoding", "(PushbackInputStream,String)", "", "Argument[1]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.builder", "BuilderUtil", True, "getCharSetEncoding", "(String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.builder", "BuilderUtil", True, "getPushbackInputStream", "(InputStream)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.builder", "BuilderUtil", True, "getReader", "(InputStream,String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.builder", "DataSourceBuilder$ByteArrayDataSourceEx", True, "ByteArrayDataSourceEx", "(byte[],String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.builder.DataSourceBuilder$ByteArrayDataSourceEx.bytes]", "value", "dfc-generated"]
+      - ["org.apache.axis2.builder", "DataSourceBuilder$ByteArrayDataSourceEx", True, "serialize", "(OutputStream,OMOutputFormat)", "", "Argument[this].SyntheticField[org.apache.axis2.builder.DataSourceBuilder$ByteArrayDataSourceEx.bytes]", "Argument[0]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.builder", "MTOMBuilder", True, "processMIMEMessage", "(Attachments,String,MessageContext)", "", "Argument[0]", "Argument[2].Field[org.apache.axis2.context.MessageContext.attachments]", "value", "dfc-generated"]
+      - ["org.apache.axis2.builder", "SOAPBuilder", True, "processMIMEMessage", "(Attachments,String,MessageContext)", "", "Argument[0]", "Argument[2].Field[org.apache.axis2.context.MessageContext.attachments]", "value", "dfc-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.builder.unknowncontent.model.yml

@@ -0,0 +1,19 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sourceModel
+    data:
+      - ["org.apache.axis2.builder.unknowncontent", "UnknownContentBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder.unknowncontent", "UnknownContentBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[1]", "remote", "ai-generated"]
+      - ["org.apache.axis2.builder.unknowncontent", "UnknownContentBuilder", True, "processDocument", "(InputStream,String,MessageContext)", "", "Parameter[2]", "remote", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.builder.unknowncontent", "InputStreamDataSource", True, "InputStreamDataSource", "(InputStream)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.builder.unknowncontent", "InputStreamDataSource", True, "getContentType", "()", "", "Argument[this].SyntheticField[org.apache.axis2.builder.unknowncontent.InputStreamDataSource.type]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.builder.unknowncontent", "InputStreamDataSource", True, "setType", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.builder.unknowncontent.InputStreamDataSource.type]", "value", "dfc-generated"]
+      - ["org.apache.axis2.builder.unknowncontent", "UnknownContentOMDataSource", True, "UnknownContentOMDataSource", "(DataHandler)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.builder.unknowncontent.UnknownContentOMDataSource.genericContent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.builder.unknowncontent", "UnknownContentOMDataSource", True, "getContent", "()", "", "Argument[this].SyntheticField[org.apache.axis2.builder.unknowncontent.UnknownContentOMDataSource.genericContent]", "ReturnValue", "value", "dfc-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.classloader.model.yml

@@ -0,0 +1,23 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.classloader", "BeanInfoCache", False, "getBeanInfo", "(Class,Class)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.classloader", "BeanInfoCachingClassLoader", True, "getBeanInfoCache", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.classloader", "MultiParentClassLoader", True, "MultiParentClassLoader", "(MultiParentClassLoader)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.classloader", "MultiParentClassLoader", True, "MultiParentClassLoader", "(URL[],ClassLoader)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.classloader.MultiParentClassLoader.parents].ArrayElement", "value", "dfc-generated"]
+      - ["org.apache.axis2.classloader", "MultiParentClassLoader", True, "MultiParentClassLoader", "(URL[],ClassLoader,URLStreamHandlerFactory)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.classloader.MultiParentClassLoader.parents].ArrayElement", "value", "dfc-generated"]
+      - ["org.apache.axis2.classloader", "MultiParentClassLoader", True, "MultiParentClassLoader", "(URL[],ClassLoader,boolean,String[],String[])", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.classloader.MultiParentClassLoader.parents].ArrayElement", "value", "dfc-generated"]
+      - ["org.apache.axis2.classloader", "MultiParentClassLoader", True, "MultiParentClassLoader", "(URL[],ClassLoader[])", "", "Argument[1].ArrayElement", "Argument[this].SyntheticField[org.apache.axis2.classloader.MultiParentClassLoader.parents].ArrayElement", "value", "dfc-generated"]
+      - ["org.apache.axis2.classloader", "MultiParentClassLoader", True, "MultiParentClassLoader", "(URL[],ClassLoader[],URLStreamHandlerFactory)", "", "Argument[1].ArrayElement", "Argument[this].SyntheticField[org.apache.axis2.classloader.MultiParentClassLoader.parents].ArrayElement", "value", "dfc-generated"]
+      - ["org.apache.axis2.classloader", "MultiParentClassLoader", True, "MultiParentClassLoader", "(URL[],ClassLoader[],boolean,Collection,Collection)", "", "Argument[1].ArrayElement", "Argument[this].SyntheticField[org.apache.axis2.classloader.MultiParentClassLoader.parents].ArrayElement", "value", "dfc-generated"]
+      - ["org.apache.axis2.classloader", "MultiParentClassLoader", True, "MultiParentClassLoader", "(URL[],ClassLoader[],boolean,String[],String[])", "", "Argument[1].ArrayElement", "Argument[this].SyntheticField[org.apache.axis2.classloader.MultiParentClassLoader.parents].ArrayElement", "value", "dfc-generated"]
+      - ["org.apache.axis2.classloader", "MultiParentClassLoader", True, "findResources", "(String)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.classloader", "MultiParentClassLoader", True, "getParents", "()", "", "Argument[this].SyntheticField[org.apache.axis2.classloader.MultiParentClassLoader.parents]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.classloader", "ThreadContextDescriptor", True, "getOldClassLoader", "()", "", "Argument[this].SyntheticField[org.apache.axis2.classloader.ThreadContextDescriptor.oldClassLoader]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.classloader", "ThreadContextDescriptor", True, "getOldMessageContext", "()", "", "Argument[this].SyntheticField[org.apache.axis2.classloader.ThreadContextDescriptor.oldMessageContext]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.classloader", "ThreadContextDescriptor", True, "setOldClassLoader", "(ClassLoader)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.classloader.ThreadContextDescriptor.oldClassLoader]", "value", "dfc-generated"]
+      - ["org.apache.axis2.classloader", "ThreadContextDescriptor", True, "setOldMessageContext", "(MessageContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.classloader.ThreadContextDescriptor.oldMessageContext]", "value", "dfc-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.client.async.model.yml

@@ -0,0 +1,16 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sourceModel
+    data:
+      - ["org.apache.axis2.client.async", "AxisCallback", True, "onFault", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.client.async", "AxisCallback", True, "onMessage", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: neutralModel
+    data:
+      - ["org.apache.axis2.client.async", "AxisCallback", "onError", "(Exception)", "summary", "ai-generated"]
+      - ["org.apache.axis2.client.async", "AxisCallback", "onFault", "(MessageContext)", "summary", "ai-generated"]
+      - ["org.apache.axis2.client.async", "AxisCallback", "onMessage", "(MessageContext)", "summary", "ai-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.client.model.yml

@@ -0,0 +1,106 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sinkModel
+    data:
+      - ["org.apache.axis2.client", "Options", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "ServiceClient", "(ConfigurationContext,URL,QName,String)", "", "Argument[1]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "fireAndForget", "(OMElement)", "", "Argument[this]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "fireAndForget", "(QName,OMElement)", "", "Argument[this]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "sendReceive", "(OMElement)", "", "Argument[this]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "sendReceive", "(QName,OMElement)", "", "Argument[this]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "sendReceiveNonBlocking", "(OMElement,AxisCallback)", "", "Argument[this]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "sendReceiveNonBlocking", "(QName,OMElement,AxisCallback)", "", "Argument[this]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "sendRobust", "(OMElement)", "", "Argument[this]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "sendRobust", "(QName,OMElement)", "", "Argument[this]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.client", "Stub", True, "addHttpHeader", "(MessageContext,String,String)", "", "Argument[1]", "response-splitting", "ai-generated"]
+      - ["org.apache.axis2.client", "Stub", True, "addHttpHeader", "(MessageContext,String,String)", "", "Argument[2]", "response-splitting", "ai-generated"]
+      - ["org.apache.axis2.client", "Stub", True, "setServiceClientEPR", "(String)", "", "Argument[0]", "request-forgery", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sourceModel
+    data:
+      - ["org.apache.axis2.client", "ServiceClient", True, "ServiceClient", "(ConfigurationContext,URL,QName,String)", "", "Argument[this]", "remote", "ai-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "setTargetEPR", "(EndpointReference)", "", "Argument[this]", "remote", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.client", "FaultMapKey", True, "FaultMapKey", "(QName,String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "FaultMapKey", True, "FaultMapKey", "(QName,String)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "OperationClient", True, "addMessageContext", "(MessageContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "OperationClient", True, "addMessageContext", "(MessageContext)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "OperationClient", True, "getMessageContext", "(String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "OperationClient", True, "getOperationContext", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "OperationClient", True, "getOptions", "()", "", "Argument[this].SyntheticField[org.apache.axis2.client.OperationClient.options]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "OperationClient", True, "setCallback", "(AxisCallback)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "OperationClient", True, "setOptions", "(Options)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.client.OperationClient.options]", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "Options", True, "Options", "(Options)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.client.Options.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "Options", True, "activate", "(ConfigurationContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "addRelatesTo", "(RelatesTo)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.client.Options.relationships].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getAction", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getFaultTo", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getFrom", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getListener", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getLogCorrelationIDString", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getMessageId", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getParent", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getParent", "()", "", "Argument[this].SyntheticField[org.apache.axis2.client.Options.parent]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getPassword", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getProperties", "()", "", "Argument[this].SyntheticField[org.apache.axis2.client.Options.properties].MapKey", "ReturnValue.MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getProperties", "()", "", "Argument[this].SyntheticField[org.apache.axis2.client.Options.properties].MapValue", "ReturnValue.MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getProperty", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.client.Options.properties].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getRelatesTo", "()", "", "Argument[this].SyntheticField[org.apache.axis2.client.Options.relationships].Element", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getRelatesTo", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.client.Options.relationships].Element", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getRelationships", "()", "", "Argument[this].SyntheticField[org.apache.axis2.client.Options.relationships].Element", "ReturnValue.ArrayElement", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getReplyTo", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getSoapVersionURI", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getTo", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getTransportIn", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getTransportInProtocol", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getTransportOut", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "getUserName", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setAction", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setFaultTo", "(EndpointReference)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setFrom", "(EndpointReference)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setListener", "(TransportListener)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setMessageId", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setParent", "(Options)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.client.Options.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setPassword", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setProperties", "(Map)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.client.Options.properties]", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setProperty", "(String,Object)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.client.Options.properties].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setProperty", "(String,Object)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.client.Options.properties].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setRelationships", "(RelatesTo[])", "", "Argument[0].ArrayElement", "Argument[this].SyntheticField[org.apache.axis2.client.Options.relationships].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setReplyTo", "(EndpointReference)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setSenderTransport", "(String,AxisConfiguration)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setSoapVersionURI", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setTo", "(EndpointReference)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setTransportIn", "(TransportInDescription)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setTransportInProtocol", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setTransportOut", "(TransportOutDescription)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "setUserName", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "Options", True, "writeExternal", "(ObjectOutput)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "ServiceClient", "(ConfigurationContext,AxisService)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.client.ServiceClient.axisService]", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "ServiceClient", "(ConfigurationContext,Definition,QName,String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "ServiceClient", "(ConfigurationContext,URL,QName,String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "addHeader", "(OMElement)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "addHeader", "(SOAPHeaderBlock)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "createClient", "(QName)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "getAxisConfiguration", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "getAxisService", "()", "", "Argument[this].SyntheticField[org.apache.axis2.client.ServiceClient.axisService]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "getLastOperationContext", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "getOptions", "()", "", "Argument[this].SyntheticField[org.apache.axis2.client.ServiceClient.options]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "getOverrideOptions", "()", "", "Argument[this].SyntheticField[org.apache.axis2.client.ServiceClient.overrideOptions]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "getServiceContext", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "getTargetEPR", "()", "", "Argument[this].SyntheticField[org.apache.axis2.client.ServiceClient.serviceContext].SyntheticField[org.apache.axis2.context.ServiceContext.targetEPR]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "setAxisService", "(AxisService)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.client.ServiceClient.axisService]", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "setOptions", "(Options)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.client.ServiceClient.options]", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "setOverrideOptions", "(Options)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.client.ServiceClient.overrideOptions]", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "ServiceClient", True, "setTargetEPR", "(EndpointReference)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.client.ServiceClient.serviceContext].SyntheticField[org.apache.axis2.context.ServiceContext.targetEPR]", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "Stub", True, "_getServiceClient", "()", "", "Argument[this].SyntheticField[org.apache.axis2.client.Stub._serviceClient]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "Stub", True, "_setServiceClient", "(ServiceClient)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.client.Stub._serviceClient]", "value", "dfc-generated"]
+      - ["org.apache.axis2.client", "WSDLBasedPolicyProcessor", True, "WSDLBasedPolicyProcessor", "(ConfigurationContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.client", "WSDLBasedPolicyProcessor", True, "configureOperationPolices", "(AxisOperation)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.context.externalize.model.yml

@@ -0,0 +1,57 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sinkModel
+    data:
+      - ["org.apache.axis2.context.externalize", "DebugObjectInput", True, "readObject", "()", "", "Argument[this]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.context.externalize", "DebugObjectInput", True, "trace", "(String)", "", "Argument[0]", "log-injection", "ai-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectInputStream", True, "readArrayList", "()", "", "Argument[this]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectInputStream", True, "readHashMap", "()", "", "Argument[this]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectInputStream", True, "readLinkedList", "()", "", "Argument[this]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectInputStream", True, "readList", "(List)", "", "Argument[this]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectInputStream", True, "readMap", "(Map)", "", "Argument[this]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectInputStream", True, "readObject", "()", "", "Argument[this]", "unsafe-deserialization", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.context.externalize", "ActivateUtils", True, "findHandler", "(List,MetaDataEntry)", "", "Argument[0].Element", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "ActivateUtils", True, "findMessage", "(AxisOperation,String,String)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context.externalize", "ActivateUtils", True, "findOperation", "(AxisConfiguration,String,QName)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context.externalize", "ActivateUtils", True, "findOperation", "(AxisService,String,QName)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context.externalize", "ActivateUtils", True, "findService", "(AxisConfiguration,String,String)", "", "Argument[0].SyntheticField[org.apache.axis2.engine.AxisConfiguration.allServices].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "ActivateUtils", True, "findService", "(AxisConfiguration,String,String,String)", "", "Argument[0].SyntheticField[org.apache.axis2.engine.AxisConfiguration.allServices].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "ActivateUtils", True, "findServiceGroup", "(AxisConfiguration,String,String)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context.externalize", "ActivateUtils", True, "findTransportListener", "(AxisConfiguration,String)", "", "Argument[0].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transportsIn].MapValue", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "DebugObjectInput", True, "DebugObjectInput", "(ObjectInput)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context.externalize", "DebugObjectOutputStream", True, "write", "(byte[])", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context.externalize", "DebugObjectOutputStream", True, "write", "(byte[],int,int)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context.externalize", "DebugObjectOutputStream", True, "writeBytes", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context.externalize", "DebugObjectOutputStream", True, "writeChars", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context.externalize", "DebugObjectOutputStream", True, "writeObject", "(Object)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context.externalize", "DebugObjectOutputStream", True, "writeUTF", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context.externalize", "ObjectInputStreamWithCL", True, "ObjectInputStreamWithCL", "(InputStream)", "", "Argument[0]", "Argument[this]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "ObjectInputStreamWithCL", True, "ObjectInputStreamWithCL", "(InputStream,ClassLoader)", "", "Argument[0]", "Argument[this]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "ObjectInputStreamWithCL", True, "ObjectInputStreamWithCL", "(InputStream,ObjectInputStreamWithCL$ClassResolver)", "", "Argument[0]", "Argument[this]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectInputStream", True, "install", "(ObjectInput)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectInputStream", True, "readArrayList", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectInputStream", True, "readHashMap", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectInputStream", True, "readLinkedList", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectInputStream", True, "readList", "(List)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectInputStream", True, "readMap", "(Map)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectOutputStream", True, "install", "(ObjectOutput)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectOutputStream", True, "install", "(ObjectOutput)", "", "Argument[0]", "ReturnValue.SyntheticField[org.apache.axis2.context.externalize.SafeObjectOutputStream.out]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectOutputStream", True, "putFields", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.externalize.SafeObjectOutputStream.out]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectOutputStream", True, "write", "(byte[])", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.externalize.SafeObjectOutputStream.out]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectOutputStream", True, "write", "(byte[],int,int)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.externalize.SafeObjectOutputStream.out]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectOutputStream", True, "writeBytes", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.externalize.SafeObjectOutputStream.out]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectOutputStream", True, "writeChars", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.externalize.SafeObjectOutputStream.out]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectOutputStream", True, "writeItem", "(Object,boolean)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.externalize.SafeObjectOutputStream.out]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectOutputStream", True, "writeList", "(List)", "", "Argument[0].Element", "Argument[this].SyntheticField[org.apache.axis2.context.externalize.SafeObjectOutputStream.out]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectOutputStream", True, "writeMap", "(Map)", "", "Argument[0].Element", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectOutputStream", True, "writeObject", "(Object)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.externalize.SafeObjectOutputStream.out]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectOutputStream", True, "writePair", "(Object,boolean,Object,boolean)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.externalize.SafeObjectOutputStream.out]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectOutputStream", True, "writePair", "(Object,boolean,Object,boolean)", "", "Argument[2]", "Argument[this].SyntheticField[org.apache.axis2.context.externalize.SafeObjectOutputStream.out]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context.externalize", "SafeObjectOutputStream", True, "writeUTF", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.externalize.SafeObjectOutputStream.out]", "taint", "dfc-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.context.model.yml

@@ -0,0 +1,293 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sinkModel
+    data:
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getRealPath", "(String)", "", "Argument[0]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContextFactory", True, "createConfigurationContextFromFileSystem", "(String)", "", "Argument[0]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContextFactory", True, "createConfigurationContextFromFileSystem", "(String,String)", "", "Argument[0]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContextFactory", True, "createConfigurationContextFromFileSystem", "(String,String)", "", "Argument[1]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContextFactory", True, "createConfigurationContextFromURIs", "(URL,URL)", "", "Argument[0]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContextFactory", True, "createConfigurationContextFromURIs", "(URL,URL)", "", "Argument[1]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.context", "SelfManagedDataManager", True, "deserializeSelfManagedData", "(ByteArrayInputStream,MessageContext)", "", "Argument[0]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.context", "SessionContext", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "unsafe-deserialization", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sourceModel
+    data:
+      - ["org.apache.axis2.context", "MessageContext", True, "getCurrentMessageContext", "()", "", "ReturnValue", "remote", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.context", "AbstractContext", True, "getLocalProperty", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "AbstractContext", True, "getParent", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.parent]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "AbstractContext", True, "getProperties", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.properties]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "AbstractContext", True, "getProperty", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "AbstractContext", True, "getPropertyNames", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapKey", "ReturnValue.Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "AbstractContext", True, "getPropertyNonReplicable", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "AbstractContext", True, "getRootContext", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "AbstractContext", True, "getRootContext", "()", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "AbstractContext", True, "mergeProperties", "(Map)", "", "Argument[0].MapKey", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "AbstractContext", True, "mergeProperties", "(Map)", "", "Argument[0].MapValue", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "AbstractContext", True, "setNonReplicableProperty", "(String,Object)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "AbstractContext", True, "setNonReplicableProperty", "(String,Object)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "AbstractContext", True, "setParent", "(AbstractContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "AbstractContext", True, "setProperties", "(Map)", "", "Argument[0].MapKey", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "AbstractContext", True, "setProperties", "(Map)", "", "Argument[0].MapValue", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "AbstractContext", True, "setProperty", "(String,Object)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "AbstractContext", True, "setProperty", "(String,Object)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "ConfigurationContext", "(AxisConfiguration)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.axisConfiguration]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "addContextListener", "(ContextListener)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "addServiceGroupContextIntoApplicationScopeTable", "(ServiceGroupContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "addServiceGroupContextIntoSoapSessionTable", "(ServiceGroupContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.serviceGroupContextMap].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "addServiceGroupContextIntoSoapSessionTable", "(ServiceGroupContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.serviceGroupContextMap].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "addServiceGroupContextIntoSoapSessionTable", "(ServiceGroupContext)", "", "Argument[0].SyntheticField[org.apache.axis2.context.ServiceGroupContext.id]", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.serviceGroupContextMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "addServiceGroupContextIntoSoapSessionTable", "(ServiceGroupContext)", "", "Argument[this]", "Argument[0].SyntheticField[org.apache.axis2.context.AbstractContext.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "createMessageContext", "()", "", "Argument[this]", "ReturnValue.SyntheticField[org.apache.axis2.context.MessageContext.configurationContext]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "createServiceGroupContext", "(AxisServiceGroup)", "", "Argument[0]", "ReturnValue.SyntheticField[org.apache.axis2.context.ServiceGroupContext.axisServiceGroup]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "createServiceGroupContext", "(AxisServiceGroup)", "", "Argument[0]", "ReturnValue.SyntheticField[org.apache.axis2.context.ServiceGroupContext.id]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "createServiceGroupContext", "(AxisServiceGroup)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisServiceGroup.serviceGroupName]", "ReturnValue.SyntheticField[org.apache.axis2.context.ServiceGroupContext.id]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "createServiceGroupContext", "(AxisServiceGroup)", "", "Argument[this]", "ReturnValue.SyntheticField[org.apache.axis2.context.AbstractContext.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "deployService", "(AxisService)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "fillServiceContextAndServiceGroupContext", "(MessageContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "fillServiceContextAndServiceGroupContext", "(MessageContext)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "findOperationContext", "(String,String,String)", "", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.operationContextMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getAxisConfiguration", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getAxisConfiguration", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.axisConfiguration]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getContextRoot", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getContextRoot", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.contextRoot]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getListenerManager", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getListenerManager", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.listenerManager]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getOperationContext", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.operationContextMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getRealPath", "(String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getRealPath", "(String)", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getRealPath", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.axisConfiguration]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getRealPath", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.axisConfiguration].SyntheticField[org.apache.axis2.engine.AxisConfiguration.axis2Repository]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getServiceContextPath", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getServiceGroupContext", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.serviceGroupContextMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getServiceGroupContext", "(String,boolean)", "", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.serviceGroupContextMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getServiceGroupContextFromSoapSessionTable", "(String,MessageContext)", "", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.serviceGroupContextMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getServiceGroupContextIDs", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.serviceGroupContextMap].MapKey", "ReturnValue.ArrayElement", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getServicePath", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getServicePath", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.servicePath]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getThreadPool", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "getThreadPool", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.threadPool]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "registerOperationContext", "(String,OperationContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.operationContextMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "registerOperationContext", "(String,OperationContext)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.operationContextMap].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "registerOperationContext", "(String,OperationContext,boolean)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.operationContextMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "registerOperationContext", "(String,OperationContext,boolean)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.operationContextMap].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "setAxisConfiguration", "(AxisConfiguration)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.axisConfiguration]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "setContextRoot", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.contextRoot]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "setServicePath", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.servicePath]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "setThreadPool", "(ThreadFactory)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.threadPool]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContext", True, "setTransportManager", "(ListenerManager)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.ConfigurationContext.listenerManager]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContextFactory", True, "createConfigurationContext", "(AxisConfigurator)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContextFactory", True, "createConfigurationContextFromFileSystem", "(String)", "", "Argument[0]", "ReturnValue.SyntheticField[org.apache.axis2.context.ConfigurationContext.axisConfiguration].SyntheticField[org.apache.axis2.engine.AxisConfiguration.axis2Repository]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContextFactory", True, "createConfigurationContextFromFileSystem", "(String,String)", "", "Argument[0]", "ReturnValue.SyntheticField[org.apache.axis2.context.ConfigurationContext.axisConfiguration].SyntheticField[org.apache.axis2.engine.AxisConfiguration.axis2Repository]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ConfigurationContextFactory", True, "createConfigurationContextFromURIs", "(URL,URL)", "", "Argument[1]", "ReturnValue.SyntheticField[org.apache.axis2.context.ConfigurationContext.axisConfiguration].SyntheticField[org.apache.axis2.engine.AxisConfiguration.axis2Repository]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "activate", "(ConfigurationContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "activateWithOperationContext", "(OperationContext)", "", "Argument[this]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.executedPhases]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "addExecutedPhase", "(Handler)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.executedPhases].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "extractCopyMessageContext", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "findEndpoint", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getAttachmentMap", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getAttachmentMap", "()", "", "Argument[this].Field[org.apache.axis2.context.MessageContext.attachments]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getAttachmentMap", "(boolean)", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getAttachmentMap", "(boolean)", "", "Argument[this].Field[org.apache.axis2.context.MessageContext.attachments]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getAxisMessage", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getAxisMessage", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.axisMessage]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getAxisOperation", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getAxisOperation", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.axisOperation]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getAxisService", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getAxisService", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.axisService]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getAxisServiceGroup", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getAxisServiceGroup", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.axisServiceGroup]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getConfigurationContext", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getConfigurationContext", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.configurationContext]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getEffectivePolicy", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getEffectivePolicy", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.axisMessage]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getEnvelope", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getEnvelope", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.envelope]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getExecutedPhases", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.executedPhases].Element", "ReturnValue.Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getExecutionChain", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getExecutionChain", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.executionChain]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getFailureReason", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getFailureReason", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.failureReason]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getFaultTo", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getFrom", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getIncomingTransportName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getIncomingTransportName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.incomingTransportName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getLocalProperty", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getLocalProperty", "(String,boolean)", "", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getLogCorrelationID", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getLogIDString", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getMessageID", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getModuleParameter", "(String,String,HandlerDescription)", "", "Argument[2]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getModuleParameter", "(String,String,HandlerDescription)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getOperationContext", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getOptions", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getOptions", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.options]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getParameter", "(String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getProperty", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getRelatesTo", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getRelatesTo", "(String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getRelationships", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getReplyTo", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getRootContext", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.configurationContext]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getSelfManagedData", "(Class,Object)", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.selfManagedDataMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getServiceContext", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getServiceContextID", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getServiceContextID", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.serviceContextID]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getServiceGroupContext", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getServiceGroupContext", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.serviceGroupContext]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getServiceGroupContextId", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getServiceGroupContextId", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.serviceGroupContextId]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getSessionContext", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getSessionContext", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.sessionContext]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getSoapAction", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getTo", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getTransportIn", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getTransportIn", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.transportIn]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getTransportOut", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getTransportOut", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.transportOut]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "getWSAAction", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setAttachmentMap", "(Attachments)", "", "Argument[0]", "Argument[this].Field[org.apache.axis2.context.MessageContext.attachments]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setAxisMessage", "(AxisMessage)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.axisMessage]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setAxisOperation", "(AxisOperation)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.axisOperation]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setAxisService", "(AxisService)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.axisServiceGroup]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setAxisService", "(AxisService)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.axisService]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setAxisService", "(AxisService)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisDescription.parent]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.axisServiceGroup]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setAxisServiceGroup", "(AxisServiceGroup)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.axisServiceGroup]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setConfigurationContext", "(ConfigurationContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.configurationContext]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setEnvelope", "(SOAPEnvelope)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.envelope]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setExecutedPhasesExplicit", "(LinkedList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.executedPhases]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setExecutionChain", "(ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.executionChain]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setFailureReason", "(Exception)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.failureReason]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setFaultTo", "(EndpointReference)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setFrom", "(EndpointReference)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setIncomingTransportName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.incomingTransportName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setMessageID", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setOperationContext", "(OperationContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setOptions", "(Options)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setOptionsExplicit", "(Options)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.options]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setReplyTo", "(EndpointReference)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setSelfManagedData", "(Class,Object,Object)", "", "Argument[2]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.selfManagedDataMap].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setSelfManagedDataMapExplicit", "(LinkedHashMap)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.selfManagedDataMap]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setServiceContext", "(ServiceContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setServiceContextID", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.serviceContextID]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setServiceGroupContext", "(ServiceGroupContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.axisServiceGroup]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setServiceGroupContext", "(ServiceGroupContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.serviceGroupContext]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setServiceGroupContext", "(ServiceGroupContext)", "", "Argument[0].SyntheticField[org.apache.axis2.context.ServiceGroupContext.axisServiceGroup]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.axisServiceGroup]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setServiceGroupContextId", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.serviceGroupContextId]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setSessionContext", "(SessionContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.sessionContext]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setSoapAction", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setTo", "(EndpointReference)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setTransportIn", "(TransportInDescription)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.transportIn]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setTransportOut", "(TransportOutDescription)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.MessageContext.transportOut]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setWSAAction", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "setWSAMessageId", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "MessageContext", True, "writeExternal", "(ObjectOutput)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "NamedValue", True, "NamedValue", "(String,String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.NamedValue.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "NamedValue", True, "NamedValue", "(String,String)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.context.NamedValue.value]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "NamedValue", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.NamedValue.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "NamedValue", True, "getValue", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.NamedValue.value]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "OperationContext", "(AxisOperation,ServiceContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.OperationContext.axisOperation]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "OperationContext", "(AxisOperation,ServiceContext)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "activate", "(ConfigurationContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "activate", "(ConfigurationContext)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "addMessageContext", "(MessageContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.OperationContext.messageContexts].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "getAxisOperation", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "getAxisOperation", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.OperationContext.axisOperation]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "getConfigurationContext", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "getConfigurationContext", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.parent]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "getLogCorrelationIDString", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "getMessageContext", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.context.OperationContext.messageContexts].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "getMessageContexts", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "getMessageContexts", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.OperationContext.messageContexts]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "getOperationName", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "getRootContext", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.parent]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "getServiceContext", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "getServiceContext", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.parent]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "getServiceGroupName", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "getServiceName", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "isolateMessageContext", "(MessageContext)", "", "Argument[this].SyntheticField[org.apache.axis2.context.OperationContext.messageContexts].MapKey", "Argument[this].SyntheticField[org.apache.axis2.context.OperationContext.metaMessageContextMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "restoreMessageContext", "(MessageContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.OperationContext.messageContexts].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "restoreMessageContext", "(MessageContext)", "", "Argument[this].SyntheticField[org.apache.axis2.context.OperationContext.metaMessageContextMap].MapValue", "Argument[this].SyntheticField[org.apache.axis2.context.OperationContext.messageContexts].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "setKey", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "OperationContext", True, "writeExternal", "(ObjectOutput)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "OperationContextFactory", True, "createOperationContext", "(int,AxisOperation,ServiceContext)", "", "Argument[1]", "ReturnValue.SyntheticField[org.apache.axis2.context.OperationContext.axisOperation]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "OperationContextFactory", True, "createOperationContext", "(int,AxisOperation,ServiceContext)", "", "Argument[2]", "ReturnValue.SyntheticField[org.apache.axis2.context.AbstractContext.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "activate", "(ConfigurationContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "createOperationContext", "(AxisOperation)", "", "Argument[0]", "ReturnValue.SyntheticField[org.apache.axis2.context.OperationContext.axisOperation]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "createOperationContext", "(AxisOperation)", "", "Argument[this]", "ReturnValue.SyntheticField[org.apache.axis2.context.AbstractContext.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "createOperationContext", "(QName)", "", "Argument[this]", "ReturnValue.SyntheticField[org.apache.axis2.context.AbstractContext.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "getAxisService", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "getAxisService", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceContext.axisService]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "getConfigurationContext", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "getConfigurationContext", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceContext.configContext]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "getGroupName", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "getLastOperationContext", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "getLastOperationContext", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceContext.lastOperationContext]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "getLogCorrelationIDString", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "getName", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "getRootContext", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceContext.configContext]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "getServiceGroupContext", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "getTargetEPR", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "getTargetEPR", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceContext.targetEPR]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "putContextProperties", "(ServiceContext,boolean)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "setLastOperationContext", "(OperationContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceContext.lastOperationContext]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "setMyEPR", "(EndpointReference)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "setTargetEPR", "(EndpointReference)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceContext.targetEPR]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", True, "writeExternal", "(ObjectOutput)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "ServiceGroupContext", "(ConfigurationContext,AxisServiceGroup)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "ServiceGroupContext", "(ConfigurationContext,AxisServiceGroup)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceGroupContext.axisServiceGroup]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "ServiceGroupContext", "(ConfigurationContext,AxisServiceGroup)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceGroupContext.id]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "ServiceGroupContext", "(ConfigurationContext,AxisServiceGroup)", "", "Argument[1].SyntheticField[org.apache.axis2.description.AxisServiceGroup.serviceGroupName]", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceGroupContext.id]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "activate", "(ConfigurationContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "activate", "(ConfigurationContext)", "", "Argument[this]", "Argument[0].SyntheticField[org.apache.axis2.context.ConfigurationContext.serviceGroupContextMap].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "activate", "(ConfigurationContext)", "", "Argument[this]", "Argument[0].SyntheticField[org.apache.axis2.context.ConfigurationContext.serviceGroupContextMap].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "activate", "(ConfigurationContext)", "", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceGroupContext.id]", "Argument[0].SyntheticField[org.apache.axis2.context.ConfigurationContext.serviceGroupContextMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "addServiceContext", "(ServiceContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "findServiceContext", "(AxisService)", "", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceGroupContext.serviceContextMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "findServiceContext", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceGroupContext.serviceContextMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "getDescription", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "getDescription", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceGroupContext.axisServiceGroup]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "getId", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "getId", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceGroupContext.id]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "getRootContext", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.AbstractContext.parent]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "getServiceContext", "(AxisService)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceGroupContext.serviceContextMap].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "getServiceContext", "(AxisService)", "", "Argument[0]", "ReturnValue.SyntheticField[org.apache.axis2.context.ServiceContext.axisService]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "getServiceContext", "(AxisService)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.name]", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceGroupContext.serviceContextMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "getServiceContexts", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceGroupContext.serviceContextMap].MapValue", "ReturnValue.Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "putContextProperties", "(ServiceGroupContext)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "setId", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.ServiceGroupContext.id]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "ServiceGroupContext", True, "writeExternal", "(ObjectOutput)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "SessionContext", True, "SessionContext", "(AbstractContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "SessionContext", True, "addServiceContext", "(ServiceContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "SessionContext", True, "addServiceGroupContext", "(ServiceGroupContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "SessionContext", True, "getCookieID", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.context", "SessionContext", True, "getCookieID", "()", "", "Argument[this].SyntheticField[org.apache.axis2.context.SessionContext.cookieID]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "SessionContext", True, "getServiceContext", "(AxisService)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "SessionContext", True, "getServiceGroupContext", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "SessionContext", True, "getServiceGroupContext", "(String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "SessionContext", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.context", "SessionContext", True, "setCookieID", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.context.SessionContext.cookieID]", "value", "dfc-generated"]
+      - ["org.apache.axis2.context", "SessionContext", True, "writeExternal", "(ObjectOutput)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: neutralModel
+    data:
+      - ["org.apache.axis2.context", "MessageContext", "activate", "(ConfigurationContext)", "summary", "ai-generated"]
+      - ["org.apache.axis2.context", "MessageContext", "setSelfManagedData", "(Class,Object,Object)", "summary", "ai-generated"]
+      - ["org.apache.axis2.context", "ServiceContext", "activate", "(ConfigurationContext)", "summary", "ai-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.dataretrieval.client.model.yml

@@ -0,0 +1,26 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sinkModel
+    data:
+      - ["org.apache.axis2.dataretrieval.client", "MexClient", True, "MexClient", "(ConfigurationContext,URL,QName,String)", "", "Argument[1]", "request-forgery", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sourceModel
+    data:
+      - ["org.apache.axis2.dataretrieval.client", "MexClient", True, "MexClient", "(ConfigurationContext,URL,QName,String)", "", "ReturnValue", "remote", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.dataretrieval.client", "MexClient", True, "MexClient", "(ConfigurationContext,AxisService)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.dataretrieval.client", "MexClient", True, "MexClient", "(ConfigurationContext,AxisService)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.dataretrieval.client", "MexClient", True, "MexClient", "(ConfigurationContext,Definition,QName,String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.dataretrieval.client", "MexClient", True, "MexClient", "(ConfigurationContext,URL,QName,String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: neutralModel
+    data:
+      - ["org.apache.axis2.dataretrieval.client", "MexClient", "MexClient", "(ConfigurationContext,AxisService)", "summary", "ai-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.dataretrieval.model.yml

@@ -0,0 +1,55 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sinkModel
+    data:
+      - ["org.apache.axis2.dataretrieval", "DataRetrievalUtil", True, "buildOM", "(ClassLoader,String)", "", "Argument[1]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.dataretrieval", "DataRetrievalUtil", True, "convertToOMElement", "(InputStream)", "", "Argument[0]", "xxe", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sourceModel
+    data:
+      - ["org.apache.axis2.dataretrieval", "AxisDataLocator", True, "getData", "(DataRetrievalRequest,MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.dataretrieval", "AxisDataLocator", True, "getData", "(DataRetrievalRequest,MessageContext)", "", "Parameter[1]", "remote", "ai-generated"]
+      - ["org.apache.axis2.dataretrieval", "SchemaDataLocator", True, "getData", "(DataRetrievalRequest,MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.dataretrieval", "SchemaDataLocator", True, "getData", "(DataRetrievalRequest,MessageContext)", "", "Parameter[1]", "remote", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.dataretrieval", "AxisDataLocator", True, "getData", "(DataRetrievalRequest,MessageContext)", "", "Argument[0].Element", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.dataretrieval", "AxisDataLocator", True, "getData", "(DataRetrievalRequest,MessageContext)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.dataretrieval", "AxisDataLocator", True, "getData", "(DataRetrievalRequest,MessageContext)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.dataretrieval", "AxisDataLocator", True, "getData", "(DataRetrievalRequest,MessageContext)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.dataretrieval", "AxisDataLocator", True, "getData", "(DataRetrievalRequest,MessageContext)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.dataretrieval", "AxisDataLocatorImpl", True, "AxisDataLocatorImpl", "(AxisService)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.dataretrieval", "BaseAxisDataLocator", True, "getData", "(DataRetrievalRequest,MessageContext)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.dataretrieval", "BaseAxisDataLocator", True, "getData", "(DataRetrievalRequest,MessageContext)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.dataretrieval", "BaseAxisDataLocator", True, "getData", "(DataRetrievalRequest,MessageContext)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.dataretrieval", "Data", True, "Data", "(Object,String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.dataretrieval.Data.data]", "value", "dfc-generated"]
+      - ["org.apache.axis2.dataretrieval", "Data", True, "Data", "(Object,String)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.dataretrieval.Data.identifier]", "value", "dfc-generated"]
+      - ["org.apache.axis2.dataretrieval", "Data", True, "getData", "()", "", "Argument[this].SyntheticField[org.apache.axis2.dataretrieval.Data.data]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.dataretrieval", "Data", True, "getIdentifier", "()", "", "Argument[this].SyntheticField[org.apache.axis2.dataretrieval.Data.identifier]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.dataretrieval", "DataLocatorFactory", True, "createDataLocator", "(String,ServiceData[])", "", "Argument[1].ArrayElement", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.dataretrieval", "DataRetrievalException", True, "DataRetrievalException", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.dataretrieval", "DataRetrievalException", True, "DataRetrievalException", "(String,Throwable)", "", "Argument[1]", "Argument[this].Field[java.rmi.RemoteException.detail]", "value", "dfc-generated"]
+      - ["org.apache.axis2.dataretrieval", "DataRetrievalException", True, "DataRetrievalException", "(Throwable)", "", "Argument[0]", "Argument[this].Field[java.rmi.RemoteException.detail]", "value", "dfc-generated"]
+      - ["org.apache.axis2.dataretrieval", "DataRetrievalRequest", True, "getDialect", "()", "", "Argument[this].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.dataretrieval", "DataRetrievalRequest", True, "getIdentifier", "()", "", "Argument[this].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.dataretrieval", "DataRetrievalRequest", True, "getOutputForm", "()", "", "Argument[this].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.dataretrieval", "DataRetrievalRequest", True, "putDialect", "(String)", "", "Argument[0]", "Argument[this].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.dataretrieval", "DataRetrievalRequest", True, "putIdentifier", "(String)", "", "Argument[0]", "Argument[this].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.dataretrieval", "DataRetrievalRequest", True, "putOutputForm", "(OutputForm)", "", "Argument[0]", "Argument[this].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.dataretrieval", "OutputForm", True, "getType", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.dataretrieval", "ServiceData", True, "ServiceData", "(OMElement)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.dataretrieval.ServiceData.data]", "value", "dfc-generated"]
+      - ["org.apache.axis2.dataretrieval", "ServiceData", True, "getDialect", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.dataretrieval", "ServiceData", True, "getIdentifier", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.dataretrieval", "ServiceData", True, "getOMData", "()", "", "Argument[this].SyntheticField[org.apache.axis2.dataretrieval.ServiceData.data]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.dataretrieval", "WSDL11SupplierTemplate", True, "init", "(AxisService)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: neutralModel
+    data:
+      - ["org.apache.axis2.dataretrieval", "BaseAxisDataLocator", "getData", "(DataRetrievalRequest,MessageContext)", "summary", "ai-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.deployment.model.yml

@@ -0,0 +1,109 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sinkModel
+    data:
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "buildModule", "(File,AxisConfiguration)", "", "Argument[0]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "getFileList", "(URL)", "", "Argument[0]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "loadRepository", "(String)", "", "Argument[0]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "loadRepositoryFromURL", "(URL)", "", "Argument[0]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "loadServiceGroup", "(File,ConfigurationContext)", "", "Argument[0]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "loadServicesFromUrl", "(URL)", "", "Argument[0]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "populateAxisConfiguration", "(InputStream)", "", "Argument[0]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "buildService", "(InputStream,ConfigurationContext)", "", "Argument[0]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "buildServiceGroup", "(InputStream,ClassLoader,String,ConfigurationContext,ArchiveReader,HashMap)", "", "Argument[0]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.deployment", "DescriptionBuilder", True, "buildOM", "()", "", "Argument[this]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "prepareRepository", "(String)", "", "Argument[0]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.deployment", "FileSystemConfigurator", True, "getAxisConfiguration", "()", "", "Argument[this]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.deployment", "ModuleDeployer", True, "deoloyFromUrl", "(DeploymentFileData)", "", "Argument[0]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.deployment", "ModuleDeployer", True, "deploy", "(DeploymentFileData)", "", "Argument[0]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.deployment", "RepositoryListener", True, "findServicesInDirectory", "(File)", "", "Argument[0]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.deployment", "ServiceDeployer", True, "deploy", "(DeploymentFileData)", "", "Argument[0]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.deployment", "ServiceDeployer", True, "deployFromUrl", "(DeploymentFileData)", "", "Argument[0]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.deployment", "ServiceDeployer", True, "deployFromUrl", "(Deployer,URL)", "", "Argument[1]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.deployment", "ServiceDeployer", True, "populateService", "(AxisServiceGroup,URL,String)", "", "Argument[1]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.deployment", "TransportDeployer", True, "deploy", "(DeploymentFileData)", "", "Argument[0]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.deployment", "URLBasedAxisConfigurator", True, "getAxisConfiguration", "()", "", "Argument[this]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.deployment", "WSDLServiceBuilderExtension", True, "buildAxisServices", "(DeploymentFileData)", "", "Argument[0]", "xxe", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.deployment", "AbstractDeployer", True, "addServiceBuilderExtensions", "(ServiceBuilderExtension)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.AbstractDeployer.serviceBuilderExtensions].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "AbstractDeployer", True, "getServiceBuilderExtensions", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.AbstractDeployer.serviceBuilderExtensions]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "AbstractServiceBuilderExtension", True, "getAxisConfiguration", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.AbstractServiceBuilderExtension.axisConfiguration]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "AbstractServiceBuilderExtension", True, "getConfigurationContext", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.AbstractServiceBuilderExtension.configurationContext]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "AbstractServiceBuilderExtension", True, "getDirectory", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.AbstractServiceBuilderExtension.directory]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "AbstractServiceBuilderExtension", True, "init", "(ConfigurationContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.AbstractServiceBuilderExtension.axisConfiguration]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "AbstractServiceBuilderExtension", True, "init", "(ConfigurationContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.AbstractServiceBuilderExtension.configurationContext]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "AbstractServiceBuilderExtension", True, "init", "(ConfigurationContext)", "", "Argument[0].SyntheticField[org.apache.axis2.context.ConfigurationContext.axisConfiguration]", "Argument[this].SyntheticField[org.apache.axis2.deployment.AbstractServiceBuilderExtension.axisConfiguration]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "AbstractServiceBuilderExtension", True, "setDirectory", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.AbstractServiceBuilderExtension.directory]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "AxisConfigBuilder", True, "AxisConfigBuilder", "(AxisConfiguration)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "AxisConfigBuilder", True, "AxisConfigBuilder", "(InputStream,AxisConfiguration,DeploymentEngine)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "AxisConfigBuilder", True, "AxisConfigBuilder", "(InputStream,AxisConfiguration,DeploymentEngine)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "AxisConfigBuilder", True, "AxisConfigBuilder", "(InputStream,AxisConfiguration,DeploymentEngine)", "", "Argument[2]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "Deployer", True, "deploy", "(DeploymentFileData)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "Deployer", True, "init", "(ConfigurationContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "Deployer", True, "setDirectory", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentClassLoader", True, "DeploymentClassLoader", "(URL[],ClassLoader,boolean)", "", "Argument[1]", "Argument[this]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "addDeployer", "(Deployer,String,String)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.deployment.DeploymentEngine.deployerMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "addNewModule", "(AxisModule,AxisConfiguration)", "", "Argument[1]", "Argument[0].SyntheticField[org.apache.axis2.description.AxisModule.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "addServiceGroup", "(AxisServiceGroup,ArrayList,URL,DeploymentFileData,AxisConfiguration)", "", "Argument[3].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.file]", "Argument[4].SyntheticField[org.apache.axis2.engine.AxisConfiguration.faultyServices].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "addWSToDeploy", "(DeploymentFileData)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "addWSToUndeploy", "(WSInfo)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "buildModule", "(File,AxisConfiguration)", "", "Argument[0]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisModule.name]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "buildServiceGroup", "(InputStream,ClassLoader,String,ConfigurationContext,ArchiveReader,HashMap)", "", "Argument[1]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisServiceGroup.serviceGroupClassLoader]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "buildServiceGroup", "(InputStream,ClassLoader,String,ConfigurationContext,ArchiveReader,HashMap)", "", "Argument[2]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisServiceGroup.serviceGroupName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "getAxisConfig", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "getAxisServiceName", "(String)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "getDeployer", "(String,String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "getDeployers", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.DeploymentEngine.deployerMap]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "getModule", "(String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "getModuleDeployer", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "getModulesDir", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "getRepoListener", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "getRepositoryDir", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "getServiceDeployer", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "getServicesDir", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "loadRepository", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "loadRepositoryFromURL", "(URL)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "loadServiceGroup", "(File,ConfigurationContext)", "", "Argument[0]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisDescription.children].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "loadServiceGroup", "(File,ConfigurationContext)", "", "Argument[0]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisServiceGroup.serviceGroupName]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "populateAxisConfiguration", "(InputStream)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "setConfigContext", "(ConfigurationContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentEngine", True, "setDeployers", "(Map)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.DeploymentEngine.deployerMap]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentException", True, "DeploymentException", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentException", True, "DeploymentException", "(String,Throwable)", "", "Argument[1]", "Argument[this].Field[java.rmi.RemoteException.detail]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "DeploymentException", True, "DeploymentException", "(Throwable)", "", "Argument[0]", "Argument[this].Field[java.rmi.RemoteException.detail]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "DescriptionBuilder", True, "DescriptionBuilder", "(InputStream,AxisConfiguration)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DescriptionBuilder", True, "DescriptionBuilder", "(InputStream,AxisConfiguration)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DescriptionBuilder", True, "DescriptionBuilder", "(InputStream,ConfigurationContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DescriptionBuilder", True, "DescriptionBuilder", "(InputStream,ConfigurationContext)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "DescriptionBuilder", True, "getShortFileName", "(String)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "FileSystemConfigurator", True, "FileSystemConfigurator", "(String,String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "FileSystemConfigurator", True, "FileSystemConfigurator", "(String,String)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "ModuleBuilder", True, "ModuleBuilder", "(InputStream,AxisModule,AxisConfiguration)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "ModuleBuilder", True, "ModuleBuilder", "(InputStream,AxisModule,AxisConfiguration)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "ModuleBuilder", True, "ModuleBuilder", "(InputStream,AxisModule,AxisConfiguration)", "", "Argument[2]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "ModuleDeployer", True, "ModuleDeployer", "(AxisConfiguration)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "RepositoryListener", True, "RepositoryListener", "(DeploymentEngine,boolean)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "ServiceBuilder", True, "ServiceBuilder", "(ConfigurationContext,AxisService)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "ServiceBuilder", True, "ServiceBuilder", "(ConfigurationContext,AxisService)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "ServiceBuilder", True, "ServiceBuilder", "(InputStream,ConfigurationContext,AxisService)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "ServiceBuilder", True, "ServiceBuilder", "(InputStream,ConfigurationContext,AxisService)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "ServiceBuilder", True, "ServiceBuilder", "(InputStream,ConfigurationContext,AxisService)", "", "Argument[2]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "ServiceBuilder", True, "populateService", "(OMElement)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "ServiceBuilder", True, "setWsdlServiceMap", "(Map)", "", "Argument[0].Element", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "ServiceGroupBuilder", True, "ServiceGroupBuilder", "(OMElement,Map,ConfigurationContext)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.deployment.ServiceGroupBuilder.wsdlServices]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "ServiceGroupBuilder", True, "populateServiceGroup", "(AxisServiceGroup)", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.ServiceGroupBuilder.wsdlServices].MapValue", "ReturnValue.Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment", "URLBasedAxisConfigurator", True, "URLBasedAxisConfigurator", "(URL,URL)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "URLBasedAxisConfigurator", True, "URLBasedAxisConfigurator", "(URL,URL)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "WarBasedAxisConfigurator", True, "WarBasedAxisConfigurator", "(ServletConfig)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment", "WarBasedAxisConfigurator", True, "getAxisConfiguration", "()", "", "Argument[this]", "ReturnValue.SyntheticField[org.apache.axis2.engine.AxisConfiguration.configurator]", "value", "dfc-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: neutralModel
+    data:
+      - ["org.apache.axis2.deployment", "AbstractServiceBuilderExtension", "init", "(ConfigurationContext)", "summary", "ai-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.deployment.repository.util.model.yml

@@ -0,0 +1,61 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sinkModel
+    data:
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "buildServiceDescription", "(InputStream,ConfigurationContext)", "", "Argument[0]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "buildServiceDescription", "(String,ConfigurationContext,boolean)", "", "Argument[0]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "buildServiceGroup", "(InputStream,DeploymentFileData,AxisServiceGroup,HashMap,ConfigurationContext)", "", "Argument[0]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "getAxisServiceFromWsdl", "(InputStream,ClassLoader,String)", "", "Argument[0]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "processFilesInFolder", "(File,HashMap)", "", "Argument[0]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "processFilesInFolder", "(File,HashMap)", "", "Argument[0]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "processServiceGroup", "(String,DeploymentFileData,AxisServiceGroup,boolean,HashMap,ConfigurationContext)", "", "Argument[0]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "WSInfoList", True, "addWSInfoItem", "(File,Deployer,int)", "", "Argument[0]", "path-injection", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "buildServiceGroup", "(InputStream,DeploymentFileData,AxisServiceGroup,HashMap,ConfigurationContext)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "buildServiceGroup", "(InputStream,DeploymentFileData,AxisServiceGroup,HashMap,ConfigurationContext)", "", "Argument[2]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "buildServiceGroup", "(InputStream,DeploymentFileData,AxisServiceGroup,HashMap,ConfigurationContext)", "", "Argument[3].Element", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "buildServiceGroup", "(OMElement,DeploymentFileData,AxisServiceGroup,Map,ConfigurationContext)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "buildServiceGroup", "(OMElement,DeploymentFileData,AxisServiceGroup,Map,ConfigurationContext)", "", "Argument[2]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "buildServiceGroup", "(OMElement,DeploymentFileData,AxisServiceGroup,Map,ConfigurationContext)", "", "Argument[3].Element", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "processServiceGroup", "(OMElement,DeploymentFileData,AxisServiceGroup,boolean,Map,ConfigurationContext)", "", "Argument[1]", "Argument[2]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "processServiceGroup", "(OMElement,DeploymentFileData,AxisServiceGroup,boolean,Map,ConfigurationContext)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "processServiceGroup", "(OMElement,DeploymentFileData,AxisServiceGroup,boolean,Map,ConfigurationContext)", "", "Argument[2]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "processServiceGroup", "(OMElement,DeploymentFileData,AxisServiceGroup,boolean,Map,ConfigurationContext)", "", "Argument[4].Element", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "processServiceGroup", "(String,DeploymentFileData,AxisServiceGroup,boolean,HashMap,ConfigurationContext)", "", "Argument[1]", "Argument[2]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "processServiceGroup", "(String,DeploymentFileData,AxisServiceGroup,boolean,HashMap,ConfigurationContext)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "processServiceGroup", "(String,DeploymentFileData,AxisServiceGroup,boolean,HashMap,ConfigurationContext)", "", "Argument[2]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "processServiceGroup", "(String,DeploymentFileData,AxisServiceGroup,boolean,HashMap,ConfigurationContext)", "", "Argument[4].Element", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "ArchiveReader", True, "readModuleArchive", "(DeploymentFileData,AxisModule,boolean,AxisConfiguration)", "", "Argument[0]", "Argument[1]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "DeploymentFileData", "(File)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.file]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "DeploymentFileData", "(File,Deployer)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.file]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "DeploymentFileData", "(File,Deployer)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.deployer]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "DeploymentFileData", "(URL,Deployer,ClassLoader)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.url]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "DeploymentFileData", "(URL,Deployer,ClassLoader)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.deployer]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "DeploymentFileData", "(URL,Deployer,ClassLoader)", "", "Argument[2]", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.classLoader]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "getAbsolutePath", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.file]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "getClassLoader", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.classLoader]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "getDeployer", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.deployer]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "getFile", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.file]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "getFileExtension", "(String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.file]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.url]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "getServiceMetaData", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.serviceMetaData]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "getUrl", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.url]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "setClassLoader", "(ClassLoader)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.classLoader]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "setDeployer", "(Deployer)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.deployer]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "setServiceMetaData", "(Object)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.serviceMetaData]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "DeploymentFileData", True, "setUrl", "(URL)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.DeploymentFileData.url]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "WSInfo", True, "WSInfo", "(String,long,Deployer,int)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.WSInfo.fileName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "WSInfo", True, "WSInfo", "(String,long,Deployer,int)", "", "Argument[2]", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.WSInfo.deployer]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "WSInfo", True, "getDeployer", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.WSInfo.deployer]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "WSInfo", True, "getFileName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.WSInfo.fileName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "WSInfo", True, "setFileName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.repository.util.WSInfo.fileName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "WSInfoList", True, "WSInfoList", "(DeploymentEngine)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "WSInfoList", True, "addWSInfoItem", "(File,Deployer,int)", "", "Argument[0]", "Argument[this].Field[org.apache.axis2.deployment.repository.util.WSInfoList.currentJars].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.repository.util", "WSInfoList", True, "addWSInfoItem", "(URL,Deployer,int)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.deployment.resolver.model.yml

@@ -0,0 +1,40 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sinkModel
+    data:
+      - ["org.apache.axis2.deployment.resolver", "AARBasedWSDLLocator", True, "getImportInputSource", "(String,String)", "", "Argument[0]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.deployment.resolver", "AARBasedWSDLLocator", True, "getImportInputSource", "(String,String)", "", "Argument[1]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.deployment.resolver", "AARFileBasedURIResolver", True, "resolveEntity", "(String,String,String)", "", "Argument[1]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.deployment.resolver", "AARFileBasedURIResolver", True, "resolveEntity", "(String,String,String)", "", "Argument[2]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.deployment.resolver", "WarBasedWSDLLocator", True, "getImportInputSource", "(String,String)", "", "Argument[0]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.deployment.resolver", "WarBasedWSDLLocator", True, "getImportInputSource", "(String,String)", "", "Argument[0]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.deployment.resolver", "WarBasedWSDLLocator", True, "getImportInputSource", "(String,String)", "", "Argument[1]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.deployment.resolver", "WarBasedWSDLLocator", True, "getImportInputSource", "(String,String)", "", "Argument[1]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.deployment.resolver", "WarFileBasedURIResolver", True, "resolveEntity", "(String,String,String)", "", "Argument[1]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.deployment.resolver", "WarFileBasedURIResolver", True, "resolveEntity", "(String,String,String)", "", "Argument[2]", "request-forgery", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.deployment.resolver", "AARBasedWSDLLocator", True, "AARBasedWSDLLocator", "(String,File,InputStream)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.resolver.AARBasedWSDLLocator.baseURI]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.resolver", "AARBasedWSDLLocator", True, "AARBasedWSDLLocator", "(String,File,InputStream)", "", "Argument[2]", "Argument[this].SyntheticField[org.apache.axis2.deployment.resolver.AARBasedWSDLLocator.baseInputStream]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.resolver", "AARBasedWSDLLocator", True, "getBaseInputSource", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.resolver.AARBasedWSDLLocator.baseInputStream]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.resolver", "AARBasedWSDLLocator", True, "getBaseURI", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.resolver.AARBasedWSDLLocator.baseURI]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.resolver", "AARBasedWSDLLocator", True, "getImportInputSource", "(String,String)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.deployment.resolver.AARBasedWSDLLocator.lastImportLocation]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.resolver", "AARBasedWSDLLocator", True, "getLatestImportURI", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.resolver.AARBasedWSDLLocator.lastImportLocation]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.resolver", "AARFileBasedURIResolver", True, "AARFileBasedURIResolver", "(File)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.resolver", "WarBasedWSDLLocator", True, "WarBasedWSDLLocator", "(String,ClassLoader,InputStream)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.resolver.WarBasedWSDLLocator.baseURI]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.resolver", "WarBasedWSDLLocator", True, "WarBasedWSDLLocator", "(String,ClassLoader,InputStream)", "", "Argument[2]", "Argument[this].SyntheticField[org.apache.axis2.deployment.resolver.WarBasedWSDLLocator.baseInputStream]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.resolver", "WarBasedWSDLLocator", True, "getBaseInputSource", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.resolver.WarBasedWSDLLocator.baseInputStream]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.resolver", "WarBasedWSDLLocator", True, "getBaseURI", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.resolver.WarBasedWSDLLocator.baseURI]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.resolver", "WarBasedWSDLLocator", True, "getImportInputSource", "(String,String)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.deployment.resolver.WarBasedWSDLLocator.lastImportLocation]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.resolver", "WarBasedWSDLLocator", True, "getLatestImportURI", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.resolver.WarBasedWSDLLocator.lastImportLocation]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.resolver", "WarFileBasedURIResolver", True, "WarFileBasedURIResolver", "(ClassLoader)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: neutralModel
+    data:
+      - ["org.apache.axis2.deployment.resolver", "AARFileBasedURIResolver", "resolveEntity", "(String,String,String)", "summary", "ai-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.deployment.scheduler.model.yml

@@ -0,0 +1,16 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.deployment.scheduler", "Scheduler$SchedulerTimerTask", True, "SchedulerTimerTask", "(SchedulerTask,DeploymentIterator)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.scheduler", "Scheduler$SchedulerTimerTask", True, "SchedulerTimerTask", "(SchedulerTask,DeploymentIterator)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.scheduler", "SchedulerTask", True, "SchedulerTask", "(RepositoryListener,AxisConfiguration)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.scheduler", "SchedulerTask", True, "SchedulerTask", "(RepositoryListener,AxisConfiguration)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: neutralModel
+    data:
+      - ["org.apache.axis2.deployment.scheduler", "Scheduler", "schedule", "(SchedulerTask,DeploymentIterator)", "summary", "ai-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.deployment.util.model.yml

@@ -0,0 +1,67 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.deployment.util", "BeanExcludeInfo", True, "BeanExcludeInfo", "(String,String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.BeanExcludeInfo.excludeProperties]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "BeanExcludeInfo", True, "BeanExcludeInfo", "(String,String)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.BeanExcludeInfo.includeProperties]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "BeanExcludeInfo", True, "getExcludeProperties", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.BeanExcludeInfo.excludeProperties]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "BeanExcludeInfo", True, "getIncludeProperties", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.BeanExcludeInfo.includeProperties]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "BeanExcludeInfo", True, "setExcludeProperties", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.BeanExcludeInfo.excludeProperties]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "BeanExcludeInfo", True, "setIncludeProperties", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.BeanExcludeInfo.includeProperties]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "ExcludeInfo", True, "getBeanExcludeInfoForClass", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.ExcludeInfo.classNameToBeanInfoMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "ExcludeInfo", True, "putBeanInfo", "(String,BeanExcludeInfo)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.ExcludeInfo.classNameToBeanInfoMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "ExcludeInfo", True, "putBeanInfo", "(String,BeanExcludeInfo)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.ExcludeInfo.classNameToBeanInfoMap].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "getGlobalInFaultPhases", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.PhasesInfo.IN_FaultPhases].Element", "ReturnValue.Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "getGlobalInflow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.PhasesInfo.INPhases].Element", "ReturnValue.Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "getGlobalOutPhaseList", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.PhasesInfo.OUTPhases].Element", "ReturnValue.Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "getINPhases", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.PhasesInfo.INPhases]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "getINPhases", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "getIN_FaultPhases", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.PhasesInfo.IN_FaultPhases]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "getIN_FaultPhases", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "getOUTPhases", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.PhasesInfo.OUTPhases]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "getOUTPhases", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "getOUT_FaultPhases", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "getOperationInFaultPhases", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "getOperationInPhases", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "getOperationOutFaultPhases", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "getOperationOutPhases", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "getOutFaultPhaseList", "()", "", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.PhasesInfo.OUT_FaultPhases]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "getOutFaultPhaseList", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "setINPhases", "(List)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.PhasesInfo.INPhases]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "setIN_FaultPhases", "(List)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.PhasesInfo.IN_FaultPhases]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "setOUTPhases", "(List)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.PhasesInfo.OUTPhases]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "PhasesInfo", True, "setOUT_FaultPhases", "(List)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.deployment.util.PhasesInfo.OUT_FaultPhases]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "TempFileManager", True, "createTempFile", "(String,String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "TempFileManager", True, "createTempFile", "(String,String)", "", "Argument[1]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "addEndpointsToService", "(AxisService,AxisConfiguration)", "", "Argument[1].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transportsIn].MapValue", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.endpointMap].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "addEndpointsToService", "(AxisService,AxisConfiguration)", "", "Argument[1].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transportsIn].MapValue", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.endpointName]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "addHttpEndpoint", "(AxisService,String)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.name]", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.endpointMap].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "addHttpEndpoint", "(AxisService,String)", "", "Argument[0]", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.endpointMap].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "addHttpEndpoint", "(AxisService,String)", "", "Argument[1]", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.endpointMap].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "addHttpEndpoint", "(AxisService,String,String)", "", "Argument[2]", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.endpointMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "addSoap11Endpoint", "(AxisService,String)", "", "Argument[1]", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.endpointMap].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "addSoap11Endpoint", "(AxisService,String)", "", "Argument[1]", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.endpointName]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "addSoap11Endpoint", "(AxisService,String,String)", "", "Argument[2]", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.endpointMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "addSoap11Endpoint", "(AxisService,String,String)", "", "Argument[2]", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.endpointName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "addSoap12Endpoint", "(AxisService,String)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.name]", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.endpointMap].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "addSoap12Endpoint", "(AxisService,String)", "", "Argument[0]", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.endpointMap].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "addSoap12Endpoint", "(AxisService,String)", "", "Argument[1]", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.endpointMap].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "addSoap12Endpoint", "(AxisService,String,String)", "", "Argument[2]", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.endpointMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "createTempFile", "(String,InputStream,File)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "formatPath", "(String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "getBindingMessage", "(AxisBindingOperation,AxisMessage)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "getBindingOperation", "(AxisBinding,AxisOperation)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "getClassNameFromResourceName", "(String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "getHttpBinding", "(AxisService)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "getPath", "(String,String)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "getPath", "(String,String)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "getServiceHierarchy", "(String,String)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "getShortFileName", "(String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "getSoap11Binding", "(AxisService)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "getSoap12Binding", "(AxisService)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "getURLsForAllJars", "(URL,File)", "", "Argument[0]", "ReturnValue.ArrayElement", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "normalize", "(String)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.deployment.util", "Utils", True, "toFile", "(URL)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.description.java2wsdl.bytecode.model.yml

@@ -0,0 +1,20 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.description.java2wsdl.bytecode", "ChainedParamReader", True, "getParameterNames", "(Constructor)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description.java2wsdl.bytecode", "ChainedParamReader", True, "getParameterNames", "(Method)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.bytecode.ChainedParamReader.methodToParamMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl.bytecode", "ChainedParamReader", True, "getParameterNames", "(Method)", "", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.bytecode.ChainedParamReader.methodToParamMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl.bytecode", "MethodTable", True, "getParameterNames", "(String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description.java2wsdl.bytecode", "ParamReader", True, "ParamReader", "(byte[])", "", "Argument[0]", "Argument[this]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl.bytecode", "ParamReader", True, "getParameterNames", "(Constructor)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description.java2wsdl.bytecode", "ParamReader", True, "getParameterNames", "(Method)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: neutralModel
+    data:
+      - ["org.apache.axis2.description.java2wsdl.bytecode", "ParamReader", "getParameterNames", "(Constructor)", "summary", "ai-generated"]
+      - ["org.apache.axis2.description.java2wsdl.bytecode", "ParamReader", "getParameterNames", "(Method)", "summary", "ai-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.description.java2wsdl.model.yml

@@ -0,0 +1,65 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "DefaultSchemaGenerator", "(ClassLoader,String,String,String,AxisService)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.schemaTargetNameSpace]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "DefaultSchemaGenerator", "(ClassLoader,String,String,String,AxisService)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.targetNamespace]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "DefaultSchemaGenerator", "(ClassLoader,String,String,String,AxisService)", "", "Argument[2]", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.schemaTargetNameSpace]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "getAttrFormDefault", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.attrFormDefault]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "getCustomSchemaLocation", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.customSchemaLocation]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "getElementFormDefault", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.elementFormDefault]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "getExtraClasses", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.extraClasses]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "getMappingFileLocation", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.mappingFileLocation]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "getNsGen", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.nsGen]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "getPkg2nsmap", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.pkg2nsmap]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "getSchemaTargetNameSpace", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.schemaTargetNameSpace]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "getTargetNamespace", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.targetNamespace]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "setAttrFormDefault", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.attrFormDefault]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "setCustomSchemaLocation", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.customSchemaLocation]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "setElementFormDefault", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.elementFormDefault]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "setExtraClasses", "(List)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.extraClasses]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "setMappingFileLocation", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.mappingFileLocation]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "setNsGen", "(NamespaceGenerator)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.nsGen]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DefaultSchemaGenerator", True, "setPkg2nsmap", "(Map)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.DefaultSchemaGenerator.pkg2nsmap]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DocLitBareSchemaGenerator", True, "DocLitBareSchemaGenerator", "(ClassLoader,String,String,String,AxisService)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DocLitBareSchemaGenerator", True, "DocLitBareSchemaGenerator", "(ClassLoader,String,String,String,AxisService)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DocLitBareSchemaGenerator", True, "DocLitBareSchemaGenerator", "(ClassLoader,String,String,String,AxisService)", "", "Argument[2]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DocLitBareSchemaGenerator", True, "DocLitBareSchemaGenerator", "(ClassLoader,String,String,String,AxisService)", "", "Argument[3]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "DocLitBareSchemaGenerator", True, "DocLitBareSchemaGenerator", "(ClassLoader,String,String,String,AxisService)", "", "Argument[4]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "Java2WSDLUtils", True, "getPackageName", "(String,ClassLoader)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "Java2WSDLUtils", True, "getSimpleClassName", "(String)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "Java2WSDLUtils", True, "namespaceFromClassName", "(String,ClassLoader)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "Java2WSDLUtils", True, "namespaceFromClassName", "(String,ClassLoader,NamespaceGenerator)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "Java2WSDLUtils", True, "schemaNamespaceFromClassName", "(String,ClassLoader)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "Java2WSDLUtils", True, "schemaNamespaceFromClassName", "(String,ClassLoader,NamespaceGenerator)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "Java2WSDLUtils", True, "targetNamespaceFromClassName", "(String,ClassLoader,NamespaceGenerator)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "NamespaceGenerator", True, "namespaceFromPackageName", "(String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "NamespaceGenerator", True, "schemaNamespaceFromPackageName", "(String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "SchemaGenerator", True, "generateSchema", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "SchemaGenerator", True, "getMethods", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "SchemaGenerator", True, "getTypeTable", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "SchemaGenerator", True, "setAxisService", "(AxisService)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "TypeTable", True, "addClassNameForQName", "(QName,String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.TypeTable.qNameToClassMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "TypeTable", True, "addClassNameForQName", "(QName,String)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.TypeTable.qNameToClassMap].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "TypeTable", True, "addComplexSchema", "(String,QName)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.TypeTable.complexTypeMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "TypeTable", True, "addComplexSchema", "(String,QName)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.TypeTable.complexTypeMap].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "TypeTable", True, "addSimpleTypeEnum", "(String,QName)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.TypeTable.simpleTypeEnum].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "TypeTable", True, "addSimpleTypeEnum", "(String,QName)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.TypeTable.simpleTypeEnum].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "TypeTable", True, "getClassNameForQName", "(QName)", "", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.TypeTable.qNameToClassMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "TypeTable", True, "getComplexSchemaMap", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.TypeTable.complexTypeMap]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "TypeTable", True, "getComplexSchemaMap", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "TypeTable", True, "getComplexSchemaType", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.TypeTable.complexTypeMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "TypeTable", True, "getQNamefortheType", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.TypeTable.complexTypeMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "TypeTable", True, "getSchemaTypeName", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.TypeTable.complexTypeMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "TypeTable", True, "getSimpleTypeEnum", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.TypeTable.simpleTypeEnum].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "TypeTable", True, "getSimpleTypeEnumMap", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.java2wsdl.TypeTable.simpleTypeEnum]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "TypeTable", True, "getSimpleTypeEnumMap", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: neutralModel
+    data:
+      - ["org.apache.axis2.description.java2wsdl", "SchemaGenerator", "setExcludeMethods", "(List)", "summary", "ai-generated"]
+      - ["org.apache.axis2.description.java2wsdl", "SchemaGenerator", "setNonRpcMethods", "(List)", "summary", "ai-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.description.model.yml

@@ -0,0 +1,573 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sinkModel
+    data:
+      - ["org.apache.axis2.description", "AxisService", True, "createClientSideAxisService", "(URL,QName,String,Options)", "", "Argument[0]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.description", "Parameter", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.description", "ParameterIncludeImpl", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "unsafe-deserialization", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sourceModel
+    data:
+      - ["org.apache.axis2.description", "MessageContextListener", True, "attachEnvelopeEvent", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.description", "MessageContextListener", True, "attachServiceContextEvent", "(ServiceContext,MessageContext)", "", "Parameter[1]", "remote", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.description", "AxisBinding", True, "addFault", "(AxisBindingMessage)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBinding.faults].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBinding", True, "addFault", "(AxisBindingMessage)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisBindingMessage.name]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBinding.faults].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBinding", True, "getAxisEndpoint", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisBinding", True, "getEffectivePolicy", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisBinding", True, "getFault", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBinding.faults].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBinding", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBinding.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBinding", True, "getProperty", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBinding.options].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBinding", True, "getType", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBinding.type]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBinding", True, "setName", "(QName)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBinding.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBinding", True, "setProperty", "(String,Object)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBinding.options].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBinding", True, "setProperty", "(String,Object)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBinding.options].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBinding", True, "setType", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBinding.type]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingMessage", True, "calculateEffectivePolicy", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisBindingMessage", True, "getAxisBindingOperation", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisBindingMessage", True, "getAxisMessage", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingMessage.axisMessage]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingMessage", True, "getDirection", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingMessage.direction]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingMessage", True, "getEffectivePolicy", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisBindingMessage", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingMessage.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingMessage", True, "getProperty", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingMessage.options].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingMessage", True, "setAxisMessage", "(AxisMessage)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingMessage.axisMessage]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingMessage", True, "setDirection", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingMessage.direction]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingMessage", True, "setName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingMessage.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingMessage", True, "setProperty", "(String,Object)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingMessage.options].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingMessage", True, "setProperty", "(String,Object)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingMessage.options].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingOperation", True, "addFault", "(AxisBindingMessage)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingOperation.faults].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingOperation", True, "addFault", "(AxisBindingMessage)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisBindingMessage.name]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingOperation.faults].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingOperation", True, "getAxisBinding", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisBindingOperation", True, "getAxisOperation", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingOperation.axisOperation]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingOperation", True, "getEffectivePolicy", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisBindingOperation", True, "getFault", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingOperation.faults].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingOperation", True, "getFaults", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingOperation.faults].MapValue", "ReturnValue.Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingOperation", True, "getKey", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingOperation.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingOperation", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingOperation.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingOperation", True, "getProperty", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingOperation.options].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingOperation", True, "setAxisOperation", "(AxisOperation)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingOperation.axisOperation]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingOperation", True, "setName", "(QName)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingOperation.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingOperation", True, "setProperty", "(String,Object)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingOperation.options].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisBindingOperation", True, "setProperty", "(String,Object)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisBindingOperation.options].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "addChild", "(AxisDescription)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "addChild", "(Object,AxisDescription)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.children].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "addChild", "(Object,AxisDescription)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.children].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "addParameterObserver", "(ParameterObserver)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "engageModule", "(AxisModule)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "engageModule", "(AxisModule,AxisDescription)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "getAxisConfiguration", "()", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "getAxisConfiguration", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.parent]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "getChild", "(Object)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.children].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "getChildren", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.children].MapValue", "ReturnValue.Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "getDocumentationNode", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.documentation]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "getEngagedModules", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "getKey", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "getParent", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.parent]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "getPolicyInclude", "()", "", "Argument[this]", "ReturnValue.SyntheticField[org.apache.axis2.description.PolicyInclude.description]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "getPolicyInclude", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.policyInclude]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "getPolicySubject", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "setDocumentation", "(OMNode)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.documentation]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "setParent", "(AxisDescription)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisDescription", True, "setPolicyInclude", "(PolicyInclude)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.policyInclude]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisEndpoint", True, "getAlias", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisEndpoint.alias]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisEndpoint", True, "getAxisService", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.parent]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisEndpoint", True, "getBinding", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisEndpoint.binding]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisEndpoint", True, "getEndpointURL", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisEndpoint.endpointURL]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisEndpoint", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisEndpoint.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisEndpoint", True, "getProperty", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisEndpoint.options].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisEndpoint", True, "setAlias", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisEndpoint.alias]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisEndpoint", True, "setBinding", "(AxisBinding)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisEndpoint.binding]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisEndpoint", True, "setEndpointURL", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisEndpoint.endpointURL]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisEndpoint", True, "setName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisEndpoint.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisEndpoint", True, "setParent", "(AxisService)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisEndpoint", True, "setProperty", "(String,Object)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisEndpoint.options].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisEndpoint", True, "setProperty", "(String,Object)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisEndpoint.options].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisEndpoint", True, "setTransportInDescription", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "addModuleRefs", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisMessage.modulerefs].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "addSoapHeader", "(SOAPHeaderMessage)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisMessage.soapHeaders].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "calculateEffectivePolicy", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getAxisOperation", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getAxisOperation", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.parent]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getDirection", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getDirection", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisMessage.direction]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getEffectivePolicy", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getElementQName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getElementQName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisMessage.elementQname]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getKey", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisMessage.elementQname]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getMessageFlow", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getMessageFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisMessage.handlerChain]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getMessagePartName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getMessagePartName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisMessage.messagePartName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getModulerefs", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getModulerefs", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisMessage.modulerefs]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisMessage.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getPartName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getPartName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisMessage.partName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getSoapHeaders", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "getSoapHeaders", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisMessage.soapHeaders]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "setDirection", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisMessage.direction]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "setElementQName", "(QName)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisMessage.elementQname]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "setMessageFlow", "(ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisMessage.handlerChain]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "setMessagePartName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisMessage.messagePartName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "setName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisMessage.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisMessage", True, "setPartName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisMessage.partName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "AxisModule", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "addOperation", "(AxisOperation)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.operations].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "addOperation", "(AxisOperation)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.operations].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "addOperation", "(AxisOperation)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisOperation.name]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.operations].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "getArchiveName", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "getFaultInFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.flowInclude].SyntheticField[org.apache.axis2.description.FlowInclude.In_fault]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "getFaultOutFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.flowInclude].SyntheticField[org.apache.axis2.description.FlowInclude.Out_fault]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "getFileName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.fileName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "getInFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.flowInclude].SyntheticField[org.apache.axis2.description.FlowInclude.in]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "getLocalPolicyAssertions", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.localPolicyAssertions]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "getModule", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.module]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "getModuleClassLoader", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.moduleClassLoader]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "getModuleDescription", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.moduleDescription]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "getOperations", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.operations]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "getOutFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.flowInclude].SyntheticField[org.apache.axis2.description.FlowInclude.out]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "getParent", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.parent]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "getPolicyInclude", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.policyInclude]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "getPolicySubject", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "getSupportedPolicyNamespaces", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.supportedPolicyNames]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "getVersion", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.version]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "setArchiveName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "setFaultInFlow", "(Flow)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.flowInclude].SyntheticField[org.apache.axis2.description.FlowInclude.In_fault]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "setFaultOutFlow", "(Flow)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.flowInclude].SyntheticField[org.apache.axis2.description.FlowInclude.Out_fault]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "setFileName", "(URL)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.fileName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "setInFlow", "(Flow)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.flowInclude].SyntheticField[org.apache.axis2.description.FlowInclude.in]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "setLocalPolicyAssertions", "(QName[])", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.localPolicyAssertions]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "setModule", "(Module)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.module]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "setModuleClassLoader", "(ClassLoader)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.moduleClassLoader]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "setModuleDescription", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.moduleDescription]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "setName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "setOutFlow", "(Flow)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.flowInclude].SyntheticField[org.apache.axis2.description.FlowInclude.out]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "setParent", "(AxisConfiguration)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "setPolicyInclude", "(PolicyInclude)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.policyInclude]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "setSupportedPolicyNamespaces", "(String[])", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.supportedPolicyNames]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisModule", True, "setVersion", "(Version)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisModule.version]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "AxisOperation", "(QName)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "addFaultAction", "(String,String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.faultActions].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "addFaultAction", "(String,String)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.faultActions].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "addModule", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.modulerefs].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "addModuleConfig", "(ModuleConfiguration)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.moduleConfigmap].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "addModuleConfig", "(ModuleConfiguration)", "", "Argument[0].SyntheticField[org.apache.axis2.description.ModuleConfiguration.moduleName]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.moduleConfigmap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "createClient", "(ServiceContext,Options)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "createClient", "(ServiceContext,Options)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "createClient", "(ServiceContext,Options)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "findForExistingOperationContext", "(MessageContext)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "findOperationContext", "(MessageContext,ServiceContext)", "", "Argument[1]", "ReturnValue.SyntheticField[org.apache.axis2.context.AbstractContext.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "findOperationContext", "(MessageContext,ServiceContext)", "", "Argument[this]", "ReturnValue.SyntheticField[org.apache.axis2.context.OperationContext.axisOperation]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getAxisService", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.parent]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getFaultAction", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.faultActions].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getFaultAction", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.faultActions].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getFaultActionNames", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.faultActions].MapKey", "ReturnValue.ArrayElement", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getFaultMessages", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getInputAction", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getInputAction", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.soapAction]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getInputAction", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.wsamappingList].Element", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getKey", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getMessageExchangePattern", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getMessageExchangePattern", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.mepURI]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getMessageReceiver", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getMessageReceiver", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.messageReceiver]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getMessages", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getModuleConfig", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.moduleConfigmap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getModuleRefs", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getModuleRefs", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.modulerefs]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getOutputAction", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getOutputAction", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.outputAction]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getSoapAction", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getSoapAction", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.soapAction]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getStyle", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getStyle", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.style]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getWSAMappingList", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "getWSAMappingList", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.wsamappingList]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "registerMessageContext", "(MessageContext,OperationContext)", "", "Argument[0]", "Argument[1].SyntheticField[org.apache.axis2.context.OperationContext.messageContexts].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "registerMessageContext", "(MessageContext,OperationContext)", "", "Argument[this]", "Argument[0].SyntheticField[org.apache.axis2.context.MessageContext.axisOperation]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "registerOperationContext", "(MessageContext,OperationContext)", "", "Argument[this]", "Argument[0].SyntheticField[org.apache.axis2.context.MessageContext.axisOperation]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "setFaultMessages", "(AxisMessage)", "", "Argument[this]", "Argument[0].SyntheticField[org.apache.axis2.description.AxisDescription.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "setMessageExchangePattern", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.mepURI]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "setMessageReceiver", "(MessageReceiver)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.messageReceiver]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "setName", "(QName)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "setOutputAction", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.outputAction]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "setSoapAction", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.soapAction]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "setStyle", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.style]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisOperation", True, "setWsamappingList", "(ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisOperation.wsamappingList]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "AxisService", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addDataLocatorClassNames", "(String,String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addDataLocatorClassNames", "(String,String)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addEndpoint", "(String,AxisEndpoint)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.endpointMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addEndpoint", "(String,AxisEndpoint)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.endpointMap].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addExcludeOperationName", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addExposedTransport", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.exposedTransports].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addHttpLocationDispatcherString", "(String,AxisOperation)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addHttpLocationDispatcherString", "(String,AxisOperation)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addJSONMessageNameToOperationMapping", "(String,AxisOperation)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.jsonMessageNameToOperationMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addJSONMessageNameToOperationMapping", "(String,AxisOperation)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.jsonMessageNameToOperationMap].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addMessageContextListener", "(MessageContextListener)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addMessageElementQNameToOperationMapping", "(QName,AxisOperation)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.messageElementQNameToOperationMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addMessageElementQNameToOperationMapping", "(QName,AxisOperation)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.messageElementQNameToOperationMap].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addMessageReceiver", "(String,MessageReceiver)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.messageReceivers].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addMessageReceiver", "(String,MessageReceiver)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.messageReceivers].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addModuleConfig", "(ModuleConfiguration)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.moduleConfigmap].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addModuleConfig", "(ModuleConfiguration)", "", "Argument[0].SyntheticField[org.apache.axis2.description.ModuleConfiguration.moduleName]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.moduleConfigmap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addModuleref", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.moduleRefs].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addOperation", "(AxisOperation)", "", "Argument[this]", "Argument[0].SyntheticField[org.apache.axis2.description.AxisDescription.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addOperation", "(AxisOperation)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.messageReceivers].MapValue", "Argument[0].SyntheticField[org.apache.axis2.description.AxisOperation.messageReceiver]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addSchema", "(Collection)", "", "Argument[0].Element", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.schemaList].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "addSchema", "(XmlSchema)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.schemaList].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "createService", "(String,AxisConfiguration)", "", "Argument[0]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisService.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "createService", "(String,AxisConfiguration,Map,String,String,ClassLoader)", "", "Argument[0]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisService.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "createService", "(String,AxisConfiguration,Map,String,String,ClassLoader)", "", "Argument[1]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisDescription.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "createService", "(String,AxisConfiguration,Map,String,String,ClassLoader)", "", "Argument[1].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transportsIn].MapValue", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisService.endpointMap].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "createService", "(String,AxisConfiguration,Map,String,String,ClassLoader)", "", "Argument[1].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transportsIn].MapValue", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisService.endpointName]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "createService", "(String,AxisConfiguration,Map,String,String,ClassLoader)", "", "Argument[3]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisService.targetNamespace]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "createService", "(String,AxisConfiguration,Map,String,String,ClassLoader)", "", "Argument[5]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisService.serviceClassLoader]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "createService", "(String,String,AxisConfiguration,Map,String,ClassLoader,SchemaGenerator,AxisService)", "", "Argument[1]", "Argument[7].SyntheticField[org.apache.axis2.description.AxisService.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "createService", "(String,String,AxisConfiguration,Map,String,ClassLoader,SchemaGenerator,AxisService)", "", "Argument[1]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisService.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "createService", "(String,String,AxisConfiguration,Map,String,ClassLoader,SchemaGenerator,AxisService)", "", "Argument[4]", "Argument[7].SyntheticField[org.apache.axis2.description.AxisService.targetNamespace]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "createService", "(String,String,AxisConfiguration,Map,String,ClassLoader,SchemaGenerator,AxisService)", "", "Argument[4]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisService.targetNamespace]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "createService", "(String,String,AxisConfiguration,Map,String,ClassLoader,SchemaGenerator,AxisService)", "", "Argument[5]", "Argument[7].SyntheticField[org.apache.axis2.description.AxisService.serviceClassLoader]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "createService", "(String,String,AxisConfiguration,Map,String,ClassLoader,SchemaGenerator,AxisService)", "", "Argument[5]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisService.serviceClassLoader]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "createService", "(String,String,AxisConfiguration,Map,String,ClassLoader,SchemaGenerator,AxisService)", "", "Argument[7]", "ReturnValue", "value", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getAxisServiceGroup", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getAxisServiceGroup", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.parent]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getBindingName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getBindingName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.bindingName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getClassLoader", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getClassLoader", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.serviceClassLoader]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getControlOperations", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getCustomSchemaNamePrefix", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getCustomSchemaNamePrefix", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.customSchemaNamePrefix]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getCustomSchemaNameSuffix", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getCustomSchemaNameSuffix", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.customSchemaNameSuffix]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getData", "(DataRetrievalRequest,MessageContext)", "", "Argument[0].Element", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getData", "(DataRetrievalRequest,MessageContext)", "", "Argument[0].Element", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getData", "(DataRetrievalRequest,MessageContext)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getData", "(DataRetrievalRequest,MessageContext)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getDataLocator", "(LocatorType,String)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getDataLocator", "(LocatorType,String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getEPRs", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getEndpoint", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.endpointMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getEndpointName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getEndpointName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.endpointName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getEndpointURL", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getEndpointURL", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.endpointURL]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getEndpoints", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getEndpoints", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.endpointMap]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getExcludeInfo", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getExcludeInfo", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.excludeInfo]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getExposedTransports", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getExposedTransports", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.exposedTransports]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getFileName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getFileName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.fileName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getGlobalDataLocator", "(String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getImportedNamespaces", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getImportedNamespaces", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.importedNamespaces]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getKey", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getMessageReceiver", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.messageReceivers].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getModuleConfig", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.moduleConfigmap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getModules", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getModules", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.moduleRefs]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getNamespaceMap", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getNamespaceMap", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.namespaceMap]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getObjectSupplier", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getObjectSupplier", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.objectSupplier]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getOperation", "(QName)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.operationsAliasesMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getOperationByAction", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.operationsAliasesMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getOperationByJSONMessageName", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.jsonMessageNameToOperationMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getOperationByMessageElementQName", "(QName)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.messageElementQNameToOperationMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getOperationBySOAPAction", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.operationsAliasesMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getOperations", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getOperationsNameList", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getOperationsNameList", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.operationsNameList]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getP2nMap", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getP2nMap", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.p2nMap]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getPublishedOperations", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getSchema", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getSchema", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.schemaList]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getSchema", "(int)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.schemaList].Element", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getSchemaMappingTable", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getSchemaMappingTable", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.schemaMappingTable]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getSchemaTargetNamespace", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getSchemaTargetNamespace", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.schematargetNamespace]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getSchemaTargetNamespacePrefix", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getSchemaTargetNamespacePrefix", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.schematargetNamespacePrefix]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getScope", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getScope", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.scope]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getServiceLifeCycle", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getServiceLifeCycle", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.serviceLifeCycle]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getSoapNsUri", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getSoapNsUri", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.soapNsUri]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getTargetNamespace", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getTargetNamespace", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.targetNamespace]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getTargetNamespacePrefix", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getTargetNamespacePrefix", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.targetNamespacePrefix]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getTypeTable", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "getTypeTable", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.typeTable]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "lookupPolicy", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.policyMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "mapActionToOperation", "(String,AxisOperation)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.operationsAliasesMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "mapActionToOperation", "(String,AxisOperation)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.operationsAliasesMap].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "onEngage", "(AxisModule,AxisDescription)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "populateSchemaMappings", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "populateSchemaMappings", "(boolean)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "registerPolicy", "(String,Policy)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.policyMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "registerPolicy", "(String,Policy)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.policyMap].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setBindingName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.bindingName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setClassLoader", "(ClassLoader)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.serviceClassLoader]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setCustomSchemaNamePrefix", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.customSchemaNamePrefix]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setCustomSchemaNameSuffix", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.customSchemaNameSuffix]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setEPRs", "(String[])", "", "Argument[0].ArrayElement", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setEndpointName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.endpointName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setEndpointURL", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.endpointURL]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setExcludeInfo", "(ExcludeInfo)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.excludeInfo]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setExposedTransports", "(List)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.exposedTransports]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setFileName", "(URL)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.fileName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setImportedNamespaces", "(List)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.importedNamespaces]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setJSONMessageNameToOperationMap", "(Map)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.jsonMessageNameToOperationMap]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setMessageElementQNameToOperationMap", "(Map)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.messageElementQNameToOperationMap]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setNamespaceMap", "(NamespaceMap)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.namespaceMap]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setObjectSupplier", "(ObjectSupplier)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.objectSupplier]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setOperationsNameList", "(List)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.operationsNameList]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setP2nMap", "(Map)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.p2nMap]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setParent", "(AxisServiceGroup)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setSchemaMappingTable", "(Map)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.schemaMappingTable]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setSchemaTargetNamespace", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.schematargetNamespace]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setSchemaTargetNamespacePrefix", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.schematargetNamespacePrefix]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setScope", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.scope]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setServiceLifeCycle", "(ServiceLifeCycle)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.serviceLifeCycle]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setSoapNsUri", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.soapNsUri]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setTargetNamespace", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.targetNamespace]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setTargetNamespacePrefix", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.targetNamespacePrefix]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService", True, "setTypeTable", "(TypeTable)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService.typeTable]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService2WSDL11", True, "AxisService2WSDL11", "(AxisService)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService2WSDL11", True, "AxisService2WSDL11", "(AxisService,String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService2WSDL11", True, "AxisService2WSDL11", "(AxisService,String)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService2WSDL11", True, "getStyle", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService2WSDL11.style]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService2WSDL11", True, "getUse", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService2WSDL11.use]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService2WSDL11", True, "setStyle", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService2WSDL11.style]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService2WSDL11", True, "setUse", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisService2WSDL11.use]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisService2WSDL20", True, "AxisService2WSDL20", "(AxisService)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService2WSDL20", True, "AxisService2WSDL20", "(AxisService,String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService2WSDL20", True, "AxisService2WSDL20", "(AxisService,String)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService2WSDL20", True, "generateInterfaceOperationElement", "(AxisOperation,OMNamespace,OMNamespace,OMNamespace,OMNamespace)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisService2WSDL20", True, "setEPRs", "(String[])", "", "Argument[0].ArrayElement", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisServiceGroup", True, "AxisServiceGroup", "(AxisConfiguration)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisServiceGroup", True, "addModuleConfig", "(ModuleConfiguration)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisServiceGroup.moduleConfigmap].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisServiceGroup", True, "addModuleConfig", "(ModuleConfiguration)", "", "Argument[0].SyntheticField[org.apache.axis2.description.ModuleConfiguration.moduleName]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisServiceGroup.moduleConfigmap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisServiceGroup", True, "addModuleref", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisServiceGroup.modulesList].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisServiceGroup", True, "addService", "(AxisService)", "", "Argument[this]", "Argument[0].SyntheticField[org.apache.axis2.description.AxisDescription.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisServiceGroup", True, "getKey", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisServiceGroup.serviceGroupName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisServiceGroup", True, "getModuleConfig", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisServiceGroup.moduleConfigmap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisServiceGroup", True, "getModuleRefs", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisServiceGroup", True, "getModuleRefs", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisServiceGroup.modulesList]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisServiceGroup", True, "getService", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.children].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisServiceGroup", True, "getServiceGroupClassLoader", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisServiceGroup", True, "getServiceGroupClassLoader", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisServiceGroup.serviceGroupClassLoader]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisServiceGroup", True, "getServiceGroupName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisServiceGroup", True, "getServiceGroupName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisServiceGroup.serviceGroupName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisServiceGroup", True, "getServices", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.children].MapValue", "ReturnValue.Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisServiceGroup", True, "setAxisDescription", "(AxisConfiguration)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "AxisServiceGroup", True, "setServiceGroupClassLoader", "(ClassLoader)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisServiceGroup.serviceGroupClassLoader]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "AxisServiceGroup", True, "setServiceGroupName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisServiceGroup.serviceGroupName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "ClientUtils", True, "inferInTransport", "(AxisConfiguration,Options,MessageContext)", "", "Argument[0].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transportsIn].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "ClientUtils", True, "inferOutTransport", "(AxisConfiguration,EndpointReference,MessageContext)", "", "Argument[0].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transportsOut].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "Flow", True, "addHandler", "(HandlerDescription)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.Flow.list].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "Flow", True, "getHandler", "(int)", "", "Argument[this].SyntheticField[org.apache.axis2.description.Flow.list].Element", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "FlowInclude", True, "getFaultInFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.FlowInclude.In_fault]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "FlowInclude", True, "getFaultOutFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.FlowInclude.Out_fault]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "FlowInclude", True, "getInFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.FlowInclude.in]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "FlowInclude", True, "getOutFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.FlowInclude.out]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "FlowInclude", True, "setFaultInFlow", "(Flow)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.FlowInclude.In_fault]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "FlowInclude", True, "setFaultOutFlow", "(Flow)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.FlowInclude.Out_fault]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "FlowInclude", True, "setInFlow", "(Flow)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.FlowInclude.in]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "FlowInclude", True, "setOutFlow", "(Flow)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.FlowInclude.out]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "HandlerDescription", True, "HandlerDescription", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.HandlerDescription.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "HandlerDescription", True, "getClassName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.HandlerDescription.className]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "HandlerDescription", True, "getHandler", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.HandlerDescription.handler]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "HandlerDescription", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.HandlerDescription.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "HandlerDescription", True, "getParent", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.HandlerDescription.parent]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "HandlerDescription", True, "getRules", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.HandlerDescription.rules]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "HandlerDescription", True, "setClassName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.HandlerDescription.className]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "HandlerDescription", True, "setHandler", "(Handler)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.HandlerDescription.handler]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "HandlerDescription", True, "setName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.HandlerDescription.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "HandlerDescription", True, "setParent", "(ParameterInclude)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.HandlerDescription.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "HandlerDescription", True, "setRules", "(PhaseRule)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.HandlerDescription.rules]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "InOnlyAxisOperation", True, "InOnlyAxisOperation", "(QName)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "InOnlyAxisOperation", True, "addMessage", "(AxisMessage,String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.children].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "InOnlyAxisOperation", True, "addMessageContext", "(MessageContext,OperationContext)", "", "Argument[0]", "Argument[1].SyntheticField[org.apache.axis2.context.OperationContext.messageContexts].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "InOnlyAxisOperation", True, "getMessage", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.children].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "InOnlyAxisOperation", True, "getPhasesInFaultFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.InOnlyAxisOperation.inFaultMessage].SyntheticField[org.apache.axis2.description.AxisMessage.handlerChain]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "InOnlyAxisOperation", True, "getPhasesOutFaultFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.InOnlyAxisOperation.outFaultMessage].SyntheticField[org.apache.axis2.description.AxisMessage.handlerChain]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "InOnlyAxisOperation", True, "getPhasesOutFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.InOnlyAxisOperation.outPhase]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "InOnlyAxisOperation", True, "getRemainingPhasesInFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.children].MapValue", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "InOnlyAxisOperation", True, "setPhasesInFaultFlow", "(ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.InOnlyAxisOperation.inFaultMessage].SyntheticField[org.apache.axis2.description.AxisMessage.handlerChain]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "InOnlyAxisOperation", True, "setPhasesOutFaultFlow", "(ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.InOnlyAxisOperation.outFaultMessage].SyntheticField[org.apache.axis2.description.AxisMessage.handlerChain]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "InOnlyAxisOperation", True, "setPhasesOutFlow", "(ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.InOnlyAxisOperation.outPhase]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "InOutAxisOperation", True, "InOutAxisOperation", "(QName)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "ModuleConfiguration", True, "ModuleConfiguration", "(String,ParameterInclude)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.ModuleConfiguration.moduleName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "ModuleConfiguration", True, "getModuleName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.ModuleConfiguration.moduleName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "OutInAxisOperation", True, "OutInAxisOperation", "(QName)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "OutOnlyAxisOperation", True, "OutOnlyAxisOperation", "(QName)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "OutOnlyAxisOperation", True, "addMessage", "(AxisMessage,String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.children].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "OutOnlyAxisOperation", True, "addMessageContext", "(MessageContext,OperationContext)", "", "Argument[0]", "Argument[1].SyntheticField[org.apache.axis2.context.OperationContext.messageContexts].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "OutOnlyAxisOperation", True, "getMessage", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.children].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "OutOnlyAxisOperation", True, "getPhasesInFaultFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.OutOnlyAxisOperation.inFaultMessage].SyntheticField[org.apache.axis2.description.AxisMessage.handlerChain]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "OutOnlyAxisOperation", True, "getPhasesOutFaultFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.OutOnlyAxisOperation.outFaultMessage].SyntheticField[org.apache.axis2.description.AxisMessage.handlerChain]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "OutOnlyAxisOperation", True, "getPhasesOutFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.children].MapValue", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "OutOnlyAxisOperation", True, "getRemainingPhasesInFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.OutOnlyAxisOperation.inPhases]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "OutOnlyAxisOperation", True, "setPhasesInFaultFlow", "(ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.OutOnlyAxisOperation.inFaultMessage].SyntheticField[org.apache.axis2.description.AxisMessage.handlerChain]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "OutOnlyAxisOperation", True, "setPhasesOutFaultFlow", "(ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.OutOnlyAxisOperation.outFaultMessage].SyntheticField[org.apache.axis2.description.AxisMessage.handlerChain]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "OutOnlyAxisOperation", True, "setRemainingPhasesInFlow", "(ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.OutOnlyAxisOperation.inPhases]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "Parameter", True, "Parameter", "(String,Object)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.Parameter.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "Parameter", True, "Parameter", "(String,Object)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.Parameter.value]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "Parameter", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.Parameter.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "Parameter", True, "getParameterElement", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.Parameter.parameterElement]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "Parameter", True, "getValue", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.Parameter.value]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "Parameter", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "Parameter", True, "setName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.Parameter.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "Parameter", True, "setParameterElement", "(OMElement)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.Parameter.parameterElement]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "Parameter", True, "setValue", "(Object)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.Parameter.value]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "Parameter", True, "writeExternal", "(ObjectOutput)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "ParameterInclude", True, "getParameter", "(String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "ParameterInclude", True, "getParameters", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "ParameterIncludeImpl", True, "addParameter", "(Parameter)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.ParameterIncludeImpl.parameters].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "ParameterIncludeImpl", True, "addParameter", "(Parameter)", "", "Argument[0].SyntheticField[org.apache.axis2.description.Parameter.name]", "Argument[this].SyntheticField[org.apache.axis2.description.ParameterIncludeImpl.parameters].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "ParameterIncludeImpl", True, "getParameter", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.ParameterIncludeImpl.parameters].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "ParameterIncludeImpl", True, "getParameters", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.ParameterIncludeImpl.parameters].MapValue", "ReturnValue.Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "ParameterIncludeImpl", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "ParameterIncludeImpl", True, "writeExternal", "(ObjectOutput)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "PhaseRule", True, "PhaseRule", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.PhaseRule.phaseName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PhaseRule", True, "getAfter", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.PhaseRule.after]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PhaseRule", True, "getBefore", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.PhaseRule.before]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PhaseRule", True, "getPhaseName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.PhaseRule.phaseName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PhaseRule", True, "setAfter", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.PhaseRule.after]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PhaseRule", True, "setBefore", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.PhaseRule.before]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PhaseRule", True, "setPhaseName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.PhaseRule.phaseName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PolicyInclude", True, "PolicyInclude", "(AxisDescription)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.PolicyInclude.description]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PolicyInclude", True, "getDescription", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.PolicyInclude.description]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PolicyInclude", True, "getEffectivePolicy", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "PolicyInclude", True, "getPolicy", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "PolicyInclude", True, "getPolicyElements", "(int)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "PolicyInclude", True, "getPolicyRegistry", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.PolicyInclude.reg]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PolicyInclude", True, "setDescription", "(AxisDescription)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.PolicyInclude.description]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PolicyInclude", True, "setEffectivePolicy", "(Policy)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "PolicyInclude", True, "setPolicyRegistry", "(PolicyRegistry)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.PolicyInclude.reg]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PolicySubject", True, "attachPolicy", "(Policy)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.PolicySubject.attachedPolicyComponents].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PolicySubject", True, "attachPolicyComponent", "(PolicyComponent)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.PolicySubject.attachedPolicyComponents].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PolicySubject", True, "attachPolicyComponent", "(String,PolicyComponent)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.PolicySubject.attachedPolicyComponents].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PolicySubject", True, "attachPolicyComponent", "(String,PolicyComponent)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.PolicySubject.attachedPolicyComponents].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PolicySubject", True, "attachPolicyComponents", "(List)", "", "Argument[0].Element", "Argument[this].SyntheticField[org.apache.axis2.description.PolicySubject.attachedPolicyComponents].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PolicySubject", True, "attachPolicyReference", "(PolicyReference)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.PolicySubject.attachedPolicyComponents].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PolicySubject", True, "getAttachedPolicyComponent", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.PolicySubject.attachedPolicyComponents].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PolicySubject", True, "getAttachedPolicyComponents", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.PolicySubject.attachedPolicyComponents].MapValue", "ReturnValue.Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PolicySubject", True, "getLastUpdatedTime", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.PolicySubject.lastUpdatedTime]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PolicySubject", True, "setLastUpdatedTime", "(Date)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.PolicySubject.lastUpdatedTime]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "PolicySubject", True, "updatePolicy", "(Policy)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.PolicySubject.attachedPolicyComponents].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "RobustOutOnlyAxisOperation", True, "RobustOutOnlyAxisOperation", "(QName)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "TransportInDescription", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.TransportInDescription.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "getFaultFlow", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "getFaultFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.TransportInDescription.faultFlow]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "getFaultPhase", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "getFaultPhase", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.TransportInDescription.faultPhase]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "getInFlow", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "getInFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.TransportInDescription.inFlow]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "getInPhase", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "getInPhase", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.TransportInDescription.inPhase]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "getName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.TransportInDescription.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "getReceiver", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "getReceiver", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.TransportInDescription.receiver]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "setFaultFlow", "(Flow)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.TransportInDescription.faultFlow]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "setFaultPhase", "(Phase)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.TransportInDescription.faultPhase]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "setInFlow", "(Flow)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.TransportInDescription.inFlow]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "setInPhase", "(Phase)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.TransportInDescription.inPhase]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "setName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.TransportInDescription.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportInDescription", True, "setReceiver", "(TransportListener)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.TransportInDescription.receiver]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "TransportOutDescription", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.TransportOutDescription.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "getFaultFlow", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "getFaultFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.TransportOutDescription.faultFlow]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "getFaultPhase", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "getFaultPhase", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.TransportOutDescription.faultPhase]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "getName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.TransportOutDescription.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "getOutFlow", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "getOutFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.TransportOutDescription.outFlow]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "getOutPhase", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "getOutPhase", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.TransportOutDescription.outPhase]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "getSender", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "getSender", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.TransportOutDescription.sender]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "setFaultFlow", "(Flow)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.TransportOutDescription.faultFlow]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "setFaultPhase", "(Phase)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.TransportOutDescription.faultPhase]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "setName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.TransportOutDescription.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "setOutFlow", "(Flow)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.TransportOutDescription.outFlow]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "setOutPhase", "(Phase)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.TransportOutDescription.outPhase]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TransportOutDescription", True, "setSender", "(TransportSender)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.TransportOutDescription.sender]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TwoChannelAxisOperation", True, "TwoChannelAxisOperation", "(QName)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "TwoChannelAxisOperation", True, "addMessage", "(AxisMessage,String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.children].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TwoChannelAxisOperation", True, "getMessage", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.description.AxisDescription.children].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TwoChannelAxisOperation", True, "getPhasesInFaultFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.TwoChannelAxisOperation.inFaultMessage].SyntheticField[org.apache.axis2.description.AxisMessage.handlerChain]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TwoChannelAxisOperation", True, "getPhasesOutFaultFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.TwoChannelAxisOperation.outFaultMessage].SyntheticField[org.apache.axis2.description.AxisMessage.handlerChain]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TwoChannelAxisOperation", True, "getPhasesOutFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.TwoChannelAxisOperation.outMessage].SyntheticField[org.apache.axis2.description.AxisMessage.handlerChain]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TwoChannelAxisOperation", True, "getRemainingPhasesInFlow", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.TwoChannelAxisOperation.inMessage].SyntheticField[org.apache.axis2.description.AxisMessage.handlerChain]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TwoChannelAxisOperation", True, "setPhasesInFaultFlow", "(ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.TwoChannelAxisOperation.inFaultMessage].SyntheticField[org.apache.axis2.description.AxisMessage.handlerChain]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TwoChannelAxisOperation", True, "setPhasesOutFaultFlow", "(ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.TwoChannelAxisOperation.outFaultMessage].SyntheticField[org.apache.axis2.description.AxisMessage.handlerChain]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TwoChannelAxisOperation", True, "setPhasesOutFlow", "(ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.TwoChannelAxisOperation.outMessage].SyntheticField[org.apache.axis2.description.AxisMessage.handlerChain]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "TwoChannelAxisOperation", True, "setRemainingPhasesInFlow", "(ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.TwoChannelAxisOperation.inMessage].SyntheticField[org.apache.axis2.description.AxisMessage.handlerChain]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "Version", True, "Version", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "Version", True, "Version", "(int[],String)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAllAxisServicesBuilder", True, "WSDL11ToAllAxisServicesBuilder", "(Definition)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAllAxisServicesBuilder", True, "WSDL11ToAllAxisServicesBuilder", "(Definition,String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAllAxisServicesBuilder", True, "WSDL11ToAllAxisServicesBuilder", "(Definition,String)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAllAxisServicesBuilder", True, "WSDL11ToAllAxisServicesBuilder", "(InputStream)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAllAxisServicesBuilder", True, "populateAllServices", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder", True, "WSDL11ToAxisServiceBuilder", "(Definition,QName,String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder", True, "WSDL11ToAxisServiceBuilder", "(Definition,QName,String)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder", True, "WSDL11ToAxisServiceBuilder", "(Definition,QName,String)", "", "Argument[2]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder", True, "WSDL11ToAxisServiceBuilder", "(Definition,QName,String,boolean)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder", True, "WSDL11ToAxisServiceBuilder", "(Definition,QName,String,boolean)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder", True, "WSDL11ToAxisServiceBuilder", "(Definition,QName,String,boolean)", "", "Argument[2]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder", True, "WSDL11ToAxisServiceBuilder", "(InputStream)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder", True, "WSDL11ToAxisServiceBuilder", "(InputStream,AxisService)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.WSDLToAxisServiceBuilder.axisService]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder", True, "WSDL11ToAxisServiceBuilder", "(InputStream,QName,String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder", True, "WSDL11ToAxisServiceBuilder", "(InputStream,QName,String)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder", True, "WSDL11ToAxisServiceBuilder", "(InputStream,QName,String)", "", "Argument[2]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder", True, "getDocumentBaseUri", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.WSDL11ToAxisServiceBuilder.wsdlBaseDocumentURI]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder", True, "getPrefix", "(String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder", True, "getTypeName", "(String)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder", True, "populateService", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.WSDLToAxisServiceBuilder.axisService]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder", True, "setCustomWSDLResolver", "(WSDLLocator)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder", True, "setDocumentBaseUri", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.WSDL11ToAxisServiceBuilder.wsdlBaseDocumentURI]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder$WSDLProcessingException", True, "WSDLProcessingException", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder$WSDLProcessingException", True, "WSDLProcessingException", "(String,Throwable)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder$WSDLProcessingException", True, "WSDLProcessingException", "(String,Throwable)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDL11ToAxisServiceBuilder$WSDLProcessingException", True, "WSDLProcessingException", "(Throwable)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDLToAxisServiceBuilder", True, "WSDLToAxisServiceBuilder", "(InputStream,AxisService)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDLToAxisServiceBuilder", True, "WSDLToAxisServiceBuilder", "(InputStream,AxisService)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDLToAxisServiceBuilder", True, "WSDLToAxisServiceBuilder", "(InputStream,QName)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.description.WSDLToAxisServiceBuilder.serviceName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "WSDLToAxisServiceBuilder", True, "getBaseUri", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.WSDLToAxisServiceBuilder.baseUri]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "WSDLToAxisServiceBuilder", True, "getServiceName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.description.WSDLToAxisServiceBuilder.serviceName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "WSDLToAxisServiceBuilder", True, "setBaseUri", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.WSDLToAxisServiceBuilder.baseUri]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "WSDLToAxisServiceBuilder", True, "setCustomResolver", "(URIResolver)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.description", "WSDLToAxisServiceBuilder", True, "setServiceName", "(QName)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.description.WSDLToAxisServiceBuilder.serviceName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.description", "WSDLToAxisServiceBuilder", True, "useAxisConfiguration", "(AxisConfiguration)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: neutralModel
+    data:
+      - ["org.apache.axis2.description", "AxisService", "releaseSchemaList", "()", "summary", "ai-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.dispatchers.model.yml

@@ -0,0 +1,27 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sourceModel
+    data:
+      - ["org.apache.axis2.dispatchers", "AbstractOperationDispatcher", True, "invoke", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.dispatchers", "AbstractServiceDispatcher", True, "findService", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.dispatchers", "AbstractServiceDispatcher", True, "invoke", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.dispatchers", "AbstractOperationDispatcher", True, "findOperation", "(AxisService,MessageContext)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.dispatchers", "AbstractServiceDispatcher", True, "findService", "(MessageContext)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.dispatchers", "ActionBasedOperationDispatcher", True, "findOperation", "(AxisService,MessageContext)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.operationsAliasesMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.dispatchers", "AddressingBasedDispatcher", True, "findOperation", "(AxisService,MessageContext)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.operationsAliasesMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.dispatchers", "AddressingBasedDispatcher", True, "invoke", "(MessageContext)", "", "Argument[0]", "Argument[0].SyntheticField[org.apache.axis2.context.MessageContext.axisOperation]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.dispatchers", "JSONBasedDefaultDispatcher", True, "findOperation", "(AxisService,MessageContext)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.jsonMessageNameToOperationMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.dispatchers", "RequestURIBasedOperationDispatcher", True, "findOperation", "(AxisService,MessageContext)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.operationsAliasesMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.dispatchers", "RequestURIOperationDispatcher", True, "findOperation", "(AxisService,MessageContext)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.operationsAliasesMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.dispatchers", "SOAPActionBasedDispatcher", True, "findOperation", "(AxisService,MessageContext)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.operationsAliasesMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.dispatchers", "SOAPMessageBodyBasedDispatcher", True, "findOperation", "(AxisService,MessageContext)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.messageElementQNameToOperationMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.dispatchers", "SOAPMessageBodyBasedDispatcher", True, "findOperation", "(AxisService,MessageContext)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.operationsAliasesMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.dispatchers", "SOAPMessageBodyBasedOperationDispatcher", True, "findOperation", "(AxisService,MessageContext)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.messageElementQNameToOperationMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.dispatchers", "SOAPMessageBodyBasedOperationDispatcher", True, "findOperation", "(AxisService,MessageContext)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.operationsAliasesMap].MapValue", "ReturnValue", "value", "dfc-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.engine.model.yml

@@ -0,0 +1,174 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sinkModel
+    data:
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "deployModule", "(String)", "", "Argument[0]", "path-injection", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sourceModel
+    data:
+      - ["org.apache.axis2.engine", "AbstractDispatcher", True, "findOperation", "(AxisService,MessageContext)", "", "Parameter[1]", "remote", "ai-generated"]
+      - ["org.apache.axis2.engine", "AbstractDispatcher", True, "findService", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.engine", "AbstractDispatcher", True, "invoke", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.engine", "Handler", True, "flowComplete", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.engine", "Handler", True, "invoke", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.engine", "MessageReceiver", True, "receive", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.engine", "AbstractDispatcher", True, "findOperation", "(AxisService,MessageContext)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AbstractDispatcher", True, "findService", "(MessageContext)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addDataLocator", "(String,AxisDataLocator)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.dataLocators].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addDataLocator", "(String,AxisDataLocator)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.dataLocators].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addDataLocatorClassNames", "(String,String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.dataLocatorClassNames].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addDataLocatorClassNames", "(String,String)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.dataLocatorClassNames].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addDefaultModuleVersion", "(String,String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.nameToversionMap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addDefaultModuleVersion", "(String,String)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.nameToversionMap].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addFaultyServiceDuetoModule", "(String,FaultyServiceData)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.faultyServicesDueToModules].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addFaultyServiceDuetoModule", "(String,FaultyServiceData)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.faultyServices].MapValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addFaultyServiceDuetoModule", "(String,FaultyServiceData)", "", "Argument[1].SyntheticField[org.apache.axis2.util.FaultyServiceData.serviceGroupName]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.faultyServices].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addGlobalModuleRef", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addLocalPolicyAssertion", "(QName)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.localPolicyAssertions].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addMessageBuilder", "(String,Builder)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.messageBuilders].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addMessageBuilder", "(String,Builder)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.messageBuilders].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addMessageFormatter", "(String,MessageFormatter)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.messageFormatters].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addMessageFormatter", "(String,MessageFormatter)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.messageFormatters].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addMessageReceiver", "(String,MessageReceiver)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.messageReceivers].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addMessageReceiver", "(String,MessageReceiver)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.messageReceivers].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addModule", "(AxisModule)", "", "Argument[this]", "Argument[0].SyntheticField[org.apache.axis2.description.AxisModule.parent]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addModuleConfig", "(ModuleConfiguration)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.moduleConfigmap].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addModuleConfig", "(ModuleConfiguration)", "", "Argument[0].SyntheticField[org.apache.axis2.description.ModuleConfiguration.moduleName]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.moduleConfigmap].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addObservers", "(AxisObserver)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addService", "(AxisService)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addService", "(AxisService)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addServiceGroup", "(AxisServiceGroup)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addServiceGroup", "(AxisServiceGroup)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addServiceToExistingServiceGroup", "(AxisService,String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addServiceToExistingServiceGroup", "(AxisService,String)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addToAllServicesMap", "(AxisService)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.allServices].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addToAllServicesMap", "(AxisService)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.allServices].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addToAllServicesMap", "(AxisService)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisService.name]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.allServices].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addTransportIn", "(TransportInDescription)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transportsIn].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addTransportIn", "(TransportInDescription)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transportsIn].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addTransportIn", "(TransportInDescription)", "", "Argument[0].SyntheticField[org.apache.axis2.description.TransportInDescription.name]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transportsIn].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addTransportOut", "(TransportOutDescription)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transportsOut].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addTransportOut", "(TransportOutDescription)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transportsOut].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "addTransportOut", "(TransportOutDescription)", "", "Argument[0].SyntheticField[org.apache.axis2.description.TransportOutDescription.name]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transportsOut].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "cleanup", "()", "", "Argument[this]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.outPhases]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getConfigurator", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getConfigurator", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.configurator]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getDataLocator", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.dataLocators].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getDataLocatorClassName", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.dataLocatorClassNames].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getDefaultModule", "(String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getDefaultModuleVersion", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.nameToversionMap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getFaultyModules", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getFaultyServices", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getFaultyServices", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.faultyServices]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getFaultyServicesDuetoModule", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.faultyServicesDueToModules].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getFaultyServicesDuetoModules", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getFaultyServicesDuetoModules", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.faultyServicesDueToModules]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getInFaultFlowPhases", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getInFaultFlowPhases", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.inFaultPhases]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getInFlowPhases", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getInFlowPhases", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.inPhasesUptoAndIncludingPostDispatch]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getLocalPolicyAssertions", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getLocalPolicyAssertions", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.localPolicyAssertions]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getMessageBuilder", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.messageBuilders].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getMessageBuilder", "(String,boolean)", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.messageBuilders].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getMessageFormatter", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.messageFormatters].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getMessageReceiver", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.messageReceivers].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getModule", "(String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getModule", "(String,String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getModuleClassLoader", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getModuleClassLoader", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.moduleClassLoader]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getModuleConfig", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.moduleConfigmap].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getModules", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getModulesForPolicyNamesapce", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.policySupportedModules].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getOutFaultFlowPhases", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getOutFaultFlowPhases", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.outFaultPhases]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getOutFlowPhases", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getOutFlowPhases", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.outPhases]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getPhasesInfo", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getPhasesInfo", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.phasesinfo]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getRepository", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getRepository", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.axis2Repository]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getService", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.allServices].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getServiceClassLoader", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getServiceClassLoader", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.serviceClassLoader]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getServiceForActivation", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.allServices].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getServiceGroup", "(String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getServiceGroups", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getServices", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.allServices].MapKey", "ReturnValue.MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getServices", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.allServices].MapValue", "ReturnValue.MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getSystemClassLoader", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getSystemClassLoader", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.systemClassLoader]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getTransactionConfiguration", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getTransactionConfiguration", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transactionConfiguration]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getTransportIn", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transportsIn].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getTransportOut", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transportsOut].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getTransportsIn", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getTransportsIn", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transportsIn]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getTransportsOut", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "getTransportsOut", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transportsOut]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "registerLocalPolicyAssertions", "(AxisModule)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisModule.localPolicyAssertions].ArrayElement", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.localPolicyAssertions].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "registerModulePolicySupport", "(AxisModule)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisModule.supportedPolicyNames].ArrayElement", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.policySupportedModules].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "removeServiceGroup", "(String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "setConfigurator", "(AxisConfigurator)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.configurator]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "setGlobalOutPhase", "(List)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.outPhases]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "setInFaultPhases", "(List)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.inFaultPhases]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "setInPhasesUptoAndIncludingPostDispatch", "(List)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.inPhasesUptoAndIncludingPostDispatch]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "setModuleClassLoader", "(ClassLoader)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.moduleClassLoader]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "setOutFaultPhases", "(List)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.outFaultPhases]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "setPhasesInfo", "(PhasesInfo)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.phasesinfo]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "setRepository", "(URL)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.axis2Repository]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "setServiceClassLoader", "(ClassLoader)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.serviceClassLoader]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "setSystemClassLoader", "(ClassLoader)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.systemClassLoader]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfiguration", True, "setTransactionConfig", "(TransactionConfiguration)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transactionConfiguration]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisConfigurator", True, "getAxisConfiguration", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisError", True, "AxisError", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisError", True, "AxisError", "(String,Throwable)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisError", True, "AxisError", "(String,Throwable)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "AxisEvent", True, "AxisEvent", "(int,AxisDescription)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisEvent.axisDescription]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisEvent", True, "getAxisDescription", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisEvent.axisDescription]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisServer", True, "getConfigurationContext", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisServer.configContext]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "AxisServer", True, "setConfigurationContext", "(ConfigurationContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.AxisServer.configContext]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Deployable", True, "Deployable", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.Deployable.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Deployable", True, "Deployable", "(String,Object)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.Deployable.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Deployable", True, "Deployable", "(String,Object)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.engine.Deployable.target]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Deployable", True, "addPredecessor", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.Deployable.predecessors].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Deployable", True, "addSuccessor", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.Deployable.successors].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Deployable", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.Deployable.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Deployable", True, "getPhase", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.Deployable.phase]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Deployable", True, "getPredecessors", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.Deployable.predecessors]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Deployable", True, "getSuccessors", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.Deployable.successors]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Deployable", True, "getTarget", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.Deployable.target]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Deployable", True, "setPhase", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.Deployable.phase]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Deployable", True, "setTarget", "(Object)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.Deployable.target]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "DeployableChain", True, "addRelationship", "(String,String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "DeployableChain", True, "deploy", "(Deployable)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "DeployableChain", True, "getChain", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "DispatchPhase", True, "DispatchPhase", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "Handler", True, "getName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "ListenerManager", True, "addListener", "(TransportInDescription,boolean)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.engine", "ListenerManager", True, "getConfigctx", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "ListenerManager", True, "getConfigctx", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.ListenerManager.configctx]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "ListenerManager", True, "init", "(ConfigurationContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.ListenerManager.configctx]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "ListenerManager", True, "init", "(ConfigurationContext)", "", "Argument[this]", "Argument[0].SyntheticField[org.apache.axis2.context.ConfigurationContext.listenerManager]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "ListenerManager", True, "startSystem", "(ConfigurationContext)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.ListenerManager.configctx]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "ListenerManager", True, "startSystem", "(ConfigurationContext)", "", "Argument[this]", "Argument[0].SyntheticField[org.apache.axis2.context.ConfigurationContext.listenerManager]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Phase", True, "Phase", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.Phase.phaseName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Phase", True, "addHandler", "(Handler)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.Phase.handlers].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Phase", True, "addHandler", "(Handler,int)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.Phase.handlers].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Phase", True, "addHandler", "(HandlerDescription)", "", "Argument[0].SyntheticField[org.apache.axis2.description.HandlerDescription.handler]", "Argument[this].SyntheticField[org.apache.axis2.engine.Phase.handlers].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Phase", True, "getHandlers", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Phase", True, "getHandlers", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.Phase.handlers]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Phase", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.Phase.phaseName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Phase", True, "getPhaseName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Phase", True, "getPhaseName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.engine.Phase.phaseName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Phase", True, "setName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.Phase.phaseName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Phase", True, "setPhaseFirst", "(Handler)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.Phase.handlers].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.engine", "Phase", True, "setPhaseLast", "(Handler)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.engine.Phase.handlers].Element", "value", "dfc-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.handlers.model.yml

@@ -0,0 +1,17 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sourceModel
+    data:
+      - ["org.apache.axis2.handlers", "AbstractHandler", True, "flowComplete", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.handlers", "AbstractTemplatedHandler", True, "doInvoke", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.handlers", "AbstractTemplatedHandler", True, "invoke", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.handlers", "AbstractTemplatedHandler", True, "shouldInvoke", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.handlers", "AbstractHandler", True, "getHandlerDesc", "()", "", "Argument[this].SyntheticField[org.apache.axis2.handlers.AbstractHandler.handlerDesc]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.handlers", "AbstractHandler", True, "init", "(HandlerDescription)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.handlers.AbstractHandler.handlerDesc]", "value", "dfc-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.i18n.model.yml

@@ -0,0 +1,39 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.i18n", "MessageBundle", True, "MessageBundle", "(String,String,String,Locale,ClassLoader,ResourceBundle)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.i18n", "MessageBundle", True, "MessageBundle", "(String,String,String,Locale,ClassLoader,ResourceBundle)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.i18n", "MessageBundle", True, "MessageBundle", "(String,String,String,Locale,ClassLoader,ResourceBundle)", "", "Argument[2]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.i18n", "MessageBundle", True, "MessageBundle", "(String,String,String,Locale,ClassLoader,ResourceBundle)", "", "Argument[3]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.i18n", "MessageBundle", True, "MessageBundle", "(String,String,String,Locale,ClassLoader,ResourceBundle)", "", "Argument[4]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.i18n", "MessageBundle", True, "MessageBundle", "(String,String,String,Locale,ClassLoader,ResourceBundle)", "", "Argument[5]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.i18n", "MessageBundle", True, "getResourceBundle", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.i18n", "ProjectResourceBundle", True, "getBundle", "(String,Class,String,Locale)", "", "Argument[2]", "ReturnValue.SyntheticField[org.apache.axis2.i18n.ProjectResourceBundle.resourceName]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.i18n", "ProjectResourceBundle", True, "getBundle", "(String,Class,String,Locale,ResourceBundle)", "", "Argument[2]", "ReturnValue.SyntheticField[org.apache.axis2.i18n.ProjectResourceBundle.resourceName]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.i18n", "ProjectResourceBundle", True, "getBundle", "(String,Class,String,Locale,ResourceBundle)", "", "Argument[4]", "ReturnValue.SyntheticField[org.apache.axis2.i18n.ProjectResourceBundle.resourceBundle].SyntheticField[org.apache.axis2.i18n.ProjectResourceBundle.resourceBundle]", "value", "dfc-generated"]
+      - ["org.apache.axis2.i18n", "ProjectResourceBundle", True, "getBundle", "(String,Class,String,Locale,ResourceBundle)", "", "Argument[4]", "ReturnValue.SyntheticField[org.apache.axis2.i18n.ProjectResourceBundle.resourceBundle]", "value", "dfc-generated"]
+      - ["org.apache.axis2.i18n", "ProjectResourceBundle", True, "getBundle", "(String,String,String)", "", "Argument[1]", "ReturnValue.SyntheticField[org.apache.axis2.i18n.ProjectResourceBundle.resourceName]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.i18n", "ProjectResourceBundle", True, "getBundle", "(String,String,String)", "", "Argument[2]", "ReturnValue.SyntheticField[org.apache.axis2.i18n.ProjectResourceBundle.resourceName]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.i18n", "ProjectResourceBundle", True, "getBundle", "(String,String,String,Locale,ClassLoader)", "", "Argument[1]", "ReturnValue.SyntheticField[org.apache.axis2.i18n.ProjectResourceBundle.resourceName]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.i18n", "ProjectResourceBundle", True, "getBundle", "(String,String,String,Locale,ClassLoader)", "", "Argument[2]", "ReturnValue.SyntheticField[org.apache.axis2.i18n.ProjectResourceBundle.resourceName]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.i18n", "ProjectResourceBundle", True, "getBundle", "(String,String,String,Locale,ClassLoader,ResourceBundle)", "", "Argument[1]", "ReturnValue.SyntheticField[org.apache.axis2.i18n.ProjectResourceBundle.resourceName]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.i18n", "ProjectResourceBundle", True, "getBundle", "(String,String,String,Locale,ClassLoader,ResourceBundle)", "", "Argument[2]", "ReturnValue.SyntheticField[org.apache.axis2.i18n.ProjectResourceBundle.resourceName]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.i18n", "ProjectResourceBundle", True, "getBundle", "(String,String,String,Locale,ClassLoader,ResourceBundle)", "", "Argument[5]", "ReturnValue.SyntheticField[org.apache.axis2.i18n.ProjectResourceBundle.resourceBundle].SyntheticField[org.apache.axis2.i18n.ProjectResourceBundle.resourceBundle]", "value", "dfc-generated"]
+      - ["org.apache.axis2.i18n", "ProjectResourceBundle", True, "getBundle", "(String,String,String,Locale,ClassLoader,ResourceBundle)", "", "Argument[5]", "ReturnValue.SyntheticField[org.apache.axis2.i18n.ProjectResourceBundle.resourceBundle]", "value", "dfc-generated"]
+      - ["org.apache.axis2.i18n", "ProjectResourceBundle", True, "getKeys", "()", "", "Argument[this].SyntheticField[org.apache.axis2.i18n.ProjectResourceBundle.resourceBundle].SyntheticField[org.apache.axis2.i18n.ProjectResourceBundle.resourceBundle]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.i18n", "ProjectResourceBundle", True, "getKeys", "()", "", "Argument[this].SyntheticField[org.apache.axis2.i18n.ProjectResourceBundle.resourceBundle]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.i18n", "ProjectResourceBundle", True, "getResourceName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.i18n.ProjectResourceBundle.resourceName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.i18n", "RB", True, "RB", "(Object,String)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.i18n", "RB", True, "RB", "(Object,String,Locale)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.i18n", "RB", True, "RB", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.i18n", "RB", True, "getProperties", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: neutralModel
+    data:
+      - ["org.apache.axis2.i18n", "ProjectResourceBundle", "getBundle", "(String,Class,String,Locale,ResourceBundle)", "summary", "ai-generated"]
+      - ["org.apache.axis2.i18n", "ProjectResourceBundle", "getBundle", "(String,String,String,Locale,ClassLoader,ResourceBundle)", "summary", "ai-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.java.security.model.yml

@@ -0,0 +1,11 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.java.security", "AccessController", True, "doPrivileged", "(PrivilegedAction)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.java.security", "AccessController", True, "doPrivileged", "(PrivilegedAction,AccessControlContext)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.java.security", "AccessController", True, "doPrivileged", "(PrivilegedExceptionAction)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.java.security", "AccessController", True, "doPrivileged", "(PrivilegedExceptionAction,AccessControlContext)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.jaxrs.model.yml

@@ -0,0 +1,16 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.jaxrs", "JAXRSModel", True, "getConsumes", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.jaxrs", "JAXRSModel", True, "getHTTPMethod", "()", "", "Argument[this].SyntheticField[org.apache.axis2.jaxrs.JAXRSModel.HttpMethod]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.jaxrs", "JAXRSModel", True, "getPath", "()", "", "Argument[this].SyntheticField[org.apache.axis2.jaxrs.JAXRSModel.Path]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.jaxrs", "JAXRSModel", True, "getProduces", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.jaxrs", "JAXRSModel", True, "setConsumes", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.jaxrs", "JAXRSModel", True, "setHTTPMethod", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.jaxrs.JAXRSModel.HttpMethod]", "value", "dfc-generated"]
+      - ["org.apache.axis2.jaxrs", "JAXRSModel", True, "setPath", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.jaxrs.JAXRSModel.Path]", "value", "dfc-generated"]
+      - ["org.apache.axis2.jaxrs", "JAXRSModel", True, "setProduces", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.jaxrs", "JAXRSUtils", True, "getMethodModel", "(JAXRSModel,Method)", "", "Argument[0].SyntheticField[org.apache.axis2.jaxrs.JAXRSModel.Path]", "ReturnValue.SyntheticField[org.apache.axis2.jaxrs.JAXRSModel.Path]", "value", "dfc-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.kernel.http.model.yml

@@ -0,0 +1,13 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.kernel.http", "ApplicationXMLFormatter", True, "getContentType", "(MessageContext,OMOutputFormat,String)", "", "Argument[0].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.kernel.http", "ApplicationXMLFormatter", True, "getTargetAddress", "(MessageContext,OMOutputFormat,URL)", "", "Argument[0].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.kernel.http", "HTTPConstants", True, "getBytes", "(String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.kernel.http", "MultipartFormDataFormatter", True, "getTargetAddress", "(MessageContext,OMOutputFormat,URL)", "", "Argument[0].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.kernel.http", "SOAPMessageFormatter", True, "getTargetAddress", "(MessageContext,OMOutputFormat,URL)", "", "Argument[0].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.kernel.http", "XFormURLEncodedFormatter", True, "getTargetAddress", "(MessageContext,OMOutputFormat,URL)", "", "Argument[0].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "ReturnValue", "taint", "dfc-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.kernel.http.util.model.yml

@@ -0,0 +1,18 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.kernel.http.util", "ComplexPart", True, "ComplexPart", "(String,String)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.kernel.http.util", "ComplexPart", True, "ComplexPart", "(String,String,String)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.kernel.http.util", "QueryStringParser", True, "QueryStringParser", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.kernel.http.util.QueryStringParser.queryString]", "value", "dfc-generated"]
+      - ["org.apache.axis2.kernel.http.util", "QueryStringParser", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.kernel.http.util.QueryStringParser.paramName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.kernel.http.util", "QueryStringParser", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.kernel.http.util.QueryStringParser.queryString]", "Argument[this].SyntheticField[org.apache.axis2.kernel.http.util.QueryStringParser.paramName]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.kernel.http.util", "QueryStringParser", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.kernel.http.util.QueryStringParser.queryString]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.kernel.http.util", "QueryStringParser", True, "getValue", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.kernel.http.util", "URLTemplatingUtil", True, "appendQueryParameters", "(MessageContext,URL)", "", "Argument[0].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.kernel.http.util", "URLTemplatingUtil", True, "appendQueryParameters", "(MessageContext,URL)", "", "Argument[1]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.kernel.http.util", "URLTemplatingUtil", True, "getTemplatedURL", "(URL,MessageContext,boolean)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.kernel.http.util", "URLTemplatingUtil", True, "getTemplatedURL", "(URL,MessageContext,boolean)", "", "Argument[1].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "ReturnValue", "taint", "dfc-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.kernel.model.yml

@@ -0,0 +1,34 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sinkModel
+    data:
+      - ["org.apache.axis2.kernel", "OutTransportInfo", True, "setContentType", "(String)", "", "Argument[0]", "response-splitting", "ai-generated"]
+      - ["org.apache.axis2.kernel", "SimpleAxis2Server", True, "SimpleAxis2Server", "(String,String)", "", "Argument[0]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.kernel", "SimpleAxis2Server", True, "SimpleAxis2Server", "(String,String)", "", "Argument[1]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.kernel", "TransportUtils", True, "createDocumentElement", "(String,Builder,MessageContext,InputStream)", "", "Argument[3]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.kernel", "TransportUtils", True, "createDocumentElement", "(String,MessageContext,InputStream)", "", "Argument[2]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.kernel", "TransportUtils", True, "createSOAPMessage", "(MessageContext)", "", "Argument[0]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.kernel", "TransportUtils", True, "createSOAPMessage", "(MessageContext,boolean)", "", "Argument[0]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.kernel", "TransportUtils", True, "createSOAPMessage", "(MessageContext,InputStream,String)", "", "Argument[1]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.kernel", "TransportUtils", True, "createSOAPMessage", "(MessageContext,InputStream,String,Builder)", "", "Argument[1]", "xxe", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sourceModel
+    data:
+      - ["org.apache.axis2.kernel", "SimpleAxis2Server", True, "main", "(String[])", "", "Parameter[0]", "commandargs", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.kernel", "MessageFormatter", True, "formatSOAPAction", "(MessageContext,OMOutputFormat,String)", "", "Argument[2]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.kernel", "MessageFormatter", True, "getContentType", "(MessageContext,OMOutputFormat,String)", "", "Argument[2]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.kernel", "MessageFormatter", True, "getTargetAddress", "(MessageContext,OMOutputFormat,URL)", "", "Argument[2]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.kernel", "TransportUtils", True, "createDocumentElement", "(String,MessageContext,InputStream)", "", "Argument[0]", "Argument[1].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.kernel", "TransportUtils", True, "createSOAPEnvelope", "(OMElement)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.kernel", "TransportUtils", True, "createSOAPMessage", "(MessageContext,InputStream,String)", "", "Argument[2]", "Argument[0].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.kernel", "TransportUtils", True, "getCharSetEncoding", "(MessageContext)", "", "Argument[0].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.kernel", "TransportUtils", True, "getCharSetEncoding", "(String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.kernel", "TransportUtils", True, "getContentType", "(String,MessageContext)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.model.yml

@@ -0,0 +1,59 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(QName,List,String,Throwable)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultCode]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(QName,List,String,Throwable)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultSubCodes]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(QName,List,String,Throwable)", "", "Argument[3]", "Argument[this].Field[java.rmi.RemoteException.detail]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(QName,String,String,String,OMElement)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultCode]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(QName,String,String,String,OMElement)", "", "Argument[2]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultNode]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(QName,String,String,String,OMElement)", "", "Argument[3]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultRole]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(QName,String,String,String,OMElement)", "", "Argument[4]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.details].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(QName,String,Throwable)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultCode]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(QName,String,Throwable)", "", "Argument[2]", "Argument[this].Field[java.rmi.RemoteException.detail]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(SOAPFault,MessageContext)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultMessageContext]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(SOAPFaultCode,SOAPFaultReason,SOAPFaultNode,SOAPFaultRole,SOAPFaultDetail)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.soapFaultCode]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(SOAPFaultCode,SOAPFaultReason,SOAPFaultNode,SOAPFaultRole,SOAPFaultDetail)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.soapFaultReason]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(SOAPFaultCode,SOAPFaultReason,SOAPFaultNode,SOAPFaultRole,SOAPFaultDetail)", "", "Argument[2]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.soapFaultNode]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(SOAPFaultCode,SOAPFaultReason,SOAPFaultNode,SOAPFaultRole,SOAPFaultDetail)", "", "Argument[3]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.soapFaultRole]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(SOAPFaultCode,SOAPFaultReason,SOAPFaultNode,SOAPFaultRole,SOAPFaultDetail)", "", "Argument[4]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.soapFaultDetail]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(String,MessageContext)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultMessageContext]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(String,MessageContext,Throwable)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultMessageContext]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(String,MessageContext,Throwable)", "", "Argument[2]", "Argument[this].Field[java.rmi.RemoteException.detail]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(String,QName)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultCode]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(String,QName,Throwable)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultCode]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(String,QName,Throwable)", "", "Argument[2]", "Argument[this].Field[java.rmi.RemoteException.detail]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(String,String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(String,String)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(String,String,Throwable)", "", "Argument[2]", "Argument[this].Field[java.rmi.RemoteException.detail]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "AxisFault", "(String,Throwable)", "", "Argument[1]", "Argument[this].Field[java.rmi.RemoteException.detail]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "addHeader", "(SOAPHeaderBlock)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.headers].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "getDetail", "()", "", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.details].Element", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "getDetails", "()", "", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.details]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "getFaultAction", "()", "", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultAction]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "getFaultCode", "()", "", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultCode]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "getFaultCodeElement", "()", "", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.soapFaultCode]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "getFaultDetailElement", "()", "", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.soapFaultDetail]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "getFaultMessageContext", "()", "", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultMessageContext]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "getFaultNode", "()", "", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultNode]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "getFaultNodeElement", "()", "", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.soapFaultNode]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "getFaultReasonElement", "()", "", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.soapFaultReason]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "getFaultRole", "()", "", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultRole]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "getFaultRoleElement", "()", "", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.soapFaultRole]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "getFaultSubCodes", "()", "", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultSubCodes]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "getNodeURI", "()", "", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.nodeURI]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "getReason", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "headerIterator", "()", "", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.headers].Element", "ReturnValue.Element", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "headers", "()", "", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.headers]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "makeFault", "(Throwable)", "", "Argument[0]", "ReturnValue", "value", "df-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "setDetail", "(OMElement)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.details].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "setDetails", "(List)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.details]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "setFaultAction", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultAction]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "setFaultCode", "(QName)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultCode]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "setFaultCode", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "setFaultSubCodes", "(List)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.faultSubCodes]", "value", "dfc-generated"]
+      - ["org.apache.axis2", "AxisFault", True, "setNodeURI", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.AxisFault.nodeURI]", "value", "dfc-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.phaseresolver.model.yml

@@ -0,0 +1,12 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.phaseresolver", "PhaseException", True, "PhaseException", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.phaseresolver", "PhaseException", True, "PhaseException", "(String,Throwable)", "", "Argument[1]", "Argument[this].Field[java.rmi.RemoteException.detail]", "value", "dfc-generated"]
+      - ["org.apache.axis2.phaseresolver", "PhaseException", True, "PhaseException", "(Throwable)", "", "Argument[0]", "Argument[this].Field[java.rmi.RemoteException.detail]", "value", "dfc-generated"]
+      - ["org.apache.axis2.phaseresolver", "PhaseHolder", True, "PhaseHolder", "(List)", "", "Argument[0].Element", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.phaseresolver", "PhaseResolver", True, "PhaseResolver", "(AxisConfiguration)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.receivers.model.yml

@@ -0,0 +1,19 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sourceModel
+    data:
+      - ["org.apache.axis2.receivers", "AbstractInOutMessageReceiver", True, "invokeBusinessLogic", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.receivers", "AbstractInOutMessageReceiver", True, "invokeBusinessLogic", "(MessageContext,MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.receivers", "AbstractMessageReceiver", True, "invokeBusinessLogic", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.receivers", "AbstractMessageReceiver", True, "receive", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.receivers", "RawXMLINOnlyMessageReceiver", True, "invokeBusinessLogic", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.receivers", "RawXMLINOutMessageReceiver", True, "invokeBusinessLogic", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.receivers", "RawXMLINOutMessageReceiver", True, "invokeBusinessLogic", "(MessageContext,MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.receivers", "AbstractMessageReceiver$AsyncMessageReceiverWorker", True, "AsyncMessageReceiverWorker", "(MessageContext)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.transaction.model.yml

@@ -0,0 +1,10 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.transaction", "Axis2UserTransaction", True, "Axis2UserTransaction", "(TransactionManager)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.transaction", "TransactionConfiguration", True, "getTransactionManager", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.transaction", "TransactionConfiguration", True, "getUserTransaction", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.util.model.yml

@@ -0,0 +1,245 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sinkModel
+    data:
+      - ["org.apache.axis2.util", "FileWriter", True, "createClassFile", "(File,String,String,String)", "", "Argument[0]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "FileWriter", True, "createClassFile", "(File,String,String,String)", "", "Argument[1]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "FileWriter", True, "createClassFile", "(File,String,String,String)", "", "Argument[2]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "FileWriter", True, "createClassFile", "(File,String,String,String)", "", "Argument[3]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "LogWriter", True, "write", "(char[],int,int)", "", "Argument[0]", "log-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "readArrayList", "(ObjectInput,String)", "", "Argument[0]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "readHashMap", "(ObjectInput,String)", "", "Argument[0]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "readLinkedList", "(ObjectInput,String)", "", "Argument[0]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "readObject", "(ObjectInput,String)", "", "Argument[0]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "readString", "(ObjectInput,String)", "", "Argument[0]", "unsafe-deserialization", "ai-generated"]
+      - ["org.apache.axis2.util", "OnDemandLogger", True, "debug", "(Object)", "", "Argument[0]", "log-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "OnDemandLogger", True, "debug", "(Object,Throwable)", "", "Argument[0]", "log-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "OnDemandLogger", True, "error", "(Object)", "", "Argument[0]", "log-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "OnDemandLogger", True, "error", "(Object,Throwable)", "", "Argument[0]", "log-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "OnDemandLogger", True, "fatal", "(Object)", "", "Argument[0]", "log-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "OnDemandLogger", True, "fatal", "(Object,Throwable)", "", "Argument[0]", "log-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "OnDemandLogger", True, "info", "(Object)", "", "Argument[0]", "log-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "OnDemandLogger", True, "info", "(Object,Throwable)", "", "Argument[0]", "log-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "OnDemandLogger", True, "trace", "(Object)", "", "Argument[0]", "log-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "OnDemandLogger", True, "trace", "(Object,Throwable)", "", "Argument[0]", "log-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "OnDemandLogger", True, "warn", "(Object)", "", "Argument[0]", "log-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "OnDemandLogger", True, "warn", "(Object,Throwable)", "", "Argument[0]", "log-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "SecureWSDLLocator", True, "getBaseInputSource", "()", "", "Argument[this]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.util", "SecureWSDLLocator", True, "getImportInputSource", "(String,String)", "", "Argument[0]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.util", "SecureWSDLLocator", True, "getImportInputSource", "(String,String)", "", "Argument[1]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "getNewConfigurationContext", "(String)", "", "Argument[0]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "XMLPrettyPrinter", True, "prettify", "(File)", "", "Argument[0]", "path-injection", "ai-generated"]
+      - ["org.apache.axis2.util", "XMLUtils", True, "getInputSourceFromURI", "(String)", "", "Argument[0]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.util", "XMLUtils", True, "newDocument", "(InputSource)", "", "Argument[0]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.util", "XMLUtils", True, "newDocument", "(InputStream)", "", "Argument[0]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.util", "XMLUtils", True, "newDocument", "(String)", "", "Argument[0]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.util", "XMLUtils", True, "newDocument", "(String)", "", "Argument[0]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.util", "XMLUtils", True, "newDocument", "(String,String,String)", "", "Argument[0]", "request-forgery", "ai-generated"]
+      - ["org.apache.axis2.util", "XMLUtils", True, "newDocument", "(String,String,String)", "", "Argument[0]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.util", "XMLUtils", True, "toOM", "(InputStream)", "", "Argument[0]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.util", "XMLUtils", True, "toOM", "(InputStream,boolean)", "", "Argument[0]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.util", "XMLUtils", True, "toOM", "(Reader)", "", "Argument[0]", "xxe", "ai-generated"]
+      - ["org.apache.axis2.util", "XMLUtils", True, "toOM", "(Reader,boolean)", "", "Argument[0]", "xxe", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: sourceModel
+    data:
+      - ["org.apache.axis2.util", "CallbackReceiver", True, "receive", "(MessageContext)", "", "Parameter[0]", "remote", "ai-generated"]
+      - ["org.apache.axis2.util", "OptionsParser", True, "OptionsParser", "(String[])", "", "Argument[this]", "commandargs", "ai-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "getIpAddress", "()", "", "ReturnValue", "environment", "ai-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "getLocalHostLANAddresses", "()", "", "ReturnValue.Element", "environment", "ai-generated"]
+      - ["org.apache.axis2.util", "XMLUtils", True, "getInputSourceFromURI", "(String)", "", "ReturnValue", "remote", "ai-generated"]
+      - ["org.apache.axis2.util", "XMLUtils", True, "newDocument", "(String)", "", "ReturnValue", "remote", "ai-generated"]
+      - ["org.apache.axis2.util", "XMLUtils", True, "newDocument", "(String,String,String)", "", "ReturnValue", "remote", "ai-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.util", "ArrayStack", True, "get", "()", "", "Argument[this].Element", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "ArrayStack", True, "peek", "()", "", "Argument[this].Element", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "ArrayStack", True, "peek", "(int)", "", "Argument[this].Element", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "ArrayStack", True, "pop", "()", "", "Argument[this].Element", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "ArrayStack", True, "push", "(Object)", "", "Argument[0]", "Argument[this].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "ArrayStack", True, "push", "(Object)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "ArrayStack", True, "remove", "()", "", "Argument[this].Element", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "AxisPolicyLocator", True, "AxisPolicyLocator", "(AxisDescription)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "AxisPolicyLocator", True, "lookup", "(String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "CallbackReceiver", True, "addCallback", "(String,AxisCallback)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.CallbackReceiver.callbackStore].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "CallbackReceiver", True, "addCallback", "(String,AxisCallback)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.util.CallbackReceiver.callbackStore].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "CallbackReceiver", True, "getCallbackStore", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.CallbackReceiver.callbackStore]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "CallbackReceiver", True, "lookupCallback", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.util.CallbackReceiver.callbackStore].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "CommandLineOption", True, "CommandLineOption", "(String,ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.CommandLineOption.type]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "CommandLineOption", True, "CommandLineOption", "(String,ArrayList)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.util.CommandLineOption.optionValues]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "CommandLineOption", True, "CommandLineOption", "(String,String[])", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.CommandLineOption.type]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "CommandLineOption", True, "CommandLineOption", "(String,String[])", "", "Argument[1].ArrayElement", "Argument[this].SyntheticField[org.apache.axis2.util.CommandLineOption.optionValues].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "CommandLineOption", True, "getOptionType", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.CommandLineOption.type]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "CommandLineOption", True, "getOptionValue", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.CommandLineOption.optionValues].Element", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "CommandLineOption", True, "getOptionValues", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.CommandLineOption.optionValues]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "CommandLineOptionParser", True, "CommandLineOptionParser", "(Map)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.CommandLineOptionParser.commandLineOptions]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "CommandLineOptionParser", True, "CommandLineOptionParser", "(String[])", "", "Argument[0].ArrayElement", "Argument[this].SyntheticField[org.apache.axis2.util.CommandLineOptionParser.commandLineOptions].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "CommandLineOptionParser", True, "getAllOptions", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.CommandLineOptionParser.commandLineOptions]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "CommandLineOptionParser", True, "getInvalidOptions", "(OptionsValidator)", "", "Argument[this].SyntheticField[org.apache.axis2.util.CommandLineOptionParser.commandLineOptions].MapValue", "ReturnValue.Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "ExternalPolicySerializer", True, "addAssertionToFilter", "(QName)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.ExternalPolicySerializer.assertions2Filter].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "ExternalPolicySerializer", True, "getAssertionsToFilter", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.ExternalPolicySerializer.assertions2Filter]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "ExternalPolicySerializer", True, "setAssertionsToFilter", "(List)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.ExternalPolicySerializer.assertions2Filter]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "FaultyServiceData", True, "FaultyServiceData", "(AxisServiceGroup,ArrayList,URL,DeploymentFileData)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.FaultyServiceData.serviceGroupName]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "FaultyServiceData", True, "FaultyServiceData", "(AxisServiceGroup,ArrayList,URL,DeploymentFileData)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.FaultyServiceData.serviceGroup]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "FaultyServiceData", True, "FaultyServiceData", "(AxisServiceGroup,ArrayList,URL,DeploymentFileData)", "", "Argument[0].SyntheticField[org.apache.axis2.description.AxisServiceGroup.serviceGroupName]", "Argument[this].SyntheticField[org.apache.axis2.util.FaultyServiceData.serviceGroupName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "FaultyServiceData", True, "FaultyServiceData", "(AxisServiceGroup,ArrayList,URL,DeploymentFileData)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.util.FaultyServiceData.serviceList]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "FaultyServiceData", True, "FaultyServiceData", "(AxisServiceGroup,ArrayList,URL,DeploymentFileData)", "", "Argument[2]", "Argument[this].SyntheticField[org.apache.axis2.util.FaultyServiceData.serviceLocation]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "FaultyServiceData", True, "FaultyServiceData", "(AxisServiceGroup,ArrayList,URL,DeploymentFileData)", "", "Argument[3]", "Argument[this].SyntheticField[org.apache.axis2.util.FaultyServiceData.currentDeploymentFile]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "FaultyServiceData", True, "getCurrentDeploymentFile", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.FaultyServiceData.currentDeploymentFile]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "FaultyServiceData", True, "getServiceGroup", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.FaultyServiceData.serviceGroup]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "FaultyServiceData", True, "getServiceGroupName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.FaultyServiceData.serviceGroupName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "FaultyServiceData", True, "getServiceList", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.FaultyServiceData.serviceList]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "FaultyServiceData", True, "getServiceLocation", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.FaultyServiceData.serviceLocation]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "FileWriter", True, "createClassFile", "(File,String,String,String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "FileWriter", True, "createClassFile", "(File,String,String,String)", "", "Argument[2]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "FileWriter", True, "createClassFile", "(File,String,String,String)", "", "Argument[3]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "HostConfiguration", True, "HostConfiguration", "(String,int)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.HostConfiguration.ip]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "HostConfiguration", True, "getIp", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.HostConfiguration.ip]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "IOUtils", True, "copy", "(InputStream,OutputStream,boolean)", "", "Argument[0]", "Argument[1]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "JavaUtils", True, "capitalizeFirstChar", "(String)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "JavaUtils", True, "makeNonJavaKeyword", "(String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "JavaUtils", True, "replace", "(String,String,String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "JavaUtils", True, "replace", "(String,String,String)", "", "Argument[2]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "JavaUtils", True, "split", "(String,char)", "", "Argument[0]", "ReturnValue.ArrayElement", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "JavaUtils", True, "xmlNameToJava", "(String)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "JavaUtils", True, "xmlNameToJavaIdentifier", "(String)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "LogWriter", True, "LogWriter", "(Log)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "LogWriter", True, "LogWriter", "(Log,String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "LogWriter", True, "LogWriter", "(Log,String)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "MessageContextBuilder", True, "createFaultMessageContext", "(MessageContext,Throwable)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "MessageContextBuilder", True, "createFaultMessageContext", "(MessageContext,Throwable)", "", "Argument[1]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "MessageContextBuilder", True, "createOutMessageContext", "(MessageContext)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "MessageContextBuilder", True, "switchNamespacePrefix", "(String,OMNamespace)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MessageProcessorSelector", True, "getMessageBuilder", "(String,MessageContext)", "", "Argument[0]", "Argument[1].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MessageProcessorSelector", True, "getMessageFormatter", "(MessageContext)", "", "Argument[0].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "MetaDataEntry", "(String,String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.MetaDataEntry.className]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "MetaDataEntry", "(String,String)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.util.MetaDataEntry.qnameAsString]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "MetaDataEntry", "(String,String,ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.MetaDataEntry.className]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "MetaDataEntry", "(String,String,ArrayList)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.util.MetaDataEntry.qnameAsString]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "MetaDataEntry", "(String,String,ArrayList)", "", "Argument[2]", "Argument[this].SyntheticField[org.apache.axis2.util.MetaDataEntry.children]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "MetaDataEntry", "(String,String,String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.MetaDataEntry.className]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "MetaDataEntry", "(String,String,String)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.util.MetaDataEntry.qnameAsString]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "MetaDataEntry", "(String,String,String)", "", "Argument[2]", "Argument[this].SyntheticField[org.apache.axis2.util.MetaDataEntry.extraName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "addToList", "(MetaDataEntry)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.MetaDataEntry.children].Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "getChildren", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "getChildren", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.MetaDataEntry.children]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "getClassName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "getClassName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.MetaDataEntry.className]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "getExtraName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "getExtraName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.MetaDataEntry.extraName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "getName", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.MetaDataEntry.qnameAsString]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "getQName", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "getQNameAsString", "()", "", "Argument[this]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "getQNameAsString", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.MetaDataEntry.qnameAsString]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "setChildren", "(ArrayList)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.MetaDataEntry.children]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "setClassName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.MetaDataEntry.className]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "setExtraName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.MetaDataEntry.extraName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "setQName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.MetaDataEntry.qnameAsString]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MetaDataEntry", True, "writeExternal", "(ObjectOutput)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "MultipleEntryHashMap", True, "get", "(Object)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "MultipleEntryHashMap", True, "keySet", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.MultipleEntryHashMap.table].MapKey", "ReturnValue.Element", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MultipleEntryHashMap", True, "put", "(Object,Object)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.MultipleEntryHashMap.table].MapKey", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "MultipleEntryHashMap", True, "put", "(Object,Object)", "", "Argument[1]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "findHandler", "(ArrayList,MetaDataEntry)", "", "Argument[0].Element", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "findMessage", "(AxisOperation,String,String)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "findOperation", "(AxisConfiguration,String,QName)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "findOperation", "(AxisService,String,QName)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "findService", "(AxisConfiguration,String,String)", "", "Argument[0].SyntheticField[org.apache.axis2.engine.AxisConfiguration.allServices].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "findServiceGroup", "(AxisConfiguration,String,String)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "findTransportListener", "(AxisConfiguration,String)", "", "Argument[0].SyntheticField[org.apache.axis2.engine.AxisConfiguration.transportsIn].MapValue", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "readArrayList", "(ObjectInput,String)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "readHashMap", "(ObjectInput,String)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "readLinkedList", "(ObjectInput,String)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "readObject", "(ObjectInput,String)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "readString", "(ObjectInput,String)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "writeArrayList", "(ObjectOutput,ArrayList,String)", "", "Argument[1].Element", "Argument[0].SyntheticField[org.apache.axis2.context.externalize.SafeObjectOutputStream.out]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "writeLinkedList", "(ObjectOutput,LinkedList,String)", "", "Argument[1].Element", "Argument[0].SyntheticField[org.apache.axis2.context.externalize.SafeObjectOutputStream.out]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "writeObject", "(ObjectOutput,Object,String)", "", "Argument[1]", "Argument[0].SyntheticField[org.apache.axis2.context.externalize.SafeObjectOutputStream.out]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", True, "writeString", "(ObjectOutput,String,String)", "", "Argument[1]", "Argument[0].SyntheticField[org.apache.axis2.context.externalize.SafeObjectOutputStream.out]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "OptionsParser", True, "OptionsParser", "(String[])", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.OptionsParser.args]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "OptionsParser", True, "getPassword", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.OptionsParser.args].ArrayElement", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "OptionsParser", True, "getRemainingArgs", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.OptionsParser.args].ArrayElement", "ReturnValue.ArrayElement", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "OptionsParser", True, "getRemainingFlags", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.OptionsParser.args].ArrayElement", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "OptionsParser", True, "getUser", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.OptionsParser.args].ArrayElement", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "OptionsParser", True, "isValueSet", "(char)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "PolicyLocator", True, "PolicyLocator", "(AxisService)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "PolicyLocator", True, "lookup", "(String)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "PolicyUtil", True, "generateId", "(AxisDescription)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "PolicyUtil", True, "getMergedPolicy", "(Collection,AxisDescription)", "", "Argument[0].Element", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "PolicyUtil", True, "getMergedPolicy", "(List,AxisService)", "", "Argument[0].Element", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "SecureWSDLLocator", True, "SecureWSDLLocator", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.SecureWSDLLocator.baseURI]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "SecureWSDLLocator", True, "getBaseURI", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.SecureWSDLLocator.baseURI]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "SecureWSDLLocator", True, "getImportInputSource", "(String,String)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.util.SecureWSDLLocator.latestImportURI]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "SecureWSDLLocator", True, "getLatestImportURI", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.SecureWSDLLocator.latestImportURI]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "SelfManagedDataHolder", True, "SelfManagedDataHolder", "(String,String,byte[])", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.SelfManagedDataHolder.classname]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "SelfManagedDataHolder", True, "SelfManagedDataHolder", "(String,String,byte[])", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.util.SelfManagedDataHolder.id]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "SelfManagedDataHolder", True, "getClassname", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.SelfManagedDataHolder.classname]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "SelfManagedDataHolder", True, "getData", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.SelfManagedDataHolder.data]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "SelfManagedDataHolder", True, "getId", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.SelfManagedDataHolder.id]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "SelfManagedDataHolder", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.SelfManagedDataHolder.classname]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "SelfManagedDataHolder", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.SelfManagedDataHolder.data]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "SelfManagedDataHolder", True, "readExternal", "(ObjectInput)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.SelfManagedDataHolder.id]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "SelfManagedDataHolder", True, "writeExternal", "(ObjectOutput)", "", "Argument[this]", "Argument[0]", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "StreamWrapper", True, "StreamWrapper", "(XMLStreamReader)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.StreamWrapper.realReader]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "StreamWrapper", True, "getCharacterEncodingScheme", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.StreamWrapper.realReader]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "StreamWrapper", True, "getElementText", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.StreamWrapper.realReader]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "StreamWrapper", True, "getLocalName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.StreamWrapper.realReader]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "StreamWrapper", True, "getNamespaceContext", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.StreamWrapper.realReader]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "StreamWrapper", True, "getPITarget", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.StreamWrapper.realReader]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "StreamWrapper", True, "getProperty", "(String)", "", "Argument[this].SyntheticField[org.apache.axis2.util.StreamWrapper.realReader]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "StreamWrapper", True, "getText", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.StreamWrapper.realReader]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "URL", True, "URL", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.URL.fileName]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "URL", True, "URL", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.URL.host]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "URL", True, "URL", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.URL.protocol]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "URL", True, "getFileName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.URL.fileName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "URL", True, "getHost", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.URL.host]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "URL", True, "getProtocol", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.URL.protocol]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "URLProcessor", True, "makePackageName", "(String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "calculateDefaultModuleVersion", "(HashMap,AxisConfiguration)", "", "Argument[0].Element", "Argument[1]", "taint", "df-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "createSimpleInOnlyService", "(QName,MessageReceiver,QName)", "", "Argument[0].SyntheticField[javax.xml.namespace.QName.localPart]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisService.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "createSimpleInOnlyService", "(QName,MessageReceiver,QName)", "", "Argument[2].SyntheticField[javax.xml.namespace.QName.localPart]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisService.operationsAliasesMap].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "createSimpleService", "(QName,MessageReceiver,String,QName)", "", "Argument[0].SyntheticField[javax.xml.namespace.QName.localPart]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisService.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "createSimpleService", "(QName,MessageReceiver,String,QName)", "", "Argument[3].SyntheticField[javax.xml.namespace.QName.localPart]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisService.operationsAliasesMap].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "createSimpleService", "(QName,String,QName)", "", "Argument[0].SyntheticField[javax.xml.namespace.QName.localPart]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisService.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "createSimpleService", "(QName,String,QName)", "", "Argument[2].SyntheticField[javax.xml.namespace.QName.localPart]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisService.operationsAliasesMap].MapKey", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "createSimpleServiceforClient", "(QName,MessageReceiver,String,QName)", "", "Argument[0].SyntheticField[javax.xml.namespace.QName.localPart]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisService.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "createSimpleServiceforClient", "(QName,String,QName)", "", "Argument[0].SyntheticField[javax.xml.namespace.QName.localPart]", "ReturnValue.SyntheticField[org.apache.axis2.description.AxisService.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "fillContextInformation", "(AxisService,ConfigurationContext)", "", "Argument[1]", "ReturnValue.SyntheticField[org.apache.axis2.context.ServiceContext.configContext]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "getInboundFaultFromMessageContext", "(MessageContext)", "", "Argument[0]", "ReturnValue.SyntheticField[org.apache.axis2.AxisFault.faultMessageContext]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "getInboundFaultFromMessageContext", "(MessageContext)", "", "Argument[0].SyntheticField[org.apache.axis2.context.AbstractContext.properties].MapValue", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "getModuleName", "(String,String)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "getModuleName", "(String,String)", "", "Argument[1]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "getNewConfigurationContext", "(String)", "", "Argument[0]", "ReturnValue.SyntheticField[org.apache.axis2.context.ConfigurationContext.axisConfiguration].SyntheticField[org.apache.axis2.engine.AxisConfiguration.axis2Repository]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "getOperationName", "(String,String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "getParameterValue", "(Parameter)", "", "Argument[0].SyntheticField[org.apache.axis2.description.Parameter.value]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "getServiceAndOperationPart", "(String,String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "getURIScheme", "(String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "parseRequestURLForServiceAndOperation", "(String,String)", "", "Argument[0]", "ReturnValue.ArrayElement", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "Utils", True, "sanitizeWebOutput", "(String)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "WSDLSerializationUtil", True, "extractHostIP", "(String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "WSDLSerializationUtil", True, "getElementName", "(AxisMessage,Map)", "", "Argument[1].MapKey", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "WSDLSerializationUtil", True, "getPrefix", "(String,Map)", "", "Argument[1].MapKey", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "WrappedDataHandler", True, "WrappedDataHandler", "(DataHandler,String)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.util.WrappedDataHandler.contentType]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "WrappedDataHandler", True, "getContentType", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.WrappedDataHandler.contentType]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "XMLUtils", True, "findNode", "(Node,QName)", "", "Argument[0]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "XMLUtils", True, "getInputSourceFromURI", "(String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.util", "XMLUtils", True, "getQNameFromString", "(String,Node)", "", "Argument[0]", "ReturnValue.SyntheticField[javax.xml.namespace.QName.localPart]", "value", "dfc-generated"]
+      - ["org.apache.axis2.util", "XMLUtils", True, "getStringForQName", "(QName,Element)", "", "Argument[0].SyntheticField[javax.xml.namespace.QName.localPart]", "ReturnValue", "taint", "dfc-generated"]
+  - addsTo:
+      pack: codeql/java-all
+      extensible: neutralModel
+    data:
+      - ["org.apache.axis2.util", "ObjectStateUtils", "writeArrayList", "(ObjectOutput,ArrayList,String)", "summary", "ai-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", "writeHashMap", "(ObjectOutput,HashMap,String)", "summary", "ai-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", "writeLinkedList", "(ObjectOutput,LinkedList,String)", "summary", "ai-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", "writeObject", "(ObjectOutput,Object,String)", "summary", "ai-generated"]
+      - ["org.apache.axis2.util", "ObjectStateUtils", "writeString", "(ObjectOutput,String,String)", "summary", "ai-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.util.threadpool.model.yml

@@ -0,0 +1,12 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.util.threadpool", "DefaultThreadFactory", True, "DefaultThreadFactory", "(ThreadGroup,String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.util.threadpool", "DefaultThreadFactory", True, "DefaultThreadFactory", "(ThreadGroup,String)", "", "Argument[1]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.util.threadpool", "DefaultThreadFactory", True, "newThread", "(Runnable)", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.util.threadpool", "ThreadPool", True, "getExecutor", "()", "", "Argument[this].SyntheticField[org.apache.axis2.util.threadpool.ThreadPool.executor]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.util.threadpool", "ThreadPool", True, "setExecutor", "(ThreadPoolExecutor)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.util.threadpool.ThreadPool.executor]", "value", "dfc-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.wsdl.model.yml

@@ -0,0 +1,29 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.wsdl", "HTTPHeaderMessage", True, "getName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.wsdl.HTTPHeaderMessage.name]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "HTTPHeaderMessage", True, "getqName", "()", "", "Argument[this].SyntheticField[org.apache.axis2.wsdl.HTTPHeaderMessage.qName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "HTTPHeaderMessage", True, "setName", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.HTTPHeaderMessage.name]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "HTTPHeaderMessage", True, "setqName", "(QName)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.HTTPHeaderMessage.qName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "SOAPHeaderMessage", True, "SOAPHeaderMessage", "(QName)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
+      - ["org.apache.axis2.wsdl", "SOAPHeaderMessage", True, "getElement", "()", "", "Argument[this].SyntheticField[org.apache.axis2.wsdl.SOAPHeaderMessage.element]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "SOAPHeaderMessage", True, "getMessage", "()", "", "Argument[this].SyntheticField[org.apache.axis2.wsdl.SOAPHeaderMessage.messageName]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "SOAPHeaderMessage", True, "getNamespaceURI", "()", "", "Argument[this].SyntheticField[org.apache.axis2.wsdl.SOAPHeaderMessage.namespaceURI]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "SOAPHeaderMessage", True, "getUse", "()", "", "Argument[this].SyntheticField[org.apache.axis2.wsdl.SOAPHeaderMessage.use]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "SOAPHeaderMessage", True, "part", "()", "", "Argument[this].SyntheticField[org.apache.axis2.wsdl.SOAPHeaderMessage.part]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "SOAPHeaderMessage", True, "setElement", "(QName)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.SOAPHeaderMessage.element]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "SOAPHeaderMessage", True, "setMessage", "(QName)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.SOAPHeaderMessage.messageName]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "SOAPHeaderMessage", True, "setNamespaceURI", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.SOAPHeaderMessage.namespaceURI]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "SOAPHeaderMessage", True, "setPart", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.SOAPHeaderMessage.part]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "SOAPHeaderMessage", True, "setUse", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.SOAPHeaderMessage.use]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "SOAPModuleMessage", True, "getUri", "()", "", "Argument[this].SyntheticField[org.apache.axis2.wsdl.SOAPModuleMessage.uri]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "SOAPModuleMessage", True, "setUri", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.SOAPModuleMessage.uri]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "WSDLUtil", True, "getConstantFromHTTPLocation", "(String,String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "WSDLUtil", True, "getConstantFromHTTPLocation", "(String,String)", "", "Argument[1]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "WSDLUtil", True, "getEndpointName", "(String,String)", "", "Argument[0]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "WSDLUtil", True, "getEndpointName", "(String,String)", "", "Argument[1]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.wsdl", "WSDLUtil", True, "getPartQName", "(String,String,String)", "", "Argument[2]", "ReturnValue.SyntheticField[javax.xml.namespace.QName.localPart]", "value", "dfc-generated"]

java/ql/lib/ext/generated/llmgenerator/org.apache.axis2.wsdl.util.model.yml

@@ -0,0 +1,51 @@
+# THIS FILE IS AN AUTO-GENERATED MODELS AS DATA FILE. DO NOT EDIT.
+# Generated from https://github.com/apache/axis-axis2-java-core#aaf1489fabd4599e54039a27f605081f301b3123 by codeql-mads-via-llm
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "WSDLDefinitionWrapper", "(Definition,AxisConfiguration)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperBasicImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "WSDLDefinitionWrapper", "(Definition,AxisConfiguration)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperReloadImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "WSDLDefinitionWrapper", "(Definition,AxisConfiguration)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperSaveImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "WSDLDefinitionWrapper", "(Definition,URL,AxisConfiguration)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperBasicImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "WSDLDefinitionWrapper", "(Definition,URL,AxisConfiguration)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperReloadImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "WSDLDefinitionWrapper", "(Definition,URL,AxisConfiguration)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperSaveImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "WSDLDefinitionWrapper", "(Definition,URL,boolean)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperBasicImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "WSDLDefinitionWrapper", "(Definition,URL,boolean)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperReloadImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "WSDLDefinitionWrapper", "(Definition,URL,boolean)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperSaveImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "WSDLDefinitionWrapper", "(Definition,URL,boolean,int)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperBasicImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "WSDLDefinitionWrapper", "(Definition,URL,boolean,int)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperReloadImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "WSDLDefinitionWrapper", "(Definition,URL,boolean,int)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperSaveImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "WSDLDefinitionWrapper", "(Definition,URL,int)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperBasicImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "WSDLDefinitionWrapper", "(Definition,URL,int)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperReloadImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "WSDLDefinitionWrapper", "(Definition,URL,int)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperSaveImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "WSDLDefinitionWrapper", "(Definition,boolean,int)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperBasicImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "WSDLDefinitionWrapper", "(Definition,boolean,int)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperReloadImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "WSDLDefinitionWrapper", "(Definition,boolean,int)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperSaveImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "getUnwrappedDefinition", "()", "", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperBasicImpl.wsdlDefinition]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "getUnwrappedDefinition", "()", "", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperReloadImpl.wsdlDefinition]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLDefinitionWrapper", True, "getUnwrappedDefinition", "()", "", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLDefinitionWrapper.wrapperImpl].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperSaveImpl.wsdlDefinition]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperBasicImpl", True, "WSDLWrapperBasicImpl", "(Definition)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperBasicImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperBasicImpl", True, "WSDLWrapperBasicImpl", "(Definition,URL)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperBasicImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperBasicImpl", True, "WSDLWrapperBasicImpl", "(Definition,URL)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperBasicImpl.wsdlURL]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperBasicImpl", True, "getUnwrappedDefinition", "()", "", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperBasicImpl.wsdlDefinition]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperBasicImpl", True, "getWSDLLocation", "()", "", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperBasicImpl.wsdlURL]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperBasicImpl", True, "setDefinitionToWrap", "(Definition)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperBasicImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperBasicImpl", True, "setWSDLLocation", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperBasicImpl.wsdlURL]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperReloadImpl", True, "WSDLWrapperReloadImpl", "(Definition)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperReloadImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperReloadImpl", True, "WSDLWrapperReloadImpl", "(Definition,URL)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperReloadImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperReloadImpl", True, "WSDLWrapperReloadImpl", "(Definition,URL)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperReloadImpl.wsdlURL]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperReloadImpl", True, "getDocumentationElement", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperReloadImpl", True, "getTypes", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperReloadImpl", True, "getUnwrappedDefinition", "()", "", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperReloadImpl.wsdlDefinition]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperReloadImpl", True, "getWSDLLocation", "()", "", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperReloadImpl.wsdlURL]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperReloadImpl", True, "setDefinitionToWrap", "(Definition)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperReloadImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperReloadImpl", True, "setWSDLLocation", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperReloadImpl.wsdlURL]", "taint", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperSaveImpl", True, "WSDLWrapperSaveImpl", "(Definition)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperSaveImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperSaveImpl", True, "WSDLWrapperSaveImpl", "(Definition,URL)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperSaveImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperSaveImpl", True, "WSDLWrapperSaveImpl", "(Definition,URL)", "", "Argument[1]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperSaveImpl.wsdlURL]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperSaveImpl", True, "getUnwrappedDefinition", "()", "", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperSaveImpl.wsdlDefinition]", "ReturnValue", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperSaveImpl", True, "getWSDLLocation", "()", "", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperSaveImpl.wsdlURL]", "ReturnValue", "taint", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperSaveImpl", True, "setDefinitionToWrap", "(Definition)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperSaveImpl.wsdlDefinition]", "value", "dfc-generated"]
+      - ["org.apache.axis2.wsdl.util", "WSDLWrapperSaveImpl", True, "setWSDLLocation", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[org.apache.axis2.wsdl.util.WSDLWrapperSaveImpl.wsdlURL]", "taint", "dfc-generated"]

java/ql/test/experimental/query-tests/quantum/examples/BadMacUse/BadMacOrderDecryptThenMac.expected

@@ -29,3 +29,8 @@ nodes
 | BadMacUse.java:146:48:146:57 | ciphertext : byte[] | semmle.label | ciphertext : byte[] |
 | BadMacUse.java:152:42:152:51 | ciphertext | semmle.label | ciphertext |
 subpaths
+testFailures
+| BadMacUse.java:50:56:50:66 | // $ Source | Missing result: Source |
+| BadMacUse.java:63:118:63:128 | // $ Source | Missing result: Source |
+| BadMacUse.java:92:31:92:35 | bytes : byte[] | Unexpected result: Source |
+| BadMacUse.java:146:95:146:105 | // $ Source | Missing result: Source |

java/ql/test/experimental/query-tests/quantum/examples/BadMacUse/BadMacOrderDecryptToMac.expected

@@ -30,3 +30,8 @@ nodes
 | BadMacUse.java:118:83:118:84 | iv : byte[] | semmle.label | iv : byte[] |
 | BadMacUse.java:124:42:124:51 | ciphertext | semmle.label | ciphertext |
 subpaths
+testFailures
+| BadMacUse.java:63:118:63:128 | // $ Source | Missing result: Source |
+| BadMacUse.java:92:16:92:36 | doFinal(...) : byte[] | Unexpected result: Source |
+| BadMacUse.java:124:42:124:51 | ciphertext | Unexpected result: Alert |
+| BadMacUse.java:146:95:146:105 | // $ Source | Missing result: Source |

java/ql/test/experimental/query-tests/quantum/examples/BadMacUse/BadMacOrderMacOnEncryptPlaintext.expected

@@ -44,3 +44,8 @@ nodes
 | BadMacUse.java:146:48:146:57 | ciphertext : byte[] [[]] : Object | semmle.label | ciphertext : byte[] [[]] : Object |
 | BadMacUse.java:152:42:152:51 | ciphertext | semmle.label | ciphertext |
 subpaths
+testFailures
+| BadMacUse.java:50:56:50:66 | // $ Source | Missing result: Source |
+| BadMacUse.java:139:79:139:90 | input : byte[] | Unexpected result: Source |
+| BadMacUse.java:146:95:146:105 | // $ Source | Missing result: Source |
+| BadMacUse.java:152:42:152:51 | ciphertext | Unexpected result: Alert |

java/ql/test/experimental/query-tests/quantum/examples/BadMacUse/BadMacUse.java

@@ -47,7 +47,7 @@ class BadMacUse {
         SecretKey encryptionKey = new SecretKeySpec(encryptionKeyBytes, "AES");
         Cipher cipher = Cipher.getInstance("AES/GCM/NoPadding");
         cipher.init(Cipher.DECRYPT_MODE, encryptionKey, new SecureRandom());
-        byte[] plaintext = cipher.doFinal(ciphertext); // $ Source[java/quantum/examples/bad-mac-order-decrypt-to-mac]
+        byte[] plaintext = cipher.doFinal(ciphertext); // $ Source
 
         // Now verify MAC (too late)
         SecretKey macKey = new SecretKeySpec(macKeyBytes, "HmacSHA256");
@@ -60,7 +60,7 @@ class BadMacUse {
         }
     }
 
-    public void BadMacOnPlaintext(byte[] encryptionKeyBytes, byte[] macKeyBytes, byte[] plaintext) throws Exception {// $ Source[java/quantum/examples/bad-mac-order-encrypt-plaintext-also-in-mac]
+    public void BadMacOnPlaintext(byte[] encryptionKeyBytes, byte[] macKeyBytes, byte[] plaintext) throws Exception {// $ Source
         // Create keys directly from provided byte arrays
         SecretKey encryptionKey = new SecretKeySpec(encryptionKeyBytes, "AES");
         SecretKey macKey = new SecretKeySpec(macKeyBytes, "HmacSHA256");
@@ -89,7 +89,7 @@ class BadMacUse {
 
         IvParameterSpec ivParameterSpec = new IvParameterSpec(iv);
         cipher.init(mode, secretKeySpec, ivParameterSpec);
-        return cipher.doFinal(bytes); // $ Source[java/quantum/examples/bad-mac-order-decrypt-then-mac] Source[java/quantum/examples/bad-mac-order-decrypt-to-mac]
+        return cipher.doFinal(bytes);
     }
 
     /**
@@ -121,7 +121,7 @@ class BadMacUse {
         SecretKey macKey = new SecretKeySpec(macKeyBytes, "HmacSHA256");
         Mac mac = Mac.getInstance("HmacSHA256");
         mac.init(macKey);
-        byte[] computedMac = mac.doFinal(ciphertext); // $ SPURIOUS: Alert[java/quantum/examples/bad-mac-order-decrypt-to-mac]
+        byte[] computedMac = mac.doFinal(ciphertext); // False Positive
 
         // Concatenate ciphertext and MAC
         byte[] output = new byte[ciphertext.length + computedMac.length];
@@ -136,20 +136,20 @@ class BadMacUse {
      * The function decrypts THEN computes the MAC on the plaintext.
      * It should have the MAC computed on the ciphertext first.
      */
-    public void decryptThenMac(byte[] encryptionKeyBytes, byte[] macKeyBytes, byte[] input) throws Exception { // $ SPURIOUS: Source[java/quantum/examples/bad-mac-order-encrypt-plaintext-also-in-mac]
+    public void decryptThenMac(byte[] encryptionKeyBytes, byte[] macKeyBytes, byte[] input) throws Exception {
         // Split input into ciphertext and MAC
         int macLength = 32; // HMAC-SHA256 output length
         byte[] ciphertext = Arrays.copyOfRange(input, 0, input.length - macLength);
         byte[] receivedMac = Arrays.copyOfRange(input, input.length - macLength, input.length);
 
         // Decrypt first (unsafe)
-        byte[] plaintext = decryptUsingWrapper(ciphertext, encryptionKeyBytes, new byte[16]);
+        byte[] plaintext = decryptUsingWrapper(ciphertext, encryptionKeyBytes, new byte[16]); // $ Source
 
         // Now verify MAC (too late)
         SecretKey macKey = new SecretKeySpec(macKeyBytes, "HmacSHA256");
         Mac mac = Mac.getInstance("HmacSHA256");
         mac.init(macKey);
-        byte[] computedMac = mac.doFinal(ciphertext); // $ Alert[java/quantum/examples/bad-mac-order-decrypt-then-mac] SPURIOUS: Alert[java/quantum/examples/bad-mac-order-encrypt-plaintext-also-in-mac]
+        byte[] computedMac = mac.doFinal(ciphertext); // $ Alert[java/quantum/examples/bad-mac-order-decrypt-then-mac], False positive for Plaintext reuse
 
         if (!MessageDigest.isEqual(receivedMac, computedMac)) {
             throw new SecurityException("MAC verification failed");

java/ql/test/experimental/query-tests/quantum/examples/InsecureOrUnknownNonceSource/InsecureIVorNonceSource.expected

@@ -126,3 +126,5 @@ nodes
 | InsecureIVorNonceSource.java:202:54:202:55 | iv : byte[] | semmle.label | iv : byte[] |
 | InsecureIVorNonceSource.java:206:51:206:56 | ivSpec | semmle.label | ivSpec |
 subpaths
+testFailures
+| InsecureIVorNonceSource.java:42:21:42:21 | 1 : Number | Unexpected result: Source |

java/ql/test/experimental/query-tests/quantum/examples/InsecureOrUnknownNonceSource/InsecureIVorNonceSource.java

@@ -39,7 +39,7 @@ public class InsecureIVorNonceSource {
     public byte[] encryptWithStaticIvByteArray(byte[] key, byte[] plaintext) throws Exception {
         byte[] iv = new byte[16];
         for (byte i = 0; i < iv.length; i++) {
-            iv[i] = 1; // $ Source[java/quantum/examples/insecure-iv-or-nonce]
+            iv[i] = 1;
         }
 
         IvParameterSpec ivSpec = new IvParameterSpec(iv);

java/ql/test/experimental/query-tests/quantum/examples/WeakOrUnknownKDFIterationCount/Test.java

@@ -40,11 +40,11 @@ public class Test {
      * SAST/CBOM: - Parent: PBKDF2. - Iteration count is only 10, which is far
      * below acceptable security standards. - Flagged as insecure.
      */
-    public void pbkdf2LowIteration(String password, int iterationCount) throws Exception { // $ Source[java/quantum/examples/unknown-kdf-iteration-count]
+    public void pbkdf2LowIteration(String password, int iterationCount) throws Exception { // $ Source
         byte[] salt = generateSalt(16);
-        PBEKeySpec spec = new PBEKeySpec(password.toCharArray(), salt, iterationCount, 256);
+        PBEKeySpec spec = new PBEKeySpec(password.toCharArray(), salt, iterationCount, 256); // $ Alert[java/quantum/examples/unknown-kdf-iteration-count]
         SecretKeyFactory factory = SecretKeyFactory.getInstance("PBKDF2WithHmacSHA256");
-        byte[] key = factory.generateSecret(spec).getEncoded(); // $ Alert[java/quantum/examples/unknown-kdf-iteration-count]
+        byte[] key = factory.generateSecret(spec).getEncoded();
     }
 
     /**

java/ql/test/experimental/query-tests/quantum/examples/WeakOrUnknownKDFIterationCount/UnknownKDFIterationCount.expected

@@ -1 +1,5 @@
+#select
 | Test.java:47:22:47:49 | KeyDerivation | Key derivation operation with unknown iteration: $@ | Test.java:43:53:43:70 | iterationCount | iterationCount |
+testFailures
+| Test.java:45:94:45:154 | // $ Alert[java/quantum/examples/unknown-kdf-iteration-count] | Missing result: Alert[java/quantum/examples/unknown-kdf-iteration-count] |
+| Test.java:47:22:47:49 | Key derivation operation with unknown iteration: $@ | Unexpected result: Alert |

java/ql/test/experimental/query-tests/quantum/examples/WeakOrUnknownKDFIterationCount/WeakKDFIterationCount.expected

@@ -12,3 +12,5 @@ nodes
 | Test.java:58:30:58:38 | 1_000_000 : Number | semmle.label | 1_000_000 : Number |
 | Test.java:59:72:59:85 | iterationCount | semmle.label | iterationCount |
 subpaths
+testFailures
+| Test.java:43:92:43:102 | // $ Source | Missing result: Source |

python/ql/consistency-queries/DataFlowConsistency.ql

@@ -36,6 +36,8 @@ private module Input implements InputSig<Location, PythonDataFlow> {
     // parameter, but dataflow-consistency queries should _not_ complain about there not
     // being a post-update node for the synthetic `**kwargs` parameter.
     n instanceof SynthDictSplatParameterNode
+    or
+    Private::Conversions::readStep(n, _, _)
   }
 
   predicate uniqueParameterNodePositionExclude(DataFlowCallable c, ParameterPosition pos, Node p) {

python/ql/lib/change-notes/2026-06-30-disable-instance-field-step-hotfix.md

@@ -1,5 +0,0 @@
----
-category: minorAnalysis
----
-
-- Temporarily disabled the `instanceFieldStep` disjunct of the internal `TypeTrackingInput::levelStepCall` predicate, which was introduced in 7.2.0 and caused catastrophic query slowdowns on some OOP-heavy Python codebases (e.g. `mypy` and `dask`).

python/ql/lib/semmle/python/dataflow/new/internal/DataFlowPrivate.qll

@@ -753,7 +753,7 @@ predicate jumpStepNotSharedWithTypeTracker(Node nodeFrom, Node nodeTo) {
  * As of 2024-04-02 the type-tracking library only supports precise content, so there is
  * no reason to include steps for list content right now.
  */
-predicate storeStepCommon(Node nodeFrom, ContentSet c, Node nodeTo) {
+predicate storeStepCommon(Node nodeFrom, Content c, Node nodeTo) {
   tupleStoreStep(nodeFrom, c, nodeTo)
   or
   dictStoreStep(nodeFrom, c, nodeTo)
@@ -767,29 +767,31 @@ predicate storeStepCommon(Node nodeFrom, ContentSet c, Node nodeTo) {
  * Holds if data can flow from `nodeFrom` to `nodeTo` via an assignment to
  * content `c`.
  */
-predicate storeStep(Node nodeFrom, ContentSet c, Node nodeTo) {
-  storeStepCommon(nodeFrom, c, nodeTo)
+predicate storeStep(Node nodeFrom, ContentSet cs, Node nodeTo) {
+  exists(Content c | cs = singleton(c) |
+    storeStepCommon(nodeFrom, c, nodeTo)
+    or
+    listStoreStep(nodeFrom, c, nodeTo)
+    or
+    setStoreStep(nodeFrom, c, nodeTo)
+    or
+    attributeStoreStep(nodeFrom, c, nodeTo)
+    or
+    matchStoreStep(nodeFrom, c, nodeTo)
+    or
+    any(Orm::AdditionalOrmSteps es).storeStep(nodeFrom, c, nodeTo)
+    or
+    synthStarArgsElementParameterNodeStoreStep(nodeFrom, c, nodeTo)
+    or
+    synthDictSplatArgumentNodeStoreStep(nodeFrom, c, nodeTo)
+    or
+    yieldStoreStep(nodeFrom, c, nodeTo)
+    or
+    VariableCapture::storeStep(nodeFrom, c, nodeTo)
+  )
   or
-  listStoreStep(nodeFrom, c, nodeTo)
-  or
-  setStoreStep(nodeFrom, c, nodeTo)
-  or
-  attributeStoreStep(nodeFrom, c, nodeTo)
-  or
-  matchStoreStep(nodeFrom, c, nodeTo)
-  or
-  any(Orm::AdditionalOrmSteps es).storeStep(nodeFrom, c, nodeTo)
-  or
-  FlowSummaryImpl::Private::Steps::summaryStoreStep(nodeFrom.(FlowSummaryNode).getSummaryNode(), c,
+  FlowSummaryImpl::Private::Steps::summaryStoreStep(nodeFrom.(FlowSummaryNode).getSummaryNode(), cs,
     nodeTo.(FlowSummaryNode).getSummaryNode())
-  or
-  synthStarArgsElementParameterNodeStoreStep(nodeFrom, c, nodeTo)
-  or
-  synthDictSplatArgumentNodeStoreStep(nodeFrom, c, nodeTo)
-  or
-  yieldStoreStep(nodeFrom, c, nodeTo)
-  or
-  VariableCapture::storeStep(nodeFrom, c, nodeTo)
 }
 
 /**
@@ -985,7 +987,7 @@ predicate attributeStoreStep(Node nodeFrom, AttributeContent c, Node nodeTo) {
 /**
  * Subset of `readStep` that should be shared with type-tracking.
  */
-predicate readStepCommon(Node nodeFrom, ContentSet c, Node nodeTo) {
+predicate readStepCommon(Node nodeFrom, Content c, Node nodeTo) {
   subscriptReadStep(nodeFrom, c, nodeTo)
   or
   iterableUnpackingReadStep(nodeFrom, c, nodeTo)
@@ -994,21 +996,25 @@ predicate readStepCommon(Node nodeFrom, ContentSet c, Node nodeTo) {
 /**
  * Holds if data can flow from `nodeFrom` to `nodeTo` via a read of content `c`.
  */
-predicate readStep(Node nodeFrom, ContentSet c, Node nodeTo) {
-  readStepCommon(nodeFrom, c, nodeTo)
+predicate readStep(Node nodeFrom, ContentSet cs, Node nodeTo) {
+  exists(Content c | cs = singleton(c) |
+    readStepCommon(nodeFrom, c, nodeTo)
+    or
+    matchReadStep(nodeFrom, c, nodeTo)
+    or
+    forReadStep(nodeFrom, c, nodeTo)
+    or
+    attributeReadStep(nodeFrom, c, nodeTo)
+    or
+    synthDictSplatParameterNodeReadStep(nodeFrom, c, nodeTo)
+    or
+    VariableCapture::readStep(nodeFrom, c, nodeTo)
+  )
   or
-  matchReadStep(nodeFrom, c, nodeTo)
-  or
-  forReadStep(nodeFrom, c, nodeTo)
-  or
-  attributeReadStep(nodeFrom, c, nodeTo)
-  or
-  FlowSummaryImpl::Private::Steps::summaryReadStep(nodeFrom.(FlowSummaryNode).getSummaryNode(), c,
+  FlowSummaryImpl::Private::Steps::summaryReadStep(nodeFrom.(FlowSummaryNode).getSummaryNode(), cs,
     nodeTo.(FlowSummaryNode).getSummaryNode())
   or
-  synthDictSplatParameterNodeReadStep(nodeFrom, c, nodeTo)
-  or
-  VariableCapture::readStep(nodeFrom, c, nodeTo)
+  Conversions::readStep(nodeFrom, cs, nodeTo)
 }
 
 /** Data flows from a sequence to a subscript of the sequence. */
@@ -1064,23 +1070,68 @@ predicate attributeReadStep(Node nodeFrom, AttributeContent c, AttrRead nodeTo)
   nodeTo.accesses(nodeFrom, c.getAttribute())
 }
 
+module Conversions {
+  private import semmle.python.Concepts
+
+  predicate decoderReadStep(Node nodeFrom, ContentSet c, Node nodeTo) {
+    exists(Decoding decoding |
+      nodeFrom = decoding.getAnInput() and
+      nodeTo = decoding.getOutput()
+    ) and
+    c.isAnyTupleOrDictionaryElement()
+  }
+
+  predicate encoderReadStep(Node nodeFrom, ContentSet c, Node nodeTo) {
+    exists(Encoding encoding |
+      nodeFrom = encoding.getAnInput() and
+      nodeTo = encoding.getOutput()
+    ) and
+    c.isAnyTupleOrDictionaryElement()
+  }
+
+  predicate formatReadStep(Node nodeFrom, ContentSet c, Node nodeTo) {
+    // % formatting
+    exists(BinaryExprNode fmt | fmt = nodeTo.asCfgNode() |
+      fmt.getOp() instanceof Mod and
+      fmt.getRight() = nodeFrom.asCfgNode()
+    ) and
+    c.isAnyTupleElement()
+    or
+    // format_map
+    // see https://docs.python.org/3/library/stdtypes.html#str.format_map
+    nodeTo.(MethodCallNode).calls(_, "format_map") and
+    nodeTo.(MethodCallNode).getArg(0) = nodeFrom and
+    c.isAnyDictionaryElement()
+  }
+
+  predicate readStep(Node nodeFrom, ContentSet c, Node nodeTo) {
+    decoderReadStep(nodeFrom, c, nodeTo)
+    or
+    encoderReadStep(nodeFrom, c, nodeTo)
+    or
+    formatReadStep(nodeFrom, c, nodeTo)
+  }
+}
+
 /**
  * Holds if values stored inside content `c` are cleared at node `n`. For example,
  * any value stored inside `f` is cleared at the pre-update node associated with `x`
  * in `x.f = newValue`.
  */
-predicate clearsContent(Node n, ContentSet c) {
-  matchClearStep(n, c)
+predicate clearsContent(Node n, ContentSet cs) {
+  exists(Content c | cs = singleton(c) |
+    matchClearStep(n, c)
+    or
+    attributeClearStep(n, c)
+    or
+    dictClearStep(n, c)
+    or
+    dictSplatParameterNodeClearStep(n, c)
+    or
+    VariableCapture::clearsContent(n, c)
+  )
   or
-  attributeClearStep(n, c)
-  or
-  dictClearStep(n, c)
-  or
-  FlowSummaryImpl::Private::Steps::summaryClearsContent(n.(FlowSummaryNode).getSummaryNode(), c)
-  or
-  dictSplatParameterNodeClearStep(n, c)
-  or
-  VariableCapture::clearsContent(n, c)
+  FlowSummaryImpl::Private::Steps::summaryClearsContent(n.(FlowSummaryNode).getSummaryNode(), cs)
 }
 
 /**
@@ -1198,12 +1249,65 @@ predicate allowParameterReturnInSelf(ParameterNode p) {
   )
 }
 
+bindingset[s]
+private string getFirstChar(string s) {
+  result =
+    min(int i, string c |
+      c = s.charAt(i) and c != "_"
+      or
+      c = "" and i = s.length()
+    |
+      c order by i
+    )
+}
+
+private string getAttributeContentFirstChar(AttributeContent ac) {
+  result = getFirstChar(ac.getAttribute())
+}
+
+private string getDictionaryElementContentKeyFirstChar(DictionaryElementContent dec) {
+  result = getFirstChar(dec.getKey())
+}
+
+private newtype TContentApprox =
+  TListElementContentApprox() or
+  TSetElementContentApprox() or
+  TTupleElementContentApprox() or
+  TDictionaryElementContentApprox(string first) {
+    first = "" // for `TDictionaryElementAnyContent`
+    or
+    first = getDictionaryElementContentKeyFirstChar(_)
+  } or
+  TAttributeContentApprox(string first) { first = getAttributeContentFirstChar(_) } or
+  TCapturedVariableContentApprox()
+
 /** An approximated `Content`. */
-class ContentApprox = Unit;
+class ContentApprox extends TContentApprox {
+  /** Gets a textual representation of this element. */
+  string toString() { result = "" }
+}
 
 /** Gets an approximated value for content `c`. */
-pragma[inline]
-ContentApprox getContentApprox(Content c) { any() }
+ContentApprox getContentApprox(Content c) {
+  c = TListElementContent() and
+  result = TListElementContentApprox()
+  or
+  c = TSetElementContent() and
+  result = TSetElementContentApprox()
+  or
+  c = TTupleElementContent(_) and
+  result = TTupleElementContentApprox()
+  or
+  result = TDictionaryElementContentApprox(getDictionaryElementContentKeyFirstChar(c))
+  or
+  c = TDictionaryElementAnyContent() and
+  result = TDictionaryElementContentApprox("")
+  or
+  result = TAttributeContentApprox(getAttributeContentFirstChar(c))
+  or
+  c = TCapturedVariableContent(_) and
+  result = TCapturedVariableContentApprox()
+}
 
 /** Helper for `.getEnclosingCallable`. */
 DataFlowCallable getCallableScope(Scope s) {

python/ql/lib/semmle/python/dataflow/new/internal/DataFlowPublic.qll

@@ -898,19 +898,78 @@ class CapturedVariableContent extends Content, TCapturedVariableContent {
   override string getMaDRepresentation() { none() }
 }
 
+/**
+ * An entity that represents a set of `Content`s.
+ *
+ * Most `ContentSet`s are singletons (i.e. they consist of a single `Content`),
+ * but `AnyDictionaryElement` and `AnyTupleElement` act as wildcards on the
+ * read side: a read at such a `ContentSet` matches any specific dictionary
+ * key / tuple index store, as well as (for dictionaries) the
+ * "unknown-bucket" Content `DictionaryElementAnyContent`.
+ *
+ * Keeping these as wildcard `ContentSet`s (rather than enumerating one
+ * `ContentSet` per key/index) keeps the dataflow `readSetEx` relation small
+ * when implicit reads are used (e.g. at sinks via `defaultImplicitTaintRead`).
+ */
+private newtype TContentSet =
+  TSingletonContent(Content c) or
+  TAnyTupleElement() or
+  TAnyDictionaryElement() or
+  TAnyTupleOrDictionaryElement()
+
 /**
  * An entity that represents a set of `Content`s.
  *
  * The set may be interpreted differently depending on whether it is
  * stored into (`getAStoreContent`) or read from (`getAReadContent`).
  */
-class ContentSet instanceof Content {
+class ContentSet extends TContentSet {
+  /** Holds if this content set is the singleton `{c}`. */
+  predicate isSingleton(Content c) { this = TSingletonContent(c) }
+
+  /** Holds if this content set is the wildcard for all tuple elements. */
+  predicate isAnyTupleElement() { this = TAnyTupleElement() }
+
+  /** Holds if this content set is the wildcard for all dictionary elements. */
+  predicate isAnyDictionaryElement() { this = TAnyDictionaryElement() }
+
+  /** Holds if this content set is the wildcard for all tuple elements or dictionary elements. */
+  predicate isAnyTupleOrDictionaryElement() { this = TAnyTupleOrDictionaryElement() }
+
   /** Gets a content that may be stored into when storing into this set. */
-  Content getAStoreContent() { result = this }
+  Content getAStoreContent() { this = TSingletonContent(result) }
 
   /** Gets a content that may be read from when reading from this set. */
-  Content getAReadContent() { result = this }
+  Content getAReadContent() {
+    this = TSingletonContent(result)
+    or
+    // Wildcard expansion: a read at "any tuple element" matches a store at any
+    // specific tuple index. (Stores always target a specific index, so we don't
+    // need a `TupleElementAnyContent` Content kind here.)
+    this = TAnyTupleElement() and result instanceof TupleElementContent
+    or
+    this = TAnyDictionaryElement() and
+    (result instanceof DictionaryElementContent or result instanceof DictionaryElementAnyContent)
+    or
+    this = TAnyTupleOrDictionaryElement() and
+    (
+      result instanceof TupleElementContent or
+      result instanceof DictionaryElementContent or
+      result instanceof DictionaryElementAnyContent
+    )
+  }
 
   /** Gets a textual representation of this content set. */
-  string toString() { result = super.toString() }
+  string toString() {
+    exists(Content c | this = TSingletonContent(c) | result = c.toString())
+    or
+    this = TAnyTupleElement() and result = "Any tuple element"
+    or
+    this = TAnyDictionaryElement() and result = "Any dictionary element"
+    or
+    this = TAnyTupleOrDictionaryElement() and result = "Any tuple or dictionary element"
+  }
 }
+
+/** Gets the singleton `ContentSet` wrapping the `Content` `c`. */
+ContentSet singleton(Content c) { result = TSingletonContent(c) }

python/ql/lib/semmle/python/dataflow/new/internal/FlowSummaryImpl.qll

@@ -66,21 +66,29 @@ module Input implements InputSig<Location, DataFlowImplSpecific::PythonDataFlow>
   }
 
   string encodeContent(ContentSet cs, string arg) {
-    cs = TListElementContent() and result = "ListElement" and arg = ""
-    or
-    cs = TSetElementContent() and result = "SetElement" and arg = ""
-    or
-    exists(int index |
-      cs = TTupleElementContent(index) and result = "TupleElement" and arg = index.toString()
+    exists(Content c | cs.isSingleton(c) |
+      c = TListElementContent() and result = "ListElement" and arg = ""
+      or
+      c = TSetElementContent() and result = "SetElement" and arg = ""
+      or
+      exists(int index |
+        c = TTupleElementContent(index) and result = "TupleElement" and arg = index.toString()
+      )
+      or
+      exists(string key |
+        c = TDictionaryElementContent(key) and result = "DictionaryElement" and arg = key
+      )
+      or
+      c = TDictionaryElementAnyContent() and result = "DictionaryElementAny" and arg = ""
+      or
+      exists(string attr | c = TAttributeContent(attr) and result = "Attribute" and arg = attr)
     )
     or
-    exists(string key |
-      cs = TDictionaryElementContent(key) and result = "DictionaryElement" and arg = key
-    )
+    cs.isAnyTupleElement() and result = "AnyTupleElement" and arg = ""
     or
-    cs = TDictionaryElementAnyContent() and result = "DictionaryElementAny" and arg = ""
+    cs.isAnyDictionaryElement() and result = "AnyDictionaryElement" and arg = ""
     or
-    exists(string attr | cs = TAttributeContent(attr) and result = "Attribute" and arg = attr)
+    cs.isAnyTupleOrDictionaryElement() and result = "AnyTupleOrDictionaryElement" and arg = ""
   }
 
   bindingset[token]
@@ -139,27 +147,29 @@ module Private {
     predicate withContent = SC::withContent/1;
 
     /** Gets a summary component that represents a list element. */
-    SummaryComponent listElement() { result = content(any(ListElementContent c)) }
+    SummaryComponent listElement() { result = content(singleton(any(ListElementContent c))) }
 
     /** Gets a summary component that represents a set element. */
-    SummaryComponent setElement() { result = content(any(SetElementContent c)) }
+    SummaryComponent setElement() { result = content(singleton(any(SetElementContent c))) }
 
     /** Gets a summary component that represents a tuple element. */
     SummaryComponent tupleElement(int index) {
-      exists(TupleElementContent c | c.getIndex() = index and result = content(c))
+      exists(TupleElementContent c | c.getIndex() = index and result = content(singleton(c)))
     }
 
     /** Gets a summary component that represents a dictionary element. */
     SummaryComponent dictionaryElement(string key) {
-      exists(DictionaryElementContent c | c.getKey() = key and result = content(c))
+      exists(DictionaryElementContent c | c.getKey() = key and result = content(singleton(c)))
     }
 
     /** Gets a summary component that represents a dictionary element at any key. */
-    SummaryComponent dictionaryElementAny() { result = content(any(DictionaryElementAnyContent c)) }
+    SummaryComponent dictionaryElementAny() {
+      result = content(singleton(any(DictionaryElementAnyContent c)))
+    }
 
     /** Gets a summary component that represents an attribute element. */
     SummaryComponent attribute(string attr) {
-      exists(AttributeContent c | c.getAttribute() = attr and result = content(c))
+      exists(AttributeContent c | c.getAttribute() = attr and result = content(singleton(c)))
     }
 
     /** Gets a summary component that represents the return value of a call. */

python/ql/lib/semmle/python/dataflow/new/internal/TaintTrackingPrivate.qll

@@ -11,12 +11,34 @@ private import semmle.python.ApiGraphs
  */
 predicate defaultTaintSanitizer(DataFlow::Node node) { none() }
 
+/**
+ * Holds if default taint tracking should read content `contentSet` implicitly and
+ * propagate taint from a container to reads of that content.
+ */
+private predicate defaultTaintReadContent(DataFlow::ContentSet contentSet) {
+  // Tuple and dictionary content is precise, so use wildcard content sets to avoid
+  // blowing up the size of `Stage1::readSetEx` (otherwise this predicate would
+  // expand to one row per (node, distinct key or index) and the framework's
+  // read-set relation grows quadratically). `ContentSet.getAReadContent` expands
+  // these wildcards back to the specific contents when matching against stores.
+  contentSet.isAnyTupleOrDictionaryElement()
+  or
+  // List and set element content is already imprecise, so no wildcard expansion is
+  // needed.
+  contentSet.getAStoreContent() instanceof DataFlow::ListElementContent
+  or
+  contentSet.getAStoreContent() instanceof DataFlow::SetElementContent
+}
+
 /**
  * Holds if default `TaintTracking::Configuration`s should allow implicit reads
  * of `c` at sinks and inputs to additional taint steps.
  */
 bindingset[node]
-predicate defaultImplicitTaintRead(DataFlow::Node node, DataFlow::ContentSet c) { none() }
+predicate defaultImplicitTaintRead(DataFlow::Node node, DataFlow::ContentSet c) {
+  exists(node) and
+  defaultTaintReadContent(c)
+}
 
 private module Cached {
   /**
@@ -128,11 +150,6 @@ predicate stringManipulation(DataFlow::CfgNode nodeFrom, DataFlow::CfgNode nodeT
     nodeFrom.getNode() = object and
     method_name in ["partition", "rpartition", "rsplit", "split", "splitlines"]
     or
-    // Iterable[str] -> str
-    // TODO: check if these should be handled differently in regards to content
-    method_name = "join" and
-    nodeFrom.getNode() = call.getArg(0)
-    or
     // Mapping[str, Any] -> str
     method_name = "format_map" and
     nodeFrom.getNode() = call.getArg(0)
@@ -161,32 +178,21 @@ predicate stringManipulation(DataFlow::CfgNode nodeFrom, DataFlow::CfgNode nodeT
 }
 
 /**
- * Holds if taint can flow from `nodeFrom` to `nodeTo` with a step related to containers
- * (lists/sets/dictionaries): literals, constructor invocation, methods. Note that this
- * is currently very imprecise, as an example, since we model `dict.get`, we treat any
- * `<tainted object>.get(<arg>)` will be tainted, whether it's true or not.
+ * Holds if taint can flow from `nodeFrom` to `nodeTo` with a step related to reading
+ * content from containers (lists/sets/dictionaries/tuples): subscripts, iteration,
+ * constructor invocation, methods.
  */
 predicate containerStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
-  // construction by literal
-  //
-  // TODO: once we have proper flow-summary modeling, we might not need this step any
-  // longer -- but there needs to be a matching read-step for the store-step, and we
-  // don't provide that right now.
-  DataFlowPrivate::listStoreStep(nodeFrom, _, nodeTo)
-  or
-  DataFlowPrivate::setStoreStep(nodeFrom, _, nodeTo)
-  or
-  DataFlowPrivate::tupleStoreStep(nodeFrom, _, nodeTo)
-  or
-  DataFlowPrivate::dictStoreStep(nodeFrom, _, nodeTo)
-  or
-  // comprehension, so there is taint-flow from `x` in `[x for x in xs]` to the
-  // resulting list of the list-comprehension.
-  //
-  // TODO: once we have proper flow-summary modeling, we might not need this step any
-  // longer -- but there needs to be a matching read-step for the store-step, and we
-  // don't provide that right now.
-  DataFlowPrivate::yieldStoreStep(nodeFrom, _, nodeTo)
+  exists(DataFlow::ContentSet contentSet |
+    DataFlowPrivate::readStep(nodeFrom, contentSet, nodeTo) and
+    exists(DataFlow::Content c | c = contentSet.getAReadContent() |
+      c instanceof DataFlow::TupleElementContent or
+      c instanceof DataFlow::DictionaryElementContent or
+      c instanceof DataFlow::DictionaryElementAnyContent or
+      c instanceof DataFlow::ListElementContent or
+      c instanceof DataFlow::SetElementContent
+    )
+  )
 }
 
 /**

python/ql/lib/semmle/python/dataflow/new/internal/TypeTrackingImpl.qll

@@ -170,13 +170,7 @@ module TypeTrackingInput implements Shared::TypeTrackingInput<Location> {
 
   /** Holds if there is a level step from `nodeFrom` to `nodeTo`, which may depend on the call graph. */
   predicate levelStepCall(Node nodeFrom, LocalSourceNode nodeTo) {
-    // HOTFIX: `instanceFieldStep` is temporarily disabled (via `and none()`).
-    // It uses `classInstanceTracker(cls)` -- itself a type-tracker run --
-    // from inside `levelStepCall`, creating a structural mutual recursion
-    // that causes catastrophic query slowdowns on some OOP-heavy Python
-    // codebases (e.g. mypy and dask). The `and none()` should be removed
-    // once that recursion is redesigned.
-    instanceFieldStep(nodeFrom, nodeTo) and none()
+    instanceFieldStep(nodeFrom, nodeTo)
     or
     inheritedFieldStep(nodeFrom, nodeTo)
   }
@@ -255,7 +249,7 @@ module TypeTrackingInput implements Shared::TypeTrackingInput<Location> {
     // is only fed set/list content)
     not nodeFrom instanceof DataFlowPublic::IterableElementNode
     or
-    TypeTrackerSummaryFlow::basicStoreStep(nodeFrom, nodeTo, content)
+    TypeTrackerSummaryFlow::basicStoreStep(nodeFrom, nodeTo, DataFlowPublic::singleton(content))
   }
 
   /**
@@ -286,14 +280,15 @@ module TypeTrackingInput implements Shared::TypeTrackingInput<Location> {
       nodeFrom.asCfgNode() instanceof SequenceNode
     )
     or
-    TypeTrackerSummaryFlow::basicLoadStep(nodeFrom, nodeTo, content)
+    TypeTrackerSummaryFlow::basicLoadStep(nodeFrom, nodeTo, DataFlowPublic::singleton(content))
   }
 
   /**
    * Holds if the `loadContent` of `nodeFrom` is stored in the `storeContent` of `nodeTo`.
    */
   predicate loadStoreStep(Node nodeFrom, Node nodeTo, Content loadContent, Content storeContent) {
-    TypeTrackerSummaryFlow::basicLoadStoreStep(nodeFrom, nodeTo, loadContent, storeContent)
+    TypeTrackerSummaryFlow::basicLoadStoreStep(nodeFrom, nodeTo,
+      DataFlowPublic::singleton(loadContent), DataFlowPublic::singleton(storeContent))
   }
 
   /**

python/ql/lib/semmle/python/frameworks/Stdlib.qll

@@ -4245,6 +4245,7 @@ module StdlibPrivate {
         )
         // TODO: Once we have DictKeyContent, we need to transform that into ListElementContent
       ) and
+      // Element content is mutated into list element content
       output = "ReturnValue.ListElement" and
       preservesValue = true
       or
@@ -4271,11 +4272,9 @@ module StdlibPrivate {
         preservesValue = true
       )
       or
-      // TODO: We need to also translate iterable content such as list element
-      //       but we currently lack TupleElementAny
-      input = "Argument[0]" and
+      input = "Argument[0].ListElement" and
       output = "ReturnValue" and
-      preservesValue = false
+      preservesValue = true
     }
   }
 
@@ -4970,6 +4969,26 @@ module StdlibPrivate {
     }
   }
 
+  /** A flow summary for `str.join`. */
+  class StrJoinSummary extends SummarizedCallable::Range {
+    StrJoinSummary() { this = "str.join" }
+
+    override DataFlow::CallCfgNode getACall() { result.(DataFlow::MethodCallNode).calls(_, "join") }
+
+    override DataFlow::ArgumentNode getACallback() {
+      result.(DataFlow::AttrRead).getAttributeName() = "join"
+    }
+
+    override predicate propagatesFlow(string input, string output, boolean preservesValue) {
+      (
+        // For code like `" ".join([name])`
+        input = "Argument[0,iterable:].ListElement" and
+        preservesValue = true
+      ) and
+      output = "ReturnValue"
+    }
+  }
+
   // ---------------------------------------------------------------------------
   // asyncio
   // ---------------------------------------------------------------------------

python/ql/lib/semmle/python/frameworks/lxml.model.yml

@@ -0,0 +1,6 @@
+extensions:
+  - addsTo:
+      pack: codeql/python-all
+      extensible: summaryModel
+    data:
+      - ['lxml', 'Member[etree].Member[fromstringlist]', 'Argument[0,strings:].ListElement', 'ReturnValue', 'taint']

python/ql/lib/semmle/python/frameworks/xml.model.yml

@@ -0,0 +1,6 @@
+extensions:
+  - addsTo:
+      pack: codeql/python-all
+      extensible: summaryModel
+    data:
+      - ['xml', 'Member[etree].Member[fromstringlist]', 'Argument[0,strings:].ListElement', 'ReturnValue', 'taint']

python/ql/src/Variables/LoopVariableCapture/LoopVariableCaptureQuery.qll

@@ -61,10 +61,11 @@ module EscapingCaptureFlowConfig implements DataFlow::ConfigSig {
   predicate allowImplicitRead(DataFlow::Node node, DataFlow::ContentSet cs) {
     isSink(node) and
     (
-      cs.(DataFlow::TupleElementContent).getIndex() in [0 .. 10] or
-      cs instanceof DataFlow::ListElementContent or
-      cs instanceof DataFlow::SetElementContent or
-      cs instanceof DataFlow::DictionaryElementAnyContent
+      cs.isAnyTupleOrDictionaryElement()
+      or
+      cs.getAStoreContent() instanceof DataFlow::ListElementContent
+      or
+      cs.getAStoreContent() instanceof DataFlow::SetElementContent
     )
   }
 }

python/ql/test/experimental/query-tests/Security/CWE-022-TarSlip/TarSlip.expected

@@ -3,11 +3,15 @@ edges
 | TarSlipImprov.py:15:7:15:39 | ControlFlowNode for Attribute() | TarSlipImprov.py:15:1:15:3 | ControlFlowNode for tar | provenance |  |
 | TarSlipImprov.py:17:5:17:10 | ControlFlowNode for member | TarSlipImprov.py:20:19:20:24 | ControlFlowNode for member | provenance |  |
 | TarSlipImprov.py:20:5:20:10 | [post] ControlFlowNode for result | TarSlipImprov.py:22:35:22:40 | ControlFlowNode for result | provenance |  |
+| TarSlipImprov.py:20:5:20:10 | [post] ControlFlowNode for result [List element] | TarSlipImprov.py:22:35:22:40 | ControlFlowNode for result | provenance |  |
 | TarSlipImprov.py:20:19:20:24 | ControlFlowNode for member | TarSlipImprov.py:20:5:20:10 | [post] ControlFlowNode for result | provenance | list.append |
+| TarSlipImprov.py:20:19:20:24 | ControlFlowNode for member | TarSlipImprov.py:20:5:20:10 | [post] ControlFlowNode for result [List element] | provenance | list.append |
 | TarSlipImprov.py:26:21:26:27 | ControlFlowNode for tarfile | TarSlipImprov.py:28:9:28:14 | ControlFlowNode for member | provenance |  |
 | TarSlipImprov.py:28:9:28:14 | ControlFlowNode for member | TarSlipImprov.py:35:23:35:28 | ControlFlowNode for member | provenance |  |
 | TarSlipImprov.py:35:9:35:14 | [post] ControlFlowNode for result | TarSlipImprov.py:36:12:36:17 | ControlFlowNode for result | provenance |  |
+| TarSlipImprov.py:35:9:35:14 | [post] ControlFlowNode for result [List element] | TarSlipImprov.py:36:12:36:17 | ControlFlowNode for result [List element] | provenance |  |
 | TarSlipImprov.py:35:23:35:28 | ControlFlowNode for member | TarSlipImprov.py:35:9:35:14 | [post] ControlFlowNode for result | provenance | list.append |
+| TarSlipImprov.py:35:23:35:28 | ControlFlowNode for member | TarSlipImprov.py:35:9:35:14 | [post] ControlFlowNode for result [List element] | provenance | list.append |
 | TarSlipImprov.py:38:1:38:3 | ControlFlowNode for tar | TarSlipImprov.py:39:65:39:67 | ControlFlowNode for tar | provenance |  |
 | TarSlipImprov.py:38:7:38:39 | ControlFlowNode for Attribute() | TarSlipImprov.py:38:1:38:3 | ControlFlowNode for tar | provenance |  |
 | TarSlipImprov.py:39:65:39:67 | ControlFlowNode for tar | TarSlipImprov.py:26:21:26:27 | ControlFlowNode for tarfile | provenance |  |
@@ -34,16 +38,19 @@ edges
 | TarSlipImprov.py:142:9:142:13 | ControlFlowNode for entry | TarSlipImprov.py:143:36:143:40 | ControlFlowNode for entry | provenance |  |
 | TarSlipImprov.py:151:14:151:50 | ControlFlowNode for closing() | TarSlipImprov.py:151:55:151:56 | ControlFlowNode for tf | provenance |  |
 | TarSlipImprov.py:151:22:151:49 | ControlFlowNode for Attribute() | TarSlipImprov.py:151:14:151:50 | ControlFlowNode for closing() | provenance | Config |
-| TarSlipImprov.py:151:55:151:56 | ControlFlowNode for tf | TarSlipImprov.py:152:13:152:20 | ControlFlowNode for Yield | provenance |  |
 | TarSlipImprov.py:151:55:151:56 | ControlFlowNode for tf | TarSlipImprov.py:152:19:152:20 | ControlFlowNode for tf | provenance |  |
-| TarSlipImprov.py:152:13:152:20 | ControlFlowNode for Yield | TarSlipImprov.py:157:18:157:40 | ControlFlowNode for py2_tarxz() | provenance |  |
+| TarSlipImprov.py:152:13:152:20 | ControlFlowNode for Yield [List element] | TarSlipImprov.py:157:18:157:40 | ControlFlowNode for py2_tarxz() [List element] | provenance |  |
+| TarSlipImprov.py:152:19:152:20 | ControlFlowNode for tf | TarSlipImprov.py:152:13:152:20 | ControlFlowNode for Yield [List element] | provenance |  |
 | TarSlipImprov.py:152:19:152:20 | ControlFlowNode for tf | TarSlipImprov.py:157:18:157:40 | ControlFlowNode for py2_tarxz() | provenance |  |
 | TarSlipImprov.py:157:9:157:14 | ControlFlowNode for tar_cm | TarSlipImprov.py:162:20:162:23 | ControlFlowNode for tarc | provenance |  |
+| TarSlipImprov.py:157:9:157:14 | ControlFlowNode for tar_cm [List element] | TarSlipImprov.py:162:20:162:23 | ControlFlowNode for tarc [List element] | provenance |  |
 | TarSlipImprov.py:157:18:157:40 | ControlFlowNode for py2_tarxz() | TarSlipImprov.py:157:9:157:14 | ControlFlowNode for tar_cm | provenance |  |
+| TarSlipImprov.py:157:18:157:40 | ControlFlowNode for py2_tarxz() [List element] | TarSlipImprov.py:157:9:157:14 | ControlFlowNode for tar_cm [List element] | provenance |  |
 | TarSlipImprov.py:159:9:159:14 | ControlFlowNode for tar_cm | TarSlipImprov.py:162:20:162:23 | ControlFlowNode for tarc | provenance |  |
 | TarSlipImprov.py:159:18:159:52 | ControlFlowNode for closing() | TarSlipImprov.py:159:9:159:14 | ControlFlowNode for tar_cm | provenance |  |
 | TarSlipImprov.py:159:26:159:51 | ControlFlowNode for Attribute() | TarSlipImprov.py:159:18:159:52 | ControlFlowNode for closing() | provenance | Config |
 | TarSlipImprov.py:162:20:162:23 | ControlFlowNode for tarc | TarSlipImprov.py:169:9:169:12 | ControlFlowNode for tarc | provenance |  |
+| TarSlipImprov.py:162:20:162:23 | ControlFlowNode for tarc [List element] | TarSlipImprov.py:169:9:169:12 | ControlFlowNode for tarc | provenance |  |
 | TarSlipImprov.py:176:6:176:31 | ControlFlowNode for Attribute() | TarSlipImprov.py:176:36:176:38 | ControlFlowNode for tar | provenance |  |
 | TarSlipImprov.py:176:36:176:38 | ControlFlowNode for tar | TarSlipImprov.py:177:9:177:13 | ControlFlowNode for entry | provenance |  |
 | TarSlipImprov.py:177:9:177:13 | ControlFlowNode for entry | TarSlipImprov.py:178:36:178:40 | ControlFlowNode for entry | provenance |  |
@@ -60,7 +67,9 @@ edges
 | TarSlipImprov.py:231:43:231:52 | ControlFlowNode for corpus_tar | TarSlipImprov.py:233:9:233:9 | ControlFlowNode for f | provenance |  |
 | TarSlipImprov.py:233:9:233:9 | ControlFlowNode for f | TarSlipImprov.py:235:28:235:28 | ControlFlowNode for f | provenance |  |
 | TarSlipImprov.py:235:13:235:19 | [post] ControlFlowNode for members | TarSlipImprov.py:236:44:236:50 | ControlFlowNode for members | provenance |  |
+| TarSlipImprov.py:235:13:235:19 | [post] ControlFlowNode for members [List element] | TarSlipImprov.py:236:44:236:50 | ControlFlowNode for members | provenance |  |
 | TarSlipImprov.py:235:28:235:28 | ControlFlowNode for f | TarSlipImprov.py:235:13:235:19 | [post] ControlFlowNode for members | provenance | list.append |
+| TarSlipImprov.py:235:28:235:28 | ControlFlowNode for f | TarSlipImprov.py:235:13:235:19 | [post] ControlFlowNode for members [List element] | provenance | list.append |
 | TarSlipImprov.py:258:6:258:26 | ControlFlowNode for Attribute() | TarSlipImprov.py:258:31:258:33 | ControlFlowNode for tar | provenance |  |
 | TarSlipImprov.py:258:31:258:33 | ControlFlowNode for tar | TarSlipImprov.py:259:9:259:13 | ControlFlowNode for entry | provenance |  |
 | TarSlipImprov.py:259:9:259:13 | ControlFlowNode for entry | TarSlipImprov.py:261:25:261:29 | ControlFlowNode for entry | provenance |  |
@@ -85,19 +94,24 @@ edges
 | TarSlipImprov.py:304:7:304:39 | ControlFlowNode for Attribute() | TarSlipImprov.py:304:1:304:3 | ControlFlowNode for tar | provenance |  |
 | TarSlipImprov.py:306:5:306:10 | ControlFlowNode for member | TarSlipImprov.py:309:19:309:24 | ControlFlowNode for member | provenance |  |
 | TarSlipImprov.py:309:5:309:10 | [post] ControlFlowNode for result | TarSlipImprov.py:310:49:310:54 | ControlFlowNode for result | provenance |  |
+| TarSlipImprov.py:309:5:309:10 | [post] ControlFlowNode for result [List element] | TarSlipImprov.py:310:49:310:54 | ControlFlowNode for result | provenance |  |
 | TarSlipImprov.py:309:19:309:24 | ControlFlowNode for member | TarSlipImprov.py:309:5:309:10 | [post] ControlFlowNode for result | provenance | list.append |
+| TarSlipImprov.py:309:19:309:24 | ControlFlowNode for member | TarSlipImprov.py:309:5:309:10 | [post] ControlFlowNode for result [List element] | provenance | list.append |
 nodes
 | TarSlipImprov.py:15:1:15:3 | ControlFlowNode for tar | semmle.label | ControlFlowNode for tar |
 | TarSlipImprov.py:15:7:15:39 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
 | TarSlipImprov.py:17:5:17:10 | ControlFlowNode for member | semmle.label | ControlFlowNode for member |
 | TarSlipImprov.py:20:5:20:10 | [post] ControlFlowNode for result | semmle.label | [post] ControlFlowNode for result |
+| TarSlipImprov.py:20:5:20:10 | [post] ControlFlowNode for result [List element] | semmle.label | [post] ControlFlowNode for result [List element] |
 | TarSlipImprov.py:20:19:20:24 | ControlFlowNode for member | semmle.label | ControlFlowNode for member |
 | TarSlipImprov.py:22:35:22:40 | ControlFlowNode for result | semmle.label | ControlFlowNode for result |
 | TarSlipImprov.py:26:21:26:27 | ControlFlowNode for tarfile | semmle.label | ControlFlowNode for tarfile |
 | TarSlipImprov.py:28:9:28:14 | ControlFlowNode for member | semmle.label | ControlFlowNode for member |
 | TarSlipImprov.py:35:9:35:14 | [post] ControlFlowNode for result | semmle.label | [post] ControlFlowNode for result |
+| TarSlipImprov.py:35:9:35:14 | [post] ControlFlowNode for result [List element] | semmle.label | [post] ControlFlowNode for result [List element] |
 | TarSlipImprov.py:35:23:35:28 | ControlFlowNode for member | semmle.label | ControlFlowNode for member |
 | TarSlipImprov.py:36:12:36:17 | ControlFlowNode for result | semmle.label | ControlFlowNode for result |
+| TarSlipImprov.py:36:12:36:17 | ControlFlowNode for result [List element] | semmle.label | ControlFlowNode for result [List element] |
 | TarSlipImprov.py:38:1:38:3 | ControlFlowNode for tar | semmle.label | ControlFlowNode for tar |
 | TarSlipImprov.py:38:7:38:39 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
 | TarSlipImprov.py:39:49:39:68 | ControlFlowNode for members_filter1() | semmle.label | ControlFlowNode for members_filter1() |
@@ -133,14 +147,17 @@ nodes
 | TarSlipImprov.py:151:14:151:50 | ControlFlowNode for closing() | semmle.label | ControlFlowNode for closing() |
 | TarSlipImprov.py:151:22:151:49 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
 | TarSlipImprov.py:151:55:151:56 | ControlFlowNode for tf | semmle.label | ControlFlowNode for tf |
-| TarSlipImprov.py:152:13:152:20 | ControlFlowNode for Yield | semmle.label | ControlFlowNode for Yield |
+| TarSlipImprov.py:152:13:152:20 | ControlFlowNode for Yield [List element] | semmle.label | ControlFlowNode for Yield [List element] |
 | TarSlipImprov.py:152:19:152:20 | ControlFlowNode for tf | semmle.label | ControlFlowNode for tf |
 | TarSlipImprov.py:157:9:157:14 | ControlFlowNode for tar_cm | semmle.label | ControlFlowNode for tar_cm |
+| TarSlipImprov.py:157:9:157:14 | ControlFlowNode for tar_cm [List element] | semmle.label | ControlFlowNode for tar_cm [List element] |
 | TarSlipImprov.py:157:18:157:40 | ControlFlowNode for py2_tarxz() | semmle.label | ControlFlowNode for py2_tarxz() |
+| TarSlipImprov.py:157:18:157:40 | ControlFlowNode for py2_tarxz() [List element] | semmle.label | ControlFlowNode for py2_tarxz() [List element] |
 | TarSlipImprov.py:159:9:159:14 | ControlFlowNode for tar_cm | semmle.label | ControlFlowNode for tar_cm |
 | TarSlipImprov.py:159:18:159:52 | ControlFlowNode for closing() | semmle.label | ControlFlowNode for closing() |
 | TarSlipImprov.py:159:26:159:51 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
 | TarSlipImprov.py:162:20:162:23 | ControlFlowNode for tarc | semmle.label | ControlFlowNode for tarc |
+| TarSlipImprov.py:162:20:162:23 | ControlFlowNode for tarc [List element] | semmle.label | ControlFlowNode for tarc [List element] |
 | TarSlipImprov.py:169:9:169:12 | ControlFlowNode for tarc | semmle.label | ControlFlowNode for tarc |
 | TarSlipImprov.py:176:6:176:31 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
 | TarSlipImprov.py:176:36:176:38 | ControlFlowNode for tar | semmle.label | ControlFlowNode for tar |
@@ -163,6 +180,7 @@ nodes
 | TarSlipImprov.py:231:43:231:52 | ControlFlowNode for corpus_tar | semmle.label | ControlFlowNode for corpus_tar |
 | TarSlipImprov.py:233:9:233:9 | ControlFlowNode for f | semmle.label | ControlFlowNode for f |
 | TarSlipImprov.py:235:13:235:19 | [post] ControlFlowNode for members | semmle.label | [post] ControlFlowNode for members |
+| TarSlipImprov.py:235:13:235:19 | [post] ControlFlowNode for members [List element] | semmle.label | [post] ControlFlowNode for members [List element] |
 | TarSlipImprov.py:235:28:235:28 | ControlFlowNode for f | semmle.label | ControlFlowNode for f |
 | TarSlipImprov.py:236:44:236:50 | ControlFlowNode for members | semmle.label | ControlFlowNode for members |
 | TarSlipImprov.py:254:1:254:31 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
@@ -198,11 +216,13 @@ nodes
 | TarSlipImprov.py:304:7:304:39 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
 | TarSlipImprov.py:306:5:306:10 | ControlFlowNode for member | semmle.label | ControlFlowNode for member |
 | TarSlipImprov.py:309:5:309:10 | [post] ControlFlowNode for result | semmle.label | [post] ControlFlowNode for result |
+| TarSlipImprov.py:309:5:309:10 | [post] ControlFlowNode for result [List element] | semmle.label | [post] ControlFlowNode for result [List element] |
 | TarSlipImprov.py:309:19:309:24 | ControlFlowNode for member | semmle.label | ControlFlowNode for member |
 | TarSlipImprov.py:310:49:310:54 | ControlFlowNode for result | semmle.label | ControlFlowNode for result |
 | TarSlipImprov.py:316:1:316:46 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
 subpaths
 | TarSlipImprov.py:39:65:39:67 | ControlFlowNode for tar | TarSlipImprov.py:26:21:26:27 | ControlFlowNode for tarfile | TarSlipImprov.py:36:12:36:17 | ControlFlowNode for result | TarSlipImprov.py:39:49:39:68 | ControlFlowNode for members_filter1() |
+| TarSlipImprov.py:39:65:39:67 | ControlFlowNode for tar | TarSlipImprov.py:26:21:26:27 | ControlFlowNode for tarfile | TarSlipImprov.py:36:12:36:17 | ControlFlowNode for result [List element] | TarSlipImprov.py:39:49:39:68 | ControlFlowNode for members_filter1() |
 #select
 | TarSlipImprov.py:22:35:22:40 | ControlFlowNode for result | TarSlipImprov.py:15:7:15:39 | ControlFlowNode for Attribute() | TarSlipImprov.py:22:35:22:40 | ControlFlowNode for result | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:15:7:15:39 | ControlFlowNode for Attribute() | ControlFlowNode for Attribute() | TarSlipImprov.py:22:35:22:40 | ControlFlowNode for result | ControlFlowNode for result |
 | TarSlipImprov.py:39:49:39:68 | ControlFlowNode for members_filter1() | TarSlipImprov.py:38:7:38:39 | ControlFlowNode for Attribute() | TarSlipImprov.py:39:49:39:68 | ControlFlowNode for members_filter1() | Extraction of tarfile from $@ to a potentially untrusted source $@. | TarSlipImprov.py:38:7:38:39 | ControlFlowNode for Attribute() | ControlFlowNode for Attribute() | TarSlipImprov.py:39:49:39:68 | ControlFlowNode for members_filter1() | ControlFlowNode for members_filter1() |

python/ql/test/experimental/query-tests/Security/CWE-022-UnsafeUnpacking/UnsafeUnpack.expected

@@ -93,7 +93,9 @@ edges
 | UnsafeUnpack.py:163:23:163:28 | ControlFlowNode for member | UnsafeUnpack.py:166:37:166:42 | ControlFlowNode for member | provenance |  |
 | UnsafeUnpack.py:163:33:163:35 | ControlFlowNode for tar | UnsafeUnpack.py:163:23:163:28 | ControlFlowNode for member | provenance |  |
 | UnsafeUnpack.py:166:23:166:28 | [post] ControlFlowNode for result | UnsafeUnpack.py:167:67:167:72 | ControlFlowNode for result | provenance |  |
+| UnsafeUnpack.py:166:23:166:28 | [post] ControlFlowNode for result [List element] | UnsafeUnpack.py:167:67:167:72 | ControlFlowNode for result | provenance |  |
 | UnsafeUnpack.py:166:37:166:42 | ControlFlowNode for member | UnsafeUnpack.py:166:23:166:28 | [post] ControlFlowNode for result | provenance | list.append |
+| UnsafeUnpack.py:166:37:166:42 | ControlFlowNode for member | UnsafeUnpack.py:166:23:166:28 | [post] ControlFlowNode for result [List element] | provenance | list.append |
 | UnsafeUnpack.py:171:1:171:8 | ControlFlowNode for response | UnsafeUnpack.py:174:15:174:22 | ControlFlowNode for response | provenance |  |
 | UnsafeUnpack.py:171:12:171:50 | ControlFlowNode for Attribute() | UnsafeUnpack.py:171:1:171:8 | ControlFlowNode for response | provenance |  |
 | UnsafeUnpack.py:173:11:173:17 | ControlFlowNode for tarpath | UnsafeUnpack.py:176:17:176:23 | ControlFlowNode for tarpath | provenance |  |
@@ -189,6 +191,7 @@ nodes
 | UnsafeUnpack.py:163:23:163:28 | ControlFlowNode for member | semmle.label | ControlFlowNode for member |
 | UnsafeUnpack.py:163:33:163:35 | ControlFlowNode for tar | semmle.label | ControlFlowNode for tar |
 | UnsafeUnpack.py:166:23:166:28 | [post] ControlFlowNode for result | semmle.label | [post] ControlFlowNode for result |
+| UnsafeUnpack.py:166:23:166:28 | [post] ControlFlowNode for result [List element] | semmle.label | [post] ControlFlowNode for result [List element] |
 | UnsafeUnpack.py:166:37:166:42 | ControlFlowNode for member | semmle.label | ControlFlowNode for member |
 | UnsafeUnpack.py:167:67:167:72 | ControlFlowNode for result | semmle.label | ControlFlowNode for result |
 | UnsafeUnpack.py:171:1:171:8 | ControlFlowNode for response | semmle.label | ControlFlowNode for response |

python/ql/test/experimental/query-tests/Security/CWE-074-RemoteCommandExecution/RemoteCommandExecution.expected

@@ -3,8 +3,10 @@ edges
 | Netmiko.py:18:16:18:18 | ControlFlowNode for cmd | Netmiko.py:20:45:20:47 | ControlFlowNode for cmd | provenance |  |
 | Netmiko.py:18:16:18:18 | ControlFlowNode for cmd | Netmiko.py:21:52:21:54 | ControlFlowNode for cmd | provenance |  |
 | Netmiko.py:18:16:18:18 | ControlFlowNode for cmd | Netmiko.py:22:52:22:54 | ControlFlowNode for cmd | provenance |  |
-| Netmiko.py:18:16:18:18 | ControlFlowNode for cmd | Netmiko.py:23:41:23:57 | ControlFlowNode for List | provenance |  |
+| Netmiko.py:18:16:18:18 | ControlFlowNode for cmd | Netmiko.py:23:43:23:45 | ControlFlowNode for cmd | provenance |  |
 | Netmiko.py:18:16:18:18 | ControlFlowNode for cmd | Netmiko.py:24:48:24:50 | ControlFlowNode for cmd | provenance |  |
+| Netmiko.py:23:42:23:56 | ControlFlowNode for List [List element] | Netmiko.py:23:41:23:57 | ControlFlowNode for List | provenance |  |
+| Netmiko.py:23:43:23:45 | ControlFlowNode for cmd | Netmiko.py:23:42:23:56 | ControlFlowNode for List [List element] | provenance |  |
 | Pexpect.py:15:16:15:18 | ControlFlowNode for cmd | Pexpect.py:16:14:16:16 | ControlFlowNode for cmd | provenance |  |
 | Pexpect.py:15:16:15:18 | ControlFlowNode for cmd | Pexpect.py:18:18:18:20 | ControlFlowNode for cmd | provenance |  |
 | Scrapli.py:13:16:13:18 | ControlFlowNode for cmd | Scrapli.py:24:42:24:44 | ControlFlowNode for cmd | provenance |  |
@@ -32,6 +34,8 @@ nodes
 | Netmiko.py:21:52:21:54 | ControlFlowNode for cmd | semmle.label | ControlFlowNode for cmd |
 | Netmiko.py:22:52:22:54 | ControlFlowNode for cmd | semmle.label | ControlFlowNode for cmd |
 | Netmiko.py:23:41:23:57 | ControlFlowNode for List | semmle.label | ControlFlowNode for List |
+| Netmiko.py:23:42:23:56 | ControlFlowNode for List [List element] | semmle.label | ControlFlowNode for List [List element] |
+| Netmiko.py:23:43:23:45 | ControlFlowNode for cmd | semmle.label | ControlFlowNode for cmd |
 | Netmiko.py:24:48:24:50 | ControlFlowNode for cmd | semmle.label | ControlFlowNode for cmd |
 | Pexpect.py:15:16:15:18 | ControlFlowNode for cmd | semmle.label | ControlFlowNode for cmd |
 | Pexpect.py:16:14:16:16 | ControlFlowNode for cmd | semmle.label | ControlFlowNode for cmd |

python/ql/test/experimental/query-tests/Security/CWE-091-XsltInjection/XsltInjection.expected

@@ -14,6 +14,7 @@ edges
 | xslt.py:10:17:10:43 | ControlFlowNode for Attribute() | xslt.py:10:5:10:13 | ControlFlowNode for xsltQuery | provenance |  |
 | xslt.py:11:5:11:13 | ControlFlowNode for xslt_root | xslt.py:14:29:14:37 | ControlFlowNode for xslt_root | provenance |  |
 | xslt.py:11:17:11:36 | ControlFlowNode for Attribute() | xslt.py:11:5:11:13 | ControlFlowNode for xslt_root | provenance |  |
+| xslt.py:11:27:11:35 | ControlFlowNode for xsltQuery | xslt.py:11:17:11:36 | ControlFlowNode for Attribute() | provenance |  |
 | xslt.py:11:27:11:35 | ControlFlowNode for xsltQuery | xslt.py:11:17:11:36 | ControlFlowNode for Attribute() | provenance | Config |
 | xslt.py:11:27:11:35 | ControlFlowNode for xsltQuery | xslt.py:11:17:11:36 | ControlFlowNode for Attribute() | provenance | Decoding-XML |
 | xsltInjection.py:3:26:3:32 | ControlFlowNode for ImportMember | xsltInjection.py:3:26:3:32 | ControlFlowNode for request | provenance |  |
@@ -28,6 +29,7 @@ edges
 | xsltInjection.py:10:17:10:43 | ControlFlowNode for Attribute() | xsltInjection.py:10:5:10:13 | ControlFlowNode for xsltQuery | provenance |  |
 | xsltInjection.py:11:5:11:13 | ControlFlowNode for xslt_root | xsltInjection.py:12:28:12:36 | ControlFlowNode for xslt_root | provenance |  |
 | xsltInjection.py:11:17:11:36 | ControlFlowNode for Attribute() | xsltInjection.py:11:5:11:13 | ControlFlowNode for xslt_root | provenance |  |
+| xsltInjection.py:11:27:11:35 | ControlFlowNode for xsltQuery | xsltInjection.py:11:17:11:36 | ControlFlowNode for Attribute() | provenance |  |
 | xsltInjection.py:11:27:11:35 | ControlFlowNode for xsltQuery | xsltInjection.py:11:17:11:36 | ControlFlowNode for Attribute() | provenance | Config |
 | xsltInjection.py:11:27:11:35 | ControlFlowNode for xsltQuery | xsltInjection.py:11:17:11:36 | ControlFlowNode for Attribute() | provenance | Decoding-XML |
 | xsltInjection.py:17:5:17:13 | ControlFlowNode for xsltQuery | xsltInjection.py:18:27:18:35 | ControlFlowNode for xsltQuery | provenance |  |
@@ -36,6 +38,7 @@ edges
 | xsltInjection.py:17:17:17:43 | ControlFlowNode for Attribute() | xsltInjection.py:17:5:17:13 | ControlFlowNode for xsltQuery | provenance |  |
 | xsltInjection.py:18:5:18:13 | ControlFlowNode for xslt_root | xsltInjection.py:21:29:21:37 | ControlFlowNode for xslt_root | provenance |  |
 | xsltInjection.py:18:17:18:36 | ControlFlowNode for Attribute() | xsltInjection.py:18:5:18:13 | ControlFlowNode for xslt_root | provenance |  |
+| xsltInjection.py:18:27:18:35 | ControlFlowNode for xsltQuery | xsltInjection.py:18:17:18:36 | ControlFlowNode for Attribute() | provenance |  |
 | xsltInjection.py:18:27:18:35 | ControlFlowNode for xsltQuery | xsltInjection.py:18:17:18:36 | ControlFlowNode for Attribute() | provenance | Config |
 | xsltInjection.py:18:27:18:35 | ControlFlowNode for xsltQuery | xsltInjection.py:18:17:18:36 | ControlFlowNode for Attribute() | provenance | Decoding-XML |
 | xsltInjection.py:26:5:26:13 | ControlFlowNode for xsltQuery | xsltInjection.py:27:27:27:35 | ControlFlowNode for xsltQuery | provenance |  |
@@ -44,6 +47,7 @@ edges
 | xsltInjection.py:26:17:26:43 | ControlFlowNode for Attribute() | xsltInjection.py:26:5:26:13 | ControlFlowNode for xsltQuery | provenance |  |
 | xsltInjection.py:27:5:27:13 | ControlFlowNode for xslt_root | xsltInjection.py:31:24:31:32 | ControlFlowNode for xslt_root | provenance |  |
 | xsltInjection.py:27:17:27:36 | ControlFlowNode for Attribute() | xsltInjection.py:27:5:27:13 | ControlFlowNode for xslt_root | provenance |  |
+| xsltInjection.py:27:27:27:35 | ControlFlowNode for xsltQuery | xsltInjection.py:27:17:27:36 | ControlFlowNode for Attribute() | provenance |  |
 | xsltInjection.py:27:27:27:35 | ControlFlowNode for xsltQuery | xsltInjection.py:27:17:27:36 | ControlFlowNode for Attribute() | provenance | Config |
 | xsltInjection.py:27:27:27:35 | ControlFlowNode for xsltQuery | xsltInjection.py:27:17:27:36 | ControlFlowNode for Attribute() | provenance | Decoding-XML |
 | xsltInjection.py:35:5:35:13 | ControlFlowNode for xsltQuery | xsltInjection.py:36:34:36:42 | ControlFlowNode for xsltQuery | provenance |  |
@@ -52,17 +56,22 @@ edges
 | xsltInjection.py:35:17:35:43 | ControlFlowNode for Attribute() | xsltInjection.py:35:5:35:13 | ControlFlowNode for xsltQuery | provenance |  |
 | xsltInjection.py:36:5:36:13 | ControlFlowNode for xslt_root | xsltInjection.py:40:24:40:32 | ControlFlowNode for xslt_root | provenance |  |
 | xsltInjection.py:36:17:36:43 | ControlFlowNode for Attribute() | xsltInjection.py:36:5:36:13 | ControlFlowNode for xslt_root | provenance |  |
+| xsltInjection.py:36:34:36:42 | ControlFlowNode for xsltQuery | xsltInjection.py:36:17:36:43 | ControlFlowNode for Attribute() | provenance |  |
 | xsltInjection.py:36:34:36:42 | ControlFlowNode for xsltQuery | xsltInjection.py:36:17:36:43 | ControlFlowNode for Attribute() | provenance | Config |
 | xsltInjection.py:36:34:36:42 | ControlFlowNode for xsltQuery | xsltInjection.py:36:17:36:43 | ControlFlowNode for Attribute() | provenance | Decoding-XML |
-| xsltInjection.py:44:5:44:13 | ControlFlowNode for xsltQuery | xsltInjection.py:45:5:45:15 | ControlFlowNode for xsltStrings | provenance |  |
+| xsltInjection.py:44:5:44:13 | ControlFlowNode for xsltQuery | xsltInjection.py:45:20:45:28 | ControlFlowNode for xsltQuery | provenance |  |
 | xsltInjection.py:44:17:44:23 | ControlFlowNode for request | xsltInjection.py:44:17:44:28 | ControlFlowNode for Attribute | provenance | AdditionalTaintStep |
 | xsltInjection.py:44:17:44:28 | ControlFlowNode for Attribute | xsltInjection.py:44:17:44:43 | ControlFlowNode for Attribute() | provenance | dict.get |
 | xsltInjection.py:44:17:44:43 | ControlFlowNode for Attribute() | xsltInjection.py:44:5:44:13 | ControlFlowNode for xsltQuery | provenance |  |
-| xsltInjection.py:45:5:45:15 | ControlFlowNode for xsltStrings | xsltInjection.py:46:38:46:48 | ControlFlowNode for xsltStrings | provenance |  |
+| xsltInjection.py:45:5:45:15 | ControlFlowNode for xsltStrings [List element] | xsltInjection.py:46:38:46:48 | ControlFlowNode for xsltStrings [List element] | provenance |  |
+| xsltInjection.py:45:19:45:44 | ControlFlowNode for List [List element] | xsltInjection.py:45:5:45:15 | ControlFlowNode for xsltStrings [List element] | provenance |  |
+| xsltInjection.py:45:20:45:28 | ControlFlowNode for xsltQuery | xsltInjection.py:45:19:45:44 | ControlFlowNode for List [List element] | provenance |  |
 | xsltInjection.py:46:5:46:13 | ControlFlowNode for xslt_root | xsltInjection.py:50:24:50:32 | ControlFlowNode for xslt_root | provenance |  |
 | xsltInjection.py:46:17:46:49 | ControlFlowNode for Attribute() | xsltInjection.py:46:5:46:13 | ControlFlowNode for xslt_root | provenance |  |
-| xsltInjection.py:46:38:46:48 | ControlFlowNode for xsltStrings | xsltInjection.py:46:17:46:49 | ControlFlowNode for Attribute() | provenance | Config |
-| xsltInjection.py:46:38:46:48 | ControlFlowNode for xsltStrings | xsltInjection.py:46:17:46:49 | ControlFlowNode for Attribute() | provenance | Decoding-XML |
+| xsltInjection.py:46:38:46:48 | ControlFlowNode for xsltStrings [List element] | xsltInjection.py:46:17:46:49 | ControlFlowNode for Attribute() | provenance |  |
+| xsltInjection.py:46:38:46:48 | ControlFlowNode for xsltStrings [List element] | xsltInjection.py:46:17:46:49 | ControlFlowNode for Attribute() | provenance | Config |
+| xsltInjection.py:46:38:46:48 | ControlFlowNode for xsltStrings [List element] | xsltInjection.py:46:17:46:49 | ControlFlowNode for Attribute() | provenance | Decoding-XML |
+| xsltInjection.py:46:38:46:48 | ControlFlowNode for xsltStrings [List element] | xsltInjection.py:46:17:46:49 | ControlFlowNode for Attribute() | provenance | MaD:58660 |
 nodes
 | xslt.py:3:26:3:32 | ControlFlowNode for ImportMember | semmle.label | ControlFlowNode for ImportMember |
 | xslt.py:3:26:3:32 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
@@ -112,9 +121,11 @@ nodes
 | xsltInjection.py:44:17:44:23 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
 | xsltInjection.py:44:17:44:28 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
 | xsltInjection.py:44:17:44:43 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
-| xsltInjection.py:45:5:45:15 | ControlFlowNode for xsltStrings | semmle.label | ControlFlowNode for xsltStrings |
+| xsltInjection.py:45:5:45:15 | ControlFlowNode for xsltStrings [List element] | semmle.label | ControlFlowNode for xsltStrings [List element] |
+| xsltInjection.py:45:19:45:44 | ControlFlowNode for List [List element] | semmle.label | ControlFlowNode for List [List element] |
+| xsltInjection.py:45:20:45:28 | ControlFlowNode for xsltQuery | semmle.label | ControlFlowNode for xsltQuery |
 | xsltInjection.py:46:5:46:13 | ControlFlowNode for xslt_root | semmle.label | ControlFlowNode for xslt_root |
 | xsltInjection.py:46:17:46:49 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
-| xsltInjection.py:46:38:46:48 | ControlFlowNode for xsltStrings | semmle.label | ControlFlowNode for xsltStrings |
+| xsltInjection.py:46:38:46:48 | ControlFlowNode for xsltStrings [List element] | semmle.label | ControlFlowNode for xsltStrings [List element] |
 | xsltInjection.py:50:24:50:32 | ControlFlowNode for xslt_root | semmle.label | ControlFlowNode for xslt_root |
 subpaths

python/ql/test/experimental/query-tests/Security/CWE-1427-PromptInjection/PromptInjection.expected

@@ -32,11 +32,13 @@ edges
 | agent_instructions.py:7:5:7:9 | ControlFlowNode for input | agent_instructions.py:9:50:9:89 | ControlFlowNode for BinaryExpr | provenance | Sink:MaD:11 |
 | agent_instructions.py:7:13:7:19 | ControlFlowNode for request | agent_instructions.py:7:13:7:24 | ControlFlowNode for Attribute | provenance | AdditionalTaintStep |
 | agent_instructions.py:7:13:7:24 | ControlFlowNode for Attribute | agent_instructions.py:7:13:7:37 | ControlFlowNode for Attribute() | provenance | dict.get |
+| agent_instructions.py:7:13:7:24 | ControlFlowNode for Attribute | agent_instructions.py:7:13:7:37 | ControlFlowNode for Attribute() | provenance | dict.get(input) |
 | agent_instructions.py:7:13:7:37 | ControlFlowNode for Attribute() | agent_instructions.py:7:5:7:9 | ControlFlowNode for input | provenance |  |
 | agent_instructions.py:17:5:17:9 | ControlFlowNode for input | agent_instructions.py:25:28:25:32 | ControlFlowNode for input | provenance |  |
 | agent_instructions.py:17:5:17:9 | ControlFlowNode for input | agent_instructions.py:35:28:35:32 | ControlFlowNode for input | provenance |  |
 | agent_instructions.py:17:13:17:19 | ControlFlowNode for request | agent_instructions.py:17:13:17:24 | ControlFlowNode for Attribute | provenance | AdditionalTaintStep |
 | agent_instructions.py:17:13:17:24 | ControlFlowNode for Attribute | agent_instructions.py:17:13:17:37 | ControlFlowNode for Attribute() | provenance | dict.get |
+| agent_instructions.py:17:13:17:24 | ControlFlowNode for Attribute | agent_instructions.py:17:13:17:37 | ControlFlowNode for Attribute() | provenance | dict.get(input) |
 | agent_instructions.py:17:13:17:37 | ControlFlowNode for Attribute() | agent_instructions.py:17:5:17:9 | ControlFlowNode for input | provenance |  |
 | anthropic_test.py:2:26:2:32 | ControlFlowNode for ImportMember | anthropic_test.py:2:26:2:32 | ControlFlowNode for request | provenance |  |
 | anthropic_test.py:2:26:2:32 | ControlFlowNode for request | anthropic_test.py:11:15:11:21 | ControlFlowNode for request | provenance |  |
@@ -61,7 +63,7 @@ edges
 | openai_test.py:2:26:2:32 | ControlFlowNode for request | openai_test.py:13:13:13:19 | ControlFlowNode for request | provenance |  |
 | openai_test.py:12:5:12:11 | ControlFlowNode for persona | openai_test.py:17:22:17:46 | ControlFlowNode for BinaryExpr | provenance | Sink:MaD:10 |
 | openai_test.py:12:5:12:11 | ControlFlowNode for persona | openai_test.py:22:22:22:46 | ControlFlowNode for BinaryExpr | provenance | Sink:MaD:10 |
-| openai_test.py:12:5:12:11 | ControlFlowNode for persona | openai_test.py:23:15:37:9 | ControlFlowNode for List | provenance | Sink:MaD:9 |
+| openai_test.py:12:5:12:11 | ControlFlowNode for persona | openai_test.py:26:28:26:51 | ControlFlowNode for BinaryExpr | provenance |  |
 | openai_test.py:12:5:12:11 | ControlFlowNode for persona | openai_test.py:26:28:26:51 | ControlFlowNode for BinaryExpr | provenance |  |
 | openai_test.py:12:5:12:11 | ControlFlowNode for persona | openai_test.py:41:22:41:46 | ControlFlowNode for BinaryExpr | provenance | Sink:MaD:10 |
 | openai_test.py:12:5:12:11 | ControlFlowNode for persona | openai_test.py:63:28:63:51 | ControlFlowNode for BinaryExpr | provenance | Sink:MaD:8 |
@@ -72,7 +74,7 @@ edges
 | openai_test.py:12:15:12:26 | ControlFlowNode for Attribute | openai_test.py:12:15:12:41 | ControlFlowNode for Attribute() | provenance | dict.get |
 | openai_test.py:12:15:12:41 | ControlFlowNode for Attribute() | openai_test.py:12:5:12:11 | ControlFlowNode for persona | provenance |  |
 | openai_test.py:13:5:13:9 | ControlFlowNode for query | openai_test.py:18:15:18:19 | ControlFlowNode for query | provenance | Sink:MaD:9 |
-| openai_test.py:13:5:13:9 | ControlFlowNode for query | openai_test.py:23:15:37:9 | ControlFlowNode for List | provenance | Sink:MaD:9 |
+| openai_test.py:13:5:13:9 | ControlFlowNode for query | openai_test.py:33:33:33:37 | ControlFlowNode for query | provenance |  |
 | openai_test.py:13:5:13:9 | ControlFlowNode for query | openai_test.py:33:33:33:37 | ControlFlowNode for query | provenance |  |
 | openai_test.py:13:5:13:9 | ControlFlowNode for query | openai_test.py:42:15:42:19 | ControlFlowNode for query | provenance | Sink:MaD:9 |
 | openai_test.py:13:5:13:9 | ControlFlowNode for query | openai_test.py:53:33:53:37 | ControlFlowNode for query | provenance |  |
@@ -82,6 +84,14 @@ edges
 | openai_test.py:13:13:13:19 | ControlFlowNode for request | openai_test.py:13:13:13:24 | ControlFlowNode for Attribute | provenance | AdditionalTaintStep |
 | openai_test.py:13:13:13:24 | ControlFlowNode for Attribute | openai_test.py:13:13:13:37 | ControlFlowNode for Attribute() | provenance | dict.get |
 | openai_test.py:13:13:13:37 | ControlFlowNode for Attribute() | openai_test.py:13:5:13:9 | ControlFlowNode for query | provenance |  |
+| openai_test.py:24:13:27:13 | ControlFlowNode for Dict [Dictionary element at key content] | openai_test.py:23:15:37:9 | ControlFlowNode for List | provenance | Sink:MaD:9 Sink:MaD:9 |
+| openai_test.py:26:28:26:51 | ControlFlowNode for BinaryExpr | openai_test.py:24:13:27:13 | ControlFlowNode for Dict [Dictionary element at key content] | provenance |  |
+| openai_test.py:28:13:36:13 | ControlFlowNode for Dict [Dictionary element at key content, List element, Dictionary element at key text] | openai_test.py:23:15:37:9 | ControlFlowNode for List | provenance | Sink:MaD:9 Sink:MaD:9 |
+| openai_test.py:28:13:36:13 | ControlFlowNode for Dict [Dictionary element at key content, List element, Dictionary element at key text] | openai_test.py:23:15:37:9 | ControlFlowNode for List | provenance | Sink:MaD:9 Sink:MaD:9 Sink:MaD:9 |
+| openai_test.py:28:13:36:13 | ControlFlowNode for Dict [Dictionary element at key content, List element, Dictionary element at key text] | openai_test.py:23:15:37:9 | ControlFlowNode for List | provenance | Sink:MaD:9 Sink:MaD:9 Sink:MaD:9 Sink:MaD:9 |
+| openai_test.py:30:28:35:17 | ControlFlowNode for List [List element, Dictionary element at key text] | openai_test.py:28:13:36:13 | ControlFlowNode for Dict [Dictionary element at key content, List element, Dictionary element at key text] | provenance |  |
+| openai_test.py:31:21:34:21 | ControlFlowNode for Dict [Dictionary element at key text] | openai_test.py:30:28:35:17 | ControlFlowNode for List [List element, Dictionary element at key text] | provenance |  |
+| openai_test.py:33:33:33:37 | ControlFlowNode for query | openai_test.py:31:21:34:21 | ControlFlowNode for Dict [Dictionary element at key text] | provenance |  |
 models
 | 1 | Sink: Anthropic; Member[beta].Member[messages].Member[create].Argument[messages:].ListElement.DictionaryElement[content]; prompt-injection |
 | 2 | Sink: Anthropic; Member[beta].Member[messages].Member[create].Argument[system:]; prompt-injection |
@@ -140,7 +150,13 @@ nodes
 | openai_test.py:18:15:18:19 | ControlFlowNode for query | semmle.label | ControlFlowNode for query |
 | openai_test.py:22:22:22:46 | ControlFlowNode for BinaryExpr | semmle.label | ControlFlowNode for BinaryExpr |
 | openai_test.py:23:15:37:9 | ControlFlowNode for List | semmle.label | ControlFlowNode for List |
+| openai_test.py:24:13:27:13 | ControlFlowNode for Dict [Dictionary element at key content] | semmle.label | ControlFlowNode for Dict [Dictionary element at key content] |
 | openai_test.py:26:28:26:51 | ControlFlowNode for BinaryExpr | semmle.label | ControlFlowNode for BinaryExpr |
+| openai_test.py:26:28:26:51 | ControlFlowNode for BinaryExpr | semmle.label | ControlFlowNode for BinaryExpr |
+| openai_test.py:28:13:36:13 | ControlFlowNode for Dict [Dictionary element at key content, List element, Dictionary element at key text] | semmle.label | ControlFlowNode for Dict [Dictionary element at key content, List element, Dictionary element at key text] |
+| openai_test.py:30:28:35:17 | ControlFlowNode for List [List element, Dictionary element at key text] | semmle.label | ControlFlowNode for List [List element, Dictionary element at key text] |
+| openai_test.py:31:21:34:21 | ControlFlowNode for Dict [Dictionary element at key text] | semmle.label | ControlFlowNode for Dict [Dictionary element at key text] |
+| openai_test.py:33:33:33:37 | ControlFlowNode for query | semmle.label | ControlFlowNode for query |
 | openai_test.py:33:33:33:37 | ControlFlowNode for query | semmle.label | ControlFlowNode for query |
 | openai_test.py:41:22:41:46 | ControlFlowNode for BinaryExpr | semmle.label | ControlFlowNode for BinaryExpr |
 | openai_test.py:42:15:42:19 | ControlFlowNode for query | semmle.label | ControlFlowNode for query |

python/ql/test/library-tests/dataflow/sensitive-data/test.py

@@ -131,6 +131,5 @@ from unknown_settings import password # $ SensitiveDataSource=password
 print(password) # $ SensitiveUse=password
 _config = {"sleep_timer": 5, "mysql_password": password}
 
-# since we have taint-step from store of `password`, we will consider any item in the
-# dictionary to be a password :(
-print(_config["sleep_timer"]) # $ SPURIOUS: SensitiveUse=password
+# since we have precise dictionary content, other items of the config are not tainted
+print(_config["sleep_timer"])

python/ql/test/library-tests/dataflow/summaries/summaries.expected

@@ -7,13 +7,9 @@ edges
 | summaries.py:36:38:36:38 | ControlFlowNode for x | summaries.py:36:41:36:45 | ControlFlowNode for BinaryExpr | provenance |  |
 | summaries.py:36:48:36:53 | ControlFlowNode for SOURCE | summaries.py:36:18:36:54 | ControlFlowNode for apply_lambda() | provenance | apply_lambda |
 | summaries.py:36:48:36:53 | ControlFlowNode for SOURCE | summaries.py:36:38:36:38 | ControlFlowNode for x | provenance | apply_lambda |
-| summaries.py:44:1:44:12 | ControlFlowNode for tainted_list | summaries.py:45:6:45:20 | ControlFlowNode for Subscript | provenance |  |
 | summaries.py:44:1:44:12 | ControlFlowNode for tainted_list [List element] | summaries.py:45:6:45:17 | ControlFlowNode for tainted_list [List element] | provenance |  |
-| summaries.py:44:16:44:33 | ControlFlowNode for reversed() | summaries.py:44:1:44:12 | ControlFlowNode for tainted_list | provenance |  |
 | summaries.py:44:16:44:33 | ControlFlowNode for reversed() [List element] | summaries.py:44:1:44:12 | ControlFlowNode for tainted_list [List element] | provenance |  |
-| summaries.py:44:25:44:32 | ControlFlowNode for List | summaries.py:44:16:44:33 | ControlFlowNode for reversed() | provenance | builtins.reversed |
 | summaries.py:44:25:44:32 | ControlFlowNode for List [List element] | summaries.py:44:16:44:33 | ControlFlowNode for reversed() [List element] | provenance | builtins.reversed |
-| summaries.py:44:26:44:31 | ControlFlowNode for SOURCE | summaries.py:44:25:44:32 | ControlFlowNode for List | provenance |  |
 | summaries.py:44:26:44:31 | ControlFlowNode for SOURCE | summaries.py:44:25:44:32 | ControlFlowNode for List [List element] | provenance |  |
 | summaries.py:45:6:45:17 | ControlFlowNode for tainted_list [List element] | summaries.py:45:6:45:20 | ControlFlowNode for Subscript | provenance |  |
 | summaries.py:48:15:48:15 | ControlFlowNode for x | summaries.py:49:12:49:18 | ControlFlowNode for BinaryExpr | provenance |  |
@@ -42,6 +38,7 @@ edges
 | summaries.py:67:1:67:18 | ControlFlowNode for tainted_resultlist | summaries.py:68:6:68:26 | ControlFlowNode for Subscript | provenance |  |
 | summaries.py:67:1:67:18 | ControlFlowNode for tainted_resultlist [List element] | summaries.py:68:6:68:23 | ControlFlowNode for tainted_resultlist [List element] | provenance |  |
 | summaries.py:67:22:67:39 | ControlFlowNode for json_loads() [List element] | summaries.py:67:1:67:18 | ControlFlowNode for tainted_resultlist [List element] | provenance |  |
+| summaries.py:67:33:67:38 | ControlFlowNode for SOURCE | summaries.py:67:1:67:18 | ControlFlowNode for tainted_resultlist | provenance |  |
 | summaries.py:67:33:67:38 | ControlFlowNode for SOURCE | summaries.py:67:1:67:18 | ControlFlowNode for tainted_resultlist | provenance | Decoding-JSON |
 | summaries.py:67:33:67:38 | ControlFlowNode for SOURCE | summaries.py:67:22:67:39 | ControlFlowNode for json_loads() [List element] | provenance | json.loads |
 | summaries.py:68:6:68:23 | ControlFlowNode for tainted_resultlist [List element] | summaries.py:68:6:68:26 | ControlFlowNode for Subscript | provenance |  |
@@ -56,11 +53,8 @@ nodes
 | summaries.py:36:41:36:45 | ControlFlowNode for BinaryExpr | semmle.label | ControlFlowNode for BinaryExpr |
 | summaries.py:36:48:36:53 | ControlFlowNode for SOURCE | semmle.label | ControlFlowNode for SOURCE |
 | summaries.py:37:6:37:19 | ControlFlowNode for tainted_lambda | semmle.label | ControlFlowNode for tainted_lambda |
-| summaries.py:44:1:44:12 | ControlFlowNode for tainted_list | semmle.label | ControlFlowNode for tainted_list |
 | summaries.py:44:1:44:12 | ControlFlowNode for tainted_list [List element] | semmle.label | ControlFlowNode for tainted_list [List element] |
-| summaries.py:44:16:44:33 | ControlFlowNode for reversed() | semmle.label | ControlFlowNode for reversed() |
 | summaries.py:44:16:44:33 | ControlFlowNode for reversed() [List element] | semmle.label | ControlFlowNode for reversed() [List element] |
-| summaries.py:44:25:44:32 | ControlFlowNode for List | semmle.label | ControlFlowNode for List |
 | summaries.py:44:25:44:32 | ControlFlowNode for List [List element] | semmle.label | ControlFlowNode for List [List element] |
 | summaries.py:44:26:44:31 | ControlFlowNode for SOURCE | semmle.label | ControlFlowNode for SOURCE |
 | summaries.py:45:6:45:17 | ControlFlowNode for tainted_list [List element] | semmle.label | ControlFlowNode for tainted_list [List element] |

python/ql/test/library-tests/dataflow/tainttracking/defaultAdditionalTaintStep/test_collections.py

@@ -32,7 +32,6 @@ def test_construction():
         list(tainted_tuple), # $ tainted
         list(tainted_set), # $ tainted
         list(tainted_dict.values()), # $ tainted
-        list(tainted_dict.items()), # $ tainted
 
         tuple(tainted_list), # $ tainted
         set(tainted_list), # $ tainted
@@ -41,10 +40,11 @@ def test_construction():
         dict(k = tainted_string)["k"], # $ tainted
         dict(dict(k = tainted_string))["k"], # $ tainted
         dict(["k", tainted_string]), # $ tainted
+        list(tainted_dict.items()), # $ tainted
     )
 
     ensure_not_tainted(
-        dict(k = tainted_string)["k1"]
+        dict(k = tainted_string)["k1"],
     )
 
 
@@ -59,7 +59,7 @@ def test_access(x, y, z):
         sorted(tainted_list), # $ tainted
         reversed(tainted_list), # $ tainted
         iter(tainted_list), # $ tainted
-        next(iter(tainted_list)), # $ MISSING: tainted
+        next(iter(tainted_list)), # $ tainted
         [i for i in tainted_list], # $ tainted
         [tainted_list for _i in [1,2,3]], # $ tainted
     )

python/ql/test/library-tests/dataflow/tainttracking/defaultAdditionalTaintStep/test_unpacking.py

@@ -53,7 +53,7 @@ def contrived_1():
 
     (a, b, c), (d, e, f) = tainted_list, no_taint_list
     ensure_tainted(a, b, c) # $ tainted
-    ensure_not_tainted(d, e, f) # $ SPURIOUS: tainted
+    ensure_not_tainted(d, e, f)
 
 
 def contrived_2():

python/ql/test/library-tests/dataflow/typetracking/attribute_tests.py

@@ -157,7 +157,7 @@ class MyClass2(object):
         print(self.foo) # $ tracked MISSING: tracked=foo
 
 instance = MyClass2()
-print(instance.foo) # $ MISSING: tracked=foo tracked
+print(instance.foo) # $ tracked MISSING: tracked=foo
 instance.print_foo() # $ MISSING: tracked=foo
 
 
@@ -195,7 +195,7 @@ class Sub1(Base1):
 
 sub1 = Sub1()
 sub1.read_foo()
-print(sub1.foo) # $ MISSING: tracked=foo tracked
+print(sub1.foo) # $ tracked MISSING: tracked=foo
 
 
 # attribute written in a subclass method, read in an inherited base class method
@@ -210,7 +210,7 @@ class Sub2(Base2):
 
 sub2 = Sub2()
 sub2.read_bar()
-print(sub2.bar) # $ MISSING: tracked=bar tracked
+print(sub2.bar) # $ tracked MISSING: tracked=bar
 
 
 # attribute written in a base class method, read on an instance of the subclass
@@ -223,4 +223,4 @@ class Sub3(Base3):
     pass
 
 sub3 = Sub3()
-print(sub3.baz) # $ MISSING: tracked=baz tracked
+print(sub3.baz) # $ tracked MISSING: tracked=baz

python/ql/test/library-tests/frameworks/gradio/taint_step_test.expected

@@ -3,10 +3,12 @@ edges
 | taint_step_test.py:5:12:5:35 | ControlFlowNode for Attribute() | taint_step_test.py:5:5:5:8 | ControlFlowNode for path | provenance |  |
 | taint_step_test.py:6:5:6:8 | ControlFlowNode for file | taint_step_test.py:19:48:19:51 | ControlFlowNode for file | provenance |  |
 | taint_step_test.py:6:12:6:35 | ControlFlowNode for Attribute() | taint_step_test.py:6:5:6:8 | ControlFlowNode for file | provenance |  |
-| taint_step_test.py:11:18:11:21 | ControlFlowNode for path | taint_step_test.py:12:9:12:16 | ControlFlowNode for filepath | provenance |  |
 | taint_step_test.py:11:18:11:21 | ControlFlowNode for path | taint_step_test.py:12:9:12:16 | ControlFlowNode for filepath | provenance | AdditionalTaintStep |
+| taint_step_test.py:11:18:11:21 | ControlFlowNode for path | taint_step_test.py:12:33:12:36 | ControlFlowNode for path | provenance |  |
 | taint_step_test.py:11:24:11:27 | ControlFlowNode for file | taint_step_test.py:12:9:12:16 | ControlFlowNode for filepath | provenance | AdditionalTaintStep |
 | taint_step_test.py:12:9:12:16 | ControlFlowNode for filepath | taint_step_test.py:13:19:13:26 | ControlFlowNode for filepath | provenance |  |
+| taint_step_test.py:12:20:12:43 | ControlFlowNode for Attribute() | taint_step_test.py:12:9:12:16 | ControlFlowNode for filepath | provenance |  |
+| taint_step_test.py:12:33:12:36 | ControlFlowNode for path | taint_step_test.py:12:20:12:43 | ControlFlowNode for Attribute() | provenance | str.join |
 | taint_step_test.py:19:43:19:46 | ControlFlowNode for path | taint_step_test.py:11:18:11:21 | ControlFlowNode for path | provenance | AdditionalTaintStep |
 | taint_step_test.py:19:48:19:51 | ControlFlowNode for file | taint_step_test.py:11:24:11:27 | ControlFlowNode for file | provenance | AdditionalTaintStep |
 nodes
@@ -17,6 +19,8 @@ nodes
 | taint_step_test.py:11:18:11:21 | ControlFlowNode for path | semmle.label | ControlFlowNode for path |
 | taint_step_test.py:11:24:11:27 | ControlFlowNode for file | semmle.label | ControlFlowNode for file |
 | taint_step_test.py:12:9:12:16 | ControlFlowNode for filepath | semmle.label | ControlFlowNode for filepath |
+| taint_step_test.py:12:20:12:43 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
+| taint_step_test.py:12:33:12:36 | ControlFlowNode for path | semmle.label | ControlFlowNode for path |
 | taint_step_test.py:13:19:13:26 | ControlFlowNode for filepath | semmle.label | ControlFlowNode for filepath |
 | taint_step_test.py:19:43:19:46 | ControlFlowNode for path | semmle.label | ControlFlowNode for path |
 | taint_step_test.py:19:48:19:51 | ControlFlowNode for file | semmle.label | ControlFlowNode for file |

python/ql/test/library-tests/frameworks/stdlib/test_re.py

@@ -6,16 +6,16 @@ pat = ... # some pattern
 compiled_pat = re.compile(pat)
 
 # see https://docs.python.org/3/library/re.html#functions
-ensure_not_tainted(
-    # returns Match object, which is tested properly below. (note: with the flow summary
-    # modeling, objects containing tainted values are not themselves tainted).
-    re.search(pat, ts),
-    re.match(pat, ts),
-    re.fullmatch(pat, ts),
+ensure_tainted(
+    # returns Match object, which is tested properly below. (note: the match objects contain
+    # tainted values but are not themselves tainted - this test relies on implicit reads at sinks).
+    re.search(pat, ts), # $ tainted
+    re.match(pat, ts), # $ tainted
+    re.fullmatch(pat, ts), # $ tainted
 
-    compiled_pat.search(ts),
-    compiled_pat.match(ts),
-    compiled_pat.fullmatch(ts),
+    compiled_pat.search(ts), # $ tainted
+    compiled_pat.match(ts), # $ tainted
+    compiled_pat.fullmatch(ts), # $ tainted
 )
 
 # Match object
@@ -80,9 +80,9 @@ ensure_tainted(
 )
 
 ensure_not_tainted(
-    re.subn(pat, repl="safe", string=ts),
     re.subn(pat, repl="safe", string=ts)[1], # // the number of substitutions made
 )
 ensure_tainted(
+    re.subn(pat, repl="safe", string=ts), # $ tainted // implicit read at sink
     re.subn(pat, repl="safe", string=ts)[0], # $ tainted // the string
 )

python/ql/test/library-tests/frameworks/tornado/taint_test.py

@@ -63,7 +63,8 @@ class TaintTest(tornado.web.RequestHandler):
             request.headers["header-name"], # $ tainted
             request.headers.get_list("header-name"), # $ tainted
             request.headers.get_all(), # $ tainted
-            [(k, v) for (k, v) in request.headers.get_all()], # $ tainted
+            [(k, v) for (k, v) in request.headers.get_all()][0], # $ tainted
+            list([(k, v) for (k, v) in request.headers.get_all()])[0], # $ tainted
 
             # Dict[str, http.cookies.Morsel]
             request.cookies, # $ tainted
@@ -71,6 +72,11 @@ class TaintTest(tornado.web.RequestHandler):
             request.cookies["cookie-name"].key, # $ tainted
             request.cookies["cookie-name"].value, # $ tainted
             request.cookies["cookie-name"].coded_value, # $ tainted
+
+             # The comprehension is not tainted, only the elements, but this passes due to implicit reads at sinks
+            [(k, v) for (k, v) in request.headers.get_all()], # $ tainted
+            # The list is not tainted, only the elements, but this passes due to implicit reads at sinks
+            list([(k, v) for (k, v) in request.headers.get_all()]), # $ tainted
         )
 
 

python/ql/test/query-tests/Security/CVE-2018-1281/BindToAllInterfaces.expected

@@ -11,10 +11,13 @@
 edges
 | BindToAllInterfaces_test.py:5:9:5:17 | ControlFlowNode for StringLiteral | BindToAllInterfaces_test.py:5:9:5:24 | ControlFlowNode for Tuple | provenance | Sink:MaD:63 |
 | BindToAllInterfaces_test.py:9:9:9:10 | ControlFlowNode for StringLiteral | BindToAllInterfaces_test.py:9:9:9:16 | ControlFlowNode for Tuple | provenance | Sink:MaD:63 |
-| BindToAllInterfaces_test.py:16:1:16:10 | ControlFlowNode for ALL_LOCALS | BindToAllInterfaces_test.py:17:9:17:24 | ControlFlowNode for Tuple | provenance | Sink:MaD:63 |
-| BindToAllInterfaces_test.py:16:1:16:10 | ControlFlowNode for ALL_LOCALS | BindToAllInterfaces_test.py:20:1:20:3 | ControlFlowNode for tup | provenance |  |
+| BindToAllInterfaces_test.py:16:1:16:10 | ControlFlowNode for ALL_LOCALS | BindToAllInterfaces_test.py:17:9:17:18 | ControlFlowNode for ALL_LOCALS | provenance |  |
+| BindToAllInterfaces_test.py:16:1:16:10 | ControlFlowNode for ALL_LOCALS | BindToAllInterfaces_test.py:20:8:20:17 | ControlFlowNode for ALL_LOCALS | provenance |  |
 | BindToAllInterfaces_test.py:16:14:16:22 | ControlFlowNode for StringLiteral | BindToAllInterfaces_test.py:16:1:16:10 | ControlFlowNode for ALL_LOCALS | provenance |  |
-| BindToAllInterfaces_test.py:20:1:20:3 | ControlFlowNode for tup | BindToAllInterfaces_test.py:21:8:21:10 | ControlFlowNode for tup | provenance | Sink:MaD:63 |
+| BindToAllInterfaces_test.py:17:9:17:18 | ControlFlowNode for ALL_LOCALS | BindToAllInterfaces_test.py:17:9:17:24 | ControlFlowNode for Tuple | provenance | Sink:MaD:63 |
+| BindToAllInterfaces_test.py:20:1:20:3 | ControlFlowNode for tup [Tuple element at index 0] | BindToAllInterfaces_test.py:21:8:21:10 | ControlFlowNode for tup | provenance | Sink:MaD:63 |
+| BindToAllInterfaces_test.py:20:8:20:17 | ControlFlowNode for ALL_LOCALS | BindToAllInterfaces_test.py:20:8:20:23 | ControlFlowNode for Tuple [Tuple element at index 0] | provenance |  |
+| BindToAllInterfaces_test.py:20:8:20:23 | ControlFlowNode for Tuple [Tuple element at index 0] | BindToAllInterfaces_test.py:20:1:20:3 | ControlFlowNode for tup [Tuple element at index 0] | provenance |  |
 | BindToAllInterfaces_test.py:26:9:26:12 | ControlFlowNode for StringLiteral | BindToAllInterfaces_test.py:26:9:26:18 | ControlFlowNode for Tuple | provenance | Sink:MaD:63 |
 | BindToAllInterfaces_test.py:33:18:33:21 | ControlFlowNode for self [Return] [Attribute bind_addr] | BindToAllInterfaces_test.py:41:10:41:17 | ControlFlowNode for Server() [Attribute bind_addr] | provenance |  |
 | BindToAllInterfaces_test.py:34:9:34:12 | [post] ControlFlowNode for self [Attribute bind_addr] | BindToAllInterfaces_test.py:33:18:33:21 | ControlFlowNode for self [Return] [Attribute bind_addr] | provenance |  |
@@ -25,9 +28,10 @@ edges
 | BindToAllInterfaces_test.py:41:1:41:6 | ControlFlowNode for server [Attribute bind_addr] | BindToAllInterfaces_test.py:42:1:42:6 | ControlFlowNode for server [Attribute bind_addr] | provenance |  |
 | BindToAllInterfaces_test.py:41:10:41:17 | ControlFlowNode for Server() [Attribute bind_addr] | BindToAllInterfaces_test.py:41:1:41:6 | ControlFlowNode for server [Attribute bind_addr] | provenance |  |
 | BindToAllInterfaces_test.py:42:1:42:6 | ControlFlowNode for server [Attribute bind_addr] | BindToAllInterfaces_test.py:37:15:37:18 | ControlFlowNode for self [Attribute bind_addr] | provenance |  |
-| BindToAllInterfaces_test.py:46:1:46:4 | ControlFlowNode for host | BindToAllInterfaces_test.py:48:9:48:18 | ControlFlowNode for Tuple | provenance | Sink:MaD:63 |
+| BindToAllInterfaces_test.py:46:1:46:4 | ControlFlowNode for host | BindToAllInterfaces_test.py:48:9:48:12 | ControlFlowNode for host | provenance |  |
 | BindToAllInterfaces_test.py:46:8:46:44 | ControlFlowNode for Attribute() | BindToAllInterfaces_test.py:46:1:46:4 | ControlFlowNode for host | provenance |  |
 | BindToAllInterfaces_test.py:46:35:46:43 | ControlFlowNode for StringLiteral | BindToAllInterfaces_test.py:46:8:46:44 | ControlFlowNode for Attribute() | provenance | dict.get |
+| BindToAllInterfaces_test.py:48:9:48:12 | ControlFlowNode for host | BindToAllInterfaces_test.py:48:9:48:18 | ControlFlowNode for Tuple | provenance | Sink:MaD:63 |
 | BindToAllInterfaces_test.py:53:10:53:18 | ControlFlowNode for StringLiteral | BindToAllInterfaces_test.py:53:10:53:25 | ControlFlowNode for Tuple | provenance | Sink:MaD:63 |
 | BindToAllInterfaces_test.py:58:10:58:18 | ControlFlowNode for StringLiteral | BindToAllInterfaces_test.py:58:10:58:25 | ControlFlowNode for Tuple | provenance | Sink:MaD:63 |
 nodes
@@ -37,8 +41,11 @@ nodes
 | BindToAllInterfaces_test.py:9:9:9:16 | ControlFlowNode for Tuple | semmle.label | ControlFlowNode for Tuple |
 | BindToAllInterfaces_test.py:16:1:16:10 | ControlFlowNode for ALL_LOCALS | semmle.label | ControlFlowNode for ALL_LOCALS |
 | BindToAllInterfaces_test.py:16:14:16:22 | ControlFlowNode for StringLiteral | semmle.label | ControlFlowNode for StringLiteral |
+| BindToAllInterfaces_test.py:17:9:17:18 | ControlFlowNode for ALL_LOCALS | semmle.label | ControlFlowNode for ALL_LOCALS |
 | BindToAllInterfaces_test.py:17:9:17:24 | ControlFlowNode for Tuple | semmle.label | ControlFlowNode for Tuple |
-| BindToAllInterfaces_test.py:20:1:20:3 | ControlFlowNode for tup | semmle.label | ControlFlowNode for tup |
+| BindToAllInterfaces_test.py:20:1:20:3 | ControlFlowNode for tup [Tuple element at index 0] | semmle.label | ControlFlowNode for tup [Tuple element at index 0] |
+| BindToAllInterfaces_test.py:20:8:20:17 | ControlFlowNode for ALL_LOCALS | semmle.label | ControlFlowNode for ALL_LOCALS |
+| BindToAllInterfaces_test.py:20:8:20:23 | ControlFlowNode for Tuple [Tuple element at index 0] | semmle.label | ControlFlowNode for Tuple [Tuple element at index 0] |
 | BindToAllInterfaces_test.py:21:8:21:10 | ControlFlowNode for tup | semmle.label | ControlFlowNode for tup |
 | BindToAllInterfaces_test.py:26:9:26:12 | ControlFlowNode for StringLiteral | semmle.label | ControlFlowNode for StringLiteral |
 | BindToAllInterfaces_test.py:26:9:26:18 | ControlFlowNode for Tuple | semmle.label | ControlFlowNode for Tuple |
@@ -55,6 +62,7 @@ nodes
 | BindToAllInterfaces_test.py:46:1:46:4 | ControlFlowNode for host | semmle.label | ControlFlowNode for host |
 | BindToAllInterfaces_test.py:46:8:46:44 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
 | BindToAllInterfaces_test.py:46:35:46:43 | ControlFlowNode for StringLiteral | semmle.label | ControlFlowNode for StringLiteral |
+| BindToAllInterfaces_test.py:48:9:48:12 | ControlFlowNode for host | semmle.label | ControlFlowNode for host |
 | BindToAllInterfaces_test.py:48:9:48:18 | ControlFlowNode for Tuple | semmle.label | ControlFlowNode for Tuple |
 | BindToAllInterfaces_test.py:53:10:53:18 | ControlFlowNode for StringLiteral | semmle.label | ControlFlowNode for StringLiteral |
 | BindToAllInterfaces_test.py:53:10:53:25 | ControlFlowNode for Tuple | semmle.label | ControlFlowNode for Tuple |

python/ql/test/query-tests/Security/CWE-020-ExternalAPIs/UntrustedDataToExternalAPI.expected

@@ -5,11 +5,13 @@ edges
 | test.py:5:26:5:32 | ControlFlowNode for request | test.py:34:12:34:18 | ControlFlowNode for request | provenance |  |
 | test.py:5:26:5:32 | ControlFlowNode for request | test.py:42:12:42:18 | ControlFlowNode for request | provenance |  |
 | test.py:5:26:5:32 | ControlFlowNode for request | test.py:54:12:54:18 | ControlFlowNode for request | provenance |  |
+| test.py:13:5:13:12 | ControlFlowNode for data_raw | test.py:14:5:14:8 | ControlFlowNode for data | provenance |  |
 | test.py:13:5:13:12 | ControlFlowNode for data_raw | test.py:14:5:14:8 | ControlFlowNode for data | provenance | Decoding-Base64 |
 | test.py:13:16:13:22 | ControlFlowNode for request | test.py:13:16:13:27 | ControlFlowNode for Attribute | provenance | AdditionalTaintStep |
 | test.py:13:16:13:27 | ControlFlowNode for Attribute | test.py:13:16:13:39 | ControlFlowNode for Attribute() | provenance | dict.get |
 | test.py:13:16:13:39 | ControlFlowNode for Attribute() | test.py:13:5:13:12 | ControlFlowNode for data_raw | provenance |  |
 | test.py:14:5:14:8 | ControlFlowNode for data | test.py:15:36:15:39 | ControlFlowNode for data | provenance |  |
+| test.py:23:5:23:12 | ControlFlowNode for data_raw | test.py:24:5:24:8 | ControlFlowNode for data | provenance |  |
 | test.py:23:5:23:12 | ControlFlowNode for data_raw | test.py:24:5:24:8 | ControlFlowNode for data | provenance | Decoding-Base64 |
 | test.py:23:16:23:22 | ControlFlowNode for request | test.py:23:16:23:27 | ControlFlowNode for Attribute | provenance | AdditionalTaintStep |
 | test.py:23:16:23:27 | ControlFlowNode for Attribute | test.py:23:16:23:39 | ControlFlowNode for Attribute() | provenance | dict.get |

python/ql/test/query-tests/Security/CWE-078-UnsafeShellCommandConstruction/UnsafeShellCommandConstruction.expected

@@ -1,10 +1,13 @@
 edges
 | src/unsafe_shell_test.py:4:22:4:25 | ControlFlowNode for name | src/unsafe_shell_test.py:5:25:5:28 | ControlFlowNode for name | provenance |  |
 | src/unsafe_shell_test.py:4:22:4:25 | ControlFlowNode for name | src/unsafe_shell_test.py:8:23:8:26 | ControlFlowNode for name | provenance |  |
-| src/unsafe_shell_test.py:4:22:4:25 | ControlFlowNode for name | src/unsafe_shell_test.py:11:25:11:38 | ControlFlowNode for Attribute() | provenance |  |
-| src/unsafe_shell_test.py:4:22:4:25 | ControlFlowNode for name | src/unsafe_shell_test.py:14:25:14:40 | ControlFlowNode for Attribute() | provenance |  |
+| src/unsafe_shell_test.py:4:22:4:25 | ControlFlowNode for name | src/unsafe_shell_test.py:11:34:11:37 | ControlFlowNode for name | provenance |  |
+| src/unsafe_shell_test.py:4:22:4:25 | ControlFlowNode for name | src/unsafe_shell_test.py:14:35:14:38 | ControlFlowNode for name | provenance |  |
 | src/unsafe_shell_test.py:4:22:4:25 | ControlFlowNode for name | src/unsafe_shell_test.py:17:32:17:35 | ControlFlowNode for name | provenance |  |
 | src/unsafe_shell_test.py:4:22:4:25 | ControlFlowNode for name | src/unsafe_shell_test.py:20:27:20:30 | ControlFlowNode for name | provenance |  |
+| src/unsafe_shell_test.py:11:34:11:37 | ControlFlowNode for name | src/unsafe_shell_test.py:11:25:11:38 | ControlFlowNode for Attribute() | provenance | str.join |
+| src/unsafe_shell_test.py:14:34:14:39 | ControlFlowNode for List [List element] | src/unsafe_shell_test.py:14:25:14:40 | ControlFlowNode for Attribute() | provenance | str.join |
+| src/unsafe_shell_test.py:14:35:14:38 | ControlFlowNode for name | src/unsafe_shell_test.py:14:34:14:39 | ControlFlowNode for List [List element] | provenance |  |
 | src/unsafe_shell_test.py:26:20:26:23 | ControlFlowNode for name | src/unsafe_shell_test.py:29:30:29:33 | ControlFlowNode for name | provenance |  |
 | src/unsafe_shell_test.py:36:22:36:25 | ControlFlowNode for name | src/unsafe_shell_test.py:39:30:39:33 | ControlFlowNode for name | provenance |  |
 | src/unsafe_shell_test.py:36:22:36:25 | ControlFlowNode for name | src/unsafe_shell_test.py:44:20:44:23 | ControlFlowNode for name | provenance |  |
@@ -15,7 +18,10 @@ nodes
 | src/unsafe_shell_test.py:5:25:5:28 | ControlFlowNode for name | semmle.label | ControlFlowNode for name |
 | src/unsafe_shell_test.py:8:23:8:26 | ControlFlowNode for name | semmle.label | ControlFlowNode for name |
 | src/unsafe_shell_test.py:11:25:11:38 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
+| src/unsafe_shell_test.py:11:34:11:37 | ControlFlowNode for name | semmle.label | ControlFlowNode for name |
 | src/unsafe_shell_test.py:14:25:14:40 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
+| src/unsafe_shell_test.py:14:34:14:39 | ControlFlowNode for List [List element] | semmle.label | ControlFlowNode for List [List element] |
+| src/unsafe_shell_test.py:14:35:14:38 | ControlFlowNode for name | semmle.label | ControlFlowNode for name |
 | src/unsafe_shell_test.py:17:32:17:35 | ControlFlowNode for name | semmle.label | ControlFlowNode for name |
 | src/unsafe_shell_test.py:20:27:20:30 | ControlFlowNode for name | semmle.label | ControlFlowNode for name |
 | src/unsafe_shell_test.py:26:20:26:23 | ControlFlowNode for name | semmle.label | ControlFlowNode for name |

python/ql/test/query-tests/Security/CWE-079-ReflectedXss/ReflectedXss.expected

@@ -11,8 +11,10 @@ edges
 | reflected_xss.py:9:18:9:24 | ControlFlowNode for request | reflected_xss.py:9:18:9:29 | ControlFlowNode for Attribute | provenance | AdditionalTaintStep |
 | reflected_xss.py:9:18:9:29 | ControlFlowNode for Attribute | reflected_xss.py:9:18:9:45 | ControlFlowNode for Attribute() | provenance | dict.get |
 | reflected_xss.py:9:18:9:45 | ControlFlowNode for Attribute() | reflected_xss.py:9:5:9:14 | ControlFlowNode for first_name | provenance |  |
+| reflected_xss.py:21:5:21:8 | ControlFlowNode for data | reflected_xss.py:22:26:22:41 | ControlFlowNode for Attribute() | provenance |  |
 | reflected_xss.py:21:5:21:8 | ControlFlowNode for data | reflected_xss.py:22:26:22:41 | ControlFlowNode for Attribute() | provenance | AdditionalTaintStep |
 | reflected_xss.py:21:23:21:29 | ControlFlowNode for request | reflected_xss.py:21:5:21:8 | ControlFlowNode for data | provenance | AdditionalTaintStep |
+| reflected_xss.py:27:5:27:8 | ControlFlowNode for data | reflected_xss.py:28:26:28:41 | ControlFlowNode for Attribute() | provenance |  |
 | reflected_xss.py:27:5:27:8 | ControlFlowNode for data | reflected_xss.py:28:26:28:41 | ControlFlowNode for Attribute() | provenance | AdditionalTaintStep |
 | reflected_xss.py:27:23:27:29 | ControlFlowNode for request | reflected_xss.py:27:5:27:8 | ControlFlowNode for data | provenance | AdditionalTaintStep |
 nodes

python/ql/test/query-tests/Security/CWE-089-SqlInjection/SqlInjection.expected

@@ -1,6 +1,7 @@
 #select
 | app.py:23:20:23:24 | ControlFlowNode for query | app.py:20:18:20:21 | ControlFlowNode for name | app.py:23:20:23:24 | ControlFlowNode for query | This SQL query depends on a $@. | app.py:20:18:20:21 | ControlFlowNode for name | user-provided value |
 | app.py:30:20:30:24 | ControlFlowNode for query | app.py:27:19:27:22 | ControlFlowNode for name | app.py:30:20:30:24 | ControlFlowNode for query | This SQL query depends on a $@. | app.py:27:19:27:22 | ControlFlowNode for name | user-provided value |
+| app.py:37:20:37:24 | ControlFlowNode for query | app.py:34:19:34:22 | ControlFlowNode for name | app.py:37:20:37:24 | ControlFlowNode for query | This SQL query depends on a $@. | app.py:34:19:34:22 | ControlFlowNode for name | user-provided value |
 | app.py:44:20:44:24 | ControlFlowNode for query | app.py:41:19:41:22 | ControlFlowNode for name | app.py:44:20:44:24 | ControlFlowNode for query | This SQL query depends on a $@. | app.py:41:19:41:22 | ControlFlowNode for name | user-provided value |
 | app.py:51:20:51:24 | ControlFlowNode for query | app.py:48:19:48:22 | ControlFlowNode for name | app.py:51:20:51:24 | ControlFlowNode for query | This SQL query depends on a $@. | app.py:48:19:48:22 | ControlFlowNode for name | user-provided value |
 | sql_injection.py:21:24:21:77 | ControlFlowNode for BinaryExpr | sql_injection.py:14:15:14:22 | ControlFlowNode for username | sql_injection.py:21:24:21:77 | ControlFlowNode for BinaryExpr | This SQL query depends on a $@. | sql_injection.py:14:15:14:22 | ControlFlowNode for username | user-provided value |
@@ -24,6 +25,8 @@ edges
 | app.py:21:5:21:9 | ControlFlowNode for query | app.py:23:20:23:24 | ControlFlowNode for query | provenance |  |
 | app.py:27:19:27:22 | ControlFlowNode for name | app.py:28:5:28:9 | ControlFlowNode for query | provenance |  |
 | app.py:28:5:28:9 | ControlFlowNode for query | app.py:30:20:30:24 | ControlFlowNode for query | provenance |  |
+| app.py:34:19:34:22 | ControlFlowNode for name | app.py:35:5:35:9 | ControlFlowNode for query | provenance |  |
+| app.py:35:5:35:9 | ControlFlowNode for query | app.py:37:20:37:24 | ControlFlowNode for query | provenance |  |
 | app.py:41:19:41:22 | ControlFlowNode for name | app.py:42:5:42:9 | ControlFlowNode for query | provenance |  |
 | app.py:42:5:42:9 | ControlFlowNode for query | app.py:44:20:44:24 | ControlFlowNode for query | provenance |  |
 | app.py:48:19:48:22 | ControlFlowNode for name | app.py:49:5:49:9 | ControlFlowNode for query | provenance |  |
@@ -51,6 +54,9 @@ nodes
 | app.py:27:19:27:22 | ControlFlowNode for name | semmle.label | ControlFlowNode for name |
 | app.py:28:5:28:9 | ControlFlowNode for query | semmle.label | ControlFlowNode for query |
 | app.py:30:20:30:24 | ControlFlowNode for query | semmle.label | ControlFlowNode for query |
+| app.py:34:19:34:22 | ControlFlowNode for name | semmle.label | ControlFlowNode for name |
+| app.py:35:5:35:9 | ControlFlowNode for query | semmle.label | ControlFlowNode for query |
+| app.py:37:20:37:24 | ControlFlowNode for query | semmle.label | ControlFlowNode for query |
 | app.py:41:19:41:22 | ControlFlowNode for name | semmle.label | ControlFlowNode for name |
 | app.py:42:5:42:9 | ControlFlowNode for query | semmle.label | ControlFlowNode for query |
 | app.py:44:20:44:24 | ControlFlowNode for query | semmle.label | ControlFlowNode for query |

python/ql/test/query-tests/Security/CWE-089-SqlInjection/app.py

@@ -31,10 +31,10 @@ async def unsafe2(name: str): # $ Source
     cursor.close()
 
 @app.get("/unsafe3/")
-async def unsafe3(name: str): # $ MISSING: Source
+async def unsafe3(name: str): # $ Source
     query = "select * from users where name=" + name
     cursor = hdb_con3.cursor()
-    cursor.execute(query) # $ MISSING: Alert
+    cursor.execute(query) # $ Alert
     cursor.close()
 
 @app.get("/unsafe4/")

python/ql/test/query-tests/Security/CWE-209-StackTraceExposure/StackTraceExposure.expected

@@ -7,7 +7,8 @@ edges
 | test.py:50:29:50:31 | ControlFlowNode for err | test.py:50:16:50:32 | ControlFlowNode for format_error() | provenance |  |
 | test.py:50:29:50:31 | ControlFlowNode for err | test.py:52:18:52:20 | ControlFlowNode for msg | provenance |  |
 | test.py:52:18:52:20 | ControlFlowNode for msg | test.py:53:12:53:27 | ControlFlowNode for BinaryExpr | provenance |  |
-| test.py:65:25:65:25 | ControlFlowNode for e | test.py:66:24:66:40 | ControlFlowNode for Dict | provenance |  |
+| test.py:65:25:65:25 | ControlFlowNode for e | test.py:66:34:66:39 | ControlFlowNode for str() | provenance |  |
+| test.py:66:34:66:39 | ControlFlowNode for str() | test.py:66:24:66:40 | ControlFlowNode for Dict | provenance |  |
 nodes
 | test.py:16:16:16:37 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() |
 | test.py:23:25:23:25 | ControlFlowNode for e | semmle.label | ControlFlowNode for e |
@@ -23,6 +24,7 @@ nodes
 | test.py:53:12:53:27 | ControlFlowNode for BinaryExpr | semmle.label | ControlFlowNode for BinaryExpr |
 | test.py:65:25:65:25 | ControlFlowNode for e | semmle.label | ControlFlowNode for e |
 | test.py:66:24:66:40 | ControlFlowNode for Dict | semmle.label | ControlFlowNode for Dict |
+| test.py:66:34:66:39 | ControlFlowNode for str() | semmle.label | ControlFlowNode for str() |
 subpaths
 | test.py:50:29:50:31 | ControlFlowNode for err | test.py:52:18:52:20 | ControlFlowNode for msg | test.py:53:12:53:27 | ControlFlowNode for BinaryExpr | test.py:50:16:50:32 | ControlFlowNode for format_error() |
 #select