use CallNode.getSyntacticArgument

owen-mc · owen-mc · commit bc0f9030e312 · 2023-04-28T06:09:10.000+01:00
diff --git a/go/ql/lib/semmle/go/StringOps.qll b/go/ql/lib/semmle/go/StringOps.qll
@@ -219,7 +219,7 @@ module StringOps {
        * replaced.
        */
       DataFlow::Node getAReplacedArgument() {
-        exists(int n | n % 2 = 0 and result = this.getArgument(n))
+        exists(int n | n % 2 = 0 and result = this.getSyntacticArgument(n))
       }
     }
 
diff --git a/go/ql/lib/semmle/go/frameworks/Beego.qll b/go/ql/lib/semmle/go/frameworks/Beego.qll
@@ -253,21 +253,21 @@ module Beego {
       this.getTarget().hasQualifiedName([packagePath(), logsPackagePath()], getALogFunctionName())
     }
 
-    override DataFlow::Node getAMessageComponent() { result = this.getAnArgument() }
+    override DataFlow::Node getAMessageComponent() { result = this.getASyntacticArgument() }
   }
 
   private class BeegoLoggerMethods extends LoggerCall::Range, DataFlow::MethodCallNode {
     BeegoLoggerMethods() {
       this.getTarget().hasQualifiedName(logsPackagePath(), "BeeLogger", getALogFunctionName())
     }
 
-    override DataFlow::Node getAMessageComponent() { result = this.getAnArgument() }
+    override DataFlow::Node getAMessageComponent() { result = this.getASyntacticArgument() }
   }
 
   private class UtilLoggers extends LoggerCall::Range, DataFlow::CallNode {
     UtilLoggers() { this.getTarget().hasQualifiedName(utilsPackagePath(), "Display") }
 
-    override DataFlow::Node getAMessageComponent() { result = this.getAnArgument() }
+    override DataFlow::Node getAMessageComponent() { result = this.getASyntacticArgument() }
   }
 
   private class HtmlQuoteSanitizer extends SharedXss::Sanitizer {
diff --git a/go/ql/lib/semmle/go/frameworks/BeegoOrm.qll b/go/ql/lib/semmle/go/frameworks/BeegoOrm.qll
@@ -33,7 +33,7 @@ module BeegoOrm {
     // Note this class doesn't do any escaping, unlike the true ORM part of the package
     QueryBuilderSink() {
       exists(Method impl | impl.implements(packagePath(), "QueryBuilder", _) |
-        this = impl.getACall().getAnArgument()
+        this = impl.getACall().getASyntacticArgument()
       ) and
       this.getType().getUnderlyingType() instanceof StringType
     }
diff --git a/go/ql/lib/semmle/go/frameworks/ElazarlGoproxy.qll b/go/ql/lib/semmle/go/frameworks/ElazarlGoproxy.qll
@@ -90,7 +90,7 @@ module ElazarlGoproxy {
         onreqcall.getTarget().hasQualifiedName(packagePath(), "ProxyHttpServer", "OnRequest")
       |
         handlerReg.getReceiver() = onreqcall.getASuccessor*() and
-        check = onreqcall.getArgument(0)
+        check = onreqcall.getSyntacticArgument(0)
       )
     }
   }
@@ -119,6 +119,6 @@ module ElazarlGoproxy {
   private class ProxyLog extends LoggerCall::Range, DataFlow::MethodCallNode {
     ProxyLog() { this.getTarget() instanceof ProxyLogFunction }
 
-    override DataFlow::Node getAMessageComponent() { result = this.getAnArgument() }
+    override DataFlow::Node getAMessageComponent() { result = this.getASyntacticArgument() }
   }
 }
diff --git a/go/ql/lib/semmle/go/frameworks/Email.qll b/go/ql/lib/semmle/go/frameworks/Email.qll
@@ -56,13 +56,13 @@ module EmailData {
       // func NewV3MailInit(from *Email, subject string, to *Email, content ...*Content) *SGMailV3
       exists(Function newv3MailInit |
         newv3MailInit.hasQualifiedName(sendgridMail(), "NewV3MailInit") and
-        this = newv3MailInit.getACall().getArgument(any(int i | i = 1 or i >= 3))
+        this = newv3MailInit.getACall().getSyntacticArgument(any(int i | i = 1 or i >= 3))
       )
       or
       // func (s *SGMailV3) AddContent(c ...*Content) *SGMailV3
       exists(Method addContent |
         addContent.hasQualifiedName(sendgridMail(), "SGMailV3", "AddContent") and
-        this = addContent.getACall().getAnArgument()
+        this = addContent.getACall().getASyntacticArgument()
       )
     }
   }
diff --git a/go/ql/lib/semmle/go/frameworks/Glog.qll b/go/ql/lib/semmle/go/frameworks/Glog.qll
@@ -49,7 +49,7 @@ module Glog {
     GlogCall() { this = callee.getACall() }
 
     override DataFlow::Node getAMessageComponent() {
-      result = this.getArgument(any(int i | i >= callee.getFirstPrintedArg()))
+      result = this.getSyntacticArgument(any(int i | i >= callee.getFirstPrintedArg()))
     }
   }
 }
diff --git a/go/ql/lib/semmle/go/frameworks/Logrus.qll b/go/ql/lib/semmle/go/frameworks/Logrus.qll
@@ -31,7 +31,7 @@ module Logrus {
   private class LogCall extends LoggerCall::Range, DataFlow::CallNode {
     LogCall() { this = any(LogFunction f).getACall() }
 
-    override DataFlow::Node getAMessageComponent() { result = this.getAnArgument() }
+    override DataFlow::Node getAMessageComponent() { result = this.getASyntacticArgument() }
   }
 
   private class StringFormatters extends StringOps::Formatting::Range instanceof LogFunction {
diff --git a/go/ql/lib/semmle/go/frameworks/Revel.qll b/go/ql/lib/semmle/go/frameworks/Revel.qll
@@ -124,7 +124,7 @@ module Revel {
         or
         methodName = "RenderText" and
         contentType = "text/plain" and
-        this = methodCall.getAnArgument()
+        this = methodCall.getSyntacticArgument(_)
       )
     }
 
@@ -201,7 +201,7 @@ module Revel {
         )
         or
         // a revel controller.Render(arg) will set controller.ViewArgs["arg"] = arg
-        exists(Variable arg | arg.getARead() = render.(ControllerRender).getAnArgument() |
+        exists(Variable arg | arg.getARead() = render.(ControllerRender).getASyntacticArgument() |
           var.getBaseVariable() = arg and
           var.getQualifiedName() = read.getFieldName()
         )
diff --git a/go/ql/lib/semmle/go/frameworks/SQL.qll b/go/ql/lib/semmle/go/frameworks/SQL.qll
@@ -225,7 +225,7 @@ module SQL {
     GormSink() {
       exists(Method meth, string package, string name |
         meth.hasQualifiedName(package, "DB", name) and
-        this = meth.getACall().getArgument(0) and
+        this = meth.getACall().getSyntacticArgument(0) and
         package = Gorm::packagePath() and
         name in [
             "Where", "Raw", "Order", "Not", "Or", "Select", "Table", "Group", "Having", "Joins",
@@ -272,7 +272,7 @@ module Xorm {
     XormSink() {
       exists(Method meth, string type, string name, int n |
         meth.hasQualifiedName(Xorm::packagePath(), type, name) and
-        this = meth.getACall().getArgument(n) and
+        this = meth.getACall().getSyntacticArgument(n) and
         type = ["Engine", "Session"]
       |
         name =
diff --git a/go/ql/lib/semmle/go/frameworks/Spew.qll b/go/ql/lib/semmle/go/frameworks/Spew.qll
@@ -41,7 +41,7 @@ module Spew {
     SpewCall() { this = target.getACall() }
 
     override DataFlow::Node getAMessageComponent() {
-      result = this.getArgument(any(int i | i >= target.getFirstPrintedArg()))
+      result = this.getSyntacticArgument(any(int i | i >= target.getFirstPrintedArg()))
     }
   }
 
diff --git a/go/ql/lib/semmle/go/frameworks/SystemCommandExecutors.qll b/go/ql/lib/semmle/go/frameworks/SystemCommandExecutors.qll
@@ -14,11 +14,12 @@ private class ShellOrSudoExecution extends SystemCommandExecution::Range, DataFl
 
   ShellOrSudoExecution() {
     this instanceof SystemCommandExecution and
-    shellCommand = this.getAnArgument().getAPredecessor*() and
-    not hasSafeSubcommand(shellCommand.getStringValue(), this.getAnArgument().getStringValue())
+    shellCommand = this.getASyntacticArgument().getAPredecessor*() and
+    not hasSafeSubcommand(shellCommand.getStringValue(),
+      this.getASyntacticArgument().getStringValue())
   }
 
-  override DataFlow::Node getCommandName() { result = this.getAnArgument() }
+  override DataFlow::Node getCommandName() { result = this.getASyntacticArgument() }
 
   override predicate doubleDashIsSanitizing() {
     shellCommand.getStringValue().matches("%" + ["git", "rsync"])
@@ -49,7 +50,7 @@ private class SystemCommandExecutors extends SystemCommandExecution::Range, Data
     )
   }
 
-  override DataFlow::Node getCommandName() { result = this.getArgument(cmdArg) }
+  override DataFlow::Node getCommandName() { result = this.getSyntacticArgument(cmdArg) }
 }
 
 /**
@@ -76,7 +77,7 @@ private class GoShCommandExecution extends SystemCommandExecution::Range, DataFl
     )
   }
 
-  override DataFlow::Node getCommandName() { result = this.getArgument(0) }
+  override DataFlow::Node getCommandName() { result = this.getSyntacticArgument(0) }
 }
 
 /**
@@ -102,7 +103,7 @@ module CryptoSsh {
       )
     }
 
-    override DataFlow::Node getCommandName() { result = this.getArgument(0) }
+    override DataFlow::Node getCommandName() { result = this.getSyntacticArgument(0) }
   }
 }
 
diff --git a/go/ql/lib/semmle/go/frameworks/Zap.qll b/go/ql/lib/semmle/go/frameworks/Zap.qll
@@ -45,7 +45,7 @@ module Zap {
   private class ZapCall extends LoggerCall::Range, DataFlow::MethodCallNode {
     ZapCall() { this = any(ZapFunction f).getACall() }
 
-    override DataFlow::Node getAMessageComponent() { result = this.getAnArgument() }
+    override DataFlow::Node getAMessageComponent() { result = this.getASyntacticArgument() }
   }
 
   // These are expressed using TaintTracking::FunctionModel because varargs functions don't work with Models-as-Data sumamries yet.
diff --git a/go/ql/lib/semmle/go/frameworks/stdlib/Fmt.qll b/go/ql/lib/semmle/go/frameworks/stdlib/Fmt.qll
@@ -30,7 +30,7 @@ module Fmt {
   private class PrintCall extends LoggerCall::Range, DataFlow::CallNode {
     PrintCall() { this.getTarget() instanceof Printer }
 
-    override DataFlow::Node getAMessageComponent() { result = this.getAnArgument() }
+    override DataFlow::Node getAMessageComponent() { result = this.getASyntacticArgument() }
   }
 
   /** The `Fprint` function or one of its variants. */
diff --git a/go/ql/lib/semmle/go/frameworks/stdlib/Log.qll b/go/ql/lib/semmle/go/frameworks/stdlib/Log.qll
@@ -27,7 +27,7 @@ module Log {
   private class LogCall extends LoggerCall::Range, DataFlow::CallNode {
     LogCall() { this = any(LogFunction f).getACall() }
 
-    override DataFlow::Node getAMessageComponent() { result = this.getAnArgument() }
+    override DataFlow::Node getAMessageComponent() { result = this.getASyntacticArgument() }
   }
 
   /** A fatal log function, which calls `os.Exit`. */
diff --git a/go/ql/lib/semmle/go/security/CommandInjection.qll b/go/ql/lib/semmle/go/security/CommandInjection.qll
@@ -47,7 +47,7 @@ module CommandInjection {
       exists(DataFlow::CallNode c |
         this = c and
         (c = Builtin::append().getACall() or c = any(SystemCommandExecution sce)) and
-        c.getArgument(doubleDashIndex).getStringValue() = "--"
+        c.getSyntacticArgument(doubleDashIndex).getStringValue() = "--"
       )
       or
       // array/slice literal containing a "--"
@@ -63,15 +63,15 @@ module CommandInjection {
           alreadyHasDoubleDash.getType() instanceof SliceType
         ) and
         this = userCall and
-        DataFlow::localFlow(alreadyHasDoubleDash, userCall.getArgument(doubleDashIndex))
+        DataFlow::localFlow(alreadyHasDoubleDash, userCall.getSyntacticArgument(doubleDashIndex))
       )
     }
 
     DataFlow::Node getASanitizedElement() {
       exists(int sanitizedIndex |
         sanitizedIndex > doubleDashIndex and
         (
-          result = this.(DataFlow::CallNode).getArgument(sanitizedIndex) or
+          result = this.(DataFlow::CallNode).getSyntacticArgument(sanitizedIndex) or
           result = DataFlow::exprNode(this.asExpr().(ArrayOrSliceLit).getElement(sanitizedIndex))
         )
       )
diff --git a/go/ql/lib/semmle/go/security/Xss.qll b/go/ql/lib/semmle/go/security/Xss.qll
@@ -73,12 +73,12 @@ module SharedXss {
       exists(body.getAContentTypeNode())
       or
       exists(DataFlow::CallNode call | call.getTarget().hasQualifiedName("fmt", "Fprintf") |
-        body = call.getAnArgument() and
+        body = call.getASyntacticArgument() and
         // checks that the format value does not start with (ignoring whitespace as defined by
         // https://mimesniff.spec.whatwg.org/#whitespace-byte):
         //  - '<', which could lead to an HTML content type being detected, or
         //  - '%', which could be a format string.
-        call.getArgument(1).getStringValue().regexpMatch("(?s)[\\t\\n\\x0c\\r ]*+[^<%].*")
+        call.getSyntacticArgument(1).getStringValue().regexpMatch("(?s)[\\t\\n\\x0c\\r ]*+[^<%].*")
       )
       or
       exists(DataFlow::Node pred | body = pred.getASuccessor*() |
diff --git a/go/ql/src/Security/CWE-352/ConstantOauth2State.ql b/go/ql/src/Security/CWE-352/ConstantOauth2State.ql
@@ -109,7 +109,7 @@ class PrivateUrlFlowsToAuthCodeUrlCall extends DataFlow::Configuration {
     exists(DataFlow::CallNode cn |
       cn.getACalleeIncludingExternals().asFunction() instanceof Fmt::AppenderOrSprinter
     |
-      pred = cn.getAnArgument() and succ = cn.getResult()
+      pred = cn.getASyntacticArgument() and succ = cn.getResult()
     )
   }
 
diff --git a/go/ql/src/Security/CWE-601/BadRedirectCheck.ql b/go/ql/src/Security/CWE-601/BadRedirectCheck.ql
@@ -121,7 +121,7 @@ class Configuration extends TaintTracking::Configuration {
     )
     or
     exists(DataFlow::CallNode call, int i | call.getTarget().hasQualifiedName("path", "Join") |
-      i > 0 and node = call.getArgument(i)
+      i > 0 and node = call.getSyntacticArgument(i)
     )
   }
 
diff --git a/go/ql/src/experimental/frameworks/CleverGo.qll b/go/ql/src/experimental/frameworks/CleverGo.qll
@@ -278,7 +278,7 @@ private module CleverGo {
           or
           // signature: func (*Context) Stringf(code int, format string, a ...interface{}) error
           methodName = "Stringf" and
-          bodyNode = bodySetterCall.getArgument([1, any(int i | i >= 2)]) and
+          bodyNode = bodySetterCall.getSyntacticArgument([1, any(int i | i >= 2)]) and
           contentTypeString = "text/plain"
           or
           // signature: func (*Context) XML(code int, data interface{}) error
diff --git a/go/ql/src/experimental/frameworks/Fiber.qll b/go/ql/src/experimental/frameworks/Fiber.qll
@@ -183,7 +183,7 @@ private module Fiber {
           // signature: func (*Ctx) Append(field string, values ...string)
           methodName = "Append" and
           headerNameNode = headerSetterCall.getArgument(0) and
-          headerValueNode = headerSetterCall.getArgument(any(int i | i >= 1))
+          headerValueNode = headerSetterCall.getSyntacticArgument(any(int i | i >= 1))
           or
           // signature: func (*Ctx) Set(key string, val string)
           methodName = "Set" and
@@ -270,7 +270,7 @@ private module Fiber {
           or
           // signature: func (*Ctx) Send(bodies ...interface{})
           methodName = "Send" and
-          bodyNode = bodySetterCall.getArgument(_)
+          bodyNode = bodySetterCall.getSyntacticArgument(_)
           or
           // signature: func (*Ctx) SendBytes(body []byte)
           methodName = "SendBytes" and
@@ -286,7 +286,7 @@ private module Fiber {
           or
           // signature: func (*Ctx) Write(bodies ...interface{})
           methodName = "Write" and
-          bodyNode = bodySetterCall.getArgument(_)
+          bodyNode = bodySetterCall.getSyntacticArgument(_)
         )
       )
     )
diff --git a/go/ql/test/library-tests/semmle/go/frameworks/SQL/Gorm/gorm.ql b/go/ql/test/library-tests/semmle/go/frameworks/SQL/Gorm/gorm.ql
@@ -1,5 +1,5 @@
 import go
 
 from SQL::QueryString qs, Method meth, string a, string b, string c
-where meth.hasQualifiedName(a, b, c) and qs = meth.getACall().getArgument(0)
+where meth.hasQualifiedName(a, b, c) and qs = meth.getACall().getSyntacticArgument(0)
 select qs, a, b, c

Original file line number	Diff line number	Diff line change
`@@ -219,7 +219,7 @@ module StringOps {`
`219`	`219`	`* replaced.`
`220`	`220`	`*/`
`221`	`221`	`DataFlow::Node getAReplacedArgument() {`
`222`		`- exists(int n \| n % 2 = 0 and result = this.getArgument(n))`
	`222`	`+ exists(int n \| n % 2 = 0 and result = this.getSyntacticArgument(n))`
`223`	`223`	`}`
`224`	`224`	`}`
`225`	`225`
Original file line number	Diff line number	Diff line change
`@@ -253,21 +253,21 @@ module Beego {`
`253`	`253`	`this.getTarget().hasQualifiedName([packagePath(), logsPackagePath()], getALogFunctionName())`
`254`	`254`	`}`
`255`	`255`
`256`		`- override DataFlow::Node getAMessageComponent() { result = this.getAnArgument() }`
	`256`	`+ override DataFlow::Node getAMessageComponent() { result = this.getASyntacticArgument() }`
`257`	`257`	`}`
`258`	`258`
`259`	`259`	`private class BeegoLoggerMethods extends LoggerCall::Range, DataFlow::MethodCallNode {`
`260`	`260`	`BeegoLoggerMethods() {`
`261`	`261`	`this.getTarget().hasQualifiedName(logsPackagePath(), "BeeLogger", getALogFunctionName())`
`262`	`262`	`}`
`263`	`263`
`264`		`- override DataFlow::Node getAMessageComponent() { result = this.getAnArgument() }`
	`264`	`+ override DataFlow::Node getAMessageComponent() { result = this.getASyntacticArgument() }`
`265`	`265`	`}`
`266`	`266`
`267`	`267`	`private class UtilLoggers extends LoggerCall::Range, DataFlow::CallNode {`
`268`	`268`	`UtilLoggers() { this.getTarget().hasQualifiedName(utilsPackagePath(), "Display") }`
`269`	`269`
`270`		`- override DataFlow::Node getAMessageComponent() { result = this.getAnArgument() }`
	`270`	`+ override DataFlow::Node getAMessageComponent() { result = this.getASyntacticArgument() }`
`271`	`271`	`}`
`272`	`272`
`273`	`273`	`private class HtmlQuoteSanitizer extends SharedXss::Sanitizer {`
Original file line number	Diff line number	Diff line change
`@@ -33,7 +33,7 @@ module BeegoOrm {`
`33`	`33`	`// Note this class doesn't do any escaping, unlike the true ORM part of the package`
`34`	`34`	`QueryBuilderSink() {`
`35`	`35`	`exists(Method impl \| impl.implements(packagePath(), "QueryBuilder", _) \|`
`36`		`- this = impl.getACall().getAnArgument()`
	`36`	`+ this = impl.getACall().getASyntacticArgument()`
`37`	`37`	`) and`
`38`	`38`	`this.getType().getUnderlyingType() instanceof StringType`
`39`	`39`	`}`
Original file line number	Diff line number	Diff line change
`@@ -90,7 +90,7 @@ module ElazarlGoproxy {`
`90`	`90`	`onreqcall.getTarget().hasQualifiedName(packagePath(), "ProxyHttpServer", "OnRequest")`
`91`	`91`	`\|`
`92`	`92`	`handlerReg.getReceiver() = onreqcall.getASuccessor*() and`
`93`		`- check = onreqcall.getArgument(0)`
	`93`	`+ check = onreqcall.getSyntacticArgument(0)`
`94`	`94`	`)`
`95`	`95`	`}`
`96`	`96`	`}`
`@@ -119,6 +119,6 @@ module ElazarlGoproxy {`
`119`	`119`	`private class ProxyLog extends LoggerCall::Range, DataFlow::MethodCallNode {`
`120`	`120`	`ProxyLog() { this.getTarget() instanceof ProxyLogFunction }`
`121`	`121`
`122`		`- override DataFlow::Node getAMessageComponent() { result = this.getAnArgument() }`
	`122`	`+ override DataFlow::Node getAMessageComponent() { result = this.getASyntacticArgument() }`
`123`	`123`	`}`
`124`	`124`	`}`
Original file line number	Diff line number	Diff line change
`@@ -56,13 +56,13 @@ module EmailData {`
`56`	`56`	`// func NewV3MailInit(from Email, subject string, to Email, content ...Content) SGMailV3`
`57`	`57`	`exists(Function newv3MailInit \|`
`58`	`58`	`newv3MailInit.hasQualifiedName(sendgridMail(), "NewV3MailInit") and`
`59`		`- this = newv3MailInit.getACall().getArgument(any(int i \| i = 1 or i >= 3))`
	`59`	`+ this = newv3MailInit.getACall().getSyntacticArgument(any(int i \| i = 1 or i >= 3))`
`60`	`60`	`)`
`61`	`61`	`or`
`62`	`62`	`// func (s SGMailV3) AddContent(c ...Content) *SGMailV3`
`63`	`63`	`exists(Method addContent \|`
`64`	`64`	`addContent.hasQualifiedName(sendgridMail(), "SGMailV3", "AddContent") and`
`65`		`- this = addContent.getACall().getAnArgument()`
	`65`	`+ this = addContent.getACall().getASyntacticArgument()`
`66`	`66`	`)`
`67`	`67`	`}`
`68`	`68`	`}`
Original file line number	Diff line number	Diff line change
`@@ -49,7 +49,7 @@ module Glog {`
`49`	`49`	`GlogCall() { this = callee.getACall() }`
`50`	`50`
`51`	`51`	`override DataFlow::Node getAMessageComponent() {`
`52`		`- result = this.getArgument(any(int i \| i >= callee.getFirstPrintedArg()))`
	`52`	`+ result = this.getSyntacticArgument(any(int i \| i >= callee.getFirstPrintedArg()))`
`53`	`53`	`}`
`54`	`54`	`}`
`55`	`55`	`}`
Original file line number	Diff line number	Diff line change
`@@ -31,7 +31,7 @@ module Logrus {`
`31`	`31`	`private class LogCall extends LoggerCall::Range, DataFlow::CallNode {`
`32`	`32`	`LogCall() { this = any(LogFunction f).getACall() }`
`33`	`33`
`34`		`- override DataFlow::Node getAMessageComponent() { result = this.getAnArgument() }`
	`34`	`+ override DataFlow::Node getAMessageComponent() { result = this.getASyntacticArgument() }`
`35`	`35`	`}`
`36`	`36`
`37`	`37`	`private class StringFormatters extends StringOps::Formatting::Range instanceof LogFunction {`
Original file line number	Diff line number	Diff line change
`@@ -124,7 +124,7 @@ module Revel {`
`124`	`124`	`or`
`125`	`125`	`methodName = "RenderText" and`
`126`	`126`	`contentType = "text/plain" and`
`127`		`- this = methodCall.getAnArgument()`
	`127`	`+ this = methodCall.getSyntacticArgument(_)`
`128`	`128`	`)`
`129`	`129`	`}`
`130`	`130`
`@@ -201,7 +201,7 @@ module Revel {`
`201`	`201`	`)`
`202`	`202`	`or`
`203`	`203`	`// a revel controller.Render(arg) will set controller.ViewArgs["arg"] = arg`
`204`		`- exists(Variable arg \| arg.getARead() = render.(ControllerRender).getAnArgument() \|`
	`204`	`+ exists(Variable arg \| arg.getARead() = render.(ControllerRender).getASyntacticArgument() \|`
`205`	`205`	`var.getBaseVariable() = arg and`
`206`	`206`	`var.getQualifiedName() = read.getFieldName()`
`207`	`207`	`)`
Original file line number	Diff line number	Diff line change
`@@ -41,7 +41,7 @@ module Spew {`
`41`	`41`	`SpewCall() { this = target.getACall() }`
`42`	`42`
`43`	`43`	`override DataFlow::Node getAMessageComponent() {`
`44`		`- result = this.getArgument(any(int i \| i >= target.getFirstPrintedArg()))`
	`44`	`+ result = this.getSyntacticArgument(any(int i \| i >= target.getFirstPrintedArg()))`
`45`	`45`	`}`
`46`	`46`	`}`
`47`	`47`