Parametric taint state not changed when used as an argument of an unknown method

[formanek]

When a parameter is passed to an unknown method, the taint state is changed to unknown if it was safe before. However, if there are taint parameters set, the non-parametric taint state was not modified. As a result, invalid method summaries could be generated. For example, the summary of a piece of code like this would be 0,SAFE instead of 0,UNKNOWN

public List<String> test(List<String> list) {
    list.add("safe");
    modify(list);
    return list;
}