escapeshellarg sanitizer typo

[jmrtz]

Hi,
there is a typo in your test cases for CWE_78 when using the escapeshellarg sanitizer.
The return value and argument of the sanitizer tained but tainted flows to the sink:

<?php

$tainted = $_GET['UserData'];
        $tained = escapeshellarg($tained);
      
$query = "cat '". $tainted . "'";
$ret = system($query);
?>