Java: Fix bug in model flow sanitizer.

Author: aschackmull

java/ql/src/utils/model-generator/CaptureSummaryModels.ql

@@ -80,7 +80,9 @@ class ThroughFlowConfig extends TaintTracking::Configuration {
     )
   }
 
-  override predicate isSanitizer(DataFlow::Node n) { not isRelevantType(n.getType()) }
+  override predicate isSanitizer(DataFlow::Node n) {
+    exists(Type t | t = n.getType() and not isRelevantType(t))
+  }
 
   override DataFlow::FlowFeature getAFeature() {
     result instanceof DataFlow::FeatureEqualSourceSinkCallContext

java/ql/test/utils/model-generator/CaptureSummaryModels.expected

@@ -21,7 +21,6 @@
 | p;Joiner;false;merge;(Joiner);;Argument[-1];ReturnValue;value |
 | p;Joiner;false;setEmptyValue;(CharSequence);;Argument[-1];ReturnValue;value |
 | p;Joiner;false;setEmptyValue;(CharSequence);;Argument[0];Argument[-1];taint |
-| p;Joiner;false;setEmptyValue;(CharSequence);;Argument[0];ReturnValue;taint |
 | p;Joiner;false;toString;();;Argument[-1];ReturnValue;taint |
 | p;MultipleImpls$Strat2;true;getValue;();;Argument[-1];ReturnValue;taint |
 | p;MultipleImpls$Strategy;true;doSomething;(String);;Argument[0];Argument[-1];taint |