External calls propagate combined taint to the result