fixed a bug in which a taint was passed on in the call-to-return function though it was overwritten in the callee