impl. taint set for local variable; TODO: class field; inter-procedural