Fixedf bug in QuerySubExpressionVisitor (calling the wrong FreeVariablesVisitor).