paramIndex

Zero-based index of the parameter that becomes tainted after the call, or null (default) to use return-value semantics ("ret": "source").

• null → the return value of the function carries the taint. PhASAR generates "ret": "source" — after x = source(), x is tainted.

• 0 → the first declared parameter becomes tainted (passed by reference). PhASAR generates "params": {"source": [0]} — after source(a, b), a is tainted.

• N → the (N+1)-th declared parameter becomes tainted. When paramIndex is non-null, ret: source is NOT generated unless the function also appears as a source with paramIndex = null.