C#: Fix some bad join orders.

Author: aschackmull

csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll

@@ -605,7 +605,9 @@ module Ssa {
 
     override Element getElement() { result = this.getParameter() }
 
-    override string toString() { result = "SSA param(" + this.getParameter() + ")" }
+    override string toString() {
+      result = "SSA param(" + pragma[only_bind_out](this.getParameter()) + ")"
+    }
 
     override Location getLocation() {
       not NearestLocation<NearestLocationInput>::nearestLocation(this, _, _) and

csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll

@@ -748,6 +748,7 @@ private class Argument extends Expr {
  *
  * `postUpdate` indicates whether the store targets a post-update node.
  */
+pragma[nomagic]
 private predicate fieldOrPropertyStore(ContentSet c, Expr src, Expr q, boolean postUpdate) {
   exists(FieldOrProperty f |
     c = f.getContentSet() and
@@ -795,9 +796,9 @@ private predicate fieldOrPropertyStore(ContentSet c, Expr src, Expr q, boolean p
     // Tuple element, `(..., src, ...)` `f` is `ItemX` of tuple `q`
     exists(TupleExpr te, int i |
       te = q and
-      src = te.getArgument(i) and
+      src = te.getArgument(pragma[only_bind_into](i)) and
       te.isConstruction() and
-      f = q.getType().(TupleType).getElement(i) and
+      f = q.getType().(TupleType).getElement(pragma[only_bind_into](i)) and
       postUpdate = false
     )
   )

csharp/ql/src/Likely Bugs/UncheckedCastInEquals.ql

@@ -13,6 +13,7 @@
 import csharp
 import semmle.code.csharp.frameworks.System
 
+pragma[nomagic]
 predicate nodeBeforeParameterAccess(ControlFlowNode node) {
   exists(EqualsMethod equals | equals.getBody().getControlFlowNode() = node)
   or