CodeQL library for C/C++
codeql/cpp-all 1.1.0 (changelog, source)

Member predicate VariableAccess::isAddressOfAccess

Holds if this access is used to get the address of the underlying variable in such a way that the address might escape. This can be either explicit, for example &x, or implicit, for example T& y = x.

predicate isAddressOfAccess()