reference, declarationdefinition
definition → references, declarations, derived classes, virtual overrides
reference to multiple definitions → definitions
unreferenced

References

tools/clang/include/clang/StaticAnalyzer/Core/Checker.h
  304   static void _checkLiveSymbols(void *checker, ProgramStateRef state,
  334   static ProgramStateRef
  336                       ProgramStateRef state,
  358   static ProgramStateRef
  360                      ProgramStateRef State,
  401   static ProgramStateRef
  403                       ProgramStateRef State,
  460   static ProgramStateRef _evalAssume(void *checker,
  461                                          ProgramStateRef state,
  501   virtual void printState(raw_ostream &Out, ProgramStateRef State,
tools/clang/include/clang/StaticAnalyzer/Core/CheckerManager.h
  336   void runCheckersForLiveSymbols(ProgramStateRef state,
  361   ProgramStateRef
  362   runCheckersForRegionChanges(ProgramStateRef state,
  384   ProgramStateRef
  385   runCheckersForPointerEscape(ProgramStateRef State,
  392   ProgramStateRef runCheckersForEvalAssume(ProgramStateRef state,
  392   ProgramStateRef runCheckersForEvalAssume(ProgramStateRef state,
  417   void runCheckersForPrintStateJson(raw_ostream &Out, ProgramStateRef State,
  475   using CheckLiveSymbolsFunc = CheckerFn<void (ProgramStateRef,SymbolReaper &)>;
  478       CheckerFn<ProgramStateRef (ProgramStateRef,
  478       CheckerFn<ProgramStateRef (ProgramStateRef,
  486       CheckerFn<ProgramStateRef (ProgramStateRef,
  486       CheckerFn<ProgramStateRef (ProgramStateRef,
  492       CheckerFn<ProgramStateRef (ProgramStateRef, const SVal &cond,
  492       CheckerFn<ProgramStateRef (ProgramStateRef, const SVal &cond,
tools/clang/include/clang/StaticAnalyzer/Core/PathSensitive/CallEvent.h
   82   CallEventRef<T> cloneWithState(ProgramStateRef State) const {
  143   ProgramStateRef State;
  167   CallEvent(const Expr *E, ProgramStateRef state, const LocationContext *lctx)
  170   CallEvent(const Decl *D, ProgramStateRef state, const LocationContext *lctx)
  207   const ProgramStateRef &getState() const {
  347   ProgramStateRef invalidateRegions(unsigned BlockCount,
  348                                     ProgramStateRef Orig = nullptr) const;
  360   CallEventRef<T> cloneWithState(ProgramStateRef NewState) const;
  363   CallEventRef<> cloneWithState(ProgramStateRef NewState) const {
  463   AnyFunctionCall(const Expr *E, ProgramStateRef St,
  466   AnyFunctionCall(const Decl *D, ProgramStateRef St,
  500   SimpleFunctionCall(const CallExpr *CE, ProgramStateRef St,
  536   BlockCall(const CallExpr *CE, ProgramStateRef St,
  640   CXXInstanceCall(const CallExpr *CE, ProgramStateRef St,
  643   CXXInstanceCall(const FunctionDecl *D, ProgramStateRef St,
  678   CXXMemberCall(const CXXMemberCallExpr *CE, ProgramStateRef St,
  719   CXXMemberOperatorCall(const CXXOperatorCallExpr *CE, ProgramStateRef St,
  783                     ProgramStateRef St, const LocationContext *LCtx)
  829                      ProgramStateRef St, const LocationContext *LCtx)
  876   CXXAllocatorCall(const CXXNewExpr *E, ProgramStateRef St,
  944   ObjCMethodCall(const ObjCMessageExpr *Msg, ProgramStateRef St,
 1169   T *create(Arg A, ProgramStateRef St, const LocationContext *LCtx) {
 1176   T *create(Arg1 A1, Arg2 A2, ProgramStateRef St, const LocationContext *LCtx) {
 1183   T *create(Arg1 A1, Arg2 A2, Arg3 A3, ProgramStateRef St,
 1192   T *create(Arg1 A1, Arg2 A2, Arg3 A3, Arg4 A4, ProgramStateRef St,
 1204   getCaller(const StackFrameContext *CalleeCtx, ProgramStateRef State);
 1209   getCall(const Stmt *S, ProgramStateRef State,
 1213   getSimpleCall(const CallExpr *E, ProgramStateRef State,
 1217   getObjCMethodCall(const ObjCMessageExpr *E, ProgramStateRef State,
 1224                         ProgramStateRef State, const LocationContext *LCtx) {
 1231                        ProgramStateRef State, const LocationContext *LCtx) {
 1236   getCXXAllocatorCall(const CXXNewExpr *E, ProgramStateRef State,
 1243 CallEventRef<T> CallEvent::cloneWithState(ProgramStateRef NewState) const {
tools/clang/include/clang/StaticAnalyzer/Core/PathSensitive/CheckerContext.h
   71   const ProgramStateRef &getState() const { return Pred->getState(); }
  164   ExplodedNode *addTransition(ProgramStateRef State = nullptr,
  176   ExplodedNode *addTransition(ProgramStateRef State,
  185   ExplodedNode *generateSink(ProgramStateRef State, ExplodedNode *Pred,
  197   ExplodedNode *generateErrorNode(ProgramStateRef State = nullptr,
  211   generateNonFatalErrorNode(ProgramStateRef State = nullptr,
  324   ExplodedNode *addTransitionImpl(ProgramStateRef State,
tools/clang/include/clang/StaticAnalyzer/Core/PathSensitive/ConstraintManager.h
   82   virtual bool haveEqualConstraints(ProgramStateRef S1,
   83                                     ProgramStateRef S2) const = 0;
   85   virtual ProgramStateRef assume(ProgramStateRef state,
   85   virtual ProgramStateRef assume(ProgramStateRef state,
   89   using ProgramStatePair = std::pair<ProgramStateRef, ProgramStateRef>;
   89   using ProgramStatePair = std::pair<ProgramStateRef, ProgramStateRef>;
   93   ProgramStatePair assumeDual(ProgramStateRef State, DefinedSVal Cond) {
   94     ProgramStateRef StTrue = assume(State, Cond, true);
  109     ProgramStateRef StFalse = assume(State, Cond, false);
  120   virtual ProgramStateRef assumeInclusiveRange(ProgramStateRef State,
  120   virtual ProgramStateRef assumeInclusiveRange(ProgramStateRef State,
  126   virtual ProgramStatePair assumeInclusiveRangeDual(ProgramStateRef State,
  130     ProgramStateRef StInRange =
  138     ProgramStateRef StOutOfRange =
  155   virtual const llvm::APSInt* getSymVal(ProgramStateRef state,
  162   virtual ProgramStateRef removeDeadBindings(ProgramStateRef state,
  162   virtual ProgramStateRef removeDeadBindings(ProgramStateRef state,
  165   virtual void printJson(raw_ostream &Out, ProgramStateRef State,
  171   ConditionTruthVal isNull(ProgramStateRef State, SymbolRef Sym) {
  195   virtual ConditionTruthVal checkNull(ProgramStateRef State, SymbolRef Sym);
tools/clang/include/clang/StaticAnalyzer/Core/PathSensitive/CoreEngine.h
  104                     ProgramStateRef State,
  145                        ProgramStateRef InitState);
  150                                        ProgramStateRef InitState,
  268                                  ProgramStateRef State,
  290                              ProgramStateRef State,
  301                              ProgramStateRef State,
  353   ExplodedNode *generateNode(ProgramStateRef State,
  360   ExplodedNode *generateSink(ProgramStateRef State, ExplodedNode *Pred,
  409                              ProgramStateRef St,
  419                              ProgramStateRef St,
  458   ExplodedNode *generateNode(ProgramStateRef State, bool branch,
  513                              ProgramStateRef State,
  518   ProgramStateRef getState() const { return Pred->State; }
  565                                      ProgramStateRef State);
  567   ExplodedNode *generateDefaultCaseNode(ProgramStateRef State,
  572   ProgramStateRef getState() const { return Pred->State; }
tools/clang/include/clang/StaticAnalyzer/Core/PathSensitive/DynamicType.h
   33 DynamicTypeInfo getDynamicTypeInfo(ProgramStateRef State, const MemRegion *MR);
   36 const DynamicTypeInfo *getRawDynamicTypeInfo(ProgramStateRef State,
   40 const DynamicCastInfo *getDynamicCastInfo(ProgramStateRef State,
   46 ProgramStateRef setDynamicTypeInfo(ProgramStateRef State, const MemRegion *MR,
   46 ProgramStateRef setDynamicTypeInfo(ProgramStateRef State, const MemRegion *MR,
   50 ProgramStateRef setDynamicTypeInfo(ProgramStateRef State, const MemRegion *MR,
   50 ProgramStateRef setDynamicTypeInfo(ProgramStateRef State, const MemRegion *MR,
   54 ProgramStateRef setDynamicTypeAndCastInfo(ProgramStateRef State,
   54 ProgramStateRef setDynamicTypeAndCastInfo(ProgramStateRef State,
   61 ProgramStateRef removeDeadTypes(ProgramStateRef State, SymbolReaper &SR);
   61 ProgramStateRef removeDeadTypes(ProgramStateRef State, SymbolReaper &SR);
   64 ProgramStateRef removeDeadCasts(ProgramStateRef State, SymbolReaper &SR);
   64 ProgramStateRef removeDeadCasts(ProgramStateRef State, SymbolReaper &SR);
   66 void printDynamicTypeInfoJson(raw_ostream &Out, ProgramStateRef State,
tools/clang/include/clang/StaticAnalyzer/Core/PathSensitive/Environment.h
  118                                  ProgramStateRef state);
tools/clang/include/clang/StaticAnalyzer/Core/PathSensitive/ExplodedGraph.h
  126   ProgramStateRef State;
  137   explicit ExplodedNode(const ProgramPoint &loc, ProgramStateRef state,
  169   const ProgramStateRef &getState() const { return State; }
  183                       const ProgramStateRef &state,
  353   ExplodedNode *getNode(const ProgramPoint &L, ProgramStateRef State,
  362     ProgramStateRef State,
tools/clang/include/clang/StaticAnalyzer/Core/PathSensitive/ExprEngine.h
  176                                        ProgramStateRef InitState,
  235   ProgramStateRef getInitialState(const LocationContext *InitLoc) override;
  366   ProgramStateRef processAssume(ProgramStateRef state, SVal cond,
  366   ProgramStateRef processAssume(ProgramStateRef state, SVal cond,
  371   ProgramStateRef
  372   processRegionChanges(ProgramStateRef state,
  380   void printJson(raw_ostream &Out, ProgramStateRef State,
  567   ProgramStateRef handleLValueBitCast(ProgramStateRef state, const Expr *Ex,
  567   ProgramStateRef handleLValueBitCast(ProgramStateRef state, const Expr *Ex,
  573   ProgramStateRef handleLVectorSplat(ProgramStateRef state,
  573   ProgramStateRef handleLVectorSplat(ProgramStateRef state,
  584   SVal evalBinOp(ProgramStateRef state, BinaryOperator::Opcode op,
  589   SVal evalBinOp(ProgramStateRef state, BinaryOperator::Opcode op,
  595   SVal evalBinOp(ProgramStateRef ST, BinaryOperator::Opcode Op,
  604   getObjectUnderConstruction(ProgramStateRef State,
  616   ProgramStateRef processPointerEscapedOnBind(ProgramStateRef State,
  616   ProgramStateRef processPointerEscapedOnBind(ProgramStateRef State,
  623   ProgramStateRef notifyCheckersOfPointerEscape(
  624                            ProgramStateRef State,
  632   ProgramStateRef escapeValue(ProgramStateRef State, SVal V,
  632   ProgramStateRef escapeValue(ProgramStateRef State, SVal V,
  646                 ProgramStateRef St,
  654                  ExplodedNode *Pred, ProgramStateRef St, SVal TargetLV, SVal Val,
  665   ProgramStateRef bindReturnValue(const CallEvent &Call,
  667                                   ProgramStateRef State);
  680   ProgramStateRef finishArgumentConstruction(ProgramStateRef State,
  680   ProgramStateRef finishArgumentConstruction(ProgramStateRef State,
  689                       ProgramStateRef St,
  698                     ProgramStateRef St,
  744                   ExplodedNode *Pred, ProgramStateRef State);
  749                             ExplodedNode *Pred, ProgramStateRef State);
  774   ProgramStateRef createTemporaryRegionIfNeeded(
  775       ProgramStateRef State, const LocationContext *LC,
  787   static SVal makeZeroElementRegion(ProgramStateRef State, SVal LValue,
  803   std::pair<ProgramStateRef, SVal> prepareForObjectConstruction(
  804       const Expr *E, ProgramStateRef State, const LocationContext *LCtx,
  814   static ProgramStateRef
  815   addObjectUnderConstruction(ProgramStateRef State,
  821   static ProgramStateRef
  822   finishObjectConstruction(ProgramStateRef State,
  829   static ProgramStateRef elideDestructor(ProgramStateRef State,
  829   static ProgramStateRef elideDestructor(ProgramStateRef State,
  834   static ProgramStateRef
  835   cleanupElidedDestructor(ProgramStateRef State,
  842   static bool isDestructorElided(ProgramStateRef State,
  850   static bool areAllObjectsFullyConstructed(ProgramStateRef State,
tools/clang/include/clang/StaticAnalyzer/Core/PathSensitive/LoopUnrolling.h
   36 bool isUnrolledState(ProgramStateRef State);
   39 ProgramStateRef updateLoopStack(const Stmt *LoopStmt, ASTContext &ASTCtx,
   44 ProgramStateRef processLoopEnd(const Stmt *LoopStmt, ProgramStateRef State);
   44 ProgramStateRef processLoopEnd(const Stmt *LoopStmt, ProgramStateRef State);
tools/clang/include/clang/StaticAnalyzer/Core/PathSensitive/LoopWidening.h
   28 ProgramStateRef getWidenedLoopState(ProgramStateRef PrevState,
   28 ProgramStateRef getWidenedLoopState(ProgramStateRef PrevState,
tools/clang/include/clang/StaticAnalyzer/Core/PathSensitive/ProgramState.h
   92   ProgramStateRef makeWithStore(const StoreRef &store) const;
  182   LLVM_NODISCARD ProgramStateRef assume(DefinedOrUnknownSVal cond,
  190   LLVM_NODISCARD std::pair<ProgramStateRef, ProgramStateRef>
  190   LLVM_NODISCARD std::pair<ProgramStateRef, ProgramStateRef>
  193   LLVM_NODISCARD ProgramStateRef
  203   LLVM_NODISCARD ProgramStateRef assumeInclusiveRange(DefinedOrUnknownSVal Val,
  213   LLVM_NODISCARD std::pair<ProgramStateRef, ProgramStateRef>
  213   LLVM_NODISCARD std::pair<ProgramStateRef, ProgramStateRef>
  237   LLVM_NODISCARD ProgramStateRef BindExpr(const Stmt *S,
  241   LLVM_NODISCARD ProgramStateRef bindLoc(Loc location, SVal V,
  245   LLVM_NODISCARD ProgramStateRef bindLoc(SVal location, SVal V,
  254   LLVM_NODISCARD ProgramStateRef
  259   LLVM_NODISCARD ProgramStateRef
  262   LLVM_NODISCARD ProgramStateRef killBinding(Loc LV) const;
  282   LLVM_NODISCARD ProgramStateRef
  289   LLVM_NODISCARD ProgramStateRef
  298   LLVM_NODISCARD ProgramStateRef enterStackFrame(
  375   LLVM_NODISCARD ProgramStateRef
  395   LLVM_NODISCARD ProgramStateRef
  399   LLVM_NODISCARD ProgramStateRef
  403   template <typename T> LLVM_NODISCARD ProgramStateRef remove() const;
  406   LLVM_NODISCARD ProgramStateRef
  410   LLVM_NODISCARD ProgramStateRef
  415   LLVM_NODISCARD ProgramStateRef
  442   ProgramStateRef
  497   ProgramStateRef getInitialState(const LocationContext *InitLoc);
  536   ProgramStateRef removeDeadBindings(ProgramStateRef St,
  536   ProgramStateRef removeDeadBindings(ProgramStateRef St,
  547   ProgramStateRef addGDM(ProgramStateRef St, void *Key, void *Data);
  547   ProgramStateRef addGDM(ProgramStateRef St, void *Key, void *Data);
  548   ProgramStateRef removeGDM(ProgramStateRef state, void *Key);
  548   ProgramStateRef removeGDM(ProgramStateRef state, void *Key);
  552   void iterBindings(ProgramStateRef state, StoreManager::BindingsHandler& F) {
  556   ProgramStateRef getPersistentState(ProgramState &Impl);
  557   ProgramStateRef getPersistentStateWithGDM(ProgramStateRef FromState,
  557   ProgramStateRef getPersistentStateWithGDM(ProgramStateRef FromState,
  558                                            ProgramStateRef GDMState);
  560   bool haveEqualConstraints(ProgramStateRef S1, ProgramStateRef S2) const {
  560   bool haveEqualConstraints(ProgramStateRef S1, ProgramStateRef S2) const {
  564   bool haveEqualEnvironments(ProgramStateRef S1, ProgramStateRef S2) const {
  564   bool haveEqualEnvironments(ProgramStateRef S1, ProgramStateRef S2) const {
  568   bool haveEqualStores(ProgramStateRef S1, ProgramStateRef S2) const {
  568   bool haveEqualStores(ProgramStateRef S1, ProgramStateRef S2) const {
  592   ProgramStateRef set(ProgramStateRef st, typename ProgramStateTrait<T>::data_type D) {
  592   ProgramStateRef set(ProgramStateRef st, typename ProgramStateTrait<T>::data_type D) {
  598   ProgramStateRef set(ProgramStateRef st,
  598   ProgramStateRef set(ProgramStateRef st,
  608   ProgramStateRef add(ProgramStateRef st,
  608   ProgramStateRef add(ProgramStateRef st,
  616   ProgramStateRef remove(ProgramStateRef st,
  616   ProgramStateRef remove(ProgramStateRef st,
  625   ProgramStateRef remove(ProgramStateRef st) {
  625   ProgramStateRef remove(ProgramStateRef st) {
  658 inline ProgramStateRef ProgramState::assume(DefinedOrUnknownSVal Cond,
  667 inline std::pair<ProgramStateRef , ProgramStateRef >
  667 inline std::pair<ProgramStateRef , ProgramStateRef >
  676 inline ProgramStateRef ProgramState::assumeInclusiveRange(
  688 inline std::pair<ProgramStateRef, ProgramStateRef>
  688 inline std::pair<ProgramStateRef, ProgramStateRef>
  701 inline ProgramStateRef ProgramState::bindLoc(SVal LV, SVal V, const LocationContext *LCtx) const {
  795 ProgramStateRef ProgramState::add(typename ProgramStateTrait<T>::key_type K) const {
  805 ProgramStateRef ProgramState::remove(typename ProgramStateTrait<T>::key_type K) const {
  810 ProgramStateRef ProgramState::remove(typename ProgramStateTrait<T>::key_type K,
  816 ProgramStateRef ProgramState::remove() const {
  821 ProgramStateRef ProgramState::set(typename ProgramStateTrait<T>::data_type D) const {
  826 ProgramStateRef ProgramState::set(typename ProgramStateTrait<T>::key_type K,
  832 ProgramStateRef ProgramState::set(typename ProgramStateTrait<T>::key_type K,
  861   ProgramStateRef state;
  864   ScanReachableSymbols(ProgramStateRef st, SymbolVisitor &v)
tools/clang/include/clang/StaticAnalyzer/Core/PathSensitive/RangedConstraintManager.h
  149   ProgramStateRef assumeSym(ProgramStateRef State, SymbolRef Sym,
  149   ProgramStateRef assumeSym(ProgramStateRef State, SymbolRef Sym,
  152   ProgramStateRef assumeSymInclusiveRange(ProgramStateRef State, SymbolRef Sym,
  152   ProgramStateRef assumeSymInclusiveRange(ProgramStateRef State, SymbolRef Sym,
  157   ProgramStateRef assumeSymUnsupported(ProgramStateRef State, SymbolRef Sym,
  157   ProgramStateRef assumeSymUnsupported(ProgramStateRef State, SymbolRef Sym,
  162   virtual ProgramStateRef assumeSymRel(ProgramStateRef State, SymbolRef Sym,
  162   virtual ProgramStateRef assumeSymRel(ProgramStateRef State, SymbolRef Sym,
  173   virtual ProgramStateRef assumeSymNE(ProgramStateRef State, SymbolRef Sym,
  173   virtual ProgramStateRef assumeSymNE(ProgramStateRef State, SymbolRef Sym,
  177   virtual ProgramStateRef assumeSymEQ(ProgramStateRef State, SymbolRef Sym,
  177   virtual ProgramStateRef assumeSymEQ(ProgramStateRef State, SymbolRef Sym,
  181   virtual ProgramStateRef assumeSymLT(ProgramStateRef State, SymbolRef Sym,
  181   virtual ProgramStateRef assumeSymLT(ProgramStateRef State, SymbolRef Sym,
  185   virtual ProgramStateRef assumeSymGT(ProgramStateRef State, SymbolRef Sym,
  185   virtual ProgramStateRef assumeSymGT(ProgramStateRef State, SymbolRef Sym,
  189   virtual ProgramStateRef assumeSymLE(ProgramStateRef State, SymbolRef Sym,
  189   virtual ProgramStateRef assumeSymLE(ProgramStateRef State, SymbolRef Sym,
  193   virtual ProgramStateRef assumeSymGE(ProgramStateRef State, SymbolRef Sym,
  193   virtual ProgramStateRef assumeSymGE(ProgramStateRef State, SymbolRef Sym,
  197   virtual ProgramStateRef assumeSymWithinInclusiveRange(
  198       ProgramStateRef State, SymbolRef Sym, const llvm::APSInt &From,
  201   virtual ProgramStateRef assumeSymOutsideInclusiveRange(
  202       ProgramStateRef State, SymbolRef Sym, const llvm::APSInt &From,
tools/clang/include/clang/StaticAnalyzer/Core/PathSensitive/SMTConstraintManager.h
   41   ProgramStateRef assumeSym(ProgramStateRef State, SymbolRef Sym,
   41   ProgramStateRef assumeSym(ProgramStateRef State, SymbolRef Sym,
   61   ProgramStateRef assumeSymInclusiveRange(ProgramStateRef State, SymbolRef Sym,
   61   ProgramStateRef assumeSymInclusiveRange(ProgramStateRef State, SymbolRef Sym,
   70   ProgramStateRef assumeSymUnsupported(ProgramStateRef State, SymbolRef Sym,
   70   ProgramStateRef assumeSymUnsupported(ProgramStateRef State, SymbolRef Sym,
   80   ConditionTruthVal checkNull(ProgramStateRef State, SymbolRef Sym) override {
  108   const llvm::APSInt *getSymVal(ProgramStateRef State,
  199   ProgramStateRef removeDeadBindings(ProgramStateRef State,
  199   ProgramStateRef removeDeadBindings(ProgramStateRef State,
  212   void printJson(raw_ostream &Out, ProgramStateRef State, const char *NL = "\n",
  240   bool haveEqualConstraints(ProgramStateRef S1,
  241                             ProgramStateRef S2) const override {
  296   virtual ProgramStateRef assumeExpr(ProgramStateRef State, SymbolRef Sym,
  296   virtual ProgramStateRef assumeExpr(ProgramStateRef State, SymbolRef Sym,
  307   virtual void addStateConstraints(ProgramStateRef State) const {
  326   ConditionTruthVal checkModel(ProgramStateRef State, SymbolRef Sym,
  328     ProgramStateRef NewState =
tools/clang/include/clang/StaticAnalyzer/Core/PathSensitive/SValBuilder.h
  108   SVal evalIntegralCast(ProgramStateRef state, SVal val, QualType castTy,
  117   virtual SVal evalBinOpNN(ProgramStateRef state, BinaryOperator::Opcode op,
  122   virtual SVal evalBinOpLL(ProgramStateRef state, BinaryOperator::Opcode op,
  128   virtual SVal evalBinOpLN(ProgramStateRef state, BinaryOperator::Opcode op,
  133   virtual const llvm::APSInt *getKnownValue(ProgramStateRef state, SVal val) = 0;
  138   virtual SVal simplifySVal(ProgramStateRef State, SVal Val) = 0;
  144   SVal evalBinOp(ProgramStateRef state, BinaryOperator::Opcode op,
  148   ConditionTruthVal areEqual(ProgramStateRef state, SVal lhs, SVal rhs);
  150   SVal evalEQ(ProgramStateRef state, SVal lhs, SVal rhs);
  152   DefinedOrUnknownSVal evalEQ(ProgramStateRef state, DefinedOrUnknownSVal lhs,
tools/clang/include/clang/StaticAnalyzer/Core/PathSensitive/SimpleConstraintManager.h
   39   ProgramStateRef assume(ProgramStateRef State, DefinedSVal Cond,
   39   ProgramStateRef assume(ProgramStateRef State, DefinedSVal Cond,
   42   ProgramStateRef assumeInclusiveRange(ProgramStateRef State, NonLoc Value,
   42   ProgramStateRef assumeInclusiveRange(ProgramStateRef State, NonLoc Value,
   54   virtual ProgramStateRef assumeSym(ProgramStateRef State, SymbolRef Sym,
   54   virtual ProgramStateRef assumeSym(ProgramStateRef State, SymbolRef Sym,
   61   virtual ProgramStateRef assumeSymInclusiveRange(ProgramStateRef State,
   61   virtual ProgramStateRef assumeSymInclusiveRange(ProgramStateRef State,
   69   virtual ProgramStateRef assumeSymUnsupported(ProgramStateRef State,
   69   virtual ProgramStateRef assumeSymUnsupported(ProgramStateRef State,
   82   ProgramStateRef assume(ProgramStateRef State, NonLoc Cond, bool Assumption);
   82   ProgramStateRef assume(ProgramStateRef State, NonLoc Cond, bool Assumption);
   84   ProgramStateRef assumeAux(ProgramStateRef State, NonLoc Cond,
   84   ProgramStateRef assumeAux(ProgramStateRef State, NonLoc Cond,
tools/clang/include/clang/StaticAnalyzer/Core/PathSensitive/Store.h
  153   virtual DefinedOrUnknownSVal getSizeInElements(ProgramStateRef state,
tools/clang/include/clang/StaticAnalyzer/Core/PathSensitive/SubEngine.h
   51   virtual ProgramStateRef getInitialState(const LocationContext *InitLoc) = 0;
  130   virtual ProgramStateRef processAssume(ProgramStateRef state,
  130   virtual ProgramStateRef processAssume(ProgramStateRef state,
  135   virtual ProgramStateRef
  136   processRegionChanges(ProgramStateRef state,
  144   inline ProgramStateRef
  145   processRegionChange(ProgramStateRef state,
  151   virtual ProgramStateRef
  152   processPointerEscapedOnBind(ProgramStateRef State, SVal Loc, SVal Val, const LocationContext *LCtx) = 0;
  154   virtual ProgramStateRef
  155   notifyCheckersOfPointerEscape(ProgramStateRef State,
  162   virtual void printJson(raw_ostream &Out, ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Checkers/AllocationState.h
   20 ProgramStateRef markReleased(ProgramStateRef State, SymbolRef Sym,
   20 ProgramStateRef markReleased(ProgramStateRef State, SymbolRef Sym,
   31 const MemRegion *getContainerObjRegion(ProgramStateRef State, SymbolRef Sym);
tools/clang/lib/StaticAnalyzer/Checkers/AnalysisOrderChecker.cpp
   56   bool isCallbackEnabled(ProgramStateRef State, StringRef CallbackName) const {
  153   void checkLiveSymbols(ProgramStateRef State, SymbolReaper &SymReaper) const {
  158   ProgramStateRef
  159   checkRegionChanges(ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Checkers/ArrayBoundChecker.cpp
   54   ProgramStateRef state = C.getState();
   61   ProgramStateRef StInBound = state->assumeInBound(Idx, NumElements, true);
   62   ProgramStateRef StOutBound = state->assumeInBound(Idx, NumElements, false);
tools/clang/lib/StaticAnalyzer/Checkers/ArrayBoundCheckerV2.cpp
   37   void reportOOB(CheckerContext &C, ProgramStateRef errorState, OOB_Kind kind,
   61   static RegionRawOffsetV2 computeOffset(ProgramStateRef state,
  128   ProgramStateRef state = checkerContext.getState();
  162     ProgramStateRef state_precedesLowerBound, state_withinLowerBound;
  202     ProgramStateRef state_exceedsUpperBound, state_withinUpperBound;
  231     CheckerContext &checkerContext, ProgramStateRef errorState, OOB_Kind kind,
  283 static inline SVal scaleValue(ProgramStateRef state,
  293 static SVal addValue(ProgramStateRef state, SVal x, SVal y,
  307 RegionRawOffsetV2 RegionRawOffsetV2::computeOffset(ProgramStateRef state,
tools/clang/lib/StaticAnalyzer/Checkers/BasicObjCFoundationChecks.cpp
  140   ProgramStateRef State = C.getState();
  155   ProgramStateRef State = C.getState();
  429   ProgramStateRef state = C.getState();
  564   ProgramStateRef state = C.getState();
  565   ProgramStateRef stateNonNull, stateNull;
  823   ProgramStateRef checkPointerEscape(ProgramStateRef State,
  823   ProgramStateRef checkPointerEscape(ProgramStateRef State,
  855 static ProgramStateRef checkCollectionNonNil(CheckerContext &C,
  856                                              ProgramStateRef State,
  866   ProgramStateRef StNonNil, StNil;
  880 static ProgramStateRef checkElementNonNil(CheckerContext &C,
  881                                           ProgramStateRef State,
  913 static ProgramStateRef
  914 assumeCollectionNonEmpty(CheckerContext &C, ProgramStateRef State,
  944 static ProgramStateRef
  945 assumeCollectionNonEmpty(CheckerContext &C, ProgramStateRef State,
  978   ProgramStateRef State = C.getState();
 1039     ProgramStateRef State = C.getState();
 1091 ProgramStateRef
 1092 ObjCLoopChecker::checkPointerEscape(ProgramStateRef State,
 1121   ProgramStateRef State = C.getState();
 1154   ProgramStateRef assumeExprIsNonNull(const Expr *NonNullExpr,
 1155                                       ProgramStateRef State,
 1175 ProgramStateRef
 1177                                                   ProgramStateRef State,
 1188   ProgramStateRef State = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/BlockInCriticalSectionChecker.cpp
  152   ProgramStateRef State = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/BoolAssignmentChecker.cpp
   26     void emitReport(ProgramStateRef state, CheckerContext &C) const;
   32 void BoolAssignmentChecker::emitReport(ProgramStateRef state,
   80   ProgramStateRef state = C.getState();
   99   ProgramStateRef stateLT, stateGE;
  135   ProgramStateRef stateGT, stateLE;
tools/clang/lib/StaticAnalyzer/Checkers/BuiltinFunctionChecker.cpp
   34   ProgramStateRef state = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/CStringChecker.cpp
   63   void checkLiveSymbols(ProgramStateRef state, SymbolReaper &SR) const;
   66   ProgramStateRef
   67     checkRegionChanges(ProgramStateRef state,
  113                       ProgramStateRef state,
  161   std::pair<ProgramStateRef , ProgramStateRef >
  161   std::pair<ProgramStateRef , ProgramStateRef >
  163                     ProgramStateRef state, SVal V, QualType Ty);
  165   static ProgramStateRef setCStringLength(ProgramStateRef state,
  165   static ProgramStateRef setCStringLength(ProgramStateRef state,
  169                                         ProgramStateRef &state,
  174                         ProgramStateRef &state,
  180                                          ProgramStateRef &state,
  184   static ProgramStateRef InvalidateBuffer(CheckerContext &C,
  185                                           ProgramStateRef state,
  195                         ProgramStateRef &State);
  198   ProgramStateRef checkNonNull(CheckerContext &C,
  199                                    ProgramStateRef state,
  203   ProgramStateRef CheckLocation(CheckerContext &C,
  204                                     ProgramStateRef state,
  208   ProgramStateRef CheckBufferAccess(CheckerContext &C,
  209                                         ProgramStateRef state,
  217   ProgramStateRef CheckBufferAccess(CheckerContext &C,
  218                                         ProgramStateRef state,
  227   ProgramStateRef CheckOverlap(CheckerContext &C,
  228                                    ProgramStateRef state,
  233                       ProgramStateRef state,
  237   void emitNullArgBug(CheckerContext &C, ProgramStateRef State, const Stmt *S,
  239   void emitOutOfBoundsBug(CheckerContext &C, ProgramStateRef State,
  241   void emitNotCStringBug(CheckerContext &C, ProgramStateRef State,
  243   void emitAdditionOverflowBug(CheckerContext &C, ProgramStateRef State) const;
  245   ProgramStateRef checkAdditionOverflow(CheckerContext &C,
  246                                             ProgramStateRef state,
  254                                 ProgramStateRef state,
  267 std::pair<ProgramStateRef , ProgramStateRef >
  267 std::pair<ProgramStateRef , ProgramStateRef >
  268 CStringChecker::assumeZero(CheckerContext &C, ProgramStateRef state, SVal V,
  279 ProgramStateRef CStringChecker::checkNonNull(CheckerContext &C,
  280                                             ProgramStateRef state,
  287   ProgramStateRef stateNull, stateNonNull;
  310 ProgramStateRef CStringChecker::CheckLocation(CheckerContext &C,
  311                                              ProgramStateRef state,
  340   ProgramStateRef StInBound = state->assumeInBound(Idx, Size, true);
  341   ProgramStateRef StOutBound = state->assumeInBound(Idx, Size, false);
  370 ProgramStateRef CStringChecker::CheckBufferAccess(CheckerContext &C,
  371                                                  ProgramStateRef state,
  449 ProgramStateRef CStringChecker::CheckOverlap(CheckerContext &C,
  450                                             ProgramStateRef state,
  465   ProgramStateRef stateTrue, stateFalse;
  562 void CStringChecker::emitOverlapBug(CheckerContext &C, ProgramStateRef state,
  581 void CStringChecker::emitNullArgBug(CheckerContext &C, ProgramStateRef State,
  599                                         ProgramStateRef State, const Stmt *S,
  620 void CStringChecker::emitNotCStringBug(CheckerContext &C, ProgramStateRef State,
  638                                              ProgramStateRef State) const {
  658 ProgramStateRef CStringChecker::checkAdditionOverflow(CheckerContext &C,
  659                                                      ProgramStateRef state,
  695     ProgramStateRef stateOverflow, stateOkay;
  713 ProgramStateRef CStringChecker::setCStringLength(ProgramStateRef state,
  713 ProgramStateRef CStringChecker::setCStringLength(ProgramStateRef state,
  754                                                ProgramStateRef &state,
  792 SVal CStringChecker::getCStringLength(CheckerContext &C, ProgramStateRef &state,
  867   ProgramStateRef &state, const Expr *expr, SVal val) const {
  887                                        ProgramStateRef state,
  947   ProgramStateRef StInBound = state->assumeInBound(Idx, ExtentSize, true);
  952 ProgramStateRef CStringChecker::InvalidateBuffer(CheckerContext &C,
  953                                                  ProgramStateRef state,
 1048                                ProgramStateRef &State) {
 1077     ProgramStateRef StateWholeReg, StateNotWholeReg;
 1085     ProgramStateRef StateNullChar, StateNonNullChar;
 1140                                     ProgramStateRef state,
 1151   ProgramStateRef stateZeroSize, stateNonZeroSize;
 1244   ProgramStateRef state = C.getState();
 1253   ProgramStateRef state = C.getState();
 1262   ProgramStateRef state = C.getState();
 1281   ProgramStateRef state = C.getState();
 1289   ProgramStateRef stateZeroSize, stateNonZeroSize;
 1315     ProgramStateRef StSameBuf, StNotSameBuf;
 1361   ProgramStateRef state = C.getState();
 1368     ProgramStateRef stateZeroSize, stateNonZeroSize;
 1420       ProgramStateRef stateStringTooLong, stateStringNotTooLong;
 1543   ProgramStateRef state = C.getState();
 1599       ProgramStateRef stateSourceTooLong, stateSourceNotTooLong;
 1650         ProgramStateRef StateZeroSize, StateNonZeroSize;
 1907   ProgramStateRef state = C.getState();
 1943   ProgramStateRef StSameBuf, StNotSameBuf;
 2041   ProgramStateRef State = C.getState();
 2104   ProgramStateRef State = C.getState();
 2133   ProgramStateRef State = C.getState();
 2140   ProgramStateRef StateZeroSize, StateNonZeroSize;
 2182   ProgramStateRef State = C.getState();
 2188   ProgramStateRef StateZeroSize, StateNonZeroSize;
 2277   ProgramStateRef state = C.getState();
 2310 ProgramStateRef
 2311 CStringChecker::checkRegionChanges(ProgramStateRef state,
 2364 void CStringChecker::checkLiveSymbols(ProgramStateRef state,
 2381   ProgramStateRef state = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/CXXSelfAssignmentChecker.cpp
   54   ProgramStateRef SelfAssignState = State->bindLoc(Param, ThisVal, LCtx);
   64   ProgramStateRef NonSelfAssignState = State->bindLoc(Param, ParamVal, LCtx);
tools/clang/lib/StaticAnalyzer/Checkers/CallAndMessageChecker.cpp
   77                          ProgramStateRef state,
  173     const ProgramStateRef State = C.getState();
  318   ProgramStateRef State = C.getState();
  330   ProgramStateRef StNonNull, StNull;
  370   ProgramStateRef State = C.getState();
  384     ProgramStateRef StNonNull, StNull;
  545                                               ProgramStateRef state,
tools/clang/lib/StaticAnalyzer/Checkers/CastSizeChecker.cpp
  102   ProgramStateRef state = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/CastValueChecker.cpp
  159   ProgramStateRef State = C.getState()->assume(DV, IsNonNullParam);
  218                                     ProgramStateRef State, CheckerContext &C,
  280   if (ProgramStateRef State = C.getState()->assume(DV, false))
  352   ProgramStateRef NonNullState, NullState;
  368   ProgramStateRef NonNullState, NullState;
tools/clang/lib/StaticAnalyzer/Checkers/CheckObjCDealloc.cpp
  120   ProgramStateRef evalAssume(ProgramStateRef State, SVal Cond,
  120   ProgramStateRef evalAssume(ProgramStateRef State, SVal Cond,
  123   ProgramStateRef checkPointerEscape(ProgramStateRef State,
  123   ProgramStateRef checkPointerEscape(ProgramStateRef State,
  167   ProgramStateRef removeValueRequiringRelease(ProgramStateRef State,
  167   ProgramStateRef removeValueRequiringRelease(ProgramStateRef State,
  265   ProgramStateRef InitialState = C.getState();
  267   ProgramStateRef State = InitialState;
  404 ProgramStateRef ObjCDeallocChecker::evalAssume(ProgramStateRef State, SVal Cond,
  404 ProgramStateRef ObjCDeallocChecker::evalAssume(ProgramStateRef State, SVal Cond,
  447 ProgramStateRef ObjCDeallocChecker::checkPointerEscape(
  448     ProgramStateRef State, const InvalidatedSymbols &Escaped,
  488   ProgramStateRef State = C.getState();
  510   ProgramStateRef InitialState = State;
  841   ProgramStateRef InitialState = C.getState();
  843   ProgramStateRef ReleasedState =
  853 ProgramStateRef ObjCDeallocChecker::removeValueRequiringRelease(
  854     ProgramStateRef State, SymbolRef Instance, SymbolRef Value) const {
  939   ProgramStateRef notNilState, nilState;
  953   ProgramStateRef State = C.getState();
  985   ProgramStateRef State = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/CheckerDocumentation.cpp
  239   ProgramStateRef evalAssume(ProgramStateRef State,
  239   ProgramStateRef evalAssume(ProgramStateRef State,
  248   void checkLiveSymbols(ProgramStateRef State, SymbolReaper &SR) const {}
  272   ProgramStateRef
  273     checkRegionChanges(ProgramStateRef State,
  295   ProgramStateRef checkPointerEscape(ProgramStateRef State,
  295   ProgramStateRef checkPointerEscape(ProgramStateRef State,
  306   ProgramStateRef checkConstPointerEscape(ProgramStateRef State,
  306   ProgramStateRef checkConstPointerEscape(ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Checkers/ChrootChecker.cpp
   79   ProgramStateRef state = C.getState();
   89   ProgramStateRef state = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/DereferenceChecker.cpp
   36   void reportBug(ProgramStateRef State, const Stmt *S, CheckerContext &C) const;
  119 void DereferenceChecker::reportBug(ProgramStateRef State, const Stmt *S,
  217   ProgramStateRef state = C.getState();
  219   ProgramStateRef notNullState, nullState;
  260   ProgramStateRef State = C.getState();
  262   ProgramStateRef StNonNull, StNull;
tools/clang/lib/StaticAnalyzer/Checkers/DivZeroChecker.cpp
   28   void reportBug(const char *Msg, ProgramStateRef StateZero, CheckerContext &C,
   44     const char *Msg, ProgramStateRef StateZero, CheckerContext &C,
   79   ProgramStateRef stateNotZero, stateZero;
tools/clang/lib/StaticAnalyzer/Checkers/DynamicTypeChecker.cpp
   93   ProgramStateRef State = N->getState();
   94   ProgramStateRef StatePrev = N->getFirstPred()->getState();
  164   ProgramStateRef State = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/DynamicTypePropagation.cpp
   66                                               ProgramStateRef &State,
  116   ProgramStateRef State = removeDeadTypes(C.getState(), SR);
  139   ProgramStateRef State = C.getState();
  198     ProgramStateRef State = C.getState();
  276     const CastExpr *CE, ProgramStateRef &State, CheckerContext &C) const {
  448 storeWhenMoreInformative(ProgramStateRef &State, SymbolRef Sym,
  534   ProgramStateRef State = C.getState();
  706   ProgramStateRef State = C.getState();
  823   ProgramStateRef State = C.getState();
  926   ProgramStateRef state = N->getState();
  927   ProgramStateRef statePrev = N->getFirstPred()->getState();
tools/clang/lib/StaticAnalyzer/Checkers/EnumCastOutOfRangeChecker.cpp
   36   const ProgramStateRef PS;
tools/clang/lib/StaticAnalyzer/Checkers/ExprInspectionChecker.cpp
  110   ProgramStateRef State = N->getState();
  118   ProgramStateRef StTrue, StFalse;
  236   ProgramStateRef State = C.getState();
  256   ProgramStateRef State = C.getState();
  263   ProgramStateRef State = C.getState();
  334   ProgramStateRef State = C.getState();
  342   ProgramStateRef State;
  345   SymbolExpressor(ProgramStateRef State) : State(State) {}
tools/clang/lib/StaticAnalyzer/Checkers/GTestChecker.cpp
  114                                       ProgramStateRef State) const;
  116   static ProgramStateRef assumeValuesEqual(SVal Val1, SVal Val2,
  117                                            ProgramStateRef State,
  134   ProgramStateRef State = C.getState();
  169   ProgramStateRef State = C.getState();
  251     ProgramStateRef State) const {
  270 ProgramStateRef GTestChecker::assumeValuesEqual(SVal Val1, SVal Val2,
  271                                                 ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Checkers/GenericTaintChecker.cpp
   49   void printState(raw_ostream &Out, ProgramStateRef State, const char *NL,
  211     static bool isTaintedOrPointsToTainted(const Expr *E, ProgramStateRef State,
  225     ProgramStateRef process(const CallExpr *CE, CheckerContext &C) const;
  462 void GenericTaintChecker::printState(raw_ostream &Out, ProgramStateRef State,
  469   ProgramStateRef State = nullptr;
  496   ProgramStateRef State = C.getState();
  560   ProgramStateRef State = C.getState();
  583 ProgramStateRef
  586   ProgramStateRef State = C.getState();
  663   ProgramStateRef State = C.getState();
  726   ProgramStateRef State = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/InnerPointerChecker.cpp
   63     bool isSymbolTracked(ProgramStateRef State, SymbolRef Sym) {
   95   void markPtrSymbolsReleased(const CallEvent &Call, ProgramStateRef State,
  102   void checkFunctionArguments(const CallEvent &Call, ProgramStateRef State,
  134                                                  ProgramStateRef State,
  151                                                  ProgramStateRef State,
  196   ProgramStateRef State = C.getState();
  236   ProgramStateRef State = C.getState();
  267 const MemRegion *getContainerObjRegion(ProgramStateRef State, SymbolRef Sym) {
tools/clang/lib/StaticAnalyzer/Checkers/IteratorChecker.cpp
  185   void processComparison(CheckerContext &C, ProgramStateRef State,
  260   void checkLiveSymbols(ProgramStateRef State, SymbolReaper &SR) const;
  297 bool hasSubscriptOperator(ProgramStateRef State, const MemRegion *Reg);
  298 bool frontModifiable(ProgramStateRef State, const MemRegion *Reg);
  299 bool backModifiable(ProgramStateRef State, const MemRegion *Reg);
  300 SymbolRef getContainerBegin(ProgramStateRef State, const MemRegion *Cont);
  301 SymbolRef getContainerEnd(ProgramStateRef State, const MemRegion *Cont);
  302 ProgramStateRef createContainerBegin(ProgramStateRef State,
  302 ProgramStateRef createContainerBegin(ProgramStateRef State,
  306 ProgramStateRef createContainerEnd(ProgramStateRef State, const MemRegion *Cont,
  306 ProgramStateRef createContainerEnd(ProgramStateRef State, const MemRegion *Cont,
  310 const IteratorPosition *getIteratorPosition(ProgramStateRef State,
  312 ProgramStateRef setIteratorPosition(ProgramStateRef State, const SVal &Val,
  312 ProgramStateRef setIteratorPosition(ProgramStateRef State, const SVal &Val,
  314 ProgramStateRef removeIteratorPosition(ProgramStateRef State, const SVal &Val);
  314 ProgramStateRef removeIteratorPosition(ProgramStateRef State, const SVal &Val);
  315 ProgramStateRef assumeNoOverflow(ProgramStateRef State, SymbolRef Sym,
  315 ProgramStateRef assumeNoOverflow(ProgramStateRef State, SymbolRef Sym,
  317 ProgramStateRef invalidateAllIteratorPositions(ProgramStateRef State,
  317 ProgramStateRef invalidateAllIteratorPositions(ProgramStateRef State,
  319 ProgramStateRef
  320 invalidateAllIteratorPositionsExcept(ProgramStateRef State,
  323 ProgramStateRef invalidateIteratorPositions(ProgramStateRef State,
  323 ProgramStateRef invalidateIteratorPositions(ProgramStateRef State,
  326 ProgramStateRef invalidateIteratorPositions(ProgramStateRef State,
  326 ProgramStateRef invalidateIteratorPositions(ProgramStateRef State,
  331 ProgramStateRef reassignAllIteratorPositions(ProgramStateRef State,
  331 ProgramStateRef reassignAllIteratorPositions(ProgramStateRef State,
  334 ProgramStateRef reassignAllIteratorPositionsUnless(ProgramStateRef State,
  334 ProgramStateRef reassignAllIteratorPositionsUnless(ProgramStateRef State,
  339 ProgramStateRef rebaseSymbolInIteratorPositionsIf(
  340     ProgramStateRef State, SValBuilder &SVB, SymbolRef OldSym,
  342 ProgramStateRef relateSymbols(ProgramStateRef State, SymbolRef Sym1,
  342 ProgramStateRef relateSymbols(ProgramStateRef State, SymbolRef Sym1,
  344 const ContainerData *getContainerData(ProgramStateRef State,
  346 ProgramStateRef setContainerData(ProgramStateRef State, const MemRegion *Cont,
  346 ProgramStateRef setContainerData(ProgramStateRef State, const MemRegion *Cont,
  348 bool hasLiveIterators(ProgramStateRef State, const MemRegion *Cont);
  351 bool isPastTheEnd(ProgramStateRef State, const IteratorPosition &Pos);
  352 bool isAheadOfRange(ProgramStateRef State, const IteratorPosition &Pos);
  353 bool isBehindPastTheEnd(ProgramStateRef State, const IteratorPosition &Pos);
  354 bool isZero(ProgramStateRef State, const NonLoc &Val);
  777 void IteratorChecker::checkLiveSymbols(ProgramStateRef State,
  895                                         ProgramStateRef State, SymbolRef Sym1,
 1632 bool isLess(ProgramStateRef State, SymbolRef Sym1, SymbolRef Sym2);
 1633 bool isGreater(ProgramStateRef State, SymbolRef Sym1, SymbolRef Sym2);
 1634 bool isEqual(ProgramStateRef State, SymbolRef Sym1, SymbolRef Sym2);
 1635 bool compare(ProgramStateRef State, SymbolRef Sym1, SymbolRef Sym2,
 1637 bool compare(ProgramStateRef State, NonLoc NL1, NonLoc NL2,
 1639 const CXXRecordDecl *getCXXRecordDecl(ProgramStateRef State,
 1641 SymbolRef rebaseSymbol(ProgramStateRef State, SValBuilder &SVB, SymbolRef Expr,
 1866 bool hasSubscriptOperator(ProgramStateRef State, const MemRegion *Reg) {
 1882 bool frontModifiable(ProgramStateRef State, const MemRegion *Reg) {
 1897 bool backModifiable(ProgramStateRef State, const MemRegion *Reg) {
 1912 const CXXRecordDecl *getCXXRecordDecl(ProgramStateRef State,
 1926 SymbolRef getContainerBegin(ProgramStateRef State, const MemRegion *Cont) {
 1934 SymbolRef getContainerEnd(ProgramStateRef State, const MemRegion *Cont) {
 1942 ProgramStateRef createContainerBegin(ProgramStateRef State,
 1942 ProgramStateRef createContainerBegin(ProgramStateRef State,
 1965 ProgramStateRef createContainerEnd(ProgramStateRef State, const MemRegion *Cont,
 1965 ProgramStateRef createContainerEnd(ProgramStateRef State, const MemRegion *Cont,
 1988 const ContainerData *getContainerData(ProgramStateRef State,
 1993 ProgramStateRef setContainerData(ProgramStateRef State, const MemRegion *Cont,
 1993 ProgramStateRef setContainerData(ProgramStateRef State, const MemRegion *Cont,
 1998 const IteratorPosition *getIteratorPosition(ProgramStateRef State,
 2011 ProgramStateRef setIteratorPosition(ProgramStateRef State, const SVal &Val,
 2011 ProgramStateRef setIteratorPosition(ProgramStateRef State, const SVal &Val,
 2024 ProgramStateRef removeIteratorPosition(ProgramStateRef State, const SVal &Val) {
 2024 ProgramStateRef removeIteratorPosition(ProgramStateRef State, const SVal &Val) {
 2036 ProgramStateRef relateSymbols(ProgramStateRef State, SymbolRef Sym1,
 2036 ProgramStateRef relateSymbols(ProgramStateRef State, SymbolRef Sym1,
 2068 bool hasLiveIterators(ProgramStateRef State, const MemRegion *Cont) {
 2103 ProgramStateRef assumeNoOverflow(ProgramStateRef State, SymbolRef Sym,
 2103 ProgramStateRef assumeNoOverflow(ProgramStateRef State, SymbolRef Sym,
 2112   ProgramStateRef NewState = State;
 2138 ProgramStateRef processIteratorPositions(ProgramStateRef State, Condition Cond,
 2138 ProgramStateRef processIteratorPositions(ProgramStateRef State, Condition Cond,
 2169 ProgramStateRef invalidateAllIteratorPositions(ProgramStateRef State,
 2169 ProgramStateRef invalidateAllIteratorPositions(ProgramStateRef State,
 2180 ProgramStateRef
 2181 invalidateAllIteratorPositionsExcept(ProgramStateRef State,
 2194 ProgramStateRef invalidateIteratorPositions(ProgramStateRef State,
 2194 ProgramStateRef invalidateIteratorPositions(ProgramStateRef State,
 2206 ProgramStateRef invalidateIteratorPositions(ProgramStateRef State,
 2206 ProgramStateRef invalidateIteratorPositions(ProgramStateRef State,
 2221 ProgramStateRef reassignAllIteratorPositions(ProgramStateRef State,
 2221 ProgramStateRef reassignAllIteratorPositions(ProgramStateRef State,
 2233 ProgramStateRef reassignAllIteratorPositionsUnless(ProgramStateRef State,
 2233 ProgramStateRef reassignAllIteratorPositionsUnless(ProgramStateRef State,
 2251 ProgramStateRef rebaseSymbolInIteratorPositionsIf(
 2252     ProgramStateRef State, SValBuilder &SVB, SymbolRef OldSym,
 2267 SymbolRef rebaseSymbol(ProgramStateRef State, SValBuilder &SVB,
 2283 bool isZero(ProgramStateRef State, const NonLoc &Val) {
 2290 bool isPastTheEnd(ProgramStateRef State, const IteratorPosition &Pos) {
 2306 bool isAheadOfRange(ProgramStateRef State, const IteratorPosition &Pos) {
 2322 bool isBehindPastTheEnd(ProgramStateRef State, const IteratorPosition &Pos) {
 2338 bool isLess(ProgramStateRef State, SymbolRef Sym1, SymbolRef Sym2) {
 2342 bool isGreater(ProgramStateRef State, SymbolRef Sym1, SymbolRef Sym2) {
 2346 bool isEqual(ProgramStateRef State, SymbolRef Sym1, SymbolRef Sym2) {
 2350 bool compare(ProgramStateRef State, SymbolRef Sym1, SymbolRef Sym2,
 2355 bool compare(ProgramStateRef State, NonLoc NL1, NonLoc NL2,
tools/clang/lib/StaticAnalyzer/Checkers/LocalizationChecker.cpp
  700     ProgramStateRef State =
  711     ProgramStateRef State = C.getState()->set<LocalizedMemMap>(
tools/clang/lib/StaticAnalyzer/Checkers/MIGChecker.cpp
  205   ProgramStateRef State = C.getState();
  226   ProgramStateRef State = C.getState();
  265   ProgramStateRef State = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/MPI-Checker/MPIChecker.cpp
   39   ProgramStateRef State = Ctx.getState();
   74   ProgramStateRef State = Ctx.getState();
  102   ProgramStateRef State = Ctx.getState();
tools/clang/lib/StaticAnalyzer/Checkers/MacOSKeychainAPIChecker.cpp
   62   ProgramStateRef checkPointerEscape(ProgramStateRef State,
   62   ProgramStateRef checkPointerEscape(ProgramStateRef State,
   66   ProgramStateRef evalAssume(ProgramStateRef state, SVal Cond,
   66   ProgramStateRef evalAssume(ProgramStateRef state, SVal Cond,
   68   void printState(raw_ostream &Out, ProgramStateRef State,
  210   ProgramStateRef State = C.getState();
  228   ProgramStateRef State = C.getState();
  252   ProgramStateRef State = C.getState();
  404   ProgramStateRef State = C.getState();
  505 ProgramStateRef MacOSKeychainAPIChecker::evalAssume(ProgramStateRef State,
  505 ProgramStateRef MacOSKeychainAPIChecker::evalAssume(ProgramStateRef State,
  543   ProgramStateRef State = C.getState();
  582 ProgramStateRef MacOSKeychainAPIChecker::checkPointerEscape(
  583     ProgramStateRef State, const InvalidatedSymbols &Escaped,
  651                                          ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Checkers/MallocChecker.cpp
  208 static ProgramStateRef MallocUpdateRefState(CheckerContext &C, const Expr *E,
  209                                             ProgramStateRef State,
  370   ProgramStateRef evalAssume(ProgramStateRef state, SVal Cond,
  370   ProgramStateRef evalAssume(ProgramStateRef state, SVal Cond,
  375   ProgramStateRef checkPointerEscape(ProgramStateRef State,
  375   ProgramStateRef checkPointerEscape(ProgramStateRef State,
  379   ProgramStateRef checkConstPointerEscape(ProgramStateRef State,
  379   ProgramStateRef checkConstPointerEscape(ProgramStateRef State,
  384   void printState(raw_ostream &Out, ProgramStateRef State,
  414   static ProgramStateRef ProcessZeroAllocCheck(CheckerContext &C, const Expr *E,
  416                                                ProgramStateRef State,
  435   ProgramStateRef MallocMemReturnsAttr(CheckerContext &C,
  438                                        ProgramStateRef State) const;
  449   static ProgramStateRef MallocMemAux(CheckerContext &C, const CallExpr *CE,
  451                                       ProgramStateRef State,
  463   static ProgramStateRef MallocMemAux(CheckerContext &C, const CallExpr *CE,
  465                                       ProgramStateRef State,
  468   static ProgramStateRef addExtentSize(CheckerContext &C, const CXXNewExpr *NE,
  469                                        ProgramStateRef State, SVal Target);
  473   llvm::Optional<ProgramStateRef>
  475                       const ProgramStateRef &State) const;
  494   ProgramStateRef FreeMemAttr(CheckerContext &C, const CallExpr *CE,
  496                               ProgramStateRef State) const;
  517   ProgramStateRef FreeMemAux(CheckerContext &C, const CallExpr *CE,
  518                              ProgramStateRef State, unsigned Num, bool Hold,
  541   ProgramStateRef FreeMemAux(CheckerContext &C, const Expr *ArgExpr,
  542                              const Expr *ParentExpr, ProgramStateRef State,
  559   ProgramStateRef ReallocMemAux(CheckerContext &C, const CallExpr *CE,
  560                                 bool ShouldFreeOnFail, ProgramStateRef State,
  576   static ProgramStateRef CallocMem(CheckerContext &C, const CallExpr *CE,
  577                                    ProgramStateRef State);
  606                                    ProgramStateRef State,
  610   ProgramStateRef checkPointerEscapeAux(ProgramStateRef State,
  610   ProgramStateRef checkPointerEscapeAux(ProgramStateRef State,
  802   ProgramStateRef state;
  804   StopTrackingCallback(ProgramStateRef st) : state(std::move(st)) {}
  805   ProgramStateRef getState() const { return state; }
  966 llvm::Optional<ProgramStateRef> MallocChecker::performKernelMalloc(
  967   const CallExpr *CE, CheckerContext &C, const ProgramStateRef &State) const {
 1032   ProgramStateRef TrueState, FalseState;
 1049   ProgramStateRef State = C.getState();
 1063   ProgramStateRef State = C.getState();
 1084         llvm::Optional<ProgramStateRef> MaybeState =
 1095       llvm::Optional<ProgramStateRef> MaybeState =
 1230 ProgramStateRef MallocChecker::ProcessZeroAllocCheck(
 1232     ProgramStateRef State, Optional<SVal> RetVal) {
 1261   ProgramStateRef TrueState, FalseState;
 1349   ProgramStateRef State = C.getState();
 1376 ProgramStateRef MallocChecker::addExtentSize(CheckerContext &C,
 1378                                              ProgramStateRef State,
 1429   ProgramStateRef State = C.getState();
 1473   ProgramStateRef State =
 1481 ProgramStateRef
 1484                                     ProgramStateRef State) const {
 1499 ProgramStateRef MallocChecker::MallocMemAux(CheckerContext &C,
 1502                                             ProgramStateRef State,
 1510 ProgramStateRef MallocChecker::MallocMemAux(CheckerContext &C,
 1513                                            ProgramStateRef State,
 1554 static ProgramStateRef MallocUpdateRefState(CheckerContext &C, const Expr *E,
 1555                                             ProgramStateRef State,
 1578 ProgramStateRef MallocChecker::FreeMemAttr(CheckerContext &C,
 1581                                            ProgramStateRef State) const {
 1591     ProgramStateRef StateI = FreeMemAux(
 1600 ProgramStateRef MallocChecker::FreeMemAux(CheckerContext &C, const CallExpr *CE,
 1601                                           ProgramStateRef State, unsigned Num,
 1616 static bool didPreviousFreeFail(ProgramStateRef State,
 1747 ProgramStateRef MallocChecker::FreeMemAux(CheckerContext &C,
 1750                                           ProgramStateRef State, bool Hold,
 1767   ProgramStateRef notNullState, nullState;
 2392 ProgramStateRef MallocChecker::ReallocMemAux(CheckerContext &C,
 2395                                              ProgramStateRef State,
 2431   ProgramStateRef StatePtrIsNull, StatePtrNotNull;
 2433   ProgramStateRef StateSizeIsZero, StateSizeNotZero;
 2443     ProgramStateRef stateMalloc = MallocMemAux(C, CE, TotalSize,
 2467     if (ProgramStateRef stateFree =
 2472   if (ProgramStateRef stateFree =
 2475     ProgramStateRef stateRealloc = MallocMemAux(C, CE, TotalSize,
 2497 ProgramStateRef MallocChecker::CallocMem(CheckerContext &C, const CallExpr *CE,
 2498                                          ProgramStateRef State) {
 2522     ProgramStateRef State = N->getState();
 2620   ProgramStateRef state = C.getState();
 2745   ProgramStateRef State = C.getState();
 2774   ProgramStateRef state = C.getState();
 2825   ProgramStateRef State = C.getState();
 2881 ProgramStateRef MallocChecker::evalAssume(ProgramStateRef state,
 2881 ProgramStateRef MallocChecker::evalAssume(ProgramStateRef state,
 2927                                               ProgramStateRef State,
 3091 ProgramStateRef MallocChecker::checkPointerEscape(ProgramStateRef State,
 3091 ProgramStateRef MallocChecker::checkPointerEscape(ProgramStateRef State,
 3099 ProgramStateRef MallocChecker::checkConstPointerEscape(ProgramStateRef State,
 3099 ProgramStateRef MallocChecker::checkConstPointerEscape(ProgramStateRef State,
 3113 ProgramStateRef MallocChecker::checkPointerEscapeAux(
 3114     ProgramStateRef State, const InvalidatedSymbols &Escaped,
 3143 static SymbolRef findFailedReallocSymbol(ProgramStateRef currState,
 3144                                          ProgramStateRef prevState) {
 3173   ProgramStateRef state = N->getState();
 3174   ProgramStateRef statePrev = N->getFirstPred()->getState();
 3356 void MallocChecker::printState(raw_ostream &Out, ProgramStateRef State,
 3384 ProgramStateRef
 3385 markReleased(ProgramStateRef State, SymbolRef Sym, const Expr *Origin) {
tools/clang/lib/StaticAnalyzer/Checkers/Move.h
   24 bool isMovedFrom(ProgramStateRef State, const MemRegion *Region);
tools/clang/lib/StaticAnalyzer/Checkers/MoveChecker.cpp
   55   ProgramStateRef
   56   checkRegionChanges(ProgramStateRef State,
   61   void printState(raw_ostream &Out, ProgramStateRef State,
  210   void modelUse(ProgramStateRef State, const MemRegion *Region,
  234 bool isMovedFrom(ProgramStateRef State, const MemRegion *Region) {
  243 static ProgramStateRef removeFromState(ProgramStateRef State,
  243 static ProgramStateRef removeFromState(ProgramStateRef State,
  254 static bool isAnyBaseRegionReported(ProgramStateRef State,
  281   ProgramStateRef State = N->getState();
  282   ProgramStateRef StatePrev = N->getFirstPred()->getState();
  340     ProgramStateRef State = N->getState();
  349 void MoveChecker::modelUse(ProgramStateRef State, const MemRegion *Region,
  448   ProgramStateRef State = C.getState();
  603   ProgramStateRef State = C.getState();
  686   ProgramStateRef State = C.getState();
  700 ProgramStateRef MoveChecker::checkRegionChanges(
  701     ProgramStateRef State, const InvalidatedSymbols *Invalidated,
  736 void MoveChecker::printState(raw_ostream &Out, ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Checkers/NSErrorChecker.cpp
  173 static bool hasFlag(SVal val, ProgramStateRef state) {
  181 static void setFlag(ProgramStateRef state, SVal val, CheckerContext &C) {
  210   ProgramStateRef state = C.getState();
  243   ProgramStateRef state = event.SinkNode->getState();
tools/clang/lib/StaticAnalyzer/Checkers/NonNullParamChecker.cpp
   76   ProgramStateRef state = C.getState();
  138     ProgramStateRef stateNotNull, stateNull;
tools/clang/lib/StaticAnalyzer/Checkers/NonnullGlobalConstantsChecker.cpp
   74   ProgramStateRef State = C.getState();
   83       ProgramStateRef OutputState = State->assume(*Constr, true);
tools/clang/lib/StaticAnalyzer/Checkers/NullabilityChecker.cpp
  105   void printState(raw_ostream &Out, ProgramStateRef State, const char *NL,
  263                                         ProgramStateRef State) {
  296   ProgramStateRef State = N->getState();
  297   ProgramStateRef StatePrev = N->getFirstPred()->getState();
  331 static bool checkValueAtLValForInvariantViolation(ProgramStateRef State,
  358                                     ProgramStateRef State,
  374 checkSelfIvarsForInvariantViolation(ProgramStateRef State,
  404 static bool checkInvariantViolation(ProgramStateRef State, ExplodedNode *N,
  436   ProgramStateRef OriginalState = N->getState();
  451   ProgramStateRef State = C.getState();
  483   ProgramStateRef State = Event.SinkNode->getState();
  531   ProgramStateRef State = C.getState();
  645   ProgramStateRef State = C.getState();
  649   ProgramStateRef OrigState = State;
  756   ProgramStateRef State = C.getState();
  785                                           ProgramStateRef State) {
  825   ProgramStateRef State = C.getState();
  940   ProgramStateRef State = C.getState();
 1064   ProgramStateRef State = C.getState();
 1170 void NullabilityChecker::printState(raw_ostream &Out, ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Checkers/ObjCAtSyncChecker.cpp
   40   ProgramStateRef state = C.getState();
   61   ProgramStateRef notNullState, nullState;
tools/clang/lib/StaticAnalyzer/Checkers/ObjCContainersChecker.cpp
   55   ProgramStateRef checkPointerEscape(ProgramStateRef State,
   55   ProgramStateRef checkPointerEscape(ProgramStateRef State,
   60   void printState(raw_ostream &OS, ProgramStateRef State,
   70   ProgramStateRef State = C.getState();
  117     ProgramStateRef State = C.getState();
  140     ProgramStateRef StInBound = State->assumeInBound(Idx, *Size, true, T);
  141     ProgramStateRef StOutBound = State->assumeInBound(Idx, *Size, false, T);
  158 ProgramStateRef
  159 ObjCContainersChecker::checkPointerEscape(ProgramStateRef State,
  174 void ObjCContainersChecker::printState(raw_ostream &OS, ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Checkers/ObjCSelfInitChecker.cpp
   81   void printState(raw_ostream &Out, ProgramStateRef State,
  106 static SelfFlagEnum getSelfFlags(SVal val, ProgramStateRef state) {
  117 static void addSelfFlag(ProgramStateRef state, SVal val,
  178     ProgramStateRef state = C.getState();
  244   ProgramStateRef state = C.getState();
  272   ProgramStateRef state = C.getState();
  309   ProgramStateRef state = C.getState();
  329     ProgramStateRef State = C.getState();
  337 void ObjCSelfInitChecker::printState(raw_ostream &Out, ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Checkers/ObjCSuperDeallocChecker.cpp
   85   ProgramStateRef State = C.getState();
  118   ProgramStateRef State = C.getState();
  135   ProgramStateRef State = C.getState();
  201   ProgramStateRef State = C.getState();
  252   ProgramStateRef State = Succ->getState();
tools/clang/lib/StaticAnalyzer/Checkers/PointerArithChecker.cpp
  108   ProgramStateRef State = C.getState();
  130   ProgramStateRef State = C.getState();
  155   ProgramStateRef State = C.getState();
  219   ProgramStateRef State = C.getState();
  248   ProgramStateRef State = C.getState();
  263   ProgramStateRef State = C.getState();
  281   ProgramStateRef State = C.getState();
  325   ProgramStateRef State = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/PthreadLockChecker.cpp
   83   void printState(raw_ostream &Out, ProgramStateRef State,
   94   ProgramStateRef resolvePossiblyDestroyedMutex(ProgramStateRef state,
   94   ProgramStateRef resolvePossiblyDestroyedMutex(ProgramStateRef state,
  158 ProgramStateRef PthreadLockChecker::resolvePossiblyDestroyedMutex(
  159     ProgramStateRef state, const MemRegion *lockR, const SymbolRef *sym) const {
  183 void PthreadLockChecker::printState(raw_ostream &Out, ProgramStateRef State,
  224   ProgramStateRef state = C.getState();
  254   ProgramStateRef lockSucc = state;
  257     ProgramStateRef lockFail;
  295   ProgramStateRef state = C.getState();
  354   ProgramStateRef State = C.getState();
  415   ProgramStateRef State = C.getState();
  464   ProgramStateRef State = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/RetainCountChecker/RetainCountChecker.cpp
   28 const RefVal *getRefBinding(ProgramStateRef State, SymbolRef Sym) {
   36 static ProgramStateRef setRefBinding(ProgramStateRef State, SymbolRef Sym,
   36 static ProgramStateRef setRefBinding(ProgramStateRef State, SymbolRef Sym,
   42 static ProgramStateRef removeRefBinding(ProgramStateRef State, SymbolRef Sym) {
   42 static ProgramStateRef removeRefBinding(ProgramStateRef State, SymbolRef Sym) {
  130   ProgramStateRef state;
  132   StopTrackingCallback(ProgramStateRef st) : state(std::move(st)) {}
  133   ProgramStateRef getState() const { return state; }
  154   ProgramStateRef state = C.getState();
  210   ProgramStateRef state = C.getState();
  231   ProgramStateRef state = C.getState();
  274   ProgramStateRef State = Pred->getState();
  291   ProgramStateRef State = C.getState();
  451   ProgramStateRef state = C.getState();
  520 static SmallVector<ProgramStateRef, 2>
  536   ProgramStateRef AssumeNonZeroReturn = State;
  537   ProgramStateRef AssumeZeroReturn = State;
  608   ProgramStateRef state = C.getState();
  699   SmallVector<ProgramStateRef, 2> Out =
  702   for (ProgramStateRef St : Out) {
  711 ProgramStateRef RetainCountChecker::updateSymbol(ProgramStateRef state,
  711 ProgramStateRef RetainCountChecker::updateSymbol(ProgramStateRef state,
  859 void RetainCountChecker::processNonLeakError(ProgramStateRef St,
  891   ProgramStateRef state = C.getState();
  944       ProgramStateRef NullOutputState = C.getState();
  982   ProgramStateRef state = C.getState();
 1071                                                   ProgramStateRef state) const {
 1139   ProgramStateRef state = C.getState();
 1150 ProgramStateRef RetainCountChecker::evalAssume(ProgramStateRef state,
 1150 ProgramStateRef RetainCountChecker::evalAssume(ProgramStateRef state,
 1183 ProgramStateRef RetainCountChecker::checkRegionChanges(
 1184     ProgramStateRef state, const InvalidatedSymbols *invalidated,
 1206 ProgramStateRef
 1207 RetainCountChecker::handleAutoreleaseCounts(ProgramStateRef state,
 1284 ProgramStateRef
 1285 RetainCountChecker::handleSymbolDeath(ProgramStateRef state,
 1313 RetainCountChecker::processLeaks(ProgramStateRef state,
 1343   ProgramStateRef state = Ctx.getState();
 1376   ProgramStateRef state = Pred->getState();
 1413   ProgramStateRef state = C.getState();
 1455 void RetainCountChecker::printState(raw_ostream &Out, ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Checkers/RetainCountChecker/RetainCountChecker.h
  291   void printState(raw_ostream &Out, ProgramStateRef State,
  315   ProgramStateRef evalAssume(ProgramStateRef state, SVal Cond,
  315   ProgramStateRef evalAssume(ProgramStateRef state, SVal Cond,
  318   ProgramStateRef
  319   checkRegionChanges(ProgramStateRef state,
  328                                 SymbolRef Sym, ProgramStateRef state) const;
  334   ProgramStateRef updateSymbol(ProgramStateRef state, SymbolRef sym,
  334   ProgramStateRef updateSymbol(ProgramStateRef state, SymbolRef sym,
  341   void processNonLeakError(ProgramStateRef St, SourceRange ErrorRange,
  347   ProgramStateRef handleSymbolDeath(ProgramStateRef state,
  347   ProgramStateRef handleSymbolDeath(ProgramStateRef state,
  351   ProgramStateRef
  352   handleAutoreleaseCounts(ProgramStateRef state, ExplodedNode *Pred,
  358   ExplodedNode *processLeaks(ProgramStateRef state,
  382 const RefVal *getRefBinding(ProgramStateRef State, SymbolRef Sym);
tools/clang/lib/StaticAnalyzer/Checkers/RetainCountChecker/RetainCountDiagnostics.cpp
  169 static Optional<unsigned> findArgIdxOfSymbol(ProgramStateRef CurrSt,
  210 static void generateDiagnosticsForCallLike(ProgramStateRef CurrSt,
  478   ProgramStateRef PrevSt = PrevNode->getState();
  479   ProgramStateRef CurrSt = N->getState();
  643     ProgramStateRef St = N->getState();
tools/clang/lib/StaticAnalyzer/Checkers/ReturnPointerRangeChecker.cpp
   36   ProgramStateRef state = C.getState();
   61   ProgramStateRef StInBound = state->assumeInBound(Idx, NumElements, true);
   62   ProgramStateRef StOutBound = state->assumeInBound(Idx, NumElements, false);
tools/clang/lib/StaticAnalyzer/Checkers/ReturnUndefChecker.cpp
  105   ProgramStateRef StNonNull, StNull;
tools/clang/lib/StaticAnalyzer/Checkers/ReturnValueChecker.cpp
  112   ProgramStateRef State = C.getState();
  127   ProgramStateRef State = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/SimpleStreamChecker.cpp
   79   ProgramStateRef checkPointerEscape(ProgramStateRef State,
   79   ProgramStateRef checkPointerEscape(ProgramStateRef State,
   93   ProgramStateRef state;
   95   StopTrackingCallback(ProgramStateRef st) : state(std::move(st)) {}
   96   ProgramStateRef getState() const { return state; }
  131   ProgramStateRef State = C.getState();
  150   ProgramStateRef State = C.getState();
  163                      bool IsSymDead, ProgramStateRef State) {
  176   ProgramStateRef State = C.getState();
  247 ProgramStateRef
  248 SimpleStreamChecker::checkPointerEscape(ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Checkers/SmartPtrModeling.cpp
   50   ProgramStateRef State = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/StackAddrEscapeChecker.cpp
  295   ProgramStateRef State = Ctx.getState();
tools/clang/lib/StaticAnalyzer/Checkers/StdLibraryFunctionsChecker.cpp
  135     ProgramStateRef
  136     applyAsOutOfRange(ProgramStateRef State, const CallEvent &Call,
  138     ProgramStateRef
  139     applyAsWithinRange(ProgramStateRef State, const CallEvent &Call,
  141     ProgramStateRef
  142     applyAsComparesToArgument(ProgramStateRef State, const CallEvent &Call,
  146     ProgramStateRef apply(ProgramStateRef State, const CallEvent &Call,
  146     ProgramStateRef apply(ProgramStateRef State, const CallEvent &Call,
  238 ProgramStateRef StdLibraryFunctionsChecker::ValueRange::applyAsOutOfRange(
  239     ProgramStateRef State, const CallEvent &Call,
  265 ProgramStateRef
  267     ProgramStateRef State, const CallEvent &Call,
  316 ProgramStateRef
  318     ProgramStateRef State, const CallEvent &Call,
  355   ProgramStateRef State = C.getState();
  358     ProgramStateRef NewState = State;
  387     ProgramStateRef State = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/StreamChecker.cpp
   96   ProgramStateRef CheckNullStream(SVal SV, ProgramStateRef state,
   96   ProgramStateRef CheckNullStream(SVal SV, ProgramStateRef state,
   98   ProgramStateRef CheckDoubleClose(const CallExpr *CE, ProgramStateRef state,
   98   ProgramStateRef CheckDoubleClose(const CallExpr *CE, ProgramStateRef state,
  215   ProgramStateRef state = C.getState();
  226   ProgramStateRef stateNotNull, stateNull;
  242   ProgramStateRef state = CheckDoubleClose(CE, C.getState(), C);
  248   ProgramStateRef state = C.getState();
  254   ProgramStateRef state = C.getState();
  260   ProgramStateRef state = C.getState();
  286   ProgramStateRef state = C.getState();
  292   ProgramStateRef state = C.getState();
  298   ProgramStateRef state = C.getState();
  304   ProgramStateRef state = C.getState();
  310   ProgramStateRef state = C.getState();
  316   ProgramStateRef state = C.getState();
  322   ProgramStateRef state = C.getState();
  328   ProgramStateRef state = C.getState();
  333 ProgramStateRef StreamChecker::CheckNullStream(SVal SV, ProgramStateRef state,
  333 ProgramStateRef StreamChecker::CheckNullStream(SVal SV, ProgramStateRef state,
  340   ProgramStateRef stateNotNull, stateNull;
  356 ProgramStateRef StreamChecker::CheckDoubleClose(const CallExpr *CE,
  357                                                ProgramStateRef state,
  390   ProgramStateRef state = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/Taint.cpp
   29 void taint::printTaint(ProgramStateRef State, raw_ostream &Out, const char *NL,
   40 void dumpTaint(ProgramStateRef State) {
   44 ProgramStateRef taint::addTaint(ProgramStateRef State, const Stmt *S,
   44 ProgramStateRef taint::addTaint(ProgramStateRef State, const Stmt *S,
   50 ProgramStateRef taint::addTaint(ProgramStateRef State, SVal V,
   50 ProgramStateRef taint::addTaint(ProgramStateRef State, SVal V,
   78 ProgramStateRef taint::addTaint(ProgramStateRef State, const MemRegion *R,
   78 ProgramStateRef taint::addTaint(ProgramStateRef State, const MemRegion *R,
   85 ProgramStateRef taint::addTaint(ProgramStateRef State, SymbolRef Sym,
   85 ProgramStateRef taint::addTaint(ProgramStateRef State, SymbolRef Sym,
   92   ProgramStateRef NewState = State->set<TaintMap>(Sym, Kind);
   97 ProgramStateRef taint::addPartialTaint(ProgramStateRef State,
   97 ProgramStateRef taint::addPartialTaint(ProgramStateRef State,
  115   ProgramStateRef NewState = State->set<DerivedSymTaint>(ParentSym, Regs);
  120 bool taint::isTainted(ProgramStateRef State, const Stmt *S,
  126 bool taint::isTainted(ProgramStateRef State, SVal V, TaintTagType Kind) {
  134 bool taint::isTainted(ProgramStateRef State, const MemRegion *Reg,
  154 bool taint::isTainted(ProgramStateRef State, SymbolRef Sym, TaintTagType Kind) {
tools/clang/lib/StaticAnalyzer/Checkers/Taint.h
   30 LLVM_NODISCARD ProgramStateRef
   31 addTaint(ProgramStateRef State, const Stmt *S, const LocationContext *LCtx,
   35 LLVM_NODISCARD ProgramStateRef
   36 addTaint(ProgramStateRef State, SVal V,
   40 LLVM_NODISCARD ProgramStateRef
   41 addTaint(ProgramStateRef State, SymbolRef Sym,
   46 LLVM_NODISCARD ProgramStateRef
   47 addTaint(ProgramStateRef State, const MemRegion *R,
   54 LLVM_NODISCARD ProgramStateRef
   55 addPartialTaint(ProgramStateRef State,
   60 bool isTainted(ProgramStateRef State, const Stmt *S,
   65 bool isTainted(ProgramStateRef State, SVal V,
   69 bool isTainted(ProgramStateRef State, SymbolRef Sym,
   74 bool isTainted(ProgramStateRef State, const MemRegion *Reg,
   77 void printTaint(ProgramStateRef State, raw_ostream &Out, const char *nl = "\n",
   80 LLVM_DUMP_METHOD void dumpTaint(ProgramStateRef State);
tools/clang/lib/StaticAnalyzer/Checkers/TaintTesterChecker.cpp
   48   ProgramStateRef State = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/TestAfterDivZeroChecker.cpp
  149   ProgramStateRef State = C.getState();
  183   ProgramStateRef State = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/TrustNonnullChecker.cpp
   65   ProgramStateRef evalAssume(ProgramStateRef State,
   65   ProgramStateRef evalAssume(ProgramStateRef State,
   86     ProgramStateRef State = C.getState();
  101     ProgramStateRef State = C.getState();
  134     ProgramStateRef State = C.getState();
  147   ProgramStateRef dropDeadFromGDM(SymbolReaper &SymReaper,
  148                                   ProgramStateRef State) const {
  213   ProgramStateRef addImplication(SymbolRef Antecedent,
  214                                  ProgramStateRef InputState,
  226     ProgramStateRef State = InputState;
tools/clang/lib/StaticAnalyzer/Checkers/UndefBranchChecker.cpp
   30     ProgramStateRef St;
   33     FindUndefExpr(ProgramStateRef S, const LocationContext *L)
   89       ProgramStateRef St = N->getState();
tools/clang/lib/StaticAnalyzer/Checkers/UndefCapturedBlockVarChecker.cpp
   56   ProgramStateRef state = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/UndefResultChecker.cpp
   38   ProgramStateRef state = C.getState();
   55   ProgramStateRef StInBound = state->assumeInBound(Idx, NumElements, true);
   56   ProgramStateRef StOutBound = state->assumeInBound(Idx, NumElements, false);
   68   ProgramStateRef State = C.getState();
  155         ProgramStateRef State = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/UninitializedObject/UninitializedObject.h
  198   ProgramStateRef State;
  221   FindUninitializedFields(ProgramStateRef State,
  227   std::pair<ProgramStateRef, const UninitFieldMap &> getResults() {
tools/clang/lib/StaticAnalyzer/Checkers/UninitializedObject/UninitializedObjectChecker.cpp
  132 static bool hasUnguardedAccess(const FieldDecl *FD, ProgramStateRef State);
  162   std::pair<ProgramStateRef, const UninitFieldMap &> UninitInfo =
  165   ProgramStateRef UpdatedState = UninitInfo.first;
  218   ProgramStateRef State = C.getState();
  230     ProgramStateRef State, const TypedValueRegion *const R,
  525 static bool hasUnguardedAccess(const FieldDecl *FD, ProgramStateRef State) {
tools/clang/lib/StaticAnalyzer/Checkers/UninitializedObject/UninitializedPointee.cpp
  127 static llvm::Optional<DereferenceInfo> dereference(ProgramStateRef State,
  222 static llvm::Optional<DereferenceInfo> dereference(ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Checkers/UnixAPIChecker.cpp
   57                      ProgramStateRef State,
   79                                 ProgramStateRef falseState,
  129                                          ProgramStateRef State,
  181   ProgramStateRef state = C.getState();
  248   ProgramStateRef trueState, falseState;
  284   ProgramStateRef state = C.getState();
  323 static bool IsZeroByteAllocation(ProgramStateRef state,
  325                                  ProgramStateRef *trueState,
  326                                  ProgramStateRef *falseState) {
  338                                                     ProgramStateRef falseState,
  373   ProgramStateRef state = C.getState();
  374   ProgramStateRef trueState = nullptr, falseState = nullptr;
  398   ProgramStateRef state = C.getState();
  399   ProgramStateRef trueState = nullptr, falseState = nullptr;
tools/clang/lib/StaticAnalyzer/Checkers/VLASizeChecker.cpp
   36   void reportBug(VLASize_Kind Kind, const Expr *SizeE, ProgramStateRef State,
   46     VLASize_Kind Kind, const Expr *SizeE, ProgramStateRef State,
   97   ProgramStateRef state = C.getState();
  120   ProgramStateRef stateNotZero, stateZero;
  145     ProgramStateRef StatePos, StateNeg;
tools/clang/lib/StaticAnalyzer/Checkers/ValistChecker.cpp
  188   ProgramStateRef State = C.getState();
  205   ProgramStateRef State = C.getState();
  232     ProgramStateRef State = N->getState();
  316   ProgramStateRef State = C.getState();
  373   ProgramStateRef State = C.getState();
  380   ProgramStateRef State = N->getState();
  381   ProgramStateRef StatePrev = N->getFirstPred()->getState();
tools/clang/lib/StaticAnalyzer/Checkers/VforkChecker.cpp
   50   static bool isChildProcess(const ProgramStateRef State);
   78 bool VforkChecker::isChildProcess(const ProgramStateRef State) {
  146   ProgramStateRef State = C.getState();
  174   ProgramStateRef ParentState, ChildState;
  184   ProgramStateRef State = C.getState();
  193   ProgramStateRef State = C.getState();
  210   ProgramStateRef State = C.getState();
tools/clang/lib/StaticAnalyzer/Checkers/VirtualCallChecker.cpp
  107   ProgramStateRef State = C.getState();
  171   ProgramStateRef State = C.getState();
tools/clang/lib/StaticAnalyzer/Core/BugReporterVisitors.cpp
  185   ProgramStateRef State = N->getState();
  268   ProgramStateRef State = N->getState();
  550   ProgramStateRef State = N->getState();
  620   ProgramStateRef LastReturnState = N->getState();
  626     ProgramStateRef State = N->getState();
  854     ProgramStateRef State = N->getState();
  981     ProgramStateRef State = Node->getState();
 1020     ProgramStateRef State = N->getState();
 1151     ProgramStateRef State = N->getState();
 1481         ProgramStateRef State = StoreSite->getState();
 1947   ProgramStateRef LVState = LVNode->getState();
 2086     ProgramStateRef state = N->getState();
 2252   ProgramStateRef CurrentState = N->getState();
 2253   ProgramStateRef PrevState = N->getFirstPred()->getState();
 2765   ProgramStateRef State = N->getState();
tools/clang/lib/StaticAnalyzer/Core/CallEvent.cpp
  286 ProgramStateRef CallEvent::invalidateRegions(unsigned BlockCount,
  287                                              ProgramStateRef Orig) const {
  288   ProgramStateRef Result = (Orig ? Orig : getState());
 1359 CallEventManager::getSimpleCall(const CallExpr *CE, ProgramStateRef State,
 1381                             ProgramStateRef State) {
 1430 CallEventRef<> CallEventManager::getCall(const Stmt *S, ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Core/CheckerContext.cpp
  102                            SVal RHSVal, ProgramStateRef State) {
  118   ProgramStateRef StTrue, StFalse;
tools/clang/lib/StaticAnalyzer/Core/CheckerManager.cpp
  543 void CheckerManager::runCheckersForLiveSymbols(ProgramStateRef state,
  595 ProgramStateRef
  596 CheckerManager::runCheckersForRegionChanges(ProgramStateRef state,
  614 ProgramStateRef
  615 CheckerManager::runCheckersForPointerEscape(ProgramStateRef State,
  635 ProgramStateRef
  636 CheckerManager::runCheckersForEvalAssume(ProgramStateRef state,
  705                                                   ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Core/ConstraintManager.cpp
   25 static DefinedSVal getLocFromSymbol(const ProgramStateRef &State,
   32 ConditionTruthVal ConstraintManager::checkNull(ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Core/CoreEngine.cpp
   81                                    ProgramStateRef InitState) {
  199                                                  ProgramStateRef InitState,
  497                               ProgramStateRef State,
  606                                             ProgramStateRef State,
  634 ExplodedNode *BranchNodeBuilder::generateNode(ProgramStateRef State,
  649                                       ProgramStateRef St,
  668                                         ProgramStateRef St) {
  682 SwitchNodeBuilder::generateDefaultCaseNode(ProgramStateRef St,
tools/clang/lib/StaticAnalyzer/Core/DynamicType.cpp
   40 DynamicTypeInfo getDynamicTypeInfo(ProgramStateRef State, const MemRegion *MR) {
   59 const DynamicTypeInfo *getRawDynamicTypeInfo(ProgramStateRef State,
   64 const DynamicCastInfo *getDynamicCastInfo(ProgramStateRef State,
   79 ProgramStateRef setDynamicTypeInfo(ProgramStateRef State, const MemRegion *MR,
   79 ProgramStateRef setDynamicTypeInfo(ProgramStateRef State, const MemRegion *MR,
   86 ProgramStateRef setDynamicTypeInfo(ProgramStateRef State, const MemRegion *MR,
   86 ProgramStateRef setDynamicTypeInfo(ProgramStateRef State, const MemRegion *MR,
   91 ProgramStateRef setDynamicTypeAndCastInfo(ProgramStateRef State,
   91 ProgramStateRef setDynamicTypeAndCastInfo(ProgramStateRef State,
  122 ProgramStateRef removeDead(ProgramStateRef State, const MapTy &Map,
  122 ProgramStateRef removeDead(ProgramStateRef State, const MapTy &Map,
  131 ProgramStateRef removeDeadTypes(ProgramStateRef State, SymbolReaper &SR) {
  131 ProgramStateRef removeDeadTypes(ProgramStateRef State, SymbolReaper &SR) {
  135 ProgramStateRef removeDeadCasts(ProgramStateRef State, SymbolReaper &SR) {
  135 ProgramStateRef removeDeadCasts(ProgramStateRef State, SymbolReaper &SR) {
  139 static void printDynamicTypesJson(raw_ostream &Out, ProgramStateRef State,
  175 static void printDynamicCastsJson(raw_ostream &Out, ProgramStateRef State,
  222 void printDynamicTypeInfoJson(raw_ostream &Out, ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Core/Environment.cpp
  172                                        ProgramStateRef ST) {
tools/clang/lib/StaticAnalyzer/Core/ExplodedGraph.cpp
  116   ProgramStateRef state = node->getState();
  117   ProgramStateRef pred_state = pred->getState();
  396                                      ProgramStateRef State,
  434                                                 ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Core/ExprEngine.cpp
  232 ProgramStateRef ExprEngine::getInitialState(const LocationContext *InitLoc) {
  233   ProgramStateRef state = StateMgr.getInitialState(InitLoc);
  268       if (ProgramStateRef newState = state->assume(*Constraint, true))
  309 ProgramStateRef ExprEngine::createTemporaryRegionIfNeeded(
  310     ProgramStateRef State, const LocationContext *LC,
  460 ProgramStateRef
  461 ExprEngine::addObjectUnderConstruction(ProgramStateRef State,
  474 ExprEngine::getObjectUnderConstruction(ProgramStateRef State,
  481 ProgramStateRef
  482 ExprEngine::finishObjectConstruction(ProgramStateRef State,
  490 ProgramStateRef ExprEngine::elideDestructor(ProgramStateRef State,
  490 ProgramStateRef ExprEngine::elideDestructor(ProgramStateRef State,
  499 ProgramStateRef
  500 ExprEngine::cleanupElidedDestructor(ProgramStateRef State,
  508 bool ExprEngine::isDestructorElided(ProgramStateRef State,
  515 bool ExprEngine::areAllObjectsFullyConstructed(ProgramStateRef State,
  537 ProgramStateRef ExprEngine::processAssume(ProgramStateRef state,
  537 ProgramStateRef ExprEngine::processAssume(ProgramStateRef state,
  542 ProgramStateRef
  543 ExprEngine::processRegionChanges(ProgramStateRef state,
  555 printObjectsUnderConstructionJson(raw_ostream &Out, ProgramStateRef State,
  601 void ExprEngine::printJson(raw_ostream &Out, ProgramStateRef State,
  705   ProgramStateRef CleanedState = Pred->getState();
  747     ProgramStateRef CheckerState = I->getState();
  762     ProgramStateRef CleanedCheckerSt =
  805   ProgramStateRef NewState = Pred->getState();
  830   ProgramStateRef State = Pred->getState();
  896     ProgramStateRef State = I->getState();
  956   ProgramStateRef state = Pred->getState();
  987   ProgramStateRef State = Pred->getState();
 1048   ProgramStateRef State = Pred->getState();
 1072   ProgramStateRef State = Pred->getState();
 1136   ProgramStateRef State = Pred->getState();
 1161     ProgramStateRef State = Node->getState();
 1174 ProgramStateRef ExprEngine::escapeValue(ProgramStateRef State, SVal V,
 1174 ProgramStateRef ExprEngine::escapeValue(ProgramStateRef State, SVal V,
 1180     explicit CollectReachableSymbolsCallback(ProgramStateRef) {}
 1323       ProgramStateRef state = Pred->getState();
 1439         ProgramStateRef State = I->getState();
 1474         ProgramStateRef State = N->getState()->BindExpr(Ex, LCtx, result);
 1539         ProgramStateRef state = Pred->getState();
 1570           ProgramStateRef State = Pred->getState();
 1572           ProgramStateRef NewState =
 1802         ProgramStateRef state = Pred->getState();
 1827       ProgramStateRef state = Pred->getState();
 1887   ProgramStateRef NewNodeState = BeforeProcessingCall->getState();
 1919       ProgramStateRef NewState = updateLoopStack(Term, AMgr.getASTContext(),
 1944     ProgramStateRef WidenedState =
 1990 static SVal RecoverCastedSymbol(ProgramStateRef state,
 2127     ProgramStateRef PrevState = PredI->getState();
 2158     ProgramStateRef StTrue, StFalse;
 2195   ProgramStateRef state = Pred->getState();
 2212   ProgramStateRef state = builder.getState();
 2265   ProgramStateRef State = Pred->getState();
 2339   ProgramStateRef state = builder.getState();
 2352   ProgramStateRef DefaultSt = state;
 2375     ProgramStateRef StateCase;
 2424   ProgramStateRef state = Pred->getState();
 2532     ProgramStateRef state = Node->getState();
 2580       ProgramStateRef state = I->getState();
 2653     ProgramStateRef State = I->getState();
 2685 ProgramStateRef
 2686 ExprEngine::processPointerEscapedOnBind(ProgramStateRef State, SVal Loc,
 2714 ProgramStateRef
 2715 ExprEngine::notifyCheckersOfPointerEscape(ProgramStateRef State,
 2780     ProgramStateRef state = Pred->getState();
 2787     ProgramStateRef state = PredI->getState();
 2819                              ProgramStateRef state, SVal location, SVal Val,
 2843                           ProgramStateRef state,
 2881                               ProgramStateRef state,
 2937     ProgramStateRef state = Pred->getState();
 2944       ProgramStateRef StateTrue, StateFalse;
 2974   ProgramStateRef state = Pred->getState();
 3058     ProgramStateRef State = N->getState();
tools/clang/lib/StaticAnalyzer/Core/ExprEngineC.cpp
   56     ProgramStateRef state = (*it)->getState();
  207   ProgramStateRef State = Pred->getState();
  259 ProgramStateRef ExprEngine::handleLValueBitCast(
  260     ProgramStateRef state, const Expr* Ex, const LocationContext* LCtx,
  285 ProgramStateRef ExprEngine::handleLVectorSplat(
  286     ProgramStateRef state, const LocationContext* LCtx, const CastExpr* CastE,
  311       ProgramStateRef state = subExprNode->getState();
  330     ProgramStateRef state = Pred->getState();
  357         ProgramStateRef state = Pred->getState();
  554   ProgramStateRef State = Pred->getState();
  594     ProgramStateRef state = N->getState();
  659   ProgramStateRef state = Pred->getState();
  737   ProgramStateRef state = Pred->getState();
  789   ProgramStateRef state = Pred->getState();
  794   ProgramStateRef SrcState = state;
  897     ProgramStateRef state = (*I)->getState();
  918   ProgramStateRef state = (*I)->getState();
  954       ProgramStateRef state = (*I)->getState();
  969       ProgramStateRef state = (*I)->getState();
  983           ProgramStateRef State = (*I)->getState();
 1008       ProgramStateRef state = (*I)->getState();
 1068   ProgramStateRef state = Pred->getState();
tools/clang/lib/StaticAnalyzer/Core/ExprEngineCXX.cpp
   31   ProgramStateRef state = Pred->getState();
   88     ProgramStateRef State = (*I)->getState();
   98 SVal ExprEngine::makeZeroElementRegion(ProgramStateRef State, SVal LValue,
  112 std::pair<ProgramStateRef, SVal> ExprEngine::prepareForObjectConstruction(
  113     const Expr *E, ProgramStateRef State, const LocationContext *LCtx,
  247       ProgramStateRef PreElideState = State;
  399   ProgramStateRef State = Pred->getState();
  511       ProgramStateRef State = (*I)->getState();
  610   ProgramStateRef State = Pred->getState();
  671   ProgramStateRef State = Pred->getState();
  706     ProgramStateRef State = I->getState();
  752   ProgramStateRef State = Pred->getState();
  850   ProgramStateRef state = Pred->getState();
  866   ProgramStateRef state = Pred->getState();
  884   ProgramStateRef state = Pred->getState();
  898   ProgramStateRef State = Pred->getState();
tools/clang/lib/StaticAnalyzer/Core/ExprEngineCallAndReturn.cpp
   56   ProgramStateRef state = Pred->getState();
  213   ProgramStateRef state = CEBNode->getState();
  308     ProgramStateRef CEEState = (*I == CEBNode) ? state : (*I)->getState();
  432                             ProgramStateRef State) {
  484 static ProgramStateRef getInlineFailedState(ProgramStateRef State,
  484 static ProgramStateRef getInlineFailedState(ProgramStateRef State,
  524 ProgramStateRef ExprEngine::finishArgumentConstruction(ProgramStateRef State,
  524 ProgramStateRef ExprEngine::finishArgumentConstruction(ProgramStateRef State,
  552   ProgramStateRef State = Pred->getState();
  553   ProgramStateRef CleanedState = finishArgumentConstruction(State, Call);
  600 ProgramStateRef ExprEngine::bindReturnValue(const CallEvent &Call,
  602                                             ProgramStateRef State) {
  674                                       ProgramStateRef State) {
 1006   ProgramStateRef State = Pred->getState();
 1020   ProgramStateRef InlinedFailedState = getInlineFailedState(State, E);
 1062   ProgramStateRef State = Pred->getState();
 1079   ProgramStateRef IState =
 1084   ProgramStateRef NoIState =
tools/clang/lib/StaticAnalyzer/Core/ExprEngineObjC.cpp
   24   ProgramStateRef state = Pred->getState();
   53     ProgramStateRef state = Pred->getState();
   59     ProgramStateRef nextState = state->BindExpr(S, LCtx, hasElementsV);
  116   ProgramStateRef state = Pred->getState();
  192       ProgramStateRef State = Pred->getState();
  194       ProgramStateRef notNilState, nilState;
  247     ProgramStateRef State = Pred->getState();
tools/clang/lib/StaticAnalyzer/Core/LoopUnrolling.cpp
   75 ProgramStateRef processLoopEnd(const Stmt *LoopStmt, ProgramStateRef State) {
   75 ProgramStateRef processLoopEnd(const Stmt *LoopStmt, ProgramStateRef State) {
  251 ProgramStateRef updateLoopStack(const Stmt *LoopStmt, ASTContext &ASTCtx,
  288 bool isUnrolledState(ProgramStateRef State) {
tools/clang/lib/StaticAnalyzer/Core/LoopWidening.cpp
   44 ProgramStateRef getWidenedLoopState(ProgramStateRef PrevState,
   44 ProgramStateRef getWidenedLoopState(ProgramStateRef PrevState,
tools/clang/lib/StaticAnalyzer/Core/ProgramState.cpp
   94 ProgramStateRef
   95 ProgramStateManager::removeDeadBindings(ProgramStateRef state,
  115   ProgramStateRef Result = getPersistentState(NewState);
  119 ProgramStateRef ProgramState::bindLoc(Loc LV,
  124   ProgramStateRef newState = makeWithStore(Mgr.StoreMgr->Bind(getStore(),
  133 ProgramStateRef
  139   ProgramStateRef new_state = makeWithStore(newStore);
  143 ProgramStateRef
  148   ProgramStateRef new_state = makeWithStore(newStore);
  155 ProgramStateRef
  172 ProgramStateRef
  185 ProgramStateRef
  211   ProgramStateRef newState = makeWithStore(newStore);
  224 ProgramStateRef ProgramState::killBinding(Loc LV) const {
  237 ProgramStateRef
  302 ProgramStateRef ProgramState::BindExpr(const Stmt *S,
  316 ProgramStateRef ProgramState::assumeInBound(DefinedOrUnknownSVal Idx,
  386 ProgramStateRef ProgramStateManager::getInitialState(const LocationContext *InitLoc) {
  395 ProgramStateRef ProgramStateManager::getPersistentStateWithGDM(
  396                                                      ProgramStateRef FromState,
  397                                                      ProgramStateRef GDMState) {
  403 ProgramStateRef ProgramStateManager::getPersistentState(ProgramState &State) {
  425 ProgramStateRef ProgramState::makeWithStore(const StoreRef &store) const {
  506 ProgramStateRef ProgramStateManager::addGDM(ProgramStateRef St, void *Key, void *Data){
  506 ProgramStateRef ProgramStateManager::addGDM(ProgramStateRef St, void *Key, void *Data){
  518 ProgramStateRef ProgramStateManager::removeGDM(ProgramStateRef state, void *Key) {
  518 ProgramStateRef ProgramStateManager::removeGDM(ProgramStateRef state, void *Key) {
tools/clang/lib/StaticAnalyzer/Core/RangeConstraintManager.cpp
  250   bool haveEqualConstraints(ProgramStateRef S1,
  251                             ProgramStateRef S2) const override {
  257   ConditionTruthVal checkNull(ProgramStateRef State, SymbolRef Sym) override;
  259   const llvm::APSInt *getSymVal(ProgramStateRef State,
  262   ProgramStateRef removeDeadBindings(ProgramStateRef State,
  262   ProgramStateRef removeDeadBindings(ProgramStateRef State,
  265   void printJson(raw_ostream &Out, ProgramStateRef State, const char *NL = "\n",
  272   ProgramStateRef assumeSymNE(ProgramStateRef State, SymbolRef Sym,
  272   ProgramStateRef assumeSymNE(ProgramStateRef State, SymbolRef Sym,
  276   ProgramStateRef assumeSymEQ(ProgramStateRef State, SymbolRef Sym,
  276   ProgramStateRef assumeSymEQ(ProgramStateRef State, SymbolRef Sym,
  280   ProgramStateRef assumeSymLT(ProgramStateRef State, SymbolRef Sym,
  280   ProgramStateRef assumeSymLT(ProgramStateRef State, SymbolRef Sym,
  284   ProgramStateRef assumeSymGT(ProgramStateRef State, SymbolRef Sym,
  284   ProgramStateRef assumeSymGT(ProgramStateRef State, SymbolRef Sym,
  288   ProgramStateRef assumeSymLE(ProgramStateRef State, SymbolRef Sym,
  288   ProgramStateRef assumeSymLE(ProgramStateRef State, SymbolRef Sym,
  292   ProgramStateRef assumeSymGE(ProgramStateRef State, SymbolRef Sym,
  292   ProgramStateRef assumeSymGE(ProgramStateRef State, SymbolRef Sym,
  296   ProgramStateRef assumeSymWithinInclusiveRange(
  297       ProgramStateRef State, SymbolRef Sym, const llvm::APSInt &From,
  300   ProgramStateRef assumeSymOutsideInclusiveRange(
  301       ProgramStateRef State, SymbolRef Sym, const llvm::APSInt &From,
  307   RangeSet getRange(ProgramStateRef State, SymbolRef Sym);
  308   const RangeSet* getRangeForMinusSymbol(ProgramStateRef State,
  311   RangeSet getSymLTRange(ProgramStateRef St, SymbolRef Sym,
  314   RangeSet getSymGTRange(ProgramStateRef St, SymbolRef Sym,
  317   RangeSet getSymLERange(ProgramStateRef St, SymbolRef Sym,
  323   RangeSet getSymGERange(ProgramStateRef St, SymbolRef Sym,
  382 ConditionTruthVal RangeConstraintManager::checkNull(ProgramStateRef State,
  406 const llvm::APSInt *RangeConstraintManager::getSymVal(ProgramStateRef St,
  414 ProgramStateRef
  415 RangeConstraintManager::removeDeadBindings(ProgramStateRef State,
  479 RangeSet RangeConstraintManager::getRange(ProgramStateRef State,
  521 RangeConstraintManager::getRangeForMinusSymbol(ProgramStateRef State,
  553 ProgramStateRef
  554 RangeConstraintManager::assumeSymNE(ProgramStateRef St, SymbolRef Sym,
  573 ProgramStateRef
  574 RangeConstraintManager::assumeSymEQ(ProgramStateRef St, SymbolRef Sym,
  588 RangeSet RangeConstraintManager::getSymLTRange(ProgramStateRef St,
  616 ProgramStateRef
  617 RangeConstraintManager::assumeSymLT(ProgramStateRef St, SymbolRef Sym,
  624 RangeSet RangeConstraintManager::getSymGTRange(ProgramStateRef St,
  652 ProgramStateRef
  653 RangeConstraintManager::assumeSymGT(ProgramStateRef St, SymbolRef Sym,
  660 RangeSet RangeConstraintManager::getSymGERange(ProgramStateRef St,
  688 ProgramStateRef
  689 RangeConstraintManager::assumeSymGE(ProgramStateRef St, SymbolRef Sym,
  724 RangeSet RangeConstraintManager::getSymLERange(ProgramStateRef St,
  731 ProgramStateRef
  732 RangeConstraintManager::assumeSymLE(ProgramStateRef St, SymbolRef Sym,
  739 ProgramStateRef RangeConstraintManager::assumeSymWithinInclusiveRange(
  740     ProgramStateRef State, SymbolRef Sym, const llvm::APSInt &From,
  749 ProgramStateRef RangeConstraintManager::assumeSymOutsideInclusiveRange(
  750     ProgramStateRef State, SymbolRef Sym, const llvm::APSInt &From,
  762 void RangeConstraintManager::printJson(raw_ostream &Out, ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Core/RangedConstraintManager.cpp
   23 ProgramStateRef RangedConstraintManager::assumeSym(ProgramStateRef State,
   23 ProgramStateRef RangedConstraintManager::assumeSym(ProgramStateRef State,
   73 ProgramStateRef RangedConstraintManager::assumeSymInclusiveRange(
   74     ProgramStateRef State, SymbolRef Sym, const llvm::APSInt &From,
  101 ProgramStateRef
  102 RangedConstraintManager::assumeSymUnsupported(ProgramStateRef State,
  119 ProgramStateRef RangedConstraintManager::assumeSymRel(ProgramStateRef State,
  119 ProgramStateRef RangedConstraintManager::assumeSymRel(ProgramStateRef State,
tools/clang/lib/StaticAnalyzer/Core/RegionStore.cpp
  629   DefinedOrUnknownSVal getSizeInElements(ProgramStateRef state,
 1394 RegionStoreManager::getSizeInElements(ProgramStateRef state,
tools/clang/lib/StaticAnalyzer/Core/SValBuilder.cpp
  404 SVal SValBuilder::evalBinOp(ProgramStateRef state, BinaryOperator::Opcode op,
  437 ConditionTruthVal SValBuilder::areEqual(ProgramStateRef state, SVal lhs,
  442 SVal SValBuilder::evalEQ(ProgramStateRef state, SVal lhs, SVal rhs) {
  446 DefinedOrUnknownSVal SValBuilder::evalEQ(ProgramStateRef state,
  489 SVal SValBuilder::evalIntegralCast(ProgramStateRef state, SVal val,
  514   ProgramStateRef IsNotTruncated, IsTruncated;
tools/clang/lib/StaticAnalyzer/Core/SimpleConstraintManager.cpp
   25 ProgramStateRef SimpleConstraintManager::assume(ProgramStateRef State,
   25 ProgramStateRef SimpleConstraintManager::assume(ProgramStateRef State,
   44 ProgramStateRef SimpleConstraintManager::assume(ProgramStateRef State,
   44 ProgramStateRef SimpleConstraintManager::assume(ProgramStateRef State,
   52 ProgramStateRef SimpleConstraintManager::assumeAux(ProgramStateRef State,
   52 ProgramStateRef SimpleConstraintManager::assumeAux(ProgramStateRef State,
   94 ProgramStateRef SimpleConstraintManager::assumeInclusiveRange(
   95     ProgramStateRef State, NonLoc Value, const llvm::APSInt &From,
tools/clang/lib/StaticAnalyzer/Core/SimpleSValBuilder.cpp
   38   SVal evalBinOpNN(ProgramStateRef state, BinaryOperator::Opcode op,
   40   SVal evalBinOpLL(ProgramStateRef state, BinaryOperator::Opcode op,
   42   SVal evalBinOpLN(ProgramStateRef state, BinaryOperator::Opcode op,
   47   const llvm::APSInt *getKnownValue(ProgramStateRef state, SVal V) override;
   51   SVal simplifySVal(ProgramStateRef State, SVal V) override;
  314                          llvm::APSInt Bound, ProgramStateRef State) {
  331                                            ProgramStateRef State) {
  371 static NonLoc doRearrangeUnchecked(ProgramStateRef State,
  438 static bool shouldRearrange(ProgramStateRef State, BinaryOperator::Opcode Op,
  446 static Optional<NonLoc> tryRearrange(ProgramStateRef State,
  504 SVal SimpleSValBuilder::evalBinOpNN(ProgramStateRef state,
  821 SVal SimpleSValBuilder::evalBinOpLL(ProgramStateRef state,
 1103 SVal SimpleSValBuilder::evalBinOpLN(ProgramStateRef state,
 1210 const llvm::APSInt *SimpleSValBuilder::getKnownValue(ProgramStateRef state,
 1229 SVal SimpleSValBuilder::simplifySVal(ProgramStateRef State, SVal V) {
 1235     ProgramStateRef State;
 1258     Simplifier(ProgramStateRef State)
tools/clang/unittests/StaticAnalyzer/CallDescriptionTest.cpp
   62     ProgramStateRef State = Eng.getInitialState(SFC);