reference, declaration → definition definition → references, declarations, derived classes, virtual overrides reference to multiple definitions → definitions unreferenced |
101 reportBug(VLA_Garbage, SE, state, C); 111 if (isTainted(state, sizeV)) { 121 std::tie(stateNotZero, stateZero) = state->assume(sizeD); 129 state = stateNotZero; 141 SVal LessThanZeroVal = svalBuilder.evalBinOp(state, BO_LT, sizeD, Zero, Ty); 147 std::tie(StateNeg, StatePos) = CM.assumeDual(state, *LessThanZeroDVal); 149 reportBug(VLA_Negative, SE, state, C); 152 state = StatePos; 166 state, BO_Mul, ArrayLength, EleSizeVal.castAs<NonLoc>(), SizeTy); 171 state->getRegion(VD, LC)->getExtent(svalBuilder); 174 svalBuilder.evalEQ(state, Extent, ArraySize); 175 state = state->assume(sizeIsKnown, true); 175 state = state->assume(sizeIsKnown, true); 178 assert(state); 181 C.addTransition(state);