Home | History | Annotate | Download | only in Checkers

Lines Matching refs:ArgNum

154     inline bool isDestinationArgument(unsigned ArgNum) const {
156 DstArgs.end(), ArgNum) != DstArgs.end());
341 unsigned ArgNum = *I;
344 if (ArgNum == ReturnValueIndex) {
351 if (CE->getNumArgs() < (ArgNum + 1))
353 const Expr* Arg = CE->getArg(ArgNum);
454 unsigned ArgNum = *I;
456 if (ArgNum == InvalidArgIndex) {
468 if (CE->getNumArgs() < (ArgNum + 1))
470 if ((IsTainted = isTaintedOrPointsToTainted(CE->getArg(ArgNum), State, C)))
479 unsigned ArgNum = *I;
482 if (ArgNum == InvalidArgIndex) {
500 if (ArgNum == ReturnValueIndex) {
506 assert(ArgNum < CE->getNumArgs());
507 State = State->add<TaintArgsOnPostVisit>(ArgNum);
609 unsigned int &ArgNum) {
621 ArgNum = Format->getFormatIdx() - 1;
622 if ((Format->getType() == "printf") && CE->getNumArgs() > ArgNum)
628 ArgNum = 0;
660 unsigned int ArgNum = 0;
661 if (!getPrintfFormatArgumentNum(CE, C, ArgNum))
665 if (generateReportIfTainted(CE->getArg(ArgNum),
677 unsigned ArgNum = llvm::StringSwitch<unsigned>(Name)
690 if (ArgNum == UINT_MAX || CE->getNumArgs() < (ArgNum + 1))
693 if (generateReportIfTainted(CE->getArg(ArgNum),
705 // If the function has a buffer size argument, set ArgNum.
706 unsigned ArgNum = InvalidArgIndex;
713 ArgNum = 2;
716 ArgNum = 1;
722 if (ArgNum == InvalidArgIndex) {
726 ArgNum = 0;
728 ArgNum = 3;
730 ArgNum = 1;
732 ArgNum = 2;
735 if (ArgNum != InvalidArgIndex && CE->getNumArgs() > ArgNum &&
736 generateReportIfTainted(CE->getArg(ArgNum), MsgTaintedBufferSize, C))