Lines Matching refs:state
37 ProgramStateRef State,
46 ProgramStateRef State,
49 ExplodedNode *N = C.generateSink(State);
93 ProgramStateRef state = C.getState();
94 SVal sizeV = state->getSVal(SE, C.getLocationContext());
97 reportBug(VLA_Garbage, SE, state, C);
107 if (state->isTainted(sizeV)) {
116 llvm::tie(stateNotZero, stateZero) = state->assume(sizeD);
124 state = stateNotZero;
142 state, BO_Mul, ArrayLength, EleSizeVal.castAs<NonLoc>(), SizeTy);
147 state->getRegion(VD, LC)->getExtent(svalBuilder);
150 svalBuilder.evalEQ(state, Extent, ArraySize);
151 state = state->assume(sizeIsKnown, true);
154 assert(state);
157 C.addTransition(state);
