Lines Matching refs:State
159 ProgramStateRef State,
161 return (State->isTainted(E, C.getLocationContext()) || isStdin(E, C) ||
163 State->isTainted(getPointedToSymbol(C, E))));
294 ProgramStateRef State = nullptr;
307 State = Rule.process(CE, C);
308 if (!State)
310 C.addTransition(State);
320 State = (this->*evalFunction)(CE, C);
321 if (!State)
323 C.addTransition(State);
329 ProgramStateRef State = C.getState();
333 // stored in the state as TaintArgsOnPostVisit set.
334 TaintArgsOnPostVisitTy TaintArgs = State->get<TaintArgsOnPostVisit>();
344 State = State->addTaint(CE, C.getLocationContext());
355 State = State->addTaint(Sym);
358 // Clear up the taint info from the state.
359 State = State->remove<TaintArgsOnPostVisit>();
361 if (State != C.getState()) {
362 C.addTransition(State);
395 ProgramStateRef State = nullptr;
397 State = (this->*evalFunction)(CE, C);
398 if (!State)
401 C.addTransition(State);
428 ProgramStateRef State = C.getState();
429 SVal AddrVal = State->getSVal(Arg->IgnoreParens(), C.getLocationContext());
439 SVal Val = State->getSVal(*AddrLoc,
447 ProgramStateRef State = C.getState();
461 if ((IsTainted = isTaintedOrPointsToTainted(CE->getArg(i), State, C)))
468 return State;
469 if ((IsTainted = isTaintedOrPointsToTainted(CE->getArg(ArgNum), State, C)))
473 return State;
493 State = State->add<TaintArgsOnPostVisit>(i);
500 State = State->add<TaintArgsOnPostVisit>(ReturnValueIndex);
506 State = State->add<TaintArgsOnPostVisit>(ArgNum);
509 return State;
518 ProgramStateRef State = C.getState();
521 if (State->isTainted(CE->getArg(0), C.getLocationContext()) ||
525 State = State->add<TaintArgsOnPostVisit>(i);
526 return State;
536 ProgramStateRef State = C.getState();
538 return State;
545 return State;
546 State = State->addTaint(CE, C.getLocationContext());
547 return State;
552 ProgramStateRef State = C.getState();
554 return State;
563 State = State->addTaint(Sym);
565 return State;
574 ProgramStateRef State = C.getState();
575 SVal Val = State->getSVal(E, C.getLocationContext());
637 ProgramStateRef State = C.getState();
638 if (!State->isTainted(getPointedToSymbol(C, E)) &&
639 !State->isTainted(E, C.getLocationContext()))