Lines Matching defs:SizeE
52 const Expr *SizeE) const;
54 void reportBug(VLASize_Kind Kind, const Expr *SizeE, ProgramStateRef State,
57 void reportTaintBug(const Expr *SizeE, ProgramStateRef State,
84 const Expr *SizeE = VLA->getSizeExpr();
85 State = checkVLAIndexSize(C, State, SizeE);
88 VLASizes.push_back(SizeE);
111 for (const Expr *SizeE : VLASizes) {
112 auto SizeD = C.getSVal(SizeE).castAs<DefinedSVal>();
115 SVB.evalCast(SizeD, SizeTy, SizeE->getType()).castAs<NonLoc>();
139 reportBug(VLA_Overflow, SizeE, State, C);
154 const Expr *SizeE) const {
155 SVal SizeV = C.getSVal(SizeE);
158 reportBug(VLA_Garbage, SizeE, State, C);
174 reportBug(VLA_Zero, SizeE, StateZero, C);
184 QualType SizeTy = SizeE->getType();
196 reportBug(VLA_Negative, SizeE, State, C);
204 reportTaintBug(SizeE, State, C, SizeV);
211 void VLASizeChecker::reportTaintBug(const Expr *SizeE, ProgramStateRef State,
224 report->addRange(SizeE->getSourceRange());
225 bugreporter::trackExpressionValue(N, SizeE, *report);
233 void VLASizeChecker::reportBug(VLASize_Kind Kind, const Expr *SizeE,
259 report->addRange(SizeE->getSourceRange());
260 bugreporter::trackExpressionValue(N, SizeE, *report);