Lines Matching refs:State
159 ProgramStateRef State, in isTaintedOrPointsToTainted()
161 return (State->isTainted(E, C.getLocationContext()) || isStdin(E, C) || in isTaintedOrPointsToTainted()
163 State->isTainted(getPointedToSymbol(C, E)))); in isTaintedOrPointsToTainted()
294 ProgramStateRef State = nullptr; in addSourcesPre() local
307 State = Rule.process(CE, C); in addSourcesPre()
308 if (!State) in addSourcesPre()
310 C.addTransition(State); in addSourcesPre()
320 State = (this->*evalFunction)(CE, C); in addSourcesPre()
321 if (!State) in addSourcesPre()
323 C.addTransition(State); in addSourcesPre()
329 ProgramStateRef State = C.getState(); in propagateFromPre() local
334 TaintArgsOnPostVisitTy TaintArgs = State->get<TaintArgsOnPostVisit>(); in propagateFromPre()
344 State = State->addTaint(CE, C.getLocationContext()); in propagateFromPre()
355 State = State->addTaint(Sym); in propagateFromPre()
359 State = State->remove<TaintArgsOnPostVisit>(); in propagateFromPre()
361 if (State != C.getState()) { in propagateFromPre()
362 C.addTransition(State); in propagateFromPre()
395 ProgramStateRef State = nullptr; in addSourcesPost() local
397 State = (this->*evalFunction)(CE, C); in addSourcesPost()
398 if (!State) in addSourcesPost()
401 C.addTransition(State); in addSourcesPost()
428 ProgramStateRef State = C.getState(); in getPointedToSymbol() local
429 SVal AddrVal = State->getSVal(Arg->IgnoreParens(), C.getLocationContext()); in getPointedToSymbol()
439 SVal Val = State->getSVal(*AddrLoc, in getPointedToSymbol()
447 ProgramStateRef State = C.getState(); in process() local
461 if ((IsTainted = isTaintedOrPointsToTainted(CE->getArg(i), State, C))) in process()
468 return State; in process()
469 if ((IsTainted = isTaintedOrPointsToTainted(CE->getArg(ArgNum), State, C))) in process()
473 return State; in process()
493 State = State->add<TaintArgsOnPostVisit>(i); in process()
500 State = State->add<TaintArgsOnPostVisit>(ReturnValueIndex); in process()
506 State = State->add<TaintArgsOnPostVisit>(ArgNum); in process()
509 return State; in process()
518 ProgramStateRef State = C.getState(); in preFscanf() local
521 if (State->isTainted(CE->getArg(0), C.getLocationContext()) || in preFscanf()
525 State = State->add<TaintArgsOnPostVisit>(i); in preFscanf()
526 return State; in preFscanf()
536 ProgramStateRef State = C.getState(); in postSocket() local
538 return State; in postSocket()
545 return State; in postSocket()
546 State = State->addTaint(CE, C.getLocationContext()); in postSocket()
547 return State; in postSocket()
552 ProgramStateRef State = C.getState(); in postScanf() local
554 return State; in postScanf()
563 State = State->addTaint(Sym); in postScanf()
565 return State; in postScanf()
574 ProgramStateRef State = C.getState(); in isStdin() local
575 SVal Val = State->getSVal(E, C.getLocationContext()); in isStdin()
637 ProgramStateRef State = C.getState(); in generateReportIfTainted() local
638 if (!State->isTainted(getPointedToSymbol(C, E)) && in generateReportIfTainted()
639 !State->isTainted(E, C.getLocationContext())) in generateReportIfTainted()