Lines Matching refs:State

158                                                   ProgramStateRef State,  in isTaintedOrPointsToTainted()
160 if (State->isTainted(E, C.getLocationContext()) || isStdin(E, C)) in isTaintedOrPointsToTainted()
167 return (V && State->isTainted(*V)); in isTaintedOrPointsToTainted()
297 ProgramStateRef State = nullptr; in addSourcesPre() local
310 State = Rule.process(CE, C); in addSourcesPre()
311 if (!State) in addSourcesPre()
313 C.addTransition(State); in addSourcesPre()
323 State = (this->*evalFunction)(CE, C); in addSourcesPre()
324 if (!State) in addSourcesPre()
326 C.addTransition(State); in addSourcesPre()
331 ProgramStateRef State = C.getState(); in propagateFromPre() local
336 TaintArgsOnPostVisitTy TaintArgs = State->get<TaintArgsOnPostVisit>(); in propagateFromPre()
347 State = State->addTaint(CE, C.getLocationContext()); in propagateFromPre()
358 State = State->addTaint(*V); in propagateFromPre()
362 State = State->remove<TaintArgsOnPostVisit>(); in propagateFromPre()
364 if (State != C.getState()) { in propagateFromPre()
365 C.addTransition(State); in propagateFromPre()
399 ProgramStateRef State = nullptr; in addSourcesPost() local
401 State = (this->*evalFunction)(CE, C); in addSourcesPost()
402 if (!State) in addSourcesPost()
405 C.addTransition(State); in addSourcesPost()
433 ProgramStateRef State = C.getState(); in getPointedToSVal() local
453 return State->getSVal(*AddrLoc, ValTy); in getPointedToSVal()
459 ProgramStateRef State = C.getState(); in process() local
473 if ((IsTainted = isTaintedOrPointsToTainted(CE->getArg(i), State, C))) in process()
480 return State; in process()
481 if ((IsTainted = isTaintedOrPointsToTainted(CE->getArg(ArgNum), State, C))) in process()
485 return State; in process()
505 State = State->add<TaintArgsOnPostVisit>(i); in process()
512 State = State->add<TaintArgsOnPostVisit>(ReturnValueIndex); in process()
518 State = State->add<TaintArgsOnPostVisit>(ArgNum); in process()
521 return State; in process()
529 ProgramStateRef State = C.getState(); in preFscanf() local
532 if (State->isTainted(CE->getArg(0), C.getLocationContext()) || in preFscanf()
536 State = State->add<TaintArgsOnPostVisit>(i); in preFscanf()
537 return State; in preFscanf()
546 ProgramStateRef State = C.getState(); in postSocket() local
548 return State; in postSocket()
555 return State; in postSocket()
556 State = State->addTaint(CE, C.getLocationContext()); in postSocket()
557 return State; in postSocket()
562 ProgramStateRef State = C.getState(); in postScanf() local
564 return State; in postScanf()
573 State = State->addTaint(*V); in postScanf()
575 return State; in postScanf()
584 ProgramStateRef State = C.getState(); in isStdin() local
648 ProgramStateRef State = C.getState(); in generateReportIfTainted() local
651 if (PointedToSVal && State->isTainted(*PointedToSVal)) in generateReportIfTainted()
653 else if (State->isTainted(E, C.getLocationContext())) in generateReportIfTainted()