Cross Reference: /external/clang/lib/StaticAnalyzer/Checkers/MallocChecker.cpp

Lines Matching refs:CE
180   void checkPostStmt(const CallExpr *CE, CheckerContext &C) const;
245                                        const CallExpr *CE,
247   static ProgramStateRef MallocMemAux(CheckerContext &C, const CallExpr *CE,
251     return MallocMemAux(C, CE,
256   static ProgramStateRef MallocMemAux(CheckerContext &C, const CallExpr *CE,
264   performKernelMalloc(const CallExpr *CE, CheckerContext &C,
272   ProgramStateRef FreeMemAttr(CheckerContext &C, const CallExpr *CE,
274   ProgramStateRef FreeMemAux(CheckerContext &C, const CallExpr *CE,
286   ProgramStateRef ReallocMem(CheckerContext &C, const CallExpr *CE,
288   static ProgramStateRef CallocMem(CheckerContext &C, const CallExpr *CE);
588   const CallExpr *CE, CheckerContext &C, const ProgramStateRef &State) const {
630   if (CE->getNumArgs() < 2)
633   const Expr *FlagsEx = CE->getArg(CE->getNumArgs() - 1);
659     return MallocMemAux(C, CE, CE->getArg(0), ZeroVal, TrueState);
665 void MallocChecker::checkPostStmt(const CallExpr *CE, CheckerContext &C) const {
669   const FunctionDecl *FD = C.getCalleeDecl(CE);
681       if (CE->getNumArgs() < 1)
683       if (CE->getNumArgs() < 3) {
684         State = MallocMemAux(C, CE, CE->getArg(0), UndefinedVal(), State);
685       } else if (CE->getNumArgs() == 3) {
687           performKernelMalloc(CE, C, State);
691           State = MallocMemAux(C, CE, CE->getArg(0), UndefinedVal(), State);
695         performKernelMalloc(CE, C, State);
699         State = MallocMemAux(C, CE, CE->getArg(0), UndefinedVal(), State);
701       if (CE->getNumArgs() < 1)
703       State = MallocMemAux(C, CE, CE->getArg(0), UndefinedVal(), State);
705       State = ReallocMem(C, CE, false);
707       State = ReallocMem(C, CE, true);
709       State = CallocMem(C, CE);
711       State = FreeMemAux(C, CE, State, 0, false, ReleasedAllocatedMemory);
713       State = MallocUpdateRefState(C, CE, State);
715       State = MallocUpdateRefState(C, CE, State);
724         State = MallocMemAux(C, CE, CE->getArg(0), UndefinedVal(), State,
727         State = MallocMemAux(C, CE, CE->getArg(0), UndefinedVal(), State,
730         State = FreeMemAux(C, CE, State, 0, false, ReleasedAllocatedMemory);
744           State = MallocMemReturnsAttr(C, CE, I);
748           State = FreeMemAttr(C, CE, I);
844 MallocChecker::MallocMemReturnsAttr(CheckerContext &C, const CallExpr *CE,
851     return MallocMemAux(C, CE, CE->getArg(*I), UndefinedVal(), C.getState());
853   return MallocMemAux(C, CE, UnknownVal(), UndefinedVal(), C.getState());
857                                            const CallExpr *CE,
868   DefinedSVal RetVal = svalBuilder.getConjuredHeapSymbolVal(CE, LCtx, Count)
870   State = State->BindExpr(CE, C.getLocationContext(), RetVal);
895   return MallocUpdateRefState(C, CE, State, Family);
917                                            const CallExpr *CE,
926     ProgramStateRef StateI = FreeMemAux(C, CE, State, Arg,
936                                           const CallExpr *CE,
942   if (CE->getNumArgs() < (Num + 1))
945   return FreeMemAux(C, CE->getArg(Num), CE, state, Hold,
969   if (const CallExpr *CE = dyn_cast<CallExpr>(S)) {
970     const FunctionDecl *FD = C.getCalleeDecl(CE);
973       FD = dyn_cast<FunctionDecl>(CE->getCalleeDecl());
1005   if (const CallExpr *CE = dyn_cast<CallExpr>(E)) {
1007     const FunctionDecl *FD = CE->getDirectCallee();
1574                                           const CallExpr *CE,
1576   if (CE->getNumArgs() < 2)
1580   const Expr *arg0Expr = CE->getArg(0);
1593   const Expr *Arg1 = CE->getArg(1);
1620     ProgramStateRef stateMalloc = MallocMemAux(C, CE, CE->getArg(1),
1631   SVal RetVal = state->getSVal(CE, LCtx);
1640     if (ProgramStateRef stateFree = FreeMemAux(C, CE, StateSizeIsZero, 0,
1651         FreeMemAux(C, CE, state, 0, false, ReleasedAllocated)) {
1653     ProgramStateRef stateRealloc = MallocMemAux(C, CE, CE->getArg(1),
1675 ProgramStateRef MallocChecker::CallocMem(CheckerContext &C, const CallExpr *CE){
1676   if (CE->getNumArgs() < 2)
1682   SVal count = state->getSVal(CE->getArg(0), LCtx);
1683   SVal elementSize = state->getSVal(CE->getArg(1), LCtx);
1688   return MallocMemAux(C, CE, TotalSize, zeroVal, state);