StaticAnalyzer/Checkers/VLASizeChecker.cpp

54                                     const Expr *SizeE) const;
56   void reportBug(VLASize_Kind Kind, const Expr *SizeE, ProgramStateRef State,
84     const Expr *SizeE = VLA->getSizeExpr();
85     State = checkVLAIndexSize(C, State, SizeE);
88     VLASizes.push_back(SizeE);
111   for (const Expr *SizeE : VLASizes) {
112     auto SizeD = C.getSVal(SizeE).castAs<DefinedSVal>();
115         SVB.evalCast(SizeD, SizeTy, SizeE->getType()).castAs<NonLoc>();
139         reportBug(VLA_Overflow, SizeE, State, C);
154                                                   const Expr *SizeE) const {
155   SVal SizeV = C.getSVal(SizeE);
158     reportBug(VLA_Garbage, SizeE, State, C);
169     reportBug(VLA_Tainted, SizeE, nullptr, C,
181     reportBug(VLA_Zero, SizeE, StateZero, C);
191   QualType SizeTy = SizeE->getType();
202       reportBug(VLA_Negative, SizeE, State, C);
212     VLASize_Kind Kind, const Expr *SizeE, ProgramStateRef State,
246   report->addRange(SizeE->getSourceRange());
247   bugreporter::trackExpressionValue(N, SizeE, *report);