216 REGISTER_MAP_WITH_PROGRAMSTATE(RegionState, SymbolRef, RefState)
219 static bool isReleased(SymbolRef Sym, CheckerContext &C);
236 REGISTER_SET_WITH_PROGRAMSTATE(ReallocSizeZeroSymbols, SymbolRef)
265   SymbolRef ReallocatedSym;
268   ReallocPair(SymbolRef S, OwnershipAfterReallocKind K)  in ReallocPair()
282 REGISTER_MAP_WITH_PROGRAMSTATE(ReallocPairs, SymbolRef, ReallocPair)
468                       llvm::ArrayRef<SymbolRef> TaintedSyms,
672   bool checkUseAfterFree(SymbolRef Sym, CheckerContext &C, const Stmt *S) const;
676   void checkUseZeroAllocated(SymbolRef Sym, CheckerContext &C,
680   bool checkDoubleDelete(SymbolRef Sym, CheckerContext &C) const;
694                                    SymbolRef &EscapingSymbol) const;
713   std::optional<CheckKind> getCheckIfTracked(CheckerContext &C, SymbolRef Sym,
728                                SymbolRef Sym, bool OwnershipTransferred) const;
735                           SymbolRef Sym) const;
738                         SymbolRef Sym, SymbolRef PrevSym) const;
740   void HandleDoubleDelete(CheckerContext &C, SymbolRef Sym) const;
743                           SymbolRef Sym) const;
751   static LeakInfo getAllocationSite(const ExplodedNode *N, SymbolRef Sym,
754   void HandleLeak(SymbolRef Sym, ExplodedNode *N, CheckerContext &C) const;
831   NoMemOwnershipChangeVisitor(SymbolRef Sym, const MallocChecker *Checker)  in NoMemOwnershipChangeVisitor()
856   SymbolRef Sym;
862   SymbolRef FailedReallocSymbol;
871   MallocBugVisitor(SymbolRef S, bool isLeak = false)  in MallocBugVisitor()
949     StackHintGeneratorForReallocationFailed(SymbolRef S, StringRef M)  in StackHintGeneratorForReallocationFailed()
974 REGISTER_MAP_WITH_PROGRAMSTATE(FreeReturnValue, SymbolRef, SymbolRef)
984   bool VisitSymbol(SymbolRef sym) override {  in VisitSymbol()
1513     SymbolRef Sym = RetVal->getAsLocSymbol();  in ProcessZeroAllocCheck()
1698                                    llvm::ArrayRef<SymbolRef> TaintedSyms,  in reportTaintBug()
1718   std::vector<SymbolRef> TaintedSyms =  in checkTaintedness()
1808   SymbolRef Sym = RetVal->getAsLocSymbol();  in MallocUpdateRefState()
1868                                 SymbolRef Sym, SymbolRef &RetStatusSymbol) {  in didPreviousFreeFail()
1869   const SymbolRef *Ret = State->get<FreeReturnValue>(Sym);  in didPreviousFreeFail()
2034   SymbolRef SymBase = SrBase->getSymbol();  in FreeMemAux()
2036   SymbolRef PreviousRetStatusSymbol = nullptr;  in FreeMemAux()
2096     SymbolRef RetStatusSymbol = RetVal.getAsSymbol();  in FreeMemAux()
2155 MallocChecker::getCheckIfTracked(CheckerContext &C, SymbolRef Sym,  in getCheckIfTracked()
2333                                             const RefState *RS, SymbolRef Sym,  in HandleMismatchedDealloc()
2446                                        SymbolRef Sym) const {  in HandleUseAfterFree()
2485                                      bool Released, SymbolRef Sym,  in HandleDoubleFree()
2486                                      SymbolRef PrevSym) const {  in HandleDoubleFree()
2516 void MallocChecker::HandleDoubleDelete(CheckerContext &C, SymbolRef Sym) const {  in HandleDoubleDelete()
2543                                        SymbolRef Sym) const {  in HandleUseZeroAlloc()
2704     SymbolRef FromPtr = arg0Val.getLocSymbolInBase();  in ReallocMemAux()
2706     SymbolRef ToPtr = RetVal.getAsSymbol();  in ReallocMemAux()
2740                                                          SymbolRef Sym,  in getAllocationSite()
2780 void MallocChecker::HandleLeak(SymbolRef Sym, ExplodedNode *N,  in HandleLeak()
2853   SmallVector<SymbolRef, 2> Errors;  in checkDeadSymbols()
2894       for (SymbolRef Sym : Errors) {  in checkDeadSymbols()
2910       if (SymbolRef Sym = C.getSVal(DE->getArgument()).getAsSymbol())  in checkPreCall()
2927     SymbolRef Sym = DC->getCXXThisVal().getAsSymbol();  in checkPreCall()
2951     SymbolRef Sym = CC->getCXXThisVal().getAsSymbol();  in checkPreCall()
2960       SymbolRef Sym = ArgSVal.getAsSymbol();  in checkPreCall()
2994   SymbolRef Sym = RetVal.getAsSymbol();  in checkEscapeOnReturn()
3046 static bool isReleased(SymbolRef Sym, CheckerContext &C) {  in isReleased()
3073     if (SymbolRef Sym = C.getSVal(Arg).getAsSymbol())  in suppressDeallocationsInSuspiciousContexts()
3081 bool MallocChecker::checkUseAfterFree(SymbolRef Sym, CheckerContext &C,  in checkUseAfterFree()
3092 void MallocChecker::checkUseZeroAllocated(SymbolRef Sym, CheckerContext &C,  in checkUseZeroAllocated()
3105 bool MallocChecker::checkDoubleDelete(SymbolRef Sym, CheckerContext &C) const {  in checkDoubleDelete()
3117   SymbolRef Sym = l.getLocSymbolInBase();  in checkLocation()
3130   for (SymbolRef Sym : llvm::make_first_range(RS)) {  in evalAssume()
3148     SymbolRef ReallocSym = ReallocPair.ReallocatedSym;  in evalAssume()
3173                                               SymbolRef &EscapingSymbol) const {  in mayFreeAnyEscapedMemoryOrIsModeledExplicitly()
3362   SymbolRef EscapingSymbol = nullptr;  in checkPointerEscapeAux()
3370   for (SymbolRef sym : Escaped) {  in checkPointerEscapeAux()
3394 static SymbolRef findFailedReallocSymbol(ProgramStateRef currState,  in findFailedReallocSymbol()
3400     SymbolRef sym = Pair.first;  in findFailedReallocSymbol()
3572       if (SymbolRef sym = findFailedReallocSymbol(state, statePrev)) {  in VisitNode()
3652 markReleased(ProgramStateRef State, SymbolRef Sym, const Expr *Origin) {  in markReleased()