Predicate hasSize
Holds if the (n, state)
pair represents the source of flow for the size
expression associated with alloc
.
Import path
import semmle.code.cpp.security.InvalidPointerDereference.AllocationToInvalidPointer
predicate hasSize(HeuristicAllocationExpr alloc, Node n, int state)