Autoformat, address review.

Author: criemen

cpp/ql/src/experimental/semmle/code/cpp/rangeanalysis/ArrayLengthAnalysis.qll

@@ -124,7 +124,7 @@ private int getBaseSizeForPointerType(PointerType type) { result = type.getBaseT
  * steps to `array` that points to `offset + offsetDelta` in one step.
  * This predicate does not contain any recursive steps.
  */
-bindingset[prevOffset,prevOffsetDelta]
+bindingset[prevOffset, prevOffsetDelta]
 predicate simpleArrayLengthStep(
   Instruction array, Offset offset, int offsetDelta, Instruction prev, Offset prevOffset,
   int prevOffsetDelta

cpp/ql/src/semmle/code/cpp/rangeanalysis/RangeUtils.qll

@@ -104,17 +104,28 @@ private predicate safeCast(IntegralType fromtyp, IntegralType totyp) {
   )
 }
 
+/**
+ * A `ConvertInstruction` which casts from one pointer type to another.
+ */
 class PtrToPtrCastInstruction extends ConvertInstruction {
   PtrToPtrCastInstruction() {
     getResultType() instanceof PointerType and
     getUnary().getResultType() instanceof PointerType
   }
 }
 
+/**
+ * A `ConvertInstruction` which casts from one integer type to another in a way
+ * that cannot overflow or underflow.
+ */
 class SafeIntCastInstruction extends ConvertInstruction {
   SafeIntCastInstruction() { safeCast(getUnary().getResultType(), getResultType()) }
 }
 
+/**
+ * A `ConvertInstruction` which does not invalidate bounds determined by
+ * range analysis.
+ */
 class SafeCastInstruction extends ConvertInstruction {
   SafeCastInstruction() {
     this instanceof PtrToPtrCastInstruction or