[clang] [analyzer] Detect leak of a stack address through output arguments 2/3 (PR #105653)

[Arseniy Zaostrovnykh via cfe-commits]

necto wrote:

@steakhal I've rebased atop of `main` and squashed. CI is green. Could you, please, merge this PR (following https://github.com/llvm/llvm-project/pull/105652)?

https://github.com/llvm/llvm-project/pull/105653