1
0
mirror of https://github.com/danog/psalm.git synced 2024-12-15 19:07:00 +01:00
psalm/src/Psalm/Internal/Analyzer/Statements/Expression/EvalAnalyzer.php

55 lines
1.7 KiB
PHP
Raw Normal View History

2020-05-23 06:03:29 +02:00
<?php
namespace Psalm\Internal\Analyzer\Statements\Expression;
use PhpParser;
use Psalm\Internal\Analyzer\Statements\ExpressionAnalyzer;
use Psalm\Internal\Analyzer\StatementsAnalyzer;
use Psalm\Internal\DataFlow\TaintSink;
use Psalm\Internal\Codebase\TaintFlowGraph;
2020-05-23 06:03:29 +02:00
use Psalm\CodeLocation;
use Psalm\Context;
/**
* @internal
*/
class EvalAnalyzer
{
public static function analyze(
StatementsAnalyzer $statements_analyzer,
PhpParser\Node\Expr\Eval_ $stmt,
2020-05-23 06:08:16 +02:00
Context $context
2020-05-23 06:03:29 +02:00
) : void {
ExpressionAnalyzer::analyze($statements_analyzer, $stmt->expr, $context);
$expr_type = $statements_analyzer->node_data->getType($stmt->expr);
if ($expr_type) {
if ($statements_analyzer->data_flow_graph instanceof TaintFlowGraph
2020-05-26 05:28:11 +02:00
&& $expr_type->parent_nodes
&& !\in_array('TaintedInput', $statements_analyzer->getSuppressedIssues())
2020-05-26 05:28:11 +02:00
) {
2020-05-23 06:03:29 +02:00
$arg_location = new CodeLocation($statements_analyzer->getSource(), $stmt->expr);
$eval_param_sink = TaintSink::getForMethodArgument(
2020-05-23 06:03:29 +02:00
'eval',
'eval',
0,
$arg_location,
$arg_location
);
$eval_param_sink->taints = [\Psalm\Type\TaintKind::INPUT_EVAL];
2020-05-23 06:03:29 +02:00
$statements_analyzer->data_flow_graph->addSink($eval_param_sink);
2020-05-23 06:03:29 +02:00
foreach ($expr_type->parent_nodes as $parent_node) {
$statements_analyzer->data_flow_graph->addPath($parent_node, $eval_param_sink, 'arg');
2020-05-23 06:03:29 +02:00
}
}
}
$context->check_classes = false;
$context->check_variables = false;
}
}