2020-05-23 06:03:29 +02:00
|
|
|
<?php
|
|
|
|
namespace Psalm\Internal\Analyzer\Statements\Expression;
|
|
|
|
|
|
|
|
use PhpParser;
|
|
|
|
use Psalm\Internal\Analyzer\Statements\ExpressionAnalyzer;
|
|
|
|
use Psalm\Internal\Analyzer\StatementsAnalyzer;
|
2020-10-13 22:49:03 +02:00
|
|
|
use Psalm\Internal\DataFlow\TaintSink;
|
2020-09-30 18:28:13 +02:00
|
|
|
use Psalm\Internal\Codebase\TaintFlowGraph;
|
2020-05-23 06:03:29 +02:00
|
|
|
use Psalm\CodeLocation;
|
|
|
|
use Psalm\Context;
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @internal
|
|
|
|
*/
|
|
|
|
class EvalAnalyzer
|
|
|
|
{
|
|
|
|
public static function analyze(
|
|
|
|
StatementsAnalyzer $statements_analyzer,
|
|
|
|
PhpParser\Node\Expr\Eval_ $stmt,
|
2020-05-23 06:08:16 +02:00
|
|
|
Context $context
|
2020-05-23 06:03:29 +02:00
|
|
|
) : void {
|
|
|
|
ExpressionAnalyzer::analyze($statements_analyzer, $stmt->expr, $context);
|
|
|
|
|
|
|
|
$expr_type = $statements_analyzer->node_data->getType($stmt->expr);
|
|
|
|
|
|
|
|
if ($expr_type) {
|
2020-10-13 23:28:12 +02:00
|
|
|
if ($statements_analyzer->data_flow_graph instanceof TaintFlowGraph
|
2020-05-26 05:28:11 +02:00
|
|
|
&& $expr_type->parent_nodes
|
2020-07-02 05:23:38 +02:00
|
|
|
&& !\in_array('TaintedInput', $statements_analyzer->getSuppressedIssues())
|
2020-05-26 05:28:11 +02:00
|
|
|
) {
|
2020-05-23 06:03:29 +02:00
|
|
|
$arg_location = new CodeLocation($statements_analyzer->getSource(), $stmt->expr);
|
|
|
|
|
2020-09-21 05:59:52 +02:00
|
|
|
$eval_param_sink = TaintSink::getForMethodArgument(
|
2020-05-23 06:03:29 +02:00
|
|
|
'eval',
|
|
|
|
'eval',
|
|
|
|
0,
|
|
|
|
$arg_location,
|
|
|
|
$arg_location
|
|
|
|
);
|
|
|
|
|
2020-11-17 18:44:31 +01:00
|
|
|
$eval_param_sink->taints = [\Psalm\Type\TaintKind::INPUT_EVAL];
|
2020-05-23 06:03:29 +02:00
|
|
|
|
2020-10-13 23:28:12 +02:00
|
|
|
$statements_analyzer->data_flow_graph->addSink($eval_param_sink);
|
2020-05-23 06:03:29 +02:00
|
|
|
|
|
|
|
foreach ($expr_type->parent_nodes as $parent_node) {
|
2020-10-13 23:28:12 +02:00
|
|
|
$statements_analyzer->data_flow_graph->addPath($parent_node, $eval_param_sink, 'arg');
|
2020-05-23 06:03:29 +02:00
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
$context->check_classes = false;
|
|
|
|
$context->check_variables = false;
|
|
|
|
}
|
|
|
|
}
|