26 Commits

Author	SHA1	Message	Date
Brown	4d82d3ddad	Fix #4128 - improve understanding of preg_match_all	2020-09-04 18:10:14 -04:00
orklah	f66d57f19d	add native return types (#4116) ... * add native return types * remove redundant phpdoc	2020-09-04 16:26:33 -04:00
orklah	73f6fcde48	Short list syntax (#4102) ... * Short list syntax * revert unrelated CS	2020-09-02 00:17:41 -04:00
Brown	92239add4d	Add some backwards-incompatible changes for 4.x	2020-08-30 11:44:14 -04:00
Brown	76bd5b6278	Refactor type comparison	2020-07-21 19:40:35 -04:00
Evgeniy	2c51f47ff6	Fix invalid UndefinedClass using array|callable (#3842) ... * Do not treat string array argument as callable if it can be traeted just as string array. * cs	2020-07-20 04:50:07 -04:00
jarstelfox	3096afed99	Fix echo false issue (#3751) ... * Echo: add failing test case echo false; is a noop, not an issue * Echo: Fix failing test case	2020-07-05 08:55:42 -04:00
Brown	ae7c5b095b	Fix #3712 - allow taints to be suppressed with @psalm-suppress	2020-07-01 23:23:45 -04:00
Brown	cff976049d	Remove unused vars	2020-06-29 13:24:05 -04:00
Brown	f6e2e0a84a	Perform string casting for taints in ArgumentAnalyzer	2020-06-29 13:21:33 -04:00
Brown	95bf7f835b	Improve handling of array_map, faking out calls where nececssary	2020-06-25 13:05:34 -04:00
Brown	a6c7a48387	Add support for argument unpacking ... Ref #3670	2020-06-24 18:43:15 -04:00
Brown	36f1630e03	Add more steps for clearer output	2020-06-22 01:08:58 -04:00
Brown	eecdc43ce7	Remove stray commas	2020-06-18 20:15:38 -04:00
Brown	49f0592794	Improve tracking of array taints	2020-06-18 18:48:19 -04:00
Brown	f609a01497	Move static property fetch analyzer to own class	2020-06-18 11:53:24 -04:00
Matthew Brown	74a34f066c	Don’t check classes if literal strings are allowed ... Fixes #3538	2020-06-06 19:31:42 -04:00
Brown	3da3d61270	Fix #3434 by removing extraneous call to simplifyType	2020-05-26 17:55:54 -04:00
Brown	953be61cf2	Allow limiting connected taint paths	2020-05-25 23:28:11 -04:00
Brown	7e7456c863	Make taint checks more thorough	2020-05-25 17:10:53 -04:00
Brown	118b700436	Simplify sink mapping for internal calls	2020-05-25 13:10:06 -04:00
Brown	92a9a7efdf	Handle flows into arguments a little better	2020-05-23 23:54:16 -04:00
Matthew Brown	187b944680	Add faster taint analysis	2020-05-22 12:33:29 -04:00
Brown	a3214012a6	Only convert userland functions	2020-05-19 16:15:41 -04:00
Brown	4415e0f69c	Fix special case calling callable param with string non-global function ... Fixes #3411	2020-05-19 15:48:31 -04:00
Brown	8e5b330c5a	Break apart CallAnalyzer	2020-05-18 22:57:00 -04:00