92 Commits

Author	SHA1	Message	Date
Brown	16af6a5773	Improve concat taint propagation	2020-05-23 01:11:16 -04:00
Brown	e82c317d53	Adjust tolerances	2020-05-22 21:37:18 -04:00
Brown	666cc3b4c9	Fix BinaryOp analysis	2020-05-18 23:00:53 -04:00
Brown	8e5b330c5a	Break apart CallAnalyzer	2020-05-18 22:57:00 -04:00
Brown	ace049a068	Beautify BinaryOpAnalyzer	2020-05-18 18:57:09 -04:00
Brown	5ee1487a01	Make ExpressionAnalyzer more beautiful	2020-05-18 15:13:27 -04:00
Brown	111303d913	Add non-empty-lowercase-string type	2020-05-15 10:18:05 -04:00
Brown	2af0a17d03	Fix #3236 - allow use-checking of more methods starting with __	2020-05-12 22:39:26 -04:00
Matthew Brown	1b2017e4f4	Add slash	2020-03-29 10:44:38 -04:00
Matthew Brown	0e919a0696	Allow arithmetic on simple templated types	2020-03-29 10:34:46 -04:00
Matthew Brown	47c1470e3b	Refactor reference checks to use more appropriate properties	2020-03-28 16:30:56 -04:00
Matthew Brown	bfb919d26a	Break out methods into their own classes	2020-03-11 23:04:52 -04:00
Brown	0a8bb32115	Fix #2866 - prevent use of impure __toString via concatenation in pure contexts	2020-02-24 14:50:34 -05:00
Matthew Brown	f1a9b73a78	Fix message	2020-02-23 18:24:43 -05:00
Matthew Brown	ed4f4e35b8	Fix null checks	2020-02-23 18:20:59 -05:00
Matthew Brown	41e076e0ee	Fix bad	2020-02-23 18:19:53 -05:00
Matthew Brown	618ae77846	Prevent implicit __toString method calls in a pure context	2020-02-23 18:18:25 -05:00
Matthew Brown	3efe271819	Remove blank line	2020-02-13 18:36:37 -05:00
Brown	bc0ccbda99	Add better inference for lower-cased methods	2020-02-13 17:30:00 -05:00
Brown	0ffb833bf3	Fix #2677 - use better assertion for null coalesce	2020-01-23 14:52:35 -05:00
Matthew Brown	c3edbdbc19	Allow checking $_SESSION for null without altering type	2020-01-14 21:51:04 -05:00
Brown	0f6b61d62d	Clone isset type before contradicting	2020-01-14 18:28:32 -05:00
Matthew Brown	e1daf26202	Improve support for null coalesce checks	2020-01-14 00:53:38 -05:00
Matthew Brown	90d6b73fd8	Fix taint analysis of binary operations	2020-01-07 08:50:31 -05:00
Matthew Brown	1f777bec0e	Capture non-empty-string from concat more effectively	2020-01-07 01:44:12 -05:00
Matthew Brown	ce5917c6fb	Add better string detection	2020-01-07 01:21:29 -05:00
Matthew Brown	eaae84c7f8	Fix concat emptiness	2020-01-06 21:30:19 -05:00
Matthew Brown	cc9e0fab67	Prevent string being used in non-empty-string location	2020-01-06 20:57:57 -05:00
Brown	5c45221bdc	Improve reconciliation of || ... Ref #2426	2020-01-06 16:37:44 -05:00
Brown	578b90c2da	Improve naming of variables	2020-01-06 16:03:17 -05:00
Brown	49d9dd12b6	Change $op_ to $right in a few more places	2020-01-06 15:44:48 -05:00
Brown	9149f468e6	Change var name	2020-01-06 15:42:06 -05:00
Brown	cd0d118463	Fix count	2020-01-06 10:40:46 -05:00
Matthew Brown	8c71da75af	Add fix to more places	2020-01-06 09:47:14 -05:00
Matthew Brown	9fa2db1b6c	Move Union::getTypes to Union::getAtomicTypes	2020-01-04 12:20:26 -05:00
Matthew Brown	4021d673bd	Fix #2536 - grab binary op left assertions after analysis	2020-01-01 12:45:24 -05:00
Matthew Brown	ce9435da19	Fix #2521 - use correct context class when analysing trait	2019-12-28 15:56:26 -05:00
Matthew Brown	8bd68608fa	Fix message	2019-12-22 11:08:47 +00:00
Matthew Brown	bf67c036aa	Fix #2474 - treat free-standing binaryops as ifs instead	2019-12-16 08:32:00 -05:00
Matthew Brown	ca5f8fabdc	Fix #2464 - null coalesce shouldn’t allow undefined vars	2019-12-13 08:06:40 -05:00
Matthew Brown	8f25183784	Fix #2459 - don’t add assertions to parent context unnecessarily	2019-12-12 00:37:00 -05:00
Brown	05783eb616	Find issues with impossible property values	2019-12-11 17:08:02 -05:00
Brown	d2b99cbe77	Add possibly defined vars in binary op analysis	2019-12-11 13:09:27 -05:00
Matthew Brown	02fbf12337	Only warn about clauses in the currently-scanned conditional	2019-12-08 16:35:56 -05:00
Matthew Brown	c9f43782fd	Fix mixed method issues after defining new type	2019-12-08 10:17:40 -05:00
Matthew Brown	83b10bb9af	Fix #2426, or at least some of it	2019-12-08 00:49:34 -05:00
Matthew Brown	df395944f8	Change how $changed_var_ids is communicated	2019-12-07 01:23:35 -05:00
Brown	0bcb7863f3	Use better system for storing inferred types and assertions	2019-11-25 11:44:54 -05:00
Brown	7b719915f5	Fix style things	2019-11-12 10:21:27 -05:00
Brown	7f5af741f7	Improve assertion calculation on mixed vars	2019-11-12 10:12:07 -05:00