20 Commits

Author	SHA1	Message	Date
jarstelfox	3096afed99	Fix echo false issue (#3751) ... * Echo: add failing test case echo false; is a noop, not an issue * Echo: Fix failing test case	2020-07-05 08:55:42 -04:00
Brown	ae7c5b095b	Fix #3712 - allow taints to be suppressed with @psalm-suppress	2020-07-01 23:23:45 -04:00
Brown	cff976049d	Remove unused vars	2020-06-29 13:24:05 -04:00
Brown	f6e2e0a84a	Perform string casting for taints in ArgumentAnalyzer	2020-06-29 13:21:33 -04:00
Brown	95bf7f835b	Improve handling of array_map, faking out calls where nececssary	2020-06-25 13:05:34 -04:00
Brown	a6c7a48387	Add support for argument unpacking ... Ref #3670	2020-06-24 18:43:15 -04:00
Brown	36f1630e03	Add more steps for clearer output	2020-06-22 01:08:58 -04:00
Brown	eecdc43ce7	Remove stray commas	2020-06-18 20:15:38 -04:00
Brown	49f0592794	Improve tracking of array taints	2020-06-18 18:48:19 -04:00
Brown	f609a01497	Move static property fetch analyzer to own class	2020-06-18 11:53:24 -04:00
Matthew Brown	74a34f066c	Don’t check classes if literal strings are allowed ... Fixes #3538	2020-06-06 19:31:42 -04:00
Brown	3da3d61270	Fix #3434 by removing extraneous call to simplifyType	2020-05-26 17:55:54 -04:00
Brown	953be61cf2	Allow limiting connected taint paths	2020-05-25 23:28:11 -04:00
Brown	7e7456c863	Make taint checks more thorough	2020-05-25 17:10:53 -04:00
Brown	118b700436	Simplify sink mapping for internal calls	2020-05-25 13:10:06 -04:00
Brown	92a9a7efdf	Handle flows into arguments a little better	2020-05-23 23:54:16 -04:00
Matthew Brown	187b944680	Add faster taint analysis	2020-05-22 12:33:29 -04:00
Brown	a3214012a6	Only convert userland functions	2020-05-19 16:15:41 -04:00
Brown	4415e0f69c	Fix special case calling callable param with string non-global function ... Fixes #3411	2020-05-19 15:48:31 -04:00
Brown	8e5b330c5a	Break apart CallAnalyzer	2020-05-18 22:57:00 -04:00