592 Commits

Author	SHA1	Message	Date
Matt Brown	ea314cc1c0	Simplify calling of replacer methods	2020-11-29 16:27:00 -05:00
Matt Brown	4d22723525	Break out replacement of templated types with their inferred result	2020-11-29 16:16:16 -05:00
Matt Brown	15a5bd5e29	Simplify storage and retrieval of extended template params	2020-11-29 15:05:32 -05:00
Matt Brown	0efd4ebd7d	Detect some erroneous issets	2020-11-29 09:26:39 -05:00
Matthew Brown	fd53192ad2	Fix redundant mappings	2020-11-28 21:05:31 -05:00
Matt Brown	8adc0918ae	Fix the bug	2020-11-28 09:55:40 -05:00
Matt Brown	de1fa03f77	Fix template type selection	2020-11-28 09:53:11 -05:00
Matt Brown	73cd07a01f	Simplify FunctionCallAnalyzer ... Ref #4714	2020-11-27 16:34:27 -05:00
Matt Brown	6db8132b4c	Simplify call analysers a bit ... Ref #4714	2020-11-27 16:31:10 -05:00
Matt Brown	5f065d3d74	Turn template bound tuples into object ... Ref #4714	2020-11-27 11:43:30 -05:00
Matt Brown	6de97e3779	Skip missing function params in taint analysis	2020-11-26 11:58:14 -05:00
Matt Brown	d40d63f180	Fix #4699 - treat isset like !== null when variable is defined	2020-11-25 14:04:55 -05:00
Matt Brown	17ceba5c06	Fix bug	2020-11-22 23:32:14 -05:00
Matt Brown	f164a45843	Fix bugs	2020-11-22 19:45:54 -05:00
Matt Brown	9a03a9a5d0	Move param taint sink addition after arguuments have been analysed	2020-11-22 19:39:40 -05:00
Matt Brown	b782dd4225	Make sure conditional escaping works for static methods too	2020-11-22 13:39:32 -05:00
Matt Brown	af008953a8	Fix #4661 - support conditional escaping for functions	2020-11-22 13:24:33 -05:00
Matt Brown	f0ae0e5cb4	Break aparat type combiner	2020-11-21 18:11:29 -05:00
Lukas Reschke	ffb0c4ae17	Implement variadic taint propagation (#4649) ... * Implement variadic taint propagation * Lint code	2020-11-21 17:41:40 -05:00
orklah	ae0486529e	Unused psalm-suppress (#4646)	2020-11-21 17:39:40 -05:00
Matt Brown	ce8938263e	Fix #4636 - prevent crashes on aliased classes	2020-11-20 09:29:24 -05:00
Matt Brown	78d644d1a1	Change TaintedText to TaintedCallable	2020-11-19 19:01:19 -05:00
Matt Brown	4c315ec45c	Closure calls aren’t sinks	2020-11-19 18:44:36 -05:00
Matt Brown	ff3fff56d4	Simplify assertion negations, centralising as much as possible ... Now the flag passed to scrapeAssertions just determines the errors emitted	2020-11-19 14:32:49 -05:00
Matt Brown	95de6cf177	Allow immutable classes to be specialised through calls	2020-11-19 01:38:20 -05:00
Matt Brown	d60abaf858	Unfix fixes	2020-11-18 19:19:07 -05:00
Matt Brown	8dd229f6c0	Only ignore literal flows when tainting	2020-11-18 18:43:41 -05:00
Matt Brown	236292ff05	Fix #4600 - set attributes in a bunch of places	2020-11-18 12:44:59 -05:00
Matt Brown	3f7f959726	Fix #4599 - propagate taints to parent callers where necessary	2020-11-18 09:59:54 -05:00
Matt Brown	28dee4146a	Fix tests	2020-11-17 17:53:46 -05:00
Matt Brown	adeaa33a64	Don’t propagate taints to child constructor args	2020-11-17 16:49:29 -05:00
Matt Brown	43af3b1a57	Break out TaintedInput issues into a lot of separate ones	2020-11-17 12:44:31 -05:00
Matt Brown	42802e11d1	Allow PHP major version to determine substr return type	2020-11-16 16:31:33 -05:00
Dusk	0fe3e1f83b	Allow named arguments to variadic functions (#4575) ... Closes #4563	2020-11-16 15:49:27 -05:00
Matt Brown	5a62dc5c40	Fix #4540 - use correct method when simulating property setting	2020-11-12 23:56:29 -05:00
Matt Brown	556fb12966	Move mutation checks to more appropriate place	2020-11-12 23:54:50 -05:00
Matt Brown	2f7bf2a144	Bind lower bounds to upper bounds as well when no upper bound can be inferred ... Ref #4485	2020-11-11 17:46:09 -05:00
Matt Brown	a8d7248c31	Fix #4524 - do better template param inheritance	2020-11-11 13:25:17 -05:00
Matt Brown	b731b53d5e	Add debug stuff for code complexity	2020-11-10 12:49:42 -05:00
Matt Brown	e27cbfba57	Reduce size of data flow graph when analysing array assignments	2020-11-09 22:44:36 -05:00
Adrien LUCAS	4cb8e86737	Add a proxy capability to the flow annotation (#4495) ... * Add a `passthru` capability to the flow annotation * Fix passthru-calls type * Fix types and rename to proxy * Allow to proxy a method Co-authored-by: Matthew Brown <github@muglug.com>	2020-11-09 15:22:35 -05:00
Matt Brown	8799e1a337	Break apart complex method	2020-11-09 00:58:45 -05:00
Matt Brown	0be4f2fedf	Fix/ignore reflection bugs	2020-11-08 14:27:37 -05:00
Matt Brown	20e37d8cb6	Add a comment to show workings	2020-11-08 13:08:45 -05:00
Matt Brown	24c9702aa5	Remove unused imports	2020-11-08 12:31:21 -05:00
Matt Brown	6da0905478	Separate out good from the bad	2020-11-08 12:29:23 -05:00
Matt Brown	b8f5d16e9f	Consolidate similar functionality	2020-11-07 00:58:20 -05:00
Matt Brown	6b06ecec39	Fix #4491 - support assertions in new calls	2020-11-06 11:55:19 -05:00
Matt Brown	3e9c5d3600	Add support for @return never	2020-11-04 12:30:02 -05:00
Matt Brown	b5a3f45d52	Remove use of PHP 7.2 function	2020-11-04 11:02:34 -05:00