155 Commits

Author	SHA1	Message	Date
Matthew Brown	6a98108deb	Apply @ShiraNai7’s fix for null const values	2019-11-29 10:12:46 -05:00
Pavel Batečko	dc78e9c57b	Update password function types for PHP 7.4 (#2396) ... * Support NULL predefined constants * Fix #2395 - update password_hash() and password_needs_rehash() types for PHP 7.4 * Change $fq_const_name check so it still uses isset	2019-11-29 09:30:01 -05:00
Matthew Brown	4052e6dfac	Allow isset to check for property initialisation ... Ref #2382	2019-11-28 09:12:17 -05:00
Brown	f97a8f0d5b	Use more accurate way to determine list size	2019-11-26 16:34:19 -05:00
Brown	0bcb7863f3	Use better system for storing inferred types and assertions	2019-11-25 11:44:54 -05:00
Matthew Brown	2369bac943	Preserve self refs where possible	2019-11-16 19:59:08 -05:00
Matthew Brown	7d7d4dd926	Fix style stuff	2019-11-15 21:47:53 -05:00
Brown	55bf6a2db3	Migrate static return types	2019-11-15 16:50:43 -05:00
Brown	96586f16c0	Fix phpcs issues	2019-11-11 10:11:42 -05:00
Brown	af5f83602e	Break out more specific possibly defined offset errors	2019-11-11 09:59:56 -05:00
Matthew Brown	94d4b876ba	Fix #2177 - mark variables in try block as potentially undefined	2019-11-09 12:25:30 -05:00
Brown	06b64a4a01	Detect erroneous use of empty check on bools	2019-11-06 16:14:46 -05:00
Matthew Brown	5910a362ea	Improve report output of taint analysis	2019-10-19 17:59:10 -04:00
Matthew Brown	e5623e9257	Fix function call	2019-10-11 23:33:36 -04:00
Matthew Brown	4478d31593	Taint arrays in creation	2019-10-11 23:28:17 -04:00
Matthew Brown	03c39cbe7c	Fix #2223 - make sure lists are handled in more places	2019-10-10 20:16:43 -04:00
Brown	b75720c32b	Add more list types	2019-10-09 10:04:34 -04:00
Brown	2d4a7fbe3e	Fix array fetch analysis offset	2019-10-08 19:01:00 -04:00
Brown	16c33d1565	Add support for list type ... Fixes #2209	2019-10-08 18:44:46 -04:00
Brown	b0aaede9e1	Add support for checking integer array offsets	2019-10-04 11:08:08 -04:00
Matthew Brown	d85fbaec09	Add stricter checks after first isset	2019-10-03 21:34:56 -04:00
Brown	d225374d6d	Fix #2156 - do better inference after isset	2019-10-01 19:31:08 -04:00
Brown	a81c3067ad	Store the whole type	2019-10-01 17:09:32 -04:00
Matthew Brown	f8a2eae0e2	Fix #2186 - use expanded class name for aliased class	2019-09-30 22:15:48 -04:00
Brown	2c9a082b3e	Fix #2172 - only complain about missing offset if it’s really missing	2019-09-25 19:02:49 -04:00
Brown	648dda67ed	Fix Psalm issues	2019-09-25 13:12:29 -04:00
Brown	1a48be8e9c	Fix #2165 - coerce null array offset to zero	2019-09-25 12:17:37 -04:00
Brown	c68dcf2f74	Don’t coerce false to null when coming from ignore-false type	2019-09-20 15:30:29 -04:00
Brown	be4894c8e0	Fix #2155 - coerce false to 0, true to 1 in array offset	2019-09-20 15:21:38 -04:00
Matthew Brown	9ad6c36d9b	Conditionally verify that array offsets exist (#2147) ... * Check array offsets idea * Clean up some issues * Add a few light fixes * Add docs	2019-09-18 14:21:06 -04:00
Matthew Brown	0b4981f01b	Fix #1551 - do better at inferring class constant types	2019-09-14 14:26:31 -04:00
Matthew Brown	d941294a84	Move class const analysis	2019-09-14 13:12:54 -04:00
Matthew Brown	d27935d109	Improve accuracy around array addition	2019-09-08 10:23:12 -04:00
Brown	aba3659311	Add more specific key coercion rules when assigning to arrays	2019-08-27 15:12:25 -04:00
Brown	4db8ca6a1d	Cleanup extra issues from recent fixes	2019-08-27 14:16:34 -04:00
Brown	3b865f6509	Fix #2048 - allow mixed array to be assigned specific string keys	2019-08-27 10:18:58 -04:00
Brown	fef61e996e	Propagate possibly-null issues onto fetched properties	2019-08-23 13:27:38 -04:00
Matthew Brown	1b983babd0	Allow unset of potentially invalid array key type	2019-08-18 18:06:41 -04:00
Matthew Brown	62dff200d5	Fix redundant condition	2019-08-17 18:02:38 -04:00
Matthew Brown	b6dc8f547e	Fix #2031 - still get class const return type after defined check	2019-08-17 18:01:24 -04:00
Brown	538abbc54c	Fix #2020 - allow static::CONST_NAME to have non-mixed type in final class	2019-08-15 10:41:30 -04:00
Matthew Brown	600999a3a8	Add better typing	2019-08-14 00:47:57 -04:00
Brown	c3949e3194	Improve taint protection for exec-related commands	2019-08-13 19:18:50 -04:00
Matthew Brown	d5b026839c	Add support for different taint types ref #1990	2019-08-12 23:16:05 -04:00
Brown	37d93141c4	Only register taints on known magic properties	2019-08-06 13:05:34 -04:00
Brown	0dc6b74fb4	Add taintedness to magic property fetches	2019-08-06 12:54:12 -04:00
Matthew Brown	8f6d432dd0	Add support for magic property comprehension	2019-08-05 23:19:22 -04:00
Matthew Brown	b2c0993cdc	Add framework for taint analysis to Psalm ... Ref #611	2019-08-04 10:37:36 -04:00
Matthew Brown	1ae9ea5fed	Use object instead of by-ref params	2019-07-10 01:35:57 -04:00
Matthew Brown	d0f6f85dba	Fix #1899 - detect dead code after array assignment	2019-07-04 16:38:31 -04:00