1688 Commits

Author	SHA1	Message	Date
Tyson Andre	1670848267	Mark print() statement as the same sink type as echo (#3669)	2020-06-24 17:23:16 -04:00
Brown	7a7cd91c24	Fix #3631 - better treatment for assignments in complex conditionals	2020-06-24 13:16:52 -04:00
Brown	9aa0aca949	Fix handling of coerced callmap args	2020-06-24 11:51:31 -04:00
Brown	c29b3744ec	Change storage of out types	2020-06-24 11:51:31 -04:00
Brown	96d05ab06b	Fix #3654 - use correct function id for namespaced functions	2020-06-23 16:53:11 -04:00
Brown	6a746b65ea	Fix #3655 - taint encapsulated strings	2020-06-23 16:38:59 -04:00
Brown	13fc8a75fd	Allow taints to flow where no return type exists ... Fixes #3652	2020-06-23 15:52:19 -04:00
Brown	f72b609d42	Fix #3642 - detect missing property when name matches	2020-06-23 13:12:46 -04:00
Brown	4d6fc4d0ca	Fix get_class($foo) === static::class checks	2020-06-23 13:11:19 -04:00
Brown	1f86afece7	Revert "Fix #3631 - apply assertions to RHS of equality in conditional" ... This reverts commit 9c17795545.	2020-06-22 20:01:27 -04:00
Brown	fc8212e207	Fix static call specialisation via annotation	2020-06-22 18:40:43 -04:00
Brown	e8be2c500e	Support taint flows in more functions	2020-06-22 17:53:03 -04:00
Brown	7f05b3c530	Add $_REQUEST as a taint source ... Ref #3636	2020-06-22 17:16:15 -04:00
Brown	9c17795545	Fix #3631 - apply assertions to RHS of equality in conditional	2020-06-22 15:16:16 -04:00
Brown	dddc159694	Add explicit path object	2020-06-22 02:10:03 -04:00
Brown	36f1630e03	Add more steps for clearer output	2020-06-22 01:08:58 -04:00
Brown	02e8313c39	Allow taintedness to propagate to some stubbed methods	2020-06-21 18:07:39 -04:00
Brown	fbe3433edd	Use escape terminology	2020-06-21 11:43:08 -04:00
Brown	07adecc6eb	Use correct method id when creating taints	2020-06-21 02:06:08 -04:00
Brown	dc83c2e2fc	Add annotation for taint sources	2020-06-21 00:58:56 -04:00
Brown	f21d3a8346	Remove html and sql taints for simple preg_replace patterns	2020-06-20 23:11:42 -04:00
Brown	8edee96d8d	Fix taint regression	2020-06-20 18:10:01 -04:00
Brown	80ed1daf33	Allow static method mixin to invoke instance method	2020-06-20 18:05:35 -04:00
Brown	2c5c9e95e1	Don’t add two @return docblocks after @method	2020-06-20 15:30:47 -04:00
Brown	edbeec2c6a	Fix @method annotation namespacing	2020-06-20 15:18:22 -04:00
Ilija Tovilo	2f646d29db	Fix #3607 - constant string class reference with leading backslash (#3612)	2020-06-19 18:02:39 -04:00
Andrei Petre	6024fe4761	use original case in error messages when reporting undefined methods (#3615)	2020-06-19 11:51:08 -04:00
Brown	b1c836e5f3	Improve specialisation after call	2020-06-19 01:59:45 -04:00
Brown	8f2e28c36b	Improve tainting of specializable classes	2020-06-19 01:22:51 -04:00
Brown	078b8b7b1a	Fix #3618 - add way to load non-analyzed files	2020-06-19 00:13:09 -04:00
Brown	eecdc43ce7	Remove stray commas	2020-06-18 20:15:38 -04:00
Brown	49f0592794	Improve tracking of array taints	2020-06-18 18:48:19 -04:00
Brown	562a7c1ca4	Track taints from all tainted arrays	2020-06-18 13:45:58 -04:00
Brown	7d9a99a956	Fix #3609 - interpret strings as regular static calls	2020-06-18 11:56:08 -04:00
Brown	f609a01497	Move static property fetch analyzer to own class	2020-06-18 11:53:24 -04:00
Bruce Weirdan	6fb63903c1	Infer better types for magic constants used in const initializers (#3602) ... Fixes vimeo/psalm#3464	2020-06-18 09:48:51 -04:00
Brown	137647a1a0	Fix #3603 - better typed value comparisons for loose equality	2020-06-18 09:31:38 -04:00
Brown	0a8b9b56ab	Fix #3600 - conditional return should be removed before comparison	2020-06-17 12:57:50 -04:00
Olle Härstedt	e1cc27f7a2	Add new config: sealAllMethods (#3578) ... * Add new config: sealAllMethods * Add some more tests * Fix codesniffer issue with preg_quote * Fix missing method in test Co-authored-by: Olle <noemail>	2020-06-15 22:36:42 -04:00
Brown	03e9649d49	Fix tainting of function calls absent taintable params	2020-06-15 20:59:48 -04:00
Brown	bbada7ba8d	Ensure correct vars are used	2020-06-15 17:16:12 -04:00
Brown	05cb39814c	Improve performance of long switch checks	2020-06-15 16:23:19 -04:00
Brown	8c5a434dc8	Allow updating array by reference	2020-06-15 14:45:08 -04:00
Matthew Brown	081a284759	Fix #3567 - remember which variables a callable sets byref in use	2020-06-14 11:58:50 -04:00
Matthew Brown	a49a0e5650	Fix #3551 - count method can be impure	2020-06-14 11:06:53 -04:00
Matthew Brown	683bde9540	Fix #3573 - allow UnnecessaryVarAnnotation to be suppressed	2020-06-13 16:48:10 -04:00
Matthew Brown	19ba53f28c	Fix too-long line	2020-06-13 16:45:54 -04:00
Matthew Brown	edb2b4c5ef	Get type of requires	2020-06-13 15:48:12 -04:00
Andrei Petre	3497ca07b6	Extending final class is prohibited #3037 (#3576)	2020-06-13 00:29:59 -04:00
Brown	9bfe50b20a	Always analyse cast expressions ... Fixes #3577	2020-06-12 17:25:46 -04:00