Merge pull request #10032 from cgocast/master

#10030 Fix missing TaintedSql
vimeo · Jul 23, 2023 · 3c08110 · 3c08110
2 parents 616d9e0 + 719496b
commit 3c08110
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/stubs/extensions/pdo.phpstub b/stubs/extensions/pdo.phpstub
@@ -150,6 +150,16 @@ class PDOStatement implements Traversable
      * @return false|T
      */
     public function fetchObject($class = \stdclass::class, array $ctorArgs = array()) {}
+
+    /**
+     * @psalm-taint-sink sql $value
+     */
+    public function bindValue(string|int $param, mixed $value, int $type = PDO::PARAM_STR): bool {}
+
+    /**
+     * @psalm-taint-sink sql $var
+     */
+    public function bindParam(string|int $param, mixed &$var, int $type = PDO::PARAM_STR, int $maxLength = 0, mixed $driverOptions = null): bool {}
 }
 
  class PDOException extends RuntimeException {