You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I see that the graph that was built has an edge with a from_id of identity#1, but elsewhere, there's an edge to ns\identity#1 with a prefix of ns\
It also looks like there might be potential problems normalizing the case of namespace (should be consistently lowercased or uppercased to properly uniquely track?), but the lack of the prefix seems to be the main problem.
Expected: Should emit TaintedInput
Observed: Does not
<?phpnamespace ns {
functionidentity($s) {
return$s;
}
echonamespace\identity($_GET['userinput']);
}
/*Sources:$_GET:src/namespaced_taint.php:89Edges:From identity#1 -- this is the $from_id-> ns\identityFrom $_GET:src/namespaced_taint.php:89-> $_GET['userinput']-src/namespaced_taint.php:89-93From call to NS\identity-src/namespaced_taint.php:89-106-> ns\identity#1 -- this is the $to_idFrom $_GET['userinput']-src/namespaced_taint.php:89-93-> call to NS\identity-src/namespaced_taint.php:89-106From call to echo-src/namespaced_taint.php:70-107-> echo#1-src/namespaced_taint.php:65From ns\identity-> call to echo-src/namespaced_taint.php:70-107Sinks:echo#1-src/namespaced_taint.php:65 */
The text was updated successfully, but these errors were encountered:
I see that the graph that was built has an edge with a from_id of
identity#1
, but elsewhere, there's an edge tons\identity#1
with a prefix ofns\
It also looks like there might be potential problems normalizing the case of namespace (should be consistently lowercased or uppercased to properly uniquely track?), but the lack of the prefix seems to be the main problem.
Using https://github.com/TysonAndre/psalm/compare/taint-debug?targetBranch=master to print debugging info about sources/edges
Expected: Should emit TaintedInput
Observed: Does not
The text was updated successfully, but these errors were encountered: