Taint analysis resulting in possible duplicates?

[prabhu]

Repo used: https://github.com/prabhu/YetiForceCRM/

taint-php-report.fmt.json.txt

Notice how entries such as File app/ConfigFile.php line 246 is getting repeated multiple times. This change should have happened in the last few times. This repo used to receive 23 results but now getting 133 indicating possible duplicates.

[psalm-github-bot]

Hey @prabhu, can you reproduce the issue on https://psalm.dev ?

[muglug]

Hey, I don't believe there are any duplicates – what's happening now is that the same sink is allowed to have multiple results in the output, if there were a number of different ways for tainted data to travel to it.