Merge pull request #249 from koriym/add-fetch-taint-annotations

Add psalm taint-sink annotations to fetch*/yield*/perform methods

Author: harikt

src/ExtendedPdoInterface.php

@@ -47,6 +47,7 @@ public function disconnect(): void;
      *
      * @return int
      *
+     * @psalm-taint-sink sql $statement
      */
     public function fetchAffected(string $statement, array $values = []): int;
 
@@ -61,6 +62,7 @@ public function fetchAffected(string $statement, array $values = []): int;
      *
      * @return array
      *
+     * @psalm-taint-sink sql $statement
      */
     public function fetchAll(string $statement, array $values = []): array;
 
@@ -79,6 +81,7 @@ public function fetchAll(string $statement, array $values = []): array;
      *
      * @return array
      *
+     * @psalm-taint-sink sql $statement
      */
     public function fetchAssoc(string $statement, array $values = []): array;
 
@@ -92,6 +95,7 @@ public function fetchAssoc(string $statement, array $values = []): array;
      *
      * @return array
      *
+     * @psalm-taint-sink sql $statement
      */
     public function fetchCol(string $statement, array $values = []): array;
 
@@ -109,6 +113,7 @@ public function fetchCol(string $statement, array $values = []): array;
      *
      * @return array
      *
+     * @psalm-taint-sink sql $statement
      */
     public function fetchGroup(
         string $statement,
@@ -137,6 +142,7 @@ public function fetchGroup(
      *
      * @return object|false
      *
+     * @psalm-taint-sink sql $statement
      */
     public function fetchObject(
         string $statement,
@@ -168,6 +174,7 @@ public function fetchObject(
      *
      * @return array
      *
+     * @psalm-taint-sink sql $statement
      */
     public function fetchObjects(
         string $statement,
@@ -186,6 +193,7 @@ public function fetchObjects(
      *
      * @return array|false
      *
+     * @psalm-taint-sink sql $statement
      */
     public function fetchOne(string $statement, array $values = []): array|false;
 
@@ -200,6 +208,7 @@ public function fetchOne(string $statement, array $values = []): array|false;
      *
      * @return array
      *
+     * @psalm-taint-sink sql $statement
      */
     public function fetchPairs(string $statement, array $values = []): array;
 
@@ -213,6 +222,7 @@ public function fetchPairs(string $statement, array $values = []): array;
      *
      * @return mixed
      *
+     * @psalm-taint-sink sql $statement
      */
     public function fetchValue(string $statement, array $values = []): mixed;
 
@@ -304,6 +314,7 @@ public function setProfiler(ProfilerInterface $profiler): void;
      *
      * @return \Generator
      *
+     * @psalm-taint-sink sql $statement
      */
     public function yieldAll(string $statement, array $values = []): Generator;
 
@@ -317,6 +328,7 @@ public function yieldAll(string $statement, array $values = []): Generator;
      *
      * @return \Generator
      *
+     * @psalm-taint-sink sql $statement
      */
     public function yieldAssoc(string $statement, array $values = []): Generator;
 
@@ -330,6 +342,7 @@ public function yieldAssoc(string $statement, array $values = []): Generator;
      *
      * @return \Generator
      *
+     * @psalm-taint-sink sql $statement
      */
     public function yieldCol(string $statement, array $values = []): Generator;
 
@@ -354,6 +367,7 @@ public function yieldCol(string $statement, array $values = []): Generator;
      *
      * @return \Generator
      *
+     * @psalm-taint-sink sql $statement
      */
     public function yieldObjects(
         string $statement,
@@ -373,6 +387,7 @@ public function yieldObjects(
      *
      * @return \Generator
      *
+     * @psalm-taint-sink sql $statement
      */
     public function yieldPairs(string $statement, array $values = []): Generator;
 
@@ -387,6 +402,7 @@ public function yieldPairs(string $statement, array $values = []): Generator;
      *
      * @return \PDOStatement
      *
+     * @psalm-taint-sink sql $statement
      */
     public function perform(string $statement, array $values = []): PDOStatement;
 
@@ -411,6 +427,7 @@ public function perform(string $statement, array $values = []): PDOStatement;
      *
      * @see http://php.net/manual/en/pdo.prepare.php
      *
+     * @psalm-taint-sink sql $statement
      */
     public function prepareWithValues(string $statement, array $values = []): PDOStatement;
 }