Fix bug in array-shape subtraction

Author: staabm

src/Type/Constant/ConstantArrayType.php

@@ -367,6 +367,17 @@ public function isSuperTypeOf(Type $type): TrinaryLogic
 				return $type->isIterableAtLeastOnce()->negate();
 			}
 
+			if (
+				$this->isList->yes()
+				&& $type->isList->yes()
+				&& count($this->keyTypes) !== count($type->keyTypes)
+			) {
+				if (count($type->optionalKeys) > 0) {
+					return TrinaryLogic::createMaybe();
+				}
+				return TrinaryLogic::createNo();
+			}
+
 			$results = [];
 			foreach ($this->keyTypes as $i => $keyType) {
 				$hasOffset = $type->hasOffsetValueType($keyType);

tests/PHPStan/Analyser/nsrt/bug11488.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace Bug11488;
+
+use function PHPStan\Testing\assertType;
+
+class Foo
+{
+	/**
+	 * @param array{mixed}|array{mixed, string|null, mixed} $row
+	 */
+	protected function test(array $row): void
+	{
+		if (count($row) !== 1) {
+			assertType('array{mixed, string|null, mixed}', $row);
+		}
+
+		if (count($row) !== 2) {
+			assertType('array{mixed, string|null, mixed}|array{mixed}', $row);
+		}
+
+		if (count($row) !== 3) {
+			assertType('array{mixed}', $row);
+		}
+	}
+}