Add stringable access check to ClassConstantRule

Author: zonuexe

conf/bleedingEdge.neon

@@ -1,6 +1,7 @@
 parameters:
 	featureToggles:
 		bleedingEdge: true
+		checkNonStringableDynamicAccess: true
 		checkParameterCastableToNumberFunctions: true
 		skipCheckGenericClasses!: []
 		stricterFunctionMap: true

conf/config.level0.neon

@@ -16,6 +16,9 @@ conditionalTags:
 		phpstan.rules.rule: %featureToggles.newStaticInAbstractClassStaticMethod%
 
 services:
+	-
+		class: PHPStan\Rules\Classes\ClassConstantRule
+
 	-
 		class: PHPStan\Rules\Classes\NewStaticInAbstractClassStaticMethodRule
 

conf/config.neon

@@ -24,6 +24,7 @@ parameters:
 			tooWideThrowType: true
 	featureToggles:
 		bleedingEdge: false
+		checkNonStringableDynamicAccess: false
 		checkParameterCastableToNumberFunctions: false
 		skipCheckGenericClasses: []
 		stricterFunctionMap: false

conf/parametersSchema.neon

@@ -28,6 +28,7 @@ parametersSchema:
 	])
 	featureToggles: structure([
 		bleedingEdge: bool(),
+		checkNonStringableDynamicAccess: bool(),
 		checkParameterCastableToNumberFunctions: bool(),
 		skipCheckGenericClasses: listOf(string()),
 		stricterFunctionMap: bool()

src/Rules/Classes/ClassConstantRule.php

@@ -42,6 +42,7 @@ public function __construct(
 		private RuleLevelHelper $ruleLevelHelper,
 		private ClassNameCheck $classCheck,
 		private PhpVersion $phpVersion,
+		private bool $checkNonStringableDynamicAccess = true,
 	)
 	{
 	}
@@ -63,6 +64,23 @@ public function processNode(Node $node, Scope $scope): array
 				$name = $constantString->getValue();
 				$constantNameScopes[$name] = $scope->filterByTruthyValue(new Identical($node->name, new String_($name)));
 			}
+
+			if ($this->checkNonStringableDynamicAccess) {
+				$typeResult = $this->ruleLevelHelper->findTypeToCheck(
+					$scope,
+					$node->name,
+					'',
+					static fn (Type $type) => $type->isString()->yes(),
+				);
+
+				$type = $typeResult->getType();
+
+				if (!$type->isString()->yes()) {
+					$errors[] = RuleErrorBuilder::message(sprintf('Cannot fetch class constant with a non-stringable type %s.', $nameType->describe(VerbosityLevel::precise())))
+						->identifier('classConstant.fetchInvalidExpression')
+						->build();
+				}
+			}
 		}
 
 		foreach ($constantNameScopes as $constantName => $constantScope) {

tests/PHPStan/Rules/Classes/ClassConstantRuleTest.php

@@ -26,14 +26,15 @@ protected function getRule(): Rule
 		$reflectionProvider = self::createReflectionProvider();
 		return new ClassConstantRule(
 			$reflectionProvider,
-			new RuleLevelHelper($reflectionProvider, true, false, true, false, false, false, true),
+			new RuleLevelHelper($reflectionProvider, true, false, true, true, true, false, true),
 			new ClassNameCheck(
 				new ClassCaseSensitivityCheck($reflectionProvider, true),
 				new ClassForbiddenNameCheck(self::getContainer()),
 				$reflectionProvider,
 				self::getContainer(),
 			),
 			new PhpVersion($this->phpVersion),
+			true,
 		);
 	}
 
@@ -59,6 +60,10 @@ public function testClassConstant(): void
 					'Access to undefined constant ClassConstantNamespace\Foo::DOLOR.',
 					10,
 				],
+				[
+					'Cannot access constant LOREM on mixed.',
+					11,
+				],
 				[
 					'Access to undefined constant ClassConstantNamespace\Foo::DOLOR.',
 					16,
@@ -439,6 +444,14 @@ public function testDynamicAccess(): void
 		$this->phpVersion = PHP_VERSION_ID;
 
 		$this->analyse([__DIR__ . '/data/dynamic-constant-access.php'], [
+			[
+				'Access to undefined constant ClassConstantDynamicAccess\Foo::FOO.',
+				17,
+			],
+			[
+				'Cannot fetch class constant with a non-stringable type object.',
+				19,
+			],
 			[
 				'Access to undefined constant ClassConstantDynamicAccess\Foo::FOO.',
 				20,
@@ -474,4 +487,41 @@ public function testDynamicAccess(): void
 		]);
 	}
 
+	#[RequiresPhp('>= 8.3')]
+	public function testStringableDynamicAccess(): void
+	{
+		$this->phpVersion = PHP_VERSION_ID;
+
+		$this->analyse([__DIR__ . '/data/dynamic-constant-stringable-access.php'], [
+			[
+				'Cannot fetch class constant with a non-stringable type mixed.',
+				13,
+			],
+			[
+				'Cannot fetch class constant with a non-stringable type string|null.',
+				14,
+			],
+			[
+				'Cannot fetch class constant with a non-stringable type Stringable|null.',
+				15,
+			],
+			[
+				'Cannot fetch class constant with a non-stringable type int.',
+				16,
+			],
+			[
+				'Cannot fetch class constant with a non-stringable type int|null.',
+				17,
+			],
+			[
+				'Cannot fetch class constant with a non-stringable type DateTime|string.',
+				18,
+			],
+			[
+				'Cannot fetch class constant with a non-stringable type 1111.',
+				19,
+			],
+		]);
+	}
+
 }

tests/PHPStan/Rules/Classes/data/dynamic-constant-access.php

@@ -14,7 +14,7 @@ public function test(string $string, object $obj): void
 	{
 		$bar = 'FOO';
 
-		echo self::{$foo};
+		echo self::{$bar};
 		echo self::{$string};
 		echo self::{$obj};
 		echo self::{$this->name};
@@ -44,5 +44,4 @@ public function testScope(): void
 		echo self::{$name};
 	}
 
-
 }

tests/PHPStan/Rules/Classes/data/dynamic-constant-stringable-access.php

@@ -0,0 +1,24 @@
+<?php  // lint >= 8.3
+
+namespace ClassConstantDynamicStringableAccess;
+
+use Stringable;
+use DateTime;
+
+final class Foo
+{
+
+	public function test(mixed $mixed, ?string $nullableStr, ?Stringable $nullableStringable, int $int, ?int $nullableInt, DateTime|string $datetimeOrStr, Stringable $stringable): void
+	{
+		echo self::{$mixed};
+		echo self::{$nullableStr};
+		echo self::{$nullableStringable};
+		echo self::{$int};
+		echo self::{$nullableInt};
+		echo self::{$datetimeOrStr};
+		echo self::{1111};
+		echo self::{(string)$stringable};
+		echo self::{$stringable}; // Uncast Stringable objects will cause a runtime error
+	}
+
+}