diff --git a/tests/PHPStan/Rules/Functions/CallToFunctionParametersRuleTest.php b/tests/PHPStan/Rules/Functions/CallToFunctionParametersRuleTest.php
index d49987e3c5..45b461725c 100644
--- a/tests/PHPStan/Rules/Functions/CallToFunctionParametersRuleTest.php
+++ b/tests/PHPStan/Rules/Functions/CallToFunctionParametersRuleTest.php
@@ -1650,6 +1650,11 @@ public function testArgon2PasswordHash(): void
 		$this->analyse([__DIR__ . '/data/argon2id-password-hash.php'], []);
 	}
 
+	public function testBug4960(): void
+	{
+		$this->analyse([__DIR__ . '/data/bug-4960.php'], []);
+	}
+
 	public function testParamClosureThis(): void
 	{
 		if (PHP_VERSION_ID < 70400) {
diff --git a/tests/PHPStan/Rules/Functions/data/bug-4960.php b/tests/PHPStan/Rules/Functions/data/bug-4960.php
new file mode 100644
index 0000000000..703fb32b87
--- /dev/null
+++ b/tests/PHPStan/Rules/Functions/data/bug-4960.php
@@ -0,0 +1,14 @@
+<?php
+
+namespace Bug4960;
+
+class HelloWorld
+{
+	public function sayHello(): void
+	{
+		$password = "123";
+		$options = array('cost' => 11);
+
+		password_hash($password, PASSWORD_DEFAULT, $options);
+	}
+}