Fix phpstan/phpstan#6799: wrongly reported empty array

src/Analyser/ExprHandler/ArrayHandler.php

@@ -12,11 +12,13 @@
 use PHPStan\Analyser\MutatingScope;
 use PHPStan\Analyser\NodeScopeResolver;
 use PHPStan\DependencyInjection\AutowiredService;
+use PHPStan\Node\Expr\IntertwinedVariableByReferenceWithExpr;
 use PHPStan\Node\LiteralArrayItem;
 use PHPStan\Node\LiteralArrayNode;
 use PHPStan\Reflection\InitializerExprTypeResolver;
 use PHPStan\Type\Type;
 use function array_merge;
+use function is_string;
 
 /**
  * @implements ExprHandler<Array_>
@@ -60,12 +62,35 @@ public function processExpr(NodeScopeResolver $nodeScopeResolver, Stmt $stmt, Ex
 				$scope = $keyResult->getScope();
 			}
 
+			if ($arrayItem->byRef) {
+				$scope = $nodeScopeResolver->lookForSetAllowedUndefinedExpressions($scope, $arrayItem->value);
+			}
+
 			$valueResult = $nodeScopeResolver->processExprNode($stmt, $arrayItem->value, $scope, $storage, $nodeCallback, $context->enterDeep());
 			$hasYield = $hasYield || $valueResult->hasYield();
 			$throwPoints = array_merge($throwPoints, $valueResult->getThrowPoints());
 			$impurePoints = array_merge($impurePoints, $valueResult->getImpurePoints());
 			$isAlwaysTerminating = $isAlwaysTerminating || $valueResult->isAlwaysTerminating();
 			$scope = $valueResult->getScope();
+			if (!$arrayItem->byRef) {
+				continue;
+			}
+
+			$scope = $nodeScopeResolver->lookForUnsetAllowedUndefinedExpressions($scope, $arrayItem->value);
+
+			if ($arrayItem->value instanceof Expr\Variable && is_string($arrayItem->value->name)) {
+				$varName = $arrayItem->value->name;
+				$type = $scope->getType($arrayItem->value);
+				$nativeType = $scope->getNativeType($arrayItem->value);
+				// Ensure the variable is defined (PHP creates it if undefined when used by-ref)
+				$scope = $scope->assignExpression($arrayItem->value, $type, $nativeType);
+				// Register intertwined relationship
+				$scope = $scope->assignExpression(
+					new IntertwinedVariableByReferenceWithExpr($varName, $expr, new Expr\Variable($varName)),
+					$type,
+					$nativeType,
+				);
+			}
 		}
 		$nodeScopeResolver->callNodeCallback($nodeCallback, new LiteralArrayNode($expr, $itemNodes), $scope, $storage);
 

src/Analyser/ExprHandler/AssignHandler.php

@@ -179,6 +179,38 @@ static function (MutatingScope $scope) use ($stmt, $expr, $nodeCallback, $contex
 			);
 		}
 
+		if (
+			$expr instanceof Assign
+			&& $expr->var instanceof Variable
+			&& is_string($expr->var->name)
+			&& $expr->expr instanceof Expr\Array_
+		) {
+			$targetVarName = $expr->var->name;
+			foreach ($expr->expr->items as $i => $item) {
+				if (!$item->byRef) {
+					continue;
+				}
+				if (!($item->value instanceof Variable) || !is_string($item->value->name)) {
+					continue;
+				}
+				$refVarName = $item->value->name;
+				$key = $item->key ?? new Node\Scalar\Int_($i);
+				$type = $scope->getType($item->value);
+				$nativeType = $scope->getNativeType($item->value);
+
+				// When $refVarName is assigned, update $targetVar[$key]
+				$scope = $scope->assignExpression(
+					new IntertwinedVariableByReferenceWithExpr(
+						$refVarName,
+						new ArrayDimFetch(new Variable($targetVarName), $key),
+						new Variable($refVarName),
+					),
+					$type,
+					$nativeType,
+				);
+			}
+		}
+
 		$vars = $nodeScopeResolver->getAssignedVariables($expr->var);
 		if (count($vars) > 0) {
 			$varChangedScope = false;

src/Analyser/NodeScopeResolver.php

@@ -3532,6 +3532,30 @@
 						$scope = $scope->invalidateExpression($arg->value, true);
 					}
 				}
+
+				if (
+					!$assignByReference
+					&& $calleeReflection !== null
+					&& !$calleeReflection->hasSideEffects()->no()
+					&& $arg->value instanceof Array_
+				) {
+					foreach ($arg->value->items as $item) {
+						if (!$item->byRef) {
+							continue;
+						}
+						if (!($item->value instanceof Variable) || !is_string($item->value->name)) {
+							continue;
+						}
+						$scope = $this->processVirtualAssign(
+							$scope,
+							$storage,
+							$stmt,
+							$item->value,
+							new TypeExpr(new MixedType()),
+							$nodeCallback,
+						)->getScope();
+					}
+				}
 			}
 		}
 

tests/PHPStan/Analyser/nsrt/bug-6799.php

@@ -0,0 +1,87 @@
+<?php declare(strict_types = 1);
+
+namespace Bug6799;
+
+use function PHPStan\Testing\assertType;
+
+class HelloWorld
+{
+	/**
+	 * @param string[] $where
+	 * @param string $sqlTableName
+	 * @param mixed[] $filter
+	 * @param string $value
+	 */
+	protected function listingAddWhereFilterAtableDefault(array &$where, string $sqlTableName, array $filter, string $value): void
+	{
+		if ($value != "" && !empty($filter) && !empty($filter['sql']) && is_string($filter['sql'])) {
+			$where[] = "`" . $sqlTableName . "`.`" . (string)$filter['sql'] . "` = '" . $value . "'";
+		}
+	}
+
+	/**
+	 * @param string[] $filterValues
+	 * @param string[] $where
+	 * @param string[] $tables
+	 * @param mixed[] $filters
+	 */
+	protected function listingAddWhereFilterAtable(array $filterValues, array &$where, array &$tables, array $filters): void
+	{
+		if (!empty($filterValues) && !empty($filters)) {
+			$whereFilter = array();
+			foreach ($filterValues as $type => $value) {
+				call_user_func_array(array($this, 'listingAddWhereFilterAtableDefault'), array(&$whereFilter, 'xxxx', $filters[$type], $value));
+			}
+			assertType('mixed', $whereFilter);
+			if (count($whereFilter) > 0) {
+				$where[] = "(" . implode(" AND ", $whereFilter) . ")";
+			}
+		}
+	}
+}
+
+/**
+ * @param mixed $foo
+ */
+function foo($foo): void {}
+
+function testByRefInArray(): void
+{
+	$a = [];
+	assertType('array{}', $a);
+
+	$b = [&$a];
+	assertType('array{}', $a);
+
+	foo($b);
+	assertType('array{}', $a);
+}
+
+function testByRefInArrayWithKey(): void
+{
+	$a = 'hello';
+	assertType("'hello'", $a);
+
+	$b = ['key' => &$a];
+	assertType("'hello'", $a);
+
+	$b['key'] = 42;
+	assertType("'hello'", $a);
+}
+
+function testMultipleByRefInArray(): void
+{
+	$a = 1;
+	$c = 'test';
+
+	$b = [&$a, 'normal', &$c];
+	assertType('1', $a);
+	assertType("'test'", $c);
+
+	$b[0] = 2;
+	$b[1] = 'foo';
+	$b[2] = 'bar';
+
+	assertType('1', $a);
+	assertType("'test'", $c);
+}

tests/PHPStan/Analyser/nsrt/bug-6799b.php

@@ -0,0 +1,47 @@
+<?php declare(strict_types = 1);
+
+namespace Bug6799b;
+
+use function PHPStan\Testing\assertType;
+
+class HelloWorld
+{
+
+
+	/**
+	 * listingAddWhereFilterAtableRoleCategory
+	 *
+	 * @param string[] $where
+	 * @param string $sqlTableName
+	 * @param mixed[] $filter
+	 * @param string $value
+	 *
+	 * @return void
+	 */
+	protected function listingAddWhereFilterAtableDefault(array &$where, string $sqlTableName, array $filter, string $value): void
+	{
+		if ($value != "" && !empty($filter) && !empty($filter['sql']) && is_string($filter['sql'])) {
+			$where[] = "`" . $sqlTableName . "`.`" . (string)$filter['sql'] . "` = '" . $value . "'";
+		}
+	}
+
+	/**
+	 * listingAddWhereFilterAtableFilter
+	 *
+	 * @param string[] $filterValues
+	 * @param string[] $where
+	 * @param string[] $tables
+	 * @param mixed[] $filters
+	 * @return void
+	 */
+	protected function listingAddWhereFilterAtable(array $filterValues, array &$where, array &$tables, array $filters): void
+	{
+		if (!empty($filterValues) && !empty($filters)) {
+			$whereFilter = array();
+			foreach ($filterValues as $type => $value) {
+				$this->listingAddWhereFilterAtableDefault($whereFilter, 'xxxxx', $filters[$type], $value);
+			}
+			assertType('array<string>', $whereFilter);
+		}
+	}
+}

tests/PHPStan/Analyser/nsrt/bug-6799c.php

@@ -0,0 +1,17 @@
+<?php declare(strict_types = 1);
+
+namespace Bug6799C;
+
+use function PHPStan\Testing\assertType;
+
+// https://3v4l.org/g5UjS
+
+$a = [&$x];
+assertType('mixed', $x);
+
+function doFoo(array &$arr) {
+	$arr[0] = 'string';
+}
+
+doFoo($a);
+assertType('mixed', $x);

tests/PHPStan/Rules/Comparison/NumberComparisonOperatorsConstantConditionRuleTest.php

@@ -298,4 +298,9 @@ public function testBug12163(): void
 		]);
 	}
 
+	public function testBug6799(): void
+	{
+		$this->analyse([__DIR__ . '/../../Analyser/nsrt/bug-6799.php'], []);
+	}
+
 }

tests/PHPStan/Rules/Variables/DefinedVariableRuleTest.php

@@ -1514,4 +1514,14 @@ public function testBug14117(): void
 		]);
 	}
 
+	public function testBug6799c(): void
+	{
+		$this->cliArgumentsVariablesRegistered = true;
+		$this->polluteScopeWithLoopInitialAssignments = false;
+		$this->checkMaybeUndefinedVariables = true;
+		$this->polluteScopeWithAlwaysIterableForeach = true;
+
+		$this->analyse([__DIR__ . '/../../Analyser/nsrt/bug-6799c.php'], []);
+	}
+
 }