search

ovr / phpsa

Smart/Static Analyzer(sis) for PHP :bowtie::neckbeard:
Other
638 stars 77 forks source link

[Analyzer] printf format string and parameters #329

Closed ddmler closed 6 years ago

ddmler commented 7 years ago

Create an analyzer that checks printf/sprintf and similar function calls for: format string has same number of placeholders as parameters are passed into it. (And maybe that the types are correct)

kilgaloon commented 7 years ago

Maybe i can jump on this one. I will see what can i do in following days

kilgaloon commented 7 years ago

Currently analyzer checks is first argument string, is type format valid and length of type formats in string vs array of arguments passed for printf/sprintf and number of arguments passed for sprintf