{"id":102198,"date":"2021-11-03T03:37:20","date_gmt":"2021-11-03T01:37:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-phpstan-1-0-staticheskogo-analizatora-dlya-koda-na-yazyke-php"},"modified":"2021-11-03T03:37:20","modified_gmt":"2021-11-03T01:37:20","slug":"vypusk-phpstan-1-0-staticheskogo-analizatora-dlya-koda-na-yazyke-php","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-phpstan-1-0-staticheskogo-analizatora-dlya-koda-na-yazyke-php","title":{"rendered":"Vyd\u00e1n\u00ed PHPStan 1.0, statick\u00e9ho analyz\u00e1toru pro k\u00f3d v jazyce PHP.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Po \u0161esti letech v\u00fdvoje byl vyd\u00e1n prvn\u00ed stabiln\u00ed release statick\u00e9ho analyz\u00e1toru PHPStan 1.0, kter\u00fd umo\u017e\u0148uje nal\u00e9zt chyby v k\u00f3du v jazyce PHP bez jeho proveden\u00ed a pou\u017e\u00edv\u00e1n\u00ed unit-test\u016f. K\u00f3d projektu je naps\u00e1n v PHP a je \u0161\u00ed\u0159en pod licenc\u00ed MIT. <\/p>\n
Analyz\u00e1tor poskytuje 10 \u00farovn\u00ed kontroly, p\u0159i\u010dem\u017e ka\u017ed\u00e1 n\u00e1sleduj\u00edc\u00ed \u00farove\u0148 roz\u0161i\u0159uje mo\u017enosti p\u0159edchoz\u00ed a nab\u00edz\u00ed p\u0159\u00edsn\u011bj\u0161\u00ed kontroly: <\/p>\n
Z\u00e1kladn\u00ed kontroly, definice nezn\u00e1m\u00fdch t\u0159\u00edd, funkc\u00ed a metod ($this), nedefinovan\u00fdch prom\u011bnn\u00fdch a tak\u00e9 p\u0159ed\u00e1v\u00e1n\u00ed nespr\u00e1vn\u00e9ho po\u010dtu argument\u016f.\n
Zji\u0161t\u011bn\u00ed pravd\u011bpodobn\u011b nedefinovan\u00fdch prom\u011bnn\u00fdch, nezn\u00e1m\u00fdch magic metod a vlastnost\u00ed t\u0159\u00edd s __call a __get.\n
Zji\u0161t\u011bn\u00ed nezn\u00e1m\u00fdch metod ve v\u0161ech v\u00fdrazech, bez omezen\u00ed na vol\u00e1n\u00ed p\u0159es $this. Kontrola PHPDocs.\n
Kontrola typ\u016f vr\u00e1cen\u00ed a p\u0159id\u011blen\u00ed typ\u016f vlastnostem.\n
Z\u00e1kladn\u00ed detekce «mrtv\u00e9ho» (nikdy nevyvol\u00e1van\u00e9ho) k\u00f3du. Detekce vol\u00e1n\u00ed instanceof, kter\u00e1 v\u017edy vrac\u00ed hodnotu false, blok\u016f «else», kter\u00e9 se nikdy nespou\u0161t\u011bj\u00ed, a k\u00f3du um\u00edst\u011bn\u00e9ho za return.\n
Kontrola typ\u016f argument\u016f p\u0159ed\u00e1van\u00fdch do metod a funkc\u00ed.\n
Varov\u00e1n\u00ed o absenci anotac\u00ed s informacemi o typech.\n
Varov\u00e1n\u00ed o nespr\u00e1vn\u00fdch union-typech, kter\u00e9 definuj\u00ed kolekce ze dvou a v\u00edce typ\u016f.\n
Upozorn\u011bn\u00ed na vol\u00e1n\u00ed metod a p\u0159\u00edstup k vlastnostem s typy «nullable».\n
Existence t\u0159\u00edd pou\u017e\u00edvan\u00fdch v instanceof, catch, typehints a dal\u0161\u00edch jazykov\u00fdch konstrukc\u00edch.\n
Existence a dostupnost volan\u00fdch metod a funkc\u00ed, stejn\u011b jako po\u010det p\u0159ed\u00e1van\u00fdch argument\u016f.\n
Kontrola vracen\u00ed dat metodou se stejn\u00fdm typem, jak\u00fd je definov\u00e1n ve v\u00fdrazu return.\n
Existence a viditelnost vlastnost\u00ed, ke kter\u00fdm se prov\u00e1d\u00ed p\u0159\u00edstup, a rovn\u011b\u017e kontrola deklarovan\u00fdch a skute\u010dn\u00fdch typ\u016f dat pou\u017e\u00edvan\u00fdch ve vlastnostech.\n
Spr\u00e1vnost po\u010dtu parametr\u016f p\u0159edan\u00fdch do vol\u00e1n\u00ed sprintf\/printf v bloku form\u00e1tov\u00e1n\u00ed \u0159et\u011bzc\u016f.\n
Existence prom\u011bnn\u00fdch s ohledem na bloky, kter\u00e9 tvo\u0159\u00ed oper\u00e1tory v\u011btven\u00ed a cykly.\n
Bez\u00fa\u010deln\u00e9 p\u0159evody typ\u016f (nap\u0159. «(string) ‘foo’») a striktn\u00ed kontroly («===» a «!==») dat s r\u016fzn\u00fdmi typy a operandy, kter\u00e9 v\u017edy vrac\u00ed hodnotu false. <\/ul>\n
Byla implementov\u00e1na \u00farove\u0148 kontroly «9», kter\u00e1 prov\u00e1d\u00ed kontroly pou\u017eit\u00ed typu «mixed», ur\u010den\u00e9ho pro zaji\u0161t\u011bn\u00ed p\u0159\u00edjmu parametry funkc\u00ed s r\u016fzn\u00fdmi typy. Dev\u00e1t\u00e1 \u00farove\u0148 odhaluje nebezpe\u010dn\u00e9 postupy pou\u017eit\u00ed «mixed», jako je p\u0159ed\u00e1v\u00e1n\u00ed hodnot s typem «mixed» jin\u00e9mu typu, vol\u00e1n\u00ed metod s typem «mixed» a p\u0159\u00edstup k jeho vlastnostem, kter\u00e9 nemus\u00ed existovat.\n
Spr\u00e1va kontroly identity vracen\u00fdch hodnot pro shodn\u00e9 vol\u00e1n\u00ed funkc\u00ed s pou\u017eit\u00edm anotac\u00ed @phpstan-pure a @phpstan-impure.\n
Anal\u00fdza typ\u016f v konstrukc\u00edch try-catch-finally s pou\u017eit\u00edm anotac\u00ed @throws.\n
Odhalen\u00ed ur\u010dit\u00fdch, ale nepou\u017e\u00edvan\u00fdch intern\u00edch (private) vlastnost\u00ed, metod a konstant.\n
P\u0159ed\u00e1n\u00ed nekompatibiln\u00edch callbackov\u00fdch vol\u00e1n\u00ed do funkc\u00ed pro pr\u00e1ci s poli, jako jsou array_map a usort.\n
Inspekce typ\u016f pro chyb\u011bj\u00edc\u00ed typehint anotace.\n
Zaji\u0161t\u011bna kompatibilita popis\u016f typ\u016f s PHPDocs, co\u017e umo\u017e\u0148uje pou\u017e\u00edvat v PHPDocs typy z chybov\u00fdch hl\u00e1\u0161en\u00ed. <\/ul>\n