This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | declare(strict_types=1); |
||
3 | |||
4 | namespace MessagePack; |
||
5 | |||
6 | use MessagePack\{ |
||
7 | Exception\UnsupportedType, |
||
8 | Ext |
||
0 ignored issues
–
show
|
|||
9 | }; |
||
10 | use const MessagePack\CHR; |
||
11 | use function array_values; |
||
12 | use function count; |
||
13 | use function is_array; |
||
14 | use function is_bool; |
||
15 | use function is_float; |
||
16 | use function is_int; |
||
17 | use function is_string; |
||
18 | use function pack; |
||
19 | use function strlen; |
||
20 | |||
21 | final class Encoder |
||
22 | { |
||
23 | public const FORCE_AUTO = 0b00; |
||
24 | public const FORCE_ARR = 0b01; |
||
25 | public const FORCE_MAP = 0b10; |
||
26 | |||
27 | /** @var int */ |
||
28 | private $typeDetectionMode = self::FORCE_AUTO; |
||
29 | |||
30 | 71 | public function __construct(int $typeDetectionMode = null) |
|
31 | { |
||
32 | 71 | if (null !== $typeDetectionMode) { |
|
33 | 5 | $this->typeDetectionMode |= $typeDetectionMode; |
|
34 | } |
||
35 | 71 | } |
|
36 | |||
37 | 71 | public function encode($value): string |
|
38 | { |
||
39 | 71 | if (is_int($value)) { |
|
40 | 41 | return $this->encodeInt($value); |
|
41 | } |
||
42 | 45 | if (is_string($value)) { |
|
43 | 7 | return $this->encodeStr($value); |
|
44 | } |
||
45 | 38 | if (is_array($value)) { |
|
46 | 16 | if ($this->typeDetectionMode ^ self::FORCE_AUTO) { |
|
47 | 3 | return $this->typeDetectionMode & self::FORCE_MAP |
|
48 | 2 | ? $this->encodeMap($value) |
|
49 | 3 | : $this->encodeArray($value); |
|
50 | } |
||
51 | 13 | return array_values($value) === $value |
|
52 | 8 | ? $this->encodeArray($value) |
|
53 | 13 | : $this->encodeMap($value); |
|
54 | } |
||
55 | 22 | if (is_float($value)) { |
|
56 | 6 | return $this->encodeFloat($value); |
|
57 | } |
||
58 | 16 | if (is_bool($value)) { |
|
59 | 3 | return $value ? "\xc3" : "\xc2"; |
|
60 | } |
||
61 | 13 | if (null === $value) { |
|
62 | 1 | return "\xc0"; |
|
63 | } |
||
64 | 12 | if ($value instanceof Ext) { |
|
65 | 9 | return $this->encodeExt($value); |
|
66 | } |
||
67 | |||
68 | 3 | throw UnsupportedType::withValue($value); |
|
69 | } |
||
70 | |||
71 | public function encodeNil(): string |
||
72 | { |
||
73 | return "\xc0"; |
||
74 | } |
||
75 | |||
76 | public function encodeBool(bool $value): string |
||
77 | { |
||
78 | return $value ? "\xc3" : "\xc2"; |
||
79 | } |
||
80 | |||
81 | 6 | public function encodeFloat(float $num): string |
|
82 | { |
||
83 | 6 | $b1 = pack('E', $num); |
|
84 | |||
85 | 6 | return "\xcb${b1}"; |
|
86 | } |
||
87 | |||
88 | public function encodeInt(int $num): string |
||
89 | { |
||
90 | 41 | if ($num >= 0) { |
|
91 | // positive fixint |
||
92 | 25 | if ($num <= 0x7f) { |
|
93 | 17 | return CHR[$num]; |
|
94 | } |
||
95 | // uint 8 |
||
96 | 10 | if ($num <= 0xff) { |
|
97 | 4 | $b1 = CHR[$num]; |
|
98 | 4 | return "\xcc${b1}"; |
|
99 | } |
||
100 | // uint 16 |
||
101 | 8 | if ($num <= 0xffff) { |
|
102 | 4 | $b1 = CHR[$num >> 8]; |
|
103 | 4 | $b2 = CHR[$num & 0xff]; |
|
104 | 4 | return "\xcd${b1}${b2}"; |
|
105 | } |
||
106 | // uint 32 |
||
107 | 5 | if ($num <= 0xffffffff) { |
|
108 | 3 | $b1 = CHR[$num >> 24]; |
|
109 | 3 | $b2 = CHR[$num >> 16 & 0xff]; |
|
110 | 3 | $b3 = CHR[$num >> 8 & 0xff]; |
|
111 | 3 | $b4 = CHR[$num & 0xff]; |
|
112 | 3 | return "\xce${b1}${b2}${b3}${b4}"; |
|
113 | } |
||
114 | // uint 64 |
||
115 | 2 | $hi = ($num & 0xffffffff00000000) >> 32; |
|
116 | 2 | $lo = $num & 0x00000000ffffffff; |
|
117 | |||
118 | 2 | $b1 = CHR[$hi >> 24 & 0xff]; |
|
119 | 2 | $b2 = CHR[$hi >> 16 & 0xff]; |
|
120 | 2 | $b3 = CHR[$hi >> 8 & 0xff]; |
|
121 | 2 | $b4 = CHR[$hi & 0xff]; |
|
122 | 2 | $b5 = CHR[$lo >> 24 & 0xff]; |
|
123 | 2 | $b6 = CHR[$lo >> 16 & 0xff]; |
|
124 | 2 | $b7 = CHR[$lo >> 8 & 0xff]; |
|
125 | 2 | $b8 = CHR[$lo & 0xff]; |
|
126 | 2 | return "\xcf${b1}${b2}${b3}${b4}${b5}${b6}${b7}${b8}"; |
|
127 | } |
||
128 | // negative fixint |
||
129 | 16 | if ($num >= -0x20) { |
|
130 | 2 | return CHR[$num & 0xff]; |
|
131 | } |
||
132 | // int 8 |
||
133 | 14 | if ($num >= -0x80) { |
|
134 | 2 | $b1 = CHR[$num & 0xff]; |
|
135 | 2 | return "\xd0${b1}"; |
|
136 | } |
||
137 | // int 16 |
||
138 | 12 | if ($num >= -0x8000) { |
|
139 | 2 | $b1 = CHR[$num >> 8 & 0xff]; |
|
140 | 2 | $b2 = CHR[$num & 0xff]; |
|
141 | 2 | return "\xd1${b1}${b2}"; |
|
142 | } |
||
143 | // int 32 |
||
144 | 10 | if ($num >= -0x80000000) { |
|
145 | 2 | $num |= 0x100000000; |
|
146 | 2 | $b1 = CHR[$num >> 24 & 0xff]; |
|
147 | 2 | $b2 = CHR[$num >> 16 & 0xff]; |
|
148 | 2 | $b3 = CHR[$num >> 8 & 0xff]; |
|
149 | 2 | $b4 = CHR[$num & 0xff]; |
|
150 | 2 | return "\xd2${b1}${b2}${b3}${b4}"; |
|
151 | } |
||
152 | // int 64 |
||
153 | 8 | $hi = ($num & 0xffffffff00000000) >> 32; |
|
154 | 8 | $lo = $num & 0x00000000ffffffff; |
|
155 | |||
156 | 8 | $b1 = CHR[$hi >> 24 & 0xff]; |
|
157 | 8 | $b2 = CHR[$hi >> 16 & 0xff]; |
|
158 | 8 | $b3 = CHR[$hi >> 8 & 0xff]; |
|
159 | 8 | $b4 = CHR[$hi & 0xff]; |
|
160 | 8 | $b5 = CHR[$lo >> 24 & 0xff]; |
|
161 | 8 | $b6 = CHR[$lo >> 16 & 0xff]; |
|
162 | 8 | $b7 = CHR[$lo >> 8 & 0xff]; |
|
163 | 8 | $b8 = CHR[$lo & 0xff]; |
|
164 | 8 | return "\xd3${b1}${b2}${b3}${b4}${b5}${b6}${b7}${b8}"; |
|
165 | } |
||
166 | |||
167 | public function encodeStr(string $str): string |
||
168 | { |
||
169 | 7 | $len = strlen($str); |
|
170 | // fixstr |
||
171 | 7 | if ($len < 0x20) { |
|
172 | 2 | $b0 = CHR[0xa0 | $len]; |
|
173 | 2 | return "${b0}${str}"; |
|
174 | } |
||
175 | // str 8 |
||
176 | 5 | if ($len <= 0xff) { |
|
177 | 2 | $b1 = CHR[$len]; |
|
178 | 2 | return "\xd9${b1}${str}"; |
|
179 | } |
||
180 | // str 16 |
||
181 | 3 | if ($len <= 0xffff) { |
|
182 | 2 | $b1 = CHR[$len >> 8]; |
|
183 | 2 | $b2 = CHR[$len & 0xff]; |
|
184 | 2 | return "\xda${b1}${b2}${str}"; |
|
185 | } |
||
186 | // str 32 |
||
187 | 1 | $b1 = CHR[$len >> 24]; |
|
188 | 1 | $b2 = CHR[$len >> 16]; |
|
189 | 1 | $b3 = CHR[$len >> 8]; |
|
190 | 1 | $b4 = CHR[$len & 0xff]; |
|
191 | 1 | return "\xdb${b1}${b2}${b3}${b4}${str}"; |
|
192 | } |
||
193 | |||
194 | public function encodeArray(array $array): string |
||
195 | { |
||
196 | 9 | $size = count($array); |
|
197 | |||
198 | 9 | if ($size <= 0xf) { // fixarray |
|
199 | 6 | $data = CHR[0x90 | $size]; |
|
200 | 3 | } elseif ($size <= 0xffff) { // array 16 |
|
201 | 2 | $b1 = CHR[$size >> 8]; |
|
202 | 2 | $b2 = CHR[$size & 0xff]; |
|
203 | 2 | $data = "\xdc${b1}${b2}"; |
|
204 | } else { // array 32 |
||
205 | 1 | $b1 = CHR[$size >> 24]; |
|
206 | 1 | $b2 = CHR[$size >> 16]; |
|
207 | 1 | $b3 = CHR[$size >> 8]; |
|
208 | 1 | $b4 = CHR[$size & 0xff]; |
|
209 | 1 | $data = "\xdd${b1}${b2}${b3}${b4}"; |
|
210 | } |
||
211 | |||
212 | 9 | foreach ($array as $value) { |
|
213 | 8 | $data .= $this->encode($value); |
|
214 | } |
||
215 | |||
216 | 9 | return $data; |
|
217 | } |
||
218 | |||
219 | public function encodeMap(array $map): string |
||
220 | { |
||
221 | 7 | $size = count($map); |
|
222 | |||
223 | 7 | if ($size <= 0xf) { // fixmap |
|
224 | 4 | $data = CHR[0x80 | $size]; |
|
225 | 3 | } elseif ($size <= 0xffff) { // map 16 |
|
226 | 2 | $b1 = CHR[$size >> 8]; |
|
227 | 2 | $b2 = CHR[$size & 0xff]; |
|
228 | 2 | $data = "\xde${b1}${b2}"; |
|
229 | } else { // map 32 |
||
230 | 1 | $b1 = CHR[$size >> 24]; |
|
231 | 1 | $b2 = CHR[$size >> 16]; |
|
232 | 1 | $b3 = CHR[$size >> 8]; |
|
233 | 1 | $b4 = CHR[$size & 0xff]; |
|
234 | 1 | $data = "\xdf${b1}${b2}${b3}${b4}"; |
|
235 | } |
||
236 | |||
237 | 7 | foreach ($map as $key => $value) { |
|
238 | 7 | $data .= "{$this->encode($key)}{$this->encode($value)}"; |
|
239 | } |
||
240 | |||
241 | 7 | return $data; |
|
242 | } |
||
243 | |||
244 | public function encodeExt(Ext $ext): string |
||
245 | { |
||
246 | 9 | $type = CHR[$ext->type() & 0x7f]; |
|
247 | 9 | $data = $ext->data(); |
|
248 | |||
249 | 9 | $len = strlen($data); |
|
250 | |||
251 | // fixext 1/2/4/8/16 |
||
252 | 9 | switch ($len) { |
|
253 | 9 | case 1: return "\xd4${type}${data}"; |
|
0 ignored issues
–
show
The case body in a switch statement must start on the line following the statement.
According to the PSR-2, the body of a case statement must start on the line immediately following the case statement. switch ($expr) {
case "A":
doSomething(); //right
break;
case "B":
doSomethingElse(); //wrong
break;
} To learn more about the PSR-2 coding standard, please refer to the PHP-Fig. ![]() Terminating statement must be on a line by itself
As per the PSR-2 coding standard, the switch ($expr) {
case "A":
doSomething();
break; //wrong
case "B":
doSomething();
break; //right
case "C:":
doSomething();
return true; //right
}
To learn more about the PSR-2 coding standard, please refer to the PHP-Fig. ![]() |
|||
254 | 8 | case 2: return "\xd5${type}${data}"; |
|
0 ignored issues
–
show
The case body in a switch statement must start on the line following the statement.
According to the PSR-2, the body of a case statement must start on the line immediately following the case statement. switch ($expr) {
case "A":
doSomething(); //right
break;
case "B":
doSomethingElse(); //wrong
break;
} To learn more about the PSR-2 coding standard, please refer to the PHP-Fig. ![]() Terminating statement must be on a line by itself
As per the PSR-2 coding standard, the switch ($expr) {
case "A":
doSomething();
break; //wrong
case "B":
doSomething();
break; //right
case "C:":
doSomething();
return true; //right
}
To learn more about the PSR-2 coding standard, please refer to the PHP-Fig. ![]() |
|||
255 | 7 | case 4: return "\xd6${type}${data}"; |
|
0 ignored issues
–
show
The case body in a switch statement must start on the line following the statement.
According to the PSR-2, the body of a case statement must start on the line immediately following the case statement. switch ($expr) {
case "A":
doSomething(); //right
break;
case "B":
doSomethingElse(); //wrong
break;
} To learn more about the PSR-2 coding standard, please refer to the PHP-Fig. ![]() Terminating statement must be on a line by itself
As per the PSR-2 coding standard, the switch ($expr) {
case "A":
doSomething();
break; //wrong
case "B":
doSomething();
break; //right
case "C:":
doSomething();
return true; //right
}
To learn more about the PSR-2 coding standard, please refer to the PHP-Fig. ![]() |
|||
256 | 6 | case 8: return "\xd7${type}${data}"; |
|
0 ignored issues
–
show
The case body in a switch statement must start on the line following the statement.
According to the PSR-2, the body of a case statement must start on the line immediately following the case statement. switch ($expr) {
case "A":
doSomething(); //right
break;
case "B":
doSomethingElse(); //wrong
break;
} To learn more about the PSR-2 coding standard, please refer to the PHP-Fig. ![]() Terminating statement must be on a line by itself
As per the PSR-2 coding standard, the switch ($expr) {
case "A":
doSomething();
break; //wrong
case "B":
doSomething();
break; //right
case "C:":
doSomething();
return true; //right
}
To learn more about the PSR-2 coding standard, please refer to the PHP-Fig. ![]() |
|||
257 | 5 | case 16: return "\xd8${type}${data}"; |
|
0 ignored issues
–
show
The case body in a switch statement must start on the line following the statement.
According to the PSR-2, the body of a case statement must start on the line immediately following the case statement. switch ($expr) {
case "A":
doSomething(); //right
break;
case "B":
doSomethingElse(); //wrong
break;
} To learn more about the PSR-2 coding standard, please refer to the PHP-Fig. ![]() Terminating statement must be on a line by itself
As per the PSR-2 coding standard, the switch ($expr) {
case "A":
doSomething();
break; //wrong
case "B":
doSomething();
break; //right
case "C:":
doSomething();
return true; //right
}
To learn more about the PSR-2 coding standard, please refer to the PHP-Fig. ![]() |
|||
258 | } |
||
259 | // ext 8 |
||
260 | 4 | if ($len <= 0xff) { |
|
261 | 1 | $b1 = CHR[$len]; |
|
262 | 1 | return "\xc7${b1}${type}${data}"; |
|
263 | } |
||
264 | // ext 16 |
||
265 | 3 | if ($len <= 0xffff) { |
|
266 | 2 | $b1 = CHR[$len >> 8]; |
|
267 | 2 | $b2 = CHR[$len & 0xff]; |
|
268 | 2 | return "\xc8${b1}${b2}${type}${data}"; |
|
269 | } |
||
270 | // ext 32 |
||
271 | 1 | $b1 = CHR[$len >> 24 & 0xff]; |
|
272 | 1 | $b2 = CHR[$len >> 16 & 0xff]; |
|
273 | 1 | $b3 = CHR[$len >> 8 & 0xff]; |
|
274 | 1 | $b4 = CHR[$len & 0xff]; |
|
275 | 1 | return "\xc9${b1}${b2}${b3}${b4}${type}${data}"; |
|
276 | } |
||
277 | } |
||
278 |
Let’s assume that you have a directory layout like this:
and let’s assume the following content of
Bar.php
:If both files
OtherDir/Foo.php
andSomeDir/Foo.php
are loaded in the same runtime, you will see a PHP error such as the following:PHP Fatal error: Cannot use SomeDir\Foo as Foo because the name is already in use in OtherDir/Foo.php
However, as
OtherDir/Foo.php
does not necessarily have to be loaded and the error is only triggered if it is loaded beforeOtherDir/Bar.php
, this problem might go unnoticed for a while. In order to prevent this error from surfacing, you must import the namespace with a different alias: