Issues (71)

Security Analysis    no request data  

This project does not seem to handle request data directly as such no vulnerable execution paths were found.

  Cross-Site Scripting
Cross-Site Scripting enables an attacker to inject code into the response of a web-request that is viewed by other users. It can for example be used to bypass access controls, or even to take over other users' accounts.
  File Exposure
File Exposure allows an attacker to gain access to local files that he should not be able to access. These files can for example include database credentials, or other configuration files.
  File Manipulation
File Manipulation enables an attacker to write custom data to files. This potentially leads to injection of arbitrary code on the server.
  Object Injection
Object Injection enables an attacker to inject an object into PHP code, and can lead to arbitrary code execution, file exposure, or file manipulation attacks.
  Code Injection
Code Injection enables an attacker to execute arbitrary code on the server.
  Response Splitting
Response Splitting can be used to send arbitrary responses.
  File Inclusion
File Inclusion enables an attacker to inject custom files into PHP's file loading mechanism, either explicitly passed to include, or for example via PHP's auto-loading mechanism.
  Command Injection
Command Injection enables an attacker to inject a shell command that is execute with the privileges of the web-server. This can be used to expose sensitive data, or gain access of your server.
  SQL Injection
SQL Injection enables an attacker to execute arbitrary SQL code on your database server gaining access to user data, or manipulating user data.
  XPath Injection
XPath Injection enables an attacker to modify the parts of XML document that are read. If that XML document is for example used for authentication, this can lead to further vulnerabilities similar to SQL Injection.
  LDAP Injection
LDAP Injection enables an attacker to inject LDAP statements potentially granting permission to run unauthorized queries, or modify content inside the LDAP tree.
  Header Injection
  Other Vulnerability
This category comprises other attack vectors such as manipulating the PHP runtime, loading custom extensions, freezing the runtime, or similar.
  Regex Injection
Regex Injection enables an attacker to execute arbitrary code in your PHP process.
  XML Injection
XML Injection enables an attacker to read files on your local filesystem including configuration files, or can be abused to freeze your web-server process.
  Variable Injection
Variable Injection enables an attacker to overwrite program variables with custom data, and can lead to further vulnerabilities.
Unfortunately, the security analysis is currently not available for your project. If you are a non-commercial open-source project, please contact support to gain access.

src/IPv4/IPv4Interval.php (3 issues)

Upgrade to new PHP Analysis Engine

These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more

1
<?php
2
3
/**
4
 * GpsLab component.
5
 *
6
 * @author    Peter Gribanov <[email protected]>
7
 * @copyright Copyright (c) 2016, Peter Gribanov
8
 * @license   http://opensource.org/licenses/MIT
9
 */
10
11
namespace GpsLab\Component\Interval\IPv4;
12
13
use GpsLab\Component\Interval\Exception\IncorrectIntervalException;
14
use GpsLab\Component\Interval\Exception\InvalidIntervalFormatException;
15
use GpsLab\Component\Interval\IntervalComparator;
16
use GpsLab\Component\Interval\ComparableIntervalInterface;
17
use GpsLab\Component\Interval\IntervalPointInterface;
18
use GpsLab\Component\Interval\IntervalType;
19
20
class IPv4Interval implements ComparableIntervalInterface
21
{
22
    /**
23
     * @var string
24
     */
25
    const REGEXP = '/^
26
        (?:\(|\[)                                  # start type char
27
        \s*
28
        (?<start>'.IPv4IntervalPoint::IPV4_ADDR.') # start point
29
        \s*,\s*                                    # separator
30
        (?<end>'.IPv4IntervalPoint::IPV4_ADDR.')   # end point
31
        \s*
32
        (?:\)|\])                                  # end type char
33
    $/x';
34
35
    /**
36
     * @var IntervalType
37
     */
38
    private $type;
39
40
    /**
41
     * @var IntervalComparator
42
     */
43
    private $comparator;
44
45
    /**
46
     * @var IPv4IntervalPoint
47
     */
48
    private $start;
49
50
    /**
51
     * @var IPv4IntervalPoint
52
     */
53
    private $end;
54
55
    /**
56
     * @param IPv4IntervalPoint $start
57
     * @param IPv4IntervalPoint $end
58
     * @param IntervalType $type
59
     */
60 4
    private function __construct(IPv4IntervalPoint $start, IPv4IntervalPoint $end, IntervalType $type)
61
    {
62 4
        if ($start->gte($end)) {
63
            throw IncorrectIntervalException::create();
64
        }
65
66 4
        $this->type = $type;
67 4
        $this->start = $start;
68 4
        $this->end = $end;
69 4
        $this->comparator = new IntervalComparator($this);
70 4
    }
71
72
    /**
73
     * @param string $start
74
     * @param string $end
75
     * @param IntervalType $type
76
     *
77
     * @return self
78
     */
79 4
    public static function create($start, $end, IntervalType $type)
80
    {
81 4
        return new self(new IPv4IntervalPoint($start), new IPv4IntervalPoint($end), $type);
82
    }
83
84
    /**
85
     * @param string $start
86
     * @param string $end
87
     *
88
     * @return self
89
     */
90 1
    public static function closed($start, $end)
91
    {
92 1
        return static::create($start, $end, IntervalType::closed());
93
    }
94
95
    /**
96
     * @param string $start
97
     * @param string $end
98
     *
99
     * @return self
100
     */
101
    public static function halfClosed($start, $end)
102
    {
103
        return static::create($start, $end, IntervalType::halfClosed());
104
    }
105
106
    /**
107
     * @param string $start
108
     * @param string $end
109
     *
110
     * @return self
111
     */
112
    public static function halfOpen($start, $end)
113
    {
114
        return static::create($start, $end, IntervalType::halfOpen());
115
    }
116
117
    /**
118
     * @param string $start
119
     * @param string $end
120
     *
121
     * @return self
122
     */
123 1
    public static function open($start, $end)
124
    {
125 1
        return static::create($start, $end, IntervalType::open());
126
    }
127
128
    /**
129
     * Create interval from string.
130
     *
131
     * Example formats for all interval types:
132
     *   [10.0.1.0, 10.0.1.255]
133
     *   (10.0.0.0, 10.255.255.255]
134
     *   [172.16.0.0, 172.31.255.255)
135
     *   (192.168.0.0, 192.168.255.255)
136
     *
137
     * Spaces are ignored in format.
138
     *
139
     * @param string $string
140
     *
141
     * @return self
142
     */
143 2
    public static function fromString($string)
144
    {
145 2
        if (!preg_match(self::REGEXP, $string, $match)) {
146
            throw InvalidIntervalFormatException::create('[0.0.0.0, 255.255.255.255]', $string);
147
        }
148
149 2
        return self::create($match['start'], $match['end'], IntervalType::fromString($string));
150
    }
151
152
    /**
153
     * Checks if this interval is equal to the specified interval.
154
     *
155
     * @param IPv4Interval $interval
156
     *
157
     * @return bool
158
     */
159
    public function equal(self $interval)
160
    {
161
        return $this->comparator->equal($interval);
162
    }
163
164
    /**
165
     * Does this interval contain the specified point.
166
     *
167
     * @param string $point
168
     *
169
     * @return bool
170
     */
171
    public function contains($point)
172
    {
173
        return $this->comparator->contains(new IPv4IntervalPoint($point));
174
    }
175
176
    /**
177
     * Does this interval intersect the specified interval.
178
     *
179
     * @param IPv4Interval $interval
180
     *
181
     * @return bool
182
     */
183
    public function intersects(self $interval)
184
    {
185
        return $this->comparator->intersects($interval);
186
    }
187
188
    /**
189
     * Gets the intersection between this interval and another interval.
190
     *
191
     * @param IPv4Interval $interval
192
     *
193
     * @return self|null
194
     */
195
    public function intersection(self $interval)
196
    {
197
        return $this->comparator->intersection($interval);
198
    }
199
200
    /**
201
     * Gets the covered interval between this Interval and another interval.
202
     *
203
     * @param IPv4Interval $interval
204
     *
205
     * @return self
206
     */
207
    public function cover(self $interval)
208
    {
209
        return $this->comparator->cover($interval);
210
    }
211
212
    /**
213
     * Gets the gap between this interval and another interval.
214
     *
215
     * @param IPv4Interval $interval
216
     *
217
     * @return self|null
218
     */
219
    public function gap(self $interval)
220
    {
221
        return $this->comparator->gap($interval);
222
    }
223
224
    /**
225
     * Does this interval abuts with the interval specified.
226
     *
227
     * @param IPv4Interval $interval
228
     *
229
     * @return bool
230
     */
231
    public function abuts(self $interval)
232
    {
233
        return $this->comparator->abuts($interval);
234
    }
235
236
    /**
237
     * Joins the interval between the adjacent.
238
     *
239
     * @param IPv4Interval $interval
240
     *
241
     * @return self|null
242
     */
243
    public function join(self $interval)
244
    {
245
        return $this->comparator->join($interval);
246
    }
247
248
    /**
249
     * Gets the union between this interval and another interval.
250
     *
251
     * @param IPv4Interval $interval
252
     *
253
     * @return self|null
254
     */
255
    public function union(self $interval)
256
    {
257
        return $this->comparator->union($interval);
258
    }
259
260
    /**
261
     * The point is before the interval.
262
     *
263
     * @param string $point
264
     *
265
     * @return bool
266
     */
267
    public function before($point)
268
    {
269
        return $this->comparator->before(new IPv4IntervalPoint($point));
270
    }
271
272
    /**
273
     * The point is after the interval.
274
     *
275
     * @param string $point
276
     *
277
     * @return bool
278
     */
279
    public function after($point)
280
    {
281
        return $this->comparator->after(new IPv4IntervalPoint($point));
282
    }
283
284
    /**
285
     * @param int $step
286
     *
287
     * @return \Generator
288
     */
289 2 View Code Duplication
    public function iterate($step = 1)
0 ignored issues
show
This method seems to be duplicated in your project.

Duplicated code is one of the most pungent code smells. If you need to duplicate the same code in three or more different places, we strongly encourage you to look into extracting the code into a single class or operation.

You can also find more detailed suggestions in the “Code” section of your repository.

Loading history...
290
    {
291 2
        $end = $this->endPoint()->value();
292 2
        $ip = $this->startPoint()->value();
293
294 2
        if ($this->type->startExcluded()) {
295 1
            $ip += $step;
296
        }
297
298 2
        while ($ip < $end || (!$this->type->endExcluded() && $ip == $end)) {
299 2
            yield long2ip($ip);
300 2
            $ip += $step;
301
        }
302 2
    }
303
304
    /**
305
     * @return IntervalType
306
     */
307
    public function type()
308
    {
309
        return $this->type;
310
    }
311
312
    /**
313
     * @return string
314
     */
315
    public function start()
316
    {
317
        return (string) $this->start;
318
    }
319
320
    /**
321
     * @return string
322
     */
323
    public function end()
324
    {
325
        return (string) $this->end;
326
    }
327
328
    /**
329
     * @return IPv4IntervalPoint
330
     */
331 3
    public function startPoint()
332
    {
333 3
        return $this->start;
334
    }
335
336
    /**
337
     * @return IPv4IntervalPoint
338
     */
339 3
    public function endPoint()
340
    {
341 3
        return $this->end;
342
    }
343
344
    /**
345
     * Returns a copy of this Interval with the start point altered.
346
     *
347
     * @param IntervalPointInterface|IPv4IntervalPoint $start
348
     *
349
     * @return self
350
     */
351
    public function withStart(IntervalPointInterface $start)
352
    {
353
        return new self($start, $this->end, $this->type);
0 ignored issues
show
$start of type object<GpsLab\Component\...IntervalPointInterface> is not a sub-type of object<GpsLab\Component\...IPv4\IPv4IntervalPoint>. It seems like you assume a concrete implementation of the interface GpsLab\Component\Interval\IntervalPointInterface to be always present.

This check looks for parameters that are defined as one type in their type hint or doc comment but seem to be used as a narrower type, i.e an implementation of an interface or a subclass.

Consider changing the type of the parameter or doing an instanceof check before assuming your parameter is of the expected type.

Loading history...
354
    }
355
356
    /**
357
     * Returns a copy of this Interval with the end point altered.
358
     *
359
     * @param IntervalPointInterface|IPv4IntervalPoint $end
360
     *
361
     * @return self
362
     */
363
    public function withEnd(IntervalPointInterface $end)
364
    {
365
        return new self($this->start, $end, $this->type);
0 ignored issues
show
$end of type object<GpsLab\Component\...IntervalPointInterface> is not a sub-type of object<GpsLab\Component\...IPv4\IPv4IntervalPoint>. It seems like you assume a concrete implementation of the interface GpsLab\Component\Interval\IntervalPointInterface to be always present.

This check looks for parameters that are defined as one type in their type hint or doc comment but seem to be used as a narrower type, i.e an implementation of an interface or a subclass.

Consider changing the type of the parameter or doing an instanceof check before assuming your parameter is of the expected type.

Loading history...
366
    }
367
368
    /**
369
     * Returns a copy of this Interval with the interval type altered.
370
     *
371
     * @param IntervalType $type
372
     *
373
     * @return self
374
     */
375
    public function withType(IntervalType $type)
376
    {
377
        return new self($this->start, $this->end, $type);
378
    }
379
380
    /**
381
     * @return string
382
     */
383 1
    public function __toString()
384
    {
385 1
        return $this->type->formatInterval($this);
386
    }
387
}
388