This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | namespace GuzzleHttp\Handler; |
||
4 | |||
5 | use GuzzleHttp\Psr7\Response; |
||
6 | use GuzzleHttp\Utils; |
||
7 | use Psr\Http\Message\RequestInterface; |
||
8 | use Psr\Http\Message\ResponseInterface; |
||
9 | use Psr\Http\Message\StreamInterface; |
||
10 | |||
11 | /** |
||
12 | * Represents a cURL easy handle and the data it populates. |
||
13 | * |
||
14 | * @internal |
||
15 | */ |
||
16 | final class EasyHandle |
||
17 | { |
||
18 | /** |
||
19 | * @var resource|\CurlHandle cURL resource |
||
20 | */ |
||
21 | public $handle; |
||
22 | |||
23 | /** |
||
24 | * @var StreamInterface Where data is being written |
||
25 | */ |
||
26 | public $sink; |
||
27 | |||
28 | /** |
||
29 | * @var array Received HTTP headers so far |
||
30 | */ |
||
31 | public $headers = []; |
||
32 | |||
33 | /** |
||
34 | * @var ResponseInterface|null Received response (if any) |
||
35 | */ |
||
36 | public $response; |
||
37 | |||
38 | /** |
||
39 | * @var RequestInterface Request being sent |
||
40 | */ |
||
41 | public $request; |
||
42 | |||
43 | /** |
||
44 | * @var array Request options |
||
45 | */ |
||
46 | public $options = []; |
||
47 | |||
48 | /** |
||
49 | * @var int cURL error number (if any) |
||
50 | */ |
||
51 | public $errno = 0; |
||
52 | |||
53 | /** |
||
54 | * @var \Throwable|null Exception during on_headers (if any) |
||
55 | */ |
||
56 | public $onHeadersException; |
||
57 | |||
58 | /** |
||
59 | * @var \Exception|null Exception during createResponse (if any) |
||
60 | */ |
||
61 | public $createResponseException; |
||
62 | |||
63 | /** |
||
64 | * Attach a response to the easy handle based on the received headers. |
||
65 | * |
||
66 | * @throws \RuntimeException if no headers have been received or the first |
||
67 | * header line is invalid. |
||
68 | */ |
||
69 | public function createResponse(): void |
||
70 | { |
||
71 | [$ver, $status, $reason, $headers] = HeaderProcessor::parseHeaders($this->headers); |
||
0 ignored issues
–
show
The variable
$headers seems only to be defined at a later point. Did you maybe move this code here without moving the variable definition?
This error can happen if you refactor code and forget to move the variable initialization. Let’s take a look at a simple example: function someFunction() {
$x = 5;
echo $x;
}
The above code is perfectly fine. Now imagine that we re-order the statements: function someFunction() {
echo $x;
$x = 5;
}
In that case,
Loading history...
|
|||
72 | |||
73 | $normalizedKeys = Utils::normalizeHeaderKeys($headers); |
||
0 ignored issues
–
show
The variable
$headers seems only to be defined at a later point. Did you maybe move this code here without moving the variable definition?
This error can happen if you refactor code and forget to move the variable initialization. Let’s take a look at a simple example: function someFunction() {
$x = 5;
echo $x;
}
The above code is perfectly fine. Now imagine that we re-order the statements: function someFunction() {
echo $x;
$x = 5;
}
In that case,
Loading history...
|
|||
74 | |||
75 | if (!empty($this->options['decode_content']) && isset($normalizedKeys['content-encoding'])) { |
||
76 | $headers['x-encoded-content-encoding'] = $headers[$normalizedKeys['content-encoding']]; |
||
0 ignored issues
–
show
Coding Style
Comprehensibility
introduced
by
$headers was never initialized. Although not strictly required by PHP, it is generally a good practice to add $headers = array(); before regardless.
Adding an explicit array definition is generally preferable to implicit array definition as it guarantees a stable state of the code. Let’s take a look at an example: foreach ($collection as $item) {
$myArray['foo'] = $item->getFoo();
if ($item->hasBar()) {
$myArray['bar'] = $item->getBar();
}
// do something with $myArray
}
As you can see in this example, the array This might or might not be intended. To make your intention clear, your code more readible and to avoid accidental bugs, we recommend to add an explicit initialization $myArray = array() either outside or inside the foreach loop.
Loading history...
The variable
$headers seems only to be defined at a later point. Did you maybe move this code here without moving the variable definition?
This error can happen if you refactor code and forget to move the variable initialization. Let’s take a look at a simple example: function someFunction() {
$x = 5;
echo $x;
}
The above code is perfectly fine. Now imagine that we re-order the statements: function someFunction() {
echo $x;
$x = 5;
}
In that case,
Loading history...
|
|||
77 | unset($headers[$normalizedKeys['content-encoding']]); |
||
78 | if (isset($normalizedKeys['content-length'])) { |
||
79 | $headers['x-encoded-content-length'] = $headers[$normalizedKeys['content-length']]; |
||
80 | |||
81 | $bodyLength = (int) $this->sink->getSize(); |
||
82 | if ($bodyLength) { |
||
83 | $headers[$normalizedKeys['content-length']] = $bodyLength; |
||
84 | } else { |
||
85 | unset($headers[$normalizedKeys['content-length']]); |
||
86 | } |
||
87 | } |
||
88 | } |
||
89 | |||
90 | // Attach a response to the easy handle with the parsed headers. |
||
91 | $this->response = new Response( |
||
92 | $status, |
||
93 | $headers, |
||
0 ignored issues
–
show
The variable
$headers does not seem to be defined for all execution paths leading up to this point.
If you define a variable conditionally, it can happen that it is not defined for all execution paths. Let’s take a look at an example: function myFunction($a) {
switch ($a) {
case 'foo':
$x = 1;
break;
case 'bar':
$x = 2;
break;
}
// $x is potentially undefined here.
echo $x;
}
In the above example, the variable $x is defined if you pass “foo” or “bar” as argument for $a. However, since the switch statement has no default case statement, if you pass any other value, the variable $x would be undefined. Available Fixes
Loading history...
|
|||
94 | $this->sink, |
||
95 | $ver, |
||
96 | $reason |
||
97 | ); |
||
98 | } |
||
99 | |||
100 | /** |
||
101 | * @param string $name |
||
102 | * |
||
103 | * @return void |
||
104 | * |
||
105 | * @throws \BadMethodCallException |
||
106 | */ |
||
107 | public function __get($name) |
||
108 | { |
||
109 | $msg = $name === 'handle' ? 'The EasyHandle has been released' : 'Invalid property: ' . $name; |
||
110 | throw new \BadMethodCallException($msg); |
||
111 | } |
||
112 | } |
||
113 |
This check marks access to variables or properties that have not been declared yet. While PHP has no explicit notion of declaring a variable, accessing it before a value is assigned to it is most likely a bug.