PHPStan拡張のコードから読み解く静的解析の威力と可能性 / PHPStan extension code reading

Slide 1

Slide 1 text

גࣜձࣾΤεɾΤϜɾΤεɹా࣮੣ 1)14UBO֦ுͷίʔυ͔ΒಡΈղ͘ ੩తղੳͷҖྗͱՄೳੑ

Slide 2

Slide 2 text

ࣗݾ঺հ w ా࣮੣!U[N@GSFFEPN w גࣜձࣾΤεɾΤϜɾΤεͷΤϯδχΞ w 1)1ྺ͸ʙ೥͘Β͍ w 1)1ܥΧϯϑΝϨϯεͰͷొஃ͸̎೥ͿΓʜʂʂ w QIQDPOಠࣗϑϨʔϜϫʔΫ1)1ΞϓϦέʔγϣϯͷվળઓུ w 1)1FSLBJHJ%#(QΛ࢖ͬͯ1)1ͷσόοΨʔΛͭ͘Ζ͏ w QIQDPOQIQTSDΛಡΜͰΈΑ͏

Slide 3

Slide 3 text

1)14UBO࢖ͬͯ·͔͢ʂʁ

Slide 4

Slide 4 text

1)14UBOͱ͸ʜʁ͸΋͏ྑ͍Ͱ͢ΑͶʁʁ w 1)1ͷ੩తղੳπʔϧIUUQTQIQTUBOPSH w ΧϯϑΝϨϯε΍8FCهࣄͰ1)14UBOͷ࿩ΛΑ͘ݟΔ͘Β͍ σϑΝΫτ͔ͭ஫໨͞Ε͍ͯΔπʔϧͷ̍ͭ w Ϡόͦ͏ͳίʔυΛεΫϦϓτΛ࣮ߦͤͣʹݕ஌ͯ͘͠ΕΔ

Slide 5

Slide 5 text

Ϡόͦ͏ͳίʔυʁ w ະఆٛม਺ͷࢀর w ଘࡏ͠ͳ͍ΫϥεɺϓϩύςΟɺϝιουͷࢀরɺݺͼग़͠ w ϝιουҾ਺ͷܕ΍਺ͷؒҧ͍ w ϝιουͷ໭Γ஋ͷఆٛͱ࣮૷ͷ໭Γ஋͕ҧ͏ w ར༻͍ͯ͠ͳ͍Ҿ਺ w VTF࿙Ε w ඞͣUSVFGBMTFʹͳΔ෼ذ w ʜ

Slide 6

Slide 6 text

ͦΜͳ୯७ͳϛε͢Δͱࢥͬͨʁʁ w ΈΜͳϛε͢Δ͠Զ΋͢Δ w ࣾαʔϏε΄Ͳ1)14UBOͷಋೖܦݧ͕͋Γ·͕͢ɺલड़ͷΤϥʔ͸શ ͯ͋Γ·ͨ͠ w ಛʹςετ͕े෼ॻ͔Ε͍ͯͳ͍ΞϓϦέʔγϣϯʹରͯ͠ઈେͳޮՌΛ ൃش͠·͢ w ͲΜͳαʔϏεͰ΋ಋೖݕ౼͢ΔՁ஋͸े෼ʹ͋Γ·͢ w ·ͣ͸-FWFM͔Βͷద༻Ͱྑ͍͠ɺͨ͘͞ΜJHOPSF&SSPSͯ͠ྑ͍ͷͰɺ ͍ܰؾ࣋ͪͰೖΕͪΌ͍·͠ΐ͏ʂ

Slide 7

Slide 7 text

ͱ͸͍͑ɺ1)14UBOͷίΞػೳ͚ͩͰ͸ ΧόʔͰ͖ͳ͍έʔε΋͋Δ

Slide 8

Slide 8 text

1)14UBOͷίΞػೳ͚ͩͰ͸ΧόʔͰ͖ͳ͍ͱ͜Ζ w ϚδοΫϝιουͰϓϩύςΟ΍໭Γ஋ͷܕ͕ޮ͔ͳ͍ w ओʹ&MPRVFOUͳͲͷ03.΍ΫΤϦϏϧμʔ w ˞TUVC΍1)1%PDͰͷରԠ͕ݱ࣮తͰ͸ͳ͍৔߹ w ίʔυ੔ܗҎ্ͷίʔσΟϯάن໿ɾ໋໊نଇΛద༻͍ͨ͠৔߹ w ಛఆͷΫϥεΛ໌ࣔతʹΠϯελϯεԽͤͣʹ%*Λ࢖͏Α͏ʹ͍ͨ͠ w ಛఆͷϝιουͷར༻Λېࢭ͍ͨ͠

Slide 9

Slide 9 text

&MPRVFOUϞσϧͱ1)14UBOͷྫ

Slide 10

Slide 10 text

ͦ͜Ͱ1)14UBO֦ு

Slide 11

Slide 11 text

-BSBTUBOͷྫܕਪ࿦ͷ֦ு ΧϥϜͷܕ͔Βਪ࿦͕Ͱ͖ΔΑ͏ʹͳΔ ΫΤϦϏϧμʔͷ໭Γ஋͕(FOFSJDTͳܕʹͳΔ

Slide 12

Slide 12 text

͜ͷτʔΫͰ࿩͢͜ͱ w 1)14UBOͷ֦ுػೳͱ͸ʁ w ֦ுػೳͷछྨ w ࣮ࡍͷ֦ுػೳ͕ͲͷΑ͏ʹͯ͠ಈ͍͍ͯΔͷ͔ w ֦ுػೳͷॻ͖ํɾಡΈํ w ͔ͦ͜ΒಘΒΕΔ։ൃମݧͱ1)1ͷՄೳੑ

Slide 13

Slide 13 text

1)14UBOͷ֦ுػೳͱ͸ʁ

Slide 14

Slide 14 text

1)14UBOͷ֦ுػೳͱ͸ w 1)14UBOͷৼΔ෣͍Λ֦ுͰ͖Δػೳ w 1)14UBOͷݕ஌ϧʔϧͳͲ΋֦ுػೳΛ࢖࣮ͬͯ૷͞Ε͍ͯΔ ʢ૊ΈࠐΈͷ֦ுػೳʣ w ओʹҎԼͷ̏छྨ͕࢖ΘΕΔʢଞʹ΋͋Δ͕ࠓճ͸ׂѪʣ w $VTUPN3VMF w %ZOBNJD3FUVSO5ZQF&YUFOTJPOT w $MBTT3F fl FDUJPO&YUFOTJPOT

Slide 15

Slide 15 text

$VTUPN3VMF w ݕ஌ϧʔϧΛ௥Ճ͢Δػೳ w ྫ͑͹ʜ w ಛఆͷϝιουΛར༻ෆՄʹ͢ΔWBS@EVNQ FDIP ʜ w ݫີൺֱΛڧ੍͢ΔJO@BSSBZ w fi OBMΛڧ੍ͨ͠ΓܧঝΛېࢭ͢Δ w εʔύʔάϩʔόϧม਺ͷར༻Λېࢭ͢Δ w ໋໊نଇͷద༻ʢQSF fi Y TV ff i Y ʜʣ

Slide 16

Slide 16 text

$MBTT3FGMFDUJPO&YUFOTJPO w ϚδοΫϝιουʢ@@TFU @@HFU @@DBMM ʣͷԾ૝తͳϓϩύς ΟɾϝιουΛఆٛ͢Δ֦ுػೳ w ྫ͑͹ʜ w &MPRVFOUͷϓϩύςΟͷܕΛਪ࿦͢Δ w &MPRVFOUͷΫΤϦϏϧμʔͷϚδοΫϝιουΛਪ࿦͢Δ ʢXIFSF999ͳͲʣ w 1)1%PDͷ!QSPQFSUZ΍!NFUIPEΛղऍ͢Δػߏ΋͜ͷ֦ுػೳͰ ࣮૷͞Ε͍ͯΔ

Slide 17

Slide 17 text

%ZOBNJD3FUVSO5ZQF&YUFOTJPOT w ϝιουͷҾ਺ͷ஋ʹԠͯ͡ಈతʹ໭ΓܕΛม͑Δػೳ w ྫ͑͹ʜ w KTPO@EFDPEF ͷ໭Γ஋ w EBUF ͷ໭Γ஋

Slide 18

Slide 18 text

࣮ࡍͷ֦ுػೳ͕Ͳ͏࣮૷͞Ε͍ͯΔͷ ͔ݟ͍͖ͯ·͢👀

Slide 19

Slide 19 text

-BSBTUBO

Slide 20

Slide 20 text

-BSBTUBO w IUUQTHJUIVCDPNMBSBTUBOMBSBTUBO w -BSBWFM༻ͷ1)14UBO֦ு w &MPRVFOUϞσϧͷϓϩύςΟ΍ΫΤϦϏϧμͷϝιουɺ'BDBEF ͳͲΛྑ͍ײ͡ʹܕਪ࿦ͯ͘͠ΕΔ w -BSBWFMΞϓϦέʔγϣϯΛ1)14UBOͰݕࠪ͢Δ৔߹ɺ͜Ε͕ͳ͍ ͱݫ͍͠

Slide 21

Slide 21 text

&MPRVFOUϞσϧͷϓϩύςΟͷܕਪ࿦ $MBTT3F fl FDUJPO&YUFOTJPOͰϚδοΫ ϝιουͳϓϩύςΟʹܕΛ͚ͭΔ HFU1SPQFSUZ ͰϓϩύςΟܕΛฦ͢

Slide 22

Slide 22 text

ςʔϒϧͷΧϥϜ৘ใͷऔಘ ͋Β͔͡Ίηοτ͍ͯͨ͠ΧϥϜͷ ܕ৘ใΛ࢖ͬͯϓϩύςΟܕΛ࡞੒

Slide 23

Slide 23 text

ϚΠάϨʔγϣϯͷ1)1ϑΝΠϧΛ ύʔεͯ͠εΩʔϚ৘ใΛߏங

Slide 24

Slide 24 text

&MPRVFOUϓϩύςΟͷܕਪ࿦ͷ࢓૊Έ w 1)1ͷϚΠάϨʔγϣϯϑΝΠϧΛશͯύʔεͯ͠εΩʔϚ৘ใΛ ૊Έཱͯ w $MBTT3F fl FDUJPO&YUFOTJPOͰ্هεΩʔϚ৘ใΛ࢖ͬͯܕਪ࿦͢ Δ w ࣮ࡍʹ%#Λ্ཱͪ͛ͨΓɺεΩʔϚ͕%#ʹ൓ө͞Ε͍ͯͳͯ͘΋ ಈ͘ͷ͕໘ന͍ϙΠϯτ

Slide 25

Slide 25 text

ߟ࡯ܕ෇͖03.ͱ-BSBTUBO w --Ͱ΋ܕͷ࿩୊͕ग़͕ͪɻ1)14UBO͸ͦͷ̍ͭɻ w 03.΋1SJTNB /PEFKT5ZQF4DSJQU ͳͲܕ෇͖ͷ03.͕޷·Ε Δ܏޲ w &MPRVFOUϞσϧ͸ϚδοΫϝιουࡇΓͰͦΕ͚ͩͰ͸ܕਪ࿦͕ݫ ͍͠ͷ͕ͩɺ1)14UBO-BSBTUBOʹΑΓܕ෇͖03.ʹਐԽ͍ͯ͠Δ w ͨͩ͠ɺίʔυิ׬͸1)14UBOͰ͸ิ͑ͳ͍ͷͰ ผ్ΤσΟλͷϓϥάΠϯ΍MBSBWFMJEFIFMQFSΛ࢖͏ܗʹͳΔ

Slide 26

Slide 26 text

ิ଍4RVBTI42-΋ରԠ͍ͯ͠Δ 42-ϑΝΠϧΛಡΈࠐΜͰύʔε w ͜ΕʹΑΓɺ%#εΩʔϚΛผͷϚΠάϨʔγϣϯํ๏Ͱ؅ཧ͠ ͍ͯΔ-BSBWFMΞϓϦέʔγϣϯͰ΋ରԠͰ͖ͨΓ͠·͢

Slide 27

Slide 27 text

QIQTUBOECB

Slide 28

Slide 28 text

QIQTUBOECBʁ w IUUQTHJUIVCDPNTUBBCNQIQTUBOECB w 1%0΍%PDUSJOFͷ1)14UBO֦ு w 1%04UBUFNFOUGFUDI"MM ʹܕ͕෇͘ w ͭ·Γ42-ͷΫΤϦ݁Ռʹܕ͕෇͘ w ଞͷ֦ுػೳͱൺ΂Δͱઃఆ͕গ͠ಛघ

Slide 29

Slide 29 text

GFUDI"MM ʹܕ͕෇͘

Slide 30

Slide 30 text

ઃఆϑΝΠϧྫ

Slide 31

Slide 31 text

%ZOBNJD.FUIPE3FUVSO5ZQF&YUFOTJPOʹΑΔ࣮૷ 1%0Ϋϥεͷ RVFSZ ϝιου͕ର৅ ୈҰҾ਺Λ࢖ͬͯܕਪ࿦Λ͍ͯ͠Δ

Slide 32

Slide 32 text

ΫΤϦΛ࣮ߦɺϩʔϧόοΫɺܕ৘ใऔಘ 1%0ͰΫΤϦΛ࣮ߦ ΧϥϜ৘ใΛऔಘ ϩʔϧόοΫ

Slide 33

Slide 33 text

QIQTUBOECBͷ࢓૊Έ ࣮ࡍͷ%#ʹ઀ଓɾΫΤϦൃߦΛߦ͍HFU$PMVNO.FUB ͰΧϥϜ ͷϝλ৘ใΛऔಘ͢Δ ͦͷϝλ৘ใΛ1%04UBUFNFOUͷܕͷதʹ͍ΕΔ TUNUGFUDI ͨ͠ͱ͖ʹ্هͷܕ৘ใΛ࢖͍ɺGFUDINPEFʹ Ԡͨ͡ܕͰฦ͢ 42-ͷύʔεͰ͸ͳ࣮͘ࡍʹ࣮ߦ͍ͯ͠ΔͷͰ ॊೈɾਖ਼֬ʹܕ৘ใΛऔಘͰ͖Δͷ͕QIQTUBOECBͷઃܭͰྑ͍ͱ͜Ζ

Slide 34

Slide 34 text

ߟ࡯42-࣮ߦ݁Ռͷܕ෇͚ w TRMD΍1SJTNB5ZQFE42-ͳͲੜ42-ͷ࣮ߦ݁Ռʹରͯ͠ܕΛ͚ͭ ͍ͨχʔζ͕͋Δ w QIQTUBOECBʹΑͬͯ1%0ͷੜ42-ͷ࣮ߦ݁Ռʹܕ͕ͭ͘ w ͨͩ͠ίʔυิ׬͸Ͱ͖ͳ͍ w ίʔυิ׬·Ͱߟ͑ΔͱTRMD΍5ZQFE42-ͷΑ͏ͳίʔυੜ੒ܥͷ Ξϓϩʔν΋ྑ͍͕ɺࣗಈੜ੒ͱ͍͏ϫϯΫογϣϯͷॲཧ͕ೖΔ ͨΊར༻ͷख͕ܰ͞ແ͘ͳͬͯ͠·͏

Slide 35

Slide 35 text

ϓϥΠϕʔτϝιουͷςετΛ ॻ͖ͨ͘ͳΔͱ͖͋Γ·͢ΑͶʁ

Slide 36

Slide 36 text

WJTJCMF'PS5FTUJOH w ੿࡞IUUQTHJUIVCDPNU[NGSFFEPNQIQTUBOFYUFOTJPOT w QSJWBUFϝιου͸QVCMJDϝιουܦ༝Ͱςετͨ͠ΓɺQSJWBUF ϝιουͷॲཧΛผΫϥεʹ੹຿෼཭͢ΔͳͲͷΞϓϩʔν͸Θ ্͔ͬͨͰɺQSJWBUFϝιουΛςετ͍ͨ͠ͱ͍͏ؾ࣋ͪࣗମ͸ ݈શͰ͋Γଚॏ͍ͨ͠ w +BWBͷϥΠϒϥϦ΍'MVUUFSͰ͸!WJTJCMF'PS5FTUJOHͱ͍͏ςε τίʔυͷΈQVCMJDѻ͍͢Δ੩తղੳ༻ͷΞϊςʔγϣϯ͕͋Δ

Slide 37

Slide 37 text

WJTJCMF'PS5FTUJOH ର৅ϝιουʹ"UUSJCVUFΛ෇༩ QVCMJDͳݺͼग़͠͸Τϥʔ 5FTU$BTF͔Β͸ݺͼग़͠0,

Slide 38

Slide 38 text

WJTJCMF'PS5FTUJOHͲ͏࣮૷͞Ε͍ͯΔ͔ ϝιουݺͼग़͠ʹରͯ͠ݕࠪ ݕࠪର৅ͷϊʔυ ࠓճ͸.FUIPE$BMM ੩తղੳͷείʔϓ ͦͷ࣌఺ͷܕ৘ใΛऔಘͰ͖Δ

Slide 39

Slide 39 text

WJTJCMF'PS5FTUJOHͲ͏࣮૷͞Ε͍ͯΔ͔ WJTJCMF'PS5FTUJOHͳϝιου͔Ͳ͏͔ͷ൑ผ 1)16OJUa'SBNFXPSLa5FTU$BTF಺͔Βͷ ݺͼग़͠Ͱ͋Ε͹Τϥʔʹ͠ͳ͍ QSJWBUFͱΈͳͨ͢Ίಉ͡Ϋϥε͔Βͷ ݺͼग़͠Ͱͳ͚Ε͹Τϥʔ

Slide 40

Slide 40 text

WJTJCMF'PS5FTUJOHͷ࢓૊Έ w ର৅ͷϝιου͸QVCMJDͰWJTJCMF'PS5FTUJOHଐੑΛ͚͓ͭͯ͘ w ϝιουݺͼग़͠ .FUIPE$BMM ʹର͢Δ$VTUPN3VMFΛ࣮૷ w ݺͼग़͢ϝιουʹWJTJCMF'PS5FTUJOHଐੑ͕͍͍ͭͯΔ৔߹͸ݕࠪ ର৅ͱ͢Δ w 5FTU$BTFΛܧঝͨ͠Ϋϥε΍ಉҰΫϥε͔Βͷݺͼग़͠Ͱ͋Ε͹0, w ͦ͏Ͱͳ͚Ε͹Τϥʔ

Slide 41

Slide 41 text

੩తղੳͰ1)1ͷݴޠ࢓༷Λӽ͑Δ w ಠࣗͷՄࢹੑΛදݱͰ͖Δ w ಛఆͷঢ়گͰͷΈݺͼग़ͤΔՄࢹੑʢ!WJTJCMF'PS5FTUJOHʣ w 1)1ͷඇରশՄࢹੑΈ͍ͨͳͷ΋ w ಠࣗͷม਺એݴ w ϩʔΧϧͰ࠶୅ೖͰ͖ͳ͍Α͏ʹ͢ΔʢDPOTUʣ w ੩తܕ෇͚ݴޠͷΑ͏ʹ࠶୅ೖͰܕΛݕࠪ͢Δ

Slide 42

Slide 42 text

·ͱΊ w 1)14UBO֦ுͷ࣮૷ํ๏ͱ࣮૷ྫʹ͍ͭͯઆ໌͠·ͨ͠ w 1)14UBO֦ுΛ࢖͏ͱΑΓߴ౓ͳݕ͕ࠪͰ͖·͢ w ϑϨʔϜϫʔΫΛΑΓݎ࿚ʹͰ͖·͢ w 1)1ͷݴޠ࢓༷Λ࿦ཧతʹ֦ு͢Δ͜ͱ΋Ͱ͖·͢

Slide 43

Slide 43 text

੩తղੳΛ࢖͍͜ͳͯ͠ 1)1ΛΑΓ࠷ߴͳݴޠʹ͍͖ͯ͠·͠ΐ͏💪