On Using Static Analysis to Detect Type Errors in PHP Applications
Etienne Kneuss, Philippe Suter, Viktor Kunčak · Infoscience (Ecole Polytechnique Fédérale de Lausanne) · 2010
We describe our experience in using abstract interpretation to analyze applications written in PHP. Our work focuses on reconstructing type information from mostly unannotated code. We present the abstract domain of our analysis, focusing on the features that improve analysis precision. We have implemented our approach as a tool that supports the full specification of PHP 5. We describe several bugs that we were able to find in deployed web applications.