2023-05-03 11:06:20 +02:00
== Why is this an issue?
2020-12-21 15:38:52 +01:00
In PHP it is not required to initialize variables before their usage. However, using uninitialized variables is considered bad practice and should be avoided because of the following reasons:
* The value and type of uninitialized variables depend on the context of their first usage. It is better to be explicit about those to avoid confusion.
* The interpreter raises a warning or a notice in many cases.
2020-06-30 12:50:59 +02:00
2023-05-03 11:06:20 +02:00
=== Noncompliant code example
2020-06-30 12:50:59 +02:00
2022-02-04 17:28:24 +01:00
[source,php]
2020-06-30 12:50:59 +02:00
----
2020-12-21 15:38:52 +01:00
<?php
function getText(array $lines): string {
foreach ($lines as $line) {
$text .= $line;
}
return $text;
2020-06-30 12:50:59 +02:00
}
----
2023-05-03 11:06:20 +02:00
=== Compliant solution
2020-06-30 12:50:59 +02:00
2022-02-04 17:28:24 +01:00
[source,php]
2020-06-30 12:50:59 +02:00
----
2020-12-21 15:38:52 +01:00
<?php
function getText(array $lines): string {
$text = "";
foreach ($lines as $line) {
$text .= $line;
}
return $text;
2020-06-30 12:50:59 +02:00
}
----
2023-05-25 14:18:12 +02:00
== Resources
2024-01-15 17:15:56 +01:00
* CWE - https://cwe.mitre.org/data/definitions/457[CWE-457 - Use of Uninitialized Variable]
2023-05-25 14:18:12 +02:00
2021-06-02 20:44:38 +02:00
2021-06-03 09:05:38 +02:00
ifdef::env-github,rspecator-view[]
2021-09-20 15:38:42 +02:00
'''
== Implementation Specification
(visible only on this page)
2023-05-25 14:18:12 +02:00
=== Message
Review the data-flow - use of uninitialized value.
2021-09-20 15:38:42 +02:00
2021-06-08 15:52:13 +02:00
'''
2021-06-02 20:44:38 +02:00
== Comments And Links
(visible only on this page)
include::../comments-and-links.adoc[]
2023-06-22 10:38:01 +02:00
2021-06-03 09:05:38 +02:00
endif::env-github,rspecator-view[]