MysqliMultiQueryResultsNotDrained

warning native on by default

Group: Probable bugs

Identify query on same resolved mysqli after successful multi_query containing at least two known statements, before a complete more_results/next_result drain loop. Unknown calls invalidate proof; first result alone does not drain subsequent results.

Detection

• Report query on same resolved mysqli after successful multi_query containing at least two known statements, before a complete more_results/next_result drain loop. Unknown calls invalidate proof; first result alone does not drain subsequent results.
• A complete drain is a while or do-while loop, placed after the multi_query and ending before the reported query, whose condition is decided by more_results() or next_result() on the same connection (the call alone, parenthesised, or as an operand of &&) and which calls next_result() on that connection in its condition or body. This covers do { ... } while ($db->next_result());, do { ... } while ($db->more_results() && $db->next_result());, while ($db->next_result()) { ... } and while ($db->more_results()) { $db->next_result(); }. A negated, compared or ||-combined probe, a probe on another connection, a for/if condition, and a loop that still contains the reported query are not a drain.
• Resolve builtin functions, classes, constants and methods, including imports and supported named arguments. Follow only bounded local facts within one lexical scope. Receiver and argument provenance must establish the specific API contract; variable names and comments never prove intent.
• Report one finding per violating operation. A reachable path, unchanged value identity and applicable API behavior are required. Intervening mutation, unknown calls involving tracked values, escaped aliases or exhausted analysis budgets invalidate proof.

Exceptions (no report)

• Exclude unresolved required symbols, user-defined lookalikes, incomplete syntax, unknown required values and unsupported versions.
• Both @custos-ignore MysqliMultiQueryResultsNotDrained and @noinspection MysqliMultiQueryResultsNotDrained suppress this native rule.

Fix

None. A repair requires a semantic decision or application error-handling policy.

PHP versions

Available in PHP 5.3–8.5 where the referenced API exists. Do not apply extension contracts when the resolved API is unavailable. Gate syntax and version-specific behavior to the configured target.

Configure

In custos.json:

{
  "rules": {
    "MysqliMultiQueryResultsNotDrained": {
      "enabled": false
    }
  }
}

Suppress

Before the statement or declaration (or the first statement of the file):

// @custos-ignore MysqliMultiQueryResultsNotDrained