NumberParseUsesCurrencyType

error native on by default PHP ≥ 5.3

Group: Probable bugs

Parse currency with parseCurrency. Enabled by default; require positive semantic or local-flow proof.

Example

<?php
$f = new NumberFormatter("en_US", NumberFormatter::CURRENCY); $f->parse("$37.20", NumberFormatter::TYPE_CURRENCY);

Reported:

• line 2: Parse currency with parseCurrency.

Detection

• Report resolved NumberFormatter::parse with its type argument proven NumberFormatter::TYPE_CURRENCY. Do not infer misuse merely from a CURRENCY formatter style.
• Resolve builtin functions, extension classes, method receivers, constants and named arguments. Follow unchanged locals and aliases only within the same bounded lexical scope. Require a reachable path; merge branch facts only when all incoming paths establish them.
• Emit one finding at the violating operation, not one per evidence statement. Rebinding, writes, by-reference escape, unresolved calls that can mutate relevant state, and exhausted analysis budgets remove proof.

Exceptions (no report)

• Exclude shadowed builtins, unresolved receivers, incomplete syntax and unknown prerequisite facts. An extension function name alone does not prove an application function is that builtin.
• A dominating valid guard or repair described in Detection prevents the finding. Both legacy noinspection and custos-ignore forms suppress this ID.

Fix

No automatic fix. The required repair depends on error handling, data selection, lifecycle ordering or application policy.

All edits use exact byte ranges and preserve comments and evaluation order. Offer no fix when its stated prerequisites cannot be proven or the replacement is unsupported by the configured PHP version.

PHP versions

Requires PHP 5.3 or later and the referenced extension API. Respect method-specific introduction versions within PHP 5.3–8.5; unsupported optional APIs cannot establish facts. Named arguments require PHP 8.0 or later.

Configure

In custos.json:

{
  "rules": {
    "NumberParseUsesCurrencyType": {
      "enabled": false
    }
  }
}

Suppress

Before the statement or declaration (or the first statement of the file):

// @custos-ignore NumberParseUsesCurrencyType