PdoGroupedFetchReadsRemovedColumn

warning native on by default

Group: Probable bugs

Identify read of first selected named column from a row in unchanged FETCH_GROUP combined with FETCH_ASSOC results. Require complete projection and mode knowledge; wildcard, duplicate names or ambiguous SQL exclude.

Detection

• Report read of first selected named column from a row in unchanged FETCH_GROUP combined with FETCH_ASSOC results. Require complete projection and mode knowledge; wildcard, duplicate names or ambiguous SQL exclude.
• Resolve builtin functions, classes, constants and methods, including imports and supported named arguments. Follow only bounded local facts within one lexical scope. Receiver and argument provenance must establish the specific API contract; variable names and comments never prove intent.
• Report one finding per violating operation. A reachable path, unchanged value identity and applicable API behavior are required. Intervening mutation, unknown calls involving tracked values, escaped aliases or exhausted analysis budgets invalidate proof.
• D4. The grouped result counts as unchanged only while nothing can rewrite it through a reference before the read. A by-reference foreach over the result or one of its elements, a reference taken to it ($group = &$rows['x']), and a call that receives it in a by-reference parameter (array_walk($rows, ...), sort($rows)) or whose signature cannot be resolved all end the proof, because such code commonly puts the group key back into each row. By-value loops and by-value builtin calls (count($rows)) keep it.
• The statement must come from a builtin PDO::query() or PDO::prepare() call on a PDO receiver (or a subclass that does not override the method) at every supported target version, including targets below PHP 8.0 where the query() signature differs.

Exceptions (no report)

• Array and list destructuring destinations create slots rather than reading them. Destructuring keys and ordinary array values still require reads.

• Guarded probes with isset, empty or null coalescing, unsets and plain nested slot creation do not read a failed or missing value. Index expressions and the fallback operand of null coalescing still require normal reads.

• Exclude unresolved required symbols, user-defined lookalikes, incomplete syntax, unknown required values and unsupported versions.

• Both @custos-ignore PdoGroupedFetchReadsRemovedColumn and @noinspection PdoGroupedFetchReadsRemovedColumn suppress this native rule.

• No report after the result was iterated by reference, aliased by reference, or passed to a by-reference or unresolved callee (D4).

Fix

None. A repair requires a semantic decision or application error-handling policy.

PHP versions

Available in PHP 5.3–8.5 where the referenced API exists. Do not apply extension contracts when the resolved API is unavailable. Gate syntax and version-specific behavior to the configured target.

Configure

In custos.json:

{
  "rules": {
    "PdoGroupedFetchReadsRemovedColumn": {
      "enabled": false
    }
  }
}

Suppress

Before the statement or declaration (or the first statement of the file):

// @custos-ignore PdoGroupedFetchReadsRemovedColumn