False-positive UndefinedVariable for static variable inside an anonymous function

[shvlv]

I stumbled upon the behavior when using the following code:

add_action('hook', static function (): void {
            static $providerId;
        });

It causes Variable $providerId is undefined. (VariableAnalysis.CodeAnalysis.VariableAnalysis.UndefinedVariable)

For my tests the minimum reproducible snippet was

$test = (function() {
            static $test;
        });

It seems round brackets do matter.

Thanks for maintaining a very useful library!

[sirbrillig]

It looks like this is happening because the code that detects if a variable is inside a list of function call arguments is incorrectly finding the static variable.

phpcs-variable-analysis/VariableAnalysis/Sniffs/CodeAnalysis/VariableAnalysisSniff.php

Line 1337 in 9f70390

if (Helpers::isTokenInsideFunctionCallArgument($phpcsFile, $stackPtr)) {

[sirbrillig]

This should be fixed by #279

However, I wanted to ask, @shvlv: in your examples, would you expect those static variables to produce no warnings at all?

For example,

add_action('hook', static function (): void {
            static $providerId;
        });

In this code, $providerId is never used, only declared, so I think this sniff should mark it as unused (but not undefined). Is there a reason why that would be wrong? I wanted to check before I closed this issue in case I'm mistaken.

[shvlv]

Thanks, @sirbrillig!

In this code, $providerId is never used, only declared, so I think this sniff should mark it as unused (but not undefined). Is there a reason why that would be wrong? I wanted to check before I closed this issue in case I'm mistaken.

Yes, there was a minimum reproducible example. So Unused warning would be pretty nice.

This should be fixed by #279

I've tested your code. It works nicely for $test = (function() { static $test;}); but snippet with add_action still triggers UndefinedVariable:

add_action('test', function () {
    static $providerId;
});

[sirbrillig]

Ohhh... thanks. I bet it's because in that case, $providerId is, lexically, inside of a function call's arguments, except that it's inside a closure and we don't account for that. I can fix it.