Declare mutually exclusive constant groups for json_encode, json_decode, filter_var, filter_input, openlog and ZipArchive::open flags

[phpstan-bot]

Summary

PHPStan can already report constants that should not be combined in a bitmask parameter (argument.exclusiveConstants). But resources/constantToFunctionParameterMap.php only listed such groups for a few functions (sort functions, preg_match_all, htmlspecialchars, flock, mysqli, PDO, FilesystemIterator). This PR adds the groups that were missing. For example, json_decode(..., JSON_INVALID_UTF8_IGNORE | JSON_INVALID_UTF8_SUBSTITUTE) from the issue is now reported.

Changes

All data changes are in resources/constantToFunctionParameterMap.php:

• json_encode / json_decode $flags: JSON_INVALID_UTF8_IGNORE and JSON_INVALID_UTF8_SUBSTITUTE. When both are set, IGNORE wins without any warning.
• json_encode $flags: JSON_PARTIAL_OUTPUT_ON_ERROR and JSON_THROW_ON_ERROR. With partial output set, php-src never throws, so JSON_THROW_ON_ERROR has no effect.
• filter_var / filter_input $options: FILTER_REQUIRE_SCALAR and FILTER_REQUIRE_ARRAY. With both set, every input fails.
• openlog $flags: LOG_NDELAY and LOG_ODELAY. One opens the connection immediately, the other delays it.
• ZipArchive::open $flags: ZipArchive::RDONLY and ZipArchive::OVERWRITE. libzip rejects ZIP_RDONLY | ZIP_TRUNCATE with ZIP_ER_RDONLY.

Not added:

• FILTER_NULL_ON_FAILURE | FILTER_THROW_ON_FAILURE: FilterVarRule (filterVar.nullOnFailureAndThrowOnFailure) already reports this. A group here would report it a second time.
• The other bitmask parameters in the map: preg_*, file, file_put_contents, glob, fnmatch, finfo*, stream_socket_*, socket_*, idn_*, openssl_pkcs7_*, iconv_mime_decode*, ob_start, msg_receive, debug_backtrace, dns_get_record, DatePeriod, and the libxml options. I went through them and found no flags that contradict each other. Some combinations are only redundant, e.g. FILEINFO_MIME together with FILEINFO_MIME_TYPE, or DNS_ALL together with specific record types.

Root cause

The exclusive-group check (ParameterAllowedConstants::check(), which FunctionCallParametersCheck reports) was already in place. The map simply had no exclusive-group data for these parameters.

Test

• tests/PHPStan/Rules/Functions/data/bug-15306.php (CallToFunctionParametersRuleTest::testBug15306) covers json_decode, json_encode, filter_var, filter_input and openlog. It includes cases that must be reported and valid combinations that must not be.
• tests/PHPStan/Rules/Methods/data/bug-15306.php (CallMethodsRuleTest::testBug15306) covers ZipArchive::open.
• Both tests fail without the map change and pass with it.

Fixes phpstan/phpstan#15306

🤖 Generated with Claude Code