Incorrect handling of list parameters with sparse types

[morozov]

When a list parameter is bound to a query but the previous parameter types are omitted, the query gets processed incorrectly.

Steps to reproduce:

$query = 'SELECT NULL FROM dummy WHERE ? IN (?)';
$params = ['foo', ['foo', 'bar']];
$types = [1 => Connection::PARAM_STR_ARRAY];

list($query, $params, $types) = SQLParserUtils::expandListParameters($query, $params, $types);

Expected result:

$query = 'SELECT NULL FROM dummy WHERE ? IN (?, ?)';
$params = ['foo', 'foo', 'bar'];
$types = [null, PDO::PARAM_STR, PDO::PARAM_STR];

Actual result:

Warning: array_merge(): Argument #2 is not an array in lib/Doctrine/DBAL/SQLParserUtils.php on line 136

$query = 'SELECT NULL FROM dummy WHERE ? IN (?)'; // not modified, invalid
$params = null; // invalid
$types = [PDO::PARAM_STR]; // invalid

[morozov]

Closed via #3894.

[github-actions]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.