sonar-cryptography icon indicating copy to clipboard operation
sonar-cryptography copied to clipboard

Repeat Stackoverflow on large codebase invoked from Jenkins/sonar-scanner CLI

Open Sriram-Kumar1 opened this issue 11 months ago • 1 comments

you folks are doing a great job. We were trying to generate a CBOM for some codebase and its working when we exclude certain sections of directories from scan but able to scan them independently and generate separate report

openjdk version "17.0.12" 2024-07-16 INFO: SonarQube Scanner 3.3.0.1492 INFO: Java 17.0.12 Ubuntu (64-bit) INFO: Linux 5.4.0-196-generic amd64 INFO: SONAR_SCANNER_OPTS=-Xmx4g -Xss8m -- this is just to test but makes no difference INFO: User cache: /home/jenkins/.sonar/cache INFO: SonarQube server 10.7.0.96327

when invoked from cLI we get

ERROR: A stack overflow error occurred while analyzing file: '' java.lang.StackOverflowError: null at com.ibm.engine.language.java.JavaDetectionEngine.resolveValues(JavaDetectionEngine.java:185) at com.ibm.engine.language.java.JavaDetectionEngine.resolveValues(JavaDetectionEngine.java:262) at com.ibm.engine.language.java.JavaDetectionEngine.resolveValues(JavaDetectionEngine.java:205) <repeated 1025 times>

any assistance would be great!!

Sriram-Kumar1 avatar Dec 27 '24 09:12 Sriram-Kumar1

Hi @Sriram-Kumar1, thank you for your feedback! The best way for us to find the bug is to create a test case for the isolated snippet of code that causes the stack overflow. If you are able to share the code snippet, then we can find the bug very quickly. If there are restrictions on your side for sharing the code snipped, we will have some trouble finding the cause.

n1ckl0sk0rtge avatar Jan 06 '25 09:01 n1ckl0sk0rtge