Open TherenceMashego opened 6 months ago
Thank you for reporting the issue and sharing the log Could you please check what version of the plugin you're using? We would also need some way to reproduce the problem, for instance sharing the sources causing the issue
We are using version 4.2.6
Thank you for the version, so you're pretty much on the latest which is good Was it working before? (and then what was updated to get this error?)
Basically it will be impossible to diagnose the problem without the compiled .class files causing the crash, so for instance the com.sbg.mobile.android.platform.moremenu.termsandconditionsplugins.OSTTermsAndConditionsPluginCreator.class
or com.sbg.mobile.android.platform.moremenu.termsandconditionsplugins.WebTraderTermsAndConditionsCreator
files.
It would be great if you could share these files, or better yet a simple project reproducing the problem
Yes it was working on SonarQube 9.5 but since we updated the plugin to a later version(SonarQube 9.9) it's giving us errors.
The SonarQube version shouldn't matter too much, but I guess you also updated the sonar-findbugs plugin at the same time? Basically the analysis is running in your build, and then the results are shipped to the SonarQube server, so you'd have the same error if you were running SonarQube 9.5 Would you know what version of the plugin you were running previously?
In any case the code where it's crashing is fairly complex and was written a long time ago. It will be very hard to understand the problem without a way to reproduce the same. We would need for instance a sample .class file to look into it
We were running Version 4.0.4
Ok, so that version of the plugin was using SpotBugs 4.4.0 (release in 2021) while the newer version you're using is SpotBugs 4.8.2
Do you think you can share a sample .class file reproducing the problem?
Thank you for the log file but what I need to look into this is the compiled .class file triggering the problem. The sources are compiled into .class files and then SpotBugs analyses these .class files The logs only tell me which classes caused the problems:
Without these .class files I cannot look into the issue
Alright I will reach out to the user for the complied .class files.
Hi, I've reached out to the user and unfortunately the .class file cannot be shared at the moment.
Thanks, is this the same issue as the separately reported https://github.com/spotbugs/spotbugs/issues/2861?
Would it be possible to have some kind of anonymized version of the code for the problematic methods? The analysis is crashing on:
There might be something unusal with the SystemPrincipalKey
too since it seems to be used in the three methods
Yes, it is the same issue. The user is still discussing with their team on sharing the code. Is there anything else that we should be looking at for now?
Some of the issues we've seen recently:
I don't know how an Android build typically works but anything producing (or modifying) the bytecode (i.e. the content of the .class files) might be doing something that SpotBugs is not handling properly.
Maybe what you can do would be to create a sample with something that also causes the error (but something you can share)
Good day, we have asked some of our users to test for us and if we still get the same issue we will share the file with you.
bamboo...sonar.txt
Issue Description
Environment
Code (If needed)