Error in project analysis (org.sonar.ce.task.projectanalysis.component.VisitException)

I’m trying to process the import of an external file generated with dependency-check, the file are generated and no error in log…

INFO: ------------- Run sensors on project
INFO: Sensor Dependency-Check [dependencycheck]
INFO: Process Dependency-Check report
INFO: Using JSON-Reportparser
INFO: No project configuration file, e.g. pom.xml, *.gradle, *.gradle.kts, package-lock.json found, therefore it isn't possible to correctly link dependencies with files.
INFO: Linking 190 dependencies
INFO: Upload Dependency-Check HTML-Report
INFO: Process Dependency-Check report (done) | time=728ms
INFO: Sensor Dependency-Check [dependencycheck] (done) | time=728ms
INFO: Sensor Zero Coverage Sensor
INFO: Sensor Zero Coverage Sensor (done) | time=0ms
INFO: SCM Publisher is disabled
INFO: CPD Executor Calculating CPD for 0 files
INFO: CPD Executor CPD calculation finished (done) | time=0ms
INFO: Analysis report generated in 74ms, dir size=1.4 MB
INFO: Analysis report compressed in 54ms, zip size=175.1 kB
INFO: Analysis report uploaded in 36ms
INFO: ANALYSIS SUCCESSFUL, you can find the results at: http://sonar01.ar.lumina.net:9000/dashboard?id=BANORTE-CB-FULL-LIBS
INFO: Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
INFO: More about the report processing at http://sonar01.ar.lumina.net:9000/api/ce/task?id=AY5SSrFJ2CoVa75wMUiI
INFO: Analysis total time: 31.552 s
INFO: ------------------------------------------------------------------------
INFO: EXECUTION SUCCESS
INFO: ------------------------------------------------------------------------
INFO: Total time: 33.252s
INFO: Final Memory: 15M/68M
INFO: ------------------------------------------------------------------------

But sonar project is FAILTED:

DETAIL ERROR

org.sonar.ce.task.projectanalysis.component.VisitException: Visit of Component {key=****-LIBS,type=PROJECT} failed
	at org.sonar.ce.task.projectanalysis.component.VisitException.rethrowOrWrap(VisitException.java:44)
	at org.sonar.ce.task.projectanalysis.component.VisitorsCrawler.visit(VisitorsCrawler.java:71)
	at org.sonar.ce.task.projectanalysis.step.ExecuteVisitorsStep.execute(ExecuteVisitorsStep.java:51)
	at org.sonar.ce.task.step.ComputationStepExecutor.executeStep(ComputationStepExecutor.java:79)
	at org.sonar.ce.task.step.ComputationStepExecutor.executeSteps(ComputationStepExecutor.java:70)
	at org.sonar.ce.task.step.ComputationStepExecutor.execute(ComputationStepExecutor.java:57)
	at org.sonar.ce.task.projectanalysis.taskprocessor.ReportTaskProcessor.process(ReportTaskProcessor.java:75)
	at org.sonar.ce.taskprocessor.CeWorkerImpl$ExecuteTask.executeTask(CeWorkerImpl.java:212)
	at org.sonar.ce.taskprocessor.CeWorkerImpl$ExecuteTask.run(CeWorkerImpl.java:194)
	at org.sonar.ce.taskprocessor.CeWorkerImpl.findAndProcessTask(CeWorkerImpl.java:160)
	at org.sonar.ce.taskprocessor.CeWorkerImpl$TrackRunningState.get(CeWorkerImpl.java:135)
	at org.sonar.ce.taskprocessor.CeWorkerImpl.call(CeWorkerImpl.java:87)
	at org.sonar.ce.taskprocessor.CeWorkerImpl.call(CeWorkerImpl.java:53)
	at com.google.common.util.concurrent.TrustedListenableFutureTask$TrustedFutureInterruptibleTask.runInterruptibly(TrustedListenableFutureTask.java:131)
	at com.google.common.util.concurrent.InterruptibleTask.run(InterruptibleTask.java:75)
	at com.google.common.util.concurrent.TrustedListenableFutureTask.run(TrustedListenableFutureTask.java:82)
	at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:539)
	at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
	at java.base/java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:304)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
	at java.base/java.lang.Thread.run(Thread.java:833)
Caused by: java.lang.IllegalStateException: Fail to process issues of component 'BANORTE-CB-FULL-LIBS'
	at org.sonar.ce.task.projectanalysis.issue.IntegrateIssuesVisitor.visitAny(IntegrateIssuesVisitor.java:95)
	at org.sonar.ce.task.projectanalysis.component.TypeAwareVisitorWrapper.visitAny(TypeAwareVisitorWrapper.java:77)
	at org.sonar.ce.task.projectanalysis.component.VisitorsCrawler.visitNode(VisitorsCrawler.java:114)
	at org.sonar.ce.task.projectanalysis.component.VisitorsCrawler.visitImpl(VisitorsCrawler.java:97)
	at org.sonar.ce.task.projectanalysis.component.VisitorsCrawler.visit(VisitorsCrawler.java:69)
	... 20 more
Caused by: java.lang.NullPointerException: Cannot invoke "java.util.Collection.stream()" because "this.bases" is null
	at org.sonar.core.issue.tracking.Tracking.getUnmatchedBases(Tracking.java:73)
	at org.sonar.core.issue.tracking.AbstractTracker.match(AbstractTracker.java:41)
	at org.sonar.core.issue.tracking.AnticipatedTransitionTracker.track(AnticipatedTransitionTracker.java:34)
	at org.sonar.ce.task.projectanalysis.issue.TransitionIssuesToAnticipatedStatesVisitor.onIssue(TransitionIssuesToAnticipatedStatesVisitor.java:72)
	at org.sonar.ce.task.projectanalysis.issue.IssueVisitors.onIssue(IssueVisitors.java:41)
	at org.sonar.ce.task.projectanalysis.issue.IntegrateIssuesVisitor.processIssue(IntegrateIssuesVisitor.java:192)
	at org.sonar.ce.task.projectanalysis.issue.IntegrateIssuesVisitor.lambda$processIssues$1(IntegrateIssuesVisitor.java:146)
	at java.base/java.lang.Iterable.forEach(Iterable.java:75)
	at org.sonar.ce.task.projectanalysis.issue.IntegrateIssuesVisitor.processIssues(IntegrateIssuesVisitor.java:146)
	at org.sonar.ce.task.projectanalysis.issue.IntegrateIssuesVisitor.visitAny(IntegrateIssuesVisitor.java:90)
	... 24 more

CONTEXT:

Plugins:
  - Dependency-Check 4.0.1 (dependencycheck)
  - ZAP Plugin for SonarQube 2.3.0 (zap)
  - Findbugs 4.2.7 (findbugs)
Bundled analyzers:
  - Python Code Quality and Security 4.10.0.13725 (python)
  - Clean as You Code 2.2.2.656 (cayc)
  - JaCoCo 1.3.0.1538 (jacoco)
  - IaC Code Quality and Security 1.22.0.7057 (iac)
  - JavaScript/TypeScript/CSS Code Quality and Security 10.9.0.24449 (javascript)
  - Java Code Quality and Security 7.27.1.33504 (java)
  - HTML Code Quality and Security 3.11.0.4708 (web)
  - XML Code Quality and Security 2.10.0.4108 (xml)
  - Text Code Quality and Security 2.7.1.1388 (text)
  - Configuration detection for Code Quality and Security 1.3.0.654 (config)
Global server settings:
  - email.from=sonar@luminaamericas.com.ar
  - sonar.core.id=4CE38280-AYaodkzM0Igyakg1E1Dc
  - sonar.core.serverBaseURL=http:/*.ar.lumina.net:9000/
  - sonar.core.startTime=2024-02-16T10:49:22-0300
  - sonar.forceAuthentication=true
  - sonar.plugins.risk.consent=ACCEPTED
  - sonar.qualityProfiles.allowDisableInheritedRules=false
  - sonar.scm.disabled=true
Project server settings:
Project scanner properties:
  - sonar.dependencyCheck.htmlReportPath=U:/*-Libs-v7.45.06.00.00.00.html
  - sonar.dependencyCheck.jsonReportPath=U:/*-Libs-v7.45.06.00.00.00.json
  - sonar.findbugs.timeout=60000000
  - sonar.host.url=http://localhost:9000
  - sonar.inclusions=-*/src/**
  - sonar.java.binaries=-*/bin
  - sonar.java.jdkHome=C:/Program Files/Eclipse Adoptium/jdk-17.0.6.10-hotspot
  - sonar.java.source=1.8
  - sonar.login=******
  - sonar.projectBaseDir=C:\LTO\sonar\BANORTE-CB-FULL\SONAR_WORKSPACE
  - sonar.projectKey=BANORTE-CB-FULL-LIBS
  - sonar.projectVersion=7.45.06.00.00.00
  - sonar.scanner.app=ScannerCLI
  - sonar.scanner.appVersion=4.8.0.2856
  - sonar.scm.disabled=true
  - sonar.sourceEncoding=ISO-8859-1
  - sonar.sources=.
  - sonar.working.directory=C:\LTO\sonar\BANORTE-CB-FULL\SONAR_WORKSPACE\.scannerwork

Hey there.

What version of SonarQube are you using? You should find this information in the footer of your instance.

  • Community Edition
  • Version 10.3 (build 82913)

Thanks.

We’ve had another report of the same stacktrace, but in a different context (importing SARIF reports).

I’m going to flag this for some experts.

Yes, still failed with another project that in the past we have no problem

aused by: java.lang.NullPointerException: Cannot invoke “java.util.Collection.stream()” because “this.bases” is null
at org.sonar.core.issue.tracking.Tracking.getUnmatchedBases(Tracking.java:73)
at org.sonar.core.issue.tracking.AbstractTracker.match(AbstractTracker.java:41)
at org.sonar.core.issue.tracking.AnticipatedTransitionTracker.track(AnticipatedTransitionTracker.java:34)
at org.sonar.ce.task.projectanalysis.issue.TransitionIssuesToAnticipatedStatesVisitor.onIssue(TransitionIssuesToAnticipatedStatesVisitor.java:72)
at org.sonar.ce.task.projectanalysis.issue.IssueVisitors.onIssue(IssueVisitors.java:41)
at org.sonar.ce.task.projectanalysis.issue.IntegrateIssuesVisitor.processIssue(IntegrateIssuesVisitor.java:192)
at org.sonar.ce.task.projectanalysis.issue.IntegrateIssuesVisitor.lambda$processIssues$1(IntegrateIssuesVisitor.java:146)
at java.base/java.lang.Iterable.forEach(Iterable.java:75)
at org.sonar.ce.task.projectanalysis.issue.IntegrateIssuesVisitor.processIssues(IntegrateIssuesVisitor.java:146)
at org.sonar.ce.task.projectanalysis.issue.IntegrateIssuesVisitor.visitAny(IntegrateIssuesVisitor.java:90)

Hello

We have seen that the dependency-check plugin requires version 5.0.0 to work with SonarQube 10.2 and up here: GitHub - dependency-check/dependency-check-sonar-plugin: Integrates Dependency-Check reports into SonarQube.
Could you please try this version and come back?

Thanks

Dependency-Check INTEGRATION

Integrates Dependency-Check reports into SonarQube * 5.0.0installed

Same error
Caused by: java.lang.NullPointerException: Cannot invoke “java.util.Collection.stream()” because “this.bases” is null
at org.sonar.core.issue.tracking.Tracking.getUnmatchedBases(Tracking.java:73)
at org.sonar.core.issue.tracking.AbstractTracker.match(AbstractTracker.java:41)
at org.sonar.core.issue.tracking.AnticipatedTransitionTracker.track(AnticipatedTransitionTracker.java:34)
at org.sonar.ce.task.projectanalysis.issue.TransitionIssuesToAnticipatedStatesVisitor.onIssue(TransitionIssuesToAnticipatedStatesVisitor.java:72)
at org.sonar.ce.task.projectanalysis.issue.IssueVisitors.onIssue(IssueVisitors.java:41)
at org.sonar.ce.task.projectanalysis.issue.IntegrateIssuesVisitor.processIssue(IntegrateIssuesVisitor.java:192)
at org.sonar.ce.task.projectanalysis.issue.IntegrateIssuesVisitor.lambda$processIssues$1(IntegrateIssuesVisitor.java:146)
at java.base/java.lang.Iterable.forEach(Iterable.java:75)
at org.sonar.ce.task.projectanalysis.issue.IntegrateIssuesVisitor.processIssues(IntegrateIssuesVisitor.java:146)
at org.sonar.ce.task.projectanalysis.issue.IntegrateIssuesVisitor.visitAny(IntegrateIssuesVisitor.java:90)
… 24 more

Hi there, i have a similar problem and can also provide a reproducer for it along with some additional information:

Hopefully this will help with getting this fixed.

Best reards
Alex

Thanks a lot for contributing.
We created an issue and the fix will soon follow

1 Like

I continue with the issue, is there any workaround?

Hello

This bug was fixed in release 10.5.0.89998 through this ticket