Hi, I found a false negative in SonarQube 26.7.0 with sonar-java 8.34 when a previous branch makes a later relational condition always true.
Affected tool
SonarQube 26.7.0.124771; sonar-java 8.34 (build 44906)
Affected checker
SonarQube java:S2589
Minimal reproducer
class SpotbugsSonarqubeS2589ComplementaryBranch {
int test(int value) {
if (value < 0) return 1;
if (value >= 0) return 2;
return 3;
}
}
Reproduction command
sonar-scanner --version
sonar-scanner -Dsonar.projectKey=spotbugs-sonarqube-reproducer -Dsonar.sources=spotbugs-sonarqube-s2589-fn-complementary-branch.java -Dsonar.host.url="$SONAR_HOST_URL" -Dsonar.token="$SONAR_TOKEN"
Current behavior
SonarQube produces no java:S2589 diagnostic.
Expected behavior
SonarQube should report java:S2589 at line 4 because reaching that condition proves that value >= 0.