False Negative: squid:S3518: Divide by zero does not check BigDecimal

SonarQube
1

Using SonarQube 7.9.1

The divide by zero rule for java does not check the divide() method on a BigDecimal.
It’s not obvious that this rule only checks primitive types.

As this is a major security hotspot we would appreciate that BigDecimal is added to this rule.

3

Hello @reitzmichnicht,

First, sorry for the long time it took to answer you, we should have replied earlier but apparently your message slipped through our monitoring.

You are right, BigDecimal (as well as BigInteger) are not supported by the rule. I consequently created the following ticket to improve it: SONARJAVA-3345

Cheers,
Michael