OOME in analysis

dmatej · January 1, 2023, 8:18pm

ALM used: GitHub
CI system used: Jenkins + Docker + Maven
Scanner command used when applicable (private details masked)

environment {
        SONAR_TOKEN=...
        MAVEN_OPTS="-Xms1g -Xmx4g -Xss768k -XX:+UseStringDeduplication"
        SONAR_OPTS="-Xms1g -Xmx8g -Xss768k -XX:+UseStringDeduplication"
        JAVA_OPTS="-Xms4g -Xmx8g -Xss768k -XX:+UseStringDeduplication"
}
...
withMaven(jdk: 'OpenJDK 17', maven: 'Maven Latest', mavenSettingsConfig: 'settings.xml', options: [jacocoPublisher(), junitPublisher(healthScaleFactor: 1.0), pipelineGraphPublisher(), spotbugsPublisher(), dependenciesFingerprintPublisher()]) {
    sh "mvn -e clean install -Pstaging,jacoco -Dsonar.organization=dmatej -Dsonar.projectKey=dmatej_glassfish -Dsonar.host.url=https://sonarcloud.io"
    sh "mvn -e org.sonarsource.scanner.maven:sonar-maven-plugin:3.9.1.2184:sonar -Pstaging,jacoco -Dsonar.organization=dmatej -Dsonar.projectKey=dmatej_glassfish -Dsonar.host.url=https://sonarcloud.io"
}

Only if the SonarCloud project is public, the URL
https://sonarcloud.io/project/overview?id=dmatej_glassfish
Error observed (wrap logs/code around with triple quotes ``` for proper formatting).
- This is a Thread.print output at the moment before the crash, it seems to me as some ugly recursion.
- In november the build passed in 50 minutes with much less memory. Now even 16GB heap is not enough.

jcmd 809036 Thread.print
809036:
2022-12-26 19:50:45
Full thread dump OpenJDK 64-Bit Server VM (17.0.5+8 mixed mode, sharing):

Threads class SMR info:
_java_thread_list=0x00007f3c74005b30, length=14, elements={
0x00007f3cc8025d40, 0x00007f3cc832d2e0, 0x00007f3cc832e6c0, 0x00007f3cc8332ab0,
0x00007f3cc8333e60, 0x00007f3cc8335270, 0x00007f3cc8336ca0, 0x00007f3cc83381d0,
0x00007f3cc8339640, 0x00007f3cc8341780, 0x00007f3cc8344890, 0x00007f3cc9793640,
0x00007f3cc85827c0, 0x00007f3c74005150
}

"main" #1 prio=5 os_prio=0 cpu=817644.30ms elapsed=1022.69s tid=0x00007f3cc8025d40 nid=0x48dc runnable  [0x00007f3ccce55000]
java.lang.Thread.State: RUNNABLE
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply(Unknown Source)
at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(java.base@17.0.5/Collectors.java:180)
at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept(java.base@17.0.5/Unknown Source)
at java.util.stream.ReduceOps$3ReducingSink.accept(java.base@17.0.5/ReduceOps.java:169)
at java.util.HashMap$EntrySpliterator.forEachRemaining(java.base@17.0.5/HashMap.java:1850)
at java.util.stream.AbstractPipeline.copyInto(java.base@17.0.5/AbstractPipeline.java:509)
at java.util.stream.AbstractPipeline.wrapAndCopyInto(java.base@17.0.5/AbstractPipeline.java:499)
at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(java.base@17.0.5/ReduceOps.java:921)
at java.util.stream.AbstractPipeline.evaluate(java.base@17.0.5/AbstractPipeline.java:234)
at java.util.stream.ReferencePipeline.collect(java.base@17.0.5/ReferencePipeline.java:682)
at com.sonar.security.E.D.A.H.A(na:3277)
at com.sonar.security.E.D.A.H.A(na:3114)
at com.sonar.security.E.D.A.H.A(na:3277)
.....

And this is Maven output:

[INFO] Running symbolic analysis for 'JAVA'
....
....
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  17:03 min
[INFO] Finished at: 2022-12-26T19:50:47Z
[INFO] ------------------------------------------------------------------------
[INFO] [jenkins-event-spy] Generated /home/jenkins/workspace/GlassFish-dmatej-SonarQube@tmp/withMavenf1071098/maven-spy-20221226-193343-8333713783259678486000.log
[ERROR] Java heap space -> [Help 1]
java.lang.OutOfMemoryError: Java heap space
    at java.util.HashMap.newNode (HashMap.java:1901)
    at java.util.HashMap.putVal (HashMap.java:629)
    at java.util.HashMap.putIfAbsent (HashMap.java:1144)
    at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1 (Collectors.java:181)
    at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept (Unknown Source)
    at java.util.stream.ReduceOps$3ReducingSink.accept (ReduceOps.java:169)
    at java.util.HashMap$EntrySpliterator.forEachRemaining (HashMap.java:1850)
    at java.util.stream.AbstractPipeline.copyInto (AbstractPipeline.java:509)
    at java.util.stream.AbstractPipeline.wrapAndCopyInto (AbstractPipeline.java:499)
    at java.util.stream.ReduceOps$ReduceOp.evaluateSequential (ReduceOps.java:921)
    at java.util.stream.AbstractPipeline.evaluate (AbstractPipeline.java:234)
    at java.util.stream.ReferencePipeline.collect (ReferencePipeline.java:682)
    at com.sonar.security.E.D.A.H.A (na:3277)
    at com.sonar.security.E.D.A.H.A (na:3114)
    at com.sonar.security.E.D.A.H.A (na:3277)
    at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply (Unknown Source)
    at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1 (Collectors.java:180)
    at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept (Unknown Source)
    at java.util.stream.ReduceOps$3ReducingSink.accept (ReduceOps.java:169)
    at java.util.HashMap$EntrySpliterator.forEachRemaining (HashMap.java:1850)
    at java.util.stream.AbstractPipeline.copyInto (AbstractPipeline.java:509)
    at java.util.stream.AbstractPipeline.wrapAndCopyInto (AbstractPipeline.java:499)
    at java.util.stream.ReduceOps$ReduceOp.evaluateSequential (ReduceOps.java:921)
    at java.util.stream.AbstractPipeline.evaluate (AbstractPipeline.java:234)
    at java.util.stream.ReferencePipeline.collect (ReferencePipeline.java:682)
    at com.sonar.security.E.D.A.H.A (na:3277)
    at com.sonar.security.E.D.A.H.A (na:3114)
    at com.sonar.security.E.D.A.H.A (na:3277)
    at com.sonar.security.E.D.A.H$$Lambda$3391/0x0000000801e8e0e8.apply (Unknown Source)
    at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1 (Collectors.java:180)
    at java.util.stream.Collectors$$Lambda$163/0x0000000800f5d778.accept (Unknown Source)
    at java.util.stream.ReduceOps$3ReducingSink.accept (ReduceOps.java:169)
[ERROR] 
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR] 
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/OutOfMemoryError```

czurn · January 17, 2023, 1:31pm

Hello David,

Thanks for reporting this and sharing the logs with us.
We deployed a fix on SonarCloud last week that reduced the memory needed for the security analysis.
Are you still having the issue you mentioned above?

Thanks & best,
-Christophe

dmatej · January 18, 2023, 10:27am

Unfortunately I have to answer yes …

[INFO] [jenkins-event-spy] Generated /home/jenkins/workspace/GlassFish-dmatej-SonarQube@tmp/withMaven198cc5ca/maven-spy-20230118-094551-5611102021163087496704.log
[ERROR] Java heap space -> [Help 1]
java.lang.OutOfMemoryError: Java heap space
    at java.util.HashMap.newNode (HashMap.java:1901)
    at java.util.HashMap.putVal (HashMap.java:629)
    at java.util.HashMap.putMapEntries (HashMap.java:514)
    at java.util.HashMap.<init> (HashMap.java:484)
    at com.sonar.security.E.D.A.S.<init> (na:46)
    at com.sonar.security.E.D.A.H.A (na:1397)
    at com.sonar.security.E.D.A.H.A (na:810)
    at com.sonar.security.E.D.A.S.A (na:2169)
    at com.sonar.security.E.D.A.H.A (na:237)
    at com.sonar.security.E.D.A.H.A (na:810)
    at com.sonar.security.E.D.A.S.A (na:2586)
    at com.sonar.security.E.D.A.S$$Lambda$3564/0x0000000801e45e48.apply (Unknown Source)
    at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1 (Collectors.java:180)
    at java.util.stream.Collectors$$Lambda$165/0x0000000800f5dc30.accept (Unknown Source)
    at java.util.stream.ReduceOps$3ReducingSink.accept (ReduceOps.java:169)
    at java.util.HashMap$EntrySpliterator.forEachRemaining (HashMap.java:1850)
    at java.util.stream.AbstractPipeline.copyInto (AbstractPipeline.java:509)
    at java.util.stream.AbstractPipeline.wrapAndCopyInto (AbstractPipeline.java:499)
    at java.util.stream.ReduceOps$ReduceOp.evaluateSequential (ReduceOps.java:921)
    at java.util.stream.AbstractPipeline.evaluate (AbstractPipeline.java:234)
    at java.util.stream.ReferencePipeline.collect (ReferencePipeline.java:682)
    at com.sonar.security.E.D.A.S.A (na:2586)
    at com.sonar.security.E.D.A.H.A (na:237)
    at com.sonar.security.E.D.A.H.A (na:810)
    at com.sonar.security.E.D.A.S.A (na:2586)
    at com.sonar.security.E.D.A.S$$Lambda$3564/0x0000000801e45e48.apply (Unknown Source)
    at java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1 (Collectors.java:180)
    at java.util.stream.Collectors$$Lambda$165/0x0000000800f5dc30.accept (Unknown Source)
    at java.util.stream.ReduceOps$3ReducingSink.accept (ReduceOps.java:169)
    at java.util.HashMap$EntrySpliterator.forEachRemaining (HashMap.java:1850)
    at java.util.stream.AbstractPipeline.copyInto (AbstractPipeline.java:509)
    at java.util.stream.AbstractPipeline.wrapAndCopyInto (AbstractPipeline.java:499)

dmatej · January 18, 2023, 4:36pm

I have yet this when I enabled GC logs … I have moved the options from the environment block to the mavenOpts of withMaven configuration, but nope, even 8 GB heap is not enough.

[873.524s][info   ][gc,metaspace   ] GC(589) Metaspace: 146448K(149376K)->146448K(149376K) NonClass: 128978K(130240K)->128978K(130240K) Class: 17470K(19136K)->17470K(19136K)
[873.524s][info   ][gc             ] GC(589) Pause Young (Normal) (G1 Evacuation Pause) 8183M->8183M(8192M) 1.426ms
[873.524s][info   ][gc,cpu         ] GC(589) User=0.00s Sys=0.00s Real=0.01s
[873.524s][info   ][gc,ergo        ] Attempting full compaction
[873.524s][info   ][gc,task        ] GC(590) Using 13 workers of 13 for full compaction
[873.524s][info   ][gc,start       ] GC(590) Pause Full (G1 Compaction Pause)
[873.524s][info   ][gc,phases,start] GC(590) Phase 1: Mark live objects
[873.709s][info   ][gc,phases      ] GC(590) Phase 1: Mark live objects 184.915ms
[873.709s][info   ][gc,phases,start] GC(590) Phase 2: Prepare for compaction
[873.724s][info   ][gc,phases      ] GC(590) Phase 2: Prepare for compaction 15.086ms
[873.724s][info   ][gc,phases,start] GC(590) Phase 3: Adjust pointers
[873.782s][info   ][gc,phases      ] GC(590) Phase 3: Adjust pointers 57.951ms
[873.782s][info   ][gc,phases,start] GC(590) Phase 4: Compact heap
[873.801s][info   ][gc,phases      ] GC(590) Phase 4: Compact heap 18.747ms
[873.831s][info   ][gc,heap        ] GC(590) Eden regions: 0->0(331)
[873.831s][info   ][gc,heap        ] GC(590) Survivor regions: 0->0(0)
[873.832s][info   ][gc,heap        ] GC(590) Old regions: 2043->199
[873.832s][info   ][gc,heap        ] GC(590) Archive regions: 2->2
[873.832s][info   ][gc,heap        ] GC(590) Humongous regions: 3->3
[873.832s][info   ][gc,metaspace   ] GC(590) Metaspace: 146448K(149376K)->146448K(149376K) NonClass: 128978K(130240K)->128978K(130240K) Class: 17470K(19136K)->17470K(19136K)
[873.832s][info   ][gc             ] GC(590) Pause Full (G1 Compaction Pause) 8183M->784M(2720M) 307.799ms
[873.832s][info   ][gc,cpu         ] GC(590) User=3.17s Sys=0.18s Real=0.30s
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for GlassFish Project 7.0.0:

czurn · January 24, 2023, 4:07pm

Ok. Thanks for confirming the issue is still there and for sharing your logs.
I’ll investigate the issue further: the increase in time and memory consumption you’ve mentioned seems way out of expectation of any change we’ve done.

In the meantime, you can disable the rules related to the Java Security analyzer as a temporary workaround (these are the rules: S2076, S2078, S2083, S2091, S2631, S3649, S5131, S5135, S5144, S5145, S5146, S5147, S5167, S5334, S5883, S6096, S6287, S6350, S6384, S6173, S6390, S6398, S6399). This is definitely far from ideal, but it should at least let you run the analysis for all the other rules in the meantime.

Best,
-Christophe

Karim_El_Ouerghemmi · February 10, 2023, 2:18pm

Hey @dmatej,

we are continuing to look into this issue. Thanks for your patience and all the information you have provided.

For now, to be able to run the analysis with reactivated security rules, you can exclude one specific file from the analysis: appserver/persistence/cmp/support-sqlstore/src/main/java/com/sun/jdo/spi/persistence/support/sqlstore/model/ConfigCacheImpl.java. This should allow the analysis to go through.

You can achieve this for example with the analysis parameter -Dsonar.exclusions="appserver/persistence/cmp/support-sqlstore/src/main/java/com/sun/jdo/spi/persistence/support/sqlstore/model/ConfigCacheImpl.java .

We’ll let you know as soon as a fix for this is released.

dmatej · February 10, 2023, 11:04pm

Thank you, this is quite concrete help. For now I already passed the build after I set the Xmx to 32 G temporarily.

Karim_El_Ouerghemmi · March 8, 2023, 10:22am

Hey @dmatej,

Last week we did release a fix for this. Your scan should be faster now and require much less memory.

dmatej · April 4, 2023, 1:08pm

Thank you, I can confirm that now it is much better!