See <https://ci-builds.apache.org/job/OpenMeetings/job/openmeetings/397/display/redirect?page=changes>
Changes: [Maxim Solodovnik] [OPENMEETINGS-2800] spring, h2, commons-lang3, postgresql, tika, bcprov, mockito, swagger and plugins ------------------------------------------ [...truncated 2.16 MiB...] [INFO] Analyzing 5049/8189 functions to detect bugs. [INFO] Sensor javabugs [dbd] (done) | time=13964ms [INFO] Sensor pythonbugs [dbd] [INFO] No IR files have been included for analysis. [INFO] Sensor pythonbugs [dbd] (done) | time=1ms [INFO] Sensor EnterpriseTextAndSecretsSensor [textenterprise] [INFO] Available processors: 16 [INFO] Using 16 threads for analysis. [INFO] The property "sonar.tests" is not set. To improve the analysis accuracy, we categorize a file as a test file if any of the following is true: * The filename starts with "test" * The filename contains "test." or "tests." * Any directory in the file path is named: "doc", "docs", "test" or "tests" * Any directory in the file path has a name ending in "test" or "tests" [INFO] Start fetching files for the text and secrets analysis [INFO] Using Git CLI to retrieve untracked files [INFO] Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git [INFO] Starting the text and secrets analysis [INFO] 837 source files to be analyzed for the text and secrets analysis [INFO] 837/837 source files have been analyzed for the text and secrets analysis [INFO] Start fetching files for the binary file analysis [INFO] There are no files to be analyzed for the binary file analysis [INFO] Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=4586ms [INFO] Sensor JavaSecuritySensor [security] [INFO] 29 taint analysis rules enabled. [INFO] Analyzing 5806 UCFGs to detect vulnerabilities. [INFO] All rules entry points : 155 [INFO] Retained UCFGs : 3033 [INFO] 0 / 3033 UCFGs simulated, memory usage: 453 MB [INFO] 1894 / 3033 UCFGs simulated, memory usage: 805 MB [INFO] Too high simulation costs for sink in <https://ci-builds.apache.org/job/OpenMeetings/job/openmeetings/ws/openmeetings-util/src/main/java/org/apache/openmeetings/util/OmFileHelper.java>:125. This sink will not be analyzed any further. [INFO] Too high simulation costs for sink in <https://ci-builds.apache.org/job/OpenMeetings/job/openmeetings/ws/openmeetings-db/src/main/java/org/apache/openmeetings/db/entity/file/BaseFileItem.java>:361. This sink will not be analyzed any further. [INFO] Too high simulation costs for sink in <https://ci-builds.apache.org/job/OpenMeetings/job/openmeetings/ws/openmeetings-db/src/main/java/org/apache/openmeetings/db/entity/file/BaseFileItem.java>:361. This sink will not be analyzed any further. [INFO] 2614 / 3033 UCFGs simulated, memory usage: 1009 MB [INFO] java security sensor: Begin: 2025-09-30T08:53:49.402793928Z, End: 2025-09-30T08:54:01.404813323Z, Duration: 00:00:12.002 Load type hierarchy and UCFGs: Begin: 2025-09-30T08:53:49.410226087Z, End: 2025-09-30T08:53:52.247201924Z, Duration: 00:00:02.836 Load type hierarchy: Begin: 2025-09-30T08:53:49.410250082Z, End: 2025-09-30T08:53:49.910184153Z, Duration: 00:00:00.499 Load UCFGs: Begin: 2025-09-30T08:53:49.910722036Z, End: 2025-09-30T08:53:52.247013229Z, Duration: 00:00:02.336 Check cache: Begin: 2025-09-30T08:53:52.247412158Z, End: 2025-09-30T08:53:52.247904001Z, Duration: 00:00:00.000 Load cache: Begin: 2025-09-30T08:53:52.247422139Z, End: 2025-09-30T08:53:52.247455339Z, Duration: 00:00:00.000 Create runtime call graph: Begin: 2025-09-30T08:53:52.247943929Z, End: 2025-09-30T08:53:53.441004637Z, Duration: 00:00:01.193 Variable Type Analysis #1: Begin: 2025-09-30T08:53:52.248832191Z, End: 2025-09-30T08:53:52.854005508Z, Duration: 00:00:00.605 Create runtime type propagation graph: Begin: 2025-09-30T08:53:52.249801693Z, End: 2025-09-30T08:53:52.655758768Z, Duration: 00:00:00.405 Run SCC (Tarjan) on 34310 nodes: Begin: 2025-09-30T08:53:52.656367969Z, End: 2025-09-30T08:53:52.722745673Z, Duration: 00:00:00.066 Propagate runtime types to strongly connected components: Begin: 2025-09-30T08:53:52.722924172Z, End: 2025-09-30T08:53:52.853832858Z, Duration: 00:00:00.130 Variable Type Analysis #2: Begin: 2025-09-30T08:53:52.857769645Z, End: 2025-09-30T08:53:53.433945011Z, Duration: 00:00:00.576 Create runtime type propagation graph: Begin: 2025-09-30T08:53:52.857779421Z, End: 2025-09-30T08:53:53.268690843Z, Duration: 00:00:00.410 Run SCC (Tarjan) on 34276 nodes: Begin: 2025-09-30T08:53:53.268788869Z, End: 2025-09-30T08:53:53.319601404Z, Duration: 00:00:00.050 Propagate runtime types to strongly connected components: Begin: 2025-09-30T08:53:53.319718446Z, End: 2025-09-30T08:53:53.433781953Z, Duration: 00:00:00.114 Load config: Begin: 2025-09-30T08:53:53.441094432Z, End: 2025-09-30T08:53:56.089489462Z, Duration: 00:00:02.648 Compute entry points: Begin: 2025-09-30T08:53:56.089597532Z, End: 2025-09-30T08:53:56.571066421Z, Duration: 00:00:00.481 Slice call graph: Begin: 2025-09-30T08:53:56.571264874Z, End: 2025-09-30T08:53:56.685888212Z, Duration: 00:00:00.114 Live variable analysis: Begin: 2025-09-30T08:53:56.685982636Z, End: 2025-09-30T08:53:57.174207933Z, Duration: 00:00:00.488 Taint analysis for java: Begin: 2025-09-30T08:53:57.174568180Z, End: 2025-09-30T08:54:01.290807521Z, Duration: 00:00:04.116 Report issues: Begin: 2025-09-30T08:54:01.290943796Z, End: 2025-09-30T08:54:01.379788684Z, Duration: 00:00:00.088 Store cache: Begin: 2025-09-30T08:54:01.381965410Z, End: 2025-09-30T08:54:01.401690170Z, Duration: 00:00:00.019 [INFO] java security sensor peak memory: 1675 MB [INFO] Sensor JavaSecuritySensor [security] (done) | time=12027ms [INFO] Sensor CSharpSecuritySensor [security] [INFO] 27 taint analysis rules enabled. [INFO] No UCFGs have been included for analysis. [INFO] csharp security sensor: Begin: 2025-09-30T08:54:01.407942750Z, End: 2025-09-30T08:54:01.408944882Z, Duration: 00:00:00.001 Load type hierarchy and UCFGs: Begin: 2025-09-30T08:54:01.408344441Z, End: 2025-09-30T08:54:01.408672084Z, Duration: 00:00:00.000 Load type hierarchy: Begin: 2025-09-30T08:54:01.408347071Z, End: 2025-09-30T08:54:01.408555362Z, Duration: 00:00:00.000 Load UCFGs: Begin: 2025-09-30T08:54:01.408587675Z, End: 2025-09-30T08:54:01.408636130Z, Duration: 00:00:00.000 [INFO] csharp security sensor peak memory: 1029 MB [INFO] Sensor CSharpSecuritySensor [security] (done) | time=2ms [INFO] Sensor VbNetSecuritySensor [security] [INFO] 25 taint analysis rules enabled. [INFO] No UCFGs have been included for analysis. [INFO] vbnet security sensor: Begin: 2025-09-30T08:54:01.410011997Z, End: 2025-09-30T08:54:01.410981522Z, Duration: 00:00:00.000 Load type hierarchy and UCFGs: Begin: 2025-09-30T08:54:01.410355918Z, End: 2025-09-30T08:54:01.410585302Z, Duration: 00:00:00.000 Load type hierarchy: Begin: 2025-09-30T08:54:01.410358769Z, End: 2025-09-30T08:54:01.410490021Z, Duration: 00:00:00.000 Load UCFGs: Begin: 2025-09-30T08:54:01.410528658Z, End: 2025-09-30T08:54:01.410559557Z, Duration: 00:00:00.000 [INFO] vbnet security sensor peak memory: 1029 MB [INFO] Sensor VbNetSecuritySensor [security] (done) | time=2ms [INFO] Sensor PhpSecuritySensor [security] [INFO] 18 taint analysis rules enabled. [INFO] No UCFGs have been included for analysis. [INFO] php security sensor: Begin: 2025-09-30T08:54:01.412116332Z, End: 2025-09-30T08:54:01.412965136Z, Duration: 00:00:00.000 Load type hierarchy and UCFGs: Begin: 2025-09-30T08:54:01.412348143Z, End: 2025-09-30T08:54:01.412557186Z, Duration: 00:00:00.000 Load type hierarchy: Begin: 2025-09-30T08:54:01.412350968Z, End: 2025-09-30T08:54:01.412476381Z, Duration: 00:00:00.000 Load UCFGs: Begin: 2025-09-30T08:54:01.412513629Z, End: 2025-09-30T08:54:01.412532901Z, Duration: 00:00:00.000 [INFO] php security sensor peak memory: 1029 MB [INFO] Sensor PhpSecuritySensor [security] (done) | time=2ms [INFO] Sensor PythonSecuritySensor [security] [INFO] 21 taint analysis rules enabled. [INFO] No UCFGs have been included for analysis. [INFO] python security sensor: Begin: 2025-09-30T08:54:01.414121774Z, End: 2025-09-30T08:54:01.415005356Z, Duration: 00:00:00.000 Load type hierarchy and UCFGs: Begin: 2025-09-30T08:54:01.414399987Z, End: 2025-09-30T08:54:01.414603606Z, Duration: 00:00:00.000 Load type hierarchy: Begin: 2025-09-30T08:54:01.414402886Z, End: 2025-09-30T08:54:01.414520738Z, Duration: 00:00:00.000 Load UCFGs: Begin: 2025-09-30T08:54:01.414552383Z, End: 2025-09-30T08:54:01.414572364Z, Duration: 00:00:00.000 [INFO] python security sensor peak memory: 1029 MB [INFO] Sensor PythonSecuritySensor [security] (done) | time=2ms [INFO] Sensor JsSecuritySensor [security] [INFO] Sensor JsSecuritySensor [security] (done) | time=1ms [INFO] Sensor KotlinSecuritySensor [security] [INFO] 28 taint analysis rules enabled. [INFO] No UCFGs have been included for analysis. [INFO] kotlin security sensor: Begin: 2025-09-30T08:54:01.416808323Z, End: 2025-09-30T08:54:01.417750030Z, Duration: 00:00:00.000 Load type hierarchy and UCFGs: Begin: 2025-09-30T08:54:01.417188977Z, End: 2025-09-30T08:54:01.417371582Z, Duration: 00:00:00.000 Load type hierarchy: Begin: 2025-09-30T08:54:01.417191668Z, End: 2025-09-30T08:54:01.417287766Z, Duration: 00:00:00.000 Load UCFGs: Begin: 2025-09-30T08:54:01.417320596Z, End: 2025-09-30T08:54:01.417340011Z, Duration: 00:00:00.000 [INFO] kotlin security sensor peak memory: 1029 MB [INFO] Sensor KotlinSecuritySensor [security] (done) | time=2ms [INFO] Sensor GoSecuritySensor [security] [INFO] 9 taint analysis rules enabled. [INFO] No UCFGs have been included for analysis. [INFO] go security sensor: Begin: 2025-09-30T08:54:01.418946753Z, End: 2025-09-30T08:54:01.419640206Z, Duration: 00:00:00.000 Load type hierarchy and UCFGs: Begin: 2025-09-30T08:54:01.419102203Z, End: 2025-09-30T08:54:01.419269987Z, Duration: 00:00:00.000 Load type hierarchy: Begin: 2025-09-30T08:54:01.419105088Z, End: 2025-09-30T08:54:01.419186616Z, Duration: 00:00:00.000 Load UCFGs: Begin: 2025-09-30T08:54:01.419225945Z, End: 2025-09-30T08:54:01.419244589Z, Duration: 00:00:00.000 [INFO] go security sensor peak memory: 1029 MB [INFO] Sensor GoSecuritySensor [security] (done) | time=2ms [INFO] ------------- Run sensors on project [INFO] Sensor JsSecuritySensorV2 [jasmin] [INFO] 10 additional JS/TS file(s) from other modules detected but not analyzed. Set 'sonar.jasmin.modules.all' to true to include them in the taint analysis. [INFO] No relevant JS/TS files found. Skipping taint analysis. [INFO] Sensor JsSecuritySensorV2 [jasmin] (done) | time=1ms [INFO] Sensor JavaProjectSensor [java] [INFO] Sensor JavaProjectSensor [java] (done) | time=2ms [INFO] Sensor JavaArchitectureSensor [architecture] [INFO] * Protobuf reading starting | memory total=3144 | free=2094 | used=1049 (MB) [INFO] * Reading SonarArchitecture IR data from directory "<https://ci-builds.apache.org/job/OpenMeetings/job/openmeetings/ws/target/sonar/architecture/java";> [INFO] * Files successfully loaded: "617" out of "617" [INFO] * Protobuf reading complete | memory total=3144 | free=1926 | used=1217 (MB) [INFO] * Excluding node by kind: org.apache.openmeetings.webservice.util.RateLimited [annotation] [INFO] * Excluding node by kind: org.apache.openmeetings.test.NonJenkinsTest [annotation] [INFO] * Excluding node by kind: org.apache.openmeetings.util.logging.TimedDatabase [annotation] [INFO] * Excluding node by kind: org.apache.openmeetings.util.logging.TimedApplication [annotation] [INFO] * Build architecture.graph.java.namespace_graph.default_perspective hierarchy graph complete (filtered=true) | memory total=3144 | free=1834 | used=1309 (MB) [INFO] * Slicing complete | memory total=3144 | free=1830 | used=1313 (MB) [INFO] * Cycle detection complete | memory total=3144 | free=1826 | used=1317 (MB) [INFO] * Skipping issue reporting for 128 nodes in 161 cycles at "openmeetings-web/src/main/java/org/apache/openmeetings/web/common/MainPanel.java" [INFO] Sensor JavaArchitectureSensor [architecture] (done) | time=1595ms [INFO] Sensor JsArchitectureSensor [architecture] [INFO] * Protobuf reading starting | memory total=3144 | free=1814 | used=1329 (MB) [INFO] * Reading SonarArchitecture IR data from directory "<https://ci-builds.apache.org/job/OpenMeetings/job/openmeetings/ws/target/sonar/architecture/js";> [INFO] * Protobuf reading complete | memory total=3144 | free=1814 | used=1329 (MB) [INFO] * Build architecture.graph.js.file_graph.default_perspective hierarchy graph complete (filtered=true) | memory total=3144 | free=1814 | used=1329 (MB) [INFO] * Slicing complete | memory total=3144 | free=1814 | used=1329 (MB) [INFO] * Cycle detection complete | memory total=3144 | free=1814 | used=1329 (MB) [INFO] Sensor JsArchitectureSensor [architecture] (done) | time=17ms [INFO] Sensor Zero Coverage Sensor [INFO] Sensor Zero Coverage Sensor (done) | time=17ms [INFO] Sensor Java CPD Block Indexer [INFO] Sensor Java CPD Block Indexer (done) | time=985ms [INFO] ------------- Gather SCA dependencies on project [INFO] SCM Publisher SCM provider for this project is: git [INFO] SCM Publisher 834 source files to be analyzed [INFO] SCM Publisher 834/834 source files have been analyzed (done) | time=8498ms [INFO] CPD Executor 127 files had no CPD blocks [INFO] CPD Executor Calculating CPD for 558 files [INFO] CPD Executor CPD calculation finished (done) | time=218ms [INFO] Analysis report generated in 881ms, dir size=14 MB [INFO] Analysis report compressed in 3950ms, zip size=5 MB [INFO] Analysis report uploaded in 16365ms [ERROR] Error during SonarScanner Engine execution java.lang.RuntimeException: com.google.protobuf.InvalidProtocolBufferException: While parsing a protocol message, the input ended unexpectedly in the middle of a field. This could mean either that the input has been truncated or that an embedded message misreported its own length. at org.sonar.scanner.report.ReportPublisher.upload(ReportPublisher.java:233) at org.sonar.scanner.report.ReportPublisher.execute(ReportPublisher.java:157) at org.sonar.scanner.scan.ProjectScanContainer.doAfterStart(ProjectScanContainer.java:181) at org.sonar.core.platform.ComponentContainer.startComponents(ComponentContainer.java:123) at org.sonar.core.platform.ComponentContainer.execute(ComponentContainer.java:109) at org.sonar.scanner.bootstrap.ScannerContainer.doAfterStart(ScannerContainer.java:464) at org.sonar.core.platform.ComponentContainer.startComponents(ComponentContainer.java:123) at org.sonar.core.platform.ComponentContainer.execute(ComponentContainer.java:109) at org.sonar.scanner.bootstrap.GlobalContainer.doAfterStart(GlobalContainer.java:128) at org.sonar.core.platform.ComponentContainer.startComponents(ComponentContainer.java:123) at org.sonar.core.platform.ComponentContainer.execute(ComponentContainer.java:109) at org.sonar.scanner.bootstrap.ScannerMain.runScannerEngine(ScannerMain.java:143) at org.sonar.scanner.bootstrap.ScannerMain.run(ScannerMain.java:58) at org.sonar.scanner.bootstrap.ScannerMain.main(ScannerMain.java:42) Caused by: com.google.protobuf.InvalidProtocolBufferException: While parsing a protocol message, the input ended unexpectedly in the middle of a field. This could mean either that the input has been truncated or that an embedded message misreported its own length. at com.google.protobuf.InvalidProtocolBufferException.truncatedMessage(InvalidProtocolBufferException.java:115) at com.google.protobuf.CodedInputStream$StreamDecoder.readRawBytesSlowPathOneChunk(CodedInputStream.java:2970) at com.google.protobuf.CodedInputStream$StreamDecoder.readBytesSlowPath(CodedInputStream.java:3021) at com.google.protobuf.CodedInputStream$StreamDecoder.readBytes(CodedInputStream.java:2432) at com.google.protobuf.UnknownFieldSet$Builder.mergeFieldFrom(UnknownFieldSet.java:514) at com.google.protobuf.UnknownFieldSet$Builder.mergeFrom(UnknownFieldSet.java:491) at com.google.protobuf.UnknownFieldSet$Builder.mergeFrom(UnknownFieldSet.java:604) at com.google.protobuf.UnknownFieldSet$Builder.mergeFrom(UnknownFieldSet.java:304) at com.google.protobuf.CodedInputStream$StreamDecoder.readGroup(CodedInputStream.java:2357) at com.google.protobuf.UnknownFieldSet$Builder.mergeFieldFrom(UnknownFieldSet.java:518) at com.google.protobuf.GeneratedMessageV3$Builder.parseUnknownField(GeneratedMessageV3.java:863) at com.sonarsource.scanner.engine.webapi.client.proto.v1.Ce$SubmitResponse$Builder.mergeFrom(Ce.java:668) at com.sonarsource.scanner.engine.webapi.client.proto.v1.Ce$SubmitResponse$1.parsePartialFrom(Ce.java:886) at com.sonarsource.scanner.engine.webapi.client.proto.v1.Ce$SubmitResponse$1.parsePartialFrom(Ce.java:878) at com.google.protobuf.AbstractParser.parsePartialFrom(AbstractParser.java:215) at com.google.protobuf.AbstractParser.parseFrom(AbstractParser.java:232) at com.google.protobuf.AbstractParser.parseFrom(AbstractParser.java:237) at com.google.protobuf.AbstractParser.parseFrom(AbstractParser.java:48) at org.sonar.scanner.report.ReportPublisher.upload(ReportPublisher.java:231) ... 13 common frames omitted [INFO] ------------------------------------------------------------------------ [INFO] Reactor Summary for Openmeetings 8.2.0-SNAPSHOT: [INFO] [INFO] Openmeetings ....................................... FAILURE [03:22 min] [INFO] Openmeetings Tests ................................. SUCCESS [ 0.793 s] [INFO] Openmeetings Util .................................. SUCCESS [ 0.607 s] [INFO] Openmeetings DB .................................... SUCCESS [ 1.216 s] [INFO] Openmeetings Core .................................. SUCCESS [ 0.430 s] [INFO] Openmeetings MediaServer ........................... SUCCESS [ 0.336 s] [INFO] Openmeetings Install ............................... SUCCESS [ 0.305 s] [INFO] Openmeetings Service ............................... SUCCESS [ 0.657 s] [INFO] Openmeetings Webservices ........................... SUCCESS [ 0.328 s] [INFO] Openmeetings Web ................................... SUCCESS [ 1.032 s] [INFO] Openmeetings Screen Sharing applet ................. SUCCESS [ 0.238 s] [INFO] Openmeetings Server ................................ SUCCESS [ 0.226 s] [INFO] ------------------------------------------------------------------------ [INFO] BUILD FAILURE [INFO] ------------------------------------------------------------------------ [INFO] Total time: 03:31 min [INFO] Finished at: 2025-09-30T08:54:36Z [INFO] ------------------------------------------------------------------------ [ERROR] Failed to execute goal org.sonarsource.scanner.maven:sonar-maven-plugin:5.2.0.4988:sonar (default-cli) on project openmeetings-parent: The scanner analysis has failed! See the logs for more details. -> [Help 1] [ERROR] [ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch. [ERROR] Re-run Maven using the -X switch to enable full debug logging. [ERROR] [ERROR] For more information about the errors and possible solutions, please read the following articles: [ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException ERROR: Couldn't execute Maven task. RuntimeException: Maven build failed with exit code 1 ERROR: Build step failed with exception java.lang.RuntimeException: Maven build failed with exit code 1 at PluginClassLoader for artifactory//org.jfrog.hudson.pipeline.common.Utils.launch(Utils.java:281) Caused: java.lang.RuntimeException: Maven build failed. Couldn't execute Maven task. RuntimeException: Maven build failed with exit code 1 at PluginClassLoader for artifactory//org.jfrog.hudson.pipeline.common.Utils.launch(Utils.java:286) at PluginClassLoader for artifactory//org.jfrog.hudson.maven3.Maven3Builder.RunMaven(Maven3Builder.java:121) at PluginClassLoader for artifactory//org.jfrog.hudson.maven3.Maven3Builder.perform(Maven3Builder.java:101) at PluginClassLoader for run-condition//org.jenkins_ci.plugins.run_condition.BuildStepRunner$2.run(BuildStepRunner.java:112) at PluginClassLoader for run-condition//org.jenkins_ci.plugins.run_condition.BuildStepRunner$Fail.conditionalRun(BuildStepRunner.java:156) at PluginClassLoader for run-condition//org.jenkins_ci.plugins.run_condition.BuildStepRunner.perform(BuildStepRunner.java:107) at PluginClassLoader for conditional-buildstep//org.jenkinsci.plugins.conditionalbuildstep.singlestep.SingleConditionalBuilder.perform(SingleConditionalBuilder.java:108) at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20) at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:818) at hudson.model.Build$BuildExecution.build(Build.java:199) at hudson.model.Build$BuildExecution.doRun(Build.java:164) at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:527) at hudson.model.Run.execute(Run.java:1833) at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:44) at hudson.model.ResourceController.execute(ResourceController.java:101) at hudson.model.Executor.run(Executor.java:446) Build step 'Conditional step (single)' marked build as failure SSH: Current build result is [FAILURE], not going to run. Archiving artifacts Recording test results [Checks API] No suitable checks publisher found.
