Details
-
Type:
Bug
-
Status: Closed
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: 4.9
-
Component/s: Java analysis
-
Labels:None
Description
To populate properties `sonar.java.libraries` and `sonar.java.test.libraries` we are collecting classpath entries of the current module.
We totally miss the fact that a module can depend on other modules (transitively) and each module can decide to export some of its classpath entries.
This means we can easily analyze Java files with a truncated classpath, leading to FP/FN.
Attachments
Issue Links
- links to