Skip to Main Content
IDEAS
My Sonatype Community
Learn
Support
Status Needs Review
Created by Guest
Created on Nov 17, 2022

Sourceanadlibscanner for java 17

Hello, I need help using sourceandlibscanner https://marketplace.microfocus.com/cyberres/content/fortify-sourceandlibscanner, with Java 17, when I use the tool with Java 17 I get the following error message:

Exception in thread "main" java.lang.ExceptionInInitializerError

at com.google.inject.internal.cglib.reflect.$FastClass$Generator.getProtectionDomain(FastClass.java:73)

at com.google.inject.internal.cglib.core.$AbstractClassGenerator.create(AbstractClassGenerator.java:206)

at com.google.inject.internal.cglib.reflect.$FastClass$Generator.create(FastClass.java:65)

at com.google.inject.internal.BytecodeGen.newFastClassForMember(BytecodeGen.java:252)

at com.google.inject.internal.BytecodeGen.newFastClassForMember(BytecodeGen.java:203)

at com.google.inject.internal.ProviderMethod.create(ProviderMethod.java:69)

at com.google.inject.internal.ProviderMethodsModule.createProviderMethod(ProviderMethodsModule.java:275)

at com.google.inject.internal.ProviderMethodsModule.getProviderMethods(ProviderMethodsModule.java:144)

at com.google.inject.internal.ProviderMethodsModule.configure(ProviderMethodsModule.java:123)

at com.google.inject.spi.Elements$RecordingBinder.install(Elements.java:340)

at com.google.inject.spi.Elements$RecordingBinder.install(Elements.java:349)

at com.google.inject.spi.Elements.getElements(Elements.java:110)

at com.google.inject.spi.Elements.getElements(Elements.java:101)

at org.eclipse.sisu.wire.WireModule.configure(WireModule.java:75)

at com.google.inject.spi.Elements$RecordingBinder.install(Elements.java:340)

at com.google.inject.spi.Elements.getElements(Elements.java:110)

at com.google.inject.internal.InjectorShell$Builder.build(InjectorShell.java:138)

at com.google.inject.internal.InternalInjectorCreator.build(InternalInjectorCreator.java:104)

at com.google.inject.Guice.createInjector(Guice.java:99)

at com.google.inject.Guice.createInjector(Guice.java:73)

at com.google.inject.Guice.createInjector(Guice.java:62)

at org.eclipse.sisu.launch.Main.boot(Main.java:74)

at org.eclipse.sisu.launch.Main.boot(Main.java:67)

at com.sonatype.insight.scan.cli.PolicyEvaluatorCli.instantiate(PolicyEvaluatorCli.java:106)

at com.sonatype.insight.scan.cli.PolicyEvaluatorCli.boot(PolicyEvaluatorCli.java:86)

at com.sonatype.insight.scan.cli.PolicyEvaluatorCli.run(PolicyEvaluatorCli.java:55)

at com.sonatype.insight.scan.cli.PolicyEvaluatorCli.main(PolicyEvaluatorCli.java:47)

Caused by: java.lang.reflect.InaccessibleObjectException: Unable to make protected final java.lang.Class java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int,java.security.ProtectionDomain) throws java.lang.ClassFormatError accessible: module java.base does not "opens java.lang" to unnamed module @3bf44630

at java.base/java.lang.reflect.AccessibleObject.checkCanSetAccessible(AccessibleObject.java:354)

at java.base/java.lang.reflect.AccessibleObject.checkCanSetAccessible(AccessibleObject.java:297)

at java.base/java.lang.reflect.Method.checkCanSetAccessible(Method.java:199)

at java.base/java.lang.reflect.Method.setAccessible(Method.java:193)

at com.google.inject.internal.cglib.core.$ReflectUtils$1.run(ReflectUtils.java:52)

at java.base/java.security.AccessController.doPrivileged(AccessController.java:318)

at com.google.inject.internal.cglib.core.$ReflectUtils.<clinit>(ReflectUtils.java:42)

... 27 more

I'm using:

Software Security Center - 22.1

Nexus IQ Server - Release 143

Java 17 Version:

java version "17.0.1" 2021-10-19 LTS

Java(TM) SE Runtime Environment (build 17.0.1 12-LTS-39)

Java HotSpot(TM) 64-Bit Server VM (build 17.0.1 12-LTS-39, mixed mode, sharing)

Sourceandlibscanner Version 21.1.12.004

Static Code Analyzer Version 22.1.0.0137

Apache Maven 3.6.3

  • Attach files
  • Joe Tom
    Reply
    |
    Mar 9, 2023

    I hope you got help somewhere else but I just saw this and it looks like you're filing under a Sonatype Lift product idea where you're trying to get troubleshooting help with IQ? So you're 2 degrees of seperation off at least from getting help. If you need help with IQ, suggest you file a support ticket.