X Tutup
The Wayback Machine - https://web.archive.org/web/20201110083156/https://github.com/github/codeql-cli-binaries/issues/27
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

create java database skip some java source file #27

Open
leveryd opened this issue Apr 24, 2020 · 3 comments
Open

create java database skip some java source file #27

leveryd opened this issue Apr 24, 2020 · 3 comments
Labels
CLI

Comments

@leveryd
Copy link

@leveryd leveryd commented Apr 24, 2020

found a warn message in the log

java-database/log/javac-extractor-39033.log:[2020-04-24 13:40:13] [javac-extractor-39033] [WARN] Skipping Lombok-ed source file /xxxxx/yyyy.java

why bypass and how to analyse Lombok-ed source file

@p0
Copy link
Collaborator

@p0 p0 commented Apr 24, 2020

Lombok uses non-public compiler APIs in order to achieve the modifications to compiler behaviour that it needs. In doing so, it makes assumptions that are not valid for CodeQL's Java extractor, and thus does not work with it.

The recommended workaround is to delombok the code you want to analyse before running it through CodeQL.

What project are you interested in? We have some (not-production-ready) experiments that may help in some cases, and it'd be interesting to try them out.

@0xCcSec
Copy link

@0xCcSec 0xCcSec commented May 28, 2020

hi
what is the "We have some (not-production-ready) experiments that may help in some cases, and it'd be interesting to try them out."
I have the same problem

@p0
Copy link
Collaborator

@p0 p0 commented May 28, 2020

I'm afraid I can only recommend the same workaround: delombok the code before running it through CodeQL.

While, as I said, we have explored what it would take to make Lombok work natively with CodeQL, it's hard to create a maintainable solution that works across Lombok and JVM versions, and as there is a workaround the priority of doing so for us is relatively low.

@adityasharad adityasharad added the CLI label Jul 31, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
4 participants
You can’t perform that action at this time.
X Tutup