WARNINGs when executing analysis with Java 21 #7759

Activity

1. andham

   added

   bug

   on Jun 19, 2025
2. aikebah

   added

   enhancement

   and removed

   bug

   on Jun 26, 2025
3. fabianfrz commented on Jul 7, 2025

   

   fabianfrz

   on Jul 7, 2025

   More actions

   I can confirm this with the maven version as well.

   Java version:

   openjdk 21.0.7 2025-04-15
   OpenJDK Runtime Environment (build 21.0.7+6)
   OpenJDK 64-Bit Server VM (build 21.0.7+6, mixed mode, sharing)
   

   Log:

   [INFO] Finished Jar Analyzer (0 seconds)
   [INFO] Finished Dependency Merging Analyzer (0 seconds)
   [INFO] Finished Hint Analyzer (0 seconds)
   [INFO] Finished Version Filter Analyzer (0 seconds)
   WARNING: A restricted method in java.lang.foreign.Linker has been called
   WARNING: java.lang.foreign.Linker::downcallHandle has been called by the unnamed module
   WARNING: Use --enable-native-access=ALL-UNNAMED to avoid a warning for this module
   
   Jul 07, 2025 9:20:23 AM org.apache.lucene.store.MemorySegmentIndexInputProvider <init>
   INFO: Using MemorySegmentIndexInput and native madvise support with Java 21 or later; to disable start with -Dorg.apache.lucene.store.MMapDirectory.enableMemorySegments=false
   Jul 07, 2025 9:20:23 AM org.apache.lucene.internal.vectorization.VectorizationProvider lookup
   WARNING: Java vector incubator module is not readable. For optimal vector performance, pass '--add-modules jdk.incubator.vector' to enable Vector API.
   [INFO] Created CPE Index (1 seconds)
   [INFO] Finished CPE Analyzer (4 seconds)
   [INFO] Finished False Positive Analyzer (0 seconds)
   [INFO] Finished NVD CVE Analyzer (0 seconds)
   [INFO] Finished RetireJS Analyzer (0 seconds)
   [INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
   [INFO] Finished Known Exploited Vulnerability Analyzer (0 seconds)
   [INFO] Finished Dependency Bundling Analyzer (0 seconds)
   

   Maven version

   Apache Maven 3.9.9 (8e8579a9e76f7d015ee5ec7bfcdc97d260186937)
   Maven home: /usr/share/java/maven
   Java version: 21.0.7, vendor: Arch Linux, runtime: /usr/lib/jvm/java-21-openjdk
   Default locale: en_US, platform encoding: UTF-8
   OS name: "linux", version: "6.15.3-1-manjaro", arch: "amd64", family: "unix"
   
4. chadlwilson commented on Sep 26, 2025

   

   chadlwilson

   on Sep 26, 2025

   Collaborator

   More actions

   The warnings will be different depending on whether you are using the Docker image, and which JVM vendor and version you're using.

   I've cleaned up CLI warnings somewhat within #7979 however the JVM warnings will require a few more decisions.

   They come from Apache Lucene, and the default use of MemorySegments on Java 21+ which triggers the warnings.

   Options

   • Disable them with -Dorg.apache.lucene.store.MMapDirectory.enableMemorySegments=false (goes back to ByteBuffers)
   • Accept that this is intentional and add --enable-native-access=ALL-UNNAMED to start-up JVM args
     • No good solution for Maven/Gradle with this, however.
   • Modularise all of ODC :-)
5. chadlwilson

   self-assigned this

   on Sep 26, 2025
6. chadlwilson commented on Sep 26, 2025

   

   chadlwilson

   on Sep 26, 2025

   Last edited by chadlwilson

   Collaborator

   More actions

   IMHO, it's probably best to just add --enable-native-access=ALL-UNNAMED to the CLI args, but in the generic CLI (BYO JVM, non-Docker) it's a bit messy as this option was only added in Java 19+.
7. chadlwilson

   removed their assignment

   on Sep 26, 2025
8. jeremylong

   closed this as completedin #8003on Oct 6, 2025
9. chadlwilson

   added this to the 12.1.7 milestone on Oct 6, 2025
10. chadlwilson

    marked Apache Lucene Update Warnings are shown when using Java 25 #8029 as a duplicate of this issue on Oct 12, 2025
11. github-actions

    locked as resolved and limited conversation to collaborators on Nov 6, 2025