Can SootUp be used to find missing or incompatible classes in an application?

[swpalmer-cl]

Application is assembled into a fat jar containing all the resolved dependencies.
Problem: Having two direct dependencies that pull in incompatble versions of transitive dependencies. This MAY manifest at runtime if certain code paths are hit, but the application could run for a long time before this happens, as the incompatible code can be on a rarely executed path such as an error handler.

I was wondering if I could use SootUp to build something quick that could scan the fat jar and find where bad method references or incompatible class definitions occured.

While experimenting I made a simple application that attempted to generate a call graph from the application entry point.

    ...
    CallGraphAlgorithm cha = new ClassHierarchyAnalysisAlgorithm(view);
    CallGraph cg = cha.initialize(List.of(entryMethodSignature));

That code takes a LONG time to run, but then it ultimately fails with this:

Exception in thread "main" java.lang.IllegalStateException: Failed to apply sootup.java.core.interceptors.NopEliminator@44dcffb5 to <io.netty.util.internal.NativeLibraryLoader: void loadLibrary(java.lang.ClassLoader,java.lang.String,boolean)>
	at sootup.java.bytecode.frontend.AsmMethodSource.resolveBody(AsmMethodSource.java:240)
	at sootup.core.model.SootMethod.lazyBodyInitializer(SootMethod.java:98)
	at com.google.common.base.Suppliers$NonSerializableMemoizingSupplier.get(Suppliers.java:186)
	at sootup.core.model.SootMethod.getBody(SootMethod.java:177)
	at sootup.callgraph.AbstractCallGraphAlgorithm.resolveAllCallsFromSourceMethod(AbstractCallGraphAlgorithm.java:218)
	at sootup.callgraph.AbstractCallGraphAlgorithm.processWorkList(AbstractCallGraphAlgorithm.java:176)
	at sootup.callgraph.AbstractCallGraphAlgorithm.constructCompleteCallGraph(AbstractCallGraphAlgorithm.java:85)
	at sootup.callgraph.ClassHierarchyAnalysisAlgorithm.initialize(ClassHierarchyAnalysisAlgorithm.java:65)
	at apichecker.App.callGraph(App.java:75)
	at apichecker.App.doIt(App.java:45)
	at apichecker.App.main(App.java:32)
Caused by: java.lang.IllegalStateException: visualize invalid StmtGraph: http://magjac.com/graphviz-visual-editor/?dot=digraph+G+%7B%0A%09compound%3Dtrue%0A%09labelloc%3Db%0A%09style%3Dfilled%0A%09color%3Dgray90%0A%09node+%5Bshape%3Dbox%2Cstyle%3Dfilled%2Ccolor%3Dwhite%5D%0A%09edge+%5Bfontsize%3D10%2Carrowsize%3D1.5%2Cfontcolor%3Dgrey40%5D%0A%09fontsize%3D10%0A%0A%2F%2F++lines+%5B383%3A+383%5D+%0A%09subgraph+cluster_701765085+%7B+%0A%09%09label+%3D+%22Block+%231%22%0A%09%09106334324%5Blabel%3D%22loader+%3A%3D+%40parameter0%3A+java.lang.ClassLoader%22%2Cshape%3DMdiamond%2Ccolor%3Dgrey50%2Cfillcolor%3Dwhite%5D%0A%09%091610584468%5Blabel%3D%22name+%3A%3D+%40parameter1%3A+java.lang.String%22%5D%0A%09%09299615533%5Blabel%3D%22absolute+%3A%3D+%40parameter2%3A+boolean%22%5D%0A%09%091449415211%5Blabel%3D%22suppressed+%3D+null%22%5D%0A%0A%09%09106334324+-%3E+1610584468+-%3E+299615533+-%3E+1449415211%0A%09%7D%0A%091449415211%3As+-%3E+493984971%3An%0A%0A%2F%2F++lines+%5B387%3A+389%5D+%0A%09subgraph+cluster_850411721+%7B+%0A%09%09label+%3D+%22Block+%232%22%0A%09%09493984971%5Blabel%3D%22newHelper+%3D+staticinvoke+%26lt%3Bio.netty.util.internal.NativeLibraryLoader%3A+java.lang.Class+tryToLoadClass%28java.lang.ClassLoader%2Cjava.lang.Class%29%26gt%3B%28loader%2C+class+%26quot%3BLio%2Fnetty%2Futil%2Finternal%2FNativeLibraryUtil%3B%26quot%3B%29%22%5D%0A%09%091050290740%5Blabel%3D%22staticinvoke+%26lt%3Bio.netty.util.internal.NativeLibraryLoader%3A+void+loadLibraryByHelper%28java.lang.Class%2Cjava.lang.String%2Cboolean%29%26gt%3B%28newHelper%2C+name%2C+absolute%29%22%5D%0A%09%09213713083%5Blabel%3D%22%24stack5+%3D+%26lt%3Bio.netty.util.internal.NativeLibraryLoader%3A+io.netty.util.internal.logging.InternalLogger+logger%26gt%3B%22%5D%0A%09%091850508169%5Blabel%3D%22interfaceinvoke+%24stack5.%26lt%3Bio.netty.util.internal.logging.InternalLogger%3A+void+debug%28java.lang.String%2Cjava.lang.Object%29%26gt%3B%28%26quot%3BSuccessfully+loaded+the+library+%7B%7D%26quot%3B%2C+name%29%22%5D%0A%0A%09%09493984971+-%3E+1050290740+-%3E+213713083+-%3E+1850508169%0A%09%7D%0A%091850508169%3As+-%3E+2017259021%3An%0A%09%2F%2Fexceptional+edges+%0A%091850508169%3Ae+-%3E+464037683%3An+%5Blabel%3D%22%09java.lang.UnsatisfiedLinkError%22color%3Dred%2Cltail%3D%22cluster_850411721%22%5D%0A%091850508169%3Ae+-%3E+1188642849%3An+%5Blabel%3D%22%09java.lang.NoSuchMethodError%22color%3Dred%2Cltail%3D%22cluster_850411721%22%5D%0A%091850508169%3Ae+-%3E+1656917548%3An+%5Blabel%3D%22%09java.lang.Exception%22color%3Dred%2Cltail%3D%22cluster_850411721%22%5D%0A%0A%2F%2F++lines+%5B390%3A+390%5D+%0A%09subgraph+cluster_1805558825+%7B+%0A%09%09label+%3D+%22Block+%233%22%0A%09%092017259021%5Blabel%3D%22return%22%2Cshape%3DMdiamond%2Ccolor%3Dgrey50%2Cfillcolor%3Dwhite%5D%0A%09%7D%0A%0A%7D
	at sootup.core.graph.StmtGraph.validateStmtConnectionsInGraph(StmtGraph.java:249)
	at sootup.java.bytecode.frontend.AsmMethodSource.resolveBody(AsmMethodSource.java:237)
	... 10 more
Caused by: java.lang.IllegalArgumentException: Invalid StmtGraph. A Trap is not created as a traps endStmt was not visited during the iteration of all Stmts.
	at sootup.core.graph.StmtGraph$BlockGraphIteratorAndTrapAggregator.getTraps(StmtGraph.java:495)
	at sootup.core.graph.MutableBlockStmtGraph.buildTraps(MutableBlockStmtGraph.java:1626)
	at sootup.core.graph.StmtGraph.validateStmtConnectionsInGraph(StmtGraph.java:192)
	... 11 more

Looking at that StmtGraph: http://.... URL shows me a graph related to Netty.. one of the libraries that I suspect may be a transitive dependency that was resolved such that the version in use is incompatible with one of the other dependencies that relies on it. So I was thinking, maybe this failure to create a call graph is actually confirming I have that problem, but I don't know.
Is what I want to do even possible with SootUp? If so what would be the best approach?

[swissiety]

Hi @swpalmer-cl,
the Exception occurs due to a bug I am currently working on and should be fixed in the next week.
if I understood correctly: No - as: not out of the box, because we assume the project given is working correctly - but there should be a way - outline: you need to unzip the jar and split the dependencies into their own Analysisinputlocations+Views and check API compatibility between the Views.

[swpalmer-cl]

Thanks for the quick response. I suspected that was the case.