infinitely long scan

[almaz045]

I tried run "atom reachables -o app.atom -s reachables.json -l c ." on tarantool repo to test C lang. Then it's printed: "Exception in thread "" java.lang.OutOfMemoryError: Java heap space"
Then I tried to run atom with next command:
/atom/bin/atom -J-Xmx16g reachables -o app.atom -s reachables.json -l c .

But it scans infinitely, I waited for couple hours.

Then tried like this: atom/bin/atom -J-Xmx16g reachables -o app.atom -s reachable.json -l c . -J-XX:+UseG1GC -J-XX:+UseStringDeduplication

And it scans infinitely too

[prabhu]

We have known performance issues with c/c++ and java with > 30K loc.

[prabhu]

Completes within a minute for me with the default. Do you have the latest atom?

/mnt/work/AppThreat/atom/atom.sh reachables -l c -o app.atom .
Picked up JAVA_TOOL_OPTIONS: -Dfile.encoding=UTF-8 -Djna.library.path=/home/prabhu/miniconda3/envs/chenpy-dev/lib
Generating data-flow dependencies from atom. Please wait ...
Slicing the atom for reachables. This might take a few minutes ...
Falling back to using reverse reachability to determine flows. Max DDG depth used: 7
Slices have been successfully written to /mnt/work/sandbox/tarantool/slices.json

[matdibu]

I've also tried to scan the cpp packages in our team's monorepo

cdxgen is using 40GBs of ram and I have no idea what it's using it for, but I can see that it's running io.appthreat.atom-2.4.2-classpath.jar

we only have two c++ libraries, why is it struggling so much?

[matdibu]

I got this error after a few minutes

Slicing was not successful. For large projects (> 1 million lines of code), try running atom cli externally in Java mode. Please refer to the instructions in https://github.com/CycloneDX/cdxgen/blob/master/ADVANCED.md.

[prabhu]

@matdibu could you try running atom via the java mode? Download and unzip this release and use atom.sh

https://github.com/AppThreat/atom/releases/download/v2.4.4/atom.zip

./atom.sh --help