[APEXCORE-805] There are dependency conflicts in apex-core/engine module

• Type: Bug
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 3.6.0
• Assignee: Unassigned
• Reporter: PandaMonkey
• Created: 12/Feb/18 06:09
• Updated: 22/Feb/18 16:23

Description

Hi, we found four pairs of JAR files in apex-core/engine contain duplicate classes.

1. jar-pair:<org.eclipse.jetty.orbit:javax.servlet:3.0.0.v201112011016:><javax.servlet:servlet-api:2.5:>

2. jar-pair:<javax.servlet:javax.servlet-api:3.0.1:><javax.servlet:servlet-api:2.5:>

3. jar-pair:<javax.servlet:servlet-api:*2.5:><org.glassfish:*javax.servlet:3.1:>

4. jar-pair:<com.google.inject:guice:4.0:no_aop><com.google.inject:guice:3.0:>

Furthermore, by static analysis, we found these duplicate classes have different implementations. As the JVM only load the classes present first on the classpath and shadow the other duplicate ones with the same name. So the problem will lead to the "NoSuchMethodException" or "NoSuchMethodError". The conflicting details are listed in the attachment. Hope this can help you. Thanks!apex-core-conflicts.txt