[jboss-jira] [JBoss JIRA] (ELY-753) Coverity static analysis: Explicit null dereferenced in SetCredentialsConfiguration (Elytron)
Josef Cacek created ELY-753:
-------------------------------
Summary: Coverity static analysis: Explicit null dereferenced in
SetCredentialsConfiguration (Elytron)
Key: ELY-753
URL: https://issues.jboss.org/browse/ELY-753
Project: WildFly Elytron
Issue Type: Bug
Reporter: Josef Cacek
Assignee: Darran Lofthouse
Coverity static-analysis scan found possible use of null object in
{{SetCredentialsConfiguration.filterOneSaslMechanism}} method.
https://scan7.coverity.com/reports.htm#v16159/p11778/fileInstanceId=58630...
The method contains condition
{code}
if (credentials.contains(type, null)) {
//...
}
{code}
If the {{credentials}} variable is of type {{IdentityCredentials}}, then the
{{contains()}} call may result in NPE, because the {{null}} is used as {{algorthmName}}
in:
{code}
return credentialType.isInstance(credential) &&
algorithmName.equals(((AlgorithmCredential) credential).getAlgorithm());
{code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)