Coverity, Dereference after null check (Elytron subsystem) ---------------------------------------------------------- Key: WFCORE-2517 URL: https://issues.jboss.org/browse/WFCORE-2517 Project: WildFly Core Issue Type: Bug Components: Security Reporter: Martin Choma Assignee: Ilia Vassilev Coverity found possible dereference of null. In this code {{defaultPolicy}} is checked for null and in next step {{defaultPolicy.equals()}} is called. https://scan7.coverity.com/reports.htm#v23632/p12663/fileInstanceId=10578... {code:java|title=PolicyParser.java} boolean providerFound = defaultPolicy == null; while (reader.hasNext() && reader.nextTag() != END_ELEMENT) { verifyNamespace(reader); String localName = reader.getLocalName(); switch (localName) { // Permission Mapper case JACC_POLICY: providerFound = defaultPolicy.equals(parseJaccPolicy(addPolicy, reader, operations)) || providerFound; break; case CUSTOM_POLICY: providerFound = defaultPolicy.equals(parseCustomPolicy(addPolicy, reader, operations)) || providerFound; break; default: throw unexpectedElement(reader); } } {code}