Missing null check in ServerAuthenticationContext.NameAssignedState.isSamePrincipal() method -------------------------------------------------------------------------------------------- Key: ELY-540 URL: https://issues.jboss.org/browse/ELY-540 Project: WildFly Elytron Issue Type: Bug Affects Versions: 1.1.0.Beta5 Reporter: Ondrej Lukas Assignee: David Lloyd Labels: static_analysis Fix For: 1.1.0.Beta7 In method {{isSamePrincipal(final Principal principal)}} of org.wildfly.security.auth.server.ServerAuthenticationContext.NameAssignedState null value can be assigned to variable {{name}}. It can result to NPE when null value is passed to following {{isSameName}} method. Check whether {{name}} is not null should be added before {{isSameName(name)}} calling.