Ondrej Lukas created ELY-540: -------------------------------- Summary: Missing null check in ServerAuthenticationContext.NameAssignedState.isSamePrincipal() method Key: ELY-540 URL: https://issues.jboss.org/browse/ELY-540 Project: WildFly Elytron Issue Type: Bug Affects Versions: 1.1.0.Beta5 Reporter: Ondrej Lukas Assignee: Darran Lofthouse In method {{isSamePrincipal(final Principal principal)}} of org.wildfly.security.auth.server.ServerAuthenticationContext.NameAssignedState null value can be assigned to variable {{name}}. It can result to NPE when null value is passed to following {{isSameName}} method. Check whether {{name}} is not null should be added before {{isSameName(name)}} calling. -- This message was sent by Atlassian JIRA (v6.4.11#64026)