[
https://issues.jboss.org/browse/ELY-609?page=com.atlassian.jira.plugin.sy...
]
David Lloyd commented on ELY-609:
---------------------------------
This one seems nontrivial because more than one lock is used to mediate access, which is
almost certainly wrong.
Unguarded read in ElytronPolicyConfiguration
--------------------------------------------
Key: ELY-609
URL:
https://issues.jboss.org/browse/ELY-609
Project: WildFly Elytron
Issue Type: Bug
Affects Versions: 1.1.0.Beta7
Reporter: Ondrej Lukas
Assignee: Darran Lofthouse
Labels: static_analysis
Fix For: 1.1.0.Beta8
Access to fields {{uncheckedPermissions}}, {{excludedPermissions}} and
{{rolePermissions}} in {{org.wildfly.security.authz.jacc.ElytronPolicyConfiguration}} is
holded by lock. However lock is not used in their getter methods. Getters should be also
handled by locks to avoid unguarded read of those fields.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)