Ilia Vassilev created ELY-1552:
----------------------------------
Summary: Coverity, Reliance on default encoding in
DigestAuthenticationMechanism.
Key: ELY-1552
URL:
https://issues.jboss.org/browse/ELY-1552
Project: WildFly Elytron
Issue Type: Bug
Affects Versions: 1.2.4.Final
Reporter: Ilia Vassilev
Assignee: Ilia Vassilev
Priority: Minor
In
org.wildfly.security.http.impl.DigestAuthenticationMechanism.digestUriMatchesRequestUri(org.wildfly.security.http.HttpServerRequest,
byte[]): Found a call to a method which will perform a byte to String (or String to byte)
conversion, and will assume that the default platform encoding is suitable.
{code}
private boolean digestUriMatchesRequestUri(HttpServerRequest request, byte[] digestUri)
{
if (!validateUri) {
return true;
}
java.net.URI requestURI = request.getRequestURI();
String digestUriStr = new String(digestUri);
{code}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)