[jboss-cvs] JBossAS SVN: r66556 - projects/metadata/trunk/src/main/java/org/jboss/metadata/web/spec.

[jboss-cvs-commits at lists.jboss.org]

Author: scott.stark at jboss.org
Date: 2007-10-30 02:36:24 -0400 (Tue, 30 Oct 2007)
New Revision: 66556

Modified:
   projects/metadata/trunk/src/main/java/org/jboss/metadata/web/spec/SecurityConstraintMetaData.java
Log:
Validate roleNames is not null before checking size

Modified: projects/metadata/trunk/src/main/java/org/jboss/metadata/web/spec/SecurityConstraintMetaData.java
===================================================================
--- projects/metadata/trunk/src/main/java/org/jboss/metadata/web/spec/SecurityConstraintMetaData.java	2007-10-30 06:24:35 UTC (rev 66555)
+++ projects/metadata/trunk/src/main/java/org/jboss/metadata/web/spec/SecurityConstraintMetaData.java	2007-10-30 06:36:24 UTC (rev 66556)
@@ -98,7 +98,10 @@
    @XmlTransient
    public boolean isExcluded()
    {
-      return authConstraint != null && authConstraint.getRoleNames().size() == 0;
+      boolean isExcluded = authConstraint != null
+      && authConstraint.getRoleNames() != null
+      && authConstraint.getRoleNames().size() == 0;
+      return isExcluded;
    }
 
    /** Accessor for the security-constraint/auth-constraint/role-name(s)