[jboss-jira] [JBoss JIRA] Created: (SECURITY-23) NullPointerException in JaasSecurityManager.getPrincipal()

Alex Besogonov (JIRA) jira-events at jboss.com
Tue Nov 28 00:42:55 EST 2006


NullPointerException in JaasSecurityManager.getPrincipal()
----------------------------------------------------------

                 Key: SECURITY-23
                 URL: http://jira.jboss.com/jira/browse/SECURITY-23
             Project: JBoss Security
          Issue Type: Bug
      Security Level: Public (Everyone can see)
            Reporter: Alex Besogonov
         Assigned To: Anil Saldhana


JaasSecurityManager.getPrincipal() does not check for empty domainCache.  This method is called, for example, when JAAS is used from web layer.

Trivial fix, add in the start of the method:
      if( domainCache == null )
         return principal;

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        



More information about the jboss-jira mailing list