[jboss-jira] [JBoss JIRA] Updated: (SECURITY-23) NullPointerException in JaasSecurityManager.getPrincipal()

Alex Besogonov (JIRA) jira-events at jboss.com
Tue Nov 28 02:00:55 EST 2006


     [ http://jira.jboss.com/jira/browse/SECURITY-23?page=all ]

Alex Besogonov updated SECURITY-23:
-----------------------------------

    Component/s: JBossSX

> NullPointerException in JaasSecurityManager.getPrincipal()
> ----------------------------------------------------------
>
>                 Key: SECURITY-23
>                 URL: http://jira.jboss.com/jira/browse/SECURITY-23
>             Project: JBoss Security
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: JBossSX
>            Reporter: Alex Besogonov
>         Assigned To: Anil Saldhana
>
> JaasSecurityManager.getPrincipal() does not check for empty domainCache.  This method is called, for example, when JAAS is used from web layer.
> Trivial fix, add in the start of the method:
>       if( domainCache == null )
>          return principal;

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        



More information about the jboss-jira mailing list