[jboss-jira] [JBoss JIRA] Closed: (SECURITY-23) NullPointerException in JaasSecurityManager.getPrincipal()

Anil Saldhana (JIRA) jira-events at lists.jboss.org
Tue May 8 06:56:52 EDT 2007


     [ http://jira.jboss.com/jira/browse/SECURITY-23?page=all ]

Anil Saldhana closed SECURITY-23.
---------------------------------

    Resolution: Done

Fixed in trunk and Branch_4_0

Not made it to Branch_4_2

> NullPointerException in JaasSecurityManager.getPrincipal()
> ----------------------------------------------------------
>
>                 Key: SECURITY-23
>                 URL: http://jira.jboss.com/jira/browse/SECURITY-23
>             Project: JBoss Security and Identity Management
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: JBossSX
>    Affects Versions: 1.x
>            Reporter: Alex Besogonov
>         Assigned To: Anil Saldhana
>             Fix For: 2.0.GA
>
>
> JaasSecurityManager.getPrincipal() does not check for empty domainCache.  This method is called, for example, when JAAS is used from web layer.
> Trivial fix, add in the start of the method:
>       if( domainCache == null )
>          return principal;

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        



More information about the jboss-jira mailing list