[jboss-jira] [JBoss JIRA] (SECURITY-874) CredentialIdentityFactory.NULL_IDENTITY does not get initialized and causes NullPointerExceptions

[Bartosz Baranowski (JIRA)]

     [ https://issues.jboss.org/browse/SECURITY-874?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Bartosz Baranowski updated SECURITY-874:
----------------------------------------
    Attachment: SECURITY-874.patch


Alternate solution. This patch add inner class with equals/hashCode methods, instead of anonymous class.

> CredentialIdentityFactory.NULL_IDENTITY does not get initialized and causes NullPointerExceptions
> -------------------------------------------------------------------------------------------------
>
>                 Key: SECURITY-874
>                 URL: https://issues.jboss.org/browse/SECURITY-874
>             Project: PicketBox 
>          Issue Type: Bug
>          Components: Identity
>    Affects Versions: PicketBox_4_0_21.Final
>            Reporter: Bartosz Baranowski
>            Assignee: Bartosz Baranowski
>         Attachments: SECURITY-874.patch
>
>
> org.jboss.security.identity.extensions.CredentialIdentityFactory.NULL_IDENTITY does not get initialized to an empty identity due to initialization method returning a reference to NULL_IDENTITY, which has not initialized yet, resulting in null pointer. This causes NullPointerException in org.jboss.security.SecurityContextUtil.clearIdentities() and org.jboss.security.SecurityContextUtil.getIdentities() methods.



--
This message was sent by Atlassian JIRA
(v6.3.11#6341)