[jboss-jira] [JBoss JIRA] (ELY-610) Missing null check in build() method of X509CertificateBuilder

[Ondrej Lukas (JIRA)]

Ondrej Lukas created ELY-610:
--------------------------------

             Summary: Missing null check in build() method of X509CertificateBuilder
                 Key: ELY-610
                 URL: https://issues.jboss.org/browse/ELY-610
             Project: WildFly Elytron
          Issue Type: Bug
    Affects Versions: 1.1.0.Beta7
            Reporter: Ondrej Lukas
            Assignee: Darran Lofthouse


Calling {{ASN1.oidFromSignatureAlgorithm(String)}} in {{org.wildfly.security.x500.cert.X509CertificateBuilder.build()}} method on line 375 [1] for unknown algorithms returns null which is assigned to {{signatureAlgorithmOid}} and results to NPE thrown from {{derEncoder.encodeObjectIdentifier(signatureAlgorithmOid)}} on line 377.

[1] https://github.com/wildfly-security/wildfly-elytron/blob/e01a09572b02f33db01695eb85638e88b0cd944f/src/main/java/org/wildfly/security/x500/cert/X509CertificateBuilder.java#L375



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)