[jboss-jira] [JBoss JIRA] (ELY-540) Missing null check in ServerAuthenticationContext.NameAssignedState.isSamePrincipal() method

[David Lloyd (JIRA)]

     [ https://issues.jboss.org/browse/ELY-540?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Lloyd resolved ELY-540.
-----------------------------
    Fix Version/s: 1.1.0.Beta7
         Assignee: David Lloyd  (was: Darran Lofthouse)
       Resolution: Done


It looks like this was fixed at some point.  All the paths to calling these methods are preceded by null checks.

> Missing null check in ServerAuthenticationContext.NameAssignedState.isSamePrincipal() method
> --------------------------------------------------------------------------------------------
>
>                 Key: ELY-540
>                 URL: https://issues.jboss.org/browse/ELY-540
>             Project: WildFly Elytron
>          Issue Type: Bug
>    Affects Versions: 1.1.0.Beta5
>            Reporter: Ondrej Lukas
>            Assignee: David Lloyd
>              Labels: static_analysis
>             Fix For: 1.1.0.Beta7
>
>
> In method {{isSamePrincipal(final Principal principal)}} of org.wildfly.security.auth.server.ServerAuthenticationContext.NameAssignedState null value can be assigned to variable {{name}}. It can result to NPE when null value is passed to following {{isSameName}} method. Check whether {{name}} is not null should be added before {{isSameName(name)}} calling.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)