[jboss-jira] [JBoss JIRA] (ELY-540) Missing null check in ServerAuthenticationContext.NameAssignedState.isSamePrincipal() method

Ondrej Lukas (JIRA) issues at jboss.org
Wed May 18 06:03:00 EDT 2016


Ondrej Lukas created ELY-540:
--------------------------------

             Summary: Missing null check in ServerAuthenticationContext.NameAssignedState.isSamePrincipal() method
                 Key: ELY-540
                 URL: https://issues.jboss.org/browse/ELY-540
             Project: WildFly Elytron
          Issue Type: Bug
    Affects Versions: 1.1.0.Beta5
            Reporter: Ondrej Lukas
            Assignee: Darran Lofthouse


In method {{isSamePrincipal(final Principal principal)}} of org.wildfly.security.auth.server.ServerAuthenticationContext.NameAssignedState null value can be assigned to variable {{name}}. It can result to NPE when null value is passed to following {{isSameName}} method. Check whether {{name}} is not null should be added before {{isSameName(name)}} calling.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)


More information about the jboss-jira mailing list