[jboss-jira] [JBoss JIRA] (ELY-543) Missing null check in constructor of AbstractDigestMechanism

Ondrej Lukas (JIRA) issues at jboss.org
Wed May 18 06:46:04 EDT 2016


     [ https://issues.jboss.org/browse/ELY-543?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ondrej Lukas updated ELY-543:
-----------------------------
    Labels: static_analysis  (was: )


> Missing null check in constructor of AbstractDigestMechanism
> ------------------------------------------------------------
>
>                 Key: ELY-543
>                 URL: https://issues.jboss.org/browse/ELY-543
>             Project: WildFly Elytron
>          Issue Type: Bug
>    Affects Versions: 1.1.0.Beta5
>            Reporter: Ondrej Lukas
>            Assignee: Darran Lofthouse
>              Labels: static_analysis
>
> There is missing null check in constructor of org.wildfly.security.sasl.digest.AbstractDigestMechanism. Calling of {{messageDigestAlgorithm(mechanismName)}} on line 133 [1] can return null which results to NPE thrown from {{MessageDigest.getInstance(null)}}.
> [1] https://github.com/wildfly-security/wildfly-elytron/blob/ef67225884aa79b8e949c768a867c303af09fac4/src/main/java/org/wildfly/security/sasl/digest/AbstractDigestMechanism.java#L133



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)


More information about the jboss-jira mailing list