[jboss-jira] [JBoss JIRA] (ELY-740) Coverity static analysis: Dereference null return value in EntityUtil (Elytron)

[Josef Cacek (JIRA)]

Josef Cacek created ELY-740:
-------------------------------

             Summary: Coverity static analysis: Dereference null return value in EntityUtil (Elytron)
                 Key: ELY-740
                 URL: https://issues.jboss.org/browse/ELY-740
             Project: WildFly Elytron
          Issue Type: Bug
            Reporter: Josef Cacek
            Assignee: Darran Lofthouse


Coverity static-analysis scan found possible call on null object in {{EntityUtil.encodeAlgorithmIdentifier}} method:
https://scan7.coverity.com/reports.htm#v16159/p11778/fileInstanceId=5760335&defectInstanceId=1541381&mergedDefectId=1369303

In the call
{{encodeAlgorithmIdentifier(encoder, algorithmOid(algorithm), omitParametersField);}}
the {{algorithmOid()}} may return null (look at {{Entity}} class).
Then the {{encodeAlgorithmIdentifier}} calls {{DerEncoder.encodeObjectIdentifier}} where on the given String is called {{length()}} method without a null check.




--
This message was sent by Atlassian JIRA
(v7.2.3#72005)