[jboss-jira] [JBoss JIRA] (ELY-740) Coverity static analysis: Dereference null return value in EntityUtil (Elytron)

[Ilia Vassilev (JIRA)]

     [ https://issues.jboss.org/browse/ELY-740?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ilia Vassilev reassigned ELY-740:
---------------------------------

    Assignee: Ilia Vassilev  (was: Darran Lofthouse)


> Coverity static analysis: Dereference null return value in EntityUtil (Elytron)
> -------------------------------------------------------------------------------
>
>                 Key: ELY-740
>                 URL: https://issues.jboss.org/browse/ELY-740
>             Project: WildFly Elytron
>          Issue Type: Bug
>            Reporter: Josef Cacek
>            Assignee: Ilia Vassilev
>              Labels: static_analysis
>
> Coverity static-analysis scan found possible call on null object in {{EntityUtil.encodeAlgorithmIdentifier}} method:
> https://scan7.coverity.com/reports.htm#v16159/p11778/fileInstanceId=5760335&defectInstanceId=1541381&mergedDefectId=1369303
> In the call
> {{encodeAlgorithmIdentifier(encoder, algorithmOid(algorithm), omitParametersField);}}
> the {{algorithmOid()}} may return null (look at {{Entity}} class).
> Then the {{encodeAlgorithmIdentifier}} calls {{DerEncoder.encodeObjectIdentifier}} where on the given String is called {{length()}} method without a null check.



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)