[jboss-jira] [JBoss JIRA] (WFLY-8106) Coverity static analysis, Dereference null return value, CredentialStoreAliasDefinition (elytron-subsystem)

Martin Choma (JIRA) issues at jboss.org
Tue Feb 14 03:28:01 EST 2017


Martin Choma created WFLY-8106:
----------------------------------

             Summary: Coverity static analysis, Dereference null return value, CredentialStoreAliasDefinition (elytron-subsystem) 
                 Key: WFLY-8106
                 URL: https://issues.jboss.org/browse/WFLY-8106
             Project: WildFly
          Issue Type: Bug
          Components: Security
            Reporter: Martin Choma
            Assignee: Darran Lofthouse


Coverity found 2 possible occurences of dereferencing null. Method {{propertyAliasFromOperation(final ModelNode operation)}} can return null.
And return value of {{propertyAliasFromOperation(final ModelNode operation)}} is dereferenced in {{transformOperationAddress(final ModelNode operation)}} and {{sameAlias(final OperationContext context, final ModelNode operation)}}

{code:java}
    private static void transformOperationAddress(final ModelNode operation) {
        Property alias = propertyAliasFromOperation(operation);
        String newAlias = alias.getValue().asString().toLowerCase(Locale.ROOT);
        alias.getValue().set(newAlias);
    }

    private static boolean sameAlias(final OperationContext context, final ModelNode operation) {
        String contextAlias = context.getCurrentAddress().getLastElement().getValue();
        String operationAlias = propertyAliasFromOperation(operation).getValue().asString();
        return  operationAlias.equals(contextAlias);
    }

    private static Property propertyAliasFromOperation(final ModelNode operation) {
        ModelNode address = operation.get(ModelDescriptionConstants.OP_ADDR);
        List<Property> list = address.asPropertyList();
        Property alias = null;
        for (Property p: list) {
            if (ElytronDescriptionConstants.ALIAS.equals(p.getName())) {
                alias = p;
                break;
            }
        }
        return alias;
    }
{code}

Add null check into {{transformOperationAddress(final ModelNode operation)}} and {{sameAlias(final OperationContext context, final ModelNode operation)}}




--
This message was sent by Atlassian JIRA
(v7.2.3#72005)


More information about the jboss-jira mailing list