[jboss-jira] [JBoss JIRA] (ELY-740) Coverity static analysis: Dereference null return value in EntityUtil (Elytron)

[Ilia Vassilev (JIRA)]

     [ https://issues.jboss.org/browse/ELY-740?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ilia Vassilev updated ELY-740:
------------------------------
    Fix Version/s: 1.1.0.Beta15


> Coverity static analysis: Dereference null return value in EntityUtil (Elytron)
> -------------------------------------------------------------------------------
>
>                 Key: ELY-740
>                 URL: https://issues.jboss.org/browse/ELY-740
>             Project: WildFly Elytron
>          Issue Type: Bug
>            Reporter: Josef Cacek
>            Assignee: Ilia Vassilev
>              Labels: static_analysis
>             Fix For: 1.1.0.Beta15
>
>
> Coverity static-analysis scan found possible call on null object in {{EntityUtil.encodeAlgorithmIdentifier}} method:
> https://scan7.coverity.com/reports.htm#v16159/p11778/fileInstanceId=5760335&defectInstanceId=1541381&mergedDefectId=1369303
> In the call
> {{encodeAlgorithmIdentifier(encoder, algorithmOid(algorithm), omitParametersField);}}
> the {{algorithmOid()}} may return null (look at {{Entity}} class).
> Then the {{encodeAlgorithmIdentifier}} calls {{DerEncoder.encodeObjectIdentifier}} where on the given String is called {{length()}} method without a null check.



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)