[jboss-jira] [JBoss JIRA] (WFCORE-2312) Management console won't load if master host in domain is unsecured

Brian Stansberry (JIRA) issues at jboss.org
Mon Feb 20 18:34:00 EST 2017


    [ https://issues.jboss.org/browse/WFCORE-2312?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13366579#comment-13366579 ] 

Brian Stansberry commented on WFCORE-2312:
------------------------------------------

Problem is IdentityAddressProtocolUtil.read:

{code}
        ProtocolUtils.expectHeader(input, ITEMS_PARAM);
        final int itemCount = input.readInt();

        Principal principal = null;
        Set<String> roles = new HashSet<>(itemCount - 2);
{code}

There is no guarantee that itemCount is >= 2.

> Management console won't load if master host in domain is unsecured
> -------------------------------------------------------------------
>
>                 Key: WFCORE-2312
>                 URL: https://issues.jboss.org/browse/WFCORE-2312
>             Project: WildFly Core
>          Issue Type: Bug
>          Components: Domain Management, Security
>    Affects Versions: 3.0.0.Beta2
>            Reporter: Jan Kašík
>            Assignee: Brian Stansberry
>            Priority: Blocker
>             Fix For: 3.0.0.Beta4
>
>
> When domain master host is unsecured, management console won't load in domain mode. This is regression against 7.1.0.DR11 and 7.0.0.GA.



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)



More information about the jboss-jira mailing list