[jboss-jira] [JBoss JIRA] (WFLY-7832) Coverity: dereference null value in ClassLoadingAttributeDefinitions (Elytron subsystem)

[Darran Lofthouse (JIRA)]

     [ https://issues.jboss.org/browse/WFLY-7832?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse updated WFLY-7832:
-----------------------------------
    Fix Version/s: 11.0.0.Alpha1


> Coverity: dereference null value in ClassLoadingAttributeDefinitions (Elytron subsystem)
> ----------------------------------------------------------------------------------------
>
>                 Key: WFLY-7832
>                 URL: https://issues.jboss.org/browse/WFLY-7832
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>            Reporter: Josef Cacek
>            Assignee: Ilia Vassilev
>              Labels: static_analysis
>             Fix For: 11.0.0.Alpha1
>
>
> Coverity static-analysis scan found a possilbe method call on null object in the {{ClassLoadingAttributeDefinitions.resolveClassLoader}} method.
> https://scan7.coverity.com/reports.htm#v16159/p12663/fileInstanceId=6892131&defectInstanceId=1794525&mergedDefectId=1388482
> Following code
> {code:java}
> Module current = Module.getCallerModule();
> if (module != null) {
>     ModuleIdentifier mi = ModuleIdentifier.fromString(module);
>     current = current.getModule(mi);
> {code}
> The {{current}} value returned from {{Module.getCallerModule()}} may be {{null}}. The {{getModule()}} method is called on it without the null-check.



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)