[jboss-jira] [JBoss JIRA] (ELY-1272) Missing null checks in auth client lead to NPEs later on

David Lloyd (JIRA) issues at jboss.org
Thu Jun 29 21:58:00 EDT 2017


David Lloyd created ELY-1272:
--------------------------------

             Summary: Missing null checks in auth client lead to NPEs later on
                 Key: ELY-1272
                 URL: https://issues.jboss.org/browse/ELY-1272
             Project: WildFly Elytron
          Issue Type: Bug
          Components: API / SPI, Authentication Client
            Reporter: David Lloyd
             Fix For: 1.1.0.CR2


There are missing null checks in at least the following places:

* The constructor of org.wildfly.security.auth.principal.NamePrincipal which should require "name" to be non-null
* The name argument to org.wildfly.security.auth.client.AuthenticationConfiguration#useName

In addition, the following places handle null wrongly:

* org.wildfly.security.auth.client.AuthenticationConfiguration#useAuthorizationName should check name for null, and if it is null, pass null in to useAuthorizationPrincipal



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)


More information about the jboss-jira mailing list