[jboss-jira] [JBoss JIRA] (JBEE-194) PasswordValidationCallback.clearPassword() does not clear the password.

[Darran Lofthouse (Jira)]

     [ https://issues.redhat.com/browse/JBEE-194?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse reassigned JBEE-194:
-------------------------------------

    Assignee:     (was: Darran Lofthouse)


> PasswordValidationCallback.clearPassword() does not clear the password.
> -----------------------------------------------------------------------
>
>                 Key: JBEE-194
>                 URL: https://issues.redhat.com/browse/JBEE-194
>             Project: JBoss Enterprise Spec APIs
>          Issue Type: Bug
>          Components: jboss-jaspi-api
>            Reporter: Darran Lofthouse
>            Priority: Major
>
> The purpose of clear() methods on classes like this is to zero out the array holding the password, the current implementation just sets the reference to null leaving it to the garbage collector to dispose of - this would happen anyway as soon as the PasswordValidationCallback is eligible for garbage collection,



--
This message was sent by Atlassian Jira
(v7.13.8#713008)