-
Bug
-
Resolution: Done
-
Major
-
1.1.0.Beta24
-
None
Coverity static-analysis scan found possible dereference null return value in following code
ServerAuthenticationContext.java
if (log.isTraceEnabled()) { log.tracef("Authorizing principal %s.", authenticationPrincipal.getName()); log.tracef("Authorizing against the following attributes: %s => %s", authorizationIdentity.getAttributes().keySet(), authorizationIdentity.getAttributes().values()); }
Coverity suppose null value could get here via AggregateSecurityRealm.Identity.getAuthorizationIdentity calling TokenSecurityRealm.TokenRealmIdentity.getAuthorizationIdentity
TokenRealmIdentity.java
@Override
public AuthorizationIdentity getAuthorizationIdentity() throws RealmUnavailableException {
if (exists()) {
return new AuthorizationIdentity() {
@Override
public Attributes getAttributes() {
return claims;
}
};
}
return null;
}
- clones
-
JBEAP-8504 Coverity static analysis: Dereference null return value in ServerAuthenticationContext (Elytron)
-
- Closed
-