Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-14149

(7.1.z) Coverity, Missing call to superclass in AbstractGssapiMechanism

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Won't Do
    • Icon: Minor Minor
    • None
    • 7.1.0.GA
    • Security
    • None
    • This issue only affects Elytron 1.2.0 and the version in EAP 7.1.z is Elytron 1.1.x. The upstream fix is not needed for that version because the classes do not overrider getNegotiatedProperty() method.

      super.getNegotiatedProperty() is not called in AbstractGssapiMechanism#getNegotiatedProperty, although it is called in similar cases in Gs2SaslServer, DigestSaslServer, AnonymousSaslClient.

      AbstractGssapiMechanism.java
          @Override
          public Object getNegotiatedProperty(String propName) {
              assertComplete();
      
              switch (propName) {
                  case Sasl.QOP:
                      return selectedQop.getName();
                  case Sasl.MAX_BUFFER:
                      return Integer.toString(actualMaxReceiveBuffer != 0 ? actualMaxReceiveBuffer : configuredMaxReceiveBuffer);
                  case Sasl.RAW_SEND_SIZE:
                      return Integer.toString(maxBuffer);
              }
      
              return null;
          }
      

      This coverity report is not caused by recent change in AbstractGssapiMechanism but rather Gs2SaslServer and DigestSaslServer

      [1] https://scan7.coverity.com/reports.htm#v23632/p11778/fileInstanceId=44847684&defectInstanceId=9457508&mergedDefectId=1463150

              rhn-support-ivassile Ilia Vassilev
              rhn-support-ivassile Ilia Vassilev
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: