tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 18797] New: - MemoryUserRule doesn't validate user attributes
Date Tue, 08 Apr 2003 06:33:15 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=18797>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=18797

MemoryUserRule doesn't validate user attributes

           Summary: MemoryUserRule doesn't validate user attributes
           Product: Tomcat 4
           Version: 4.1.24
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Enhancement
          Priority: Other
         Component: Catalina
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: rgc197@zepler.org


The implementation of org.apache.catalina.realm.MemoryRuleSet.begin dosen't 
validate the attribute values before adding a user to the MemoryRealm. If 
username or name are not present then a null username is used which can cause 
odd problems later on.

Basically the method should check that parameters passed to MemoryRealm.addUser 
are not null before calling the method.

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org


Mime
View raw message