Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-14149

(7.1.z) Coverity, Missing call to superclass in AbstractGssapiMechanism

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Won't Do
    • Icon: Minor Minor
    • None
    • 7.1.0.GA
    • Security
    • None
    • This issue only affects Elytron 1.2.0 and the version in EAP 7.1.z is Elytron 1.1.x. The upstream fix is not needed for that version because the classes do not overrider getNegotiatedProperty() method.

      super.getNegotiatedProperty() is not called in AbstractGssapiMechanism#getNegotiatedProperty, although it is called in similar cases in Gs2SaslServer, DigestSaslServer, AnonymousSaslClient.

      AbstractGssapiMechanism.java
          @Override
          public Object getNegotiatedProperty(String propName) {
              assertComplete();
      
              switch (propName) {
                  case Sasl.QOP:
                      return selectedQop.getName();
                  case Sasl.MAX_BUFFER:
                      return Integer.toString(actualMaxReceiveBuffer != 0 ? actualMaxReceiveBuffer : configuredMaxReceiveBuffer);
                  case Sasl.RAW_SEND_SIZE:
                      return Integer.toString(maxBuffer);
              }
      
              return null;
          }
      

      This coverity report is not caused by recent change in AbstractGssapiMechanism but rather Gs2SaslServer and DigestSaslServer

      [1] https://scan7.coverity.com/reports.htm#v23632/p11778/fileInstanceId=44847684&defectInstanceId=9457508&mergedDefectId=1463150

            rhn-support-ivassile Ilia Vassilev
            rhn-support-ivassile Ilia Vassilev
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: