James Chaplin created WW-5466:
---------------------------------
Summary: Boundary condition NPE possible with
JakartaMultiPartRequest
Key: WW-5466
URL: https://issues.apache.org/jira/browse/WW-5466
Project: Struts 2
Issue Type: Bug
Components: Core
Affects Versions: 6.6.1, 6.6.0, 6.4.0, 6.3.0, 6.2.0
Environment: Java 8,11 on Windows. Should be unaffected by
environment.
Reporter: James Chaplin
Fix For: 6.7.0
It is possible for a NullPointerException (NPE) to be thrown by the
JakartaMultiPartRequest file upload processing. It is a boundary condition,
possible if struts.multipart.maxStringLength has not been set and the upload
request also includes normal fields (in addition to the file).
Given defaults for configuration, it is unlikely to be encountered by most
users/configuration. A potential mitigation PR may follow.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
