DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=7116>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=7116

JDBC realm doesn't handle NULLpasswords

           Summary: JDBC realm doesn't handle NULLpasswords
           Product: Tomcat 4
           Version: 4.0.3 Final
          Platform: Macintosh
        OS/Version: MacOS X
            Status: NEW
          Severity: Minor
          Priority: Other
         Component: Catalina
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


JDBC realm throws a null pointer exception if the password field is NULL in the 
database.

Line #379 of JDBCRealm.java
    dbCredentials = rs.getString(1).trim();

calls trim without first checking for the password to be present.  Should probably be
    dbCredentials = rs.getString(1);
    if (dbCredentials != null) {
      dbCredentials.trim();
    }

Also would be nice if NULL passwords were allowed in case of "no password" for users.

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to