This is an automated email from the ASF dual-hosted git repository.

gnodet pushed a commit to branch backport/11741-11733-to-4.0.x
in repository https://gitbox.apache.org/repos/asf/maven.git

commit 7dd9f85bbe227c940469e8cf6e8c53c2c1f91a05
Author: Abhishek Chauhan <[email protected]>
AuthorDate: Sat May 23 10:58:21 2026 +0530

    Fix gh-11740: Add missing null check in validateProfileId() (#11741)
    
    The validateProfileId() method was missing a null check before calling
    validProfileIds.contains(id). Since validProfileIds uses
    ConcurrentHashMap.newKeySet() which doesn't allow null keys, a null
    profile ID would cause a NullPointerException instead of a proper
    validation error.
    
    This makes validateProfileId() consistent with validateCoordinateId()
    which already has the null check.
    
    Fixes #11740
    
    Co-authored-by: Claude Opus 4.6 <[email protected]>
---
 .../main/java/org/apache/maven/impl/model/DefaultModelValidator.java    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git 
a/impl/maven-impl/src/main/java/org/apache/maven/impl/model/DefaultModelValidator.java
 
b/impl/maven-impl/src/main/java/org/apache/maven/impl/model/DefaultModelValidator.java
index 44b3353336..47cd0efefe 100644
--- 
a/impl/maven-impl/src/main/java/org/apache/maven/impl/model/DefaultModelValidator.java
+++ 
b/impl/maven-impl/src/main/java/org/apache/maven/impl/model/DefaultModelValidator.java
@@ -1705,7 +1705,7 @@ private boolean validateProfileId(
             String id,
             @Nullable SourceHint sourceHint,
             InputLocationTracker tracker) {
-        if (validProfileIds.contains(id)) {
+        if (id != null && validProfileIds.contains(id)) {
             return true;
         }
         if (!validateStringNotEmpty(prefix, fieldName, problems, severity, 
version, id, sourceHint, tracker)) {

Reply via email to