[
https://issues.apache.org/jira/browse/MNG-7564?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17626462#comment-17626462
]
Maarten Mulders commented on MNG-7564:
--------------------------------------
{quote}This likely also applies to 3.9.0.{quote}
Looking at the code, I think it's quite likely this issue also can occur in
3.9.x. The same call to {{LegacySupport#getSession()}} is there, too.
> Potential NPE in MavenMetadataSource
> ------------------------------------
>
> Key: MNG-7564
> URL: https://issues.apache.org/jira/browse/MNG-7564
> Project: Maven
> Issue Type: Bug
> Reporter: Michael Osipov
> Assignee: Maarten Mulders
> Priority: Major
> Labels: up-for-grabs
> Fix For: 4.0.0, 4.0.0-alpha-3
>
>
> In here:
> https://github.com/apache/maven/blob/cb54aa429d9e63bf78c4c808898fbef1cc01ff33/maven-core/src/main/java/org/apache/maven/project/artifact/MavenMetadataSource.java#L198-L203
> {{LegacySupport#getSession()}} can be {{null}}, but never tested. If {{null}}
> an empty list should be returned.
> This was indirectly found by [~gnodet].
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
