[JBoss-dev] CVS update: contrib/tomcat/src/main/org/jboss/tomcat/security JBossSecurityMgrRealm.java

[starksm]

  User: starksm 
  Date: 01/06/26 18:05:59

  Modified:    tomcat/src/main/org/jboss/tomcat/security Tag: Branch_2_4
                        JBossSecurityMgrRealm.java
  Log:
  The password String may be null so validate before invoking
  toCharArray()
  
  Revision  Changes    Path
  No                   revision
  
  
  No                   revision
  
  
  1.4.2.3   +5 -2      
contrib/tomcat/src/main/org/jboss/tomcat/security/JBossSecurityMgrRealm.java
  
  Index: JBossSecurityMgrRealm.java
  ===================================================================
  RCS file: 
/cvsroot/jboss/contrib/tomcat/src/main/org/jboss/tomcat/security/JBossSecurityMgrRealm.java,v
  retrieving revision 1.4.2.2
  retrieving revision 1.4.2.3
  diff -u -r1.4.2.2 -r1.4.2.3
  --- JBossSecurityMgrRealm.java        2001/06/23 01:10:58     1.4.2.2
  +++ JBossSecurityMgrRealm.java        2001/06/27 01:05:59     1.4.2.3
  @@ -37,7 +37,7 @@
   @see org.jboss.security.SubjectSecurityManager
   
   @author [EMAIL PROTECTED]
  -@version $Revision: 1.4.2.2 $
  +@version $Revision: 1.4.2.3 $
   */
   public class JBossSecurityMgrRealm extends BaseInterceptor
   {
  @@ -129,7 +129,10 @@
                       request.setAuthType(ctx.getAuthMethod());
                   category.debug("User: "+username+" is authenticated");
                   SecurityAssociation.setPrincipal(principal);
  -                SecurityAssociation.setCredential(password.toCharArray());
  +                char[] pass = null;
  +                if( password != null )
  +                   pass = password.toCharArray();
  +                SecurityAssociation.setCredential(pass);
                   if( useJAAS == true && securityMgr instanceof 
SubjectSecurityManager )
                   {
                       SubjectSecurityManager subjectMgr = (SubjectSecurityManager) 
securityMgr;
  
  
  

_______________________________________________
Jboss-development mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-development