[xstream-scm] [jira] (XSTR-736) NPE from XStream.unmarshal

Thu, 23 May 2013 13:29:53 -0700

Issue Type: Bug Bug
Affects Versions: 1.4.4
Assignee: Jörg Schaible
Components: Core
Created: 23/May/13 3:29 PM
Description:

A Jenkins user reported a stack trace ending in the following (the rest involves a particular plugin):

java.lang.NullPointerException
	at com.thoughtworks.xstream.converters.ConversionException.add(ConversionException.java:65)
	at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1066)
	at hudson.util.XStream2.unmarshal(XStream2.java:109)
	at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1045)
	at hudson.XmlFile.unmarshal(XmlFile.java:166)



Here it seems that pkg.getImplementationVersion() is null in unmarshal yet that condition is not checked for. This is using Jenkins's patched version of XStream, but I checked the trunk sources of the official version and the same code is used, so theoretically it is equally vulnerable.
Project: XStream
Priority: Major Major
Reporter: Jesse Glick
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

To unsubscribe from this list please visit:

http://xircles.codehaus.org/manage_email

Reply via email to