Bug 18797 - MemoryUserRule doesn't validate user attributes
Summary: MemoryUserRule doesn't validate user attributes
Status: RESOLVED FIXED
Alias: None
Product: Tomcat 4
Classification: Unclassified
Component: Catalina (show other bugs)
Version: 4.1.24
Hardware: All All
: P3 enhancement (vote)
Target Milestone: ---
Assignee: Tomcat Developers Mailing List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-04-08 06:33 UTC by Richard Clark
Modified: 2011-01-13 12:56 UTC (History)
0 users


Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Richard Clark 2003-04-08 06:33:14 UTC 
The implementation of org.apache.catalina.realm.MemoryRuleSet.begin dosen't 
validate the attribute values before adding a user to the MemoryRealm. If 
username or name are not present then a null username is used which can cause 
odd problems later on.

Basically the method should check that parameters passed to MemoryRealm.addUser 
are not null before calling the method.
Comment 1 Mark Thomas 2011-01-13 12:56:12 UTC 
Fixed in 7.0.x and will be included in 7.0.7 onwards.