[LOG4J2-2002] DefaultConfigurationBuilder.writeXmlAttributes does not handle null attribute values

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.8.2
• Fix Version/s: 2.11.0
• Component/s: Configurators
• Assignee: Mikael Ståldal
• Reporter: Paul Burrowes
• Created: 04/Aug/17 01:02
• Updated: 06/Jan/18 17:41
• Resolved: 06/Jan/18 17:41

Description

The default java XMLStreamWriterImpl writeXMLContent() requires that the content argument be non-null. Attributes in a Log4J component configuration may be null which breaks export.

DefaultConfigurationBuilder.writeXmlAttributes() needs to perform a null check for every attribute before passing it to XMLStreamWriterImpl.writeAttribute().