Description
JAX-RS 2.0 (section 3.2) indicates that failure to convert a parameter value should trigger either a 404 or 400, and CXF does this correctly under some circumstances.
When the conversion is performed using a ParamConverter (see InjectionUtils.handleParameter and it's call to InjectionUtils.createFromParameterHandler), any exception thrown by the ParamConverter is left unhandled and eventually triggers a 500 response.
At the very least, any IllegalArgumentException from the ParamConverter should be caught and converted into the appropriate 400/404 error.