[GEODE-10093] DeltaSession getAttribute method logs an NPE and returns unserialized value when called on attribute with null value

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.12.2, 1.13.3, 1.14.0, 1.15.0
• Fix Version/s: 1.12.9, 1.13.8, 1.14.4, 1.15.0
• Component/s: http session
• Labels: needsTriage pull-request-available
• Assignee: Benjamin P Ross
• Reporter: Benjamin P Ross
• Created: 01/Mar/22 00:06
• Updated: 18/Mar/22 17:25
• Resolved: 02/Mar/22 22:38

Description

Under certain circumstances, a null value can be set for an attribute which then throws an NPE when trying to add it to the local map during a getAttribute call on the session. Prior to 1.12.2 we were responding to this by removing the entry entirely from the local map which is consistent with what the base Session class for Catalina does, but starting with 1.12.2 onward this results in an error message being displayed and the serialized value being returned rather than the unserialized value.

Issue Links

• is caused by: GEODE-8217 Geode session replication could leak internal serialized bytes during HttpSessionAttributeListener invocation even when preferDeserializedForm is set to true
• links to: GitHub Pull Request #7405
• links to: GitHub Pull Request #7411
• links to: GitHub Pull Request #7412
• links to: GitHub Pull Request #7413
• links to: GitHub Pull Request #7414