[MNG-7564] Potential NPE in MavenMetadataSource

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.8.8, 3.9.0, 4.0.0-alpha-3, 4.0.0
• Labels: up-for-grabs
• Assignee: Maarten Mulders
• Reporter: Michael Osipov
• Created: 13/Oct/22 11:51
• Updated: 17/Feb/23 21:03
• Resolved: 29/Oct/22 11:43

Description

In here: https://github.com/apache/maven/blob/cb54aa429d9e63bf78c4c808898fbef1cc01ff33/maven-core/src/main/java/org/apache/maven/project/artifact/MavenMetadataSource.java#L198-L203

LegacySupport#getSession() can be null, but never tested. If null an empty list should be returned.

This was indirectly found by gnodet.

Issue Links

• links to: GitHub Pull Request #857