[MNG-7780] DefaultArtifact.equals throws NullPointerException if o.version is null

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.9.1, 4.0.0-alpha-5
• Fix Version/s: 4.0.0-alpha-7, 4.0.0
• Assignee: Guillaume Nodet
• Reporter: Tobias Gruetzmacher
• Created: 08/May/23 15:50
• Updated: 09/Aug/24 07:57
• Resolved: 01/Jun/23 18:51

Description

DefaultArtifact.validateIdentity() only throws if BOTH version and versionRange are null, so it's possible to create an instance of DefaultArtifact where version == null. If such an instance ever ends up in DefaultArtifact.equals(o), the check a.getVersion().equals(version) will throw a NullPointerException.

(This was observed while debugging an issue in versions-maven-plugin)

Issue Links

• relates to: MNG-8192 DefaultArtifact constructor no longer accepts empty version
• links to: GitHub Pull Request #1108
• links to: Versions Plugin Issue