Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-11385

Possible NPE in DatabaseUtil.getColumnInfo(...)

    XMLWordPrintableJSON

    Details

      Description

      Right at the start DatabaseUtil.getColumnInfo(....) does an if comparison to 0 with the unchecked parameter tableNames.

      The way this method and especially the parameter is used in DatabaseUtil.induceModelFromDb(Collection<String> messages) is not secure to not provide null-values for this parameter.

      I suggest using a UtilValidate.isEmpty(...) instead of the unsave comparison.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                mbrohl Michael Brohl
                Reporter:
                bjugl Benjamin Jugl
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: