[OFBIZ-3577] LoginWorker.doBasicLogout does not check userLogin against null

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Trunk
• Fix Version/s: Release Branch 09.04, Trunk
• Component/s: framework
• Assignee: Jacques Le Roux
• Reporter: Stefan Roggensack
• Created: 26/Mar/10 14:21
• Updated: 26/Mar/10 20:15
• Resolved: 26/Mar/10 20:15

Description

The method org.ofbiz.webapp.control.LoginWorker.doBasicLogout is use userLogin without check for against null values.

userLogin is the values of request.getSession().getAttribute("userLogin") (Line 568) in Line 589 this is value is used. For the use in Line 585 there is a null pointer test.
This occurs when a user that is allready logout reloads the logout page.