Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
Java 2.0.8
-
None
Description
The Reference constructor does not check for the case where the parsed DOM contains zero child elements, and winds up throwing a NullPointerException in this case. Since the constructor's signature does specify to throw a checked XMLSecurityException, it should probably check and throw that instead, as it already does for the case of an invalid # of transforms.
This was originally reported to OpenSAML by someone else. More details in the linked external issue.