[TOMEE-2037] Possible NPE by call in Injector

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 7.0.3
• Fix Version/s: 7.0.4
• Component/s: TomEE Core Server
• Assignee: Romain Manni-Bucau
• Reporter: Thomas Rausch
• Created: 24/Apr/17 13:03
• Updated: 24/Apr/17 13:15
• Resolved: 24/Apr/17 13:15

Description

in org.apache.openejb.Injector, the method public static <T> T inject(final T object) calls cdiInjections(null, object) (line 59 in 7.0.3), which will immediately cause a NPE in private static <T> void cdiInjections(final BeanContext context, final T object) in the first statement if (context.getWebBeansContext() == null) (because context is null)