[WSS-324] org.apache.ws.security.str.SignatureSTRParser throws ArrayIndexOutOfBoundsException: 0 when crypto returns zero-length array of certificates

• Type: Bug
• Status: Closed
• Priority: Trivial
• Resolution: Fixed
• Affects Version/s: 1.6.3
• Fix Version/s: 1.6.4
• Component/s: WSS4J Handlers
• Assignee: Colm O hEigeartaigh
• Reporter: Marek Cyzio
• Created: 16/Nov/11 19:43
• Updated: 06/Dec/11 10:31
• Resolved: 17/Nov/11 15:31

Description

Line 191 and below:

X509Certificate[] foundCerts = secRef.getX509IssuerSerial(crypto);
if (foundCerts != null) {
certs = new X509Certificate[]

{foundCerts[0]};
}

Should be:
X509Certificate[] foundCerts = secRef.getX509IssuerSerial(crypto);
if (foundCerts != null && foundCerts.length > 0) {
certs = new X509Certificate[]{foundCerts[0]}

;
}