[WSS-580] ThreadLocalSecurityProvider returns null instead of empty collection

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2.0
• Fix Version/s: 2.2.0, 2.0.8, 2.1.6
• Flags: Patch
• Assignee: Colm O hEigeartaigh
• Reporter: Domislavskiy Michael
• Created: 02/Jun/16 17:17
• Updated: 23/Jun/16 15:49
• Resolved: 03/Jun/16 09:56

Description

in org.apache.wss4j.common.crypto.ThreadLocalSecurityProvider
is violated the rule
"return empty arrays or collections, not nulls" as a result crash NPE in
org.apache.wicket.extensions.markup.html.captcha.CaptchaImageResource#detectBestFittingService()

for (Provider.Service service : provider.getServices()) {
...
}