Bug 18797

Summary: MemoryUserRule doesn't validate user attributes
Product: Tomcat 4 Reporter: Richard Clark <rgc197>
Component: CatalinaAssignee: Tomcat Developers Mailing List <dev>
Status: RESOLVED FIXED    
Severity: enhancement    
Priority: P3    
Version: 4.1.24   
Target Milestone: ---   
Hardware: All   
OS: All   

Description Richard Clark 2003-04-08 06:33:14 UTC 
The implementation of org.apache.catalina.realm.MemoryRuleSet.begin dosen't 
validate the attribute values before adding a user to the MemoryRealm. If 
username or name are not present then a null username is used which can cause 
odd problems later on.

Basically the method should check that parameters passed to MemoryRealm.addUser 
are not null before calling the method.
Comment 1 Mark Thomas 2011-01-13 12:56:12 UTC 
Fixed in 7.0.x and will be included in 7.0.7 onwards.