Bug 18797 - MemoryUserRule doesn't validate user attributes
MemoryUserRule doesn't validate user attributes
Product: Tomcat 4
Classification: Unclassified
Component: Catalina
All All
: P3 enhancement (vote)
: ---
Assigned To: Tomcat Developers Mailing List
Depends on:
  Show dependency tree
Reported: 2003-04-08 06:33 UTC by Richard Clark
Modified: 2011-01-13 12:56 UTC (History)
0 users


Note You need to log in before you can comment on or make changes to this bug.
Description Richard Clark 2003-04-08 06:33:14 UTC
The implementation of org.apache.catalina.realm.MemoryRuleSet.begin dosen't 
validate the attribute values before adding a user to the MemoryRealm. If 
username or name are not present then a null username is used which can cause 
odd problems later on.

Basically the method should check that parameters passed to MemoryRealm.addUser 
are not null before calling the method.
Comment 1 Mark Thomas 2011-01-13 12:56:12 UTC
Fixed in 7.0.x and will be included in 7.0.7 onwards.