Bug 18797 - MemoryUserRule doesn't validate user attributes
MemoryUserRule doesn't validate user attributes
Status: RESOLVED FIXED
Product: Tomcat 4
Classification: Unclassified
Component: Catalina
4.1.24
All All
: P3 enhancement (vote)
: ---
Assigned To: Tomcat Developers Mailing List
:
Depends on:
Blocks:
  Show dependency tree
 
Reported: 2003-04-08 06:33 UTC by Richard Clark
Modified: 2011-01-13 12:56 UTC (History)
0 users



Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Richard Clark 2003-04-08 06:33:14 UTC
The implementation of org.apache.catalina.realm.MemoryRuleSet.begin dosen't 
validate the attribute values before adding a user to the MemoryRealm. If 
username or name are not present then a null username is used which can cause 
odd problems later on.

Basically the method should check that parameters passed to MemoryRealm.addUser 
are not null before calling the method.
Comment 1 Mark Thomas 2011-01-13 12:56:12 UTC
Fixed in 7.0.x and will be included in 7.0.7 onwards.