[
https://issues.apache.org/jira/browse/KAFKA-7324?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16588271#comment-16588271
]
ASF GitHub Bot commented on KAFKA-7324:
---------------------------------------
rondagostino opened a new pull request #5552: KAFKA-7324: NPE due to lack of
SASLExtensions in SASL/OAUTHBEARER
URL: https://github.com/apache/kafka/pull/5552
Set empty extensions if null is passed in.
Signed-off-by: Ron Dagostino <[email protected]>
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
> NPE due to lack of SASLExtensions in SASL/OAUTHBEARER
> -----------------------------------------------------
>
> Key: KAFKA-7324
> URL: https://issues.apache.org/jira/browse/KAFKA-7324
> Project: Kafka
> Issue Type: Bug
> Components: clients
> Affects Versions: 2.0.1
> Reporter: Ron Dagostino
> Assignee: Ron Dagostino
> Priority: Major
> Fix For: 2.0.1
>
>
> When there are no SASL extensions in an OAUTHBEARER request (or the callback
> handler does not support SaslExtensionsCallback) the
> OAuthBearerSaslClient.retrieveCustomExtensions() method returns null. This
> null value is then passed to the OAuthBearerClientInitialResponse
> constructor, and that results in an NPE:
> java.lang.NullPointerException
> at
> org.apache.kafka.common.security.oauthbearer.internals.OAuthBearerClientInitialResponse.validateExtensions(OAuthBearerClientInitialResponse.java:115)
> at
> org.apache.kafka.common.security.oauthbearer.internals.OAuthBearerClientInitialResponse.<init>(OAuthBearerClientInitialResponse.java:81)
> at
> org.apache.kafka.common.security.oauthbearer.internals.OAuthBearerClientInitialResponse.<init>(OAuthBearerClientInitialResponse.java:75)
> at
> org.apache.kafka.common.security.oauthbearer.internals.OAuthBearerSaslClient.evaluateChallenge(OAuthBearerSaslClient.java:99)
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
