https://bz.apache.org/bugzilla/show_bug.cgi?id=61914

            Bug ID: 61914
           Summary: NPE at
                    org.apache.tomcat.util.net.AbstractJsseEndpoint.create
                    SSLEngine with SNI on Java 9
           Product: Tomcat 9
           Version: 9.0.2
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Util
          Assignee: dev@tomcat.apache.org
          Reporter: kat...@gmail.com
  Target Milestone: -----

I have a lot of

java.lang.NullPointerException
at
org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLEngine(AbstractJsseEndpoint.java:180)
at
org.apache.tomcat.util.net.SecureNioChannel.processSNI(SecureNioChannel.java:325)
at
org.apache.tomcat.util.net.SecureNioChannel.handshake(SecureNioChannel.java:175)
at
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1353)
at
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)

in system journal with Tomcat 9.0.2 running on Java 9.

Code in SecureNioChannel.processSNI() passes null value of
clientRequestedApplicationProtocols if TLSClientHelloExtractor.getResult() is
not COMPLETE or NEED_INFO.

But code in AbstractJsseEndpoint.createSSLEngine does not perform check and
unconditionally calls size() method on Java 9 here:

if (JreCompat.isJre9Available() && clientRequestedApplicationProtocols.size() >
0 &&

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to