Author: markt
Date: Wed Feb 25 15:57:13 2009
New Revision: 747840

URL: http://svn.apache.org/viewvc?rev=747840&view=rev
Log:
Port NPE fix from trunk

Modified:
    tomcat/tc6.0.x/trunk/java/org/apache/catalina/realm/DataSourceRealm.java
    tomcat/tc6.0.x/trunk/java/org/apache/catalina/realm/JDBCRealm.java
    tomcat/tc6.0.x/trunk/java/org/apache/catalina/realm/MemoryRealm.java

Modified: 
tomcat/tc6.0.x/trunk/java/org/apache/catalina/realm/DataSourceRealm.java
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/catalina/realm/DataSourceRealm.java?rev=747840&r1=747839&r2=747840&view=diff
==============================================================================
--- tomcat/tc6.0.x/trunk/java/org/apache/catalina/realm/DataSourceRealm.java 
(original)
+++ tomcat/tc6.0.x/trunk/java/org/apache/catalina/realm/DataSourceRealm.java 
Wed Feb 25 15:57:13 2009
@@ -270,8 +270,9 @@
      */
     public Principal authenticate(String username, String credentials) {
        
-       // No user - can't possibly authenticate, don't bother the database then
-       if (username == null) {
+       // No user or no credentials
+        // Can't possibly authenticate, don't bother the database then
+       if (username == null || credentials == null) {
                return null;
        }
         

Modified: tomcat/tc6.0.x/trunk/java/org/apache/catalina/realm/JDBCRealm.java
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/catalina/realm/JDBCRealm.java?rev=747840&r1=747839&r2=747840&view=diff
==============================================================================
--- tomcat/tc6.0.x/trunk/java/org/apache/catalina/realm/JDBCRealm.java 
(original)
+++ tomcat/tc6.0.x/trunk/java/org/apache/catalina/realm/JDBCRealm.java Wed Feb 
25 15:57:13 2009
@@ -393,9 +393,10 @@
                                                String username,
                                                String credentials) {
 
-        // No user - can't possibly authenticate
-        if (username == null) {
-            return (null);
+        // No user or no credentials
+        // Can't possibly authenticate, don't bother the database then
+        if (username == null || credentials == null) {
+            return null;
         }
 
         // Look up the user's credentials

Modified: tomcat/tc6.0.x/trunk/java/org/apache/catalina/realm/MemoryRealm.java
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/catalina/realm/MemoryRealm.java?rev=747840&r1=747839&r2=747840&view=diff
==============================================================================
--- tomcat/tc6.0.x/trunk/java/org/apache/catalina/realm/MemoryRealm.java 
(original)
+++ tomcat/tc6.0.x/trunk/java/org/apache/catalina/realm/MemoryRealm.java Wed 
Feb 25 15:57:13 2009
@@ -148,7 +148,7 @@
             (GenericPrincipal) principals.get(username);
 
         boolean validated = false;
-        if (principal != null) {
+        if (principal != null && credentials != null) {
             if (hasMessageDigest()) {
                 // Hex hashes should be compared case-insensitive
                 validated = (digest(credentials)



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to