[ https://issues.apache.org/jira/browse/MNG-7564?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17626462#comment-17626462 ]
Maarten Mulders commented on MNG-7564: -------------------------------------- {quote}This likely also applies to 3.9.0.{quote} Looking at the code, I think it's quite likely this issue also can occur in 3.9.x. The same call to {{LegacySupport#getSession()}} is there, too. > Potential NPE in MavenMetadataSource > ------------------------------------ > > Key: MNG-7564 > URL: https://issues.apache.org/jira/browse/MNG-7564 > Project: Maven > Issue Type: Bug > Reporter: Michael Osipov > Assignee: Maarten Mulders > Priority: Major > Labels: up-for-grabs > Fix For: 4.0.0, 4.0.0-alpha-3 > > > In here: > https://github.com/apache/maven/blob/cb54aa429d9e63bf78c4c808898fbef1cc01ff33/maven-core/src/main/java/org/apache/maven/project/artifact/MavenMetadataSource.java#L198-L203 > {{LegacySupport#getSession()}} can be {{null}}, but never tested. If {{null}} > an empty list should be returned. > This was indirectly found by [~gnodet]. -- This message was sent by Atlassian Jira (v8.20.10#820010)