[ 
https://issues.apache.org/jira/browse/MNG-7564?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17626462#comment-17626462
 ] 

Maarten Mulders commented on MNG-7564:
--------------------------------------

{quote}This likely also applies to 3.9.0.{quote}

Looking at the code, I think it's quite likely this issue also can occur in 
3.9.x. The same call to {{LegacySupport#getSession()}} is there, too.

> Potential NPE in MavenMetadataSource
> ------------------------------------
>
>                 Key: MNG-7564
>                 URL: https://issues.apache.org/jira/browse/MNG-7564
>             Project: Maven
>          Issue Type: Bug
>            Reporter: Michael Osipov
>            Assignee: Maarten Mulders
>            Priority: Major
>              Labels: up-for-grabs
>             Fix For: 4.0.0, 4.0.0-alpha-3
>
>
> In here: 
> https://github.com/apache/maven/blob/cb54aa429d9e63bf78c4c808898fbef1cc01ff33/maven-core/src/main/java/org/apache/maven/project/artifact/MavenMetadataSource.java#L198-L203
> {{LegacySupport#getSession()}} can be {{null}}, but never tested. If {{null}} 
> an empty list should be returned.
> This was indirectly found by [~gnodet].



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to