You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@struts.apache.org by "James Chaplin (Jira)" <ji...@apache.org> on 2024/10/06 20:36:00 UTC

[jira] [Created] (WW-5466) Boundary condition NPE possible with JakartaMultiPartRequest

James Chaplin created WW-5466:
---------------------------------

             Summary: Boundary condition NPE possible with JakartaMultiPartRequest
                 Key: WW-5466
                 URL: https://issues.apache.org/jira/browse/WW-5466
             Project: Struts 2
          Issue Type: Bug
          Components: Core
    Affects Versions: 6.6.1, 6.6.0, 6.4.0, 6.3.0, 6.2.0
         Environment: Java 8,11 on Windows.  Should be unaffected by environment.
            Reporter: James Chaplin
             Fix For: 6.7.0


It is possible for a NullPointerException (NPE) to be thrown by the JakartaMultiPartRequest file upload processing.  It is a boundary condition, possible if struts.multipart.maxStringLength has not been set and the upload request also includes normal fields (in addition to the file).

 

Given defaults for configuration, it is unlikely to be encountered by most users/configuration.  A potential mitigation PR may follow.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)