Navigation path

Additional tools

STORK

(
 
)
Editor's choice
152 reads

Invalid SAML Element causes NullPointerException on ES Reference PEPS

Our test team has discovered the following problem: A stack trace is shown when sending an invalid SAML to Reference PEPS. Steps to reproduce: Open in browser: http://peps.indra.es/SP/populateIndexPage Select RF-PEPS as SP COUNTRY. Select any CITIZEN COUNTRY (e.g. RF-PEPS). Select some attributes at press Submit button. Add a <ds:InvalidElement>test</ds:InvalidElement> element before the <ds:KeyInfo> element in the XML text box. Press Encode and Submit buttons. Observed result: Address bar: http://peps.indra.es/PEPS/ServiceProvider Output: An unexpected error has occurred Please report this error to your system administrator or appropriate technical support personnel. Thank you for your cooperation. Error Message -------------------------------------------------------------------------------- Technical Details java.lang.NullPointerException at eu.stork.peps.auth.engine.core.impl.SignSW.validateSignature(SignSW.java:273) at eu.stork.peps.auth.engine.SAMLEngine.validateSignature(SAMLEngine.java:352) at eu.stork.peps.auth.engine.STORKSAMLEngine.validateStorkSaml(STORKSAMLEngine.java:1488) at eu.stork.peps.auth.engine.STORKSAMLEngine.validateSTORKAuthnRequest(STORKSAMLEngine.java:1521) at eu.stork.peps.auth.speps.AUSPEPSManager.processAuthenticationRequest(AUSPEPSManager.java:403) at eu.stork.peps.auth.speps.AUSPEPS.getAuthenticationRequest(AUSPEPS.java:118) at eu.stork.peps.ServiceProviderAction.execute(ServiceProviderAction.java:105) at sun.reflect.GeneratedMethodAccessor228.invoke(Unknown Source) [...]

Hardware None
Product None
Operating System None
Component None
Version None
Severity None
Resolution Fixed

Attachment

Information

Project:
STORK
Version:
1.0-MS
Component:
Code
Category:
Bugs
Priority:
Major
Assigned:
Unassigned
Status:
Fixed
Identifier:
35854

Comments

John Heppe
Posted by John Heppe on December 14, 2011 at 11:29
Project:» STORK
Version:<none>» 1.0-MS
Component:» Code
Category:» Bugs
Priority:» Major
Status:» Fixed