[java-identity-provider] 08/16: Add a defensive check against an empty NameID.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch maint-3.3
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=37489508f8b6fd01353ac696286ff580a7dae521

commit 37489508f8b6fd01353ac696286ff580a7dae521
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Tue May 2 10:44:38 2017 -0400

    Add a defensive check against an empty NameID.
---
 .../shibboleth/idp/saml/saml2/profile/impl/ProcessLogoutRequest.java  | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/idp-saml-impl/src/main/java/net/shibboleth/idp/saml/saml2/profile/impl/ProcessLogoutRequest.java b/idp-saml-impl/src/main/java/net/shibboleth/idp/saml/saml2/profile/impl/ProcessLogoutRequest.java
index 2c957e6..b4318f0 100644
--- a/idp-saml-impl/src/main/java/net/shibboleth/idp/saml/saml2/profile/impl/ProcessLogoutRequest.java
+++ b/idp-saml-impl/src/main/java/net/shibboleth/idp/saml/saml2/profile/impl/ProcessLogoutRequest.java
@@ -244,6 +244,10 @@ public class ProcessLogoutRequest extends AbstractProfileAction {
             log.warn("{} LogoutRequest did not contain NameID", getLogPrefix());
             ActionSupport.buildEvent(profileRequestContext, EventIds.INVALID_MESSAGE);
             return false;
+        } else if (logoutRequest.getNameID().getValue() == null) {
+            log.warn("{} LogoutRequest contained an empty (therefore invalid) NameID", getLogPrefix());
+            ActionSupport.buildEvent(profileRequestContext, EventIds.INVALID_MESSAGE);
+            return false;
         }
         
         if (log.isDebugEnabled() && logoutRequest.getExtensions() != null

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.