IBM Support

PK75948: NULLPOINTEREXCEPTION ON GETREQUESTDISPATCHER() CALL WHEN LEADING SLASH IS OMITTED ON THE PATH.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • In WebSphere v6.1 the servlet engine may throw the following
    NullPointerException if a getRequestDispatcher invocation
    doesn't pass in a path that contains a leading slash:
    
    java.lang.NullPointerException
    at com.ibm.ws.webcontainer.webapp.WebAppDispatcherContext.
             getRequestDispatcher(WebAppDispatcherContext.java:340)
    at com.ibm.ws.webcontainer.srt.SRTServletRequest.
                  getRequestDispatcher(SRTServletRequest.java:1759)
    ...
    Note that the J2EE spec does require a leading slash on these
    invocations, however, the current WebSphere implementation
    doesn't give good feedback on the user error by allowing the
    NullPointerException to be thrown.
    

Local fix

  • Add a leading slash to the path passed in on the
    getRequestDispatcher invocation.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: IBM WebSphere Application Server Version 6.1 *
    *                 users with security enabled.                 *
    ****************************************************************
    * PROBLEM DESCRIPTION: A filter used in a login/logout         *
    *                      process will receive a null pointer     *
    *                      exception if it calls                   *
    *                      HttpServletRequest.getRequestDispatcher *
    *                      with a path which does not include      *
    *                      a leading "/".                          *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    If a filter is defined for a request to j_security_check or
    ibm_security_logout and the filter calls
    HttpServletRequest.getRequestDispatcher with a path which does
    not start with "/", the following null pointer exception occurs:
    

Problem conclusion

  • The WebContainer has been updated to add a leading "/" to the
    path passed in on a HttpServletRequest.getRequestDispatcher()
    invocation if the path specified does not include a leading
    slash and the request involved is to either j_security_check or
    ibm_security_logout.
    
    APAR PK75948 is currently targeted for inclusion in Service
    Level (Fix Pack) 7.0.0.1 of WebSphere Application Server V7.0
    for z/OS.
    
    Please refer to URL:
    //www.ibm.com/support/docview.wss?rs=404&uid=swg27006970
    for Fix Pack availability.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PK75948

  • Reported component name

    WEBSPHERE FOR Z

  • Reported component ID

    5655I3500

  • Reported release

    700

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2008-11-18

  • Closed date

    2008-11-19

  • Last modified date

    2009-01-02

  • APAR is sysrouted FROM one or more of the following:

    PK67895

  • APAR is sysrouted TO one or more of the following:

Modules/Macros

  • BBGUBINF BBOUBINF
    

Fix information

  • Fixed component name

    WEBSPHERE FOR Z

  • Fixed component ID

    5655I3500

Applicable component levels

  • R700 PSY UK41764

       UP08/12/05 P F812

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS7K4U","label":"WebSphere Application Server for z\/OS"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
10 February 2022