IBM Support

IV43239: NULLPOINTEREXCEPTION IN LOGINCONTEXT.LOGIN().

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • Error Message: IBM JVM throws NullPointerException when calling
LoginContext.login() immediately after LoginContext.logout().
.
Stack Trace: javax.security.auth.login.LoginException:
java.lang.NullPointerException
     at
com.ibm.security.auth.module.LinuxLoginModule.commit(LinuxLoginM
odule.java:235)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
Method)
     at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessor
Impl.java:60)
     at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethod
AccessorImpl.java:37)
.
N/A

Local fix

  • Create a new LoginContext for the second login.

Problem summary

  • The root cause is that one member (supplementaryGroups) is set
to null in logout(), while it is referenced but not created
again in the second login().

Problem conclusion

  • This defect will be fixed in:
7.0.0 SR5
6.0.1 SR6
6.0.0 SR14
5.0.0 SR16 FP3
.
Clear supplementaryGroups and create a new instance in logout().
The fix was delivered for Java 5.0 SR16FP3, Java 6.0 SR14, Java
626 SR6, and Java 7.0 SR5.
The affected jar is
ibmjaaslm.jar (level 20130523) in Java 5.0
rt.jar (level 20130524) in 6.0
rt.jar (level 20130528) in 6.26
and rt.jar (level 20130527_06) in 7.0.

Temporary fix

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    IV43239
    • 

  • Reported component name
    SECURITY
    • 

  • Reported component ID
    620700125
    • 

  • Reported release
    260
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt
    • 

  • Submitted date
    2013-05-28
    • 

  • Closed date
    2013-05-28
    • 

  • Last modified date
    2013-06-20
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    
IV43240 IV44569
    

    • 



Fix information


    

  • Fixed component name
    SECURITY
    • 

  • Fixed component ID
    620700125
    • 



Applicable component levels


    

  • R260  PSY
       UP
    • 

  • R600  PSY
       UP
    • 








      
              
                            

              

              [{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSNVBF","label":"Runtimes for Java Technology"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"260","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]
              

                          

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            07 December 2020
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback