IZ66869: NULLPOINTEREXCEPTION IN SIGNEDDATA.REMOVECONTENT() WHILE LOGGING CONTENTINFO IF CONTENTS ARE NULL.

APAR status

• Closed as program error.

Error description

• APAR Description : NullPointerException in
  SignedData.removeContent() while logging ContentInfo if contents
  are null.
  
  JVMs Affected : IBM JDK 142, 5.0, 6.0
  
  JAR affected: ibmpkcs.jar
  

Local fix

• Level 3 to update
  

Problem summary

• java.lang.NullPointerException is occurring while invoking
  com.ibm.security.pkcs7.SignedData.removeContent method.
  
  The stack trace is as follows:
  
  [11/18/09 12:05:04:134 UTC] 000000be  R UOW= source=SystemErr
  org=IBM
  prod=WebSphere component=Application Server thread=[Default : 4]
            java.lang.NullPointerException
  at com.ibm.security.pkcs7.ContentInfo.toString(ContentInfo.
  java:978)
             at
  java.text.MessageFormat.subformat(MessageFormat.java:1257)
             at
  java.text.MessageFormat.format(MessageFormat.java:848)
             at java.text.Format.format(Format.java:147)
             at
  java.text.MessageFormat.format(MessageFormat.java:824)
             at
  com.ibm.ejs.ras.TraceNLS.workerFormatLocalizedMessage
  (TraceNLS.java:615)
             at com.ibm.ejs.ras.TraceNLS.
  getFormattedMessageFromLocalizedMessage(TraceNLS.java:473)
             at
  com.ibm.ws.logging.TraceLogFormatter.formatLocalized
  (TraceLogFormatter.java:704)
             at
  com.ibm.ws.logging.TraceLogFormatter.formatMessageWSLR
  (TraceLogFormatter.java:370)
             at
  com.ibm.ws.logging.TraceLogFormatter.getFormattedMessage
  (TraceLogFormatter.java:828)
             at com.ibm.ws.logging.TraceLogFormatter.
  getFormattedMessageAndStackTrace(TraceLogFormatter.java:804)
             at
  com.ibm.ws.logging.TraceLogFormatter.formatAdvanced
  (TraceLogFormatter.java:456)
             at
  com.ibm.ejs.ras.TraceLogger.doLog(TraceLogger.java:297)
             at
  com.ibm.ejs.ras.TraceLogger.processEvent(TraceLogger.java:
  286)
             at com.ibm.ws.logging.WsHandlerWrapper.publish
  (WsHandlerWrapper.java:43)
             at java.util.logging.Logger.log(Logger.java:471)
             at
  com.ibm.ws.logging.WsLogger.deliverOrBuffer(WsLogger.java:
  244)
             at com.ibm.ws.logging.WsLogger.log(WsLogger.java:221)
             at
  com.ibm.ws.logging.WsLogger.logp(WsLogger.java:424)
             at
  com.ibm.ws.logging.WsLogger.entering(WsLogger.java:572)
             at com.ibm.misc.Debug.entry(Debug.java:497)
             at
  com.ibm.security.pkcs7.EncapsulatedContentInfo.<init>
  (EncapsulatedContentInfo.java:132)
             at com.ibm.security.pkcs7.SignedData.removeContent
  (SignedData.java:800)
             at
  com.ibm.bcg.util.PKCS7Util.generateSignature(PKCS7Util.
  java:1327)
  

Problem conclusion

• Logic within the ContentInfo.toString() method of the Java
  Security PKCS component was not checking to learn
  whether a "content" variable was null.  This problem has been
  corrected.
  
  The associated Hursley CMVC defect is 160339.
  The associated Austin CMVC defect is 109224 .
  A fix is available in:
  1.4.2 SR13 FP5
  5.0   SR11 FP1
  6.0   SR8
  
  The affected jar is "ibmpkcs.jar".
  The build level of this jar is 20100105.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TIVOLI JAVA PKC

• Fixed component ID

  TIVSECPKC

Applicable component levels

• R100 PSY

     UP