IV43240: NULLPOINTEREXCEPTION IN LOGINCONTEXT.LOGIN().

APAR status

• Closed as program error.

Error description

• Error Message: IBM JVM throws NullPointerException when calling
  LoginContext.login() immediately after LoginContext.logout().
  .
  Stack Trace: javax.security.auth.login.LoginException:
  java.lang.NullPointerException
       at
  com.ibm.security.auth.module.LinuxLoginModule.commit(LinuxLoginM
  odule.java:235)
       at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
  Method)
       at
  sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessor
  Impl.java:60)
       at
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethod
  AccessorImpl.java:37)
  .
  N/A
  

Local fix

• Create a new LoginContext for the second login.
  

Problem summary

• The root cause is that one member (supplementaryGroups) is set
  to null in logout(), while it is referenced but not created
  again in the second login().
  

Problem conclusion

• This defect will be fixed in:
  7.0.0 SR5
  6.0.1 SR6
  6.0.0 SR14
  5.0.0 SR16FP3
  .
  Clear supplementaryGroups and create a new instance in logout().
  The fix was delivered for Java 5.0 SR16FP3, Java 6.0 SR14, Java
  626 SR6, and Java 7.0 SR5.
  The affected jar is
  ibmjaaslm.jar (level 20130523) in Java 5.0
  rt.jar (level 20130524) in 6.0
  rt.jar (level 20130528) in 6.26
  and rt.jar (level 20130527_06) in 7.0.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IV43239

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA 5 SECURITY

• Fixed component ID

  620500125

Applicable component levels

• R500 PSY

     UP