Skip to content

server: avoid NPE updating a network ACL rule with no protocol - #14046

Open
nagaboinaramgopal wants to merge 1 commit into
apache:4.20from
nagaboinaramgopal:fix/networkacl-fullupgrade-null-protocol
Open

server: avoid NPE updating a network ACL rule with no protocol#14046
nagaboinaramgopal wants to merge 1 commit into
apache:4.20from
nagaboinaramgopal:fix/networkacl-fullupgrade-null-protocol

Conversation

@nagaboinaramgopal

Copy link
Copy Markdown
Contributor

On a full (non-partial) network ACL item update, transferDataToNetworkAclRulePojo clears the protocol to null before updateIcmpCodeAndTypeFullUpgrade runs, and that method called networkACLItemVo.getProtocol().equalsIgnoreCase(...) on the null protocol, throwing NullPointerException. A full upgrade with no protocol is a valid input. Compare against the constant first so a null protocol falls through to clearing the icmp fields.

Tested: new unit test updateIcmpCodeAndTypeFullUpgradeHandlesNullProtocol (fails before, passes after); full NetworkACLServiceImplTest green

On a full (non-partial) network ACL item update, transferDataToNetworkAclRulePojo
clears the protocol to null before updateIcmpCodeAndTypeFullUpgrade runs, and
that method called networkACLItemVo.getProtocol().equalsIgnoreCase(...) on the
null protocol, throwing NullPointerException. A full upgrade with no protocol is
a valid input: the parameter is optional and the mode is meant to disregard the
current configuration. Compare against the constant first so a null protocol
falls through to clearing the icmp fields.

@DaanHoogland DaanHoogland left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

clgtm

@codecov

codecov Bot commented Sep 9, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 16.34%. Comparing base (2cd8c5e) to head (db4940c).
⚠️ Report is 10 commits behind head on 4.20.

Additional details and impacted files
@@             Coverage Diff              @@
##               4.20   #14046      +/-   ##
============================================
- Coverage     16.34%   16.34%   -0.01%     
+ Complexity    13574    13572       -2     
============================================
  Files          5669     5669              
  Lines        501368   501368              
  Branches      60903    60903              
============================================
- Hits          81964    81948      -16     
- Misses       410219   410233      +14     
- Partials       9185     9187       +2     
Flag Coverage Δ
uitests 4.14% <ø> (ø)
unittests 17.20% <100.00%> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@DaanHoogland

Copy link
Copy Markdown
Contributor

@blueorangutan package

@blueorangutan

Copy link
Copy Markdown

@DaanHoogland a [SL] Jenkins job has been kicked to build packages. It will be bundled with KVM, XenServer and VMware SystemVM templates. I'll keep you posted as I make progress.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants