Skip to content

KeyValuePair - no validation on required "key" / KeyValuePairComponentBuilder NPEs on generated XML #3472

Open
@JWT007

Description

@JWT007

Log4j 2.24.3

A KeyValuePair without a key is useless (since it cannot be referenced). A null key will also cause problems in multiple locations when added to Map implementations.

Theoretically the same is true of the value but the null cases seem to all be handled when working with KVPs.

The KeyValuePair provides no validation / required on the @PluginAttribute or in the builder.

In addition, the DefaultKeyValuePairComponentBuilder sets the atttributes on the component builder without validating whether they are null.

If the builder is used to generate XML this results in null attributes which will break parsing that XML.

  public DefaultKeyValuePairComponentBuilder(
            final DefaultConfigurationBuilder<? extends Configuration> builder, final String key, final String value) {
        super(builder, "KeyValuePair");
        addAttribute("key", key);
        addAttribute("value", value);
    }

This constructor should probably throw an NPE or IllegalArgumentException if the key is null and only add the value attribute if it is not null.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    Status

    To triage

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions