Project: Tomcat
Bug 49109 RealmBase.authenticate uses toString on byte array
Reported: 2010-04-12 19:36:53 | Status: resolved fixed

catalina.realm.RealmBase.authenticate(String username, byte[] credentials) has the following code: return (authenticate(username, credentials.toString())); This looks wrong, as credentials is a byte array. It should probably be: return (authenticate(username, new String(credentials[,charset])));

Files changed in fix:
java/org/apache/catalina/Realm.java java/org/apache/catalina/realm/CombinedRealm.java java/org/apache/catalina/realm/LockOutRealm.java java/org/apache/catalina/realm/RealmBase.java