Program: 166338
Project: 166338
Buggy source:
@Override public void commence(HttpServletRequest request,HttpServletResponse response,AuthenticationException authException) throws IOException, ServletException {
  String ajaxRequestHeader=request.getHeader("String_Node_Str");
  response.setHeader("String_Node_Str","String_Node_Str");
  if (logger.isDebugEnabled()) {
    logger.debug("String_Node_Str" + ajaxRequestHeader);
  }
  String requestURL=(request.getRequestURL() != null) ? request.getRequestURL().toString() : "String_Node_Str";
  String servletPath=PropertiesUtil.getProperty("String_Node_Str","String_Node_Str");
  String reqServletPath=configUtil.getWebAppRootURL() + "String_Node_Str" + servletPath;
  if ("String_Node_Str".equals(ajaxRequestHeader)) {
    try {
      VXResponse vXResponse=new VXResponse();
      vXResponse.setStatusCode(SC_AUTHENTICATION_TIMEOUT);
      vXResponse.setMsgDesc("String_Node_Str");
      response.setStatus(SC_AUTHENTICATION_TIMEOUT);
      response.getWriter().write(jsonUtil.writeObjectAsString(vXResponse));
    }
 catch (    IOException e) {
      logger.info("String_Node_Str");
    }
    return;
  }
 else {
    try {
      VXResponse vXResponse=new VXResponse();
      vXResponse.setStatusCode(HttpServletResponse.SC_UNAUTHORIZED);
      vXResponse.setMsgDesc("String_Node_Str");
      response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
      response.getWriter().write(jsonUtil.writeObjectAsString(vXResponse));
    }
 catch (    IOException e) {
      logger.info("String_Node_Str");
    }
  }
  if (ajaxRequestHeader != null && ajaxRequestHeader.equalsIgnoreCase("String_Node_Str")) {
    if (logger.isDebugEnabled()) {
      logger.debug("String_Node_Str" + ajaxReturnCode + "String_Node_Str"+ request.getRequestURI());
    }
    response.sendError(ajaxReturnCode,"String_Node_Str");
  }
 else   if (!(requestURL.startsWith(reqServletPath))) {
    if (requestURL.contains(RangerSSOAuthenticationFilter.LOCAL_LOGIN_URL)) {
      if (request.getSession() != null)       request.getSession().setAttribute("String_Node_Str","String_Node_Str");
    }
    super.commence(request,response,authException);
  }
}

Fixed version (ground truth):
@Override public void commence(HttpServletRequest request,HttpServletResponse response,AuthenticationException authException) throws IOException, ServletException {
  String ajaxRequestHeader=request.getHeader("String_Node_Str");
  response.setHeader("String_Node_Str","String_Node_Str");
  if (logger.isDebugEnabled()) {
    logger.debug("String_Node_Str" + ajaxRequestHeader);
  }
  String requestURL=(request.getRequestURL() != null) ? request.getRequestURL().toString() : "String_Node_Str";
  String servletPath=PropertiesUtil.getProperty("String_Node_Str","String_Node_Str");
  String reqServletPath=configUtil.getWebAppRootURL() + "String_Node_Str" + servletPath;
  if ("String_Node_Str".equals(ajaxRequestHeader)) {
    try {
      VXResponse vXResponse=new VXResponse();
      vXResponse.setStatusCode(SC_AUTHENTICATION_TIMEOUT);
      vXResponse.setMsgDesc("String_Node_Str");
      response.setStatus(SC_AUTHENTICATION_TIMEOUT);
      response.getWriter().write(jsonUtil.writeObjectAsString(vXResponse));
    }
 catch (    IOException e) {
      logger.info("String_Node_Str");
    }
    return;
  }
 else {
    try {
      VXResponse vXResponse=new VXResponse();
      vXResponse.setStatusCode(HttpServletResponse.SC_UNAUTHORIZED);
      vXResponse.setMsgDesc("String_Node_Str");
      response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
      response.getWriter().write(jsonUtil.writeObjectAsString(vXResponse));
    }
 catch (    IOException e) {
      logger.info("String_Node_Str");
    }
  }
  if (ajaxRequestHeader != null && ajaxRequestHeader.equalsIgnoreCase("String_Node_Str")) {
    if (logger.isDebugEnabled()) {
      logger.debug("String_Node_Str" + ajaxReturnCode + "String_Node_Str"+ request.getRequestURI());
    }
    response.sendError(ajaxReturnCode,"String_Node_Str");
  }
 else   if (!(requestURL.startsWith(reqServletPath))) {
    if (requestURL.contains(RangerSSOAuthenticationFilter.LOCAL_LOGIN_URL)) {
      if (request.getSession() != null)       request.getSession().setAttribute("String_Node_Str","String_Node_Str");
      request.getServletContext().setAttribute(request.getSession().getId(),"String_Node_Str");
    }
    super.commence(request,response,authException);
  }
}