PropertyOrFieldReference suffers from potential NullPointerException [SPR-11031]

[spring-projects-issues]

Oliver Drotbohm opened SPR-11031 and commented

PropertyOrFieldReference.getValue(…) accesses ExpressionState.getConfiguration() without a check for null. If you've set up the ExpressionState with an EvaluationContext only, the configuration will be null.

Generally, ExpressionState could have a final configuration, default it to the default config used in SpelExpressionParser and let the constructors delegate to each other to avoid missing an assignment.

---

Affects: 3.2.4

Issue Links:

• Support for increment (++) operator in SpEL [SPR-9751] #14385 Support for increment (++) operator in SpEL
• DATAMONGO-787 Guard against SpEL issue in Spring 3.2.4

[spring-projects-issues]

Juergen Hoeller commented

Fixed through exposing a default SpelParserConfiguration in ExpressionState.

Juergen