Unchecked Null Dereference may cause Null Pointer Exception

[abdullahil-kafi]

Jenkins and plugins versions report

Environment

The bug was detected using our static code analysis tool ICR on jenkinsci-jelly version: 1.1-jenkins-20240903

What Operating System are you using (both controller, and any agents involved in the problem)?

The bug was found using our static code analysis tool ICR.

Reproduction steps

In file XMLParser.java, line 552, the method getXMLReader() was called on the returned value of getParser() method. The getParser() method might return null which may cause a null pointer exception when getXMLReader() is called.

Expected Results

Proper Null check is performed before calling getXMLReader().

Actual Results

No Null check is performed before calling getXMLReader().

Anything else?

This work is done by the security researchers from OpenRefactory and is supported by the Open Source Security Foundation (OpenSSF): Project Alpha-Omega. Alpha-Omega is a project partnering with open source software project maintainers to systematically find new, as-yet-undiscovered vulnerabilities in open source code - and get them fixed - to improve global software supply chain security.

The bug is found by running the Intelligent Code Repair (iCR) tool by OpenRefactory and then manually triaging the results.

Are you interested in contributing a fix?

No response