Forum Discussion

SophiaKJ's avatar
SophiaKJ
New Contributor
14 years ago

Java Null Pointer Exception when running Security Scan

I'm running security tests on HTTP web service requests returns a java null pointer exception like the following:

java.lang.NullPointerException
at com.eviware.soapui.security.scan.BoundarySecurityScan.extractMutations(BoundarySecurityScan.java:159)
at com.eviware.soapui.security.scan.BoundarySecurityScan.hasNext(BoundarySecurityScan.java:282)
at com.eviware.soapui.security.scan.AbstractSecurityScan.run(AbstractSecurityScan.java:202)
at com.eviware.soapui.security.SecurityTestRunnerImpl.runTestStepSecurityScan(SecurityTestRunnerImpl.java:262)
at com.eviware.soapui.security.SecurityTestRunnerImpl.runCurrentTestStep(SecurityTestRunnerImpl.java:190)
at com.eviware.soapui.security.SecurityTestRunnerImpl.runCurrentTestStep(SecurityTestRunnerImpl.java:38)
at com.eviware.soapui.impl.wsdl.support.AbstractTestCaseRunner.internalRun(AbstractTestCaseRunner.java:141)
at com.eviware.soapui.impl.wsdl.support.AbstractTestCaseRunner.internalRun(AbstractTestCaseRunner.java:42)
at com.eviware.soapui.impl.wsdl.support.AbstractTestRunner.run(AbstractTestRunner.java:135)
at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)
at java.util.concurrent.FutureTask$Sync.innerRun(Unknown Source)
at java.util.concurrent.FutureTask.run(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)

At this point I am unable to use the security scanning features of SoapUI with my Web Service testing. My web services are fairly simple: http request with passed in parameters

4 Replies

  • SmartBear_Suppo's avatar
    SmartBear_Suppo
    Icon for Alumni rankAlumni
    14 years ago
    Hello,

    That sounds serious. Do you have the possibility to send your project to support at eviware .com?


    Thanks

    Henrik
    eviware
  • SmartBear_Suppo's avatar
    SmartBear_Suppo
    Icon for Alumni rankAlumni
    14 years ago
    Hi,

    if you are using Http Test Step Requests than you can use only some of the Security Scans for it.
    They are Cross Site Scripting , Custom Script, Fuzzing Scan , Sql Injection and XPath Injection.
    Others does not make sense for HTTP Requsts.

    So thank you for noticing this bug it will be fixed.

    For now just delete all Security Scans added on HTTP requests that are not listed above and give it a try.

    Let us know if it helps

    nebojsa
    eviware.com
  • wtall's avatar
    wtall
    13 years ago
    I am trying to run a cross scripting security check on a single parameter of a http GET request using SOAPUI Pro4.5.1 and am continually experiencing the following error:

    SecurityTest failed [java.lang.ClassCastException: com.eviware.soapui.impl.wsdl.teststeps.RestRequestStepResult cannot be cast to com.eviware.soapui.impl.wsdl.teststeps.WsdlTestRequestStepResult:java.lang.ClassCastException: com.eviware.soapui.impl.wsdl.teststeps.RestRequestStepResult cannot be cast to com.eviware.soapui.impl.wsdl.teststeps.WsdlTestRequestStepResult], time taken = 0