parser/deserializer/ThrowableDeserializer.java 里 deserialze() 可疑的空指针解引用 

Hi,

我们的代码检查器 Pinpoint 报告了一处可疑的空指针解引用，
https://github.com/alibaba/fastjson/blob/fcd2ae7723ddc84191cc9b90b453d58b30c02e2c/src/main/java/com/alibaba/fastjson/parser/deserializer/ThrowableDeserializer.java#L131-L150

149 行的 `exBeanDeser` 变量是否有可能跳过全部初始化赋值（139 返回 false 的话） 导致维持 null 值，然后触发空指针解用？

这处是真的有潜在问题?，还是 139 行的检查是非必要？

祝好，
Sourcebrella Inc.

	if (otherValues != null) {
	JavaBeanDeserializer exBeanDeser = null;

	if (exClass != null) {
	if (exClass == clazz) {
	exBeanDeser = this;
	} else {
	ObjectDeserializer exDeser = parser.getConfig().getDeserializer(exClass);
	if (exDeser instanceof JavaBeanDeserializer) {
	exBeanDeser = (JavaBeanDeserializer) exDeser;
	}
	}
	}

	for (Map.Entry<String, Object> entry : otherValues.entrySet()) {
	String key = entry.getKey();
	Object value = entry.getValue();

	FieldDeserializer fieldDeserializer = exBeanDeser.getFieldDeserializer(key);
	if (fieldDeserializer != null) {

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

parser/deserializer/ThrowableDeserializer.java 里 deserialze() 可疑的空指针解引用 #1613

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

parser/deserializer/ThrowableDeserializer.java 里 deserialze() 可疑的空指针解引用 #1613

Description

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions