[JBWS-4048] Leak prevention

wildfly · Jan 12, 2017 · c321649 · c321649
1 parent 48b626e
commit c321649
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/...ion/src/main/java/org/jboss/as/webservices/security/ElytronSecurityDomainContextImpl.java b/...ion/src/main/java/org/jboss/as/webservices/security/ElytronSecurityDomainContextImpl.java
@@ -117,6 +117,7 @@ private SecurityIdentity authenticate(final String username, final String passwo
             context.fail();
             WSLogger.ROOT_LOGGER.failedAuthenticationWithException(e, username, e.getMessage());
         } finally {
+            if (!context.isDone()) context.fail(); //prevent leaks of RealmIdentity instances
             evidence.destroy();
         }
         return null;