[BUG] SofaMetaDataHandler uses raw .equals on possibly-null fields → NPE

Open Beginner friendly

#6,740 opened on Aug 3, 2026 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty: 1/5
Estimated time: Under an hour
Newbie friendliness: 84/100

Issue type: Bug
Clarity: Clearly specified
Activity status: Quiet
Tech stack: java
Domain: backend

Research direction

Inspect shenyu-plugin/shenyu-plugin-proxy/shenyu-plugin-rpc/shenyu-plugin-sofa/src/main/java/org/apache/shenyu/plugin/sofa/handler/SofaMetaDataHandler.java at lines 39 and 43, then compare the null-safe handling in AbstractDubboMetaDataHandler. Verify that a metadata re-handle event with null rpcExt or serviceName no longer throws an NPE.

Written by the indexing model from the issue text.

Description

plugin: sofa priority: medium type: bug

severity: Medium
files: shenyu-plugin/shenyu-plugin-proxy/shenyu-plugin-rpc/shenyu-plugin-sofa/src/main/java/org/apache/shenyu/plugin/sofa/handler/SofaMetaDataHandler.java:39,43
description: exist.getServiceName().equals(metaData.getServiceName()) and exist.getRpcExt().equals(metaData.getRpcExt()) without null-safety. MetaData.rpcExt defaults to null. Unlike AbstractDubboMetaDataHandler which uses Objects.equals(...), the sofa handler NPEs if a registered metadata has null rpcExt/serviceName.
impact: A metadata re-handle event for a sofa path whose rpcExt/serviceName is null throws NPE.
suggested_fix: Use Objects.equals(...) (as the dubbo handler does).
confidence: Medium
related_existing: none

Identified during the 2026-08-02 deep re-scan; full list in docs/scan2-2026-08-02/06-medium-tiers.md.

Dominant language: Java
Stars: 8.8k
Forks: 3.1k
Avg merge: 4d 11h
Merged PRs (30d): 85

Contributor guide

No contributing guide indexed for this repository

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Similar issues

Document Hot Rod migration version compatibility for Data Grid 8.6 Open

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

infinispan/infinispan#18150 · Opened Sep 21, 2026
[BUG] Route53Resolver: CreateResolverEndpoint requires IpAddressRequests, but the AWS member is IpAddresses, so no SDK client can call it Open

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

floci-io/floci#4108 · Opened Sep 21, 2026
[BUG] RestGetModelHandlerIT.testGetModel_whenModelIDIsInValid_thenFail depends on test order and fails when run alone Open

untriaged

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

opensearch-project/k-NN#3597 · Opened Sep 21, 2026
Concurrent builder skips 'verify' phase when running 'mvn install' Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

apache/maven#13230 · 1 comment · Opened Sep 21, 2026
ComponentGeNRTL leaves lnGamma stale after computing gamma Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

equinor/neqsim#3899 · 1 comment · Opened Sep 21, 2026

More Java issues