[BUG] NPE/IndexOutOfBoundsException when request param is null or empty
Author: Aias00Created Aug 3, 2026Updated Sep 19, 2026
Labelstype: bugplugin: grpcpriority: high
- severity: High
- files:
shenyu-plugin/shenyu-plugin-proxy/shenyu-plugin-rpc/shenyu-plugin-grpc/src/main/java/org/apache/shenyu/plugin/grpc/client/ShenyuGrpcClient.java:75,81 - description: When
parameterTypesis blank,paramcan be null and execution reachesclient.call(). Insidecall(), line 75GsonUtils.getInstance().toObjectMap(requestJsons)with null returns null;JsonMessage.buildJsonMessageList(null)NPEs. Even if it returns an empty list, line 81jsonRequestList.get(0)throwsIndexOutOfBoundsException. - impact: gRPC methods with no parameter types crash with an uncaught exception instead of being proxied.
- suggested_fix: Handle null/blank
requestJsonsby building a single default empty DynamicMessage. - confidence: High
- related_existing: none
Identified during the 2026-08-02 deep re-scan; full list in docs/scan2-2026-08-02/00-consolidated-critical-high.md.
Source: apache/shenyu