Skip to content

CX Improper_Resource_Shutdown_or_Release @ src/main/java/org/joychou/controller/Deserialize.java [master] #83

@DannyLoweCx

Description

@DannyLoweCx

Improper_Resource_Shutdown_or_Release issue exists @ src/main/java/org/joychou/controller/Deserialize.java in branch master

The application's rememberMeBlackClassCheck method in src\main\java\org\joychou\controller\Deserialize.java defines and initializes the AntObjectInputStream object at 64. This object encapsulates a limited computing resource, such as open file streams, database connections, or network streams. This resource is not properly closed and released in all situations.

Severity: Low

CWE:404

Vulnerability details and guidance

Internal Guidance

Checkmarx

Lines: 78


Code (Line #78):

            AntObjectInputStream in = new AntObjectInputStream(bytes);  // throw InvalidClassException

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions