CX Improper_Resource_Shutdown_or_Release @ src/main/java/org/joychou/controller/Deserialize.java [master]

[DannyLoweCx]

Improper_Resource_Shutdown_or_Release issue exists @ src/main/java/org/joychou/controller/Deserialize.java in branch master

The application's rememberMeBlackClassCheck method in src\main\java\org\joychou\controller\Deserialize.java defines and initializes the AntObjectInputStream object at 64. This object encapsulates a limited computing resource, such as open file streams, database connections, or network streams. This resource is not properly closed and released in all situations.

Severity: Low

CWE:404

Vulnerability details and guidance

Internal Guidance

Checkmarx

Lines: 78

---

Code (Line #78):

            AntObjectInputStream in = new AntObjectInputStream(bytes);  // throw InvalidClassException

---