Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merge changes from spring-update branch #22

Open
wants to merge 34 commits into
base: main
Choose a base branch
from
Open

Conversation

kadraman
Copy link
Contributor

No description provided.

}

public static UserObj deserializeUser() throws IOException, ClassNotFoundException {
File dataFile = new File(getFilePath(USER_INFO_FILE));

Check failure

Code scanning / Fortify on Demand

Path Manipulation High

Attackers can control the file system path argument to File() at UserUtils.java line 158, which allows them to access or modify otherwise protected files.Allowing user input to control paths used in file system operations could enable an attacker to access or modify otherwise protected system resources.
while (e.hasMoreElements()) {
log.info(e.nextElement().toString());
}
zf.close();
}

public static void serializeUser(String username, String password) throws IOException {

File dataFile = new File(getFilePath(USER_INFO_FILE));

Check failure

Code scanning / Fortify on Demand

Path Manipulation High

Attackers can control the file system path argument to File() at UserUtils.java line 146, which allows them to access or modify otherwise protected files.Allowing user input to control paths used in file system operations could enable an attacker to access or modify otherwise protected system resources.
File dataFile = new File(getFilePath(USER_INFO_FILE));

FileInputStream fis = new FileInputStream(dataFile);
ObjectInputStream is = new ObjectInputStream(fis);

Check failure

Code scanning / Fortify on Demand

Unreleased Resource: Streams High

The function deserializeUser() in UserUtils.java sometimes fails to release a system resource allocated by FileInputStream() on line 160.The program can potentially fail to release a system resource.
UserObj userObj = new UserObj(username, password);

FileOutputStream fos = new FileOutputStream(dataFile);
ObjectOutputStream os = new ObjectOutputStream(fos);

Check failure

Code scanning / Fortify on Demand

Unreleased Resource: Streams High

The function serializeUser() in UserUtils.java sometimes fails to release a system resource allocated by FileOutputStream() on line 152.The program can potentially fail to release a system resource.
@kadraman kadraman self-assigned this Mar 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant