Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add close to fix CWE-404 #12908

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Add close to fix CWE-404 #12908

wants to merge 2 commits into from

Conversation

sam9291
Copy link

@sam9291 sam9291 commented Dec 17, 2024

Hi, our security tool has detected 2 CWE-404

Add missing JarFile close to fix CWE-404
Add missing InputStream close to fix CWE-404

image
image

image
image

Add missing InputStream close to fix CWE-404
Copy link

linux-foundation-easycla bot commented Dec 17, 2024

CLA Signed

The committers listed above are authorized under a signed CLA.

@trask
Copy link
Member

trask commented Dec 17, 2024

hi @sam9291! you can ignore the test-latest-deps failures, I don't think they're related to your PR

@sam9291 sam9291 marked this pull request as ready for review December 17, 2024 23:16
@sam9291 sam9291 requested a review from a team as a code owner December 17, 2024 23:16
@sam9291
Copy link
Author

sam9291 commented Dec 17, 2024

Hi @trask thanks for the feedback, before merging, I'll just need someone with a more experience than me on the context to confirm that my change doesn't impact anything else, the fix was inspired by what was done in #1970. I don't have the proper setup to run this locally easily, I'm more familiar with .net and go, but trying to contribute where I can 😅

@trask
Copy link
Member

trask commented Dec 17, 2024

can you run ./gradlew spotlessApply locally? that should fix the spotless CI failure

Copy link
Member

@trask trask left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants