Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Add close to fix CWE-404 #12908

Merged
merged 2 commits into from
Dec 19, 2024
Merged

Add close to fix CWE-404 #12908

merged 2 commits into from
Dec 19, 2024

Conversation

sam9291
Copy link
Contributor

@sam9291 sam9291 commented Dec 17, 2024

Hi, our security tool has detected 2 CWE-404

Add missing JarFile close to fix CWE-404
Add missing InputStream close to fix CWE-404

image
image

image
image

Add missing InputStream close to fix CWE-404
Copy link

linux-foundation-easycla bot commented Dec 17, 2024

CLA Signed

The committers listed above are authorized under a signed CLA.

@trask
Copy link
Member

trask commented Dec 17, 2024

hi @sam9291! you can ignore the test-latest-deps failures, I don't think they're related to your PR

@sam9291 sam9291 marked this pull request as ready for review December 17, 2024 23:16
@sam9291 sam9291 requested a review from a team as a code owner December 17, 2024 23:16
@sam9291
Copy link
Contributor Author

sam9291 commented Dec 17, 2024

Hi @trask thanks for the feedback, before merging, I'll just need someone with a more experience than me on the context to confirm that my change doesn't impact anything else, the fix was inspired by what was done in #1970. I don't have the proper setup to run this locally easily, I'm more familiar with .net and go, but trying to contribute where I can 😅

@trask
Copy link
Member

trask commented Dec 17, 2024

can you run ./gradlew spotlessApply locally? that should fix the spotless CI failure

Copy link
Member

@trask trask left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks!

@trask trask merged commit 8e449ef into open-telemetry:main Dec 19, 2024
54 of 56 checks passed
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants