You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ws.apache.org by "Jens Kordowski (JIRA)" <ji...@apache.org> on 2015/07/21 16:53:04 UTC

[jira] [Created] (WSS-547) unreleased resource

Jens Kordowski created WSS-547:
----------------------------------

             Summary: unreleased resource
                 Key: WSS-547
                 URL: https://issues.apache.org/jira/browse/WSS-547
             Project: WSS4J
          Issue Type: Bug
          Components: WSS4J Core
    Affects Versions: 2.0.3
            Reporter: Jens Kordowski
            Assignee: Colm O hEigeartaigh


Hi,
found 2 resource leaks:

org.apache.wss4j.stax.impl.processor.output.WSSSignatureOutputProcessor.digestExternalReference() opens an InputStream:
InputStream inputStream = attachment.getSourceStream();

In case the later buildTransformerChain() throws an XMLSecurityException, this resource is leaked.

org.apache.wss4j.stax.impl.processor.input.WSSSignatureReferenceVerifyInputProcessor.verifyExternalReference() does the same thing:
InputStream attachmentInputStream = attachment.getSourceStream();

In case the later reateMessageDigestOutputStream() throws an XMLSecurityException, the resource is leaked.

Best regards
Jens



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org