[jboss-jira] [JBoss JIRA] (SECURITY-648) Files are not being closed properly in some places

Files are not being closed properly in some places --------------------------------------------------- Key: SECURITY-648 URL: https://issues.jboss.org/browse/SECURITY-648 Project: PicketBox (JBoss Security and Identity Management) Issue Type: Bug Security Level: Public(Everyone can see) Components: JBossSX Affects Versions: PicketBox_v4_0_6 Reporter: Stuart Douglas Assignee: Anil Saldhana Fix For: PicketBox_v4_0_7 org.picketbox.plugins.vault.PicketBoxSecurityVault#init opens two FileInputStreams and does not appear to close them in a finally block org.jboss.security.plugins.TmpFilePassword#toCharArray closes the file but does not use a finally block, so if there is an exception the file can leak org.picketbox.util.KeyStoreUtil#getKeyStore also open a FileInputStream and does not close it (in both versions of the function)