[jboss-jira] [JBoss JIRA] (SECURITY-648) Files are not being closed properly in some places

[Anil Saldhana (JIRA)]

     [ https://issues.jboss.org/browse/SECURITY-648?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Anil Saldhana resolved SECURITY-648.
------------------------------------

    Resolution: Done


Thanks for the bug report.  I have fixed all the culprits and a new release coming now.
                
> Files are not being closed properly in some places 
> ---------------------------------------------------
>
>                 Key: SECURITY-648
>                 URL: https://issues.jboss.org/browse/SECURITY-648
>             Project: PicketBox (JBoss Security and Identity Management)
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: JBossSX
>    Affects Versions: PicketBox_v4_0_6
>            Reporter: Stuart Douglas
>            Assignee: Anil Saldhana
>             Fix For: PicketBox_v4_0_7
>
>
> org.picketbox.plugins.vault.PicketBoxSecurityVault#init opens two FileInputStreams and does not appear to close them in a finally block
> org.jboss.security.plugins.TmpFilePassword#toCharArray closes the file but does not use a finally block, so if there is an exception the file can leak
> org.picketbox.util.KeyStoreUtil#getKeyStore also open a FileInputStream and does not close it (in both versions of the function)

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira