bytedance / ByteX

ByteX is a bytecode plugin platform based on Android Gradle Transform API and ASM. 字节码插件开发平台
Apache License 2.0
3.14k stars 463 forks source link

Unreleased Resource: Streams #83

Closed QiAnXinCodeSafe closed 3 years ago

QiAnXinCodeSafe commented 3 years ago

https://github.com/bytedance/ByteX/blob/9ae785ec9e72f9a6cd8de50413000377eeca3512/common/src/main/java/com/ss/android/ugc/bytex/common/xml/XmlReader.java#L45

Failed to release FileInputStream correctly.Most unreleased resource issues cause general software reliability problems.However, if an attacker can intentionally trigger a resource leak, an attacker can launch a denial-of-service attack by depleting the resource pool.